@pellux/goodvibes-tui 1.16.1 → 1.18.0

package/CHANGELOG.md

@@ -4,6 +4,135 @@ All notable changes to GoodVibes TUI.
 
 ---
 
+## [1.18.0] — 2026-07-14
+
+### Changes
+- 04356a3b adopt published SDK 1.9.0 and opt real runtimes into the host power seam
+- 1551e7f2 memory: consolidation proposals surface in the TUI, and a modal clipping bug fix
+- 6d65128a gates: reviewer fixtures carry the acceptance checklist; command reference regenerated
+- a975efdd keep-awake is daemon-held and the chip syncs across surfaces
+- 101d00de surface honesty: resolved provenance summaries, in-panel review checklist and task-graph posture
+- 97ddf140 dev-link: re-link to sdk fd0e6b29 (review wire seam on the fleet node; observed-agent composition subpath bundle entry)
+- 28d48db4 recovery honesty: session-scoped delete, silent auto-restore, no more .preserved dance
+- ed61ab6b one-act lifecycle verbs: approve launches, discard really discards
+- 3ec4f97b surface honesty: two gate tests write fleet.maxSize, not the dead orchestration.maxActiveAgents key
+- ad8eb489 observed rows get a real drill-in steer path
+- 70e55cf9 fork parity: run the startup retention sweep (full roots) and live config-file watch on TUI-composed runtimes
+- 86a3e24c fleet composition: extract createFleetServices helper so the observed wiring fits under the file-size cap
+- 6e50397b daemon composes observed foreign agents: wire observeExternalAgents through the fork so real users see observed rows
+- 4f92cb10 dev-link: re-link to sdk d0a1b96c (observed-agent source exposed on a daemon-composition subpath, unblocks the daemon composing observed rows)
+- 8f84a539 identifier rule: ban worded plan-item labels (mirror the SDK scanner extension)
+- cedeb53e dev-link: re-link to sdk e0a5595d (cert-minting removed, consolidation.receipts verb, recovery/ registered)
+- 62dd21e2 gates: adopt the SDK's fleet.maxSize rename and fix-phase rework; surface new keys; refresh goldens
+- d0d5d9d0 dev-link: re-link to sdk 89690d07 (memory-provenance rides TURN_COMPLETED.metadata.memory.recordIds)
+- d4ad82ce observed foreign agents render in the fleet pane; keep every touched file under the 800-line cap
+- fb721780 consolidation receipts: an idle memory-consolidation run surfaces as a one-line attach notice
+- d2402ea4 memory provenance chip: read the SDK metadata.memory.recordIds convention
+- ebd7f06b task graph renders: a workstream's nodes, edges, states, and pool posture, legible
+- 124332e6 voice settings: local engines surface, the local provider joins the picker, cost stays honest
+- 7a5c5fa9 memory provenance chip: an opt-in "used N memories" turn indicator with a drill-in
+- 93fed956 power surfaces: the "sleep disabled" chip, held-because reasons, the honest lid-split, a one-key toggle
+- 04273e8b queued mid-turn messages: an editable list, edit/delete until delivery
+- 50093a07 dev-link: re-link to sdk a03bf218; adopt per-session recovery + power/consolidation/live-turn services
+- 547fbc36 per-tool cancel: a key stops the running tool call, cancelled result renders structurally
+- 78dc782b /git diff: route the full structural diff into the diff panel, delete the 4,000-char slice
+- 59d0d1b2 dev-link: re-link to sdk a5c63e3b (per-tool cancel, queued-message verbs, power, task graph)
+- c48997e7 fleet: host third-party ACP agents as fleet rows, from the panel and a command
+- 2de952b9 pairing: LAN posture rendered honestly from the SDK, tailscale serve as one action
+- e0d548f9 dev-link: re-link to sdk 64c67eaf (LAN http posture, acp hosting)
+- ee4c8f51 test: drop the forbidden any cast in the conflict-files detail fixture
+- 1573e2d0 operator-rpc: resolve shell paths lazily, after the static refusals
+- 60c9d177 fleet: the pick, conflict, and discard rows act from the panel selection
+- c58becd0 fleet gateway: the pick/conflict/discard verbs over the shared operator invoke path
+- cb150d8e fleet: waiting-on-human inherits the pick and conflict reasons everywhere
+- 5d4d40d4 dev-link: re-link to sdk d07b49e8 (fleet waiting-on-human: picks, conflicts, worktree discard)
+- fd3c1ad8 dev-link housekeeping: move the tarball pins off tmpfs to the durable job dir
+- 08066730 gates: relocate shared pairing modules to core, hold the 800-line cap
+- a8fe4ec7 blocked-too-long settings + honest turn-budget outcomes
+- 47b568c1 pairing bundle UX + a device manager in the security domain
+- 3735b46e pairing: the QR is the deep link, on a name that survives a lease change
+- 1a48f148 dev-link: adopt the SDK pairing hand-off + per-device token surface
+
+## [1.17.0] — 2026-07-13
+
+### Changes
+- fix(smoke): opt the daemon post-build smoke out of service boot promotion so the daemon under test stays in-process
+- fix(daemon): print this binary's real version in the connection banner instead of the v0.0.0 default
+- a7780e18 Pin @pellux/goodvibes-sdk and goodvibes-terminal-shell to published 1.8.0
+- 08d4c409 Sync foundation artifacts and test provider doubles to the round-10 SDK contract
+- 39134bb2 Complete the CI fix-session affordance: one-key attach to the real session, honest error line on a failed spawn
+- ce1b14bd Re-link the local SDK tarballs to the round-10 build carrying the real fix-session id contract
+- 2acbba55 Offer a one-key jump to a spawned CI fix session instead of a resume command to retype
+- 52faa61d Rewrite the memory-modal sample record in plain language and drop its identifier-check carve-out
+- 92a9649c Name domain settings keys, not internal gate ids, in surface readiness output
+- e96dda8e Read an adopted external daemon's attach-time receipts over HTTP so the default deployment gets the same one-line notices
+- 5890e1f9 Wire the interactive-exec prompt-answer handler into the tool registry and post-clobber orchestrator so terminal prompts get an ask
+- 071255cb Thread the provider registry into agent and automation managers so bare model ids resolve
+- 3a86ac34 Footer: persistent web-surface URL segment when the web surface is enabled
+- b20005a2 Sandbox: announce 'commands now run contained' on the first contained run
+- fb45c2a7 Daemon attach-time receipts + announcements consume as one-line notices
+- b783622a Slim main.ts: extract the session-continuity-hints builder
+- 715c414c dev-link: re-link to sdk 1d6a85e2, wire ci fix-session jump affordance
+- f94d08e8 Automation: how-to-create-first-routine empty state with a real command pointer
+- f0e6fb18 Re-link fixups: regenerate foundation artifacts, mock resolveModelPricing
+- c0ccbd6c Daemon self-update via facade host-version wiring; workspace self-record provenance
+- b30e1008 dev-link: re-link to sdk d494938c
+- 21e82f3c Render broker-originated approval asks (including ci:fix-session) as cards
+- d40901bc Give the panel_only notification target a live producer
+- 40cfa261 Permissions settings: list and revoke remembered approval rules
+- b4ffb403 Approval card: pass scroll, mouse, and Esc through to input
+- e939b20c Run live model discovery in the TUI: init, picker-open re-check, /refresh-models delta
+- f3d6a079 Wire the localhost-fetch approval into tools and both orchestrator sites
+- 17b66695 Generalize onboarding subscription rows; close codename-scanner holes
+- 794bf9f4 Provider-agnostic onboarding key capture
+- 017a9c09 Provider key intake at selection, and executable provider repair rows
+- 9e6544b8 dev-link: re-link to sdk 9be5fecd (committed export entries, receipt-consumption contract)
+- 60465227 daemon parity: pin the ci-watch recurring poller's attachment
+- e7ae78e5 approval card: remember tiers, colored diffs, whole commands, typed replies, an honest queue
+- 3b12178f costs and budgets: dollars name their source, unknown prices carry the one-key fix, manual prices persist live
+- ecbb4f91 fleet: per-node headlines, the quiet-Nm stall marker, and the canonical waiting-on-human classification
+- 7881abfc update mechanism: one canonical policy module everywhere
+- ef1cc4d8 onboarding fast path: copy generated from registration truth
+- b90f2615 daemon composition: mirror the sdk runtime-services round (approval rules, snapshots, pricing resolver, live credentials, exec prompts, update lifecycle)
+- b459c3b5 dev-link: four more sdk export subpaths for the daemon lifecycle family
+- b10a610f dev-link: expose store-snapshots and self-update subpaths on the sdk tarball
+- b5b22fbb dev-link: refresh sdk tarballs to snapshot 4d8d90ee
+- 5a698519 auth-behavior test: OS-assigned ports end the port-in-use flake
+- 8d1c019e ops interventions: gate on the real control-plane gateway capability, proven live
+- 8d857c55 composition trims for the line cap; channel wiring in its own module
+- ff47c4aa onboarding: enablement-key coherence fixes surfaced by the coverage tests
+- 1fc2230b tests + recall sync: adopt new SDK contracts (catalog, models, projection ownership)
+- 637a7506 tests: adopt new SDK contracts across gates, automation, cli, fetch consumers
+- e0121015 tests: daemon flag seeding and fetch localhost-approval tier
+- 6bac548d in-product feature docs: full documentation under the cursor, scrolling pane
+- 1572c8d0 onboarding: guided feature steps write domain settings keys
+- afa41a18 remove the flags command family; surviving surfaces speak domain settings
+- e08c7a65 settings modal: capabilities as feature units in their domains
+- 03d1d65c feature settings adoption: runtime plumbing on domain settings keys
+- 0865b52f dev-link: point sdk packages at local snapshot tarballs
+- f3b5b8e0 auto-update: end-to-end proof of the whole launch loop with real processes
+- e0da9c5f grammar lint fixture: blank-description registration now asserts the refusal
+- 3d6d1965 docs: remote-access guide — daemon on an always-on box, reached from anywhere
+- 861a7fb3 daemon CLI help: migrate-service copy matches the reconciled unit naming
+- 2256372e /help: generate the in-product command reference from the registry
+- 3415db60 service copy: stop labeling the install script's unit 'legacy'
+- b7e80a8b auto-update at launch: land on the newest release before the TUI starts
+- 71a599e2 install.sh: daemon survives boots without a login and never tombstones
+- 6424950a chore: sweep lettered finding/brief ids and ban the recurring shapes
+- 0430a889 chore: remove finding-id shorthand from comments and test names
+- 48ebd188 chore: ignore the local test scratch directory
+- 3d3af085 chore: strip plan-label references from comments added in the last two rounds
+- e91976a0 fix(trust): ask trust at the moment it has a consequence, and self-record registration
+- 5ab801a6 fix(cli,install): doctor exits honestly, and the installer makes its own last line true
+- f676ef72 feat(panels): give panel-only-routed notifications a real, visible home
+- f315552c fix(renderer): never clip the command-palette description or the model workspace's detail lines
+- c59ddc8c Add an architecture-check rule banning internal planning identifiers
+- caad649a Remove internal planning-shorthand ids from docs and remaining scripts
+- c4f11597 Remove internal planning-shorthand ids from test comments and test names
+- e32b5c08 Remove internal planning-shorthand ids from panels/renderer comments
+- 1e99067c Remove internal planning-shorthand ids from input-layer comments
+- 072b2ca2 Remove internal planning-shorthand ids from core/runtime comments
+
 ## [1.16.1] — 2026-07-12
 
 ### Changes
@@ -1273,7 +1402,7 @@ Maintenance release: SDK 0.22.0 bump + README/gitignore hygiene + test-timeout p
 SDK 0.21.27 → 0.21.35 upgrade. Captures all OBS-05, OBS-06, OBS-14, F3, QA-14, and PERF-08 consumer-side migrations; no 0.19.17 was ever published (tests failed in CI) — this release closes out all of that work.
 
 ### Changed
-- Upgraded `@pellux/goodvibes-sdk` from 0.21.27 to 0.21.35. Wave 4 closeout + Wave 5 + PERF-08 SSE backpressure rebuild.
+- Upgraded `@pellux/goodvibes-sdk` from 0.21.27 to 0.21.35. Panel and provider-routing cleanup, plus the SSE backpressure rebuild.
 - `src/runtime/bootstrap.ts`: `getOrCreateCompanionToken('tui')` call migrated to the F3 signature `getOrCreateCompanionToken('tui', { daemonHomeDir })` with `daemonHomeDir` resolved from `services.homeDirectory`.
 - `src/panels/tool-inspector-panel.ts`:
   - TOOL_SUCCEEDED / TOOL_FAILED handlers simplified after OBS-05. Post-0.21.31 the `.result` field on these events is a `ToolResultSummary` (`{ kind, byteSize, preview? }`), not the raw tool result, so the prior `_policyAudit` extraction is no longer reachable from this event path. Dead lookup removed with an inline note pointing future readers at the approval broker / tool result store as the new channel for policy audit metadata.
@@ -1573,21 +1702,21 @@ Updated `docs/foundation-artifacts/operator-contract.json` SDK version field to
 
 ## [0.18.23] — 2026-04-16
 
-### Wave 4α+β performance bundle + α review follow-ups + regression fixes
+### Conversation-rendering + feed-context performance bundle, review follow-ups, and regression fixes
 
-Bundles Wave 4α (conversation-rendering double-parse elimination) and Wave 4β
-(feed-context object reuse) into a single release, adds documentation and test
-follow-ups from the 4α review, and fixes two regressions surfaced during that
+Bundles the conversation-rendering double-parse elimination and the feed-context
+object reuse into a single release, adds documentation and test follow-ups from
+the conversation-rendering review, and fixes two regressions surfaced during that
 review.
 
-### Performance (Wave 4α — conversation-rendering)
+### Performance (conversation-rendering)
 
 - **`src/core/conversation-rendering.ts`** — eliminates the legacy `renderMarkdown()`
   duplicate call used for `'code'` mode line counting. The 'all' mode retain its
   intentional measurement pass (see inline comment for rationale); the 'code' mode
   now derives its gutter width from the single `renderMarkdownTracked()` call.
 
-### Performance (Wave 4β — feed-context object reuse)
+### Performance (feed-context object reuse)
 
 - **`src/input/handler.ts`** — `InputHandler` now allocates a single `InputFeedContext`
   at startup (`initFeedContext()`) and mutates only the 14 mutable fields before
@@ -1601,7 +1730,7 @@ review.
 
 ### Regression fixes
 
-- **R1 — `handler.ts` architecture cap** — `handler.ts` was 830 lines after Wave 4β.
+- **R1 — `handler.ts` architecture cap** — `handler.ts` was 830 lines after the feed-context reuse change.
   Extracted factory functions into `src/input/feed-context-factory.ts`; `handler.ts`
   is now exactly 800 lines. `bun run architecture:check` passes.
 - **R2 — `SearchableListPanel.buildFilterInputLine` cursor glyph** — the focused
@@ -1611,7 +1740,7 @@ review.
   `[Label] ` bracket format provides the focused visual affordance without triggering
   the substitution. Fixes the pre-existing test failure from 0.18.22.
 
-### Quality bumps (Wave 4α review follow-ups)
+### Quality bumps (conversation-rendering review follow-ups)
 
 - **F1** — `src/test/input/feed-context-reuse.test.ts`: added mutable-field assertion
   verifying `ctx.prompt` and `ctx.cursorPos` update between feeds (feeds 'a' → 'b',

package/README.md

@@ -2,7 +2,7 @@
 
 [![CI](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml/badge.svg)](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Version](https://img.shields.io/badge/version-1.16.1-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
+[![Version](https://img.shields.io/badge/version-1.18.0-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
 
 A terminal-native AI coding, operations, automation, knowledge, and integration console with a typed runtime, omnichannel surfaces, structured memory/knowledge, and a raw ANSI renderer.