@pellux/goodvibes-tui 2.0.20 → 2.1.0

package/src/runtime/bootstrap-command-parts.ts

@@ -1,3 +1,4 @@
+import { activeTokens } from '../renderer/theme.ts';
 import { getConfigSnapshot } from '@pellux/goodvibes-sdk/platform/config';
 import {
   describeServingEffort,
@@ -12,7 +13,6 @@ import type { KnowledgeApi } from '@pellux/goodvibes-sdk/platform/knowledge';
 import type { MemorySpineClient } from '@pellux/goodvibes-sdk/platform/runtime/memory-spine';
 import type { HookApi } from '@pellux/goodvibes-sdk/platform/hooks';
 import type { McpApi } from '@pellux/goodvibes-sdk/platform/mcp';
-import type { PanelManager, PanelDeepLinkTarget } from '../panels/panel-manager.ts';
 import type { ProviderApi } from '@pellux/goodvibes-sdk/platform/providers';
 import type { OpsApi } from '@/runtime/index.ts';
 import type { FeatureFlagManager } from '@/runtime/index.ts';
@@ -54,7 +54,6 @@ import type { PeerClient } from '@/runtime/index.ts';
 import type { DirectTransport } from '@/runtime/index.ts';
 import type { VoiceProviderRegistry, VoiceService } from '@pellux/goodvibes-sdk/platform/voice';
 import { summarizeError } from '@pellux/goodvibes-sdk/platform/utils';
-import { LocalAuthPanel } from '../panels/local-auth-panel.ts';
 
 export type BootstrapCommandSessionSection = CommandContext['session'];
 export type BootstrapCommandProviderSection = CommandContext['provider'];
@@ -70,7 +69,6 @@ export interface BootstrapCommandActionOptions {
   readonly conversation: ConversationManager;
   readonly runtime: MutableRuntimeState;
   readonly requestRender: () => void;
-  readonly panelManager: PanelManager;
   readonly loadSystemPrompt: () => string;
   readonly activatePlan: (planId: string, task: string) => void;
   readonly requestPermission: PermissionRequestHandler;
@@ -86,7 +84,6 @@ export interface BootstrapCommandSectionOptions {
   readonly conversation: ConversationManager;
   readonly runtime: MutableRuntimeState;
   readonly keybindingsManager?: KeybindingsManager;
-  readonly panelManager: PanelManager;
   readonly requestRender: () => void;
   readonly requestPermission: PermissionRequestHandler;
   readonly toolRegistry: ToolRegistry;
@@ -182,20 +179,19 @@ export function createBootstrapCommandActions(
   | 'print'
   | 'exit'
   | 'reloadSystemPrompt'
-  | 'showPanel'
-  | 'openForensicsPanel'
-  | 'openIncidentPanel'
-  | 'openPolicyPanel'
-  | 'openHooksPanel'
-  | 'openCommunicationPanel'
-  | 'openOrchestrationPanel'
-  | 'openCockpitPanel'
+  | 'openForensicsView'
+  | 'openIncidentView'
+  | 'openPolicyView'
+  | 'openHooksView'
+  | 'openCommunicationView'
+  | 'openOrchestrationView'
+  | 'openCockpitView'
   | 'openMcpWorkspace'
-  | 'openSecurityPanel'
-  | 'openKnowledgePanel'
-  | 'openMemoryPanel'
-  | 'openRemotePanel'
-  | 'openSubscriptionPanel'
+  | 'openSecurityView'
+  | 'openKnowledgeView'
+  | 'openMemoryView'
+  | 'openRemoteView'
+  | 'openSubscriptionView'
   | 'openLocalAuthMaskedEntry'
 > {
   const {
@@ -204,24 +200,16 @@ export function createBootstrapCommandActions(
     conversation,
     runtime,
     requestRender,
-    panelManager,
     loadSystemPrompt,
     activatePlan,
     requestPermission,
     completeModelSelectionSideEffect,
-    localUserAuthManager,
   } = options;
 
-  const showPanel = (panelId: string, pane?: 'top' | 'bottom', target?: PanelDeepLinkTarget) => {
-    // (the purge): a MIGRATE-TO-MODAL id resolves to a modal, not a panel.
-    // panelManager.open() fires the injected openModal callback and returns a
-    // no-op sentinel, so skip panelManager.show() (which would reveal an empty
-    // panel workspace behind the modal) when this id redirects. Keeps every
-    // showPanel-based front-door (openHooksPanel/openSecurityPanel/… and the
-    // migrated command runtimes) opening the modal cleanly.
-    const redirected = panelManager.getModalRedirect(panelId) !== undefined;
-    panelManager.open(panelId, pane, target);
-    if (!redirected) panelManager.show();
+  // The views these open are kit modals, which exist once the shell attaches
+  // (shell/ui-openers.ts replaces every one of these with the real opener).
+  const viewNotAttached = (what: string) => (): void => {
+    conversation.log(`${what} opens once the terminal UI is attached.`, { fg: activeTokens().textMuted });
     requestRender();
   };
 
@@ -244,17 +232,17 @@ export function createBootstrapCommandActions(
           configManager.set('helper.globalProvider', def.provider);
           configManager.set('helper.globalModel', key);
           configManager.set('helper.enabled', true);
-          conversation.log(`Helper model set to: ${def.displayName} (${def.provider})`, { fg: '135' });
+          conversation.log(`Helper model set to: ${def.displayName} (${def.provider})`, { fg: activeTokens().secondary });
         } else if (resolvedTarget === 'tool') {
           // Write to tool LLM config keys and enable the tool LLM
           configManager.set('tools.llmProvider', def.provider);
           configManager.set('tools.llmModel', key);
           configManager.setDynamic('tools.llmEnabled' as never, true);
-          conversation.log(`Tool LLM set to: ${def.displayName} (${def.provider})`, { fg: '135' });
+          conversation.log(`Tool LLM set to: ${def.displayName} (${def.provider})`, { fg: activeTokens().secondary });
         } else if (resolvedTarget === 'tts') {
           configManager.set('tts.llmProvider', def.provider);
           configManager.set('tts.llmModel', key);
-          conversation.log(`TTS LLM set to: ${def.displayName} (${def.provider})`, { fg: '135' });
+          conversation.log(`TTS LLM set to: ${def.displayName} (${def.provider})`, { fg: activeTokens().secondary });
         } else {
           // Default: main provider/model
           if (contextCap != null && contextCap > 0) {
@@ -292,13 +280,13 @@ export function createBootstrapCommandActions(
           const ctxNote = contextCap != null && contextCap > 0
             ? `, context cap: ${contextCap.toLocaleString()}`
             : '';
-          conversation.log(`Switched to model: ${def.displayName} (${def.provider}), effort: ${describeServingEffort(serving, effortModel)}${ctxNote}`, { fg: '135' });
+          conversation.log(`Switched to model: ${def.displayName} (${def.provider}), effort: ${describeServingEffort(serving, effortModel)}${ctxNote}`, { fg: activeTokens().secondary });
           // The SDK's own sentence, printed verbatim so the explanation cannot
           // drift from the resolution that produced it.
-          if (serving.note) conversation.log(serving.note, { fg: '214' });
+          if (serving.note) conversation.log(serving.note, { fg: activeTokens().warning });
         }
       } catch (e) {
-        conversation.log(`Error switching model: ${summarizeError(e)}`, { fg: '#ef4444' });
+        conversation.log(`Error switching model: ${summarizeError(e)}`, { fg: activeTokens().error });
       }
       completeModelSelectionSideEffect?.();
       requestRender();
@@ -306,63 +294,25 @@ export function createBootstrapCommandActions(
     jumpToBookmark: () => unwiredShellAction('jumpToBookmark'),
     scrollToLine: () => unwiredShellAction('scrollToLine'),
     print: (text: string) => {
-      conversation.log(text, { fg: '252' });
+      conversation.log(text, { fg: activeTokens().text });
       requestRender();
     },
     exit: () => unwiredShellAction('exit'),
     reloadSystemPrompt: loadSystemPrompt,
-    showPanel,
-    openForensicsPanel: () => {
-      showPanel('forensics');
-    },
-    openIncidentPanel: () => {
-      showPanel('incident');
-    },
-    openPolicyPanel: () => {
-      showPanel('policy');
-    },
-    openHooksPanel: () => {
-      showPanel('hooks');
-    },
-    openCommunicationPanel: () => {
-      showPanel('communication');
-    },
-    openOrchestrationPanel: () => {
-      showPanel('orchestration');
-    },
-    openCockpitPanel: () => {
-      showPanel('cockpit');
-    },
+    openForensicsView: viewNotAttached('Agents'),
+    openIncidentView: viewNotAttached('Agents'),
+    openPolicyView: viewNotAttached('Policy'),
+    openHooksView: viewNotAttached('Hooks'),
+    openCommunicationView: viewNotAttached('Agents'),
+    openOrchestrationView: viewNotAttached('Agents'),
+    openCockpitView: viewNotAttached('Agents'),
     openMcpWorkspace: () => unwiredShellAction('openMcpWorkspace'),
-    openSecurityPanel: () => {
-      showPanel('security');
-    },
-    openKnowledgePanel: () => {
-      showPanel('knowledge');
-    },
-    openMemoryPanel: () => {
-      showPanel('memory');
-    },
-    // remote/subscription migrated to config-modal surfaces. open() hits
-    // the modal redirect and invokes the openModal callback, do NOT go through
-    // showPanel here, which would additionally reveal + focus an (empty) panel
-    // workspace behind the fullscreen modal.
-    openRemotePanel: () => {
-      panelManager.open('remote');
-    },
-    openSubscriptionPanel: () => {
-      panelManager.open('subscription');
-    },
-    openLocalAuthMaskedEntry: (kind, username) => {
-      showPanel('local-auth');
-      const panel = panelManager.getPanel('local-auth');
-      if (panel instanceof LocalAuthPanel && localUserAuthManager) {
-        panel.openMaskedEntry(kind, username, localUserAuthManager);
-      } else {
-        conversation.log('Masked entry unavailable: local auth is not configured in this session.', { fg: '#ef4444' });
-        requestRender();
-      }
-    },
+    openSecurityView: viewNotAttached('Security'),
+    openKnowledgeView: viewNotAttached('Knowledge'),
+    openMemoryView: viewNotAttached('Memory'),
+    openRemoteView: viewNotAttached('Remote'),
+    openSubscriptionView: viewNotAttached('Subscriptions'),
+    openLocalAuthMaskedEntry: viewNotAttached('The password prompt'),
   };
 }
 
@@ -406,7 +356,7 @@ export function createBootstrapCommandProviderSection(
 export function createBootstrapCommandWorkspaceSection(
   options: Pick<
     BootstrapCommandSectionOptions,
-    'surface' | 'keybindingsManager' | 'fileUndoManager' | 'workspaceCheckpointManager' | 'gatewayMethods' | 'workspaceTrustManager' | 'workspaceRegistrationManager' | 'panelManager' | 'profileManager' | 'bookmarkManager'
+    'surface' | 'keybindingsManager' | 'fileUndoManager' | 'workspaceCheckpointManager' | 'gatewayMethods' | 'workspaceTrustManager' | 'workspaceRegistrationManager' | 'profileManager' | 'bookmarkManager'
     | 'projectPlanningService' | 'projectPlanningProjectId' | 'workPlanStore'
   >,
   shellServices: BootstrapCommandShellServices,
@@ -419,7 +369,6 @@ export function createBootstrapCommandWorkspaceSection(
     gatewayMethods: options.gatewayMethods,
     workspaceTrustManager: options.workspaceTrustManager,
     workspaceRegistrationManager: options.workspaceRegistrationManager,
-    panelManager: options.panelManager,
     profileManager: options.profileManager,
     bookmarkManager: options.bookmarkManager,
     projectPlanningService: options.projectPlanningService,

package/src/runtime/bootstrap-core.ts

@@ -1,4 +1,6 @@
 import { ConversationManager } from '../core/conversation';
+import { createShellNoticeSink } from './notification-dispatch.ts';
+import { getSharedNotificationFeed } from '../views/notifications-feed.ts';
 import { registerSessionConversation } from './conversation-rewind-port.ts';
 import { SelectionManager } from '@pellux/goodvibes-terminal-shell';
 import { logger } from '@pellux/goodvibes-sdk/platform/utils';
@@ -8,8 +10,7 @@ import { ToolRegistry } from '@pellux/goodvibes-sdk/platform/tools';
 import { registerAllTools } from '@pellux/goodvibes-sdk/platform/tools';
 import { createSandboxContainmentNotice } from './daemon-attach-notices.ts';
 import { PermissionManager, createPermissionConfigReader } from '@pellux/goodvibes-sdk/platform/permissions';
-import { Notifier } from '@pellux/goodvibes-sdk/platform/integrations';
-import { Compositor } from '../renderer/compositor.ts';
+import { Compositor } from '../renderer/compositor.ts'; import { activeTokens } from '../renderer/theme.ts';
 import type { PermissionRequestHandler } from '@pellux/goodvibes-sdk/platform/permissions';
 import type { SystemMessageRouter } from '../core/system-message-router.ts';
 import type { ConversationFollowUpItem } from '@pellux/goodvibes-sdk/platform/core';
@@ -37,7 +38,7 @@ import type { SystemMessagePriority } from '../core/system-message-router.ts';
 import { SessionSpineClient, SessionUnionCache, TUI_SPINE_PARTICIPANT } from '@pellux/goodvibes-sdk/platform/runtime/session-spine';
 import { SessionInboundInputPoller, createBootstrapInboundInputPoller } from './session-inbound-inputs.ts';
 import { trustGatedAsk, type WorkspaceTrustLevel } from '@pellux/goodvibes-sdk/platform/runtime/operations';
-import { syncNotifierQueueIntegrations } from './bootstrap-notifier-sync.ts';
+import { createRuntimeNotifier, syncNotifierQueueIntegrations } from './bootstrap-notifier-sync.ts';
 
 // --- Pre-router buffer ---
 
@@ -290,7 +291,6 @@ export async function initializeBootstrapCore(
     hookDispatcher,
     hookWorkbench,
     memoryStore,
-    panelManager,
     routeBindings,
     sessionBroker: sharedSessionBroker,
     surfaceRegistry,
@@ -337,14 +337,12 @@ export async function initializeBootstrapCore(
     sessionUnionCache,
   });
 
-  const conversation = new ConversationManager(() => {
-    const width = stdout.columns || 80;
-    if (panelManager.isVisible() && panelManager.getAllOpen().length > 0) {
-      return Math.max(1, panelManager.getLeftWidth(width) - 1);
-    }
-    return width;
-  });
+  const conversation = new ConversationManager(() => stdout.columns || 80);
   conversation.setConfigManager(configManager);
+  // Every system notice is a toast and a notification-history entry, full
+  // text (core/notices.ts); the transcript draws none of them.
+  // One history entry per event: see createShellNoticeSink.
+  conversation.setNoticeSink(createShellNoticeSink(getSharedNotificationFeed()));
   getConversationTitle = () => conversation.title;
 
   const compositor = new Compositor(stdout);
@@ -382,7 +380,7 @@ export async function initializeBootstrapCore(
     // Register context_accounting against OUR holder (the Orchestrator-backed source bound at bootstrap.ts). See runtime/context-accounting-source.ts.
     contextAccountingHolder: services.contextAccountingHolder,
     // First contained (sandboxed) command run announces "commands now run contained" once, recorded and surfaced now.
-    onSandboxedRun: createSandboxContainmentNotice({ configManager, notify: (text) => conversation.log(`[Sandbox] ${text}`, { fg: '135' }) }),
+    onSandboxedRun: createSandboxContainmentNotice({ configManager, notify: (text) => conversation.log(`[Sandbox] ${text}`, { fg: activeTokens().secondary }) }),
   }); registerClientPhoneTool(toolRegistry, services.devices); // the `phone` tool follows the LOOP, so it is registered here; the posture runtime it used to call is the daemon's now and this tool reaches it over the devices.* verbs (see the SDK's client/phone-tool.ts)
   // Note: installWrfcAgentToolGuard is called after routeOrBuffer is defined (further below) so the onTrace callback routes guard decisions through the pre-router buffer.
   services.agentOrchestrator.setDependencies({
@@ -523,7 +521,7 @@ export async function initializeBootstrapCore(
   // core WORKFLOW_REVIEW_COMPLETED / WORKFLOW_CHAIN_CREATED messages.
   // The SDK does not surface constraint-specific system messages; the TUI layer
   // adds them here so operators can observe constraint enumeration and violations
-  // in the SystemMessagesPanel and main conversation.
+  // in the main conversation.
   //
   // Pre-router buffering: events that arrive before the SystemMessageRouter is
   // attached are held in wrfcBuffer (bounded, 100 entries). When the router is
@@ -542,7 +540,7 @@ export async function initializeBootstrapCore(
   // Startup TLS banner, emitted via wrfcBuffer.push() because the
   // SystemMessageRouter is not attached yet at this point in bootstrap. The
   // smart-ref setter on systemMessageRouterRef auto-flushes the buffer when
-  // the router attaches, so the message will appear in the WRFC panel on startup.
+  // the router attaches, so the message will appear in the conversation on startup.
   {
     const cpEnabled = Boolean(configManager.get('controlPlane.enabled'));
     const cpHostMode = String(configManager.get('controlPlane.hostMode') ?? 'local');
@@ -695,7 +693,7 @@ export async function initializeBootstrapCore(
   }
   services.webhookNotifier.attachToRuntimeBus(runtimeBus);
 
-  const notifier = await Notifier.fromConfig(services.serviceRegistry);
+  const notifier = await createRuntimeNotifier(services.serviceRegistry, (key) => configManager.get(key as Parameters<typeof configManager.get>[0]));
   syncNotifierQueueIntegrations(notifier, runtimeBus, domainDispatch);
 
   await syncConfiguredServices(domainDispatch.syncIntegration, services.serviceRegistry);

package/src/runtime/bootstrap-hook-bridge.ts

@@ -1,3 +1,4 @@
+import { activeTokens } from '../renderer/theme.ts';
 import type { ConversationManager } from '../core/conversation';
 import type { HookDispatcher } from '@pellux/goodvibes-sdk/platform/hooks';
 import type { MutableRuntimeState } from '@/runtime/index.ts';
@@ -11,7 +12,6 @@ import { formatReturnContextForDisplay, getReturnContextMode, maybeAssistReturnC
 import type { SharedSessionBroker } from '@pellux/goodvibes-sdk/platform/control-plane';
 import type { SessionSpineClient } from '@pellux/goodvibes-sdk/platform/runtime/session-spine';
 import type { SessionManager } from '@pellux/goodvibes-sdk/platform/sessions';
-import type { PanelManager } from '../panels/panel-manager.ts';
 import type { ProviderRegistry } from '@pellux/goodvibes-sdk/platform/providers';
 import { summarizeError } from '@pellux/goodvibes-sdk/platform/utils';
 import { resumeSessionCore } from '../core/session-resume-core.ts';
@@ -31,7 +31,6 @@ export interface ResumeSessionOptions {
   readonly writeLastSessionPointer: (sessionId: string) => void;
   readonly hookDispatcher: HookDispatcher;
   readonly sessionManager: SessionManager;
-  readonly panelManager: PanelManager;
   /** The app's declare-once session-storage handle, the same one /session resume threads. */
   readonly surface: SessionSurface;
   /**
@@ -58,7 +57,7 @@ export interface ResumeSessionOptions {
  * Delegates the mechanical resume sequence to resumeSessionCore (the same
  * routine session-workflow.ts's `/session resume` calls) so the two seams
  * cannot diverge on restoreTurnAnchors, resetAll-before-fromJSON, model
- * reselection, or the modal-redirect panel-reopen skip, see
+ * reselection, see
  * core/session-resume-core.ts's header doc for the full list of divergences
  * this closes. Everything below the resumeSessionCore call is plumbing only
  * this seam performs (hook fire, session-spine mirror, shared-broker
@@ -71,7 +70,7 @@ export function createResumeSessionHandler(options: ResumeSessionOptions): (sess
       // for the text path: never fork a session another terminal is holding
       // open without the operator saying so.
       if (options.confirmLiveResume && !(await options.confirmLiveResume(sessionId))) {
-        options.conversation.log('Resume cancelled: the session is still open in another terminal.', { fg: '244' });
+        options.conversation.log('Resume cancelled: the session is still open in another terminal.', { fg: activeTokens().textMuted });
         options.requestRender();
         return;
       }
@@ -95,37 +94,29 @@ export function createResumeSessionHandler(options: ResumeSessionOptions): (sess
         conversation: options.conversation,
         runtime: options.runtime,
         surface: options.surface,
-        panelManager: options.panelManager,
         selectModel: options.selectModel,
         hydrateSessionUsage: options.hydrateSessionUsage,
       });
-      const { meta, panels } = outcome;
+      const { meta } = outcome;
 
       options.onSessionIdChanged?.(sessionId);
       options.writeLastSessionPointer(sessionId);
       void options.sharedSessionBroker.reopenSession(sessionId).catch((err) => { logger.debug('session broker reopen session failed', { err }); });
       // Fire-and-forget spine mirror (reopen:true, the user resume verb).
       options.sessionSpine.reopen({ sessionId, project: options.project, title: options.conversation.title || meta.title });
-      options.conversation.log(`Resumed session: ${sessionId}`, { fg: '135' });
-      if (panels.movedToModal.length > 0) {
-        options.conversation.log(`Resume: ${panels.movedToModal.join(', ')} moved to a modal; reopen via its command instead of as a panel.`, { fg: '244' });
-      }
-      if (panels.notReopened.length > 0) {
-        options.conversation.log(`Resume: …and ${panels.notReopened.length} more not reopened (/panels to open)`, { fg: '244' });
-      }
+      options.conversation.log(`Resumed session: ${sessionId}`, { fg: activeTokens().secondary });
       const returnContextMode = getReturnContextMode(options.configManager);
       if (returnContextMode !== 'off' && meta.returnContext) {
+        // The SDK's session loader already dropped any legacy open-views list from a
+        // session saved by an older TUI, so the loaded return context is shown as-is.
         for (const line of formatReturnContextForDisplay(meta.returnContext)) {
-          options.conversation.log(`Resume: ${line}`, { fg: '244' });
-        }
-        if (panels.reopened.length > 0) {
-          options.conversation.log(`Resume: Reopened panels: ${panels.reopened.join(', ')}`, { fg: '244' });
+          options.conversation.log(`Resume: ${line}`, { fg: activeTokens().textMuted });
         }
         if ((meta.returnContext.remoteRunners?.length ?? 0) > 0) {
-          options.conversation.log(`Resume: Remote re-entry -> /remote recover ${meta.returnContext.remoteRunners![0]}`, { fg: '244' });
+          options.conversation.log(`Resume: Remote re-entry -> /remote recover ${meta.returnContext.remoteRunners![0]}`, { fg: activeTokens().textMuted });
         }
         if ((meta.returnContext.worktreePaths?.length ?? 0) > 0) {
-          options.conversation.log('Resume: Worktree re-entry -> /worktree review', { fg: '244' });
+          options.conversation.log('Resume: Worktree re-entry -> /worktree review', { fg: activeTokens().textMuted });
         }
         if (returnContextMode === 'assisted') {
           const helperModel = new HelperModel({
@@ -134,7 +125,7 @@ export function createResumeSessionHandler(options: ResumeSessionOptions): (sess
           });
           void maybeAssistReturnContextSummary(options.configManager, helperModel, meta.returnContext).then((assisted) => {
             if (!assisted.assistedNarrative) return;
-            options.conversation.log(`Resume: ${assisted.assistedNarrative}`, { fg: '244' });
+            options.conversation.log(`Resume: ${assisted.assistedNarrative}`, { fg: activeTokens().textMuted });
             options.requestRender();
           });
         }
@@ -153,7 +144,7 @@ export function createResumeSessionHandler(options: ResumeSessionOptions): (sess
       }));
     } catch (error) {
       logger.debug('resumeSession failed', { error: summarizeError(error) });
-      options.conversation.log('Failed to resume session.', { fg: '#ef4444' });
+      options.conversation.log('Failed to resume session.', { fg: activeTokens().error });
     }
     options.requestRender();
   };

package/src/runtime/bootstrap-notifier-sync.ts

@@ -1,4 +1,5 @@
-import type { Notifier } from '@pellux/goodvibes-sdk/platform/integrations';
+import { Notifier } from '@pellux/goodvibes-sdk/platform/integrations';
+import { readNotificationsMetadataOnly } from '@pellux/goodvibes-sdk/platform/runtime/operations';
 import type { RuntimeEventBus } from '@/runtime/index.ts';
 import type { createDomainDispatch } from './store/index.ts';
 
@@ -39,3 +40,18 @@ export function syncNotifierQueueIntegrations(
     }, 'bootstrap.notifier');
   }
 }
+
+/**
+ * The Slack and Discord notifier, built from the configured services. Its
+ * agent and workstream notices name the task unless
+ * behavior.notificationsMetadataOnly is on; the setting is read at send time,
+ * so a change applies without a restart.
+ */
+export function createRuntimeNotifier(
+  serviceRegistry: Parameters<typeof Notifier.fromConfig>[0],
+  configGet: (key: string) => unknown,
+): Promise<Notifier> {
+  return Notifier.fromConfig(serviceRegistry, {
+    metadataOnly: () => readNotificationsMetadataOnly(configGet),
+  });
+}

package/src/runtime/bootstrap-shell.ts

@@ -16,7 +16,7 @@ import { InputHistory } from '../input/input-history.ts';
 import { GitStatusProvider } from '../renderer/git-status.ts';
 import type { GitHeaderInfo } from '../renderer/git-status.ts';
 import type { PermissionRequestHandler } from '@pellux/goodvibes-sdk/platform/permissions';
-import { registerBuiltinPanels } from '../panels/builtin-panels.ts';
+import { createShellViews, type ShellViews } from '../views/builtin-views.ts';
 import { WorkspaceRegistrationManager } from '@pellux/goodvibes-sdk/platform/runtime/operations';
 import { createSystemMessageRouter, type SystemMessageRouter } from '../core/system-message-router.ts';
 import { getConfigSnapshot } from '@pellux/goodvibes-sdk/platform/config';
@@ -28,7 +28,6 @@ import { loadBootstrapSystemPrompt } from '@/runtime/index.ts';
 import { createShellPlanRuntime, createShellRemoteCommandService } from '@/runtime/index.ts';
 import { createRuntimeFoundationClients } from '@/runtime/index.ts';
 import type { ControlPlaneRecentEvent } from '@pellux/goodvibes-sdk/platform/control-plane';
-import type { BuiltinPanelDeps } from '../panels/builtin/shared.ts';
 import type { ToolRegistry } from '@pellux/goodvibes-sdk/platform/tools';
 import type { ForensicsRegistry } from '@/runtime/index.ts';
 import type { PolicyRuntimeState } from '@/runtime/index.ts';
@@ -44,6 +43,8 @@ export interface BootstrapShellState {
   readonly lastGitInfoRef: { value: GitHeaderInfo | undefined };
   readonly inputHistory: InputHistory;
   readonly systemMessageRouter: SystemMessageRouter;
+  /** The always-on read models and config-modal surfaces behind the built-in modals. */
+  readonly views: ShellViews;
 }
 
 export interface BootstrapShellOptions {
@@ -133,7 +134,6 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
     writeLastSessionPointer,
     hookDispatcher: services.hookDispatcher,
     sessionManager: services.sessionManager,
-    panelManager: services.panelManager,
     surface: services.surface,
     // Read lazily on purpose. The selection modal lives on the command
     // context, which is composed further down this function (and whose
@@ -143,6 +143,7 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
     confirmLiveResume: (sessionId) => confirmLiveResume(sessionId, {
       surface: services.surface,
       openSelection: () => commandContext.openSelection,
+      confirm: () => commandContext.confirm,
     }),
     configManager,
     providerRegistry: services.providerRegistry,
@@ -155,11 +156,9 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
   });
 
   // initial cost-budget alert threshold (USD; 0/unset = disabled).
-  // Once the session starts, the real control surface is the CostTrackerPanel
-  // itself, the in-panel 'b' key and /cost budget <usd> both call
-  // CostTrackerPanel.setBudgetThreshold() directly on the live panel instance,
-  // which now writes through to the behavior.budgetAlertUsd config key
-  // so the background budget-breach notifier reads the same value. The env
+  // Once the session starts, the Usage modal's 'b' key and /cost budget <usd>
+  // both write the behavior.budgetAlertUsd config key (runtime/usage-tracker.ts),
+  // the same key the background budget-breach notifier reads. The env
   // var remains a first-run convenience only: it seeds the config key when
   // that key has never been set, so it doesn't silently override a value the
   // user has already configured in a prior session.
@@ -172,54 +171,22 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
   }
 
   let commandContextRef: CommandContext | null = null;
-  registerBuiltinPanels(services.panelManager, {
-    configManager,
-    getOrchestratorUsage: () => orchestrator.usage as { input: number; output: number; cacheRead: number; cacheWrite: number; model?: string },
-    budgetThreshold: initialCostBudgetThreshold,
-    toolRegistry,
+  const views = createShellViews({
     providerRegistry: services.providerRegistry,
-    contextWindow: services.providerRegistry.getContextWindowForModel(services.providerRegistry.getCurrentModel()),
+    uiServices,
+    toolRegistry,
     orchestrator,
-    getCtxWindow: () => services.providerRegistry.getContextWindowForModel(services.providerRegistry.getCurrentModel()),
-    resumeSession,
+    getCtxWindow: () => services.providerRegistry.getKnownContextWindowForModel(services.providerRegistry.getCurrentModel()) ?? 0,
     requestRender,
-    submitPlanningAnswer: (answer) => {
-      if (!commandContextRef?.submitInput) {
-        throw new Error('Planning answer submission is not wired yet.');
-      }
-      commandContextRef.submitInput(answer);
-    },
-    dismissPlanning: () => {
-      services.panelManager.close('project-planning');
-      commandContextRef?.focusPrompt?.();
-      requestRender();
-    },
-    forensicsRegistry,
-    policyRuntimeState,
-    approvalBroker: services.approvalBroker,
-    // Panels read the cross-surface union facade, not the raw local broker.
-    sessionBroker: uiServices.sessions.sessionBroker,
-    automationManager: services.automationManager,
-    getControlPlaneRecentEvents,
-    tokenAuditor: services.tokenAuditor,
-    componentHealthMonitor: services.componentHealthMonitor,
-    worktreeRegistry: services.worktreeRegistry,
     sandboxSessionRegistry: services.sandboxSessionRegistry,
-    // Memory modal reads via the spine client, not the raw registry (see builtin/shared.ts).
+    // Memory modal reads via the spine client, not the raw registry.
     memoryRegistry: services.memorySpine,
-    uiServices,
     pluginManager: services.pluginManager,
     hookDispatcher: services.hookDispatcher,
     hookActivityTracker: services.hookActivityTracker,
     hookWorkbench: services.hookWorkbench,
-    mcpRegistry: services.mcpRegistry,
-    daemonHomeDir: join(services.homeDirectory, '.goodvibes', 'daemon'),
-    opsApi,
-    planRuntime,
-    watcherRegistry: services.watcherRegistry,
-    runtimeStore,
-    openPanel: (panelId: string) => { services.panelManager.open(panelId); },
     knowledgeApi,
+    sessionChangeTracker: services.sessionChangeTracker,
     // Fleet acts (pick / conflict / discard) surface receipts through the command
     // context's print and reuse its one-key jump affordance, both late-bound
     // (the command context is assigned to commandContextRef after bootstrap, and
@@ -227,7 +194,6 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
     fleetActsNotify: (message: string) => { commandContextRef?.print?.(message); requestRender(); },
     armFixSessionAttach: (sessionId: string) => { commandContextRef?.armFixSessionAttach?.(sessionId); },
   });
-  services.panelManager.prewarmRegistered();
 
   const systemMessageRouter = createSystemMessageRouter(
     conversation,
@@ -340,7 +306,6 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
     mcpApi,
     opsApi,
     directTransport,
-    panelManager: services.panelManager,
     worktreeRegistry: services.worktreeRegistry,
     sandboxSessionRegistry: services.sandboxSessionRegistry,
     loadSystemPrompt: () => loadBootstrapSystemPrompt(configManager),
@@ -372,8 +337,8 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
   // TURN_COMPLETED/TOOL_SUCCEEDED/TOOL_FAILED (see turn-event-wiring.ts's
   // refreshGit()), if the user runs `git init` externally and never submits
   // another turn, the header stays stuck on the startup-time fallback
-  // indefinitely. Poll at the same 5s cadence GitPanel already uses for its
-  // own self-poll (git-panel.ts) so the two mechanisms are cadence-consistent.
+  // indefinitely. Poll at the same 5s cadence the other live modals use for
+  // their own self-polls so the mechanisms are cadence-consistent.
   gitStatusProvider.startPolling(5_000, (info) => {
     lastGitInfoRef.value = info;
     requestRender();
@@ -392,5 +357,6 @@ export function createBootstrapShell(options: BootstrapShellOptions): BootstrapS
     lastGitInfoRef,
     inputHistory,
     systemMessageRouter,
+    views,
   };
 }