feat: add privacy-aware security manager onboarding

lib/agent/terminal-tools.mjs

@@ -6,6 +6,7 @@ export function createTerminalToolRegistry({
   getDelta,
   buildBrief,
   intelligenceStore,
+  securityProfileStore,
   triggerSweep,
   isSweepInProgress,
   telegramAlerter,
@@ -14,6 +15,10 @@ export function createTerminalToolRegistry({
   const deltaFor = runtime => runtime?.delta || getDelta?.() || null;
   return new TerminalToolRegistry([
     tool('get_system_status', 'Get server, sweep, LLM, Telegram, source, and memory health.', {}, async () => getHealth?.() || {}),
+    tool('get_security_profile', 'Get the operator-approved Security Manager profile for personal risk relevance, location, dependencies, mobility, alert preferences, and response language.', {}, async () => ({
+      available: Boolean(securityProfileStore?.exists),
+      profile: securityProfileStore?.getAgentProfile() || null,
+    })),
     tool('get_latest_brief', 'Build the latest operator intelligence brief.', {}, async (_args, runtime) => {
       const data = dataFor(runtime);
       return { brief: data && buildBrief ? buildBrief(data) : 'No completed sweep.' };