diff --git a/dot_aerospace.toml b/dot_aerospace.toml
index 8c6696e0..3a49a2a1 100644
--- a/dot_aerospace.toml
+++ b/dot_aerospace.toml
@@ -195,18 +195,6 @@ esc = 'mode main'
 if.app-id = "com.mitchellh.ghostty"
 run = ['layout tiling', 'move-node-to-workspace 1']
 
-[[on-window-detected]]
-if.app-id = "app.supabit.supaterm"
-run = ['layout tiling', 'move-node-to-workspace 1']
-
-[[on-window-detected]]
-if.app-id = "app.supabit.supacode"
-run = ['layout tiling', 'move-node-to-workspace 1']
-
-[[on-window-detected]]
-if.app-id = 'app.zen-browser.zen'
-run = 'move-node-to-workspace 2'
-
 [[on-window-detected]]
 if.app-id = 'com.apple.Safari'
 run = 'move-node-to-workspace 2'
@@ -263,22 +251,10 @@ run = 'move-node-to-workspace 4'
 if.app-id = 'dev.zed.Zed'
 run = ['layout tiling', 'move-node-to-workspace 5']
 
-[[on-window-detected]]
-if.app-id = 'com.openai.codex'
-run = ['layout tiling', 'move-node-to-workspace 5']
-
-[[on-window-detected]]
-if.app-id = 'com.openai.chat'
-run = ['layout tiling', 'move-node-to-workspace 6']
-
 [[on-window-detected]]
 if.app-id = 'com.anthropic.claudefordesktop'
 run = ['layout tiling', 'move-node-to-workspace 6']
 
-[[on-window-detected]]
-if.app-id = 'com.google.GeminiMacOS'
-run = ['layout tiling', 'move-node-to-workspace 6']
-
 [[on-window-detected]]
 if.app-id = 'com.usebruno.app'
 run = ['layout tiling', 'move-node-to-workspace 7']
diff --git a/dot_config/private_fish/config.fish b/dot_config/private_fish/config.fish
index b5450dc6..02cb1eb2 100644
--- a/dot_config/private_fish/config.fish
+++ b/dot_config/private_fish/config.fish
@@ -143,6 +143,9 @@ zoxide init fish | source
 mise activate fish | source
 atuin init fish --disable-up-arrow | source
 source $HOME/.config/television/shell/integration.fish
+for mode in default insert
+    bind --mode $mode \ct tv_channels
+end
 
 # Done plugin config
 set -U __done_min_cmd_duration 10000
diff --git a/dot_config/private_fish/functions/tv_channels.fish b/dot_config/private_fish/functions/tv_channels.fish
new file mode 100644
index 00000000..b1220eed
--- /dev/null
+++ b/dot_config/private_fish/functions/tv_channels.fish
@@ -0,0 +1,4 @@
+function tv_channels --description 'Open the Television channel selector'
+    tv channels --inline
+    commandline -f repaint
+end
diff --git a/dot_config/starship.toml b/dot_config/starship.toml
index 7bf8501f..5d781002 100644
--- a/dot_config/starship.toml
+++ b/dot_config/starship.toml
@@ -30,7 +30,7 @@ mantle = "#181825"
 crust = "#11111b"
 
 [aws]
-disabled = true
+disabled = false
 
 [gcloud]
 disabled = true
@@ -54,7 +54,7 @@ disabled = false
 disabled = true
 
 [kubernetes]
-format = '[⛵$context](green) '
+# format = '[⛵$context](green) '
 disabled = true
 
 [mise]
diff --git a/dot_config/television/cable/aws-profiles.toml b/dot_config/television/cable/aws-profiles.toml
index 165a25d2..ecc82e89 100644
--- a/dot_config/television/cable/aws-profiles.toml
+++ b/dot_config/television/cable/aws-profiles.toml
@@ -14,8 +14,14 @@ size = 40
 
 [keybindings]
 enter = "actions:export"
+ctrl-enter = "actions:sso-login"
 
 [actions.export]
 description = "Export the selected profile (sets AWS_PROFILE)"
 command = "export AWS_PROFILE={} && echo \"AWS_PROFILE set to {}\" && $SHELL"
 mode = "execute"
+
+[actions.sso-login]
+description = "SSO login then export the selected profile (sets AWS_PROFILE)"
+command = "export AWS_PROFILE={} && aws sso login --profile {} && echo \"AWS_PROFILE set to {}\" && $SHELL"
+mode = "execute"
diff --git a/dot_pi/agent/extensions/guardrails.json b/dot_pi/agent/extensions/guardrails.json
index fbca63c2..805d03ce 100644
--- a/dot_pi/agent/extensions/guardrails.json
+++ b/dot_pi/agent/extensions/guardrails.json
@@ -92,6 +92,9 @@
           {
             "pattern": "**/secrets/**"
           },
+          {
+            "pattern": "**/vault_password"
+          },
           {
             "pattern": "~/.aws/**"
           },