@pellux/goodvibes-tui 1.19.0 → 1.19.2

package/CHANGELOG.md

@@ -4,6 +4,26 @@ All notable changes to GoodVibes TUI.
 
 ---
 
+## [1.19.2] - 2026-07-17
+
+### Changes
+
+- deps: adopt published SDK 1.11.1 + toolchain 1.11.1 from the registry (1.11.1 ships the toolchain dispatcher bin that fixes consumer release verification)
+- f095f361 deps: adopt published SDK 1.11.0 + toolchain 1.11.0 from the registry
+- f2b67cfd ci: caller jobs must grant the permissions their called reusable workflows request
+- 831a7d97 release: smoke matrix legs carry their own binary per the updated contract
+- 353774ad cicd: pin newline-separated glob inputs in the shape suite + setup train note
+- 683c3398 release: restore the per-release notes override via gh-release notes-file
+- 526d2dae cicd: rewire workflows onto the shared composite + reusable workflows
+- 4ad63923 cicd: swap release/build/gate scripts to thin toolchain invocations
+- 224f9b4b cicd: add toolchain.config.json contract + platform optional-deps sync
+- 1484f09a build: dev-link @pellux/goodvibes-toolchain from SDK 20093d41 tarball
+
+## [1.19.1] — 2026-07-16
+
+### Changes
+- 7e97ce37 deps: adopt SDK 1.10.1 and consume the exported voice-setup composer
+
 ## [1.19.0] — 2026-07-16
 
 ### Changes

package/README.md

@@ -2,7 +2,7 @@
 
 [![CI](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml/badge.svg)](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Version](https://img.shields.io/badge/version-1.19.0-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
+[![Version](https://img.shields.io/badge/version-1.19.2-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
 
 A terminal-native AI coding, operations, automation, knowledge, and integration console with a typed runtime, omnichannel surfaces, structured memory/knowledge, and a raw ANSI renderer.
 

package/docs/README.md

@@ -0,0 +1,68 @@
+# Documentation
+
+This directory contains the current product documentation for `goodvibes-tui`.
+
+## Guides
+
+- [Getting started](getting-started.md)
+  Installation, first-run setup, provider configuration, common paths, and basic run/build flows.
+
+- [Configuration reference](configuration.md)
+  TUI-owned settings namespaces you add by hand to settings.json: checkpoint root guard, the scriptable statusline, session behavior, and launch-time self-update.
+
+- [Deployment and services](deployment-and-services.md)
+  TUI-only mode, compiled binary behavior, in-process daemon/listener hosting, source-run daemon mode, inbound TLS, outbound trust configuration, and control-plane entrypoints.
+
+- [Remote access: a home server setup](remote-access.md)
+  Step-by-step continuity setup: daemon on an always-on box, webui from any browser, TUI over SSH, Tailscale for reachability and TLS, validated by `goodvibes doctor`.
+
+- [Providers and routing](providers-and-routing.md)
+  Native providers, compatible/gateway providers, local discovery, synthetic failover, search providers, voice providers, and media providers.
+
+- [Voice and live TTS](voice-and-live-tts.md)
+  Live `/tts` playback, TTS provider/voice configuration, local player requirements, and streaming voice API behavior.
+
+- [Cloudflare batch and control plane](cloudflare-batch.md)
+  Optional Workers/Queues batch setup, bootstrap-token flow, daemon routes, onboarding fields, and `/cloudflare` commands.
+
+- [Home Assistant surface](homeassistant-surface.md)
+  Home Assistant companion setup, daemon callbacks, webhook security, and onboarding/settings fields.
+
+- [Knowledge, artifacts, and multimodal](knowledge-artifacts-and-multimodal.md)
+  Session memory, durable memory, structured knowledge, connectors, extractors, embeddings, artifacts, and multimodal analysis.
+
+- [Project planning](project-planning.md)
+  TUI-owned conversational planning loop, passive SDK planning artifacts, project-scoped knowledge spaces, readiness evaluation, and the Planning panel.
+
+- [Channels, remote runtime, and API](channels-remote-and-api.md)
+  Omnichannel surfaces, reply routing, remote peers, node-host contracts, and the daemon/control-plane HTTP + streaming surfaces.
+
+- [Session durability](session-durability.md)
+  Two-layer durability: post-turn snapshots plus periodic recovery files, and the fsync-per-record transcript journal replayed at every resume seam.
+
+- [Share command](share-command.md)
+  `/share` session export to HTML/JSON/Markdown with redaction, upload, clipboard, and open options.
+
+- [CLI flags](cli-flags.md)
+  Global flags reference: session lifecycle (`--continue`, `--resume`, `--fork`), confirmation bypass (`-y`/`--non-interactive`), output format consolidation, `--host` alias, and all other startup flags.
+
+- [Tools and commands](tools-and-commands.md)
+  Built-in tool families, slash-command families, and the operator/workflow surfaces that tie them together.
+
+- [QEMU sandbox bootstrapping](qemu-sandbox.md)
+  Host prerequisites, generated QEMU setup bundle files, Debian cloud-image bootstrapping, guest runtime installs, validation, and troubleshooting.
+
+- [Release and publishing](release-and-publishing.md)
+  Release validation, GitHub CD, compiled binary releases, npm distribution, and the GitHub Packages mirror.
+
+- [Local verification](verification/local-verification.md)
+  Inventory coverage, GoodVibes home audits, compiled CLI probes, authenticated daemon probes, and release-oriented local gates.
+
+- [Panel authoring](panel-authoring.md)
+  Class hierarchy, canonical example, palette convention, rendering utilities, input handling, performance instrumentation, and contract test registration for contributors building new TUI panels.
+
+- [Changelog](../CHANGELOG.md)
+  Current release history. Older per-version release-note files remain under `docs/releases/` for historical releases, but `CHANGELOG.md` is the canonical current stream.
+
+- [Foundation artifacts](foundation-artifacts/README.md)
+  Checked-in operator and peer contract manifests plus canonical knowledge GraphQL and SQL artifacts for release-gate and SDK extraction work.

package/docs/foundation-artifacts/operator-contract.json

@@ -3,7 +3,7 @@
   "product": {
     "id": "goodvibes",
     "surface": "operator",
-    "version": "1.10.0"
+    "version": "1.11.1"
   },
   "auth": {
     "modes": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pellux/goodvibes-tui",
-  "version": "1.19.0",
+  "version": "1.19.2",
   "description": "Terminal-native GoodVibes product for coding, operations, automation, knowledge, channels, and daemon-backed control-plane workflows.",
   "type": "module",
   "main": "src/main.ts",
@@ -33,12 +33,12 @@
     "build:linux-arm64": "bun build src/main.ts --compile --target=bun-linux-arm64 --outfile dist/goodvibes-linux-arm64",
     "build:macos-x64": "bun build src/main.ts --compile --target=bun-darwin-x64 --outfile dist/goodvibes-macos-x64",
     "build:macos-arm64": "bun build src/main.ts --compile --target=bun-darwin-arm64 --outfile dist/goodvibes-macos-arm64",
-    "build:daemon:linux-x64": "bun run scripts/build.ts --target daemon-linux-x64",
-    "build:daemon:linux-arm64": "bun run scripts/build.ts --target daemon-linux-arm64",
-    "build:daemon:macos-x64": "bun run scripts/build.ts --target daemon-macos-x64",
-    "build:daemon:macos-arm64": "bun run scripts/build.ts --target daemon-macos-arm64",
+    "build:daemon:linux-x64": "goodvibes-build-binaries --target daemon-linux-x64",
+    "build:daemon:linux-arm64": "goodvibes-build-binaries --target daemon-linux-arm64",
+    "build:daemon:macos-x64": "goodvibes-build-binaries --target daemon-macos-x64",
+    "build:daemon:macos-arm64": "goodvibes-build-binaries --target daemon-macos-arm64",
     "smoke:daemon": "bun run scripts/post-build-smoke.ts",
-    "smoke:tui": "bun run scripts/smoke-tui-binary.ts",
+    "smoke:tui": "goodvibes-post-build-smoke",
     "build:windows": "bun build src/main.ts --compile --target=bun-windows-x64 --outfile dist/goodvibes-windows.exe",
     "build:all-shell": "bun run build:linux-x64 && bun run build:linux-arm64 && bun run build:macos-x64 && bun run build:macos-arm64 && bun run build:windows",
     "test": "bun run scripts/run-tests.ts",
@@ -57,8 +57,8 @@
     "publish:dry-run:github": "GOODVIBES_PUBLIC_PACKAGE_NAME=@mgd34msu/goodvibes-tui GOODVIBES_PUBLISH_REGISTRY=https://npm.pkg.github.com bun run scripts/publish-package.ts --dry-run",
     "publish:check": "bun run scripts/publish-check.ts",
     "package:install-check": "bun run scripts/package-install-check.ts",
-    "build:prod": "bun run scripts/build.ts",
-    "build:all": "bun run scripts/build.ts --all",
+    "build:prod": "goodvibes-build-binaries",
+    "build:all": "goodvibes-build-binaries --all",
     "perf:check": "bun run scripts/perf-check.ts",
     "perf:baseline": "GOODVIBES_PERF_SAVE_BASELINE=1 bun run scripts/perf-check.ts",
     "architecture:check": "bun run scripts/check-architecture.ts",
@@ -104,8 +104,8 @@
     "@anthropic-ai/vertex-sdk": "^0.16.0",
     "@ast-grep/napi": "^0.42.0",
     "@aws/bedrock-token-generator": "^1.1.0",
-    "@pellux/goodvibes-sdk": "1.10.0",
-    "@pellux/goodvibes-terminal-shell": "1.10.0",
+    "@pellux/goodvibes-sdk": "1.11.1",
+    "@pellux/goodvibes-terminal-shell": "1.11.1",
     "bash-language-server": "^5.6.0",
     "fuse.js": "^7.1.0",
     "graphql": "^16.13.2",
@@ -127,14 +127,15 @@
     "zustand": "^5.0.12"
   },
   "devDependencies": {
+    "@pellux/goodvibes-toolchain": "1.11.1",
     "@types/bun": "^1.3.10",
     "typescript": "^5.9.3"
   },
   "optionalDependencies": {
-    "@pellux/goodvibes-tui-linux-x64": "1.19.0",
-    "@pellux/goodvibes-tui-linux-arm64": "1.19.0",
-    "@pellux/goodvibes-tui-darwin-x64": "1.19.0",
-    "@pellux/goodvibes-tui-darwin-arm64": "1.19.0"
+    "@pellux/goodvibes-tui-linux-x64": "1.19.2",
+    "@pellux/goodvibes-tui-linux-arm64": "1.19.2",
+    "@pellux/goodvibes-tui-darwin-x64": "1.19.2",
+    "@pellux/goodvibes-tui-darwin-arm64": "1.19.2"
   },
   "trustedDependencies": [],
   "overrides": {

package/src/runtime/voice-setup-services.ts

@@ -1,32 +1,33 @@
 // ---------------------------------------------------------------------------
 // voice-setup-services.ts — managed local-voice provisioning composition (TUI wiring)
 //
-// Backs the daemon's voice.local.status / voice.local.install verbs. Extracted
-// into its own module rather than built inline in services.ts, which sits at
-// the architecture check's 800-line cap (scripts/check-architecture.ts) — new
-// service construction gets its own module and a single wiring call there.
+// Backs the daemon's voice.local.status / voice.local.install verbs. The
+// provisioning policy — a single-flight one-act install that provisions the
+// piper engine + a default voice (and whisper STT where a bundle is published),
+// live install-progress folded onto status(), ownership-aware preconfigure of
+// the voice.local.* keys (values THIS installer previously wrote update to the
+// new managed paths; genuinely user-set values still win; a user-cleared
+// installer value stays cleared), a no-network status() read, and critical-tier
+// admission gating — lives in the SDK's createVoiceSetupService. Earlier the
+// composer was not exported, so the TUI rebuilt it from the voice primitives;
+// SDK 1.10.1 exports it through ./platform/runtime/voice-setup, so this module
+// is now a thin adapter that maps the TUI's injected seams (configManager,
+// shellPaths, voiceProviders) onto the SDK service's flat deps.
 //
-// Mirrors the SDK's own createRuntimeServices voiceSetup: a single-flight
-// one-act install that provisions the piper engine + a default voice (and
-// whisper STT where a bundle is published) and pre-configures the voice.local.*
-// keys with ownership awareness (values THIS installer previously wrote update
-// to the new managed paths; genuinely user-set values still win; a user-cleared
-// installer value stays cleared). status() is a no-network read.
+// Extracted into its own module rather than built inline in services.ts, which
+// sits at the architecture check's 800-line cap (scripts/check-architecture.ts)
+// — new service construction gets its own module and a single wiring call there.
 // ---------------------------------------------------------------------------
 
 import {
-  createVoiceInstallProgressTracker,
-  localVoiceRuntimeStatus,
-  preconfigureLocalVoiceKeys,
-  provisionLocalVoiceRuntime,
-  readVoiceInstallStamp,
-  writeVoiceInstallStamp,
-  type VoiceProviderRegistry,
-} from '@pellux/goodvibes-sdk/platform/voice';
-import { singleFlight } from '@pellux/goodvibes-sdk/platform/utils';
+  createVoiceSetupService,
+  type VoiceSetupService,
+} from '@pellux/goodvibes-sdk/platform/runtime/voice-setup';
+import type { VoiceProviderRegistry } from '@pellux/goodvibes-sdk/platform/voice';
 import type { ConfigManager } from '@pellux/goodvibes-sdk/platform/config';
 import type { ShellPathService } from '@/runtime/index.ts';
-import type { VoiceLocalInstallResult } from '../core/voice-provision-status.ts';
+
+export type { VoiceSetupService };
 
 export interface VoiceSetupServicesDeps {
   readonly configManager: ConfigManager;
@@ -36,69 +37,16 @@ export interface VoiceSetupServicesDeps {
   readonly admitExpensiveWork: (label: string) => { allowed: boolean; reason?: string | undefined };
 }
 
-/** The narrow provisioning slice the voice.local.* gateway verbs consume. */
-export interface VoiceSetupService {
-  status(): unknown;
-  install(): Promise<VoiceLocalInstallResult>;
-}
-
 /** Compose the managed-voice single-flight install + no-network status read. */
 export function wireVoiceSetup(deps: VoiceSetupServicesDeps): { voiceSetup: VoiceSetupService } {
   const { configManager, voiceProviders } = deps;
-  const managedVoiceRoot = deps.shellPaths.resolveUserPath('voice');
-  // Live install progress: the install verb is plain request/response, so during
-  // a multi-hundred-MB provision a surface would otherwise only see busy→receipt.
-  // The tracker folds the provisioner's onProgress stream into a poll-able
-  // snapshot that status() carries as `installInProgress` WHILE (and only while)
-  // an install runs — surfaces poll status during install (mirrors the SDK).
-  const progress = createVoiceInstallProgressTracker();
-  // Single-flight: concurrent installs join the in-progress promise instead of
-  // starting parallel multi-hundred-MB downloads.
-  const runVoiceInstall = singleFlight(async () => {
-    progress.begin();
-    try {
-    const provision = await provisionLocalVoiceRuntime({ managedRoot: managedVoiceRoot, onProgress: (p) => progress.onProgress(p) });
-    let configured: { set: { key: string; value: string }[]; skipped: { key: string; reason: string }[] } = { set: [], skipped: [] };
-    if (provision.tts.state === 'provisioned' && provision.tts.binaryPath && provision.tts.modelPath) {
-      const stamp = readVoiceInstallStamp(managedVoiceRoot);
-      const receipt = preconfigureLocalVoiceKeys({
-        getConfig: (k) => String(configManager.get(k as Parameters<typeof configManager.get>[0]) ?? ''),
-        setConfig: (k, v) => configManager.setDynamic(k as Parameters<typeof configManager.setDynamic>[0], v),
-        ttsEngine: provision.tts.engine,
-        ttsBinary: provision.tts.binaryPath,
-        ttsModelPath: provision.tts.modelPath,
-        ...(provision.stt.state === 'provisioned' && provision.stt.binaryPath && provision.stt.modelPath
-          ? { sttEngine: provision.stt.engine, sttBinary: provision.stt.binaryPath, sttModelPath: provision.stt.modelPath }
-          : {}),
-        priorInstallWrites: stamp?.configWrites,
-      });
-      configured = { set: [...receipt.set], skipped: [...receipt.skipped] };
-      if (stamp) {
-        writeVoiceInstallStamp(managedVoiceRoot, { ...stamp, configWrites: { ...stamp.configWrites, ...receipt.installWrites } });
-      }
-      // A successful (re-)install clears any tripped local-engine breaker.
-      voiceProviders.get('local')?.resetEngineFailureState?.();
-    }
-    return { provisioned: provision.tts.state === 'provisioned', platform: provision.platform, tts: provision.tts, stt: provision.stt, components: provision.components, configured };
-    } finally {
-      progress.end();
-    }
+  const voiceSetup = createVoiceSetupService({
+    managedVoiceRoot: deps.shellPaths.resolveUserPath('voice'),
+    getConfig: (key) => String(configManager.get(key as Parameters<typeof configManager.get>[0]) ?? ''),
+    setConfig: (key, value) => configManager.setDynamic(key as Parameters<typeof configManager.setDynamic>[0], value),
+    // A successful (re-)install clears any tripped local-engine breaker.
+    resetLocalEngineFailureState: () => voiceProviders.get('local')?.resetEngineFailureState?.(),
+    admitExpensiveWork: deps.admitExpensiveWork,
   });
-  const voiceSetup: VoiceSetupService = {
-    status: () => {
-      const base = localVoiceRuntimeStatus({ managedRoot: managedVoiceRoot });
-      const snapshot = progress.snapshot();
-      // Carry live per-component progress ONLY while an install is active.
-      return snapshot ? { ...base, installInProgress: snapshot } : base;
-    },
-    install: async () => {
-      // Critical-tier admission: refuse honestly instead of piling onto pressure.
-      const admission = deps.admitExpensiveWork('voice runtime install');
-      if (!admission.allowed) {
-        throw new Error(admission.reason ?? 'voice runtime install refused: daemon is under critical memory pressure.');
-      }
-      return runVoiceInstall();
-    },
-  };
   return { voiceSetup };
 }

package/src/version.ts

@@ -6,7 +6,7 @@ import { join } from 'node:path';
 // The prebuild script updates the fallback value before compilation.
 // Uses import.meta.dir (Bun) to locate package.json relative to this file,
 // which is correct regardless of the process working directory.
-let _version = '1.19.0';
+let _version = '1.19.2';
 try {
   const pkg = JSON.parse(readFileSync(join(import.meta.dir, '..', 'package.json'), 'utf-8'));
   // Only trust a version read from OUR OWN package.json. A Bun single-file