@pellux/goodvibes-tui 0.18.23 → 0.19.1

package/CHANGELOG.md

@@ -4,6 +4,77 @@ All notable changes to GoodVibes TUI.
 
 ---
 
+## [0.19.1] — 2026-04-17
+
+### Changed
+- Upgraded `@pellux/goodvibes-sdk` from 0.21.1 to 0.21.6 — includes secrets-tier
+  `configuredVia` discriminator, HTTP `/api/providers` + `/api/providers/current` (GET/PATCH),
+  reactive `model.changed` SSE event, `BUILTIN_LABEL_MAP` brand-accurate provider labels,
+  and clean unconfigured-provider errors instead of silent 401 pass-through.
+
+### Added
+- `--provider <id>` and `--model <registryKey>` CLI flags for daemon startup
+  (`goodvibes-daemon`) and TUI shell startup (`goodvibes`). Both override
+  `~/.goodvibes/tui/settings.json` provider/model values for the session.
+  If `--model provider:modelId` format is used, `--provider` is inferred automatically.
+- TUI model picker now populates `configuredVia` per provider and renders it as
+  a badge (`[env]`, `[sub]`, `[anon]`) in the provider-browse view, derived from
+  env-var presence and active OAuth subscription sessions.
+
+### Fixed
+- **Venice-picking diagnosis**: the silent 401 Venice fallback was caused by the
+  pre-0.21.2 SDK passing unconfigured-provider requests through to the upstream API
+  unchanged. As of 0.21.2 (included in 0.21.6), `createCompanionProviderAdapter` now
+  checks `provider.isConfigured()` before `provider.chat()` and yields a structured
+  error immediately. The in-registry fallback to first-selectable-model (which may
+  resolve to venice on some installs) only triggers when `getCurrentModel()` cannot
+  find the stored `currentModelId` in the model registry — typically an old daemon
+  instance with stale config. Restarting the daemon after a settings.json change
+  resolves this; the `--model` CLI flag eliminates the need to edit settings.json
+  manually. ConfigManager reactivity (live disk-change → registry update) is out of
+  scope: the PATCH `/api/providers/current` route is the correct live-switch path
+  (calls `setCurrentModel()` + `configManager.set()` atomically).
+
+
+## [0.19.0] — 2026-04-18
+
+### Changed
+- Upgraded `@pellux/goodvibes-sdk` from 0.19.6 to 0.21.1 (soak-period release).
+  TUI adaptations required:
+  1. `docs/foundation-artifacts/operator-contract.json` — regenerated to match
+     updated `buildOperatorContract()` output (`peer-contract.json`, knowledge
+     artifacts unchanged).
+  2. `scripts/perf-check.ts` — `platform/runtime/perf/index` barrel removed;
+     `createPerfMonitor()` factory removed; migrated to `new PerfMonitor()` with
+     imports split to `perf/monitor` and `perf/reporter` sub-paths.
+  3. `scripts/eval-gate.ts` — `platform/runtime/eval/index` barrel removed;
+     imports split to `eval/baseline`, `eval/format`, and `eval/scorecard`.
+
+### Added
+- Wave B panel migration: migrated 5 panels (knowledge, marketplace, memory,
+  system-messages, orchestration) to `ScrollableListPanel<T>`/`SearchableListPanel<T>`
+  generics; added `docs/panel-authoring.md` as the canonical panel authoring guide.
+- Wave C-α reliability pass: F-perf-01 (trackedRender on 5 hot panels),
+  F-perf-02 (async panel fs + skills-panel de-blocking), F-perf-03 (timer registry
+  + 5-panel zombie-timer leak prevention), F-errors-02 (observable async failures —
+  no silent `.catch(() => {})`), F-sec-02 (ANSI escape sanitization at
+  tool-call untrusted-content entry points).
+- `src/input/settings-modal-types.ts`: extracted `SettingsCategory`,
+  `SETTINGS_CATEGORIES`, `SettingEntry`, `FlagEntry`, `McpEntry`,
+  `SubscriptionEntry` type definitions out of the settings-modal module.
+
+### Security
+- Postinstall patcher from `@pellux/goodvibes-sdk@0.21.1` mitigates three
+  minimatch ReDoS advisories in the consumer install tree.
+- Added `overrides: { minimatch: ^10.2.5 }` to TUI's own `package.json`
+  so `npm audit` reports clean for the TUI install tree independently.
+
+### Fixed
+- Foundation artifacts gate now passes: `operator-contract.json` updated to
+  match SDK 0.21.1 `buildOperatorContract()` canonical output.
+
+---
+
 ## [0.18.23] — 2026-04-16
 
 ### Wave 4α+β performance bundle + α review follow-ups + regression fixes

package/README.md

@@ -2,7 +2,7 @@
 
 [![CI](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml/badge.svg)](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Version](https://img.shields.io/badge/version-0.18.23-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
+[![Version](https://img.shields.io/badge/version-0.19.1-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
 
 A terminal-native AI coding, operations, automation, knowledge, and integration console with a typed runtime, omnichannel surfaces, structured memory/knowledge, and a raw ANSI renderer.
 

package/docs/foundation-artifacts/operator-contract.json

@@ -3,7 +3,7 @@
   "product": {
     "id": "goodvibes",
     "surface": "operator",
-    "version": "0.18.37"
+    "version": "0.21.6"
   },
   "auth": {
     "modes": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pellux/goodvibes-tui",
-  "version": "0.18.23",
+  "version": "0.19.1",
   "description": "Terminal-native GoodVibes product for coding, operations, automation, knowledge, channels, and daemon-backed control-plane workflows.",
   "type": "module",
   "main": "src/main.ts",
@@ -89,7 +89,7 @@
     "@anthropic-ai/vertex-sdk": "^0.16.0",
     "@ast-grep/napi": "^0.42.0",
     "@aws/bedrock-token-generator": "^1.1.0",
-    "@pellux/goodvibes-sdk": "0.18.37",
+    "@pellux/goodvibes-sdk": "0.21.6",
     "bash-language-server": "^5.6.0",
     "fuse.js": "^7.1.0",
     "graphql": "^16.13.2",
@@ -115,8 +115,12 @@
     "typescript": "^5.9.3"
   },
   "trustedDependencies": [
+    "@pellux/goodvibes-sdk",
     "tree-sitter-css",
     "tree-sitter-javascript",
     "tree-sitter-python"
-  ]
+  ],
+  "overrides": {
+    "minimatch": "^10.2.5"
+  }
 }

package/src/core/conversation-rendering.ts

@@ -110,12 +110,14 @@ export function renderConversationAssistantMessage(
     //      determines `numWidth` (digit count) and thus `gutterW` (gutter column width).
     //   2. Render pass: render at `width - gutterW` with the gutter factored in.
     //
-    // Single-pass is not feasible here because `numWidth` depends on `totalLines`,
-    // which is unknown before rendering. The 4α commit message claim that this
-    // "eliminates double-parse when line numbers are enabled" was inaccurate:
-    // 4α eliminated the legacy `renderMarkdown()` duplicate that was used for the
-    // code-block line-number mode ('code'). The 'all' mode double-call is unavoidable
-    // by design and remains unchanged.
+    // Single-pass is not pursued here. It would require either a pessimistic
+    // `numWidth=6` (fits 999,999 lines, but wastes 3-4 gutter columns on typical
+    // messages) or rendering the numbered output into a scratch buffer and trimming.
+    // Neither is clearly better than the current two-pass measurement approach.
+    // The 4α commit message claim that this "eliminates double-parse when line
+    // numbers are enabled" was inaccurate: 4α eliminated the legacy
+    // `renderMarkdown()` duplicate used for code-block line-number mode ('code').
+    // The 'all' mode double-call is a deliberate design choice and remains unchanged.
     const measureWidth = showAllLineNumbers ? width : 0;
     const totalLines = showAllLineNumbers
       ? renderMarkdownTracked(message.content, measureWidth, { codeBlockLineNumbers: false }).lines.length

package/src/core/orchestrator.ts

@@ -1,3 +1,3 @@
 // Thin TUI wrapper — re-exports the SDK Orchestrator unchanged.
 // The SDK class already contains all behaviour including getSpinner().
-export { Orchestrator } from '@pellux/goodvibes-sdk/platform/core/orchestrator';
+export { Orchestrator, type OrchestratorOptions } from '@pellux/goodvibes-sdk/platform/core/orchestrator';

package/src/daemon/cli.ts

@@ -22,6 +22,49 @@ type DaemonCliOwnership = {
   readonly homeDirectory: string;
 };
 
+// ---------------------------------------------------------------------------
+// CLI flag parsing
+// ---------------------------------------------------------------------------
+
+type DaemonCliFlags = {
+  readonly provider: string | undefined;
+  readonly model: string | undefined;
+};
+
+function parseDaemonCliFlags(argv: readonly string[]): DaemonCliFlags {
+  let provider: string | undefined;
+  let model: string | undefined;
+
+  for (let i = 0; i < argv.length; i++) {
+    const arg = argv[i];
+    if (arg === '--help' || arg === '-h') {
+      // eslint-disable-next-line no-console
+      console.log([
+        'Usage: goodvibes-daemon [options]',
+        '',
+        'Options:',
+        '  --provider <id>          Override the provider from settings.json at startup',
+        '  --model <registryKey>    Override the model from settings.json at startup',
+        '                           Format: provider:modelId (e.g. inception:mercury-2)',
+        '                           If provider:modelId format is used, --provider is inferred',
+        '  --help, -h               Show this help message',
+      ].join('\n'));
+      process.exit(0);
+    }
+    if (arg === '--provider' && argv[i + 1] !== undefined) {
+      provider = argv[++i];
+    } else if (arg === '--model' && argv[i + 1] !== undefined) {
+      model = argv[++i];
+      // Infer provider from registryKey format (provider:modelId) if --provider not given
+      if (typeof model === 'string' && model.includes(':') && provider === undefined) {
+        provider = model.split(':')[0];
+      }
+    }
+  }
+
+  return { provider, model };
+}
+
 type DaemonCliTokens = {
   readonly daemonToken: string | undefined;
   readonly httpToken: string | undefined;
@@ -72,6 +115,17 @@ async function main(): Promise<void> {
   const { workingDirectory: workingDir, homeDirectory } = resolveDaemonCliOwnership();
   const config = new ConfigManager({ workingDir, homeDir: homeDirectory, surfaceRoot: 'tui' });
   new GlobalNetworkTransportInstaller().install(config);
+
+  // Apply CLI flags — override settings.json before the provider registry is constructed
+  const cliFlags = parseDaemonCliFlags(process.argv.slice(2));
+  if (cliFlags.provider !== undefined) {
+    config.set('provider.provider', cliFlags.provider);
+    logger.info('daemon: --provider flag applied', { provider: cliFlags.provider });
+  }
+  if (cliFlags.model !== undefined) {
+    config.set('provider.model', cliFlags.model);
+    logger.info('daemon: --model flag applied', { model: cliFlags.model });
+  }
   const runtimeBus = new RuntimeEventBus();
   const runtimeStore = createRuntimeStore();
   const runtimeServices = createRuntimeServices({

package/src/input/commands/diff-runtime.ts

@@ -1,4 +1,5 @@
 import { join } from 'path';
+import { logger } from '@pellux/goodvibes-sdk/platform/utils/logger';
 import type { CommandRegistry } from '../command-registry.ts';
 import { requirePanelManager, requireSessionChangeTracker, requireShellPaths } from './runtime-services.ts';
 
@@ -86,7 +87,7 @@ export function registerDiffRuntimeCommands(registry: CommandRegistry): void {
             return (await new Response(proc.stdout).text()).trim().split('\n').filter(Boolean);
           })();
           if (workingChangedFiles.length > 0) {
-            enrichSemanticDiff(diffPanel, workingChangedFiles, 'HEAD', () => ctx.renderRequest(), workingDirectory).catch(() => {});
+            enrichSemanticDiff(diffPanel, workingChangedFiles, 'HEAD', () => ctx.renderRequest(), workingDirectory).catch((err) => { logger.debug('semantic diff enrichment failed', { err }); });
           }
           break;
         }
@@ -111,7 +112,7 @@ export function registerDiffRuntimeCommands(registry: CommandRegistry): void {
               return (await new Response(stagedProc.stdout).text()).trim().split('\n').filter(Boolean);
             })();
             if (stagedChangedFiles.length > 0) {
-              enrichSemanticDiff(diffPanel, stagedChangedFiles, 'HEAD', () => ctx.renderRequest(), workingDirectory).catch(() => {});
+              enrichSemanticDiff(diffPanel, stagedChangedFiles, 'HEAD', () => ctx.renderRequest(), workingDirectory).catch((err) => { logger.debug('semantic diff enrichment failed', { err }); });
             }
           }
           break;
@@ -126,7 +127,7 @@ export function registerDiffRuntimeCommands(registry: CommandRegistry): void {
             return (await new Response(proc.stdout).text()).trim().split('\n').filter(Boolean);
           })();
           if (headChangedFiles.length > 0) {
-            enrichSemanticDiff(diffPanel, headChangedFiles, 'HEAD', () => ctx.renderRequest(), workingDirectory).catch(() => {});
+            enrichSemanticDiff(diffPanel, headChangedFiles, 'HEAD', () => ctx.renderRequest(), workingDirectory).catch((err) => { logger.debug('semantic diff enrichment failed', { err }); });
           }
           break;
         }
@@ -137,7 +138,7 @@ export function registerDiffRuntimeCommands(registry: CommandRegistry): void {
             ctx.print(`Loading session diff (${sessionFiles.length} file${sessionFiles.length === 1 ? '' : 's'} changed this session)...`);
             await diffPanel.showFileDiffs(sessionFiles, 'HEAD');
             ctx.print(`Diff panel updated: ${sessionFiles.length} session file${sessionFiles.length === 1 ? '' : 's'}.`);
-            enrichSemanticDiff(diffPanel, sessionFiles, 'HEAD', () => ctx.renderRequest(), workingDirectory).catch(() => {});
+            enrichSemanticDiff(diffPanel, sessionFiles, 'HEAD', () => ctx.renderRequest(), workingDirectory).catch((err) => { logger.debug('semantic diff enrichment failed', { err }); });
           } else {
             ctx.print('No session changes tracked yet. Showing diff vs HEAD...');
             await diffPanel.showGitDiff('HEAD');
@@ -148,7 +149,7 @@ export function registerDiffRuntimeCommands(registry: CommandRegistry): void {
               return (await new Response(proc.stdout).text()).trim().split('\n').filter(Boolean);
             })();
             if (fallbackFiles.length > 0) {
-              enrichSemanticDiff(diffPanel, fallbackFiles, 'HEAD', () => ctx.renderRequest(), workingDirectory).catch(() => {});
+              enrichSemanticDiff(diffPanel, fallbackFiles, 'HEAD', () => ctx.renderRequest(), workingDirectory).catch((err) => { logger.debug('semantic diff enrichment failed', { err }); });
             }
           }
           break;

package/src/input/commands/guidance-runtime.ts

@@ -64,7 +64,7 @@ export function registerGuidanceRuntimeCommands(registry: CommandRegistry): void
       }
 
       const providerApi = requireProviderApi(ctx);
-      const currentModel = await providerApi.getCurrentModel().catch(() => null);
+      const currentModel = await providerApi.getCurrentModel().catch(() => null); // best-effort: null handled as unknown context window
       const llmMessages = ctx.session.conversationManager.getMessagesForLLM();
       const readModels = requireReadModels(ctx);
       const session = readModels.session.getSnapshot();

package/src/input/commands/health-runtime.ts

@@ -240,7 +240,7 @@ export function registerHealthRuntimeCommands(registry: CommandRegistry): void {
       if (sub === 'maintenance') {
         const session = readModels.session.getSnapshot();
         const providerApi = requireProviderApi(ctx);
-        const currentModel = await providerApi.getCurrentModel().catch(() => null);
+        const currentModel = await providerApi.getCurrentModel().catch(() => null); // best-effort: null handled as unknown context window
         const llmMessages = typeof ctx.session.conversationManager.getMessagesForLLM === 'function'
           ? ctx.session.conversationManager.getMessagesForLLM()
           : [];
@@ -369,7 +369,7 @@ export function registerHealthRuntimeCommands(registry: CommandRegistry): void {
 
       const session = readModels.session.getSnapshot();
       const providerApi = requireProviderApi(ctx);
-      const currentModel = await providerApi.getCurrentModel().catch(() => null);
+      const currentModel = await providerApi.getCurrentModel().catch(() => null); // best-effort: null handled as unknown context window
       const llmMessages = typeof ctx.session.conversationManager.getMessagesForLLM === 'function'
         ? ctx.session.conversationManager.getMessagesForLLM()
         : [];

package/src/input/commands/local-setup-review.ts

@@ -22,7 +22,7 @@ export async function buildSetupReviewSnapshot(ctx: CommandContext): Promise<Set
     }
   }
 
-  const skills = discoverSkills(shellPaths);
+  const skills = await discoverSkills(shellPaths);
   const security = requireReadModels(ctx).security.getSnapshot();
   const plugins = security.plugins;
   const mcpServers = security.mcpServers;

package/src/input/commands/session-content.ts

@@ -161,7 +161,7 @@ export function registerSessionContentCommands(registry: CommandRegistry): void
 
   registry.register({
     name: 'undo',
-    aliases: ['u'],
+    aliases: [],
     description: 'Undo last action. /undo file — revert last file write/edit. /undo — remove last conversation turn.',
     usage: '[file]',
     argsHint: '[file]',

package/src/input/commands/shell-core.ts

@@ -5,6 +5,7 @@ import { REASONING_BUDGET_MAP } from '@pellux/goodvibes-sdk/platform/providers/i
 import { executeWriteQuit } from './quit-shared.ts';
 import { compactConversation, requireKeybindingsManager, requireProviderApi } from './runtime-services.ts';
 import { summarizeError } from '@pellux/goodvibes-sdk/platform/utils/error-display';
+import { logger } from '@pellux/goodvibes-sdk/platform/utils/logger';
 
 export function registerShellCoreCommands(registry: CommandRegistry): void {
   registry.register({
@@ -34,7 +35,7 @@ export function registerShellCoreCommands(registry: CommandRegistry): void {
           ctx.platform.configManager.set('provider.model', selected.registryKey);
           ctx.platform.configManager.set('provider.provider', selected.providerId);
           ctx.print(`Switched to model: ${selected.displayName} (${selected.providerId})`);
-          void providerApi.recordModelUsage(selected.registryKey).catch(() => undefined);
+          void providerApi.recordModelUsage(selected.registryKey).catch((err) => { logger.debug('model usage record failed', { err }); });
         } catch (e) {
           ctx.print(`Error: ${summarizeError(e)}`);
         }
@@ -202,7 +203,7 @@ export function registerShellCoreCommands(registry: CommandRegistry): void {
 
   registry.register({
     name: 'quit',
-    aliases: ['q', ':q'],
+    aliases: [':q'],
     description: 'Exit the application',
     handler(_args, ctx) {
       ctx.exit();

package/src/input/commands/skills-runtime.ts

@@ -19,7 +19,7 @@ export function registerSkillsRuntimeCommands(registry: CommandRegistry): void {
     aliases: ['skill'],
     description: 'Inspect installed skill packs',
     usage: '[open|list|show <name>|origins|browse [query]|installed|catalog-review <id>|publish-local <id> <path> <summary...>|unpublish <id>|install-hint <catalog-id>|install <id> [project|user]|update <id> [project|user]|uninstall <id> [project|user]]',
-    handler(args, ctx) {
+    async handler(args, ctx) {
       const sub = args[0] ?? 'open';
       if (sub === 'open' || sub === 'panel') {
         if (ctx.showPanel) ctx.showPanel('skills');
@@ -31,7 +31,7 @@ export function registerSkillsRuntimeCommands(registry: CommandRegistry): void {
         }
         return;
       }
-      const skills = discoverSkills(requireShellPaths(ctx));
+      const skills = await discoverSkills(requireShellPaths(ctx));
       const ecosystemPaths = requireEcosystemCatalogPaths(ctx);
       if (sub === 'list') {
         if (skills.length === 0) {

package/src/input/commands/subscription-runtime.ts

@@ -174,7 +174,7 @@ export function registerSubscriptionRuntimeCommands(registry: CommandRegistry):
           const openBrowser = !flags.has('--no-browser');
           const useManualMode = flags.has('--manual');
           if (provider === 'openai' && resolved.source === 'builtin') {
-            const started = beginOpenAICodexLogin();
+            const started = await beginOpenAICodexLogin();
             manager.savePending({
               provider,
               state: started.state,
@@ -191,7 +191,7 @@ export function registerSubscriptionRuntimeCommands(registry: CommandRegistry):
                   host: '127.0.0.1',
                   port: 1455,
                   path: '/auth/callback',
-                }).catch(() => null);
+                }).catch(() => null); // best-effort: listener creation is optional; null triggers manual flow
               } catch {
                 listener = null;
               }
@@ -272,14 +272,14 @@ export function registerSubscriptionRuntimeCommands(registry: CommandRegistry):
               host: resolved.oauth.localCallback.host,
               port: resolved.oauth.localCallback.port,
               path: resolved.oauth.localCallback.path,
-            }).catch(() => null);
+            }).catch(() => null); // best-effort: local callback listener is optional; null falls back to manual redirect
           }
 
           if (listener) {
             activeConfig = { ...activeConfig, redirectUri: listener.redirectUri };
           }
 
-          const started = manager.beginOAuthLogin(provider, activeConfig);
+          const started = await manager.beginOAuthLogin(provider, activeConfig);
           if (listener) {
             listener.setExpectedState(started.pending.state);
           }

package/src/input/handler.ts

@@ -81,7 +81,7 @@ import {
 } from './handler-picker-routes.ts';
 import { handleGlobalShortcutToken } from './handler-shortcuts.ts';
 import { feedInputTokens } from './handler-feed.ts';
-import { buildInitialFeedContext } from './feed-context-factory.ts';
+import { buildInitialFeedContext, syncFeedContextMutableFields } from './feed-context-factory.ts';
 import { handlePanelIntegrationAction as runPanelIntegrationAction } from './panel-integration-actions.ts';
 import type { Panel } from '../panels/types.ts';
 import type { UiRuntimeServices } from '../runtime/ui-services.ts';
@@ -292,15 +292,13 @@ export class InputHandler {
 
   /** Sync mutable handler fields back into feedContext after in-feed mutations. */
   private syncFeedContextMutableFields(): void {
-    const ctx = this.feedContext;
-    ctx.prompt = this.prompt; ctx.cursorPos = this.cursorPos;
-    ctx.commandMode = this.commandMode; ctx.panelFocused = this.panelFocused;
-    ctx.indicatorFocused = this.indicatorFocused;
-    ctx.helpOverlayActive = this.helpOverlayActive; ctx.helpScrollOffset = this.helpScrollOffset;
-    ctx.shortcutsOverlayActive = this.shortcutsOverlayActive; ctx.shortcutsScrollOffset = this.shortcutsScrollOffset;
-    ctx.selectionCallback = this.selectionCallback;
-    ctx.nextPasteId = this.nextPasteId; ctx.nextImageId = this.nextImageId;
-    ctx.mouseDownRow = this.mouseDownRow; ctx.mouseDownCol = this.mouseDownCol;
+    const h = this;
+    syncFeedContextMutableFields({ prompt: h.prompt, cursorPos: h.cursorPos, commandMode: h.commandMode,
+      panelFocused: h.panelFocused, indicatorFocused: h.indicatorFocused, helpOverlayActive: h.helpOverlayActive,
+      helpScrollOffset: h.helpScrollOffset, shortcutsOverlayActive: h.shortcutsOverlayActive,
+      shortcutsScrollOffset: h.shortcutsScrollOffset, selectionCallback: h.selectionCallback,
+      nextPasteId: h.nextPasteId, nextImageId: h.nextImageId, mouseDownRow: h.mouseDownRow,
+      mouseDownCol: h.mouseDownCol, contentWidth: h.contentWidth }, this.feedContext);
   }
 
   /** Wire in the InputHistory instance. Optional; disables history navigation if unset. */

package/src/input/model-picker.ts

@@ -99,6 +99,8 @@ export interface PickerItem {
   isFree?: boolean;
   /** True when this provider item has a configured API key. */
   isConfigured?: boolean;
+  /** How the provider is configured — shown as a badge in provider mode. */
+  configuredVia?: 'env' | 'secrets' | 'subscription' | 'anonymous';
 }
 
 /** Provider IDs treated as "Popular" in the provider picker. */
@@ -166,6 +168,8 @@ export class ModelPickerModal {
   public availableOnly = true;
   /** Set of provider names that have a configured key (used for availableOnly filter). */
   public configuredProviders: Set<string> = new Set();
+  /** How each provider is configured — drives badge display in provider mode. */
+  public configuredViaMap: Map<string, 'env' | 'secrets' | 'subscription' | 'anonymous'> = new Map();
   /** IDs of pinned/favorite models — shown at top of list. */
   public pinnedIds: Set<string> = new Set();
   /** IDs of recently used models — shown after pinned, before the rest. */
@@ -612,13 +616,13 @@ export class ModelPickerModal {
       if (filteredPopular.length > 0) {
         providerItems.push({ id: '__header__popular', label: 'Popular', isGroupHeader: true });
         for (const p of filteredPopular) {
-          providerItems.push({ id: p, label: p, isConfigured: this.configuredProviders.has(p) });
+          providerItems.push({ id: p, label: p, isConfigured: this.configuredProviders.has(p), configuredVia: this.configuredViaMap.get(p) });
         }
       }
       if (filteredAll.length > 0) {
         providerItems.push({ id: '__header__all', label: 'All Providers', isGroupHeader: true });
         for (const p of filteredAll) {
-          providerItems.push({ id: p, label: p, isConfigured: this.configuredProviders.has(p) });
+          providerItems.push({ id: p, label: p, isConfigured: this.configuredProviders.has(p), configuredVia: this.configuredViaMap.get(p) });
         }
       }
 

package/src/input/panel-integration-actions.ts

@@ -1,4 +1,5 @@
 import type { CommandContext } from './command-registry.ts';
+import { logger } from '@pellux/goodvibes-sdk/platform/utils/logger';
 import type { Panel } from '../panels/types.ts';
 import type { PanelManager } from '../panels/panel-manager.ts';
 import { FileExplorerPanel } from '../panels/file-explorer-panel.ts';
@@ -69,7 +70,7 @@ export function handlePanelIntegrationAction(
     const parts = command.replace(/^\//, '').split(/\s+/).filter(Boolean);
     const [name, ...args] = parts;
     if (!name) return false;
-    void commandContext.executeCommand(name, args).catch(() => {});
+    void commandContext.executeCommand(name, args).catch((err) => { logger.debug('approval panel command dispatch failed', { err }); });
     return true;
   }
 

package/src/input/settings-modal-types.ts

@@ -0,0 +1,60 @@
+import type { ConfigSetting } from '@pellux/goodvibes-sdk/platform/config/schema';
+import type { ProviderAuthFreshness, ProviderAuthRoute } from '@pellux/goodvibes-sdk/platform/runtime/provider-accounts/registry';
+import type { FeatureFlag, FlagState } from '@pellux/goodvibes-sdk/platform/runtime/feature-flags/types';
+
+export type SettingsCategory = 'display' | 'ui' | 'provider' | 'subscriptions' | 'behavior' | 'storage' | 'permissions' | 'mcp' | 'sandbox' | 'danger' | 'tools' | 'flags' | 'network';
+
+export const SETTINGS_CATEGORIES: SettingsCategory[] = [
+  'display',
+  'ui',
+  'provider',
+  'subscriptions',
+  'behavior',
+  'storage',
+  'permissions',
+  'mcp',
+  'sandbox',
+  'danger',
+  'tools',
+  'flags',
+  'network',
+];
+
+export interface SettingEntry {
+  setting: ConfigSetting;
+  currentValue: unknown;
+  isDefault: boolean;
+  effectiveSource?: 'default' | 'local' | 'synced' | 'managed';
+  locked?: boolean;
+  conflict?: boolean;
+  sourceLabel?: string;
+  lockReason?: string;
+}
+
+export interface FlagEntry {
+  flag: FeatureFlag;
+  state: FlagState;
+}
+
+export interface McpEntry {
+  name: string;
+  connected: boolean;
+  role: 'general' | 'docs' | 'filesystem' | 'git' | 'database' | 'browser' | 'automation' | 'ops' | 'remote';
+  trustMode: 'constrained' | 'ask-on-risk' | 'allow-all' | 'blocked';
+  allowedPaths: string[];
+  allowedHosts: string[];
+}
+
+export interface SubscriptionEntry {
+  provider: string;
+  state: 'active' | 'pending' | 'available';
+  tokenType?: string;
+  expiresAt?: number;
+  oauthConfigured: boolean;
+  activeRoute?: ProviderAuthRoute;
+  preferredRoute?: ProviderAuthRoute;
+  authFreshness?: ProviderAuthFreshness;
+  routeReason?: string;
+  issues?: string[];
+  nextActions?: string[];
+}