@pellux/goodvibes-daemon 1.28.9 → 1.28.11

package/CHANGELOG.md

@@ -6,6 +6,50 @@ All notable changes to the GoodVibes daemon.
 
 ## [Unreleased]
 
+## [1.28.11] - 2026-08-05
+
+### Changes
+
+- **Fixed: reminders respect being heard** (platform runtime 2.0.9). An
+  occasion nudge raises once at the lead boundary and at most once on the
+  day; a reply that engages the reminder records an acknowledgment in the
+  same turn and mutes that occurrence; the owner's own remember-only dates
+  never push at all. Over-nudged machines reconcile on first boot with a
+  receipt. The new `occasions.acknowledge` verb carries the acknowledgment;
+  `occasions.finalStretchDays` is retired with a receipted migration.
+- Fixed: a dead runtime record reaps itself instead of making daemon-owned
+  settings unreadable; wake transcription is daemon-first with failure
+  evidence in diagnostics; the managed voice installer supersedes stale
+  manual paths by name and proves itself with a spoken round trip.
+- Changed: setup flows complete the inferred intent — propose extensions,
+  ask at genuine forks, never hand the user a command; the Google
+  walkthrough accepts pasted values in-conversation and answers with the
+  consent link.
+
+## [1.28.10] - 2026-08-05
+
+### Changes
+
+- **Fixed: this daemon's answers match its own contract.** Profile field
+  reads leaked internal properties past a strict schema, so up-to-date
+  clients refused every profile answer and the platform could not tell its
+  owner his own address. Responses are explicit wire projections now, and a
+  conformance test runs the real routes against the contract (platform
+  runtime 2.0.8).
+- **Fixed: one control-plane store.** A path defect made every boot rewrite
+  a legacy store nothing reads; state that still lived only at the legacy
+  location (occasions, workspace registrations) migrates to the daemon's
+  surface-scoped store on boot with a receipt, duplicates are quarantined
+  with receipts, and the legacy directory empties and is removed.
+- **Changed: the daemon hosts conversation turns for the agent.** Hosted
+  session event streams are render-grade and session-scoped, so a client
+  rendering from the stream sees what the model said and what it did — and
+  agent conversations become genuinely cross-visible with their messages.
+- Changed: connecting Google is one action, with every needed scope in a
+  single consent and a live mail-and-calendar proof at the end; the settings
+  catalog now carries the calendar/google/email keys this daemon really
+  reads (platform runtime 2.0.8).
+
 ## [1.28.9] - 2026-08-02
 
 ### Changes

package/README.md

@@ -2,7 +2,7 @@
 
 [![CI](https://github.com/mgd34msu/goodvibes-daemon/actions/workflows/ci.yml/badge.svg)](https://github.com/mgd34msu/goodvibes-daemon/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Version](https://img.shields.io/badge/version-1.28.9-blue.svg)](https://github.com/mgd34msu/goodvibes-daemon)
+[![Version](https://img.shields.io/badge/version-1.28.11-blue.svg)](https://github.com/mgd34msu/goodvibes-daemon)
 
 The GoodVibes daemon: one long-running process per machine that holds the control plane every
 GoodVibes client talks to. It answers the operator verb families over HTTP, reads and replies on

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pellux/goodvibes-daemon",
-  "version": "1.28.9",
+  "version": "1.28.11",
   "description": "The GoodVibes daemon \u2014 the one long-running host for the control plane, channels, cluster membership, scheduled work, knowledge and memory stores, and the verb families every GoodVibes client calls.",
   "type": "module",
   "main": "src/daemon/cli.ts",
@@ -65,8 +65,8 @@
     "@anthropic-ai/bedrock-sdk": "^0.28.1",
     "@anthropic-ai/sdk": "^0.82.0",
     "@ast-grep/napi": "^0.42.0",
-    "@pellux/goodvibes-sdk": "2.0.7",
-    "@pellux/goodvibes-terminal-shell": "2.0.7",
+    "@pellux/goodvibes-sdk": "2.0.9",
+    "@pellux/goodvibes-terminal-shell": "2.0.9",
     "bash-language-server": "^5.6.0",
     "fuse.js": "^7.1.0",
     "graphql": "^16.13.2",

package/src/runtime/runtime-services-types.ts

@@ -102,6 +102,13 @@ export interface RuntimeServicesOptions {
 export interface RuntimeServices {
   readonly workingDirectory: string;
   readonly homeDirectory: string;
+  /**
+   * The `.goodvibes/<surface root>/` segment this daemon's own state lives
+   * under — always GOODVIBES_DAEMON_SURFACE_ROOT here (config/surface.ts).
+   * Declared so a consumer ASKS for it instead of deriving a second one; the
+   * unscoped pre-split control-plane store is what deriving it twice produced.
+   */
+  readonly surfaceRoot: string;
   /** The declare-once session-storage handle every session reader and writer threads through. */
   readonly surface: SessionSurface;
   readonly shellPaths: ShellPathService;

package/src/runtime/services.ts

@@ -2,7 +2,7 @@ import { join } from 'node:path';
 import { ServiceRegistry, SubscriptionManager, ToolLLM } from '@pellux/goodvibes-sdk/platform/config';
 import { AutomationDeliveryManager, AutomationManager } from '@pellux/goodvibes-sdk/platform/automation';
 import { ChannelPolicyManager } from '@pellux/goodvibes-sdk/platform/channels';
-import { ApprovalBroker, GatewayMethodCatalog, SharedSessionBroker, buildSharedSessionAgentSpawnRoutingInput } from '@pellux/goodvibes-sdk/platform/control-plane';
+import { ApprovalBroker, GatewayMethodCatalog, SharedSessionBroker, buildSharedSessionAgentSpawnRoutingInput, controlPlaneStorePath } from '@pellux/goodvibes-sdk/platform/control-plane';
 import { AcpHostService } from '@pellux/goodvibes-sdk/platform/acp';
 import { continuationChainOptions } from '@pellux/goodvibes-sdk/platform/agents';
 import { PersonalCaptureHolder, conversationalTurnSpawnOptions } from '@pellux/goodvibes-sdk/platform/personal-capture';
@@ -132,7 +132,7 @@ export function createRuntimeServices(options: RuntimeServicesOptions): RuntimeS
   const { secretsManager, stepUpService, pairingTokens } = composeCredentialServices({
     workingDirectory, homeDirectory, configManager,
     daemonHomeDirectory: options.daemonHomeDirectory,
-    pairingTokenPath: shellPaths.resolveUserPath('control-plane', 'pairing-tokens.json'),
+    pairingTokenPath: controlPlaneStorePath(shellPaths, GOODVIBES_DAEMON_SURFACE_ROOT, 'pairing-tokens.json'),
   });
   const subscriptionManager = new SubscriptionManager(shellPaths.resolveUserPath(GOODVIBES_DAEMON_SURFACE_ROOT, 'subscriptions.json'));
   const serviceRegistry = new ServiceRegistry(shellPaths.resolveProjectPath(GOODVIBES_DAEMON_SURFACE_ROOT, 'services.json'), {
@@ -526,6 +526,10 @@ export function createRuntimeServices(options: RuntimeServicesOptions): RuntimeS
   // calendar.*/email.* are platform-served; these two let it register (mail-composition.ts).
   const { emailServiceDeps, describeEmailConfigProblem } = composeMailDeps({ configManager, secretsManager });
   attachWsOnlyGatewayVerbHandlers(gatewayMethods, {
+    // The surface segment every control-plane store path is built from
+    // (SDK control-plane-store-paths.ts). Required, not defaulted: a default
+    // is what let these stores write to the unscoped orphan directory.
+    surfaceRoot: GOODVIBES_DAEMON_SURFACE_ROOT,
     homeDirectory, emailServiceDeps, describeEmailConfigProblem, processRegistry,
     // The registration-gated surface, not the raw manager: an explicit create in
     // an unregistered workspace refuses with something actionable.
@@ -658,6 +662,7 @@ export function createRuntimeServices(options: RuntimeServicesOptions): RuntimeS
   const services: RuntimeServices = {
     workingDirectory,
     homeDirectory,
+    surfaceRoot: GOODVIBES_DAEMON_SURFACE_ROOT,
     surface,
     shellPaths,
     workspaceTrustManager,

package/src/runtime/trust/checkpoint-eligibility.ts

@@ -1,4 +1,5 @@
 import { existsSync, readFileSync } from 'node:fs';
+import { resolveWorkspaceRegisterReadPath } from '@pellux/goodvibes-sdk/platform/workspace';
 import type { ShellPathService } from '@/runtime/index.ts';
 import {
   normalizeWorkspaceRoot,
@@ -30,9 +31,24 @@ import {
 
 export type StoreShellPaths = Pick<ShellPathService, 'resolveUserPath' | 'homeDirectory'>;
 
-/** Path of the shared store's JSON document — the same path the SDK's gateway verb group constructs its own store over. */
+/**
+ * Path of the shared store's JSON document — the same path the SDK's gateway
+ * verb group constructs its own store over.
+ *
+ * "The same path" is the whole contract, and it is why this goes through the
+ * SDK's resolver rather than spelling any location out. goodvibes-agent reads
+ * and writes this same file directly and the SDK's gateway writes it, so the
+ * register is cross-product state rather than the daemon's own — it lives in
+ * the shared tier (~/.goodvibes/shared/), which takes no surface root, so all
+ * three resolve one identical path. Until the boot fold has moved it, the
+ * resolver falls back to the pre-split location read-only, so this reader never
+ * reports an empty register and silently refuses every checkpoint.
+ */
 export function sharedWorkspaceRegistrationStorePath(shellPaths: StoreShellPaths): string {
-  return shellPaths.resolveUserPath('control-plane', 'workspace-registrations.json');
+  // READ path: the shared tier when it is there, the pre-split location until
+  // the daemon's boot fold has moved it. This is a reader, so the fallback is
+  // read-only and nothing here ever writes to the legacy address.
+  return resolveWorkspaceRegisterReadPath(shellPaths, existsSync);
 }
 
 function isRecord(value: unknown): value is Record<string, unknown> {

package/src/version.ts

@@ -6,7 +6,7 @@ import { join } from 'node:path';
 // The prebuild script updates the fallback value before compilation.
 // Uses import.meta.dir (Bun) to locate package.json relative to this file,
 // which is correct regardless of the process working directory.
-let _version = '1.28.9';
+let _version = '1.28.11';
 try {
   const pkg = JSON.parse(readFileSync(join(import.meta.dir, '..', 'package.json'), 'utf-8'));
   // Only trust a version read from OUR OWN package.json. A Bun single-file