@pellux/goodvibes-tui 0.19.29 → 0.19.31

package/CHANGELOG.md

@@ -4,6 +4,17 @@ All notable changes to GoodVibes TUI.
 
 ---
 
+## [0.19.31] — 2026-04-25
+
+### Changes
+- 2508d632 chore: wire sdk service secret updates
+
+## [0.19.30] — 2026-04-25
+
+### Changes
+- 4aeed7a9 chore: wire sdk ntfy origin correlation
+- 62b9efd4 docs: remove onboarding wizard WIP notice from README
+
 ## [0.19.29] — 2026-04-24
 
 ### Changes

package/README.md

@@ -1,10 +1,8 @@
-> **ATTENTION:** Currently updating the Onboarding Wizard - Expect problems with starting the TUI until this work is complete!
-
 # goodvibes-tui
 
 [![CI](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml/badge.svg)](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Version](https://img.shields.io/badge/version-0.19.29-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
+[![Version](https://img.shields.io/badge/version-0.19.31-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
 
 A terminal-native AI coding, operations, automation, knowledge, and integration console with a typed runtime, omnichannel surfaces, structured memory/knowledge, and a raw ANSI renderer.
 
@@ -838,7 +836,7 @@ Key commands:
 - `/profilesync`
 - `/setup transfer export|inspect|import`
 
-Service entries can use existing `tokenKey` fields, a SecretRef in the key field, or explicit `tokenRef` / `passwordRef` / `webhookUrlRef` / `signingSecretRef` / `publicKeyRef` fields:
+Service entries can use existing `tokenKey` fields, a SecretRef in the key field, or explicit `tokenRef` / `passwordRef` / `webhookUrlRef` / `signingSecretRef` / `publicKeyRef` / `appTokenRef` fields:
 
 ```json
 {
@@ -846,11 +844,18 @@ Service entries can use existing `tokenKey` fields, a SecretRef in the key field
     "name": "slack",
     "authType": "bearer",
     "tokenKey": "SLACK_BOT_TOKEN",
+    "appTokenKey": "SLACK_APP_TOKEN",
     "tokenRef": {
       "source": "vaultwarden",
       "item": "GoodVibes Slack",
       "field": "password",
       "server": "https://vault.example.test"
+    },
+    "appTokenRef": {
+      "source": "vaultwarden",
+      "item": "GoodVibes Slack App",
+      "field": "password",
+      "server": "https://vault.example.test"
     }
   }
 }

package/docs/foundation-artifacts/operator-contract.json

@@ -3,7 +3,7 @@
   "product": {
     "id": "goodvibes",
     "surface": "operator",
-    "version": "0.25.4"
+    "version": "0.25.6"
   },
   "auth": {
     "modes": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pellux/goodvibes-tui",
-  "version": "0.19.29",
+  "version": "0.19.31",
   "description": "Terminal-native GoodVibes product for coding, operations, automation, knowledge, channels, and daemon-backed control-plane workflows.",
   "type": "module",
   "main": "src/main.ts",
@@ -91,7 +91,7 @@
     "@anthropic-ai/vertex-sdk": "^0.16.0",
     "@ast-grep/napi": "^0.42.0",
     "@aws/bedrock-token-generator": "^1.1.0",
-    "@pellux/goodvibes-sdk": "^0.25.4",
+    "@pellux/goodvibes-sdk": "^0.25.6",
     "bash-language-server": "^5.6.0",
     "fuse.js": "^7.1.0",
     "graphql": "^16.13.2",

package/src/core/orchestrator.ts

@@ -1,3 +1,7 @@
 // Thin TUI wrapper — re-exports the SDK Orchestrator unchanged.
 // The SDK class already contains all behaviour including getSpinner().
-export { Orchestrator, type OrchestratorOptions } from '@pellux/goodvibes-sdk/platform/core/orchestrator';
+export {
+  Orchestrator,
+  type OrchestratorOptions,
+  type OrchestratorUserInputOptions,
+} from '@pellux/goodvibes-sdk/platform/core/orchestrator';

package/src/input/commands/services-runtime.ts

@@ -41,6 +41,7 @@ export function registerServicesRuntimeCommands(registry: CommandRegistry): void
           `  webhookUrl: ${inspection.hasWebhookUrl ? 'present' : 'missing'}`,
           `  signingSecret: ${inspection.hasSigningSecret ? 'present' : 'missing'}`,
           `  publicKey: ${inspection.hasPublicKey ? 'present' : 'missing'}`,
+          `  appToken: ${inspection.hasAppToken ? 'present' : 'missing'}`,
         ].join('\n'));
         return;
       }

package/src/panels/services-panel.ts

@@ -195,6 +195,8 @@ export class ServicesPanel extends ScrollableListPanel<ServicePanelEntry> {
         ...buildStatusPill(inspect.hasWebhookUrl ? 'good' : 'info', inspect.hasWebhookUrl ? 'present' : 'missing'),
         ['  Signing secret: ', C.label],
         ...buildStatusPill(inspect.hasSigningSecret ? 'good' : 'info', inspect.hasSigningSecret ? 'present' : 'missing'),
+        ['  App token: ', C.label],
+        ...buildStatusPill(inspect.hasAppToken ? 'good' : 'info', inspect.hasAppToken ? 'present' : 'missing'),
       ]));
       if (selected.lastTest) {
         detailLines.push(buildPanelLine(width, [

package/src/runtime/bootstrap-core.ts

@@ -11,6 +11,7 @@ import { Compositor } from '../renderer/compositor.ts';
 import type { PermissionRequestHandler } from '@pellux/goodvibes-sdk/platform/permissions/prompt';
 import type { SystemMessageRouter } from '../core/system-message-router.ts';
 import type { ConversationFollowUpItem } from '@pellux/goodvibes-sdk/platform/core/conversation-follow-ups';
+import type { OrchestratorUserInputOptions } from '../core/orchestrator.ts';
 import type { ControlPlaneRecentEvent } from '@pellux/goodvibes-sdk/platform/control-plane/gateway';
 import type { MutableRuntimeState } from '@pellux/goodvibes-sdk/platform/runtime/mutable-runtime-state';
 import type { BootstrapOptions } from './context.ts';
@@ -55,12 +56,32 @@ export interface BootstrapCoreState {
    * When non-null, COMPANION_MESSAGE_RECEIVED fires a real LLM turn via
    * orchestrator.handleUserInput() instead of only appending the user message.
    */
-  readonly orchestratorHandleUserInputRef: { value: ((text: string) => void) | null };
+  readonly orchestratorHandleUserInputRef: { value: ((text: string, options?: OrchestratorUserInputOptions) => void) | null };
   readonly requestRender: () => void;
   readonly setRenderRequest: (fn: () => void) => void;
   readonly runtimeSessionIdRef: { value: string };
 }
 
+export type CompanionMessagePayload = Extract<SessionEvent, { type: 'COMPANION_MESSAGE_RECEIVED' }>;
+
+export function companionMessageToOrchestratorInputOptions(
+  payload: CompanionMessagePayload,
+): OrchestratorUserInputOptions {
+  const metadata = payload.metadata;
+  const surface = typeof metadata?.surface === 'string' ? metadata.surface : undefined;
+  const topic = typeof metadata?.topic === 'string' ? metadata.topic : undefined;
+
+  return {
+    origin: {
+      source: payload.source,
+      messageId: payload.messageId,
+      ...(surface ? { surface } : {}),
+      ...(topic ? { topic } : {}),
+      ...(metadata ? { metadata } : {}),
+    },
+  };
+}
+
 export async function initializeBootstrapCore(
   stdout: NodeJS.WriteStream,
   options: BootstrapOptions,
@@ -362,13 +383,17 @@ export async function initializeBootstrapCore(
   // The fallback (ref not yet set) adds the message to the conversation view only —
   // this path is unreachable in practice because the event bus is not connected to
   // any live HTTP traffic until after the orchestrator is wired in bootstrap.ts.
-  const orchestratorHandleUserInputRef: { value: ((text: string) => void) | null } = { value: null };
+  const orchestratorHandleUserInputRef: {
+    value: ((text: string, options?: OrchestratorUserInputOptions) => void) | null;
+  } = { value: null };
   runtimeUnsubs.push(runtimeBus.on<Extract<SessionEvent, { type: 'COMPANION_MESSAGE_RECEIVED' }>>(
     'COMPANION_MESSAGE_RECEIVED',
     ({ payload }) => {
       if (orchestratorHandleUserInputRef.value) {
         // Delegate to the orchestrator: adds user message + fires a real LLM turn.
-        orchestratorHandleUserInputRef.value(payload.body);
+        // Preserve surface origin metadata so the SDK can correlate replies back
+        // to the originating external channel, including ntfy chat topics.
+        orchestratorHandleUserInputRef.value(payload.body, companionMessageToOrchestratorInputOptions(payload));
       } else {
         // Fallback: render the user message immediately (orchestrator not yet ready).
         conversation.addUserMessage(payload.body);

package/src/runtime/bootstrap.ts

@@ -11,7 +11,7 @@
  */
 import { join } from 'node:path';
 import net from 'node:net';
-import { Orchestrator } from '../core/orchestrator.ts';
+import { Orchestrator, type OrchestratorUserInputOptions } from '../core/orchestrator.ts';
 import { AcpManager } from '@pellux/goodvibes-sdk/platform/acp/manager';
 import { getTierPromptSupplement, getTierForContextWindow } from '@pellux/goodvibes-sdk/platform/providers/tier-prompts';
 import { logger } from '@pellux/goodvibes-sdk/platform/utils/logger';
@@ -195,8 +195,10 @@ export async function bootstrapRuntime(
       return supplement ? runtime.systemPrompt + '\n\n' + supplement : runtime.systemPrompt;
     },
     hookDispatcher,
+    flagManager: services.featureFlags,
     requestRender: () => orchestratorRefs.requestRender(),
     runtimeBus,
+    sessionId: runtime.sessionId,
     services: {
       agentManager: services.agentManager,
       wrfcController: services.wrfcController,
@@ -204,8 +206,8 @@ export async function bootstrapRuntime(
   });
   conversationFollowUpRef.value = (item) => orchestrator.enqueueConversationFollowUp(item);
   // Wire orchestratorHandleUserInputRef so COMPANION_MESSAGE_RECEIVED fires a real LLM turn.
-  orchestratorHandleUserInputRef.value = (text: string) => {
-    orchestrator.handleUserInput(text).catch((err: unknown) => {
+  orchestratorHandleUserInputRef.value = (text: string, options?: OrchestratorUserInputOptions) => {
+    orchestrator.handleUserInput(text, undefined, options).catch((err: unknown) => {
       logger.debug('companion handleUserInput safety catch', { error: String(err) });
     });
   };

package/src/runtime/onboarding/derivation.ts

@@ -211,7 +211,7 @@ function hasRemoteDeviceAccess(snapshot: OnboardingSnapshotState): boolean {
 function hasWebhookOrEventIngress(snapshot: OnboardingSnapshotState): boolean {
   return snapshot.bindSettings.httpListenerEnabled
     || hasInboundEventSurface(snapshot)
-    || snapshot.services.services.some((service) => service.hasWebhookUrl || service.hasSigningSecret || service.hasPublicKey);
+    || snapshot.services.services.some((service) => service.hasWebhookUrl || service.hasSigningSecret || service.hasPublicKey || service.hasAppToken);
 }
 
 function getProviderIdentityIds(snapshot: OnboardingSnapshotState): Set<string> {

package/src/runtime/onboarding/snapshot.ts

@@ -122,6 +122,7 @@ async function buildServicesSnapshot(
           hasWebhookUrl: inspection?.hasWebhookUrl ?? false,
           hasSigningSecret: inspection?.hasSigningSecret ?? false,
           hasPublicKey: inspection?.hasPublicKey ?? false,
+          hasAppToken: inspection?.hasAppToken ?? false,
         } satisfies OnboardingServiceState,
         issue: null,
       };
@@ -139,6 +140,7 @@ async function buildServicesSnapshot(
           hasWebhookUrl: false,
           hasSigningSecret: false,
           hasPublicKey: false,
+          hasAppToken: false,
         } satisfies OnboardingServiceState,
         issue: {
           area: 'services',

package/src/runtime/onboarding/types.ts

@@ -75,6 +75,7 @@ export interface OnboardingServiceState {
   readonly hasWebhookUrl: boolean;
   readonly hasSigningSecret: boolean;
   readonly hasPublicKey: boolean;
+  readonly hasAppToken: boolean;
 }
 
 export interface OnboardingServicesSnapshot {

package/src/runtime/services.ts

@@ -417,6 +417,7 @@ export function createRuntimeServices(options: RuntimeServicesOptions): RuntimeS
   const projectIndex = new ProjectIndex(workingDirectory);
   const channelDeliveryRouter = new ChannelDeliveryRouter({
     configManager,
+    secretsManager,
     serviceRegistry,
     artifactStore,
   });

package/src/version.ts

@@ -6,7 +6,7 @@ import { join } from 'node:path';
 // The prebuild script updates the fallback value before compilation.
 // Uses import.meta.dir (Bun) to locate package.json relative to this file,
 // which is correct regardless of the process working directory.
-let _version = '0.19.29';
+let _version = '0.19.31';
 try {
   const pkg = JSON.parse(readFileSync(join(import.meta.dir, '..', 'package.json'), 'utf-8'));
   _version = pkg.version ?? _version;