@zktx.io/sui-mcp 0.6.0 → 0.6.1

package/dist/core/activity/sqliteActivityStoreSchema.js

@@ -353,8 +353,6 @@ export function configureDatabase(db) {
     db.exec("PRAGMA foreign_keys=ON");
     db.exec("PRAGMA busy_timeout=5000");
 }
-// SQLite normalizes its own DDL. Compare only schema metadata, never user rows.
-// The reference is built once from the single current schema, not from the DB being checked.
 let currentSchemaSignature;
 function schemaSignature(db) {
     return JSON.stringify(db.prepare("SELECT type, name, tbl_name, sql FROM sqlite_schema WHERE name NOT LIKE 'sqlite_%' ORDER BY type, name").all());
@@ -414,8 +412,6 @@ function externalActivityScansTableSql() {
     )
   )`;
 }
-// Exported user data has one durable revision, including writers outside Settings.
-// A prepared confirmation is invalidated once, in the writer's own transaction.
 function settingsRevisionTriggers() {
     const userTables = ["accounts", "active_account_context", "review_sessions", "review_state_snapshots",
         "review_status_transitions", "review_executions", "review_requests", "external_activity_scans",

package/dist/core/read/deepbookReadHelpers.js

@@ -192,8 +192,6 @@ export function normalizeManagerAddresses(values) {
         return normalized;
     });
 }
-// Account inventory v1 exposes only ledger and rebate balances; governance,
-// stake, volume, and AccountInfo.open_orders need separate review before export.
 export function toDeepbookAccountSummary(accountInfo) {
     return {
         epoch: accountInfo.epoch,

package/dist/core/read/deepbookRegistry.js

@@ -2,24 +2,7 @@ import { mainnetCoins, mainnetPools } from "@mysten/deepbook-v3";
 import { DEEPBOOK_SCALAR_UNIT_SOURCE, decimalsFromScalar, normalizeCoinType } from "./coinMetadata.js";
 import { ReadServiceInputError } from "./readServiceTypes.js";
 export const PINNED_DEEPBOOK_COINS = mainnetCoins;
-// Curated DeepBook USDC chart pairs: the meaningful Sui-ecosystem base tokens worth
-// featuring against USDC, in display order. This is a deliberate editorial allowlist
-// — NOT a dynamic volume cut — so the chart shows a stable, hand-picked set and never
-// surfaces the dead/dust pools the indexer also lists (stable-vs-stable, wrapped
-// duplicates, single-trade listings). Each entry is a token judged worth registering
-// on its own merits:
-//   SUI  — Sui L1 gas / native token
-//   DEEP — DeepBook protocol token (this venue's own token)
-//   WAL  — Walrus decentralized storage (Mysten)
-//   NS   — SuiNS name service
-//   IKA  — Ika MPC / dWallet network
-//   XBTC — Bitcoin on Sui
-//   USDT — Tether USD stablecoin
-// Edit this list to change which pairs the chart offers; order here is display order.
 const CURATED_USDC_CHART_BASE_ORDER = new Map(["SUI", "DEEP", "WAL", "NS", "IKA", "XBTC", "USDT"].map((symbol, index) => [symbol, index]));
-// Filter the chart pool list to the curated base tokens (by symbol) in curated
-// display order. Matching is by base SYMBOL because the indexer's pool name can
-// differ from the SDK pool key (e.g. BWETH_USDC vs BETH_USDC).
 export function curateUsdcChartPools(pools) {
     return pools
         .filter((pool) => CURATED_USDC_CHART_BASE_ORDER.has(pool.baseAsset.symbol))
@@ -52,8 +35,6 @@ export function deepbookUnitForCoinType(coinType, coins) {
     return { decimals, symbol: entry.symbol, name: entry.symbol };
 }
 export function findDeepbookCoinEntry(normalizedCoinType, coins) {
-    // Validate the whole pinned token unit registry before using any DeepBook
-    // coin match so one bad scalar cannot make the registry look partially trustworthy.
     assertDeepbookScalars(coins);
     for (const [symbol, coin] of Object.entries(coins)) {
         if (normalizeCoinType(coin.type) === normalizedCoinType) {

package/dist/core/read/deepbookUsdcChartService.js

@@ -35,8 +35,6 @@ export function createDeepbookUsdcChartService(options = {}) {
                 ...chartCommonFields()
             };
         }
-        // Curate to the hand-picked allowlist of meaningful pairs (SUI/USDC, DEEP/USDC,
-        // …), in display order; the indexer's dead/dust pools never appear.
         const pools = curateUsdcChartPools(selectDeepbookOfficialIndexerCanonicalUsdcPools(poolResult.pools).map(deepbookUsdcPriceHistoryPairFromOfficialPool));
         return {
             status: "ok",

package/dist/core/read/readCardResult.js

@@ -12,8 +12,6 @@ const foundReceipt = z.object({ status: z.literal("found"), receipt: z.object({
         inputs: z.array(receiptInput).refine((items) => new Set(items.map((item) => item.index)).size === items.length),
         ptbGraph: receiptDisplaySchema.shape.ptbGraph
     }).passthrough() }).strict();
-// Partition the same source result before persistence. Never weaken the public
-// forbidden-field check or turn arbitrary fields into private metadata.
 export function projectReadCardResult(kind, input, source) {
     if (kind !== "receipt" || !source || typeof source !== "object" || !("status" in source) || source.status !== "found") {
         assertNoForbiddenMcpFields(source);

package/dist/core/read/readService.js

@@ -14,9 +14,6 @@ import { DEEPBOOK_MID_PRICE_DIRECTION, DEEPBOOK_MID_PRICE_PRECISION, DEEPBOOK_MI
 export * from "./readServiceTypes.js";
 export { listDeepbookTokenRegistry } from "./deepbookRegistry.js";
 const DEFAULT_DEEPBOOK_USDC_PRICE_AT_TIME_MAX_DISTANCE_MINUTES = 360;
-// Account inventory object scan: pages of listOwnedObjects to walk (50 objects per
-// page) and the max NFTs to surface. A coin-heavy account may truncate before all
-// objects are seen; the snapshot flags that rather than paging unbounded.
 const ACCOUNT_OBJECT_SCAN_PAGES = 6;
 const ACCOUNT_NFT_LIMIT = 60;
 const DEEPBOOK_USDC_PRICE_HISTORY_RESPONSE_SUMMARY = {
@@ -332,10 +329,6 @@ export class SuiReadService {
             cursor: summary.cursor
         };
     }
-    // The public account snapshot for the account page: the SuiNS name, coin
-    // balances (with the held-as split), owned NFTs, and other owned objects grouped
-    // by type. Each part is read independently so a missing name or object scan never
-    // blocks the balances.
     async summarizeAccountInventory(input) {
         const [walletSummary, name, owned] = await Promise.all([
             this.summarizeWalletAssets(input),
@@ -347,8 +340,6 @@ export class SuiReadService {
             account: input.account,
             fetchedAt: this.#fetchedAt(),
             name,
-            // Drop coins whose total balance is zero — an emptied coin object or
-            // accumulator residue is not a holding worth listing on the account page.
             balances: walletSummary.balances.filter((balance) => {
                 try {
                     return BigInt(balance.balance) !== 0n;
@@ -363,8 +354,6 @@ export class SuiReadService {
             objectsTruncated: owned.truncated
         };
     }
-    // The account's primary SuiNS name, or null when it has none (the lookup throws
-    // NOT_FOUND) or the call fails — a name is convenience, never gating.
     async #resolveAccountName(account) {
         const resolve = this.#client.core.defaultNameServiceName;
         if (!resolve) {
@@ -378,10 +367,6 @@ export class SuiReadService {
             return null;
         }
     }
-    // Enumerate owned objects (capped) and split them: Coin objects belong to the
-    // balance view, objects carrying a Display name/image are NFTs, and the rest are
-    // grouped by Move type. listOwnedObjects returns all three intermixed, so a
-    // coin-heavy account may truncate before reaching every NFT.
     async #scanOwnedObjects(account) {
         const nfts = [];
         const groups = new Map();
@@ -1493,10 +1478,6 @@ export class SuiReadService {
     #fetchedAt() {
         return this.#now().toISOString();
     }
-    // Resolve one coin type's verified unit (decimals/symbol) through the shared
-    // coin-metadata cache and DeepBook fallback. Public so other readers (e.g. the
-    // public chain-receipt reader) can render decimal amounts without duplicating
-    // the cache logic. Fails soft to an unavailable unit on an unresolvable type.
     async resolveCoinUnit(coinType) {
         let normalizedCoinType;
         try {

package/dist/core/read/readServiceTypes.js

@@ -42,8 +42,6 @@ export const DEEPBOOK_USDC_PRICE_HISTORY_SOURCE_UNAVAILABLE_REASONS = [
     "candle_fetch_failed",
     "official_indexer_invalid_payload"
 ];
-// Internal placeholder for sender-independent DeepBook market reads. The pinned Sui gRPC
-// resolver uses the same dummy sender when no transaction sender is provided.
 export const DEFAULT_DEEPBOOK_SIMULATION_SENDER = "0x0000000000000000000000000000000000000000000000000000000000000000";
 export const NOT_INSPECTED_ASSET_CLASSES = [
     {

package/dist/core/session/cardSession.js

@@ -17,11 +17,7 @@ export const cardSnapshotSchema = cardStateSchema.extend({
     pollAfterMs: z.number().int().positive(),
     inputRemainingMs: z.number().int().nonnegative()
 });
-// Private display values from a receipt already read by the backend. These are
-// individual on-chain inputs, never a serialized transaction or a signature.
 export const receiptDisplaySchema = z.object({
-    // Sui syntax is validated by the backend producer/projection. The View checks
-    // equality with its selected digest and does not load an SDK to recompute it.
     transactionDigest: z.string().min(1),
     pureInputs: z.array(z.object({
         index: z.number().int().nonnegative(),

package/dist/core/session/cardSessionStore.js

@@ -47,8 +47,6 @@ export class CardStore {
             catch {
                 preparation = { status: "failed", error: "The choices for this card could not be loaded." };
             }
-            // Preparation may finish after reset/import or shutdown. Never create a
-            // card in replacement data from that stale continuation.
             this.assertCurrent();
         }
         assertNoForbiddenMcpFields({ input, preparation });
@@ -199,7 +197,6 @@ export class CardStore {
         }
         const complete = { ...admitted, ...("receiptDisplay" in projected ? { receiptDisplay: projected.receiptDisplay } : {}),
             state: { ...admitted.state, data: projected.data, state: "closed", reason: "completed", revision: admitted.state.revision + 1 } };
-        // Do not report success or replay the source call if this commit fails.
         try {
             this.options.records.replace(admitted, complete);
         }
@@ -220,7 +217,7 @@ export class CardStore {
         try {
             this.options.logger?.error("Card read failed", { cardId: record.state.cardId, kind: record.state.kind, stage });
         }
-        catch { /* Logging does not own the operation's state. */ }
+        catch { }
     }
     conflict(record, message) {
         return { ...this.response(record), error: { code: "card_conflict", message } };

package/dist/core/session/reviewValidity.js

@@ -11,8 +11,6 @@ export function invalidateReviewEvidence(session, now) {
         const state = { ...session.reviewState, evidenceValidity: "invalidated", updatedAt: now.toISOString() };
         for (const field of REVIEW_MATERIAL_DERIVED_FIELDS)
             delete state[field];
-        // Keep the computation's failure reason, checks and stage provenance. Their
-        // presence describes that failed attempt, not currently usable material.
         return { ...session, lastActivityAt: now.toISOString(), reviewState: state };
     }
     return { ...session, status: "refresh_required", lastActivityAt: now.toISOString(),
@@ -33,7 +31,6 @@ export function materialStillMatches(verified, session, rowRevision, artifacts,
         !!material && sameHandle(material, verified.transactionMaterial) && Date.parse(material.expiresAt) > now.getTime() &&
         Buffer.from(material.transactionBytes).toString("base64") === verified.transactionBytesBase64;
 }
-// The caller owns a synchronous transaction and supplies its one decision time.
 export function decideReviewEvaluation(candidate, current, rowRevision, artifacts, material, admitted, now) {
     if (current.status !== "expired" && Date.parse(current.expiresAt) <= now.getTime()) {
         return { ...current, status: "expired" };

package/dist/core/session/sessionRecordStore.js

@@ -34,7 +34,6 @@ export class InMemorySessionRecordStore {
         this.revisions.clear();
     }
     hasUnsettledRequest(_id, _now) {
-        // This preparation-only fixture owns no wallet request records.
         return false;
     }
 }

package/dist/core/session/sessionStore.js

@@ -104,8 +104,6 @@ export class LocalSessionStore {
         });
         return { session: cloneLocalSession(session), token };
     }
-    // Snapshot access has no expiry, artifact reconciliation or external work.
-    // Public consumers project this private record before exposing any fields.
     readReviewSession(id) {
         const session = this.sessions.get(id);
         return session ? cloneLocalSession(session) : undefined;
@@ -130,8 +128,6 @@ export class LocalSessionStore {
                 transactionBytesBase64: Buffer.from(checked.transactionBytes).toString("base64") };
         }
         catch (error) {
-            // Invalid evidence is a candidate for refresh, never permission to mutate
-            // a potentially newer revision. Storage failures must still propagate.
             if (!(error instanceof LocalTransactionMaterialStoreError) && !(error instanceof ReviewEvidenceMismatch) && !(error instanceof ZodError))
                 throw error;
         }
@@ -150,8 +146,6 @@ export class LocalSessionStore {
             this.recordEvaluationEvents(result.events);
             return cloneLocalSession(result.session);
         }
-        // Preparation-only in-memory fixtures share the decision function. They do
-        // not establish SQLite atomicity or wallet admission guarantees.
         const current = this.sessions.get(id);
         if (!current)
             return undefined;
@@ -186,8 +180,6 @@ export class LocalSessionStore {
         if (!session) {
             return false;
         }
-        // Review sessions expose expired/final lifecycle states through read APIs after token validation.
-        // Mutable methods own expiry transitions and return lifecycle-specific errors.
         return tokenMatchesHash(session.tokenHash, token);
     }
     async recordWalletConnected(id, account, now = new Date()) {
@@ -208,9 +200,6 @@ export class LocalSessionStore {
             throw new SessionStoreError("invalid_session_transition", `Review session already bound to a different account: ${id}`);
         }
         if (nextSession.status === "proposed") {
-            // Explicit backend account binding follows the preparation lifecycle.
-            // Active read context alone is not wallet approval; the workflow checks
-            // the live wallet connection before invoking this operation.
             transition(nextSession, "awaiting_wallet");
             transition(nextSession, "wallet_connected");
         }
@@ -356,7 +345,6 @@ export class LocalSessionStore {
             await this.eventLog.append(record);
         }
         catch (error) {
-            // Event logs are optional audit/debug sinks. SQLite and in-memory session state remain authoritative.
             this.logger.error("event log append failed", {
                 eventType: record.type,
                 error: error instanceof Error ? error.message : String(error)
@@ -572,9 +560,6 @@ export class LocalSessionStore {
         }
     }
 }
-// In-memory session store: the orchestration above with Map-backed record and
-// artifact stores. Public name + constructor are unchanged so existing callers and
-// the session-store contract test keep working as the regression wall.
 export class InMemorySessionStore extends LocalSessionStore {
     constructor(options) {
         super({

package/dist/core/session/settingsFileIdentity.js

@@ -1,5 +1,3 @@
-// Both the filesystem and replacement/cleanup journal use this exact private
-// namespace. A display name or an export role alone is never a download path.
 export function settingsDownloadPath(fileId) {
     return `.settings-staging/${fileId}.download`;
 }

package/dist/core/session/settingsFileProtocol.js

@@ -1,4 +1,3 @@
-// The existing internal card/HTTP limit applies to the complete JSON-RPC message.
 import { SETTINGS_IMPORT_MAX_SIZE } from "./settingsOperation.js";
 export const MAX_JSON_BODY_BYTES = 64 * 1024;
 export function settingsJsonSize(value) { return new TextEncoder().encode(JSON.stringify(value)).length; }
@@ -6,8 +5,6 @@ export function settingsRawChunkBudget(envelopeWithEmptyBase64) {
     const room = MAX_JSON_BODY_BYTES - settingsJsonSize(envelopeWithEmptyBase64);
     return room > 0 ? 3 * Math.floor(room / 4) : 0;
 }
-// The actual request may carry additional Host metadata. Rejection happens
-// before dispatch; its independently measured room lets the same offset retry.
 export function settingsUploadMessageBudget(message) {
     if (!message || typeof message !== "object")
         return undefined;
@@ -15,8 +12,6 @@ export function settingsUploadMessageBudget(message) {
     if (envelope.method !== "tools/call" || envelope.params?.name !== "ui.act_card" ||
         envelope.params.arguments?.input?.action !== "settings_upload_chunk")
         return undefined;
-    // Safe-integer decimal maxima cover ids/revisions; upload offsets use the
-    // accepted raw-file limit.
     envelope.id = Number.MAX_SAFE_INTEGER;
     envelope.params.arguments.revision = Number.MAX_SAFE_INTEGER;
     envelope.params.arguments.input.offset = SETTINGS_IMPORT_MAX_SIZE;

package/dist/core/session/settingsFileStore.js

@@ -19,8 +19,6 @@ export function decodeSettingsChunk(value) {
         throw new SettingsConflict("Part of the file was not encoded correctly.");
     return data;
 }
-/** Private files are named from backend-generated identities only. SQLite owns
- * reservations and progress; this class verifies the corresponding physical fact. */
 export class SettingsFileStore {
     dataDirectory;
     constructor(dataDirectory) {
@@ -94,8 +92,6 @@ export class SettingsFileStore {
             throw new SettingsConflict("The snapshot is not ready to save.");
         await this.prepareDirectory("backups");
         const source = this.stagingPath(file), destination = this.localBackupPath(file);
-        // Persist the verified source identity before the only effect. Recovery
-        // verifies this same inode; it never creates a missing destination.
         const identity = await this.downloadSourceIdentity(file);
         rememberSource(identity);
         try {
@@ -133,7 +129,7 @@ export class SettingsFileStore {
             }
             if (error instanceof SettingsConflict || fileCode(error, "ELOOP"))
                 return { status: "failed", reason: "target_conflict" };
-            throw error; // Unreadable is not absent; keep the admitted save unsettled.
+            throw error;
         }
         try {
             if (!sourceIdentity)
@@ -190,8 +186,6 @@ export class SettingsFileStore {
             const length = (await handle.stat()).size;
             if (length < reservation.offset || length > reservation.offset + data.length)
                 throw new SettingsConflict("The file size changed during transfer.");
-            // A crash may leave the beginning of this exact reserved chunk. Verify it
-            // before completing the remainder; never overwrite a different prefix.
             const written = length - reservation.offset;
             const prefix = Buffer.alloc(written);
             const read = await handle.read(prefix, 0, written, reservation.offset);
@@ -309,8 +303,6 @@ export class SettingsFileStore {
         if (!file.sealed || file.invalidated || !Number.isSafeInteger(offset) || !Number.isSafeInteger(length) ||
             offset < 0 || length < 1 || offset + length > file.totalSize)
             throw new SettingsConflict("This part of the backup is unavailable.");
-        // Verify the artifact on the same open descriptor used for this chunk, so
-        // path replacement cannot substitute unchecked content between two opens.
         const info = await lstat(directory);
         if (!info.isDirectory() || info.isSymbolicLink())
             throw new SettingsConflict("The local backup directory changed.");
@@ -341,6 +333,5 @@ export class SettingsFileStore {
             if (!(error && typeof error === "object" && "code" in error && error.code === "ENOENT"))
                 throw error;
         }
-        // The public backup is the user's artifact and is never removed here.
     }
 }

package/dist/core/session/settingsInputError.js

@@ -2,8 +2,6 @@ import { SuiEndpointError } from "../suiEndpoint.js";
 import { LocalSettingsError } from "../preferences/preferencesStore.js";
 import { LocalDataError } from "../activity/localDataTypes.js";
 export const SETTINGS_REPLACEMENT_BLOCKED_MESSAGE = "A wallet or transaction response is still pending, or the initial transaction-result waiting period has not ended. Local records cannot be replaced yet.";
-// Only authenticated Settings validation reaches this mapping. Return fixed
-// explanations and recovery categories, never imported values or exceptions.
 export function settingsInputError(error, kind) {
     if (!(error instanceof SuiEndpointError) &&
         !(error instanceof LocalSettingsError && error.kind === "input_invalid") &&

package/dist/core/session/settingsOperation.js

@@ -2,7 +2,6 @@ import { z } from "zod";
 import { assetReadAccountSchema, walletAvailabilitySchema } from "./walletConnection.js";
 import { LOCAL_DATA_EXPORT_FORMAT } from "../activity/localDataTypes.js";
 import { suiAddressStringSchema } from "../suiAddress.js";
-// This is the existing backup input limit, measured before Base64/JSON wrapping.
 export const SETTINGS_IMPORT_MAX_SIZE = 16 * 1024 * 1024;
 const identity = z.string().uuid();
 const size = z.number().int().nonnegative().safe();
@@ -89,9 +88,6 @@ export const settingsActionSchema = z.discriminatedUnion("action", [
     z.object({ action: z.literal("settings_back"), operationId: identity }).strict(),
     z.object({ action: z.literal("settings_cancel") }).strict()
 ]);
-// A known rejection belongs to the selected complete file, not to the current
-// local-data revision or short-lived confirmation. Selection/owner/epoch rules
-// remain enforced by the operation's store and action handlers.
 export function retainedBackupRejection(operation, file) {
     const saved = storedRestoreCheckSchema.safeParse(operation.preparation?.restoreCheck);
     if (operation.draft?.kind !== "import_local_data" || !file || operation.fileId !== file.fileId ||

package/dist/core/session/settingsPreparationSql.js

@@ -1,5 +1,3 @@
-// The trigger and explicit Back use the same stored preparation transition.
-// A sealed upload is separate from the short-lived confirmation of its impact.
 export const SETTINGS_REUSABLE_UPLOAD_SQL = `
   kind='import_local_data' AND EXISTS (
     SELECT 1 FROM settings_files f

package/dist/core/session/settingsWorkflow.js

@@ -11,13 +11,11 @@ import { isSettingsDownloadFile, settingsDownloadPath } from "./settingsFileIden
 import { SettingsDownloadPathExists, settingsFileDigest, decodeSettingsChunk } from "./settingsFileStore.js";
 import { settingsIdentity } from "./sqliteSettingsWorkflowStore.js";
 import { SettingsConflict, settingsDownload, isSettingsDownloadFileAction, settingsViewSchema, endpointPreparationSchema, storedRestoreCheckSchema, retainedBackupRejection, permitsBackupRecheck } from "./settingsOperation.js";
-// One existing product-session length from physical snapshot readiness.
 export const DOWNLOAD_RETRY_WINDOW_MS = DEFAULT_SESSION_TTL_MS;
 export class SettingsWorkflow {
     options;
     pendingResults = new Map();
     finishedFileIO = new Set();
-    // This tracks actual pending I/O only; SQLite owns check results and permission.
     checkingFiles = new Set();
     downloadTimer;
     closing = false;
@@ -34,16 +32,12 @@ export class SettingsWorkflow {
     create(record) { this.records.create(record); }
     operationKind(record) { return this.records.forCard(record).draft?.kind; }
     recoverOwner() {
-        // Invalidate old input synchronously. Verifying a prior backup and removing
-        // temporary files must not delay unrelated MCP startup or completed reads.
         this.records.transaction(() => {
             const downloads = this.records.db.prepare("SELECT operation_id FROM settings_operations WHERE kind='download_backup' AND owner_id!=?")
                 .all(this.records.ownerId);
             for (const row of downloads) {
                 const operation = this.records.get(row.operation_id);
                 if (settingsDownload(operation)?.localSave?.status === "saving") {
-                    // Inherit settlement, never the departed card's input permission.
-                    // Keep its final/file reservation until the existing artifact is checked.
                     this.records.db.prepare("UPDATE settings_operations SET owner_id=? WHERE operation_id=?").run(this.records.ownerId, operation.operationId);
                 }
                 else
@@ -76,10 +70,6 @@ export class SettingsWorkflow {
                 if (file)
                     this.records.releaseFileIO(file.fileId);
             }
-            // The departed owner may have committed a terminal result and finished
-            // physical I/O, but failed to persist its final I/O release. Terminal
-            // operations were intentionally not reopened above. Release that stale
-            // reservation without replaying the operation or touching a current owner.
             const ioId = this.records.control().file_io_id;
             if (ioId) {
                 const file = this.records.file(ioId);
@@ -126,8 +116,6 @@ export class SettingsWorkflow {
         this.downloadTimer = setTimeout(() => {
             this.downloadTimer = undefined;
             void this.maintenance(() => this.maintainDownloads()).catch(() => {
-                // Durable cleanup remains pending/failed; a same-operation read or
-                // startup can retry. Never spin on an already elapsed deadline.
             });
         }, Math.max(0, Math.min(...deadlines) - this.now().getTime()));
         this.downloadTimer.unref?.();
@@ -149,16 +137,11 @@ export class SettingsWorkflow {
             this.options.assertCurrent();
             failure ??= error;
         }
-        // A failed, already-due journal stays retryable through Check status/startup;
-        // it cannot spin at zero delay or cancel another snapshot's future deadline.
         this.scheduleDownloadExpiry(failure !== undefined);
         if (failure)
             throw failure;
     }
     dataReplaced() {
-        // The replacement action owns and awaits its transferred cleanup journal.
-        // Starting another cleanup here would race its I/O reservation and return
-        // before the action's required cleanup result is known.
         this.scheduleDownloadExpiry();
     }
     async close() {
@@ -186,7 +169,7 @@ export class SettingsWorkflow {
                 result = { outcome: "completed", recordedAt: this.now().toISOString(), message: "The previously created local backup was verified.",
                     details: { path: this.options.files.exportPath(file), filename: file.displayName, fileId: file.fileId, sha256: file.sha256, totalSize: file.totalSize } };
             }
-            catch { /* A missing artifact is never regenerated on a read. */ }
+            catch { }
         }
         this.options.assertCurrent();
         this.retainResult(operation.operationId, result, false, file && result.outcome === "completed" ? { ...file, sealed: true, receivedSize: file.totalSize } : undefined);
@@ -218,8 +201,6 @@ export class SettingsWorkflow {
                 return { file: checked.file, offset, chunkBase64: data.toString("base64") };
             }
             finally {
-                // A read may have been the last physical I/O keeping an ended snapshot
-                // alive. Settle its own journal; a saved-result read need not await it.
                 await this.cleanupTemporaryFiles(operation.operationId);
             }
         }
@@ -260,8 +241,6 @@ export class SettingsWorkflow {
                 this.records.transaction(() => {
                     this.records.endDownload(file.operationId, "source_unavailable");
                     const existing = this.records.file(file.fileId);
-                    // An exclusive-create collision never made this request the physical
-                    // file's owner. Do not delete that pre-existing item as cleanup.
                     this.records.writeFile({ ...existing, invalidated: true, cleanup: "complete" });
                 });
             result = { outcome: "failed", completionScope: "backup_snapshot", recordedAt: this.now().toISOString(),
@@ -325,8 +304,6 @@ export class SettingsWorkflow {
             retained = { saveAttemptId, outcome };
             this.localSaveResults.set(file.operationId, retained);
         }
-        // Retain the ended physical outcome if the DB write fails. A read retries
-        // this same settlement, not link(), a new snapshot, or a Host request.
         this.records.settleLocalSave(file.operationId, retained.saveAttemptId, retained.outcome);
         this.localSaveResults.delete(file.operationId);
         this.scheduleDownloadExpiry();
@@ -498,8 +475,6 @@ export class SettingsWorkflow {
         this.observeLocalSave(operation);
         let downloadExpiryPending = false;
         if (operation.result) {
-            // The result is already committed. A failed release of known-ended I/O
-            // must remain retryable without making that result depend on the write.
             try {
                 this.synchronize(operation.operationId);
             }
@@ -541,7 +516,6 @@ export class SettingsWorkflow {
                 await this.cleanupFile(file, false).catch(() => { this.options.assertCurrent(); });
             }
         }
-        // Completed facts do not depend on current wallet or unrelated cleanup writes.
         const facts = operation.result ? undefined : await this.options.readFacts();
         this.options.assertCurrent();
         record = this.records.cards.get(record.state.cardId);
@@ -566,8 +540,6 @@ export class SettingsWorkflow {
                 if (fileIOAvailable && file && !file.invalidated && file.receivedSize === file.totalSize && !file.reservation &&
                     restoreCheck && permitsBackupRecheck(restoreCheck))
                     allowed.push("settings_prepare");
-                // A matching upload may resume without allocating another file. New
-                // writes still require the shared reservation check at their admission.
                 if (fileIOAvailable && ["draft", "uploading"].includes(operation.phase) &&
                     (file && !file.invalidated || this.records.canReserveFileIO(operation.operationId)))
                     allowed.push("settings_begin_upload");
@@ -677,8 +649,6 @@ export class SettingsWorkflow {
                 return;
             }
             if (action.action === "settings_select" && action.draft.kind === "set_endpoint") {
-                // Drafts are public display state. Reject credentials and invalid URLs
-                // before storing or projecting the user's endpoint input.
                 action = { ...action, draft: { ...action.draft,
                         value: (action.draft.endpoint === "grpc" ? parseGrpcUrl : parseGraphqlUrl)(action.draft.value) } };
             }
@@ -980,8 +950,6 @@ export class SettingsWorkflow {
             }
             catch (error) {
                 this.options.assertCurrent();
-                // A rejected final verification does not apply data or end the card,
-                // but it must revoke the previous ready result for this exact file.
                 this.records.transaction(() => {
                     const { card, operation } = this.records.requireInput(expected, action.operationId);
                     if (operation.fileId !== file.fileId)
@@ -1128,8 +1096,6 @@ export class SettingsWorkflow {
             }
             return this.records.finish(id, retained.result);
         });
-        // A later cleanup can reserve this same file. The ended publication must
-        // not be reused as evidence that this new I/O has also ended.
         if (settledFileId)
             this.finishedFileIO.delete(settledFileId);
         if (applied && !ready)
@@ -1167,8 +1133,6 @@ export class SettingsWorkflow {
         for (const [id, pending] of this.pendingResults) {
             if (operationId !== undefined && id !== operationId || recoveryOnly && this.records.get(id)?.draft?.kind !== "restart_wallet_service")
                 continue;
-            // Ready is replayed only inside the SDK snapshot transaction; a previous
-            // failed transaction did not prove that its observation was committed.
             if (!pending.ready)
                 this.retainResult(id, pending.result, false, pending.file);
         }

package/dist/core/session/sqliteCardStore.js

@@ -60,8 +60,6 @@ export class SqliteCardRecordStore {
        @input, @accepted, @result, @display, @scope, @operation)`).run(values(record));
     }
     replace(expected, next) {
-        // This single statement commits admission or a result atomically. A removed
-        // card is never recreated by a delayed network response.
         return this.db.prepare(`UPDATE live_read_cards SET state=@state, reason=@reason, error=@error,
       revision=@revision, input_json=@input, accepted_input_json=@accepted, result_json=@result,
       receipt_display_json=@display, scope=@scope, operation_id=@operation

package/dist/core/session/sqliteSessionStore.js

@@ -38,13 +38,6 @@ export function updateLiveReviewSessionRow(db, expectedRevision, session) {
         .run({ ...serialized, expectedRevision });
     return result.changes > 0;
 }
-/**
- * SQLite-backed live review-session records. Runtime product transitions are
- * committed by SqliteActivityStore when the store is created through that owner,
- * so live session state and review activity stay in one SQLite transaction.
- * Direct instances keep a low-level transition commit path for tests and mixed
- * harnesses that do not couple live state with activity rows.
- */
 export class SqliteSessionRecordStore {
     db;
     usesActivityStoreLiveSessionMutations;
@@ -107,8 +100,6 @@ export class SqlitePrivateReviewArtifactStore {
         if (!row) {
             return undefined;
         }
-        // clonePrivateReviewArtifacts re-parses/validates the evidence on read, matching
-        // the in-memory store's clone-on-read behaviour.
         return clonePrivateReviewArtifacts(JSON.parse(row.artifacts_json));
     }
     set(reviewSessionId, artifacts) {
@@ -126,8 +117,6 @@ export class SqlitePrivateReviewArtifactStore {
         this.db.prepare(`DELETE FROM live_private_review_artifacts`).run();
     }
 }
-// Reconstruct the ReviewSession from columns + JSON blobs. Optional fields are
-// omitted (not set to undefined) so the shape matches the in-memory store exactly.
 export function sessionFromLiveReviewSessionRow(row) {
     return {
         id: row.id,