@pellux/goodvibes-tui 0.19.15 → 0.19.19

package/CHANGELOG.md

@@ -4,6 +4,53 @@ All notable changes to GoodVibes TUI.
 
 ---
 
+## [0.19.19] — 2026-04-21
+
+### Changes
+- 476d9d7 docs: add UAT validation reports for runs 3 (0.19.12) and 4 (0.19.14)
+- 77f155d release: TUI 0.19.18 — SDK 0.21.35 (PERF-08 SSE backpressure + OBS-05/14 closeout)
+- e213c30 fix: regen operator-contract artifact + plugin-system microtask flush
+- 27632c3 fix(tests): migrate remaining reverted test files for OBS-14 microtask dispatch
+- bfe0e62 release: TUI 0.19.17 — SDK 0.21.33 bump + OBS-14 microtask test migration
+
+## [0.19.18] - 2026-04-21
+
+SDK 0.21.27 → 0.21.35 upgrade. Captures all OBS-05, OBS-06, OBS-14, F3, QA-14, and PERF-08 consumer-side migrations; no 0.19.17 was ever published (tests failed in CI) — this release closes out all of that work.
+
+### Changed
+- Upgraded `@pellux/goodvibes-sdk` from 0.21.27 to 0.21.35. Wave 4 closeout + Wave 5 + PERF-08 SSE backpressure rebuild.
+- `src/runtime/bootstrap.ts`: `getOrCreateCompanionToken('tui')` call migrated to the F3 signature `getOrCreateCompanionToken('tui', { daemonHomeDir })` with `daemonHomeDir` resolved from `services.homeDirectory`.
+- `src/panels/tool-inspector-panel.ts`:
+  - TOOL_SUCCEEDED / TOOL_FAILED handlers simplified after OBS-05. Post-0.21.31 the `.result` field on these events is a `ToolResultSummary` (`{ kind, byteSize, preview? }`), not the raw tool result, so the prior `_policyAudit` extraction is no longer reachable from this event path. Dead lookup removed with an inline note pointing future readers at the approval broker / tool result store as the new channel for policy audit metadata.
+  - `summarizeResult()` rewritten to read `preview` (string) with a `${kind} (${byteSize}B)` fallback. Previously read `.output` / `.error` from the raw result shape, which silently returned `undefined` for every post-OBS-05 event. Detail line "Summary" now renders correctly in the Tool Inspector again.
+- `docs/foundation-artifacts/operator-contract.json`: regenerated via `bun run foundation:artifacts` (SDK 0.21.35 bumped the embedded `product.version` string).
+
+### Fixed
+- **OBS-14 test migration** across 17 test files. SDK 0.21.32+ `RuntimeEventBus.emit(...)` dispatches listeners via `queueMicrotask`. Tests that emitted a bus event and asserted synchronously on subscriber-populated state now drain queued microtasks first. Injected a local `flushMicrotasks = async () => { await Promise.resolve(); await Promise.resolve(); await Promise.resolve(); }` helper in each affected file; converted sync test callbacks to `async () => {}` where needed, and inserted `await flushMicrotasks();` after bus-emitting calls before each dependent assertion. Wrapper emission helpers (`emitTurn`, `emitTask`, `emitAgentCompleted`, `emitAgentFailed`, `emitToolRuntimeEvent`) promoted to `async function(): Promise<void>` in test files that needed them; all callers awaited. Files touched: `src/test/core/event-replay.test.ts`, `streaming.test.ts`, `qol-features.test.ts`, `tool-result-reconciliation.test.ts`, `src/test/daemon/telemetry-routes.test.ts`, `src/test/agents/wrfc-controller.test.ts`, `src/test/integration/tool-execution.test.ts`, `src/test/plugins/plugin-system.test.ts`, `src/test/panels/workspace-migration.test.ts`, `src/test/panels/provider-health-panel.test.ts`, `src/test/runtime/ops/playbook-runtime-context.test.ts`, `src/test/runtime/forensics/forensics.test.ts`, `src/test/runtime/operator-client.test.ts`, `src/test/runtime/telemetry-api.test.ts`, `src/test/release-gates/policy-and-budget-evidence-gate.test.ts`, `src/test/release-gates/runtime-certification-gate.test.ts`, `src/test/runtime/emit-enforcement.test.ts`.
+- **OBS-05 tool result fixture** in `src/test/integration/tool-execution.test.ts`: TOOL_SUCCEEDED fixture constructs a `ToolResultSummary` shape (`{ kind: 'json', byteSize, preview }`) rather than the raw tool result.
+- **OBS-06 redaction import path** in `src/test/export/session-export.test.ts`: `redactSensitiveData` now imported from `@pellux/goodvibes-sdk/platform/utils/redaction`.
+- **PERF-08 SSE backpressure** (via SDK): `src/test/control-plane/gateway-stream.test.ts` "replays recent events with ids and resumes after Last-Event-ID" now passes against SDK 0.21.35. Test additions: `flushMicrotasks` drains between `publishEvent`/`createEventStream`/`reader.read()` to let async dispatch settle; test timeout raised to 15s for headroom (completes in ~65ms with the SDK fix).
+
+### Notes
+- No 0.19.17 entry — 0.19.17 was committed and pushed but its Release CI never produced an npm artifact (tests failed on the microtask-dispatch regressions before the SDK 0.21.35 backpressure fix landed). 0.19.18 subsumes all of that work in a single ship.
+
+---
+
+## [0.19.16] - 2026-04-20
+
+### Changed
+- Upgraded `@pellux/goodvibes-sdk` to 0.21.27. Picks up three F-closures (all internal to the SDK; TUI requires zero active wiring):
+  1. **F7 closed** — OTLP POST receivers implemented at `/api/v1/telemetry/otlp/v1/{logs,traces,metrics}`. JSON-only (`application/json`); protobuf returns 415. `ingestSink` wired to `TelemetryApiService` in daemon router (not null). Ingested records enter the ring buffer (~500 events) with `source: 'otlp-ingest'` and are observable on `GET /api/v1/telemetry/events`. Note: prior "by design" framing for this failure was incorrect — it was a missing implementation.
+  2. **F5b closed** — SDK runtime sqlite-vec resolver (`resolveSqliteVecPath()` in `memory-vector-store.js`) now detects the bundled-executable case (`import.meta.url.includes('$bunfs')`) and resolves the addon from `dirname(process.execPath)/lib/sqlite-vec-<os>-<arch>/vec0.<suffix>`. Completes the full chain with F5a (build-side `.so` copy to `dist/lib/`, landed TUI 0.19.12). Smoke-confirmed: `GET /api/memory/vector` returns 200.
+  3. **F-PROV-009 closed** — `secretsResolutionSkipped: true` now actually emitted on `GET /api/providers` when `secretsManager` is null, plumbed end-to-end in 0.21.27. Prior 0.21.25 claim of this fix was incomplete.
+- TUI version bumped to 0.19.16.
+- Regenerated `docs/foundation-artifacts/operator-contract.json` — now includes `telemetry.otlp.logs`, `telemetry.otlp.metrics`, `telemetry.otlp.traces` method entries reflecting SDK 0.21.27 OTLP ingest surface.
+
+### Fixed
+- `src/test/daemon/telemetry-routes.test.ts`: added `ingestSink: null` to both `createDaemonTelemetryRouteHandlers` invocations to satisfy the new required-but-nullable `TelemetryRouteContext.ingestSink` field introduced in SDK 0.21.27.
+
+---
+
 ## [0.19.15] - 2026-04-20
 
 ### Fixed

package/README.md

@@ -2,7 +2,7 @@
 
 [![CI](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml/badge.svg)](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Version](https://img.shields.io/badge/version-0.19.15-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
+[![Version](https://img.shields.io/badge/version-0.19.19-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
 
 A terminal-native AI coding, operations, automation, knowledge, and integration console with a typed runtime, omnichannel surfaces, structured memory/knowledge, and a raw ANSI renderer.
 

package/docs/foundation-artifacts/operator-contract.json

@@ -3,7 +3,7 @@
   "product": {
     "id": "goodvibes",
     "surface": "operator",
-    "version": "0.21.26"
+    "version": "0.21.35"
   },
   "auth": {
     "modes": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pellux/goodvibes-tui",
-  "version": "0.19.15",
+  "version": "0.19.19",
   "description": "Terminal-native GoodVibes product for coding, operations, automation, knowledge, channels, and daemon-backed control-plane workflows.",
   "type": "module",
   "main": "src/main.ts",
@@ -90,7 +90,7 @@
     "@anthropic-ai/vertex-sdk": "^0.16.0",
     "@ast-grep/napi": "^0.42.0",
     "@aws/bedrock-token-generator": "^1.1.0",
-    "@pellux/goodvibes-sdk": "0.21.26",
+    "@pellux/goodvibes-sdk": "0.21.35",
     "bash-language-server": "^5.6.0",
     "fuse.js": "^7.1.0",
     "graphql": "^16.13.2",

package/src/panels/tool-inspector-panel.ts

@@ -75,14 +75,16 @@ function truncateJson(val: unknown, maxLen = 120): string {
 }
 
 function summarizeResult(result: unknown): string | undefined {
+  // SDK OBS-05 (0.21.31+): TOOL_SUCCEEDED/TOOL_FAILED.result is a ToolResultSummary
+  // { kind: 'text' | 'json' | 'binary' | 'error' | 'empty'; byteSize: number; preview?: string }.
   if (!result || typeof result !== 'object') return undefined;
   const record = result as Record<string, unknown>;
-  if (typeof record.output === 'string' && record.output.trim()) {
-    const compact = record.output.replace(/\s+/g, ' ').trim();
+  if (typeof record.preview === 'string' && record.preview.trim()) {
+    const compact = record.preview.replace(/\s+/g, ' ').trim();
     return compact.length > 72 ? `${compact.slice(0, 69)}\u2026` : compact;
   }
-  if (typeof record.error === 'string' && record.error.trim()) {
-    return record.error;
+  if (typeof record.kind === 'string' && typeof record.byteSize === 'number') {
+    return `${record.kind} (${record.byteSize}B)`;
   }
   return undefined;
 }
@@ -382,17 +384,16 @@ export class ToolInspectorPanel extends BasePanel {
       this.markDirty();
     }));
 
+    // NOTE: After SDK OBS-05 (0.21.31), TOOL_SUCCEEDED/TOOL_FAILED.result is a ToolResultSummary
+    // ({ kind, byteSize, preview? }) rather than the raw ToolResult object. The previous
+    // `_policyAudit` extraction is no longer reachable via this event — policy audit metadata
+    // must be sourced from a different channel (approval broker / tool result store) if the
+    // Tool Inspector is to display it in future.
     this.unsubs.push(this.toolEvents.on('TOOL_SUCCEEDED', (data) => {
       const rec = this.records.findLast(r => r.callId === data.callId);
       if (rec) {
         rec.endMs = Date.now();
         rec.result = data.result;
-        if (data.result && typeof data.result === 'object') {
-          const audit = (data.result as { _policyAudit?: { actionTaken?: string; spillBackend?: string; policyId?: string } })._policyAudit;
-          rec.policyAction = audit?.actionTaken;
-          rec.spillBackend = audit?.spillBackend;
-          rec.outputClass = audit?.policyId ?? rec.outputClass;
-        }
         rec.resultSummary = summarizeResult(data.result);
       }
       this.markDirty();
@@ -404,12 +405,6 @@ export class ToolInspectorPanel extends BasePanel {
         rec.endMs = Date.now();
         rec.result = data.result;
         rec.error = data.error;
-        if (data.result && typeof data.result === 'object') {
-          const audit = (data.result as { _policyAudit?: { actionTaken?: string; spillBackend?: string; policyId?: string } })._policyAudit;
-          rec.policyAction = audit?.actionTaken;
-          rec.spillBackend = audit?.spillBackend;
-          rec.outputClass = audit?.policyId ?? rec.outputClass;
-        }
         rec.resultSummary = summarizeResult(data.result) ?? data.error;
       }
       this.markDirty();

package/src/runtime/bootstrap.ts

@@ -9,6 +9,7 @@
  *   - main.ts: terminal setup, render loop, stdin/stdout handlers
  *   - lifecycle.ts: save/shutdown helpers
  */
+import { join } from 'node:path';
 import { Orchestrator } from '../core/orchestrator.ts';
 import { AcpManager } from '@pellux/goodvibes-sdk/platform/acp/manager';
 import { getTierPromptSupplement, getTierForContextWindow } from '@pellux/goodvibes-sdk/platform/providers/tier-prompts';
@@ -330,7 +331,7 @@ export async function bootstrapRuntime(
       // Register the persistent companion-pairing token as the daemon's shared
       // bearer, so tokens scanned from the /qrcode panel's QR actually
       // authenticate against the embedded daemon this surface starts.
-      const companionTokenRecord = getOrCreateCompanionToken('tui');
+      const companionTokenRecord = getOrCreateCompanionToken('tui', { daemonHomeDir: join(services.homeDirectory, '.goodvibes', 'daemon') });
       externalServicesPromise = startExternalServices(
         configManager,
         runtimeBus,

package/src/version.ts

@@ -6,7 +6,7 @@ import { join } from 'node:path';
 // The prebuild script updates the fallback value before compilation.
 // Uses import.meta.dir (Bun) to locate package.json relative to this file,
 // which is correct regardless of the process working directory.
-let _version = '0.19.15';
+let _version = '0.19.19';
 try {
   const pkg = JSON.parse(readFileSync(join(import.meta.dir, '..', 'package.json'), 'utf-8'));
   _version = pkg.version ?? _version;