@pellux/goodvibes-tui 0.18.23 → 0.19.0

package/CHANGELOG.md

@@ -4,6 +4,40 @@ All notable changes to GoodVibes TUI.
 
 ---
 
+## [0.19.0] — 2026-04-18
+
+### Changed
+- Upgraded `@pellux/goodvibes-sdk` from 0.19.6 to 0.21.1 (soak-period release).
+  TUI adaptation required: regenerated `docs/foundation-artifacts/operator-contract.json`
+  to match the updated `buildOperatorContract()` output in the new SDK version.
+  `peer-contract.json`, `knowledge-graphql.graphql`, and `knowledge-store.sql` were
+  unchanged by this SDK bump.
+
+### Added
+- Wave B panel migration: migrated 5 panels (knowledge, marketplace, memory,
+  system-messages, orchestration) to `ScrollableListPanel<T>`/`SearchableListPanel<T>`
+  generics; added `docs/panel-authoring.md` as the canonical panel authoring guide.
+- Wave C-α reliability pass: F-perf-01 (trackedRender on 5 hot panels),
+  F-perf-02 (async panel fs + skills-panel de-blocking), F-perf-03 (timer registry
+  + 5-panel zombie-timer leak prevention), F-errors-02 (observable async failures —
+  no silent `.catch(() => {})`), F-sec-02 (ANSI escape sanitization at
+  tool-call untrusted-content entry points).
+- `src/input/settings-modal-types.ts`: extracted `SettingsCategory`,
+  `SETTINGS_CATEGORIES`, `SettingEntry`, `FlagEntry`, `McpEntry`,
+  `SubscriptionEntry` type definitions out of the settings-modal module.
+
+### Security
+- Postinstall patcher from `@pellux/goodvibes-sdk@0.21.1` mitigates three
+  minimatch ReDoS advisories in the consumer install tree.
+- Added `overrides: { minimatch: ^10.2.5 }` to TUI's own `package.json`
+  so `npm audit` reports clean for the TUI install tree independently.
+
+### Fixed
+- Foundation artifacts gate now passes: `operator-contract.json` updated to
+  match SDK 0.21.1 `buildOperatorContract()` canonical output.
+
+---
+
 ## [0.18.23] — 2026-04-16
 
 ### Wave 4α+β performance bundle + α review follow-ups + regression fixes

package/README.md

@@ -2,7 +2,7 @@
 
 [![CI](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml/badge.svg)](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Version](https://img.shields.io/badge/version-0.18.23-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
+[![Version](https://img.shields.io/badge/version-0.19.0-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
 
 A terminal-native AI coding, operations, automation, knowledge, and integration console with a typed runtime, omnichannel surfaces, structured memory/knowledge, and a raw ANSI renderer.
 

package/docs/foundation-artifacts/operator-contract.json

@@ -3,7 +3,7 @@
   "product": {
     "id": "goodvibes",
     "surface": "operator",
-    "version": "0.18.37"
+    "version": "0.21.1"
   },
   "auth": {
     "modes": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pellux/goodvibes-tui",
-  "version": "0.18.23",
+  "version": "0.19.0",
   "description": "Terminal-native GoodVibes product for coding, operations, automation, knowledge, channels, and daemon-backed control-plane workflows.",
   "type": "module",
   "main": "src/main.ts",
@@ -89,7 +89,7 @@
     "@anthropic-ai/vertex-sdk": "^0.16.0",
     "@ast-grep/napi": "^0.42.0",
     "@aws/bedrock-token-generator": "^1.1.0",
-    "@pellux/goodvibes-sdk": "0.18.37",
+    "@pellux/goodvibes-sdk": "0.21.1",
     "bash-language-server": "^5.6.0",
     "fuse.js": "^7.1.0",
     "graphql": "^16.13.2",
@@ -115,8 +115,12 @@
     "typescript": "^5.9.3"
   },
   "trustedDependencies": [
+    "@pellux/goodvibes-sdk",
     "tree-sitter-css",
     "tree-sitter-javascript",
     "tree-sitter-python"
-  ]
+  ],
+  "overrides": {
+    "minimatch": "^10.2.5"
+  }
 }

package/src/core/conversation-rendering.ts

@@ -110,12 +110,14 @@ export function renderConversationAssistantMessage(
     //      determines `numWidth` (digit count) and thus `gutterW` (gutter column width).
     //   2. Render pass: render at `width - gutterW` with the gutter factored in.
     //
-    // Single-pass is not feasible here because `numWidth` depends on `totalLines`,
-    // which is unknown before rendering. The 4α commit message claim that this
-    // "eliminates double-parse when line numbers are enabled" was inaccurate:
-    // 4α eliminated the legacy `renderMarkdown()` duplicate that was used for the
-    // code-block line-number mode ('code'). The 'all' mode double-call is unavoidable
-    // by design and remains unchanged.
+    // Single-pass is not pursued here. It would require either a pessimistic
+    // `numWidth=6` (fits 999,999 lines, but wastes 3-4 gutter columns on typical
+    // messages) or rendering the numbered output into a scratch buffer and trimming.
+    // Neither is clearly better than the current two-pass measurement approach.
+    // The 4α commit message claim that this "eliminates double-parse when line
+    // numbers are enabled" was inaccurate: 4α eliminated the legacy
+    // `renderMarkdown()` duplicate used for code-block line-number mode ('code').
+    // The 'all' mode double-call is a deliberate design choice and remains unchanged.
     const measureWidth = showAllLineNumbers ? width : 0;
     const totalLines = showAllLineNumbers
       ? renderMarkdownTracked(message.content, measureWidth, { codeBlockLineNumbers: false }).lines.length

package/src/core/orchestrator.ts

@@ -1,3 +1,3 @@
 // Thin TUI wrapper — re-exports the SDK Orchestrator unchanged.
 // The SDK class already contains all behaviour including getSpinner().
-export { Orchestrator } from '@pellux/goodvibes-sdk/platform/core/orchestrator';
+export { Orchestrator, type OrchestratorOptions } from '@pellux/goodvibes-sdk/platform/core/orchestrator';

package/src/input/commands/diff-runtime.ts

@@ -1,4 +1,5 @@
 import { join } from 'path';
+import { logger } from '@pellux/goodvibes-sdk/platform/utils/logger';
 import type { CommandRegistry } from '../command-registry.ts';
 import { requirePanelManager, requireSessionChangeTracker, requireShellPaths } from './runtime-services.ts';
 
@@ -86,7 +87,7 @@ export function registerDiffRuntimeCommands(registry: CommandRegistry): void {
             return (await new Response(proc.stdout).text()).trim().split('\n').filter(Boolean);
           })();
           if (workingChangedFiles.length > 0) {
-            enrichSemanticDiff(diffPanel, workingChangedFiles, 'HEAD', () => ctx.renderRequest(), workingDirectory).catch(() => {});
+            enrichSemanticDiff(diffPanel, workingChangedFiles, 'HEAD', () => ctx.renderRequest(), workingDirectory).catch((err) => { logger.debug('semantic diff enrichment failed', { err }); });
           }
           break;
         }
@@ -111,7 +112,7 @@ export function registerDiffRuntimeCommands(registry: CommandRegistry): void {
               return (await new Response(stagedProc.stdout).text()).trim().split('\n').filter(Boolean);
             })();
             if (stagedChangedFiles.length > 0) {
-              enrichSemanticDiff(diffPanel, stagedChangedFiles, 'HEAD', () => ctx.renderRequest(), workingDirectory).catch(() => {});
+              enrichSemanticDiff(diffPanel, stagedChangedFiles, 'HEAD', () => ctx.renderRequest(), workingDirectory).catch((err) => { logger.debug('semantic diff enrichment failed', { err }); });
             }
           }
           break;
@@ -126,7 +127,7 @@ export function registerDiffRuntimeCommands(registry: CommandRegistry): void {
             return (await new Response(proc.stdout).text()).trim().split('\n').filter(Boolean);
           })();
           if (headChangedFiles.length > 0) {
-            enrichSemanticDiff(diffPanel, headChangedFiles, 'HEAD', () => ctx.renderRequest(), workingDirectory).catch(() => {});
+            enrichSemanticDiff(diffPanel, headChangedFiles, 'HEAD', () => ctx.renderRequest(), workingDirectory).catch((err) => { logger.debug('semantic diff enrichment failed', { err }); });
           }
           break;
         }
@@ -137,7 +138,7 @@ export function registerDiffRuntimeCommands(registry: CommandRegistry): void {
             ctx.print(`Loading session diff (${sessionFiles.length} file${sessionFiles.length === 1 ? '' : 's'} changed this session)...`);
             await diffPanel.showFileDiffs(sessionFiles, 'HEAD');
             ctx.print(`Diff panel updated: ${sessionFiles.length} session file${sessionFiles.length === 1 ? '' : 's'}.`);
-            enrichSemanticDiff(diffPanel, sessionFiles, 'HEAD', () => ctx.renderRequest(), workingDirectory).catch(() => {});
+            enrichSemanticDiff(diffPanel, sessionFiles, 'HEAD', () => ctx.renderRequest(), workingDirectory).catch((err) => { logger.debug('semantic diff enrichment failed', { err }); });
           } else {
             ctx.print('No session changes tracked yet. Showing diff vs HEAD...');
             await diffPanel.showGitDiff('HEAD');
@@ -148,7 +149,7 @@ export function registerDiffRuntimeCommands(registry: CommandRegistry): void {
               return (await new Response(proc.stdout).text()).trim().split('\n').filter(Boolean);
             })();
             if (fallbackFiles.length > 0) {
-              enrichSemanticDiff(diffPanel, fallbackFiles, 'HEAD', () => ctx.renderRequest(), workingDirectory).catch(() => {});
+              enrichSemanticDiff(diffPanel, fallbackFiles, 'HEAD', () => ctx.renderRequest(), workingDirectory).catch((err) => { logger.debug('semantic diff enrichment failed', { err }); });
             }
           }
           break;

package/src/input/commands/guidance-runtime.ts

@@ -64,7 +64,7 @@ export function registerGuidanceRuntimeCommands(registry: CommandRegistry): void
       }
 
       const providerApi = requireProviderApi(ctx);
-      const currentModel = await providerApi.getCurrentModel().catch(() => null);
+      const currentModel = await providerApi.getCurrentModel().catch(() => null); // best-effort: null handled as unknown context window
       const llmMessages = ctx.session.conversationManager.getMessagesForLLM();
       const readModels = requireReadModels(ctx);
       const session = readModels.session.getSnapshot();

package/src/input/commands/health-runtime.ts

@@ -240,7 +240,7 @@ export function registerHealthRuntimeCommands(registry: CommandRegistry): void {
       if (sub === 'maintenance') {
         const session = readModels.session.getSnapshot();
         const providerApi = requireProviderApi(ctx);
-        const currentModel = await providerApi.getCurrentModel().catch(() => null);
+        const currentModel = await providerApi.getCurrentModel().catch(() => null); // best-effort: null handled as unknown context window
         const llmMessages = typeof ctx.session.conversationManager.getMessagesForLLM === 'function'
           ? ctx.session.conversationManager.getMessagesForLLM()
           : [];
@@ -369,7 +369,7 @@ export function registerHealthRuntimeCommands(registry: CommandRegistry): void {
 
       const session = readModels.session.getSnapshot();
       const providerApi = requireProviderApi(ctx);
-      const currentModel = await providerApi.getCurrentModel().catch(() => null);
+      const currentModel = await providerApi.getCurrentModel().catch(() => null); // best-effort: null handled as unknown context window
       const llmMessages = typeof ctx.session.conversationManager.getMessagesForLLM === 'function'
         ? ctx.session.conversationManager.getMessagesForLLM()
         : [];

package/src/input/commands/local-setup-review.ts

@@ -22,7 +22,7 @@ export async function buildSetupReviewSnapshot(ctx: CommandContext): Promise<Set
     }
   }
 
-  const skills = discoverSkills(shellPaths);
+  const skills = await discoverSkills(shellPaths);
   const security = requireReadModels(ctx).security.getSnapshot();
   const plugins = security.plugins;
   const mcpServers = security.mcpServers;

package/src/input/commands/session-content.ts

@@ -161,7 +161,7 @@ export function registerSessionContentCommands(registry: CommandRegistry): void
 
   registry.register({
     name: 'undo',
-    aliases: ['u'],
+    aliases: [],
     description: 'Undo last action. /undo file — revert last file write/edit. /undo — remove last conversation turn.',
     usage: '[file]',
     argsHint: '[file]',

package/src/input/commands/shell-core.ts

@@ -5,6 +5,7 @@ import { REASONING_BUDGET_MAP } from '@pellux/goodvibes-sdk/platform/providers/i
 import { executeWriteQuit } from './quit-shared.ts';
 import { compactConversation, requireKeybindingsManager, requireProviderApi } from './runtime-services.ts';
 import { summarizeError } from '@pellux/goodvibes-sdk/platform/utils/error-display';
+import { logger } from '@pellux/goodvibes-sdk/platform/utils/logger';
 
 export function registerShellCoreCommands(registry: CommandRegistry): void {
   registry.register({
@@ -34,7 +35,7 @@ export function registerShellCoreCommands(registry: CommandRegistry): void {
           ctx.platform.configManager.set('provider.model', selected.registryKey);
           ctx.platform.configManager.set('provider.provider', selected.providerId);
           ctx.print(`Switched to model: ${selected.displayName} (${selected.providerId})`);
-          void providerApi.recordModelUsage(selected.registryKey).catch(() => undefined);
+          void providerApi.recordModelUsage(selected.registryKey).catch((err) => { logger.debug('model usage record failed', { err }); });
         } catch (e) {
           ctx.print(`Error: ${summarizeError(e)}`);
         }
@@ -202,7 +203,7 @@ export function registerShellCoreCommands(registry: CommandRegistry): void {
 
   registry.register({
     name: 'quit',
-    aliases: ['q', ':q'],
+    aliases: [':q'],
     description: 'Exit the application',
     handler(_args, ctx) {
       ctx.exit();

package/src/input/commands/skills-runtime.ts

@@ -19,7 +19,7 @@ export function registerSkillsRuntimeCommands(registry: CommandRegistry): void {
     aliases: ['skill'],
     description: 'Inspect installed skill packs',
     usage: '[open|list|show <name>|origins|browse [query]|installed|catalog-review <id>|publish-local <id> <path> <summary...>|unpublish <id>|install-hint <catalog-id>|install <id> [project|user]|update <id> [project|user]|uninstall <id> [project|user]]',
-    handler(args, ctx) {
+    async handler(args, ctx) {
       const sub = args[0] ?? 'open';
       if (sub === 'open' || sub === 'panel') {
         if (ctx.showPanel) ctx.showPanel('skills');
@@ -31,7 +31,7 @@ export function registerSkillsRuntimeCommands(registry: CommandRegistry): void {
         }
         return;
       }
-      const skills = discoverSkills(requireShellPaths(ctx));
+      const skills = await discoverSkills(requireShellPaths(ctx));
       const ecosystemPaths = requireEcosystemCatalogPaths(ctx);
       if (sub === 'list') {
         if (skills.length === 0) {

package/src/input/commands/subscription-runtime.ts

@@ -174,7 +174,7 @@ export function registerSubscriptionRuntimeCommands(registry: CommandRegistry):
           const openBrowser = !flags.has('--no-browser');
           const useManualMode = flags.has('--manual');
           if (provider === 'openai' && resolved.source === 'builtin') {
-            const started = beginOpenAICodexLogin();
+            const started = await beginOpenAICodexLogin();
             manager.savePending({
               provider,
               state: started.state,
@@ -191,7 +191,7 @@ export function registerSubscriptionRuntimeCommands(registry: CommandRegistry):
                   host: '127.0.0.1',
                   port: 1455,
                   path: '/auth/callback',
-                }).catch(() => null);
+                }).catch(() => null); // best-effort: listener creation is optional; null triggers manual flow
               } catch {
                 listener = null;
               }
@@ -272,14 +272,14 @@ export function registerSubscriptionRuntimeCommands(registry: CommandRegistry):
               host: resolved.oauth.localCallback.host,
               port: resolved.oauth.localCallback.port,
               path: resolved.oauth.localCallback.path,
-            }).catch(() => null);
+            }).catch(() => null); // best-effort: local callback listener is optional; null falls back to manual redirect
           }
 
           if (listener) {
             activeConfig = { ...activeConfig, redirectUri: listener.redirectUri };
           }
 
-          const started = manager.beginOAuthLogin(provider, activeConfig);
+          const started = await manager.beginOAuthLogin(provider, activeConfig);
           if (listener) {
             listener.setExpectedState(started.pending.state);
           }

package/src/input/handler.ts

@@ -81,7 +81,7 @@ import {
 } from './handler-picker-routes.ts';
 import { handleGlobalShortcutToken } from './handler-shortcuts.ts';
 import { feedInputTokens } from './handler-feed.ts';
-import { buildInitialFeedContext } from './feed-context-factory.ts';
+import { buildInitialFeedContext, syncFeedContextMutableFields } from './feed-context-factory.ts';
 import { handlePanelIntegrationAction as runPanelIntegrationAction } from './panel-integration-actions.ts';
 import type { Panel } from '../panels/types.ts';
 import type { UiRuntimeServices } from '../runtime/ui-services.ts';
@@ -292,15 +292,13 @@ export class InputHandler {
 
   /** Sync mutable handler fields back into feedContext after in-feed mutations. */
   private syncFeedContextMutableFields(): void {
-    const ctx = this.feedContext;
-    ctx.prompt = this.prompt; ctx.cursorPos = this.cursorPos;
-    ctx.commandMode = this.commandMode; ctx.panelFocused = this.panelFocused;
-    ctx.indicatorFocused = this.indicatorFocused;
-    ctx.helpOverlayActive = this.helpOverlayActive; ctx.helpScrollOffset = this.helpScrollOffset;
-    ctx.shortcutsOverlayActive = this.shortcutsOverlayActive; ctx.shortcutsScrollOffset = this.shortcutsScrollOffset;
-    ctx.selectionCallback = this.selectionCallback;
-    ctx.nextPasteId = this.nextPasteId; ctx.nextImageId = this.nextImageId;
-    ctx.mouseDownRow = this.mouseDownRow; ctx.mouseDownCol = this.mouseDownCol;
+    const h = this;
+    syncFeedContextMutableFields({ prompt: h.prompt, cursorPos: h.cursorPos, commandMode: h.commandMode,
+      panelFocused: h.panelFocused, indicatorFocused: h.indicatorFocused, helpOverlayActive: h.helpOverlayActive,
+      helpScrollOffset: h.helpScrollOffset, shortcutsOverlayActive: h.shortcutsOverlayActive,
+      shortcutsScrollOffset: h.shortcutsScrollOffset, selectionCallback: h.selectionCallback,
+      nextPasteId: h.nextPasteId, nextImageId: h.nextImageId, mouseDownRow: h.mouseDownRow,
+      mouseDownCol: h.mouseDownCol, contentWidth: h.contentWidth }, this.feedContext);
   }
 
   /** Wire in the InputHistory instance. Optional; disables history navigation if unset. */

package/src/input/panel-integration-actions.ts

@@ -1,4 +1,5 @@
 import type { CommandContext } from './command-registry.ts';
+import { logger } from '@pellux/goodvibes-sdk/platform/utils/logger';
 import type { Panel } from '../panels/types.ts';
 import type { PanelManager } from '../panels/panel-manager.ts';
 import { FileExplorerPanel } from '../panels/file-explorer-panel.ts';
@@ -69,7 +70,7 @@ export function handlePanelIntegrationAction(
     const parts = command.replace(/^\//, '').split(/\s+/).filter(Boolean);
     const [name, ...args] = parts;
     if (!name) return false;
-    void commandContext.executeCommand(name, args).catch(() => {});
+    void commandContext.executeCommand(name, args).catch((err) => { logger.debug('approval panel command dispatch failed', { err }); });
     return true;
   }
 

package/src/input/settings-modal-types.ts

@@ -0,0 +1,60 @@
+import type { ConfigSetting } from '@pellux/goodvibes-sdk/platform/config/schema';
+import type { ProviderAuthFreshness, ProviderAuthRoute } from '@pellux/goodvibes-sdk/platform/runtime/provider-accounts/registry';
+import type { FeatureFlag, FlagState } from '@pellux/goodvibes-sdk/platform/runtime/feature-flags/types';
+
+export type SettingsCategory = 'display' | 'ui' | 'provider' | 'subscriptions' | 'behavior' | 'storage' | 'permissions' | 'mcp' | 'sandbox' | 'danger' | 'tools' | 'flags' | 'network';
+
+export const SETTINGS_CATEGORIES: SettingsCategory[] = [
+  'display',
+  'ui',
+  'provider',
+  'subscriptions',
+  'behavior',
+  'storage',
+  'permissions',
+  'mcp',
+  'sandbox',
+  'danger',
+  'tools',
+  'flags',
+  'network',
+];
+
+export interface SettingEntry {
+  setting: ConfigSetting;
+  currentValue: unknown;
+  isDefault: boolean;
+  effectiveSource?: 'default' | 'local' | 'synced' | 'managed';
+  locked?: boolean;
+  conflict?: boolean;
+  sourceLabel?: string;
+  lockReason?: string;
+}
+
+export interface FlagEntry {
+  flag: FeatureFlag;
+  state: FlagState;
+}
+
+export interface McpEntry {
+  name: string;
+  connected: boolean;
+  role: 'general' | 'docs' | 'filesystem' | 'git' | 'database' | 'browser' | 'automation' | 'ops' | 'remote';
+  trustMode: 'constrained' | 'ask-on-risk' | 'allow-all' | 'blocked';
+  allowedPaths: string[];
+  allowedHosts: string[];
+}
+
+export interface SubscriptionEntry {
+  provider: string;
+  state: 'active' | 'pending' | 'available';
+  tokenType?: string;
+  expiresAt?: number;
+  oauthConfigured: boolean;
+  activeRoute?: ProviderAuthRoute;
+  preferredRoute?: ProviderAuthRoute;
+  authFreshness?: ProviderAuthFreshness;
+  routeReason?: string;
+  issues?: string[];
+  nextActions?: string[];
+}

package/src/input/settings-modal.ts

@@ -23,67 +23,23 @@ import type { FeatureFlag, FlagState } from '@pellux/goodvibes-sdk/platform/runt
 import type { McpRegistry } from '@pellux/goodvibes-sdk/platform/mcp/registry';
 import { logger } from '@pellux/goodvibes-sdk/platform/utils/logger';
 import { summarizeError } from '@pellux/goodvibes-sdk/platform/utils/error-display';
-
-// ---------------------------------------------------------------------------
-// Types
-// ---------------------------------------------------------------------------
-
-export type SettingsCategory = 'display' | 'ui' | 'provider' | 'subscriptions' | 'behavior' | 'storage' | 'permissions' | 'mcp' | 'sandbox' | 'danger' | 'tools' | 'flags';
-
-export const SETTINGS_CATEGORIES: SettingsCategory[] = [
-  'display',
-  'ui',
-  'provider',
-  'subscriptions',
-  'behavior',
-  'storage',
-  'permissions',
-  'mcp',
-  'sandbox',
-  'danger',
-  'tools',
-  'flags',
-];
-
-export interface SettingEntry {
-  setting: ConfigSetting;
-  currentValue: unknown;
-  isDefault: boolean;
-  effectiveSource?: 'default' | 'local' | 'synced' | 'managed';
-  locked?: boolean;
-  conflict?: boolean;
-  sourceLabel?: string;
-  lockReason?: string;
-}
-
-/** A single feature flag entry for the flags tab. */
-export interface FlagEntry {
-  flag: FeatureFlag;
-  state: FlagState;
-}
-
-export interface McpEntry {
-  name: string;
-  connected: boolean;
-  role: 'general' | 'docs' | 'filesystem' | 'git' | 'database' | 'browser' | 'automation' | 'ops' | 'remote';
-  trustMode: 'constrained' | 'ask-on-risk' | 'allow-all' | 'blocked';
-  allowedPaths: string[];
-  allowedHosts: string[];
-}
-
-export interface SubscriptionEntry {
-  provider: string;
-  state: 'active' | 'pending' | 'available';
-  tokenType?: string;
-  expiresAt?: number;
-  oauthConfigured: boolean;
-  activeRoute?: ProviderAuthRoute;
-  preferredRoute?: ProviderAuthRoute;
-  authFreshness?: ProviderAuthFreshness;
-  routeReason?: string;
-  issues?: string[];
-  nextActions?: string[];
-}
+import {
+  SETTINGS_CATEGORIES,
+  type FlagEntry,
+  type McpEntry,
+  type SettingEntry,
+  type SettingsCategory,
+  type SubscriptionEntry,
+} from './settings-modal-types.ts';
+
+export {
+  SETTINGS_CATEGORIES,
+  type FlagEntry,
+  type McpEntry,
+  type SettingEntry,
+  type SettingsCategory,
+  type SubscriptionEntry,
+} from './settings-modal-types.ts';
 
 /**
  * Map a config key to the model picker target it should open, or null if the
@@ -151,6 +107,13 @@ export class SettingsModal {
   /** Provider subscription entries (populated when subscriptions tab is active). */
   public subscriptionEntries: SubscriptionEntry[] = [];
 
+  /**
+   * Set after a network-category save that touches controlPlane or httpListener
+   * config keys.  Renderer reads this to display a transient restart notice.
+   * Cleared on next open() or close().
+   */
+  public lastSaveTriggeredRestart: 'control-plane' | 'http-listener' | 'web' | null = null;
+
   private configManager: ConfigManager | null = null;
   private featureFlagManager: FeatureFlagManager | null = null;
   private mcpRegistry: McpRegistry | null = null;
@@ -185,6 +148,7 @@ export class SettingsModal {
     this.editBuffer = '';
     this.mcpAllowAllConfirmationTarget = null;
     this.subscriptionLogoutConfirmationTarget = null;
+    this.lastSaveTriggeredRestart = null;
     this.active = true;
   }
 
@@ -194,6 +158,7 @@ export class SettingsModal {
     this.editBuffer = '';
     this.mcpAllowAllConfirmationTarget = null;
     this.subscriptionLogoutConfirmationTarget = null;
+    this.lastSaveTriggeredRestart = null;
     this.serviceRegistry = null;
   }
 
@@ -548,7 +513,15 @@ export class SettingsModal {
     for (const setting of CONFIG_SCHEMA) {
       const rawCat = setting.key.split('.')[0] as string;
       // Route helper.* settings into the tools group for unified display
-      const cat = (rawCat === 'helper' ? 'tools' : rawCat) as SettingsCategory;
+      // Route controlPlane.* and httpListener.* into the network group
+      let cat: SettingsCategory;
+      if (rawCat === 'helper') {
+        cat = 'tools';
+      } else if (rawCat === 'controlPlane' || rawCat === 'httpListener' || rawCat === 'web') {
+        cat = 'network';
+      } else {
+        cat = rawCat as SettingsCategory;
+      }
       if (!this.groups.has(cat)) continue;
       const currentValue = configManager.get(setting.key as ConfigKey);
       const resolved = getResolvedSettingLookup(configManager, setting.key as ConfigKey)?.entry;
@@ -720,17 +693,62 @@ export class SettingsModal {
   /** Returns [] for the flags category (flags use flagEntries instead). */
   private _currentItems(): SettingEntry[] {
     if (this.currentCategory === 'flags' || this.currentCategory === 'mcp' || this.currentCategory === 'subscriptions') return [];
-    return this.groups.get(this.currentCategory) ?? [];
+    const items = this.groups.get(this.currentCategory) ?? [];
+    if (this.currentCategory === 'network') {
+      // Hide host fields when the corresponding hostMode is not 'custom'
+      return items.filter(entry => {
+        if (entry.setting.key === 'controlPlane.host') {
+          const hostMode = this.configManager?.get('controlPlane.hostMode');
+          return hostMode === 'custom';
+        }
+        if (entry.setting.key === 'httpListener.host') {
+          const hostMode = this.configManager?.get('httpListener.hostMode');
+          return hostMode === 'custom';
+        }
+        if (entry.setting.key === 'web.host') {
+          const hostMode = this.configManager?.get('web.hostMode');
+          return hostMode === 'custom';
+        }
+        return true;
+      });
+    }
+    return items;
   }
 
   private _setValue(key: ConfigKey, value: unknown): void {
     if (!this.configManager) return;
+    // Diff previous value before writing — avoids false restart notices on no-op saves
+    const previousValue = this.configManager.get(key);
+    const isRestartKey = ['host', 'port', 'hostMode', 'enabled'].includes(key.split('.')[1] ?? '');
     try {
       this.configManager.setDynamic(key, value);
       // Update the cached entry in-place — avoids full schema re-scan on each edit
       const rawCat = key.split('.')[0] as string;
-      // helper.* entries are stored in the tools group
-      const cat = (rawCat === 'helper' ? 'tools' : rawCat) as SettingsCategory;
+      // Resolve the display category from the key prefix
+      let cat: SettingsCategory;
+      if (rawCat === 'helper') {
+        cat = 'tools';
+      } else if (rawCat === 'controlPlane') {
+        cat = 'network';
+        // SDK auto-restarts the daemon server on controlPlane binding changes
+        if (isRestartKey && previousValue !== value) {
+          this.lastSaveTriggeredRestart = 'control-plane';
+        }
+      } else if (rawCat === 'httpListener') {
+        cat = 'network';
+        // SDK auto-restarts the HTTP listener on binding changes
+        if (isRestartKey && previousValue !== value) {
+          this.lastSaveTriggeredRestart = 'http-listener';
+        }
+      } else if (rawCat === 'web') {
+        cat = 'network';
+        // SDK auto-restarts the web server on binding changes
+        if (isRestartKey && previousValue !== value) {
+          this.lastSaveTriggeredRestart = 'web';
+        }
+      } else {
+        cat = rawCat as SettingsCategory;
+      }
       const entries = this.groups.get(cat);
       if (entries) {
         const entry = entries.find(e => e.setting.key === key);