@pellux/goodvibes-agent 1.4.3 → 1.5.0

package/src/runtime/bootstrap-command-context.ts

@@ -4,7 +4,6 @@ import type { ConversationManager } from '../core/conversation';
 import type { KnowledgeApi } from '@pellux/goodvibes-sdk/platform/knowledge';
 import type { HookApi } from '@pellux/goodvibes-sdk/platform/hooks';
 import type { McpApi } from '@pellux/goodvibes-sdk/platform/mcp';
-import type { PanelManager } from '../panels/panel-manager.ts';
 import type { ProviderApi } from '@pellux/goodvibes-sdk/platform/providers';
 import type { OpsApi } from '@/runtime/index.ts';
 import type { MutableRuntimeState } from '@/runtime/index.ts';
@@ -116,7 +115,6 @@ export type CreateBootstrapCommandContextOptions = {
   mcpApi?: McpApi;
   opsApi?: OpsApi;
   directTransport?: DirectTransport;
-  panelManager: PanelManager;
   worktreeRegistry: WorktreeRegistry;
   sandboxSessionRegistry: SandboxSessionRegistry;
   loadSystemPrompt: () => string;
@@ -192,7 +190,6 @@ export function createBootstrapCommandContext(
     mcpApi,
     opsApi,
     directTransport,
-    panelManager,
     worktreeRegistry,
     sandboxSessionRegistry,
     loadSystemPrompt,
@@ -247,7 +244,6 @@ export function createBootstrapCommandContext(
   const workspace = createBootstrapCommandWorkspaceSection({
     keybindingsManager,
     fileUndoManager,
-    panelManager,
     processManager,
     profileManager,
     bookmarkManager,
@@ -277,7 +273,6 @@ export function createBootstrapCommandContext(
     conversation,
     runtime,
     requestRender,
-    panelManager,
     loadSystemPrompt,
     activatePlan,
     requestPermission,

package/src/runtime/bootstrap-command-parts.ts

@@ -6,7 +6,6 @@ import type { KnowledgeApi } from '@pellux/goodvibes-sdk/platform/knowledge';
 import type { AgentPromptContextReceiptStore } from '../agent/prompt-context-receipts.ts';
 import type { HookApi } from '@pellux/goodvibes-sdk/platform/hooks';
 import type { McpApi } from '@pellux/goodvibes-sdk/platform/mcp';
-import type { PanelManager } from '../panels/panel-manager.ts';
 import type { ProviderApi } from '@pellux/goodvibes-sdk/platform/providers';
 import type { OpsApi } from '@/runtime/index.ts';
 import type { MutableRuntimeState } from '@/runtime/index.ts';
@@ -62,7 +61,6 @@ export interface BootstrapCommandActionOptions {
   readonly conversation: ConversationManager;
   readonly runtime: MutableRuntimeState;
   readonly requestRender: () => void;
-  readonly panelManager: PanelManager;
   readonly loadSystemPrompt: () => string;
   readonly activatePlan: (planId: string, task: string) => void;
   readonly requestPermission: PermissionRequestHandler;
@@ -76,7 +74,6 @@ export interface BootstrapCommandSectionOptions {
   readonly runtime: MutableRuntimeState;
   readonly keybindingsManager?: KeybindingsManager;
   readonly processManager?: import('@pellux/goodvibes-sdk/platform/tools').ProcessManager;
-  readonly panelManager: PanelManager;
   readonly requestRender: () => void;
   readonly requestPermission: PermissionRequestHandler;
   readonly toolRegistry: ToolRegistry;
@@ -158,7 +155,6 @@ export function createBootstrapCommandActions(
   | 'print'
   | 'exit'
   | 'reloadSystemPrompt'
-  | 'showPanel'
   | 'openMcpWorkspace'
   | 'openAgentWorkspace'
   | 'dismissAgentWorkspace'
@@ -172,17 +168,14 @@ export function createBootstrapCommandActions(
     conversation,
     runtime,
     requestRender,
-    panelManager,
     loadSystemPrompt,
     activatePlan,
     requestPermission,
     completeModelSelectionSideEffect,
   } = options;
 
-  const showPanel = (panelId: string, pane?: 'top' | 'bottom') => {
-    void pane;
-    panelManager.hide();
-    conversation.log(`Panel route "${panelId}" is handled through Agent Workspace. Use /agent for current operator controls.`, { fg: '214' });
+  const pointToWorkspace = (what: string) => {
+    conversation.log(`${what} lives in the Agent workspace — press Ctrl+P or run /agent.`, { fg: '214' });
     requestRender();
   };
 
@@ -246,18 +239,17 @@ export function createBootstrapCommandActions(
     },
     exit: () => unwiredShellAction('exit'),
     reloadSystemPrompt: loadSystemPrompt,
-    showPanel,
     openMcpWorkspace: () => unwiredShellAction('openMcpWorkspace'),
     openAgentWorkspace: () => unwiredShellAction('openAgentWorkspace'),
     dismissAgentWorkspace: () => unwiredShellAction('dismissAgentWorkspace'),
     openSecurityPanel: () => {
-      showPanel('security');
+      pointToWorkspace('Security review');
     },
     openKnowledgePanel: () => {
-      showPanel('knowledge');
+      pointToWorkspace('Knowledge');
     },
     openSubscriptionPanel: () => {
-      showPanel('subscription');
+      pointToWorkspace('Provider subscriptions');
     },
   };
 }
@@ -295,7 +287,7 @@ export function createBootstrapCommandProviderSection(
 export function createBootstrapCommandWorkspaceSection(
   options: Pick<
     BootstrapCommandSectionOptions,
-    'keybindingsManager' | 'fileUndoManager' | 'panelManager' | 'profileManager' | 'bookmarkManager'
+    'keybindingsManager' | 'fileUndoManager' | 'profileManager' | 'bookmarkManager'
     | 'processManager' | 'projectPlanningService' | 'projectPlanningProjectId' | 'workPlanStore'
   >,
   shellServices: BootstrapCommandShellServices,
@@ -303,7 +295,6 @@ export function createBootstrapCommandWorkspaceSection(
   return {
     keybindingsManager: options.keybindingsManager,
     fileUndoManager: options.fileUndoManager,
-    panelManager: options.panelManager,
     processManager: options.processManager,
     profileManager: options.profileManager,
     bookmarkManager: options.bookmarkManager,

package/src/runtime/bootstrap-core.ts

@@ -6,8 +6,8 @@ import { getProviderIdFromModel } from '../config/provider-model.ts';
 import { ToolRegistry } from '@pellux/goodvibes-sdk/platform/tools';
 import { registerAllTools } from '@pellux/goodvibes-sdk/platform/tools';
 import { PermissionManager, createPermissionConfigReader } from '@pellux/goodvibes-sdk/platform/permissions';
-import { Notifier } from '@pellux/goodvibes-sdk/platform/integrations';
-import { WebhookNotifier } from '@pellux/goodvibes-sdk/platform/integrations';
+import { Notifier, WebhookNotifier } from '@pellux/goodvibes-sdk/platform/integrations';
+
 import { Compositor } from '../renderer/compositor.ts';
 import type { PermissionRequestHandler } from '@pellux/goodvibes-sdk/platform/permissions';
 import type { SystemMessageRouter } from '../core/system-message-router.ts';
@@ -94,6 +94,26 @@ export interface BootstrapCoreState {
 
 export type CompanionMessagePayload = Extract<SessionEvent, { type: 'COMPANION_MESSAGE_RECEIVED' }>;
 
+/**
+ * Registers the webhook notifier for the runtime session.
+ *
+ * Configures the provided WebhookNotifier with the given URL list, attaches it
+ * to the runtime bus so it receives SESSION_NOTIFICATION events, and pushes a
+ * detach() cleanup into runtimeUnsubs for shutdown. When webhookUrls is empty
+ * this function is a complete no-op.
+ */
+export function registerWebhookNotifier(
+  webhookNotifier: WebhookNotifier,
+  webhookUrls: string[],
+  runtimeBus: RuntimeEventBus,
+  runtimeUnsubs: Array<() => void>,
+): void {
+  if (webhookUrls.length === 0) return;
+  webhookNotifier.setUrls(webhookUrls);
+  webhookNotifier.attachToRuntimeBus(runtimeBus);
+  runtimeUnsubs.push(() => webhookNotifier.detach());
+}
+
 export function companionMessageToOrchestratorInputOptions(
   payload: CompanionMessagePayload,
 ): OrchestratorUserInputOptions {
@@ -161,7 +181,7 @@ export async function initializeBootstrapCore(
     sessionId: userSessionId,
     authenticatedAt: Date.now(),
     lastSeenAt: Date.now(),
-    capabilities: ['session', 'panels', 'commands', 'automation'],
+    capabilities: ['session', 'commands', 'automation'],
     metadata: {
       product: 'goodvibes-agent',
       surfaceRoot: GOODVIBES_AGENT_SURFACE_ROOT,
@@ -176,7 +196,6 @@ export async function initializeBootstrapCore(
     hookDispatcher,
     hookWorkbench,
     memoryStore,
-    panelManager,
     routeBindings,
     sessionBroker: sharedSessionBroker,
     surfaceRegistry,
@@ -215,13 +234,7 @@ export async function initializeBootstrapCore(
     getControlPlaneRecentEvents,
   });
 
-  const conversation = new ConversationManager(() => {
-    const width = getTerminalSize(stdout).width;
-    if (panelManager.isVisible() && panelManager.getAllOpen().length > 0) {
-      return Math.max(1, panelManager.getLeftWidth(width) - 1);
-    }
-    return width;
-  });
+  const conversation = new ConversationManager(() => getTerminalSize(stdout).width);
   conversation.setConfigManager(configManager);
   getConversationTitle = () => conversation.title;
 
@@ -321,6 +334,11 @@ export async function initializeBootstrapCore(
   });
 
   const bootstrapUnsubs: Array<() => void> = [];
+  // D5 fix: stop the heartbeat watcher on shutdown so the setInterval is cleared.
+  // Registered here (after declaration) rather than inside the watcher block above.
+  if (configManager.get('watchers.enabled')) {
+    bootstrapUnsubs.push(() => watcherRegistry.stopWatcher('runtime-heartbeat'));
+  }
   await memoryStore.init();
   bootstrapUnsubs.push(() => {
     void memoryStore.save();
@@ -420,8 +438,11 @@ export async function initializeBootstrapCore(
 
   const webhookUrls = (configManager.getCategory('notifications') as { webhookUrls?: string[] }).webhookUrls ?? [];
   if (webhookUrls.length > 0) {
-    const webhookNotifier = WebhookNotifier.fromConfig(webhookUrls);
-    webhookNotifier.attachToRuntimeBus(runtimeBus);
+    // Reuse the services.webhookNotifier instance (constructed no-arg in services.ts).
+    // Configure it with the resolved URL list via setUrls(), attach it to the runtime
+    // bus so it receives SESSION_NOTIFICATION events, and register detach() in
+    // runtimeUnsubs so the bus subscription is cleaned up on shutdown.
+    registerWebhookNotifier(services.webhookNotifier, webhookUrls, runtimeBus, runtimeUnsubs);
     domainDispatch.syncIntegration({
       id: 'webhooks',
       displayName: 'Webhooks',

package/src/runtime/bootstrap-hook-bridge.ts

@@ -52,9 +52,11 @@ export function createResumeSessionHandler(options: ResumeSessionOptions): (sess
       options.writeLastSessionPointer(sessionId);
       void options.sharedSessionBroker.reopenSession(sessionId).catch((err) => { logger.debug('session broker reopen session failed', { err }); });
       options.conversation.log(`Resumed session: ${sessionId}`, { fg: '135' });
-      const ignoredPanels = meta.returnContext?.openPanels?.slice(0, 4) ?? [];
       const returnContextMode = getReturnContextMode(options.configManager);
       if (returnContextMode !== 'off' && meta.returnContext) {
+        // N1 fix: compute ignoredPanels inside the guard so it is only evaluated
+        // when returnContext is present and the mode is not 'off'.
+        const ignoredPanels = meta.returnContext.openPanels?.slice(0, 4) ?? [];
         for (const line of formatReturnContextForDisplay(meta.returnContext)) {
           if (line.startsWith('Open panels:')) continue;
           options.conversation.log(`Resume: ${line}`, { fg: '244' });

package/src/runtime/bootstrap-shell.ts

@@ -13,8 +13,7 @@ import { CommandRegistry } from '../input/command-registry.ts';
 import { registerBuiltinCommands } from '../input/commands.ts';
 import { InputHistory } from '../input/input-history.ts';
 import type { PermissionRequestHandler } from '@pellux/goodvibes-sdk/platform/permissions';
-import { registerBuiltinPanels } from '../panels/builtin-panels.ts';
-import { SystemMessagesPanel } from '../panels/system-messages-panel.ts';
+import { ActivityFeed } from '../core/activity-feed.ts';
 import { createSystemMessageRouter, type SystemMessageRouter } from '../core/system-message-router.ts';
 import { getConfigSnapshot } from '../config/index.ts';
 import { createBootstrapCommandContext } from './bootstrap-command-context.ts';
@@ -24,7 +23,6 @@ import { loadBootstrapSystemPrompt } from '@/runtime/index.ts';
 import { createShellPlanRuntime, createShellRemoteCommandService } from '@/runtime/index.ts';
 import { createRuntimeFoundationClients } from '@/runtime/index.ts';
 import type { ControlPlaneRecentEvent } from '@pellux/goodvibes-sdk/platform/control-plane';
-import type { BuiltinPanelDeps } from '../panels/builtin/shared.ts';
 import type { ToolRegistry } from '@pellux/goodvibes-sdk/platform/tools';
 import type { ForensicsRegistry } from '@/runtime/index.ts';
 import type { PolicyRuntimeState } from '@/runtime/index.ts';
@@ -125,7 +123,7 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
     completeModelSelectionSideEffect,
   } = options;
 
-  const systemMessagesPanel = new SystemMessagesPanel(configManager, services.componentHealthMonitor);
+  const activityFeed = new ActivityFeed();
   const resumeSession = createResumeSessionHandler({
     runtimeBus,
     runtime,
@@ -141,54 +139,10 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
   });
 
   let commandContextRef: CommandContext | null = null;
-  registerBuiltinPanels(services.panelManager, {
-    configManager,
-    getOrchestratorUsage: () => orchestrator.usage as { input: number; output: number; cacheRead: number; cacheWrite: number; model?: string },
-    toolRegistry,
-    providerRegistry: services.providerRegistry,
-    contextWindow: services.providerRegistry.getContextWindowForModel(services.providerRegistry.getCurrentModel()),
-    orchestrator,
-    getCtxWindow: () => services.providerRegistry.getContextWindowForModel(services.providerRegistry.getCurrentModel()),
-    resumeSession,
-    requestRender,
-    submitPlanningAnswer: (answer) => {
-      submitPlanningAnswerWithShellFallback(answer, {
-        getSubmitInput: () => commandContextRef?.submitInput,
-        addSystemMessage: (message) => conversation.addSystemMessage(message),
-        requestRender,
-      });
-    },
-    dismissPlanning: () => {
-      services.panelManager.close('project-planning');
-      commandContextRef?.focusPrompt?.();
-      requestRender();
-    },
-    forensicsRegistry,
-    policyRuntimeState,
-    approvalBroker: services.approvalBroker,
-    sessionBroker: services.sessionBroker,
-    automationManager: services.automationManager,
-    getControlPlaneRecentEvents,
-    tokenAuditor: services.tokenAuditor,
-    componentHealthMonitor: services.componentHealthMonitor,
-    worktreeRegistry: services.worktreeRegistry,
-    sandboxSessionRegistry: services.sandboxSessionRegistry,
-    systemMessagesPanel,
-    memoryRegistry: services.memoryRegistry,
-    agentKnowledgeService: services.agentKnowledgeService,
-    uiServices,
-    pluginManager: services.pluginManager,
-    hookDispatcher: services.hookDispatcher,
-    hookActivityTracker: services.hookActivityTracker,
-    hookWorkbench: services.hookWorkbench,
-    mcpRegistry: services.mcpRegistry,
-    connectedHostTokenDir: join(services.homeDirectory, '.goodvibes', 'daemon'),
-  });
-  services.panelManager.prewarmRegistered();
 
   const systemMessageRouter = createSystemMessageRouter(
     conversation,
-    systemMessagesPanel,
+    activityFeed,
     (kind) => {
       const ui = getConfigSnapshot(configManager).ui;
       if (kind === 'wrfc') return ui.wrfcMessages;
@@ -287,7 +241,6 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
     mcpApi,
     opsApi,
     directTransport,
-    panelManager: services.panelManager,
     worktreeRegistry: services.worktreeRegistry,
     sandboxSessionRegistry: services.sandboxSessionRegistry,
     loadSystemPrompt: () => loadBootstrapSystemPrompt(configManager),

package/src/runtime/bootstrap.ts

@@ -69,10 +69,10 @@ const GOODVIBES_AGENT_OPERATOR_POLICY = [
   '- Act as one user-facing autonomous assistant. Prefer the lowest-friction safe path that completes the user outcome; do not expose internal package or host ownership unless it is needed for diagnosis, setup, or safety.',
   '- Work serially in the main conversation by default for ordinary chat, research, planning, setup, local context, and short tool work. Use visible schedules, work plans, operator actions, or delegated/remote routes for durable or long-running autonomy.',
   '- Connected-host lifecycle is not ambient. If the host is unavailable, explain the shortest user action to make the assistant reachable; do not pretend a missing host route worked.',
-  '- Read tools: `route action:"plan|status"`, `schedule action:"list"`, `setup action:"status|item|repair|checkpoint"`, `settings action:"list|get"`, `vibe action:"status|show"`, `context action:"status|files|file|prompt|receipts|receipt"`, `memory action:"status|provider|curator|candidate|list|search|get"`, `channels action:"status|channel|setup|triage|deliveries"`, `models action:"status|route|local|providers|provider"`, `personal_ops action:"briefing|status|queue|intake|lane"`, `autonomy action:"intake|queue|item|status"`, `delegation action:"status|routes|route"`, `execution action:"status|route|history|record|processes|process_capabilities|process|recovery"`, `security action:"status|finding|explain"`, `support action:"status|bundle"`, `sessions action:"list|get"`, `audit action:"readiness|item|evidence|artifact"`, `computer action:"status|plan|control|browser|setup|mcp"`, `research action:"plan|search|runner|runs|run|sources|source|bundle|reports|report_artifact"`, `device action:"status|capability|browser|control|voice|provider"`, `workspace action:"status|actions|action|surfaces|surface|panels|panel|shortcuts|keybindings|keybinding|commands|command|cli_commands|cli_command"`, `host action:"status|capabilities|capability|services|service|methods|method"`, `import_goodvibes_settings action:"preview"`, and `agent_operator_briefing` for connected work/approvals/automation/schedules, `agent_knowledge` for isolated Agent Knowledge, and `agent_harness` for harness catalogs/status/capability discovery. Use `agent_artifacts` for saved artifact list/preview/export/package/archive; write modes are confirmation-gated.',
-  '- Harness access: use `settings action:"set|reset|import"` and `workspace action:"run|run_command|open|open_panel|run_keybinding|set_keybinding|reset_keybinding"` to use the same surfaces the user can use; lower-level `agent_harness` modes remain for detail inspection and compatibility.',
+  '- Read tools: `route action:"plan|status"`, `schedule action:"list"`, `setup action:"status|item|repair|checkpoint"`, `settings action:"list|get"`, `vibe action:"status|show"`, `context action:"status|files|file|prompt|receipts|receipt"`, `memory action:"status|provider|curator|candidate|list|search|get"`, `channels action:"status|channel|setup|triage|deliveries"`, `models action:"status|route|local|providers|provider"`, `personal_ops action:"briefing|status|queue|intake|lane"`, `autonomy action:"intake|queue|item|status"`, `delegation action:"status|routes|route"`, `execution action:"status|route|history|record|processes|process_capabilities|process|recovery"`, `security action:"status|finding|explain"`, `support action:"status|bundle"`, `sessions action:"list|get"`, `audit action:"readiness|item|evidence|artifact"`, `computer action:"status|plan|control|browser|setup|mcp"`, `research action:"plan|search|runner|runs|run|sources|source|bundle|reports|report_artifact"`, `device action:"status|capability|browser|control|voice|provider"`, `workspace action:"status|actions|action|surfaces|surface|shortcuts|keybindings|keybinding|commands|command|cli_commands|cli_command"`, `host action:"status|capabilities|capability|services|service|methods|method"`, `import_goodvibes_settings action:"preview"`, and `agent_operator_briefing` for connected work/approvals/automation/schedules, `agent_knowledge` for isolated Agent Knowledge, and `agent_harness` for harness catalogs/status/capability discovery. Use `agent_artifacts` for saved artifact list/preview/export/package/archive; write modes are confirmation-gated.',
+  '- Harness access: use `settings action:"set|reset|import"` and `workspace action:"run|run_command|open|run_keybinding|set_keybinding|reset_keybinding"` to use the same surfaces the user can use; lower-level `agent_harness` modes remain for detail inspection and compatibility.',
   '- State tools: `agent_work_plan` for visible local work items; `agent_local_registry` for Agent-local notes, memory, personas, skills, bundles, and routines; `agent_learning_consolidation` for confirmed duplicate cleanup phases; `agent_documents` for versioned Agent document drafts. Keep records non-secret, sourced, and reviewable.',
-  '- Confirmed tools: use `schedule`, `setup action:"save_checkpoint|clear_checkpoint|token|smoke|finish|import_settings"`, `vibe action:"init|import_persona"`, `models action:"smoke"` for local model server checks, `personal_ops action:"read"` for one live read-only inbox/calendar connector operation, `research action:"create_run|start_run|checkpoint|pause|resume|cancel|complete|fail|delete_run|add_source|review_source|reject_source|use_source|delete_source|report"`, `computer action:"open_browser"`, `device action:"open_browser|open_tts_provider|open_tts_voice"`, `workspace action:"run|run_command|open|open_panel|run_keybinding|set_keybinding|reset_keybinding"`, `import_goodvibes_settings`, `agent_operator_action`, `agent_artifacts` export/package/archive, `agent_documents`, `agent_review_packet_presets` save/refresh, `agent_review_packet_share`, `agent_knowledge_ingest`, `agent_learning_consolidation`, `agent_media_generate`, `agent_model_compare`, `agent_research_runs`, `agent_research_sources`, `agent_research_report`, `agent_notify`, `agent_channel_send`, `agent_autonomy_schedule`, `agent_reminder_schedule`, and `agent_schedule_edit` only for explicit user requests with confirm:true and explicitUserRequest.',
+  '- Confirmed tools: use `schedule`, `setup action:"save_checkpoint|clear_checkpoint|token|smoke|finish|import_settings"`, `vibe action:"init|import_persona"`, `models action:"smoke"` for local model server checks, `personal_ops action:"read"` for one live read-only inbox/calendar connector operation, `research action:"create_run|start_run|checkpoint|pause|resume|cancel|complete|fail|delete_run|add_source|review_source|reject_source|use_source|delete_source|report"`, `computer action:"open_browser"`, `device action:"open_browser|open_tts_provider|open_tts_voice"`, `workspace action:"run|run_command|open|run_keybinding|set_keybinding|reset_keybinding"`, `import_goodvibes_settings`, `agent_operator_action`, `agent_artifacts` export/package/archive, `agent_documents`, `agent_review_packet_presets` save/refresh, `agent_review_packet_share`, `agent_knowledge_ingest`, `agent_learning_consolidation`, `agent_media_generate`, `agent_model_compare`, `agent_research_runs`, `agent_research_sources`, `agent_research_report`, `agent_notify`, `agent_channel_send`, `agent_autonomy_schedule`, `agent_reminder_schedule`, and `agent_schedule_edit` only for explicit user requests with confirm:true and explicitUserRequest.',
   '- Agent Knowledge must use only `/api/goodvibes-agent/knowledge/*` and fail closed. Do not use default knowledge or non-Agent knowledge spaces.',
   '- External delivery, media generation, reminders, settings writes, slash-command mirrors, workspace action mirrors, and destructive local changes require explicit user intent and the owning tool/command confirmation.',
   '- Autonomous work must be visible, reviewable, and cancellable. Never create silent hidden jobs; when work should continue later, create or use an explicit schedule, reminder, work-plan item, operator action, or delegated/remote task route.',
@@ -237,7 +237,6 @@ export async function bootstrapRuntime(
   const {
     automationManager,
     hookDispatcher,
-    panelManager,
     pluginManager,
   } = services;
 

package/src/runtime/context.ts

@@ -19,7 +19,7 @@ import type { FeatureFlagManager } from '@/runtime/index.ts';
 import type { MutableRuntimeState } from '@/runtime/index.ts';
 import type { SessionSnapshot } from '@/runtime/index.ts';
 import type { RuntimeServices } from './services.ts';
-import type { ComponentHealthMonitor } from './perf/panel-health-monitor.ts';
+import type { ComponentHealthMonitor } from './perf/component-health.ts';
 import type { WorktreeRegistry } from '@/runtime/index.ts';
 import type { SandboxSessionRegistry } from '@/runtime/index.ts';
 

package/src/runtime/diagnostics/panels/index.ts

@@ -19,6 +19,5 @@ export { TransportPanel } from '@/runtime/index.ts';
 export type { TransportPanelSnapshot } from '@/runtime/index.ts';
 export { OpsPanel } from './ops.ts';
 export type { OpsAuditEntry } from './ops.ts';
-export { PanelResourcesPanel } from './panel-resources.ts';
 export { SecurityPanel } from '@/runtime/index.ts';
 export type { SecurityPanelSnapshot } from '@/runtime/index.ts';

package/src/runtime/diagnostics/panels/policy.ts

@@ -155,7 +155,7 @@ export class PolicyDiagnosticsPanel {
    */
   public subscribe(callback: () => void): () => void {
     this._subscribers.add(callback);
-    return () => this._subscribers.delete(callback);
+    return () => { this._subscribers.delete(callback); };
   }
 
   /**

package/src/runtime/execution-ledger.ts

@@ -98,6 +98,21 @@ function stringArg(args: Record<string, unknown>, keys: readonly string[]): stri
   return undefined;
 }
 
+/**
+ * Classify a tool call into a route kind for display and filtering.
+ *
+ * Keyword precedence (first match wins):
+ *   1. browser   — browser/desktop/screenshot keywords
+ *   2. delegation — delegate/agent keywords
+ *   3. shell     — exec/shell/bash keywords OR args.command is a string
+ *   4. write     — write/edit/patch/delete keywords
+ *   5. network   — fetch/web/http/url keywords
+ *   6. read      — read/find/inspect/grep/search keywords
+ *   7. other     — fallback for unrecognized tool names
+ *
+ * N2: precedence is intentional — shell beats write/read so that bash-exec tools
+ * that also match 'exec' are not misclassified as filesystem writes.
+ */
 function routeKindForTool(tool: string, args: Record<string, unknown>): AgentExecutionRouteKind {
   const name = tool.toLowerCase();
   if (name.includes('browser') || name.includes('desktop') || name.includes('screenshot')) return 'browser';
@@ -162,7 +177,7 @@ export class AgentExecutionLedger {
 
   public subscribe(callback: () => void): () => void {
     this.subscribers.add(callback);
-    return () => this.subscribers.delete(callback);
+    return () => { this.subscribers.delete(callback); };
   }
 
   public dispose(): void {

package/src/runtime/index.ts

@@ -325,6 +325,11 @@ export const getDistributedNodeHostContract = operations.getDistributedNodeHostC
 export const CURRENT_PROTOCOL_VERSION = operations.CURRENT_PROTOCOL_VERSION;
 export const VersionMismatchError = operations.VersionMismatchError;
 export const negotiateProtocolVersion = operations.negotiateProtocolVersion;
+// Protocol version types — re-exported for transport compatibility tests.
+// ProtocolVersion, VersionNegotiationResult, NegotiatedProtocol are available
+// via operations namespace (operations.ProtocolVersion etc.) but cannot be
+// re-exported here without a registered subpath. Tests that need these types
+// should import from the operations namespace types directly.
 export const createTaskManager = operations.createTaskManager;
 export const PhasedToolExecutor = operations.PhasedToolExecutor;
 export const budgetPhase = operations.budgetPhase;
@@ -614,7 +619,7 @@ export type BundleProvenance = Security.BundleProvenance;
 export type DecisionReason = Security.DecisionReason;
 export type DivergenceReport = Security.DivergenceReport;
 export type EnforceGateResult = Security.EnforceGateResult;
-export type SignedPolicyBundle = Security.SignedPolicyBundle;
+export type SignedPolicyBundle<T = unknown> = Security.SignedPolicyBundle<T>;
 
 export interface InspectableDomain {
   readonly name: string;

package/src/runtime/onboarding/index.ts

@@ -5,3 +5,4 @@ export * from './apply.ts';
 export * from './verify.ts';
 export * from './markers.ts';
 export * from './state.ts';
+export * from './onboarding-state.ts';

package/src/runtime/onboarding/onboarding-state.ts

@@ -0,0 +1,200 @@
+import type { SetupPlanItem, SetupPlanStatus } from '../../tools/agent-harness-setup-posture-types.ts';
+import type { OnboardingCheckMarkerState } from './types.ts';
+
+/**
+ * Maps each setup plan item id to the Agent Workspace category that resolves it.
+ * This is the single sequencing table — every onboarding surface reads from here.
+ */
+const PLAN_ITEM_CATEGORY_MAP: Readonly<Record<string, string>> = {
+  'connected-host-readiness': 'setup',
+  'connected-host-auth': 'setup',
+  'goodvibes-settings-import': 'setup',
+  'provider-access': 'account-model',
+  'install-smoke': 'setup',
+  'local-model-readiness': 'account-model',
+  'agent-knowledge': 'setup',
+  'vibe-personality': 'assistant-behavior',
+  'local-behavior': 'onboarding-context',
+  'communication-channels': 'onboarding-channels',
+  'automation-review': 'tools-permissions',
+  'browser-desktop-control': 'tools-permissions',
+  'sudo-execution-posture': 'tools-permissions',
+  'build-delegation': 'tools-permissions',
+  'finish-onboarding': 'setup',
+};
+
+const DEFAULT_CATEGORY_ID = 'setup';
+
+function planItemCategoryId(planItemId: string): string {
+  return PLAN_ITEM_CATEGORY_MAP[planItemId] ?? DEFAULT_CATEGORY_ID;
+}
+
+export interface OnboardingStep {
+  readonly id: string;
+  readonly label: string;
+  readonly status: SetupPlanStatus;
+  readonly blocksAutonomy: boolean;
+  /** Human-readable hint shown in the UI for the next action. */
+  readonly nextLabel: string;
+  /** Agent Workspace category id that resolves this step. */
+  readonly categoryId: string;
+}
+
+export interface OnboardingRecap {
+  /** Single headline sentence describing overall readiness. */
+  readonly headline: string;
+  /** One line per ready capability plus optional trailing lines. */
+  readonly lines: readonly string[];
+}
+
+export type OnboardingPhase = 'fresh' | 'in-progress' | 'complete';
+
+export interface OnboardingState {
+  /**
+   * Phase derived from markers:
+   * - 'complete'     completion marker present
+   * - 'in-progress'  check marker present but no completion marker
+   * - 'fresh'        neither marker present
+   */
+  readonly phase: OnboardingPhase;
+  /** All setup plan items converted to lightweight steps. */
+  readonly steps: readonly OnboardingStep[];
+  /** First non-ready step that blocks autonomy, or first non-ready step if none, or null. */
+  readonly currentStepId: string | null;
+  /** Human-readable progress, e.g. "2 of 5 ready". */
+  readonly progressLabel: string;
+  /** Steps that are not ready and block autonomy. */
+  readonly blockers: readonly OnboardingStep[];
+  /**
+   * True when a usable model route exists:
+   * the provider-access plan item is 'ready', or local-model-readiness is 'ready'.
+   */
+  readonly readyToChat: boolean;
+  /** Summary shown at the end of onboarding or as a re-entry summary. */
+  readonly recap: OnboardingRecap;
+}
+
+export interface DeriveOnboardingStateContext {
+  /** Fully-built setup plan (from buildSetupPlan). */
+  readonly plan: readonly SetupPlanItem[];
+  /** User-scope check marker (from readOnboardingCheckMarker). */
+  readonly checkMarker: OnboardingCheckMarkerState;
+  /** User-scope completion marker (from readOnboardingCompletionMarker). */
+  readonly completionMarker: OnboardingCheckMarkerState;
+}
+
+function derivePhase(
+  checkMarker: OnboardingCheckMarkerState,
+  completionMarker: OnboardingCheckMarkerState,
+): OnboardingPhase {
+  if (completionMarker.exists && completionMarker.payload !== null) return 'complete';
+  if (checkMarker.exists) return 'in-progress';
+  return 'fresh';
+}
+
+function planItemToStep(item: SetupPlanItem): OnboardingStep {
+  return {
+    id: item.id,
+    label: item.label,
+    status: item.status,
+    blocksAutonomy: item.blocksAutonomy,
+    nextLabel: item.nextAction,
+    categoryId: planItemCategoryId(item.id),
+  };
+}
+
+function deriveCurrentStepId(steps: readonly OnboardingStep[]): string | null {
+  // Priority: first non-ready blocker, then first non-ready step overall.
+  const firstBlocker = steps.find((s) => s.status !== 'ready' && s.blocksAutonomy);
+  if (firstBlocker) return firstBlocker.id;
+  const firstNonReady = steps.find((s) => s.status !== 'ready');
+  return firstNonReady?.id ?? null;
+}
+
+function deriveProgressLabel(plan: readonly SetupPlanItem[]): string {
+  const ready = plan.filter((item) => item.status === 'ready').length;
+  const total = plan.length;
+  return `${ready} of ${total} ready`;
+}
+
+function deriveReadyToChat(plan: readonly SetupPlanItem[]): boolean {
+  const providerItem = plan.find((item) => item.id === 'provider-access');
+  if (providerItem?.status === 'ready') return true;
+  const localModelItem = plan.find((item) => item.id === 'local-model-readiness');
+  return localModelItem?.status === 'ready';
+}
+
+function deriveRecap(
+  phase: OnboardingPhase,
+  steps: readonly OnboardingStep[],
+  plan: readonly SetupPlanItem[],
+): OnboardingRecap {
+  const readySteps = steps.filter((s) => s.status === 'ready');
+  const optionalCount = plan.filter(
+    (item) => item.status !== 'ready' && !item.blocksAutonomy,
+  ).length;
+
+  const headline =
+    phase === 'complete'
+      ? "You're set up. Here's what you can do now."
+      : phase === 'in-progress'
+        ? "Setup is in progress. Here's what's ready so far."
+        : 'Getting started — a few things to set up before the full experience.';
+
+  const lines: string[] = readySteps.map((s) => s.label);
+
+  // Capability examples: show what the user can actually do right now.
+  // Always-safe examples (research/draft/summarize) are shown whenever a model route is ready.
+  // Channel-dependent examples (reminders/messaging) only appear when that lane is configured.
+  const modelReady = deriveReadyToChat(plan);
+  if (modelReady && phase !== 'fresh') {
+    const channelsReady = plan.some(
+      (item) => item.id === 'communication-channels' && item.status === 'ready',
+    );
+    const capabilityLines: string[] = [
+      'Ask me to research a topic, draft an email, summarize a file, or compare models.',
+    ];
+    if (channelsReady) {
+      capabilityLines.push('You can also set reminders and send messages through your connected channels.');
+    }
+    lines.push(...capabilityLines);
+  }
+
+  if (optionalCount > 0 && phase !== 'fresh') {
+    lines.push(`Still optional: ${optionalCount} item${optionalCount === 1 ? '' : 's'} available`);
+  }
+
+  if (phase !== 'fresh') {
+    lines.push('Try: "What can you help me with today?"');
+  }
+
+  return { headline, lines };
+}
+
+/**
+ * Pure selector: derives the full OnboardingState from an already-built plan and
+ * the current marker files. No side effects, no Date.now() calls.
+ */
+export function deriveOnboardingState(
+  context: DeriveOnboardingStateContext,
+): OnboardingState {
+  const { plan, checkMarker, completionMarker } = context;
+
+  const phase = derivePhase(checkMarker, completionMarker);
+  const steps = plan.map(planItemToStep);
+  const currentStepId = deriveCurrentStepId(steps);
+  const progressLabel = deriveProgressLabel(plan);
+  const blockers = steps.filter((s) => s.status !== 'ready' && s.blocksAutonomy);
+  const readyToChat = deriveReadyToChat(plan);
+  const recap = deriveRecap(phase, steps, plan);
+
+  return {
+    phase,
+    steps,
+    currentStepId,
+    progressLabel,
+    blockers,
+    readyToChat,
+    recap,
+  };
+}