@pellux/goodvibes-tui 1.9.1 → 1.10.0

package/src/panels/builtin/operations.ts

@@ -38,7 +38,7 @@ export function registerOperationsPanels(manager: PanelManager, deps: ResolvedBu
   // process registry constructed once in runtime/services.ts (shared with
   // every other consumer rather than duplicated here; the registry owns its
   // own coalesced tick, so no manual lifecycle-event wiring is needed).
-  // Wave-3 (W3.2): runtimeBus is also passed so the read model can subscribe
+  // runtimeBus is also passed so the read model can subscribe
   // to the honest COMMUNICATION_CONSUMED steer-ack signal (fleet-read-model.ts).
   const fleetReadModel = createFleetReadModel(ui.runtime.processRegistry, ui.runtime.runtimeBus);
 
@@ -51,16 +51,16 @@ export function registerOperationsPanels(manager: PanelManager, deps: ResolvedBu
     description: 'Live unified process tree: agents, WRFC chains, workflows, watchers, and background processes, with interrupt/kill/steer controls',
     factory: () => new FleetPanel(fleetReadModel, {
       interrupt: (id: string) => fleetReadModel.interrupt(id),
-      // Wave-6 (wo-F item d2): re-arm a paused trigger/schedule/automation job.
+      // Re-arm a paused trigger/schedule/automation job.
       resume: (id: string) => fleetReadModel.resume(id),
       kill: (id: string, opts: { cascade: boolean }) => fleetReadModel.kill(id, opts),
-      // Wave-3 (C6): full-fidelity transcript source for an attached agent
+      // Full-fidelity transcript source for an attached agent
       // tab — live while the agent runs, frozen briefly after it completes
       // (AgentManager's bounded retention ring), empty once evicted (the
       // panel degrades to the on-disk ledger fallback in that case).
       getConversationSnapshot: (agentId: string) => ui.agents.agentManager.getConversationSnapshot(agentId),
       resolveSessionLogPath: (agentId: string) => ui.environment.shellPaths.resolveProjectPath('tui', 'sessions', `${agentId}.jsonl`),
-      // Wave-3 (W3.2): queue a message for a live in-process agent/wrfc-subtask member.
+      // Queue a message for a live in-process agent/wrfc-subtask member.
       steer: (id: string, text: string) => fleetReadModel.steer(id, text),
     }, deps.configManager),
   });

package/src/panels/builtin/shared.ts

@@ -3,7 +3,7 @@ import type { ServiceRegistry } from '@pellux/goodvibes-sdk/platform/config';
 import type { ToolRegistry } from '@pellux/goodvibes-sdk/platform/tools';
 import type { ProviderRegistry } from '@pellux/goodvibes-sdk/platform/providers';
 import type { Orchestrator } from '../../core/orchestrator';
-import type { MemoryRegistry } from '@pellux/goodvibes-sdk/platform/state';
+import type { MemoryAccess } from '@pellux/goodvibes-sdk/platform/runtime/memory-spine';
 import type { ApprovalBroker } from '@pellux/goodvibes-sdk/platform/control-plane';
 import type { SessionReadFacade } from '@pellux/goodvibes-sdk/platform/runtime/session-spine';
 import type { AutomationManager } from '@pellux/goodvibes-sdk/platform/automation';
@@ -79,14 +79,14 @@ export interface BuiltinPanelDeps {
    * copy via CommandContext.extensions.evalRegistry).
    */
   evalRegistry?: import('../eval-registry.ts').EvalRegistry;
-  /** MemoryRegistry for the Memory panel. */
-  memoryRegistry?: MemoryRegistry;
+  /** Host-vs-client memory access for the Memory modal — the spine client, never the raw registry (routes over the wire when a daemon is adopted). */
+  memoryRegistry?: MemoryAccess;
   /** Shared policy runtime state for governance/policy diagnostics. */
   policyRuntimeState?: import('@/runtime/index.ts').PolicyRuntimeState;
   /** Approval broker for control-plane/operator panels. */
   approvalBroker?: ApprovalBroker;
   /**
-   * S3d: cross-surface session READ facade for control-plane/operator panels.
+   * Cross-surface session READ facade for control-plane/operator panels.
    * Sync listSessions()/getSession() shape preserved; in adopted-daemon mode it
    * serves the daemon-hosted union (with an honest offline note when the wire is
    * down) instead of only this process's local broker. See session-union-cache.ts.

package/src/panels/cost-tracker-panel.ts

@@ -22,7 +22,7 @@ import {
   DEFAULT_PANEL_PALETTE,
   type PanelWorkspaceSection,
 } from './polish.ts';
-import { calcSessionCost, isModelPriced, computeBudgetBreach, readBudgetAlertUsd, type BudgetAlertConfigAccess } from '../export/cost-utils.ts';
+import { calcSessionCost, isModelPriced, computeBudgetBreach, readBudgetAlertUsd, BUDGET_ALERT_USD_CONFIG_KEY, type BudgetAlertConfigAccess } from '../export/cost-utils.ts';
 import { abbreviateCount } from '../utils/format-number.ts';
 import { isTextBackspace } from '../input/delete-key-policy.ts';
 
@@ -332,7 +332,7 @@ export class CostTrackerPanel extends BasePanel {
   public setBudgetThreshold(usd: number): void {
     if (!Number.isFinite(usd) || usd < 0) return;
     this.budgetThreshold = usd;
-    this.configAccess?.set('behavior.budgetAlertUsd', usd);
+    this.configAccess?.set(BUDGET_ALERT_USD_CONFIG_KEY, usd);
     this.markDirty();
   }
 

package/src/panels/fleet-panel-format.ts

@@ -2,7 +2,7 @@
 // fleet-panel-format.ts
 //
 // Pure column-layout + cell-formatting helpers for FleetPanel's tree rows.
-// Extracted from fleet-panel.ts (S3b hygiene) to hold that file under the
+// Extracted from fleet-panel.ts (file-size hygiene) to hold that file under the
 // 800-line architecture cap; these are stateless functions the panel's
 // renderItem/renderDetail call, with no `this` dependency.
 // ---------------------------------------------------------------------------

package/src/panels/fleet-panel.ts

@@ -58,21 +58,21 @@ const C = DEFAULT_PANEL_PALETTE;
 export interface FleetActionCallbacks {
   /** Graceful interruption (AgentManager.cancel / trigger-schedule disable, via the registry). */
   readonly interrupt: (id: string) => boolean;
-  /** Wave-6 (wo-F item d2): re-arm a `paused` node (disabled trigger/schedule or automation job) — interrupt()'s inverse. Honest false when not paused / non-resumable. */
+  /** Re-arm a `paused` node (disabled trigger/schedule or automation job) — interrupt()'s inverse. Honest false when not paused / non-resumable. */
   readonly resume: (id: string) => boolean;
   /** Hard stop, optionally cascading to killable descendants. Returns the node ids acted on. */
   readonly kill: (id: string, opts: { readonly cascade: boolean }) => readonly string[];
   /**
-   * Wave-3 (C6): fetch an agent's conversation history — live (running) or
+   * Fetch an agent's conversation history — live (running) or
    * frozen (just-completed, still in the SDK's retention ring). Empty array
    * means "unavailable" (evicted, or never registered) — FleetPanel degrades
    * to the on-disk ledger fallback in that case, never fabricating content.
    */
   readonly getConversationSnapshot: (agentId: string) => readonly ConversationMessageSnapshot[];
-  /** Wave-3 (C6): resolve the on-disk `<agentId>.jsonl` event-ledger path for the degraded fallback view. */
+  /** Resolve the on-disk `<agentId>.jsonl` event-ledger path for the degraded fallback view. */
   readonly resolveSessionLogPath: (agentId: string) => string;
   /**
-   * Wave-3 (W3.2): queue a human message for a live in-process agent (or a
+   * Queue a human message for a live in-process agent (or a
    * wrfc-subtask's current live member agent), delivered at the target's
    * next turn boundary — never mid-token. Honest refusal
    * (`{queued:false,reason}`) for anything that cannot take mid-run input
@@ -128,7 +128,7 @@ export class FleetPanel extends ScrollableListPanel<FleetTreeRow> {
       this.reconcileSteerBadges();
       this.markDirty();
     });
-    // Wave-3 (W3.2): the honest "the agent actually consumed this steer at
+    // The honest "the agent actually consumed this steer at
     // its turn boundary" signal — see fleet-tabs.ts's SteerBadgeStatus doc.
     // A read-model without a runtimeBus dep never invokes this (graceful
     // no-op), same degrade as steer()/steerable without a messageBus dep.
@@ -179,13 +179,13 @@ export class FleetPanel extends ScrollableListPanel<FleetTreeRow> {
     for (const tab of this.tabsState.tabs) tab.lineCache.clear();
   }
 
-  /** True while a session tab (not the root tree) is focused. Replaces the old Wave-2 isDetailFocused() seam. */
+  /** True while a session tab (not the root tree) is focused. Replaces the old isDetailFocused() seam. */
   public isTabActive(): boolean {
     return this.tabsState.activeTabIndex > 0;
   }
 
   /**
-   * Wave-3 (W3.2): true while the steer composer on the active tab is open —
+   * True while the steer composer on the active tab is open —
    * every character of a burst (paste, or several fast-typed chars in one
    * stdin chunk) must land in the draft one at a time rather than being
    * routed away as panel hotkeys or exploded to the main composer. See
@@ -207,7 +207,7 @@ export class FleetPanel extends ScrollableListPanel<FleetTreeRow> {
   }
 
   /**
-   * Ctrl+X (panel-close) collision resolution (Wave-3 Part C4): the global
+   * Ctrl+X (panel-close) collision resolution: the global
    * shortcut route (handler-shortcuts.ts) calls this BEFORE closing the
    * panel. Detaching the active tab consumes the key; on the root tree tab
    * there is nothing to detach, so this returns false and Ctrl+X falls
@@ -317,7 +317,7 @@ export class FleetPanel extends ScrollableListPanel<FleetTreeRow> {
   }
 
   /**
-   * Wave-3 (W3.2, risk #2 — "dropped inference"): called on every read-model
+   * The "dropped inference" reconciliation: called on every read-model
    * snapshot update and on the panel's 1s tick. See fleet-steer.ts's
    * reconcileSteerBadges doc for why this is needed (the SDK emits no
    * cancelled/expired signal for a queued steer).
@@ -350,7 +350,7 @@ export class FleetPanel extends ScrollableListPanel<FleetTreeRow> {
     // Confirm overlay owns input first (K-armed kill confirm).
     if (this.confirmOverlay.handleInput(key)) return true;
 
-    // Wave-3 (W3.2): once the steer composer is open on the active tab, it
+    // Once the steer composer is open on the active tab, it
     // owns EVERY key (same full-priority-while-composing contract as
     // git-panel.ts's commitMessage entry) until Enter (submit) or Esc
     // (cancel) — a burst/paste and single hotkeys like 'j'/'s'/'[' all land
@@ -458,7 +458,7 @@ export class FleetPanel extends ScrollableListPanel<FleetTreeRow> {
     }
 
     if (key === 's') {
-      // Batch replay D4: 's' from the TREE was silently dead — steering
+      // An earlier replay fix: 's' from the TREE was silently dead — steering
       // required an undiscoverable Enter-attach first. Attach-and-steer in
       // one press for a steerable node; honest refusal otherwise.
       if (!selected) return false;
@@ -485,7 +485,7 @@ export class FleetPanel extends ScrollableListPanel<FleetTreeRow> {
   }
 
   /**
-   * Wave-3 (W3.2): the `s` gate — mirrors the i/K capability-gating template
+   * The `s` gate — mirrors the i/K capability-gating template
    * exactly (guard on the live node existing, non-terminal, and the specific
    * capability; consume the key and say so rather than silently no-op-ing).
    */
@@ -649,13 +649,13 @@ export class FleetPanel extends ScrollableListPanel<FleetTreeRow> {
 
     const snapshotRows = this.readModel.getSnapshot().rows;
     const liveNode = snapshotRows.find((row) => row.node.id === tab.nodeId)?.node ?? null;
-    // Wave-3 (W3.2): the steer composer only ever applies to 'agent' tabs
+    // The steer composer only ever applies to 'agent' tabs
     // (wrfc-chain has no conversation loop of its own — see
     // fleet-tabs.ts's FleetAttachableKind doc); the live-node lookup is
     // shared with the isTerminal computation below either way.
     const canSteer = liveNode !== null && !isTerminalProcessState(liveNode.state) && liveNode.capabilities.steerable;
 
-    // Wave-3 (W3.2): while composing, Enter/Esc replace the tab-switch/detach
+    // While composing, Enter/Esc replace the tab-switch/detach
     // hints (mirrors git-panel.ts's renderCommitCompose footer) so the
     // footer never advertises a key the composer itself has absorbed.
     const hints: Array<{ keys: string; label: string }> = tab.steerDraft !== null
@@ -739,7 +739,7 @@ export class FleetPanel extends ScrollableListPanel<FleetTreeRow> {
     const hints = buildFleetTreeHints(selected?.node, this.follow, this.tabsState.tabs.length > 0);
 
     // Tab strip renders only when tabs exist — omitting it entirely with no
-    // tabs attached keeps the pre-Wave-3 root-tree rendering byte-identical.
+    // tabs attached keeps the pre-session-tab root-tree rendering byte-identical.
     const stripLine = renderFleetTabStrip(this.tabsState, width);
     const header = stripLine ? [stripLine] : undefined;
 

package/src/panels/fleet-read-model.ts

@@ -71,7 +71,7 @@ export interface FleetSnapshot {
 
 export type FleetStateTone = 'active' | 'success' | 'failure' | 'warn' | 'muted';
 
-// W6-P1 ruling: this is a DIFFERENT table from the SDK presentation
+// Design ruling: this is a DIFFERENT table from the SDK presentation
 // contract's STATE_GLYPHS (@pellux/goodvibes-sdk/platform/presentation) — that
 // one is a 4-state semantic alias (good/warn/bad/info) shared by the TUI and
 // agent renderers; this one is a 12-state ProcessNode taxonomy specific to the
@@ -90,16 +90,16 @@ const STATE_GLYPHS: Record<ProcessState, string> = {
   done: '✓',
   failed: '✗',
   killed: '⊘',
-  // Wave-3 verb formalization: a distinct TERMINAL outcome from 'killed' —
+  // A distinct TERMINAL outcome from 'killed' —
   // both come from AgentManager.cancel(), but a graceful interrupt request
   // ('the operator asked nicely') is display-distinguishable from a hard
   // kill. '◌' verified free against every other glyph in this table.
   interrupted: '◌',
   idle: '·',
   queued: '…',
-  // Wave-6 SDK: schedules/triggers/automation jobs report 'paused' when
+  // SDK behavior: schedules/triggers/automation jobs report 'paused' when
   // disabled (previously mislabeled 'killed'). NOT terminal — resumable via
-  // ProcessRegistry.resume() (W6.2 d2 wires the full pause/resume UI in
+  // ProcessRegistry.resume() (the full pause/resume UI lives in
   // fleet-stop.ts). '❚' verified free against every other glyph in this table.
   paused: '❚',
 };
@@ -140,11 +140,11 @@ const KIND_TAGS: Record<ProcessKind, string> = {
   schedule: 'sched',
   watcher: 'watch',
   'background-process': 'exec',
-  // Wave 4 (wo703): orchestration-engine kinds (adapters/orchestration.ts).
+  // Orchestration-engine kinds (adapters/orchestration.ts).
   workstream: 'stream',
   phase: 'phase',
   'work-item': 'item',
-  // Wave 5 (wo804): the repo source-tree code index (adapters/code-index.ts).
+  // The repo source-tree code index (adapters/code-index.ts).
   // A single leaf node — never a rollup of other flat-list nodes (see
   // ROLLUP_KINDS below) — so no other list in this module needs updating.
   'code-index': 'index',
@@ -288,7 +288,7 @@ export function buildFleetRows(nodes: readonly ProcessNode[]): FleetTreeRow[] {
  *     nonzero cost/token reading (defense in depth against a future adapter
  *     change, not load-bearing).
  *
- * Wave 4 (wo703) additions — verified against adapters/orchestration.ts:
+ * Orchestration-engine additions — verified against adapters/orchestration.ts:
  *   - 'workstream': adaptWorkstream SUMS every work-item's usage/costUsd
  *     exactly once (sumWorkItemUsage/aggregateWorkItemCost), the same
  *     "rollup of nodes that also appear individually" shape as adaptChain —
@@ -308,7 +308,7 @@ export function buildFleetRows(nodes: readonly ProcessNode[]): FleetTreeRow[] {
  *     'wrfc-subtask'-for-capabilities analogue but the 'agent'-for-usage
  *     analogue. Excluding it would silently zero out real cost/token totals.
  *
- * Wave 5 (wo804): 'code-index' is deliberately NOT in this set either —
+ * 'code-index' is deliberately NOT in this set either —
  * adaptCodeIndex yields exactly one standalone ProcessNode per registry
  * (never a parent whose children ALSO appear individually in the flat
  * list), so it is a leaf like 'agent'/'work-item', not a grouping construct.
@@ -435,7 +435,7 @@ export interface FleetReadModel {
   /** Graceful interruption where the source supports one. Returns true when accepted. */
   interrupt(id: string): boolean;
   /**
-   * Wave-6 (wo-F item d2): re-arm a `paused` node (a disabled trigger/schedule,
+   * Re-arm a `paused` node (a disabled trigger/schedule,
    * or an automation job). The inverse of interrupt()'s pause. Returns true when
    * accepted; false for a node that is not currently `paused` or whose kind has
    * no resume path (honest refusal).
@@ -444,14 +444,14 @@ export interface FleetReadModel {
   /** Hard stop, optionally cascading to descendants. Returns the node ids acted on. */
   kill(id: string, opts?: { readonly cascade?: boolean }): readonly string[];
   /**
-   * Wave-3 (W3.2): queue a human message for a live in-process agent (or a
+   * Queue a human message for a live in-process agent (or a
    * wrfc-subtask's current live member), delivered at its next turn
    * boundary. Honest refusal (`{queued:false,reason}`) for anything that
    * cannot take mid-run input — see ProcessRegistry.steer's doc comment.
    */
   steer(id: string, text: string): SteerResult;
   /**
-   * Wave-3 (W3.2): subscribe to the honest "the agent actually consumed this
+   * Subscribe to the honest "the agent actually consumed this
    * steer at its turn boundary" signal (COMMUNICATION_CONSUMED on the
    * runtime bus's 'communication' domain). Returns an unsubscribe function.
    * A read-model constructed without a runtimeBus (e.g. the static factory,

package/src/panels/fleet-steer.ts

@@ -1,7 +1,7 @@
 // ---------------------------------------------------------------------------
 // fleet-steer.ts
 //
-// Wave-3 (W3.2) — steer-badge rendering helpers and the "dropped inference"
+// Steer-badge rendering helpers and the "dropped inference"
 // reconciliation pass, split out of fleet-panel.ts to keep that file under
 // the architecture line cap (see check-architecture.ts's 800-line gate).
 // Pure functions only; FleetPanel still owns the mutable FleetTab.steerBadge
@@ -67,7 +67,7 @@ export function renderSteerBadgeLine(badge: SteerBadge, width: number, palette:
 }
 
 /**
- * Wave-3 (W3.2, risk #2 — "dropped inference"): the SDK emits no
+ * The "dropped inference" risk: the SDK emits no
  * cancelled/expired signal for a queued steer, so a badge left `queued`
  * after its target node goes terminal (done/failed/killed/interrupted)
  * would hang forever with no honest resolution. Resolves any such badge to

package/src/panels/fleet-stop.ts

@@ -115,7 +115,7 @@ export function buildFleetTreeHints(
     { keys: 'j/k', label: 'navigate' },
     { keys: 'Enter', label: 'attach' },
   ];
-  if (live && selected.capabilities.steerable) hints.push({ keys: 's', label: 'steer' }); // D4: discoverable from the tree (attach-and-steer)
+  if (live && selected.capabilities.steerable) hints.push({ keys: 's', label: 'steer' }); // discoverable from the tree (attach-and-steer)
   if (live && selected.capabilities.interruptible) hints.push({ keys: 'i', label: 'interrupt' });
   if (live && selected.capabilities.killable) hints.push({ keys: 'K', label: 'kill' });
   if (live && !isPaused && selected.capabilities.pausable) hints.push({ keys: 'p', label: 'pause' });
@@ -125,7 +125,7 @@ export function buildFleetTreeHints(
   return hints;
 }
 
-/** K-confirm descendant stats (UX-C item 6): total = every non-terminal descendant (what a cascade kill takes down); active = the individually-killable subset. Was "active only" (Wave-3 C7), undercounting a mixed subtree. */
+/** K-confirm descendant stats (UX-C item 6): total = every non-terminal descendant (what a cascade kill takes down); active = the individually-killable subset. Was "active only" in an earlier version, undercounting a mixed subtree. */
 export function countDescendantStats(rows: readonly FleetTreeRow[], nodeId: string): { total: number; active: number } {
   const byParent = new Map<string, string[]>();
   for (const row of rows) {

package/src/panels/fleet-tabs.ts

@@ -1,7 +1,7 @@
 // ---------------------------------------------------------------------------
 // fleet-tabs.ts
 //
-// Wave-3 (W3.1 Part C) — pure, testable tab-state model for FleetPanel's
+// Pure, testable tab-state model for FleetPanel's
 // session tabs. No BasePanel/rendering dependency, mirroring the
 // fleet-read-model.ts convention: this module owns attach/detach/switch as
 // pure state transitions over a small immutable FleetTabsState, so the tab
@@ -32,7 +32,7 @@ export function isAttachableFleetKind(kind: ProcessKind): kind is FleetAttachabl
 }
 
 /**
- * Wave-3 (W3.2 steering) — lifecycle of a queued steer message, tracked
+ * Lifecycle of a queued steer message, tracked
  * per-tab. `queued` means `ProcessRegistry.steer()` accepted the message
  * onto the target's inbox, NOT that the agent has seen it — that is the
  * later, honest `consumed` transition (a `COMMUNICATION_CONSUMED` runtime-bus
@@ -119,14 +119,14 @@ export interface FleetTab {
   ledgerEntries: Record<string, unknown>[] | null;
   ledgerLoadStarted: boolean;
   /**
-   * Wave-3 (W3.2): the one-line steer composer's in-progress text, or `null`
+   * The one-line steer composer's in-progress text, or `null`
    * when not composing. Mirrors git-panel.ts's `commitMessage` mutable-slot
    * convention (FleetPanel.isCapturingTextBurst() gates on this being
    * non-null so a burst/paste lands here char-by-char, never as tree/tab
    * hotkeys — see FleetPanel.handleSteerInput).
    */
   steerDraft: string | null;
-  /** Wave-3 (W3.2): this tab's most recent steer message's lifecycle, or null. */
+  /** This tab's most recent steer message's lifecycle, or null. */
   steerBadge: SteerBadge | null;
 }
 

package/src/panels/fleet-transcript.ts

@@ -1,9 +1,9 @@
 // ---------------------------------------------------------------------------
 // fleet-transcript.ts
 //
-// Wave-3 (W3.1 Part C6) — renders the content of an attached FleetPanel
+// Renders the content of an attached FleetPanel
 // session tab. Three sources, chosen by what the SDK can actually provide
-// (see the W3.1 brief's "central reality check" — a full-fidelity live
+// (see the design brief's "central reality check" — a full-fidelity live
 // transcript needs a ConversationMessageSnapshot[] history source, which
 // only exists for a RUNNING agent or a just-completed one still inside the
 // SDK's bounded retention ring):
@@ -163,8 +163,8 @@ export function renderFleetAgentTranscript(
 /**
  * Render a live one-line-per-member summary for an attached wrfc-chain tab.
  *
- * `chainDoneOrAbsent` disambiguates an empty member list (d3, W6.2): a completed
- * chain prunes its wrapper node (Wave-3 reap), so zero members can mean the
+ * `chainDoneOrAbsent` disambiguates an empty member list: a completed
+ * chain prunes its wrapper node (zombie reap), so zero members can mean the
  * chain FINISHED, not that it has not started. When the chain node is absent
  * (pruned) or terminal, say so honestly instead of the "(no member agents yet)"
  * not-started wording.
@@ -284,7 +284,7 @@ function renderLedgerEntry(width: number, entry: Record<string, unknown>, palett
         { text: `${status}${formatLedgerDuration(entry['durationMs'])}`, fg: tone },
       ]);
     }
-    // W5.2 (wo803) — Wave-5 wo801 per-turn passive knowledge injection
+    // Per-turn passive knowledge injection
     // records, appended to this same JSONL ledger as
     // `{type:'knowledge_injection', turn, ...record}` (orchestrator-runner.ts).
     // Without this case these fell through to the generic 'event' default

package/src/panels/modals/memory-modal.ts

@@ -17,6 +17,16 @@ import type {
 // panel's selected-record scope/class/tags/provenance detail is folded into
 // each row label. `memoryRegistry` absent → the retired MemoryPanel's
 // "not configured" copy renders as an honest degraded state.
+//
+// Read path (memory-spine adoption): reads go through the spine client's
+// `honestSearch` — the MemoryAccess shape — not the raw registry, so a session
+// that has adopted an external daemon reads the SAME wire-served records a
+// wire failure is deliberately surfaced (never a silently stale local copy).
+// `buildView()` stays synchronous/pure per the ConfigModalSurface contract;
+// `refresh()` is async and calls the `requestRender` callback `onOpen` hands
+// it when the data lands. The Review Queue ranking is recomputed client-side
+// from the same honestSearch batch (see `rankForReview` below) rather than
+// through a second wire call — `reviewQueue` is not part of MemoryAccess.
 // ---------------------------------------------------------------------------
 
 /** Minimal read shape of a `MemoryRecord` this modal renders. */
@@ -33,16 +43,42 @@ interface MemoryRecordLike {
   readonly reviewedAt?: number | undefined;
   readonly reviewedBy?: string | undefined;
   readonly createdAt: number;
+  readonly updatedAt?: number | undefined;
   readonly provenance: readonly { readonly kind: string; readonly ref: string }[];
 }
 
 export interface MemoryModalDeps {
   readonly memoryRegistry?: {
-    search(filter?: { limit?: number }): readonly MemoryRecordLike[];
-    reviewQueue(limit?: number): readonly MemoryRecordLike[];
+    honestSearch(filter?: { limit?: number }): Promise<{
+      readonly records: readonly MemoryRecordLike[];
+      readonly indexUnavailableReason?: string | null | undefined;
+    }>;
   };
 }
 
+/**
+ * Client-side port of the SDK's MemoryStore.reviewQueue ranking
+ * (memory-store-helpers.ts reviewQueueScore/isReviewCandidate): all four
+ * review states are candidates, scored by state + inverse confidence (flagged
+ * states penalized), tie-broken by recency. Presentation ordering only — not
+ * a wire call, so exact parity with the server's own tie-breaking on ids it
+ * has never seen is not load-bearing.
+ */
+function rankForReview(records: readonly MemoryRecordLike[], limit: number): MemoryRecordLike[] {
+  const score = (r: MemoryRecordLike): number => {
+    let s = 0;
+    if (r.reviewState === 'fresh') s += 40;
+    if (r.reviewState === 'stale') s += 20;
+    if (r.reviewState === 'contradicted') s += 10;
+    s += Math.max(0, 100 - r.confidence);
+    if (r.reviewState === 'stale' || r.reviewState === 'contradicted') s -= 20;
+    return s;
+  };
+  return [...records]
+    .sort((a, b) => score(b) - score(a) || (b.updatedAt ?? b.createdAt) - (a.updatedAt ?? a.createdAt) || b.createdAt - a.createdAt)
+    .slice(0, limit);
+}
+
 // Mirrors registerKnowledgePanels's withUnconfiguredFallback copy for the
 // retired MemoryPanel (src/panels/builtin/knowledge.ts) verbatim.
 const NOT_CONFIGURED_TITLE = 'Memory registry not configured for this session.';
@@ -57,6 +93,9 @@ class MemoryModalSurface implements ConfigModalSurface {
   readonly title = 'Memory';
   private allRecords: MemoryRecordLike[] = [];
   private reviewRecords: MemoryRecordLike[] = [];
+  /** Honest note on the last read: a wire failure (client mode) or the index-unavailable fallback reason — never silently dropped. */
+  private loadNote: string | null = null;
+  private requestRender: (() => void) | null = null;
 
   constructor(private readonly deps: MemoryModalDeps) {}
 
@@ -71,12 +110,27 @@ class MemoryModalSurface implements ConfigModalSurface {
     { key: 'r', id: 'refresh', label: 'refresh' },
   ];
 
-  onOpen(): void { this.refresh(); }
+  onOpen(requestRender: () => void): void {
+    this.requestRender = requestRender;
+    void this.refresh();
+  }
+
+  onClose(): void {
+    this.requestRender = null;
+  }
 
-  private refresh(): void {
-    if (!this.deps.memoryRegistry) { this.allRecords = []; this.reviewRecords = []; return; }
-    this.allRecords = [...this.deps.memoryRegistry.search({ limit: 100 })];
-    this.reviewRecords = [...this.deps.memoryRegistry.reviewQueue(24)];
+  private async refresh(): Promise<void> {
+    if (!this.deps.memoryRegistry) { this.allRecords = []; this.reviewRecords = []; this.loadNote = null; return; }
+    try {
+      const result = await this.deps.memoryRegistry.honestSearch({ limit: 100 });
+      this.allRecords = [...result.records];
+      this.reviewRecords = rankForReview(result.records, 24);
+      this.loadNote = result.indexUnavailableReason ?? null;
+    } catch (error) {
+      // Client-mode wire failure: surfaced plainly, never masked by the last-known list.
+      this.loadNote = `Failed to reach memory over the wire: ${error instanceof Error ? error.message : String(error)}`;
+    }
+    this.requestRender?.();
   }
 
   private recordFrom(id: string): MemoryRecordLike | undefined {
@@ -121,11 +175,15 @@ class MemoryModalSurface implements ConfigModalSurface {
         tabs: [{ id: 'all', label: 'All Records', rows: [] }],
       };
     }
-    return { title: 'Memory', tabs: [this.allTab(), this.reviewTab()] };
+    return {
+      title: 'Memory',
+      ...(this.loadNote ? { degraded: this.loadNote } : {}),
+      tabs: [this.allTab(), this.reviewTab()],
+    };
   }
 
   onAction(id: string, ctx: ConfigModalActionContext): void {
-    if (id === 'refresh') { this.refresh(); ctx.setStatus('Reloaded memory records.'); return; }
+    if (id === 'refresh') { void this.refresh(); ctx.setStatus('Reloading memory records...'); return; }
     const record = ctx.row ? this.recordFrom(ctx.row.id) : undefined;
     if (!record) return;
     const review = (state: string, confidence: number, reason?: string): void => {
@@ -150,9 +208,12 @@ export function createMemoryModalSurface(deps: MemoryModalDeps): ConfigModalSurf
 
 /**
  * Deterministic golden fixture: fixed memory records with frozen createdAt
- * timestamps — no live registry, no wall-clock, no random ids.
+ * timestamps — no live registry, no wall-clock, no random ids. Promise-backed
+ * (see ecosystem-modals-golden.test.ts): `honestSearch` is async even for this
+ * in-memory fixture (matching the real MemoryAccess shape), so the factory
+ * pre-awaits the initial `onOpen` refresh before handing back the surface.
  */
-export function memoryModalGoldenSurface(): ConfigModalSurface {
+export async function memoryModalGoldenSurface(): Promise<ConfigModalSurface> {
   const FIXED_CREATED_AT = 1735689600000; // 2025-01-01T00:00:00.000Z
   const records: readonly MemoryRecordLike[] = [
     {
@@ -171,10 +232,10 @@ export function memoryModalGoldenSurface(): ConfigModalSurface {
       createdAt: FIXED_CREATED_AT + 86400000, provenance: [],
     },
   ];
-  return createMemoryModalSurface({
-    memoryRegistry: {
-      search: () => records,
-      reviewQueue: () => records.filter((record) => record.reviewState !== 'reviewed'),
-    },
+  const surface = createMemoryModalSurface({
+    memoryRegistry: { honestSearch: async () => ({ records }) },
   });
+  surface.onOpen?.(() => {});
+  await new Promise((resolve) => setTimeout(resolve, 0));
+  return surface;
 }

package/src/panels/types.ts

@@ -142,7 +142,7 @@ export interface Panel {
   /**
    * Optional: called by the global Ctrl+X (`panel-close`) shortcut BEFORE it
    * closes this panel (handler-shortcuts.ts). Return `true` to consume
-   * Ctrl+X for an in-panel action instead — e.g. FleetPanel (Wave-3 session
+   * Ctrl+X for an in-panel action instead — e.g. FleetPanel (session
    * tabs) detaches its active tab and leaves the panel open. Return `false`
    * (or omit this hook) to fall through to the ordinary close behavior.
    * Ctrl+X never reaches a panel's own `handleInput` (ctrl/meta combos are

package/src/renderer/compaction-quality.ts

@@ -1,5 +1,5 @@
 /**
- * Compaction quality-score bridging (Wave-5 W5.4 / B28).
+ * Compaction quality-score bridging.
  *
  * Reality check (wo803): the SDK's `computeQualityScore()`
  * (platform/runtime/compaction/quality-score.ts) is only ever called from a

package/src/renderer/fleet-tab-strip.ts

@@ -1,7 +1,7 @@
 // ---------------------------------------------------------------------------
 // fleet-tab-strip.ts
 //
-// Wave-3 (W3.1 Part C3) — renders FleetPanel's session-tab strip by reusing
+// Renders FleetPanel's session-tab strip by reusing
 // renderTabStrip exactly as panel-workspace-bar.ts does for the workspace
 // tab bar. Deliberately a SEPARATE, visually distinct strip from the
 // workspace bar: workspace tabs switch PANELS, fleet session tabs switch
@@ -23,7 +23,7 @@ const LABEL_FG = UI_TONES.fg.secondary;
 /**
  * Render the fleet session-tab strip, or `null` when there are no attached
  * tabs — the panel omits the strip entirely in that case (root-tab-only),
- * which is what keeps the pre-Wave-3 fleet-panel goldens byte-identical.
+ * which is what keeps the pre-session-tab fleet-panel goldens byte-identical.
  */
 export function renderFleetTabStrip(
   state: FleetTabsState,

package/src/renderer/footer-tips.ts

@@ -29,7 +29,7 @@ export function isAgentActive(composerStatus: string | undefined): boolean {
 // shell/ui-openers.ts). The bare noun 'panels' undersold that; naming the verb
 // keeps the tip honest about what the chord actually does.
 const TIP_PANELS = 'Ctrl+P toggle panels';
-// W6.2 e: F2 now opens the Fleet panel (the process modal was retired), so the
+// F2 now opens the Fleet panel (the process modal was retired), so the
 // tip names 'fleet', not 'processes'.
 const TIP_PROCESSES = 'F2 fleet';
 const TIP_HELP = '? help';

package/src/renderer/model-workspace.ts

@@ -189,7 +189,7 @@ function detailLines(picker: ModelPickerModal, width: number): string[] {
   } else {
     lines.push(`Context cap overrides the detected local-model context window for this selection.`);
   }
-  // W3-T2: a visible cursor glyph on the query itself when search is focused —
+  // A visible cursor glyph on the query itself when search is focused —
   // the only prior affordance was a footer-hint text swap ('/ search' vs.
   // 'Typing filters search...'), buried at the end of a long hint line and
   // easy to miss (confirmed via live tmux repro). This puts the "you are