gloomberb 0.11.3 → 0.13.1

package/README.md

@@ -35,7 +35,7 @@ The desktop app and TUI share the full command language and plugin system. The b
 
 ## Browser App
 
-[term.gloom.sh](https://term.gloom.sh) works anonymously with configuration, tickers, layouts, session state, and plugin state stored in the browser. Anonymous sessions receive rate-limited, 15-minute-delayed Gloom Cloud market data and read-only chat. Login remains optional and enables sync and chat posting; Pro accounts receive realtime market data. Cloud REST and WebSocket traffic uses the same-origin `/api` path, which the Worker forwards only to `https://api.gloom.sh`; it is not an arbitrary network proxy.
+[term.gloom.sh](https://term.gloom.sh) requires a free Gloom Cloud account. The workspace loads behind a sign-in panel that cannot be dismissed, and a session opens it; configuration, tickers, layouts, session state, and plugin state are stored in the browser. Free accounts receive rate-limited, 15-minute-delayed Gloom Cloud market data and read-only chat until the email is verified; Pro accounts receive realtime market data. Public share pages stay open to everyone with no account. Cloud REST and WebSocket traffic uses the same-origin `/api` path, which the Worker forwards only to `https://api.gloom.sh`; it is not an arbitrary network proxy.
 
 The browser build intentionally omits brokers and native integrations, filesystem notes, local AI, external plugins, updater/debug tools, application menus, native window controls, pop-out native windows, and native context menus. Modules that still depend on desktop-only or CORS-blocked feeds are also absent for now: RSS/Substack, prediction markets and polls, market halts/heatmap/movers, dividend/ownership/SEC panes, earnings/IPO, and TV. Public shares open under `/s/:id` in a separate slim bundle. Share creation and owner deletion use the signed-in Gloom Cloud session through the same fixed API path; public reads require no account.
 
@@ -137,6 +137,8 @@ Open command mode with `Ctrl+P`, then type a command. Press `` ` `` to open tick
 
 Use **New Portfolio** or **Add Broker Account** to connect a broker. Gloomberb can import positions from Interactive Brokers, Public, Robinhood, and SimpleFIN.
 
+Each broker is a plugin with its own repository, installed on first launch and updatable on its own. Manage them from the plugin directory, or with `gloomberb install gloom-sh/gloomberb-public` and friends.
+
 - Robinhood opens a browser sign-in page. Gloomberb uses only the read-only account and equity-position tools from the Robinhood Trading MCP server.
 - Public needs an API secret from Public API settings. Gloomberb creates a short-lived access token and uses only the account and portfolio endpoints.
 - SimpleFIN needs a one-time setup token from SimpleFIN Bridge. Gloomberb exchanges the token and imports only accounts that contain holdings.
@@ -202,6 +204,7 @@ See [PLUGINS.md](PLUGINS.md) for the plugin API and the shared UI surface availa
 | `Ctrl+W` | Close focused pane |
 | `Ctrl+Shift+M` | Move focused window (`WIN resize` starts resize mode) |
 | `Ctrl+Shift+D` | Dock or float focused pane |
+| `Ctrl+Shift+E` | Export focused pane table as CSV |
 | `Ctrl+Shift+L` | Layout actions |
 | `Ctrl+Shift+G` | Tidy windows |
 | `Tab` | Switch panes |
@@ -232,7 +235,7 @@ Use `HELP` inside Gloomberb for the live shortcut list. The common command-bar p
 | `GR <tickers>` | Security relationship graph |
 | `EE <ticker>` | Events view with earnings and revenue estimates |
 | `EM [tickers]` | Earnings monitor |
-| `SRCH <query>` | Provider symbol search |
+| `SRCH [query]` | Full-text search across earnings call transcripts, news, and SEC filings |
 | `QQ <tickers>` | Ticker quote monitor |
 | `CMP <tickers>` | Normalized price comparison |
 | `CORR <tickers>` | Ticker return correlations |
@@ -282,11 +285,13 @@ The toolbar controls preset or exact date ranges, intervals from one minute thro
 | `WEI` | Global equity indices |
 | `MAP` | Live world venue map with local market status and clocks |
 | `FUT` | Front-month futures across index, rates, energy, metals, grains, and FX |
-| `ECON` | Economic events and releases |
+| `ECO` | Economic events and releases |
+| `ECST [statistic]` | Economic statistics: inflation, labour, growth, consumer, housing, rates |
 | `GC` | Yield curve |
 | `AUCT` | Treasury auction results: high rate, bid-to-cover, indirect share, and size |
 | `VIX` | VIX 30-day/3-month implied-volatility curve |
 | `CRD` | Credit spreads |
+| `VAL [indicator]` | Whole-market valuation: Buffett, CAPE, excess CAPE yield, Tobin Q, investor equity allocation, dividend yield, margin debt, cap/profits, cap/M2 |
 | `CDS [ticker]` | Single-name corporate CDS activity: most-active issuers, or one issuer's trades |
 | `ERN` | Earnings calendar |
 | `IPO` | Upcoming and recent IPOs |
@@ -327,7 +332,6 @@ The toolbar controls preset or exact date ranges, intervals from one minute thro
 | `FONT+` / `FONT-` | Increase or decrease desktop font size |
 | `CONN` | Connection health |
 | `POLL` | Prediction-market polls |
-| `ART` | Loaded article lookup |
 | `UPGRADE` | Account upgrade |
 | `CR` | Cycle chart renderer |
 | `LANG <locale>` | Change interface language (`auto`, `en`, `es`, `zh-CN`, `zh-TW`, `ja`, or `ko`) |

package/README.zh-CN.md

@@ -172,6 +172,7 @@ gloomberb
 | `Ctrl+W` | 关闭聚焦面板 |
 | `Ctrl+Shift+M` | 移动聚焦窗口（`WIN resize` 进入缩放模式） |
 | `Ctrl+Shift+D` | 停靠或浮动聚焦面板 |
+| `Ctrl+Shift+E` | 将聚焦面板的表格导出为 CSV |
 | `Ctrl+Shift+L` | 布局操作 |
 | `Ctrl+Shift+G` | 所有窗口网格对齐 |
 | `Tab` | 切换面板 |
@@ -200,7 +201,7 @@ gloomberb
 | `GR <tickers>` | 证券关系图 |
 | `EE <ticker>` | 含 EPS 与营收预估的事件视图 |
 | `EM [tickers]` | 财报监控 |
-| `SRCH <query>` | 数据源符号搜索 |
+| `SRCH [query]` | 跨财报电话会记录、新闻与 SEC 文件的全文检索 |
 | `QQ <tickers>` | 股票行情监控 |
 | `CMP <tickers>` | 股票图表对比 |
 | `CORR <tickers>` | 股票收益率相关性 |
@@ -230,7 +231,8 @@ gloomberb
 | `TBO` | TheBuildout 基础设施情报 |
 | `CG` | 国会交易披露 |
 | `WEI` | 全球股指 |
-| `ECON` | 经济事件与数据发布 |
+| `ECO` | 经济事件与数据发布 |
+| `ECST [统计指标]` | 经济统计：通胀、就业、增长、消费、住房、利率 |
 | `GC` | 收益率曲线 |
 | `ERN` | 财报日历 |
 | `BI` / `SP` | 标普 500 板块表现 |

package/package.json

@@ -1,10 +1,34 @@
 {
   "name": "gloomberb",
-  "version": "0.11.3",
+  "version": "0.13.1",
   "packageManager": "bun@1.3.11",
   "description": "Market research and portfolio tracker for the terminal",
   "module": "src/index.tsx",
   "type": "module",
+  "exports": {
+    ".": "./src/index.tsx",
+    "./types/plugin": "./src/types/plugin.ts",
+    "./types/persistence": "./src/types/persistence.ts",
+    "./ui": "./src/ui/index.tsx",
+    "./components": "./src/components/index.ts",
+    "./theme": "./src/theme/colors.ts",
+    "./capabilities": "./src/capabilities/index.ts",
+    "./utils": "./src/public/utils.ts",
+    "./react": "./src/public/react.ts",
+    "./test-support": "./src/public/test-support.ts",
+    "./package.json": "./package.json",
+    "./types/broker": "./src/types/broker.ts",
+    "./types/config": "./src/types/config.ts",
+    "./types/data-provider": "./src/types/data-provider.ts",
+    "./types/financials": "./src/types/financials.ts",
+    "./types/instrument": "./src/types/instrument.ts",
+    "./types/ticker": "./src/types/ticker.ts",
+    "./types/trading": "./src/types/trading.ts",
+    "./time-series": "./src/public/time-series.ts",
+    "./market-data": "./src/public/market-data.ts",
+    "./dialog": "./src/ui/dialog.tsx",
+    "./broker": "./src/public/broker.ts"
+  },
   "bin": {
     "gloomberb": "bin/gloomberb"
   },
@@ -28,6 +52,8 @@
     "desktop:release": "electrobun build --env=stable",
     "desktop:release:windows": "electrobun build --env=stable --targets=win-x64",
     "i18n:audit": "bun run scripts/i18n-audit.ts",
+    "plugins:manifest": "bun run scripts/generate-plugin-manifest.ts",
+    "plugins:manifest:check": "bun run scripts/generate-plugin-manifest.ts --check",
     "typecheck": "bun run typecheck:opentui && bun run typecheck:electrobun-bun && bun run typecheck:electrobun-view && bun run typecheck:browser && bun run typecheck:cloudflare && bun run typecheck:scripts",
     "typecheck:opentui": "tsc --project tsconfig.opentui.json",
     "typecheck:electrobun-bun": "tsc --project tsconfig.electrobun-bun.json",
@@ -36,6 +62,7 @@
     "typecheck:cloudflare": "tsc --project tsconfig.cloudflare.json",
     "typecheck:scripts": "tsc --project tsconfig.scripts.json",
     "test": "bun test",
+    "benchmark:tui:navigation": "bun run scripts/benchmark-tui-navigation.ts",
     "test:global-upgrade": "bun run scripts/smoke-global-upgrade.ts",
     "release": "./scripts/release.sh"
   },
@@ -67,7 +94,6 @@
   "dependencies": {
     "@earendil-works/pi-agent-core": "0.81.1",
     "@earendil-works/pi-ai": "0.81.1",
-    "@modelcontextprotocol/sdk": "^1.30.0",
     "@opentui/core": "^0.3.2",
     "@opentui/react": "^0.3.2",
     "@stoqey/ib": "^1.5.6",

package/src/api-client/auth.ts

@@ -1,3 +1,4 @@
+import { getCurrentPluginTarget } from "../plugins/current-target";
 import { ApiRequestError, isHardSessionInvalidMessage } from "./errors";
 import type {
   AccountProfile,
@@ -110,14 +111,24 @@ export class CloudAuthApi {
   }
 
   async getSession(): Promise<AuthUser | null> {
+    // The answer describes whichever credential was on the wire when the
+    // request left. On boot a check can go out before the persisted token is
+    // installed; by the time "no session" comes back, the token and the cached
+    // user are in place, and applying that answer wiped them. Re-check with the
+    // credential that exists now instead of trusting an answer about one that
+    // no longer does.
+    const credential = this.options.getSessionToken();
+    const credentialChanged = () => this.options.getSessionToken() !== credential;
     try {
       const result = await this.options.request<{ user: AuthUser }>("/auth/get-session", {
         method: "GET",
       });
+      if (credentialChanged()) return this.getSession();
       const user = result?.user ?? null;
       this.options.setCurrentUser(user);
       return user;
     } catch (error) {
+      if (credentialChanged()) return this.getSession();
       if (error instanceof ApiRequestError && isHardSessionInvalidMessage(error.message)) {
         this.options.setSessionToken(null);
         return null;
@@ -141,7 +152,7 @@ export class CloudAuthApi {
   async sendVerification(): Promise<CloudVerificationResponse> {
     return this.options.request<CloudVerificationResponse>("/cloud/auth/send-verification", {
       method: "POST",
-      body: JSON.stringify({}),
+      body: JSON.stringify({ returnTo: getCurrentPluginTarget() === "web" ? location.href : undefined }),
     });
   }
 

package/src/api-client/data.ts

@@ -1,28 +1,43 @@
 import type { TickerFinancials } from "../types/financials";
 import type { InstrumentSearchResult } from "../types/instrument";
-import { normalizeTweetSearchResponse } from "./normalizers";
+import {
+  normalizeSavedSearchHits,
+  normalizeSavedSearchResponse,
+  normalizeSearchResponse,
+  normalizeTweetSearchResponse,
+} from "./normalizers";
 import {
   cloudCdsPath,
   cloudCongressHousePath,
+  cloudEarningsCallsPath,
+  cloudEarningsTranscriptPath,
   cloudExchangeRatePath,
   cloudSec13FPath,
   cloudSecFilingContentPath,
   cloudSecFilingDocumentsPath,
   cloudSecFilingsPath,
   cloudFredSeriesPath,
+  cloudShillerPath,
   cloudHistoryPath,
   cloudMarketSearchPath,
   cloudMarketSymbolPath,
   cloudNewsPath,
   cloudOptionsChainPath,
+  cloudSavedSearchHitsPath,
+  cloudSavedSearchPath,
+  cloudSavedSearchesPath,
+  cloudSearchDocumentPath,
+  cloudSearchPath,
   cloudStatementsPath,
   cloudTickerTweetsPath,
   cloudTweetSearchPath,
   type CloudCdsParams,
   type CloudCongressHouseParams,
+  type CloudEarningsCallsParams,
   type CloudFredSeriesParams,
   type CloudHistoryParams,
   type CloudNewsParams,
+  type CloudSearchParams,
   type CloudSecFilingParams,
   type CloudSecFilingsParams,
   type CloudTickerTweetsParams,
@@ -34,11 +49,14 @@ import type {
   CloudCdsResponse,
   CloudCompanyProfile,
   CloudCongressHousePayload,
+  CloudEarningsCallListPayload,
+  CloudEarningsTranscriptPayload,
   CloudCorporateActionsPayload,
   CloudEconEventPayload,
   CloudEquityDiagnosticMode,
   CloudEquityDiagnosticResult,
   CloudFredSeriesPayload,
+  CloudShillerPayload,
   CloudFundamentals,
   CloudHoldersPayload,
   CloudMarketBatchPayload,
@@ -48,6 +66,14 @@ import type {
   CloudMarketScreenerPayload,
   CloudNewsListResponse,
   CloudNewsPayload,
+  CloudSavedSearch,
+  CloudSavedSearchInput,
+  CloudSavedSearchListResponse,
+  CloudSearchDocType,
+  CloudSearchDocument,
+  CloudSearchDocumentResponse,
+  CloudSearchHit,
+  CloudSearchResponse,
   CloudSecContentResponse,
   CloudSecDocumentsResponse,
   CloudSecFilingsResponse,
@@ -213,6 +239,10 @@ export class CloudDataApi {
     return this.request<CloudFredSeriesPayload>(cloudFredSeriesPath(seriesId, params));
   }
 
+  async getCloudShiller(): Promise<CloudShillerPayload> {
+    return this.request<CloudShillerPayload>(cloudShillerPath());
+  }
+
   async getCloudYieldCurve(): Promise<CloudYieldPointPayload[]> {
     return this.request<CloudYieldPointPayload[]>("/cloud/econ/yield-curve");
   }
@@ -225,6 +255,16 @@ export class CloudDataApi {
     return this.request<CloudCongressHousePayload>(cloudCongressHousePath(params));
   }
 
+  async getCloudEarningsCalls(
+    params: CloudEarningsCallsParams = {},
+  ): Promise<CloudEarningsCallListPayload> {
+    return this.request<CloudEarningsCallListPayload>(cloudEarningsCallsPath(params));
+  }
+
+  async getCloudEarningsTranscript(id: string): Promise<CloudEarningsTranscriptPayload> {
+    return this.request<CloudEarningsTranscriptPayload>(cloudEarningsTranscriptPath(id));
+  }
+
   async getCloudSecFilings(params: CloudSecFilingsParams): Promise<CloudSecFilingsResponse> {
     return this.request<CloudSecFilingsResponse>(cloudSecFilingsPath(params));
   }
@@ -241,6 +281,68 @@ export class CloudDataApi {
     return this.request<unknown>(cloudSec13FPath(path, params));
   }
 
+  /**
+   * Cross-document full-text search. Pro-gated: unentitled accounts get a 402,
+   * which the caller turns into the access gate rather than an empty result.
+   */
+  async searchCloudDocuments(
+    params: CloudSearchParams,
+    options?: { signal?: AbortSignal },
+  ): Promise<CloudSearchResponse> {
+    return normalizeSearchResponse(
+      await this.request<CloudSearchResponse>(cloudSearchPath(params), { signal: options?.signal }),
+    );
+  }
+
+  async getCloudSearchDocument(
+    docType: CloudSearchDocType,
+    sourceId: string,
+    options?: { signal?: AbortSignal },
+  ): Promise<CloudSearchDocument> {
+    const response = await this.request<CloudSearchDocumentResponse>(
+      cloudSearchDocumentPath(docType, sourceId),
+      { signal: options?.signal },
+    );
+    return response.document;
+  }
+
+  async getCloudSavedSearches(options?: { signal?: AbortSignal }): Promise<CloudSavedSearch[]> {
+    const response = await this.request<CloudSavedSearchListResponse>(cloudSavedSearchesPath(), {
+      signal: options?.signal,
+    });
+    return response.searches ?? [];
+  }
+
+  async createCloudSavedSearch(input: CloudSavedSearchInput): Promise<CloudSavedSearch> {
+    return normalizeSavedSearchResponse(await this.request<unknown>(cloudSavedSearchesPath(), {
+      method: "POST",
+      body: JSON.stringify(input),
+    }));
+  }
+
+  async updateCloudSavedSearch(
+    id: string,
+    update: Partial<CloudSavedSearchInput>,
+  ): Promise<CloudSavedSearch> {
+    return normalizeSavedSearchResponse(await this.request<unknown>(cloudSavedSearchPath(id), {
+      method: "PATCH",
+      body: JSON.stringify(update),
+    }));
+  }
+
+  async deleteCloudSavedSearch(id: string): Promise<void> {
+    await this.request<void>(cloudSavedSearchPath(id), { method: "DELETE" });
+  }
+
+  async getCloudSavedSearchHits(
+    id: string,
+    options?: { signal?: AbortSignal },
+  ): Promise<CloudSearchHit[]> {
+    return normalizeSavedSearchHits(await this.request<unknown>(cloudSavedSearchHitsPath(id), {
+      signal: options?.signal,
+    }));
+  }
+
   async getCloudNews(params: CloudNewsParams = {}): Promise<CloudNewsListResponse> {
     return this.request<CloudNewsListResponse>(cloudNewsPath(params));
   }

package/src/api-client/index.test.ts

@@ -198,6 +198,44 @@ describe("apiClient auth cookies", () => {
     expect(requests).toBe(1);
   });
 
+  /**
+   * On boot a session check can leave before the persisted token is installed.
+   * Its "no session" answer must not overwrite the verified user that hydrate
+   * restored in the meantime; that exact sequence left the app authenticated
+   * for chat while every plan-gated surface reported signed out.
+   */
+  test("a session check that predates the restored token does not wipe the restored user", async () => {
+    const seen: Array<string | null> = [];
+    let releaseFirst!: () => void;
+    setCloudApiFetchTransport(async (_url, init) => {
+      const cookie = new Headers(init?.headers).get("cookie");
+      seen.push(cookie);
+      if (seen.length === 1) {
+        await new Promise<void>((resolve) => { releaseFirst = resolve; });
+        return createResponse({ user: null });
+      }
+      return createResponse({ user: verifiedUser });
+    });
+
+    // A cookie-less check goes out first.
+    const early = apiClient.getSession();
+    expect(seen).toHaveLength(1);
+    expect(seen[0]).toBeNull();
+
+    // Hydrate installs the token and the cached user while it is in flight.
+    apiClient.setSessionToken("restored-token");
+    apiClient.restoreCachedUser(verifiedUser);
+    expect(apiClient.getCurrentUser()?.emailVerified).toBe(true);
+
+    releaseFirst();
+    await expect(early).resolves.toMatchObject({ id: verifiedUser.id });
+
+    // The stale answer was discarded and a second check went out with the real cookie.
+    expect(seen).toHaveLength(2);
+    expect(seen[1]).toContain("restored-token");
+    expect(apiClient.getCurrentUser()?.emailVerified).toBe(true);
+  });
+
   test("captures secure session cookies after login and reuses them on session refresh", async () => {
     const seenCookies: Array<string | null> = [];
 
@@ -1163,3 +1201,92 @@ describe("apiClient equity diagnostic", () => {
     expect(JSON.parse(String(seenInit?.body))).toEqual({ symbol: "AAPL", mode: "cache-first" });
   });
 });
+
+describe("apiClient document search", () => {
+  test("builds the search query from filters and omits empty ones", async () => {
+    let seenUrl = "";
+    globalThis.fetch = mockFetch(async (input: Request | string | URL) => {
+      seenUrl = String(input);
+      return createResponse({
+        hits: [],
+        total: 0,
+        countCapped: false,
+        hasMore: false,
+        nextOffset: 0,
+        tookMs: 3,
+      });
+    });
+
+    await apiClient.searchCloudDocuments({
+      query: "  margin pressure  ",
+      tickers: [" aapl ", "msft"],
+      docTypes: ["transcript", "filing"],
+      sources: [],
+      from: "2026-01-01T00:00:00.000Z",
+      sort: "newest",
+      limit: 40,
+      offset: 0,
+    });
+
+    const url = new URL(seenUrl);
+    expect(url.pathname).toBe("/cloud/search");
+    expect(url.searchParams.get("q")).toBe("margin pressure");
+    expect(url.searchParams.get("tickers")).toBe("AAPL,MSFT");
+    expect(url.searchParams.get("docTypes")).toBe("transcript,filing");
+    expect(url.searchParams.get("from")).toBe("2026-01-01T00:00:00.000Z");
+    expect(url.searchParams.get("sort")).toBe("newest");
+    expect(url.searchParams.get("limit")).toBe("40");
+    expect(url.searchParams.has("sources")).toBe(false);
+    expect(url.searchParams.has("to")).toBe(false);
+    // Offset 0 is the first page; sending it only lengthens the cache key.
+    expect(url.searchParams.has("offset")).toBe(false);
+    // Counting is the server default, so only opting out travels.
+    expect(url.searchParams.has("count")).toBe(false);
+
+    await apiClient.searchCloudDocuments({ query: "margin", limit: 3, count: false });
+    expect(new URL(seenUrl).searchParams.get("count")).toBe("false");
+  });
+
+  test("escapes the document route segments", async () => {
+    let seenUrl = "";
+    globalThis.fetch = mockFetch(async (input: Request | string | URL) => {
+      seenUrl = String(input);
+      return createResponse({ document: { chunks: [] } });
+    });
+
+    await apiClient.getCloudSearchDocument("filing", "0000320193-26-000042/a b");
+
+    expect(new URL(seenUrl).pathname).toBe(
+      "/cloud/search/documents/filing/0000320193-26-000042%2Fa%20b",
+    );
+  });
+
+  test("accepts a saved-search write with or without an envelope", async () => {
+    const record = {
+      id: "saved-1",
+      name: "margin pressure",
+      query: "margin pressure",
+      filters: {},
+      alertEnabled: true,
+      alertChannels: ["email"],
+      lastRunAt: null,
+      lastMatchAt: null,
+      matchCount: 0,
+      createdAt: "2026-05-01T00:00:00.000Z",
+    };
+
+    globalThis.fetch = mockFetch(async () => createResponse({ search: record }));
+    expect((await apiClient.createCloudSavedSearch({
+      name: record.name,
+      query: record.query,
+    })).id).toBe("saved-1");
+
+    globalThis.fetch = mockFetch(async () => createResponse(record));
+    expect((await apiClient.updateCloudSavedSearch("saved-1", { alertEnabled: false })).id)
+      .toBe("saved-1");
+
+    globalThis.fetch = mockFetch(async () => createResponse({}));
+    await expect(apiClient.updateCloudSavedSearch("saved-1", { alertEnabled: false }))
+      .rejects.toThrow("missing a record");
+  });
+});