@pellux/goodvibes-tui 0.19.30 → 0.19.31

package/CHANGELOG.md

@@ -4,6 +4,11 @@ All notable changes to GoodVibes TUI.
 
 ---
 
+## [0.19.31] — 2026-04-25
+
+### Changes
+- 2508d632 chore: wire sdk service secret updates
+
 ## [0.19.30] — 2026-04-25
 
 ### Changes

package/README.md

@@ -2,7 +2,7 @@
 
 [![CI](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml/badge.svg)](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Version](https://img.shields.io/badge/version-0.19.30-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
+[![Version](https://img.shields.io/badge/version-0.19.31-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
 
 A terminal-native AI coding, operations, automation, knowledge, and integration console with a typed runtime, omnichannel surfaces, structured memory/knowledge, and a raw ANSI renderer.
 
@@ -836,7 +836,7 @@ Key commands:
 - `/profilesync`
 - `/setup transfer export|inspect|import`
 
-Service entries can use existing `tokenKey` fields, a SecretRef in the key field, or explicit `tokenRef` / `passwordRef` / `webhookUrlRef` / `signingSecretRef` / `publicKeyRef` fields:
+Service entries can use existing `tokenKey` fields, a SecretRef in the key field, or explicit `tokenRef` / `passwordRef` / `webhookUrlRef` / `signingSecretRef` / `publicKeyRef` / `appTokenRef` fields:
 
 ```json
 {
@@ -844,11 +844,18 @@ Service entries can use existing `tokenKey` fields, a SecretRef in the key field
     "name": "slack",
     "authType": "bearer",
     "tokenKey": "SLACK_BOT_TOKEN",
+    "appTokenKey": "SLACK_APP_TOKEN",
     "tokenRef": {
       "source": "vaultwarden",
       "item": "GoodVibes Slack",
       "field": "password",
       "server": "https://vault.example.test"
+    },
+    "appTokenRef": {
+      "source": "vaultwarden",
+      "item": "GoodVibes Slack App",
+      "field": "password",
+      "server": "https://vault.example.test"
     }
   }
 }

package/docs/foundation-artifacts/operator-contract.json

@@ -3,7 +3,7 @@
   "product": {
     "id": "goodvibes",
     "surface": "operator",
-    "version": "0.25.5"
+    "version": "0.25.6"
   },
   "auth": {
     "modes": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pellux/goodvibes-tui",
-  "version": "0.19.30",
+  "version": "0.19.31",
   "description": "Terminal-native GoodVibes product for coding, operations, automation, knowledge, channels, and daemon-backed control-plane workflows.",
   "type": "module",
   "main": "src/main.ts",
@@ -91,7 +91,7 @@
     "@anthropic-ai/vertex-sdk": "^0.16.0",
     "@ast-grep/napi": "^0.42.0",
     "@aws/bedrock-token-generator": "^1.1.0",
-    "@pellux/goodvibes-sdk": "^0.25.5",
+    "@pellux/goodvibes-sdk": "^0.25.6",
     "bash-language-server": "^5.6.0",
     "fuse.js": "^7.1.0",
     "graphql": "^16.13.2",

package/src/input/commands/services-runtime.ts

@@ -41,6 +41,7 @@ export function registerServicesRuntimeCommands(registry: CommandRegistry): void
           `  webhookUrl: ${inspection.hasWebhookUrl ? 'present' : 'missing'}`,
           `  signingSecret: ${inspection.hasSigningSecret ? 'present' : 'missing'}`,
           `  publicKey: ${inspection.hasPublicKey ? 'present' : 'missing'}`,
+          `  appToken: ${inspection.hasAppToken ? 'present' : 'missing'}`,
         ].join('\n'));
         return;
       }

package/src/panels/services-panel.ts

@@ -195,6 +195,8 @@ export class ServicesPanel extends ScrollableListPanel<ServicePanelEntry> {
         ...buildStatusPill(inspect.hasWebhookUrl ? 'good' : 'info', inspect.hasWebhookUrl ? 'present' : 'missing'),
         ['  Signing secret: ', C.label],
         ...buildStatusPill(inspect.hasSigningSecret ? 'good' : 'info', inspect.hasSigningSecret ? 'present' : 'missing'),
+        ['  App token: ', C.label],
+        ...buildStatusPill(inspect.hasAppToken ? 'good' : 'info', inspect.hasAppToken ? 'present' : 'missing'),
       ]));
       if (selected.lastTest) {
         detailLines.push(buildPanelLine(width, [

package/src/runtime/onboarding/derivation.ts

@@ -211,7 +211,7 @@ function hasRemoteDeviceAccess(snapshot: OnboardingSnapshotState): boolean {
 function hasWebhookOrEventIngress(snapshot: OnboardingSnapshotState): boolean {
   return snapshot.bindSettings.httpListenerEnabled
     || hasInboundEventSurface(snapshot)
-    || snapshot.services.services.some((service) => service.hasWebhookUrl || service.hasSigningSecret || service.hasPublicKey);
+    || snapshot.services.services.some((service) => service.hasWebhookUrl || service.hasSigningSecret || service.hasPublicKey || service.hasAppToken);
 }
 
 function getProviderIdentityIds(snapshot: OnboardingSnapshotState): Set<string> {

package/src/runtime/onboarding/snapshot.ts

@@ -122,6 +122,7 @@ async function buildServicesSnapshot(
           hasWebhookUrl: inspection?.hasWebhookUrl ?? false,
           hasSigningSecret: inspection?.hasSigningSecret ?? false,
           hasPublicKey: inspection?.hasPublicKey ?? false,
+          hasAppToken: inspection?.hasAppToken ?? false,
         } satisfies OnboardingServiceState,
         issue: null,
       };
@@ -139,6 +140,7 @@ async function buildServicesSnapshot(
           hasWebhookUrl: false,
           hasSigningSecret: false,
           hasPublicKey: false,
+          hasAppToken: false,
         } satisfies OnboardingServiceState,
         issue: {
           area: 'services',

package/src/runtime/onboarding/types.ts

@@ -75,6 +75,7 @@ export interface OnboardingServiceState {
   readonly hasWebhookUrl: boolean;
   readonly hasSigningSecret: boolean;
   readonly hasPublicKey: boolean;
+  readonly hasAppToken: boolean;
 }
 
 export interface OnboardingServicesSnapshot {

package/src/runtime/services.ts

@@ -417,6 +417,7 @@ export function createRuntimeServices(options: RuntimeServicesOptions): RuntimeS
   const projectIndex = new ProjectIndex(workingDirectory);
   const channelDeliveryRouter = new ChannelDeliveryRouter({
     configManager,
+    secretsManager,
     serviceRegistry,
     artifactStore,
   });

package/src/version.ts

@@ -6,7 +6,7 @@ import { join } from 'node:path';
 // The prebuild script updates the fallback value before compilation.
 // Uses import.meta.dir (Bun) to locate package.json relative to this file,
 // which is correct regardless of the process working directory.
-let _version = '0.19.30';
+let _version = '0.19.31';
 try {
   const pkg = JSON.parse(readFileSync(join(import.meta.dir, '..', 'package.json'), 'utf-8'));
   _version = pkg.version ?? _version;