@pellux/goodvibes-tui 1.9.1 → 1.10.0

package/src/renderer/session-picker-modal.ts

@@ -6,7 +6,7 @@
  *   - name, timestamp (formatted), message count
  * Footer hints: [Enter] Load  [d] Delete  [Esc] Close
  *
- * W3-T2: when the modal was wired with a cross-surface session union
+ * When the modal was wired with a cross-surface session union
  * (`modal.crossSurfaceView.mode !== 'local'`), an additional read-only
  * "Cross-surface sessions" section is appended, badged kind/status/project
  * (parity with the webui SessionsView) with one of three honest states —
@@ -66,7 +66,7 @@ function isReapedRecord(record: SharedSessionRecord): boolean {
 }
 
 /**
- * Wave-4 UX-lens note: 'reaped' names a mechanism (the idle-session sweep),
+ * UX-lens note: 'reaped' names a mechanism (the idle-session sweep),
  * not a state a first-time reader can guess — the webui pairs its own
  * 'reaped' badge with a tooltip explaining it
  * (SessionsView.tsx: "Closed by the idle-session sweep — reopens
@@ -96,7 +96,7 @@ const MAX_CROSS_SURFACE_ROWS = 5;
 /**
  * The exact honest note for the current state, or null when the union view
  * needs no caveat (fresh/embedded with rows). Precedence: offline > stale >
- * true-empty — the three states from the W3-T2 brief, never collapsed into
+ * true-empty — the three designed states, never collapsed into
  * each other (an offline view never silently renders as "no sessions yet").
  */
 function crossSurfaceNote(view: SessionPickerModal['crossSurfaceView'], rowCount: number): string | null {
@@ -238,7 +238,7 @@ export function renderSessionPickerModal(
     }
   }
 
-  // W3-T2: cross-surface session union — visible only when a sessionBroker
+  // Cross-surface session union — visible only when a sessionBroker
   // was wired (mode !== 'local'); absent entirely otherwise, so the box size
   // and content of every pre-existing (local-only) caller is unaffected.
   if (modal.crossSurfaceView.mode !== 'local') {

package/src/renderer/shell-surface.ts

@@ -48,7 +48,7 @@ export interface ShellFooterBuildOptions {
    */
   readonly compact?: boolean;
   /**
-   * S3d: cross-surface session-spine posture for the context-info segment.
+   * Cross-surface session-spine posture for the context-info segment.
    * Set ONLY in adopted-daemon mode ('online'/'offline'); left undefined in
    * embedded/local mode so no segment renders.
    */

package/src/renderer/status-glyphs.ts

@@ -4,9 +4,9 @@
 // Extracted as a neutral module so both status-token.ts and polish.ts can
 // import from here without creating a circular ESM dependency.
 //
-// W6-P1: STATE_GLYPHS is no longer hardcoded here. It is the SDK presentation
-// contract (@pellux/goodvibes-sdk/platform/presentation, landed by W4-S1 and
-// already adopted by the agent in W4-R4), aliased to GLYPHS.status so the
+// STATE_GLYPHS is no longer hardcoded here. It is the SDK presentation
+// contract (@pellux/goodvibes-sdk/platform/presentation, and
+// already adopted by the agent), aliased to GLYPHS.status so the
 // four semantic glyphs are spelled out in exactly one place and can never
 // drift from the registry again. Re-exported under the historical name so
 // status-token.ts and polish.ts import unchanged.

package/src/renderer/terminal-bg-probe.ts

@@ -1,7 +1,7 @@
 /**
  * terminal-bg-probe — OSC 11 terminal-background detection for `auto` theme mode.
  *
- * DEBT-2 / F5. On startup, when appearance is `auto` and stdout is a TTY, we ask
+ * DEBT-2. On startup, when appearance is `auto` and stdout is a TTY, we ask
  * the terminal for its background colour with an OSC 11 query and classify the
  * reply as light or dark. Everything about this is best-effort and conservative:
  * any timeout, any unparseable reply, any ambiguity resolves to DARK, which is

package/src/renderer/theme.ts

@@ -7,7 +7,7 @@
  *
  * Dark mode values are the historically used colours.
  * Light mode values are defined now for correctness parity; they are consumed
- * when background-detection (F5 / terminal-bg-probe) lands and passes the
+ * when background-detection (terminal-bg-probe) lands and passes the
  * resolved mode down. Callers that do not yet have mode detection MUST call
  * resolveTheme('dark') as the safe default.
  *
@@ -242,7 +242,7 @@ export function resolveUiTones(mode: ThemeMode): Readonly<UiToneTokens> {
 }
 
 // ===========================================================================
-// Active-mode runtime (DEBT-2 / F5 terminal-bg-probe landing).
+// Active-mode runtime (DEBT-2 terminal-bg-probe landing).
 //
 // The mode is decided ONCE at startup — from appearance config (display.themeMode
 // forced dark/light) or the terminal-background probe (auto) — and is then stable

package/src/renderer/turn-injection.ts

@@ -1,5 +1,5 @@
 /**
- * Per-turn knowledge injection record rendering (Wave-5 W5.2, wo803).
+ * Per-turn knowledge injection record rendering.
  *
  * The SDK's passive per-turn retrieval engine (wo801, W5.1 —
  * packages/sdk/src/platform/agents/turn-knowledge-injection.ts) stores one
@@ -13,7 +13,7 @@
  * the entry type here is DERIVED from `AgentRecord` rather than imported by
  * name — this needs no SDK export change.
  *
- * Reality check (updated wo805): as of Wave-5 wo805 the TUI's main interactive
+ * Reality check (since updated): the TUI's main interactive
  * session DOES route through this engine. The SDK `Orchestrator` runs per-turn
  * passive injection on the evolving primary conversation and records each turn
  * on its own bounded ring, exposed via `Orchestrator.getTurnInjections()` — the
@@ -68,7 +68,7 @@ export function formatTurnInjectionEntry(entry: TurnInjectionEntry): string {
     : '';
   // The retrieval query is part of the record's honesty contract — without it
   // an injected line can't be traced back to WHY those ids were retrieved
-  // (Wave-5 replay flagged the omission). Truncated to keep the line scannable.
+  // (a replay finding flagged the omission). Truncated to keep the line scannable.
   const queryStr = entry.query ? ` for ${JSON.stringify(truncateQuery(entry.query))}` : '';
   return (
     `  turn ${entry.turn}: injected ${labelInjectedIds(entry)}${queryStr} ` +

package/src/renderer/ui-factory.ts

@@ -195,7 +195,7 @@ export class UIFactory {
     composerFlags?: readonly string[],
     composerPendingRisk?: 'none' | 'approval-wait' | 'shell' | 'command' | 'remote',
     compact: boolean = false,
-    // S3d: honest cross-surface spine posture. Defined ONLY in adopted-daemon
+    // Honest cross-surface spine posture. Defined ONLY in adopted-daemon
     // mode (undefined in embedded/local), so the segment is absent otherwise.
     sessionSpineStatus?: 'online' | 'offline',
   ): Line[] {
@@ -442,7 +442,7 @@ export class UIFactory {
       if (model) {
         ctxParts.push({ text: model + (provider ? ` (${provider})` : ''), priority: 0 });
       }
-      // S3d: cross-surface spine posture — plain words, no blame. Adopted mode only.
+      // Cross-surface spine posture — plain words, no blame. Adopted mode only.
       if (sessionSpineStatus) ctxParts.push({ text: `spine:${sessionSpineStatus}`, priority: 1 });
       if (toolCount) ctxParts.push({ text: `${toolCount} tools`, priority: 2 });
       // Labeled "notify" (not "hitl") — /mode (aliased /hitl) governs UX
@@ -484,11 +484,11 @@ export class UIFactory {
     return lines;
   }
 
-  // W6-P1: the rotating "thinking" phrase pool and the honest waiting-state
+  // The rotating "thinking" phrase pool and the honest waiting-state
   // wording (approval/reconnecting/pre-first-token/stalled/thinking) are no
   // longer minted here. They come from the SDK presentation contract's
-  // waitingPhrase() (@pellux/goodvibes-sdk/platform/presentation, landed by
-  // W4-S1, already adopted by the agent in W4-R4) — see createThinkingFragment
+  // waitingPhrase() (@pellux/goodvibes-sdk/platform/presentation, already
+  // adopted by the agent) — see createThinkingFragment
   // below. This renderer still decides WHICH state applies from its own
   // stall/reconnect/approval signals (computeStallInfo/computeRenderStallInfo
   // stay renderer-local per the extraction decision record); only the exact
@@ -544,8 +544,8 @@ export class UIFactory {
     // long enough to be misleading (THINKING_STALL_FREEZE_MS). Decide WHICH
     // honest waiting state applies (renderer-local — this signal computation
     // stays here per the extraction decision record), then defer the exact
-    // wording to the SDK presentation contract's waitingPhrase() (W6-P1;
-    // mirrors the agent's W4-R4 adoption). Precedence matches the contract:
+    // wording to the SDK presentation contract's waitingPhrase() (which
+    // mirrors the agent's adoption). Precedence matches the contract:
     // approval > reconnecting > pre-first-token > stalled > thinking.
     const isStalled = stallInfo !== undefined && stallInfo.msSinceLastDelta >= THINKING_STALL_FREEZE_MS;
     let state: WaitingState;

package/src/renderer/ui-primitives.ts

@@ -1,10 +1,10 @@
 // ---------------------------------------------------------------------------
 // ui-primitives.ts — glyph registry + tone-token table.
 //
-// W6-P1: these four tables (GLYPHS, UI_TONES, DIFF_TONES, SPINNER_FRAMES) are
+// These four tables (GLYPHS, UI_TONES, DIFF_TONES, SPINNER_FRAMES) are
 // no longer minted locally. They are the SDK presentation contract
-// (@pellux/goodvibes-sdk/platform/presentation, landed by W4-S1 and already
-// adopted by the agent in W4-R4), consumed here so the TUI and the agent
+// (@pellux/goodvibes-sdk/platform/presentation, already
+// adopted by the agent), consumed here so the TUI and the agent
 // share ONE source (Mike's move-to-SDK ruling — machinery needed by 2+
 // surfaces => SDK). The TUI was the reference these values were lifted from
 // verbatim, so this swap is byte-identical. See

package/src/runtime/bootstrap-command-context.ts

@@ -2,6 +2,7 @@ import type { ConfigManager } from '@pellux/goodvibes-sdk/platform/config';
 import type { AdaptivePlanner } from '@pellux/goodvibes-sdk/platform/core';
 import type { ConversationManager } from '../core/conversation';
 import type { KnowledgeApi } from '@pellux/goodvibes-sdk/platform/knowledge';
+import type { MemorySpineClient } from '@pellux/goodvibes-sdk/platform/runtime/memory-spine';
 import type { HookApi } from '@pellux/goodvibes-sdk/platform/hooks';
 import type { McpApi } from '@pellux/goodvibes-sdk/platform/mcp';
 import type { PanelManager } from '../panels/panel-manager.ts';
@@ -107,6 +108,7 @@ export type CreateBootstrapCommandContextOptions = {
   operatorClient?: OperatorClient;
   peerClient?: PeerClient;
   knowledgeApi?: KnowledgeApi;
+  memorySpine?: MemorySpineClient;
   hookApi?: HookApi;
   mcpApi?: McpApi;
   opsApi?: OpsApi;
@@ -195,6 +197,7 @@ export function createBootstrapCommandContext(
     operatorClient,
     peerClient,
     knowledgeApi,
+    memorySpine,
     hookApi,
     mcpApi,
     opsApi,
@@ -279,6 +282,7 @@ export function createBootstrapCommandContext(
     peerClient,
     providerApi,
     knowledgeApi,
+    memorySpine,
     hookApi,
     mcpApi,
     opsApi,

package/src/runtime/bootstrap-command-parts.ts

@@ -3,6 +3,7 @@ import type { ConfigManager } from '@pellux/goodvibes-sdk/platform/config';
 import type { AdaptivePlanner } from '@pellux/goodvibes-sdk/platform/core';
 import type { ConversationManager } from '../core/conversation';
 import type { KnowledgeApi } from '@pellux/goodvibes-sdk/platform/knowledge';
+import type { MemorySpineClient } from '@pellux/goodvibes-sdk/platform/runtime/memory-spine';
 import type { HookApi } from '@pellux/goodvibes-sdk/platform/hooks';
 import type { McpApi } from '@pellux/goodvibes-sdk/platform/mcp';
 import type { PanelManager, PanelDeepLinkTarget } from '../panels/panel-manager.ts';
@@ -133,6 +134,7 @@ export interface BootstrapCommandSectionOptions {
   readonly peerClient?: PeerClient;
   readonly providerApi?: ProviderApi;
   readonly knowledgeApi?: KnowledgeApi;
+  readonly memorySpine?: MemorySpineClient;
   readonly hookApi?: HookApi;
   readonly mcpApi?: McpApi;
   readonly opsApi?: OpsApi;
@@ -421,7 +423,7 @@ export function createBootstrapCommandExtensionsSection(
 export function createBootstrapCommandClientsSection(
   options: Pick<
     BootstrapCommandSectionOptions,
-    'operatorClient' | 'peerClient' | 'providerApi' | 'knowledgeApi' | 'hookApi' | 'mcpApi' | 'opsApi' | 'directTransport'
+    'operatorClient' | 'peerClient' | 'providerApi' | 'knowledgeApi' | 'memorySpine' | 'hookApi' | 'mcpApi' | 'opsApi' | 'directTransport'
   >,
 ): BootstrapCommandClientSection {
   return {
@@ -429,6 +431,7 @@ export function createBootstrapCommandClientsSection(
     peer: options.peerClient,
     providerApi: options.providerApi,
     knowledgeApi: options.knowledgeApi,
+    memorySpine: options.memorySpine,
     hookApi: options.hookApi,
     mcpApi: options.mcpApi,
     opsApi: options.opsApi,

package/src/runtime/bootstrap-core.ts

@@ -119,7 +119,7 @@ export interface BootstrapCoreState {
   readonly runtimeSessionIdRef: { value: string };
   /** Cross-surface identity mirror; permanently dormant for embedded/local-only (docs/decisions/2026-07-06-session-spine-mode-branch-is-permanent.md), activated by bootstrap.ts only for an adopted 'external' daemon. */
   readonly sessionSpine: SessionSpineClient;
-  /** D3: inbound steer/follow-up delivery; dormant until bootstrap.ts activates it. */
+  /** Inbound steer/follow-up delivery; dormant until bootstrap.ts activates it. */
   readonly sessionInboundInputs: SessionInboundInputPoller;
   /** Cache-backed read facade; bootstrap.ts drives its mode (embedded/external/local-only) from the same HostServiceMode as the spine above. */
   readonly sessionUnionCache: SessionUnionCache;
@@ -408,7 +408,7 @@ export async function initializeBootstrapCore(
     void memoryStore.save();
     memoryStore.close();
   });
-  // W6-C2 (E6): fold this project's legacy per-project TUI memory into the home-scoped canonical store, ONCE, AFTER init(). Idempotent and non-fatal.
+  // Fold this project's legacy per-project TUI memory into the home-scoped canonical store, ONCE, AFTER init(). Idempotent and non-fatal.
   await runBootMemoryFold(memoryStore, services.memoryEmbeddingRegistry, workingDir, logger);
 
   const renderRequestRef = { value: (): void => {} };
@@ -644,7 +644,7 @@ export async function initializeBootstrapCore(
     },
   ));
 
-  // D3: inbound steer delivery — see createBootstrapInboundInputPoller's doc comment.
+  // Inbound steer delivery — see createBootstrapInboundInputPoller's doc comment.
   const sessionInboundInputs = createBootstrapInboundInputPoller({
     runtimeSessionIdRef, routeOrBuffer, orchestratorHandleUserInputRef, conversation, requestRender,
   });

package/src/runtime/bootstrap-hook-bridge.ts

@@ -23,7 +23,7 @@ export interface ResumeSessionOptions {
   readonly requestRender: () => void;
   readonly onSessionIdChanged?: (sessionId: string) => void;
   readonly sharedSessionBroker: Pick<SharedSessionBroker, 'reopenSession'>;
-  /** S3c: fire-and-forget daemon-spine mirror. Reopen (not register) is the
+  /** Fire-and-forget daemon-spine mirror. Reopen (not register) is the
    * ONLY resume-time verb — see the SDK session-spine client.ts header doc. */
   readonly sessionSpine: Pick<SessionSpineClient, 'reopen'>;
   readonly project: string;
@@ -80,7 +80,7 @@ export function createResumeSessionHandler(options: ResumeSessionOptions): (sess
       if (meta?.provider) options.runtime.provider = meta.provider;
       options.writeLastSessionPointer(sessionId);
       void options.sharedSessionBroker.reopenSession(sessionId).catch((err) => { logger.debug('session broker reopen session failed', { err }); });
-      // S3c: fire-and-forget spine mirror (reopen:true — the user resume verb).
+      // Fire-and-forget spine mirror (reopen:true — the user resume verb).
       options.sessionSpine.reopen({ sessionId, project: options.project, title: options.conversation.title || meta.title });
       options.conversation.log(`Resumed session: ${sessionId}`, { fg: '135' });
       const reopenedPanels: string[] = [];

package/src/runtime/bootstrap-shell.ts

@@ -1,5 +1,6 @@
 import { join } from 'node:path';
 import { readBudgetAlertUsd, BUDGET_ALERT_USD_DEFAULT } from '../export/cost-utils.ts';
+import { refreshMemoryRecallSnapshot } from './orchestrator-core-services.ts';
 import { sumConversationUsage, type ConversationManager } from '../core/conversation';
 import type { Orchestrator } from '../core/orchestrator';
 import type { ConfigManager } from '@pellux/goodvibes-sdk/platform/config';
@@ -48,7 +49,7 @@ export interface BootstrapShellOptions {
   readonly runtimeBus: RuntimeEventBus;
   readonly runtimeStore: RuntimeStore;
   readonly services: RuntimeServices;
-  /** S3c: dormant until bootstrap.ts activates it for an adopted 'external' daemon. */
+  /** Dormant until bootstrap.ts activates it for an adopted 'external' daemon. */
   readonly sessionSpine: SessionSpineClient;
   readonly conversation: ConversationManager;
   readonly runtime: MutableRuntimeState;
@@ -181,7 +182,7 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
     forensicsRegistry,
     policyRuntimeState,
     approvalBroker: services.approvalBroker,
-    // S3d: panels read the cross-surface union facade, not the raw local broker.
+    // Panels read the cross-surface union facade, not the raw local broker.
     sessionBroker: uiServices.sessions.sessionBroker,
     automationManager: services.automationManager,
     getControlPlaneRecentEvents,
@@ -189,7 +190,8 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
     componentHealthMonitor: services.componentHealthMonitor,
     worktreeRegistry: services.worktreeRegistry,
     sandboxSessionRegistry: services.sandboxSessionRegistry,
-    memoryRegistry: services.memoryRegistry,
+    // Memory modal reads via the spine client, not the raw registry (see builtin/shared.ts).
+    memoryRegistry: services.memorySpine,
     uiServices,
     pluginManager: services.pluginManager,
     hookDispatcher: services.hookDispatcher,
@@ -289,7 +291,7 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
     codeIndexStore: services.codeIndexStore,
     codeIndexReindexScheduler: services.codeIndexReindexScheduler,
     isPassiveCodeInjectionFlagEnabled: () => services.featureFlags.isEnabled('agent-passive-code-injection'),
-    // Wave 5 (wo805): expose the MAIN session's per-turn passive-injection ring
+    // Expose the MAIN session's per-turn passive-injection ring
     // so `/recall injections` (no agent id) renders it — see recall-review.ts.
     getMainSessionTurnInjections: () => orchestrator.getTurnInjections(),
     changeTracker: services.sessionChangeTracker,
@@ -299,6 +301,10 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
     operatorClient: directTransport.operator,
     peerClient: directTransport.peer,
     knowledgeApi,
+    // /recall's browse/link/queue/export/import subcommands and the per-turn
+    // knowledge-injection read route through the spine client, not the raw
+    // local registry, so they fully detach when a daemon is adopted.
+    memorySpine: services.memorySpine,
     hookApi,
     mcpApi,
     opsApi,
@@ -309,9 +315,14 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
     loadSystemPrompt: () => loadBootstrapSystemPrompt(configManager),
     activatePlan: (_planId, task) => {
       setTimeout(() => {
-        orchestrator.handleUserInput(task).catch((err) => {
-          logger.debug('activatePlan handler failed', { error: summarizeError(err) });
-        });
+        void (async () => {
+          // Refresh the recall snapshot before this plan-driven turn — see
+          // the matching comment in main.ts's submitInput.
+          await refreshMemoryRecallSnapshot(services);
+          orchestrator.handleUserInput(task).catch((err) => {
+            logger.debug('activatePlan handler failed', { error: summarizeError(err) });
+          });
+        })();
       }, 50);
     },
     completeModelSelectionSideEffect,

package/src/runtime/bootstrap.ts

@@ -39,6 +39,7 @@ import { startExternalServices, type ExternalServicesHandle, type HostServiceSta
 import { createHttpTransport } from '@/runtime/index.ts';
 import { foldLegacySpineStore, deriveSpineFooterStatus } from '@pellux/goodvibes-sdk/platform/runtime/session-spine';
 import { createTuiSpineTransport, type SpineSessionsClient } from './session-spine-transport.ts';
+import { syncMemorySpineToHostStatus, type MemorySpineActiveRef } from './memory-spine-transport.ts';
 import { pruneStaleOperatorTokens } from '@pellux/goodvibes-sdk/platform/pairing';
 import { resolveDaemonCompanionToken, workspaceOperatorTokenCandidates } from './operator-token-cleanup.ts';
 import type { UiRuntimeServices } from './ui-services.ts';
@@ -46,7 +47,7 @@ import { createDeferredStartupCoordinator } from '@/runtime/index.ts';
 import { initializeBootstrapCore } from './bootstrap-core.ts';
 import { createBootstrapShell } from './bootstrap-shell.ts';
 import { announceResumeState } from './resume-notice.ts';
-import { buildSharedOrchestratorCoreServices } from './orchestrator-core-services.ts';
+import { buildSharedOrchestratorCoreServices, refreshMemoryRecallSnapshot } from './orchestrator-core-services.ts';
 import { summarizeError } from '@pellux/goodvibes-sdk/platform/utils';
 import { DaemonServer } from '@pellux/goodvibes-sdk/platform/daemon';
 import { HttpListener } from '@pellux/goodvibes-sdk/platform/daemon';
@@ -199,7 +200,7 @@ export async function bootstrapRuntime(
     pluginManager,
   } = services;
 
-  // D4b: a liveness flip is only PAINTED once something calls requestRender();
+  // A liveness flip is only PAINTED once something calls requestRender();
   // without this, the footer's spine segment sat correct-but-undrawn until
   // incidental activity redrew it (minutes, during an idle stretch).
   sessionUnionCache.setOnTransition(() => requestRender());
@@ -238,9 +239,9 @@ export async function bootstrapRuntime(
     },
   });
   conversationFollowUpRef.value = (item) => orchestrator.enqueueConversationFollowUp(item);
-  // Wire orchestratorHandleUserInputRef so COMPANION_MESSAGE_RECEIVED fires a real LLM turn.
+  // Wire orchestratorHandleUserInputRef so COMPANION_MESSAGE_RECEIVED fires a real LLM turn (after a pre-turn recall-snapshot refresh; see main.ts's submitInput).
   orchestratorHandleUserInputRef.value = (text: string, options?: OrchestratorUserInputOptions) => {
-    orchestrator.handleUserInput(text, undefined, options).catch((err: unknown) => {
+    void refreshMemoryRecallSnapshot(services).then(() => orchestrator.handleUserInput(text, undefined, options)).catch((err: unknown) => {
       logger.debug('companion handleUserInput safety catch', { error: String(err) });
     });
   };
@@ -300,13 +301,10 @@ export async function bootstrapRuntime(
   wrfcPersistence.rehydrate();
   const commandRegistry = shell.commandRegistry;
   const commandContext = shell.commandContext;
-  // Boot resume notice (UX-D item 1): after rehydrate() so chain history is
-  // ready, before the operator can type anything. Fire-and-forget — the
-  // checkpoint-count lookup is async (WorkspaceCheckpointManager.list() awaits
-  // its own init()), and this must not block the rest of bootstrap the way
-  // main.ts's `void workspaceCheckpointManager.init().catch(() => {})`
-  // deliberately doesn't either. Local file I/O only; resolves well before a
-  // human can react to the first rendered frame.
+  // Boot resume notice (UX-D item 1): after rehydrate() so chain history is ready, before
+  // the operator can type anything. Fire-and-forget, same as main.ts's non-blocking
+  // `void workspaceCheckpointManager.init().catch(() => {})` — local file I/O only,
+  // resolves well before a human can react to the first rendered frame.
   void announceResumeState({
     workingDirectory: services.workingDirectory,
     homeDirectory: services.homeDirectory,
@@ -390,7 +388,13 @@ export async function bootstrapRuntime(
   // 'unavailable') also stays local-only and honest. Only 'external' (a separately-
   // running daemon this TUI adopted) activates the wire mirror.
   let spineActiveForBaseUrl: string | null = null;
+  // Same adoption signal drives the memory spine (WO memory-adopt) — see
+  // memory-spine-transport.ts. 'embedded' (this process hosts its own daemon)
+  // stays local: the daemon's canonical store IS this process's own
+  // memoryRegistry, so there is no wire hop to make.
+  const memorySpineActiveRef: MemorySpineActiveRef = { value: null };
   const syncSessionSpineToHostStatus = (daemonStatus: HostServiceStatus, sharedDaemonToken: string): void => {
+    syncMemorySpineToHostStatus(services.memorySpine, daemonStatus.mode, daemonStatus.baseUrl, sharedDaemonToken, memorySpineActiveRef, logger);
     if (daemonStatus.mode !== 'external') {
       if (spineActiveForBaseUrl !== null) {
         sessionSpine.deactivate(`daemon mode changed to '${daemonStatus.mode}'`);
@@ -413,7 +417,7 @@ export async function bootstrapRuntime(
       close: (sessionId) => httpTransport.operator.sessions.close(sessionId),
     };
     sessionSpine.activate(createTuiSpineTransport(sessionsClient));
-    // D3: adopt the same daemon's wire for the INBOUND steer path — collect
+    // Adopt the same daemon's wire for the INBOUND steer path — collect
     // steer/follow-up inputs another live surface queued for this session and
     // inject them into the turn machinery (acking delivery on the wire).
     sessionInboundInputs.activate({
@@ -450,14 +454,10 @@ export async function bootstrapRuntime(
       httpListenerPortInUse: hostServiceIsBlocked(httpListenerStatus),
       daemonStatus,
       httpListenerStatus,
-      // Honest session-spine posture, independent of daemonRunning —
-      // 'external'-adopted-but-currently-unreachable degrades to 'offline' here
-      // even though daemonRunning might still read true from a stale handle.
-      // D4: sessionSpine.status() alone is ACTIVITY-gated (only updates on a
-      // register/heartbeat/close), so after the daemon dies mid-idle it would
-      // keep reading 'online'. Derive the footer status from the union cache's
-      // 5s liveness probe too — one signal, no new timer — so offline surfaces
-      // within one refresh interval of the daemon dying.
+      // Honest session-spine posture, independent of daemonRunning — degrades to 'offline'
+      // when adopted-but-unreachable even though daemonRunning might still read a stale
+      // handle as true; sessionSpine.status() alone is activity-gated, so it's derived
+      // together with the union cache's 5s liveness probe (one signal, no new timer).
       sessionSpineActive: sessionSpine.active,
       sessionSpineStatus: deriveSpineFooterStatus(sessionSpine.status(), sessionUnionCache.crossSurfaceView),
     };
@@ -568,7 +568,7 @@ export async function bootstrapRuntime(
       // authenticate against the embedded daemon this surface starts.
       const daemonHomeDir = join(services.homeDirectory, '.goodvibes', 'daemon');
       const companionTokenRecord = resolveDaemonCompanionToken(daemonHomeDir);
-      // F3 resolution (TUI 0.19.20): remove stale pre-0.21.28 workspace-scoped operator
+      // Fix (TUI 0.19.20): remove stale pre-0.21.28 workspace-scoped operator
       // token files so only the canonical <daemonHomeDir>/operator-tokens.json survives.
       // The prune is best-effort — it silently skips missing files, no-ops when tokens
       // already match, and records un-deletable candidates in `failedPaths` for logging.
@@ -741,7 +741,7 @@ export async function bootstrapRuntime(
       // a no-op when the spine was never activated (embedded/local-only topology).
       sessionSpine.close(runtime.sessionId);
       sessionSpine.dispose();
-      sessionInboundInputs.dispose(); // D3: stop the inbound steer poll interval on exit
+      sessionInboundInputs.dispose(); // stop the inbound steer poll interval on exit
       sessionUnionCache.dispose(); // stop the wire-refresh interval on exit
       await deferredStartup.drain(100);
       if (externalServicesPromise) {

package/src/runtime/code-index-services.ts

@@ -1,5 +1,5 @@
 // ---------------------------------------------------------------------------
-// code-index-services.ts — Wave 5 (wo804, W5.3 Stage A TUI wiring)
+// code-index-services.ts — repo source-tree code index (TUI wiring)
 //
 // Constructs the TUI's repo source-tree code index: CodeIndexStore
 // (@pellux/goodvibes-sdk/platform/state, landed on SDK main as wo802/W5.3
@@ -81,7 +81,7 @@ export function isCodeInjectionSettingEnabled(configManager: Pick<ConfigManager,
 export interface CodeIndexServices {
   readonly codeIndexStore: CodeIndexStore;
   /**
-   * Wave-5 Stage B tool-site incremental reindex scheduler, bound to codeIndexStore and
+   * Tool-site incremental reindex scheduler, bound to codeIndexStore and
    * gated live on storage.codeIndexEnabled. Threaded into both SDK orchestrators (main +
    * agent) so a successful write/edit debounces an incremental reindex, and into the command
    * context so /codebase status can report the last reindex activity honestly.

package/src/runtime/index.ts

@@ -274,9 +274,17 @@ export const reachableFrom = operations.reachableFrom;
 export const evaluateSessionMaintenance = operations.evaluateSessionMaintenance;
 export const formatSessionMaintenanceLines = operations.formatSessionMaintenanceLines;
 export const getGuidanceMode = operations.getGuidanceMode;
-export const DEFAULT_RETENTION_CONFIG = operations.DEFAULT_RETENTION_CONFIG;
-export const RetentionPolicy = operations.RetentionPolicy;
-export const SnapshotPruner = operations.SnapshotPruner;
+// Snapshot-retention symbols (SnapshotPruner, RetentionPolicy,
+// DEFAULT_RETENTION_CONFIG) are intentionally NOT re-exported here. No app code
+// consumes them — only the retention unit test does, and it now imports them
+// straight from the SDK `operations` namespace. Re-exporting them created a
+// second top-level binding named `SnapshotPruner` that collided with the SDK's
+// own `class SnapshotPruner`, forcing the bundler to rename ours to
+// `SnapshotPruner2` and emit a fragile `SnapshotPruner2 = operations.SnapshotPruner`
+// module-init assignment. `bun build --compile` occasionally drops that renamed
+// `var` declaration on the darwin-arm64 target, so the compiled binary died at
+// startup with `ReferenceError: SnapshotPruner2 is not defined`. Dropping the
+// re-export removes the collision (and the same latent hazard for the other two).
 export const buildPersistedSessionContext = operations.buildPersistedSessionContext;
 export const buildLocalReturnContextSummary = operations.buildLocalReturnContextSummary;
 export const formatReturnContextForDisplay = operations.formatReturnContextForDisplay;

package/src/runtime/legacy-daemon-migration.ts

@@ -1,5 +1,5 @@
 /**
- * W4-D1: the legacy `goodvibes-daemon.service` detect/migrate engine, shared
+ * The legacy `goodvibes-daemon.service` detect/migrate engine, shared
  * by the daemon CLI (`src/daemon/service-commands.ts`, the `migrate-service`
  * subcommand) and the interactive TUI's onboarding guided UX
  * (`src/input/handler-onboarding-daemon-adopt.ts`).
@@ -11,8 +11,8 @@
  * depending on CLI/daemon entrypoint concerns), and `src/runtime/**` is the
  * shared, entrypoint-agnostic layer both sides are already allowed to import.
  *
- * Wave 3 (W3 Finding 4) shipped DETECT + DISCLOSE only: a read-only check for
- * the prior D7a-era systemd unit name plus a manual-removal hint, never
+ * An earlier release shipped DETECT + DISCLOSE only: a read-only check for
+ * the prior generation's systemd unit name plus a manual-removal hint, never
  * touching it. This module adds the guided, CONSENTED migration itself.
  * Design constraints, all load-bearing (see also the per-function docs):
  *   - NEVER auto-migrate. Without explicit consent nothing runs except a
@@ -63,7 +63,7 @@ export const MANAGED_SERVICE_NAME = 'goodvibes';
 export const MANAGED_SERVICE_DESCRIPTION = 'GoodVibes daemon (shared session broker + companion host)';
 
 /**
- * F2 follow-up: resolve the unit name the SDK's `PlatformServiceManager`
+ * Follow-up: resolve the unit name the SDK's `PlatformServiceManager`
  * would actually manage, from config alone — for callers that need the
  * honest display name BEFORE any manager/status exists (the onboarding
  * wizard's detection banner resolves this at snapshot-collection time and
@@ -218,7 +218,7 @@ export function detectLegacyUnit(input: DetectLegacyUnitInput): LegacyUnitInfo {
 }
 
 /**
- * F1: the unit name `PlatformServiceManager` is ACTUALLY about to mutate can
+ * The unit name `PlatformServiceManager` is ACTUALLY about to mutate can
  * differ from `MANAGED_SERVICE_NAME` / `definitionOverride.name`. The SDK's
  * internal `resolveServiceName()` — used by `install()`, `uninstall()`, and
  * `status()` alike to compute the unit file PATH — resolves from the
@@ -303,7 +303,7 @@ export interface RunLegacyDaemonMigrationParams {
 }
 
 /**
- * F1 belt-and-braces guard: throws if the resolved unit `status` is the
+ * Belt-and-braces guard: throws if the resolved unit `status` is the
  * legacy unit. Called immediately before the two mutation calls
  * (`manager.install()`, and `manager.uninstall()` on the failed-health
  * rollback path) that would otherwise write to or remove that path. This is
@@ -343,7 +343,7 @@ export async function runLegacyDaemonMigration(
   const { trackedServiceName } = params;
   // Computed once, up front, and reused for every branch below (this is the
   // exact same single call each branch made individually before — see the
-  // F1 fix note on `resolveManagedUnitName` for why the name/path it reports
+  // fix note on `resolveManagedUnitName` for why the name/path it reports
   // can differ from `trackedServiceName`).
   const currentStatus = manager.status();
   const resolvedUnitName = resolveManagedUnitName(currentStatus);
@@ -393,7 +393,7 @@ export async function runLegacyDaemonMigration(
     };
   }
 
-  // F1: before any mutation, confirm the unit PlatformServiceManager is
+  // Before any mutation, confirm the unit PlatformServiceManager is
   // actually about to install/uninstall isn't the legacy unit itself. This
   // happens when the host's `service.serviceName` config key is set to the
   // legacy unit's own name — see `resolveManagedUnitName`'s doc comment for
@@ -440,7 +440,7 @@ export async function runLegacyDaemonMigration(
 
   // Consented: new-up-then-old-down. The legacy unit is not touched until the
   // new unit is verified healthy.
-  // Belt-and-braces (F1): the collision check above already returns before
+  // Belt-and-braces: the collision check above already returns before
   // reaching here whenever the resolved unit is the legacy one — this
   // re-asserts the same invariant right at the mutation site so a future
   // change to the check above can never silently reopen the hole.

package/src/runtime/memory-fold.ts

@@ -9,7 +9,7 @@ import {
 } from '@pellux/goodvibes-sdk/platform/state';
 
 /**
- * W6-C2 (E6): fold the TUI's legacy per-project memory store into the canonical
+ * Fold the TUI's legacy per-project memory store into the canonical
  * cross-surface store. Called once at boot AFTER `memoryStore.init()` so records written
  * before unification survive. Id-keyed and idempotent — a re-run imports nothing new and
  * never deletes the legacy file. Returns the report so boot can log what moved.