@pellux/goodvibes-tui 1.9.1 → 1.10.0

package/src/input/commands/recall-bundle.ts

@@ -4,11 +4,11 @@ import type { CommandContext } from '../command-registry.ts';
 import type { MemoryBundle, MemorySearchFilter } from '@pellux/goodvibes-sdk/platform/state';
 import { VALID_CLASSES, VALID_SCOPES, isValidClass, isValidScope, resolveBundlePath } from './recall-shared.ts';
 import { requireShellPaths } from './runtime-services.ts';
-import { getMemoryApi } from './recall-query.ts';
+import { getMemorySpine } from './recall-query.ts';
 import { summarizeError } from '@pellux/goodvibes-sdk/platform/utils';
 
-export function handleRecallExport(args: string[], context: CommandContext): void {
-  const memory = getMemoryApi(context);
+export async function handleRecallExport(args: string[], context: CommandContext): Promise<void> {
+  const memory = getMemorySpine(context);
   if (!memory) {
     return;
   }
@@ -40,7 +40,7 @@ export function handleRecallExport(args: string[], context: CommandContext): voi
     filter.cls = cls;
   }
 
-  const bundle = memory.exportBundle(filter);
+  const bundle = await memory.exportBundle(filter);
   const targetPath = resolveBundlePath(pathArg, requireShellPaths(context));
   mkdirSync(dirname(targetPath), { recursive: true });
   writeFileSync(targetPath, JSON.stringify(bundle, null, 2) + '\n', 'utf-8');
@@ -48,7 +48,7 @@ export function handleRecallExport(args: string[], context: CommandContext): voi
 }
 
 export async function handleRecallImport(args: string[], context: CommandContext): Promise<void> {
-  const memory = getMemoryApi(context);
+  const memory = getMemorySpine(context);
   if (!memory) {
     return;
   }
@@ -84,8 +84,8 @@ function inspectBundle(bundle: MemoryBundle): string {
   ].join('\n');
 }
 
-export function handleRecallHandoffExport(args: string[], context: CommandContext): void {
-  const memory = getMemoryApi(context);
+export async function handleRecallHandoffExport(args: string[], context: CommandContext): Promise<void> {
+  const memory = getMemorySpine(context);
   if (!memory) {
     return;
   }
@@ -100,7 +100,7 @@ export function handleRecallHandoffExport(args: string[], context: CommandContex
     context.print(`[recall] Unknown scope "${scopeRaw ?? ''}". Valid: ${VALID_SCOPES.join(', ')}`);
     return;
   }
-  const bundle = memory.exportBundle({ scope: scopeRaw });
+  const bundle = await memory.exportBundle({ scope: scopeRaw });
   const targetPath = resolveBundlePath(pathArg, requireShellPaths(context));
   mkdirSync(dirname(targetPath), { recursive: true });
   writeFileSync(targetPath, JSON.stringify(bundle, null, 2) + '\n', 'utf-8');

package/src/input/commands/recall-capture.ts

@@ -7,10 +7,10 @@ import {
   buildPolicyPreflightMemoryAddOptions,
 } from '@pellux/goodvibes-sdk/platform/state';
 import { VALID_CLASSES, VALID_SCOPES, isValidClass, isValidScope } from './recall-shared.ts';
-import { getMemoryApi } from './recall-query.ts';
+import { getMemorySpine } from './recall-query.ts';
 
 export async function handleRecallAdd(args: string[], context: CommandContext): Promise<void> {
-  const memory = getMemoryApi(context);
+  const memory = getMemorySpine(context);
   if (!memory) {
     return;
   }
@@ -70,7 +70,7 @@ export async function handleRecallAdd(args: string[], context: CommandContext):
 }
 
 export async function handleRecallCapture(args: string[], context: CommandContext): Promise<void> {
-  const memory = getMemoryApi(context);
+  const memory = getMemorySpine(context);
   const pluginManager = context.extensions.pluginManager;
   if (!memory) {
     return;

package/src/input/commands/recall-query.ts

@@ -1,8 +1,19 @@
 import type { CommandContext } from '../command-registry.ts';
 import type { MemoryApi } from '@pellux/goodvibes-sdk/platform/knowledge';
+import type { MemorySpineClient } from '@pellux/goodvibes-sdk/platform/runtime/memory-spine';
 import type { MemorySearchFilter } from '@pellux/goodvibes-sdk/platform/state';
 import { VALID_CLASSES, VALID_SCOPES, isValidClass, isValidScope } from './recall-shared.ts';
 
+/**
+ * The local, host-only `MemoryApi` — kept for `/recall explain` and `/recall
+ * vector` only. Both are ruled explicitly out of the wire catalog in
+ * docs/decisions/2026-07-06-memory-wire-full-detach.md (SDK repo): `explain`
+ * is a client-side projection over whatever read surface is active, not a
+ * store operation, and vector-index rebuild is host/admin maintenance a wire
+ * client does not own. Every other `/recall` subcommand reads/writes through
+ * {@link getMemorySpine} instead, so it detaches fully from the local store
+ * file when a daemon is adopted.
+ */
 export function getMemoryApi(context: CommandContext): MemoryApi | null {
   const memoryApi = context.clients?.knowledgeApi?.memory;
   if (!memoryApi) {
@@ -12,8 +23,23 @@ export function getMemoryApi(context: CommandContext): MemoryApi | null {
   return memoryApi;
 }
 
-export function handleRecallSearch(args: string[], context: CommandContext): void {
-  const memory = getMemoryApi(context);
+/**
+ * The cross-surface memory spine client — routes local when offline/embedded,
+ * over the wire when a daemon has been adopted, never both. `/recall`'s
+ * browse/link/queue/export/import subcommands use this so they never read a
+ * divergent local copy while a daemon owns the canonical store.
+ */
+export function getMemorySpine(context: CommandContext): MemorySpineClient | null {
+  const memorySpine = context.clients?.memorySpine;
+  if (!memorySpine) {
+    context.print('[recall] Memory spine is not available in this runtime.');
+    return null;
+  }
+  return memorySpine;
+}
+
+export async function handleRecallSearch(args: string[], context: CommandContext): Promise<void> {
+  const memory = getMemorySpine(context);
   if (!memory) {
     return;
   }
@@ -54,8 +80,8 @@ export function handleRecallSearch(args: string[], context: CommandContext): voi
   if (queryTokens.length) filter.query = queryTokens.join(' ');
   if (semantic) filter.semantic = true;
 
-  const semanticResults = semantic ? memory.searchSemantic(filter) : [];
-  const results = semantic ? semanticResults.map((entry) => entry.record) : memory.search(filter);
+  const semanticResults = semantic ? await memory.searchSemantic(filter) : [];
+  const results = semantic ? semanticResults.map((entry) => entry.record) : await memory.list(filter);
   if (!results.length) {
     context.print('[recall] No records found.');
     return;
@@ -110,8 +136,8 @@ function formatVectorStats(
   ].join('\n');
 }
 
-export function handleRecallGet(args: string[], context: CommandContext): void {
-  const memory = getMemoryApi(context);
+export async function handleRecallGet(args: string[], context: CommandContext): Promise<void> {
+  const memory = getMemorySpine(context);
   if (!memory) {
     return;
   }
@@ -120,7 +146,7 @@ export function handleRecallGet(args: string[], context: CommandContext): void {
     context.print('[recall] Usage: /recall get <id>');
     return;
   }
-  const record = memory.get(id);
+  const record = await memory.get(id);
   if (!record) {
     context.print(`[recall] Record not found: ${id}`);
     return;
@@ -142,7 +168,7 @@ export function handleRecallGet(args: string[], context: CommandContext): void {
     }
   }
 
-  const links = memory.linksFor(id);
+  const links = await memory.linksFor(id);
   if (links.length) {
     context.print('  Links:');
     for (const link of links) {
@@ -154,7 +180,7 @@ export function handleRecallGet(args: string[], context: CommandContext): void {
 }
 
 export async function handleRecallLink(args: string[], context: CommandContext): Promise<void> {
-  const memory = getMemoryApi(context);
+  const memory = getMemorySpine(context);
   if (!memory) {
     return;
   }
@@ -171,8 +197,8 @@ export async function handleRecallLink(args: string[], context: CommandContext):
   context.print(`[recall] Linked: ${fromId} -> ${toId} [${relation}]`);
 }
 
-export function handleRecallRemove(args: string[], context: CommandContext): void {
-  const memory = getMemoryApi(context);
+export async function handleRecallRemove(args: string[], context: CommandContext): Promise<void> {
+  const memory = getMemorySpine(context);
   if (!memory) {
     return;
   }
@@ -181,7 +207,7 @@ export function handleRecallRemove(args: string[], context: CommandContext): voi
     context.print('[recall] Usage: /recall remove <id>');
     return;
   }
-  const removed = memory.delete(id);
+  const removed = await memory.delete(id);
   if (!removed) {
     context.print(`[recall] Record not found: ${id}`);
     return;
@@ -189,8 +215,8 @@ export function handleRecallRemove(args: string[], context: CommandContext): voi
   context.print(`[recall] Deleted: ${id}`);
 }
 
-export function handleRecallList(args: string[], context: CommandContext): void {
-  const memory = getMemoryApi(context);
+export async function handleRecallList(args: string[], context: CommandContext): Promise<void> {
+  const memory = getMemorySpine(context);
   if (!memory) {
     return;
   }
@@ -207,7 +233,7 @@ export function handleRecallList(args: string[], context: CommandContext): void
     filter.scope = scope;
   }
 
-  const records = memory.search(filter);
+  const records = await memory.list(filter);
   if (!records.length) {
     context.print('[recall] No records.');
     return;

package/src/input/commands/recall-review.ts

@@ -1,10 +1,10 @@
 import type { CommandContext } from '../command-registry.ts';
 import { VALID_REVIEW_STATES, VALID_SCOPES, isValidReviewState, isValidScope } from './recall-shared.ts';
-import { getMemoryApi } from './recall-query.ts';
+import { getMemoryApi, getMemorySpine } from './recall-query.ts';
 import { buildMainSessionTurnInjectionsText, buildTurnInjectionsText } from '../../renderer/turn-injection.ts';
 
-export function handleRecallQueue(args: string[], context: CommandContext): void {
-  const memory = getMemoryApi(context);
+export async function handleRecallQueue(args: string[], context: CommandContext): Promise<void> {
+  const memory = getMemorySpine(context);
   if (!memory) {
     return;
   }
@@ -29,7 +29,7 @@ export function handleRecallQueue(args: string[], context: CommandContext): void
   // When a scope filter is requested, fetch a larger pool then slice to the
   // requested limit so scope-sparse queues still return meaningful results.
   const fetchLimit = scopeFilter ? 1000 : limit;
-  const rawQueue = memory.reviewQueue(fetchLimit);
+  const rawQueue = await memory.reviewQueue(fetchLimit);
   const queue = scopeFilter
     ? rawQueue.filter((record) => record.scope === scopeFilter).slice(0, limit)
     : rawQueue;
@@ -45,8 +45,8 @@ export function handleRecallQueue(args: string[], context: CommandContext): void
   }
 }
 
-export function handleRecallReview(args: string[], context: CommandContext): void {
-  const memory = getMemoryApi(context);
+export async function handleRecallReview(args: string[], context: CommandContext): Promise<void> {
+  const memory = getMemorySpine(context);
   if (!memory) {
     return;
   }
@@ -64,7 +64,7 @@ export function handleRecallReview(args: string[], context: CommandContext): voi
   const reviewedBy = byIdx !== -1 ? rest[byIdx + 1] : 'operator';
   const staleReason = reasonIdx !== -1 ? rest.slice(reasonIdx + 1).join(' ') : undefined;
 
-  const record = memory.review(id, {
+  const record = await memory.updateReview(id, {
     state: stateRaw,
     confidence: Number.isFinite(confidence) ? confidence : undefined,
     reviewedBy,
@@ -104,9 +104,9 @@ export function handleRecallExplain(args: string[], context: CommandContext): vo
 }
 
 /**
- * W5.2 (wo803) — per-turn passive knowledge injection inspectability.
+ * Per-turn passive knowledge injection inspectability.
  *
- * With an explicit agent id, reads `AgentRecord.turnInjections` (Wave-5 wo801)
+ * With an explicit agent id, reads `AgentRecord.turnInjections`
  * via `context.ops.agentManager.exportState()` — the CommandContext-exposed
  * `ShellAgentManagerService` doesn't have a `getStatus`/`list` pair, but
  * `exportState()` returns the same full `AgentRecord[]` (it's what
@@ -137,8 +137,8 @@ export function handleRecallInjections(args: string[], context: CommandContext):
   context.print(buildTurnInjectionsText(agentId, record.turnInjections ?? []));
 }
 
-export function handleRecallPromote(args: string[], context: CommandContext): void {
-  const memory = getMemoryApi(context);
+export async function handleRecallPromote(args: string[], context: CommandContext): Promise<void> {
+  const memory = getMemorySpine(context);
   if (!memory) {
     return;
   }
@@ -148,7 +148,7 @@ export function handleRecallPromote(args: string[], context: CommandContext): vo
     context.print(`[recall] Usage: /recall promote <id> <${VALID_SCOPES.join('|')}>`);
     return;
   }
-  const record = memory.update(id, { scope });
+  const record = await memory.update(id, { scope });
   if (!record) {
     context.print(`[recall] Record not found: ${id}`);
     return;

package/src/input/commands/session-content.ts

@@ -384,7 +384,7 @@ export function registerSessionContentCommands(registry: CommandRegistry): void
     },
   });
 
-  // W6-C3 (Wave 6 core-verb pass, MEMORY fragmentation — worst-class
+  // From the core-verb naming pass (MEMORY fragmentation — worst-class
   // collision #2): this command used to be named /memory, colliding with
   // the agent's /memory (an alias that forwards to /recall, the durable
   // cross-session MemoryStore) — same command name, two unrelated features.

package/src/input/feed-context-factory.ts

@@ -1,7 +1,7 @@
 /**
  * feed-context-factory.ts — Construction and mutable-field sync for InputFeedContext.
  *
- * Extracted from handler.ts (Wave 4α review, 0.18.23) to keep handler.ts under the
+ * Extracted from handler.ts (review follow-up, 0.18.23) to keep handler.ts under the
  * 800-line architecture cap.
  *
  * Two exported functions:

package/src/input/handler-content-actions.ts

@@ -447,8 +447,8 @@ export function handleCtrlC(
   } catch {
     // Non-fatal to the exit chord; the quit-window bookkeeping still runs.
   }
-  // A press that silenced LIVE speech is consumed by that job (batch replay
-  // D5) — symmetric with the prompt-clearing press above. The quit chord
+  // A press that silenced LIVE speech is consumed by that job (an earlier replay
+  // fix) — symmetric with the prompt-clearing press above. The quit chord
   // ("Ctrl+C x2") starts from a quiet state; turn-aborts still count toward
   // the double-press.
   if (stoppedSpeech) return;

package/src/input/handler-feed-routes.ts

@@ -189,7 +189,7 @@ export function handlePanelFocusToken(state: PanelFocusRouteState, token: InputT
 export type IndicatorFocusRouteState = {
   indicatorFocused: boolean;
   modalOpened: (name: string) => void;
-  /** W2.2: the footer process indicator's [Enter] opens the Fleet panel (F2 also opens the Fleet panel; the retired process modal was removed in W6.2). */
+  /** The footer process indicator's [Enter] opens the Fleet panel (F2 also opens it; the process modal was retired). */
   openFleetPanel: () => void;
   requestRender: () => void;
 };
@@ -337,7 +337,7 @@ export type KeyRouteState = {
   commandRegistry?: CommandRegistry | null;
   autocomplete: AutocompleteEngine | null;
   blockActionsMenu: { open: (block: BlockMeta) => void };
-  /** W6.2 e: F2 opens+focuses the Fleet panel (which subsumes the retired process modal). */
+  /** F2 opens+focuses the Fleet panel (which subsumes the retired process modal). */
   openFleetPanel: () => void;
   modalOpened: (name: string) => void;
   saveUndoState: () => void;

package/src/input/handler-feed.ts

@@ -186,7 +186,7 @@ export function feedInputTokens(context: InputFeedContext, tokens: readonly Inpu
   // focus to it. panelManager.open() only makes the panel active — focus is a
   // separate axis (see PanelManager.focusPanels()/getFocusTarget()); without the
   // focusPanels() call, j/k/i/K land silently in the composer until Tab. Used by
-  // the footer indicator's [Enter] and by F2 (W6.2 e: F2 and the footer
+  // the footer indicator's [Enter] and by F2 (F2 and the footer
   // indicator both subsume the retired process modal). Mirrors the Ctrl+P
   // panel-picker launcher (ui-openers.ts openPanelPicker).
   const openFleetPanel = (): void => {

package/src/input/handler-onboarding-daemon-adopt.ts

@@ -1,5 +1,5 @@
 /**
- * F1 (One-Platform Wave 2 friction fix): the onboarding wizard's "Connect to
+ * Friction fix: the onboarding wizard's "Connect to
  * this daemon now" action, wired from the Network step's `network.daemon-source`
  * = 'adopt' fields. Extracted from handler-onboarding.ts to keep that file
  * under the architecture line cap.
@@ -88,8 +88,8 @@ export async function handleConnectExistingDaemonForHandler(handler: InputHandle
 }
 
 /**
- * W4-D1: the guided UX entry point for migrating a legacy
- * `goodvibes-daemon.service` unit (Wave 3 shipped detect+disclose only; this
+ * The guided UX entry point for migrating a legacy
+ * `goodvibes-daemon.service` unit (an earlier release shipped detect+disclose only; this
  * closes that inheritance). This is a thin wrapper over
  * `detectLegacyUnit` + `runLegacyDaemonMigration`
  * (`../runtime/legacy-daemon-migration.ts`) — the actual migration mechanics

package/src/input/handler-picker-routes.ts

@@ -22,7 +22,7 @@ export function handleModelPickerToken(state: ModelPickerRouteState, token: Inpu
 
   if (token.type === 'key') {
     if (token.logicalName === 'escape') {
-      // W3-T2: search now starts focused by default (see
+      // Search now starts focused by default (see
       // ModelPickerModal.openAllModels() doc comment). Escape with an empty
       // query used to only blurSearch() here, leaving the picker open and
       // requiring a SECOND Escape to actually close it — confusing on a
@@ -133,7 +133,7 @@ export function handleModelPickerToken(state: ModelPickerRouteState, token: Inpu
         state.modelPicker.focusSearch();
       } else if (state.modelPicker.searchFocused) {
         // Symmetric with 'down' (below): search now starts focused by default
-        // (W3-T2), so 'up' must have a way out of it too, or it would be a
+        // so 'up' must have a way out of it too, or it would be a
         // silent no-op the very first time a user reaches for the list.
         state.modelPicker.blurSearch();
       } else {

package/src/input/handler-shortcuts.ts

@@ -121,7 +121,7 @@ export function handleGlobalShortcutToken(
     case 'panel-close': {
       const pm = state.panelManager;
       const active = pm.getActivePanel();
-      // Wave-3: give the active panel a chance to consume Ctrl+X for an
+      // Give the active panel a chance to consume Ctrl+X for an
       // in-panel action (FleetPanel session-tab detach) before it closes the
       // panel outright — see Panel.interceptPanelClose's doc comment.
       if (active?.interceptPanelClose?.()) {

package/src/input/model-picker.ts

@@ -264,7 +264,7 @@ export class ModelPickerModal {
   /**
    * Open showing all models — entry point for /model.
    *
-   * W3-T2: search starts FOCUSED. Live tmux repro (cc-w3-t2) showed the actual
+   * Search starts FOCUSED. A live tmux repro showed the actual
    * friction wasn't the filter itself (it already works — fuzzy multi-word
    * substring over id/displayName/provider) but that with search unfocused by
    * default, typing a search term went character-by-character into single-key
@@ -295,7 +295,7 @@ export class ModelPickerModal {
     this.scrollOffset = 0;
   }
 
-  /** Open showing providers first — entry point for /provider. W3-T2: search starts focused — see openAllModels(). */
+  /** Open showing providers first — entry point for /provider. Search starts focused — see openAllModels(). */
   openProviders(providers: string[], currentProvider: string): void {
     this.previousMode = null;
     this.providers = providers;

package/src/input/onboarding/onboarding-wizard-apply.ts

@@ -86,13 +86,13 @@ export function buildOnboardingApplyRequest(controller: OnboardingWizardControll
     setConfig('service.autostart', hasServers);
     setConfig('service.restartOnFailure', true);
     // One-Platform daemon-by-default (SDK docs/decisions/2026-07-05-daemon-by-default.md):
-    // the loopback-only cross-surface session daemon is safe-by-design (Wave 1:
-    // loopback bind, auth-gated, rate-limited) and runs regardless of whether
+    // the loopback-only cross-surface session daemon is safe-by-design
+    // (loopback bind, auth-gated, rate-limited) and runs regardless of whether
     // browser/LAN/webhook/external-app capabilities are selected here — it is no
     // longer bundled with those network-exposing surfaces, so onboarding leaves
     // daemon.enabled untouched and lets the SDK's own default-true (or an existing
     // explicit user override) govern. (The deprecated danger.daemon alias this
-    // comment used to also name was removed in Wave 6.)
+    // comment used to also name was later removed.)
     setConfig('controlPlane.enabled', hasServers);
     setConfig('danger.httpListener', httpListener);
     setConfig('web.enabled', browserAccess);

package/src/input/onboarding/onboarding-wizard-network-adopt.ts

@@ -1,5 +1,5 @@
 /**
- * F1 (One-Platform Wave 2 friction fix): the Network step's daemon-source choice
+ * Friction fix: the Network step's daemon-source choice
  * — start a new daemon owned by this TUI (default) vs connect to one that is
  * already running elsewhere with a known token. Extracted from
  * onboarding-wizard-steps.ts to keep that file under the architecture line cap.
@@ -78,7 +78,7 @@ export function pushDaemonAdoptionFields(
 }
 
 /**
- * W4-D1: the guided, visible entry point for migrating a detected legacy
+ * The guided, visible entry point for migrating a detected legacy
  * `goodvibes-daemon.service` unit — closes the fast-follow-up flagged when
  * `handleMigrateLegacyDaemonServiceForHandler` (handler-onboarding-daemon-adopt.ts)
  * shipped fully built but not wired to any onboarding control. Independent of
@@ -107,7 +107,7 @@ export function pushLegacyDaemonMigrationFields(
     kind: 'status',
     id: 'network.migrate-legacy-daemon-detected',
     label: 'Legacy daemon service detected',
-    // F2 follow-up: name the unit this host actually resolves (carried on the
+    // Follow-up: name the unit this host actually resolves (carried on the
     // snapshot from `resolveConfiguredServiceName` at collection time) — the
     // MANAGED_SERVICE_NAME fallback only covers snapshots built without it.
     hint: legacyUnitNote(legacy, legacy.trackedServiceName ?? MANAGED_SERVICE_NAME),

package/src/input/onboarding/onboarding-wizard-steps.ts

@@ -533,7 +533,7 @@ export function buildNetworkStep(controller: OnboardingWizardControllerLike): On
       },
     ];
 
-    // F1: recognize an adoptable already-running daemon (see onboarding-wizard-network-adopt.ts).
+    // Recognize an adoptable already-running daemon (see onboarding-wizard-network-adopt.ts).
     const daemonSource = getDaemonSource(controller);
     pushDaemonAdoptionFields(fields, controller, daemonSource, bindSettings);
     pushLegacyDaemonMigrationFields(fields, controller);

package/src/input/session-picker-modal.ts

@@ -6,7 +6,7 @@
  * control-plane session, see below), tracks selected index, and handles
  * load/delete actions.
  *
- * W3-T2 (union-sessions surface): additionally surfaces the cross-surface
+ * Union-sessions surface: additionally surfaces the cross-surface
  * session union from `sessionBroker` (a SessionReadFacade — normally
  * `uiServices.sessions.sessionBroker`, the SessionUnionCache) so a user can
  * SEE what sessions are live/closed across every surface sharing this

package/src/input/settings-modal-data.ts

@@ -15,6 +15,7 @@ import { buildSubscriptionEntries } from './settings-modal-subscriptions.ts';
 import type { SubscriptionManager } from '@pellux/goodvibes-sdk/platform/config';
 import type { ServiceInspectionQuery } from '../runtime/ui-service-queries.ts';
 import { CODE_INDEX_ENABLED_CONFIG_KEY } from '../runtime/code-index-services.ts';
+import { BUDGET_ALERT_USD_CONFIG_KEY, BUDGET_ALERT_USD_DEFAULT, readBudgetAlertUsd } from '../export/cost-utils.ts';
 import {
   THEME_MODE_CONFIG_KEY,
   THEME_MODE_VALUES,
@@ -146,6 +147,18 @@ export function buildSettingGroups(
     behaviorEntries.push(buildNotifyAfterSecondsSyntheticEntry(configManager));
   }
 
+  // Inject the synthetic behavior.budgetAlertUsd entry into the behavior
+  // category. This key is TUI-local (not in the SDK ConfigKey union), which
+  // previously left it with no schema-driven inspection surface at all: it
+  // never appeared in /config, and /settings-sync show rejects any key not
+  // in CONFIG_KEYS. The Cost panel's 'b' key and /cost budget <usd> remain
+  // the primary way to change it; this entry makes the current effective
+  // value (and whether it's still the "no budget configured" default)
+  // visible from /config behavior too, same rationale as notifyAfterSeconds.
+  if (behaviorEntries && !behaviorEntries.some((e) => e.setting.key === (BUDGET_ALERT_USD_CONFIG_KEY as ConfigKey))) {
+    behaviorEntries.push(buildBudgetAlertUsdSyntheticEntry(configManager));
+  }
+
   // Inject the W2.3 alert-class toggles + master focus gate. TUI-local
   // synthetic settings, same rationale as notifyAfterSeconds above.
   if (behaviorEntries) {
@@ -156,7 +169,7 @@ export function buildSettingGroups(
     }
   }
 
-  // Wave 5 (wo804): inject the storage.codeIndexEnabled toggle into the
+  // Inject the storage.codeIndexEnabled toggle into the
   // storage category. TUI-local synthetic setting (not in the SDK ConfigKey
   // union — see code-index-services.ts), same rationale as
   // notifyAfterSeconds above: opt-in, default off, states its own bounds.
@@ -287,6 +300,47 @@ export function buildNotifyAfterSecondsSyntheticEntry(configManager: Pick<Config
   };
 }
 
+// ---------------------------------------------------------------------------
+// behavior.budgetAlertUsd synthetic setting
+// ---------------------------------------------------------------------------
+
+/**
+ * The synthetic ConfigSetting descriptor for behavior.budgetAlertUsd.
+ *
+ * This key is TUI-local and is not yet in the SDK ConfigKey union — it never
+ * appeared in CONFIG_SCHEMA, so it was invisible to every schema-driven
+ * inspection surface (/config, /settings-sync show <key>) even though the
+ * value round-trips correctly through configManager.get/set. The descriptor
+ * is injected into the behavior settings group so /config behavior shows the
+ * real current threshold, not just the behavior.notifyOnBudgetBreach gate.
+ *
+ * 0 = no budget configured (disabled). Any positive number = the USD
+ * threshold. Default matches BUDGET_ALERT_USD_DEFAULT in cost-utils.ts, the
+ * single source of truth CostTrackerPanel and budget-breach-notifier.ts share.
+ */
+export const BUDGET_ALERT_USD_SYNTHETIC_SETTING: ConfigSetting = {
+  key: BUDGET_ALERT_USD_CONFIG_KEY as ConfigKey,
+  type: 'number',
+  default: BUDGET_ALERT_USD_DEFAULT,
+  description: 'Session cost-budget alert threshold in USD (0 = no budget configured). Set via the Cost panel\'s "b" key or /cost budget <usd>; this entry only displays the current effective value.',
+};
+
+/**
+ * Build the synthetic SettingEntry for behavior.budgetAlertUsd.
+ *
+ * Delegates parsing/fallback to readBudgetAlertUsd (cost-utils.ts) so this
+ * display entry can never disagree with what CostTrackerPanel and the
+ * background budget-breach notifier actually read.
+ */
+export function buildBudgetAlertUsdSyntheticEntry(configManager: Pick<ConfigManager, 'get'>): SettingEntry {
+  const currentValue = readBudgetAlertUsd((key) => configManager.get(key as ConfigKey));
+  return {
+    setting: BUDGET_ALERT_USD_SYNTHETIC_SETTING,
+    currentValue,
+    isDefault: currentValue === BUDGET_ALERT_USD_DEFAULT,
+  };
+}
+
 // ---------------------------------------------------------------------------
 // W2.3 alert-class synthetic settings — behavior.notifyOn* + notifyOnlyWhenUnfocused
 // ---------------------------------------------------------------------------
@@ -342,7 +396,7 @@ export function buildNotifyAlertSyntheticEntries(configManager: Pick<ConfigManag
 }
 
 // ---------------------------------------------------------------------------
-// Wave 5 (wo804) — storage.codeIndexEnabled synthetic setting
+// storage.codeIndexEnabled synthetic setting
 // ---------------------------------------------------------------------------
 
 /**

package/src/main.ts

@@ -32,7 +32,7 @@ import { logger } from '@pellux/goodvibes-sdk/platform/utils';
 import { registerBuiltinPanels } from './panels/builtin-panels.ts';
 import { bootstrapRuntime } from './runtime/bootstrap.ts';
 import type { BootstrapContext } from './runtime/bootstrap.ts';
-import { buildSharedOrchestratorCoreServices } from './runtime/orchestrator-core-services.ts';
+import { buildSharedOrchestratorCoreServices, refreshMemoryRecallSnapshot } from './runtime/orchestrator-core-services.ts';
 import type { HITLMode } from '@pellux/goodvibes-sdk/platform/state';
 import { readLastSessionPointer, writeRecoveryFile } from '@/runtime/index.ts';
 import { handleBlockingShellInput, type PendingPermissionState } from './shell/blocking-input.ts';
@@ -202,7 +202,7 @@ async function main() {
 
   const unsubs: Array<() => void> = [];
   let recoveryInterval: ReturnType<typeof setInterval> | null = null;
-  let stopSpokenOutputForExit: (() => void) | null = null;
+  let stopSpokenOutputForExit: (() => Promise<void>) | null = null;
   let recoveryPending = false;
   // Which file the current recovery prompt should load/delete from (see recovery-input-helpers.ts).
   let recoverySource: 'live' | 'preserved' = 'live';
@@ -240,7 +240,8 @@ async function main() {
     events: uiServices.events,
     notify: (message) => { systemMessageRouter.high(message); render(); },
   });
-  stopSpokenOutputForExit = () => spokenTurns.stop();
+  // Exit-path stop: bounded drain of the audio already playing (see stopForExit).
+  stopSpokenOutputForExit = () => spokenTurns.stopForExit();
   unsubs.push(...spokenTurns.unsubs);
   unsubs.push(attachSpokenTurnModelRouting({
     orchestrator,
@@ -287,6 +288,7 @@ async function main() {
         // Snapshot pre-submission state for failover retryTurn; also clears visited set.
         retryCtx = { count: conversation.getMessageCount(), text: processedText, content, opts: inputOptions };
         streamResult.clearFailoverVisited();
+        await refreshMemoryRecallSnapshot(ctx.services); // pre-turn recall-snapshot refresh (SDK 1.2.0 full detach)
         orchestrator.handleUserInput(processedText, content, inputOptions).catch((err: unknown) => {
           logger.debug('handleUserInput safety catch (already handled by runTurn)', { error: summarizeError(err) });
         });
@@ -497,7 +499,7 @@ async function main() {
       lastInputTokens: orchestrator.lastInputTokens,
       commandArgsHint,
       hitlMode: modeManager.getHITLMode(),
-      // S3d: cross-surface spine posture segment (adopted-daemon mode only).
+      // Cross-surface spine posture segment (adopted-daemon mode only).
       sessionSpineStatus: (() => { const s = uiServices.platform.externalServices?.inspect(); return s?.sessionSpineActive && s.sessionSpineStatus && s.sessionSpineStatus !== 'unknown' ? s.sessionSpineStatus : undefined; })(), runningAgentCount, runningProcessCount,
       // Composer must not read as focused while the panel/process indicator owns keyboard focus.
       promptFocused: !input.panelFocused && !input.indicatorFocused,
@@ -646,7 +648,7 @@ async function main() {
   const terminalOutputGuard = installTuiTerminalOutputGuard({ stdout, stderr: process.stderr, onCapture: (total) => { commandContext.session.runtime.terminalWritesIntercepted = total; render(); } });
 
   setRenderRequest(renderNow); // bootstrap's 16ms coalescer calls the composite directly
-  setPanelFrameRequester(render); // live panels repaint when idle (Wave-6 replay: fleet sat stale until keypress)
+  setPanelFrameRequester(render); // live panels repaint when idle (a replay finding: fleet sat stale until keypress)
   orchestratorRefs.requestRender = render;
   commandContext.renderRequest = render;
   wireShellUiOpeners({
@@ -699,7 +701,7 @@ async function main() {
     const { count, text, content: rContent, opts: rOpts } = retryCtx;
     // Roll back to pre-submission count, then re-submit. SDK gap — no retry-in-place (see handoff).
     conversation.removeMessagesAfter(count);
-    orchestrator.handleUserInput(text, rContent, rOpts).catch((e: unknown) => logger.debug('retryTurn', { error: summarizeError(e) }));
+    void refreshMemoryRecallSnapshot(ctx.services).then(() => orchestrator.handleUserInput(text, rContent, rOpts)).catch((e: unknown) => logger.debug('retryTurn', { error: summarizeError(e) }));
   };
   const streamResult: WireStreamEventMetricsResult = wireStreamEventMetrics({
     events: uiServices.events, orchestrator, providerRegistry,

package/src/panels/base-panel.ts

@@ -14,7 +14,7 @@ const ERROR_FG = '#ef4444';
  * markDirty() only sets a flag the compositor reads when a frame is ALREADY
  * being composed for another reason (input, streaming) — so a live panel
  * (fleet ticks, registry subscriptions) sat visibly stale while the app was
- * idle until the next keypress (Wave-6 replay finding). The scheduler
+ * idle until the next keypress (a replay finding). The scheduler
  * coalesces same-tick requests, so this stays cheap.
  */
 let panelFrameRequester: (() => void) | null = null;