@pellux/goodvibes-agent 1.5.2 → 1.5.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pellux/goodvibes-agent",
-  "version": "1.5.2",
+  "version": "1.5.3",
   "private": false,
   "description": "GoodVibes personal operator assistant TUI with a proactive Agent product brain, isolated Agent Knowledge, local profiles, routines, skills, personas, and explicit build delegation.",
   "type": "module",
@@ -23,7 +23,6 @@
     "README.md",
     "CHANGELOG.md",
     "docs/*.md",
-    "!docs/competitive-parity-plan.md",
     "release/release-notes.md",
     "release/performance-snapshot.json",
     "release/release-readiness.json",
@@ -90,7 +89,7 @@
   },
   "dependencies": {},
   "devDependencies": {
-    "@pellux/goodvibes-sdk": "0.33.38",
+    "@pellux/goodvibes-sdk": "0.34.0",
     "sql.js": "^1.14.1",
     "sqlite-vec": "^0.1.9",
     "zustand": "^5.0.12",

package/release/release-readiness.json

@@ -152,7 +152,7 @@
       "quality": {
         "capabilityCoverage": "Covers safe project/global VIBE.md personality discovery, direct vibe status/show/init/import-persona model routes, VIBE init/import preview confirmationRoutes, safe project context discovery for .hermes.md, HERMES.md, AGENTS.md, CLAUDE.md, HERMES_HOME/SOUL.md, .cursorrules, and .cursor/rules/*.mdc files, visible Local Context and Personas workspace health counts for VIBE.md/project context files, Local Context prompt receipt outcome timeline with exact drill-in and outcome filters, status/init/show/import-persona flows, setup and learning-curator health cards for blocked/truncated VIBE.md files, opt-in VIBE.md profile starter export/import/application, durable local memory, memory posture, vector/embedding health, supervised Knowledge semantic refinement task inspection, confirmed bounded semantic refinement runs, scratch notes, personas, profiles, search/review/stale/delete flows, duplicate-consolidation preview/merge/stale/delete/rollback/recreate receipts with exact-id post-delete recreate guidance, prompt injection gates for VIBE.md, project context files, and reviewed/confident setup-ready behavior, read-only prompt-context inspection plus sanitized prompt-context receipts for applied order/recent receipt ids/exact receipt-turn-outcome filters/selected records/suppressed records/token budget/prompt hash/terminal outcome, score-driven learning prompt plans for prompt-active/suppressed/proposal/consolidation queues, and promotion without knowledge contamination.",
         "userAccess": "The user can manage VIBE.md, prompt context inspection with a compact Local Context receipt outcome timeline plus exact latest receipt and outcome filter routes, project context inspection, and records through Agent workspace Local Context, Memory, Notes, Personas, Profiles, /vibe, /memory, /personas, /agent-profile starter flows with --include-vibe, and the Memory posture row.",
-        "modelAccess": "Runtime prompt context applies secret-scanned VIBE.md files, secret-scanned project context files, and only reviewed memory at the durable confidence threshold plus reviewed setup-ready skills, routines, bundles, and personas while listing suppressed records as review/setup work; vibe action:\"status|show|init|import_persona\" exposes the direct model route for read-only VIBE.md inspection, confirmed VIBE.md creation, and confirmed VIBE.md-to-persona import without default Knowledge writes, and unconfirmed init/import previews expose exact model and CLI confirmationRoutes; runtime prompt builds write durable sanitized prompt-context receipts with ids, turn/source/model/provider, selected and suppressed record refs, segment counts, prompt hash, size, timestamp, and terminal outcome/status/stopReason/bounded error-or-cancel detail without storing raw prompt or response text; context action:\"prompt|receipts|receipt\" exposes applied prompt composition order, recent receipt ids, exact receiptId/turnId/outcomeStatus filters, turn outcomes, selected VIBE.md/project context/memory/routine/skill/persona records, suppressed records, bounded prompt previews when includeParameters is true, and approximate token budget without mutation; Agent workspace Local Context exposes VIBE.md/project context health counts, compact prompt receipt outcome timeline counts/latest rows/detail/exact latest receipt route/outcome filter routes, and action route hints for Prompt context, Inspect VIBE.md, Inspect project context, and Inspect one context file; context action:\"files|file\" exposes loaded, truncated, and blocked .hermes.md/HERMES.md/AGENTS.md/CLAUDE.md/SOUL.md/Cursor context files with target-aware subdirectory lookup and bounded bodies; lower-level agent_harness mode:\"project_context\", mode:\"project_context_file\", and mode:\"prompt_context\" remain available for compatibility/detail coverage; /vibe exposes user-facing status/init/show/import-persona routes and Agent workspace Personas exposes VIBE.md status/init/import commands; /agent-profile and profile CLI starter flows expose vibeIncluded template summaries and opt-in --include-vibe export/from-discovered/profile creation; agent_local_registry exposes record lookup/search/get/create/update/review/use/delete for memory, notes, personas, skills, skill bundles, and routines; memory action:\"status|provider|list|search|get\" exposes local memory counts, direct memory record lookup/search, prompt-active recall, vector stats, embedding-provider doctor warnings, provider inspection, route-planner preference for external provider/backend/sync/import-export setup posture, and external-memory setup contract maps for Honcho, OpenViking, Mem0, Hindsight, Holographic, RetainDB, ByteRover, Supermemory, and daemon-published similar backends with provider-specific next-route packets, certified schema/version/publication/publisher/provenance checks, setup/status/read/write/sync/forget checklist items, required receipt fields, certified durable receipt evidence, and sanitized certified live read-model records when the SDK/daemon publishes concrete setup/status/read/write/sync/forget records for Agent to consume; memory action:\"refinement|run_refinement\" exposes the SDK-backed Agent Knowledge semantic self-improvement task ledger and confirmed bounded KnowledgeService.runRefinement route with space/source/refinement-target scoping, task/source follow-up routes, and no hidden prompt-memory writes; lower-level agent_harness mode:\"memory_posture\", mode:\"memory_provider\", mode:\"memory_refinement\", and mode:\"run_memory_refinement\" remain available for compatibility/detail coverage; agent_harness mode:\"setup_posture\" exposes VIBE.md personality health counts and handoff routes; memory action:\"curator|candidate\" exposes a score-driven prompt plan with prompt-active records, suppressed review/setup/low-confidence/personality/consolidation counts, proposal queues, consolidation queues, ordering rules, and exact review routes plus ranked local review, stale, setup, low-confidence, VIBE.md blocked/truncated health, duplicate-consolidation candidates with visible diffs plus update/stale/delete/rollback/recreate routes, an ordered duplicate-consolidation batch review plan, first-class agent_learning_consolidation preview/merge/stale/delete/rollback/recreate phase routes with durable receipts, delete-after-stale enforcement, deleteRecovery payloads, and exact-id recreate refusal when current records would collide, reviewed-note memory/behavior proposal, completed-work memory/behavior proposal, completed-research memory/behavior proposal, saved-session memory/behavior proposal, and promotion candidates with existing safe routes; lower-level agent_harness mode:\"learning_curator\" and mode:\"learning_candidate\" remain available for compatibility/detail coverage; route planning prefers personal_ops action:\"briefing\" for daily/calendar briefings, action:\"queue\" for saved review queues, action:\"intake\" for fresh provider-read planning, and action:\"lane\" for connector setup posture before live provider reads or effects; personal_ops action:\"briefing|status|queue|intake|lane|read\" exposes the preferred direct route for a read-only daily Personal Ops briefing plan, read-only saved inbox/calendar review queue, request-to-route Personal Ops planning, lane inspection, and one confirmed read-only inbox/calendar operation, while lower-level modes mode:\"personal_ops_briefing\", mode:\"personal_ops_queue\", mode:\"personal_ops_intake\", mode:\"personal_ops\", mode:\"personal_ops_lane\", and mode:\"run_personal_ops_read\" remain available for harness inspection; Personal Ops surfaces Agent-owned note, routine, schedule-receipt, delivery, task, and reminder live records plus honest email/calendar connector readiness, classified MCP read/write tool hints, schema-derived inbox/calendar operation records with required fields/sample inputs/schema routes/confirmation flags/fresh-read routes, inbox triage/draft and calendar agenda/conflict workflow cards with prerequisites/inspect routes/send-edit boundaries, ordered connector-read/local-compose/setup-repair/confirmed-effect execution plans, confirmed read-only MCP inbox/calendar execution with required-field checks, bounded redacted output, normalized review cards, structured next-route packets for lane/queue inspection, confirmed refresh, saved artifact reopen, local draft/reminder work, and confirmed-effect boundaries, optional saved redacted review-card artifacts, saved review artifacts resurfaced as redacted inbox thread/calendar event queue records, certified provider-effect receipts for inbox/calendar/task/reminder outcomes, fresh daemon/SDK provider-backed inbox/calendar/task/reminder queue records with durable ids, labels, redacted snippets/notes, agenda windows, conflict signals, due times, cadence, delivery targets, source paths, freshness status, schema/version/publication/publisher/provenance/receipt evidence, read-only inspect routes, and confirmed follow-up boundaries only for published provider routes, and a unified read-only queue view with artifact inspect routes, freshness status, confirmed refresh routes when a matching read connector is ready, local draft/reminder follow-up routes, certified provider-effect boundaries, task workflow cards for visible work-plan review and connected-host task review, reminder workflow cards for confirmed reminders and connected schedule review, and matching MCP connector setup routes; agent_harness exposes confirmed workspace editor routes when the user starts from visible workspace forms.",
+        "modelAccess": "Runtime prompt context applies secret-scanned VIBE.md files, secret-scanned project context files, and only reviewed memory at the durable confidence threshold plus reviewed setup-ready skills, routines, bundles, and personas while listing suppressed records as review/setup work; vibe action:\"status|show|init|import_persona\" exposes the direct model route for read-only VIBE.md inspection, confirmed VIBE.md creation, and confirmed VIBE.md-to-persona import without default Knowledge writes, and unconfirmed init/import previews expose exact model and CLI confirmationRoutes; runtime prompt builds write durable sanitized prompt-context receipts with ids, turn/source/model/provider, selected and suppressed record refs, segment counts, prompt hash, size, timestamp, and terminal outcome/status/stopReason/bounded error-or-cancel detail without storing raw prompt or response text; context action:\"prompt|receipts|receipt\" exposes applied prompt composition order, recent receipt ids, exact receiptId/turnId/outcomeStatus filters, turn outcomes, selected VIBE.md/project context/memory/routine/skill/persona records, suppressed records, bounded prompt previews when includeParameters is true, and approximate token budget without mutation; Agent workspace Local Context exposes VIBE.md/project context health counts, compact prompt receipt outcome timeline counts/latest rows/detail/exact latest receipt route/outcome filter routes, and action route hints for Prompt context, Inspect VIBE.md, Inspect project context, and Inspect one context file; context action:\"files|file\" exposes loaded, truncated, and blocked .hermes.md/HERMES.md/AGENTS.md/CLAUDE.md/SOUL.md/Cursor context files with target-aware subdirectory lookup and bounded bodies; lower-level agent_harness mode:\"project_context\", mode:\"project_context_file\", and mode:\"prompt_context\" remain available for compatibility/detail coverage; /vibe exposes user-facing status/init/show/import-persona routes and Agent workspace Personas exposes VIBE.md status/init/import commands; /agent-profile and profile CLI starter flows expose vibeIncluded template summaries and opt-in --include-vibe export/from-discovered/profile creation; agent_local_registry exposes record lookup/search/get/create/update/review/use/delete for memory, notes, personas, skills, skill bundles, and routines; memory action:\"status|provider|list|search|get\" exposes local memory counts, direct memory record lookup/search, prompt-active recall, vector stats, embedding-provider doctor warnings, provider inspection, route-planner preference for external provider/backend/sync/import-export setup posture, and external-memory setup contract maps for Honcho, OpenViking, Mem0, Hindsight, Holographic, RetainDB, ByteRover, Supermemory, and daemon-published similar backends with provider-specific next-route packets, certified schema/version/publication/publisher/provenance checks, setup/status/read/write/sync/forget checklist items, required receipt fields, certified durable receipt evidence, and sanitized certified live read-model records when the SDK/daemon publishes concrete setup/status/read/write/sync/forget records for Agent to consume; memory action:\"refinement|run_refinement\" exposes the SDK-backed Agent Knowledge semantic self-improvement task ledger and confirmed bounded KnowledgeService.runRefinement route with space/source/refinement-target scoping, task/source follow-up routes, and no hidden prompt-memory writes; lower-level agent_harness mode:\"memory_posture\", mode:\"memory_provider\", mode:\"memory_refinement\", and mode:\"run_memory_refinement\" remain available for compatibility/detail coverage; agent_harness mode:\"setup_posture\" exposes VIBE.md personality health counts and handoff routes; memory action:\"curator|candidate\" exposes a score-driven prompt plan with prompt-active records, suppressed review/setup/low-confidence/personality/consolidation counts, proposal queues, consolidation queues, ordering rules, and exact review routes plus ranked local review, stale, setup, low-confidence, VIBE.md blocked/truncated health, duplicate-consolidation candidates with visible diffs plus update/stale/delete/rollback/recreate routes, an ordered duplicate-consolidation batch review plan, first-class agent_learning_consolidation preview/merge/stale/delete/rollback/recreate phase routes with durable receipts, delete-after-stale enforcement, deleteRecovery payloads, and exact-id recreate refusal when current records would collide, reviewed-note memory/behavior proposal, completed-work memory/behavior proposal, completed-research memory/behavior proposal, saved-session memory/behavior proposal, and promotion candidates with existing safe routes; lower-level agent_harness mode:\"learning_curator\" and mode:\"learning_candidate\" remain available for compatibility/detail coverage; route planning prefers personal_ops action:\"briefing\" for daily/calendar briefings, action:\"queue\" for saved review queues, action:\"intake\" for fresh provider-read planning, and action:\"lane\" for connector setup posture before live provider reads or effects; personal_ops action:\"briefing|status|queue|intake|lane|read\" exposes the preferred direct route for a read-only daily Personal Ops briefing plan, read-only saved inbox/calendar review queue, request-to-route Personal Ops planning, lane inspection, and one confirmed read-only inbox/calendar operation, while lower-level modes mode:\"personal_ops_briefing\", mode:\"personal_ops_queue\", mode:\"personal_ops_intake\", mode:\"personal_ops\", mode:\"personal_ops_lane\", and mode:\"run_personal_ops_read\" remain available for harness inspection; Personal Ops surfaces Agent-owned note, routine, schedule-receipt, delivery, task, and reminder live records plus honest email/calendar connector readiness, classified MCP read/write tool hints, schema-derived inbox/calendar operation records with required fields/sample inputs/schema routes/confirmation flags/fresh-read routes, inbox triage/draft and calendar agenda/conflict workflow cards with prerequisites/inspect routes/send-edit boundaries, ordered connector-read/local-compose/setup-repair/confirmed-effect execution plans, confirmed read-only MCP inbox/calendar execution with required-field checks, bounded redacted output, normalized review cards, structured next-route packets for lane/queue inspection, confirmed refresh, saved artifact reopen, local draft/reminder work, and confirmed-effect boundaries, optional saved redacted review-card artifacts, saved review artifacts resurfaced as redacted inbox thread/calendar event queue records, certified provider-effect receipts for inbox/calendar/task/reminder outcomes, fresh daemon/SDK provider-backed inbox/calendar/task/reminder queue records with durable ids, labels, redacted snippets/notes, agenda windows, conflict signals, due times, cadence, delivery targets, source paths, freshness status, schema/version/publication/publisher/provenance/receipt evidence, read-only inspect routes, and confirmed follow-up boundaries only for published provider routes, and a unified read-only queue view with artifact inspect routes, freshness status, confirmed refresh routes when a matching read connector is ready, local draft/reminder follow-up routes, certified provider-effect boundaries, task workflow cards for visible work-plan review and connected-host task review, reminder workflow cards for confirmed reminders and connected schedule review, and matching MCP connector setup routes; agent_harness exposes confirmed workspace editor routes when the user starts from visible workspace forms. agent_harness mode:\"learning_auto_promote\" exposes the confirmed autonomous learning auto-promotion pass to the model.",
         "safetyBoundary": "VIBE.md, project context files, and local libraries reject secret-looking content; blocked/truncated personality or context files are surfaced instead of silently applied; --include-vibe refuses blocked VIBE.md files; and destructive or cross-surface promotion actions stay confirmation-gated.",
         "releaseEvidence": "Readiness evidence cites local registries and CLI/runtime commands, with package policy requiring model-visible local action docs."
       }
@@ -167,7 +167,7 @@
       "quality": {
         "capabilityCoverage": "Covers local skills, skill bundles, routines, learned behavior capture, imports, review states, and reusable operator workflows.",
         "userAccess": "The user can manage skills, routines, bundles, and learned behavior through workspace routes and /skills or /routines commands.",
-        "modelAccess": "agent_local_registry and memory action:\"curator|candidate\" expose skill/routine actions, editor schemas, selected-record promotion, prompt-active/suppressed/proposal/consolidation planning, local learning review cards, and routine schedule prefill to the model; lower-level agent_harness mode:\"learning_curator\" and mode:\"learning_candidate\" remain available for compatibility/detail coverage; agent_harness mode:\"propose_skill_drafts\" exposes a confirmed pass that drafts up to 3 skills from recent learning candidates, requiring confirm:true and explicitUserRequest, and returns proposed/skipped counts with skill ids.",
+        "modelAccess": "agent_local_registry and memory action:\"curator|candidate\" expose skill/routine actions, editor schemas, selected-record promotion, prompt-active/suppressed/proposal/consolidation planning, local learning review cards, and routine schedule prefill to the model; lower-level agent_harness mode:\"learning_curator\" and mode:\"learning_candidate\" remain available for compatibility/detail coverage; agent_harness mode:\"propose_skill_drafts\" exposes a confirmed pass that drafts up to 3 skills from recent learning candidates, requiring confirm:true and explicitUserRequest, and returns proposed/skipped counts with skill ids. agent_harness mode:\"learning_auto_promote\" exposes the confirmed autonomous learning auto-promotion pass to the model.",
         "safetyBoundary": "Behavior capture remains local until the user explicitly promotes, exports, schedules, or deletes a reviewed record.",
         "releaseEvidence": "Readiness evidence cites registry and command sources, and release docs describe local behavior library ownership."
       }
@@ -242,7 +242,7 @@
       "quality": {
         "capabilityCoverage": "Covers channel readiness, ordered per-channel setup guide, account posture, setup schema guidance, allowlist policy, live status/doctor checks, read-only channel triage, redacted confirmed-send receipt history, and one-message confirmed delivery across configured channel surfaces.",
         "userAccess": "The user can inspect setup progress, channel readiness, triage blockers/retries/messages/routes, recent redacted send receipts, and send channel messages through Agent Workspace -> Channels, /channels guide, /channels triage, /channels deliveries, and /channels mirrors.",
-        "modelAccess": "Route planning prefers channels action:\"setup\" for channel setup wording, action:\"triage\" for blocker/retry/error wording, action:\"deliveries\" for delivery history wording, and action:\"channel\" or status search for send/notify wording before confirmed external delivery; channels action:\"status|channel|setup|triage|deliveries\" exposes structured readiness, current setup guide step, daemon delivery attempts, visible surface messages, route bindings, redacted receipt history, delivery posture, risk labels, safe config-key names, allowlist/status/doctor routes, and explicit test-send boundary; lower-level agent_harness mode:\"channels\", mode:\"channel\", mode:\"channel_setup_guide\", mode:\"channel_triage\", and mode:\"channel_deliveries\" remain available for compatibility/detail coverage; agent_channel_send exposes the exact confirmed send route and returns the receipt id when the Agent shell path is available.",
+        "modelAccess": "Route planning prefers channels action:\"setup\" for channel setup wording, action:\"triage\" for blocker/retry/error wording, action:\"deliveries\" for delivery history wording, and action:\"channel\" or status search for send/notify wording before confirmed external delivery; channels action:\"status|channel|setup|triage|deliveries\" exposes structured readiness, current setup guide step, daemon delivery attempts, visible surface messages, route bindings, redacted receipt history, delivery posture, risk labels, safe config-key names, allowlist/status/doctor routes, and explicit test-send boundary; lower-level agent_harness mode:\"channels\", mode:\"channel\", mode:\"channel_setup_guide\", mode:\"channel_triage\", and mode:\"channel_deliveries\" remain available for compatibility/detail coverage; agent_channel_send exposes the exact confirmed send route and returns the receipt id when the Agent shell path is available. The unified-inbox and channel draft/routing surfaces also expose agent_harness mode:\"unified_inbox\", mode:\"channel_drafts\", mode:\"channel_draft_save\", mode:\"channel_draft_send\", mode:\"channel_routing\", mode:\"channel_routing_assign\", and mode:\"channel_routing_remove\" to the model with confirmation-gated sends.",
         "safetyBoundary": "Channel sends require explicit target and confirmation, the setup guide and receipt ledger are read-only, receipts redact webhook/link addresses and bound/redact message previews, does not infer routes from chat, and does not expose secret values.",
         "releaseEvidence": "Readiness evidence cites channel runtime/tool/docs sources, and live certification requires real external channel outcome coverage before release."
       }
@@ -437,7 +437,7 @@
       "quality": {
         "capabilityCoverage": "Covers core external messaging routes, delivery records, ingress/egress, account lifecycle, directory lookup, target resolution, render policy, and adapter contracts through connected-host ownership.",
         "userAccess": "The user sees channel readiness, redacted confirmed-send receipts, and confirmed sends in Agent while connected-host owns adapter lifecycle and route execution.",
-        "modelAccess": "channels action:\"status|channel|setup|triage|deliveries\", agent_channel_send, lower-level agent_harness mode:\"channels\", mode:\"channel\", mode:\"channel_setup_guide\", mode:\"channel_triage\", and mode:\"channel_deliveries\", connected-host capability, channel workspace, slash-command, and settings metadata expose channel operation boundaries to the model.",
+        "modelAccess": "channels action:\"status|channel|setup|triage|deliveries\", agent_channel_send, lower-level agent_harness mode:\"channels\", mode:\"channel\", mode:\"channel_setup_guide\", mode:\"channel_triage\", and mode:\"channel_deliveries\", connected-host capability, channel workspace, slash-command, and settings metadata expose channel operation boundaries to the model. The unified-inbox and channel draft/routing surfaces also expose agent_harness mode:\"unified_inbox\", mode:\"channel_drafts\", mode:\"channel_draft_save\", mode:\"channel_draft_send\", mode:\"channel_routing\", mode:\"channel_routing_assign\", and mode:\"channel_routing_remove\" to the model with confirmation-gated sends.",
         "safetyBoundary": "Agent never owns host lifecycle or secret-bearing adapters; it routes exact confirmed delivery through public connected-host contracts.",
         "releaseEvidence": "Readiness evidence cites connected-host evidence alias and Agent channel docs, with live outcome certification covering real delivery before release."
       }
@@ -452,7 +452,7 @@
       "quality": {
         "capabilityCoverage": "Covers durable jobs, runs, schedules, watchers, deliveries, route bindings, and service lifecycle through connected-host runtime ownership, including published watcher create/list/run/start/stop operator methods, Agent-certified watcher receipt outcomes, Agent-visible handoff requirements for durable watcher run/source records, and Agent consumption of published watcher run/source read models.",
         "userAccess": "The user can inspect automation state, route trigger setup through autonomy intake, and run narrow confirmed actions from Agent without managing host services.",
-        "modelAccess": "schedule action:\"list|run|pause|resume|delete\", autonomy action:\"intake|queue|item\", agent_operator_briefing, agent_operator_action, agent_operator_method, host action:\"methods|method|capability\", lower-level agent_harness mode:\"operator_methods|operator_method\", and connected-host capability reports expose automation status/action/watcher boundaries, post-action schedule nextRoutes, certified watcher receipts, source-owned watcher run/source evidence requirements, and published watcher run/source read models to the model.",
+        "modelAccess": "schedule action:\"list|run|pause|resume|delete\", autonomy action:\"intake|queue|item\", agent_operator_briefing, agent_operator_action, agent_operator_method, host action:\"methods|method|capability\", lower-level agent_harness mode:\"operator_methods|operator_method\", and connected-host capability reports expose automation status/action/watcher boundaries, post-action schedule nextRoutes, certified watcher receipts, source-owned watcher run/source evidence requirements, and published watcher run/source read models to the model. Remote orchestration also exposes agent_harness mode:\"remote_snapshot\", mode:\"remote_peers\", mode:\"remote_work\", mode:\"remote_pair_requests\", mode:\"remote_pair_approve\", mode:\"remote_pair_reject\", mode:\"remote_peers_invoke\", and mode:\"remote_work_cancel\" to the model with confirmation-gated peer/work control.",
         "safetyBoundary": "Agent does not create broad host automation definitions or lifecycle operations from chat; watcher creation stays an admin confirmed operator method with trusted source/scope and explicit user request, and receipt certification uses only returned daemon fields.",
         "releaseEvidence": "Readiness evidence cites connected-host automation inventory and Agent tools docs, with live certification covering external automation outcomes."
       }
@@ -557,7 +557,7 @@
       "quality": {
         "capabilityCoverage": "Covers the long-tail channel matrix through connected-host surface unions, plugin registry, delivery strategies, setup schemas, and operator channel routes.",
         "userAccess": "The user sees all configured channel readiness, recent redacted delivery receipts, and exact send paths through Agent channel surfaces.",
-        "modelAccess": "channels action:\"status|channel|setup|triage|deliveries\", agent_channel_send, lower-level agent_harness mode:\"channels\", mode:\"channel\", mode:\"channel_setup_guide\", mode:\"channel_triage\", and mode:\"channel_deliveries\", channel workspace, command, settings, and connected-host capability reports expose the channel matrix to the model.",
+        "modelAccess": "channels action:\"status|channel|setup|triage|deliveries\", agent_channel_send, lower-level agent_harness mode:\"channels\", mode:\"channel\", mode:\"channel_setup_guide\", mode:\"channel_triage\", and mode:\"channel_deliveries\", channel workspace, command, settings, and connected-host capability reports expose the channel matrix to the model. The unified-inbox and channel draft/routing surfaces also expose agent_harness mode:\"unified_inbox\", mode:\"channel_drafts\", mode:\"channel_draft_save\", mode:\"channel_draft_send\", mode:\"channel_routing\", mode:\"channel_routing_assign\", and mode:\"channel_routing_remove\" to the model with confirmation-gated sends.",
         "safetyBoundary": "Agent keeps adapter setup and secret-bearing lifecycle in connected-host ownership while confirmed sends stay exact-target.",
         "releaseEvidence": "Readiness evidence cites connected-host long-tail channel inventory and Agent channel docs, with live outcome certification covering external sends."
       }
@@ -572,7 +572,7 @@
       "quality": {
         "capabilityCoverage": "Covers phone-call style conversation or notification delivery as a channel-class surface through connected-host telephony adapters and routed delivery.",
         "userAccess": "The user can inspect telephony readiness and send via channel/reminder/routine delivery routes when configured.",
-        "modelAccess": "channels action:\"status|channel|setup|triage|deliveries\", agent_channel_send, agent_reminder_schedule, and lower-level agent_harness mode:\"channels\", mode:\"channel\", mode:\"channel_setup_guide\", mode:\"channel_triage\", and mode:\"channel_deliveries\" plus connected-host metadata expose telephony as a routed channel surface to the model.",
+        "modelAccess": "channels action:\"status|channel|setup|triage|deliveries\", agent_channel_send, agent_reminder_schedule, and lower-level agent_harness mode:\"channels\", mode:\"channel\", mode:\"channel_setup_guide\", mode:\"channel_triage\", and mode:\"channel_deliveries\" plus connected-host metadata expose telephony as a routed channel surface to the model. The unified-inbox and channel draft/routing surfaces also expose agent_harness mode:\"unified_inbox\", mode:\"channel_drafts\", mode:\"channel_draft_save\", mode:\"channel_draft_send\", mode:\"channel_routing\", mode:\"channel_routing_assign\", and mode:\"channel_routing_remove\" to the model with confirmation-gated sends.",
         "safetyBoundary": "Agent does not own telephony adapter credentials or service lifecycle and uses explicit target/confirmation rules for delivery.",
         "releaseEvidence": "Readiness evidence cites connected-host telephony inventory and Agent channel/reminder/routine sources."
       }

package/src/agent/channel-draft.ts

@@ -0,0 +1,431 @@
+/**
+ * channel-draft.ts
+ *
+ * Agent-side outbox + draft model for channel messages.
+ *
+ * Provides:
+ *   - `ChannelDraft` — a composed-but-not-yet-sent message
+ *   - `saveDraft`    — persist a draft to the local JSON store
+ *   - `listDrafts`   — read all drafts
+ *   - `getDraft`     — read one draft by id
+ *   - `deleteDraft`  — remove a draft
+ *   - `queueDraftToSend` — promote a draft to a confirmed send input, consuming it
+ *
+ * Sends always route through the EXISTING `deliverAgentChannelMessage` path
+ * (which wraps `ChannelDeliveryRouter.deliver` via the agent_channel_send confirm
+ * pattern). No new SDK contract is introduced.
+ *
+ * Persistence: JSON file at {agentRoot}/channels/drafts.json via ShellPathService.
+ *
+ * SEAM — a future daemon `channels.drafts.*` operator method could mirror this
+ * store server-side for multi-surface sync. The local model is the source of
+ * truth until that contract is published.
+ */
+
+import { createHash, randomUUID } from 'node:crypto';
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { dirname } from 'node:path';
+import type { ShellPathService } from '@/runtime/index.ts';
+import { GOODVIBES_AGENT_SURFACE_ROOT } from '../config/surface.ts';
+import type { AgentChannelDeliveryInput } from './channel-delivery.ts';
+
+// ---------------------------------------------------------------------------
+// Types
+// ---------------------------------------------------------------------------
+
+export type ChannelDraftStatus = 'draft' | 'queued' | 'sent' | 'failed';
+
+export interface ChannelDraft {
+  readonly version: 1;
+  readonly id: string;
+  readonly createdAt: string;
+  readonly updatedAt: string;
+  readonly status: ChannelDraftStatus;
+  /** Human-readable subject / title. */
+  readonly title?: string;
+  /** Message body. */
+  readonly message: string;
+  /** Surface target shorthand: e.g. "slack:ops" */
+  readonly channel?: string;
+  /** Named route id. */
+  readonly route?: string;
+  /** Webhook URL (stored redacted-safe — callers must redact before persisting). */
+  readonly webhook?: string;
+  /** Link address. */
+  readonly link?: string;
+  /** Optional tags for grouping drafts. */
+  readonly tags?: readonly string[];
+  /** If the draft was sent, the delivery response id. */
+  readonly sentResponseId?: string;
+  /** If the draft failed to send, the error message. */
+  readonly sendError?: string;
+}
+
+export interface ChannelDraftSnapshot {
+  readonly path: string;
+  readonly exists: boolean;
+  readonly drafts: readonly ChannelDraft[];
+  readonly parseError?: string;
+}
+
+export interface ChannelDraftSaveResult {
+  readonly draft: ChannelDraft;
+  readonly path: string;
+}
+
+export interface ChannelDraftQueueResult {
+  /** The draft id that was promoted. */
+  readonly draftId: string;
+  /** The delivery input ready to pass to deliverAgentChannelMessage. */
+  readonly deliveryInput: AgentChannelDeliveryInput;
+  /** The updated draft (status: 'queued'). */
+  readonly draft: ChannelDraft;
+}
+
+// ---------------------------------------------------------------------------
+// Internal file model
+// ---------------------------------------------------------------------------
+
+interface ChannelDraftFile {
+  readonly version: 1;
+  readonly drafts: readonly ChannelDraft[];
+}
+
+type ShellPaths = Pick<ShellPathService, 'resolveUserPath'>;
+
+const DRAFT_VERSION = 1 as const;
+const DRAFT_FILE_VERSION = 1 as const;
+const DRAFT_LIMIT = 200;
+
+// ---------------------------------------------------------------------------
+// Path
+// ---------------------------------------------------------------------------
+
+export function channelDraftFilePath(shellPaths: ShellPaths): string {
+  return shellPaths.resolveUserPath(GOODVIBES_AGENT_SURFACE_ROOT, 'channels', 'drafts.json');
+}
+
+// ---------------------------------------------------------------------------
+// Parsing
+// ---------------------------------------------------------------------------
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
+}
+
+function readString(value: unknown): string {
+  return typeof value === 'string' ? value.trim() : '';
+}
+
+function readOptString(value: unknown): string | undefined {
+  const s = readString(value);
+  return s || undefined;
+}
+
+function parseDraftStatus(value: unknown): ChannelDraftStatus {
+  if (value === 'queued' || value === 'sent' || value === 'failed') return value;
+  return 'draft';
+}
+
+function parseTags(value: unknown): readonly string[] | undefined {
+  if (!Array.isArray(value)) return undefined;
+  const tags = value.map(readString).filter(Boolean);
+  return tags.length > 0 ? tags : undefined;
+}
+
+function parseDraft(value: unknown): ChannelDraft | null {
+  if (!isRecord(value) || value.version !== DRAFT_VERSION) return null;
+  const id = readString(value.id);
+  const createdAt = readString(value.createdAt);
+  const updatedAt = readString(value.updatedAt);
+  const message = readString(value.message);
+  if (!id || !createdAt || !updatedAt || !message) return null;
+  if (Number.isNaN(Date.parse(createdAt)) || Number.isNaN(Date.parse(updatedAt))) return null;
+  return {
+    version: DRAFT_VERSION,
+    id,
+    createdAt,
+    updatedAt,
+    status: parseDraftStatus(value.status),
+    message,
+    ...( readOptString(value.title) ? { title: readOptString(value.title) } : {}),
+    ...( readOptString(value.channel) ? { channel: readOptString(value.channel) } : {}),
+    ...( readOptString(value.route) ? { route: readOptString(value.route) } : {}),
+    ...( readOptString(value.webhook) ? { webhook: readOptString(value.webhook) } : {}),
+    ...( readOptString(value.link) ? { link: readOptString(value.link) } : {}),
+    ...(parseTags(value.tags) ? { tags: parseTags(value.tags) } : {}),
+    ...( readOptString(value.sentResponseId) ? { sentResponseId: readOptString(value.sentResponseId) } : {}),
+    ...( readOptString(value.sendError) ? { sendError: readOptString(value.sendError) } : {}),
+  };
+}
+
+function parseDraftFile(raw: unknown): ChannelDraftFile {
+  if (!isRecord(raw)) return { version: DRAFT_FILE_VERSION, drafts: [] };
+  const drafts = Array.isArray(raw.drafts)
+    ? raw.drafts.map(parseDraft).filter((d): d is ChannelDraft => d !== null)
+    : [];
+  return { version: DRAFT_FILE_VERSION, drafts };
+}
+
+// ---------------------------------------------------------------------------
+// Read / write helpers
+// ---------------------------------------------------------------------------
+
+export function readChannelDrafts(shellPaths: ShellPaths): ChannelDraftSnapshot {
+  const path = channelDraftFilePath(shellPaths);
+  if (!existsSync(path)) return { path, exists: false, drafts: [] };
+  try {
+    const parsed = JSON.parse(readFileSync(path, 'utf-8')) as unknown;
+    return { path, exists: true, drafts: parseDraftFile(parsed).drafts };
+  } catch (error) {
+    return {
+      path,
+      exists: true,
+      drafts: [],
+      parseError: error instanceof Error ? error.message : String(error),
+    };
+  }
+}
+
+function writeDrafts(path: string, drafts: readonly ChannelDraft[]): void {
+  const file: ChannelDraftFile = { version: DRAFT_FILE_VERSION, drafts: drafts.slice(0, DRAFT_LIMIT) };
+  mkdirSync(dirname(path), { recursive: true });
+  const tempPath = `${path}.tmp`;
+  writeFileSync(tempPath, `${JSON.stringify(file, null, 2)}\n`, 'utf-8');
+  renameSync(tempPath, path);
+}
+
+function generateDraftId(): string {
+  const ts = new Date().toISOString().replace(/[^0-9]/g, '').slice(0, 14);
+  return `draft-${ts}-${randomUUID().slice(0, 8)}`;
+}
+
+function draftDigest(message: string): string {
+  return createHash('sha256').update(message).digest('hex').slice(0, 12);
+}
+
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+
+/**
+ * Save a new draft or overwrite an existing draft by id.
+ *
+ * If `id` is provided in `input` and a draft with that id exists, it is
+ * updated in-place (updatedAt refreshed). Otherwise a new draft is created.
+ */
+export function saveDraft(
+  shellPaths: ShellPaths,
+  input: {
+    readonly id?: string;
+    readonly title?: string;
+    readonly message: string;
+    readonly channel?: string;
+    readonly route?: string;
+    readonly webhook?: string;
+    readonly link?: string;
+    readonly tags?: readonly string[];
+    readonly status?: ChannelDraftStatus;
+  },
+): ChannelDraftSaveResult {
+  const message = input.message.trim();
+  if (!message) throw new Error('Draft message is required.');
+
+  const snapshot = readChannelDrafts(shellPaths);
+  const path = channelDraftFilePath(shellPaths);
+  const now = new Date().toISOString();
+
+  // Try to find existing draft to update
+  const existingIndex = input.id ? snapshot.drafts.findIndex((d) => d.id === input.id) : -1;
+  const existing = existingIndex >= 0 ? snapshot.drafts[existingIndex] : null;
+
+  const draft: ChannelDraft = {
+    version: DRAFT_VERSION,
+    id: existing?.id ?? generateDraftId(),
+    createdAt: existing?.createdAt ?? now,
+    updatedAt: now,
+    status: input.status ?? existing?.status ?? 'draft',
+    message,
+    ...(input.title?.trim() ? { title: input.title.trim() } : {}),
+    ...(input.channel?.trim() ? { channel: input.channel.trim() } : {}),
+    ...(input.route?.trim() ? { route: input.route.trim() } : {}),
+    ...(input.webhook?.trim() ? { webhook: input.webhook.trim() } : {}),
+    ...(input.link?.trim() ? { link: input.link.trim() } : {}),
+    ...(input.tags && input.tags.length > 0 ? { tags: input.tags } : {}),
+  };
+
+  let updatedDrafts: readonly ChannelDraft[];
+  if (existingIndex >= 0) {
+    updatedDrafts = snapshot.drafts.map((d, i) => (i === existingIndex ? draft : d));
+  } else {
+    // Prepend new draft (most recent first)
+    updatedDrafts = [draft, ...snapshot.drafts];
+  }
+
+  writeDrafts(path, updatedDrafts);
+  return { draft, path };
+}
+
+/** List all drafts, optionally filtered by status. */
+export function listDrafts(
+  shellPaths: ShellPaths,
+  options: { readonly status?: ChannelDraftStatus; readonly limit?: number } = {},
+): ChannelDraftSnapshot {
+  const snapshot = readChannelDrafts(shellPaths);
+  let drafts = snapshot.drafts;
+  if (options.status) {
+    drafts = drafts.filter((d) => d.status === options.status);
+  }
+  if (typeof options.limit === 'number' && options.limit > 0) {
+    drafts = drafts.slice(0, options.limit);
+  }
+  return { ...snapshot, drafts };
+}
+
+/** Get a single draft by id. Returns null if not found. */
+export function getDraft(shellPaths: ShellPaths, draftId: string): ChannelDraft | null {
+  const snapshot = readChannelDrafts(shellPaths);
+  return snapshot.drafts.find((d) => d.id === draftId) ?? null;
+}
+
+/** Delete a draft by id. Returns true if deleted, false if not found. */
+export function deleteDraft(shellPaths: ShellPaths, draftId: string): boolean {
+  const snapshot = readChannelDrafts(shellPaths);
+  const before = snapshot.drafts.length;
+  const updated = snapshot.drafts.filter((d) => d.id !== draftId);
+  if (updated.length === before) return false;
+  writeDrafts(channelDraftFilePath(shellPaths), updated);
+  return true;
+}
+
+/**
+ * Promote a draft to 'queued' status and return an AgentChannelDeliveryInput
+ * ready to pass to `deliverAgentChannelMessage`.
+ *
+ * The draft is updated to status 'queued'. The caller is responsible for
+ * calling `deliverAgentChannelMessage` and then `markDraftSent` or
+ * `markDraftFailed` to record the outcome.
+ *
+ * This routes through the EXISTING confirmed send path — no new SDK contract.
+ */
+export function queueDraftToSend(
+  shellPaths: ShellPaths,
+  draftId: string,
+): ChannelDraftQueueResult {
+  const draft = getDraft(shellPaths, draftId);
+  if (!draft) throw new Error(`Draft not found: ${draftId}`);
+  if (draft.status === 'sent') throw new Error(`Draft ${draftId} is already sent.`);
+
+  const deliveryInput: AgentChannelDeliveryInput = {
+    message: draft.message,
+    ...(draft.title ? { title: draft.title } : {}),
+    ...(draft.channel ? { channel: draft.channel } : {}),
+    ...(draft.route ? { route: draft.route } : {}),
+    ...(draft.webhook ? { webhook: draft.webhook } : {}),
+    ...(draft.link ? { link: draft.link } : {}),
+  };
+
+  const queuedDraft = saveDraft(shellPaths, {
+    id: draft.id,
+    ...deliveryInput,
+    ...(draft.title ? { title: draft.title } : {}),
+    ...(draft.tags ? { tags: draft.tags } : {}),
+    status: 'queued',
+  }).draft;
+
+  return { draftId, deliveryInput, draft: queuedDraft };
+}
+
+/**
+ * Mark a draft as successfully sent. Records the response id from the delivery.
+ */
+export function markDraftSent(
+  shellPaths: ShellPaths,
+  draftId: string,
+  responseId?: string,
+): ChannelDraft {
+  const snapshot = readChannelDrafts(shellPaths);
+  const existing = snapshot.drafts.find((d) => d.id === draftId);
+  if (!existing) throw new Error(`Draft not found: ${draftId}`);
+  const now = new Date().toISOString();
+  const patched: ChannelDraft = {
+    ...existing,
+    updatedAt: now,
+    status: 'sent',
+    ...(responseId ? { sentResponseId: responseId } : {}),
+  };
+  const updatedDrafts = snapshot.drafts.map((d) => (d.id === draftId ? patched : d));
+  writeDrafts(channelDraftFilePath(shellPaths), updatedDrafts);
+  return patched;
+}
+
+/**
+ * Mark a draft as failed to send. Records the error message.
+ */
+export function markDraftFailed(
+  shellPaths: ShellPaths,
+  draftId: string,
+  error: string,
+): ChannelDraft {
+  const snapshot = readChannelDrafts(shellPaths);
+  const existing = snapshot.drafts.find((d) => d.id === draftId);
+  if (!existing) throw new Error(`Draft not found: ${draftId}`);
+  const now = new Date().toISOString();
+  const patched: ChannelDraft = {
+    ...existing,
+    updatedAt: now,
+    status: 'failed',
+    sendError: error,
+  };
+  const updatedDrafts = snapshot.drafts.map((d) => (d.id === draftId ? patched : d));
+  writeDrafts(channelDraftFilePath(shellPaths), updatedDrafts);
+  return patched;
+}
+
+/** Format a single draft for human-readable display. */
+export function formatChannelDraft(draft: ChannelDraft): string {
+  const targetPart = draft.channel
+    ? `channel=${draft.channel}`
+    : draft.route
+      ? `route=${draft.route}`
+      : draft.webhook
+        ? 'webhook=[redacted]'
+        : draft.link
+          ? `link=${draft.link}`
+          : 'no-target';
+  const digest = draftDigest(draft.message);
+  const lines = [
+    `draft ${draft.id}`,
+    `  status: ${draft.status}`,
+    `  target: ${targetPart}`,
+    ...(draft.title ? [`  title: ${draft.title}`] : []),
+    `  message: ${draft.message.length} chars sha256:${digest}`,
+    `  created: ${draft.createdAt}  updated: ${draft.updatedAt}`,
+    ...(draft.tags && draft.tags.length > 0 ? [`  tags: ${draft.tags.join(', ')}`] : []),
+    ...(draft.sentResponseId ? [`  sent response: ${draft.sentResponseId}`] : []),
+    ...(draft.sendError ? [`  error: ${draft.sendError}`] : []),
+  ];
+  return lines.join('\n');
+}
+
+/** Format the draft list summary. */
+export function formatChannelDraftList(snapshot: ChannelDraftSnapshot): string {
+  const lines = [
+    'Channel Drafts',
+    `  path: ${snapshot.path}`,
+    `  total: ${snapshot.drafts.length}`,
+    `  status: ${snapshot.parseError ? 'attention' : snapshot.exists ? 'ready' : 'empty'}`,
+    ...(snapshot.parseError ? [`  parse error: ${snapshot.parseError}`] : []),
+    '  policy: drafts are agent-local; sends require queueDraftToSend + deliverAgentChannelMessage with explicit user confirmation',
+    '',
+  ];
+  if (snapshot.drafts.length === 0) {
+    lines.push('  no drafts');
+  } else {
+    for (const draft of snapshot.drafts) {
+      const targetPart = draft.channel ?? draft.route ?? (draft.webhook ? 'webhook=[redacted]' : null) ?? draft.link ?? 'no-target';
+      lines.push(`  [${draft.status}] ${draft.id}  target=${targetPart}  ${draft.message.slice(0, 60)}${draft.message.length > 60 ? '...' : ''}`);
+    }
+  }
+  return lines.join('\n');
+}