@sema-agent/core 5.56.0 → 5.58.0

package/dist/core/task-registry-shared.d.ts

@@ -17,7 +17,7 @@ export type StopSource = "user" | "parent" | "system" | (string & {});
 /** design/153 §7.1: `"parked"` (background agents only today) = durably suspended on a pending
  *  approval checkpoint — neither live nor terminal. Every `=== "running"` liveness check treats it
  *  as not-running (correct: no process exists); it exits poll waits, refuses settles, and is
- *  reap-exempt. Downstream switches over this union gain an arm (announced, [1556]/L1.5). */
+ *  reap-exempt. Downstream switches over this union gain an arm (announced). */
 export type SemaTaskStatus = "pending" | "running" | "parked" | "completed" | "failed" | "killed" | "cancelled";
 export type TaskRetrievalStatus = "success" | "not_ready" | "timeout";
 export interface UnifiedTaskOutput {
@@ -38,7 +38,7 @@ export interface UnifiedTaskOutput {
      *  frames. Distinct from {@link errorCode}, which carries a FAILED child's own result taxonomy —
      *  this key classifies THIS poll/stop answer itself. Additive. */
     code?: string;
-    /** RB-386② ([2090]) — machine-readable failure code on a FAILED background_agent row's poll
+    /** RB-386② — machine-readable failure code on a FAILED background_agent row's poll
      *  details (the child's TaskResult.errorCode taxonomy — brain codes / `limit.*` / `budget.*` …).
      *  Additive; absent on non-failed rows, on rows whose failure carried no code, and on other lanes. */
     errorCode?: string;
@@ -49,14 +49,14 @@ export interface UnifiedTaskOutput {
     stoppedBy?: StopSource;
     /** server[1526] ask — the durable row's committed stop-cycle number (1.371 settle mint), served on
      *  durable-fallback polls so a tail consumer can key revive cycles without the notify lane.
-     *  [1532]§三1: ALSO served by the in-process live poll/stop arms (the handle's current cycle
+     *  ALSO served by the in-process live poll/stop arms (the handle's current cycle
      *  projection — spawn = 1, each 1.332/tier-3 revival opens the next), same key, same meaning,
      *  so tail meta is complete whichever arm answers. */
     seq?: number;
     /** fidelity-sweep A1: the served result is the child's PARTIAL work — it landed after a kill had
      *  already won the terminal race and was backfilled (produced before/while the task was stopped). */
     partial_result?: boolean;
-    /** P1-3(黑板 [1870] P1-3, cli/server 商定项 — 黑板 [1920]/[1921]/[1924]/[1925]):a cross-channel
+    /** A cross-channel
      *  correlation key for ONE completion event. The same task's completion fans out across several
      *  independent channels today (a live `TaskNotificationPayload` frame, a durable inbox entry, and
      *  this poll projection) — a consumer today has to reconstruct "are these the same completion?" from
@@ -70,7 +70,7 @@ export interface UnifiedTaskOutput {
     details?: unknown;
 }
 /**
- * E1 (黑板 [1937]) — the shared internal poll/stop result shape every helper below returns
+ * The shared internal poll/stop result shape every helper below returns
  * (`noTask`/`noTaskForStop`/`formatWorkflowRun`/`serveDurableAgentRow`/`pollTask`/`stopTask` and every
  * per-task-kind poll/stop arm). `UnifiedTaskOutput` (the `details` face) has no isError channel of its
  * own — it is a REQUIRED-field wire shape consumed by callers beyond these two tools too, so isError is
@@ -100,7 +100,7 @@ export interface SemaTaskHandle {
      *  point ({@link mintCompletionId}); absent until the task reaches a terminal status. */
     completionId?: string;
 }
-/** P1-3(黑板 [1920]/[1921]/[1924]/[1925]) — mint a cross-channel completion correlation id ONCE per
+/** Mint a cross-channel completion correlation id ONCE per
  *  handle/record, fill-once (first writer wins): every settle/direct-terminal-flip site calls this
  *  instead of writing `completionId` directly, so no matter how many terminal-transition sites a lane
  *  has (settle / TaskStop circumvention / backfill), the value is minted exactly once and every later caller
@@ -146,7 +146,7 @@ export interface BackgroundBashTaskHandle extends SemaTaskHandle {
      *  `mirrorFailed` records that at least one append to the advertised output FILE failed — the terminal
      *  frame then discloses the file as incomplete instead of letting the launch receipt's "full output is
      *  appended there" promise stand over a silently partial file. */
-    /** RB-238 ([1937] M1): `droppedBytes`/`dropUnknown` account ENV-SIDE tail-buffer eviction disclosed by
+    /** RB-238: `droppedBytes`/`dropUnknown` account ENV-SIDE tail-buffer eviction disclosed by
      *  the poll (`bytesDroppedBeforeCursor`/`truncated`) — a loss upstream of (and distinct from) the
      *  registry's own `rolledChars` memory bound. Bytes counted here never reached the spool at all. */
     spool?: {
@@ -180,9 +180,9 @@ export interface WorkflowTaskHandle extends SemaTaskHandle {
     runId: string;
     handle: WorkflowHandle<unknown>;
     store?: WorkflowRunStore;
-    /** γ 批 B-1 (live leg) — see {@link RegisterWorkflowInput.originatingSessionId}. */
+    /** B-1 (live leg) — see {@link RegisterWorkflowInput.originatingSessionId}. */
     originatingSessionId?: string;
-    /** RB-215(黑板 [1870] C6,已修): design/129 session-lifetime discipline, extended to workflow — the
+    /** RB-215: design/129 session-lifetime discipline, extended to workflow — the
      *  ONE background kind that never had it (`background_bash`/`monitor`/`background_agent` all do).
      *  Unlike those three (task-scoped BY DEFAULT, `sessionScoped` an explicit opt-in via
      *  `TaskSpec.backgroundScope`), a workflow is unconditionally session-anchored — `originatingSessionId`
@@ -219,12 +219,12 @@ export interface DurableAgentLane {
     /** True once the initial `put` landed (an outage before that retries put on the next write). */
     written: boolean;
     poisoned: boolean;
-    /** codex r3 F2 — true while the LATEST flush exhausted its retries (cleared by the next success).
+    /** true while the LATEST flush exhausted its retries (cleared by the next success).
      *  The lifecycle-flip probe requires it false: a row whose bind/settle never persisted must not
      *  have its transcript preserved-but-unreachable (the local record accumulates patches, so the
      *  next successful write self-heals the missing fields). */
     flushFailed: boolean;
-    /** codex 增量 R-4 — consecutive heartbeat re-drives of a settled flush-failed lane (reset on any
+    /** 增量 R-4 — consecutive heartbeat re-drives of a settled flush-failed lane (reset on any
      *  flush success); past the ceiling the lane is abandoned loudly instead of retrying forever. */
     redrives?: number;
 }
@@ -235,7 +235,7 @@ export interface BackgroundAgentTaskHandle extends SemaTaskHandle {
     /** RB-236 — lineage axes, declared (registration always spread them into the handle; readers used
      *  to cast). `rootSessionId` feeds {@link canAccess}'s root-session arm; the other two stay
      *  read-only lineage metadata on the live face (no parentSessionId access arm — see the arm's
-     *  comment for why). [1344]② clamps `parentTaskId` register-side. */
+     *  comment for why). The register side clamps `parentTaskId`. */
     parentTaskId?: string;
     parentSessionId?: string;
     rootSessionId?: string;
@@ -251,16 +251,16 @@ export interface BackgroundAgentTaskHandle extends SemaTaskHandle {
     notify?: (notification: import("./task-notification.js").TaskNotificationPayload, opts?: {
         priority?: import("./task-notification.js").SystemInjectionPriority;
     }) => "queued" | "parked" | "dropped_duplicate" | Promise<"queued" | "parked" | "dropped_duplicate">;
-    /** design/147 S2a (codex R3 F5) — messages that arrived in the STARTUP window (row already
+    /** design/147 S2a — messages that arrived in the STARTUP window (row already
      *  running, lane not yet bound). Bounded; flushed in order by attachAgentNotify. Discarded at
      *  terminal settle: a run that failed during prepare never had a lane to park through, and the
      *  sender's completion notification (failed) prompts the resend. */
-    /** S2b codex F1 — park redeemability (see RegisterBackgroundAgentInput.retainedContinuation). */
+    /** S2b — park redeemability (see RegisterBackgroundAgentInput.retainedContinuation). */
     retainedContinuation?: boolean;
     /** S2b RB-27② — revive-cycle stamp (see reviveBackgroundAgent): attach/settle from a resume leg
      *  carry it so a stale cycle's late calls no-op instead of clobbering the newer cycle. */
     reviveCycle?: number;
-    /** [1532]§三1 — the CURRENT stop-cycle number in settle-generation terms (spawn run = 1; each
+    /** The CURRENT stop-cycle number in settle-generation terms (spawn run = 1; each
      *  revival — 1.332 retained or tier-3 seeded — opens the next). Served by the LIVE poll/stop
      *  projection under the SAME `seq` key as the durable-fallback arm, so a tail consumer keys
      *  revive cycles identically whichever arm answered. Re-aligned to the settle's authoritative
@@ -275,7 +275,7 @@ export interface BackgroundAgentTaskHandle extends SemaTaskHandle {
      *  Absent (cross-process row, no live park context) ⇒ TaskStop refuses honestly: the durable
      *  approval inbox (server /decide) owns that arbitration. */
     resolveParkedStop?: () => Promise<boolean>;
-    /** S2b codex R5-F2 — resolvers of DIRECT (post-attach) deliveries currently awaiting the
+    /** S2b — resolvers of DIRECT (post-attach) deliveries currently awaiting the
      *  injector; terminal settle/stop sweep these as not_running so a never-settling adapter can
      *  never pin the sender's tool call. */
     inFlightDirect?: Set<(r: {
@@ -340,7 +340,7 @@ export interface BackgroundAgentTaskHandle extends SemaTaskHandle {
      *  this one is awaited). */
     spillFailed?: true;
     error?: string;
-    /** RB-386② ([2090]) — the machine-readable failure code beside `error`, threaded from the settle
+    /** RB-386② — the machine-readable failure code beside `error`, threaded from the settle
      *  mint point (subagent.ts computes it ONCE from the child's TaskResult.errorCode taxonomy /
      *  extractErrorCode — single source with the sync report's classification). Served on the failed
      *  row's poll `details` and the failed terminal notification. Absent when no code was known. */
@@ -350,7 +350,7 @@ export interface BackgroundAgentTaskHandle extends SemaTaskHandle {
      *  overloaded/timeout/network ⇒ true, logic ⇒ false). Stored rather than re-derived so the core
      *  poll lane never has to import the agents-domain classifier (no new domain cycle). */
     errorRetryable?: boolean;
-    /** RB-405 G3 ([2135]/[2136]) — the coarse classification KIND beside `errorRetryable`
+    /** RB-405 — the coarse classification KIND beside `errorRetryable`
      *  (classifySubagentError's error_kind ∈ rate_limit/overloaded/timeout/network/logic), threaded
      *  from the same settle mint point and stored for the same no-domain-cycle reason as its sibling.
      *  Rendered on the FAILED row's poll TEXT face as the `(error_kind: …, retryable: …)` clause —
@@ -400,7 +400,7 @@ export interface MonitorTaskHandle extends SemaTaskHandle {
     type: "monitor";
     env: ExecutionEnv & BackgroundShellCapability;
     shellId: BackgroundShellId;
-    /** RB-238/RB-239/RB-240 ([1937] M1-M3) spool honesty fields: `droppedBytes`/`dropUnknown` = env-side
+    /** RB-238/RB-239/RB-240 spool honesty fields: `droppedBytes`/`dropUnknown` = env-side
      *  tail-buffer eviction (see the bash handle's twin); `dropNotified` = the once-latch for the event-stream
      *  disclosure (terminal frames disclose unconditionally); `drainFailed` = the stop-time final drain poll
      *  failed, so the spool may be missing the last window; `timedOut`/`timeoutSec` = the env's own
@@ -452,7 +452,7 @@ export interface MonitorTaskHandle extends SemaTaskHandle {
     deadlineAt?: number;
     timeoutMs?: number;
     watcher?: unknown;
-    /** RB-239 ([1937] M2): a watcher tick is suspended on its pollBackground await RIGHT NOW. The stop-time
+    /** RB-239: a watcher tick is suspended on its pollBackground await RIGHT NOW. The stop-time
      *  final drain must skip its own poll then (that in-flight tick already consumed the env cursor — and a
      *  never-resolving adapter must not pin TaskStop). Set/cleared in lockstep with the tick's re-entrancy
      *  guard. */
@@ -535,7 +535,7 @@ export interface RegisterWorkflowInput extends TaskAccess {
     description?: string;
     toolUseId?: string;
     now?: number;
-    /** γ 批 B-1 (live leg): the ORIGINATING session id — anchors the in-process handle to its session
+    /** B-1 (live leg): the ORIGINATING session id — anchors the in-process handle to its session
      *  so a later turn of the SAME session (fresh per-turn owner) reaches it through `canAccess`'s
      *  workflow session arm, mirroring the durable predicate. A workflow is a SESSION-level asset
      *  (its completion notification routes to the session) — deliberately unlike a background agent's
@@ -573,7 +573,7 @@ export declare const MONITOR_STORM_KILL_AFTER_MS = 30000;
  *  a monitored process emitting megabytes without a single newline grew it without limit (the spool's
  *  own roll never covered it). Keep the TAIL (the newest bytes are the ones a watch is about). */
 export declare const MONITOR_LINE_BUF_CAP = 1048576;
-/** RB-239 ([1937] M2): the monitor event-result clip, shared by the watcher's batch/terminal emits and
+/** RB-239: the monitor event-result clip, shared by the watcher's batch/terminal emits and
  *  the stop-time drain emit (one clip, one truncation wording). */
 export declare function clipMonitorEvent(s: string): string;
 /** RB-334 (CC `DCo` leg): per-line clip applied to the `lines[]` a batch carries. Spool untouched. */
@@ -626,7 +626,7 @@ export declare function rollSpoolText(spool: {
  *  `content.length`; `ToolResultSlice.totalChars`) and the spool's `rolledChars` axis — one unit
  *  end-to-end; a `Buffer.byteLength` ledger here would sit crosswise to the store's own cap. */
 export declare const MONITOR_SPILL_CAP_CHARS: number;
-/** RB-238 ([1937] M1): fold one poll's env-side-loss disclosure into the spool's account. The env's
+/** RB-238: fold one poll's env-side-loss disclosure into the spool's account. The env's
  *  tail buffer evicts its HEAD under pressure (node-execution-env 8MB bound) — those bytes are gone
  *  before any watcher ever saw them, which is a different loss than the registry-side `rolledChars`
  *  middle-drop. `bytesDroppedBeforeCursor` only counts bytes dropped before an unconsumed cursor, so
@@ -645,7 +645,7 @@ export declare function accountDroppedBytes(spool: {
     truncated?: boolean;
     bytesDroppedBeforeCursor?: number;
 }): void;
-/** RB-238 ([1937] M1) — the POLL-FACE wording for env-side loss (the terminal/event-frame wording is
+/** RB-238 — the POLL-FACE wording for env-side loss (the terminal/event-frame wording is
  *  {@link droppedGapNote}'s; the two faces differ by design and always have). One function so the two
  *  quantified/unquantified branches cannot drift between the three legs that render it: the monitor
  *  re-readable spool, the bash re-readable spool, and the bash blocked wait. Trailing newline included
@@ -686,7 +686,7 @@ export interface SpoolBodyOptions {
     /** A full banner line (own trailing newline) rendered after the drop note, or "". */
     drainNote: string;
 }
-/** RB-238/RB-239/RB-240 ([1937] M1-M3) — the ONE renderer for a re-readable spool's TaskOutput body,
+/** RB-238/RB-239/RB-240 — the ONE renderer for a re-readable spool's TaskOutput body,
  *  shared by the monitor lane (pollMonitorLane) and the bash spool lane (pollBackgroundBash).
  *
  *  Both faces were hand-copied twins carrying three real disclosure bugs' worth of wording (env-side
@@ -712,25 +712,25 @@ export declare function firstDropNote(spool: {
     dropUnknown?: true;
     dropNotified?: true;
 }): string;
-/** RB-244 ([1937] T1): ONE wording for "you stopped nothing" across every already-terminal stop face —
+/** RB-244: ONE wording for "you stopped nothing" across every already-terminal stop face —
  *  the in-process bash/monitor/agent arms and the durable-row fallback previously split: the durable
  *  arm answered honestly while the in-process arms claimed `Terminated <id>.` over work that finished
  *  (or was killed) on its own. CC 220 refuses the call outright (`Task X is not running (status: …)`,
  *  220:468231-468236); sema keeps the idempotent no-op posture (stopWorkflow / durable-arm precedent,
  *  no isError) but the receipt must tell the truth. */
 export declare function alreadyTerminalStopNote(id: string, status: string): string;
-/** design/115 review B1 → β 批 A-2: register-side fail-fast, now on BOTH axes — `canAccess` is
+/** design/115 review B1 → A-2: register-side fail-fast, now on BOTH axes — `canAccess` is
  *  default-deny, so a handle missing either axis would be unreachable by every caller (a dead row
  *  is worse than a loud registration error). The production chain always sets both (hostTaskId +
  *  principal-or-"default"); a direct registry caller declares its access domain explicitly
  *  (`scope: "default"` is the single-tenant spelling — explicit, never implied). */
 export declare function assertOwnership(input: TaskAccess, site: string): void;
-/** γ 批 B-1 (2026-07-22, [1510] 同窗) — POSITIVE-MATCH form, one polarity with `canAccess`/
- *  `canAccessAgentRecord` (β 批 A-2): scope must match, then the caller must HIT an arm — owner
+/** POSITIVE-MATCH form, one polarity with `canAccess`/
+ *  `canAccessAgentRecord` (A-2): scope must match, then the caller must HIT an arm — owner
  *  (the spawning task) or SESSION (the run's `originatingSessionId`). The session arm is the B-1
  *  HIGH fix: the completion notification routes back to the originating SESSION, but per-turn
  *  taskIds die with their turn — before this arm, a later turn of the same session could not poll
- *  or stop its own workflow (default-deny functional breakage, [1502] R4 sibling). The old form's
+ *  or stop its own workflow (default-deny functional breakage). The old form's
  *  `access.owner === undefined ⇒ pass` scope-only residue is gone with the same β polarity ruling
  *  (design/136 §2.3 S-1 定谳 posture, now positive-match on every arm). Exported: the run-workflow
  *  tool's resume-ownership recheck and a deployment's serving layer apply the SAME predicate. */
@@ -751,14 +751,14 @@ export interface RegistryCore {
     notifyTerminalOnce(handle: BackgroundBashTaskHandle | MonitorTaskHandle, send: () => void): void;
     pokeBgQuiescence(owner: string | undefined): void;
 }
-/** codex S1a F2 — writer-lease renewal period for armed durable rows (see ensureDurableHeartbeat).
+/** writer-lease renewal period for armed durable rows (see ensureDurableHeartbeat).
  *  Exported so deployments size `staleRunningMaxAgeMs` against it (recommend ≥10× this). */
 export declare const DURABLE_AGENT_HEARTBEAT_MS = 60000;
-/** design/151 S1a (codex F3): the durable fallback consults the store ONLY for handle-shaped ids —
+/** design/151 S1a: the durable fallback consults the store ONLY for handle-shaped ids —
  *  a NAME (the fuzzy stop leg) or a foreign-domain id must not take a store round-trip, and a store
  *  outage must never block the local name-resolution ladder. Mint form: `a` + 16 hex; the revive
  *  leg re-registers the same form.
- *  EXPORTED ([1518] server ask): a serving layer's fallback needs the SAME shape gate before its
+ *  EXPORTED: a serving layer's fallback needs the SAME shape gate before its
  *  durable arm (a bare exact-key miss lets padded/legacy/name-shaped ids leak into live branches —
  *  the server 1.250 HIGH) — one shared regex kills the drift, roster-normalize precedent. */
 export declare const DURABLE_AGENT_HANDLE_RE: RegExp;
@@ -769,7 +769,7 @@ export declare const BG_AGENT_REAP_STOP_ERROR = "stopped (parent task ended or T
 /** CC206-B 欠账 — TaskStop name addressing, CC `XN` verbatim (206:574955-574962): NFKC-normalize, strip
  *  control/format chars (whitespace-class ones survive), trim, lowercase, whitespace runs → hyphens. Both
  *  the query and the candidate label go through this, so "Fix Tests" addresses "fix tests".
- *  [c209-D] codex R4: EXPORTED — SendMessage's "main" reserved lane must use the SAME canonicalization
+ *  [c209-D]: EXPORTED — SendMessage's "main" reserved lane must use the SAME canonicalization
  *  as this resolver, or an NFKC-equivalent spelling (fullwidth "ｍａｉｎ") skips the reserved lane and
  *  reaches the description layers. One normalizer, every name face. */
 export declare function normalizeAgentName(s: string): string;
@@ -781,7 +781,7 @@ export declare function editDistance(a: string, b: string): number;
 /** CC `htr` shape (206:519814-519827): candidates within Levenshtein ≤2 (length-diff ≤2 pre-filter),
  *  best-first; the single best is the "Did you mean" suggestion (`htr(e, keys, 1)[0]`, 206:575196). */
 export declare function closestName(query: string, candidates: Iterable<string>): string | undefined;
-/** β 批 A-2 (clay 裁定 2026-07-22, 一步到位): DEFAULT-DENY on BOTH axes — the old predicate skipped
+/** Ruled 2026-07-22: DEFAULT-DENY on BOTH axes — the old predicate skipped
  *  a missing axis (owner-less handle = readable by everyone in scope; scope-less handle = readable
  *  across scopes), splitting polarity with `canAccessAgentRecord` and re-opening the session-axis
  *  class cli/server just swept. Registration now REQUIRES both axes ({@link assertOwnership}), so a
@@ -846,12 +846,12 @@ export interface RegisterBackgroundAgentInput extends TaskAccess {
     parkedCheckpointToken?: string;
     /** design/153 §7.2d — the TaskStop arbitration closure for the parked-born handle (expire CAS). */
     resolveParkedStop?: () => Promise<boolean>;
-    /** design/147 S2a (codex R5 F7) — declare that the spawner WILL attach a mid-run delivery
+    /** design/147 S2a — declare that the spawner WILL attach a mid-run delivery
      *  channel (attachAgentNotify) once the child's lane binds. Only declared-"attaching" rows buffer
      *  startup-window messages; an undeclared row refuses `no_channel` IMMEDIATELY — a spawner that
      *  never attaches must not collect acknowledged-then-discarded messages (silent loss). */
     deliveryChannel?: "attaching";
-    /** S2b RB-27① codex F1 — the spawner DECLARES whether a parked message is redeemable: true when
+    /** S2b RB-27① — the spawner DECLARES whether a parked message is redeemable: true when
      *  the child's session outlives the run (retain ledger or session-scoped registration), so a
      *  continuation can drain the park. A non-retained row must NOT hand out parked acknowledgements
      *  (the session is released right after settle — the park would be irrecoverable): its
@@ -862,15 +862,15 @@ export interface RegisterBackgroundAgentInput extends TaskAccess {
      *  reserved "main") before registration; the registry stores it verbatim. Duplicate names are legal
      *  (latest-wins at resolution; older rows stay task_id-addressable). */
     name?: string;
-    /** [1358]/[1336]A — the RESOLVED subagent type ("general-purpose"/"fork"/a roster name), persisted
+    /** the RESOLVED subagent type ("general-purpose"/"fork"/a roster name), persisted
      *  so a REVIVE cycle's observer frames can reproduce the row's TYPE column (never the description). */
     agentType?: string;
-    /** [1371]② — the spawn frame's parent linkage, persisted so a REVIVE cycle's spawn frame nests the
+    /** the spawn frame's parent linkage, persisted so a REVIVE cycle's spawn frame nests the
      *  revived row exactly like the first spawn did. The caller passes the SAME values it emitted on the
-     *  original frame (parentTaskId already [1344]②-clamped there; parentSessionId always-on). */
+     *  original frame (parentTaskId already-clamped there; parentSessionId always-on). */
     parentTaskId?: string;
     parentSessionId?: string;
-    /** δ 批 [1498]⑦ — the ROOT host session of the delegation tree (fixed point down the trusted
+    /** the ROOT host session of the delegation tree (fixed point down the trusted
      *  internals chain; equals parentSessionId at depth 1). Persisted on the handle, the durable row
      *  and the roster so recovery faces enumerate the whole tree under the root without alias walks. */
     rootSessionId?: string;

package/dist/core/task-registry.d.ts

@@ -47,7 +47,7 @@ export interface TaskPollOptions {
     filter?: string;
     /** design/116 W3 (CC TaskOutput `block`): wait until the task reaches a terminal state (or `timeoutMs`)
      *  instead of returning the instantaneous snapshot — saves the model blind re-poll turns. The TOOL layer
-     *  defaults this to TRUE (CC 187 `block: default(!0)`, clay 拍 2026-07-02); registry callers pass it explicitly. */
+     *  defaults this to TRUE (CC 187 `block: default(!0)`, 裁定 2026-07-02); registry callers pass it explicitly. */
     block?: boolean;
     /** Max wait for `block` (ms). Default 30s, capped at 600s (CC 187). */
     timeoutMs?: number;
@@ -74,7 +74,7 @@ export interface TaskToolOptions extends TaskAccess {
     workflowStore?: WorkflowRunStore;
     /** design/151 S1a: durable agent ledger — threads into pollTask/stopTask fallback reads. */
     agentStore?: BackgroundAgentStore;
-    /** [1076]③d — the task's soft wall-clock deadline (absolute ms epoch), same source as the Bash
+    /** the task's soft wall-clock deadline (absolute ms epoch), same source as the Bash
      *  foreground clamp (design/130 P2b). When present, a BLOCKING TaskOutput wait is clamped so it
      *  cannot eat the write-out window: the model gets an honest, visible clamp note instead of a
      *  silent 10-minute blind wait into the finalize wall (TB rs**: 9.1min poll = the exact tax).
@@ -105,7 +105,7 @@ export interface TaskToolOptions extends TaskAccess {
  * RB-49 B-3 (2026-07-25): the row-metadata projection `getAccessibleTask` returns. Was spelled out as a
  * hand-written literal in THREE places (this signature, the internal cast below, and the SendMessage
  * consumer in agents/subagent.ts) with an identical field list — adding a row field meant editing three
- * spots with zero compiler enforcement (the server [1622] / core [1640] projection-antipattern family).
+ * spots with zero compiler enforcement (the projection-antipattern family).
  * One exported name, three consumers, drift becomes a type error.
  */
 export interface AccessibleTaskRow {
@@ -128,7 +128,7 @@ export interface AccessibleTaskRow {
 }
 export declare class TaskRegistry {
     private handles;
-    /** codex 终审 1.255 F1: observers of the design/129 session terminal anchor — `reapSessionBackground`
+    /** observers of the design/129 session terminal anchor — `reapSessionBackground`
      *  fires each hook (swallow-guarded) AFTER reaping, so session-anchored side state (the session-scoped
      *  subagent retain ledger) releases on the SAME deployment call. Registered idempotently per consumer. */
     private sessionReapHooks;
@@ -339,12 +339,12 @@ export declare class TaskRegistry {
      *  registry instance). A fallback read of a `running` row written by a DIFFERENT instance must
      *  never claim liveness — it serves the honest "outcome unknown here" instead. */
     readonly writerId: string;
-    /** codex S1a F2 — the writer-liveness LEASE: while any armed durable row is running, one lazy
+    /** the writer-liveness LEASE: while any armed durable row is running, one lazy
      *  unref'd interval bumps their `updatedAt` (an empty patch), so row age measures SILENCE, not
      *  run length. A `staleRunningMaxAgeMs` reap policy must therefore be ≫ this period (the store
      *  contract recommends ≥10min) — and even a premature flip self-heals: the real settle's
      *  read-back adopts the bumped rev and re-CASes the truth over the reaper's guess. */
-    /** codex 增量 R-1 — handles a reap sweep is CURRENTLY adjudicating (between its live-handle check
+    /** 增量 R-1 — handles a reap sweep is CURRENTLY adjudicating (between its live-handle check
      *  and the delete/release outcome). A revive admitted inside that await window would race the
      *  conditional delete with its own durable transition still unflushed (old rev ⇒ the delete wins,
      *  the session is released under an ADMITTED resume, and the revive's queued write poisons on
@@ -386,7 +386,7 @@ export declare class TaskRegistry {
      *  GC), so the exemption never outlives the task's addressability. Exact string compare: both sides are
      *  `canonicalPath` outputs for the same env, so a symlinked temp dir cannot cause a miss or a false hit. */
     isBackgroundOutputFile(canonicalPath: string, access: TaskAccess, env: unknown): boolean;
-    /** [c209-D] codex R1: display-cap-free EXACT id lookup with the same access guard as a poll — identity
+    /** [c209-D]: display-cap-free EXACT id lookup with the same access guard as a poll — identity
      *  resolution must NEVER ride the display-capped `list()` (with >LIMIT visible rows the cap can evict
      *  the addressed id, and a name-layer fallback then MISROUTES the message to a同名 row instead of an
      *  honest not-found). Unknown and out-of-scope ids read identically (info-hiding, undefined both). */
@@ -399,7 +399,7 @@ export declare class TaskRegistry {
      *  watcher/stop lanes mark and read it too); workflow cancellation is out of scope. */
     markStopSource(id: string, source: StopSource): void;
     /**
-     * [1712] / RB-164 — attribute an ENV-LEVEL blanket sweep before it runs.
+     * RB-164 — attribute an ENV-LEVEL blanket sweep before it runs.
      *
      * The incident: a user's `run_in_background` Bash died mid-run reporting `stopped-by:"system"` with a
      * zero-byte output file, and diagnosing it took a cross-repo investigation with a timeline argument.
@@ -476,7 +476,7 @@ export declare class TaskRegistry {
      *  the last watcher-poll interval (~1s) but whose exit the watcher hasn't observed yet still reads
      *  "running" here and is settled `killed` — the receipt is at worst one status coarser, never silent.
      *
-     *  codex 1.257.3 review (HIGH): the settle EXECUTES the kill itself (await `killBackground`, Result-typed)
+     *  (HIGH): the settle EXECUTES the kill itself (await `killBackground`, Result-typed)
      *  before minting the receipt — previously the receipt claimed "killed" while the actual kill was left to
      *  the later `disposeBackgroundShells`, whose failure was swallowed (process alive + registry cleared =
      *  the receipt lied). A failed kill now mints an HONEST receipt naming the failure (the env dispose is
@@ -531,7 +531,7 @@ export declare class TaskRegistry {
      *  drain start — an in-flight turn may still be TaskOutput-following a bg process. Returns total rows
      *  reaped. */
     reapAllSessionBackground(): number;
-    /** codex 终审 1.255 F1 — subscribe to `reapSessionBackground` (the design/129 session terminal anchor).
+    /** subscribe to `reapSessionBackground` (the design/129 session terminal anchor).
      *  Returns an unsubscribe. Hooks are best-effort observers; a throwing hook is swallowed. */
     onSessionReap(hook: (sessionId: string, scope?: string) => void): () => void;
     /** design/144 §1.2 — the child gate's liveness read: how many BACKGROUND tasks (bg bash / monitor /
@@ -599,11 +599,11 @@ export declare class TaskRegistry {
     registerWorkflow(input: RegisterWorkflowInput): string;
     pollTask(id: string, access: TaskAccess, opts?: TaskPollOptions): Promise<UnifiedTaskResult>;
     stopTask(id: string, access: TaskAccess, opts?: TaskStopOptions): Promise<UnifiedTaskResult>;
-    /** S2b codex R8 — bounded delivery-confirmation wait (see deliverToRunningAgent). Test-tunable. */
+    /** S2b — bounded delivery-confirmation wait (see deliverToRunningAgent). Test-tunable. */
     deliverConfirmTimeoutMs: number;
     private lastGcAt;
     /**
-     * 预清(飞轮 /tasks + footer pill 的数据源正道): list the caller's OWN tasks as a bounded DISPLAY
+     * The data source behind a shell's task list and footer pill: list the caller's OWN tasks as a bounded DISPLAY
      * projection — never the internal handles (no shellId/env/abort). Same owner/scope guard as poll/stop;
      * a caller only ever sees its own tasks. Sorted newest-first, capped at `limit` (default 50).
      * CC parity note: CC's /tasks is a UI/SDK surface, NOT an LLM tool — expose this via SDK/service,

package/dist/core/tool-detach.d.ts

@@ -1,5 +1,5 @@
 /**
- * design/116 detach(飞轮 [C] gap ②)— per-tool-call detach 信号毂。
+ * design/116 detach([C] gap ②)— per-tool-call detach 信号毂。
  *
  * The missing middle of mid-flight ctrl+b: `TaskStream.detach(toolCallId)` fires the controller here; a
  * detach-capable tool (Bash) picks the signal up BY toolCallId from its mount closure and threads it into
@@ -12,7 +12,7 @@
  */
 export declare class ToolDetachHub {
     private readonly controllers;
-    /** service [371]③: the detach verb is caller-exposed — an unknown/never-started toolCallId would otherwise
+    /** the detach verb is caller-exposed — an unknown/never-started toolCallId would otherwise
      *  strand its controller until run end (gc only fires on the real tool-completion path), a per-run memory
      *  growth vector. Bound the map: on overflow, evict the OLDEST entry (Map preserves insertion order); a
      *  live tool re-materializes its controller on the next signalFor() and an aborted one stays aborted via

package/dist/core/tool-errors.d.ts

@@ -77,7 +77,7 @@ export declare function formatToolError(error: unknown): string;
  *                   in-presence condition) for that one code, or the errorCode's own doc for every other
  *                   member (`env.lifetime_expired`'s doc says "retrying needs a NEW environment, not a
  *                   smaller budget" — there is no `retryAfterMs` for it, by design: an expiring
- *                   environment has no return time to give). Codex falsification review (rounds 2 and 4)
+ *                   environment has no return time to give). falsification review (rounds 2 and 4)
  *                   twice suggested a distinct governance/platform class or leaving these `unknown`
  *                   instead — rejected both times: (a) explicit calling-convention direction; (b)
  *                   `WorkerErrorClass` is a small CLOSED public exported union — adding a member is an
@@ -86,14 +86,14 @@ export declare function formatToolError(error: unknown): string;
  *                   terminal codes, not foreign ones); (c) pre-existing precedent (`config.compliance_required`,
  *                   NOT part of this diff) already folds a transient/retryable governance code into `config`.
  *                   `memory.admission_required`/`_denied`/`env.lifetime_expired` are EXACT codes, not broad
- *                   `memory.`/`env.` prefixes — codex falsification review (A-005.3 follow-up) caught an
+ *                   `memory.`/`env.` prefixes — falsification review (A-005.3 follow-up) caught an
  *                   earlier draft folding EVERY `memory.*`/`env.*` code here, which misclassified the
  *                   memory-engine's non-governance incident codes (`memory.secret_detected` et al.,
  *                   explicitly listed as NON-governance in `NON_GOVERNANCE_MEMORY_CODES` — a content-safety
  *                   tool-call refusal, not a task-spec rejection) as configuration failures. `usage.*` STAYS
  *                   a broad prefix: governance-codes.ts's own `governanceRetryClass` already treats every
  *                   `usage.*` code (registered or not) as governance by prefix — a deliberate legacy-family
- *                   rule this folder mirrors rather than re-deciding (codex round 2 questioned whether that
+ *                   rule this folder mirrors rather than re-deciding (questioned whether that
  *                   mirroring is appropriate across the two taxonomies; kept as-is per the calling
  *                   convention's explicit direction — see the function's SCOPE note for the boundary this
  *                   folder does and does not draw).