@pellux/goodvibes-tui 1.18.0 → 1.19.1

package/src/runtime/services.ts

@@ -13,18 +13,9 @@ import { resolvePairingWebOrigin } from '../core/pairing-origin.ts';
 import { attachWsOnlyGatewayVerbHandlers } from '@pellux/goodvibes-terminal-shell';
 import { WatcherRegistry } from '@pellux/goodvibes-sdk/platform/watchers';
 import { ArtifactStore } from '@pellux/goodvibes-sdk/platform/artifacts';
-import {
-  HomeGraphService,
-  GOODVIBES_AGENT_KNOWLEDGE_DB_FILE,
-  HOME_GRAPH_KNOWLEDGE_EXTENSION,
-  KnowledgeService,
-  KnowledgeSemanticService,
-  KnowledgeStore,
-  ProjectPlanningService,
-  createProviderBackedKnowledgeSemanticLlm,
-  createWebKnowledgeGapRepairer,
-  projectPlanningProjectIdFromPath,
-} from '@pellux/goodvibes-sdk/platform/knowledge';
+import { createWebKnowledgeGapRepairer } from '@pellux/goodvibes-sdk/platform/knowledge';
+import type { HomeGraphService, KnowledgeService, ProjectPlanningService } from '@pellux/goodvibes-sdk/platform/knowledge';
+import { createKnowledgeServices } from './knowledge-services.ts';
 import { MediaProviderRegistry, ensureBuiltinMediaProviders } from '@pellux/goodvibes-sdk/platform/media';
 import { MultimodalService } from '@pellux/goodvibes-sdk/platform/multimodal';
 import { AgentMessageBus, AgentOrchestrator, ArchetypeLoader, WrfcController } from '@pellux/goodvibes-sdk/platform/agents';
@@ -34,7 +25,7 @@ import type { StoreSnapshotScheduler } from '@pellux/goodvibes-sdk/platform/stat
 import type { UserPermissionRuleStore } from '@pellux/goodvibes-sdk/platform/permissions';
 import { buildExecPromptAnswerHandler } from '@pellux/goodvibes-sdk/platform/runtime/permissions/exec-prompt-wiring';
 import { buildLocalhostFetchApproval } from '@pellux/goodvibes-sdk/platform/runtime/permissions/localhost-fetch-approval';
-import { createNotificationDispatcher, wireRuntimeNotificationBridge, type NotificationDispatcher } from './notification-dispatch.ts';
+import { createNotificationDispatcher, wireRuntimeNotificationBridge, wireMemoryPressureNotice, type NotificationDispatcher } from './notification-dispatch.ts';
 import { createDurabilityServices } from './durability-services.ts';
 import { MemorySpineClient, createLocalMemoryAccess } from '@pellux/goodvibes-sdk/platform/runtime/memory-spine';
 import { WorkspaceCheckpointManager } from '@pellux/goodvibes-sdk/platform/workspace';
@@ -48,6 +39,9 @@ import {
   type ShellPathService, type FeatureFlagManager, createFeatureFlagManager, PolicyRuntimeState,
 } from '@/runtime/index.ts';
 import { VoiceProviderRegistry, VoiceService, ensureBuiltinVoiceProviders } from '@pellux/goodvibes-sdk/platform/voice';
+import { CacheRegistry, PauseController, type MemoryGovernor } from '@pellux/goodvibes-sdk/platform/runtime/memory';
+import { wireMemoryGovernance } from './memory-governance-services.ts';
+import { wireVoiceSetup } from './voice-setup-services.ts';
 import { WebSearchProviderRegistry, WebSearchService } from '@pellux/goodvibes-sdk/platform/web-search';
 import { PanelManager } from '../panels/panel-manager.ts';
 import { HookActivityTracker } from '@pellux/goodvibes-sdk/platform/hooks';
@@ -70,7 +64,7 @@ import { createFleetServices } from './fleet-services.ts';
 import { createWorkstreamServices, type OrchestrationEngine, type WorkstreamCommandService } from './workstream-services.ts';
 import { wireFleetNeedsInputPush } from './fleet-needs-input-push.ts';
 import { codeIndexDbPath, createCodeIndexServices, isCodeInjectionSettingEnabled } from './code-index-services.ts';
-import { WorkPlanStore } from '../work-plans/work-plan-store.ts';
+import type { WorkPlanStore } from '../work-plans/work-plan-store.ts';
 import { registerDaemonHandlers, type DaemonHandlerSurfaces } from '../daemon/handlers/index.ts';
 import type { HandlerContext, HandlerLogger } from '../daemon/handlers/context.ts';
 import { createDaemonCredentialStore } from '../daemon/handlers/credentials.ts';
@@ -84,8 +78,6 @@ import { registerRemoteSurface } from '../daemon/handlers/remote/index.ts';
 import { WorkspaceTrustManager } from './trust/workspace-trust.ts';
 import { ensureConfiguredModelIsRoutable } from './provider-fallback.ts';
 
-const REGULAR_KNOWLEDGE_DB_FILE = 'knowledge-wiki.sqlite';
-const HOME_GRAPH_KNOWLEDGE_DB_FILE = 'knowledge-home-graph.sqlite';
 export interface RuntimeServicesOptions {
   readonly runtimeBus: RuntimeEventBus;
   readonly runtimeStore: RuntimeStore;
@@ -213,6 +205,12 @@ export interface RuntimeServices {
   readonly storeSnapshotScheduler: StoreSnapshotScheduler;
   readonly memoryConsolidationScheduler: MemoryConsolidationScheduler;
   readonly powerManager: PowerManager;
+  /** The daemon's memory governor (default ON). Backs ops.memory.get and defends the daemon's footprint by tier. */
+  readonly memoryGovernor: MemoryGovernor;
+  /** Registry of every retained cache the governor can shrink (knowledge stores + shared session broker). */
+  readonly cacheRegistry: CacheRegistry;
+  /** Controller the governor uses to pause/resume the deferrable background jobs under pressure. */
+  readonly pauseController: PauseController;
   readonly sessionLiveTurnControls: SessionLiveTurnControlsHolder;
   /** Unified live process registry (agents, WRFC chains, workflows, watchers, background processes) backing the Fleet panel; archive-aware — finished subtrees can be moved to the session archive view. */
   readonly processRegistry: ArchivableProcessRegistry;
@@ -243,6 +241,19 @@ export function createRuntimeServices(options: RuntimeServicesOptions): RuntimeS
     bindFeatureSettingsBridge(configManager, featureFlags);
   }
   const runtimeDispatch = createDomainDispatch(options.runtimeStore);
+  // Memory governance seams built EARLY (mirrors the SDK's own createRuntimeServices)
+  // so the scheduler gates and the knowledge background jobs can consult the pause
+  // controller before the MemoryGovernor (constructed at the composition tail)
+  // drives it. The admission gate is late-bound: expensive entry points capture
+  // this closure now and the governor binds into it at the tail — until then
+  // everything is admitted (the daemon is still booting).
+  const cacheRegistry = new CacheRegistry();
+  const pauseController = new PauseController();
+  const MEMORY_BACKGROUND_JOB_IDS = ['knowledge-self-improvement', 'memory-consolidation', 'code-index-reindex'];
+  const admitExpensiveWorkRef: { current: ((label: string) => { allowed: boolean; reason?: string | undefined }) | null } = { current: null };
+  const admitExpensiveWork = (label: string): { allowed: boolean; reason?: string | undefined } =>
+    admitExpensiveWorkRef.current?.(label) ?? { allowed: true };
+  const isKnowledgeBackgroundPaused = (): boolean => pauseController.isPaused('knowledge-self-improvement');
   const gatewayMethods = new GatewayMethodCatalog();
   const panelManager = new PanelManager();
   // (the purge): MIGRATE-TO-MODAL surface + redirect registration moved to
@@ -431,59 +442,13 @@ export function createRuntimeServices(options: RuntimeServicesOptions): RuntimeS
       return record.id;
     },
   });
-  const knowledgeStore = new KnowledgeStore({
-    configManager,
-    dbFileName: REGULAR_KNOWLEDGE_DB_FILE,
-  });
-  const agentKnowledgeStore = new KnowledgeStore({
-    configManager,
-    dbFileName: GOODVIBES_AGENT_KNOWLEDGE_DB_FILE,
-  });
-  const homeGraphKnowledgeStore = new KnowledgeStore({
-    configManager,
-    dbFileName: HOME_GRAPH_KNOWLEDGE_DB_FILE,
-  });
-  const knowledgeSemanticLlm = createProviderBackedKnowledgeSemanticLlm(providerRegistry, {
-    timeoutMs: 20_000,
-    maxConcurrent: 1,
-  });
-  const knowledgeSemanticService = new KnowledgeSemanticService(knowledgeStore, {
-    llm: knowledgeSemanticLlm,
-    maxLlmSourcesPerReindex: 3,
-  });
-  const homeGraphSemanticService = new KnowledgeSemanticService(homeGraphKnowledgeStore, {
-    llm: knowledgeSemanticLlm,
-    maxLlmSourcesPerReindex: 3,
-    objectProfiles: HOME_GRAPH_KNOWLEDGE_EXTENSION.objectProfiles,
-  });
-  const agentKnowledgeSemanticService = new KnowledgeSemanticService(agentKnowledgeStore, {
-    llm: knowledgeSemanticLlm,
-    maxLlmSourcesPerReindex: 3,
-  });
-  const knowledgeService = new KnowledgeService(knowledgeStore, artifactStore, undefined, {
-    memoryRegistry,
-    runtimeBus: options.runtimeBus,
-    semanticService: knowledgeSemanticService,
-  });
-  knowledgeService.attachRuntimeBus(options.runtimeBus);
-  const agentKnowledgeService = new KnowledgeService(agentKnowledgeStore, artifactStore, undefined, {
-    memoryRegistry,
-    runtimeBus: options.runtimeBus,
-    semanticService: agentKnowledgeSemanticService,
-  });
-  agentKnowledgeService.attachRuntimeBus(options.runtimeBus);
-  const homeGraphService = new HomeGraphService(homeGraphKnowledgeStore, artifactStore, {
-    semanticService: homeGraphSemanticService,
-  });
-  const projectPlanningProjectId = projectPlanningProjectIdFromPath(workingDirectory);
-  const projectPlanningService = new ProjectPlanningService(knowledgeStore, {
-    defaultProjectId: projectPlanningProjectId,
-  });
-  const workPlanStore = new WorkPlanStore({
-    homeDirectory,
-    projectId: projectPlanningProjectId,
-    projectRoot: workingDirectory,
-  });
+  // Knowledge/wiki + home-graph stack (governor backpressure wired in) — see knowledge-services.ts.
+  const {
+    knowledgeStore, agentKnowledgeStore, homeGraphKnowledgeStore,
+    knowledgeSemanticService, homeGraphSemanticService, agentKnowledgeSemanticService,
+    knowledgeService, agentKnowledgeService, homeGraphService,
+    projectPlanningService, projectPlanningProjectId, workPlanStore,
+  } = createKnowledgeServices({ configManager, providerRegistry, artifactStore, memoryRegistry, runtimeBus: options.runtimeBus, workingDirectory, homeDirectory, isBackgroundPaused: isKnowledgeBackgroundPaused, admitExpensiveWork });
   const voiceProviders = new VoiceProviderRegistry();
   ensureBuiltinVoiceProviders(voiceProviders, { readConfig: (key) => configManager.get(key as Parameters<typeof configManager.get>[0]) });
   const voiceService = new VoiceService(voiceProviders);
@@ -595,7 +560,7 @@ export function createRuntimeServices(options: RuntimeServicesOptions): RuntimeS
   // Repo source-tree code index, sharing memoryEmbeddingRegistry
   // with MemoryStore above. Auto-build is config-gated (default off) — see
   // code-index-services.ts's header doc.
-  const { codeIndexStore, codeIndexReindexScheduler } = createCodeIndexServices({ workingDirectory, configManager, memoryEmbeddingRegistry });
+  const { codeIndexStore, codeIndexReindexScheduler } = createCodeIndexServices({ workingDirectory, configManager, memoryEmbeddingRegistry, isReindexPaused: () => pauseController.isPaused('code-index-reindex'), admitExpensiveWork });
   // Store snapshots + durable remembered-approval rules + the live credential
   // chain, mirroring the SDK composition — see durability-services.ts.
   const { storeSnapshotScheduler, userPermissionRuleStore } = createDurabilityServices({
@@ -614,10 +579,36 @@ export function createRuntimeServices(options: RuntimeServicesOptions): RuntimeS
   });
   const modeManager = new ModeManager(); const fileUndoManager = new FileUndoManager();
   const workspaceCheckpointManager = createWorkspaceCheckpointing({ workspaceRoot: workingDirectory, runtimeBus: options.runtimeBus, configManager });
-  const { memoryConsolidationScheduler, powerManager, sessionLiveTurnControls } = wireIdlePowerAndLiveTurn({ configManager, memoryRegistry, runtimeBus: options.runtimeBus, isIdle: () => sessionBroker.countBusySessions() === 0, snapshotTick: () => storeSnapshotScheduler.tick(), heartbeat: async () => { await automationManager.triggerHeartbeat({ source: 'wake-catchup' }); }, powerSeam: options.powerSeam });
+  // memory-consolidation honors governor backpressure: it ticks only when idle
+  // AND the 'memory-consolidation' job is not paused AND expensive work is
+  // admitted (mirrors the SDK's own createRuntimeServices idle gate).
+  const { memoryConsolidationScheduler, powerManager, sessionLiveTurnControls } = wireIdlePowerAndLiveTurn({ configManager, memoryRegistry, runtimeBus: options.runtimeBus, isIdle: () => sessionBroker.countBusySessions() === 0 && !pauseController.isPaused('memory-consolidation') && admitExpensiveWork('memory consolidation').allowed, snapshotTick: () => storeSnapshotScheduler.tick(), heartbeat: async () => { await automationManager.triggerHeartbeat({ source: 'wake-catchup' }); }, powerSeam: options.powerSeam });
+
+  // Construct + start the MemoryGovernor (default ON — a safety feature) with
+  // the standard KNOWN cache adapters (knowledge stores + shared session
+  // broker), then late-bind the admission gate the expensive entry points
+  // captured earlier. Mirrors the SDK's own createRuntimeServices composition tail.
+  const { memoryGovernor } = wireMemoryGovernance({
+    configManager,
+    runtimeBus: options.runtimeBus,
+    cacheRegistry,
+    pauseController,
+    jobIds: MEMORY_BACKGROUND_JOB_IDS,
+    receiptPath: shellPaths.resolveProjectPath('tui', 'memory', 'tripwire-receipt.json'),
+    knowledgeStores: [knowledgeStore, agentKnowledgeStore, homeGraphKnowledgeStore],
+    sessionBroker,
+    // Graceful tripwire shutdown flushes in-flight state via ASYNC store
+    // snapshots so the governor's 10s shutdown ceiling stays enforceable.
+    onTripwireShutdown: async () => { await storeSnapshotScheduler.snapshotAllAsync('tripwire'); },
+  });
+  admitExpensiveWorkRef.current = (label) => memoryGovernor.admitExpensiveWork(label);
+
+  // Managed local-voice provisioning (voice.local.status/install) — single-flight
+  // one-act install + no-network status; see voice-setup-services.ts.
+  const { voiceSetup } = wireVoiceSetup({ configManager, shellPaths, voiceProviders, admitExpensiveWork });
 
-  // Terminal-shell wrapper over the SDK registerGatewayVerbGroups (gateway-verbs.ts); checkin.*/fleet-needs-input/pairing.* register only when their deps are present.
-  attachWsOnlyGatewayVerbHandlers(gatewayMethods, { processRegistry, workspaceCheckpointManager, conversationRewindPort: createSessionConversationRewindPort(), sessionBroker, secretsManager, stepUpService, approvalBroker, requestApproval: (input) => approvalBroker.requestApproval(input), watcherRegistry, userPermissionRuleStore, shellPaths, configManager, runtimeStore: options.runtimeStore, channelDeliveryRouter, providerRegistry, automationManager, sessionLister: sessionBroker, sessionIntake: sessionBroker, workingDirectory, memoryRegistry, pairingTokens, sessionLiveTurnControls, powerManager, relayAvailable: () => configManager.get('relay.enabled') === true, pairingWebOrigin: () => resolvePairingWebOrigin(configManager).origin, ...wireFleetNeedsInputPush({ registry: processRegistry, runtimeBus: options.runtimeBus, sessionBroker }) });
+  // Terminal-shell wrapper over the SDK registerGatewayVerbGroups (gateway-verbs.ts); checkin.*/fleet-needs-input/pairing.* register only when their deps are present. memoryGovernor lights up ops.memory.get; voiceSetup lights up voice.local.status/install.
+  attachWsOnlyGatewayVerbHandlers(gatewayMethods, { processRegistry, workspaceCheckpointManager, conversationRewindPort: createSessionConversationRewindPort(), sessionBroker, secretsManager, stepUpService, approvalBroker, requestApproval: (input) => approvalBroker.requestApproval(input), watcherRegistry, userPermissionRuleStore, shellPaths, configManager, runtimeStore: options.runtimeStore, channelDeliveryRouter, providerRegistry, automationManager, sessionLister: sessionBroker, sessionIntake: sessionBroker, workingDirectory, memoryRegistry, pairingTokens, sessionLiveTurnControls, powerManager, memoryGovernor, voiceSetup, relayAvailable: () => configManager.get('relay.enabled') === true, pairingWebOrigin: () => resolvePairingWebOrigin(configManager).origin, ...wireFleetNeedsInputPush({ registry: processRegistry, runtimeBus: options.runtimeBus, sessionBroker }) });
   const integrationHelpers = new IntegrationHelperService({
     workingDirectory,
     homeDirectory,
@@ -680,6 +671,9 @@ export function createRuntimeServices(options: RuntimeServicesOptions): RuntimeS
   // panel feed (panel_only and burst-collapsed decisions land there).
   const notificationDispatcher = createNotificationDispatcher(configManager);
   wireRuntimeNotificationBridge(options.runtimeBus, notificationDispatcher);
+  // OPS_MEMORY_PRESSURE is lifted into the notice feed on its own targeted
+  // bridge (the high-churn 'ops' domain stays out of the wholesale allowlist).
+  wireMemoryPressureNotice(options.runtimeBus, notificationDispatcher);
 
   return {
     workingDirectory,
@@ -782,6 +776,9 @@ export function createRuntimeServices(options: RuntimeServicesOptions): RuntimeS
     storeSnapshotScheduler,
     memoryConsolidationScheduler,
     powerManager,
+    memoryGovernor,
+    cacheRegistry,
+    pauseController,
     sessionLiveTurnControls,
     processRegistry,
     modeManager,

package/src/runtime/voice-setup-services.ts

@@ -0,0 +1,52 @@
+// ---------------------------------------------------------------------------
+// voice-setup-services.ts — managed local-voice provisioning composition (TUI wiring)
+//
+// Backs the daemon's voice.local.status / voice.local.install verbs. The
+// provisioning policy — a single-flight one-act install that provisions the
+// piper engine + a default voice (and whisper STT where a bundle is published),
+// live install-progress folded onto status(), ownership-aware preconfigure of
+// the voice.local.* keys (values THIS installer previously wrote update to the
+// new managed paths; genuinely user-set values still win; a user-cleared
+// installer value stays cleared), a no-network status() read, and critical-tier
+// admission gating — lives in the SDK's createVoiceSetupService. Earlier the
+// composer was not exported, so the TUI rebuilt it from the voice primitives;
+// SDK 1.10.1 exports it through ./platform/runtime/voice-setup, so this module
+// is now a thin adapter that maps the TUI's injected seams (configManager,
+// shellPaths, voiceProviders) onto the SDK service's flat deps.
+//
+// Extracted into its own module rather than built inline in services.ts, which
+// sits at the architecture check's 800-line cap (scripts/check-architecture.ts)
+// — new service construction gets its own module and a single wiring call there.
+// ---------------------------------------------------------------------------
+
+import {
+  createVoiceSetupService,
+  type VoiceSetupService,
+} from '@pellux/goodvibes-sdk/platform/runtime/voice-setup';
+import type { VoiceProviderRegistry } from '@pellux/goodvibes-sdk/platform/voice';
+import type { ConfigManager } from '@pellux/goodvibes-sdk/platform/config';
+import type { ShellPathService } from '@/runtime/index.ts';
+
+export type { VoiceSetupService };
+
+export interface VoiceSetupServicesDeps {
+  readonly configManager: ConfigManager;
+  readonly shellPaths: Pick<ShellPathService, 'resolveUserPath'>;
+  readonly voiceProviders: VoiceProviderRegistry;
+  /** Critical-tier admission gate — a provision run allocates archive + model buffers. */
+  readonly admitExpensiveWork: (label: string) => { allowed: boolean; reason?: string | undefined };
+}
+
+/** Compose the managed-voice single-flight install + no-network status read. */
+export function wireVoiceSetup(deps: VoiceSetupServicesDeps): { voiceSetup: VoiceSetupService } {
+  const { configManager, voiceProviders } = deps;
+  const voiceSetup = createVoiceSetupService({
+    managedVoiceRoot: deps.shellPaths.resolveUserPath('voice'),
+    getConfig: (key) => String(configManager.get(key as Parameters<typeof configManager.get>[0]) ?? ''),
+    setConfig: (key, value) => configManager.setDynamic(key as Parameters<typeof configManager.setDynamic>[0], value),
+    // A successful (re-)install clears any tripped local-engine breaker.
+    resetLocalEngineFailureState: () => voiceProviders.get('local')?.resetEngineFailureState?.(),
+    admitExpensiveWork: deps.admitExpensiveWork,
+  });
+  return { voiceSetup };
+}

package/src/version.ts

@@ -6,10 +6,19 @@ import { join } from 'node:path';
 // The prebuild script updates the fallback value before compilation.
 // Uses import.meta.dir (Bun) to locate package.json relative to this file,
 // which is correct regardless of the process working directory.
-let _version = '1.18.0';
+let _version = '1.19.1';
 try {
   const pkg = JSON.parse(readFileSync(join(import.meta.dir, '..', 'package.json'), 'utf-8'));
-  _version = pkg.version ?? _version;
+  // Only trust a version read from OUR OWN package.json. A Bun single-file
+  // compiled binary resolves import.meta.dir to a virtual root where the
+  // `../package.json` path can land on a DIFFERENT package.json (a bundled
+  // dependency's, or the embedded runtime's) that reports a placeholder like
+  // "0.0.0" — exactly the wrong-version banner a bare daemon launch showed in
+  // the field. Guarding on the package name means the prebuild-baked fallback
+  // above wins in that case instead of a stray version.
+  if (pkg?.name === '@pellux/goodvibes-tui' && typeof pkg.version === 'string' && pkg.version.length > 0) {
+    _version = pkg.version;
+  }
 } catch {
   // Compiled binary or missing package.json — use fallback
 }