@pellux/goodvibes-tui 2.0.7 → 2.0.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pellux/goodvibes-tui",
-  "version": "2.0.7",
+  "version": "2.0.9",
   "description": "Terminal-native GoodVibes client for coding, operations, knowledge and channel workflows — a pure client of the GoodVibes daemon.",
   "type": "module",
   "main": "src/main.ts",
@@ -95,8 +95,8 @@
     "@anthropic-ai/bedrock-sdk": "^0.29.1",
     "@anthropic-ai/sdk": "^0.92.0",
     "@ast-grep/napi": "^0.42.0",
-    "@pellux/goodvibes-sdk": "2.0.7",
-    "@pellux/goodvibes-terminal-shell": "2.0.7",
+    "@pellux/goodvibes-sdk": "2.0.9",
+    "@pellux/goodvibes-terminal-shell": "2.0.9",
     "bash-language-server": "^5.6.0",
     "fuse.js": "^7.1.0",
     "@pellux/goodvibes-daemon": "1.28.7",

package/src/input/commands/profile-types.ts

@@ -354,7 +354,9 @@ export function toProfileProvenanceReport(value: unknown): Checked<ProfileProven
   if (provenance === MALFORMED) return MALFORMED;
   const superseded = checkedArray(record.superseded, toSuperseded);
   if (superseded === MALFORMED) return MALFORMED;
-  return { fieldId, present, handEdited, ...(provenance ? { provenance } : {}), superseded };
+  // Platform runtime 2.0.8: the contract declares provenance nullable and
+  // always present — null IS the answer for a hand-edited field.
+  return { fieldId, present, handEdited, provenance: provenance ?? null, superseded };
 }
 
 function toChange(value: unknown): Checked<ProfileChangeView> {

package/src/input/handler-interactions.ts

@@ -58,6 +58,45 @@ export async function hydrateOnboardingWizardFromRuntimeForHandler(handler: Inpu
     }
   }
 
+/**
+ * handlePasteForHandler - Shared paste path for Ctrl+V and middle-click.
+ *
+ * Tries the clipboard's image first, then its text. The clipboard itself comes
+ * from `handler.clipboardSource`, so tests can hand in a clipboard without
+ * touching the real one.
+ *
+ * The prompt is edited on the HANDLER here, not on the shortcut route state
+ * that dispatched the key. feedInputTokens snapshots the prompt before
+ * dispatching and would write that snapshot back over this edit, erasing the
+ * paste — it does not, because it only restores a field the action left
+ * untouched (see the promptBefore guard in handler-feed.ts). That guard is the
+ * only reason Ctrl+V works, so it is pinned by test.
+ */
+export function handlePasteForHandler(handler: InputHandler): ReturnType<typeof handleClipboardPaste> {
+  const result = handleClipboardPaste({
+    prompt: handler.prompt,
+    cursorPos: handler.cursorPos,
+    pasteRegistry: handler.pasteRegistry,
+    nextPasteId: handler.nextPasteId,
+    imageRegistry: handler.imageRegistry,
+    nextImageId: handler.nextImageId,
+    saveUndoState: () => handler.saveUndoState(),
+    ensureInputCursorVisible: () => handler.ensureInputCursorVisible(),
+    requestRender: handler.requestRender,
+  }, handler.uiServices.environment.shellPaths.workingDirectory, handler.clipboardSource);
+
+  handler.prompt = result.prompt;
+  handler.cursorPos = result.cursorPos;
+  handler.nextImageId = result.nextImageId;
+  handler.nextPasteId = result.nextPasteId;
+
+  if (!result.pasted) {
+    handler.conversationManager?.log('[Paste: clipboard does not contain supported text or image data]', { fg: '240' });
+    handler.requestRender();
+  }
+  return result;
+}
+
 export function registerPasteForHandler(handler: InputHandler, content: string): string {
     const result = registerPaste({
       pasteRegistry: handler.pasteRegistry,

package/src/input/handler-types.ts

@@ -19,6 +19,7 @@ import type { UiRuntimeServices } from '../runtime/ui-services.ts';
 import type { CommandContext } from './command-registry.ts';
 import type { ConversationManager } from '../core/conversation';
 import type { ModelPickerModal, ModelPickerTarget } from './model-picker.ts';
+import type { ClipboardPasteSource } from './handler-content-actions.ts';
 import type { SelectionManager } from '@pellux/goodvibes-terminal-shell';
 import type { InfiniteBuffer } from '@pellux/goodvibes-terminal-shell';
 import type { AutocompleteEngine } from './autocomplete.ts';
@@ -81,6 +82,11 @@ export interface InputHandlerLike {
   nextPasteId: number;
   imageRegistry: Map<string, { data: string; mediaType: string }>;
   nextImageId: number;
+  /**
+   * The clipboard this composer pastes from. Swappable so tests can supply a
+   * clipboard instead of reaching for the machine's real one.
+   */
+  clipboardSource: ClipboardPasteSource;
 
   // ── Timing ───────────────────────────────────────────────────────────────
   lastCopyTime: number;
@@ -124,6 +130,7 @@ export interface InputHandlerLike {
   // ── Methods: modal lifecycle ──────────────────────────────────────────────
   modalOpened(name: string): void;
   saveUndoState(): void;
+  ensureInputCursorVisible(contentWidth?: number): void;
 
   // ── Methods: block actions (dispatched in executeBlockAction) ────────────
   handleBlockCopy(): void;

package/src/input/handler.ts

@@ -2,7 +2,7 @@ import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node
 import { dirname } from 'node:path';
 import { InputTokenizer } from '@pellux/goodvibes-sdk/platform/core';
 import { createOAuthLocalListener } from '@pellux/goodvibes-sdk/platform/config';
-import { clearModalStackForHandler, cleanupMarkerRegistryForHandler, executeBlockActionForHandler, expandPromptForHandler, findMarkerAtPosForHandler, getImageAttachmentsForHandler, handleBlockCopyForHandler, handleBlockSaveForHandler, handleBlockToggleForHandler, handleBookmarkForHandler, handleCopyForHandler, handleCtrlCForHandler, handleDiffApplyForHandler, handleEscapeForHandler, hydrateOnboardingWizardFromRuntimeForHandler, modalOpenedForHandler, openOnboardingWizardForHandler, registerPasteForHandler } from './handler-interactions.ts';
+import { clearModalStackForHandler, cleanupMarkerRegistryForHandler, executeBlockActionForHandler, expandPromptForHandler, findMarkerAtPosForHandler, getImageAttachmentsForHandler, handleBlockCopyForHandler, handleBlockSaveForHandler, handleBlockToggleForHandler, handleBookmarkForHandler, handleCopyForHandler, handleCtrlCForHandler, handleDiffApplyForHandler, handleEscapeForHandler, handlePasteForHandler, hydrateOnboardingWizardFromRuntimeForHandler, modalOpenedForHandler, openOnboardingWizardForHandler, registerPasteForHandler } from './handler-interactions.ts';
 import { getViewportBottomLine } from '../renderer/conversation-layout.ts';
 import { clearOnboardingModelPickerCancelStateForHandler, clearOnboardingPendingModelPickerTargetForHandler, completeOpenAiSubscriptionFromListenerForHandler, getOnboardingConfigValueForHandler, getOnboardingRuntimePostureForHandler, handleModelPickerCommitForHandler, handleOnboardingActionForHandler, handleOpenAiSubscriptionFinishForHandler, handleOpenAiSubscriptionStartForHandler, openModelPickerWithTargetForHandler, openProviderModelPickerWithTargetForHandler, refreshOnboardingHydrationForHandler, restartOnboardingExternalServicesIfNeededForHandler, restoreOnboardingModelPickerCancelStateForHandler, saveWizardProgressForHandler, syncRuntimeFromOnboardingRequestForHandler, verifyOnboardingRuntimePostureForHandler, } from './handler-onboarding.ts';
 import type { OnboardingRuntimePosture } from './handler-types.ts';
@@ -53,12 +53,14 @@ import {
   handleBlockToggle,
   handleBookmark,
   handleClipboardPaste,
+  type ClipboardPasteSource,
   handleCopy,
   handleCtrlC,
   handleDiffApply,
   mediaTypeFromExt,
   registerPaste,
 } from './handler-content-actions.ts';
+import { pasteFromClipboard, pasteImageFromClipboard } from '../utils/clipboard.ts';
 import {
   handleIndicatorFocusToken,
   handleMouseToken,
@@ -574,28 +576,15 @@ export class InputHandler implements InputHandlerLike {
    * Tries image clipboard first, falls back to text paste.
    */
   public handlePaste(): ReturnType<typeof handleClipboardPaste> {
-    const result = handleClipboardPaste({
-      prompt: this.prompt,
-      cursorPos: this.cursorPos,
-      pasteRegistry: this.pasteRegistry,
-      nextPasteId: this.nextPasteId,
-      imageRegistry: this.imageRegistry,
-      nextImageId: this.nextImageId,
-      saveUndoState: () => this.saveUndoState(),
-      ensureInputCursorVisible: () => this.ensureInputCursorVisible(),
-      requestRender: this.requestRender,
-    }, this.uiServices.environment.shellPaths.workingDirectory);
-    this.prompt = result.prompt;
-    this.cursorPos = result.cursorPos;
-    this.nextImageId = result.nextImageId;
-    this.nextPasteId = result.nextPasteId;
-    if (!result.pasted) {
-      this.conversationManager?.log('[Paste: clipboard does not contain supported text or image data]', { fg: '240' });
-      this.requestRender();
-    }
-    return result;
+    return handlePasteForHandler(this);
   }
 
+  /**
+   * The clipboard this composer pastes from. Swappable so tests can supply a
+   * clipboard instead of reaching for the machine's real one.
+   */
+  public clipboardSource: ClipboardPasteSource = { pasteImageFromClipboard, pasteFromClipboard };
+
   /** Content width for wrapping — set by main.ts via setContentWidth(). */
   public contentWidth = 76;
   public panelMouseLayout: PanelMouseLayout | null = null;

package/src/input/settings-modal-types.ts

@@ -81,6 +81,16 @@ export type SettingsCategory =
   // hostedSessions.* key from the workspace, which is exactly what happened to
   // push.* and cluster.* before them.
   | 'hostedSessions'
+  // email.* / calendar.* / google.* — the connector keys the daemon really
+  // reads for its Google-backed mail and calendar services (platform runtime
+  // 2.0.8 registered them as described schema rows; before that they were
+  // cast onto the live config invisibly and answered "Unknown setting").
+  // Same mandatory-dual-membership rule as profile and hostedSessions above —
+  // without BOTH these entries and the SETTINGS_CATEGORY_GROUPS membership
+  // below, every one of the 22 connector keys is dropped from the workspace.
+  | 'email'
+  | 'calendar'
+  | 'google'
   | 'danger';
 
 export type SettingsFocusPane = 'categories' | 'settings';
@@ -96,7 +106,10 @@ export const SETTINGS_CATEGORY_GROUPS: ReadonlyArray<{
   // answer "where does this conversation actually run, and who can reach it" —
   // the detach policy is a fact about the daemon holding a session open, not
   // about this terminal's presentation of it.
-  { label: 'Surfaces & Cloud', categories: ['surfaces', 'hostedSessions', 'device', 'conversationGate', 'integrations', 'connections', 'mcp', 'cloudflare'] },
+  // 'email', 'calendar' and 'google' sit beside 'surfaces': they configure
+  // the daemon's connections to the owner's mail and calendar — where those
+  // services reach the world, not how this terminal presents anything.
+  { label: 'Surfaces & Cloud', categories: ['surfaces', 'hostedSessions', 'device', 'conversationGate', 'integrations', 'connections', 'email', 'calendar', 'google', 'mcp', 'cloudflare'] },
   // 'occasions' sits beside 'checkin': both are proactive background loops
   // (a cadence, a judgment pass, a conditional channel delivery) rather than
   // facts held about the owner — the data occasions/plans declare lives in

package/src/renderer/settings-modal-helpers.ts

@@ -115,6 +115,9 @@ export const CATEGORY_INFO: Record<SettingsCategory, string> = {
   relay: 'Outbound zero-knowledge relay reachability, for reaching this daemon from outside the LAN without opening an inbound port. Off by default — relay.enabled is the switch. The relay operator sees only ciphertext and connection metadata — self-host your own relay for full control.',
   learning: 'Idle-time memory consolidation: merging duplicate standing memory records and decaying/archiving stale ones. Off by default — nothing runs until enabled.',
   payments: 'Payment card on file for daemon-initiated purchases: card number, expiry, CVV, cardholder name, billing and shipping address, and whether the CVV is stored or requested at purchase time. Card fields are entered through /payments card (concealed input) and are secret-tier — never rendered in plaintext.',
+  email: 'The daemon\'s own mailbox connection — IMAP and SMTP hosts, ports and security, the mailbox and drafts folders, and the username. Password fields hold secret-store references, never values; /google connects a Gmail-backed setup in one action.',
+  calendar: 'Calendar connections the daemon reads and writes: the Google or Microsoft OAuth client for CalDAV-free access, or a read-only ICS URL. Secret fields hold secret-store references, never values.',
+  google: 'The Google OAuth connection record: project id, publishing status, and the refresh-token reference the mail and calendar services share. Established by /google in one action; a dead grant is diagnosed in plain words there.',
   profile: 'What the platform knows about you — your name, how to reach you, where you are, how you like answers written, the people and places you mention — kept as one Markdown file at daemon scope that you can open and edit by hand at any time; your edits win and are never rewritten. These rows decide whether it is loaded at all, whether the assistant records facts it learns from things you say directly to it, whether it tells you in one line each time it does, whether the harmless part (how you are addressed, your city, your timezone, your formatting preferences, your style) is put in the model\'s context so it stops guessing, whether using a private detail such as your address is announced in the reply, whether settings left unset read their value from the profile, and where the file lives. Everything private — your name, contact details, home address, billing and shipping details, quiet hours, and the People, Places, Work and Notes sections — is never put in context in bulk and is reachable only by a named lookup that is disclosed when it happens. Run /profile to read the whole thing, /profile where <field> to see the surface, date and your exact words behind any recorded line, and /profile forget <field> to delete one.',
 };
 
@@ -159,6 +162,9 @@ export const CATEGORY_LABELS: Record<(typeof SETTINGS_CATEGORIES)[number], strin
   release: 'Release',
   power: 'Power',
   memory: 'Memory',
+  email: 'Email Connection',
+  calendar: 'Calendar Connections',
+  google: 'Google Connection',
   danger: 'Danger',
   tools: 'Tools',
   network: 'Network',

package/src/runtime/runtime-services-types.ts

@@ -108,6 +108,8 @@ export interface RuntimeServicesOptions {
 export interface RuntimeServices {
   readonly workingDirectory: string;
   readonly homeDirectory: string;
+  /** The surface segment this runtime's stores live under (platform runtime 2.0.8 requires it — a blank segment resolved to the unscoped control-plane orphan). */
+  readonly surfaceRoot: string;
   /** The declare-once session-storage handle every session reader and writer threads through — see session-storage-services.ts. */
   readonly surface: SessionSurface;
   readonly shellPaths: ShellPathService;

package/src/runtime/services.ts

@@ -559,6 +559,7 @@ export function createRuntimeServices(options: RuntimeServicesOptions): RuntimeS
   const services: RuntimeServices = {
     workingDirectory,
     homeDirectory,
+    surfaceRoot: GOODVIBES_TUI_SURFACE_ROOT,
     surface,
     shellPaths,
     workspaceTrustManager,

package/src/verification/verification-ledger.ts

@@ -438,12 +438,56 @@ export const PAYMENTS_LOCAL_SETTINGS = [
   'payments.notifyChannels',
 ] as const;
 
+/**
+ * Connector settings — the daemon's Google-backed mail/calendar keys plus the
+ * connected-host dial switch and the hosted-turn routing switch, declared as
+ * described schema rows by platform runtime 2.0.8 (before that the connector
+ * keys were cast onto the live config invisibly and the settings surface
+ * answered "Unknown setting" for keys the daemon really reads). Counted for
+ * exactly the reason DAEMON_MAILBOX_LOCAL_SETTINGS is: the same four-part
+ * persistence contract runs over every one of them in
+ * src/test/verification/connector-settings-persistence.test.ts, and that test
+ * asserts this list is the complete schema set for the email, calendar and
+ * google prefixes
+ * plus the two switches. Arriving uncounted is what dropped
+ * localBehaviorPercent through its floor when the schema grew. The three
+ * secret-valued keys hold goodvibes://secrets/ references, never values —
+ * same note as the mailbox passwords above.
+ */
+export const CONNECTOR_LOCAL_SETTINGS = [
+  'email.enabled',
+  'email.imapHost',
+  'email.imapPort',
+  'email.imapSecurity',
+  'email.smtpHost',
+  'email.smtpPort',
+  'email.smtpSecurity',
+  'email.username',
+  'email.passwordRef',
+  'email.smtpPasswordRef',
+  'email.fromAddress',
+  'email.mailbox',
+  'email.draftsMailbox',
+  'calendar.google.clientId',
+  'calendar.google.clientSecretRef',
+  'calendar.google.icsUrl',
+  'calendar.microsoft.clientId',
+  'calendar.microsoft.clientSecretRef',
+  'google.oauth.projectId',
+  'google.oauth.publishingStatus',
+  'google.oauth.refreshToken',
+  'google.credentials.migratedFrom',
+  'daemon.connectedHost.enabled',
+  'hostedSessions.routeConversationTurns',
+] as const;
+
 const SETTINGS_BEHAVIOR_VERIFIED = SETTINGS_BEHAVIOR_BASELINE
   + FEATURE_KNOB_LOCAL_SETTINGS.length
   + DEVICE_AND_TRIGGER_LOCAL_SETTINGS.length
   + CLUSTER_GROUP_LOCAL_SETTINGS.length
   + DAEMON_MAILBOX_LOCAL_SETTINGS.length
   + PAYMENTS_LOCAL_SETTINGS.length
+  + CONNECTOR_LOCAL_SETTINGS.length
   + ENABLEMENT_KEYS_BEHAVIOR_VERIFIED;
 
 const EXTERNAL_SLASH_COMMANDS = new Set([

package/src/version.ts

@@ -6,7 +6,7 @@ import { join } from 'node:path';
 // The prebuild script updates the fallback value before compilation.
 // Uses import.meta.dir (Bun) to locate package.json relative to this file,
 // which is correct regardless of the process working directory.
-let _version = '2.0.7';
+let _version = '2.0.9';
 try {
   const pkg = JSON.parse(readFileSync(join(import.meta.dir, '..', 'package.json'), 'utf-8'));
   // Only trust a version read from OUR OWN package.json. A Bun single-file