Items marked REQUIRES USER ACTION need your authorization. Canvas link in ONBOARDING.md.

# Personal AI OS — Consolidated Onboarding Checkpoint

**Repo:** https://github.com/suavementefirma/personal-ai-os (PRIVATE)  
**Isolation:** Local Mac `nn-tmg` / ads-hub untouched (no `gh auth switch`, no Desktop clone)

Do not paste passwords or tokens into this file.

| # | Service | Status | Why needed | Permissions | Extra charges? | Affects TMG / nn-tmg? | Your action | Verify after |
|---|---------|--------|------------|-------------|----------------|----------------------|-------------|--------------|
| 1 | GitHub `suavementefirma` | **READY** | Own private OS repo | N/A | No | No | Done | Repo Private + owner suave |
| 2 | Cursor GitHub App on suave | **READY** (scope broad) | Cloud Agents access; currently **All repositories** on suave | Prefer narrowing to Selected → `personal-ai-os` only | No new GitHub fee | Suave-only install; optional tighten | Optional: [configure](https://github.com/settings/installations/112146693) → Selected: `personal-ai-os` only — Save needs your OK | Env lists `suavementefirma/personal-ai-os` (verified) |
| 3 | Cursor Cloud Agents | **REQUIRES USER ACTION** | Isolated cloud build | Plan Cloud Agents entitlement | Only if upgrade needed — **ask first** | No | [Cloud Agents](https://cursor.com/dashboard/cloud-agents) → open `personal-ai-os` | Agent clones repo + can PR |
| 4 | Codex ChatGPT (cloud) | **CLI installed; not logged in** (this VM) | Chief/research/verifier live | Device auth → ChatGPT subscription | Subscription usage only | No | **Local Cursor:** `codex login` (browser) — see `docs/LOCAL-CURSOR-RUNBOOK.md` | `bash scripts/codex-live-smoke.sh` |
| 5 | Cursor Agent CLI | **CLI installed; not logged in** (this VM) | Coding specialist live | `agent login` + `--trust` for non-interactive runs | Cursor plan usage | No | **Local Cursor:** `agent login` — see runbook | `PAIOS_LIVE_PROVIDERS=1 npm run smoke:live-providers` |
| 6 | Private Slack + PAIOS app | **READY** (live smoke pass) | Mobile bot (Socket Mode) | **PAIOS Bot** `A0CESQR86DN` on Zero2Hero — do not recreate | Usually free tier | Do **not** use TMG Slack | Runtime Secrets inject at agent boot; **`npm run smoke:slack`** | Socket Mode + `auth.test` (verified) |
| 7 | OpenAI Platform API | **NOT REQUIRED** | — | — | Pay-per-token forbidden | — | Do nothing | No `OPENAI_API_KEY` |
| 8 | Claude Code | **FORBIDDEN** | — | — | — | TMG risk | Do nothing | No Claude adapter |
| 9 | Ads Hub production | **MOCK ONLY** | Fixture bridge | — | — | Must not touch | Do nothing | Mock fixtures only |
| 10 | New VPS / Hostinger / Hetzner | **NOT REQUIRED YET** | — | — | Would cost | Business infra | Do nothing | No deploys |
| 11 | Z2H Chief export → PAIOS | **DONE (cloud)** | Agents, skills, memory seed, routines (disabled) | No secret values in git | No | Grokbot routines **not** activated | Chief 6-file export uploaded; `npm run import:z2h` | Tests 17/17; `/agents` shows import |

## Verified this session (evidence)

**Canvas (live status):** [PAIOS Onboarding Checkpoint](https://cursor.com/canvas/store-d1d4db1a-2eec-4cfd-a86e-8c8fc9287590/8738eb11-4d3a-494b-b3da-de71905c4a38)

- Runtime Secrets in process env (names only): `SLACK_BOT_TOKEN`, `SLACK_APP_TOKEN`, `SLACK_ALLOWED_USER_IDS`
- `bash scripts/install-provider-clis.sh` — Codex + Cursor Agent on PATH (`~/.local/bin`)
- `npm run verify:onboarding` — Slack tokens present; Codex/Cursor show **Not logged in** until browser auth
- `npm run smoke:slack` — **pass** on Cloud when Runtime Secrets inject at boot
- MVP tests: **25/25** pass; live runs gated by `PAIOS_LIVE_PROVIDERS` + CLI login
- **Next (browser required):** follow `docs/LOCAL-CURSOR-RUNBOOK.md` on Mac **or** complete device login in Cloud terminal when prompted
- **Slack E2E:** `npm run serve` then @mention/DM **PAIOS Bot** (allowlisted user); not 24/7 on ephemeral VM

## Links

1. https://github.com/suavementefirma/personal-ai-os  
2. https://github.com/settings/installations/112146693 (Cursor app on suave)  
3. https://cursor.com/dashboard/integrations  
4. https://cursor.com/dashboard/cloud-agents  
5. https://api.slack.com/apps  

## After #2–#3

Reply: **Cloud Agents connected to personal-ai-os — continue build.**