@pellux/goodvibes-agent 1.9.1 → 1.10.0

package/docs/README.md

@@ -1,6 +1,6 @@
 # GoodVibes Agent Docs
 
-These are the package-facing docs for the GoodVibes Agent `1.9.x` release line.
+These are the package-facing docs for the GoodVibes Agent `1.10.x` release line.
 
 ## Current Docs
 

package/docs/connected-host.md

@@ -75,7 +75,7 @@ The model can inspect the public operator method catalog with `host action:"meth
 
 The model can inspect service posture with `host action:"services"`. That report exposes endpoint binding, network-facing posture, issues, and redacted-log diagnostics used by status, doctor, and support bundles. Use `includeParameters:true` when reachability probes and redacted log tail are needed. To inspect one endpoint, use `host action:"service"` with `endpointId`, `target`, or `query`; valid endpoint ids are `controlPlane`, `httpListener`, and `web`. The connected browser cockpit/PWA is the visible UI surface `connected-browser-cockpit`; `computer action:"browser"` inspects readiness and `computer action:"open_browser" confirm:true explicitUserRequest:"..."` opens the configured URL through the existing confirmed surface route. `ui_surface surfaceId:"connected-browser-cockpit"` remains available for detailed compatibility inspection and reports Agent workspace category coverage, mobile/PWA control routes, the Agent onboarding marker, and browser/PWA first-run evidence. Certified SDK/daemon browser/PWA category-route records can make the cockpit `browser-native-ready` only when every Agent workspace category has schema/version/publication/publisher/provenance/freshness-cursor/receipt metadata, exact inspect/open routes, and mobile/touch evidence. Certified browser/PWA first-run records add manifest, service-worker, install, and offline evidence with redacted URLs and summaries. Start/setup readiness can also satisfy the setup checklist from saved durable artifacts or live SDK/daemon setup read models when the connected host publishes them, and reports the gap when no receipt exists. Service lifecycle and listener changes must use setup or confirmed daemon operator methods.
 
-For setup or host repair asks, start with `setup action:"repair"`. It is read-only and chooses the next safe route for the current setup blocker or a named target: connected-host status, a `services.status` receipt, confirmed token repair, user-run bootstrap commands, or no lifecycle action when the host is already reachable. It does not start, install, restart, write tokens, import settings, or open UI by itself.
+For setup or host repair asks, start with `setup action:"repair"`. It is read-only and chooses the next safe route for the current setup blocker or a named target: connected-host status, a `services.status` receipt, confirmed token repair, user-run bootstrap commands, or no lifecycle action when the host is already reachable. It does not start, install, restart, write tokens, import settings, or open UI by itself. Separately from these routes, at boot the Agent starts a host that is installed on this machine but stopped: one start through the platform service manager, a bounded wait for it to answer, and an honest receipt. A running host is never restarted, a held port is left alone, and a host that is not installed keeps this guidance.
 
 The model can inspect live connected-host readiness with `host action:"status"`. That report uses the same status probe as the CLI: it checks the connected-host status route, verifies host compatibility, checks isolated Agent Knowledge when token and compatibility posture allow it, reports endpoint bindings and token posture without printing token values, returns actionable findings, and includes a compact `modelRoute` for follow-up diagnostics. `includeParameters:true` adds route family and capability detail. Lower-level `connected_host_status` and `daemon_status` remain compatibility routes.
 

package/docs/getting-started.md

@@ -189,7 +189,7 @@ Host diagnostics:
 
 Model-visible diagnostics prefer `host action:"status|capabilities|capability|services|service|methods|method"`. Lower-level `service_posture`, `service_endpoint`, `connected_host`, `connected_host_status`, `connected_host_capability`, `daemon`, and `daemon_status` harness modes remain available for compatibility and detailed inspection. `agent_operator_method` can run read-only routes directly and write/admin routes only with `confirm:true` plus `explicitUserRequest`.
 
-When no connected host is reachable, inspect `setup action:"item" setupItemId:"connected-host-readiness"` for the offline bootstrap plan. It returns user-run commands to verify Bun, install and trust the owning GoodVibes host package, verify host entrypoints, start the GoodVibes service, and reconnect Agent. Agent does not run those host install/start commands implicitly. When the host auth token is missing or malformed on the local machine, use `setup action:"token" setupItemId:"connected-host-auth" confirm:true explicitUserRequest:"..."`; it uses the GoodVibes SDK pairing helper to create or repair `~/.goodvibes/daemon/operator-tokens.json`, preserves valid existing tokens, leaves environment tokens untouched, and returns only path/fingerprint metadata.
+When no connected host is reachable, inspect `setup action:"item" setupItemId:"connected-host-readiness"` for the offline bootstrap plan. It returns user-run commands to verify Bun, install and trust the owning GoodVibes host package, verify host entrypoints, start the GoodVibes service, and reconnect Agent. Agent does not run those host install/start commands implicitly. One bounded exception happens at boot: when the host is already installed on this machine but its service is stopped, Agent starts it once through the platform service manager, waits briefly for it to answer, and reports what it did. When the host auth token is missing or malformed on the local machine, use `setup action:"token" setupItemId:"connected-host-auth" confirm:true explicitUserRequest:"..."`; it uses the GoodVibes SDK pairing helper to create or repair `~/.goodvibes/daemon/operator-tokens.json`, preserves valid existing tokens, leaves environment tokens untouched, and returns only path/fingerprint metadata.
 
 ## Current Product Notes
 

package/docs/tools-and-commands.md

@@ -332,6 +332,7 @@ Routine promotion is an explicit scheduling route. Local routines stay local unt
 | `/tts` | Submit a normal prompt and play the assistant response through live TTS. |
 | `/undo` | Undo the last conversation turn. |
 | `/unpin` | Unpin a model from the favorites list. |
+| `/update` | Check for a newer release; for binary installs, verify and apply it or roll back to the kept previous version. |
 | `/vibe` | Inspect, create, show, or import VIBE.md personality files. |
 | `/voice` | Review voice posture and portable voice metadata. |
 | `/welcome` | Open or print the Agent setup guide. |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pellux/goodvibes-agent",
-  "version": "1.9.1",
+  "version": "1.10.0",
   "private": false,
   "description": "GoodVibes personal operator assistant TUI with a proactive Agent product brain, isolated Agent Knowledge, local profiles, routines, skills, personas, and explicit build delegation.",
   "type": "module",
@@ -93,8 +93,8 @@
   },
   "dependencies": {},
   "devDependencies": {
-    "@pellux/goodvibes-sdk": "1.7.1",
-    "@pellux/goodvibes-terminal-shell": "1.7.1",
+    "@pellux/goodvibes-sdk": "1.8.0",
+    "@pellux/goodvibes-terminal-shell": "1.8.0",
     "sql.js": "^1.14.1",
     "sqlite-vec": "^0.1.9",
     "zustand": "^5.0.12",

package/release/live-verification/live-verification.json

@@ -1,5 +1,5 @@
 {
-  "generatedAt": "2026-07-09T06:39:25.714Z",
+  "generatedAt": "2026-07-13T23:20:59.518Z",
   "homeDir": "[goodvibes-home]",
   "binaryPath": "[agent-binary]",
   "connectedHostBaseUrl": "http://127.0.0.1:3421",
@@ -9,8 +9,8 @@
       "id": "verification-ledger",
       "title": "Verification inventory ledger",
       "status": "pass",
-      "summary": "99.5% local verification signal across 839 inventory items.",
-      "detail": "82.8% local behavior verified; 110 item(s) require external outcomes."
+      "summary": "99.6% local verification signal across 978 inventory items.",
+      "detail": "73.7% local behavior verified; 223 item(s) require external outcomes."
     },
     {
       "id": "compiled-cli-present",
@@ -23,7 +23,7 @@
       "title": "Agent CLI version command",
       "status": "pass",
       "summary": "Agent CLI version returned successfully.",
-      "detail": "goodvibes-agent 1.6.4"
+      "detail": "goodvibes-agent 1.9.1"
     },
     {
       "id": "cli-status-json",
@@ -37,14 +37,14 @@
       "title": "Agent CLI compatibility JSON command",
       "status": "pass",
       "summary": "Agent CLI compatibility returned parseable JSON.",
-      "detail": "{\n  \"ok\": true,\n  \"packageVersion\": \"1.6.4\",\n  \"connectedHost\": {\n    \"baseUrl\": \"http://127.0.0.1:3421\",\n    \"status\": 200,\n    \"reachable\": true,\n    \"compatible\": true\n  },\n  \"auth\": {\n    \"tokenPresent\": true,\n    \"tokenPath\": \"env:GOODVIBES_CONNECTED_HOST_TOKEN\"\n  },\n  \"agentKnowledge\": {\n    \"route\": \"/api/goodvibes-agent/knowledge/status\",\n    \"ready\": true,\n    \"kind\": \"ok\"\n  }\n}"
+      "detail": "{\n  \"ok\": true,\n  \"packageVersion\": \"1.9.1\",\n  \"connectedHost\": {\n    \"baseUrl\": \"http://127.0.0.1:3421\",\n    \"status\": 200,\n    \"reachable\": true,\n    \"compatible\": true\n  },\n  \"auth\": {\n    \"tokenPresent\": true,\n    \"tokenPath\": \"env:GOODVIBES_CONNECTED_HOST_TOKEN\"\n  },\n  \"agentKnowledge\": {\n    \"route\": \"/api/goodvibes-agent/knowledge/status\",\n    \"ready\": true,\n    \"kind\": \"ok\"\n  }\n}"
     },
     {
       "id": "cli-agent-knowledge-status",
       "title": "Agent Knowledge CLI status command",
       "status": "pass",
       "summary": "Agent Knowledge status returned parseable JSON.",
-      "detail": "{\n  \"ok\": true,\n  \"kind\": \"agentKnowledge.status\",\n  \"route\": \"/api/goodvibes-agent/knowledge/status\",\n  \"data\": {\n    \"ready\": true,\n    \"storagePath\": \"[goodvibes-home]/tui/knowledge-agent.sqlite\",\n    \"sourceCount\": 0,\n    \"nodeCount\": 0,\n    \"edgeCount\": 0,\n    \"issueCount\": 0,\n    \"extractionCount\": 0,\n    \"jobRunCount\": 561,\n    \"refinementTaskCount\": 0,\n    \"usageCount\": 0,\n    \"candidateCount\": 0,\n    \"reportCount\": 26,\n    \"scheduleCount\": 3,\n    \"note\": \"Structured knowledge uses SQL-backed sources, nodes, edges, issues, extractions, and job runs. Markdown is an optional projection, not the source of truth.\"\n  }\n}"
+      "detail": "{\n  \"ok\": true,\n  \"kind\": \"agentKnowledge.status\",\n  \"route\": \"/api/goodvibes-agent/knowledge/status\",\n  \"data\": {\n    \"ready\": true,\n    \"storagePath\": \"[goodvibes-home]/tui/knowledge-agent.sqlite\",\n    \"sourceCount\": 0,\n    \"nodeCount\": 0,\n    \"edgeCount\": 0,\n    \"issueCount\": 0,\n    \"extractionCount\": 0,\n    \"jobRunCount\": 655,\n    \"refinementTaskCount\": 0,\n    \"usageCount\": 0,\n    \"candidateCount\": 0,\n    \"reportCount\": 31,\n    \"scheduleCount\": 3,\n    \"note\": \"Structured knowledge uses SQL-backed sources, nodes, edges, issues, extractions, and job runs. Markdown is an optional projection, not the source of truth.\"\n  }\n}"
     },
     {
       "id": "cli-providers",
@@ -65,7 +65,7 @@
       "title": "Authenticated connected-host /status",
       "status": "pass",
       "summary": "/status returned 200 with parseable JSON.",
-      "detail": "{\"status\":\"running\",\"version\":\"1.5.0\"}"
+      "detail": "{\"status\":\"running\",\"version\":\"1.7.1\"}"
     },
     {
       "id": "connected-host-health",
@@ -78,15 +78,15 @@
       "id": "openai-compatible-models",
       "title": "OpenAI-compatible /v1/models route",
       "status": "pass",
-      "summary": "/v1/models returned 214 model(s).",
-      "detail": "/v1/models returned 214 model(s); model identifiers omitted from release artifact."
+      "summary": "/v1/models returned 307 model(s).",
+      "detail": "/v1/models returned 307 model(s); model identifiers omitted from release artifact."
     },
     {
       "id": "agent-knowledge-status",
       "title": "Agent Knowledge isolated /status",
       "status": "pass",
       "summary": "Agent Knowledge status route returned parseable isolated JSON.",
-      "detail": "{\"ready\":true,\"storagePath\":\"[goodvibes-home]/tui/knowledge-agent.sqlite\",\"sourceCount\":0,\"nodeCount\":0,\"edgeCount\":0,\"issueCount\":0,\"extractionCount\":0,\"jobRunCount\":561,\"refinementTaskCount\":0,\"usageCount\":0,\"candidateCount\":0,\"reportCount\":26,\"scheduleCount\":3,\"note\":\"Structured knowledge uses SQL-backed sources, nodes, edges, issues, extractions, and job runs. Markdown is an optional projection, not the source of truth.\"}"
+      "detail": "{\"ready\":true,\"storagePath\":\"[goodvibes-home]/tui/knowledge-agent.sqlite\",\"sourceCount\":0,\"nodeCount\":0,\"edgeCount\":0,\"issueCount\":0,\"extractionCount\":0,\"jobRunCount\":655,\"refinementTaskCount\":0,\"usageCount\":0,\"candidateCount\":0,\"reportCount\":31,\"scheduleCount\":3,\"note\":\"Structured knowledge uses SQL-backed sources, nodes, edges, issues, extractions, and job runs. Markdown is an optional projection, not the source of truth.\"}"
     },
     {
       "id": "agent-knowledge-ask-isolated",
@@ -128,7 +128,7 @@
       "title": "Agent Knowledge isolated map",
       "status": "pass",
       "summary": "Agent Knowledge isolated map stayed on the isolated Agent route.",
-      "detail": "{\"ok\":true,\"title\":\"Knowledge Map\",\"generatedAt\":1783579165713,\"width\":1280,\"height\":920,\"nodeCount\":0,\"edgeCount\":0,\"totalNodeCount\":0,\"totalEdgeCount\":0,\"facets\":{\"recordKinds\":[],\"nodeKinds\":[],\"sourceTypes\":[],\"sourceStatuses\":[],\"nodeStatuses\":[],\"issueCodes\":[],\"issueStatuses\":[],\"issueSeverities\":[],\"edgeRelations\":[],\"tags\":[]},\"nodes\":[],\"edges\":[],\"svg\":\"<svg xmlns=\\\"http://www.w3.org/2000/svg\\\" width=\\\"1280\\\" height=\\\"920\\\" viewBox=\\\"0 0 1280 920\\\" role=\\\"img\\\" aria-label=\\\"Knowledge Map\\\">\\n<defs>\\n  <radialGradient id=\\\"knowledgeMapBg\\\" cx=\\\"50%\\\" cy=\\\"46%\\\" r=\\\"70%\\\">\\n    <stop offset=\\\"0%\\\" stop-color=\\\"#f7f4ec\\\" />\\n    <stop offset=\\\"60%\\\" stop-color=\\\"#e9eef0\\\" />\\n    <stop offset=\\\"100%\\\" stop-color=\\\"#dde6df\\\" />\\n  </radialGradient>\\n  <filter id=\\\"softShadow\\\" x=\\\"-20%\\\" y=\\\"-20%\\\" width=\\\"140%\\\" height=\\\"140%\\\">\\n    <feDropShadow dx=\\\"0\\\" dy=\\\"6\\... [truncated]"
+      "detail": "{\"ok\":true,\"title\":\"Knowledge Map\",\"generatedAt\":1783984859516,\"width\":1280,\"height\":920,\"nodeCount\":0,\"edgeCount\":0,\"totalNodeCount\":0,\"totalEdgeCount\":0,\"facets\":{\"recordKinds\":[],\"nodeKinds\":[],\"sourceTypes\":[],\"sourceStatuses\":[],\"nodeStatuses\":[],\"issueCodes\":[],\"issueStatuses\":[],\"issueSeverities\":[],\"edgeRelations\":[],\"tags\":[]},\"nodes\":[],\"edges\":[],\"svg\":\"<svg xmlns=\\\"http://www.w3.org/2000/svg\\\" width=\\\"1280\\\" height=\\\"920\\\" viewBox=\\\"0 0 1280 920\\\" role=\\\"img\\\" aria-label=\\\"Knowledge Map\\\">\\n<defs>\\n  <radialGradient id=\\\"knowledgeMapBg\\\" cx=\\\"50%\\\" cy=\\\"46%\\\" r=\\\"70%\\\">\\n    <stop offset=\\\"0%\\\" stop-color=\\\"#f7f4ec\\\" />\\n    <stop offset=\\\"60%\\\" stop-color=\\\"#e9eef0\\\" />\\n    <stop offset=\\\"100%\\\" stop-color=\\\"#dde6df\\\" />\\n  </radialGradient>\\n  <filter id=\\\"softShadow\\\" x=\\\"-20%\\\" y=\\\"-20%\\\" width=\\\"140%\\\" height=\\\"140%\\\">\\n    <feDropShadow dx=\\\"0\\\" dy=\\\"6\\... [truncated]"
     },
     {
       "id": "agent-knowledge-connectors-isolated",

package/release/live-verification/live-verification.md

@@ -1,6 +1,6 @@
 # GoodVibes Agent Live Verification
 
-Generated: 2026-07-09T06:39:25.714Z
+Generated: 2026-07-13T23:20:59.518Z
 Home: `[goodvibes-home]`
 Binary: `[agent-binary]`
 Connected host: `http://127.0.0.1:3421`
@@ -14,7 +14,7 @@ Connected host: `http://127.0.0.1:3421`
 
 | Check | Status | Summary |
 |---|---|---|
-| Verification inventory ledger | pass | 99.5% local verification signal across 839 inventory items. |
+| Verification inventory ledger | pass | 99.6% local verification signal across 978 inventory items. |
 | Compiled GoodVibes Agent CLI binary | pass | Found [agent-binary]. |
 | Agent CLI version command | pass | Agent CLI version returned successfully. |
 | Agent CLI status JSON command | pass | Agent CLI status returned parseable JSON. |
@@ -24,7 +24,7 @@ Connected host: `http://127.0.0.1:3421`
 | CLI doctor command | pass | Doctor completed; 1 operator-configuration risk advisory(ies) noted (intentional trust posture, not a release defect). |
 | Authenticated connected-host /status | pass | /status returned 200 with parseable JSON. |
 | Authenticated connected-host /api/health | pass | Health overall=healthy. |
-| OpenAI-compatible /v1/models route | pass | /v1/models returned 214 model(s). |
+| OpenAI-compatible /v1/models route | pass | /v1/models returned 307 model(s). |
 | Agent Knowledge isolated /status | pass | Agent Knowledge status route returned parseable isolated JSON. |
 | Agent Knowledge isolated ask | pass | Agent Knowledge ask stayed on the isolated Agent route. |
 | Agent Knowledge isolated search | pass | Agent Knowledge search stayed on the isolated Agent route. |
@@ -39,13 +39,13 @@ Connected host: `http://127.0.0.1:3421`
 ### Verification inventory ledger
 
 ```text
-82.8% local behavior verified; 110 item(s) require external outcomes.
+73.7% local behavior verified; 223 item(s) require external outcomes.
 ```
 
 ### Agent CLI version command
 
 ```text
-goodvibes-agent 1.6.4
+goodvibes-agent 1.9.1
 ```
 
 ### Agent CLI status JSON command
@@ -59,7 +59,7 @@ Status JSON command completed; provider/model identifiers omitted from release a
 ```text
 {
   "ok": true,
-  "packageVersion": "1.6.4",
+  "packageVersion": "1.9.1",
   "connectedHost": {
     "baseUrl": "http://127.0.0.1:3421",
     "status": 200,
@@ -93,11 +93,11 @@ Status JSON command completed; provider/model identifiers omitted from release a
     "edgeCount": 0,
     "issueCount": 0,
     "extractionCount": 0,
-    "jobRunCount": 561,
+    "jobRunCount": 655,
     "refinementTaskCount": 0,
     "usageCount": 0,
     "candidateCount": 0,
-    "reportCount": 26,
+    "reportCount": 31,
     "scheduleCount": 3,
     "note": "Structured knowledge uses SQL-backed sources, nodes, edges, issues, extractions, and job runs. Markdown is an optional projection, not the source of truth."
   }
@@ -119,7 +119,7 @@ Doctor command completed without findings; provider/model identifiers and creden
 ### Authenticated connected-host /status
 
 ```text
-{"status":"running","version":"1.5.0"}
+{"status":"running","version":"1.7.1"}
 ```
 
 ### Authenticated connected-host /api/health
@@ -131,13 +131,13 @@ Doctor command completed without findings; provider/model identifiers and creden
 ### OpenAI-compatible /v1/models route
 
 ```text
-/v1/models returned 214 model(s); model identifiers omitted from release artifact.
+/v1/models returned 307 model(s); model identifiers omitted from release artifact.
 ```
 
 ### Agent Knowledge isolated /status
 
 ```text
-{"ready":true,"storagePath":"[goodvibes-home]/tui/knowledge-agent.sqlite","sourceCount":0,"nodeCount":0,"edgeCount":0,"issueCount":0,"extractionCount":0,"jobRunCount":561,"refinementTaskCount":0,"usageCount":0,"candidateCount":0,"reportCount":26,"scheduleCount":3,"note":"Structured knowledge uses SQL-backed sources, nodes, edges, issues, extractions, and job runs. Markdown is an optional projection, not the source of truth."}
+{"ready":true,"storagePath":"[goodvibes-home]/tui/knowledge-agent.sqlite","sourceCount":0,"nodeCount":0,"edgeCount":0,"issueCount":0,"extractionCount":0,"jobRunCount":655,"refinementTaskCount":0,"usageCount":0,"candidateCount":0,"reportCount":31,"scheduleCount":3,"note":"Structured knowledge uses SQL-backed sources, nodes, edges, issues, extractions, and job runs. Markdown is an optional projection, not the source of truth."}
 ```
 
 ### Agent Knowledge isolated ask
@@ -173,7 +173,7 @@ Doctor command completed without findings; provider/model identifiers and creden
 ### Agent Knowledge isolated map
 
 ```text
-{"ok":true,"title":"Knowledge Map","generatedAt":1783579165713,"width":1280,"height":920,"nodeCount":0,"edgeCount":0,"totalNodeCount":0,"totalEdgeCount":0,"facets":{"recordKinds":[],"nodeKinds":[],"sourceTypes":[],"sourceStatuses":[],"nodeStatuses":[],"issueCodes":[],"issueStatuses":[],"issueSeverities":[],"edgeRelations":[],"tags":[]},"nodes":[],"edges":[],"svg":"<svg xmlns=\"http://www.w3.org/2000/svg\" width=\"1280\" height=\"920\" viewBox=\"0 0 1280 920\" role=\"img\" aria-label=\"Knowledge Map\">\n<defs>\n  <radialGradient id=\"knowledgeMapBg\" cx=\"50%\" cy=\"46%\" r=\"70%\">\n    <stop offset=\"0%\" stop-color=\"#f7f4ec\" />\n    <stop offset=\"60%\" stop-color=\"#e9eef0\" />\n    <stop offset=\"100%\" stop-color=\"#dde6df\" />\n  </radialGradient>\n  <filter id=\"softShadow\" x=\"-20%\" y=\"-20%\" width=\"140%\" height=\"140%\">\n    <feDropShadow dx=\"0\" dy=\"6\... [truncated]
+{"ok":true,"title":"Knowledge Map","generatedAt":1783984859516,"width":1280,"height":920,"nodeCount":0,"edgeCount":0,"totalNodeCount":0,"totalEdgeCount":0,"facets":{"recordKinds":[],"nodeKinds":[],"sourceTypes":[],"sourceStatuses":[],"nodeStatuses":[],"issueCodes":[],"issueStatuses":[],"issueSeverities":[],"edgeRelations":[],"tags":[]},"nodes":[],"edges":[],"svg":"<svg xmlns=\"http://www.w3.org/2000/svg\" width=\"1280\" height=\"920\" viewBox=\"0 0 1280 920\" role=\"img\" aria-label=\"Knowledge Map\">\n<defs>\n  <radialGradient id=\"knowledgeMapBg\" cx=\"50%\" cy=\"46%\" r=\"70%\">\n    <stop offset=\"0%\" stop-color=\"#f7f4ec\" />\n    <stop offset=\"60%\" stop-color=\"#e9eef0\" />\n    <stop offset=\"100%\" stop-color=\"#dde6df\" />\n  </radialGradient>\n  <filter id=\"softShadow\" x=\"-20%\" y=\"-20%\" width=\"140%\" height=\"140%\">\n    <feDropShadow dx=\"0\" dy=\"6\... [truncated]
 ```
 
 ### Agent Knowledge isolated connectors list

package/src/agent/email/email-service.ts

@@ -363,7 +363,7 @@ export class EmailService {
       password,
     });
 
-    // SEC-1: validate at the service boundary so injection is blocked regardless of
+    // Validate at the service boundary so injection is blocked regardless of
     // which client implementation is used.
     validateSmtpAddress(config.fromAddress, 'from');
     validateSmtpAddress(opts.to, 'to');

package/src/agent/email/imap-client.ts

@@ -80,7 +80,7 @@ function buildXOAuth2Token(username: string, bearerToken: string): string {
  * Owns a single shared read cursor; callers must not interleave awaits.
  */
 // ---------------------------------------------------------------------------
-// IMAP credential quoting (SEC-2: LOGIN injection prevention)
+// IMAP credential quoting: LOGIN injection prevention
 // ---------------------------------------------------------------------------
 
 /**
@@ -248,7 +248,7 @@ class ImapSession {
           const literalMatch = /\{(\d+)\}$/.exec(line);
           if (literalMatch) {
             const requested = parseInt(literalMatch[1] ?? '0', 10);
-            // SEC-3: cap server-supplied literal size to prevent memory DoS
+            // Cap server-supplied literal size to prevent memory exhaustion
             if (requested > this.literalCap) {
               cleanup();
               reject(new Error(
@@ -538,7 +538,7 @@ export class ImapClient {
 
   private session(): ImapSession {
     const maxBodyBytes = this.options.maxBodyBytes ?? DEFAULT_MAX_BODY_BYTES;
-    // SEC-3: cap literal size at the larger of 1 MB or 4× the configured body preview limit
+    // Cap literal size at the larger of 1 MB or 4× the configured body preview limit
     const literalCap = Math.max(1_048_576, 4 * maxBodyBytes);
     return new ImapSession(
       this.options.socket,
@@ -554,7 +554,7 @@ export class ImapClient {
       const token = buildXOAuth2Token(username, password.slice(7));
       await session.command(`AUTHENTICATE XOAUTH2 ${token}`);
     } else {
-      // LOGIN — credentials are quoted per RFC 3501 to prevent injection (SEC-2).
+      // LOGIN — credentials are quoted per RFC 3501 to prevent injection.
       // Credentials are not logged anywhere in this module.
       const quotedUser = imapQuoteCredential(username, 'username');
       const quotedPass = imapQuoteCredential(password, 'password');

package/src/agent/email/smtp-client.ts

@@ -53,15 +53,15 @@ const DEFAULT_TIMEOUT_MS = 15_000;
 const CRLF = '\r\n';
 
 // ---------------------------------------------------------------------------
-// Input validation (SEC-1: SMTP header/command injection prevention)
+// Input validation: SMTP header/command injection prevention
 // ---------------------------------------------------------------------------
 
-/** Control-character pattern: CR, LF, and other C0/C1 control characters. */
+/** Control-character pattern: CR, LF, and the other C0 and C1 control characters. */
 const CONTROL_CHAR_RE = /[\x00-\x1f\x7f-\x9f]/;
 
 /**
  * Validate a single SMTP envelope address (MAIL FROM / RCPT TO value).
- * Rejects: control characters (\r, \n, any C0/C1), spaces, angle brackets,
+ * Rejects: control characters (\r, \n, any C0 or C1), spaces, angle brackets,
  * comma-separated lists. Only a single bare address is accepted.
  *
  * @throws Error with a plain-language message on invalid input.
@@ -274,7 +274,7 @@ export class SmtpClient {
     // AUTH
     await this.authenticate(session, capabilities, username, password);
 
-    // Validate envelope fields before writing to the protocol stream (SEC-1)
+    // Validate envelope fields before writing to the protocol stream (injection prevention)
     validateSmtpAddress(opts.from, 'from');
     validateSmtpAddress(opts.to, 'to');
     validateSmtpSubject(opts.subject);
@@ -427,7 +427,7 @@ export function createSmtpStartTlsSocket(
                   return;
                 }
 
-                // SEC-4: assert no pipelined data arrived after the 220 STARTTLS reply.
+                // STARTTLS guard: assert no pipelined data arrived after the 220 reply.
                 // Any bytes beyond the \n of the 220 line indicate a hostile server
                 // injecting data before TLS negotiation begins.
                 const newlineIdx = stBuffer.indexOf('\n');

package/src/cli/config-overrides.ts

@@ -1,5 +1,6 @@
-import type { ConfigKey, ConfigManager, ConfigSetting, PersistedFlagState } from '../config/index.ts';
+import type { ConfigKey, ConfigManager, ConfigSetting } from '../config/index.ts';
 import { CONFIG_SCHEMA, ConfigError } from '../config/index.ts';
+import { resolveFeatureEnablementWrite } from '../runtime/feature-enablement.ts';
 import type { GoodVibesCliCommand, GoodVibesCliFlags } from './types.ts';
 import { RUNTIME_ENDPOINT_CONFIG_KEYS, hostModeForHostname } from './endpoints.ts';
 import type { RuntimeEndpointId } from './endpoints.ts';
@@ -150,24 +151,38 @@ export function applyRuntimeUrlOverride(
   }
 }
 
-export function applyRuntimeFeatureFlagOverrides(
+/**
+ * Apply --enable-feature/--disable-feature as RUNTIME-ONLY writes to the
+ * feature's domain settings key (the dissolved feature model has no separate
+ * enablement namespace). Nothing is persisted: the write lands on the
+ * in-memory config just like --config overrides, and the settings-derived
+ * gate seeding in bootstrap picks it up. Returns honest per-feature errors
+ * (unknown ids, always-available features) instead of silently accepting
+ * anything, matching applyRuntimeConfigOverrides' contract.
+ */
+export function applyRuntimeFeatureOverrides(
   configManager: ConfigManager,
   options: {
     readonly enableFeatures: readonly string[];
     readonly disableFeatures: readonly string[];
   },
-): void {
-  if (options.enableFeatures.length === 0 && options.disableFeatures.length === 0) return;
-  const flags = { ...configManager.getCategory('featureFlags') };
-  for (const feature of options.enableFeatures) {
-    flags[feature] = 'enabled' satisfies PersistedFlagState;
-  }
-  for (const feature of options.disableFeatures) {
-    flags[feature] = 'disabled' satisfies PersistedFlagState;
-  }
-  // Write the entire featureFlags category at once to preserve the exact shape getCategory expects.
-  // mutableConfig() validates the 'config' field exists and throws loudly if the SDK renames it.
-  mutableConfig(configManager).featureFlags = flags;
+): readonly string[] {
+  const errors: string[] = [];
+  const requests = [
+    ...options.enableFeatures.map((featureId) => ({ featureId, desired: 'enabled' as const, flag: '--enable-feature' })),
+    ...options.disableFeatures.map((featureId) => ({ featureId, desired: 'disabled' as const, flag: '--disable-feature' })),
+  ];
+  for (const request of requests) {
+    try {
+      const write = resolveFeatureEnablementWrite(request.featureId, request.desired);
+      setRuntimeOnlyConfigValue(configManager, write.key, write.value);
+    } catch (error) {
+      errors.push(error instanceof Error
+        ? `Invalid ${request.flag} ${request.featureId}. ${error.message}`
+        : `Invalid ${request.flag} ${request.featureId}`);
+    }
+  }
+  return errors;
 }
 
 export function applyRuntimeEndpointFlagOverrides(

package/src/cli/entrypoint.ts

@@ -10,7 +10,7 @@ import {
   applyRuntimeCommandEndpointFlagOverrides,
   applyRuntimeConfigOverrides,
   applyRuntimeConfigValue,
-  applyRuntimeFeatureFlagOverrides,
+  applyRuntimeFeatureOverrides,
   applyRuntimeUrlOverride,
   buildCliStatusSnapshot,
   handleGoodVibesCliCommand,
@@ -27,7 +27,7 @@ import { inspectCliExternalRuntime } from './external-runtime.ts';
 import { inspectConnectedHostMetrics } from './connected-host-metrics.ts';
 import { GOODVIBES_AGENT_SURFACE_ROOT } from '../config/surface.ts';
 import { readCheckpointRegistrationSetting } from '../config/checkpoint-settings.ts';
-import { migrateLegacyWorkspaceRegistryIfNeeded, resolveWorkspaceRegistrationSync } from '../config/workspace-registration.ts';
+import { backfillCheckpointEligibilityIfNeeded, migrateLegacyWorkspaceRegistryIfNeeded, resolveCheckpointEligibilitySync } from '../config/workspace-registration.ts';
 import { resolveAgentRuntimeProfileHome, resolveSelectedAgentRuntimeProfileHome } from '../agent/runtime-profile.ts';
 
 type ShellEntrypointOwnership = {
@@ -147,10 +147,14 @@ export async function prepareShellCliRuntime(
     console.error(overrideErrors.join('\n'));
     process.exit(2);
   }
-  applyRuntimeFeatureFlagOverrides(configManager, {
+  const featureOverrideErrors = applyRuntimeFeatureOverrides(configManager, {
     enableFeatures: cli.flags.enableFeatures,
     disableFeatures: cli.flags.disableFeatures,
   });
+  if (featureOverrideErrors.length > 0) {
+    console.error(featureOverrideErrors.join('\n'));
+    process.exit(2);
+  }
 
   if (cli.flags.provider !== undefined || cli.flags.model !== undefined) {
     const currentModel = configManager.get('provider.model');
@@ -207,8 +211,12 @@ export async function prepareShellCliRuntime(
     if (registrationMigration) {
       logger.info('Migrated the local workspace registry into the shared registration store', { ...registrationMigration });
     }
+    backfillCheckpointEligibilityIfNeeded(shellPaths);
     const checkpoints = {
-      workspaceRegistered: resolveWorkspaceRegistrationSync(shellPaths, bootstrapWorkingDir).status === 'covered',
+      // Honest to the checkpoint boundary: a workspace is "registered" for
+      // checkpoints only when it is checkpoint-ELIGIBLE (an explicit owner
+      // opt-in), not merely present in the shared store as a TUI self-record.
+      workspaceRegistered: resolveCheckpointEligibilitySync(shellPaths, bootstrapWorkingDir).status === 'covered',
       unregisteredWorkspaceMode: readCheckpointRegistrationSetting(configManager),
     };
     const statusOptions = {