@pellux/goodvibes-tui 2.0.14 → 2.0.16

package/src/renderer/ui-factory.ts

@@ -24,7 +24,7 @@ const GRADIENT_CYCLE_FRAMES = 50;
  * Ms since the last STREAM_DELTA before the whimsical phrase rotation freezes
  * and createThinkingFragment shows an honest "stalled Ns" / "reconnecting"
  * label instead. Deliberately much shorter than the 30s stream-stall-watchdog
- * hint threshold (stream-stall-watchdog.ts) — that threshold gates a
+ * hint threshold (stream-stall-watchdog.ts), that threshold gates a
  * low-priority system message about a likely-dead connection; this one gates
  * a cosmetic label so the UI stops claiming "Vibing..." within a couple of
  * seconds of real silence, well before the stall is confirmed as a problem.
@@ -35,7 +35,7 @@ const THINKING_STALL_FREEZE_MS = 2_500;
  * Stall/reconnect state for the live thinking indicator, computed by the
  * caller every render frame from streamMetrics (see stream-event-wiring.ts).
  * `reconnect` is populated only once the SDK's STREAM_RETRY event fires
- * (structurally consumed — absent from SDK 0.35.0's TurnEvent union today).
+ * (structurally consumed, absent from SDK 0.35.0's TurnEvent union today).
  */
 export interface ThinkingStallInfo {
   /** Ms since the last STREAM_DELTA (or STREAM_START if none yet this turn). */
@@ -61,7 +61,7 @@ function fmtCost(usd: number): string {
  */
 export class UIFactory {
   /**
-   * The header row. Delegates to renderHeaderLine (header-line.ts) — extracted
+   * The header row. Delegates to renderHeaderLine (header-line.ts), extracted
    * when the header gained the failover divergence marker and this file was
    * already on the 800-line source gate.
    *
@@ -85,7 +85,7 @@ export class UIFactory {
     strikethrough = false
   ): Line[] {
     // A historical user-message pill: it carries its own dark bodyBg, so its fg
-    // reads fg.secondary/state.reasoning (light-on-dark) — this is conversation
+    // reads fg.secondary/state.reasoning (light-on-dark), this is conversation
     // content, not the transparent-terminal chrome, so it is not part of the
     // light-terminal chrome flip.
     return renderConversationFragment(text, width, {
@@ -111,12 +111,12 @@ export class UIFactory {
     });
   }
 
-  /** The mid-turn queue as an editable list — see composer-fragments.ts. */
+  /** The mid-turn queue as an editable list, see composer-fragments.ts. */
   public static createQueuedMessageList(width: number, items: readonly { readonly id: string; readonly text: string }[]): Line[] {
     return renderQueuedMessageList(width, items);
   }
 
-  /** The optional "used N memories" provenance chip — see composer-fragments.ts. */
+  /** The optional "used N memories" provenance chip, see composer-fragments.ts. */
   public static createMemoryProvenanceChip(width: number, count: number, entries: readonly MemoryProvenanceEntry[], expanded: boolean): Line[] {
     return renderMemoryProvenanceChip(width, count, entries, expanded);
   }
@@ -150,10 +150,10 @@ export class UIFactory {
     // Session permission mode (config value). Rendered as a leading pill in the
     // posture block; undefined suppresses the pill (e.g. bare test callers).
     permissionMode?: string,
-    // The web surface's reachable URL, when that surface is enabled — a
+    // The web surface's reachable URL, when that surface is enabled, a
     // persistent low-priority context segment; undefined suppresses it.
     webSurfaceUrl?: string,
-    // True while power.keepAwake holds — renders the always-visible
+    // True while power.keepAwake holds, renders the always-visible
     // "sleep disabled" chip in the posture block (the danger-mode idiom: a
     // persistent, colored surface indicator, the safety mechanism itself).
     powerKeepAwake?: boolean,
@@ -180,7 +180,7 @@ export class UIFactory {
     promptLines.forEach((text, i) => {
       const contentW = boxWidth - 4;
       const prefix = i === 0 ? ' › ' : '   ';
-      // Render text without cursor insertion — cursor is overlaid after
+      // Render text without cursor insertion, cursor is overlaid after
       const rawText = `${prefix}${text}`;
       const paddedText = fitDisplay(rawText, contentW);
       const contentLine = createBaseLine();
@@ -218,7 +218,7 @@ export class UIFactory {
           }
         }
       } else if (promptFocused && i === promptLines.length - 1) {
-        // No cursorPos provided — show block at end (fallback)
+        // No cursorPos provided, show block at end (fallback)
         const endX = boxStartX + 2 + prefix.length + text.length;
         if (endX < boxStartX + boxWidth - 2) {
           contentLine[endX] = { char: GLYPHS.surface.cursor, fg: '252', bg: promptFocused ? BG_COLOR : '#334155', bold: false, dim: false, underline: false, italic: false, strikethrough: false };
@@ -226,11 +226,11 @@ export class UIFactory {
       }
 
       // focus visibility (item 1c): when the panel workspace owns focus
-      // and the composer is empty, name the state and the way back — the
+      // and the composer is empty, name the state and the way back, the
       // dimmed prompt alone (TEXT_COLOR/BG_COLOR above) told you nothing was
       // wrong, but not why keystrokes weren't landing here.
       if (!promptFocused && text === '' && i === 0) {
-        const hintText = 'panel focused — Esc returns';
+        const hintText = 'panel focused: Esc returns';
         const hintStartX = boxStartX + 2 + prefix.length;
         let hx = hintStartX;
         for (const ch of hintText) {
@@ -296,7 +296,7 @@ export class UIFactory {
     // (light-terminal-aware); state.info reads on both light and dark terminals.
     const t = activeUiTones();
     const composerTokens: Array<{ text: string; fg: string; bold?: boolean; dim?: boolean }> = [];
-    // Permission-mode pill — always shown so the active session posture (normal
+    // Permission-mode pill, always shown so the active session posture (normal
     // / plan / accept-edits / auto) is visible at a glance. Tone: normal reads
     // dim/neutral, plan reads info (read-only, safe), accept-edits and auto read
     // as caution (raised autonomy). Cycled by Shift+Tab, toggled by /plan.
@@ -305,7 +305,7 @@ export class UIFactory {
       const modeFg = modeTone === 'caution' ? t.chrome.warn : modeTone === 'info' ? t.state.info : '244';
       composerTokens.push({ text: ` mode:${permissionModeLabel(permissionMode)} `, fg: modeFg, bold: modeTone !== 'neutral', dim: modeTone === 'neutral' });
     }
-    // Context-usage chip — always-visible compaction-pressure indicator so the
+    // Context-usage chip, always-visible compaction-pressure indicator so the
     // user sees compaction approaching before it happens. Colored by proximity
     // to the auto-compact threshold (fraction; falls back to 0.85 when unset).
     if (contextWindow && contextWindow > 0) {
@@ -325,7 +325,7 @@ export class UIFactory {
             : t.chrome.warn;
       composerTokens.push({ text: ` risk:${composerPendingRisk} `, fg: riskColor, bold: true });
     }
-    // "sleep disabled" chip — always visible while keep-awake holds, in the
+    // "sleep disabled" chip, always visible while keep-awake holds, in the
     // danger-mode idiom (a persistent warn-tone indicator; the chip is the
     // safety mechanism, so there is no timer and no AC-only variant).
     if (powerKeepAwake) composerTokens.push({ text: ` ${SLEEP_DISABLED_CHIP} `, fg: t.chrome.warn, bold: true });
@@ -353,7 +353,7 @@ export class UIFactory {
       }
       lines.push(postureLine);
     } else if (compact && powerKeepAwake) {
-      // The keep-awake chip is a safety indicator — it survives compact height
+      // The keep-awake chip is a safety indicator, it survives compact height
       // even though the rest of the posture row (mode/ctx/risk/state/flags) is
       // dropped at height < 30. Its own compact-surviving slot.
       const chipLine = createBaseLine();
@@ -377,7 +377,7 @@ export class UIFactory {
     const tokenSep = ` ${GLYPHS.navigation.pipeSeparator} `;
     // 'n/a' (not 'unpriced') to stay compact in the single-line footer and
     // match the existing "no priceable data" convention used elsewhere
-    // (cockpit-panel formatCost, agent-inspector-shared) — the footer has no
+    // (cockpit-panel formatCost, agent-inspector-shared), the footer has no
     // room for a longer marker before truncation kicks in.
     const mainCostStr = model
       ? isModelPriced(model)
@@ -387,7 +387,7 @@ export class UIFactory {
     // Honest total = your main session + the delegated fleet. We show a SPLIT
     // ("you ~$X · fleet ~$Y") rather than one summed figure: the two costs are
     // tracked and attributed to different actors, and the split directly answers
-    // "where did the money go" — the exact confusion in the eval where the footer
+    // "where did the money go", the exact confusion in the eval where the footer
     // showed only the main session (~$0.046) while the fleet cost ~10x more
     // ($0.446). The fleet segment appears only when there is a real fleet cost, so
     // the idle single-session footer is unchanged.
@@ -405,7 +405,7 @@ export class UIFactory {
     const copiedNotice = isRecentlyCopied ? ` [COPIED] ` : '';
     const statsLine = '  ' + tokenLine + ' '.repeat(Math.max(0, width - 4 - getDisplayWidth(tokenLine) - getDisplayWidth(copiedNotice))) + copiedNotice;
     lines.push(this.stringToLine(statsLine, width, { fg: isRecentlyCopied ? '81' : '244', bold: isRecentlyCopied }));
-    // Context usage progress bar — suppressed in compact mode.
+    // Context usage progress bar, suppressed in compact mode.
     if (!compact && contextWindow && contextWindow > 0) {
       const ctxTokens = lastInputTokens ?? 0;
       const label = '   Context Usage: ';
@@ -421,7 +421,7 @@ export class UIFactory {
       lines.push(this.createProgressBarLine(label, ctxPct, barWidth, width, suffix, thresholdFraction));
     }
     // Context info line (working dir, model+provider, tools, hitl).
-    // Suppressed in compact mode. mode/status/flags are intentionally omitted —
+    // Suppressed in compact mode. mode/status/flags are intentionally omitted,
     // the posture block above owns them, so they are not duplicated here.
     if (!compact && (workingDir || model)) {
       const home = typeof process !== 'undefined' ? process.env.HOME ?? '' : '';
@@ -433,25 +433,25 @@ export class UIFactory {
       // segment is character-truncated mid-word. cwd/model are the essential
       // orientation segments (priority 0); the spine liveness marker is the
       // daemon-honesty signal and must outlive the two decorative segments
-      // (tool count, notify mode) — it is ordered ahead of them too, so a
+      // (tool count, notify mode), it is ordered ahead of them too, so a
       // narrow line drops "N tools"/"notify:x" whole before spine is at risk.
       const ctxParts: PrioritizedSegment[] = [];
       if (displayDir) ctxParts.push({ text: displayDir, priority: 0 });
       if (model) {
         ctxParts.push({ text: model + (provider ? ` (${provider})` : ''), priority: 0 });
       }
-      // Divergence marker — its own segment so a narrow line drops it WHOLE
+      // Divergence marker, its own segment so a narrow line drops it WHOLE
       // (joinPrioritizedSegments breaks priority ties toward the later
       // segment) rather than truncating it into a half-word. Priority 0: it
       // outranks every decorative segment, and what survives without it is
       // still the SERVING backend, never a claim about the configured one.
       if (modelNote) ctxParts.push({ text: modelNote, priority: 0 });
-      // Cross-surface spine posture — plain words, no blame. Adopted mode only.
+      // Cross-surface spine posture, plain words, no blame. Adopted mode only.
       if (sessionSpineStatus) ctxParts.push({ text: `spine:${sessionSpineStatus}`, priority: 1 });
-      // Web surface reachability — plain, persistent; dropped first under width pressure.
+      // Web surface reachability, plain, persistent; dropped first under width pressure.
       if (webSurfaceUrl) ctxParts.push({ text: `web:${webSurfaceUrl}`, priority: 2 });
       if (toolCount) ctxParts.push({ text: `${toolCount} tools`, priority: 2 });
-      // Labeled "notify" (not "hitl") — /mode (aliased /hitl) governs UX
+      // Labeled "notify" (not "hitl"), /mode (aliased /hitl) governs UX
       // notification verbosity (quiet/balanced/operator), not tool
       // auto-approval, so it must not share vocabulary with the DANGER MODE
       // risk banner rendered a few lines below. Lowest priority: dropped first.
@@ -494,19 +494,19 @@ export class UIFactory {
   // wording (approval/reconnecting/pre-first-token/stalled/thinking) are no
   // longer minted here. They come from the SDK presentation contract's
   // waitingPhrase() (@pellux/goodvibes-sdk/platform/presentation, already
-  // adopted by the agent) — see createThinkingFragment
+  // adopted by the agent), see createThinkingFragment
   // below. This renderer still decides WHICH state applies from its own
   // stall/reconnect/approval signals (computeStallInfo/computeRenderStallInfo
   // stay renderer-local per the extraction decision record); only the exact
   // wording is shared.
 
-  // Gradient colors for thinking text — cyan→purple in dark, teal→purple in
+  // Gradient colors for thinking text, cyan→purple in dark, teal→purple in
   // light (matches splash/brand). Read live per render inside
   // createThinkingFragment via activeUiTones() rather than baked into a static
   // field, so a mode flip re-resolves without a module reload.
 
   /**
-   * Per-frame stall info from stream metrics — computed from lastDeltaAtMs every render (not
+   * Per-frame stall info from stream metrics, computed from lastDeltaAtMs every render (not
    * from any event) so it degrades gracefully with zero new SDK events. Undefined until the
    * first delta clock exists this turn.
    */
@@ -525,11 +525,11 @@ export class UIFactory {
    * never advanced during tool execution (the model isn't producing tokens
    * then), so without this gate any tool call longer than
    * THINKING_STALL_FREEZE_MS would make the thinking fragment print
-   * "Stalled Ns..." directly above the ticking "executing (Ns)" tool row — a
+   * "Stalled Ns..." directly above the ticking "executing (Ns)" tool row, a
    * false positive during ordinary tool execution (see stream-event-wiring.ts
    * TOOL_EXECUTING/TOOL_SUCCEEDED/TOOL_FAILED/TOOL_CANCELLED handlers).
-   * Genuine no-delta silence while waiting on the provider — including the
-   * pre-first-token case, where lastDeltaAtMs is seeded at STREAM_START —
+   * Genuine no-delta silence while waiting on the provider, including the
+   * pre-first-token case, where lastDeltaAtMs is seeded at STREAM_START,
    * still stall-detects normally here, since no tool is active then; that is
    * the honest stall case this indicator exists for.
    */
@@ -548,7 +548,7 @@ export class UIFactory {
     const tones = activeUiTones();
     // Freeze the whimsical phrase rotation once real silence has gone on
     // long enough to be misleading (THINKING_STALL_FREEZE_MS). Decide WHICH
-    // honest waiting state applies (renderer-local — this signal computation
+    // honest waiting state applies (renderer-local, this signal computation
     // stays here per the extraction decision record), then defer the exact
     // wording to the SDK presentation contract's waitingPhrase() (which
     // mirrors the agent's adoption). Precedence matches the contract:
@@ -567,7 +567,7 @@ export class UIFactory {
       frame,
     });
     // Token-rate and time-to-first-token readouts are meaningless while waiting on the user, and a
-    // "tok/s" figure next to an approval prompt reads as if the model were still working — suppress
+    // "tok/s" figure next to an approval prompt reads as if the model were still working, suppress
     // them; keep the elapsed timer since "how long the approval has waited" is honest.
     const speedSuffix = (!approvalPending && tokenSpeed !== undefined && tokenSpeed > 0) ? ` (${Math.round(tokenSpeed)} tok/s)` : '';
     const elapsedSuffix = elapsedMs !== undefined ? ` (${formatElapsed(elapsedMs)})` : '';

package/src/renderer/ui-primitives.ts

@@ -1,11 +1,11 @@
 // ---------------------------------------------------------------------------
-// ui-primitives.ts — glyph registry + tone-token table.
+// ui-primitives.ts, glyph registry + tone-token table.
 //
 // These four tables (GLYPHS, UI_TONES, DIFF_TONES, SPINNER_FRAMES) are
 // no longer minted locally. They are the SDK presentation contract
 // (@pellux/goodvibes-sdk/platform/presentation, already
 // adopted by the agent), consumed here so the TUI and the agent
-// share ONE source (Mike's move-to-SDK ruling — machinery needed by 2+
+// share ONE source (Mike's move-to-SDK ruling, machinery needed by 2+
 // surfaces => SDK). The TUI was the reference these values were lifted from
 // verbatim, so this swap is byte-identical. See
 // docs/decisions/2026-07-05-presentation-contract-sdk-extraction.md in the SDK.
@@ -27,9 +27,9 @@ import {
 export { GLYPHS, DIFF_TONES, SPINNER_FRAMES };
 
 /**
- * UI_TONES — the single chrome/color-token source for src/renderer and
+ * UI_TONES, the single chrome/color-token source for src/renderer and
  * src/panels. Concrete (dark-mode) values; resolveUiTones(mode) in theme.ts
- * is the single mode-resolved read path — this object is the 'dark' entry
+ * is the single mode-resolved read path, this object is the 'dark' entry
  * (== resolveTones('dark') from the SDK presentation contract).
  */
 export const UI_TONES = TONE_TOKENS;

package/src/runtime/bootstrap-command-parts.ts

@@ -215,7 +215,7 @@ export function createBootstrapCommandActions(
   const showPanel = (panelId: string, pane?: 'top' | 'bottom', target?: PanelDeepLinkTarget) => {
     // (the purge): a MIGRATE-TO-MODAL id resolves to a modal, not a panel.
     // panelManager.open() fires the injected openModal callback and returns a
-    // no-op sentinel — so skip panelManager.show() (which would reveal an empty
+    // no-op sentinel, so skip panelManager.show() (which would reveal an empty
     // panel workspace behind the modal) when this id redirects. Keeps every
     // showPanel-based front-door (openHooksPanel/openSecurityPanel/… and the
     // migrated command runtimes) opening the modal cleanly.
@@ -272,7 +272,7 @@ export function createBootstrapCommandActions(
           // the preference. Every other route into this callback (model-only
           // commit, context-cap commit) carries a level merely carried over
           // from the previous model; storing that is what used to ratchet the
-          // preference down for good — one hop through a model that caps at
+          // preference down for good, one hop through a model that caps at
           // 'medium' and 'xhigh' was gone from config, so hopping back could
           // not restore it.
           //
@@ -344,7 +344,7 @@ export function createBootstrapCommandActions(
       showPanel('memory');
     },
     // remote/subscription migrated to config-modal surfaces. open() hits
-    // the modal redirect and invokes the openModal callback — do NOT go through
+    // the modal redirect and invokes the openModal callback, do NOT go through
     // showPanel here, which would additionally reveal + focus an (empty) panel
     // workspace behind the fullscreen modal.
     openRemotePanel: () => {

package/src/runtime/bootstrap-core.ts

@@ -118,14 +118,14 @@ export interface BootstrapCoreState {
   readonly requestRender: () => void;
   readonly setRenderRequest: (fn: () => void) => void;
   readonly runtimeSessionIdRef: { value: string };
-  /** Cross-surface identity mirror; dormant for local-only, and for the SDK's 'embedded' HostServiceMode, which no product-facing setting can select — this product only ever adopts an external daemon or runs local-only (see the ADOPT ONLY guard in bootstrap.ts) (docs/decisions/2026-07-06-session-spine-mode-branch-is-permanent.md). Activated by bootstrap.ts only for an adopted 'external' daemon. */
+  /** Cross-surface identity mirror; dormant for local-only, and for the SDK's 'embedded' HostServiceMode, which no product-facing setting can select, this product only ever adopts an external daemon or runs local-only (see the ADOPT ONLY guard in bootstrap.ts) (docs/decisions/2026-07-06-session-spine-mode-branch-is-permanent.md). Activated by bootstrap.ts only for an adopted 'external' daemon. */
   readonly sessionSpine: SessionSpineClient;
   /** Inbound steer/follow-up delivery; dormant until bootstrap.ts activates it. */
   readonly sessionInboundInputs: SessionInboundInputPoller;
-  /** Cache-backed read facade; bootstrap.ts drives its mode (external/local-only in this product — 'embedded' is a HostServiceMode value with no product-facing setting to select it here) from the same HostServiceMode as the spine above. */
+  /** Cache-backed read facade; bootstrap.ts drives its mode (external/local-only in this product, 'embedded' is a HostServiceMode value with no product-facing setting to select it here) from the same HostServiceMode as the spine above. */
   readonly sessionUnionCache: SessionUnionCache;
   /**
-   * WRFC chain persistence — call `rehydrate()` once after the SystemMessageRouter
+   * WRFC chain persistence, call `rehydrate()` once after the SystemMessageRouter
    * is wired so interrupted chains from a previous process are surfaced to the operator.
    */
   readonly wrfcPersistence: WrfcPersistence;
@@ -136,7 +136,7 @@ export type CompanionMessagePayload = Extract<SessionEvent, { type: 'COMPANION_M
 // --- Operator narration of inbound channel events ---
 
 /** Narrate an inbound channel event (GitHub, Slack, ntfy, etc.) that triggered an
- * agent turn, via the SystemMessageRouter — null for internal/companion sources. */
+ * agent turn, via the SystemMessageRouter, null for internal/companion sources. */
 export function narrateInboundEvent(event: {
   source: string;
   metadata: Readonly<Record<string, unknown>> | undefined;
@@ -144,7 +144,7 @@ export function narrateInboundEvent(event: {
   const { source, metadata } = event;
   if (!source) return null;
 
-  // Derive the effective surface — prefer metadata.surface, fall back to source.
+  // Derive the effective surface, prefer metadata.surface, fall back to source.
   const surface = typeof metadata?.surface === 'string' ? metadata.surface : source;
 
   // Internal / companion sources do not need operator narration.
@@ -260,7 +260,7 @@ export async function initializeBootstrapCore(
   services.benchmarkStore.initBenchmarks();
   providerRegistry.initCatalog();
   // Wire cost-utils to the live catalog AND the ONE pricing resolver so every
-  // cost surface distinguishes real pricing from unpriced and names its source ("your price" vs "catalog price, as of <date>") — see cost-utils.
+  // cost surface distinguishes real pricing from unpriced and names its source ("your price" vs "catalog price, as of <date>"), see cost-utils.
   wireCostPricing(providerRegistry);
   services.keybindingsManager.loadFromDisk();
   domainDispatch.syncControlPlaneState({
@@ -296,7 +296,7 @@ export async function initializeBootstrapCore(
     surfaceRegistry,
     watcherRegistry,
   } = services;
-  // Dormant for local-only, and for the SDK's 'embedded' HostServiceMode — no product-facing
+  // Dormant for local-only, and for the SDK's 'embedded' HostServiceMode, no product-facing
   // setting can select it (SDK-internal embedder/test machinery); bootstrap.ts activates this spine only for an adopted 'external' daemon.
   const sessionSpine = new SessionSpineClient({ participant: TUI_SPINE_PARTICIPANT, recordKind: 'tui' });
   // Cache-backed read facade over the local broker (passthrough until bootstrap.ts
@@ -381,7 +381,7 @@ export async function initializeBootstrapCore(
     credentialEnvScrub: { allowlist: readExecEnvScrubAllowlist(configManager) },
     // Register context_accounting against OUR holder (the Orchestrator-backed source bound at bootstrap.ts). See runtime/context-accounting-source.ts.
     contextAccountingHolder: services.contextAccountingHolder,
-    // First contained (sandboxed) command run announces "commands now run contained" once — recorded and surfaced now.
+    // First contained (sandboxed) command run announces "commands now run contained" once, recorded and surfaced now.
     onSandboxedRun: createSandboxContainmentNotice({ configManager, notify: (text) => conversation.log(`[Sandbox] ${text}`, { fg: '135' }) }),
   }); registerClientPhoneTool(toolRegistry, services.devices); // the `phone` tool follows the LOOP, so it is registered here; the posture runtime it used to call is the daemon's now and this tool reaches it over the devices.* verbs (see the SDK's client/phone-tool.ts)
   // Note: installWrfcAgentToolGuard is called after routeOrBuffer is defined (further below) so the onTrace callback routes guard decisions through the pre-router buffer.
@@ -426,7 +426,7 @@ export async function initializeBootstrapCore(
   await runBootMemoryFold(memoryStore, services.memoryEmbeddingRegistry, workingDir, logger);
 
   const renderRequestRef = { value: (): void => {} };
-  // Coalescing render scheduler — collapses N requestRender() calls into 1 and
+  // Coalescing render scheduler, collapses N requestRender() calls into 1 and
   // enforces a 16ms minimum interval to cap repaints at ~60fps. renderScheduled stays
   // set for the ENTIRE window (until run() executes), so requestRender() calls arriving
   // on later event-loop ticks within the same 16ms window coalesce into the one
@@ -435,8 +435,8 @@ export async function initializeBootstrapCore(
   let renderScheduled = false;
   let lastRenderTime = 0;
   const RENDER_INTERVAL_MS = 16;
-  // run() performs the actual render. It clears renderScheduled FIRST — even if the
-  // render callback throws — otherwise a single render exception would wedge the entire
+  // run() performs the actual render. It clears renderScheduled FIRST, even if the
+  // render callback throws, otherwise a single render exception would wedge the entire
   // TUI (no future requestRender() would schedule anything); we log at error so the
   // next requestRender() can still reschedule.
   const run = (): void => {
@@ -449,7 +449,7 @@ export async function initializeBootstrapCore(
     }
     // Debounced spine heartbeat on turn/render activity (no-op while dormant, i.e. local-only, or
     // the SDK's 'embedded' mode, for which no product-facing setting exists): a cheap synchronous
-    // no-op unless its own internal window has elapsed (at most one wire call per heartbeatMinIntervalMs) — safe on the hot path.
+    // no-op unless its own internal window has elapsed (at most one wire call per heartbeatMinIntervalMs), safe on the hot path.
     sessionSpine.heartbeat(runtimeSessionIdRef.value);
   };
   const requestRender = (): void => {
@@ -458,7 +458,7 @@ export async function initializeBootstrapCore(
     setImmediate(() => {
       const elapsed = Date.now() - lastRenderTime;
       if (elapsed < RENDER_INTERVAL_MS) {
-        // Too soon — debounce to the tail of the current 16ms window. The flag
+        // Too soon, debounce to the tail of the current 16ms window. The flag
         // stays set until run() fires, so window-local requests coalesce here.
         setTimeout(run, RENDER_INTERVAL_MS - elapsed);
       } else {
@@ -470,7 +470,7 @@ export async function initializeBootstrapCore(
   // client approval raiser calls, so the UI layer patching this patches that.
   const permissionPromptRef = services.localPromptRef as { requestPermission: PermissionRequestHandler };
   // Trust-at-consequence-time: raised by trustGatedAsk on the first non-read
-  // request in an undecided workspace; overridden once the UI layer exists — same ref-patching pattern as permissionPromptRef above.
+  // request in an undecided workspace; overridden once the UI layer exists, same ref-patching pattern as permissionPromptRef above.
   const trustPromptRef = { requestTrustDecision: (async () => 'restricted') as () => Promise<WorkspaceTrustLevel> };
   approvalBroker.start().catch((err) => logger.warn('approval broker start failed at bootstrap', { err }));
   sharedSessionBroker.start().catch((err) => logger.warn('shared session broker start failed at bootstrap', { err }));
@@ -539,7 +539,7 @@ export async function initializeBootstrapCore(
     }
   };
 
-  // Startup TLS banner — emitted via wrfcBuffer.push() because the
+  // Startup TLS banner, emitted via wrfcBuffer.push() because the
   // SystemMessageRouter is not attached yet at this point in bootstrap. The
   // smart-ref setter on systemMessageRouterRef auto-flushes the buffer when
   // the router attaches, so the message will appear in the WRFC panel on startup.
@@ -616,7 +616,7 @@ export async function initializeBootstrapCore(
     getLastUserMessage: () => conversation.getLastUserMessage(),
     onTrace: ({ kind, reason, task }) => {
       const shortTask = task.length > 80 ? `${task.slice(0, 77)}...` : task;
-      routeOrBuffer(`[WRFC] Guard: ${reason} — task: "${shortTask}" (${kind})`, 'low');
+      routeOrBuffer(`[WRFC] Guard: ${reason}; task: "${shortTask}" (${kind})`, 'low');
     },
   });
 
@@ -629,7 +629,7 @@ export async function initializeBootstrapCore(
   // which (a) adds the user message to the conversation view and (b) fires a real LLM
   // turn whose STREAM_DELTA / TURN_COMPLETED events flow to both TUI and companion SSE.
   //
-  // The fallback (ref not yet set) adds the message to the conversation view only —
+  // The fallback (ref not yet set) adds the message to the conversation view only,
   // this path is unreachable in practice because the event bus is not connected to
   // any live HTTP traffic until after the orchestrator is wired in bootstrap.ts.
   const orchestratorHandleUserInputRef: {
@@ -661,7 +661,7 @@ export async function initializeBootstrapCore(
     },
   ));
 
-  // Inbound steer delivery — see createBootstrapInboundInputPoller's doc comment.
+  // Inbound steer delivery, see createBootstrapInboundInputPoller's doc comment.
   const sessionInboundInputs = createBootstrapInboundInputPoller({
     runtimeSessionIdRef, routeOrBuffer, orchestratorHandleUserInputRef, conversation, requestRender,
   });
@@ -674,7 +674,7 @@ export async function initializeBootstrapCore(
   // webhook URL added mid-session reached long-task notifications (which read
   // ctx.services.webhookNotifier directly) but never reached this instance's
   // AGENT_FAILED/WORKFLOW_CHAIN_FAILED/WORKFLOW_CHAIN_PASSED runtime-bus
-  // listeners until restart — and if the session started with zero URLs
+  // listeners until restart, and if the session started with zero URLs
   // configured, attachToRuntimeBus was never even called, so those listeners
   // never existed at all for the rest of the session. Always attaching
   // (regardless of initial URL count) and seeding the shared instance fixes
@@ -729,7 +729,7 @@ export async function initializeBootstrapCore(
   runtimeSessionIdRef.value = runtime.sessionId;
   services.liveSessionIdRef.value = runtime.sessionId; // the session an ask raised on the daemon belongs to
   // The live conversation, for this process's own /rewind AND for the daemon's
-  // questions about it — only the process holding the messages can count or
+  // questions about it, only the process holding the messages can count or
   // drop them (conversation-rewind-port.ts, the SDK's client/conversation-rewind-host.ts).
   registerSessionConversation(runtime.sessionId, conversation);
   void sharedSessionBroker.createSession({
@@ -743,7 +743,7 @@ export async function initializeBootstrapCore(
       lastSeenAt: Date.now(),
     },
   }).catch((err) => { logger.debug('session broker create session failed at bootstrap', { err }); });
-  // Fire-and-forget spine mirror — a permanent parallel-write posture alongside (never
+  // Fire-and-forget spine mirror, a permanent parallel-write posture alongside (never
   // instead of) the still-authoritative local SharedSessionBroker above. Dormant/queued
   // until bootstrap.ts's deferred task activates it for an adopted 'external' daemon.
   sessionSpine.register({ sessionId: runtime.sessionId, project: services.workingDirectory, title: 'Terminal UI session' });

package/src/runtime/bootstrap-hook-bridge.ts

@@ -25,14 +25,14 @@ export interface ResumeSessionOptions {
   readonly onSessionIdChanged?: (sessionId: string) => void;
   readonly sharedSessionBroker: Pick<SharedSessionBroker, 'reopenSession'>;
   /** Fire-and-forget daemon-spine mirror. Reopen (not register) is the
-   * ONLY resume-time verb — see the SDK session-spine client.ts header doc. */
+   * ONLY resume-time verb, see the SDK session-spine client.ts header doc. */
   readonly sessionSpine: Pick<SessionSpineClient, 'reopen'>;
   readonly project: string;
   readonly writeLastSessionPointer: (sessionId: string) => void;
   readonly hookDispatcher: HookDispatcher;
   readonly sessionManager: SessionManager;
   readonly panelManager: PanelManager;
-  /** The app's declare-once session-storage handle — the same one /session resume threads. */
+  /** The app's declare-once session-storage handle, the same one /session resume threads. */
   readonly surface: SessionSurface;
   /**
    * Multi-instance guard for this seam. Resolves false when the operator
@@ -47,7 +47,7 @@ export interface ResumeSessionOptions {
   /**
    * Reselects the resumed session's saved model through the live provider
    * registry (matches session-workflow.ts's `/session resume` reselection
-   * fallback — see core/session-resume-core.ts). Optional so a caller without
+   * fallback, see core/session-resume-core.ts). Optional so a caller without
    * a provider API wired still gets the direct-assignment behavior this seam
    * always had.
    */
@@ -58,7 +58,7 @@ export interface ResumeSessionOptions {
  * Delegates the mechanical resume sequence to resumeSessionCore (the same
  * routine session-workflow.ts's `/session resume` calls) so the two seams
  * cannot diverge on restoreTurnAnchors, resetAll-before-fromJSON, model
- * reselection, or the modal-redirect panel-reopen skip — see
+ * reselection, or the modal-redirect panel-reopen skip, see
  * core/session-resume-core.ts's header doc for the full list of divergences
  * this closes. Everything below the resumeSessionCore call is plumbing only
  * this seam performs (hook fire, session-spine mirror, shared-broker
@@ -71,12 +71,12 @@ export function createResumeSessionHandler(options: ResumeSessionOptions): (sess
       // for the text path: never fork a session another terminal is holding
       // open without the operator saying so.
       if (options.confirmLiveResume && !(await options.confirmLiveResume(sessionId))) {
-        options.conversation.log('Resume cancelled — the session is still open in another terminal.', { fg: '244' });
+        options.conversation.log('Resume cancelled: the session is still open in another terminal.', { fg: '244' });
         options.requestRender();
         return;
       }
       // Pre-read purely for the emitSessionResumed announcement's turnCount,
-      // which reports the raw saved-snapshot size — resumeSessionCore performs
+      // which reports the raw saved-snapshot size, resumeSessionCore performs
       // its own load() right after this (SessionManager.load is a cheap JSONL
       // parse; the tiny duplicate read keeps this announcement's meaning
       // unchanged rather than repurposing it to a post-replay count).
@@ -104,11 +104,11 @@ export function createResumeSessionHandler(options: ResumeSessionOptions): (sess
       options.onSessionIdChanged?.(sessionId);
       options.writeLastSessionPointer(sessionId);
       void options.sharedSessionBroker.reopenSession(sessionId).catch((err) => { logger.debug('session broker reopen session failed', { err }); });
-      // Fire-and-forget spine mirror (reopen:true — the user resume verb).
+      // Fire-and-forget spine mirror (reopen:true, the user resume verb).
       options.sessionSpine.reopen({ sessionId, project: options.project, title: options.conversation.title || meta.title });
       options.conversation.log(`Resumed session: ${sessionId}`, { fg: '135' });
       if (panels.movedToModal.length > 0) {
-        options.conversation.log(`Resume: ${panels.movedToModal.join(', ')} moved to a modal — reopen via its command instead of as a panel.`, { fg: '244' });
+        options.conversation.log(`Resume: ${panels.movedToModal.join(', ')} moved to a modal; reopen via its command instead of as a panel.`, { fg: '244' });
       }
       if (panels.notReopened.length > 0) {
         options.conversation.log(`Resume: …and ${panels.notReopened.length} more not reopened (/panels to open)`, { fg: '244' });

package/src/runtime/bootstrap-shell.ts

@@ -96,7 +96,7 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
 
   // after any resume seam replays historical messages into `conversation`,
   // the freshly-constructed `orchestrator` still has its zeroed default usage
-  // (SDK gap — Orchestrator.usage is never persisted/reseeded). Recompute it
+  // (SDK gap, Orchestrator.usage is never persisted/reseeded). Recompute it
   // from the replayed history so the footer doesn't show Input: 0 post-resume.
   const hydrateSessionUsage = (): void => {
     const { usage, lastInputTokens } = sumConversationUsage(conversation.getMessageSnapshot());
@@ -105,7 +105,7 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
   };
   // Built before resumeSession below so its providerApi.selectModel is
   // available for the resume handler's model-reselection step (matches
-  // session-workflow.ts's /session resume — see core/session-resume-core.ts).
+  // session-workflow.ts's /session resume, see core/session-resume-core.ts).
   const foundationClients = createRuntimeFoundationClients({
     runtimeServices: services,
     tasksReadModel: uiServices.readModels.tasks,
@@ -156,7 +156,7 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
 
   // initial cost-budget alert threshold (USD; 0/unset = disabled).
   // Once the session starts, the real control surface is the CostTrackerPanel
-  // itself — the in-panel 'b' key and /cost budget <usd> both call
+  // itself, the in-panel 'b' key and /cost budget <usd> both call
   // CostTrackerPanel.setBudgetThreshold() directly on the live panel instance,
   // which now writes through to the behavior.budgetAlertUsd config key
   // so the background budget-breach notifier reads the same value. The env
@@ -221,7 +221,7 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
     openPanel: (panelId: string) => { services.panelManager.open(panelId); },
     knowledgeApi,
     // Fleet acts (pick / conflict / discard) surface receipts through the command
-    // context's print and reuse its one-key jump affordance — both late-bound
+    // context's print and reuse its one-key jump affordance, both late-bound
     // (the command context is assigned to commandContextRef after bootstrap, and
     // main.ts patches armFixSessionAttach onto it).
     fleetActsNotify: (message: string) => { commandContextRef?.print?.(message); requestRender(); },
@@ -239,7 +239,7 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
     },
     {
       // Suppress stale WRFC replay re-notifications for chains that can no
-      // longer act — gone (killed/removed → getChain null) or terminal
+      // longer act, gone (killed/removed → getChain null) or terminal
       // (passed/failed). (item 1c.)
       isChainTerminal: (chainId) => {
         const chain = services.wrfcController.getChain(chainId);
@@ -286,7 +286,7 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
     workspaceTrustManager: services.workspaceTrustManager,
     // Registration half is stateless (reads the shared registry on demand), so
     // it is constructed here for the command context rather than threaded through
-    // RuntimeServices — no early-load requirement like the trust gate has.
+    // RuntimeServices, no early-load requirement like the trust gate has.
     workspaceRegistrationManager: new WorkspaceRegistrationManager({ shellPaths: services.shellPaths }),
     memoryRegistry: services.memoryRegistry,
     integrationHelpers: services.integrationHelpers,
@@ -322,7 +322,7 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
     isPassiveCodeInjectionFlagEnabled: () => services.featureFlags.isEnabled('agent-passive-code-injection'),
     featureFlagManager: services.featureFlags,
     // Expose the MAIN session's per-turn passive-injection ring
-    // so `/recall injections` (no agent id) renders it — see recall-review.ts.
+    // so `/recall injections` (no agent id) renders it, see recall-review.ts.
     getMainSessionTurnInjections: () => orchestrator.getTurnInjections(),
     changeTracker: services.sessionChangeTracker,
     planManager: services.planManager,
@@ -347,7 +347,7 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
     activatePlan: (_planId, task) => {
       setTimeout(() => {
         void (async () => {
-          // Refresh the recall snapshot before this plan-driven turn — see
+          // Refresh the recall snapshot before this plan-driven turn, see
           // the matching comment in main.ts's submitInput.
           await refreshMemoryRecallSnapshot(services);
           orchestrator.handleUserInput(task).catch((err) => {
@@ -370,7 +370,7 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
   }).catch(() => { /* non-fatal */ });
   // FIX 2: the header's git segment otherwise only refreshes on
   // TURN_COMPLETED/TOOL_SUCCEEDED/TOOL_FAILED (see turn-event-wiring.ts's
-  // refreshGit()) — if the user runs `git init` externally and never submits
+  // refreshGit()), if the user runs `git init` externally and never submits
   // another turn, the header stays stuck on the startup-time fallback
   // indefinitely. Poll at the same 5s cadence GitPanel already uses for its
   // own self-poll (git-panel.ts) so the two mechanisms are cadence-consistent.