Added API Inspector Panel, Several TUI improvements (#231)

Author: straubt1

.claude/skills/reflection/SKILL.md

@@ -0,0 +1,77 @@
+---
+name: reflection
+description: This skill should be used when the user says "reflection", "reflect on the changes", "reflect on this session", or asks to capture lessons learned from the current conversation.
+disable-model-invocation: true
+---
+
+# Reflection
+
+The goal is to identify lessons from this session that should be permanently captured in CLAUDE.md — so future sessions benefit without repeating the same mistakes, clarifications, or decisions.
+
+Review the **entire conversation history** — every message, correction, and preference — as the primary source. Code diffs are supplementary.
+
+## Current Git State (supplementary context)
+
+- Branch: !`git branch --show-current`
+- Changes since last commit: !`git diff --stat HEAD`
+- Staged changes: !`git diff --stat --cached`
+
+## Process
+
+1. **Read the full conversation from top to bottom.** Pay attention to:
+   - Questions the user had to answer that should have been obvious from CLAUDE.md
+   - Corrections the user made to your approach or output
+   - Preferences or constraints the user stated (even casually)
+   - Things you got wrong on the first attempt and had to revise
+   - Decisions made about architecture, naming, tooling, or workflow
+   - Anything the user explicitly said to always/never do
+
+2. **Review the diffs** (supplementary) — Read modified files for context on what was built and why, but do not let this overshadow lessons from the conversation itself.
+
+3. **Identify lessons** in these categories:
+   - **Patterns & conventions** — Things that worked well and should be encoded as rules
+   - **Gotchas & pitfalls** — Things that caused confusion, required retries, or were non-obvious
+   - **Architecture decisions** — Choices made that future sessions should know about
+   - **Workflow & communication preferences** — How the user prefers to work, communicate, or receive output
+   - **Outdated/wrong memory** — Anything in CLAUDE.md or MEMORY.md that turned out to be incorrect or missing
+
+4. **Read the current CLAUDE.md** to avoid duplicating what's already there and to find gaps.
+
+5. **Propose edits to CLAUDE.md** — For each lesson worth keeping, suggest the specific text to add, change, or remove, and where it belongs.
+
+6. **If no lessons are found**, explicitly state: "No CLAUDE.md updates needed from this session." This confirms the session was considered.
+
+7. **Do not apply edits automatically.** Present proposals to the user and wait for approval.
+
+8. **After applying approved edits**, print a brief summary in chat of what changed.
+
+## Output Format
+
+**When lessons are found:**
+```
+## Reflection
+
+### [Category]
+**Lesson**: <what was learned>
+**Proposed CLAUDE.md change**: <exact text, with target section>
+
+---
+(one block per lesson)
+```
+
+**When no lessons are found:**
+```
+## Reflection
+
+No CLAUDE.md updates needed from this session. The following were considered but already covered or not worth persisting:
+- <item> — already in CLAUDE.md / too session-specific / etc.
+```
+
+**After applying approved changes:**
+```
+## CLAUDE.md updated
+
+- Added: "<description>" under ## Section
+- Modified: "<what changed>" in ## Section
+- Removed: "<what was removed>"
+```

.claude/tui-plan.md

@@ -916,6 +916,175 @@ Used by both the JSON Viewer and File Content Viewer. Same approach as existing
 
 ---
 
+### Phase 8 — API Inspector Panel
+
+Goal: a collapsible right-hand panel (toggled with `l`) that shows live TFE API calls — method, path, status, duration, full request body, and full response body — as the TUI makes them in the background. Scrollable, filterable, and non-blocking with respect to main-view navigation.
+
+```
+┌────────────────────────┬─┬────────────────────────────┐
+│ Header (full width)                                    │
+│ Breadcrumb (full width)                                │
+├────────────────────────┤│├────────────────────────────┤
+│                        ││  API Inspector  [l] close   │
+│  Main view             ││  GET /workspaces   200  45ms│ ← cursor (▶)
+│  (narrowed when panel  ││  POST /runs        201  89ms│
+│  is open)              ││  GET /projects     200  12ms│
+│                        ││────────────────────────────-│
+│                        ││ ─── REQUEST ───────────────  │
+│                        ││ GET /api/v2/workspaces      │
+│                        ││ ─── RESPONSE ──────────────  │
+│                        ││ 200 OK  •  45ms             │
+│                        ││ { "data": [...] }           │
+├────────────────────────┤│├────────────────────────────┤
+│ Status bar (full width)                                │
+│ CLI hint (full width)                                  │
+└────────────────────────┴─┴────────────────────────────┘
+```
+
+#### 8a. Event Bus & Transport Integration
+
+**New file: `client/eventbus.go`**
+```go
+type APIEvent struct {
+    Timestamp  time.Time
+    Method     string
+    URL        string        // full URL (for filter matching)
+    Path       string        // path only, scheme+host stripped (for display)
+    StatusCode int
+    Duration   time.Duration
+    ReqBody    string        // request body; empty for GET/DELETE
+    RespBody   string        // pretty-printed JSON response body
+    Err        string        // non-empty if RoundTrip errored
+}
+
+type APIEventBus struct { ch chan APIEvent }   // buffered, size 256
+
+func NewAPIEventBus() *APIEventBus
+func (b *APIEventBus) Send(e APIEvent)          // non-blocking (drops when full)
+func (b *APIEventBus) Receive() <-chan APIEvent
+```
+
+**`client/http_logger.go` changes:**
+- Add `EventBus *APIEventBus` field to `LoggingTransport`
+- Record `start := time.Now()` at top of `RoundTrip`
+- Consolidate to **one** `DumpResponse(resp, true)` call (shared by file log, trace log, event bus)
+- Extract request body from `DumpRequestOut`, split at `\r\n\r\n`
+- Pretty-print response JSON with `json.Indent` before publishing
+- Publish `APIEvent` when `t.EventBus != nil` (independent of `TFX_LOG`)
+
+**`client/client.go` changes:**
+- Add `EventBus *APIEventBus` field to `TfxClient`
+- New `NewFromViperForTUI(bus *APIEventBus) (*TfxClient, error)` — always installs a `LoggingTransport` with the bus set (additionally handles `TFX_LOG` if set)
+
+**`tui/run.go` changes:**
+```go
+bus := client.NewAPIEventBus()
+c, err := client.NewFromViperForTUI(bus)
+m := newModel(c)   // c.EventBus is set; Init() starts the listener
+```
+
+#### 8b. Model State & Width Parameterization
+
+**New Model fields:**
+```go
+showDebug       bool
+debugFocused    bool              // Tab toggles keyboard focus to panel
+apiEvents       []client.APIEvent // ring buffer, max 100, newest at index 0
+debugCursor     int               // selected call index
+debugBodyScroll int               // scroll offset in request/response viewer
+debugFilter     string
+debugFiltering  bool
+```
+
+**New helpers:**
+```go
+func (m Model) debugPanelWidth() int  // clamped min 52 / max 90 / ~35% of total
+func (m Model) mainWidth() int        // m.width when closed; m.width-panelW-1 when open
+func (m Model) padContent(rendered string, style lipgloss.Style) string  // pads to mainWidth()
+```
+
+**Width refactor:** Replace `m.width` → `m.mainWidth()` and `m.pad()` → `m.padContent()` in all content-area renderers (`renderContent()` and all sub-renderers in model.go, cvfiles.go, organizations.go, runs.go, variables.go, configversions.go, stateversions.go, detail view files). Full-width zones (header, breadcrumb, statusbar, clihint) keep `m.width`/`pad()`.
+
+**Bubble Tea event listener** — always active (events buffer even when panel is closed):
+```go
+// Init(): tea.Batch(..., waitForAPIEvent(m.c.EventBus))
+
+func waitForAPIEvent(bus *client.APIEventBus) tea.Cmd {
+    return func() tea.Msg { return <-bus.Receive() }
+}
+
+// Update():
+case client.APIEvent:
+    m.apiEvents = append([]client.APIEvent{msg}, m.apiEvents...)
+    if len(m.apiEvents) > 100 { m.apiEvents = m.apiEvents[:100] }
+    if m.debugCursor > 0 { m.debugCursor++ }  // track same call on new arrivals
+    return m, waitForAPIEvent(m.c.EventBus)
+```
+
+**Key routing:**
+- `l` (global) — toggle `showDebug`; clear `debugFocused` on close
+- `Tab` (when `showDebug`) — toggle `debugFocused`
+- When `m.debugFocused && m.showDebug`, route all keys to `handleDebugPanelKey()` first
+
+#### 8c. Debug Panel Renderer
+
+**New file: `tui/debugpanel.go`**
+
+`renderDebugPanel() string` — renders to exactly `contentHeight()` lines at `debugPanelWidth()` columns:
+- Title bar (1 line): `  API Inspector` + `[Tab] focus  [l] close` right-aligned
+- Call list (top 40% of height): newest first, with `▶` cursor marker
+  - `METHOD /path  STATUS  DUR` — method and status color-coded
+  - Method: GET=blue, POST=green, DELETE=red, PATCH/PUT=amber
+  - Status: 2xx=green, 4xx=amber, 5xx=red, 0=dim (error)
+- Divider + optional filter bar
+- Request/Response viewer (remainder): shows selected call's req body + response body, scrollable via `debugBodyScroll`, response JSON highlighted with `colorizeJSONLine()`
+
+`filteredDebugEvents(m Model) []client.APIEvent` — case-insensitive method+path filter.
+
+`handleDebugPanelKey()` keys:
+- `↑`/`k` / `↓`/`j` — navigate call list
+- `g`/`G` — top/bottom of list
+- `ctrl+u` / `ctrl+d` — scroll response viewer half-page
+- `/` — start filter input
+- `esc` — clear filter → unfocus panel → close panel (successive presses)
+- `Tab` — unfocus (return focus to main view)
+
+#### 8d. View() Horizontal Join
+
+**`View()` restructure:**
+```go
+if m.showDebug {
+    joined := joinPanels(m.renderContent(), m.renderDebugPanel())
+    content = lipgloss.JoinVertical(lipgloss.Left,
+        m.renderHeader(), m.renderBreadcrumb(), joined,
+        m.renderStatusBar(), m.renderCliHint())
+}
+```
+
+**`joinPanels(left, right string) string`** — line-by-line zip with dim `│` separator.
+
+#### 8e. Polish
+
+- Help overlay: add `[global] l`, `[inspector] Tab/↑↓/ctrl+u-d / / esc` entries
+- Status bar: show `[inspector]` accent badge when `debugFocused == true`
+- No CLI hint change needed
+
+#### 8f. New Files Summary
+
+| File | Purpose |
+|---|---|
+| `client/eventbus.go` | `APIEvent`, `APIEventBus` |
+| `tui/debugpanel.go` | `renderDebugPanel()`, `joinPanels()`, `filteredDebugEvents()`, `handleDebugPanelKey()` |
+
+#### 8g. Key Design Decisions
+- Subscription always runs (events buffered before panel opens)
+- `NewFromViperForTUI` always installs transport — no `TFX_LOG` required
+- One `DumpResponse` per request (shared across logging channels)
+- `padContent()`/`mainWidth()` is the invariant separating full-width vs. content-area rows
+- `debugCursor` increments on new events to track the same call when cursor is not at 0
+
+---
+
 ## 11. Open Questions
 
 - [x] **Resolved:** `tfx tui` subcommand (not `--tui` flag). Cobra's required-flag check runs before `PersistentPreRun`; subcommand goes through `postInitCommands`/`presetRequiredFlags` normally.

.github/workflows/build.yml

@@ -0,0 +1,24 @@
+name: TFx Build
+
+on:
+  pull_request:
+  push:
+    branches-ignore:
+      - main # covered by latest.yml
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+          cache: true
+
+      - name: Build
+        run: go build ./...
+
+      - name: Test
+        run: go test ./...

.github/workflows/latest.yml

@@ -24,6 +24,17 @@ jobs:
           go-version-file: go.mod
           cache: true
 
+      - name: Compute next version
+        id: version
+        run: |
+          LATEST_TAG=$(git describe --tags --abbrev=0 --match "v[0-9]*.[0-9]*.[0-9]*" 2>/dev/null || echo "v0.0.0")
+          RAW="${LATEST_TAG#v}"
+          IFS='.' read -r MAJOR MINOR PATCH <<< "$RAW"
+          SHORT_SHA=$(git rev-parse --short HEAD)
+          VERSION="${MAJOR}.${MINOR}.$((PATCH + 1))-${SHORT_SHA}"
+          echo "version=${VERSION}" >> $GITHUB_OUTPUT
+          echo "Computed: stable=${LATEST_TAG}, next=${VERSION}"
+
       - name: Delete existing latest release
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -42,3 +53,4 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           HOMEBREW_TAP_TOKEN: ${{ secrets.HOMEBREW_TAP_TOKEN }}
+          TFX_VERSION: ${{ steps.version.outputs.version }}

.goreleaser-latest.yml

@@ -9,7 +9,7 @@ env:
 builds:
   - binary: tfx-latest
     ldflags:
-      - -s -w -X github.com/straubt1/tfx/version.Version={{ .Version }}
+      - -s -w -X github.com/straubt1/tfx/version.Version={{ .Env.TFX_VERSION }}
       - -s -w -X github.com/straubt1/tfx/version.Build={{ .ShortCommit }}
       - -s -w -X github.com/straubt1/tfx/version.Date={{ .Date }}
       - -s -w -X github.com/straubt1/tfx/version.BuiltBy=goreleaser

CHANGELOG.md

@@ -9,9 +9,25 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 **Added**
 
-* `tfx workspace run policy` — show policy check and evaluation details for a run, supports both legacy Sentinel policy checks and newer policy evaluations (OPA/Sentinel via task stages)
+* `tfx tui` — new interactive full-screen TUI browser for HCP Terraform and TFE; navigate organizations → projects → workspaces → runs / variables / configuration versions / state versions using keyboard shortcuts
+* `tfx tui` — detail views for organizations, projects, workspaces, runs, variables, configuration versions, and state versions
+* `tfx tui` — state version JSON viewer with syntax highlighting and line numbers (`o` from state version detail)
+* `tfx tui` — configuration version archive browser: download and browse files inside a config version tarball, with a file content viewer (`x` from config version detail)
+* `tfx tui` — Live API Inspector panel (`l` key): collapsible right-side panel that captures every TFE API call in real-time, showing method, path, HTTP status, and duration; press Enter on a call to see the full request and pretty-printed, syntax-highlighted response body; supports `/` text filter and `Tab` focus switching
+* `tfx tui` — Instance Info modal (`i` key): centered popup overlaid on the current view showing application name, hostname, API version, TFE version, and live health check status (`/_health_check`) with color-coded UP/DOWN indicators
+* `tfx workspace run policy` — show policy check and evaluation details for a run; supports both legacy Sentinel policy checks and newer policy evaluations (OPA/Sentinel via task stages)
 * `--logs` flag for `tfx workspace run policy` — include raw policy output (Sentinel logs and OPA `output.print`)
 
+**Fixed**
+
+* `tfx tui` — CLI hint bar now shows correct command syntax for all detail views (configuration-version, state-version, variable flags)
+* `tfx tui` — multi-line variable values no longer break table layout; collapsed to `↵` in the list view and expanded row-per-line in the detail view
+* `tfx tui` — variable list column order changed to KEY | CATEGORY | SENSITIVE | VALUE
+
+**Changed**
+
+* Documentation site migrated to Starlight
+
 ## [v0.2.1] - 2026-03-01
 
 **Added**