comisai 1.0.18 → 1.0.22

package/node_modules/@comis/core/dist/event-bus/events-messaging.d.ts

@@ -281,6 +281,22 @@ export interface MessagingEvents {
         escalatedMaxTokens: number;
         timestamp: number;
     };
+    /** Signed-replay self-heal fired: provider rejected stored signed thinking /
+     *  reasoning state on the latest assistant turn (Anthropic `cannot be
+     *  modified`, Gemini `thought_signature mismatch`, OpenAI Responses
+     *  `reasoning_item not found`, OpenAI Completions `reasoning_id expired`,
+     *  Mistral `encrypted_content verification failed`, etc.). The runner in
+     *  `executor-prompt-runner.ts` scrubbed signed thinking state from the
+     *  in-memory message array and re-entered the model retry chain. `succeeded`
+     *  reports whether the retry produced a non-empty response. */
+    "execution:signed_replay_recovered": {
+        agentId: string;
+        sessionKey: string;
+        blocksRemoved: number;
+        thoughtSignaturesStripped: number;
+        succeeded: boolean;
+        timestamp: number;
+    };
     /** Failed announcement persisted to dead-letter queue */
     "announcement:dead_lettered": {
         runId: string;

package/node_modules/@comis/core/dist/exports/config.d.ts

@@ -1,2 +1,2 @@
-export { AppConfigSchema, AgentConfigSchema, AgentsMapSchema, BudgetConfigSchema, CircuitBreakerConfigSchema, DmScopeConfigSchema, ElevatedReplyConfigSchema, ModelRoutesSchema, HeartbeatConfigSchema, HeartbeatTargetSchema, PerAgentConfigSchema, PerAgentCronConfigSchema, PerAgentHeartbeatConfigSchema, PerAgentSchedulerConfigSchema, PruningConfigSchema, RagConfigSchema, ResetPolicyOverrideSchema, RoutingBindingSchema, RoutingConfigSchema, SessionResetPolicySchema, TracingConfigSchema, ChannelConfigSchema, ChannelEntrySchema, ChannelHealthCheckSchema, MemoryConfigSchema, CompactionConfigSchema, RetentionConfigSchema, SecurityConfigSchema, PermissionConfigSchema, ActionConfirmationConfigSchema, AgentToAgentConfigSchema, SkillsConfigSchema, DaemonConfigSchema, LoggingConfigSchema, TracingDefaultsSchema, ConfigWebhookSchema, SchedulerConfigSchema, GatewayConfigSchema, GatewayTlsConfigSchema, GatewayTokenSchema, GatewayRateLimitSchema, IntegrationsConfigSchema, BraveSearchConfigSchema, McpServerEntrySchema, McpConfigSchema, TranscriptionConfigSchema, TtsConfigSchema, TtsAutoModeSchema, ElevenLabsVoiceSettingsSchema, TtsOutputFormatSchema, ImageAnalysisConfigSchema, VisionScopeRuleSchema, VisionConfigSchema, LinkUnderstandingConfigSchema, MediaConfigSchema, DOCUMENT_MIME_WHITELIST, FileExtractionConfigSchema, AutoReplyRuleSchema, AutoReplyConfigSchema, MonitoringConfigSchema, PluginsConfigSchema, PluginEntrySchema, QueueConfigSchema, QueueModeSchema, OverflowPolicySchema, PerChannelQueueConfigSchema, OverflowConfigSchema, DebounceBufferConfigSchema, FollowupConfigSchema, PriorityLaneConfigSchema, LaneAssignmentConfigSchema, StreamingConfigSchema, PerChannelStreamingConfigSchema, TypingModeSchema, ChunkModeSchema, DeliveryMirrorConfigSchema, DeliveryQueueConfigSchema, DeliveryTimingConfigSchema, DeliveryTimingModeSchema, CoalescerConfigSchema, AutoReplyEngineConfigSchema, GroupActivationModeSchema, SendPolicyConfigSchema, SendPolicyRuleSchema, SendActionSchema, EnvelopeConfigSchema, RetryConfigSchema, WebhooksConfigSchema, WebhookMappingConfigSchema, WebhookMappingMatchSchema, AgentSecretsConfigSchema, SecretsConfigSchema, DocumentationConfigSchema, DocumentationLinkSchema, ImageGenerationConfigSchema, NotificationConfigSchema, VerbosityConfigSchema, VerbosityLevelSchema, VerbosityOverrideSchema, ContextEngineConfigSchema, BackgroundTasksConfigSchema, MemoryReviewConfigSchema, UserModelSchema, ModelCostSchema, OperationModelEntrySchema, OperationModelsSchema, substituteEnvVars, warnSuspiciousEnvValues, loadConfigFile, validateConfig, deepMerge, mergeLayered, loadLayered, IMMUTABLE_CONFIG_PREFIXES, MUTABLE_CONFIG_OVERRIDES, isImmutableConfigPath, matchesOverridePattern, getMutableOverridesForSection, getConfigSchema, getConfigSections, getFieldMetadata, validatePartial, createConfigGitManager, checkApprovalsConfig, } from "../config/index.js";
+export { AppConfigSchema, AgentConfigSchema, AgentsMapSchema, BudgetConfigSchema, CircuitBreakerConfigSchema, DmScopeConfigSchema, ElevatedReplyConfigSchema, ModelRoutesSchema, HeartbeatConfigSchema, HeartbeatTargetSchema, PerAgentConfigSchema, PerAgentCronConfigSchema, PerAgentHeartbeatConfigSchema, PerAgentSchedulerConfigSchema, PruningConfigSchema, RagConfigSchema, ResetPolicyOverrideSchema, RoutingBindingSchema, RoutingConfigSchema, SessionResetPolicySchema, TracingConfigSchema, ChannelConfigSchema, ChannelEntrySchema, ChannelHealthCheckSchema, MemoryConfigSchema, CompactionConfigSchema, RetentionConfigSchema, SecurityConfigSchema, PermissionConfigSchema, ActionConfirmationConfigSchema, AgentToAgentConfigSchema, SkillsConfigSchema, DaemonConfigSchema, LoggingConfigSchema, TracingDefaultsSchema, ConfigWebhookSchema, SchedulerConfigSchema, GatewayConfigSchema, GatewayTlsConfigSchema, GatewayTokenSchema, GatewayRateLimitSchema, IntegrationsConfigSchema, BraveSearchConfigSchema, McpServerEntrySchema, McpConfigSchema, TranscriptionConfigSchema, TtsConfigSchema, TtsAutoModeSchema, ElevenLabsVoiceSettingsSchema, TtsOutputFormatSchema, ImageAnalysisConfigSchema, VisionScopeRuleSchema, VisionConfigSchema, LinkUnderstandingConfigSchema, MediaConfigSchema, DOCUMENT_MIME_WHITELIST, FileExtractionConfigSchema, AutoReplyRuleSchema, AutoReplyConfigSchema, MonitoringConfigSchema, PluginsConfigSchema, PluginEntrySchema, QueueConfigSchema, QueueModeSchema, OverflowPolicySchema, PerChannelQueueConfigSchema, OverflowConfigSchema, DebounceBufferConfigSchema, FollowupConfigSchema, PriorityLaneConfigSchema, LaneAssignmentConfigSchema, StreamingConfigSchema, PerChannelStreamingConfigSchema, TypingModeSchema, ChunkModeSchema, DeliveryMirrorConfigSchema, DeliveryQueueConfigSchema, DeliveryTimingConfigSchema, DeliveryTimingModeSchema, CoalescerConfigSchema, AutoReplyEngineConfigSchema, GroupActivationModeSchema, SendPolicyConfigSchema, SendPolicyRuleSchema, SendActionSchema, EnvelopeConfigSchema, RetryConfigSchema, WebhooksConfigSchema, WebhookMappingConfigSchema, WebhookMappingMatchSchema, AgentSecretsConfigSchema, SecretsConfigSchema, DocumentationConfigSchema, DocumentationLinkSchema, ImageGenerationConfigSchema, NotificationConfigSchema, VerbosityConfigSchema, VerbosityLevelSchema, VerbosityOverrideSchema, ContextEngineConfigSchema, BackgroundTasksConfigSchema, MemoryReviewConfigSchema, UserModelSchema, ModelCostSchema, OperationModelEntrySchema, OperationModelsSchema, substituteEnvVars, warnSuspiciousEnvValues, loadConfigFile, validateConfig, deepMerge, mergeLayered, loadLayered, IMMUTABLE_CONFIG_PREFIXES, MUTABLE_CONFIG_OVERRIDES, isImmutableConfigPath, matchesOverridePattern, getMutableOverridesForSection, MANAGED_SECTIONS, getManagedSectionRedirect, formatRedirectHint, getConfigSchema, getConfigSections, getFieldMetadata, validatePartial, createConfigGitManager, checkApprovalsConfig, } from "../config/index.js";
 export type { AppConfig, AgentConfig, BudgetConfig, CircuitBreakerConfig, DmScopeConfig, ElevatedReplyConfig, ModelRoutes, PruningConfig, HeartbeatConfig, HeartbeatTarget, PerAgentConfig, PerAgentCronConfig, PerAgentHeartbeatConfig, PerAgentSchedulerConfig, RagConfig, ResetPolicyOverride, RoutingBinding, RoutingConfig, SessionResetPolicyConfig, TracingConfig, ChannelConfig, ChannelEntry, ChannelHealthCheckConfig, AckReactionConfig, MemoryConfig, CompactionConfig, RetentionConfig, SecurityConfig, PermissionConfig, ActionConfirmationConfig, AgentToAgentConfig, SkillsConfig, DaemonConfig, LoggingConfig, TracingDefaults, ConfigWebhook, SchedulerConfig, GatewayConfig, GatewayTlsConfig, GatewayToken, GatewayRateLimit, IntegrationsConfig, BraveSearchConfig, McpServerEntry, McpConfig, TranscriptionConfig, TtsConfig, TtsAutoMode, ElevenLabsVoiceSettings, TtsOutputFormat, ImageAnalysisConfig, VisionScopeRule, VisionConfig, LinkUnderstandingConfig, MediaConfig, FileExtractionConfig, AutoReplyRule, AutoReplyConfig, MonitoringConfig, DiskMonitorConfig, ResourceMonitorConfig, SystemdMonitorConfig, SecurityUpdateMonitorConfig, GitMonitorConfig, PluginsConfig, PluginEntry, QueueConfig, PerChannelQueueConfig, QueueMode, OverflowPolicy, OverflowConfig, DebounceBufferConfig, FollowupConfig, PriorityLaneConfig, LaneAssignmentConfig, StreamingConfig, PerChannelStreamingConfig, TypingMode, ChunkMode, DeliveryMirrorConfig, DeliveryQueueConfig, DeliveryTimingConfig, DeliveryTimingMode, CoalescerConfig, AutoReplyEngineConfig, GroupActivationMode, SendPolicyConfig, SendPolicyRule, SendAction, EnvelopeConfig, RetryConfig, WebhooksConfig, WebhookMappingConfig, AgentSecretsConfig, SecretsConfig, ConfigError, ConfigErrorCode, FieldMetadata, PartialValidationResult, ConfigGitManager, GitCommitMetadata, HistoryEntry, GitManagerDeps, ExecGitFn, EnvValueWarning, LifecycleReactionsConfig, LifecycleReactionsTimingConfig, SenderTrustDisplayConfig, DocumentationConfig, DocumentationLink, ImageGenerationConfig, NotificationConfig, VerbosityConfig, VerbosityLevel, VerbosityOverride, ContextEngineConfig, BackgroundTasksConfig, MemoryReviewConfig, UserModel, ModelCost, OperationModelEntry, OperationModels, ModelOperationType, } from "../config/index.js";

package/node_modules/@comis/core/dist/exports/config.js

@@ -1,3 +1,3 @@
 // SPDX-License-Identifier: Apache-2.0
 // @comis/core exports — Config (layered configuration with Zod validation)
-export { AppConfigSchema, AgentConfigSchema, AgentsMapSchema, BudgetConfigSchema, CircuitBreakerConfigSchema, DmScopeConfigSchema, ElevatedReplyConfigSchema, ModelRoutesSchema, HeartbeatConfigSchema, HeartbeatTargetSchema, PerAgentConfigSchema, PerAgentCronConfigSchema, PerAgentHeartbeatConfigSchema, PerAgentSchedulerConfigSchema, PruningConfigSchema, RagConfigSchema, ResetPolicyOverrideSchema, RoutingBindingSchema, RoutingConfigSchema, SessionResetPolicySchema, TracingConfigSchema, ChannelConfigSchema, ChannelEntrySchema, ChannelHealthCheckSchema, MemoryConfigSchema, CompactionConfigSchema, RetentionConfigSchema, SecurityConfigSchema, PermissionConfigSchema, ActionConfirmationConfigSchema, AgentToAgentConfigSchema, SkillsConfigSchema, DaemonConfigSchema, LoggingConfigSchema, TracingDefaultsSchema, ConfigWebhookSchema, SchedulerConfigSchema, GatewayConfigSchema, GatewayTlsConfigSchema, GatewayTokenSchema, GatewayRateLimitSchema, IntegrationsConfigSchema, BraveSearchConfigSchema, McpServerEntrySchema, McpConfigSchema, TranscriptionConfigSchema, TtsConfigSchema, TtsAutoModeSchema, ElevenLabsVoiceSettingsSchema, TtsOutputFormatSchema, ImageAnalysisConfigSchema, VisionScopeRuleSchema, VisionConfigSchema, LinkUnderstandingConfigSchema, MediaConfigSchema, DOCUMENT_MIME_WHITELIST, FileExtractionConfigSchema, AutoReplyRuleSchema, AutoReplyConfigSchema, MonitoringConfigSchema, PluginsConfigSchema, PluginEntrySchema, QueueConfigSchema, QueueModeSchema, OverflowPolicySchema, PerChannelQueueConfigSchema, OverflowConfigSchema, DebounceBufferConfigSchema, FollowupConfigSchema, PriorityLaneConfigSchema, LaneAssignmentConfigSchema, StreamingConfigSchema, PerChannelStreamingConfigSchema, TypingModeSchema, ChunkModeSchema, DeliveryMirrorConfigSchema, DeliveryQueueConfigSchema, DeliveryTimingConfigSchema, DeliveryTimingModeSchema, CoalescerConfigSchema, AutoReplyEngineConfigSchema, GroupActivationModeSchema, SendPolicyConfigSchema, SendPolicyRuleSchema, SendActionSchema, EnvelopeConfigSchema, RetryConfigSchema, WebhooksConfigSchema, WebhookMappingConfigSchema, WebhookMappingMatchSchema, AgentSecretsConfigSchema, SecretsConfigSchema, DocumentationConfigSchema, DocumentationLinkSchema, ImageGenerationConfigSchema, NotificationConfigSchema, VerbosityConfigSchema, VerbosityLevelSchema, VerbosityOverrideSchema, ContextEngineConfigSchema, BackgroundTasksConfigSchema, MemoryReviewConfigSchema, UserModelSchema, ModelCostSchema, OperationModelEntrySchema, OperationModelsSchema, substituteEnvVars, warnSuspiciousEnvValues, loadConfigFile, validateConfig, deepMerge, mergeLayered, loadLayered, IMMUTABLE_CONFIG_PREFIXES, MUTABLE_CONFIG_OVERRIDES, isImmutableConfigPath, matchesOverridePattern, getMutableOverridesForSection, getConfigSchema, getConfigSections, getFieldMetadata, validatePartial, createConfigGitManager, checkApprovalsConfig, } from "../config/index.js";
+export { AppConfigSchema, AgentConfigSchema, AgentsMapSchema, BudgetConfigSchema, CircuitBreakerConfigSchema, DmScopeConfigSchema, ElevatedReplyConfigSchema, ModelRoutesSchema, HeartbeatConfigSchema, HeartbeatTargetSchema, PerAgentConfigSchema, PerAgentCronConfigSchema, PerAgentHeartbeatConfigSchema, PerAgentSchedulerConfigSchema, PruningConfigSchema, RagConfigSchema, ResetPolicyOverrideSchema, RoutingBindingSchema, RoutingConfigSchema, SessionResetPolicySchema, TracingConfigSchema, ChannelConfigSchema, ChannelEntrySchema, ChannelHealthCheckSchema, MemoryConfigSchema, CompactionConfigSchema, RetentionConfigSchema, SecurityConfigSchema, PermissionConfigSchema, ActionConfirmationConfigSchema, AgentToAgentConfigSchema, SkillsConfigSchema, DaemonConfigSchema, LoggingConfigSchema, TracingDefaultsSchema, ConfigWebhookSchema, SchedulerConfigSchema, GatewayConfigSchema, GatewayTlsConfigSchema, GatewayTokenSchema, GatewayRateLimitSchema, IntegrationsConfigSchema, BraveSearchConfigSchema, McpServerEntrySchema, McpConfigSchema, TranscriptionConfigSchema, TtsConfigSchema, TtsAutoModeSchema, ElevenLabsVoiceSettingsSchema, TtsOutputFormatSchema, ImageAnalysisConfigSchema, VisionScopeRuleSchema, VisionConfigSchema, LinkUnderstandingConfigSchema, MediaConfigSchema, DOCUMENT_MIME_WHITELIST, FileExtractionConfigSchema, AutoReplyRuleSchema, AutoReplyConfigSchema, MonitoringConfigSchema, PluginsConfigSchema, PluginEntrySchema, QueueConfigSchema, QueueModeSchema, OverflowPolicySchema, PerChannelQueueConfigSchema, OverflowConfigSchema, DebounceBufferConfigSchema, FollowupConfigSchema, PriorityLaneConfigSchema, LaneAssignmentConfigSchema, StreamingConfigSchema, PerChannelStreamingConfigSchema, TypingModeSchema, ChunkModeSchema, DeliveryMirrorConfigSchema, DeliveryQueueConfigSchema, DeliveryTimingConfigSchema, DeliveryTimingModeSchema, CoalescerConfigSchema, AutoReplyEngineConfigSchema, GroupActivationModeSchema, SendPolicyConfigSchema, SendPolicyRuleSchema, SendActionSchema, EnvelopeConfigSchema, RetryConfigSchema, WebhooksConfigSchema, WebhookMappingConfigSchema, WebhookMappingMatchSchema, AgentSecretsConfigSchema, SecretsConfigSchema, DocumentationConfigSchema, DocumentationLinkSchema, ImageGenerationConfigSchema, NotificationConfigSchema, VerbosityConfigSchema, VerbosityLevelSchema, VerbosityOverrideSchema, ContextEngineConfigSchema, BackgroundTasksConfigSchema, MemoryReviewConfigSchema, UserModelSchema, ModelCostSchema, OperationModelEntrySchema, OperationModelsSchema, substituteEnvVars, warnSuspiciousEnvValues, loadConfigFile, validateConfig, deepMerge, mergeLayered, loadLayered, IMMUTABLE_CONFIG_PREFIXES, MUTABLE_CONFIG_OVERRIDES, isImmutableConfigPath, matchesOverridePattern, getMutableOverridesForSection, MANAGED_SECTIONS, getManagedSectionRedirect, formatRedirectHint, getConfigSchema, getConfigSections, getFieldMetadata, validatePartial, createConfigGitManager, checkApprovalsConfig, } from "../config/index.js";

package/node_modules/@comis/core/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/core",
   "private": true,
-  "version": "1.0.18",
+  "version": "1.0.22",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Core domain types, ports, event bus, security, and config for Comis",

package/node_modules/@comis/daemon/dist/rpc/config-handlers.js

@@ -8,7 +8,7 @@
  * Extracted from daemon.ts rpcCallInner switch block
  * @module
  */
-import { isImmutableConfigPath, getConfigSchema, getConfigSections, deepMerge, AppConfigSchema, redactConfigSecrets, warnSuspiciousEnvValues, } from "@comis/core";
+import { isImmutableConfigPath, getConfigSchema, getConfigSections, deepMerge, AppConfigSchema, redactConfigSecrets, warnSuspiciousEnvValues, getManagedSectionRedirect, formatRedirectHint, } from "@comis/core";
 import { suppressError } from "@comis/shared";
 import { stringify as yamlStringify } from "yaml";
 import { existsSync, readFileSync, writeFileSync, mkdirSync, renameSync } from "node:fs";
@@ -406,10 +406,18 @@ export function createConfigHandlers(deps) {
             const coercedValue = coerceConfigValue(value, subSchema);
             const ctx = params._context;
             try {
-                // Check immutable paths
+                // Check immutable paths.
+                // Backstop for direct-RPC clients (web UI, CLI). The gateway tool
+                // pre-flight and bridge metadata validator catch this earlier for
+                // LLM tool calls -- this path is reached when those layers are
+                // bypassed. Emit the same redirect hint so all clients see
+                // identical, model-agnostic recovery instructions (quick-260425-t40).
                 if (isImmutableConfigPath(section, key)) {
-                    throw new Error(`Config path "${key ? `${section}.${key}` : section}" is immutable and cannot be modified at runtime. ` +
-                        "This setting requires manual operator intervention via config files.");
+                    const redirect = getManagedSectionRedirect(section, key);
+                    const suffix = redirect
+                        ? ` ${formatRedirectHint(redirect)}`
+                        : " This setting requires manual operator intervention via config files.";
+                    throw new Error(`Config path "${key ? `${section}.${key}` : section}" is immutable and cannot be modified at runtime.${suffix}`);
                 }
                 // Build patch object (use coerced value for the actual data, keep original for audit)
                 let patch;
@@ -582,10 +590,15 @@ export function createConfigHandlers(deps) {
                 if (!(section in deps.container.config)) {
                     throw new Error(`Unknown config section: "${section}". Valid sections: ${getConfigSections().join(", ")}.`);
                 }
-                // Check immutable paths -- entire section is being replaced
+                // Check immutable paths -- entire section is being replaced.
+                // Backstop for direct-RPC clients; LLM tool calls hit the same redirect
+                // earlier via gateway-tool / bridge validator (quick-260425-t40).
                 if (isImmutableConfigPath(section)) {
-                    throw new Error(`Config section "${section}" is immutable and cannot be replaced at runtime. ` +
-                        "This section requires manual operator intervention via config files.");
+                    const redirect = getManagedSectionRedirect(section);
+                    const suffix = redirect
+                        ? ` ${formatRedirectHint(redirect)}`
+                        : " This section requires manual operator intervention via config files.";
+                    throw new Error(`Config section "${section}" is immutable and cannot be replaced at runtime.${suffix}`);
                 }
                 // Build replacement: replace the section entirely (NOT deep merge)
                 const currentConfig = structuredClone(deps.container.config);

package/node_modules/@comis/daemon/dist/rpc/session-handlers.js

@@ -181,6 +181,28 @@ function loadJsonlSession(filePath) {
     }
 }
 // ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+/**
+ * Collect available session keys from all sources (SQLite, JSONL, workspace)
+ * for inclusion in "session not found" error messages.
+ */
+function collectAvailableSessionKeys(deps) {
+    const keys = [];
+    for (const s of deps.sessionStore.listDetailed()) {
+        keys.push(s.sessionKey);
+    }
+    if (deps.defaultWorkspaceDir) {
+        const existing = new Set(keys);
+        for (const ws of scanWorkspaceSessions(deps.defaultWorkspaceDir)) {
+            if (!existing.has(ws.sessionKey)) {
+                keys.push(ws.sessionKey);
+            }
+        }
+    }
+    return keys;
+}
+// ---------------------------------------------------------------------------
 // Factory
 // ---------------------------------------------------------------------------
 /**
@@ -428,7 +450,11 @@ export function createSessionHandlers(deps) {
                 }
             }
             if (!data) {
-                throw new Error(`Session not found: ${sessionKey}`);
+                const available = collectAvailableSessionKeys(deps);
+                const hint = available.length > 0
+                    ? `. Available session keys: ${available.join(", ")}`
+                    : ". Use action 'list' to discover available session keys";
+                throw new Error(`Session not found: ${sessionKey}${hint}`);
             }
             // Parse session key for metadata
             const parsed = parseFormattedSessionKey(sessionKey);

package/node_modules/@comis/daemon/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/daemon",
   "private": true,
-  "version": "1.0.18",
+  "version": "1.0.22",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Background daemon and orchestrator for the Comis platform",

package/node_modules/@comis/gateway/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/gateway",
   "private": true,
-  "version": "1.0.18",
+  "version": "1.0.22",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "HTTP, JSON-RPC, and WebSocket gateway for Comis",

package/node_modules/@comis/infra/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/infra",
   "private": true,
-  "version": "1.0.18",
+  "version": "1.0.22",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Structured logging infrastructure for Comis",

package/node_modules/@comis/memory/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/memory",
   "private": true,
-  "version": "1.0.18",
+  "version": "1.0.22",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "SQLite memory, embeddings, and RAG storage for Comis agents",

package/node_modules/@comis/scheduler/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/scheduler",
   "private": true,
-  "version": "1.0.18",
+  "version": "1.0.22",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Task scheduling and cron management for Comis",

package/node_modules/@comis/shared/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/shared",
   "private": true,
-  "version": "1.0.18",
+  "version": "1.0.22",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Shared types and utilities for the Comis platform",

package/node_modules/@comis/skills/dist/bridge/tool-metadata-registry.js

@@ -11,7 +11,7 @@
  *
  * @module
  */
-import { registerToolMetadata, isImmutableConfigPath, getMutableOverridesForSection } from "@comis/core";
+import { registerToolMetadata, isImmutableConfigPath, getMutableOverridesForSection, getManagedSectionRedirect, formatRedirectHint, } from "@comis/core";
 import { validateExecCommand } from "../builtin/exec-security.js";
 import { GATEWAY_ACTIONS } from "../builtin/platform/gateway-tool.js";
 export function registerAllToolMetadata() {
@@ -149,25 +149,40 @@ export function registerAllToolMetadata() {
             return undefined;
         },
     });
-    // Gateway tool -- action enum + immutable path rejection for patch.
+    // Gateway tool -- action enum + immutable path rejection for patch and apply.
     // Whitelist is derived from the tool's exported GATEWAY_ACTIONS tuple so
     // bridge + handler cannot drift (quick-260420-iv2 regression fix).
+    // When the rejected section has a dedicated *_manage tool, the message
+    // includes a parameter-correct redirect via formatRedirectHint() so any
+    // LLM (Opus/Sonnet/Haiku, GPT-5, Gemini, Mistral, etc.) can self-recover
+    // without model-specific prompting (quick-260425-t40).
     registerToolMetadata("gateway", {
         validateInput: (params) => {
             const action = typeof params.action === "string" ? params.action : undefined;
             if (!action || !GATEWAY_ACTIONS.includes(action)) {
                 return `Invalid action: "${action ?? ""}". Valid: ${GATEWAY_ACTIONS.join(", ")}`;
             }
-            // Only check immutability for patch action (reads must succeed on immutable paths)
+            const section = typeof params.section === "string" ? params.section : undefined;
+            // Only check immutability for mutating actions (reads must succeed on immutable paths).
             if (action === "patch") {
-                const section = typeof params.section === "string" ? params.section : undefined;
                 const key = typeof params.key === "string" ? params.key : undefined;
                 if (section && isImmutableConfigPath(section, key)) {
                     const mutablePaths = getMutableOverridesForSection(section, key);
-                    const pathHint = mutablePaths.length > 0
-                        ? ` Patchable: ${mutablePaths.join(", ")}`
-                        : "";
-                    return `Cannot patch immutable config path: ${section}${key ? "." + key : ""}.${pathHint}`;
+                    const redirect = getManagedSectionRedirect(section, key);
+                    const fullPath = `${section}${key ? "." + key : ""}`;
+                    const suffix = redirect
+                        ? ` ${formatRedirectHint(redirect, mutablePaths)}`
+                        : mutablePaths.length > 0
+                            ? ` Patchable: ${mutablePaths.join(", ")}.`
+                            : "";
+                    return `Cannot patch immutable config path: ${fullPath}.${suffix}`;
+                }
+            }
+            if (action === "apply") {
+                if (section && isImmutableConfigPath(section)) {
+                    const redirect = getManagedSectionRedirect(section);
+                    const suffix = redirect ? ` ${formatRedirectHint(redirect)}` : "";
+                    return `Cannot apply to immutable config section: ${section}.${suffix}`;
                 }
             }
             return undefined;

package/node_modules/@comis/skills/dist/builtin/platform/gateway-tool.d.ts

@@ -21,7 +21,7 @@ import type { RpcCall } from "./cron-tool.js";
 export declare const GATEWAY_ACTIONS: readonly ["read", "patch", "apply", "restart", "schema", "status", "history", "diff", "rollback", "env_set", "env_list"];
 export type GatewayAction = typeof GATEWAY_ACTIONS[number];
 declare const GatewayToolParams: import("@sinclair/typebox").TObject<{
-    action: import("@sinclair/typebox").TUnion<import("@sinclair/typebox").TLiteral<"status" | "read" | "patch" | "apply" | "restart" | "schema" | "history" | "diff" | "rollback" | "env_set" | "env_list">[]>;
+    action: import("@sinclair/typebox").TUnion<import("@sinclair/typebox").TLiteral<"status" | "read" | "patch" | "diff" | "apply" | "restart" | "schema" | "history" | "rollback" | "env_set" | "env_list">[]>;
     section: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     key: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     value: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnknown>;

package/node_modules/@comis/skills/dist/builtin/platform/gateway-tool.js

@@ -10,7 +10,7 @@
  * @module
  */
 import { Type } from "@sinclair/typebox";
-import { tryGetContext, isImmutableConfigPath, MUTABLE_CONFIG_OVERRIDES, matchesOverridePattern, getMutableOverridesForSection } from "@comis/core";
+import { tryGetContext, isImmutableConfigPath, MUTABLE_CONFIG_OVERRIDES, matchesOverridePattern, getMutableOverridesForSection, getManagedSectionRedirect, formatRedirectHint, } from "@comis/core";
 import { readStringParam, throwToolError, createActionGate, } from "./tool-helpers.js";
 import { createMultiActionDispatchTool } from "./messaging-factory.js";
 // ---------------------------------------------------------------------------
@@ -123,19 +123,18 @@ export function createGatewayTool(rpcCall) {
                 case "patch": {
                     const section = readStringParam(p, "section");
                     const key = readStringParam(p, "key");
-                    // Pre-gate immutability check: reject before asking for confirmation
+                    // Pre-gate immutability check: reject before asking for confirmation.
+                    // When the section has a dedicated *_manage tool, redirect there with
+                    // a parameter-correct example call so the LLM can self-recover without
+                    // needing model-specific prompting.
                     if (isImmutableConfigPath(section, key)) {
                         const mutablePaths = getMutableOverridesForSection(section, key);
-                        let hint;
-                        if (mutablePaths.length > 0) {
-                            hint = `Patchable paths under "${section}": ${mutablePaths.join(", ")}`;
-                        }
-                        else if (section === "agents") {
-                            hint = `Key must start with the agent ID. Use action="read" section="agents" first to see agent IDs, then patch as e.g. key="<agentId>.model"`;
-                        }
-                        else {
-                            hint = "This section has no runtime-patchable paths.";
-                        }
+                        const redirect = getManagedSectionRedirect(section, key);
+                        const hint = redirect
+                            ? formatRedirectHint(redirect, mutablePaths)
+                            : mutablePaths.length > 0
+                                ? `Patchable paths under "${section}": ${mutablePaths.join(", ")}.`
+                                : "This section has no runtime-patchable paths and no dedicated management tool.";
                         throwToolError("permission_denied", `Cannot patch immutable config path: ${section}.${key}.`, { hint });
                     }
                     // Skip confirmation gate for known mutable override paths (no round-trip needed)
@@ -183,9 +182,14 @@ export function createGatewayTool(rpcCall) {
                 }
                 case "apply": {
                     const section = readStringParam(p, "section");
-                    // Pre-gate immutability check: reject before asking for confirmation
+                    // Pre-gate immutability check: reject before asking for confirmation.
+                    // Redirect to the dedicated *_manage tool when one exists for this section.
                     if (isImmutableConfigPath(section)) {
-                        throwToolError("permission_denied", `Cannot apply to immutable config section: ${section}.`, { hint: "Security-sensitive sections cannot be replaced at runtime." });
+                        const redirect = getManagedSectionRedirect(section);
+                        const hint = redirect
+                            ? formatRedirectHint(redirect)
+                            : "Security-sensitive sections cannot be replaced at runtime.";
+                        throwToolError("permission_denied", `Cannot apply to immutable config section: ${section}.`, { hint });
                     }
                     const gate = applyGate(p);
                     if (gate.requiresConfirmation) {

package/node_modules/@comis/skills/dist/builtin/platform/unified-session-tool.js

@@ -36,7 +36,7 @@ const UnifiedSessionParams = Type.Object({
     ], { description: "Filter by message role: 'all' (default), 'user', 'assistant', 'tool' (action: search)" })),
     summarize: Type.Optional(Type.Boolean({ description: "Summarize matched sessions using LLM (default: true when query provided) (action: search)" })),
     // history params
-    session_key: Type.Optional(Type.String({ description: "Target session key to retrieve history for (action: history)" })),
+    session_key: Type.Optional(Type.String({ description: "Session key for action: history. Use action 'list' first to discover available keys. Format: {tenantId}:{filename}, e.g. 'default:678314278~peer~678314278'" })),
     offset: Type.Optional(Type.Integer({ description: "Pagination offset (default: 0) (action: history)" })),
     // shared params
     limit: Type.Optional(Type.Integer({ description: "Maximum results to return (action: search default 10 max 30, action: history default 20)" })),

package/node_modules/@comis/skills/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/skills",
   "private": true,
-  "version": "1.0.18",
+  "version": "1.0.22",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Skill system, MCP integration, and tool sandbox for Comis agents",

package/node_modules/@comis/web/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@comis/web",
-  "version": "1.0.18",
+  "version": "1.0.22",
   "description": "Web dashboard SPA for Comis agent management",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "comisai",
-  "version": "1.0.18",
+  "version": "1.0.22",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Security-first AI agent platform — connects AI agents to Discord, Telegram, Slack, WhatsApp, and more",
@@ -96,11 +96,6 @@
       "import": "./dist/daemon.js"
     }
   },
-  "scripts": {
-    "build": "tsc",
-    "prepack": "node scripts/prepack.js",
-    "postpack": "node scripts/postpack.js"
-  },
   "bundledDependencies": [
     "@comis/shared",
     "@comis/core",
@@ -116,24 +111,24 @@
     "@comis/web"
   ],
   "dependencies": {
-    "@comis/shared": "1.0.18",
-    "@comis/core": "1.0.18",
-    "@comis/infra": "1.0.18",
-    "@comis/memory": "1.0.18",
-    "@comis/gateway": "1.0.18",
-    "@comis/skills": "1.0.18",
-    "@comis/scheduler": "1.0.18",
-    "@comis/agent": "1.0.18",
-    "@comis/channels": "1.0.18",
-    "@comis/cli": "1.0.18",
-    "@comis/daemon": "1.0.18",
-    "@comis/web": "1.0.18",
-    "@agentclientprotocol/sdk": "^0.15.0",
+    "@comis/shared": "1.0.22",
+    "@comis/core": "1.0.22",
+    "@comis/infra": "1.0.22",
+    "@comis/memory": "1.0.22",
+    "@comis/gateway": "1.0.22",
+    "@comis/skills": "1.0.22",
+    "@comis/scheduler": "1.0.22",
+    "@comis/agent": "1.0.22",
+    "@comis/channels": "1.0.22",
+    "@comis/cli": "1.0.22",
+    "@comis/daemon": "1.0.22",
+    "@comis/web": "1.0.22",
+    "@agentclientprotocol/sdk": "^0.19.0",
     "@clack/core": "^1.1.0",
     "@clack/prompts": "^1.1.0",
     "@elevenlabs/elevenlabs-js": "^2.38.1",
     "@fal-ai/client": "1.9.5",
-    "@google/genai": "1.47.0",
+    "@google/genai": "1.50.1",
     "@grammyjs/auto-retry": "^2.0.2",
     "@grammyjs/files": "^1.2.0",
     "@grammyjs/runner": "^2.0.3",
@@ -142,9 +137,9 @@
     "@hono/node-server": "^1.19.13",
     "@hono/node-ws": "^1.3.0",
     "@line/bot-sdk": "^10.6.0",
-    "@mariozechner/pi-agent-core": "0.67.68",
-    "@mariozechner/pi-ai": "0.67.68",
-    "@mariozechner/pi-coding-agent": "0.67.68",
+    "@mariozechner/pi-agent-core": "0.68.0",
+    "@mariozechner/pi-ai": "0.68.0",
+    "@mariozechner/pi-coding-agent": "0.68.0",
     "@modelcontextprotocol/sdk": "^1.27.1",
     "@mozilla/readability": "^0.6.0",
     "@napi-rs/canvas": "^0.1.96",
@@ -169,7 +164,7 @@
     "iconv-lite": "^0.7.2",
     "ignore": "^7.0.5",
     "imapflow": "^1.2.18",
-    "impit": "^0.8.2",
+    "impit": "^0.13.0",
     "ipaddr.js": "^2.3.0",
     "irc-framework": "^4.14.0",
     "json-rpc-2.0": "^1.7.1",
@@ -188,7 +183,7 @@
     "playwright-core": "^1.58.2",
     "proper-lockfile": "^4.1.2",
     "sharp": "^0.34.5",
-    "sqlite-vec": "0.1.7-alpha.2",
+    "sqlite-vec": "0.1.9",
     "undici": "^7.24.0",
     "ws": "^8.19.0",
     "yaml": "^2.8.3",
@@ -199,5 +194,8 @@
   },
   "devDependencies": {
     "typescript": "^5.9.3"
+  },
+  "scripts": {
+    "build": "tsc"
   }
-}
+}

package/node_modules/@comis/agent/dist/provider/response/strip-minimax-xml.d.ts

@@ -1,9 +0,0 @@
-/**
- * Strip Minimax's malformed tool call XML from LLM responses.
- *
- * Minimax models sometimes emit `<invoke name="..." type="minimax:tool_call">...</invoke>`
- * blocks and `<minimax:tool_call>` wrapper tags in their text output.
- *
- * @module
- */
-export declare function stripMinimaxToolCallXml(text: string): string;

package/node_modules/@comis/agent/dist/provider/response/strip-minimax-xml.js

@@ -1,17 +0,0 @@
-/**
- * Strip Minimax's malformed tool call XML from LLM responses.
- *
- * Minimax models sometimes emit `<invoke name="..." type="minimax:tool_call">...</invoke>`
- * blocks and `<minimax:tool_call>` wrapper tags in their text output.
- *
- * @module
- */
-export function stripMinimaxToolCallXml(text) {
-    if (!text)
-        return text;
-    if (!/minimax:tool_call/i.test(text))
-        return text;
-    let cleaned = text.replace(/<invoke\b[^>]*>[\s\S]*?<\/invoke>/gi, "");
-    cleaned = cleaned.replace(/<\/?minimax:tool_call>/gi, "");
-    return cleaned;
-}

package/node_modules/@comis/agent/dist/provider/response/strip-model-tokens.d.ts

@@ -1,13 +0,0 @@
-/**
- * Strip model control tokens (`<|...|>` and fullwidth variants) from LLM responses.
- *
- * GLM, DeepSeek, and similar models sometimes leak internal control tokens
- * like `<|endoftext|>`, `<|user|>`, `<|assistant|>` into their text output.
- *
- * CRITICAL: The `/g` regex is module-level. The function calls `.replace()` directly
- * (not `.test()` first on the same regex) to avoid lastIndex state pollution.
- * `.replace()` resets lastIndex internally.
- *
- * @module
- */
-export declare function stripModelSpecialTokens(text: string): string;

package/node_modules/@comis/agent/dist/provider/response/strip-model-tokens.js

@@ -1,19 +0,0 @@
-/**
- * Strip model control tokens (`<|...|>` and fullwidth variants) from LLM responses.
- *
- * GLM, DeepSeek, and similar models sometimes leak internal control tokens
- * like `<|endoftext|>`, `<|user|>`, `<|assistant|>` into their text output.
- *
- * CRITICAL: The `/g` regex is module-level. The function calls `.replace()` directly
- * (not `.test()` first on the same regex) to avoid lastIndex state pollution.
- * `.replace()` resets lastIndex internally.
- *
- * @module
- */
-// Match both ASCII pipe <|...|> and full-width pipe <\uFF5C...\uFF5C> variants.
-const MODEL_SPECIAL_TOKEN_RE = /<[|\uFF5C][^|\uFF5C]*[|\uFF5C]>/g;
-export function stripModelSpecialTokens(text) {
-    if (!text)
-        return text;
-    return text.replace(MODEL_SPECIAL_TOKEN_RE, " ").replace(/  +/g, " ").trim();
-}

package/node_modules/@comis/agent/dist/provider/response/strip-tool-text.d.ts

@@ -1,11 +0,0 @@
-/**
- * Strip downgraded tool call/result text blocks from LLM responses.
- *
- * When Gemini (or other providers) cannot emit structured tool calls,
- * they fall back to text-based `[Tool Call: name (ID: ...)]` markers,
- * Arguments JSON blocks, `[Tool Result for ID ...]` blocks, and
- * `[Historical context: ...]` markers.
- *
- * @module
- */
-export declare function stripDowngradedToolCallText(text: string): string;

package/node_modules/@comis/agent/dist/provider/response/strip-tool-text.js

@@ -1,32 +0,0 @@
-/**
- * Strip downgraded tool call/result text blocks from LLM responses.
- *
- * When Gemini (or other providers) cannot emit structured tool calls,
- * they fall back to text-based `[Tool Call: name (ID: ...)]` markers,
- * Arguments JSON blocks, `[Tool Result for ID ...]` blocks, and
- * `[Historical context: ...]` markers.
- *
- * @module
- */
-/**
- * Strip [Tool Call: name (ID: id)] markers and their Arguments JSON blocks.
- */
-function stripToolCallMarkers(text) {
-    return text.replace(/\[Tool Call:\s*\S+\s*\(ID:\s*[^\)]*\)\]\n?(?:Arguments:\s*```json\n[\s\S]*?```\n?)?/gi, "");
-}
-export function stripDowngradedToolCallText(text) {
-    if (!text)
-        return text;
-    if (!/\[Tool (?:Call|Result)/i.test(text) && !/\[Historical context/i.test(text)) {
-        return text;
-    }
-    // Strip [Tool Call: name (ID: ...)] blocks and their Arguments JSON
-    let cleaned = stripToolCallMarkers(text);
-    // Strip [Tool Result for ID ...] blocks.
-    // Uses blank-line delimiter (\n\n) or next [Tool marker as boundary to avoid
-    // eating legitimate content after a garbled tool result.
-    cleaned = cleaned.replace(/\[Tool Result for ID[^\]]*\]\n?[\s\S]*?(?=\n\n|\n*\[Tool |\n*$)/gi, "");
-    // Strip [Historical context: ...] markers
-    cleaned = cleaned.replace(/\[Historical context:[^\]]*\]\n?/gi, "");
-    return cleaned.trim();
-}