@sema-agent/core 5.56.0 → 5.58.0

package/dist/orchestration/run-workflow-tool.d.ts

@@ -48,11 +48,11 @@ export interface WorkflowCompletionNotifier {
         summary: string;
         result?: string;
         usage?: unknown;
-        /** [1630]-sweep A-①: the diagnosis route (per-agent rows / journal locator / resumeFromRunId guidance).
+        /** The diagnosis route (per-agent rows / journal locator / resumeFromRunId guidance).
          *  Added 1.353 on the payload but silently dropped at this hand-written subset seam until 1.404 —
          *  keep this interface in lockstep with the payload fields the settle legs mint. */
         diagnostics?: string;
-        /** P1-3(黑板 [1920]/[1921]/[1924]/[1925]) — see {@link "../core/task-notification.js".TaskNotificationPayload.completionId}.
+        /** See {@link "../core/task-notification.js".TaskNotificationPayload.completionId}.
          *  This CROSS-REPLICA seam is exactly one of the read faces the cross-channel correlation contract
          *  promises the same value on — added here in the same car specifically so this interface does not
          *  repeat the diagnostics field's own drift history (the comment right above this one). */
@@ -133,7 +133,7 @@ export interface RunWorkflowToolDeps {
     scriptRunner: WorkflowScriptRunner;
     /** Deployment-trusted governance every spawned agent inherits (design/98 §2.5). */
     governanceBaseline: WorkflowGovernanceBaseline;
-    /** codex F6 (tool-face round 5): the HOST task's tool-face controls (prepare-time snapshot) — a
+    /** (tool-face round 5): the HOST task's tool-face controls (prepare-time snapshot) — a
      *  scenario roster must survive the workflow delegation path exactly like the Agent path. Merged
      *  (union — tighten-only) into the baseline base for every child spec this workflow spawns. */
     parentExcludeTools?: readonly string[];
@@ -142,7 +142,7 @@ export interface RunWorkflowToolDeps {
      *  declared for the tree must survive this direct-mount lane exactly like the deferral it exempts
      *  from. Union (widen-the-exemption never tightens the child beyond the parent's own face). */
     parentAlwaysLoadTools?: readonly string[];
-    /** design/277 (codex r1 F1): the HOST task's model-gate restore selector
+    /** design/277: the HOST task's model-gate restore selector
      *  ({@link import("../core/types.js").TaskSpec.restoreGatedTools}, prepare-time frozen snapshot) —
      *  the workflow lane is a delegation lane too, so the selector inherits here exactly like the
      *  three tool-face controls above (union with the baseline's own; `true` on either side wins).
@@ -166,7 +166,7 @@ export interface RunWorkflowToolDeps {
     /** design/97 CORE-9 (Part A) — optional LOAD-BEARING resume journal: records each agent result so a
      *  `resumeFromRunId` re-run replays the unchanged prefix (durable cross-replica resume). Opt-in. */
     journalStore?: WorkflowJournalStore;
-    /** design/149 ([1422]③ 裁 a): the process-level BackgroundChildEvent sink — workflow-spawned agents
+    /** design/149: the process-level BackgroundChildEvent sink — workflow-spawned agents
      *  mint synthetic `wa*` rows (spawn/tick/terminal) on the SAME observer bg subagents use
      *  (RunnerDeps.onBackgroundChildEvent), immune to any run-leg forwarding freeze. Opt-in. */
     onBackgroundChildEvent?: (event: import("../core/types.js").BackgroundChildEvent) => void;
@@ -180,7 +180,7 @@ export interface RunWorkflowToolDeps {
     notifier?: WorkflowCompletionNotifier;
     /** The originating session id, threaded into every completion notify. */
     originatingSessionId?: string;
-    /** δ 批 codex D-1 — the ROOT host session of the delegation tree (prepare-task passes
+    /** The ROOT host session of the delegation tree (prepare-task passes
      *  `internals?.rootSessionId ?? sessionId` per task). The AUTO-MOUNTED tool's execute ctx is the
      *  harness-native one (no internals enrichment — that wrapper covers spec.tools only), so the
      *  root MUST ride deps; `ctx.rootSessionId` stays first for a deployment-composed mount that
@@ -209,7 +209,7 @@ export interface RunWorkflowToolDeps {
     /** The originating task id + principal, threaded to the notifier. */
     sourceTaskId?: string;
     principal?: string;
-    /** 黑板 [1909]⑧/[1910]/[1911] — mirrors {@link "../core/types.js".TaskSpec.oneShot}: this submission has
+    /** mirrors {@link "../core/types.js".TaskSpec.oneShot}: this submission has
      *  no later turn for an async notification to land in. Branches the launch receipt's `note` guidance
      *  (see {@link createRunWorkflowTool}'s `note` composition) toward an active block-wait instead of
      *  "end your turn and wait" — the latter is actively wrong for a one-shot caller. */
@@ -246,14 +246,14 @@ export interface RunWorkflowToolDeps {
      *  `ToolExecuteContext.interactiveTools` seat — without it a headless-clamped host's workflow
      *  children could re-mount the interactive tool the host run disabled. */
     parentInteractiveTools?: false;
-    /** [1238](A) — call-time getter for the HOST task's RESOLVED Model object: a spawned agent whose
+    /** Call-time getter for the HOST task's RESOLVED Model object: a spawned agent whose
      *  fold chain produced no model inherits the parent's full object (baseUrl/key routing included),
      *  mirroring the subagent lane's ctx.model semantics. */
     parentModel?: () => import("../internal/llm.js").Model | undefined;
-    /** [1258] v2 — the HOST task's per-model auth hook ([893]④a): the CREDENTIAL half of model
+    /** The HOST task's per-model auth hook: the CREDENTIAL half of model
      *  inheritance. The Model object fixed the URL routing but the child brain still authenticated
-     *  with the boot env token (clay rerun: 7/7 kimi-route 401s with the qwen key). The subagent lane
-     *  has inherited this hook since [893]④a; the workflow lane never did — the governance whitelist
+     *  with the boot env token (rerun: 7/7 kimi-route 401s with the qwen key). The subagent lane
+     *  has inherited this hook since; the workflow lane never did — the governance whitelist
      *  rightly blocks SCRIPTS from setting it, but host inheritance is a different lane. */
     parentGetApiKeyAndHeaders?: import("../core/types.js").TaskSpec["getApiKeyAndHeaders"];
     /** backlog #342 — the HOST task's frozen effective approver (`spec.onAsk ?? deps.onAsk`, the exact
@@ -323,7 +323,7 @@ export interface RunWorkflowToolDeps {
  * mounts it under the same gate). Returns a structured error (not a throw) for an LLM-correctable problem
  * (oversized / malformed-meta / nesting), so the model can fix and retry.
  *
- * Async since codex F3: the card's named-workflow roster is derived from the SAME sources the execute path
+ * Async since: the card's named-workflow roster is derived from the SAME sources the execute path
  * resolves against (built-ins probed through `resolveName` shadowing + awaited `list()`), so the card can
  * never advertise a workflow the call would resolve differently.
  */

package/dist/orchestration/workflow-governance.d.ts

@@ -2,7 +2,7 @@
  * design/98 §2.5 / §E.2 (S8b, security core) — the DEFAULT-DENY governance for a sub-agent an LLM-authored
  * workflow script spawns. The child spec is BUILT (complete-by-construction) from the deployment's trusted
  * {@link WorkflowGovernanceBaseline} + a strict WHITELIST of safe work-fields the script may set — NEVER by
- * stripping a denylist off the untrusted spec (codex BLOCKER2: a missed control-plane field would leak).
+ * stripping a denylist off the untrusted spec (a missed control-plane field would leak).
  *
  * The script's spec is UNTRUSTED. Only {@link WHITELIST_KEYS} are ever read from it; every other field
  * (toolPolicy / onAsk / hooks / principal / tools / mcp / skills / lspManager / checkpointStore /
@@ -15,9 +15,9 @@
  * host-ctx bindings the engine writes onto the baseline/child, never a read of anything the script wrote:
  * a script-authored `onAsk` (or any other control-plane key) keeps being stripped + announced. The model is
  * chosen by NAME ONLY (resolved against an allowlist to a deploy-configured `Model` — the script never sees a
- * `Model` object, which carries `baseUrl`/`headers` = an exfil surface, codex v3 BLOCKER). Resource limits
+ * `Model` object, which carries `baseUrl`/`headers` = an exfil surface). Resource limits
  * are CLAMPED to the baseline + workflow ceilings (`tightenTaskSpec` only covers the safety knobs, not
- * cost/token caps — codex Q4).
+ * cost/token caps).
  */
 import type { Model } from "../internal/llm.js";
 import type { EngineNotice, ImageInput, TaskSpec, ThinkingLevel, WorkflowGovernanceBaseline } from "../core/types.js";
@@ -31,7 +31,7 @@ export declare class WorkflowModelNotAllowedError extends Error {
 }
 /**
  * The SAFE fields an LLM-authored workflow script may set per sub-agent — the WORK, never the control plane.
- * `model` is a NAME (string), NOT a `ModelRef`/`Model` object (codex v3 BLOCKER: a `Model` carries
+ * `model` is a NAME (string), NOT a `ModelRef`/`Model` object (a `Model` carries
  * `baseUrl`/`headers`/`extraBody` = endpoint + auth-header injection). No `modelRole`/`roles` (a `roles.select`
  * conditional selector is its own vector). The engine resolves `modelName` against the allowlist.
  */

package/dist/orchestration/workflow-observe.d.ts

@@ -1,7 +1,7 @@
 import type { WorkflowRunStore, WorkflowRunSummary } from "../core/workflow-run-store.js";
 import type { WorkflowEvent, WorkflowItemStatus, WorkflowRun, WorkflowRunStatus } from "./workflow.js";
 /** design/97 S1c: mark a run RUNNING (called by `runWorkflow` before it emits `run_start`).
- *  γ 批 B-3 (BREAKING): carries the run's SCOPE — {@link subscribeWorkflow} gates on it. */
+ *  B-3 (BREAKING): carries the run's SCOPE — {@link subscribeWorkflow} gates on it. */
 export declare function markWorkflowActive(runId: string, scope: string): void;
 /** T2A-9 (2026-07-05 soak): is this runId currently ACTIVE in-process? Used by `startWorkflow` to reject an
  *  explicit duplicate `opts.runId` up front — two runs sharing one observation channel let the first finisher

package/dist/orchestration/workflow-script-runner.d.ts

@@ -35,7 +35,7 @@ export declare function selfOrchestrationFailClosedReason(spec: TaskSpec, deps:
  * ({@link import("./dev-vm-script-runner.js").devWorkflowScriptRunner}, S8b) that is explicitly NOT a
  * security boundary, plus a conformance contract a hard runner must pass.
  *
- * 🔴 **Membrane = STRUCTURAL constraint, not a behavioral promise (codex v3/v4 BLOCKER).** The seam's
+ * 🔴 **Membrane = STRUCTURAL constraint, not a behavioral promise.** The seam's
  * `run()` accepts ONLY {@link WorkflowPrimitives} — a flat, sterile record of bound callbacks + a budget
  * DATA snapshot. It does NOT accept a `WorkflowRunContext` (a host object whose prototype chain the script
  * could walk via `ctx.constructor.constructor("return process")()` to escape). The engine extracts the bound

package/dist/orchestration/workflow-script-store.d.ts

@@ -24,13 +24,13 @@ export interface NamedWorkflowResolution {
      *  the run receives the merged VALUE; nothing re-queries the registry after launch). */
     defaultArgs?: unknown;
     /**
-     * 团队通道 [426] CORE-1 — the top-level key a BARE STRING call-time arg normalizes into, so the "裸 string =
+     * CORE-1 — the top-level key a BARE STRING call-time arg normalizes into, so the "裸 string =
      * <key>" ergonomic entry (published by the built-in `discussion` script: a bare string args IS the
      * topic) composes with a registered object `defaultArgs` instead of colliding with it. When a `{name}` call
      * passes a raw string AND this resolution carries an object `defaultArgs`, the tool wraps the string as
      * `{ [stringArgKey]: <string> }` BEFORE the object merge (see {@link normalizeStringArg} / the run-workflow
      * tool's resolve path). Defaults to `"topic"` (the built-in ergonomic contract). Ignored when `defaultArgs`
-     * is not a plain object (a bare string then reaches the script verbatim — pre-[426] behavior preserved). */
+     * is not a plain object (a bare string then reaches the script verbatim — pre- behavior preserved). */
     stringArgKey?: string;
 }
 /**
@@ -44,7 +44,7 @@ export interface NamedWorkflowListing {
     whenToUse?: string;
 }
 export interface WorkflowScriptStore {
-    /** γ 批 B-4 (codex γ-G3) — the CONFORMANCE MARKER for the scope-partitioned contract. Structural
+    /** B-4 — the CONFORMANCE MARKER for the scope-partitioned contract. Structural
      *  typing would otherwise let a pre-partition adapter (`load(path)`, `persist(runId, script)`)
      *  remain assignable — fewer-parameter functions are compatible in TypeScript — and silently
      *  ignore the scope argument, serving cross-tenant reads while the tool presents the operation as
@@ -53,20 +53,20 @@ export interface WorkflowScriptStore {
     readonly scopePartitioned: true;
     /** Persist THIS invocation's resolved script, keyed by its runId. Returns the persisted path (what the tool
      *  reports back to the model). Failures should throw — the tool treats persistence as best-effort.
-     *  γ 批 B-4 (BREAKING): `scope` PARTITIONS per-run scripts — the CC anchor is a per-session directory,
+     *  B-4 (BREAKING): `scope` PARTITIONS per-run scripts — the CC anchor is a per-session directory,
      *  and the port had dropped the axis (one flat directory let a model-supplied scriptPath read another
      *  scope's script). Implementations key storage by scope (the file store uses per-scope subdirs). */
     persist(runId: string, script: string, scope: string): Promise<string> | string;
     /** Read a previously persisted script back. MUST refuse paths outside the store (the argument is
      *  model-supplied — containment is the store's contract, not the tool's).
-     *  γ 批 B-4 (BREAKING): `scope` bounds the read to the CALLER's partition — a path pointing into
+     *  B-4 (BREAKING): `scope` bounds the read to the CALLER's partition — a path pointing into
      *  another scope's partition must be refused exactly like a path outside the store. */
     load(scriptPath: string, scope: string): Promise<string> | string;
     /** Resolve a SAVED workflow name to its registration (undefined = unknown name). Optional — a deployment
      *  without a named registry simply omits it. RB-482 #9 (ruled 2026-08-03): ONE return form — a
      *  {@link NamedWorkflowResolution} ({ script, defaultArgs? }); the legacy bare-string return is retired. A
      *  deployment entry of the SAME NAME as a built-in workflow SHADOWS the built-in (design/140 §6 1c).
-     *  γ 批 RULING: deliberately NO scope axis here — saved names are a DEPLOYMENT-level registry (the
+     *  RULING: deliberately NO scope axis here — saved names are a DEPLOYMENT-level registry (the
      *  built-ins' tier), shared across scopes like agent definitions; a multi-tenant deployment that wants
      *  per-tenant registries mounts per-tenant store instances.
      *  CONTRACT (stated 2026-08-16, C-R14): this is a STABLE, SIDE-EFFECT-FREE lookup. Resolving ONE call
@@ -96,7 +96,7 @@ export interface WorkflowScriptStore {
  */
 export declare function mergeWorkflowArgs(callArgs: unknown, defaultArgs: unknown): unknown;
 /**
- * 团队通道 [426] CORE-1 — NORMALIZE a bare-string call-time arg into `{ [key]: <string> }` so the published
+ * CORE-1 — NORMALIZE a bare-string call-time arg into `{ [key]: <string> }` so the published
  * "裸 string = <key>" ergonomic entry (built-in `discussion`: bare string args IS the topic) COMPOSES
  * with a registered object `defaultArgs` instead of colliding with it.
  *
@@ -106,7 +106,7 @@ export declare function mergeWorkflowArgs(callArgs: unknown, defaultArgs: unknow
  * form, and the collab template quietly ran as a generic advocate/skeptic. Wrapping the string here lets the
  * subsequent object merge preserve the defaults AND honor the topic.
  *
- * Applied ONLY when BOTH hold (otherwise return `callArgs` untouched — pre-[426] behavior byte-preserved):
+ * Applied ONLY when BOTH hold (otherwise return `callArgs` untouched — pre- behavior byte-preserved):
  *  - `callArgs` is a string (the ergonomic form), AND
  *  - `defaultArgs` is a PLAIN OBJECT (there ARE object defaults to merge under; with no/scalar defaults a bare
  *    string must still reach the script verbatim — the built-in's own `raw === "string"` fallback handles it).
@@ -116,7 +116,7 @@ export declare function mergeWorkflowArgs(callArgs: unknown, defaultArgs: unknow
 export declare function normalizeStringArg(callArgs: unknown, defaultArgs: unknown, key?: string): unknown;
 /**
  * File-backed {@link WorkflowScriptStore}: per-run scripts land as `<dir>/<scopeDir>/<runId>.js`
- * (γ 批 B-4: per-scope partition — the CC per-session-dir posture restored on the tenant axis);
+ * (B-4: per-scope partition — the CC per-session-dir posture restored on the tenant axis);
  * `resolveName` reads `<dir>/<name>.js` at the ROOT (the deployment-level saved-name tier, see the
  * interface RULING — deliberately outside every scope partition).
  */

package/dist/orchestration/workflow-size-guideline.d.ts

@@ -3,7 +3,7 @@
  * (small/medium/large/unrestricted), injected into the Workflow tool's prompt/description. It is
  * guidance, NOT a cap — the hard ceiling stays `WorkflowLimits.maxAgents`.
  *
- * RB-339 (2026-07-30, clay A 案) — REBASELINED on CC 2.1.220 (语料 ../cc-decoded/pretty220.js). The
+ * RB-339 (2026-07-30, A 案) — REBASELINED on CC 2.1.220 (语料 ../cc-decoded/pretty220.js). The
  * module was anchored to 2.1.206 and had drifted on four points; all four are corrected here and the
  * old "verbatim" claims (which were not true of the two sentence builders) are replaced with what
  * each function actually is:

package/dist/orchestration/workflow-types.d.ts

@@ -56,7 +56,7 @@ export interface WorkflowAgentRun {
      *  CC-style "last N of M tool calls"; M is `toolCalls`). Structural only (name/phase/ids), no args/output. */
     activity?: ToolActivity[];
     status: WorkflowItemStatus;
-    /** [1238](B) — the failed task's machine code + bounded human message, surfaced ON THE RECORD
+    /** The failed task's machine code + bounded human message, surfaced ON THE RECORD
      *  (runs.jsonl / monitor rows / agent_end) so a dead agent is diagnosable without re-running.
      *  Previously only the script's return value carried them and every display face showed "". */
     errorCode?: string;
@@ -95,7 +95,7 @@ export interface WorkflowAgentRun {
      *  (`fork(sessionId)→runTask`, or `runTask({sessionId})`) instead of a fresh re-run. An opaque id (not
      *  content) → scope-gated via `getWorkflowRun`, no redaction needed. Absent for a stub run that minted none. */
     sessionId?: string;
-    /** RB-393① (黑板 [2107]②/[2113]) — the WORKTREE directory this agent ran in, present ONLY for an
+    /** RB-393① — the WORKTREE directory this agent ran in, present ONLY for an
      *  `isolation: "worktree"` agent whose worktree the engine actually minted (reported by the runner's
      *  workspace-observation seam and folded on while the agent is still RUNNING, so an interrupted run's
      *  recovery path has the coordinate instead of enumerating the worktrees directory and guessing). ABSENCE
@@ -177,14 +177,14 @@ export interface WorkflowRun {
      *  `read_tool_result` ref — previously the `…[+N chars]` tail dead-ended (no retrieval path; models tried
      *  the runId as a ref and hit the store-miss message). Display/notify surfaces keep using `result`. */
     resultFull?: string;
-    /** P1-3(黑板 [1920]/[1921]/[1924]/[1925]) — the cross-channel completion correlation id, minted
+    /** The cross-channel completion correlation id, minted
      *  fill-once at this run's terminal transition (see {@link "../core/task-registry.js".UnifiedTaskOutput.completionId}
      *  for the shared cross-lane contract). Persisted alongside `status`/`endedAt` so a store round-trip
      *  (restart / crash recovery) replays the exact same id — there is no second mint point downstream of
      *  this field ever being set. Absent while `status === "running"`, or on a run recorded by an older
      *  engine version. */
     completionId?: string;
-    /** RB-243 ([1937]): what this run's `resumeFromRunId` actually yielded — ADDITIVE observation (same
+    /** RB-243: what this run's `resumeFromRunId` actually yielded — ADDITIVE observation (same
      *  contract as {@link agentFailures}: never a gate input; absent on non-resume runs, on runs recorded by
      *  older engines, and on a column-mapped store that doesn't project it). Previously a resume whose journal
      *  loaded ZERO entries (unknown/pruned runId, cross-scope, unreadable record) re-ran everything live with
@@ -198,7 +198,7 @@ export interface WorkflowRun {
         divergedAtOrdinal?: number;
         divergedReason?: string;
     };
-    /** RB-243 ([1937]): how many agent results were NOT journaled because they exceeded the per-entry size
+    /** RB-243: how many agent results were NOT journaled because they exceeded the per-entry size
      *  cap ({@link MAX_JOURNAL_RESULT_BYTES}) — each skip also logs and journals a tombstone. Additive
      *  observation; absent when 0. */
     journalSkips?: number;

package/dist/orchestration/workflow.d.ts

@@ -59,7 +59,7 @@ export declare function workflowAgentCallKey(ordinal: number, spec: TaskSpec, op
     isolation?: "worktree";
 }): string;
 /**
- * RB-394 (黑板 [2107]③) — runtime rejection of an unsupported `isolation` value at the workflow spawn
+ * RB-394 — runtime rejection of an unsupported `isolation` value at the workflow spawn
  * boundary. The TYPE (`isolation?: "worktree"`) only binds TS callers: a workflow script is plain JS at
  * runtime, so a value like `"remote"` previously sailed through every `=== "worktree"` consumption gate
  * as a truthy non-match — the trusted internals channel carried it verbatim, prepareTask's fail-closed
@@ -282,17 +282,17 @@ export interface RunWorkflowOptions {
     /** The originating session id — recorded on the {@link WorkflowRun}(same rationale as
      *  sourceTaskId: live notify carries it, recovery otherwise can't). */
     originatingSessionId?: string;
-    /** δ 批 [1498]⑦ — the ROOT host session of the delegation tree (the run-workflow tool passes
+    /** the ROOT host session of the delegation tree (the run-workflow tool passes
      *  `ctx.rootSessionId ?? originatingSessionId`); rides the wa* observer frames so a recovery face
      *  groups workflow-agent rows under the root host session too. */
     rootSessionId?: string;
-    /** design/149 ([1422]③ 裁 a) — the PROCESS-level child observer (same seam as
+    /** design/149 — the PROCESS-level child observer (same seam as
      *  {@link import("../core/types.js").RunnerDeps.onBackgroundChildEvent}). When set, every workflow
      *  agent emits spawn/tick/terminal {@link import("../core/types.js").BackgroundChildEvent} frames with a
      *  synthetic `wa*` row key (runId+callKey hash — stable across resume replays), owner/parentTaskId = the
      *  workflow's own task id (the fleet row nests under the w* row), sessionScoped false. This lane is
      *  process-anchored — a host run that settles BEFORE the workflow finishes does not mute it (the
-     *  run-leg uuid tick lane's settledLeg freeze, the [1422]③ case). Swallow-guarded.
+     *  run-leg uuid tick lane's settledLeg freeze). Swallow-guarded.
      */
     onBackgroundChildEvent?: (event: import("../core/types.js").BackgroundChildEvent) => void;
     /** design/140 §6 1a — the merged effective args snapshot recorded on the {@link WorkflowRun} (the
@@ -341,7 +341,7 @@ export interface RunWorkflowOptions {
      * `journalStore` WITHOUT `resumeFromRunId` just records (so a future run can resume from THIS run). Replayed
      * agents accumulate into `run.stats` (total work) but NOT into `ctx.budget.spent()` (live spend only — a resume
      * is not re-charged for cached work). NOT-REPLAYED (they force divergence so the suffix runs live): `ctx.agentStream`
-     * (a finished result can't be steered — RECORDED since [1422]② for the journal read-face, never replayed) and `ctx.pipeline` (latency-dependent ordinals aren't deterministic —
+     * (a finished result can't be steered — RECORDED for the journal read-face, never replayed) and `ctx.pipeline` (latency-dependent ordinals aren't deterministic —
      * a CORE-7.1 follow-on adds stage-scoped deterministic keys). Sequential + `parallel(direct thunks)` replay.
      */
     journalStore?: WorkflowJournalStore;
@@ -369,18 +369,18 @@ export interface RunWorkflowOptions {
      *  spec) so a root's per-run posture override governs its workflow children too. Set by the
      *  `run_workflow` tool wiring from `ToolExecuteContext.interactionPosture`. */
     interactionPosture?: "interactive" | "headless";
-    /** [1238](A) — call-time getter for the HOST run's RESOLVED Model object. A spawned agent whose
+    /** Call-time getter for the HOST run's RESOLVED Model object. A spawned agent whose
      *  fold chain (script spec → agentType → governance baseline) produced NO model inherits the
      *  parent's full object — baseUrl/key routing included — instead of falling to a string/role
-     *  re-resolution that loses per-model routing (the clay 4/4-agents-404 incident: session model id
+     *  re-resolution that loses per-model routing (the 4/4-agents-404 incident: session model id
      *  re-resolved against the base gateway). Mirrors the subagent lane's `ctx.model` semantics. */
     defaultModel?: () => import("../internal/llm.js").Model | undefined;
-    /** [1258] v2 — the HOST's per-model auth hook, inherited into every spawned agent's spec (the
+    /** The HOST's per-model auth hook, inherited into every spawned agent's spec (the
      *  credential half of model inheritance; scripts can never set it — governance strips it — so
      *  this is always the host's). NOT call identity (auth, not behavior; a function, not data). */
     defaultGetApiKeyAndHeaders?: TaskSpec["getApiKeyAndHeaders"];
     /** design/148 S1 — the HOST run's adopted center artifact (trusted, threaded by the Workflow tool
-     *  from ctx): every spawned agent composes the same closure (codex F2a). */
+     *  from ctx): every spawned agent composes the same closure. */
     parentCenterArtifactDigest?: string;
     parentCenterSourceRevision?: string;
     /** The launching run's display sink (`RunInternals.onForwardEvent` behind the runner's ctx wrapper:
@@ -455,7 +455,7 @@ export declare const WORKFLOW_AGENT_MAX_RETRIES = 5;
  *  degraded response (a flat sleep, NOT exponential backoff — and only on the FIRST attempt's result). */
 export declare const WORKFLOW_AGENT_THROTTLE_BACKOFF_MS = 45000;
 /**
- * RB-355 (codex 异源复审, 2026-07-29) — the cap on how long the TERMINAL boundary waits on the resume-claim
+ * RB-355 (2026-07-29) — the cap on how long the TERMINAL boundary waits on the resume-claim
  * store (the admission verdict, then the release). Both awaits sit in the run's `finally`, i.e. AFTER the
  * outcome is already decided: an unbounded wait there means a store implementation that hangs (a wedged
  * connection pool, a lost network write, a promise that simply never settles) leaves the run's `done` promise

package/dist/prompt-assembly/artifact-store.d.ts

@@ -59,7 +59,7 @@ export interface PromptArtifactSource {
     } | undefined;
     /** Resolve a PINNED digest (resume path). Undefined = unavailable — the caller fails loud. */
     get(artifactDigest: string): Promise<PromptEpochArtifact | undefined>;
-    /** RB-31 codex F1 — the tri-state the adoption boundary keys on: `"disabled"` = an EXPLICIT
+    /** RB-31 — the tri-state the adoption boundary keys on: `"disabled"` = an EXPLICIT
      *  validated revocation (applyDisabled) ⇒ pinned sessions roll back to bundled at the next
      *  compaction; `"active"` = a validated candidate is live; `"unavailable"` = no verified state
      *  (never-configured face, store-miss boot) ⇒ conservative restate — an outage must never strip

package/dist/prompt-assembly/artifact.d.ts

@@ -8,7 +8,7 @@ export interface CenterOverlaySection {
     /** Immutable rendered text (v1: fixed text, no renderer — center compiles before publishing). */
     text: string;
     /** REQUIRED on the center lane (unlike caller stableBlocks): sha256 of `text`. The center
-     *  publish path always mints it — it is the reconciliation anchor ([1050]② tiering). */
+     *  publish path always mints it — it is the reconciliation anchor (digest tiering). */
     contentHash: string;
 }
 export interface PromptCatalogSnapshot {

package/dist/prompt-assembly/assemble.d.ts

@@ -28,7 +28,7 @@ export interface AssembleInputs {
 }
 export interface AssembledPrompt {
     constitution: "core" | "replaced" | "provider-assembled";
-    /** design/148 S1 (codex F3): true ⇔ the supplied centerDeclarations were actually COMPILED into
+    /** design/148 S1: true ⇔ the supplied centerDeclarations were actually COMPILED into
      *  this prompt. The caller must never persist a center pin when this is false — a pin that claims
      *  an artifact the model never received is a durable lie (the assembled-identity pass-through path
      *  warns + false). */

package/dist/prompt-assembly/composer.d.ts

@@ -1,5 +1,5 @@
 /**
- * The prompt Composer — the single deterministic assembly path (campaign S1; protocol §6).
+ * The prompt Composer — the single deterministic assembly path (stage S1; protocol §6).
  *
  * compose() is a pure function of (pack, inputs): validate → admit → render → join. The legacy
  * date re-render seam (design/66 date_change) is expressed by re-running compose with a different
@@ -26,7 +26,7 @@ export declare function compose(pack: PromptPack, inputs: SectionRenderInputs):
 /** The implicit single-group layout — the legacy wire face (one system block, one cache span). */
 export declare const SINGLE_BLOCK_LAYOUT: SystemLayout;
 /**
- * Route a composed prompt's sections into PHYSICAL system blocks per the layout (campaign S4).
+ * Route a composed prompt's sections into PHYSICAL system blocks per the layout (stage S4).
  * Sections keep their emission order; groups partition by rank range (routing never reorders —
  * see types.ts header on slot interleaving). Empty groups are dropped. With SINGLE_BLOCK_LAYOUT
  * the result is one block whose text === composed.text (byte-identity, golden-pinned).

package/dist/prompt-assembly/epoch.d.ts

@@ -1,8 +1,8 @@
 import type { PromptPack } from "./types.js";
-/** [1068] — the provider-declared sections of THIS run's resolved prompt (the `origin:"provider"`
+/** the provider-declared sections of THIS run's resolved prompt (the `origin:"provider"`
  *  subset of the compiled IR), the declaration axis of the artifact identity.
  *
- *  codex F6 (S1 round 2): declaration TEXT deliberately does NOT enter this shape — the epoch
+ *  (S1 round 2): declaration TEXT deliberately does NOT enter this shape — the epoch
  *  digest is a deterministic, unsalted value persisted in exportable session entries, and session
  *  readers do not see system prompts; hashing private text into it would be a dictionary-preimage
  *  surface (the exact class the salted prompt-manifest hashes exist to prevent). Identity instead

package/dist/prompt-assembly/event-registry.d.ts

@@ -1,5 +1,5 @@
 /**
- * Event prompt registry (campaign S5; protocol §5.3) — the typed catalog of every runtime
+ * Event prompt registry (stage S5; protocol §5.3) — the typed catalog of every runtime
  * message-injection kind: its carrier, trust, dedupe semantics, byte budget and DEFAULT policy.
  * Mechanism/copy separation: the registry owns the MECHANISM row (who fires, how it dedupes,
  * where it rides); the render functions stay where they live (turn-attachments.ts / runtask.ts,

package/dist/prompt-assembly/explain.d.ts

@@ -31,13 +31,13 @@ export interface ExplainInput {
 /** Render a `prompt.assembled` manifest (+ optional epoch pin) as a readable report. */
 export declare function explainPromptAssembly(input: ExplainInput): string;
 /**
- * [1050]①d / [1051]③b — the CENTER-facing read-only description of the default pack: section
+ * the CENTER-facing read-only description of the default pack: section
  * metadata (id/slot/rank/ownership/locked) plus the default role-base TEXT (the append-mode
  * compile skeleton the web UI prepends to a user's "Role details"). Deliberately NO other section
- * texts (the [989] no-prompt-bodies observability line — structure yes, prose no; the role base is
+ * texts (the no-prompt-bodies observability line — structure yes, prose no; the role base is
  * the one deliberate exception: it is the public compile input of the append mode, and its text is
  * this open repo's DEFAULT_SYSTEM_PROMPT). Programmatic — a static copy in the web tier would
- * silently drift the moment core's default prompt changes ([1049]①d 禁静态拷贝).
+ * silently drift the moment core's default prompt changes (no static copies).
  */
 export interface DefaultPackDescription {
     packId: string;

package/dist/prompt-assembly/tool-catalog.d.ts

@@ -63,7 +63,7 @@ export declare function hasToolContract(tool: AgentTool): boolean;
 /** Manifest projection for the final mounted tool set (manifest v2 `tools`, protocol §5.4). */
 export declare function projectToolManifest(tools: AgentTool[], originOf?: (tool: AgentTool) => ToolOrigin): ToolManifestRow[];
 /**
- * RB-15 (campaign review): wire-identity collision audit over the FINAL mounted tool set.
+ * RB-15: wire-identity collision audit over the FINAL mounted tool set.
  * Rules (plan §6.2 tool row):
  *   - an ALIAS colliding with another tool's canonical name or alias = FATAL (silent misdispatch
  *     of durable replays would follow — never ship such a mount);

package/dist/prompt-assembly/turn-snapshot.d.ts

@@ -82,15 +82,15 @@ export interface TurnPromptSnapshot {
     /** sha256(canonical(elements)) — the ONE nine-element identity value. */
     cacheIdentity: string;
     lowering: LoweringRecord;
-    /** codex S3 F3 — invoked after EVERY refresh so the run loop can emit the changed identity
+    /** invoked after EVERY refresh so the run loop can emit the changed identity
      *  (`prompt.snapshot_changed` trace); traces must never keep claiming a superseded prefix. */
     onChange?: (snapshot: TurnPromptSnapshot) => void;
     /** Refresh the tool half (design/36 rematerialize follows the declared mid-run change). */
     refreshTools(toolWire: RawPrefixInputs["toolWire"]): void;
     /** Refresh the stable-system half (RB-31 adoption swap — pass the COMMITTED epoch digest so the
-     *  identity never mixes old-artifact/new-prompt, codex S3 F2). */
+     *  identity never mixes old-artifact/new-prompt). */
     refreshStableSystem(stableSystemText: string, artifactDigest?: string): void;
-    /** codex S3 F1 — request-policy element follows mid-run wire changes (finalize lanes flip the
+    /** request-policy element follows mid-run wire changes (finalize lanes flip the
      *  thinking level; a served-model swap re-namespaces the cache). */
     refreshRequestPolicy(p: {
         thinkingLevel?: string;
@@ -105,7 +105,7 @@ export interface TurnPromptSnapshot {
  *  the CLASSIFICATION stays total over everything callers hold, but only identity-class fields can
  *  reach the digest — enforced structurally (this function reads exactly the identity fields).
  *
- *  `promptHasher` (codex S3 F4): the digest applied to COMPOSED PROMPT TEXT — callers inject a
+ *  `promptHasher`: the digest applied to COMPOSED PROMPT TEXT — callers inject a
  *  KEYED/salted hasher (the run loop uses the per-process manifest salt): a fixed public prefix +
  *  short unknown suffix (an env fact, a memory note, a tenant string) makes an unsalted full-text
  *  sha ENUMERABLE, recreating exactly the disclosure the salted block hashes prevent. Consequence,

package/dist/prompt-assembly/types.d.ts

@@ -1,5 +1,5 @@
 /**
- * Prompt-assembly protocol — core IR types (campaign S1, docs/PROMPT-ASSEMBLY-EXECUTION-PLAN.md).
+ * Prompt-assembly protocol — core IR types (stage S1, docs/PROMPT-ASSEMBLY-EXECUTION-PLAN.md).
  *
  * Three orthogonal dimensions (protocol §3): semantic slot / physical carrier / render cadence +
  * cache class. These NEVER collapse into each other: a slot does not imply a carrier, and neither
@@ -19,7 +19,7 @@ export type PromptSlot = "wire-metadata" | "identity" | "security" | "harness" |
 export type PromptCarrier = "system.block" | "message.system" | "message.user-prefix" | "message.user-suffix" | "tool.native" | "tool.system-text" | "tool-result.prefix" | "tool-result.suffix" | "event.notification";
 /** When a section's content is (re)rendered (protocol §3.3). Distinct from artifact provenance. */
 export type PromptRenderCadence = "epoch" | "run" | "turn" | "event";
-/** Prefix-cache stability class (protocol §3.3). The leg-frozen date (design/66 → [915] A1) makes
+/** Prefix-cache stability class (protocol §3.3). The leg-frozen date (design/66 → A1) makes
  *  the environment tail `run`-cadence + `volatile`: stable within a leg, re-rendered per leg. */
 export type PromptCacheClass = "prefix-stable" | "epoch-stable" | "volatile" | "none";
 export type PromptOwner = "core" | "pack" | "deployment" | "extension" | "session";
@@ -27,7 +27,7 @@ export type PromptOwner = "core" | "pack" | "deployment" | "extension" | "sessio
  *  fenced/sanitized by the renderer that produced it (untrusted-inlet discipline). */
 export type PromptTrust = "locked" | "operator" | "external" | "user-derived";
 /**
- * Who may replace/suppress the section (protocol §5.2; M4 replaceAll-narrowing, clay 2026-07-16):
+ * Who may replace/suppress the section (protocol §5.2; M4 replaceAll-narrowing, 2026-07-16):
  * `locked` sections (security/harness/context mechanism truth) survive every provider shape,
  * including `replaceAll` providers.
  */
@@ -54,9 +54,9 @@ export interface PromptRuntimeFacts {
     withinTaskCompactionEnabled: boolean;
     supervisorEnabled: boolean;
     orchestrationEnabled: boolean;
-    /** 锚定回归 R2([1132]③):orchestration is active but the Workflow tool is DEFERRED — the mode
+    /** Orchestration is active but the Workflow tool is DEFERRED — the mode
      *  section serves the short pointer instead of the full how-to (cache-prefix parity with the
-     *  deferral itself). Only meaningful when orchestrationEnabled. OPTIONAL (codex F2: this
+     *  deferral itself). Only meaningful when orchestrationEnabled. OPTIONAL (this
      *  interface is a public export — absence reads as false, so existing constructors keep
      *  compiling across the upgrade). */
     orchestrationDeferred?: boolean;
@@ -64,7 +64,7 @@ export interface PromptRuntimeFacts {
      *  it (R3: system sections serve the lean form on "simple"). OPTIONAL (public export — absence
      *  reads as "simple", existing constructors keep compiling). */
     promptProfile?: "simple" | "classic";
-    /** R2 双形轴(clay 追加令):CC 2.1.212's fable-specific prompt variant gate — the b9e /
+    /** R2 双形轴(追加令):CC 2.1.212's fable-specific prompt variant gate — the b9e /
      *  `fable_5_mitigations` capability axis, ORTHOGONAL to simple/classic (CC gates them
      *  independently). True when the run's model is a fable-family id; R3 sections fork on it
      *  (autonomous-operation paragraph, fable_identity, tool_param_json). OPTIONAL — absence = false. */
@@ -80,7 +80,7 @@ export interface PromptRuntimeFacts {
      *  {@link teammateEnabled}): admits `core/mode.subagent-consent` and (RB-326) the delivery
      *  `core/mode.subagent-notes` — the two elements CC's `Von` assembles over any agent's own
      *  system prompt. A fork is excluded (it shares
-     *  the parent's own authority). OPTIONAL (codex F2 precedent: this interface is a public export —
+     *  the parent's own authority). OPTIONAL (precedent: this interface is a public export —
      *  absence reads as false, so existing constructors keep compiling across the upgrade). */
     isSubagent?: boolean;
 }
@@ -124,7 +124,7 @@ export interface PackSectionDeclaration {
     /** Admit gate on runtime facts (composed only when the mechanism is really on). Omitted ⇒ always. */
     admit?: (inputs: SectionRenderInputs) => boolean;
     /**
-     * The pre-campaign `prompt.assembled` block id this section reports as (manifest v2 keeps the
+     * The pre-restructure `prompt.assembled` block id this section reports as (manifest v2 keeps the
      * v1 vocabulary — the id wordlist is a downstream observability contract, sentence-index #28).
      * Sections sharing one legacy id (the harness.context composite) merge into one v1 block entry.
      */
@@ -132,7 +132,7 @@ export interface PackSectionDeclaration {
     /** Joiner used when merging into the legacy composite block (default "\n\n"; harness head lines use "\n"). */
     legacyJoiner?: "\n" | "\n\n";
     /**
-     * Declarer-supplied reconciliation digest (digest tiering, codex F1+F2): set ONLY by the typed
+     * Declarer-supplied reconciliation digest (digest tiering+F2): set ONLY by the typed
      * `stableBlocks` adaptation loop in assemble.ts, VERIFIED against sha256(text) there, and passed
      * through verbatim to the manifest as `contentHash`. Neither `owner` (core/role.base|append share
      * "deployment" while carrying caller-private text) nor the provider lane itself (it may forward
@@ -140,10 +140,10 @@ export interface PackSectionDeclaration {
      */
     declaredContentHash?: string;
     /**
-     * design/147 epoch declaration axis ([1068] ruling a): `"provider"` marks a section whose text came
+     * design/147 epoch declaration axis (ruling a): `"provider"` marks a section whose text came
      * from the typed `stableBlocks` lane (incl. the provider-assembled pass-through role) — the SELECTOR
      * for the epoch artifactDigest's declaration input, so a config-center publish (declaration bytes
-     * change) re-pins sessions at the next legal boundary ([1043]②e). NOT a digest-disclosure gate
+     * change) re-pins sessions at the next legal boundary. NOT a digest-disclosure gate
      * (that stays {@link declaredContentHash}-only): epoch digests are one-way hashes over the payload.
      */
     origin?: "provider";
@@ -186,7 +186,7 @@ export interface ComposedPrompt {
     }>;
 }
 /**
- * One PHYSICAL system block (campaign S4; protocol §5.4 CompiledSystemBlock). A {@link SystemLayout}
+ * One PHYSICAL system block (stage S4; protocol §5.4 CompiledSystemBlock). A {@link SystemLayout}
  * routes sections into groups WITHOUT reordering them (emission stays rank order — slot never
  * drives physical order).
  *

package/dist/prompts/coordinator.d.ts

@@ -4,7 +4,7 @@
  * child (`core/mode.teammate` section, admit = facts.teammateEnabled — the CC injection condition
  * `agentId && agentName && teamName` maps to sema's named-spawn internals chain). Divergences:
  * CC's "task system"/"team lead" wording maps to sema's `"main"` reserved lane (the spawning
- * conversation); and the capability sentences track the shipped contract (codex S3 review; S2a
+ * conversation); and the capability sentences track the shipped contract (S2a
  * delivered mid-run delivery): a message to a RUNNING teammate is queued and reaches it at its next
  * turn boundary (CC pendingMessages posture); a COMPLETED teammate is continued from its transcript
  * (retain-dependent).