@pellux/goodvibes-tui 1.27.0 → 2.0.1

package/src/runtime/index.ts

@@ -153,6 +153,10 @@ export const openContractRouteStream = transport.openContractRouteStream;
 export const requireContractRoute = transport.requireContractRoute;
 export const isAbortError = transport.isAbortError;
 export const openServerSentEventStream = transport.openServerSentEventStream;
+// Re-exported here because bootstrap.ts — the one place an exit can await
+// anything — sits on the 800-line per-file gate, so it reaches this through the
+// import block it already has rather than a second import line.
+export { leaveHostedSessionOnExit } from './client/hosted-exit.ts';
 export const createOperatorRemoteClient = transport.createOperatorRemoteClient;
 export const createPeerRemoteClient = transport.createPeerRemoteClient;
 export const buildEventSourceUrl = transport.buildEventSourceUrl;
@@ -202,73 +206,105 @@ export type RemoteRuntimeEventsOptions = Transport.RemoteRuntimeEventsOptions;
 export type RemoteRuntimeEvents = Transport.RemoteRuntimeEvents;
 export type SerializedRuntimeEnvelope = Transport.SerializedRuntimeEnvelope;
 
-// Operations compatibility aliases.
-export const AcpTaskAdapter = operations.AcpTaskAdapter;
-export const OpsControlPlane = operations.OpsControlPlane;
-export const OpsIllegalActionError = operations.OpsIllegalActionError;
-export const OpsTargetNotFoundError = operations.OpsTargetNotFoundError;
-export const ToolContractVerifier = operations.ToolContractVerifier;
-export const McpLifecycleManager = operations.McpLifecycleManager;
-export const McpPermissionManager = operations.McpPermissionManager;
-export const McpSchemaFreshnessTracker = operations.McpSchemaFreshnessTracker;
-export const buildMcpAttackPathReview = operations.buildMcpAttackPathReview;
-export const createMcpLifecycleManager = operations.createMcpLifecycleManager;
-export const DEFAULT_RECONNECT_CONFIG = operations.DEFAULT_RECONNECT_CONFIG;
-export const ALL_CAPABILITIES = operations.ALL_CAPABILITIES;
-export const PLUGIN_CAPABILITIES = operations.PLUGIN_CAPABILITIES;
-export const HIGH_RISK_CAPABILITIES = operations.HIGH_RISK_CAPABILITIES;
-export const PluginLifecycleManager = operations.PluginLifecycleManager;
-export const PluginQuarantineEngine = operations.PluginQuarantineEngine;
-export const PluginTrustStore = operations.PluginTrustStore;
-export const SAFE_CAPABILITIES = operations.SAFE_CAPABILITIES;
-export const filterCapabilitiesByTrust = operations.filterCapabilitiesByTrust;
-export const hasCapability = operations.hasCapability;
-export const isHighRiskCapability = operations.isHighRiskCapability;
-export const isPluginOperational = operations.isPluginOperational;
-export const isPluginReloadable = operations.isPluginReloadable;
-export const isPluginTerminal = operations.isPluginTerminal;
-export const resolveCapabilityManifest = operations.resolveCapabilityManifest;
-export const validateManifestV2 = operations.validateManifestV2;
-export const validatePluginSignature = operations.validatePluginSignature;
-// Instance-type companions for the operations class aliases (see note above the
-// security block): the `export const` form re-exports the value only.
-export type AcpTaskAdapter = InstanceType<typeof operations.AcpTaskAdapter>;
-export type OpsIllegalActionError = InstanceType<typeof operations.OpsIllegalActionError>;
-export type OpsTargetNotFoundError = InstanceType<typeof operations.OpsTargetNotFoundError>;
-export type ToolContractVerifier = InstanceType<typeof operations.ToolContractVerifier>;
-export type McpLifecycleManager = InstanceType<typeof operations.McpLifecycleManager>;
-export type McpPermissionManager = InstanceType<typeof operations.McpPermissionManager>;
-export type McpSchemaFreshnessTracker = InstanceType<typeof operations.McpSchemaFreshnessTracker>;
-export type PluginLifecycleManager = InstanceType<typeof operations.PluginLifecycleManager>;
-export type PluginQuarantineEngine = InstanceType<typeof operations.PluginQuarantineEngine>;
-export type PluginTrustStore = InstanceType<typeof operations.PluginTrustStore>;
-export const LOW_QUALITY_THRESHOLD = operations.LOW_QUALITY_THRESHOLD;
-export const computeQualityScore = operations.computeQualityScore;
-export const createCompactionManager = operations.createCompactionManager;
-export const describeScore = operations.describeScore;
-export const escalateStrategy = operations.escalateStrategy;
-export const isTerminalCompactionState = operations.isTerminalCompactionState;
-export const reachableFromCompactionState = operations.reachableFromCompactionState;
-export const compactionFailurePlaybook = operations.compactionFailurePlaybook;
-export const exportRecoveryPlaybook = operations.exportRecoveryPlaybook;
-export const permissionDeadlockPlaybook = operations.permissionDeadlockPlaybook;
-export const pluginDegradationPlaybook = operations.pluginDegradationPlaybook;
-export const reconnectFailurePlaybook = operations.reconnectFailurePlaybook;
-export const sessionUnrecoverablePlaybook = operations.sessionUnrecoverablePlaybook;
-export const stuckTurnPlaybook = operations.stuckTurnPlaybook;
-export const createSessionUnrecoverablePlaybook = operations.createSessionUnrecoverablePlaybook;
-export const createStuckTurnPlaybook = operations.createStuckTurnPlaybook;
-export const evaluateOrchestrationSpawn = operations.evaluateOrchestrationSpawn;
-export const TRANSPORT_COMPATIBILITY_MATRIX = operations.TRANSPORT_COMPATIBILITY_MATRIX;
-export const applyTransition = operations.applyTransition;
-export const canTransition = operations.canTransition;
-export const isOperational = operations.isOperational;
-export const isReloadable = operations.isReloadable;
-export const isTerminal = operations.isTerminal;
-export const reachableFrom = operations.reachableFrom;
-export const evaluateSessionMaintenance = operations.evaluateSessionMaintenance;
-export const formatSessionMaintenanceLines = operations.formatSessionMaintenanceLines;
-export const getGuidanceMode = operations.getGuidanceMode;
+// Operations compatibility aliases. Grouped as a single live ESM re-export
+// from the SDK's own `platform/runtime/operations` subpath rather than eager
+// `export const X = operations.X` module-scope reads off the `operations`
+// namespace object: those reads evaluated the namespace getter while the
+// compiled single-file bundle could still be mid-cycle, and the binding they
+// reached for was not defined yet — source execution hid this, the compiled
+// binary died on it at load. A grouped `export { ... } from '<subpath>'` is a
+// live binding resolved by the module system, not a module-scope value read,
+// so it is cycle-safe.
+export {
+  AcpTaskAdapter,
+  OpsControlPlane,
+  OpsIllegalActionError,
+  OpsTargetNotFoundError,
+  ToolContractVerifier,
+  McpLifecycleManager,
+  McpPermissionManager,
+  McpSchemaFreshnessTracker,
+  buildMcpAttackPathReview,
+  createMcpLifecycleManager,
+  DEFAULT_RECONNECT_CONFIG,
+  ALL_CAPABILITIES,
+  PLUGIN_CAPABILITIES,
+  HIGH_RISK_CAPABILITIES,
+  PluginLifecycleManager,
+  PluginQuarantineEngine,
+  PluginTrustStore,
+  SAFE_CAPABILITIES,
+  filterCapabilitiesByTrust,
+  hasCapability,
+  isHighRiskCapability,
+  isPluginOperational,
+  isPluginReloadable,
+  isPluginTerminal,
+  resolveCapabilityManifest,
+  validateManifestV2,
+  validatePluginSignature,
+  LOW_QUALITY_THRESHOLD,
+  computeQualityScore,
+  createCompactionManager,
+  describeScore,
+  escalateStrategy,
+  isTerminalCompactionState,
+  reachableFromCompactionState,
+  compactionFailurePlaybook,
+  exportRecoveryPlaybook,
+  permissionDeadlockPlaybook,
+  pluginDegradationPlaybook,
+  reconnectFailurePlaybook,
+  sessionUnrecoverablePlaybook,
+  stuckTurnPlaybook,
+  createSessionUnrecoverablePlaybook,
+  createStuckTurnPlaybook,
+  evaluateOrchestrationSpawn,
+  TRANSPORT_COMPATIBILITY_MATRIX,
+  applyTransition,
+  canTransition,
+  isOperational,
+  isReloadable,
+  isTerminal,
+  reachableFrom,
+  evaluateSessionMaintenance,
+  formatSessionMaintenanceLines,
+  getGuidanceMode,
+  buildPersistedSessionContext,
+  buildLocalReturnContextSummary,
+  formatReturnContextForDisplay,
+  getReturnContextMode,
+  maybeAssistReturnContextSummary,
+  persistConversation,
+  generateUserSessionId,
+  loadLastConversation,
+  loadRecoveryConversation,
+  writeRecoveryFile,
+  deleteRecoveryFile,
+  checkRecoveryFile,
+  getRecoveryFilePath,
+  getRecoveryDir,
+  getLastSessionPointerPath,
+  writeLastSessionPointer,
+  readLastSessionPointer,
+  createSessionSurface,
+  consumeRecovery,
+  removeRecoveryPoint,
+  checkRecoveryForSession,
+  exportRemoteArtifactForAgent,
+  importRemoteArtifact,
+  RemoteRunnerRegistry,
+  RemoteSupervisor,
+  DistributedRuntimeManager,
+  getDistributedNodeHostContract,
+  CURRENT_PROTOCOL_VERSION,
+  VersionMismatchError,
+  negotiateProtocolVersion,
+  createTaskManager,
+  PhasedToolExecutor,
+  budgetPhase,
+  permissionPhase,
+} from '@pellux/goodvibes-sdk/platform/runtime/operations';
 // Snapshot-retention symbols (SnapshotPruner, RetentionPolicy,
 // DEFAULT_RETENTION_CONFIG) are intentionally NOT re-exported here. No app code
 // consumes them — only the retention unit test does, and it now imports them
@@ -280,48 +316,26 @@ export const getGuidanceMode = operations.getGuidanceMode;
 // `var` declaration on the darwin-arm64 target, so the compiled binary died at
 // startup with `ReferenceError: SnapshotPruner2 is not defined`. Dropping the
 // re-export removes the collision (and the same latent hazard for the other two).
-export const buildPersistedSessionContext = operations.buildPersistedSessionContext;
-export const buildLocalReturnContextSummary = operations.buildLocalReturnContextSummary;
-export const formatReturnContextForDisplay = operations.formatReturnContextForDisplay;
-export const getReturnContextMode = operations.getReturnContextMode;
-export const maybeAssistReturnContextSummary = operations.maybeAssistReturnContextSummary;
-export const persistConversation = operations.persistConversation;
-export const generateUserSessionId = operations.generateUserSessionId;
-export const loadLastConversation = operations.loadLastConversation;
-export const loadRecoveryConversation = operations.loadRecoveryConversation;
-export const writeRecoveryFile = operations.writeRecoveryFile;
-export const deleteRecoveryFile = operations.deleteRecoveryFile;
-export const checkRecoveryFile = operations.checkRecoveryFile;
-export const getRecoveryFilePath = operations.getRecoveryFilePath;
-export const getRecoveryDir = operations.getRecoveryDir;
-export const getLastSessionPointerPath = operations.getLastSessionPointerPath;
-export const writeLastSessionPointer = operations.writeLastSessionPointer;
-export const readLastSessionPointer = operations.readLastSessionPointer;
+// Instance-type companions for the operations class aliases are no longer
+// declared here: `export { X } from '<subpath>'` forwards a class's value AND
+// its implicit instance type together, so a separate local
+// `export type X = InstanceType<typeof operations.X>` for the same name is
+// now a redundant declaration that TypeScript rejects as a conflict
+// (TS2484). This applies to every class name in the grouped re-export above
+// (AcpTaskAdapter, OpsControlPlane, OpsIllegalActionError,
+// OpsTargetNotFoundError, ToolContractVerifier, McpLifecycleManager,
+// McpPermissionManager, McpSchemaFreshnessTracker, PluginLifecycleManager,
+// PluginQuarantineEngine, PluginTrustStore, RemoteRunnerRegistry,
+// RemoteSupervisor, DistributedRuntimeManager) — their instance types are
+// forwarded automatically and are not redeclared below.
 // The declare-once storage handle (platform/runtime/session-surface.ts) plus
 // the two prompted-recovery primitives that only accept it. Every session
 // path in this app derives from one surface built in runtime/services.ts.
-export const createSessionSurface = operations.createSessionSurface;
 export type SessionSurface = Operations.SessionSurface;
-export const consumeRecovery = operations.consumeRecovery;
-export const removeRecoveryPoint = operations.removeRecoveryPoint;
 // Probe for a NAMED session's live snapshot (per-session supersession — see
 // session-recovery.ts's header) without retiring anything. Backs the
 // --continue / --resume pre-resume check in cli/tui-startup.ts.
-export const checkRecoveryForSession = operations.checkRecoveryForSession;
 export type RecoveryFileInfo = Operations.RecoveryFileInfo;
-export const exportRemoteArtifactForAgent = operations.exportRemoteArtifactForAgent;
-export const importRemoteArtifact = operations.importRemoteArtifact;
-export const RemoteRunnerRegistry = operations.RemoteRunnerRegistry;
-export const RemoteSupervisor = operations.RemoteSupervisor;
-export const DistributedRuntimeManager = operations.DistributedRuntimeManager;
-export const getDistributedNodeHostContract = operations.getDistributedNodeHostContract;
-export const CURRENT_PROTOCOL_VERSION = operations.CURRENT_PROTOCOL_VERSION;
-export const VersionMismatchError = operations.VersionMismatchError;
-export const negotiateProtocolVersion = operations.negotiateProtocolVersion;
-export const createTaskManager = operations.createTaskManager;
-export const PhasedToolExecutor = operations.PhasedToolExecutor;
-export const budgetPhase = operations.budgetPhase;
-export const permissionPhase = operations.permissionPhase;
 
 export type RemoteSessionBundle = Operations.RemoteSessionBundle;
 export type ContractVerifierOptions = Operations.ContractVerifierOptions;
@@ -359,10 +373,10 @@ export type CompactionStrategy = Operations.CompactionStrategy;
 export type StrategyInput = Operations.StrategyInput;
 export type StrategyOutput = Operations.StrategyOutput;
 export type DistributedRuntimeSnapshotStore = Operations.DistributedRuntimeSnapshotStore;
-export type RemoteRunnerRegistry = Operations.RemoteRunnerRegistry;
-export type RemoteSupervisor = Operations.RemoteSupervisor;
-export type DistributedRuntimeManager = Operations.DistributedRuntimeManager;
-export type OpsControlPlane = Operations.OpsControlPlane;
+// RemoteRunnerRegistry, RemoteSupervisor, DistributedRuntimeManager, and
+// OpsControlPlane are classes forwarded by the grouped value re-export above
+// (`export { X } from '<subpath>'` carries both the value and its implicit
+// instance type), so redeclaring their types here would conflict (TS2484).
 export type RuntimeTransitionResult = Operations.RuntimeTransitionResult;
 export type RetentionClass = Operations.RetentionClass;
 export type RetentionClassConfig = Operations.RetentionClassConfig;

package/src/runtime/install-self-check-startup.ts

@@ -17,7 +17,7 @@
 import { existsSync } from 'node:fs';
 import { getGoodVibesPackageRoot, resolveGoodVibesDaemonExecutable } from '../cli/service-posture.ts';
 import { runInstallSelfCheck } from './install-self-check.ts';
-import { announceReachability } from './path-shadow-startup.ts';
+import { announceInstallReachability } from './path-shadow-startup.ts';
 import type { SystemMessageRouter } from '../core/system-message-router.ts';
 
 export function announceInstallSelfCheck(router: SystemMessageRouter): void {
@@ -53,7 +53,7 @@ export function announceInstallSelfCheck(router: SystemMessageRouter): void {
  */
 export function announceInstallHealth(router: SystemMessageRouter): void {
   announceInstallSelfCheck(router);
-  void announceReachability(router).catch(() => {
+  void announceInstallReachability(router).catch(() => {
     // Best-effort — a reachability check must never block or crash boot.
   });
 }

package/src/runtime/interaction-seams.ts

@@ -11,7 +11,7 @@
 
 import type { CommandContext } from '../input/command-registry.ts';
 import type { PowerManager } from '@pellux/goodvibes-sdk/platform/power';
-import type { Line } from '../types/grid.ts';
+import type { Line } from '@pellux/goodvibes-sdk/platform/types';
 import type { ConfigManager } from '@pellux/goodvibes-sdk/platform/config';
 import { createCancelToolCall, type ToolCancelOrchestrator } from '../core/turn-cancellation.ts';
 import { powerSurfaceFromState } from '../core/power-status.ts';

package/src/runtime/knowledge-services.ts

@@ -33,7 +33,7 @@ import type { ProviderRegistry } from '@pellux/goodvibes-sdk/platform/providers'
 import type { ArtifactStore } from '@pellux/goodvibes-sdk/platform/artifacts';
 import type { MemoryRegistry } from '@pellux/goodvibes-sdk/platform/state';
 import type { RuntimeEventBus } from '@/runtime/index.ts';
-import { WorkPlanStore } from '../work-plans/work-plan-store.ts';
+import { WorkPlanStore } from '@pellux/goodvibes-sdk/platform/workflow';
 
 const REGULAR_KNOWLEDGE_DB_FILE = 'knowledge-wiki.sqlite';
 const HOME_GRAPH_KNOWLEDGE_DB_FILE = 'knowledge-home-graph.sqlite';
@@ -84,7 +84,13 @@ export function createKnowledgeServices(deps: KnowledgeServicesDeps): KnowledgeS
   const homeGraphService = new HomeGraphService(homeGraphKnowledgeStore, artifactStore, { semanticService: homeGraphSemanticService, admitExpensiveWork });
   const projectPlanningProjectId = projectPlanningProjectIdFromPath(deps.workingDirectory);
   const projectPlanningService = new ProjectPlanningService(knowledgeStore, { defaultProjectId: projectPlanningProjectId });
-  const workPlanStore = new WorkPlanStore({ homeDirectory: deps.homeDirectory, projectId: projectPlanningProjectId, projectRoot: deps.workingDirectory });
+  const workPlanStore = new WorkPlanStore({
+    homeDirectory: deps.homeDirectory,
+    projectId: projectPlanningProjectId,
+    projectRoot: deps.workingDirectory,
+    surfaceRoot: 'tui',
+    source: 'tui',
+  });
   return {
     knowledgeStore, agentKnowledgeStore, homeGraphKnowledgeStore,
     knowledgeSemanticService, homeGraphSemanticService, agentKnowledgeSemanticService,

package/src/runtime/legacy-daemon-migration.ts

@@ -6,7 +6,8 @@
  *
  * NAMING, load-bearing: this module's identifiers say "legacy" because the
  * engine migrates AWAY from the `goodvibes-daemon.service` unit name toward
- * the runtime-managed unit — but that same name is what scripts/install.sh
+ * the runtime-managed unit — but that same name is what the suite installer
+ * (goodvibes-daemon scripts/install.sh)
  * actively creates for curl-installed hosts TODAY. It is a parallel,
  * first-class install path, not an obsolete one. User-facing copy therefore
  * describes it as "the install-script unit" and never labels it legacy or
@@ -126,7 +127,7 @@ export function buildManagedDaemonServiceManager(params: BuildManagedDaemonServi
   // already configured for hostMode=network / a non-default port) keeps its
   // endpoint without a unit rewrite. Baking endpoint values here is what
   // silently re-pinned custom-configured hosts back to the values current at
-  // install time. scripts/install.sh writes the same shape — the two paths
+  // install time. The suite installer writes the same shape — the two paths
   // must produce the identical running daemon (see the installer parity test).
   // `params.host`/`params.port` remain inputs because the migration engine
   // still needs them for its read-only port-liveness probe.
@@ -135,7 +136,18 @@ export function buildManagedDaemonServiceManager(params: BuildManagedDaemonServi
     description: MANAGED_SERVICE_DESCRIPTION,
     workingDirectory,
     command: params.binaryPath,
-    args: ['--daemon-home', params.homeDir],
+    // `--daemon-home` names the daemon's own STATE directory — the one holding
+    // operator-tokens.json, auth-users.json and daemon-settings.json — which is
+    // `<home>/.goodvibes/daemon`. This baked the USER HOME, so a serviced
+    // daemon filed its identity a level above where every reader in this
+    // repository looks: the SDK's platform/config goodvibes-home resolves the flag AS the state
+    // directory, cli/service-posture.ts already writes the state directory into
+    // GOODVIBES_DAEMON_HOME for the unit it installs, and runtime/bootstrap.ts
+    // reads the companion token from the state directory. On a normal machine
+    // the mismatch is invisible from the outside — the daemon simply mints a
+    // second operator-tokens.json in the home directory and the client keeps
+    // reading the empty one under .goodvibes/daemon.
+    args: ['--daemon-home', join(params.homeDir, '.goodvibes', 'daemon')],
     env: {},
     restartOnFailure: true,
   };

package/src/runtime/legacy-daemon-reconcile.ts

@@ -22,11 +22,12 @@ import {
 type ManagedServiceActionResult = ReturnType<ManagedServiceActionRunner>;
 
 /**
- * The exact marker string scripts/install.sh writes into every unit it
+ * The exact marker string the suite installer writes into every unit it
  * creates (as a `# managed by goodvibes install.sh` comment). The reconcile
  * check below keys on it to tell an installer-created legacy unit — safe to
  * auto-retire — apart from a hand-written one that must only ever be reported.
- * Kept in lockstep with `INSTALLER_MARKER` in scripts/install.sh.
+ * Kept in lockstep with `INSTALLER_MARKER` in the suite installer
+ * (goodvibes-daemon scripts/install.sh).
  */
 export const INSTALLER_UNIT_MARKER = 'managed by goodvibes install.sh';