@pellux/goodvibes-tui 1.7.0 → 1.9.1

package/src/renderer/ui-primitives.ts

@@ -1,134 +1,35 @@
-export const GLYPHS = {
-  frame: {
-    topLeft: '┌',
-    topRight: '┐',
-    bottomLeft: '└',
-    bottomRight: '┘',
-    horizontal: '─',
-    vertical: '│',
-    teeLeft: '├',
-    teeRight: '┤',
-    teeTop: '┬',
-    teeBottom: '┴',
-    cross: '┼',
-  },
-  surface: {
-    top: '▄',
-    bottom: '▀',
-    cursor: '█',
-    altCursor: '▌',
-  },
-  navigation: {
-    selected: '▸',
-    collapsed: '▸',
-    expanded: '▾',
-    up: '↑',
-    down: '↓',
-    moreAbove: '▲',
-    moreBelow: '▼',
-    next: '→',
-    back: '←',
-    pipeSeparator: '│',
-  },
-  status: {
-    success: '✓',
-    failure: '✕',
-    pending: '•',
-    active: '●',
-    idle: '◌',
-    info: '○',
-    warn: '⚠',
-    blocked: '⊘',
-    skipped: '◇',
-    review: '◈',
-    retry: '↻',
-    handoff: '⇢',
-    reference: '↗',
-    partial: '◐',
-    dualPane: '◆',
-    star: '★',
-  },
-  meter: {
-    filled: '█',
-    medium: '▓',
-    light: '▒',
-    empty: '░',
-    spark: ['▁', '▂', '▃', '▄', '▅', '▆', '▇', '█'],
-  },
-} as const;
+// ---------------------------------------------------------------------------
+// ui-primitives.ts — glyph registry + tone-token table.
+//
+// W6-P1: these four tables (GLYPHS, UI_TONES, DIFF_TONES, SPINNER_FRAMES) are
+// no longer minted locally. They are the SDK presentation contract
+// (@pellux/goodvibes-sdk/platform/presentation, landed by W4-S1 and already
+// adopted by the agent in W4-R4), consumed here so the TUI and the agent
+// share ONE source (Mike's move-to-SDK ruling — machinery needed by 2+
+// surfaces => SDK). The TUI was the reference these values were lifted from
+// verbatim, so this swap is byte-identical. See
+// docs/decisions/2026-07-05-presentation-contract-sdk-extraction.md in the SDK.
+//
+// Re-exported under the historical names (GLYPHS, UI_TONES) so every existing
+// importer keeps working with no call-site churn. UI_TONES is the dark-mode
+// tone table (== resolveTones('dark')); light is resolved via theme.ts's
+// activeUiTones() / resolveUiTones(), which composes the mode dimension over
+// this dark constant unchanged.
+// ---------------------------------------------------------------------------
+
+import {
+  GLYPHS,
+  TONE_TOKENS,
+  DIFF_TONES,
+  SPINNER_FRAMES,
+} from '@pellux/goodvibes-sdk/platform/presentation';
+
+export { GLYPHS, DIFF_TONES, SPINNER_FRAMES };
 
 /**
  * UI_TONES — the single chrome/color-token source for src/renderer and
  * src/panels. Concrete (dark-mode) values; resolveUiTones(mode) in theme.ts
- * is the single mode-resolved read path — this object is the 'dark' entry.
- */
-export const UI_TONES = {
-  fg: {
-    primary: '#e2e8f0',
-    secondary: '#cbd5e1',
-    muted: '#94a3b8',
-    dim: '#475569',
-    inverse: '#0f172a',
-    /** Empty-state / placeholder foreground (formerly DEFAULT_PANEL_PALETTE.empty literal). */
-    empty: '#334155',
-  },
-  bg: {
-    base: '#11131a',
-    surface: '#161a22',
-    title: '#0f172a',
-    section: '#18202b',
-    summary: '#1b2430',
-    selected: '#223049',
-    input: '#1e293b',
-    warning: '#2b2116',
-    error: '#2a161b',
-    success: '#14241b',
-    /** Fullscreen/shell footer background. */
-    footer: '#111827',
-  },
-  state: {
-    info: '#38bdf8',
-    good: '#22c55e',
-    warn: '#f59e0b',
-    bad: '#ef4444',
-    blocked: '#f97316',
-    active: '#60a5fa',
-    /** Single canonical reasoning/thinking purple (replaces #9945FF and ad-hoc purples). */
-    reasoning: '#a855f7',
-  },
-  accent: {
-    browser: '#7dd3fc',
-    control: '#22d3ee',
-    inspector: '#c4b5fd',
-    workflow: '#fbbf24',
-    conversation: '#93c5fd',
-    /** Neon brand accent — header/splash/thinking gradient only. */
-    brand: '#00ffff',
-    gradientStart: '#00ffff',
-    gradientEnd: '#d000ff',
-  },
-  /** Canonical border stroke color for fullscreen/panel chrome. */
-  border: '#64748b',
-} as const;
-
-/**
- * Diff surface accent color shared across the three diff-rendering surfaces —
- * the conversation diff view (diff-view.ts), the file diff panel
- * (diff-panel.ts), and the git panel's inline diff (git-panel.ts). Hunk-header
- * blue has no matching UI_TONES.state/accent role, so WO-204 gives it one
- * named token here (value converged on diff-panel.ts's pre-existing hunk
- * color, the only one of the three surfaces that predates this token; add/del
- * on all three surfaces already converge on UI_TONES.state.good/bad).
+ * is the single mode-resolved read path — this object is the 'dark' entry
+ * (== resolveTones('dark') from the SDK presentation contract).
  */
-export const DIFF_TONES = {
-  // add/del carry diff-panel.ts's shipped colors: the diff panel is the only
-  // diff surface users have ever seen (diff-view.ts was unwired from v0.9.6
-  // until WO-204), so its look is the reference — the conversation surface
-  // adopts it, never the other way around.
-  add: '#00ff88',
-  del: '#ff4444',
-  hunk: '#88aaff',
-} as const;
-
-/** Single spinner-frame source — layout.ts and progress.ts both re-export this. */
-export const SPINNER_FRAMES = ['⠋', '⠙', '⠹', '⠸', '⠼', '⠴', '⠦', '⠧', '⠇', '⠏'] as const;
+export const UI_TONES = TONE_TOKENS;

package/src/runtime/bootstrap-command-context.ts

@@ -123,6 +123,8 @@ export type CreateBootstrapCommandContextOptions = {
   hydrateSessionUsage?: () => void;
   workstreamEngine?: import('./workstream-services.ts').WorkstreamCommandService;
   codeIndexStore?: import('@pellux/goodvibes-sdk/platform/state').CodeIndexStore;
+  codeIndexReindexScheduler?: import('@pellux/goodvibes-sdk/platform/state').CodeIndexReindexScheduler;
+  isPassiveCodeInjectionFlagEnabled?: () => boolean;
   getMainSessionTurnInjections?: () => readonly import('../renderer/turn-injection.ts').TurnInjectionEntry[];
 };
 
@@ -184,6 +186,8 @@ export function createBootstrapCommandContext(
     hydrateSessionUsage,
     workstreamEngine,
     codeIndexStore,
+    codeIndexReindexScheduler,
+    isPassiveCodeInjectionFlagEnabled,
     getMainSessionTurnInjections,
     planManager,
     adaptivePlanner,
@@ -244,6 +248,8 @@ export function createBootstrapCommandContext(
     hydrateSessionUsage,
     workstreamEngine,
     codeIndexStore,
+    codeIndexReindexScheduler,
+    isPassiveCodeInjectionFlagEnabled,
     getMainSessionTurnInjections,
   });
   const provider = createBootstrapCommandProviderSection({

package/src/runtime/bootstrap-command-parts.ts

@@ -5,7 +5,7 @@ import type { ConversationManager } from '../core/conversation';
 import type { KnowledgeApi } from '@pellux/goodvibes-sdk/platform/knowledge';
 import type { HookApi } from '@pellux/goodvibes-sdk/platform/hooks';
 import type { McpApi } from '@pellux/goodvibes-sdk/platform/mcp';
-import type { PanelManager } from '../panels/panel-manager.ts';
+import type { PanelManager, PanelDeepLinkTarget } from '../panels/panel-manager.ts';
 import type { ProviderApi } from '@pellux/goodvibes-sdk/platform/providers';
 import type { OpsApi } from '@/runtime/index.ts';
 import type { MutableRuntimeState } from '@/runtime/index.ts';
@@ -118,6 +118,8 @@ export interface BootstrapCommandSectionOptions {
   readonly hydrateSessionUsage?: () => void;
   readonly workstreamEngine?: import('./workstream-services.ts').WorkstreamCommandService;
   readonly codeIndexStore?: CodeIndexStore;
+  readonly codeIndexReindexScheduler?: import('@pellux/goodvibes-sdk/platform/state').CodeIndexReindexScheduler;
+  readonly isPassiveCodeInjectionFlagEnabled?: () => boolean;
   readonly getMainSessionTurnInjections?: () => readonly import('../renderer/turn-injection.ts').TurnInjectionEntry[];
   readonly agentManager?: ShellAgentManagerService;
   readonly modeManager?: ShellModeManagerService;
@@ -190,7 +192,7 @@ export function createBootstrapCommandActions(
     localUserAuthManager,
   } = options;
 
-  const showPanel = (panelId: string, pane?: 'top' | 'bottom') => {
+  const showPanel = (panelId: string, pane?: 'top' | 'bottom', target?: PanelDeepLinkTarget) => {
     // W6.1 (the purge): a MIGRATE-TO-MODAL id resolves to a modal, not a panel.
     // panelManager.open() fires the injected openModal callback and returns a
     // no-op sentinel — so skip panelManager.show() (which would reveal an empty
@@ -198,7 +200,7 @@ export function createBootstrapCommandActions(
     // showPanel-based front-door (openHooksPanel/openSecurityPanel/… and the
     // migrated command runtimes) opening the modal cleanly.
     const redirected = panelManager.getModalRedirect(panelId) !== undefined;
-    panelManager.open(panelId, pane);
+    panelManager.open(panelId, pane, target);
     if (!redirected) panelManager.show();
     requestRender();
   };
@@ -321,7 +323,7 @@ export function createBootstrapCommandActions(
 export function createBootstrapCommandSessionSection(
   options: Pick<
     BootstrapCommandSectionOptions,
-    'conversation' | 'runtime' | 'sessionManager' | 'sessionMemoryStore' | 'sessionLineageTracker' | 'wrfcController' | 'changeTracker' | 'hydrateSessionUsage' | 'workstreamEngine' | 'codeIndexStore' | 'getMainSessionTurnInjections'
+    'conversation' | 'runtime' | 'sessionManager' | 'sessionMemoryStore' | 'sessionLineageTracker' | 'wrfcController' | 'changeTracker' | 'hydrateSessionUsage' | 'workstreamEngine' | 'codeIndexStore' | 'codeIndexReindexScheduler' | 'isPassiveCodeInjectionFlagEnabled' | 'getMainSessionTurnInjections'
   >,
 ): BootstrapCommandSessionSection {
   return {
@@ -335,6 +337,8 @@ export function createBootstrapCommandSessionSection(
     hydrateSessionUsage: options.hydrateSessionUsage,
     workstreamEngine: options.workstreamEngine,
     codeIndexStore: options.codeIndexStore,
+    codeIndexReindexScheduler: options.codeIndexReindexScheduler,
+    isPassiveCodeInjectionFlagEnabled: options.isPassiveCodeInjectionFlagEnabled,
     getMainSessionTurnInjections: options.getMainSessionTurnInjections,
   };
 }

package/src/runtime/bootstrap-core.ts

@@ -27,12 +27,15 @@ import { loadBootstrapSystemPrompt, syncConfiguredServices } from '@/runtime/ind
 import { registerBootstrapHookBridge } from '@/runtime/index.ts';
 import { registerBootstrapRuntimeEvents } from '@/runtime/index.ts';
 import { createRuntimeServices, type RuntimeServices } from './services.ts';
+import { runBootMemoryFold } from './memory-fold.ts';
 import { setPricingSource } from '../export/cost-utils.ts';
 import { createUiRuntimeServices, type UiRuntimeServices } from './ui-services.ts';
 import { join } from 'node:path';
 import { installWrfcAgentToolGuard } from '../tools/wrfc-agent-guard.ts';
 import { createWrfcPersistence, type WrfcPersistence } from './wrfc-persistence.ts';
 import type { SystemMessagePriority } from '../core/system-message-router.ts';
+import { SessionSpineClient, SessionUnionCache, TUI_SPINE_PARTICIPANT } from '@pellux/goodvibes-sdk/platform/runtime/session-spine';
+import { SessionInboundInputPoller, createBootstrapInboundInputPoller } from './session-inbound-inputs.ts';
 
 // ---------------------------------------------------------------------------
 // Pre-router buffer
@@ -114,6 +117,12 @@ export interface BootstrapCoreState {
   readonly requestRender: () => void;
   readonly setRenderRequest: (fn: () => void) => void;
   readonly runtimeSessionIdRef: { value: string };
+  /** Cross-surface identity mirror; permanently dormant for embedded/local-only (docs/decisions/2026-07-06-session-spine-mode-branch-is-permanent.md), activated by bootstrap.ts only for an adopted 'external' daemon. */
+  readonly sessionSpine: SessionSpineClient;
+  /** D3: inbound steer/follow-up delivery; dormant until bootstrap.ts activates it. */
+  readonly sessionInboundInputs: SessionInboundInputPoller;
+  /** Cache-backed read facade; bootstrap.ts drives its mode (embedded/external/local-only) from the same HostServiceMode as the spine above. */
+  readonly sessionUnionCache: SessionUnionCache;
   /**
    * WRFC chain persistence — call `rehydrate()` once after the SystemMessageRouter
    * is wired so interrupted chains from a previous process are surfaced to the operator.
@@ -127,17 +136,8 @@ export type CompanionMessagePayload = Extract<SessionEvent, { type: 'COMPANION_M
 // Operator narration of inbound channel events
 // ---------------------------------------------------------------------------
 
-/**
- * Narrate an inbound channel event to the operator via the SystemMessageRouter.
- *
- * When an external surface (GitHub, Slack, ntfy, etc.) triggers an agent turn,
- * this function produces a human-readable system message so the operator can
- * observe which event caused the turn. Returns null for internal/companion
- * sources that do not need operator narration.
- *
- * @param event - The normalized inbound event descriptor.
- * @returns A narration string, or null if no narration is appropriate.
- */
+/** Narrate an inbound channel event (GitHub, Slack, ntfy, etc.) that triggered an
+ * agent turn, via the SystemMessageRouter — null for internal/companion sources. */
 export function narrateInboundEvent(event: {
   source: string;
   metadata: Readonly<Record<string, unknown>> | undefined;
@@ -293,6 +293,12 @@ export async function initializeBootstrapCore(
     surfaceRegistry,
     watcherRegistry,
   } = services;
+  // Permanently dormant for embedded/local-only (nothing to mirror to); bootstrap.ts activates it only for an adopted 'external' daemon.
+  const sessionSpine = new SessionSpineClient({ participant: TUI_SPINE_PARTICIPANT, recordKind: 'tui' });
+  // Cache-backed read facade over the local broker (passthrough until bootstrap.ts marks it
+  // embedded, or activates the adopted-daemon wire union for 'external').
+  // selfSessionIds keeps local authoritative for our own wire-mirrored session even when local/wire ids diverge (D-TUI-1).
+  const sessionUnionCache = new SessionUnionCache({ local: sharedSessionBroker, selfSessionIds: () => sessionSpine.mirroredSessionIds });
 
   routeBindings.attachRuntime({ runtimeBus, runtimeStore: store });
   surfaceRegistry.attachRuntime(store);
@@ -324,6 +330,7 @@ export async function initializeBootstrapCore(
   const uiServices = createUiRuntimeServices(services, {
     forensicsRegistry,
     getControlPlaneRecentEvents,
+    sessionUnionCache,
   });
 
   const conversation = new ConversationManager(() => {
@@ -401,24 +408,23 @@ export async function initializeBootstrapCore(
     void memoryStore.save();
     memoryStore.close();
   });
+  // W6-C2 (E6): fold this project's legacy per-project TUI memory into the home-scoped canonical store, ONCE, AFTER init(). Idempotent and non-fatal.
+  await runBootMemoryFold(memoryStore, services.memoryEmbeddingRegistry, workingDir, logger);
 
   const renderRequestRef = { value: (): void => {} };
-  // R1: Coalescing render scheduler — collapses N requestRender() calls into 1
-  // and enforces a 16ms minimum interval to cap repaints at ~60fps.
-  //
-  // renderScheduled stays set for the ENTIRE window (until run() executes), so
-  // requestRender() calls that arrive on later event-loop ticks within the same
-  // 16ms window are coalesced into the one already-pending tail render instead
-  // of each queuing their own setTimeout. (The streaming hot path drives its own
-  // direct repaints and does not flow through this scheduler.)
+  // R1: Coalescing render scheduler — collapses N requestRender() calls into 1 and
+  // enforces a 16ms minimum interval to cap repaints at ~60fps. renderScheduled stays
+  // set for the ENTIRE window (until run() executes), so requestRender() calls arriving
+  // on later event-loop ticks within the same 16ms window coalesce into the one
+  // already-pending tail render instead of each queuing their own setTimeout. (The
+  // streaming hot path drives its own direct repaints and skips this scheduler.)
   let renderScheduled = false;
   let lastRenderTime = 0;
   const RENDER_INTERVAL_MS = 16;
-  // run() performs the actual render. It clears renderScheduled FIRST — even if
-  // the render callback throws — otherwise a single render exception would wedge
-  // the entire TUI (no future requestRender() call would schedule anything). The
-  // renderer is expected to surface failures via its own error path; we log at
-  // error so the next requestRender() can still reschedule.
+  // run() performs the actual render. It clears renderScheduled FIRST — even if the
+  // render callback throws — otherwise a single render exception would wedge the entire
+  // TUI (no future requestRender() would schedule anything); we log at error so the
+  // next requestRender() can still reschedule.
   const run = (): void => {
     renderScheduled = false;
     lastRenderTime = Date.now();
@@ -427,6 +433,10 @@ export async function initializeBootstrapCore(
     } catch (err) {
       logger.error('Render threw; next requestRender will reschedule', { error: String(err) });
     }
+    // Debounced spine heartbeat on turn/render activity (no-op while dormant, i.e.
+    // embedded/local-only): a cheap synchronous no-op unless its own internal window has
+    // elapsed (at most one wire call per heartbeatMinIntervalMs) — safe on the hot path.
+    sessionSpine.heartbeat(runtimeSessionIdRef.value);
   };
   const requestRender = (): void => {
     if (renderScheduled) return;
@@ -634,6 +644,11 @@ export async function initializeBootstrapCore(
     },
   ));
 
+  // D3: inbound steer delivery — see createBootstrapInboundInputPoller's doc comment.
+  const sessionInboundInputs = createBootstrapInboundInputPoller({
+    runtimeSessionIdRef, routeOrBuffer, orchestratorHandleUserInputRef, conversation, requestRender,
+  });
+
   providerRegistry.startWatching(runtimeBus);
 
   // W2.3: attach the SAME WebhookNotifier instance that `/notify add|remove|clear`
@@ -724,6 +739,10 @@ export async function initializeBootstrapCore(
       lastSeenAt: Date.now(),
     },
   }).catch((err) => { logger.debug('session broker create session failed at bootstrap', { err }); });
+  // Fire-and-forget spine mirror — a permanent parallel-write posture alongside (never
+  // instead of) the still-authoritative local SharedSessionBroker above. Dormant/queued
+  // until bootstrap.ts's deferred task activates it for an adopted 'external' daemon.
+  sessionSpine.register({ sessionId: runtime.sessionId, project: services.workingDirectory, title: 'Terminal UI session' });
 
   domainDispatch.syncSessionState({
     id: userSessionId,
@@ -774,5 +793,8 @@ export async function initializeBootstrapCore(
     },
     runtimeSessionIdRef,
     wrfcPersistence,
+    sessionSpine,
+    sessionInboundInputs,
+    sessionUnionCache,
   };
 }

package/src/runtime/bootstrap-hook-bridge.ts

@@ -9,6 +9,7 @@ import { HelperModel } from '@pellux/goodvibes-sdk/platform/config';
 import type { ConfigManager } from '@pellux/goodvibes-sdk/platform/config';
 import { formatReturnContextForDisplay, getReturnContextMode, maybeAssistReturnContextSummary } from '@/runtime/index.ts';
 import type { SharedSessionBroker } from '@pellux/goodvibes-sdk/platform/control-plane';
+import type { SessionSpineClient } from '@pellux/goodvibes-sdk/platform/runtime/session-spine';
 import type { SessionManager } from '@pellux/goodvibes-sdk/platform/sessions';
 import type { PanelManager } from '../panels/panel-manager.ts';
 import type { ProviderRegistry } from '@pellux/goodvibes-sdk/platform/providers';
@@ -22,6 +23,10 @@ export interface ResumeSessionOptions {
   readonly requestRender: () => void;
   readonly onSessionIdChanged?: (sessionId: string) => void;
   readonly sharedSessionBroker: Pick<SharedSessionBroker, 'reopenSession'>;
+  /** S3c: fire-and-forget daemon-spine mirror. Reopen (not register) is the
+   * ONLY resume-time verb — see the SDK session-spine client.ts header doc. */
+  readonly sessionSpine: Pick<SessionSpineClient, 'reopen'>;
+  readonly project: string;
   readonly writeLastSessionPointer: (sessionId: string) => void;
   readonly hookDispatcher: HookDispatcher;
   readonly sessionManager: SessionManager;
@@ -75,6 +80,8 @@ export function createResumeSessionHandler(options: ResumeSessionOptions): (sess
       if (meta?.provider) options.runtime.provider = meta.provider;
       options.writeLastSessionPointer(sessionId);
       void options.sharedSessionBroker.reopenSession(sessionId).catch((err) => { logger.debug('session broker reopen session failed', { err }); });
+      // S3c: fire-and-forget spine mirror (reopen:true — the user resume verb).
+      options.sessionSpine.reopen({ sessionId, project: options.project, title: options.conversation.title || meta.title });
       options.conversation.log(`Resumed session: ${sessionId}`, { fg: '135' });
       const reopenedPanels: string[] = [];
       if (meta.returnContext?.openPanels?.length) {

package/src/runtime/bootstrap-shell.ts

@@ -32,6 +32,7 @@ import type { PolicyRuntimeState } from '@/runtime/index.ts';
 import type { TaskManager } from '@/runtime/index.ts';
 import type { UiRuntimeServices } from './ui-services.ts';
 import { summarizeError } from '@pellux/goodvibes-sdk/platform/utils';
+import type { SessionSpineClient } from '@pellux/goodvibes-sdk/platform/runtime/session-spine';
 
 export interface BootstrapShellState {
   readonly commandRegistry: CommandRegistry;
@@ -47,6 +48,8 @@ export interface BootstrapShellOptions {
   readonly runtimeBus: RuntimeEventBus;
   readonly runtimeStore: RuntimeStore;
   readonly services: RuntimeServices;
+  /** S3c: dormant until bootstrap.ts activates it for an adopted 'external' daemon. */
+  readonly sessionSpine: SessionSpineClient;
   readonly conversation: ConversationManager;
   readonly runtime: MutableRuntimeState;
   readonly orchestrator: Orchestrator;
@@ -70,6 +73,7 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
     runtimeBus,
     runtimeStore,
     services,
+    sessionSpine,
     conversation,
     runtime,
     orchestrator,
@@ -103,6 +107,8 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
     requestRender,
     onSessionIdChanged,
     sharedSessionBroker: services.sessionBroker,
+    sessionSpine,
+    project: services.workingDirectory,
     writeLastSessionPointer,
     hookDispatcher: services.hookDispatcher,
     sessionManager: services.sessionManager,
@@ -175,7 +181,8 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
     forensicsRegistry,
     policyRuntimeState,
     approvalBroker: services.approvalBroker,
-    sessionBroker: services.sessionBroker,
+    // S3d: panels read the cross-surface union facade, not the raw local broker.
+    sessionBroker: uiServices.sessions.sessionBroker,
     automationManager: services.automationManager,
     getControlPlaneRecentEvents,
     tokenAuditor: services.tokenAuditor,
@@ -207,6 +214,15 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
       if (kind === 'operational') return ui.operationalMessages;
       return ui.systemMessages;
     },
+    {
+      // Suppress stale WRFC replay re-notifications for chains that can no
+      // longer act — gone (killed/removed → getChain null) or terminal
+      // (passed/failed). (UX-B item 1c.)
+      isChainTerminal: (chainId) => {
+        const chain = services.wrfcController.getChain(chainId);
+        return chain === null || chain.state === 'passed' || chain.state === 'failed';
+      },
+    },
   );
   orchestrator.setSystemMessageRouter(systemMessageRouter);
 
@@ -271,6 +287,8 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
     wrfcController: services.wrfcController,
     workstreamEngine: services.workstreamCommands,
     codeIndexStore: services.codeIndexStore,
+    codeIndexReindexScheduler: services.codeIndexReindexScheduler,
+    isPassiveCodeInjectionFlagEnabled: () => services.featureFlags.isEnabled('agent-passive-code-injection'),
     // Wave 5 (wo805): expose the MAIN session's per-turn passive-injection ring
     // so `/recall injections` (no agent id) renders it — see recall-review.ts.
     getMainSessionTurnInjections: () => orchestrator.getTurnInjections(),