@pellux/goodvibes-tui 2.0.14 → 2.0.16

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@pellux/goodvibes-tui",
-  "version": "2.0.14",
-  "description": "Terminal-native GoodVibes client for coding, operations, knowledge and channel workflows — a pure client of the GoodVibes daemon.",
+  "version": "2.0.16",
+  "description": "Terminal-native GoodVibes client for coding, operations, knowledge and channel workflows; a pure client of the GoodVibes daemon.",
   "type": "module",
   "main": "src/main.ts",
   "bin": {
@@ -27,12 +27,12 @@
     "dev:watch": "bun --watch src/main.ts",
     "prebuild": "bun run scripts/prebuild.ts",
     "build": "bun build src/main.ts --compile --outfile dist/goodvibes",
-    "build:linux-x64": "bun build src/main.ts --compile --target=bun-linux-x64 --outfile dist/goodvibes-linux-x64",
-    "build:linux-arm64": "bun build src/main.ts --compile --target=bun-linux-arm64 --outfile dist/goodvibes-linux-arm64",
-    "build:macos-x64": "bun build src/main.ts --compile --target=bun-darwin-x64 --outfile dist/goodvibes-macos-x64",
-    "build:macos-arm64": "bun build src/main.ts --compile --target=bun-darwin-arm64 --outfile dist/goodvibes-macos-arm64",
+    "build:linux-x64": "goodvibes-build-binaries --target linux-x64",
+    "build:linux-arm64": "goodvibes-build-binaries --target linux-arm64",
+    "build:macos-x64": "goodvibes-build-binaries --target darwin-x64",
+    "build:macos-arm64": "goodvibes-build-binaries --target darwin-arm64",
     "smoke:tui": "goodvibes-post-build-smoke",
-    "build:windows": "bun build src/main.ts --compile --target=bun-windows-x64 --outfile dist/goodvibes-windows.exe",
+    "build:windows": "goodvibes-build-binaries --target windows-x64",
     "build:all-shell": "bun run build:linux-x64 && bun run build:linux-arm64 && bun run build:macos-x64 && bun run build:macos-arm64 && bun run build:windows",
     "typecheck": "bunx tsc --noEmit",
     "typecheck:test": "bunx tsc --noEmit -p tsconfig.test.json",
@@ -52,6 +52,7 @@
     "platform:publish:dry-run": "bun run scripts/publish-platform-packages.ts --dry-run",
     "publish:dry-run:github": "GOODVIBES_PUBLIC_PACKAGE_NAME=@mgd34msu/goodvibes-tui GOODVIBES_PUBLISH_REGISTRY=https://npm.pkg.github.com bun run scripts/publish-package.ts --dry-run",
     "publish:check": "bun run scripts/publish-check.ts",
+    "verify:tag-version": "bun run scripts/verify-release-tag-version.ts",
     "package:install-check": "bun run scripts/package-install-check.ts",
     "build:prod": "goodvibes-build-binaries",
     "build:all": "goodvibes-build-binaries --all",
@@ -95,11 +96,11 @@
     "@anthropic-ai/bedrock-sdk": "^0.29.1",
     "@anthropic-ai/sdk": "^0.92.0",
     "@ast-grep/napi": "^0.42.0",
-    "@pellux/goodvibes-sdk": "2.0.17",
-    "@pellux/goodvibes-terminal-shell": "2.0.17",
+    "@pellux/goodvibes-sdk": "2.0.20",
+    "@pellux/goodvibes-terminal-shell": "2.0.20",
     "bash-language-server": "^5.6.0",
     "fuse.js": "^7.1.0",
-    "@pellux/goodvibes-daemon": "1.28.19",
+    "@pellux/goodvibes-daemon": "1.28.21",
     "graphql": "^16.13.2",
     "jszip": "^3.10.1",
     "node-edge-tts": "^1.2.10",
@@ -120,6 +121,7 @@
     "zustand": "^5.0.12"
   },
   "devDependencies": {
+    "@pellux/goodvibes-toolchain": "2.0.20",
     "@types/bun": "^1.3.10",
     "typescript": "^5.9.3"
   },

package/scripts/postinstall.js

@@ -66,7 +66,7 @@ async function downloadText(url) {
  *
  * The daemon binary is NOT here any more. The daemon is its own product with
  * its own npm package (`goodvibes-daemon`), which this package declares as a
- * dependency — so an npm install still brings the whole suite, and the daemon's
+ * dependency, so an npm install still brings the whole suite, and the daemon's
  * own postinstall places the daemon's own binary. Two packages each placing
  * a copy of `goodvibes-daemon` is exactly how a machine ends up with two.
  */
@@ -234,7 +234,7 @@ function deployBundledFiles() {
  * Put the wake-word model on the machine as part of installing.
  *
  * Everything needed to detect "hey goodvibes" already shipped, and provisioning
- * was reachable only by typing `/voice wake setup` — so the ordinary outcome of
+ * was reachable only by typing `/voice wake setup`, so the ordinary outcome of
  * installing was a wake word that could not start. The pins (URLs, byte counts,
  * checksums) live in the SDK's wake-word manifest and stay there; this calls the
  * SDK's install policy, which:
@@ -252,7 +252,7 @@ function deployBundledFiles() {
  * It honours the same skip switches as the binary install (`--no-download`,
  * GOODVIBES_SKIP_BINARY_DOWNLOAD) plus its own
  * GOODVIBES_SKIP_WAKE_MODEL_DOWNLOAD, and it stays out of a source checkout for
- * the same reason the binary install does — a repo clone is a development tree,
+ * the same reason the binary install does, a repo clone is a development tree,
  * not an installation.
  */
 async function installWakeWordModel() {

package/src/audio/activation-sound.ts

@@ -1,17 +1,17 @@
 /**
- * activation-sound.ts — the sound a confirmed wake makes.
+ * activation-sound.ts, the sound a confirmed wake makes.
  *
  * A wake takes the microphone from "scoring frames nobody hears" to "recording
- * what you say next", and the user needs to know the moment that happened —
+ * what you say next", and the user needs to know the moment that happened,
  * otherwise the only feedback is a transcript arriving seconds later, and a
  * false accept is indistinguishable from nothing having happened at all. So the
  * sound is played AT the wake, before transcription, per
  * `voice.wake.activationSound`:
  *
- *  - `chime`  — a short two-tone WAV synthesised here. No asset file to ship,
+ *  - `chime` , a short two-tone WAV synthesised here. No asset file to ship,
  *               install, provision or lose, and nothing to fetch at runtime.
- *  - `custom` — the file named by `voice.wake.activationSoundPath`.
- *  - `none`   — silent.
+ *  - `custom`, the file named by `voice.wake.activationSoundPath`.
+ *  - `none`  , silent.
  *
  * Playback reuses the streaming player the spoken-turn path already owns
  * (player.ts), so a host with mpv or ffplay needs nothing extra and a host with
@@ -32,7 +32,7 @@ const CHIME_SAMPLE_RATE = 16000;
 const CHIME_TONES_HZ = [880, 1320] as const;
 /** Milliseconds per tone. Short enough not to overlap the start of an utterance. */
 const CHIME_TONE_MS = 70;
-/** Peak amplitude on the int16 magnitude scale — audible without being startling. */
+/** Peak amplitude on the int16 magnitude scale, audible without being startling. */
 const CHIME_PEAK = 6000;
 /**
  * Fade applied to each end of each tone, in samples. Without it the abrupt start
@@ -83,7 +83,7 @@ export interface ActivationSoundPlayerDeps {
  * sound that fails to play must not delay or cancel that.
  *
  * `settings.activationSound` arrives already resolved against surface capability
- * — the SDK downgrades `custom` to `chime` on a surface that cannot read a local
+ *, the SDK downgrades `custom` to `chime` on a surface that cannot read a local
  * file, and this surface can, so `custom` here means a real path.
  */
 export function playActivationSound(sound: WakeActivationSound, deps: ActivationSoundPlayerDeps): void {

package/src/audio/capture.ts

@@ -1,18 +1,18 @@
 /**
- * capture.ts — the ONE place this terminal opens a microphone.
+ * capture.ts, the ONE place this terminal opens a microphone.
  *
  * Two consumers sit on it and they share this single device path: push-to-talk
  * voice input (src/audio/voice-input-session.ts) and wake-word detection
  * (src/audio/wake-runtime.ts). A wake does not END a capture session, it starts
- * one — the SDK listener keeps the same stream open and switches it to recording
- * the utterance that follows — so a second opener would drop the beginning of a
+ * one, the SDK listener keeps the same stream open and switches it to recording
+ * the utterance that follows, so a second opener would drop the beginning of a
  * sentence and race the operating system for a device that is already held.
  *
  * The framing arithmetic, the recorder argv and the utterance policy all live in
  * the SDK (`@pellux/goodvibes-sdk/platform/voice/capture`), because getting any
  * of them subtly wrong is SILENT: a container header out of byte alignment, or a
  * short frame, still "works" and simply never detects. What is local is the one
- * thing that cannot be shared — actually starting a process. That mirrors
+ * thing that cannot be shared, actually starting a process. That mirrors
  * playback exactly (see player.ts): resolve a command off PATH, spawn it, and
  * treat "no tool installed" as a reported state rather than an exception.
  */
@@ -31,7 +31,7 @@ import {
 /**
  * Whether a command is runnable from PATH. Same scan `player.ts` uses for
  * mpv/ffplay (`resolveStreamingAudioPlayerCommand` -> `findExecutable`): every
- * PATH entry, X_OK access, Windows extensions included — kept identical so a
+ * PATH entry, X_OK access, Windows extensions included, kept identical so a
  * host where playback finds its tool and capture does not is a real difference
  * in what is installed, never a difference in how the two looked.
  */
@@ -70,7 +70,7 @@ export const spawnRecorderProcess: CaptureSpawn = (command, args): CaptureChildP
   // Adapted rather than returned directly: the SDK's port declares the signal as
   // a plain `string` (it is shared with a browser bundle that has no
   // NodeJS.Signals) and node's narrower union is not assignable to it. The two
-  // event listeners are branched explicitly for the same reason — node's `on` is
+  // event listeners are branched explicitly for the same reason, node's `on` is
   // overloaded per event name and takes no union.
   return {
     stdout: child.stdout,
@@ -103,7 +103,7 @@ export function createTuiCaptureOpener(options: TuiCaptureOpenerOptions = {}): A
     platform: options.platform ?? process.platform,
     // FALSE here, and correct: a recorder subprocess captures raw PCM and filters
     // nothing. The suppression stage is applied by the SDK's own wrapper inside
-    // WakeListener and PushToTalkSession, which ask this opener for raw frames —
+    // WakeListener and PushToTalkSession, which ask this opener for raw frames,
     // so `speex` arriving at the RECORDER directly, unwrapped by either, is still
     // refused rather than passed through unfiltered.
     speexAvailable: false,

package/src/audio/onnxruntime-assets.d.ts

@@ -2,7 +2,7 @@
  * The two onnxruntime-web assets the wake engine needs on disk.
  *
  * Both are imported with `with { type: 'file' }`, which resolves to a PATH
- * string rather than module contents — a real filesystem path when the shell
+ * string rather than module contents, a real filesystem path when the shell
  * runs from source, and a `/$bunfs/root/...` path inside a compiled binary,
  * where the bytes are embedded. Declared here because these are asset
  * specifiers, not typed modules: onnxruntime-web publishes them for exactly

package/src/audio/player.ts

@@ -43,7 +43,7 @@ export interface LocalStreamingAudioPlayerOptions {
   readonly env?: NodeJS.ProcessEnv;
   readonly spawnProcess?: SpawnProcessFactory;
   /**
-   * Injected player command — the test seam companion to `spawnProcess`.
+   * Injected player command, the test seam companion to `spawnProcess`.
    * When set, the constructor uses it verbatim instead of scanning PATH, so
    * deterministic fake-sink tests never depend on mpv/ffplay being installed
    * on the machine running them. Pass null to model "no player found".
@@ -101,7 +101,7 @@ export class LocalStreamingAudioPlayer implements StreamingAudioPlayer {
       }
 
       // An intentional interrupt (turn cancel / quit chord / /tts stop) has
-      // already torn the process down via `abort` and must cut immediately —
+      // already torn the process down via `abort` and must cut immediately,
       // do not wait on a graceful drain. A natural end-of-speech, by contrast,
       // closes stdin and waits for the sink to play out every buffered sample
       // so the tail of the response is never truncated.
@@ -163,7 +163,7 @@ export function resolveStreamingAudioPlayerCommand(env: NodeJS.ProcessEnv = proc
 }
 
 // ffplay -autoexit quits as soon as its input ends, before the audio output
-// buffer has drained — that clips the tail of the response. `apad` appends a
+// buffer has drained, that clips the tail of the response. `apad` appends a
 // short run of silence so the real audio is fully played out and only the
 // trailing silence gets trimmed.
 const FFPLAY_APAD = ['-af', 'apad=pad_dur=0.3'] as const;
@@ -177,7 +177,7 @@ function buildPlayerArgs(command: StreamingAudioPlayerCommand, format?: string):
 }
 
 /**
- * awaitReady — resolves once the spawned player has actually started (its
+ * awaitReady, resolves once the spawned player has actually started (its
  * 'spawn' event), rejects if it fails to start ('error'), and resolves early
  * if the caller aborts during startup so an intentional interrupt is never
  * blocked. This is the readiness gate that keeps the first audio byte from

package/src/audio/spoken-turn-wiring.ts

@@ -20,18 +20,18 @@ export interface WireSpokenTurnRuntimeOptions {
   readonly events: UiRuntimeEvents;
   readonly notify: (message: string) => void;
   /**
-   * Optional player factory — injected in tests to avoid spawning real
+   * Optional player factory, injected in tests to avoid spawning real
    * subprocesses. Defaults to LocalStreamingAudioPlayer.
    */
   readonly playerFactory?: () => StreamingAudioPlayer;
 }
 
 /**
- * wireSpokenTurnRuntime — wires the spoken-turn pipeline against the runtime
+ * wireSpokenTurnRuntime, wires the spoken-turn pipeline against the runtime
  * event bus.
  *
  * Always-speak mode: when `ui.voiceEnabled` is true in config, every
- * TURN_SUBMITTED event arms the turn for spoken output automatically — the
+ * TURN_SUBMITTED event arms the turn for spoken output automatically, the
  * user does not need to prefix the prompt with /tts. The availability check
  * inside SpokenTurnController still gates gracefully when no player is found.
  */
@@ -39,7 +39,7 @@ export function wireSpokenTurnRuntime(options: WireSpokenTurnRuntimeOptions): Sp
   const player = options.playerFactory ? options.playerFactory() : new LocalStreamingAudioPlayer();
   // The TUI's subprocess-based player already satisfies the SDK's AudioSink
   // interface unchanged (see docs/decisions/2026-07-06-spoken-turn-tts-policy-sdk-hoist.md
-  // in the SDK repo) — only the option name (`sink` not `player`) and the
+  // in the SDK repo), only the option name (`sink` not `player`) and the
   // attribution `source` are new.
   const controller = new SpokenTurnController({
     voiceService: options.voiceService,

package/src/audio/voice-capture-wiring.ts

@@ -1,11 +1,11 @@
 /**
- * voice-capture-wiring.ts — composes the terminal's two voice consumers over ONE
+ * voice-capture-wiring.ts, composes the terminal's two voice consumers over ONE
  * capture path.
  *
  * Push-to-talk and wake detection are not two audio stacks. They share the
  * opener built here (capture.ts), the transcription gateway (core/voice-stt-gateway.ts)
- * and the same `voice.wake.*` capture rows — device, recorder, noise
- * suppression, ceiling — so a device that works for one works for the other and
+ * and the same `voice.wake.*` capture rows, device, recorder, noise
+ * suppression, ceiling, so a device that works for one works for the other and
  * a change in /settings applies to both.
  *
  * This is the composition root the shell calls once. It owns nothing the shell
@@ -30,7 +30,7 @@ import { wakeProvisionStatus } from '@pellux/goodvibes-sdk/platform/voice';
 
 export interface VoiceCaptureWiringDeps {
   readonly configManager: ConfigManager;
-  /** `<root>/voice` — the managed root the wake tree hangs off (same root /voice setup uses). */
+  /** `<root>/voice`, the managed root the wake tree hangs off (same root /voice setup uses). */
   readonly managedVoiceRoot: string;
   /** A directory this surface owns for the extracted onnxruntime assets. */
   readonly assetDirectory: string;
@@ -56,7 +56,7 @@ export interface VoiceCaptureWiring {
    * standing condition they already know about.
    */
   readonly status: () => VoiceCaptureIndicatorState | null;
-  /** Teardown, for the shell's `unsubs` registry — releases any open device. */
+  /** Teardown, for the shell's `unsubs` registry, releases any open device. */
   readonly unsubs: readonly (() => void)[];
 }
 

package/src/audio/voice-input-session.ts

@@ -1,7 +1,7 @@
 /**
- * voice-input-session.ts — push-to-talk voice input for the terminal.
+ * voice-input-session.ts, push-to-talk voice input for the terminal.
  *
- * PRESS TO START, PRESS AGAIN TO STOP — not press-and-hold. A terminal receives
+ * PRESS TO START, PRESS AGAIN TO STOP, not press-and-hold. A terminal receives
  * discrete key EVENTS, not held-key state: there is no key-release event to
  * observe, so a genuine hold would have to be faked with a timer that guesses
  * when the user let go. The binding's description says "press to start, press
@@ -63,7 +63,7 @@ const PHASE_INDICATOR: Partial<Record<PushToTalkPhase, VoiceCaptureIndicatorStat
 /**
  * Wire push-to-talk. One session object is reused across presses (the SDK session
  * is restartable after both a stop and a failure), so a device is opened per
- * press and released on every path out of it — including the failing ones.
+ * press and released on every path out of it, including the failing ones.
  */
 export function wireVoiceInputRuntime(deps: VoiceInputRuntimeDeps): VoiceInputRuntime {
   let session: PushToTalkSession | null = null;

package/src/audio/wake-inference.ts

@@ -1,5 +1,5 @@
 /**
- * wake-inference.ts — the terminal's inference runtime for the wake engine.
+ * wake-inference.ts, the terminal's inference runtime for the wake engine.
  *
  * The SDK engine never imports an inference runtime; it declares the shape of a
  * session ({@link WakeInferenceSession}) and takes one from the host. This is
@@ -13,7 +13,7 @@
  * `/$bunfs/root/ort-wasm-simd-threaded.mjs`, which is not something bun embeds
  * for a dynamic path import, and session creation fails at runtime with
  * "Cannot find module". So both assets are imported with `with { type: 'file' }`
- * — embedded in the binary, handed to us as a path — written into a directory
+ *, embedded in the binary, handed to us as a path, written into a directory
  * this surface owns, and `ort.env.wasm.wasmPaths` is pointed at that directory.
  * The same code path runs from source, where the imports resolve to the real
  * files in node_modules and the copy is a no-op after the first launch.
@@ -24,7 +24,7 @@
  * rather than trusting a stale extraction from a previous version.
  */
 
-import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { mkdirSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import * as ort from 'onnxruntime-web/wasm';
 import glueAssetPath from 'onnxruntime-web/ort-wasm-simd-threaded.mjs' with { type: 'file' };
@@ -36,10 +36,11 @@ import type {
   WakeTensor,
 } from '@pellux/goodvibes-sdk/platform/voice';
 import { WakeWordEngine } from '@pellux/goodvibes-sdk/platform/voice';
+import { atomicWriteFileSync } from '@pellux/goodvibes-sdk/platform/config';
 
 /**
  * The runtime asks for its glue and its wasm by these exact names, relative to
- * `ort.env.wasm.wasmPaths` — so the extracted copies must keep them.
+ * `ort.env.wasm.wasmPaths`, so the extracted copies must keep them.
  */
 const ORT_ASSETS = [
   { source: glueAssetPath, name: 'ort-wasm-simd-threaded.mjs' },
@@ -51,7 +52,7 @@ let configuredAssetDirectory: string | null = null;
 
 /**
  * Copy the onnxruntime-web assets into `directory` and return the value
- * `ort.env.wasm.wasmPaths` wants — a directory prefix WITH its trailing slash,
+ * `ort.env.wasm.wasmPaths` wants, a directory prefix WITH its trailing slash,
  * which the runtime concatenates a file name onto. Without the slash it looks
  * for a sibling of the directory and reports a missing module.
  */
@@ -67,7 +68,11 @@ export function extractOnnxRuntimeAssets(directory: string): string {
       // Absent, or unreadable: either way it gets written below.
     }
     if (existing !== null && existing.equals(bytes)) continue;
-    writeFileSync(target, bytes);
+    // The directory is shared by every TUI process for this user; a plain
+    // write can leave a torn file for a concurrent process's WASM loader.
+    // The SDK's atomicWriteFileSync now accepts raw bytes directly (sdk
+    // 2.0.18), so it does the temp-then-rename instead of this file inlining it.
+    atomicWriteFileSync(target, bytes, { mkdirp: true });
   }
   return `${directory}/`;
 }
@@ -138,7 +143,7 @@ export interface WakeEngineFactoryOptions {
   /**
    * The provisioned speech gate, present only when `voice.wake.vadThreshold` asks
    * for one. Absent means the engine scores every frame, which is what the
-   * shipped default of 0 asks for — not a gate that failed to load, because that
+   * shipped default of 0 asks for, not a gate that failed to load, because that
    * case is a startup blocker upstream of here.
    */
   readonly vadPath?: string;
@@ -152,7 +157,7 @@ export interface WakeEngineFactoryOptions {
  * Build the `createEngine` callback the SDK listener drives.
  *
  * The listener calls it on EVERY start including a restart, because a restart
- * exists to recover from a runtime that died — so the sessions are created here
+ * exists to recover from a runtime that died, so the sessions are created here
  * per call rather than captured once.
  */
 export function createWakeEngineFactory(options: WakeEngineFactoryOptions): () => Promise<WakeWordEngine> {

package/src/audio/wake-runtime.ts

@@ -1,11 +1,11 @@
 /**
- * wake-runtime.ts — wake-word detection on the terminal.
+ * wake-runtime.ts, wake-word detection on the terminal.
  *
  * The SDK owns the policy that would otherwise be rewritten per surface: the
  * front end, the patience/cooldown rules, keeping ONE stream open across a wake
  * so the utterance that follows is not clipped, resetting the engine afterwards
  * so the command just spoken is not scored again, and the supervisor's restart
- * and latch decisions. What is local is everything that touches this machine —
+ * and latch decisions. What is local is everything that touches this machine,
  * the recorder subprocess (capture.ts), the inference runtime (wake-inference.ts),
  * transcription over the daemon (core/voice-stt-gateway.ts), the activation sound, and
  * the shell's indicator row.
@@ -14,7 +14,7 @@
  *
  *  - **ENABLING NEVER DOWNLOADS.** The model ships with the installation, so on a
  *    normal machine `start()` below finds the artifacts already there and needs
- *    nothing else — that is the whole point of provisioning at install time. What
+ *    nothing else, that is the whole point of provisioning at install time. What
  *    it must never do is FETCH: the check here is read-only and content-verified,
  *    and a host whose artifacts are missing or torn gets told which and gets the
  *    recovery command named, instead of a switch that silently pulls 6 MB. A
@@ -65,7 +65,7 @@ export interface WakeRuntimeDeps {
   /** Runtime toggling: `voice.wake.enabled` and `voice.wake.surfaces.tui`. */
   readonly subscribeConfig: (key: string, listener: () => void) => () => void;
   readonly openCapture: AudioCaptureOpener;
-  /** Managed root the wake tree hangs off — `<managed>/wake` (SDK resolveManagedWakePaths). */
+  /** Managed root the wake tree hangs off, `<managed>/wake` (SDK resolveManagedWakePaths). */
   readonly managedRoot: string;
   /** Directory this surface owns for the extracted onnxruntime assets. */
   readonly assetDirectory: string;
@@ -95,7 +95,7 @@ export interface WakeRuntimeDeps {
 
 /**
  * What this runtime reads out of provisioning: whether the wake models are usable
- * at all, and whether the SPEECH GATE's own artifact is there — they are separate
+ * at all, and whether the SPEECH GATE's own artifact is there, they are separate
  * answers, because `voice.wake.vadThreshold` defaults to 0 and a detector runs
  * perfectly well with no gate provisioned.
  */
@@ -200,7 +200,7 @@ export function wireWakeRuntime(deps: WakeRuntimeDeps): WakeRuntime {
       if (settings.autoSubmit) deps.submitTurn(text);
       else {
         deps.writeDraft(text);
-        deps.notify('[Wake] Transcript placed in the composer (voice.wake.autoSubmit is off — press Enter to send it).');
+        deps.notify('[Wake] Transcript placed in the composer (voice.wake.autoSubmit is off: press Enter to send it).');
         deps.render();
       }
     } catch (error) {
@@ -215,14 +215,14 @@ export function wireWakeRuntime(deps: WakeRuntimeDeps): WakeRuntime {
       deps.notify(
         `[Wake] voice.wake.enabled is on, but the wake models are not provisioned (${provision.reason ?? 'not-provisioned'}), `
         + 'so nothing is listening. Installing goodvibes provisions them and a running daemon retries at boot, so this '
-        + 'means the download has not succeeded yet — run /voice wake setup to fetch and verify them now.',
+        + 'means the download has not succeeded yet; run /voice wake setup to fetch and verify them now.',
       );
       deps.render();
       return;
     }
     const paths = resolveManagedWakePaths(deps.managedRoot);
     // The SDK resolves `voice.wake.models` to files: the pinned id inside the
-    // managed tree, any other id against voice.wake.customModelDir — and when that
+    // managed tree, any other id against voice.wake.customModelDir, and when that
     // row is empty, against the managed `custom` directory, which is the fallback
     // the row's description promises and the one a host would otherwise get wrong
     // by looking in the process's working directory.
@@ -249,7 +249,7 @@ export function wireWakeRuntime(deps: WakeRuntimeDeps): WakeRuntime {
         models: modelFiles.map((model) => ({ id: model.id, path: model.path })),
         settings,
         // The speech gate, when the row asks for one. `voice.wake.vadThreshold`
-        // above 0 with the artifact missing never reaches here — it is a blocker
+        // above 0 with the artifact missing never reaches here, it is a blocker
         // from resolveWakeRuntimeSettings, so the detector does not start at all
         // rather than starting with the gate quietly absent.
         ...(settings.vadThreshold > 0 ? { vadPath: paths.vadPath } : {}),
@@ -273,7 +273,7 @@ export function wireWakeRuntime(deps: WakeRuntimeDeps): WakeRuntime {
           // Reported to the user, not only logged: a detector that stopped
           // listening is exactly the thing a silent log entry hides.
           deps.notify(restarting
-            ? `[Wake] The capture stream ended (${error.message}) — ${failureDetail}.`
+            ? `[Wake] The capture stream ended (${error.message}): ${failureDetail}.`
             : `[Wake] The wake-word detector stopped: ${failureDetail}. It stays off until voice.wake.enabled is turned off and on again.`);
           deps.render();
         },

package/src/cli/completions/generate.ts

@@ -10,7 +10,7 @@
  * command are derived from the usage strings documented in help.ts's
  * COMMAND_HELP table (read-only reference; no mutation of existing files).
  *
- * Deferred wiring (one-line changes to existing files — NOT done here):
+ * Deferred wiring (one-line changes to existing files, NOT done here):
  *   src/cli/completion.ts: replace renderCompletion() body with
  *     ```
  *     import { generateCompletion } from './completions/generate.ts';
@@ -629,7 +629,7 @@ export function generateFish(surface: CompletionSurface): string {
 }
 
 // ---------------------------------------------------------------------------
-// Dispatcher — mirrors the existing renderCompletion(shell) API
+// Dispatcher, mirrors the existing renderCompletion(shell) API
 // ---------------------------------------------------------------------------
 
 /**

package/src/cli/doctor.ts

@@ -9,14 +9,14 @@ import type { GoodVibesCliOutputFormat } from '@pellux/goodvibes-terminal-shell'
 import { buildHooksValidation } from './hooks-report.ts';
 
 // ---------------------------------------------------------------------------
-// `goodvibes doctor <explain|routing|hooks>` — the diagnostician subcommands.
+// `goodvibes doctor <explain|routing|hooks>`, the diagnostician subcommands.
 // Each one explains a decision the platform already makes, reading the LIVE
 // config and reusing the platform's OWN decision machinery. None of them
 // changes config or fires a real action:
-//   explain  — walks the real PermissionManager to say why a tool/command
+//   explain , walks the real PermissionManager to say why a tool/command
 //              would be allowed / asked / denied under the current mode.
-//   routing  — prints which model/provider serves which role, from live config.
-//   hooks    — lists registered hooks, from where, and their validation status
+//   routing , prints which model/provider serves which role, from live config.
+//   hooks   , lists registered hooks, from where, and their validation status
 //              (reuses the hooks-validate core in hooks-report.ts).
 // ---------------------------------------------------------------------------
 
@@ -124,7 +124,7 @@ function reasonExplanation(result: PermissionCheckResult, mode: string, toolKey:
     case 'mode_allow_all':
       if (mode === 'plan') return 'Plan mode allows read-class tools.';
       if (mode === 'accept-edits') return 'Accept-edits mode allows read-class tools.';
-      return 'Permission mode is "allow-all" — every tool call is auto-approved.';
+      return 'Permission mode is "allow-all": every tool call is auto-approved.';
     case 'mode_denied': return 'The active permission mode denies this tool class.';
     case 'plan_mode': return 'Plan mode refuses mutating / execute / delegate tools and steers the model to present a plan instead.';
     case 'mode_accept_edits': return 'Accept-edits mode auto-approves file write/edit tools.';
@@ -134,7 +134,7 @@ function reasonExplanation(result: PermissionCheckResult, mode: string, toolKey:
     case 'session_cached_allow': return 'A remembered session decision ([A] allow-always) approves this call.';
     case 'session_cached_deny': return 'A remembered session decision denies this call.';
     case 'user_approved':
-    case 'user_denied': return 'This reaches a Human-in-the-Loop approval prompt — the outcome depends on your response at the prompt.';
+    case 'user_denied': return 'This reaches a Human-in-the-Loop approval prompt; the outcome depends on your response at the prompt.';
     default: return 'Decided by the platform permission machinery.';
   }
 }
@@ -205,7 +205,7 @@ async function explain(options: DoctorSubcommandOptions): Promise<CliCommandOutp
 
   const a = result.analysis;
   const lines: string[] = [
-    'GoodVibes doctor — explain permission decision',
+    'GoodVibes doctor: explain permission decision',
     `  subject     : ${args.join(' ')}`,
     `  resolved as : ${target.interpretation}`,
     `  tool        : ${target.tool}  (category: ${category})`,
@@ -222,7 +222,7 @@ async function explain(options: DoctorSubcommandOptions): Promise<CliCommandOutp
     `  summary     : ${a.summary}`,
     ...a.reasons.slice(0, 3).map((r) => `  reason      : ${r}`),
     '',
-    'Layers walked (priority order — the platform PermissionManager decides; this shows the order it walks):',
+    'Layers walked (priority order: the platform PermissionManager decides; this shows the order it walks):',
     ...LAYER_NAMES.map((name, i) => `  ${i === decidedIdx ? '▶' : ' '} ${i + 1}. ${name}${i === decidedIdx ? '   ← DECIDED HERE' : ''}`),
     '',
     `Decision: ${verdict}`,
@@ -284,7 +284,7 @@ function buildRoutingRoles(config: ConfigManager): RoutingRole[] {
       provider: emptyProvider(toolProvider),
       model: toolModel || '(unset)',
       keys: ['tools.llmEnabled', 'tools.llmProvider', 'tools.llmModel'],
-      ...(config.get('tools.llmEnabled') === true ? {} : { note: 'disabled — no tool-LLM route active' }),
+      ...(config.get('tools.llmEnabled') === true ? {} : { note: 'disabled: no tool-LLM route active' }),
     },
     {
       role: 'Helper (cache/compaction/commit-message/etc.)',
@@ -292,7 +292,7 @@ function buildRoutingRoles(config: ConfigManager): RoutingRole[] {
       provider: emptyProvider(helperProvider),
       model: helperModel || '(unset)',
       keys: ['helper.enabled', 'helper.globalProvider', 'helper.globalModel'],
-      ...(config.get('helper.enabled') === true ? {} : { note: 'disabled — helper tasks stay on the main model' }),
+      ...(config.get('helper.enabled') === true ? {} : { note: 'disabled: helper tasks stay on the main model' }),
     },
     {
       role: 'Narration LLM (TTS phrasing)',
@@ -312,7 +312,7 @@ function routing(options: DoctorSubcommandOptions): CliCommandOutput {
     return { output: JSON.stringify({ roles }, null, 2), exitCode: 0 };
   }
   const lines: string[] = [
-    'GoodVibes doctor — model / provider routing (live config)',
+    'GoodVibes doctor: model / provider routing (live config)',
     '',
   ];
   for (const role of roles) {
@@ -345,11 +345,11 @@ function hooks(options: DoctorSubcommandOptions): CliCommandOutput {
   }
 
   const lines: string[] = [
-    'GoodVibes doctor — registered hooks',
+    'GoodVibes doctor: registered hooks',
     `  source file : ${report.path}`,
   ];
   if (!report.present) {
-    lines.push('  no hooks file present — nothing registered.');
+    lines.push('  no hooks file present: nothing registered.');
     return { output: lines.join('\n'), exitCode: 0 };
   }
   if (report.reason && report.checks.length === 0 && report.topLevelIssues.length === 0) {

package/src/cli/ensure-goodvibes-gitignore.ts

@@ -3,7 +3,7 @@ import { join } from 'node:path';
 
 /**
  * The TUI's own `.goodvibes/` directory (logs, overflow buffers, exec output,
- * cache, session state, etc.) is transient scratch space, not project source —
+ * cache, session state, etc.) is transient scratch space, not project source,
  * but nothing else in the codebase excludes it from the *project's* git
  * history. Any `git add -A` (write-quit's auto-commit, a WRFC chain's own
  * commit, etc.) sweeps the whole tree in unless the project's .gitignore
@@ -17,7 +17,7 @@ const GOODVIBES_IGNORE_PATTERN = /(^|\n)[ \t]*\/?\.goodvibes\/?\*?[ \t]*(\n|$)/;
  * Ensures the project's .gitignore excludes .goodvibes/, appending the rule
  * exactly once if it is verifiably absent.
  *
- * @returns true only the FIRST time the rule is actually written this call —
+ * @returns true only the FIRST time the rule is actually written this call,
  * i.e. this specific invocation just appended/created it. Every subsequent
  * launch (rule already present) and every no-op case (not a git repo, or the
  * write failed) return false. The caller uses this to print a one-time
@@ -38,7 +38,7 @@ export function ensureGoodvibesGitignore(projectRoot: string): boolean {
     appendFileSync(gitignorePath, separator + rule);
     return true;
   } catch {
-    // Best-effort only — never block startup on a gitignore write failure.
+    // Best-effort only, never block startup on a gitignore write failure.
     return false;
   }
 }

package/src/cli/entrypoint.ts

@@ -112,9 +112,9 @@ export async function prepareShellCliRuntime(
   } = resolveShellEntrypointOwnership(roots, cli.flags.workingDir ?? (cli.command === 'tui' ? cli.commandArgs[0] : undefined));
   configureActivityLogger(join(bootstrapWorkingDir, '.goodvibes', 'logs'));
   // Only prints the first time the rule is actually appended (not on every
-  // launch) — see ensureGoodvibesGitignore's return-value doc.
+  // launch), see ensureGoodvibesGitignore's return-value doc.
   if (ensureGoodvibesGitignore(bootstrapWorkingDir)) {
-    console.log("[goodvibes] added '.goodvibes/' to .gitignore — this directory holds transient TUI state (logs, session cache, exec output), not project source.");
+    console.log("[goodvibes] added '.goodvibes/' to .gitignore: this directory holds transient TUI state (logs, session cache, exec output), not project source.");
   }
   const daemonConfigMigration = runDaemonConfigMigration(bootstrapHomeDirectory);
   if (daemonConfigMigration?.migrated && (daemonConfigMigration.marker.moved.length + daemonConfigMigration.marker.discarded.length) > 0) {
@@ -250,7 +250,7 @@ export async function prepareShellCliRuntime(
       ? renderOnboardingCliStatus(statusOptions)
       : renderCliStatus(statusOptions));
     // Advisory findings are notes on an otherwise-usable install and must
-    // never make a healthy install report failure — only a must-fix finding
+    // never make a healthy install report failure, only a must-fix finding
     // exits non-zero; --strict (for CI) flips advisories to failures too.
     process.exit(cli.command === 'doctor' ? resolveDoctorExitCode(snapshot.findings, cli.flags.strict) : 0);
   }