@pellux/goodvibes-tui 2.0.20 → 2.1.0

package/CHANGELOG.md

@@ -4,6 +4,76 @@ All notable changes to GoodVibes TUI.
 
 ---
 
+## [2.1.0] - 2026-09-30
+
+### Added
+
+- **Themes.** display.theme picks goodvibes (the default), goodvibes-neon,
+  catppuccin, tokyonight, dracula, nord, gruvbox, one-dark, rosepine,
+  solarized, github, or system, which follows the terminal's own palette,
+  under tmux and over ssh too. Settings previews themes live. A theme you
+  already chose is kept.
+- **Modals replace panes.** Usage, Changes, Agents and Notifications open as
+  large dimmed modals on one surface kit with a live search row and one-level
+  Esc; ctrl+p opens the command palette.
+- **A calmer base screen.** A one-row header, an empty row under it,
+  full-width user messages, an input area that holds only input, and a status
+  line with the context bar and its compaction tick.
+- **The throbber is back** on its own row above the input area, naming what
+  the session is doing with elapsed time, with half-row gaps between output,
+  throbber, input area and status line.
+- **A lane-graph work tree** with status on each bead, agents as lanes,
+  folding, and a display.treeGlyphs choice of rounded, square or ascii.
+- **Full-screen agent and process views** with session chips. Esc never
+  stops them and ctrl+x asks before stopping.
+- **A back-to-bottom pill** shows while the output is scrolled back. Esc
+  returns to the live output and never interrupts the turn.
+- **Notifications name the work** on the desktop, in the terminal, on
+  webhooks and for approvals, budgets, agents and workstreams. The
+  behavior.notificationsMetadataOnly setting sends metadata only and is off
+  by default.
+- **System notices are toasts** kept in a /notifications history with plain
+  names, one entry per event.
+- /context window and /status say where the context window came from.
+
+### Changed
+
+- **WRFC chains run in their own git worktree.** A passed chain commits only
+  its own changes plus edits GoodVibes' own tools made, runs your git hooks,
+  and leaves your other uncommitted edits in place. A failed chain stops its
+  remaining fix tasks.
+- A remote model with no real window takes it from the models.dev catalog,
+  so abacusai route-llm reads 128.0k instead of a guessed 8.2k.
+- The pins move to sdk 2.1.0 and daemon 1.29.0.
+- Every open dependency advisory is closed: undici, brace-expansion, the
+  Anthropic client (0.92), qs, body-parser, ip-address, fflate, fast-uri,
+  js-yaml and sharp move to patched versions.
+
+### Fixed
+
+- Read and command bodies keep their indentation; wrapped prose no longer
+  starts one column right; long code lines wrap.
+- A finished turn stops saying working; ended processes stop counting as
+  running.
+- The recovery offer opens before the first frame and never takes keys typed
+  before it appeared.
+- Instructions meant for the model no longer show as notices, and notices
+  keep their full text.
+- Printed command output survives resizes.
+
+
+## [2.0.21] - 2026-08-23
+
+### Changes
+
+- **The pins move to sdk 2.0.23 and daemon 1.28.25.** The platform carries
+  honest calendar auth (a dead Google grant reads as an auth failure with a
+  re-authorize pointer), provider auth summaries that fold in their routes (a
+  usable subscription sign-in reads configured), derived api-key routes for
+  catalog providers that declared none, fixed non-model error hints, and the
+  new reasoning-effort surface on the model verbs. The reusable-workflow refs
+  repoint to the 2.0.23 release commit.
+
 ## [2.0.20] - 2026-08-22
 
 ### Changes

package/README.md

@@ -2,11 +2,11 @@
 
 [![CI](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml/badge.svg)](https://github.com/mgd34msu/goodvibes-tui/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Version](https://img.shields.io/badge/version-2.0.20-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
+[![Version](https://img.shields.io/badge/version-2.1.0-blue.svg)](https://github.com/mgd34msu/goodvibes-tui)
 
 GoodVibes is a terminal console for coding and operations work with an AI model. You run `goodvibes` in a project directory and get a full-screen terminal app where you talk to a model that can read and edit your files, run shell commands, search the web, and hand work off to background agents, asking your permission before anything that writes or executes.
 
-It talks to many model providers (OpenAI, Anthropic, Gemini, Bedrock, Copilot, OpenRouter and other OpenAI-compatible gateways, plus local servers like Ollama and LM Studio that `/scan` finds on your machine and LAN), keeps its settings, sessions, and secrets on your own machine, and shows you the token count and running cost of every turn. Alongside the conversation, panels turn background work into live control rooms: running agents, git state, diffs, tokens, cost.
+It talks to many model providers (OpenAI, Anthropic, Gemini, Bedrock, Copilot, OpenRouter and other OpenAI-compatible gateways, plus local servers like Ollama and LM Studio that `/scan` finds on your machine and LAN), keeps its settings, sessions, and secrets on your own machine, and shows you the token count and running cost of every turn. Background work opens in large modals over the conversation: running agents, changed files and diffs, tokens and cost.
 
 <img src="docs/assets/splash.png" alt="GoodVibes starting up in a terminal: a glitch-art GOODVIBES wordmark in cyan-to-magenta gradient, the version and tagline beneath it, the active model and tool count, the working directory, a line offering to resume the last session, and a hint line reading Ctrl+P panels / ? help / F2 fleet. A status footer shows mode, token usage, context usage, and the daemon and web listener addresses." width="900">
 
@@ -80,11 +80,11 @@ Models come from a live catalog, so the picker lists far more than a hardcoded s
 
 The `synthetic` provider groups the same model across every backend that serves it into one entry. Pick it and requests route to whichever backend is healthy, failing over on rate limits and transient errors without changing the model you chose, and without ever crossing the free, paid, and subscription boundaries. Any OpenAI-compatible API can be added as a custom provider by dropping a JSON file in `~/.goodvibes/tui/providers/`. It is hot-reloaded. See [docs/providers-and-routing.md](docs/providers-and-routing.md).
 
-### The Fleet control room
+### The Agents control room
 
 <img src="docs/assets/fleet-panel.png" alt="The Fleet panel open beside the conversation. It lists background work as rows with a kind, a name, elapsed time, token count, and cost: a CI watch poller and a runtime heartbeat watcher at 4 minutes 23 seconds each, and an idle code indexer. The detail region below shows the selected watcher's id, state idle, elapsed time, model, tokens, cost, a headline reading CI watch poller, healthy, an activity phase, and an approvals line. The action hints read j/k navigate, Enter attach, K kill, A archive finished, v archived, n host agent." width="900">
 
-Work that is not conversation goes into panels instead of scrolling past in the transcript. Fleet, reached with `F2`, is the live control room for agents, workstreams, watchers, and scheduled jobs: what is running, for how long, at what token cost, and what it is waiting on. You can attach to a running agent to watch or steer it, detach again without killing it, pause and resume, and archive finished work. Git, diff, cost, token, and local-auth panels sit alongside it. Heavier operator surfaces open as review modals.
+Work that is not conversation opens in modals instead of scrolling past in the transcript. Agents, reached with `F2`, is the live control room for agents, WRFC chains, workstreams, watchers, scheduled jobs and hosted sessions: what is running, for how long, at what token cost, and what it is waiting on. You can open a running agent to watch its live tail or steer it, back out with `Esc` without stopping it, stop it with `Ctrl+X` (it asks first), pause and resume, and archive finished work. Usage (`/usage`) shows context pressure, tokens and cost; Changes (`/changes`) shows changed files with a tinted diff, a semantic summary, hunk staging and review comments; Notifications (`/notifications`) keeps the history. The screenshot above predates the modal redesign.
 
 ### Everything else is a command
 
@@ -99,14 +99,14 @@ Press `?` for a searchable, categorized list of every slash command with its arg
 | `Enter` / `Shift+Enter` | Send the message / insert a newline |
 | `?` | Help and command picker (on an empty prompt) |
 | `@` | File picker: insert a path into the prompt |
-| `Tab` | Toggle collapse on the nearest block, or complete a path |
+| `Tab` | Complete a path, or toggle collapse on the nearest block. With the session chips showing and an empty composer, switch to the next session |
 | `Ctrl+F` | Search the conversation |
 | `Ctrl+Y` / `Ctrl+S` | Copy / save the nearest block |
-| `Ctrl+P` | Toggle the panel sidebar |
-| `F2` | Toggle Fleet: open and focus it, bring it to front, or close it |
-| `Ctrl+K` | Command palette: search and run any command |
-| `Shift+Tab` | Cycle the session permission mode |
-| `Esc` | Leave the current mode: search, command, or modal |
+| `Ctrl+P` / `Ctrl+K` | Command palette: search and run any command, view or setting |
+| `F2` / `Ctrl+O` | Open or close Agents |
+| `Shift+Tab` | Cycle the session permission mode. With the session chips showing and an empty composer, switch to the previous session |
+| `Esc` | Close the top modal (one level), clear the composer, leave an agent or process view (never stops it), or interrupt main's turn |
+| `Ctrl+X` | Inside an agent or process view: stop it (press twice to confirm) |
 | `Ctrl+C` | Clear input, cancel a running turn. Press twice to quit |
 
 Most bindings are customizable in `~/.goodvibes/tui/keybindings.json`, and `/keybindings` shows what is currently bound. Five keys are fixed and stay out of that file: `F2` (Fleet), `Shift+Tab` (permission-mode cycle), `Esc` (leave the current mode), `?` (help), and `@` (file picker). The full reference is in [docs/tools-and-commands.md](docs/tools-and-commands.md).
@@ -129,7 +129,7 @@ Each row links to the page that documents it. The product's own `?` overlay and
 | CLI flags | Session lifecycle (`--continue`, `--resume`, `--fork`), non-interactive mode, output formats, host selection | [cli-flags.md](docs/cli-flags.md) |
 | Knowledge and memory | Session and durable memory, a structured knowledge store with connectors and extractors, embeddings and retrieval, artifacts, multimodal analysis | [knowledge-artifacts-and-multimodal.md](docs/knowledge-artifacts-and-multimodal.md) |
 | Session durability | Post-turn snapshots plus an fsync-per-record transcript journal replayed at every resume | [session-durability.md](docs/session-durability.md) |
-| Planning | Conversational planning loop, project-scoped knowledge spaces, readiness evaluation, the Planning panel | [project-planning.md](docs/project-planning.md) |
+| Planning | Conversational planning loop, project-scoped knowledge spaces, readiness evaluation, the Planning modal | [project-planning.md](docs/project-planning.md) |
 | Sharing and export | `/share` to HTML, JSON, or Markdown with redaction, upload, and clipboard options | [share-command.md](docs/share-command.md) |
 | Daemon and services | Connecting to the standalone GoodVibes daemon, browser operator surface, background service and autostart, inbound TLS, outbound trust | [deployment-and-services.md](docs/deployment-and-services.md) |
 | Remote access | A worked home-server setup: always-on daemon, browser access, TUI over SSH, reachability and TLS | [remote-access.md](docs/remote-access.md) |
@@ -137,7 +137,7 @@ Each row links to the page that documents it. The product's own `?` overlay and
 | Voice | Live `/tts` playback, TTS and STT providers, streaming voice API | [voice-and-live-tts.md](docs/voice-and-live-tts.md) |
 | Sandboxing | Bounded eval and isolated MCP execution, with a QEMU-backed VM path | [qemu-sandbox.md](docs/qemu-sandbox.md) |
 | Integrations | Home Assistant surface, Cloudflare Workers/Queues batch, GitHub Action | [homeassistant-surface.md](docs/homeassistant-surface.md) · [cloudflare-batch.md](docs/cloudflare-batch.md) · [github-action.md](docs/github-action.md) |
-| Contributing surfaces | Writing a new TUI panel; the checked-in operator/peer contracts and knowledge schemas | [panel-authoring.md](docs/panel-authoring.md) · [foundation-artifacts](docs/foundation-artifacts/README.md) |
+| Contributing surfaces | The checked-in operator/peer contracts and knowledge schemas | [foundation-artifacts](docs/foundation-artifacts/README.md) |
 
 Full index: [docs/README.md](docs/README.md).
 
@@ -218,12 +218,12 @@ bun run dev
 
 The compiled binary is the TUI entrypoint. With `daemon.enabled` on (the default) it adopts a running standalone GoodVibes daemon over loopback, and when a daemon is installed as a service but stopped, it starts that service once and waits for it to come online. It never embeds or constructs a daemon of its own. The control plane, HTTP listener (`danger.httpListener`), and web surface are all hosted by the daemon; the TUI configures them and reports their bindings.
 
-Tests live under `src/test/`, mirroring the source tree, and cover contract, security, release-gate, runtime, renderer, panel, integration, and anti-regression cases. Several gates run alongside them in CI: byte-exact golden renderer frames, performance budgets for startup and frame composition and line production (`scripts/perf-baseline.json`), and architecture rules for import cycles, layer boundaries, source-file size, and unused renderer exports (`scripts/check-architecture.ts`).
+Tests live under `src/test/`, mirroring the source tree, and cover contract, security, release-gate, runtime, renderer, view, integration, and anti-regression cases. Several gates run alongside them in CI: byte-exact golden renderer frames, performance budgets for startup and frame composition and line production (`scripts/perf-baseline.json`), and architecture rules for import cycles, layer boundaries, source-file size, and unused renderer exports (`scripts/check-architecture.ts`).
 
 Some decisions worth knowing before you read the source:
 
 - **Bun runtime.** Native TypeScript execution, fast startup, built-in test runner.
-- **Raw ANSI renderer.** It writes the UI straight to the alternate screen buffer, giving direct control over every byte sent to the terminal. Conversation, panels, modals, overlays, and the footer all share that one renderer.
+- **Raw ANSI renderer.** It writes the UI straight to the alternate screen buffer, giving direct control over every byte sent to the terminal. Conversation, modals, overlays, and the footer all share that one renderer.
 - **In-process agents.** Agents run in the same process rather than over IPC, staying isolated through scoped tool registries and namespaced state.
 - **Typed runtime store.** A plain `zustand/vanilla` store with typed selectors and dispatch paths, reachable from agents, tools, renderer, hooks, channels, and daemon surfaces alike.
 - **Tree-sitter and bundled language servers.** Grammars for structural analysis, outlines, and AST-level edits, several embedded as WASM for instant startup. TypeScript, Python, Bash, CSS, HTML, and JSON language servers ship as dependencies, while `rust-analyzer` and `gopls` are fetched on first use with checksum verification.
@@ -233,13 +233,13 @@ Some decisions worth knowing before you read the source:
 
 The TUI consumes the published `@pellux/goodvibes-sdk` platform layer for shared contracts, daemon routes, and transports, and keeps the terminal UI, host wiring, and product composition here. The dependency is pinned in `package.json`. Reference consumers of those surfaces live under [`examples/`](examples/reference-operator-client/README.md).
 
-Source layout, in brief:
+Source layout, in brief (the layer rules and the operator API bridge are in [docs/architecture.md](docs/architecture.md)):
 
 ```text
 src/
 ├── main.ts, core/          terminal entrypoint, orchestrator, conversation and transcript state
 ├── renderer/               raw ANSI compositor, overlays, modals, fullscreen workspaces
-├── panels/                 panel manager, the Fleet control room, git/diff/cost/token consoles
+├── views/                  modal surfaces, the fleet read model and acts behind Agents, view wiring
 ├── input/                  slash commands, keybindings, composer, pickers, settings modals
 ├── runtime/                bootstrap wiring, typed store, service composition, session recovery
 ├── shell/                  shell-level modal openers, blocking input, retry affordances

package/docs/README.md

@@ -32,7 +32,7 @@ This directory contains the current product documentation for `goodvibes-tui`.
   Session memory, durable memory, structured knowledge, connectors, extractors, embeddings, artifacts, and multimodal analysis.
 
 - [Project planning](project-planning.md)
-  TUI-owned conversational planning loop, passive SDK planning artifacts, project-scoped knowledge spaces, readiness evaluation, and the Planning panel.
+  TUI-owned conversational planning loop, passive SDK planning artifacts, project-scoped knowledge spaces, readiness evaluation, and the Planning modal.
 
 - [Channels, remote runtime, and API](channels-remote-and-api.md)
   Omnichannel surfaces, reply routing, remote peers, node-host contracts, and the daemon/control-plane HTTP + streaming surfaces.
@@ -46,6 +46,9 @@ This directory contains the current product documentation for `goodvibes-tui`.
 - [CLI flags](cli-flags.md)
   Global flags reference covering session lifecycle (`--continue`, `--resume`, `--fork`), the `-y`/`--non-interactive` commit gate for plugin bundle installs, output format consolidation, the `--host` alias, and all other startup and command-specific flags.
 
+- [Architecture](architecture.md)
+  Source layout, the import-direction rules `bun run architecture:check` enforces, and the operator API bridge that answers `panels.list` / `panels.open` with the modal views.
+
 - [Commands reference](commands-reference.md)
   The generated, categorized list of every slash command, its arguments, and its description. It is the same list `?` renders in the product.
 
@@ -64,9 +67,6 @@ This directory contains the current product documentation for `goodvibes-tui`.
 - [Local verification](verification/local-verification.md)
   Inventory coverage, GoodVibes home audits, compiled CLI probes, authenticated daemon probes, and release-oriented local gates.
 
-- [Panel authoring](panel-authoring.md)
-  Class hierarchy, canonical example, palette convention, rendering utilities, input handling, performance instrumentation, and contract test registration for contributors building new TUI panels.
-
 - [Changelog](../CHANGELOG.md)
   Current release history. Older per-version release-note files remain under `docs/releases/` for historical releases, but `CHANGELOG.md` is the canonical current stream.
 

package/docs/foundation-artifacts/operator-contract.json

@@ -3,7 +3,7 @@
   "product": {
     "id": "goodvibes",
     "surface": "operator",
-    "version": "2.0.22"
+    "version": "2.1.0"
   },
   "auth": {
     "modes": [
@@ -80177,7 +80177,7 @@
       {
         "id": "models.current.get",
         "title": "Current Model",
-        "description": "The model this daemon would use for a turn right now, with whether its provider is actually configured and by which authentication route. `model` is null when nothing is selected, which is a real state, not an error, and a caller rendering a picker needs to tell it from a selection whose provider has lost its credentials.",
+        "description": "The model this daemon would use for a turn right now, with whether its provider is actually configured and by which authentication route. `model` is null when nothing is selected, which is a real state, not an error, and a caller rendering a picker needs to tell it from a selection whose provider has lost its credentials. `effort` is the persisted reasoning level, null when none has been set explicitly.",
         "category": "providers",
         "source": "builtin",
         "access": "authenticated",
@@ -80312,6 +80312,16 @@
                 ],
                 "additionalProperties": false
               }
+            },
+            "effort": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
             }
           },
           "required": [
@@ -80325,7 +80335,7 @@
       {
         "id": "models.current.set",
         "title": "Switch the Current Model",
-        "description": "Switch the daemon's current model live, by the registry key `models.list` returns. The switch applies to the next turn on every surface this daemon serves and is persisted, so it survives a restart; `persisted` says whether the write to settings succeeded. An unknown key is refused with MODEL_NOT_FOUND and a provider with no usable credentials with PROVIDER_NOT_CONFIGURED, naming the environment variables it looked for, a caller must not have to guess which of the two happened.",
+        "description": "Switch the daemon's current model live, by the registry key `models.list` returns. The switch applies to the next turn on every surface this daemon serves and is persisted, so it survives a restart; `persisted` says whether the write to settings succeeded. An unknown key is refused with MODEL_NOT_FOUND and a provider with no usable credentials with PROVIDER_NOT_CONFIGURED, naming the environment variables it looked for, a caller must not have to guess which of the two happened. An optional `effort` persists a reasoning level with the selection: it is validated against the known severity ladder here, and each turn maps it onto the active model's real options, snapping down and never promoting.",
         "category": "providers",
         "source": "builtin",
         "access": "authenticated",
@@ -80345,6 +80355,16 @@
           "properties": {
             "registryKey": {
               "type": "string"
+            },
+            "effort": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
             }
           },
           "required": [
@@ -80468,6 +80488,16 @@
                 "additionalProperties": false
               }
             },
+            "effort": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
             "persisted": {
               "type": "boolean"
             }
@@ -80485,7 +80515,7 @@
       {
         "id": "models.list",
         "title": "Model Catalog",
-        "description": "Every provider this daemon knows about with the models it offers, whether it is configured, and how it was configured. A GET also triggers the TTL-respecting live-discovery re-check that the terminal's model picker triggers on open, so a locally served model that appeared since the last read shows up on the next one. `currentModel` is the daemon's current selection, or null when nothing is selected. `secretsResolutionSkipped` is true when secret-backed credentials were not resolved for this read, so a caller can tell \"not configured\" from \"not checked\".",
+        "description": "Every provider this daemon knows about with the models it offers, whether it is configured, and how it was configured. A GET also triggers the TTL-respecting live-discovery re-check that the terminal's model picker triggers on open, so a locally served model that appeared since the last read shows up on the next one. `currentModel` is the daemon's current selection, or null when nothing is selected. `secretsResolutionSkipped` is true when secret-backed credentials were not resolved for this read, so a caller can tell \"not configured\" from \"not checked\". Each model that reasons carries `reasoningOptions`: the levels it actually offers and which source resolved them; a model with no entry does not reason at all.",
         "category": "providers",
         "source": "builtin",
         "access": "authenticated",
@@ -80630,6 +80660,31 @@
                         },
                         "contextWindow": {
                           "type": "number"
+                        },
+                        "reasoningOptions": {
+                          "type": "object",
+                          "properties": {
+                            "levels": {
+                              "type": "array",
+                              "items": {
+                                "type": "string"
+                              }
+                            },
+                            "source": {
+                              "type": "string",
+                              "enum": [
+                                "catalog",
+                                "declared",
+                                "family",
+                                "fallback"
+                              ]
+                            }
+                          },
+                          "required": [
+                            "levels",
+                            "source"
+                          ],
+                          "additionalProperties": false
                         }
                       },
                       "required": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pellux/goodvibes-tui",
-  "version": "2.0.20",
+  "version": "2.1.0",
   "description": "Terminal-native GoodVibes client for coding, operations, knowledge and channel workflows; a pure client of the GoodVibes daemon.",
   "type": "module",
   "main": "src/main.ts",
@@ -96,11 +96,11 @@
     "@anthropic-ai/bedrock-sdk": "^0.29.1",
     "@anthropic-ai/sdk": "^0.92.0",
     "@ast-grep/napi": "^0.42.0",
-    "@pellux/goodvibes-sdk": "2.0.22",
-    "@pellux/goodvibes-terminal-shell": "2.0.22",
+    "@pellux/goodvibes-sdk": "2.1.0",
+    "@pellux/goodvibes-terminal-shell": "2.1.0",
     "bash-language-server": "^5.6.0",
     "fuse.js": "^7.1.0",
-    "@pellux/goodvibes-daemon": "1.28.24",
+    "@pellux/goodvibes-daemon": "1.29.0",
     "graphql": "^16.13.2",
     "jszip": "^3.10.1",
     "node-edge-tts": "^1.2.10",
@@ -121,7 +121,7 @@
     "zustand": "^5.0.12"
   },
   "devDependencies": {
-    "@pellux/goodvibes-toolchain": "2.0.22",
+    "@pellux/goodvibes-toolchain": "2.1.0",
     "@types/bun": "^1.3.10",
     "typescript": "^5.9.3"
   },
@@ -133,6 +133,16 @@
   },
   "trustedDependencies": [],
   "overrides": {
-    "minimatch": "^10.2.5"
+    "minimatch": "^10.2.5",
+    "undici": "^7.29.1",
+    "brace-expansion": "^5.0.11",
+    "@anthropic-ai/sdk": "^0.92.0",
+    "qs": "^6.16.0",
+    "body-parser": "^1.20.8",
+    "ip-address": "^10.7.2",
+    "fflate": "^0.8.3",
+    "fast-uri": "^3.1.6",
+    "js-yaml": "^4.3.2",
+    "sharp": "^0.35.4"
   }
 }

package/src/cli/management.ts

@@ -232,6 +232,8 @@ async function renderModels(runtime: CliCommandRuntime): Promise<string> {
         id: model.id,
         displayName: model.displayName,
         contextWindow: services.providerRegistry.getContextWindowForModel(model),
+        // False when nothing states the window (a guess, or disproven by a larger accepted request).
+        contextWindowKnown: services.providerRegistry.getKnownContextWindowForModel(model) !== null,
         providerConfigured: providerSnapshot?.runtime.auth?.configured ?? true,
         setup,
       };
@@ -241,7 +243,7 @@ async function renderModels(runtime: CliCommandRuntime): Promise<string> {
         `  provider: ${model.provider}`,
         `  setup: ${setup.setupLabel}`,
         `  provider configured: ${yesNo(value.providerConfigured)}`,
-        `  context: ${value.contextWindow.toLocaleString()}`,
+        `  context: ${value.contextWindowKnown ? value.contextWindow.toLocaleString() : 'unknown'}`,
       ].join('\n'));
     }
     if (subOrFilter === 'use' || subOrFilter === 'set') {
@@ -316,6 +318,7 @@ async function renderModels(runtime: CliCommandRuntime): Promise<string> {
         id: model.id,
         displayName: model.displayName,
         contextWindow: services.providerRegistry.getContextWindowForModel(model),
+        contextWindowKnown: services.providerRegistry.getKnownContextWindowForModel(model) !== null,
         current: model.registryKey === current,
         ...(synthInfo !== null ? {
           isSynthetic: true,
@@ -331,7 +334,7 @@ async function renderModels(runtime: CliCommandRuntime): Promise<string> {
         const synthLabel = model.isSynthetic
           ? ` [synthetic ${model.syntheticConfiguredBackends}/${model.syntheticBackends}p]`
           : '';
-        return `  ${model.current ? '*' : ' '} ${model.registryKey.padEnd(42)} setup=${model.setupClass} ctx=${model.contextWindow.toLocaleString()}${synthLabel} ${model.displayName}`;
+        return `  ${model.current ? '*' : ' '} ${model.registryKey.padEnd(42)} setup=${model.setupClass} ctx=${model.contextWindowKnown ? model.contextWindow.toLocaleString() : 'unknown'}${synthLabel} ${model.displayName}`;
       }),
     ].join('\n'));
   });

package/src/cli/tui-startup.ts

@@ -7,7 +7,7 @@ import { startOnboardingFastPath } from '../runtime/onboarding/fast-path.ts';
 import { checkRecoveryForSession, readLastSessionPointer, type SessionSurface } from '@/runtime/index.ts';
 import { logger } from '@pellux/goodvibes-sdk/platform/utils';
 import { writeFatalLine } from '@pellux/goodvibes-sdk/platform/daemon';
-import { offerRecoverySnapshot } from '../runtime/recovery-prompt.ts';
+import { offerRecoverySnapshot, type RecoveryTypeaheadHooks } from '../runtime/recovery-prompt.ts';
 import { buildRecoveryOfferWiring } from '../runtime/recovery-offer-wiring.ts';
 import type { ConversationManager } from '../core/conversation.ts';
 import type { SessionManager } from '@pellux/goodvibes-sdk/platform/sessions';
@@ -34,6 +34,8 @@ export interface TuiStartupRecoveryDeps {
   readonly conversation: ConversationManager;
   readonly writeLastSessionPointer: (sessionId: string) => void;
   readonly receipt: (line: string) => void;
+  /** Holds typeahead out of the offer modal (see RecoveryPromptDeps.typeahead). */
+  readonly typeahead?: RecoveryTypeaheadHooks;
 }
 
 /**
@@ -59,11 +61,12 @@ export interface TuiStartupRecoveryDeps {
  *     plain store resume, after the follow-up Keep/Remove question the
  *     established flow always asks on decline.
  *
- * The modal itself is deferred to the next macrotask, mirroring
- * `scheduleRecoveryOffer`'s own reasoning: `applyInitialTuiCliState` runs
- * before the shell's first render, so asking a question here synchronously
- * would draw it at a blank terminal. The synchronous `checkRecoveryForSession`
- * probe above needs no such deferral, only opening the modal does.
+ * The modal opens synchronously, before the shell's first frame, like the
+ * general boot offer (startRecoveryOffer in runtime/recovery-prompt.ts): the
+ * first frame already carries the question, so the composer is never live
+ * underneath it, and keys typed before it was painted are held out of it by
+ * the typeahead gate (recovery.typeahead). This runs before the general
+ * offer, so it still asks first.
  */
 async function resumeNamedSessionWithRecoveryCheck(options: {
   readonly sessionId: string;
@@ -88,39 +91,31 @@ async function resumeNamedSessionWithRecoveryCheck(options: {
     return;
   }
 
-  await new Promise<void>((resolve) => {
-    const timer = setTimeout(() => {
-      void (async () => {
-        try {
-          const deps = buildRecoveryOfferWiring({
-            surface,
-            sessionManager: recovery.sessionManager,
-            runtime: recovery.runtime,
-            conversation: recovery.conversation,
-            commandContext,
-            writeLastSessionPointer: recovery.writeLastSessionPointer,
-            receipt: recovery.receipt,
-            render,
-          });
-          const outcome = await offerRecoverySnapshot({ ...deps, targetSessionId: sessionId });
-          if (outcome !== 'resumed') {
-            await plainResume();
-          }
-        } catch {
-          // Best-effort by construction (mirrors offerRecoverySnapshot's own
-          // guarantee): a failure here must fall back to the plain resume
-          // rather than leave the boot with nothing resumed at all.
-          await plainResume().catch(() => {
-            // A failing plain resume here is no worse than the pre-existing
-            // behavior when session resume itself fails.
-          });
-        } finally {
-          resolve();
-        }
-      })();
-    }, 0);
-    timer.unref?.();
-  });
+  try {
+    const deps = buildRecoveryOfferWiring({
+      surface,
+      sessionManager: recovery.sessionManager,
+      runtime: recovery.runtime,
+      conversation: recovery.conversation,
+      commandContext,
+      writeLastSessionPointer: recovery.writeLastSessionPointer,
+      receipt: recovery.receipt,
+      render,
+      ...(recovery.typeahead ? { typeahead: recovery.typeahead } : {}),
+    });
+    const outcome = await offerRecoverySnapshot({ ...deps, targetSessionId: sessionId });
+    if (outcome !== 'resumed') {
+      await plainResume();
+    }
+  } catch {
+    // Best-effort by construction (mirrors offerRecoverySnapshot's own
+    // guarantee): a failure here must fall back to the plain resume rather
+    // than leave the boot with nothing resumed at all.
+    await plainResume().catch(() => {
+      // A failing plain resume here is no worse than the pre-existing
+      // behavior when session resume itself fails.
+    });
+  }
 }
 
 /**