@pellux/goodvibes-agent 1.0.7 → 1.0.9

package/docs/README.md

@@ -22,7 +22,7 @@ Important baseline constraints:
 - Agent depends on `@pellux/goodvibes-sdk@0.33.35`.
 - Agent connects to a GoodVibes host owned outside this product.
 - Agent does not start, stop, restart, install, uninstall, or own the connected GoodVibes host.
-- User-facing Agent workspace actions, built-in panels, modal/overlay/picker UI surfaces, top-level CLI mirrors, fixed shortcuts, configurable keybindings, slash commands, command policy metadata, model tools, settings, local registries, connected-host capability boundaries, and live connected-host readiness are model-visible through Agent-owned tools. Mutations and visible UI routing remain explicit and confirmation-gated.
+- User-facing Agent workspace actions, built-in panels, modal/overlay/picker UI surfaces, named operator surfaces, top-level CLI mirrors, fixed shortcuts, configurable keybindings, slash commands, command policy metadata, model tools, settings, local registries, connected-host capability boundaries, and live connected-host readiness are model-visible through Agent-owned tools. Mutations and visible UI routing remain explicit and confirmation-gated.
 - Agent Knowledge uses only `/api/goodvibes-agent/knowledge/*`; there is no default knowledge or non-Agent product fallback.
 - Agent supports isolated Agent homes with `GOODVIBES_AGENT_HOME=<path>` and named profile homes with `goodvibes-agent profiles create <name> --template <starter> --yes` plus `--agent-profile <name>`.
 - Agent supports connected-host URL overrides with `--runtime-url http://host:port` or `GOODVIBES_AGENT_RUNTIME_URL=http://host:port`; these only change the Agent connection target.

package/docs/getting-started.md

@@ -44,7 +44,7 @@ After setup has been applied once, the TUI opens directly into the Agent operato
 
 Press `/` inside the Agent workspace to search every workspace action by name, category, command, or detail. Use that finder before reaching for shell commands; CLI subcommands are scriptable mirrors of these TUI workflows.
 
-The model can inspect and use the same harness surface through Agent-owned tools. `agent_harness` exposes workspace action discovery, built-in panel discovery/routing, modal/overlay/picker UI surface discovery/routing, top-level CLI mirror discovery, fixed shortcut and configurable keybinding discovery, keybinding mutation with confirmation, slash-command discovery, command policy metadata, command execution with confirmation, model tool discovery, settings inspection/mutation, connected-host capability inventory, and live connected-host readiness posture. CLI mirror modes are read-only catalog/parser inspection and point the model to the matching in-process tool, workspace action, setting mode, or slash-command mirror. Panel modes expose catalog/open state and route visible panel/workspace changes through the current Agent shell bridge with confirmation. UI surface modes expose help, shortcuts, context, bookmarks, model/provider pickers, session/profile pickers, settings, MCP workspace, onboarding, and Agent workspace entrypoints; `open_ui_surface` is confirmation-gated and only performs visible shell navigation. Shortcut modes expose the fixed runtime/editor shortcuts and the live keybindings table; confirmed keybinding edits write the same `keybindings.json` file the user edits and reload the runtime manager. Workspace action discovery can include editor field schemas with `includeParameters:true`, including starter-template defaults for profile creation and selected-routine defaults for routine schedule promotion when `recordId` is supplied. Selection-based local workspace actions accept a local `recordId`, so the model can use the same note promotion and local registry flows as the TUI. First-class model tools cover the main product workflows directly: Agent Knowledge, Agent Knowledge ingest, Agent-local memory/notes/personas/skills/routines, operator actions, notifications, channel sends, reminders, generated media, and work plans.
+The model can inspect and use the same harness surface through Agent-owned tools. `agent_harness` exposes workspace action discovery, built-in panel discovery/routing, modal/overlay/picker UI surface discovery/routing, top-level CLI mirror discovery, fixed shortcut and configurable keybinding discovery, keybinding mutation with confirmation, slash-command discovery, command policy metadata, command execution with confirmation, model tool discovery, settings inspection/mutation, connected-host capability inventory, and live connected-host readiness posture. CLI mirror modes are read-only catalog/parser inspection and point the model to the matching in-process tool, workspace action, setting mode, or slash-command mirror. Panel modes expose catalog/open state and route visible panel/workspace changes through the current Agent shell bridge with confirmation. UI surface modes expose help, shortcuts, context, bookmarks, model/provider pickers, TTS provider/voice pickers, session/profile pickers, the panel-picker compatibility route, security/knowledge/subscription operator surfaces, settings, MCP workspace, onboarding, and Agent workspace entrypoints; `open_ui_surface` is confirmation-gated and only performs visible shell navigation. Shortcut modes expose the fixed runtime/editor shortcuts and the live keybindings table; confirmed keybinding edits write the same `keybindings.json` file the user edits and reload the runtime manager. Workspace action discovery can include editor field schemas with `includeParameters:true`, including starter-template defaults for profile creation and selected-routine defaults for routine schedule promotion when `recordId` is supplied. Selection-based local workspace actions accept a local `recordId`, so the model can use the same note promotion and local registry flows as the TUI. First-class model tools cover the main product workflows directly: Agent Knowledge, Agent Knowledge ingest, Agent-local memory/notes/personas/skills/routines, operator actions, notifications, channel sends, reminders, generated media, and work plans.
 
 Use the Artifacts area for concrete files and generated output: attach images to prompts, export conversations or saved sessions, ingest local source files and URL lists into Agent Knowledge, import bookmarks or browser history, inspect source records, and generate media artifacts from confirmed prompts.
 

package/docs/tools-and-commands.md

@@ -43,7 +43,7 @@ Host-management and coding-first commands that would imply connected-host lifecy
 
 The main Agent model has an Agent-owned harness bridge rather than generic SDK settings/context control. Use these model tools as the supported parity layer:
 
-- `agent_harness`: inspect workspace categories/actions, inspect built-in panels, inspect modal/overlay/picker UI surfaces, inspect top-level CLI mirrors, inspect fixed shortcuts and configurable keybindings, inspect slash commands and command policy metadata, run concrete workspace or slash-command mirrors with confirmation, inspect model tools, inspect or change Agent settings/keybindings, inspect connected-host capability boundaries, and inspect live connected-host readiness.
+- `agent_harness`: inspect workspace categories/actions, inspect built-in panels, inspect modal/overlay/picker UI surfaces and named operator surfaces, inspect top-level CLI mirrors, inspect fixed shortcuts and configurable keybindings, inspect slash commands and command policy metadata, run concrete workspace or slash-command mirrors with confirmation, inspect model tools, inspect or change Agent settings/keybindings, inspect connected-host capability boundaries, and inspect live connected-host readiness.
 - `agent_local_registry`: inspect and maintain Agent-local memory, notes, personas, skills, skill bundles, and routines. Deleting local records requires `confirm:true` and `explicitUserRequest`.
 - `agent_knowledge` and `agent_knowledge_ingest`: ask/search and ingest into the isolated Agent Knowledge segment.
 - `agent_operator_briefing` and `agent_operator_action`: inspect connected work/approval/automation posture, or run exact confirmed approval/automation actions.
@@ -52,7 +52,7 @@ The main Agent model has an Agent-owned harness bridge rather than generic SDK s
 
 `agent_harness` discovery modes are read-only. `summary` reports the model access map; `panels` and `panel` return the built-in panel catalog, current open/focused state, and each panel's matching Agent workspace route; `ui_surfaces` and `ui_surface` return modal, overlay, picker, and workspace entrypoints with shell-opener availability and preferred model routes; `cli_commands` and `cli_command` return top-level package CLI mirror metadata, parser output, blocked command tokens, and preferred in-process model routes; `shortcuts` returns fixed runtime/editor shortcuts plus configurable keybindings; `keybindings` and `keybinding` return the live resolved keybinding table, default bindings, custom state, and config path; `commands` and `command` return slash-command descriptions plus effect/confirmation/preferred-tool/boundary policy metadata; `workspace_actions` lists Agent workspace actions and can inline editor field schemas with `includeParameters:true`; `workspace_action` returns one action with its editor schema; `tools` can inline model tool JSON schemas with `includeParameters:true`; `settings` returns setting descriptors plus setting policy; `connected_host` returns the connected-host route families, allowed capabilities, blocked capabilities, and first-class tool availability; and `connected_host_status` performs a live read-only check of the connected-host status and Agent Knowledge status routes and reports endpoint bindings, token posture, SDK compatibility, route readiness, and findings without printing token values.
 
-`open_ui_surface` is a confirmation-gated visible navigation mode for the same shell surfaces the user can open: Agent workspace, settings, MCP workspace, model/provider pickers, session/profile pickers, bookmarks, context inspector, help, shortcuts, and onboarding. It does not perform hidden operations; use first-class model tools, settings modes, workspace actions, or confirmed slash-command mirrors for actual state changes.
+`open_ui_surface` is a confirmation-gated visible navigation mode for the same shell surfaces the user can open: Agent workspace, settings, MCP workspace, model/provider pickers, TTS provider/voice pickers, session/profile pickers, the panel-picker compatibility route, security/knowledge/subscription operator surfaces, bookmarks, context inspector, help, shortcuts, and onboarding. It does not perform hidden operations; use first-class model tools, settings modes, workspace actions, or confirmed slash-command mirrors for actual state changes.
 
 `set_keybinding` and `reset_keybinding` are confirmation-gated control modes. They write the same Agent `keybindings.json` file exposed by `/keybindings`, reload the runtime keybinding manager, and leave fixed runtime/editor shortcuts read-only.
 

package/docs/voice-and-live-tts.md

@@ -20,7 +20,7 @@ GoodVibes Agent supports spoken turns as an Agent TUI feature. Text output remai
 
 `/config tts` opens the fullscreen configuration workspace for streaming provider, voice, and spoken-turn model routing.
 
-The model can inspect the same settings through `agent_harness` settings modes and can change Agent-owned TTS settings with explicit confirmation. Connected-host listener or lifecycle settings remain outside Agent ownership.
+The model can inspect the same settings through `agent_harness` settings modes, open the visible TTS provider or voice picker through `open_ui_surface`, and change Agent-owned TTS settings with explicit confirmation. Connected-host listener or lifecycle settings remain outside Agent ownership.
 
 ## Playback Requirements
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pellux/goodvibes-agent",
-  "version": "1.0.7",
+  "version": "1.0.9",
   "private": false,
   "description": "GoodVibes personal operator assistant TUI with a proactive Agent product brain, isolated Agent Knowledge, local profiles, routines, skills, personas, and explicit build delegation.",
   "type": "module",

package/src/input/commands/shell-core.ts

@@ -1,4 +1,4 @@
-import type { CommandRegistry } from '../command-registry.ts';
+import type { CommandContext, CommandRegistry, SlashCommand } from '../command-registry.ts';
 import type { SelectionItem } from '../selection-modal.ts';
 import { EFFORT_DESCRIPTIONS } from '@pellux/goodvibes-sdk/platform/providers';
 import { REASONING_BUDGET_MAP } from '@pellux/goodvibes-sdk/platform/providers';
@@ -6,6 +6,134 @@ import { compactConversation, requireKeybindingsManager, requireProviderApi } fr
 import { summarizeError } from '@pellux/goodvibes-sdk/platform/utils';
 import { logger } from '@pellux/goodvibes-sdk/platform/utils';
 
+function commandCategory(commandName: string): string {
+  if ([
+    'agent',
+    'agent-profile',
+    'brief',
+    'health',
+    'welcome',
+    'setup',
+    'tasks',
+    'approval',
+    'automation',
+    'delegate',
+    'schedule',
+    'workplan',
+    'plan',
+  ].includes(commandName)) return 'Agent Operator';
+  if ([
+    'knowledge',
+    'memory',
+    'notes',
+    'personas',
+    'skills',
+    'routines',
+  ].includes(commandName)) return 'Knowledge & Local Context';
+  if ([
+    'channels',
+    'notify',
+    'qrcode',
+    'pair',
+  ].includes(commandName)) return 'Channels';
+  if ([
+    'model',
+    'provider',
+    'providers',
+    'effort',
+    'pin',
+    'unpin',
+    'refresh-models',
+    'mode',
+    'tts',
+    'voice',
+    'media',
+    'image',
+  ].includes(commandName)) return 'Model, Voice & Media';
+  if ([
+    'settings',
+    'config',
+    'keybindings',
+    'shortcuts',
+    'mcp',
+    'secrets',
+    'auth',
+    'accounts',
+    'subscription',
+    'compat',
+    'security',
+    'trust',
+    'bundle',
+  ].includes(commandName)) return 'Setup & Security';
+  if ([
+    'save',
+    'load',
+    'sessions',
+    'session',
+    'conversation',
+    'export',
+    'title',
+    'clear',
+    'reset',
+    'compact',
+    'undo',
+    'redo',
+    'retry',
+    'expand',
+    'collapse',
+    'context',
+    'bookmarks',
+    'paste',
+    'next-error',
+    'prev-error',
+  ].includes(commandName)) return 'Conversation';
+  return 'Tools & System';
+}
+
+function commandDetail(command: SlashCommand): string {
+  const parts = [command.description];
+  if (command.usage) parts.push(`usage: /${command.name} ${command.usage}`);
+  if (command.aliases?.length) parts.push(`aliases: ${command.aliases.map((alias) => `/${alias}`).join(', ')}`);
+  return parts.join(' | ');
+}
+
+function listRegisteredCommandItems(registry: CommandRegistry): SelectionItem[] {
+  return registry.list()
+    .slice()
+    .sort((a, b) => a.name.localeCompare(b.name))
+    .map((command) => ({
+      id: `/${command.name}`,
+      label: `/${command.name}`,
+      detail: commandDetail(command),
+      category: commandCategory(command.name),
+      primaryAction: 'select',
+      actions: '[Enter] run command',
+    }));
+}
+
+function registeredCommandListText(registry: CommandRegistry): string {
+  const commands = listRegisteredCommandItems(registry);
+  return [
+    'Open the Agent workspace first, then press / inside it to search every product action.',
+    '',
+    'Registered slash commands:',
+    ...commands.map((item) => `  ${item.label} - ${item.detail}`),
+  ].join('\n');
+}
+
+function openRegisteredCommandSelection(registry: CommandRegistry, ctx: CommandContext): void {
+  ctx.openSelection?.('Help  -  Commands', listRegisteredCommandItems(registry), { allowSearch: true }, (result) => {
+    if (!result) return;
+    const command = result.item.id;
+    if (command.startsWith('/')) {
+      const parts = command.slice(1).trim().split(/\s+/);
+      const name = parts[0];
+      const cmdArgs = parts.slice(1);
+      void (ctx.executeCommand?.(name, cmdArgs) ?? registry.execute(name, cmdArgs, ctx));
+    }
+  });
+}
+
 export function registerShellCoreCommands(registry: CommandRegistry): void {
   registry.register({
     name: 'model',
@@ -53,6 +181,10 @@ export function registerShellCoreCommands(registry: CommandRegistry): void {
     aliases: ['cmds'],
     description: 'Browse all commands in a scrollable list',
     handler(_args, ctx) {
+      if (ctx.openSelection) {
+        openRegisteredCommandSelection(registry, ctx);
+        return;
+      }
       if (ctx.openHelpOverlay) {
         ctx.openHelpOverlay();
         return;
@@ -120,74 +252,10 @@ export function registerShellCoreCommands(registry: CommandRegistry): void {
     argsHint: '[command]',
     handler(_args, ctx) {
       if (ctx.openSelection) {
-        const items: SelectionItem[] = [
-          { id: '/agent', label: '/agent', detail: 'Open the Agent operator workspace; press / inside it to search every action', category: 'Agent Operator' },
-          { id: '/agent setup', label: '/agent setup', detail: 'Open the Agent setup workspace; workspace search can find every setup action', category: 'Agent Operator' },
-          { id: '/agent channels', label: '/agent channels', detail: 'Open channel readiness and delivery safety', category: 'Agent Operator' },
-          { id: '/agent knowledge', label: '/agent knowledge', detail: 'Open isolated Agent Knowledge workflows', category: 'Agent Operator' },
-          { id: '/agent voice-media', label: '/agent voice-media', detail: 'Open voice, TTS, image, browser, and media setup', category: 'Agent Operator' },
-          { id: '/home', label: '/home', detail: 'Alias for the Agent operator workspace', category: 'Agent Operator' },
-          { id: '/brief', label: '/brief', detail: 'Show a concise Agent operator briefing and next actions', category: 'Agent Operator' },
-          { id: '/knowledge', label: '/knowledge', detail: 'Inspect isolated Agent Knowledge status, ask/search, and ingest flows', category: 'Agent Operator' },
-          { id: '/memory', label: '/memory', detail: 'Review Agent-local memory records', category: 'Agent Operator' },
-          { id: '/notes', label: '/notes', detail: 'Open Agent-local scratchpad notes for source triage and temporary context', category: 'Agent Operator' },
-          { id: '/personas', label: '/personas', detail: 'Create, review, and activate Agent-local personas', category: 'Agent Operator' },
-          { id: '/skills', label: '/skills', detail: 'Create, review, and enable reusable Agent skills', category: 'Agent Operator' },
-          { id: '/routines', label: '/routines', detail: 'Create, review, start, and promote Agent routines explicitly', category: 'Agent Operator' },
-          { id: '/automation', label: '/automation', detail: 'Run confirmed connected-host automation actions', category: 'Agent Operator' },
-          { id: '/delegate', label: '/delegate [task]', detail: 'Explicit build/fix/review handoff to GoodVibes TUI', category: 'Agent Operator' },
-          { id: '/channels', label: '/channels', detail: 'Inspect messaging-channel readiness without sending messages', category: 'Agent Operator' },
-          { id: '/pair', label: '/pair', detail: 'Pair companion clients through connected GoodVibes host', category: 'Agent Operator' },
-          { id: '/model', label: '/model [id]', detail: 'Select LLM model', category: 'Model & Provider' },
-          { id: '/provider', label: '/provider [name]', detail: 'Switch provider', category: 'Model & Provider' },
-          { id: '/effort', label: '/effort [level]', detail: 'Reasoning effort (instant/low/medium/high)', category: 'Model & Provider' },
-          { id: '/config', label: '/config [category|key]', detail: 'Open fullscreen configuration workspace', category: 'Config & Display' },
-          { id: '/expand', label: '/expand [type]', detail: 'Expand blocks (all|thinking|tool|code)', category: 'Config & Display' },
-          { id: '/collapse', label: '/collapse [type]', detail: 'Collapse blocks', category: 'Config & Display' },
-          { id: '/bookmarks', label: '/bookmarks', detail: 'List bookmarked blocks', category: 'Config & Display' },
-          { id: '/clear', label: '/clear', detail: 'Clear display (keep context)', category: 'Conversation' },
-          { id: '/reset', label: '/reset', detail: 'Clear display + context', category: 'Conversation' },
-          { id: '/compact', label: '/compact', detail: 'Summarize to free context', category: 'Conversation' },
-          { id: '/export', label: '/export [file] --yes', detail: 'Export as markdown', category: 'Conversation' },
-          { id: '/title', label: '/title [text]', detail: 'Show or set title', category: 'Conversation' },
-          { id: '/save', label: '/save [name]', detail: 'Save session', category: 'Conversation' },
-          { id: '/load', label: '/load <name>', detail: 'Load session', category: 'Conversation' },
-          { id: '/sessions', label: '/sessions', detail: 'List saved sessions', category: 'Conversation' },
-          { id: '/session', label: '/session', detail: 'Current session info', category: 'Conversation' },
-          { id: '/session list', label: '/session list', detail: 'List all sessions', category: 'Conversation' },
-          { id: '/session rename', label: '/session rename <name>', detail: 'Rename current session', category: 'Conversation' },
-          { id: '/session resume', label: '/session resume <id>', detail: 'Load and resume a session', category: 'Conversation' },
-          { id: '/session fork', label: '/session fork [name]', detail: 'Fork current session to new ID', category: 'Conversation' },
-          { id: '/session save', label: '/session save [name]', detail: 'Force-save current session', category: 'Conversation' },
-          { id: '/session info', label: '/session info [id]', detail: 'Show session details', category: 'Conversation' },
-          { id: '/session export', label: '/session export <id> [format]', detail: 'Export session as markdown/text', category: 'Conversation' },
-          { id: '/session search', label: '/session search <query>', detail: 'Search across all sessions', category: 'Conversation' },
-          { id: '/session delete', label: '/session delete <id> --yes', detail: 'Delete a session', category: 'Conversation' },
-          { id: '/undo', label: '/undo', detail: 'Remove last turn', category: 'Conversation' },
-          { id: '/redo', label: '/redo', detail: 'Restore undone turn', category: 'Conversation' },
-          { id: '/retry', label: '/retry [text]', detail: 'Re-send last message', category: 'Conversation' },
-          { id: '/paste', label: '/paste', detail: 'Insert clipboard text or image into the prompt', category: 'Tools & System' },
-          { id: '/shortcuts', label: '/shortcuts', detail: 'View keyboard shortcuts reference', category: 'Tools & System' },
-          { id: '/commands', label: '/commands', detail: 'Browse all commands in a scrollable list', category: 'Tools & System' },
-          { id: '/compat', label: '/compat', detail: 'Inspect connected-host and Agent Knowledge compatibility', category: 'Tools & System' },
-          { id: '/secrets', label: '/secrets set|link|get|test|list|delete', detail: 'Manage encrypted and provider-backed secrets', category: 'Tools & System' },
-          { id: '/bundle', label: '/bundle export|inspect|import', detail: 'Manage redacted Agent support bundles', category: 'Tools & System' },
-          { id: '/help', label: '/help', detail: 'This help', category: 'Tools & System' },
-          { id: '/quit', label: '/quit', detail: 'Exit', category: 'Tools & System' },
-        ];
-        ctx.openSelection('Help  —  Commands', items, { allowSearch: true }, (result) => {
-          if (!result) return;
-          const command = result.item.id;
-          if (command.startsWith('/')) {
-            const parts = command.slice(1).trim().split(/\s+/);
-            const name = parts[0];
-            const cmdArgs = parts.slice(1);
-            void (ctx.executeCommand?.(name, cmdArgs) ?? registry.execute(name, cmdArgs, ctx));
-          }
-        });
+        openRegisteredCommandSelection(registry, ctx);
         return;
       }
-      ctx.print('Open the Agent workspace first, then press / inside it to search every product action. Slash commands remain available: /agent, /brief, /knowledge, /memory, /notes, /personas, /skills, /routines, /channels, /approval, /automation, /schedule, /delegate, /model, /provider, /config, /compat, /bundle, /paste, /sessions, /bookmarks, /save, /load, /undo, /redo, /retry, /clear, /reset, /compact, /export, /title, /effort, /expand, /collapse, /quit');
+      ctx.print(registeredCommandListText(registry));
     },
   });
 

package/src/tools/agent-harness-tool.ts

@@ -592,7 +592,7 @@ export function createAgentHarnessTool(deps: AgentHarnessToolDeps): Tool {
         if (args.mode === 'open_ui_surface') {
           const confirmationError = requireConfirmedAction(args, 'UI surface routing');
           if (confirmationError) return error(confirmationError);
-          return output(openHarnessUiSurface(deps.commandContext, args));
+          return output(await openHarnessUiSurface(deps.commandContext, args));
         }
         if (args.mode === 'shortcuts') return output(listHarnessShortcuts(deps.commandContext, args));
         if (args.mode === 'keybindings') return output(listHarnessKeybindings(deps.commandContext, args));

package/src/tools/agent-harness-ui-surface-metadata.ts

@@ -1,4 +1,5 @@
 import type { CommandContext } from '../input/command-registry.ts';
+import { openTtsProviderPicker, openTtsVoicePicker } from '../input/tts-settings-actions.ts';
 
 type UiSurfaceKind = 'overlay' | 'modal' | 'workspace' | 'picker';
 
@@ -11,6 +12,7 @@ export interface AgentHarnessUiSurfaceArgs {
   readonly key?: unknown;
   readonly prefix?: unknown;
   readonly limit?: unknown;
+  readonly pane?: unknown;
 }
 
 interface UiSurfaceDefinition {
@@ -22,7 +24,7 @@ interface UiSurfaceDefinition {
   readonly preferredModelRoute: string;
   readonly parameters?: readonly string[];
   readonly available: (context: CommandContext) => boolean;
-  readonly open: (context: CommandContext, args: AgentHarnessUiSurfaceArgs) => Record<string, unknown>;
+  readonly open: (context: CommandContext, args: AgentHarnessUiSurfaceArgs) => Record<string, unknown> | Promise<Record<string, unknown>>;
 }
 
 function readString(value: unknown): string {
@@ -71,6 +73,57 @@ function settingsTarget(args: AgentHarnessUiSurfaceArgs): string | undefined {
   return readString(args.target || args.key || args.prefix) || undefined;
 }
 
+function providerTarget(args: AgentHarnessUiSurfaceArgs): string | undefined {
+  return readString(args.target || args.key || args.prefix) || undefined;
+}
+
+function optionalPane(args: AgentHarnessUiSurfaceArgs): 'top' | 'bottom' | undefined {
+  const pane = readString(args.pane);
+  return pane === 'top' || pane === 'bottom' ? pane : undefined;
+}
+
+function openAgentWorkspaceCategory(
+  context: CommandContext,
+  surface: UiSurfaceDefinition,
+  categoryId: string,
+  extra: Record<string, unknown> = {},
+): Record<string, unknown> {
+  if (!context.openAgentWorkspace) return routeUnavailable(surface);
+  context.openAgentWorkspace(categoryId);
+  return opened(surface, { categoryId, ...extra });
+}
+
+function openPanelWorkspaceSurface(
+  context: CommandContext,
+  args: AgentHarnessUiSurfaceArgs,
+  surface: UiSurfaceDefinition,
+  options: {
+    readonly panelId: string;
+    readonly categoryId: string;
+    readonly opener?: (() => void) | undefined;
+  },
+): Record<string, unknown> {
+  if (context.openAgentWorkspace) {
+    context.openAgentWorkspace(options.categoryId);
+    return opened(surface, { categoryId: options.categoryId, panelId: options.panelId });
+  }
+  if (options.opener) {
+    options.opener();
+    return opened(surface, { categoryId: options.categoryId, panelId: options.panelId, route: 'named-opener' });
+  }
+  if (context.showPanel) {
+    const pane = optionalPane(args);
+    context.showPanel(options.panelId, pane);
+    return opened(surface, {
+      categoryId: options.categoryId,
+      panelId: options.panelId,
+      pane: pane ?? 'default',
+      route: 'panel-bridge',
+    });
+  }
+  return routeUnavailable(surface);
+}
+
 const UI_SURFACES: readonly UiSurfaceDefinition[] = [
   {
     id: 'agent-workspace',
@@ -89,6 +142,89 @@ const UI_SURFACES: readonly UiSurfaceDefinition[] = [
       return opened(surface, { categoryId: categoryId ?? 'default' });
     },
   },
+  {
+    id: 'panel-picker',
+    label: 'Panel Picker',
+    kind: 'picker',
+    summary: 'Keyboard-accessible operator panel route that now opens the Agent Workspace home surface.',
+    command: 'Ctrl+P',
+    preferredModelRoute: 'Use panels/panel/open_panel for panel catalog and routing, or workspace_actions for concrete model operation.',
+    available: (context) => typeof context.openPanelPicker === 'function' || typeof context.openAgentWorkspace === 'function',
+    open: (context) => {
+      const surface = findSurfaceById('panel-picker')!;
+      if (context.openPanelPicker) {
+        context.openPanelPicker();
+        return opened(surface, { categoryId: 'home', route: 'panel-picker' });
+      }
+      return openAgentWorkspaceCategory(context, surface, 'home');
+    },
+  },
+  {
+    id: 'security-panel',
+    label: 'Security Panel',
+    kind: 'workspace',
+    summary: 'Security review operator surface for token posture, MCP attack paths, policy posture, and plugin risk.',
+    command: '/security',
+    preferredModelRoute: 'Use workspace_actions for security review actions or run_command /security review for compact read-only output.',
+    parameters: ['pane'],
+    available: (context) => (
+      typeof context.openAgentWorkspace === 'function'
+      || typeof context.openSecurityPanel === 'function'
+      || typeof context.showPanel === 'function'
+    ),
+    open: (context, args) => {
+      const surface = findSurfaceById('security-panel')!;
+      return openPanelWorkspaceSurface(context, args, surface, {
+        panelId: 'security',
+        categoryId: 'tools',
+        opener: context.openSecurityPanel,
+      });
+    },
+  },
+  {
+    id: 'knowledge-panel',
+    label: 'Knowledge Panel',
+    kind: 'workspace',
+    summary: 'Agent Knowledge operator surface for isolated status, source libraries, graph review, ask/search, and ingest forms.',
+    command: '/knowledge',
+    preferredModelRoute: 'Use agent_knowledge, agent_knowledge_ingest, workspace_actions, or run_command /knowledge for concrete model operation.',
+    parameters: ['pane'],
+    available: (context) => (
+      typeof context.openAgentWorkspace === 'function'
+      || typeof context.openKnowledgePanel === 'function'
+      || typeof context.showPanel === 'function'
+    ),
+    open: (context, args) => {
+      const surface = findSurfaceById('knowledge-panel')!;
+      return openPanelWorkspaceSurface(context, args, surface, {
+        panelId: 'knowledge',
+        categoryId: 'knowledge',
+        opener: context.openKnowledgePanel,
+      });
+    },
+  },
+  {
+    id: 'subscription-panel',
+    label: 'Subscription Panel',
+    kind: 'workspace',
+    summary: 'Provider subscription operator surface for subscription review, provider inspection, login, logout, and bundle flows.',
+    command: '/subscription',
+    preferredModelRoute: 'Use workspace_actions or confirmed run_command /subscription mirrors for concrete subscription operation.',
+    parameters: ['pane'],
+    available: (context) => (
+      typeof context.openAgentWorkspace === 'function'
+      || typeof context.openSubscriptionPanel === 'function'
+      || typeof context.showPanel === 'function'
+    ),
+    open: (context, args) => {
+      const surface = findSurfaceById('subscription-panel')!;
+      return openPanelWorkspaceSurface(context, args, surface, {
+        panelId: 'subscription',
+        categoryId: 'setup',
+        opener: context.openSubscriptionPanel,
+      });
+    },
+  },
   {
     id: 'settings',
     label: 'Settings',
@@ -163,6 +299,40 @@ const UI_SURFACES: readonly UiSurfaceDefinition[] = [
       return opened(surface, { target: 'main' });
     },
   },
+  {
+    id: 'tts-provider-picker',
+    label: 'TTS Provider Picker',
+    kind: 'picker',
+    summary: 'Interactive streaming TTS provider picker opened from the Agent settings flow.',
+    command: '/config tts.provider',
+    preferredModelRoute: 'Use settings/get_setting/set_setting for tts.provider when a concrete provider id is known; use open_ui_surface only to visibly navigate.',
+    available: (context) => typeof context.openSelection === 'function' && Boolean(context.platform.voiceProviderRegistry),
+    open: (context) => {
+      const surface = findSurfaceById('tts-provider-picker')!;
+      if (!context.openSelection || !context.platform.voiceProviderRegistry) return routeUnavailable(surface);
+      const handled = openTtsProviderPicker(context);
+      return handled ? opened(surface, { target: 'tts.provider' }) : routeUnavailable(surface);
+    },
+  },
+  {
+    id: 'tts-voice-picker',
+    label: 'TTS Voice Picker',
+    kind: 'picker',
+    summary: 'Interactive TTS voice picker opened from the Agent settings flow for the selected or supplied provider.',
+    command: '/config tts.voice',
+    preferredModelRoute: 'Use settings/get_setting/set_setting/reset_setting for tts.voice when a concrete voice id is known; use open_ui_surface only to visibly navigate.',
+    parameters: ['target'],
+    available: (context) => typeof context.openSelection === 'function' && Boolean(context.platform.voiceService),
+    open: async (context, args) => {
+      const surface = findSurfaceById('tts-voice-picker')!;
+      if (!context.openSelection || !context.platform.voiceService) return routeUnavailable(surface);
+      const providerId = providerTarget(args);
+      const handled = await openTtsVoicePicker(context, providerId);
+      return handled
+        ? opened(surface, { target: 'tts.voice', providerId: providerId ?? 'configured-default' })
+        : routeUnavailable(surface);
+    },
+  },
   {
     id: 'session-picker',
     label: 'Session Picker',
@@ -326,7 +496,7 @@ export function describeHarnessUiSurface(context: CommandContext, args: AgentHar
   return surface ? describeSurface(context, surface) : null;
 }
 
-export function openHarnessUiSurface(context: CommandContext, args: AgentHarnessUiSurfaceArgs): Record<string, unknown> {
+export async function openHarnessUiSurface(context: CommandContext, args: AgentHarnessUiSurfaceArgs): Promise<Record<string, unknown>> {
   const surfaceId = readString(args.surfaceId || args.query);
   const surface = UI_SURFACES.find((entry) => entry.id === surfaceId || entry.label.toLowerCase() === surfaceId.toLowerCase());
   if (!surface) {
@@ -336,8 +506,9 @@ export function openHarnessUiSurface(context: CommandContext, args: AgentHarness
       availableSurfaces: UI_SURFACES.map((entry) => entry.id),
     };
   }
+  const routed = await surface.open(context, args);
   return {
-    ...surface.open(context, args),
+    ...routed,
     descriptor: describeSurface(context, surface),
   };
 }

package/src/version.ts

@@ -6,7 +6,7 @@ import { join } from 'node:path';
 // The prebuild script updates the fallback value before compilation.
 // Uses import.meta.dir (Bun) to locate package.json relative to this file,
 // which is correct regardless of the process working directory.
-let _version = '1.0.7';
+let _version = '1.0.9';
 let _sdkVersion = '0.33.35';
 try {
   const pkg = JSON.parse(readFileSync(join(import.meta.dir, '..', 'package.json'), 'utf-8')) as {