@pellux/goodvibes-tui 1.9.1 → 1.9.2

package/CHANGELOG.md

@@ -4,15 +4,26 @@ All notable changes to GoodVibes TUI.
 
 ---
 
+## [1.9.2] — 2026-07-06
+
+Patch release fixing text-to-speech playback so spoken responses play start-to-finish without losing audio at either end.
+
+### Text-to-speech playback fixes
+- The beginning of spoken output is no longer clipped: playback now waits for the audio player to actually be ready before sending it audio, and the player's read-ahead buffering was restored so the opening of a response survives normal startup delay.
+- The end of spoken output is no longer cut off: audio now drains fully once a response finishes speaking naturally. When you quit while audio is still playing, the final bit of audio gets a bounded two-second window to finish before shutdown continues. Deliberate interrupts (stopping speech, starting a new response, Ctrl+C) still cut instantly as before. A spurious error message that could appear when stopping playback has also been removed.
+
+### Other
+- Documentation and code comments were cleaned up for clarity; no behavior changes.
+
 ## [1.9.1] — 2026-07-06
 
-Follow-up patch that completes the W6-C1 credential-status adoption for the TUI. The 1.9.0 release pinned SDK 1.0.0 and unified memory (C2) but left the C1 client-side credential-status read for a follow-up; this release lands it. Ships against @pellux/goodvibes-sdk 1.0.0.
+Follow-up patch that completes the client-side credential-status adoption for the TUI. The 1.9.0 release pinned SDK 1.0.0 and unified memory but left the client-side credential-status read for a follow-up; this release lands it. Ships against @pellux/goodvibes-sdk 1.0.0.
 
-### Credential-status read as a daemon client (W6-C1)
+### Credential-status read as a daemon client
 - When the TUI acts as a client of an adopted external daemon (`HostServiceStatus` mode `external`), provider/model/secret STATUS is read from that daemon's `credentials.get` wire method instead of the TUI's own surfaceRoot store. The read carries only status metadata (key / configured / usable / source / secure) — never a secret value, mirroring the SDK's status-only wire contract. The env-only API-key posture and all secret value-reads that provider auth needs stay local and are untouched; only STATUS reads use the daemon path.
 - Honest degraded state, mirroring goodvibes-webui v1.0.1 `deriveCredentialAvailability` exactly: a 503 `CREDENTIAL_STORE_UNAVAILABLE` (matched by machine code), a `METHOD_NOT_FOUND` from an older daemon, or any transport failure resolves to a reason-carrying `available: false` — never a fabricated "configured", never a stale confident value. The TUI-hosted daemon continues to serve `credentials.get` automatically from its existing secrets manager (SDK auto-wiring), so no serve-side change was needed.
 
-### Memory unification follow-up (W6-C2)
+### Memory unification follow-up
 - The legacy per-project TUI memory store now actually folds into the home-scoped canonical store once at boot, after the canonical store initializes — making good on the behavior 1.9.0 described. The fold is id-keyed and idempotent (a re-run imports nothing new and never deletes the legacy file) and is strictly non-fatal: a fold error degrades to a warning and the canonical store serves on. The home-scoped store deliberately does not re-root with the working directory; only the code index and project index do.
 
 ## [1.7.0] — 2026-07-04
@@ -77,7 +88,7 @@ The evolution release: six batched development cycles (internal 1.2.0–1.6.0, w
 
 ## [1.1.0] — 2026-07-03
 
-Wave 0 of the post-1.0 evolution effort: trust repairs. Every change closes a defect found by live dogfooding v1.0.0 where the product reported something other than the truth. Ships against @pellux/goodvibes-sdk 0.36.0 (same effort, SDK side).
+The first cycle of the post-1.0 evolution effort: trust repairs. Every change closes a defect found by live dogfooding v1.0.0 where the product reported something other than the truth. Ships against @pellux/goodvibes-sdk 0.36.0 (same effort, SDK side).
 
 ### Fixed
 - Failing commands are visible again: the SDK masked every command-level failure as "Error: Unknown error", so a red test suite was literally invisible to the model — it would honestly conclude "no failure observed" while your tests were failing. Exit code, stdout, and stderr now reach the model byte-faithfully, and long-output truncation keeps the tail (where test runners print failures) instead of the head. Verified live: the model reads a sabotaged test's actual assertion diff and fixes the right side.
@@ -101,7 +112,7 @@ Wave 0 of the post-1.0 evolution effort: trust repairs. Every change closes a de
 ### Internal
 - SDK dependency 0.35.0 → 0.36.0; foundation artifacts regenerated (new event contract entries).
 - Local-SDK overlay dev tooling (`scripts/sdk-dev.ts link|status|restore`) with release-blocking gates in release.ts and publish-check so a local SDK can never ship.
-- Wave verified three ways: full gate block, a 3-lens adversarial code review, and a live tmux scenario replay of the five previously-failing dogfood scenarios (all PASS).
+- Verified three ways: full gate block, a 3-lens adversarial code review, and a live tmux scenario replay of the five previously-failing dogfood scenarios (all PASS).
 
 ## [1.0.0] — 2026-07-03
 

package/README.md

@@ -2,7 +2,7 @@
 
 [![CI](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml/badge.svg)](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Version](https://img.shields.io/badge/version-1.9.1-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
+[![Version](https://img.shields.io/badge/version-1.9.2-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
 
 A terminal-native AI coding, operations, automation, knowledge, and integration console with a typed runtime, omnichannel surfaces, structured memory/knowledge, and a raw ANSI renderer.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pellux/goodvibes-tui",
-  "version": "1.9.1",
+  "version": "1.9.2",
   "description": "Terminal-native GoodVibes product for coding, operations, automation, knowledge, channels, and daemon-backed control-plane workflows.",
   "type": "module",
   "main": "src/main.ts",

package/src/audio/player.ts

@@ -15,6 +15,14 @@ export interface StreamingAudioPlayer {
   readonly available: boolean;
   play(chunks: AsyncIterable<VoiceAudioChunk>, options: StreamingAudioPlaybackOptions): Promise<void>;
   stop(): void;
+  /**
+   * Resolves once the currently playing sink has finished naturally (its
+   * process closed) or after `timeoutMs`, whichever comes first; resolves
+   * immediately when nothing is playing. The exit path uses this to let the
+   * audio the user is already hearing finish inside a short bounded window
+   * instead of killing it mid-drain. stop() remains the instant cut.
+   */
+  waitForDrain(timeoutMs: number): Promise<void>;
 }
 
 export interface StreamingAudioPlaybackOptions {
@@ -25,6 +33,8 @@ export interface StreamingAudioPlaybackOptions {
 interface SpawnProcess {
   readonly stdin: Writable;
   once(event: 'close', listener: () => void): this;
+  once(event: 'spawn', listener: () => void): this;
+  once(event: 'error', listener: (error: unknown) => void): this;
   kill(signal?: NodeJS.Signals | number): boolean;
 }
 type SpawnProcessFactory = (command: string, args: readonly string[]) => SpawnProcess;
@@ -32,6 +42,13 @@ type SpawnProcessFactory = (command: string, args: readonly string[]) => SpawnPr
 export interface LocalStreamingAudioPlayerOptions {
   readonly env?: NodeJS.ProcessEnv;
   readonly spawnProcess?: SpawnProcessFactory;
+  /**
+   * Injected player command — the test seam companion to `spawnProcess`.
+   * When set, the constructor uses it verbatim instead of scanning PATH, so
+   * deterministic fake-sink tests never depend on mpv/ffplay being installed
+   * on the machine running them. Pass null to model "no player found".
+   */
+  readonly command?: StreamingAudioPlayerCommand | null;
 }
 
 export class LocalStreamingAudioPlayer implements StreamingAudioPlayer {
@@ -40,7 +57,9 @@ export class LocalStreamingAudioPlayer implements StreamingAudioPlayer {
   private readonly spawnProcess: SpawnProcessFactory;
 
   constructor(options: LocalStreamingAudioPlayerOptions = {}) {
-    this.command = resolveStreamingAudioPlayerCommand(options.env ?? process.env);
+    this.command = options.command !== undefined
+      ? options.command
+      : resolveStreamingAudioPlayerCommand(options.env ?? process.env);
     this.spawnProcess = options.spawnProcess ?? defaultSpawnProcess;
   }
 
@@ -67,12 +86,27 @@ export class LocalStreamingAudioPlayer implements StreamingAudioPlayer {
     options.signal?.addEventListener('abort', abort, { once: true });
 
     try {
+      // Head survival: hold the first audio byte until the sink has actually
+      // started (its 'spawn' event) instead of writing into a process that has
+      // not exec'd yet. Writing before the player is up is the spawn race that
+      // clipped the beginning of playback. A spawn failure rejects here so the
+      // caller can report it honestly rather than swallowing a dead player.
+      await awaitReady(proc, options.signal);
+      if (options.signal?.aborted) return;
+
       for await (const chunk of chunks) {
         if (options.signal?.aborted) break;
         if (chunk.data.byteLength === 0) continue;
         await writeStdin(proc, chunk.data);
       }
-      proc.stdin.end();
+
+      // An intentional interrupt (turn cancel / quit chord / /tts stop) has
+      // already torn the process down via `abort` and must cut immediately —
+      // do not wait on a graceful drain. A natural end-of-speech, by contrast,
+      // closes stdin and waits for the sink to play out every buffered sample
+      // so the tail of the response is never truncated.
+      if (options.signal?.aborted) return;
+      try { proc.stdin.end(); } catch { /* ignore */ }
       await waitForExit(proc);
     } finally {
       options.signal?.removeEventListener('abort', abort);
@@ -87,14 +121,33 @@ export class LocalStreamingAudioPlayer implements StreamingAudioPlayer {
     try { proc.stdin.destroy(); } catch { /* ignore */ }
     try { proc.kill('SIGTERM'); } catch { /* ignore */ }
   }
+
+  waitForDrain(timeoutMs: number): Promise<void> {
+    const proc = this.activeProcess;
+    if (!proc) return Promise.resolve();
+    return new Promise((resolve) => {
+      let settled = false;
+      const settle = () => {
+        if (settled) return;
+        settled = true;
+        clearTimeout(timer);
+        resolve();
+      };
+      const timer = setTimeout(settle, timeoutMs);
+      proc.once('close', settle);
+    });
+  }
 }
 
 export function resolveStreamingAudioPlayerCommand(env: NodeJS.ProcessEnv = process.env): StreamingAudioPlayerCommand | null {
   const mpv = findExecutable('mpv', env);
   if (mpv) {
+    // No --cache=no: mpv's read-ahead cache buffers the incoming pipe so the
+    // opening audio survives device-open latency and network jitter instead of
+    // underrunning while the output device is still spinning up.
     return {
       command: mpv,
-      args: ['--no-terminal', '--really-quiet', '--force-window=no', '--cache=no', '-'],
+      args: ['--no-terminal', '--really-quiet', '--force-window=no', '-'],
       label: 'mpv',
     };
   }
@@ -102,18 +155,51 @@ export function resolveStreamingAudioPlayerCommand(env: NodeJS.ProcessEnv = proc
   if (ffplay) {
     return {
       command: ffplay,
-      args: ['-nodisp', '-autoexit', '-loglevel', 'error', '-i', 'pipe:0'],
+      args: FFPLAY_BASE_ARGS,
       label: 'ffplay',
     };
   }
   return null;
 }
 
+// ffplay -autoexit quits as soon as its input ends, before the audio output
+// buffer has drained — that clips the tail of the response. `apad` appends a
+// short run of silence so the real audio is fully played out and only the
+// trailing silence gets trimmed.
+const FFPLAY_APAD = ['-af', 'apad=pad_dur=0.3'] as const;
+const FFPLAY_BASE_ARGS = ['-nodisp', '-autoexit', '-loglevel', 'error', ...FFPLAY_APAD, '-i', 'pipe:0'] as const;
+
 function buildPlayerArgs(command: StreamingAudioPlayerCommand, format?: string): readonly string[] {
   if (command.label !== 'ffplay' || !format) return command.args;
   const normalized = format.trim().toLowerCase();
   if (!normalized || normalized.includes('/')) return command.args;
-  return ['-nodisp', '-autoexit', '-loglevel', 'error', '-f', normalized, '-i', 'pipe:0'];
+  return ['-nodisp', '-autoexit', '-loglevel', 'error', ...FFPLAY_APAD, '-f', normalized, '-i', 'pipe:0'];
+}
+
+/**
+ * awaitReady — resolves once the spawned player has actually started (its
+ * 'spawn' event), rejects if it fails to start ('error'), and resolves early
+ * if the caller aborts during startup so an intentional interrupt is never
+ * blocked. This is the readiness gate that keeps the first audio byte from
+ * being written into a not-yet-running sink.
+ */
+function awaitReady(proc: SpawnProcess, signal?: AbortSignal): Promise<void> {
+  if (signal?.aborted) return Promise.resolve();
+  return new Promise<void>((resolve, reject) => {
+    let settled = false;
+    const settle = (action: () => void) => {
+      if (settled) return;
+      settled = true;
+      signal?.removeEventListener('abort', onAbort);
+      action();
+    };
+    const onSpawn = () => settle(resolve);
+    const onError = (error: unknown) => settle(() => reject(error instanceof Error ? error : new Error(String(error))));
+    const onAbort = () => settle(resolve);
+    proc.once('spawn', onSpawn);
+    proc.once('error', onError);
+    signal?.addEventListener('abort', onAbort, { once: true });
+  });
 }
 
 function findExecutable(name: string, env: NodeJS.ProcessEnv): string | null {

package/src/audio/spoken-turn-controller.ts

@@ -64,8 +64,8 @@ export class SpokenTurnController {
   /**
    * Returns whether speech was actually ACTIVE when stopped. The notice only
    * prints in that case — stop() on an idle controller used to notify anyway,
-   * spamming "[TTS] Spoken output stopped." on every Ctrl+C (batch replay
-   * D5/N-noise); callers use the return to decide whether the press "did a
+   * spamming "[TTS] Spoken output stopped." on every Ctrl+C (an earlier replay
+   * fix); callers use the return to decide whether the press "did a
    * job" (see handleCtrlC's consume-on-speech-stop).
    */
   stop(message?: string): boolean {
@@ -85,6 +85,29 @@ export class SpokenTurnController {
     return wasActive;
   }
 
+  /**
+   * Exit-path teardown: drops everything not yet audible (pending arm,
+   * buffered text, queued chunks) but lets the audio the user is already
+   * hearing finish naturally, capped at `drainTimeoutMs`, before the hard
+   * stop. Deliberate interrupts (Ctrl+C, /tts stop, turn cancel) keep their
+   * instant path through stop(); this is only for exiting the app while the
+   * final audio of a completed response is still draining.
+   */
+  async stopForExit(drainTimeoutMs = 2000): Promise<void> {
+    this.pendingPrompt = null;
+    this.activeTurnId = null;
+    this.chunker?.reset();
+    this.chunker = null;
+    this.stopTimer();
+    // Cancel chunks that have not started playing; the chunk currently in the
+    // sink is not in this set (its controller is released before playback).
+    for (const controller of this.abortControllers) controller.abort();
+    this.abortControllers.clear();
+    await this.player.waitForDrain(drainTimeoutMs);
+    // Backstop: anything still alive after the window is torn down hard.
+    this.stop();
+  }
+
   handleTurnEvent(event: TurnEvent): void {
     if (event.type === 'TURN_SUBMITTED') {
       this.maybeStartTurn(event.turnId, event.prompt);
@@ -170,6 +193,11 @@ export class SpokenTurnController {
       if (abortController.signal.aborted) return;
       const result = await resultPromise;
       this.abortControllers.delete(abortController);
+      // Re-check after the await: an abort that landed while synthesis was in
+      // flight (deliberate stop or exit) makes the rejection expected — it
+      // must not route into reportError, which would print a spurious error
+      // and hard-stop a sink that may still be draining the previous chunk.
+      if (abortController.signal.aborted) return;
       if (!result.ok) {
         this.reportError(result.error);
         return;

package/src/audio/spoken-turn-wiring.ts

@@ -10,6 +10,8 @@ export interface SpokenTurnRuntime {
   submitNextTurn(prompt: string): boolean;
   /** Returns whether speech was actually active (see controller.stop). */
   stop(message?: string): boolean;
+  /** Exit-path stop: lets the audio already playing drain, bounded (see controller.stopForExit). */
+  stopForExit(drainTimeoutMs?: number): Promise<void>;
 }
 
 export interface WireSpokenTurnRuntimeOptions {
@@ -63,5 +65,6 @@ export function wireSpokenTurnRuntime(options: WireSpokenTurnRuntimeOptions): Sp
     unsubs,
     submitNextTurn: (prompt) => controller.submitNextTurn(prompt),
     stop: (message) => controller.stop(message),
+    stopForExit: (drainTimeoutMs) => controller.stopForExit(drainTimeoutMs),
   };
 }

package/src/config/credential-availability.ts

@@ -1,5 +1,5 @@
 /**
- * credential-availability.ts — W6-C1 client-side credential-status read.
+ * credential-availability.ts — client-side credential-status read.
  *
  * When the TUI acts as a CLIENT of an adopted external daemon (the host-service
  * `mode === 'external'` topology — see runtime/bootstrap.ts), provider/model/secret

package/src/config/index.ts

@@ -56,7 +56,7 @@ export function getConfiguredSystemPrompt(configManager: Pick<ConfigManager, 'ge
 
 export { getConfiguredApiKeys, resolveApiKeys } from '@pellux/goodvibes-sdk/platform/config';
 
-// W6-C1: client-side credential-status read (honest-degrade, status-only). When the
+// Client-side credential-status read (honest-degrade, status-only). When the
 // TUI acts as a client of an adopted external daemon it reads provider/model/secret
 // STATUS from that daemon's `credentials.get`, never from its own surfaceRoot store.
 export {

package/src/core/turn-cancellation.ts

@@ -8,7 +8,7 @@ import type { SpokenTurnRuntime } from '../audio/spoken-turn-wiring.ts';
  * cap while still wiring `commandContext.isGenerating` (see W1.6 FIX 1).
  *
  * Returns whether SPEECH was actively stopped — a Ctrl+C that silenced live
- * TTS is consumed by that job (batch replay D5), same as a press that
+ * TTS is consumed by that job (an earlier replay fix), same as a press that
  * cleared a non-empty prompt; the quit chord starts from a quiet state.
  */
 export function createCancelGeneration(

package/src/daemon/cli.ts

@@ -163,7 +163,7 @@ async function main(): Promise<void> {
     logger.info('daemon: --hostname flag applied', { hostname: cliFlags.hostname });
   }
 
-  // D7a Layer 1: `install-service` / `uninstall-service` / `service-status` manage
+  // Service lifecycle: `install-service` / `uninstall-service` / `service-status` manage
   // the systemd USER unit for the shared daemon. They run BEFORE the daemon boots —
   // no runtime/services are constructed — and exit with the honest result code.
   const serviceSubcommand = cli.positionals[0];
@@ -204,7 +204,7 @@ async function main(): Promise<void> {
     homeDirectory,
   });
 
-  // F2: Load persisted providers from disk so the provider registry is pre-populated
+  // Load persisted providers from disk so the provider registry is pre-populated
   // on standalone daemon startup (same machinery the TUI uses after /scan).
   const discoveryRoots = { homeDirectory, surfaceRoot: 'tui' };
   const persistedProviders = loadPersistedProviders(discoveryRoots);
@@ -213,7 +213,7 @@ async function main(): Promise<void> {
     logger.info('daemon: loaded persisted providers', { count: persistedProviders.length });
   }
 
-  // F2: Run a background LAN scan (non-blocking). Discovered servers are registered
+  // Run a background LAN scan (non-blocking). Discovered servers are registered
   // and persisted so subsequent daemon restarts benefit from the warm cache.
   void scan().then((result) => {
     if (result.servers.length > 0) {
@@ -245,7 +245,7 @@ async function main(): Promise<void> {
   // If no explicit daemon token is set, use the companion token so mobile apps can connect.
   const daemonHomeDir = join(homeDirectory, '.goodvibes', 'daemon');
   const companionTokenRecord = getOrCreateCompanionToken('tui', { daemonHomeDir });
-  // F3 resolution (TUI 0.19.20): remove stale pre-0.21.28 workspace-scoped operator
+  // Fix (TUI 0.19.20): remove stale pre-0.21.28 workspace-scoped operator
   // token files so only the canonical <daemonHomeDir>/operator-tokens.json survives.
   const prune = pruneStaleOperatorTokens({
     daemonHomeDir,

package/src/daemon/service-commands.ts

@@ -1,5 +1,5 @@
 /**
- * D7a Layer 1 (TUI wiring) — `goodvibes-daemon install-service | uninstall-service
+ * TUI wiring — `goodvibes-daemon install-service | uninstall-service
  * | service-status`.
  *
  * The daemon is a SYSTEM SERVICE. These subcommands install it as a durable host
@@ -7,8 +7,8 @@
  * on Windows) so N surfaces share ONE daemon that survives reboots, instead of
  * every surface spawning a session-scoped daemon.
  *
- * W3 drift note: the SDK's D7a-era `systemd-user-service.ts` (a Linux-only,
- * bespoke systemd shim) was dead code and got deleted in SDK W3-S5. The SDK's
+ * Drift note: the SDK's older `systemd-user-service.ts` (a Linux-only,
+ * bespoke systemd shim) was dead code and got deleted from the SDK. The SDK's
  * REAL wired service machinery — reached in production by the daemon's own HTTP
  * `/api/service/*` routes via facade-composition.ts — is
  * `PlatformServiceManager` (`@pellux/goodvibes-sdk/platform/daemon`): a single
@@ -26,7 +26,7 @@
  *     stray "enabled" symlink may remain until `systemctl --user daemon-reload`
  *     (offered back as a suggested follow-up) or the next login cleans it up.
  *
- * W4-D1: a fourth subcommand, `migrate-service`, closes the Wave-3 "detect and
+ * A fourth subcommand, `migrate-service`, closes the earlier "detect and
  * disclose only" inheritance (W3 Finding 4, below) with a GUIDED, CONSENTED
  * takeover of the legacy `goodvibes-daemon.service` unit. Design constraints,
  * all load-bearing:
@@ -77,9 +77,9 @@ export {
 export type { ManagedServiceActionRunner } from '../runtime/legacy-daemon-migration.ts';
 
 // ---------------------------------------------------------------------------
-// W3 Finding 4: legacy-unit detection. W4-D1: guided migration.
+// Legacy-unit detection, plus guided migration.
 //
-// The prior D7a-era command installed the daemon's systemd unit under the
+// The prior command installed the daemon's systemd unit under the
 // literal name `goodvibes-daemon.service`. This module (rewired onto
 // PlatformServiceManager, see the file banner above) manages a DIFFERENT
 // unit name (`goodvibes`, SERVICE_NAME). A host that still has the legacy
@@ -243,7 +243,7 @@ function failed(action: 'install' | 'uninstall' | 'status', status: ManagedServi
 
 /**
  * `migrate-service`: the guided, consented takeover of the legacy
- * `goodvibes-daemon.service` unit (W4-D1). Thin wrapper over
+ * `goodvibes-daemon.service` unit. Thin wrapper over
  * `runLegacyDaemonMigration` (`../runtime/legacy-daemon-migration.ts`) — see
  * that module for the design constraints (never auto-migrate,
  * new-up-then-old-down, adopt-or-warn/never kill an unrecognized process,
@@ -314,7 +314,7 @@ export async function runDaemonServiceCli(input: DaemonServiceCliInput): Promise
       const extra: string[] = [];
       if (stopped.actionError) extra.push(`(it may not have been running: ${stopped.actionError})`);
       // W3 Finding 4: this command only ever touches the TRACKED unit
-      // (whatever name/path actually resolved, per F2 — not necessarily the
+      // (whatever name/path actually resolved — not necessarily the
       // SERVICE_NAME constant) above — say so explicitly when a legacy unit
       // also exists, so its continued presence is never a silent surprise.
       if (legacy.present) extra.push(legacyUnitNote(legacy, resolveManagedUnitName(uninstalled)));

package/src/input/command-registry.ts

@@ -192,16 +192,16 @@ export interface CommandSessionServices {
    * fresh Orchestrator's zeroed default (W0.9).
    */
   readonly hydrateSessionUsage?: () => void;
-  /** Wave 4 (wo703): the orchestration engine's command-facing facade — see runtime/workstream-services.ts. */
+  /** The orchestration engine's command-facing facade — see runtime/workstream-services.ts. */
   readonly workstreamEngine?: import('../runtime/workstream-services.ts').WorkstreamCommandService;
-  /** Wave 5 (wo804): the repo source-tree code index — see runtime/code-index-services.ts. */
+  /** The repo source-tree code index — see runtime/code-index-services.ts. */
   readonly codeIndexStore?: import('@pellux/goodvibes-sdk/platform/state').CodeIndexStore;
-  /** Wave-5 Stage B: tool-site reindex scheduler — `/codebase status` reports its last activity. */
+  /** Tool-site reindex scheduler — `/codebase status` reports its last activity. */
   readonly codeIndexReindexScheduler?: import('@pellux/goodvibes-sdk/platform/state').CodeIndexReindexScheduler;
-  /** Wave-5 Stage B: whether the (default-off) `agent-passive-code-injection` flag is on — for `/codebase status`. */
+  /** Whether the (default-off) `agent-passive-code-injection` flag is on — for `/codebase status`. */
   readonly isPassiveCodeInjectionFlagEnabled?: () => boolean;
   /**
-   * Wave 5 (wo805): the MAIN interactive session's per-turn passive-injection
+   * The MAIN interactive session's per-turn passive-injection
    * honesty ring — `Orchestrator.getTurnInjections()`, the main-session
    * counterpart to `AgentRecord.turnInjections` (wo801). `/recall injections`
    * with no agent id reads this. Optional so command contexts built without an

package/src/input/commands/config.ts

@@ -10,7 +10,7 @@ export function registerConfigCommand(registry: CommandRegistry): void {
     usage: '[category|key] | set <key> <value>',
     argsHint: '[category|key] | set <key> <value>',
     handler(args, ctx) {
-      // Batch replay D2: `/config set <key> <value>` used to fall through to
+      // An earlier replay fix: `/config set <key> <value>` used to fall through to
       // the workspace with the assignment silently ignored — the dishonest-
       // fallthrough class. `set` is now a real verb.
       if (args[0] === 'set') {

package/src/input/commands/memory.ts

@@ -29,7 +29,7 @@ import { VALID_CLASSES, VALID_REVIEW_STATES, VALID_SCOPES } from './recall-share
  * src/input/commands/session-content.ts) with no modal surface — so that
  * work order deliberately did NOT touch /memory and used /recall instead.
  *
- * W6-C3 update (Wave 6 core-verb pass, MEMORY fragmentation — worst-class
+ * Update from the core-verb naming pass (MEMORY fragmentation — worst-class
  * collision #2): the agent's own `/memory` command was a plain alias for its
  * `/recall`-equivalent the whole time, meaning "/memory" meant two unrelated
  * things depending which surface you were on. The session-notes command was

package/src/input/commands/planning-runtime.ts

@@ -262,7 +262,7 @@ export function registerPlanningRuntimeCommands(registry: CommandRegistry): void
         return;
       }
 
-      // Defense (Wave 6 review): a single verb-looking token is almost never a
+      // Defense (review finding): a single verb-looking token is almost never a
       // real planning goal — it is a mistyped or removed subcommand. The
       // Planning modal used to dispatch `/plan dismiss`, which has no
       // subcommand and silently fell through to this free-form branch, seeding

package/src/input/commands/recall-review.ts

@@ -104,9 +104,9 @@ export function handleRecallExplain(args: string[], context: CommandContext): vo
 }
 
 /**
- * W5.2 (wo803) — per-turn passive knowledge injection inspectability.
+ * Per-turn passive knowledge injection inspectability.
  *
- * With an explicit agent id, reads `AgentRecord.turnInjections` (Wave-5 wo801)
+ * With an explicit agent id, reads `AgentRecord.turnInjections`
  * via `context.ops.agentManager.exportState()` — the CommandContext-exposed
  * `ShellAgentManagerService` doesn't have a `getStatus`/`list` pair, but
  * `exportState()` returns the same full `AgentRecord[]` (it's what

package/src/input/commands/session-content.ts

@@ -384,7 +384,7 @@ export function registerSessionContentCommands(registry: CommandRegistry): void
     },
   });
 
-  // W6-C3 (Wave 6 core-verb pass, MEMORY fragmentation — worst-class
+  // From the core-verb naming pass (MEMORY fragmentation — worst-class
   // collision #2): this command used to be named /memory, colliding with
   // the agent's /memory (an alias that forwards to /recall, the durable
   // cross-session MemoryStore) — same command name, two unrelated features.

package/src/input/feed-context-factory.ts

@@ -1,7 +1,7 @@
 /**
  * feed-context-factory.ts — Construction and mutable-field sync for InputFeedContext.
  *
- * Extracted from handler.ts (Wave 4α review, 0.18.23) to keep handler.ts under the
+ * Extracted from handler.ts (review follow-up, 0.18.23) to keep handler.ts under the
  * 800-line architecture cap.
  *
  * Two exported functions:

package/src/input/handler-content-actions.ts

@@ -447,8 +447,8 @@ export function handleCtrlC(
   } catch {
     // Non-fatal to the exit chord; the quit-window bookkeeping still runs.
   }
-  // A press that silenced LIVE speech is consumed by that job (batch replay
-  // D5) — symmetric with the prompt-clearing press above. The quit chord
+  // A press that silenced LIVE speech is consumed by that job (an earlier replay
+  // fix) — symmetric with the prompt-clearing press above. The quit chord
   // ("Ctrl+C x2") starts from a quiet state; turn-aborts still count toward
   // the double-press.
   if (stoppedSpeech) return;

package/src/input/handler-feed-routes.ts

@@ -189,7 +189,7 @@ export function handlePanelFocusToken(state: PanelFocusRouteState, token: InputT
 export type IndicatorFocusRouteState = {
   indicatorFocused: boolean;
   modalOpened: (name: string) => void;
-  /** W2.2: the footer process indicator's [Enter] opens the Fleet panel (F2 also opens the Fleet panel; the retired process modal was removed in W6.2). */
+  /** The footer process indicator's [Enter] opens the Fleet panel (F2 also opens it; the process modal was retired). */
   openFleetPanel: () => void;
   requestRender: () => void;
 };
@@ -337,7 +337,7 @@ export type KeyRouteState = {
   commandRegistry?: CommandRegistry | null;
   autocomplete: AutocompleteEngine | null;
   blockActionsMenu: { open: (block: BlockMeta) => void };
-  /** W6.2 e: F2 opens+focuses the Fleet panel (which subsumes the retired process modal). */
+  /** F2 opens+focuses the Fleet panel (which subsumes the retired process modal). */
   openFleetPanel: () => void;
   modalOpened: (name: string) => void;
   saveUndoState: () => void;

package/src/input/handler-feed.ts

@@ -186,7 +186,7 @@ export function feedInputTokens(context: InputFeedContext, tokens: readonly Inpu
   // focus to it. panelManager.open() only makes the panel active — focus is a
   // separate axis (see PanelManager.focusPanels()/getFocusTarget()); without the
   // focusPanels() call, j/k/i/K land silently in the composer until Tab. Used by
-  // the footer indicator's [Enter] and by F2 (W6.2 e: F2 and the footer
+  // the footer indicator's [Enter] and by F2 (F2 and the footer
   // indicator both subsume the retired process modal). Mirrors the Ctrl+P
   // panel-picker launcher (ui-openers.ts openPanelPicker).
   const openFleetPanel = (): void => {

package/src/input/handler-onboarding-daemon-adopt.ts

@@ -1,5 +1,5 @@
 /**
- * F1 (One-Platform Wave 2 friction fix): the onboarding wizard's "Connect to
+ * Friction fix: the onboarding wizard's "Connect to
  * this daemon now" action, wired from the Network step's `network.daemon-source`
  * = 'adopt' fields. Extracted from handler-onboarding.ts to keep that file
  * under the architecture line cap.
@@ -88,8 +88,8 @@ export async function handleConnectExistingDaemonForHandler(handler: InputHandle
 }
 
 /**
- * W4-D1: the guided UX entry point for migrating a legacy
- * `goodvibes-daemon.service` unit (Wave 3 shipped detect+disclose only; this
+ * The guided UX entry point for migrating a legacy
+ * `goodvibes-daemon.service` unit (an earlier release shipped detect+disclose only; this
  * closes that inheritance). This is a thin wrapper over
  * `detectLegacyUnit` + `runLegacyDaemonMigration`
  * (`../runtime/legacy-daemon-migration.ts`) — the actual migration mechanics

package/src/input/handler-picker-routes.ts

@@ -22,7 +22,7 @@ export function handleModelPickerToken(state: ModelPickerRouteState, token: Inpu
 
   if (token.type === 'key') {
     if (token.logicalName === 'escape') {
-      // W3-T2: search now starts focused by default (see
+      // Search now starts focused by default (see
       // ModelPickerModal.openAllModels() doc comment). Escape with an empty
       // query used to only blurSearch() here, leaving the picker open and
       // requiring a SECOND Escape to actually close it — confusing on a
@@ -133,7 +133,7 @@ export function handleModelPickerToken(state: ModelPickerRouteState, token: Inpu
         state.modelPicker.focusSearch();
       } else if (state.modelPicker.searchFocused) {
         // Symmetric with 'down' (below): search now starts focused by default
-        // (W3-T2), so 'up' must have a way out of it too, or it would be a
+        // so 'up' must have a way out of it too, or it would be a
         // silent no-op the very first time a user reaches for the list.
         state.modelPicker.blurSearch();
       } else {

package/src/input/handler-shortcuts.ts

@@ -121,7 +121,7 @@ export function handleGlobalShortcutToken(
     case 'panel-close': {
       const pm = state.panelManager;
       const active = pm.getActivePanel();
-      // Wave-3: give the active panel a chance to consume Ctrl+X for an
+      // Give the active panel a chance to consume Ctrl+X for an
       // in-panel action (FleetPanel session-tab detach) before it closes the
       // panel outright — see Panel.interceptPanelClose's doc comment.
       if (active?.interceptPanelClose?.()) {

package/src/input/model-picker.ts

@@ -264,7 +264,7 @@ export class ModelPickerModal {
   /**
    * Open showing all models — entry point for /model.
    *
-   * W3-T2: search starts FOCUSED. Live tmux repro (cc-w3-t2) showed the actual
+   * Search starts FOCUSED. A live tmux repro showed the actual
    * friction wasn't the filter itself (it already works — fuzzy multi-word
    * substring over id/displayName/provider) but that with search unfocused by
    * default, typing a search term went character-by-character into single-key
@@ -295,7 +295,7 @@ export class ModelPickerModal {
     this.scrollOffset = 0;
   }
 
-  /** Open showing providers first — entry point for /provider. W3-T2: search starts focused — see openAllModels(). */
+  /** Open showing providers first — entry point for /provider. Search starts focused — see openAllModels(). */
   openProviders(providers: string[], currentProvider: string): void {
     this.previousMode = null;
     this.providers = providers;