@pellux/goodvibes-tui 0.20.3 → 0.21.0

package/CHANGELOG.md

@@ -4,6 +4,33 @@ All notable changes to GoodVibes TUI.
 
 ---
 
+## [0.21.0] — 2026-06-12
+
+First release of the best-in-class program: a full UX-first review of the codebase followed by WRFC-gated remediation (every change passed independent review at 10/10 before commit).
+
+### Features
+- Added masked password entry for local auth: argv-less `/auth local add-user` and `rotate-password` open a bullet-masked prompt (Esc aborts, secrets never echo); input history scrubs cleartext secrets on add, recall, and load.
+- Added ranked fuzzy search to the settings modal (`/` searches keys, labels, and descriptions across categories) with a search header, result-derived context pane, and two-stage Escape.
+- Added a unified confirm/cancel contract across all panels (Enter/y confirms, Esc/n cancels) and a delete-key policy: destructive clears confirm first, end-anchored filters treat Delete as a no-op.
+- Added wizard progress persistence with resume-on-startup; masked fields are stripped before any write, and the onboarding marker is now written on apply success instead of wizard open.
+- Added user-facing turn errors (classified plain-language transcript lines with typed navigation), a stream-stall watchdog, live tool-call rows, TTFT, and honest token-speed in the status line.
+- Added a theme token layer (frozen dark/light palettes replacing hardcoded hex), terminal capability gating with color downsampling, and DEC 2026 synced output.
+- Added WRFC chain snapshots with schema-gated reads, a pre-router message buffer, agent guard traces, and panel controls (cancel, resume, stalled badge).
+- Added a gist upload target for `/share` (`--upload/--copy/--open`) and a shell-completions generator.
+
+### Fixes
+- Fixed the context meter: one SDK token estimator everywhere (three bespoke walkers removed), compact threshold drawn on the meter with color switching, and a percent-to-fraction config conversion that previously kept the marker off-screen.
+- Fixed agent cost and token reporting: real per-agent usage replaces the fabricated tool-call estimate, with a single canonical model-pricing table shared by the cost tracker and share/export.
+- Fixed onboarding state durability: atomic writes with fsync, an advisory lockfile around acknowledgement writes, and version-gated reads that quarantine corrupt or unrecognized files.
+- Fixed session/team memory queue front-doors to be genuinely scope-filtered with honest descriptions.
+- Fixed the always-speak toggle: `/voice` and `/tts on|off` are one switch, labeled correctly, with the no-player notice firing once per session.
+- Fixed dead panel keys (arrows/Enter/Escape), the crash-recovery footgun, command-registry duplicate shadowing, and the Backspace/Delete distinction under Ink.
+- Removed the project/plan auto-detection coordinator: plain text like "plan me a feature" reaches the model untouched; `/plan` and work plans are unchanged.
+
+### Internal
+- Coverage gate enforced in CI (functions >= 71%, lines >= 75%) with an empirical guard against the bun bunfig coverage override; eval gate fails closed in CI with a committed baseline; release script runs the full gate suite.
+- Concurrency-safe test temp dirs; 14 import cycles eliminated; main.ts and handler god-files split under the 800-line architecture limit; program docs (review, plan, roadmap, 14 subsystem dives) committed.
+
 ## [0.20.3] — 2026-05-13
 
 ### Fixes

package/README.md

@@ -2,7 +2,7 @@
 
 [![CI](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml/badge.svg)](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Version](https://img.shields.io/badge/version-0.20.3-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
+[![Version](https://img.shields.io/badge/version-0.21.0-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
 
 A terminal-native AI coding, operations, automation, knowledge, and integration console with a typed runtime, omnichannel surfaces, structured memory/knowledge, and a raw ANSI renderer.
 
@@ -99,6 +99,12 @@ Inbound TLS can run in `off`, `proxy`, or `direct` mode. Direct mode defaults to
 - [Knowledge, artifacts, and multimodal](docs/knowledge-artifacts-and-multimodal.md)
 - [Channels, remote runtime, and API](docs/channels-remote-and-api.md)
 - [Tools and commands](docs/tools-and-commands.md)
+- [Voice and live TTS](docs/voice-and-live-tts.md)
+- [Cloudflare batch and control plane](docs/cloudflare-batch.md)
+- [Home Assistant surface](docs/homeassistant-surface.md)
+- [Project planning](docs/project-planning.md)
+- [QEMU sandbox bootstrapping](docs/qemu-sandbox.md)
+- [Local verification](docs/verification/local-verification.md)
 - [Release and publishing](docs/release-and-publishing.md)
 - [Foundation artifacts](docs/foundation-artifacts/README.md)
 
@@ -540,6 +546,15 @@ Related storage paths:
 | `ui.systemMessages` | `panel` | Route general system messages to `panel`, `conversation`, or `both` |
 | `ui.operationalMessages` | `panel` | Route operational runtime notices to `panel`, `conversation`, or `both` |
 | `ui.wrfcMessages` | `both` | Route WRFC/orchestration updates to `panel`, `conversation`, or `both` |
+| `service.enabled` | `false` | Enable OS-backed background service mode |
+| `service.autostart` | `false` | Install/enable or disable/remove the OS autostart service |
+| `service.restartOnFailure` | `true` | Restart managed daemon services after failure |
+| `controlPlane.hostMode` | `local` | Control-plane bind mode: `local`, `network`, or `custom` |
+| `controlPlane.port` | `3421` | Control-plane daemon/API port |
+| `httpListener.port` | `3422` | Webhook/event listener port |
+| `web.enabled` | `false` | Enable browser operator surface |
+| `web.hostMode` | `local` | Web surface bind mode: `local`, `network`, or `custom` |
+| `web.port` | `3423` | Web/browser surface port |
 | `danger.agentRecursion` | `false` | Allow agents to spawn subagents |
 | `danger.maxGlobalAgents` | `8` | Max simultaneous agents |
 | `danger.daemon` | `false` | Enable daemon mode (POST /task) |
@@ -561,6 +576,8 @@ Related storage paths:
 
 Per-tool values: `allow`, `prompt`, `deny`.
 
+Changing `service.autostart` or `service.enabled` from `/config` reconciles the OS service where supported. On Linux this installs/enables, disables, or rewrites the user `systemd` service so the daemon state matches the setting instead of only changing JSON.
+
 ---
 
 ## Control Rooms, Routing, And Operator Surfaces
@@ -626,7 +643,7 @@ The QEMU path includes:
 
 - setup bundle generation under the user GoodVibes data directory by default
 - first-run bootstrap scaffolding
-- Debian cloud-image download, mutable qcow2 clone, resize, and NoCloud ISO creation through the generated `create-image.sh`
+- Debian cloud-image download, mutable qcow2 clone, resize, and NoCloud ISO creation handled by the bootstrap workflow
 - host-side wrapper generation
 - guest cloud-init seed generation for the `goodvibes` sudo user, SSH key auth, `/workspace`, and `ens3` DHCP
 - guest-test and wrapper-test validation
@@ -660,6 +677,8 @@ Typical first-run path:
 /sandbox guest-test eval-py
 ```
 
+Bootstrap runs as a background TUI process: the prompt clears, progress is visible in the background-process surface, and the TUI stays responsive. If QEMU exits before SSH is reachable, the wrapper fails fast and includes a tail of the QEMU log so port conflicts or startup failures are visible.
+
 By default, QEMU setup files, the mutable qcow2 image, SSH keys, logs, and runtime state live in `~/.goodvibes/tui/sandbox`, not in the current project. Pass an explicit directory only when you intentionally want a non-default bundle location. Use `/sandbox qemu setup` or `/sandbox qemu bootstrap --scaffold-only` if you want to generate/review the bundle without building the image or provisioning guest runtimes.
 
 See [QEMU sandbox bootstrapping](docs/qemu-sandbox.md) for host prerequisites, generated files, first-boot behavior, guest runtime packages, and troubleshooting logs.
@@ -829,6 +848,7 @@ GoodVibes includes an automation layer with:
 - cron-like scheduled agent tasks with timezone-aware schedules, missed-run tracking, run history, and manual trigger support
 - TUI-owned project planning with readiness gaps, one-question-at-a-time clarification, project language, decision records, task/dependency/verification metadata, and explicit execution approval
 - planning commands with project-planning inspection, active-plan review, and mode/explain/override/status controls
+- persistent work-plan tracking for concrete task checklists via `/workplan`
 
 Key commands:
 
@@ -1261,6 +1281,7 @@ Those pieces cover conversation-noise routing, panel-health/performance budgets,
 | `/git [action]` | `/g` | Git commands: status, log, diff. Opens git panel if no action given |
 | `/scan` | — | Scan for local LLM servers |
 | `/plan [goal]` | — | Inspect or seed TUI-owned project planning state; `panel`, `approve`, `list`, and `show <id>` are supported |
+| `/workplan [action]` | `/wp`, `/todo` | Open or update the persistent workspace work-plan checklist |
 | `/panel [action]` | `/panels` | Panel management: open, close, list, toggle, move, focus, split, width, height |
 | `/plugin [action]` | — | Manage plugins (enable/disable/reload/list) |
 | `/marketplace [action]` | — | Browse curated plugin, skill, hook-pack, and policy-pack surfaces |