comisai 1.0.18 → 1.0.22

package/node_modules/@comis/cli/dist/wizard/steps/12-finish.js

@@ -3,15 +3,14 @@
  * Finish step -- step 12 of the init wizard.
  *
  * Displays a quick-reference card with essential CLI commands,
- * gateway access info with WebSocket URL and token location,
- * offers shell completion setup, and ends with a branded outro.
- *
- * This is the user's last impression of the wizard -- clear, concise,
- * and immediately actionable.
+ * gateway access info (URLs), the full access token with a secure-storage
+ * warning, and -- when the gateway binds loopback-only -- a copy-paste SSH
+ * tunnel recipe so non-technical users can open the dashboard from another
+ * computer. Ends with a shell-completion offer and a branded outro.
  *
  * @module
  */
-import { updateState, sectionSeparator, brand } from "../index.js";
+import { brand, info, sectionSeparator, updateState, warning } from "../index.js";
 // ---------- Helpers ----------
 /**
  * Build the quick-reference card lines.
@@ -31,44 +30,94 @@ function buildReferenceCard() {
     const lines = commands.map(([label, cmd]) => `  ${label.padEnd(18)}${brand(cmd)}`);
     return lines.join("\n");
 }
+function resolveHost(gateway) {
+    switch (gateway.bindMode) {
+        case "loopback":
+            return "127.0.0.1";
+        case "lan":
+            return "0.0.0.0";
+        case "custom":
+            return gateway.customIp ?? "127.0.0.1";
+    }
+}
 /**
- * Build the gateway access info block from wizard state.
- *
- * Returns undefined if no gateway config exists.
+ * URLs block — dashboard + websocket only. No auth hints here;
+ * the token/password lives in its own block so the user sees it
+ * as the thing to copy.
  */
 function buildGatewayInfo(state) {
     if (!state.gateway)
         return undefined;
-    let host;
-    switch (state.gateway.bindMode) {
-        case "loopback":
-            host = "127.0.0.1";
-            break;
-        case "lan":
-            host = "0.0.0.0";
-            break;
-        case "custom":
-            host = state.gateway.customIp ?? "127.0.0.1";
-            break;
-        default:
-            host = "127.0.0.1";
+    const host = resolveHost(state.gateway);
+    const { port } = state.gateway;
+    const lines = [];
+    if (state.gateway.webEnabled) {
+        lines.push(`  Dashboard:  ${brand(`http://${host}:${port}/app/`)}`);
     }
-    const wsLine = `  WebSocket:  ${brand(`ws://${host}:${state.gateway.port}/ws`)}`;
-    const dashboardLine = state.gateway.webEnabled
-        ? `  Dashboard:  ${brand(`http://${host}:${state.gateway.port}/app/`)}`
-        : undefined;
-    let authLine;
+    lines.push(`  WebSocket:  ${brand(`ws://${host}:${port}/ws`)}`);
+    return lines.join("\n");
+}
+/**
+ * Access token block — prints the full token on its own line so
+ * copy-paste works cleanly, plus a prominent "keep secret" warning
+ * and storage guidance. For password auth, points the user at the
+ * password they already chose.
+ */
+function buildAccessTokenBlock(state) {
+    if (!state.gateway)
+        return undefined;
     if (state.gateway.authMethod === "password") {
-        authLine = "  Auth:       Password auth (in ~/.comis/.env)";
-    }
-    else {
-        const tokenPreview = state.gateway.token
-            ? `${state.gateway.token.slice(0, 8)}...`
-            : "see file";
-        authLine = `  Token:      ${tokenPreview} (in ~/.comis/.env)`;
+        return [
+            "You chose a password for gateway access.",
+            "",
+            info("Use the password you set earlier when the dashboard asks for it."),
+            info("It is also stored in ~/.comis/.env — keep that file private."),
+        ].join("\n");
     }
-    const lines = [wsLine, dashboardLine, authLine].filter((l) => l !== undefined);
-    return lines.join("\n");
+    if (!state.gateway.token)
+        return undefined;
+    return [
+        "Copy this token now — you will need it to sign in to the dashboard:",
+        "",
+        `    ${brand(state.gateway.token)}`,
+        "",
+        warning("Keep it secret. Anyone with this token can control your agents."),
+        info("Save it in a password manager (1Password, Bitwarden, Apple Passwords)."),
+        info("It is also stored at ~/.comis/.env — keep that file private."),
+    ].join("\n");
+}
+/**
+ * SSH tunnel recipe — shown only when the gateway is loopback-only
+ * and the dashboard is enabled. Walks the user through ssh -N -L
+ * with a clear YOUR-SERVER placeholder and the localhost URL to
+ * open on their laptop.
+ */
+function buildTunnelInstructions(state) {
+    if (!state.gateway || !state.gateway.webEnabled)
+        return undefined;
+    if (state.gateway.bindMode !== "loopback")
+        return undefined;
+    const { port } = state.gateway;
+    return [
+        "Your dashboard is only reachable from this computer right now.",
+        "To open it from your laptop, follow these steps one time:",
+        "",
+        `  ${brand("1.")} On your laptop, open a Terminal window and run:`,
+        "",
+        `       ${brand(`ssh -N -L ${port}:127.0.0.1:${port} root@YOUR-SERVER`)}`,
+        "",
+        `     Replace ${brand("YOUR-SERVER")} with this server's IP address or`,
+        "     hostname (ask your hosting provider if you are not sure).",
+        "     Leave that Terminal window open.",
+        "",
+        `  ${brand("2.")} In your laptop's web browser, open:`,
+        "",
+        `       ${brand(`http://localhost:${port}/app/`)}`,
+        "",
+        `  ${brand("3.")} Paste your access token when asked.`,
+        "",
+        info("When you are done, close the Terminal window to disconnect."),
+    ].join("\n");
 }
 // ---------- Step Implementation ----------
 export const finishStep = {
@@ -77,12 +126,22 @@ export const finishStep = {
     async execute(state, prompter) {
         // 1. Quick-reference card
         prompter.note(buildReferenceCard(), sectionSeparator("Quick Reference"));
-        // 2. Gateway access info
+        // 2. Gateway URLs
         const gatewayInfo = buildGatewayInfo(state);
         if (gatewayInfo) {
             prompter.note(gatewayInfo, sectionSeparator("Gateway Access"));
         }
-        // 3. Shell completion offer
+        // 3. Access token (or password pointer) — its own highlighted block
+        const tokenBlock = buildAccessTokenBlock(state);
+        if (tokenBlock) {
+            prompter.note(tokenBlock, sectionSeparator("Your Access Token"));
+        }
+        // 4. Copy-paste SSH tunnel recipe (loopback only)
+        const tunnelBlock = buildTunnelInstructions(state);
+        if (tunnelBlock) {
+            prompter.note(tunnelBlock, sectionSeparator("Open the Dashboard from Another Computer"));
+        }
+        // 5. Shell completion offer
         const wantCompletions = await prompter.confirm({
             message: "Enable shell completions for comis?",
             initialValue: true,
@@ -90,9 +149,9 @@ export const finishStep = {
         if (wantCompletions) {
             prompter.log.info("Run 'comis --help' to see available commands including shell completion setup");
         }
-        // 4. Branded outro
+        // 6. Branded outro
         prompter.outro("Happy building! Run 'comis status' to see your system.");
-        // 5. Return state unchanged -- wizard complete
+        // 7. Return state unchanged -- wizard complete
         return updateState(state, {});
     },
 };

package/node_modules/@comis/cli/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/cli",
   "private": true,
-  "version": "1.0.18",
+  "version": "1.0.22",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Command-line interface for the Comis AI agent platform",

package/node_modules/@comis/core/dist/config/git-manager.js

@@ -11,6 +11,7 @@
  *
  * @module
  */
+import { resolve as resolvePath } from "node:path";
 import { ok, err } from "@comis/shared";
 // ---------------------------------------------------------------------------
 // Constants
@@ -179,10 +180,15 @@ export function createConfigGitManager(deps) {
         if (initialized) {
             return ok(undefined);
         }
-        // Check if .git already exists by running git status
-        const statusResult = await execGit(["status", "--porcelain"], configDir);
-        if (statusResult.ok) {
-            // Repo already exists and is functional
+        // Probe for an existing git repo whose toplevel IS configDir.
+        // `git status` succeeds whenever any ancestor has a .git directory,
+        // which would silently treat a parent project's repo as ours and
+        // commit config changes onto whatever branch is checked out there.
+        // Use rev-parse --show-toplevel and require an exact path match;
+        // otherwise fall through and `git init` our own nested repo.
+        const toplevelResult = await execGit(["rev-parse", "--show-toplevel"], configDir);
+        if (toplevelResult.ok &&
+            resolvePath(toplevelResult.value.trim()) === resolvePath(configDir)) {
             initialized = true;
             return ok(undefined);
         }

package/node_modules/@comis/core/dist/config/index.d.ts

@@ -65,6 +65,7 @@ export { substituteEnvVars, warnSuspiciousEnvValues, extractReferencedSecretName
 export { migrateConfig } from "./migrate.js";
 export { deepMerge, mergeLayered, loadLayered } from "./layered.js";
 export { IMMUTABLE_CONFIG_PREFIXES, MUTABLE_CONFIG_OVERRIDES, isImmutableConfigPath, matchesOverridePattern, getMutableOverridesForSection } from "./immutable-keys.js";
+export { MANAGED_SECTIONS, getManagedSectionRedirect, formatRedirectHint, type ManagedSectionRedirect, } from "./managed-sections.js";
 export { getConfigSchema, getConfigSections } from "./schema-serializer.js";
 export { createTimestampedBackup } from "./backup.js";
 export type { BackupDeps, BackupOptions } from "./backup.js";

package/node_modules/@comis/core/dist/config/index.js

@@ -58,6 +58,8 @@ export { migrateConfig } from "./migrate.js";
 export { deepMerge, mergeLayered, loadLayered } from "./layered.js";
 // Immutable key guard (runtime config mutation protection)
 export { IMMUTABLE_CONFIG_PREFIXES, MUTABLE_CONFIG_OVERRIDES, isImmutableConfigPath, matchesOverridePattern, getMutableOverridesForSection } from "./immutable-keys.js";
+// Managed-section redirects (LLM-readable hints for immutable rejections)
+export { MANAGED_SECTIONS, getManagedSectionRedirect, formatRedirectHint, } from "./managed-sections.js";
 // Schema serializer (Zod to JSON Schema conversion)
 export { getConfigSchema, getConfigSections } from "./schema-serializer.js";
 // Config backup (timestamped backup creation with rotation)

package/node_modules/@comis/core/dist/config/managed-sections.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Single source of truth: which immutable config sections delegate to which
+ * dedicated management tool, and what an LLM-readable redirect looks like.
+ *
+ * gateway/apply, gateway/patch, and config.* RPC immutability guards all
+ * consume this module so their hints stay in sync. Adding a new managed
+ * section is a one-line entry here -- no code changes anywhere else.
+ *
+ * Designed to be model-agnostic: the hint includes the tool name, the
+ * discover_tools call to load it, and a parameter-correct example call body
+ * (verified against each tool's TypeBox schema). Every capable LLM --
+ * Opus/Sonnet/Haiku, GPT-5, Gemini 2.5/3 Flash/Pro, Mistral -- can imitate
+ * the JSON example verbatim without further prompting.
+ *
+ * @module
+ */
+/** A single redirect entry: which tool, and a parameter-correct example. */
+export interface ManagedSectionRedirect {
+    /** Path prefix that triggers this redirect (e.g., "agents", "integrations.mcp.servers"). */
+    pathPrefix: string;
+    /** Tool name (matches the registered AgentTool name). */
+    tool: string;
+    /** One-line description that includes the tool's full action list. */
+    description: string;
+    /**
+     * Concrete example arguments for the most common create-equivalent action.
+     * Shape MUST match the tool's TypeBox parameter schema exactly -- verified
+     * against the tool source as of this commit. Omit when the tool has no
+     * "create" semantics (e.g., channels_manage cannot add new platform types).
+     */
+    exampleArgs?: Record<string, unknown>;
+    /**
+     * True when the tool fully replaces gateway-patch for this section
+     * (create + update + delete). False when it can only operate on entries
+     * already present in config.
+     */
+    fullyManaged: boolean;
+}
+/**
+ * Registered managed sections.
+ *
+ * Order matters: longest pathPrefix first, so getManagedSectionRedirect picks
+ * the most specific match (e.g., "integrations.mcp.servers" wins over a
+ * hypothetical "integrations" entry).
+ */
+export declare const MANAGED_SECTIONS: readonly ManagedSectionRedirect[];
+/**
+ * Resolve the management redirect for a given section/key path.
+ *
+ * Picks the longest matching pathPrefix. Matches when fullPath equals or is a
+ * child of a redirect's pathPrefix. Returns undefined when no dedicated tool
+ * covers this path -- callers fall back to the generic immutable message.
+ */
+export declare function getManagedSectionRedirect(section: string | undefined, key?: string): ManagedSectionRedirect | undefined;
+/**
+ * Format an LLM-readable hint for an immutability rejection.
+ *
+ * The output uses an explicit two-step "Recovery:" framing because smaller
+ * models (Haiku 4.5, Gemini Flash, GPT-OSS-20b) parse numbered steps more
+ * reliably than prose. The example call is JSON-stringified compactly so it
+ * can be copy-pasted into the next tool invocation.
+ *
+ * @param redirect - The matched managed-section entry
+ * @param mutablePaths - Optional override paths for in-place patching of
+ *                      EXISTING entries (from getMutableOverridesForSection)
+ */
+export declare function formatRedirectHint(redirect: ManagedSectionRedirect, mutablePaths?: readonly string[]): string;

package/node_modules/@comis/core/dist/config/managed-sections.js

@@ -0,0 +1,124 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Single source of truth: which immutable config sections delegate to which
+ * dedicated management tool, and what an LLM-readable redirect looks like.
+ *
+ * gateway/apply, gateway/patch, and config.* RPC immutability guards all
+ * consume this module so their hints stay in sync. Adding a new managed
+ * section is a one-line entry here -- no code changes anywhere else.
+ *
+ * Designed to be model-agnostic: the hint includes the tool name, the
+ * discover_tools call to load it, and a parameter-correct example call body
+ * (verified against each tool's TypeBox schema). Every capable LLM --
+ * Opus/Sonnet/Haiku, GPT-5, Gemini 2.5/3 Flash/Pro, Mistral -- can imitate
+ * the JSON example verbatim without further prompting.
+ *
+ * @module
+ */
+/**
+ * Registered managed sections.
+ *
+ * Order matters: longest pathPrefix first, so getManagedSectionRedirect picks
+ * the most specific match (e.g., "integrations.mcp.servers" wins over a
+ * hypothetical "integrations" entry).
+ */
+export const MANAGED_SECTIONS = [
+    {
+        pathPrefix: "integrations.mcp.servers",
+        tool: "mcp_manage",
+        description: "Manage MCP server connections (list, status, connect, disconnect, reconnect).",
+        // Flat parameter shape -- verified against mcp-manage-tool.ts McpManageToolParams.
+        exampleArgs: {
+            action: "connect",
+            name: "<server-name>",
+            transport: "stdio",
+            command: "<command>",
+            args: [],
+        },
+        fullyManaged: true,
+    },
+    {
+        pathPrefix: "gateway.tokens",
+        tool: "tokens_manage",
+        description: "Manage gateway tokens (list, create, revoke, rotate).",
+        // Verified against tokens-manage-tool.ts TokensManageToolParams.
+        exampleArgs: { action: "create", token_id: "<token-id>", scopes: ["rpc", "ws"] },
+        fullyManaged: true,
+    },
+    {
+        pathPrefix: "channels",
+        tool: "channels_manage",
+        description: "Manage channel adapters (list, get, enable, disable, restart, configure).",
+        // No exampleArgs -- no create-equivalent action; channels are configured
+        // via operator config + media-setting toggles only.
+        fullyManaged: false,
+    },
+    {
+        pathPrefix: "agents",
+        tool: "agents_manage",
+        description: "Manage agent fleet (create, get, update, delete, suspend, resume).",
+        // Verified against agents-manage-tool.ts AgentsManageToolParams.
+        exampleArgs: {
+            action: "create",
+            agent_id: "<new-agent-id>",
+            config: {
+                name: "<display-name>",
+                model: "<model-id>",
+                provider: "<provider>",
+                maxSteps: 100,
+            },
+        },
+        fullyManaged: true,
+    },
+];
+/**
+ * Resolve the management redirect for a given section/key path.
+ *
+ * Picks the longest matching pathPrefix. Matches when fullPath equals or is a
+ * child of a redirect's pathPrefix. Returns undefined when no dedicated tool
+ * covers this path -- callers fall back to the generic immutable message.
+ */
+export function getManagedSectionRedirect(section, key) {
+    if (!section)
+        return undefined;
+    const fullPath = key ? `${section}.${key}` : section;
+    let best;
+    for (const candidate of MANAGED_SECTIONS) {
+        const matches = fullPath === candidate.pathPrefix ||
+            fullPath.startsWith(candidate.pathPrefix + ".");
+        if (matches && (!best || candidate.pathPrefix.length > best.pathPrefix.length)) {
+            best = candidate;
+        }
+    }
+    return best;
+}
+/**
+ * Format an LLM-readable hint for an immutability rejection.
+ *
+ * The output uses an explicit two-step "Recovery:" framing because smaller
+ * models (Haiku 4.5, Gemini Flash, GPT-OSS-20b) parse numbered steps more
+ * reliably than prose. The example call is JSON-stringified compactly so it
+ * can be copy-pasted into the next tool invocation.
+ *
+ * @param redirect - The matched managed-section entry
+ * @param mutablePaths - Optional override paths for in-place patching of
+ *                      EXISTING entries (from getMutableOverridesForSection)
+ */
+export function formatRedirectHint(redirect, mutablePaths) {
+    const parts = [];
+    parts.push(`Use the "${redirect.tool}" tool: ${redirect.description}`);
+    if (redirect.exampleArgs) {
+        const example = JSON.stringify(redirect.exampleArgs);
+        parts.push(`Recovery: (1) call discover_tools("${redirect.tool}") to load the schema, then (2) call ${redirect.tool}(${example}).`);
+    }
+    else {
+        parts.push(`Load it via discover_tools("${redirect.tool}") if not yet available.`);
+    }
+    if (mutablePaths && mutablePaths.length > 0) {
+        parts.push(`For in-place updates of an entry that ALREADY exists, gateway/patch also accepts these specific paths: ${mutablePaths.join(", ")}.`);
+    }
+    if (!redirect.fullyManaged) {
+        parts.push(`Note: this tool operates on entries already present in config; adding brand-new platform types still requires operator config edits.`);
+    }
+    return parts.join(" ");
+}

package/node_modules/@comis/core/dist/config/schema-agent.d.ts

@@ -391,6 +391,12 @@ export declare const ContextEngineConfigSchema: z.ZodObject<{
     }>>;
     /** Number of recent assistant turns that retain thinking blocks (older turns get stripped). */
     thinkingKeepTurns: z.ZodDefault<z.ZodNumber>;
+    /** Idle gap (ms) above which signed thinking state is treated as drifted and
+     *  scrubbed pre-send to avoid provider replay-rejection. Default 30 min —
+     *  below long-TTL caches and below the 74-min production incident gap. Also
+     *  triggers on model id / provider / api change (those checks are
+     *  unconditional regardless of this idle threshold). Range: 1 min .. 24 h. */
+    replayDriftIdleMs: z.ZodDefault<z.ZodNumber>;
     /** Model for LLM compaction in "provider:modelId" format. Defaults to Haiku for cost efficiency. Empty string falls through to session model. */
     compactionModel: z.ZodDefault<z.ZodString>;
     /** Minimum age (in tool result positions) before content is eligible for dead content eviction. */
@@ -550,9 +556,9 @@ export declare const BootstrapConfigSchema: z.ZodObject<{
     maxChars: z.ZodDefault<z.ZodNumber>;
     /** System prompt verbosity mode: full (all sections), minimal (sub-agents), none (identity only) */
     promptMode: z.ZodDefault<z.ZodEnum<{
-        none: "none";
-        full: "full";
         minimal: "minimal";
+        full: "full";
+        none: "none";
     }>>;
     /** When true, USER.md is excluded from bootstrap context in group chat sessions (privacy). Default: true. */
     groupChatFiltering: z.ZodDefault<z.ZodBoolean>;
@@ -826,9 +832,9 @@ export declare const AgentConfigSchema: z.ZodObject<{
         maxChars: z.ZodDefault<z.ZodNumber>;
         /** System prompt verbosity mode: full (all sections), minimal (sub-agents), none (identity only) */
         promptMode: z.ZodDefault<z.ZodEnum<{
-            none: "none";
-            full: "full";
             minimal: "minimal";
+            full: "full";
+            none: "none";
         }>>;
         /** When true, USER.md is excluded from bootstrap context in group chat sessions (privacy). Default: true. */
         groupChatFiltering: z.ZodDefault<z.ZodBoolean>;
@@ -1179,9 +1185,9 @@ export declare const PerAgentConfigSchema: z.ZodObject<{
         maxChars: z.ZodDefault<z.ZodNumber>;
         /** System prompt verbosity mode: full (all sections), minimal (sub-agents), none (identity only) */
         promptMode: z.ZodDefault<z.ZodEnum<{
-            none: "none";
-            full: "full";
             minimal: "minimal";
+            full: "full";
+            none: "none";
         }>>;
         /** When true, USER.md is excluded from bootstrap context in group chat sessions (privacy). Default: true. */
         groupChatFiltering: z.ZodDefault<z.ZodBoolean>;
@@ -1288,11 +1294,11 @@ export declare const PerAgentConfigSchema: z.ZodObject<{
         }, z.core.$strict>>;
         toolPolicy: z.ZodDefault<z.ZodObject<{
             profile: z.ZodDefault<z.ZodEnum<{
-                full: "full";
                 minimal: "minimal";
                 coding: "coding";
                 messaging: "messaging";
                 supervisor: "supervisor";
+                full: "full";
             }>>;
             allow: z.ZodDefault<z.ZodArray<z.ZodString>>;
             deny: z.ZodDefault<z.ZodArray<z.ZodString>>;
@@ -1591,6 +1597,12 @@ export declare const PerAgentConfigSchema: z.ZodObject<{
         }>>;
         /** Number of recent assistant turns that retain thinking blocks (older turns get stripped). */
         thinkingKeepTurns: z.ZodDefault<z.ZodNumber>;
+        /** Idle gap (ms) above which signed thinking state is treated as drifted and
+         *  scrubbed pre-send to avoid provider replay-rejection. Default 30 min —
+         *  below long-TTL caches and below the 74-min production incident gap. Also
+         *  triggers on model id / provider / api change (those checks are
+         *  unconditional regardless of this idle threshold). Range: 1 min .. 24 h. */
+        replayDriftIdleMs: z.ZodDefault<z.ZodNumber>;
         /** Model for LLM compaction in "provider:modelId" format. Defaults to Haiku for cost efficiency. Empty string falls through to session model. */
         compactionModel: z.ZodDefault<z.ZodString>;
         /** Minimum age (in tool result positions) before content is eligible for dead content eviction. */
@@ -1853,9 +1865,9 @@ export declare const AgentsMapSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
         maxChars: z.ZodDefault<z.ZodNumber>;
         /** System prompt verbosity mode: full (all sections), minimal (sub-agents), none (identity only) */
         promptMode: z.ZodDefault<z.ZodEnum<{
-            none: "none";
-            full: "full";
             minimal: "minimal";
+            full: "full";
+            none: "none";
         }>>;
         /** When true, USER.md is excluded from bootstrap context in group chat sessions (privacy). Default: true. */
         groupChatFiltering: z.ZodDefault<z.ZodBoolean>;
@@ -1962,11 +1974,11 @@ export declare const AgentsMapSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
         }, z.core.$strict>>;
         toolPolicy: z.ZodDefault<z.ZodObject<{
             profile: z.ZodDefault<z.ZodEnum<{
-                full: "full";
                 minimal: "minimal";
                 coding: "coding";
                 messaging: "messaging";
                 supervisor: "supervisor";
+                full: "full";
             }>>;
             allow: z.ZodDefault<z.ZodArray<z.ZodString>>;
             deny: z.ZodDefault<z.ZodArray<z.ZodString>>;
@@ -2265,6 +2277,12 @@ export declare const AgentsMapSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
         }>>;
         /** Number of recent assistant turns that retain thinking blocks (older turns get stripped). */
         thinkingKeepTurns: z.ZodDefault<z.ZodNumber>;
+        /** Idle gap (ms) above which signed thinking state is treated as drifted and
+         *  scrubbed pre-send to avoid provider replay-rejection. Default 30 min —
+         *  below long-TTL caches and below the 74-min production incident gap. Also
+         *  triggers on model id / provider / api change (those checks are
+         *  unconditional regardless of this idle threshold). Range: 1 min .. 24 h. */
+        replayDriftIdleMs: z.ZodDefault<z.ZodNumber>;
         /** Model for LLM compaction in "provider:modelId" format. Defaults to Haiku for cost efficiency. Empty string falls through to session model. */
         compactionModel: z.ZodDefault<z.ZodString>;
         /** Minimum age (in tool result positions) before content is eligible for dead content eviction. */

package/node_modules/@comis/core/dist/config/schema-agent.js

@@ -288,6 +288,12 @@ export const ContextEngineConfigSchema = z.strictObject({
     // --- Shared (both modes) ---
     /** Number of recent assistant turns that retain thinking blocks (older turns get stripped). */
     thinkingKeepTurns: z.number().int().min(1).max(50).default(10),
+    /** Idle gap (ms) above which signed thinking state is treated as drifted and
+     *  scrubbed pre-send to avoid provider replay-rejection. Default 30 min —
+     *  below long-TTL caches and below the 74-min production incident gap. Also
+     *  triggers on model id / provider / api change (those checks are
+     *  unconditional regardless of this idle threshold). Range: 1 min .. 24 h. */
+    replayDriftIdleMs: z.number().int().min(60_000).max(24 * 60 * 60_000).default(30 * 60_000),
     /** Model for LLM compaction in "provider:modelId" format. Defaults to Haiku for cost efficiency. Empty string falls through to session model. */
     compactionModel: z.string().default("anthropic:claude-haiku-4-5-20250929"),
     /** Minimum age (in tool result positions) before content is eligible for dead content eviction. */

package/node_modules/@comis/core/dist/config/schema-gateway.d.ts

@@ -29,9 +29,9 @@ export declare const GatewayTokenSchema: z.ZodObject<{
     /** The secret value (min 32 chars; resolved at runtime if omitted; string or SecretRef) */
     secret: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
         source: z.ZodEnum<{
-            env: "env";
             file: "file";
             exec: "exec";
+            env: "env";
         }>;
         provider: z.ZodString;
         id: z.ZodString;
@@ -88,9 +88,9 @@ export declare const GatewayConfigSchema: z.ZodObject<{
         /** The secret value (min 32 chars; resolved at runtime if omitted; string or SecretRef) */
         secret: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
             source: z.ZodEnum<{
-                env: "env";
                 file: "file";
                 exec: "exec";
+                env: "env";
             }>;
             provider: z.ZodString;
             id: z.ZodString;