@pellux/goodvibes-tui 1.27.1 → 2.0.1

package/src/runtime/session-resume-liveness-confirm.ts

@@ -14,7 +14,7 @@
  * proceeds exactly as it always did. The marker belonging to THIS process is
  * ignored too — re-resuming the session already open here is not a fork.
  */
-import { checkSessionLiveness } from './session-liveness-marker.ts';
+import { checkSessionLiveness } from '@pellux/goodvibes-sdk/platform/runtime/operations';
 import type { SessionSurface } from '@/runtime/index.ts';
 import type { SelectionItem, SelectionResult } from '../input/selection-modal.ts';
 

package/src/runtime/ui-services.ts

@@ -1,7 +1,7 @@
 import type { RuntimeServices } from './services.ts';
 import type { RemoteRunnerRegistry } from '@/runtime/index.ts';
 import type { RemoteSupervisor } from '@/runtime/index.ts';
-import { createUiRuntimeEvents, type UiRuntimeEvents } from './ui-events.ts';
+import { createUiRuntimeEvents, type UiRuntimeEvents } from '@/runtime/index.ts';
 import { createUiReadModels, type UiReadModels, type UiReadModelOptions } from './ui-read-models.ts';
 import type { ForensicsRegistry } from '@/runtime/index.ts';
 import type { ControlPlaneRecentEvent } from '@pellux/goodvibes-sdk/platform/control-plane';
@@ -10,7 +10,7 @@ import { SessionUnionCache, type SessionReadFacade } from '@pellux/goodvibes-sdk
 import type { ShellPathService } from '@/runtime/index.ts';
 import type { HostServiceStatus } from '@/runtime/index.ts';
 import type { SecretsManager } from '../config/secrets.ts';
-import type { buildRelayExternalServiceMethods } from './relay-reachability-bridge.ts';
+import type { RelayReadAccessors } from './relay-reachability-bridge.ts';
 
 export interface UiEnvironmentServices {
   readonly workingDirectory: string;
@@ -66,7 +66,7 @@ export interface UiPlatformServices {
   readonly webhookNotifier: RuntimeServices['webhookNotifier'];
   readonly focusTracker: RuntimeServices['focusTracker'];
   readonly policyRuntimeState: RuntimeServices['policyRuntimeState'];
-  readonly externalServices?: ReturnType<typeof buildRelayExternalServiceMethods> & {
+  readonly externalServices?: RelayReadAccessors & {
     inspect(): {
       readonly daemonRunning: boolean;
       readonly daemonPortInUse?: boolean;
@@ -79,8 +79,6 @@ export interface UiPlatformServices {
       readonly sessionSpineActive?: boolean;
       readonly sessionSpineStatus?: 'unknown' | 'online' | 'offline';
     };
-    /** Undelivered daemon receipts (update/crash/migration) for the attach-time consuming read; empty when no daemon runs. */
-    collectDaemonReceipts(): readonly { readonly id: string; readonly text: string; readonly at: number }[];
     restart(): Promise<{
       readonly daemonRunning: boolean;
       readonly daemonPortInUse?: boolean;
@@ -119,6 +117,8 @@ export interface UiRuntimeSharedServices {
     readonly remoteSupervisor: RuntimeServices['remoteSupervisor'] & RemoteSupervisor;
     /** the shared live process registry backing the Fleet panel. */
     readonly processRegistry: RuntimeServices['processRegistry'];
+    /** The Fleet panel's read model: local rows union the adopted daemon's. */
+    readonly fleetReadModel: RuntimeServices['fleetReadModel'];
     /** The shared runtime event bus — the Fleet panel subscribes to its 'communication' domain for the honest steer-consumed signal. */
     readonly runtimeBus: RuntimeServices['runtimeBus'];
   };
@@ -143,7 +143,7 @@ export interface UiRuntimeServicesOptions extends UiReadModelOptions {
   readonly getControlPlaneRecentEvents?: (limit: number) => readonly ControlPlaneRecentEvent[];
   /**
    * The shared session read facade constructed in bootstrap-core (so
-   * bootstrap.ts can drive its adopted-external/embedded/local mode). When omitted
+   * bootstrap.ts can drive its adopted-external/local mode). When omitted
    * (test callers), a local-only passthrough facade over the broker is auto-created.
    */
   readonly sessionUnionCache?: SessionUnionCache;
@@ -212,6 +212,7 @@ export function createUiRuntimeServices(
       remoteRunnerRegistry: runtimeServices.remoteRunnerRegistry,
       remoteSupervisor: runtimeServices.remoteSupervisor,
       processRegistry: runtimeServices.processRegistry,
+      fleetReadModel: runtimeServices.fleetReadModel,
       runtimeBus: runtimeServices.runtimeBus,
     },
     events: createUiRuntimeEvents(runtimeServices.runtimeBus),

package/src/runtime/update-check.ts

@@ -1,17 +1,16 @@
 /**
- * Pure logic for `/update`: version comparison, the latest-release-tag
- * redirect lookup, and honest install-kind detection.
+ * Pure logic for `/update`, re-exported from the platform's update-policy
+ * modules so there is one mechanism everywhere: version comparison and the
+ * release-tag redirect lookup from `platform/runtime/self-update`, install-kind
+ * detection from `platform/runtime/operations`.
  *
- * Version comparison and the release-tag lookup are re-exported from the
- * SDK's canonical update policy module (platform/runtime/self-update), which
- * was hoisted from this file's semantics — one mechanism everywhere.
- * Install-kind detection stays local: it encodes how THIS package is
- * installed (compiled binary vs bun/npm package vs source run) and what
- * command replaces a swap for each kind.
+ * The self-update download/verify/swap orchestration that USES these lives in
+ * src/input/commands/update-runtime.ts; this module only decides "is there a
+ * newer version" and "can this install be swapped in place".
  *
- * The self-update download/verify/swap orchestration that USES these lives
- * in src/input/commands/update-runtime.ts; this module only decides "is
- * there a newer version" and "can this install be swapped in place".
+ * `fallbackUpdateCommand` is wrapped rather than re-exported: the platform's
+ * takes the package name a package-managed install is upgraded through, and
+ * that name is this product's own.
  */
 export {
   compareVersions,
@@ -21,39 +20,20 @@ export {
   type UpdateFetchLike,
 } from '@pellux/goodvibes-sdk/platform/runtime/self-update';
 
-/**
- * How this running process was installed, detected honestly from
- * process.execPath rather than assumed:
- *   - "binary": a standalone `bun build --compile` executable with no
- *     package-manager ancestry — the scripts/install.sh install path.
- *     Swappable in place.
- *   - "bun-global-package": running the vendored binary shipped inside an
- *     npm/bun-managed package install (execPath contains a "node_modules"
- *     path segment — true for both `bun add -g` and a local project
- *     dependency). Managed by the package manager; swapping the vendored
- *     file in place would fight the next `bun add -g` upgrade, so this is
- *     never swapped — the user re-runs their package manager instead.
- *   - "source": running directly via the `bun` interpreter (`bun run
- *     src/main.ts`), not a compiled binary at all.
- */
-export type InstallKind = 'binary' | 'bun-global-package' | 'source';
+export {
+  detectInstallKind,
+  type InstallKind,
+} from '@pellux/goodvibes-sdk/platform/runtime/operations';
 
-export function detectInstallKind(execPath: string): InstallKind {
-  const segments = execPath.split(/[\\/]/);
-  const execName = (segments[segments.length - 1] ?? '').toLowerCase();
-  if (execName === 'bun' || execName === 'bun.exe') {
-    return 'source';
-  }
-  if (segments.includes('node_modules')) {
-    return 'bun-global-package';
-  }
-  return 'binary';
-}
+import {
+  fallbackUpdateCommand as platformFallbackUpdateCommand,
+  type InstallKind as PlatformInstallKind,
+} from '@pellux/goodvibes-sdk/platform/runtime/operations';
+
+/** The package a package-managed install of this terminal is upgraded through. */
+const TERMINAL_PACKAGE_NAME = '@pellux/goodvibes-tui';
 
 /** The exact command to tell the user to run instead of a swap, for each non-binary install kind. */
-export function fallbackUpdateCommand(kind: Exclude<InstallKind, 'binary'>): string {
-  if (kind === 'bun-global-package') {
-    return 'bun add -g @pellux/goodvibes-tui';
-  }
-  return 'curl -fsSL https://goodvibes.sh/install.sh | sh';
+export function fallbackUpdateCommand(kind: Exclude<PlatformInstallKind, 'binary'>): string {
+  return platformFallbackUpdateCommand(kind, TERMINAL_PACKAGE_NAME);
 }

package/src/runtime/workspace-checkpointing.ts

@@ -1,6 +1,6 @@
 import { WorkspaceCheckpointManager } from '@pellux/goodvibes-sdk/platform/workspace';
 import { withCheckpointGuardSettings } from '../config/tui-extension-settings.ts';
-import type { ConfigManager } from '../config/index.ts';
+import type { ConfigManager } from '@pellux/goodvibes-sdk/platform/config';
 import type { RuntimeEventBus, SessionSurface } from '@/runtime/index.ts';
 
 /**

package/src/runtime/wrfc-persistence.ts

@@ -46,8 +46,8 @@
 
 import type { WrfcChain, WrfcState } from '@pellux/goodvibes-sdk/platform/agents';
 import type { RuntimeEventBus, WorkflowEvent } from '@/runtime/index.ts';
-import { atomicWriteFileSync } from '../config/atomic-write.ts';
-import { readVersioned } from '../config/read-versioned.ts';
+import { atomicWriteFileSync } from '@pellux/goodvibes-sdk/platform/config';
+import { readVersioned } from '@pellux/goodvibes-sdk/platform/config';
 import type { SystemMessageRouter } from '../core/system-message-router.ts';
 
 // ─── Constants ───────────────────────────────────────────────────────────────

package/src/shell/ui-openers.ts

@@ -1,5 +1,5 @@
-import type { ConfigManager } from '../config/index.ts';
-import { getProviderIdFromModel } from '../config/provider-model.ts';
+import type { ConfigManager } from '@pellux/goodvibes-sdk/platform/config';
+import { getProviderIdFromModel } from '@pellux/goodvibes-sdk/platform/providers';
 import type { ConversationManager } from '../core/conversation';
 import type { CommandContext } from '../input/command-registry.ts';
 import type { InputHandler } from '../input/handler.ts';
@@ -11,7 +11,7 @@ import type { McpRegistry } from '@pellux/goodvibes-sdk/platform/mcp';
 import type { SubscriptionManager } from '@pellux/goodvibes-sdk/platform/config';
 import type { SecretsManager } from '@pellux/goodvibes-sdk/platform/config';
 import type { MemoryEmbeddingProviderRegistry } from '@pellux/goodvibes-sdk/platform/state';
-import type { ServiceInspectionQuery } from '../runtime/ui-service-queries.ts';
+import type { ServiceInspectionQuery } from '@/runtime/index.ts';
 import type { EmbeddingProviderPickerEntry, ModelPickerTargetInfo } from '../input/model-picker.ts';
 import type { SelectionItem } from '../input/selection-modal.ts';
 import { categorizeBuiltinCommands } from '../input/commands.ts';
@@ -20,7 +20,9 @@ import { setActiveThemeMode } from '../renderer/theme.ts';
 import { THEME_MODE_CONFIG_KEY, coerceThemeModeSetting } from '../renderer/theme-mode-config.ts';
 import { summarizeError } from '@pellux/goodvibes-sdk/platform/utils';
 import { buildFirstOpenItems, decodeFirstOpenChoice, selfRecordWorkspaceRegistration } from '../cli/tui-startup.ts';
-import type { WorkspaceTrustLevel } from '../runtime/trust/workspace-trust.ts';
+import type { SettingsDaemonCredentialWriter } from '../input/settings-modal-secrets.ts';
+import type { DaemonOwnedConfigWriter } from '../input/settings-modal-mutations.ts';
+import type { WorkspaceTrustLevel } from '@pellux/goodvibes-sdk/platform/runtime/operations';
 
 type WireShellUiOpenersOptions = {
   commandContext: CommandContext;
@@ -34,6 +36,18 @@ type WireShellUiOpenersOptions = {
   mcpRegistry: McpRegistry;
   subscriptionManager: SubscriptionManager;
   secretsManager?: Pick<SecretsManager, 'delete' | 'get' | 'set'>;
+  /**
+   * The daemon's credential write. Present when a daemon is configured; a
+   * daemon-scoped credential goes there rather than into this surface's own
+   * store, which the daemon never reads.
+   */
+  daemonCredentials?: SettingsDaemonCredentialWriter | null;
+  /**
+   * Where a daemon-owned setting is written. `surfaces.*`, `watchers.*`,
+   * `automation.*` and the rest are applied by the daemon; writing one into
+   * this surface's own file reports success and configures nothing.
+   */
+  daemonConfig?: DaemonOwnedConfigWriter | null;
   serviceRegistry: Pick<ServiceInspectionQuery, 'getAll'>;
   /** Backs the model picker's 'embeddings' target and its own item-list mode. */
   memoryEmbeddingRegistry: Pick<MemoryEmbeddingProviderRegistry, 'getDefaultProviderId' | 'setDefaultProvider' | 'status'>;
@@ -120,6 +134,8 @@ export function wireShellUiOpeners(options: WireShellUiOpenersOptions): void {
     mcpRegistry,
     subscriptionManager,
     secretsManager,
+    daemonCredentials,
+    daemonConfig,
     serviceRegistry,
     memoryEmbeddingRegistry,
     workingDirectory,
@@ -394,12 +410,19 @@ export function wireShellUiOpeners(options: WireShellUiOpenersOptions): void {
   commandContext.openSettingsModal = (target?: string) => {
     input.modalOpened('settings');
     input.settingsModal.open(configManager, featureFlags, subscriptionManager, serviceRegistry, mcpRegistry, secretsManager, {
-      // The Connections category asks the daemon handlers directly, through the
-      // same in-process catalog `/mail` and `/calendar` use, so the workspace
-      // reports the daemon's state rather than a local guess about it.
+      // The Connections category probes through this app's catalog, which is
+      // empty by construction — so those rows read 'unreachable' rather than
+      // inventing a settled state nothing established. Retargeting that probe
+      // at the daemon is the remaining half of this seam.
       ...(commandContext.workspace?.gatewayMethods
         ? { gatewayMethods: commandContext.workspace.gatewayMethods }
         : {}),
+      // A daemon-scoped credential goes to the daemon, which writes the secret,
+      // verifies it reads back, and only then points the config key at it.
+      ...(daemonCredentials ? { daemonCredentials } : {}),
+      // A daemon-owned setting is applied by the daemon, so it is written there.
+      ...(daemonConfig ? { daemonConfig } : {}),
+      reportError: (message: string) => { commandContext.print?.(message); },
       requestRender: render,
       onSettingApplied: (change) => {
         // forced dark/light applies immediately (rebuild palettes + full

package/src/utils/clipboard.ts

@@ -1,6 +1,6 @@
 import { logger } from '@pellux/goodvibes-sdk/platform/utils';
 import { summarizeError } from '@pellux/goodvibes-sdk/platform/utils';
-import { allowTerminalWrite } from '../runtime/terminal-output-guard.ts';
+import { allowTerminalWrite } from '@pellux/goodvibes-terminal-shell/terminal-output-guard';
 
 /**
  * copyToClipboard - Uses OSC 52 escape sequence to copy text to the terminal clipboard.

package/src/verification/verification-ledger.ts

@@ -2,7 +2,7 @@ import { readFileSync, readdirSync } from 'node:fs';
 import { join } from 'node:path';
 import { CONFIG_SCHEMA } from '@pellux/goodvibes-sdk/platform/config';
 import { FEATURE_SETTINGS } from '@pellux/goodvibes-sdk/platform/runtime/state';
-import { featureEnablementWrite } from '../runtime/feature-settings.ts';
+import { featureEnablementWrite, GOODVIBES_CLI_CATALOG } from '@pellux/goodvibes-terminal-shell';
 import { CommandRegistry } from '../input/command-registry.ts';
 import { registerBuiltinCommands } from '../input/commands.ts';
 
@@ -531,18 +531,20 @@ function countBuiltinPanels(root: string): number {
   return count;
 }
 
-function listCliCommands(root: string): string[] {
-  const text = readFileSync(join(root, 'src', 'cli', 'types.ts'), 'utf8');
-  const match = text.match(/export type GoodVibesCliCommand =([\s\S]*?)export type GoodVibesCliOutputFormat/);
-  if (!match) return [];
-  return [...match[1].matchAll(/\|\s*'([^']+)'/g)]
-    .map((entry) => entry[1])
+/**
+ * The CLI command words this terminal actually accepts, read off the catalog
+ * the parser is driven by rather than scraped out of a source file — the
+ * ledger counts what ships, and a catalog entry IS what ships.
+ */
+function listCliCommands(): string[] {
+  return GOODVIBES_CLI_CATALOG.commands
+    .map((spec) => spec.name as string)
     .filter((command) => command !== 'unknown');
 }
 
 export function buildVerificationLedger(root: string): VerificationLedger {
   const slashCommandNames = listSlashCommands();
-  const cliCommandNames = listCliCommands(root);
+  const cliCommandNames = listCliCommands();
   const slashCommands = slashCommandNames.length;
   const panels = countBuiltinPanels(root);
   const cliCommands = cliCommandNames.length;

package/src/version.ts

@@ -6,7 +6,7 @@ import { join } from 'node:path';
 // The prebuild script updates the fallback value before compilation.
 // Uses import.meta.dir (Bun) to locate package.json relative to this file,
 // which is correct regardless of the process working directory.
-let _version = '1.27.1';
+let _version = '2.0.1';
 try {
   const pkg = JSON.parse(readFileSync(join(import.meta.dir, '..', 'package.json'), 'utf-8'));
   // Only trust a version read from OUR OWN package.json. A Bun single-file

package/bin/goodvibes-daemon

@@ -1,90 +0,0 @@
-#!/usr/bin/env bun
-//
-// ── READ THIS BEFORE DEV-TESTING DAEMON ROUTES THROUGH THIS SHIM ──────────
-//
-// This launcher prefers a PREBUILT binary over the source checkout. On a
-// machine with `vendor/goodvibes-daemon-<platform>` staged, `bun bin/goodvibes-daemon`
-// runs THAT binary — compiled against the PUBLISHED SDK — not the source in
-// this repo and not whatever `sdk-dev link` overlaid into node_modules.
-//
-// The consequence is quiet and expensive: a route you just added returns 404
-// and every explanation you reach for is wrong, because the process answering
-// never contained your code. It cost a round several hours.
-//
-// Two further traps in the same area:
-//   - Killing this shim does NOT kill the vendored child. `pkill -f` on the
-//     shim's command line leaves the daemon listening, so the "restart" you
-//     think you performed changed nothing.
-//   - `sdk-dev link` overlays node_modules only. A vendored binary ignores it
-//     completely.
-//
-// To exercise source (and a linked SDK), bypass this launcher:
-//     bun src/daemon/cli.ts --port <port> --hostname 127.0.0.1
-// and isolate it with GOODVIBES_HOME / GOODVIBES_DAEMON_HOME / GOODVIBES_WORKING_DIR
-// so it cannot read the machine's real credentials or claim its service unit.
-//
-import { dirname, join } from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { spawnSync } from 'node:child_process';
-import {
-  ensureVendoredBinary,
-  isExecutable,
-  isSourceCheckout,
-  resolveArtifactName,
-  resolvePlatformPackageBinary,
-  run,
-  supportedTargetsText,
-} from './launcher-support.js';
-
-const __dirname = dirname(fileURLToPath(import.meta.url));
-const packageRoot = join(__dirname, '..');
-
-if (process.platform === 'win32') {
-  console.error('goodvibes-daemon: native Windows is not supported.');
-  console.error('Use WSL so the Linux release binary path applies.');
-  process.exit(1);
-}
-
-const artifactName = resolveArtifactName('daemon', process.platform, process.arch);
-const localPlatformBuild = artifactName ? join(packageRoot, 'dist', artifactName) : null;
-const localBuild = join(packageRoot, 'dist', 'goodvibes-daemon');
-const vendoredBinary = artifactName ? join(packageRoot, 'vendor', artifactName) : null;
-
-if (localPlatformBuild && isExecutable(localPlatformBuild)) {
-  run(localPlatformBuild, process.argv.slice(2));
-}
-
-if (isExecutable(localBuild)) {
-  run(localBuild, process.argv.slice(2));
-}
-
-if (vendoredBinary && isExecutable(vendoredBinary)) {
-  run(vendoredBinary, process.argv.slice(2));
-}
-
-const platformPackageBinary = resolvePlatformPackageBinary('daemon', process.platform, process.arch, packageRoot);
-if (platformPackageBinary) {
-  run(platformPackageBinary, process.argv.slice(2));
-}
-
-if (artifactName) {
-  try {
-    const installedBinary = await ensureVendoredBinary({ packageRoot, artifactName });
-    run(installedBinary, process.argv.slice(2));
-  } catch (error) {
-    console.error(`goodvibes-daemon: failed to install release binary: ${error instanceof Error ? error.message : String(error)}`);
-  }
-}
-
-const bunProbe = spawnSync('bun', ['--version'], { stdio: 'ignore' });
-if (bunProbe.status === 0 && isSourceCheckout(packageRoot)) {
-  run('bun', [join(packageRoot, 'src', 'daemon', 'cli.ts'), ...process.argv.slice(2)]);
-}
-
-console.error('goodvibes-daemon: no runnable binary is available.');
-console.error(`platform: ${process.platform}-${process.arch}`);
-console.error(`supported prebuilt targets: ${supportedTargetsText()}`);
-console.error('Either:');
-console.error('  1. check network access to the GitHub release assets, or');
-console.error('  2. build locally with `bun run build:daemon:<platform>` in a source checkout.');
-process.exit(1);