@pellux/goodvibes-agent 1.1.4 → 1.1.5

package/src/input/agent-workspace-host-category.ts

@@ -0,0 +1,57 @@
+import type { AgentWorkspaceCategory } from './agent-workspace-types.ts';
+
+export const AGENT_WORKSPACE_HOST_CATEGORY: AgentWorkspaceCategory = {
+  id: 'host',
+  group: 'OPERATIONS',
+  label: 'Connected Host',
+  summary: 'Connected-host health, tasks, sessions, channels, and automation.',
+  detail: 'Use this workspace to inspect the GoodVibes host surfaces that Agent can see: system health, remote routes, host tasks, sessions, channels, schedules, knowledge, media, MCP, provider auth, support bundles, and telemetry/config posture.',
+  actions: [
+    { id: 'host-overview', label: 'Host overview', detail: 'Review connected-host, provider, settings, continuity, and Agent health without starting or mutating host work.', command: '/health review', kind: 'command', safety: 'read-only' },
+    { id: 'host-services', label: 'Host services', detail: 'Inspect connected-host service readiness, credentials, and integration issues without changing them.', command: '/health host', kind: 'command', safety: 'read-only' },
+    { id: 'host-setup', label: 'Setup review', detail: 'Inspect setup issues that affect connected-host and Agent runtime readiness.', command: '/health setup', kind: 'command', safety: 'read-only' },
+    { id: 'host-remote', label: 'Remote routes', detail: 'Inspect remote build-host route health and recovery signals without starting build work.', command: '/health remote', kind: 'command', safety: 'read-only' },
+    { id: 'host-maintenance', label: 'Session maintenance', detail: 'Review continuity, compaction, and current-session maintenance posture.', command: '/health maintenance', kind: 'command', safety: 'read-only' },
+    { id: 'host-continuity', label: 'Continuity', detail: 'Inspect last-session pointer, recovery-file posture, and return-context state.', command: '/health continuity', kind: 'command', safety: 'read-only' },
+    { id: 'host-tasks', label: 'Host tasks', detail: 'Inspect connected-host task state without creating, retrying, or mutating tasks.', command: '/tasks list', kind: 'command', safety: 'read-only' },
+    { id: 'host-task-filter', label: 'Filter host tasks', detail: 'Open a status/type form for read-only connected-host task filtering.', editorKind: 'task-list-filter', kind: 'editor', safety: 'read-only' },
+    { id: 'host-task-show', label: 'Inspect host task', detail: 'Open a task-id form for read-only connected-host task metadata.', editorKind: 'task-show', kind: 'editor', safety: 'read-only' },
+    { id: 'host-task-output', label: 'Show task output', detail: 'Open a task-id form for read-only connected-host task output.', editorKind: 'task-output', kind: 'editor', safety: 'read-only' },
+    { id: 'host-sessions', label: 'Host session routes', detail: 'Browse saved Agent sessions and return-context posture exposed through the runtime session surface.', command: '/session list', kind: 'command', safety: 'read-only' },
+    { id: 'host-session-graph', label: 'Session graph', detail: 'Open a read-only form for cross-session graph inspection; graph mutation remains blocked in Agent.', editorKind: 'session-graph', kind: 'editor', safety: 'read-only' },
+    { id: 'host-channels-status', label: 'Channel status', detail: 'Inspect connected channel runtime status from the host without mutating delivery state.', command: '/channels status', kind: 'command', safety: 'read-only' },
+    { id: 'host-channel-accounts', label: 'Channel accounts', detail: 'Inspect connected channel accounts without printing secret values or sending messages.', command: '/channels accounts', kind: 'command', safety: 'read-only' },
+    { id: 'host-channel-policies', label: 'Channel policies', detail: 'Inspect channel delivery policy posture without changing routing.', command: '/channels policies', kind: 'command', safety: 'read-only' },
+    { id: 'host-channels', label: 'Open Channels', detail: 'Jump to the channel setup and delivery workspace.', targetCategoryId: 'channels', kind: 'workspace', safety: 'safe' },
+    { id: 'host-automation', label: 'Open Automation', detail: 'Jump to connected schedules, reminders, receipts, and explicit run controls.', targetCategoryId: 'automation', kind: 'workspace', safety: 'safe' },
+    { id: 'host-schedules', label: 'Schedule status', detail: 'Inspect schedules and run history without running or mutating them.', command: '/schedule list', kind: 'command', safety: 'read-only' },
+    { id: 'host-schedule-reconcile', label: 'Reconcile schedules', detail: 'Compare local promotion receipts with live connected schedules.', command: '/schedule reconcile', kind: 'command', safety: 'read-only' },
+    { id: 'host-knowledge', label: 'Knowledge route', detail: 'Inspect isolated Agent Knowledge route readiness and source counts.', command: '/knowledge status', kind: 'command', safety: 'read-only' },
+    { id: 'host-knowledge-open', label: 'Open Knowledge', detail: 'Jump to Agent Knowledge source, graph, review, and ingest controls.', targetCategoryId: 'knowledge', kind: 'workspace', safety: 'safe' },
+    { id: 'host-media', label: 'Media providers', detail: 'Inspect configured media providers before generating media with confirmation.', command: '/media providers', kind: 'command', safety: 'read-only' },
+    { id: 'host-media-open', label: 'Open Voice and Media', detail: 'Jump to voice, TTS, image input, media provider, and browser-tool setup actions.', targetCategoryId: 'voice-media', kind: 'workspace', safety: 'safe' },
+    { id: 'host-mcp-health', label: 'MCP health', detail: 'Inspect MCP lifecycle issues without changing trust posture or approving tool-definition review.', command: '/health mcp', kind: 'command', safety: 'read-only' },
+    { id: 'host-mcp-review', label: 'MCP review', detail: 'Inspect MCP server connection, trust, role, and review posture.', command: '/mcp review', kind: 'command', safety: 'read-only' },
+    { id: 'host-tools-open', label: 'Open Tools and MCP', detail: 'Jump to MCP server setup, tool inventory, secrets, and security review.', targetCategoryId: 'tools', kind: 'workspace', safety: 'safe' },
+    { id: 'host-provider-accounts', label: 'Provider accounts', detail: 'Review provider account routes, subscription windows, and billing-path safety.', command: '/accounts review', kind: 'command', safety: 'read-only' },
+    { id: 'host-provider-detail', label: 'Provider detail', detail: 'Open a provider-id form for account and provider configuration review.', editorKind: 'provider-inspect', kind: 'editor', safety: 'read-only' },
+    { id: 'host-provider-routes', label: 'Provider routes', detail: 'Open a provider-id form for account, subscription, and route inspection.', editorKind: 'provider-routes', kind: 'editor', safety: 'read-only' },
+    { id: 'host-provider-repair', label: 'Provider repair guidance', detail: 'Open a provider-id form for read-only provider repair guidance.', editorKind: 'provider-account-repair', kind: 'editor', safety: 'read-only' },
+    { id: 'host-auth-owner', label: 'Connected-host auth owner', detail: 'Show that connected-host auth administration belongs to the owning GoodVibes host, not Agent.', command: '/auth local', kind: 'command', safety: 'read-only' },
+    { id: 'host-auth-review', label: 'Provider auth review', detail: 'Review provider auth posture without printing token values.', command: '/auth review', kind: 'command', safety: 'read-only' },
+    { id: 'host-auth-detail', label: 'Provider auth detail', detail: 'Open a provider-id form for read-only provider auth inspection.', editorKind: 'auth-show', kind: 'editor', safety: 'read-only' },
+    { id: 'host-auth-repair', label: 'Provider auth repair', detail: 'Open a provider-id form for provider auth repair guidance.', editorKind: 'auth-repair', kind: 'editor', safety: 'read-only' },
+    { id: 'host-auth-bundle-export', label: 'Export auth bundle', detail: 'Open a confirmed form that exports a redacted provider auth review bundle.', editorKind: 'auth-bundle-export', kind: 'editor', safety: 'safe' },
+    { id: 'host-auth-bundle-inspect', label: 'Inspect auth bundle', detail: 'Open a form that inspects a provider auth review bundle before sharing or import.', editorKind: 'auth-bundle-inspect', kind: 'editor', safety: 'read-only' },
+    { id: 'host-subscription-bundle-export', label: 'Export subscription bundle', detail: 'Open a confirmed form that exports redacted provider subscription state for review.', editorKind: 'subscription-bundle-export', kind: 'editor', safety: 'safe' },
+    { id: 'host-subscription-bundle-inspect', label: 'Inspect subscription bundle', detail: 'Open a form that inspects provider subscription state before sharing.', editorKind: 'subscription-bundle-inspect', kind: 'editor', safety: 'read-only' },
+    { id: 'host-security', label: 'Security review', detail: 'Inspect token posture, MCP attack paths, policy lint, plugin risk, and incident pressure.', command: '/security review', kind: 'command', safety: 'read-only' },
+    { id: 'host-trust', label: 'Trust review', detail: 'Review permission, secret, plugin, and MCP trust posture without exporting bundles or changing trust.', command: '/trust review', kind: 'command', safety: 'read-only' },
+    { id: 'host-support-bundle-export', label: 'Export support bundle', detail: 'Export a redacted Agent support bundle from the Host page.', editorKind: 'support-bundle-export', kind: 'editor', safety: 'safe' },
+    { id: 'host-support-bundle-inspect', label: 'Inspect support bundle', detail: 'Inspect a support bundle before import or sharing.', editorKind: 'support-bundle-inspect', kind: 'editor', safety: 'read-only' },
+    { id: 'host-support-bundle-import', label: 'Import support bundle', detail: 'Import reviewed, non-redacted config values from a support bundle.', editorKind: 'support-bundle-import', kind: 'editor', safety: 'safe' },
+    { id: 'host-telemetry', label: 'Telemetry settings', detail: 'Open telemetry payload policy settings for connected-host and Agent observability review.', command: '/config telemetry', kind: 'command', safety: 'safe' },
+    { id: 'host-config', label: 'Control-plane settings', detail: 'Open configuration controls for service, channels, tools, automation, provider, and storage posture.', command: '/config', kind: 'command', safety: 'safe' },
+    { id: 'host-safety', label: 'Host mutation policy', detail: 'Agent may inspect connected-host surfaces and run explicit confirmed actions, but does not silently create tasks, send channel messages, mutate auth, or start automation.', kind: 'guidance', safety: 'blocked' },
+  ],
+};

package/src/input/agent-workspace-local-editor-submission.ts

@@ -0,0 +1,193 @@
+import type { ShellPathService } from '@/runtime/index.ts';
+import { AgentNoteRegistry } from '../agent/note-registry.ts';
+import { AgentPersonaRegistry } from '../agent/persona-registry.ts';
+import { AgentRoutineRegistry } from '../agent/routine-registry.ts';
+import { createAgentRuntimeProfile, type AgentRuntimeProfileInfo } from '../agent/runtime-profile.ts';
+import { AgentSkillRegistry } from '../agent/skill-registry.ts';
+import { createAgentWorkspaceLearnedBehavior } from './agent-workspace-learned-behavior.ts';
+import { buildAgentWorkspaceRequirements } from './agent-workspace-requirements.ts';
+import { isAffirmative, splitList } from './agent-workspace-editors.ts';
+import type { AgentWorkspaceLocalEditor, AgentWorkspaceLocalEditorKind } from './agent-workspace-types.ts';
+
+type LearnedBehaviorTarget = Exclude<AgentWorkspaceLocalEditorKind, 'memory' | 'note' | 'profile'>;
+
+export interface AgentWorkspaceLocalEditorSubmissionCallbacks {
+  readonly readField: (id: string) => string;
+  readonly learnedBehaviorTarget: () => LearnedBehaviorTarget;
+  readonly submitDeleteEditor: () => void;
+  readonly finishLocalEditor: (kind: AgentWorkspaceLocalEditorKind, id: string, name: string, verb: 'Created' | 'Updated') => void;
+  readonly finishProfileEditor: (profile: AgentRuntimeProfileInfo) => void;
+}
+
+export function submitAgentWorkspaceLocalRegistryEditor(
+  shellPaths: ShellPathService,
+  editor: AgentWorkspaceLocalEditor,
+  callbacks: AgentWorkspaceLocalEditorSubmissionCallbacks,
+): void {
+  const field = callbacks.readField;
+  if (editor.mode === 'delete') {
+    callbacks.submitDeleteEditor();
+    return;
+  }
+  if (editor.kind === 'learned-behavior') {
+    const created = createAgentWorkspaceLearnedBehavior(shellPaths, {
+      target: callbacks.learnedBehaviorTarget(),
+      name: field('name'),
+      description: field('description'),
+      notes: field('notes'),
+      tags: splitList(field('tags')),
+      triggers: splitList(field('triggers')),
+      enable: isAffirmative(field('enable')),
+    });
+    callbacks.finishLocalEditor(created.kind, created.id, created.name, 'Created');
+  } else if (editor.kind === 'profile') {
+    const template = field('template');
+    const templateId = template && template.toLowerCase() !== 'none' ? template : undefined;
+    const profile = createAgentRuntimeProfile(shellPaths.homeDirectory, field('name'), {
+      ...(templateId ? { templateId } : {}),
+    });
+    callbacks.finishProfileEditor(profile);
+  } else if (editor.kind === 'note') {
+    submitNoteEditor(shellPaths, editor, field, callbacks.finishLocalEditor);
+  } else if (editor.kind === 'persona') {
+    submitPersonaEditor(shellPaths, editor, field, callbacks.finishLocalEditor);
+  } else if (editor.kind === 'skill') {
+    submitSkillEditor(shellPaths, editor, field, callbacks.finishLocalEditor);
+  } else {
+    submitRoutineEditor(shellPaths, editor, field, callbacks.finishLocalEditor);
+  }
+}
+
+function submitNoteEditor(
+  shellPaths: ShellPathService,
+  editor: AgentWorkspaceLocalEditor,
+  field: (id: string) => string,
+  finish: AgentWorkspaceLocalEditorSubmissionCallbacks['finishLocalEditor'],
+): void {
+  const registry = AgentNoteRegistry.fromShellPaths(shellPaths);
+  if (editor.mode === 'update' && editor.recordId) {
+    const updated = registry.update(editor.recordId, {
+      title: field('title'),
+      body: field('body'),
+      sourceUrl: field('sourceUrl'),
+      tags: splitList(field('tags')),
+      provenance: 'Workspace',
+    });
+    finish('note', updated.id, updated.title, 'Updated');
+    return;
+  }
+  const created = registry.create({
+    title: field('title'),
+    body: field('body'),
+    sourceUrl: field('sourceUrl'),
+    tags: splitList(field('tags')),
+    source: 'user',
+    provenance: 'Workspace',
+  });
+  finish('note', created.id, created.title, 'Created');
+}
+
+function submitPersonaEditor(
+  shellPaths: ShellPathService,
+  editor: AgentWorkspaceLocalEditor,
+  field: (id: string) => string,
+  finish: AgentWorkspaceLocalEditorSubmissionCallbacks['finishLocalEditor'],
+): void {
+  const registry = AgentPersonaRegistry.fromShellPaths(shellPaths);
+  if (editor.mode === 'update' && editor.recordId) {
+    const wasActive = registry.snapshot().activePersonaId === editor.recordId;
+    const updated = registry.update(editor.recordId, {
+      name: field('name'),
+      description: field('description'),
+      body: field('body'),
+      tags: splitList(field('tags')),
+      triggers: splitList(field('triggers')),
+      provenance: 'Workspace',
+    });
+    if (isAffirmative(field('activate'))) registry.setActive(updated.id);
+    else if (wasActive) registry.clearActive();
+    finish('persona', updated.id, updated.name, 'Updated');
+    return;
+  }
+  const created = registry.create({
+    name: field('name'),
+    description: field('description'),
+    body: field('body'),
+    tags: splitList(field('tags')),
+    triggers: splitList(field('triggers')),
+    source: 'user',
+    provenance: 'Workspace',
+  });
+  if (isAffirmative(field('activate'))) registry.setActive(created.id);
+  finish('persona', created.id, created.name, 'Created');
+}
+
+function submitSkillEditor(
+  shellPaths: ShellPathService,
+  editor: AgentWorkspaceLocalEditor,
+  field: (id: string) => string,
+  finish: AgentWorkspaceLocalEditorSubmissionCallbacks['finishLocalEditor'],
+): void {
+  const registry = AgentSkillRegistry.fromShellPaths(shellPaths);
+  if (editor.mode === 'update' && editor.recordId) {
+    const updated = registry.update(editor.recordId, {
+      name: field('name'),
+      description: field('description'),
+      procedure: field('procedure'),
+      triggers: splitList(field('triggers')),
+      tags: splitList(field('tags')),
+      requirements: buildAgentWorkspaceRequirements(field),
+      provenance: 'Workspace',
+    });
+    registry.setEnabled(updated.id, isAffirmative(field('enabled')));
+    finish('skill', updated.id, updated.name, 'Updated');
+    return;
+  }
+  const created = registry.create({
+    name: field('name'),
+    description: field('description'),
+    procedure: field('procedure'),
+    triggers: splitList(field('triggers')),
+    tags: splitList(field('tags')),
+    requirements: buildAgentWorkspaceRequirements(field),
+    enabled: isAffirmative(field('enabled')),
+    source: 'user',
+    provenance: 'Workspace',
+  });
+  finish('skill', created.id, created.name, 'Created');
+}
+
+function submitRoutineEditor(
+  shellPaths: ShellPathService,
+  editor: AgentWorkspaceLocalEditor,
+  field: (id: string) => string,
+  finish: AgentWorkspaceLocalEditorSubmissionCallbacks['finishLocalEditor'],
+): void {
+  const registry = AgentRoutineRegistry.fromShellPaths(shellPaths);
+  if (editor.mode === 'update' && editor.recordId) {
+    const updated = registry.update(editor.recordId, {
+      name: field('name'),
+      description: field('description'),
+      steps: field('steps'),
+      triggers: splitList(field('triggers')),
+      tags: splitList(field('tags')),
+      requirements: buildAgentWorkspaceRequirements(field),
+      provenance: 'Workspace',
+    });
+    registry.setEnabled(updated.id, isAffirmative(field('enabled')));
+    finish('routine', updated.id, updated.name, 'Updated');
+    return;
+  }
+  const created = registry.create({
+    name: field('name'),
+    description: field('description'),
+    steps: field('steps'),
+    triggers: splitList(field('triggers')),
+    tags: splitList(field('tags')),
+    requirements: buildAgentWorkspaceRequirements(field),
+    enabled: isAffirmative(field('enabled')),
+    source: 'user',
+    provenance: 'Workspace',
+  });
+  finish('routine', created.id, created.name, 'Created');
+}

package/src/input/agent-workspace-search.ts

@@ -40,6 +40,9 @@ export function searchAgentWorkspaceActions(
         action.command ?? '',
         action.editorKind ?? '',
         action.targetCategoryId ?? '',
+        action.modelPickerFlow ?? '',
+        action.modelPickerTarget ?? '',
+        action.settingsTarget ?? '',
         action.localOperation ?? '',
         action.safety,
       ].join(' ').toLowerCase();
@@ -80,6 +83,9 @@ function scoreActionSearchResult(
   score += scoreField(action.editorKind, terms, exactQuery, 85, 26);
   score += scoreField(action.command, terms, exactQuery, 75, 22);
   score += scoreField(action.label, terms, exactQuery, 65, 18);
+  score += scoreField(action.modelPickerTarget, terms, exactQuery, 58, 18);
+  score += scoreField(action.settingsTarget, terms, exactQuery, 58, 18);
+  score += scoreField(action.modelPickerFlow, terms, exactQuery, 54, 16);
   score += scoreField(action.localOperation, terms, exactQuery, 50, 16);
   score += scoreField(action.targetCategoryId, terms, exactQuery, 40, 12);
   score += scoreField(action.detail, terms, exactQuery, 24, 6);

package/src/input/agent-workspace-setup.ts

@@ -14,6 +14,9 @@ export interface AgentWorkspaceSetupChecklistInput {
   readonly provider: string;
   readonly model: string;
   readonly runtimeBaseUrl: string;
+  readonly activeSubscriptionCount: number;
+  readonly pendingSubscriptionCount: number;
+  readonly availableSubscriptionProviderCount: number;
   readonly sessionMemoryCount: number;
   readonly localMemoryCount: number;
   readonly localMemoryReviewQueueCount: number;
@@ -69,6 +72,23 @@ export function buildAgentWorkspaceSetupChecklist(input: AgentWorkspaceSetupChec
         : 'Choose a provider and model before relying on assistant turns.',
       command: 'Setup -> Provider and model',
     },
+    {
+      id: 'subscriptions',
+      label: 'Provider subscriptions',
+      status: input.activeSubscriptionCount > 0
+        ? 'ready'
+        : input.pendingSubscriptionCount > 0
+          ? 'recommended'
+          : input.availableSubscriptionProviderCount > 0 ? 'recommended' : 'optional',
+      detail: input.activeSubscriptionCount > 0
+        ? `${input.activeSubscriptionCount} provider subscription session(s) are active.`
+        : input.pendingSubscriptionCount > 0
+          ? `${input.pendingSubscriptionCount} provider subscription login(s) are pending completion.`
+          : input.availableSubscriptionProviderCount > 0
+            ? `${input.availableSubscriptionProviderCount} subscription-capable provider(s) are available. Start login if you want subscription routing.`
+            : 'No subscription-capable providers are available yet. Use API keys or add an OAuth provider service.',
+      command: 'Start -> Start subscription login',
+    },
     {
       id: 'agent-knowledge',
       label: 'Agent Knowledge',

package/src/input/agent-workspace-snapshot.ts

@@ -1,4 +1,5 @@
 import { basename, sep } from 'node:path';
+import { listAvailableSubscriptionProviders } from '@pellux/goodvibes-sdk/platform/config';
 import type { MemoryRecord } from '@pellux/goodvibes-sdk/platform/state';
 import type { CommandContext } from './command-registry.ts';
 import { AgentNoteRegistry, type AgentNoteRecord } from '../agent/note-registry.ts';
@@ -398,6 +399,41 @@ export function buildAgentWorkspaceRuntimeSnapshot(context: CommandContext): Age
   const ttsVoice = readConfigString(context, 'tts.voice', '(voice default)');
   const ttsLlmProvider = readConfigString(context, 'tts.llmProvider', '');
   const ttsLlmModel = readConfigString(context, 'tts.llmModel', '');
+  const embeddingProvider = readConfigString(context, 'provider.embeddingProvider', '(provider default)');
+  const reasoningEffort = readConfigString(context, 'provider.reasoningEffort', '(default)');
+  const helperEnabled = readConfigBoolean(context, 'helper.enabled', false);
+  const toolLlmEnabled = readConfigBoolean(context, 'tools.llmEnabled', false);
+  const providerFailureHints = readConfigBoolean(context, 'behavior.suggestAlternativeOnProviderFail', false);
+  const cacheEnabled = readConfigBoolean(context, 'cache.enabled', true);
+  const cacheStableTtl = readConfigString(context, 'cache.stableTtl', '(default)');
+  const cacheMonitorHitRate = readConfigBoolean(context, 'cache.monitorHitRate', true);
+  const cacheHitRateWarningThreshold = readConfigNumber(context, 'cache.hitRateWarningThreshold', 0.3);
+  const hitlMode = readConfigString(context, 'behavior.hitlMode', '(default)');
+  const guidanceMode = readConfigString(context, 'behavior.guidanceMode', '(default)');
+  const saveHistory = readConfigBoolean(context, 'behavior.saveHistory', true);
+  const autoApprove = readConfigBoolean(context, 'behavior.autoApprove', false);
+  const autoCompactThreshold = readConfigNumber(context, 'behavior.autoCompactThreshold', 0);
+  const staleContextWarnings = readConfigBoolean(context, 'behavior.staleContextWarnings', false);
+  const showThinking = readConfigBoolean(context, 'display.showThinking', false);
+  const showReasoningSummary = readConfigBoolean(context, 'display.showReasoningSummary', false);
+  const theme = readConfigString(context, 'display.theme', '(default)');
+  const stream = readConfigBoolean(context, 'display.stream', true);
+  const lineNumbers = readConfigString(context, 'display.lineNumbers', '(default)');
+  const operationalMessages = readConfigString(context, 'ui.operationalMessages', '(default)');
+  const systemMessages = readConfigString(context, 'ui.systemMessages', '(default)');
+  const releaseChannel = readConfigString(context, 'release.channel', '(default)');
+  const permissionMode = readConfigString(context, 'permissions.mode', '(default)');
+  const toolAutoHeal = readConfigBoolean(context, 'tools.autoHeal', false);
+  const toolsDefaultTokenBudget = readConfigNumber(context, 'tools.defaultTokenBudget', 5000);
+  const artifactMaxBytes = readConfigNumber(context, 'storage.artifacts.maxBytes', 512 * 1024 * 1024);
+  const rawPromptTelemetry = readConfigBoolean(context, 'telemetry.includeRawPrompts', false);
+  const automationEnabled = readConfigBoolean(context, 'automation.enabled', false);
+  const automationMaxConcurrentRuns = readConfigNumber(context, 'automation.maxConcurrentRuns', 4);
+  const automationRunHistoryLimit = readConfigNumber(context, 'automation.runHistoryLimit', 100);
+  const automationDefaultTimeoutMs = readConfigNumber(context, 'automation.defaultTimeoutMs', 15 * 60 * 1000);
+  const automationCatchUpWindowMinutes = readConfigNumber(context, 'automation.catchUpWindowMinutes', 30);
+  const automationFailureCooldownMs = readConfigNumber(context, 'automation.failureCooldownMs', 5 * 60 * 1000);
+  const automationDeleteAfterRun = readConfigBoolean(context, 'automation.deleteAfterRun', false);
   const runtimeBaseUrl = `http://${host}:${port}`;
   const companionAccess = (() => {
     const homeDirectory = context.workspace?.shellPaths?.homeDirectory ?? '';
@@ -425,6 +461,18 @@ export function buildAgentWorkspaceRuntimeSnapshot(context: CommandContext): Age
       nextStep,
     } as const;
   })();
+  const subscriptionSnapshot = (() => {
+    try {
+      const manager = context.platform?.subscriptionManager;
+      const services = context.platform?.serviceRegistry;
+      const active = manager?.list?.().length ?? 0;
+      const pending = manager?.listPending?.().length ?? 0;
+      const available = services ? listAvailableSubscriptionProviders(services.getAll()).length : 0;
+      return { active, pending, available };
+    } catch {
+      return { active: 0, pending: 0, available: 0 };
+    }
+  })();
   const channels = buildAgentWorkspaceChannels(context);
   const voiceMediaReadiness = buildAgentWorkspaceVoiceMediaReadiness({
     context,
@@ -435,6 +483,9 @@ export function buildAgentWorkspaceRuntimeSnapshot(context: CommandContext): Age
     provider,
     model,
     runtimeBaseUrl,
+    activeSubscriptionCount: subscriptionSnapshot.active,
+    pendingSubscriptionCount: subscriptionSnapshot.pending,
+    availableSubscriptionProviderCount: subscriptionSnapshot.available,
     sessionMemoryCount,
     localMemoryCount: memorySnapshot.count,
     localMemoryReviewQueueCount: memorySnapshot.reviewQueueCount,
@@ -463,11 +514,49 @@ export function buildAgentWorkspaceRuntimeSnapshot(context: CommandContext): Age
     provider,
     model,
     modelDisplayName: currentModel?.displayName ?? model,
+    embeddingProvider,
+    reasoningEffort,
+    helperEnabled,
+    toolLlmEnabled,
+    providerFailureHints,
+    cacheEnabled,
+    cacheStableTtl,
+    cacheMonitorHitRate,
+    cacheHitRateWarningThreshold,
+    hitlMode,
+    guidanceMode,
+    saveHistory,
+    autoApprove,
+    autoCompactThreshold,
+    staleContextWarnings,
+    showThinking,
+    showReasoningSummary,
+    theme,
+    stream,
+    lineNumbers,
+    operationalMessages,
+    systemMessages,
+    releaseChannel,
+    permissionMode,
+    toolAutoHeal,
+    toolsDefaultTokenBudget,
+    artifactMaxBytes,
+    rawPromptTelemetry,
+    automationEnabled,
+    automationMaxConcurrentRuns,
+    automationRunHistoryLimit,
+    automationDefaultTimeoutMs,
+    automationCatchUpWindowMinutes,
+    automationFailureCooldownMs,
+    automationDeleteAfterRun,
     sessionId: context.session?.runtime?.sessionId ?? 'unknown',
     workingDirectory: context.workspace?.shellPaths?.workingDirectory ?? 'unavailable',
     homeDirectory: context.workspace?.shellPaths?.homeDirectory ?? 'unavailable',
     runtimeBaseUrl,
     runtimeOwnership: 'external',
+    activeSubscriptionCount: subscriptionSnapshot.active,
+    pendingSubscriptionCount: subscriptionSnapshot.pending,
+    availableSubscriptionProviderCount: subscriptionSnapshot.available,
     sessionMemoryCount,
     localMemoryCount: memorySnapshot.count,
     localMemoryReviewQueueCount: memorySnapshot.reviewQueueCount,

package/src/input/agent-workspace-subscription-editor.ts

@@ -0,0 +1,214 @@
+import { beginOpenAICodexLogin, exchangeOpenAICodexCode, getSubscriptionProviderConfig } from '@pellux/goodvibes-sdk/platform/config';
+import type { OAuthProviderConfig, ProviderSubscription } from '@pellux/goodvibes-sdk/platform/config';
+import { openExternalUrl } from '@pellux/goodvibes-sdk/platform/utils';
+import type { CommandContext } from './command-registry.ts';
+import { isAffirmative } from './agent-workspace-editors.ts';
+import { buildAgentWorkspaceRuntimeSnapshot } from './agent-workspace-snapshot.ts';
+import type { AgentWorkspaceActionResult, AgentWorkspaceLocalEditor, AgentWorkspaceRuntimeSnapshot } from './agent-workspace-types.ts';
+
+export interface AgentWorkspaceSubscriptionEditorHost {
+  localEditor: AgentWorkspaceLocalEditor | null;
+  runtimeSnapshot: AgentWorkspaceRuntimeSnapshot | null;
+  status: string;
+  lastActionResult: AgentWorkspaceActionResult | null;
+  clampSelection(): void;
+}
+
+export type AgentWorkspaceSubscriptionFieldReader = (id: string) => string;
+
+export async function submitAgentWorkspaceSubscriptionLoginStartEditor(
+  host: AgentWorkspaceSubscriptionEditorHost,
+  editor: AgentWorkspaceLocalEditor,
+  context: CommandContext | null,
+  readField: AgentWorkspaceSubscriptionFieldReader,
+): Promise<void> {
+  if (!isAffirmative(readField('confirm'))) {
+    host.localEditor = { ...editor, message: 'Subscription login start not confirmed. Type yes, then press Enter.' };
+    host.status = 'Subscription login start not confirmed.';
+    return;
+  }
+  try {
+    const provider = readField('provider') || 'openai';
+    const openBrowser = isAffirmative(readField('openBrowser'));
+    const { manager, services } = subscriptionServices(context);
+    const resolved = getSubscriptionProviderConfig(provider, services.get(provider));
+    if (!resolved) {
+      throw new Error(`OAuth is not configured for ${provider}. Add an OAuth provider service or choose a built-in subscription provider.`);
+    }
+
+    const started = provider === 'openai' && resolved.source === 'builtin'
+      ? await beginOpenAICodexLogin()
+      : null;
+    const authorizationUrl = started
+      ? started.authorizationUrl
+      : (await manager.beginOAuthLogin(provider, resolveManualLoginConfig(resolved.oauth))).authorizationUrl;
+
+    if (started) {
+      manager.savePending({
+        provider,
+        state: started.state,
+        verifier: started.verifier,
+        redirectUri: started.redirectUri,
+        createdAt: Date.now(),
+      });
+    }
+
+    const browserOpened = openBrowser ? await openExternalUrl(authorizationUrl) : false;
+    host.localEditor = null;
+    host.runtimeSnapshot = context ? buildAgentWorkspaceRuntimeSnapshot(context) : host.runtimeSnapshot;
+    host.status = `Subscription login started for ${provider}.`;
+    host.lastActionResult = {
+      kind: 'refreshed',
+      title: 'Subscription login started',
+      detail: [
+        `Provider: ${provider}.`,
+        `Browser: ${openBrowser ? (browserOpened ? 'opened' : 'open failed') : 'skipped'}.`,
+        'Use Finish subscription login with the callback code or redirect URL.',
+        `Authorization URL: ${authorizationUrl}`,
+      ].join(' '),
+      safety: 'safe',
+    };
+    host.clampSelection();
+  } catch (error) {
+    const detail = error instanceof Error ? error.message : String(error);
+    host.localEditor = { ...editor, message: detail };
+    host.status = detail;
+    host.lastActionResult = { kind: 'error', title: 'Subscription login start failed', detail, safety: 'safe' };
+  }
+}
+
+export async function submitAgentWorkspaceSubscriptionLoginFinishEditor(
+  host: AgentWorkspaceSubscriptionEditorHost,
+  editor: AgentWorkspaceLocalEditor,
+  context: CommandContext | null,
+  readField: AgentWorkspaceSubscriptionFieldReader,
+): Promise<void> {
+  if (!isAffirmative(readField('confirm'))) {
+    host.localEditor = { ...editor, message: 'Subscription login finish not confirmed. Type yes, then press Enter.' };
+    host.status = 'Subscription login finish not confirmed.';
+    return;
+  }
+  try {
+    const provider = readField('provider') || 'openai';
+    const codeInput = readField('code');
+    const code = extractAuthorizationCode(codeInput) ?? codeInput;
+    const { manager, services } = subscriptionServices(context);
+    const resolved = getSubscriptionProviderConfig(provider, services.get(provider));
+    if (!resolved) {
+      throw new Error(`OAuth is not configured for ${provider}. Start with a configured or built-in subscription provider.`);
+    }
+
+    const record = provider === 'openai' && resolved.source === 'builtin'
+      ? (() => {
+        const pending = manager.getPending(provider);
+        if (!pending) throw new Error(`No pending OAuth login for ${provider}. Start subscription login first.`);
+        return exchangeOpenAICodexCode(code, pending.verifier).then((token) => {
+          const now = Date.now();
+          return manager.saveSubscription({
+            provider,
+            accessToken: token.accessToken,
+            tokenType: token.tokenType,
+            ...(typeof token.refreshToken === 'string' && token.refreshToken.length > 0
+              ? { refreshToken: token.refreshToken }
+              : {}),
+            ...(typeof token.expiresAt === 'number' && Number.isFinite(token.expiresAt)
+              ? { expiresAt: token.expiresAt }
+              : {}),
+            ...(token.scopes ? { scopes: token.scopes } : {}),
+            authMode: 'oauth',
+            overrideAmbientApiKeys: false,
+            createdAt: manager.get(provider)?.createdAt ?? now,
+            updatedAt: now,
+          });
+        });
+      })()
+      : manager.completeOAuthLogin(provider, resolveManualLoginConfig(resolved.oauth), code);
+
+    const saved = await record;
+    host.localEditor = null;
+    host.runtimeSnapshot = context ? buildAgentWorkspaceRuntimeSnapshot(context) : host.runtimeSnapshot;
+    host.status = `Subscription session saved for ${provider}.`;
+    host.lastActionResult = {
+      kind: 'refreshed',
+      title: 'Subscription session saved',
+      detail: [
+        `Provider: ${provider}.`,
+        `Token type: ${saved.tokenType}.`,
+        `Expires: ${saved.expiresAt ? new Date(saved.expiresAt).toISOString() : 'n/a'}.`,
+        describeSubscriptionPrecedence(saved),
+      ].join(' '),
+      safety: 'safe',
+    };
+    host.clampSelection();
+  } catch (error) {
+    const detail = error instanceof Error ? error.message : String(error);
+    host.localEditor = { ...editor, message: detail };
+    host.status = detail;
+    host.lastActionResult = { kind: 'error', title: 'Subscription login finish failed', detail, safety: 'safe' };
+  }
+}
+
+export function submitAgentWorkspaceSubscriptionLogoutEditor(
+  host: AgentWorkspaceSubscriptionEditorHost,
+  editor: AgentWorkspaceLocalEditor,
+  context: CommandContext | null,
+  readField: AgentWorkspaceSubscriptionFieldReader,
+): void {
+  if (!isAffirmative(readField('confirm'))) {
+    host.localEditor = { ...editor, message: 'Subscription logout not confirmed. Type yes, then press Enter.' };
+    host.status = 'Subscription logout not confirmed.';
+    return;
+  }
+  try {
+    const provider = readField('provider') || 'openai';
+    const { manager } = subscriptionServices(context);
+    const removed = manager.logout(provider);
+    host.localEditor = null;
+    host.runtimeSnapshot = context ? buildAgentWorkspaceRuntimeSnapshot(context) : host.runtimeSnapshot;
+    host.status = removed ? `Logged out of ${provider}.` : `No subscription session existed for ${provider}.`;
+    host.lastActionResult = {
+      kind: removed ? 'refreshed' : 'guidance',
+      title: removed ? 'Subscription session removed' : 'No subscription session found',
+      detail: removed
+        ? `Removed active or pending subscription state for ${provider}. Ambient API key resolution applies if configured.`
+        : `No active or pending subscription state existed for ${provider}.`,
+      safety: 'safe',
+    };
+    host.clampSelection();
+  } catch (error) {
+    const detail = error instanceof Error ? error.message : String(error);
+    host.localEditor = { ...editor, message: detail };
+    host.status = detail;
+    host.lastActionResult = { kind: 'error', title: 'Subscription logout failed', detail, safety: 'safe' };
+  }
+}
+
+function subscriptionServices(context: CommandContext | null) {
+  const manager = context?.platform.subscriptionManager;
+  const services = context?.platform.serviceRegistry;
+  if (!manager || !services) throw new Error('Subscription services are unavailable in this runtime.');
+  return { manager, services };
+}
+
+function extractAuthorizationCode(input: string): string | null {
+  const trimmed = input.trim();
+  if (!trimmed) return null;
+  try {
+    const url = new URL(trimmed);
+    return url.searchParams.get('code');
+  } catch {
+    return null;
+  }
+}
+
+function resolveManualLoginConfig(config: OAuthProviderConfig): OAuthProviderConfig {
+  return config.manualRedirectUri
+    ? { ...config, redirectUri: config.manualRedirectUri }
+    : config;
+}
+
+function describeSubscriptionPrecedence(record: Pick<ProviderSubscription, 'overrideAmbientApiKeys'>): string {
+  return record.overrideAmbientApiKeys
+    ? 'Subscription routing now overrides ambient API keys for this provider.'
+    : 'Subscription session is stored for subscription-backed flows; ambient API keys are unchanged.';
+}