@pellux/goodvibes-tui 2.0.14 → 2.0.15

package/src/panels/modals/memory-modal.ts

@@ -12,7 +12,7 @@ import { classifyConsolidationFetchError } from '../memory-consolidation-gateway
 
 // ---------------------------------------------------------------------------
 // Memory → config-modal surface (group-B port). Two tabs: 'All Records'
-// (the full record list) and 'Review Queue' (the operator review queue) — the
+// (the full record list) and 'Review Queue' (the operator review queue), the
 // same split the panel toggled with Tab, now real host tabs. Review-state
 // mutations (reviewed/stale/contradicted/fresh) and record delete route to the
 // existing `/recall review` / `/recall remove` command path (charter: no
@@ -22,14 +22,14 @@ import { classifyConsolidationFetchError } from '../memory-consolidation-gateway
 // "not configured" copy renders as an honest degraded state.
 //
 // Read path (memory-spine adoption): reads go through the spine client's
-// `honestSearch` — the MemoryAccess shape — not the raw registry, so a session
+// `honestSearch`, the MemoryAccess shape, not the raw registry, so a session
 // that has adopted an external daemon reads the SAME wire-served records a
 // wire failure is deliberately surfaced (never a silently stale local copy).
 // `buildView()` stays synchronous/pure per the ConfigModalSurface contract;
 // `refresh()` is async and calls the `requestRender` callback `onOpen` hands
 // it when the data lands. The Review Queue ranking is recomputed client-side
 // from the same honestSearch batch (see `rankForReview` below) rather than
-// through a second wire call — `reviewQueue` is not part of MemoryAccess.
+// through a second wire call, `reviewQueue` is not part of MemoryAccess.
 // ---------------------------------------------------------------------------
 
 /** Minimal read shape of a `MemoryRecord` this modal renders. */
@@ -67,7 +67,7 @@ export interface MemoryModalDeps {
   };
   /**
    * Resolve the memory-consolidation-receipts gateway (memory-consolidation-gateway.ts),
-   * lazily — called fresh each time the Proposals tab (re)fetches, exactly like
+   * lazily, called fresh each time the Proposals tab (re)fetches, exactly like
    * the Fleet panel's `resolveGateway` (fleet-gateway.ts / fleet-acts.ts). Absent
    * in a session with no daemon-backed control plane wired: the Proposals tab
    * then renders its "unavailable" honest state without ever attempting a fetch.
@@ -75,7 +75,7 @@ export interface MemoryModalDeps {
   readonly resolveConsolidationGateway?: () => MemoryConsolidationGatewayResolution;
 }
 
-/** The Proposals tab's fetch state — one honest rendering per state, never a blend. */
+/** The Proposals tab's fetch state, one honest rendering per state, never a blend. */
 type ProposalsStatus =
   | { readonly kind: 'loading' }
   | { readonly kind: 'unavailable'; readonly reason: string }
@@ -86,7 +86,7 @@ type ProposalsStatus =
  * Client-side port of the SDK's MemoryStore.reviewQueue ranking
  * (memory-store-helpers.ts reviewQueueScore/isReviewCandidate): all four
  * review states are candidates, scored by state + inverse confidence (flagged
- * states penalized), tie-broken by recency. Presentation ordering only — not
+ * states penalized), tie-broken by recency. Presentation ordering only, not
  * a wire call, so exact parity with the server's own tie-breaking on ids it
  * has never seen is not load-bearing.
  */
@@ -119,9 +119,9 @@ class MemoryModalSurface implements ConfigModalSurface {
   readonly title = 'Memory';
   private allRecords: MemoryRecordLike[] = [];
   private reviewRecords: MemoryRecordLike[] = [];
-  /** Honest note on the last read: a wire failure (client mode) or the index-unavailable fallback reason — never silently dropped. */
+  /** Honest note on the last read: a wire failure (client mode) or the index-unavailable fallback reason, never silently dropped. */
   private loadNote: string | null = null;
-  /** The Proposals tab's fetch state — starts 'loading' whenever a gateway is wired (see refreshProposals). */
+  /** The Proposals tab's fetch state, starts 'loading' whenever a gateway is wired (see refreshProposals). */
   private proposalsStatus: ProposalsStatus = { kind: 'loading' };
   private requestRender: (() => void) | null = null;
 
@@ -141,7 +141,7 @@ class MemoryModalSurface implements ConfigModalSurface {
     // Review Queue tab. A DISTINCT key from 'enter' (not shared with
     // markReviewed): ConfigModal.resolveAction matches the FIRST action bound
     // to a key and returns null if THAT one's enabledFor fails, rather than
-    // trying the next action bound to the same key — so gating two different
+    // trying the next action bound to the same key, so gating two different
     // 'enter' actions by tabId alone would silently break one of them.
     { key: 'v', id: 'jumpToReviewQueue', label: 'view in review queue', enabledFor: this.proposalsGate },
   ];
@@ -175,11 +175,11 @@ class MemoryModalSurface implements ConfigModalSurface {
 
   /**
    * Lazy fetch of memory.consolidation.receipts (memory-consolidation-gateway.ts)
-   * — only attempted when this surface opens or refreshes, never polled. No
+   *, only attempted when this surface opens or refreshes, never polled. No
    * gateway resolver wired at all (session has no daemon-backed control
    * plane) renders the same honest "unavailable" state as a resolved-but-
    * refused gateway (daemon disabled / no control-plane URL) or a 501/404
-   * from an older daemon with no consolidation scheduler — three different
+   * from an older daemon with no consolidation scheduler, three different
    * causes, one bucket, because from the operator's seat they mean the same
    * thing: nothing to show, and no fault of theirs.
    */
@@ -239,7 +239,7 @@ class MemoryModalSurface implements ConfigModalSurface {
       // itself (the daemon sets reviewState 'contradicted' + staleReason); a
       // cross-scope-duplicate proposal marks the record 'fresh' with NO
       // staleReason, so without this correlation those rows are bare and
-      // unexplained (item 3) — fall back to the fetched proposal's own
+      // unexplained (item 3), fall back to the fetched proposal's own
       // reason only when the record didn't already carry one.
       const proposal = record.staleReason ? undefined : proposalByRecord.get(record.id);
       const reasonSuffix = record.staleReason
@@ -263,12 +263,12 @@ class MemoryModalSurface implements ConfigModalSurface {
   }
 
   /**
-   * The Proposals tab — WHAT the daemon's idle-time consolidation pass
+   * The Proposals tab, WHAT the daemon's idle-time consolidation pass
    * proposed (contradiction / cross-scope-duplicate / stale-delete) and is
    * holding for human judgment, read lazily over memory.consolidation.receipts
    * (memory-consolidation-gateway.ts). Three distinct honest states render as
-   * three distinct lines — 'loading' / 'unavailable' / 'error' never collapse
-   * into a shared "nothing to show" — plus the true empty state ('ready' with
+   * three distinct lines, 'loading' / 'unavailable' / 'error' never collapse
+   * into a shared "nothing to show", plus the true empty state ('ready' with
    * zero proposals) which is a fourth, equally honest line.
    */
   private proposalsTab(): ConfigModalTab {
@@ -285,14 +285,14 @@ class MemoryModalSurface implements ConfigModalSurface {
     }
     const rows: ConfigModalRow[] = status.proposals.map((proposal, index) => ({
       id: `proposal:${index}`,
-      label: `[${proposal.kind}] ${proposal.reason}  — ${proposal.ids.length} record${proposal.ids.length === 1 ? '' : 's'}: ${proposal.ids.join(', ')}`,
+      label: `[${proposal.kind}] ${proposal.reason}; ${proposal.ids.length} record${proposal.ids.length === 1 ? '' : 's'}: ${proposal.ids.join(', ')}`,
     }));
     return {
       id: 'proposals',
       label: 'Proposals',
       header,
       rows,
-      emptyText: 'No pending proposals — nothing awaiting judgment right now.',
+      emptyText: 'No pending proposals: nothing awaiting judgment right now.',
     };
   }
 
@@ -333,7 +333,7 @@ class MemoryModalSurface implements ConfigModalSurface {
 
   /**
    * The Proposals tab's "jump": move to the Review Queue tab with one of the
-   * selected proposal's affected records selected — the same host mechanism
+   * selected proposal's affected records selected, the same host mechanism
    * (`ctx.jumpToRow`) any future in-surface jump would use. A proposal's
    * `ids` are not guaranteed to all be inside the review queue's top-24
    * window, so this picks the first id that IS present there rather than
@@ -361,7 +361,7 @@ export function createMemoryModalSurface(deps: MemoryModalDeps): ConfigModalSurf
 
 /**
  * Deterministic golden fixture: fixed memory records with frozen createdAt
- * timestamps — no live registry, no wall-clock, no random ids. Promise-backed
+ * timestamps, no live registry, no wall-clock, no random ids. Promise-backed
  * (see ecosystem-modals-golden.test.ts): `honestSearch` is async even for this
  * in-memory fixture (matching the real MemoryAccess shape), so the factory
  * pre-awaits the initial `onOpen` refresh before handing back the surface.

package/src/panels/modals/modal-surface-helpers.ts

@@ -5,7 +5,7 @@ import type { ConfigModalRow } from '../../input/config-modal-types.ts';
 /**
  * Shared formatting helpers for config-modal surfaces. Row styling reuses
  * DEFAULT_PANEL_PALETTE (the retired panels' palette) so a migrated modal reads
- * as the same surface it replaced — the goldens stay panel-consistent.
+ * as the same surface it replaced, the goldens stay panel-consistent.
  */
 export const PALETTE = DEFAULT_PANEL_PALETTE;
 

package/src/panels/modals/modal-theme.ts

@@ -5,7 +5,7 @@ import { activeUiTones, registerThemeRefresh } from '../../renderer/theme.ts';
 //
 // Derived entirely from the chrome token set so the builders carry NO raw hex
 // color literals (architecture: no-raw-hex-literal-growth). Rebuilt IN PLACE
-// on theme flips via registerThemeRefresh — the group-B surfaces read
+// on theme flips via registerThemeRefresh, the group-B surfaces read
 // MODAL_TONES by reference at render time, so a dark-pinned module const here
 // left them rendering dark accents on light chrome (batch refutation
 // finding 2). Mirrors the polish-core/overlay-box/modal-factory pattern.
@@ -30,9 +30,9 @@ function buildModalTones() {
     dim: T.fg.dim,
     /** Primary text. */
     primary: T.fg.primary,
-    /** QR module foreground — high-contrast, mode-appropriate. */
+    /** QR module foreground, high-contrast, mode-appropriate. */
     qrDark: T.fg.inverse,
-    /** QR field background — high-contrast, mode-appropriate. */
+    /** QR field background, high-contrast, mode-appropriate. */
     qrLight: T.fg.primary,
   };
 }

package/src/panels/modals/pairing-modal.ts

@@ -12,7 +12,7 @@ import { formatPairingOffers, formatPostureCapabilities, pairingPostureNotice }
 // ---------------------------------------------------------------------------
 // Device Pairing config-modal surface. Shows the web-app origin, the per-device
 // token's name, a masked token/deep-link pair, the offer set with plain-language
-// consequences, and a scannable QR of the `#pair=<token>` deep link — a camera
+// consequences, and a scannable QR of the `#pair=<token>` deep link, a camera
 // scan opens the web app already signed in. No raw JSON connection blob is ever
 // encoded.
 //
@@ -20,7 +20,7 @@ import { formatPairingOffers, formatPostureCapabilities, pairingPostureNotice }
 // each modal open mints its OWN named per-device token, so a missing pairing
 // service degrades honestly to an "unavailable" state instead of throwing at
 // registration time. "new device token" clears the cache and re-pulls to mint a
-// fresh token + QR in place — non-destructive now, because a freshly minted
+// fresh token + QR in place, non-destructive now, because a freshly minted
 // token no longer rotates a shared secret out from under a live device; old
 // tokens stay valid until explicitly revoked in the settings device surface.
 // ---------------------------------------------------------------------------
@@ -32,14 +32,14 @@ export interface PairingModalConnectionInfo {
   readonly token: string;
   /** The per-device token's editable name. */
   readonly tokenName: string;
-  /** The `#pair=<token>` deep link the QR encodes — opens the web app signed in. */
+  /** The `#pair=<token>` deep link the QR encodes, opens the web app signed in. */
   readonly deepLink: string;
   /** The offer set this pairing carries (each declinable in the web app). */
   readonly offers: readonly PairingHandoffOfferKind[];
   /**
    * The honest TLS/capability posture of the web origin the deep link opens
    * (the SDK's describeOriginPosture / the handoff's `posture` field). The one
-   * honest LAN line and the labeled capability list both render from here — never
+   * honest LAN line and the labeled capability list both render from here, never
    * from a locally-authored string. Absent when no web origin is known.
    */
   readonly posture?: OriginPosture | undefined;
@@ -47,7 +47,7 @@ export interface PairingModalConnectionInfo {
 export interface PairingModalControlPlaneSnapshot { readonly activeClientIds: readonly string[]; }
 export interface PairingModalReadModel<T> { getSnapshot(): T; }
 
-/** tailscale.get shape — the daemon's honest tailscale detection (quiet when absent). */
+/** tailscale.get shape, the daemon's honest tailscale detection (quiet when absent). */
 export interface PairingTailscaleStatus {
   readonly available: boolean;
   readonly loggedIn: boolean;
@@ -56,7 +56,7 @@ export interface PairingTailscaleStatus {
   readonly detail: string;
   readonly lastServe?: PairingTailscaleServeReceipt | undefined;
 }
-/** tailscale.serve.run receipt — the one-action serve result rendered verbatim. */
+/** tailscale.serve.run receipt, the one-action serve result rendered verbatim. */
 export interface PairingTailscaleServeReceipt {
   readonly at: number;
   readonly command: string;
@@ -66,14 +66,14 @@ export interface PairingTailscaleServeReceipt {
 }
 
 export interface PairingModalDeps {
-  /** Lazy connection-info provider — returns null when the daemon/companion
+  /** Lazy connection-info provider, returns null when the daemon/companion
    *  token cannot be resolved (honest degraded state instead of a throw). */
   readonly getConnectionInfo: () => PairingModalConnectionInfo | null;
   readonly controlPlaneReadModel?: PairingModalReadModel<PairingModalControlPlaneSnapshot>;
   readonly copyToClipboard?: (text: string) => void;
   /**
    * Probe tailscale (tailscale.get) once on open. Absent dep, a null result, or
-   * `available:false` all keep the tailscale affordance QUIET — never a nag.
+   * `available:false` all keep the tailscale affordance QUIET, never a nag.
    * Present + available ⇒ the surface offers the one-action serve.
    */
   readonly probeTailscale?: () => Promise<PairingTailscaleStatus | null>;
@@ -85,7 +85,7 @@ export interface PairingModalDeps {
   readonly runTailscaleServe?: () => Promise<PairingTailscaleServeReceipt | null>;
 }
 
-// Fixed-width placeholder — deliberately NOT derived from the real secret's
+// Fixed-width placeholder, deliberately NOT derived from the real secret's
 // length (mirrors QrPanel.SECRET_MASK), so masking doesn't leak length.
 const SECRET_MASK = '••••••••••••';
 
@@ -108,7 +108,7 @@ class PairingModalSurface implements ConfigModalSurface {
     { key: 'v', id: 'toggleReveal', label: 'reveal token' },
     { key: 'c', id: 'copyLink', label: 'copy link', enabledFor: () => Boolean(this.deps.copyToClipboard) },
     { key: 'r', id: 'newToken', label: 'new device token' },
-    // The one-action serve affordance — offered ONLY when tailscale is detected
+    // The one-action serve affordance, offered ONLY when tailscale is detected
     // and not already serving https; a second 't' press (the standard confirm)
     // runs tailscale.serve.run. Absence keeps this key unadvertised and inert.
     {
@@ -141,7 +141,7 @@ class PairingModalSurface implements ConfigModalSurface {
   buildView(): ConfigModalView {
     const info = this.ensureInfo();
     if (!info) {
-      return { title: 'Device Pairing', degraded: 'Device pairing is unavailable — the pairing token service could not be resolved for this session.', tabs: [{ id: 'pairing', label: 'Pairing', rows: [] }] };
+      return { title: 'Device Pairing', degraded: 'Device pairing is unavailable: the pairing token service could not be resolved for this session.', tabs: [{ id: 'pairing', label: 'Pairing', rows: [] }] };
     }
     const { url, token, tokenName, deepLink, offers, posture } = info;
     const displayToken = this.revealed ? token : SECRET_MASK;
@@ -149,7 +149,7 @@ class PairingModalSurface implements ConfigModalSurface {
     const displayLink = this.revealed ? deepLink : SECRET_MASK;
 
     const rows: ConfigModalRow[] = [];
-    rows.push(infoRow('intro', 'Scan with the GoodVibes web app to pair this device — it opens already signed in.', { dim: true }));
+    rows.push(infoRow('intro', 'Scan with the GoodVibes web app to pair this device; it opens already signed in.', { dim: true }));
     rows.push(infoRow('url', `Web app   ${url}`));
     rows.push(infoRow('name', `Device    ${tokenName}`));
     rows.push(infoRow('token', `Token     ${displayToken}`, { fg: MODAL_TONES.reasoning }));
@@ -159,13 +159,13 @@ class PairingModalSurface implements ConfigModalSurface {
       rows.push(infoRow('companions', `Devices connected: ${connected}`, connected > 0 ? { fg: MODAL_TONES.good } : { dim: true }));
     }
 
-    // The offer set carried by this pairing — each named with its plain-language
+    // The offer set carried by this pairing, each named with its plain-language
     // consequence, each declinable in the web app.
     if (offers.length > 0) {
       rows.push(infoRow('offers-h', 'Offers (each declinable when you pair):', { dim: true }));
       formatPairingOffers(offers).forEach((line, i) => rows.push(infoRow(`offer:${i}`, line)));
     }
-    // The labeled browser-capability list — what the paired device actually gets
+    // The labeled browser-capability list, what the paired device actually gets
     // over this origin (and, for a gated one, why not). Rendered from the posture,
     // never hidden behind a dead button.
     const capabilities = formatPostureCapabilities(posture);
@@ -173,14 +173,14 @@ class PairingModalSurface implements ConfigModalSurface {
       rows.push(infoRow('caps-h', 'This device will get:', { dim: true }));
       capabilities.forEach((line, i) => rows.push(infoRow(`cap:${i}`, line)));
     }
-    // The ONE honest LAN line — the SDK posture's own notice (LAN_PLAIN_HTTP_NOTICE),
+    // The ONE honest LAN line, the SDK posture's own notice (LAN_PLAIN_HTTP_NOTICE),
     // present only for the plain-http-on-LAN posture, never a nag elsewhere.
     const notice = pairingPostureNotice(posture);
     if (notice) rows.push(infoRow('posture', notice, { fg: MODAL_TONES.reasoning }));
-    // The tailscale serve affordance — quiet unless tailscale is detected.
+    // The tailscale serve affordance, quiet unless tailscale is detected.
     this.appendTailscaleRows(rows);
 
-    // ASCII QR of the deep link — a camera scan opens the web app already
+    // ASCII QR of the deep link, a camera scan opens the web app already
     // carrying the one-time token. No raw JSON blob is ever encoded. The
     // multi-line preformatted string is split into one non-selectable row per row.
     const qr = renderQrToString(generateQrMatrix(deepLink));
@@ -195,7 +195,7 @@ class PairingModalSurface implements ConfigModalSurface {
   }
 
   /**
-   * Append the tailscale section — quiet when tailscale is undetected or
+   * Append the tailscale section, quiet when tailscale is undetected or
    * unavailable. When detected, the surface names the one-action serve; once a
    * serve has produced (or tailscale already reports) an https MagicDNS URL, that
    * URL and the serve receipt render verbatim so the encrypted path is visible.
@@ -208,7 +208,7 @@ class PairingModalSurface implements ConfigModalSurface {
       rows.push(infoRow('ts-h', 'Encrypted access (Tailscale):', { dim: true }));
       rows.push(infoRow('ts-url', `  ${httpsUrl}`, { fg: MODAL_TONES.good }));
     } else {
-      rows.push(infoRow('ts-h', 'Tailscale detected — press t to serve this app over https (MagicDNS).', { fg: MODAL_TONES.reasoning }));
+      rows.push(infoRow('ts-h', 'Tailscale detected: press t to serve this app over https (MagicDNS).', { fg: MODAL_TONES.reasoning }));
     }
     const receipt = this.serveReceipt ?? ts.lastServe;
     if (receipt) {

package/src/panels/modals/planning-modal.ts

@@ -19,16 +19,16 @@ import { buildAnswerActions, isGenericRecommendation, type PlanningAnswerAction
 
 // ---------------------------------------------------------------------------
 // Project Planning → 'planning' config-modal surface (group-B port). Shows
-// readiness/questions/decisions/task-graph/handoff — read-only except choosing
+// readiness/questions/decisions/task-graph/handoff, read-only except choosing
 // an answer to the current open question, approving execution, dismissing the
 // plan, or refreshing.
 //
-// — the seams are now real:
+//, the seams are now real:
 //   - A CANNED answer to a real open question dispatches `/plan answer <id> <text>`
 //     (records it; the open-question gap clears on the next refine).
 //   - The CUSTOM free-form typed answer (and any answer to a synthetic readiness
 //     question with no open-question record) is submitted to chat via the generic
-//     `submitInput` seam — a real model turn. ORDERING GUARD: the modal closes
+//     `submitInput` seam, a real model turn. ORDERING GUARD: the modal closes
 //     BEFORE the turn starts (a turn under a live modal is the modal-liveness
 //     hazard). No more `/plan <text>` reseed approximation.
 //   - Dismiss is a first-class CONFIRMED action (`d`) dispatching `/plan dismiss`,
@@ -293,7 +293,7 @@ function buildGoldenService(): PlanningModalService {
 
 /**
  * Deterministic golden fixture. All ids/timestamps are frozen literals. Because
- * every service method is Promise-based, this helper is async — it opens the
+ * every service method is Promise-based, this helper is async, it opens the
  * surface, waits a macrotask so the fire-and-forget load resolves, then returns.
  */
 export async function planningModalGoldenSurface(): Promise<ConfigModalSurface> {

package/src/panels/modals/plugins-modal.ts

@@ -107,7 +107,7 @@ class PluginsModalSurface implements ConfigModalSurface {
         trustRecord?.signatureFingerprint ? `sig ${trustRecord.signatureFingerprint}` : 'unsigned',
         caps ? `caps ${caps.requested.length}/${caps.highRisk.length}hr/${caps.blocked.length}blk` : null,
         quarantineRecord ? `quarantine: ${quarantineRecord.reason}` : null,
-        verify ? `verify ${verify.valid ? 'VALID' : 'INVALID'}${verify.fingerprint ? ` fp=${verify.fingerprint}` : (!verify.valid && verify.reason ? ` — ${verify.reason}` : '')}` : null,
+        verify ? `verify ${verify.valid ? 'VALID' : 'INVALID'}${verify.fingerprint ? ` fp=${verify.fingerprint}` : (!verify.valid && verify.reason ? `: ${verify.reason}` : '')}` : null,
       ].filter((s): s is string => s !== null).join(' · ');
       rows.push({
         id: plugin.name,

package/src/panels/modals/policy-modal.ts

@@ -19,11 +19,11 @@ import type {
 
 // ---------------------------------------------------------------------------
 // Policy → config-modal surface (group-B port). Governance CONTENT view,
-// not a selectable list — current/candidate bundle state, diff, divergence
+// not a selectable list, current/candidate bundle state, diff, divergence
 // gate, history, permission audit, lint findings, preflight review, and
 // simulation samples render as non-selectable rows (the host windows/scrolls
 // them). EVERY dispatchable key in the original panel (s/f/l/p/b) already
-// routed to `/policy <sub>` via executeCommand — none were in-panel mutations;
+// routed to `/policy <sub>` via executeCommand, none were in-panel mutations;
 // the panel's promote/rollback confirm step is dropped per charter (never fold
 // a confirm into a modal) and the command dispatches directly. Determinism:
 // timestamps are formatted (fmtTime/fmtRate), never read from the clock.
@@ -111,7 +111,7 @@ class PolicyModalSurface implements ConfigModalSurface {
       push('No policy bundles loaded.');
       push('Bundle: none active, none candidate. Gate: n/a.', DIM);
       push('Get started');
-      push('/policy load — load a policy bundle to begin governance review', DIM);
+      push('/policy load: load a policy bundle to begin governance review', DIM);
       return { title: 'Policy And Governance', tabs: [{ id: 'governance', label: 'Governance', header, rows, emptyText: '' }] };
     }
 
@@ -181,7 +181,7 @@ class PolicyModalSurface implements ConfigModalSurface {
   }
 
   onAction(id: string, ctx: ConfigModalActionContext): void {
-    // "Rollout" in the WO brief maps to the registry's actual subcommand —
+    // "Rollout" in the WO brief maps to the registry's actual subcommand,
     // there is no separate `/policy rollout`.
     const sub = id === 'simulate' ? 'simulate' : id === 'preflight' ? 'preflight' : id === 'lint' ? 'lint' : id === 'promote' ? 'promote' : id === 'rollback' ? 'rollback' : null;
     if (!sub) return;

package/src/panels/modals/provider-health-modal.ts

@@ -11,7 +11,7 @@ export interface ProviderRuntimeInspect {
 
 /**
  * Provider-health config-modal surface (migrated from the `provider-health`
- * panel — the charter's live-modal exemplar; also the target of the `providers`
+ * panel, the charter's live-modal exemplar; also the target of the `providers`
  * and `accounts` redirects). providerRuntime.inspectAll() is async, so its
  * result is cached and refreshed on open, on `r`, and on a 3s live tick (the
  * panel's display-tick cadence); buildView reads the cache synchronously so

package/src/panels/modals/remote-modal.ts

@@ -24,7 +24,7 @@ function stateTone(state: string): Tone {
  * snapshot is synchronous; a subscribe() keeps live transport/heartbeat values
  * refreshing between key presses. The panel's `Tab` connections/contracts browse
  * toggle becomes two real tabs. `r`/Enter dispatch `/remote recover` for the
- * selected runner — the panel's only corrective keybinding; the richer
+ * selected runner, the panel's only corrective keybinding; the richer
  * `/remote` command set (show/supervisor/cancel/dispatch/artifact/…) stays on
  * the command front-door.
  */

package/src/panels/modals/sandbox-modal.ts

@@ -5,7 +5,7 @@ import type { SandboxProfile, SandboxSession, SandboxSessionRegistry } from '@/r
 import { summarizeError } from '@pellux/goodvibes-sdk/platform/utils';
 import { toneStyle, statusGlyph, pad, postureLine, kv, type Tone } from './modal-surface-helpers.ts';
 
-/** SandboxSessionRegistry has no event subscription — poll at the same 3s
+/** SandboxSessionRegistry has no event subscription, poll at the same 3s
  *  cadence the retired panel used (POLL_INTERVAL_MS in sandbox-panel.ts). */
 const POLL_INTERVAL_MS = 3_000;
 
@@ -32,7 +32,7 @@ function sessionIdOf(row: ConfigModalRow | null): string | null {
  * (buildSandboxReview, listSandboxProfiles, sessions.list) are synchronous, so
  * buildView reads them live each tick. The panel's single profile+session
  * selectable list becomes two real tabs. s/x/e call the SandboxSessionRegistry
- * directly (these were never slash commands) — start/execute are wrapped so a
+ * directly (these were never slash commands), start/execute are wrapped so a
  * rejection surfaces via ctx.setStatus instead of an unhandled rejection,
  * matching the panel's try/catch + setError behaviour.
  */

package/src/panels/modals/security-modal.ts

@@ -15,7 +15,7 @@ import type {
 // Security → config-modal surface (group-B port). Two tabs: 'Tokens' (the
 // token scope/rotation audit list under the governance summary) and
 // 'Governance' (policy preflight, MCP/plugin quarantine, latest incident, and
-// the MCP attack-path review). Read-model-backed, so refresh() is a no-op —
+// the MCP attack-path review). Read-model-backed, so refresh() is a no-op,
 // buildView reads getSnapshot() fresh every render. 'f' (preflight) routes to
 // its `/policy preflight` command path; 'i' jumps to the incident surface
 // (fleet) via the command path. Selection-blind port: the panel's
@@ -121,7 +121,7 @@ class SecurityModalSurface implements ConfigModalSurface {
         ...(resultColor(result) ? { style: resultColor(result)! } : {}),
       });
     }
-    rows.push(infoRow('audit:when', `Last audit ${fmtIso(audit.lastAuditAt)} — press r to refresh`, { dim: true }));
+    rows.push(infoRow('audit:when', `Last audit ${fmtIso(audit.lastAuditAt)}: press r to refresh`, { dim: true }));
     return { id: 'tokens', label: 'Tokens', header, rows, hints: ['f preflight'] };
   }
 
@@ -130,7 +130,7 @@ class SecurityModalSurface implements ConfigModalSurface {
     const quarantinedMcp = snapshot.mcpServers.filter((s) => s.schemaFreshness === 'quarantined');
     if (quarantinedMcp.length > 0) {
       const server = quarantinedMcp[0]!;
-      rows.push(infoRow('mcp:q', `MCP quarantine: ${server.name} ${server.quarantineReason ?? 'unknown'}${server.quarantineDetail ? ` — ${server.quarantineDetail}` : ''}`, BAD));
+      rows.push(infoRow('mcp:q', `MCP quarantine: ${server.name} ${server.quarantineReason ?? 'unknown'}${server.quarantineDetail ? `; ${server.quarantineDetail}` : ''}`, BAD));
     }
     if (snapshot.quarantinedPlugins.length > 0) {
       const plugin = snapshot.quarantinedPlugins[0]!;
@@ -140,7 +140,7 @@ class SecurityModalSurface implements ConfigModalSurface {
       rows.push(infoRow('plugin:u', `Plugin trust warning: ${plugin.name} remains untrusted.`, WARN));
     }
     if (snapshot.latestIncident) {
-      rows.push(infoRow('incident', `Latest incident: ${snapshot.latestIncident.classification} — ${snapshot.latestIncident.summary} (${fmtIso(snapshot.latestIncident.generatedAt)})`, WARN));
+      rows.push(infoRow('incident', `Latest incident: ${snapshot.latestIncident.classification}; ${snapshot.latestIncident.summary} (${fmtIso(snapshot.latestIncident.generatedAt)})`, WARN));
     }
 
     const review = snapshot.attackPathReview;

package/src/panels/modals/services-modal.ts

@@ -47,7 +47,7 @@ function authSummary(config: ServiceConfig, manager: SubscriptionAccessQuery): s
 
 /**
  * Services config-modal surface (migrated from the `services` panel). Reads the
- * same ServiceInspectionQuery — getAll() is sync but inspect()/testConnection()
+ * same ServiceInspectionQuery, getAll() is sync but inspect()/testConnection()
  * are async, so an inspection cache is refreshed on open / `r` and read
  * synchronously by buildView (mirrors the panel's own refresh contract).
  * Actions map onto their existing behaviours; `s` jumps to the subscription

package/src/panels/modals/work-plan-modal.ts

@@ -12,7 +12,7 @@ import type { WorkPlanItemStatus } from '@pellux/goodvibes-sdk/platform/workflow
 // All mutations (add/edit item, cycle/set status, remove, clear-completed)
 // route to the existing `/work-plan` command path (charter: no
 // destructive/interactive mutation direct-called from a modal; the panel's
-// inline add/edit draft form has no place in a read/navigate modal — the bare
+// inline add/edit draft form has no place in a read/navigate modal, the bare
 // `/work-plan add` subcommand is the honest stand-in). Selection-blind port:
 // the panel's selected-item owner/source/notes/linked detail is folded into
 // each row label.
@@ -65,7 +65,7 @@ class WorkPlanModalSurface implements ConfigModalSurface {
   private readonly hasRow = (row: ConfigModalRow | null): boolean => row !== null;
 
   /** 'i'/'w' jump to the selected item's linked agent/WRFC chain in Fleet
-   *  (item 4 — restores the retired WorkPlanPanel's per-item deep-link,
+   *  (item 4, restores the retired WorkPlanPanel's per-item deep-link,
    *  lost when migrated this surface to a modal without it). Gated on
    *  the link actually being present, same as the retired panel gated the key
    *  on `item?.linked?.agentId`/`wrfcId` before ever reaching the jump. */
@@ -137,7 +137,7 @@ class WorkPlanModalSurface implements ConfigModalSurface {
     if (id === 'jumpAgent') {
       const agentId = item.linked?.agentId;
       if (!agentId) return;
-      // 'agent' matches the SDK's ProcessKind for a live agent node — see
+      // 'agent' matches the SDK's ProcessKind for a live agent node, see
       // FleetPanel.receiveDeepLink's id+kind match.
       void ctx.executeCommand?.('panel', ['open', 'fleet', '--target', `${agentId}:agent`]);
       ctx.setStatus(`Opened Fleet on agent ${agentId}.`);
@@ -165,7 +165,7 @@ export function createWorkPlanModalSurface(deps: WorkPlanModalDeps): ConfigModal
 
 /**
  * Deterministic golden fixture: fixed work-plan items with frozen updatedAt
- * epoch values — no live store, no wall-clock, no random ids.
+ * epoch values, no live store, no wall-clock, no random ids.
  */
 export function workPlanModalGoldenSurface(): ConfigModalSurface {
   const FIXED_UPDATED_AT = 1735693200000; // 2025-01-01T01:00:00.000Z

package/src/panels/notifications-feed.ts

@@ -1,12 +1,12 @@
 /**
- * PanelNotificationFeed — the read-model behind the `panel_only` notification
+ * PanelNotificationFeed, the read-model behind the `panel_only` notification
  * target.
  *
  * The SDK's NotificationRouter (`@/runtime/index.ts` -> platform runtime `ui`
  * barrel) can route a notification's `RoutingDecision.target` to
  * `'panel_only'`, meaning: don't surface this in the conversation or the
  * status bar, but it must still reach a real, visible place. Before this
- * file, nothing in this repo consumed that target outside of tests — a
+ * file, nothing in this repo consumed that target outside of tests, a
  * panel-routed notification (including every burst- or batch-collapsed one)
  * had nowhere to go. This feed is that place: a caller holding a routed
  * `Notification` + `RoutingDecision` pair calls `record()`, and
@@ -16,8 +16,8 @@
  * are tracked by their `batchKey` and accumulate an honest running count
  * instead of rendering one row per suppressed duplicate.
  *
- * Production wiring — something in the running app actually calling
- * `record()` with live notifications — rides the SDK round that turns on
+ * Production wiring, something in the running app actually calling
+ * `record()` with live notifications, rides the SDK round that turns on
  * adaptive notification suppression by default; this feed and its panel are
  * the render target that work lands on, built ahead of it so the target is
  * never missing when that switch flips.
@@ -33,7 +33,7 @@ export interface PanelFeedEntry {
   /** Unix ms of the most recent notification folded into this entry. */
   readonly timestamp: number;
   readonly reasonCode: RoutingDecision['reasonCode'];
-  /** How many notifications this entry represents. 1 for a standalone item; >1 for a collapsed group. Always the true count — never estimated. */
+  /** How many notifications this entry represents. 1 for a standalone item; >1 for a collapsed group. Always the true count, never estimated. */
   readonly collapsedCount: number;
 }
 
@@ -53,7 +53,7 @@ export class PanelNotificationFeed {
 
   /**
    * Record a routed notification. Only notifications actually targeted at
-   * `panel_only` are kept — a caller passing anything else is a mistake (the
+   * `panel_only` are kept, a caller passing anything else is a mistake (the
    * router sent it elsewhere), so it's dropped rather than shown in the
    * wrong place.
    */

package/src/panels/notifications-panel.ts

@@ -1,12 +1,12 @@
 /**
- * NotificationsPanel — the visible home for notifications routed to the
+ * NotificationsPanel, the visible home for notifications routed to the
  * `panel_only` target (see notifications-feed.ts for why this exists).
  *
  * Renders every entry the feed has accumulated: standalone panel-routed
  * notifications, and collapsed burst/batch groups shown honestly with their
  * real running count and the plain-language reason they were held back from
  * the conversation. Descriptive text (titles, bodies, reason descriptions)
- * is always wrapped in full — never clipped to a column width.
+ * is always wrapped in full, never clipped to a column width.
  */
 import type { Line } from '@pellux/goodvibes-sdk/platform/types';
 import type { RoutingDecision } from '@/runtime/index.ts';
@@ -23,7 +23,7 @@ import { wrapText } from '../utils/terminal-width.ts';
 import { getSharedNotificationFeed, type PanelFeedEntry, type PanelNotificationFeed } from './notifications-feed.ts';
 
 // Reuses the shared, mode-aware (dark/light) panel palette's existing
-// bad/warn/info/dim tokens rather than minting new hex literals — this
+// bad/warn/info/dim tokens rather than minting new hex literals, this
 // panel has no color needs the shared palette doesn't already name.
 const C = DEFAULT_PANEL_PALETTE;
 
@@ -51,17 +51,17 @@ function levelTag(level: PanelFeedEntry['level']): string {
   return `[${level}]`;
 }
 
-/** Build every Line an entry needs — title/meta row, then the full body and reason text wrapped with no line cap (descriptive text is never clipped). */
+/** Build every Line an entry needs, title/meta row, then the full body and reason text wrapped with no line cap (descriptive text is never clipped). */
 function renderEntry(entry: PanelFeedEntry, width: number): Line[] {
   const lines: Line[] = [];
   const fg = levelColor(entry.level);
   const countSuffix = entry.collapsedCount > 1 ? ` ×${entry.collapsedCount}` : '';
-  const headerText = `${levelTag(entry.level)} ${entry.domain} — ${entry.title}${countSuffix}`;
+  const headerText = `${levelTag(entry.level)} ${entry.domain}: ${entry.title}${countSuffix}`;
   for (const wrapped of wrapText(headerText, Math.max(1, width - 1))) {
     lines.push(buildStyledPanelLine(width, [{ text: ` ${wrapped}`, fg, bold: true }]));
   }
   const reasonText = entry.collapsedCount > 1
-    ? `  ${entry.collapsedCount} notifications collapsed — ${REASON_DESCRIPTIONS[entry.reasonCode]}`
+    ? `  ${entry.collapsedCount} notifications collapsed: ${REASON_DESCRIPTIONS[entry.reasonCode]}`
     : `  ${REASON_DESCRIPTIONS[entry.reasonCode]}`;
   for (const wrapped of wrapText(reasonText, Math.max(1, width - 1))) {
     lines.push(buildStyledPanelLine(width, [{ text: ` ${wrapped}`, fg: C.dim }]));