@pellux/goodvibes-tui 2.0.6 → 2.0.8

package/CHANGELOG.md

@@ -4,6 +4,50 @@ All notable changes to GoodVibes TUI.
 
 ---
 
+## [2.0.8] - 2026-08-05
+
+### Changes
+
+- **Fixed: profile reads work against an up-to-date daemon.** The daemon's
+  profile answers carried more than the published contract allowed, so strict
+  clients refused them; the contract and the answers agree now, held together
+  by a conformance test (platform runtime 2.0.8).
+- Changed: session event streams are render-grade and session-scoped, so a
+  session viewed from this client shows what the model said and what it did —
+  including the agent's daemon-hosted conversations, now cross-visible with
+  their messages.
+- Changed: browser automation uses the platform's own managed profile, one
+  live session, capped retries, and hands sign-in pages back as URLs.
+- Changed: the settings catalog carries the connector keys the daemon really
+  reads (calendar, google, email), and catalog search understands plain words
+  (platform runtime 2.0.8).
+
+## [2.0.7] - 2026-08-02
+
+### Changes
+
+- **Fixed: a chat message gets an answer, never workflow paperwork.** The
+  conversation gate's decision that a channel message is conversation is now
+  authoritative over the review-wording heuristic, replies carry the agent's
+  answer instead of chain status lines, and duplicate completion replies are
+  gone (platform runtime 2.0.7).
+- **Added: personal information shared in conversation gets captured — and
+  understood.** A conversational channel turn carries the profile capture
+  tool: a pasted itinerary lands in the owner profile's Plans section, the
+  turn infers what it means (the away-span, the travelers, durable facts
+  about the destination), uses it in the answer, and offers the obviously
+  useful next steps once. Anything beyond the conversation is proposed and
+  waits for a yes.
+- **Fixed: a chat session is filed as a chat.** Channel-originated sessions
+  in the cross-visible session list carry the new `channel` kind instead of
+  reading as TUI project sessions rooted in a filesystem path; this client
+  understands the new kind, and a sender on a channel's owner allowlist is
+  attributed as the owner principal.
+- Fixed: the daemon settings file is rewritten only by the daemon — this
+  client migrates its in-memory view of renamed settings and leaves the file
+  bytes untouched, so updating the TUI can no longer rewrite settings out
+  from under an older running daemon (platform runtime 2.0.7).
+
 ## [2.0.6] - 2026-08-02
 
 ### Changes

package/README.md

@@ -2,7 +2,7 @@
 
 [![CI](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml/badge.svg)](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Version](https://img.shields.io/badge/version-2.0.6-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
+[![Version](https://img.shields.io/badge/version-2.0.8-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
 
 GoodVibes is a terminal console for coding and operations work with an AI model. You run `goodvibes` in a project directory and get a full-screen terminal app where you talk to a model that can read and edit your files, run shell commands, search the web, and hand work off to background agents — asking your permission before anything that writes or executes. It talks to many model providers (OpenAI, Anthropic, Gemini, Bedrock, Copilot, OpenRouter and other OpenAI-compatible gateways, plus local servers like Ollama and LM Studio that it finds on startup), keeps its settings, sessions, and secrets on your own machine, and shows you the token count and running cost of every turn. Alongside the conversation, panels turn background work — running agents, git state, diffs, tokens, cost — into live control rooms.
 

package/docs/foundation-artifacts/operator-contract.json

@@ -3,7 +3,7 @@
   "product": {
     "id": "goodvibes",
     "surface": "operator",
-    "version": "2.0.5"
+    "version": "2.0.8"
   },
   "auth": {
     "modes": [
@@ -79225,6 +79225,9 @@
                 "valid": {
                   "type": "boolean"
                 },
+                "section": {
+                  "type": "string"
+                },
                 "invalidReason": {
                   "type": "string"
                 },
@@ -79253,7 +79256,8 @@
                 "fieldId",
                 "label",
                 "value",
-                "valid"
+                "valid",
+                "section"
               ],
               "additionalProperties": false
             },
@@ -79405,24 +79409,31 @@
               "type": "boolean"
             },
             "provenance": {
-              "type": "object",
-              "properties": {
-                "surface": {
-                  "type": "string"
-                },
-                "date": {
-                  "type": "string"
+              "anyOf": [
+                {
+                  "type": "object",
+                  "properties": {
+                    "surface": {
+                      "type": "string"
+                    },
+                    "date": {
+                      "type": "string"
+                    },
+                    "said": {
+                      "type": "string"
+                    }
+                  },
+                  "required": [
+                    "surface",
+                    "date",
+                    "said"
+                  ],
+                  "additionalProperties": false
                 },
-                "said": {
-                  "type": "string"
+                {
+                  "type": "null"
                 }
-              },
-              "required": [
-                "surface",
-                "date",
-                "said"
-              ],
-              "additionalProperties": false
+              ]
             },
             "superseded": {
               "type": "array",
@@ -79488,6 +79499,7 @@
             "fieldId",
             "present",
             "handEdited",
+            "provenance",
             "superseded"
           ],
           "additionalProperties": false
@@ -95946,6 +95958,7 @@
                 "companion-task",
                 "companion-chat",
                 "automation",
+                "channel",
                 "acp",
                 "hosted"
               ]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pellux/goodvibes-tui",
-  "version": "2.0.6",
+  "version": "2.0.8",
   "description": "Terminal-native GoodVibes client for coding, operations, knowledge and channel workflows — a pure client of the GoodVibes daemon.",
   "type": "module",
   "main": "src/main.ts",
@@ -95,8 +95,8 @@
     "@anthropic-ai/bedrock-sdk": "^0.29.1",
     "@anthropic-ai/sdk": "^0.92.0",
     "@ast-grep/napi": "^0.42.0",
-    "@pellux/goodvibes-sdk": "2.0.5",
-    "@pellux/goodvibes-terminal-shell": "2.0.5",
+    "@pellux/goodvibes-sdk": "2.0.8",
+    "@pellux/goodvibes-terminal-shell": "2.0.8",
     "bash-language-server": "^5.6.0",
     "fuse.js": "^7.1.0",
     "@pellux/goodvibes-daemon": "1.28.7",

package/src/input/commands/profile-types.ts

@@ -354,7 +354,9 @@ export function toProfileProvenanceReport(value: unknown): Checked<ProfileProven
   if (provenance === MALFORMED) return MALFORMED;
   const superseded = checkedArray(record.superseded, toSuperseded);
   if (superseded === MALFORMED) return MALFORMED;
-  return { fieldId, present, handEdited, ...(provenance ? { provenance } : {}), superseded };
+  // Platform runtime 2.0.8: the contract declares provenance nullable and
+  // always present — null IS the answer for a hand-edited field.
+  return { fieldId, present, handEdited, provenance: provenance ?? null, superseded };
 }
 
 function toChange(value: unknown): Checked<ProfileChangeView> {

package/src/input/settings-modal-types.ts

@@ -81,6 +81,16 @@ export type SettingsCategory =
   // hostedSessions.* key from the workspace, which is exactly what happened to
   // push.* and cluster.* before them.
   | 'hostedSessions'
+  // email.* / calendar.* / google.* — the connector keys the daemon really
+  // reads for its Google-backed mail and calendar services (platform runtime
+  // 2.0.8 registered them as described schema rows; before that they were
+  // cast onto the live config invisibly and answered "Unknown setting").
+  // Same mandatory-dual-membership rule as profile and hostedSessions above —
+  // without BOTH these entries and the SETTINGS_CATEGORY_GROUPS membership
+  // below, every one of the 22 connector keys is dropped from the workspace.
+  | 'email'
+  | 'calendar'
+  | 'google'
   | 'danger';
 
 export type SettingsFocusPane = 'categories' | 'settings';
@@ -96,7 +106,10 @@ export const SETTINGS_CATEGORY_GROUPS: ReadonlyArray<{
   // answer "where does this conversation actually run, and who can reach it" —
   // the detach policy is a fact about the daemon holding a session open, not
   // about this terminal's presentation of it.
-  { label: 'Surfaces & Cloud', categories: ['surfaces', 'hostedSessions', 'device', 'conversationGate', 'integrations', 'connections', 'mcp', 'cloudflare'] },
+  // 'email', 'calendar' and 'google' sit beside 'surfaces': they configure
+  // the daemon's connections to the owner's mail and calendar — where those
+  // services reach the world, not how this terminal presents anything.
+  { label: 'Surfaces & Cloud', categories: ['surfaces', 'hostedSessions', 'device', 'conversationGate', 'integrations', 'connections', 'email', 'calendar', 'google', 'mcp', 'cloudflare'] },
   // 'occasions' sits beside 'checkin': both are proactive background loops
   // (a cadence, a judgment pass, a conditional channel delivery) rather than
   // facts held about the owner — the data occasions/plans declare lives in

package/src/renderer/settings-modal-helpers.ts

@@ -115,6 +115,9 @@ export const CATEGORY_INFO: Record<SettingsCategory, string> = {
   relay: 'Outbound zero-knowledge relay reachability, for reaching this daemon from outside the LAN without opening an inbound port. Off by default — relay.enabled is the switch. The relay operator sees only ciphertext and connection metadata — self-host your own relay for full control.',
   learning: 'Idle-time memory consolidation: merging duplicate standing memory records and decaying/archiving stale ones. Off by default — nothing runs until enabled.',
   payments: 'Payment card on file for daemon-initiated purchases: card number, expiry, CVV, cardholder name, billing and shipping address, and whether the CVV is stored or requested at purchase time. Card fields are entered through /payments card (concealed input) and are secret-tier — never rendered in plaintext.',
+  email: 'The daemon\'s own mailbox connection — IMAP and SMTP hosts, ports and security, the mailbox and drafts folders, and the username. Password fields hold secret-store references, never values; /google connects a Gmail-backed setup in one action.',
+  calendar: 'Calendar connections the daemon reads and writes: the Google or Microsoft OAuth client for CalDAV-free access, or a read-only ICS URL. Secret fields hold secret-store references, never values.',
+  google: 'The Google OAuth connection record: project id, publishing status, and the refresh-token reference the mail and calendar services share. Established by /google in one action; a dead grant is diagnosed in plain words there.',
   profile: 'What the platform knows about you — your name, how to reach you, where you are, how you like answers written, the people and places you mention — kept as one Markdown file at daemon scope that you can open and edit by hand at any time; your edits win and are never rewritten. These rows decide whether it is loaded at all, whether the assistant records facts it learns from things you say directly to it, whether it tells you in one line each time it does, whether the harmless part (how you are addressed, your city, your timezone, your formatting preferences, your style) is put in the model\'s context so it stops guessing, whether using a private detail such as your address is announced in the reply, whether settings left unset read their value from the profile, and where the file lives. Everything private — your name, contact details, home address, billing and shipping details, quiet hours, and the People, Places, Work and Notes sections — is never put in context in bulk and is reachable only by a named lookup that is disclosed when it happens. Run /profile to read the whole thing, /profile where <field> to see the surface, date and your exact words behind any recorded line, and /profile forget <field> to delete one.',
 };
 
@@ -159,6 +162,9 @@ export const CATEGORY_LABELS: Record<(typeof SETTINGS_CATEGORIES)[number], strin
   release: 'Release',
   power: 'Power',
   memory: 'Memory',
+  email: 'Email Connection',
+  calendar: 'Calendar Connections',
+  google: 'Google Connection',
   danger: 'Danger',
   tools: 'Tools',
   network: 'Network',

package/src/runtime/runtime-services-types.ts

@@ -108,6 +108,8 @@ export interface RuntimeServicesOptions {
 export interface RuntimeServices {
   readonly workingDirectory: string;
   readonly homeDirectory: string;
+  /** The surface segment this runtime's stores live under (platform runtime 2.0.8 requires it — a blank segment resolved to the unscoped control-plane orphan). */
+  readonly surfaceRoot: string;
   /** The declare-once session-storage handle every session reader and writer threads through — see session-storage-services.ts. */
   readonly surface: SessionSurface;
   readonly shellPaths: ShellPathService;

package/src/runtime/services.ts

@@ -559,6 +559,7 @@ export function createRuntimeServices(options: RuntimeServicesOptions): RuntimeS
   const services: RuntimeServices = {
     workingDirectory,
     homeDirectory,
+    surfaceRoot: GOODVIBES_TUI_SURFACE_ROOT,
     surface,
     shellPaths,
     workspaceTrustManager,

package/src/verification/verification-ledger.ts

@@ -438,12 +438,56 @@ export const PAYMENTS_LOCAL_SETTINGS = [
   'payments.notifyChannels',
 ] as const;
 
+/**
+ * Connector settings — the daemon's Google-backed mail/calendar keys plus the
+ * connected-host dial switch and the hosted-turn routing switch, declared as
+ * described schema rows by platform runtime 2.0.8 (before that the connector
+ * keys were cast onto the live config invisibly and the settings surface
+ * answered "Unknown setting" for keys the daemon really reads). Counted for
+ * exactly the reason DAEMON_MAILBOX_LOCAL_SETTINGS is: the same four-part
+ * persistence contract runs over every one of them in
+ * src/test/verification/connector-settings-persistence.test.ts, and that test
+ * asserts this list is the complete schema set for the email, calendar and
+ * google prefixes
+ * plus the two switches. Arriving uncounted is what dropped
+ * localBehaviorPercent through its floor when the schema grew. The three
+ * secret-valued keys hold goodvibes://secrets/ references, never values —
+ * same note as the mailbox passwords above.
+ */
+export const CONNECTOR_LOCAL_SETTINGS = [
+  'email.enabled',
+  'email.imapHost',
+  'email.imapPort',
+  'email.imapSecurity',
+  'email.smtpHost',
+  'email.smtpPort',
+  'email.smtpSecurity',
+  'email.username',
+  'email.passwordRef',
+  'email.smtpPasswordRef',
+  'email.fromAddress',
+  'email.mailbox',
+  'email.draftsMailbox',
+  'calendar.google.clientId',
+  'calendar.google.clientSecretRef',
+  'calendar.google.icsUrl',
+  'calendar.microsoft.clientId',
+  'calendar.microsoft.clientSecretRef',
+  'google.oauth.projectId',
+  'google.oauth.publishingStatus',
+  'google.oauth.refreshToken',
+  'google.credentials.migratedFrom',
+  'daemon.connectedHost.enabled',
+  'hostedSessions.routeConversationTurns',
+] as const;
+
 const SETTINGS_BEHAVIOR_VERIFIED = SETTINGS_BEHAVIOR_BASELINE
   + FEATURE_KNOB_LOCAL_SETTINGS.length
   + DEVICE_AND_TRIGGER_LOCAL_SETTINGS.length
   + CLUSTER_GROUP_LOCAL_SETTINGS.length
   + DAEMON_MAILBOX_LOCAL_SETTINGS.length
   + PAYMENTS_LOCAL_SETTINGS.length
+  + CONNECTOR_LOCAL_SETTINGS.length
   + ENABLEMENT_KEYS_BEHAVIOR_VERIFIED;
 
 const EXTERNAL_SLASH_COMMANDS = new Set([

package/src/version.ts

@@ -6,7 +6,7 @@ import { join } from 'node:path';
 // The prebuild script updates the fallback value before compilation.
 // Uses import.meta.dir (Bun) to locate package.json relative to this file,
 // which is correct regardless of the process working directory.
-let _version = '2.0.6';
+let _version = '2.0.8';
 try {
   const pkg = JSON.parse(readFileSync(join(import.meta.dir, '..', 'package.json'), 'utf-8'));
   // Only trust a version read from OUR OWN package.json. A Bun single-file