comisai 1.0.19 → 1.0.23

package/node_modules/@comis/core/dist/event-bus/events-messaging.d.ts

@@ -281,6 +281,22 @@ export interface MessagingEvents {
         escalatedMaxTokens: number;
         timestamp: number;
     };
+    /** Signed-replay self-heal fired: provider rejected stored signed thinking /
+     *  reasoning state on the latest assistant turn (Anthropic `cannot be
+     *  modified`, Gemini `thought_signature mismatch`, OpenAI Responses
+     *  `reasoning_item not found`, OpenAI Completions `reasoning_id expired`,
+     *  Mistral `encrypted_content verification failed`, etc.). The runner in
+     *  `executor-prompt-runner.ts` scrubbed signed thinking state from the
+     *  in-memory message array and re-entered the model retry chain. `succeeded`
+     *  reports whether the retry produced a non-empty response. */
+    "execution:signed_replay_recovered": {
+        agentId: string;
+        sessionKey: string;
+        blocksRemoved: number;
+        thoughtSignaturesStripped: number;
+        succeeded: boolean;
+        timestamp: number;
+    };
     /** Failed announcement persisted to dead-letter queue */
     "announcement:dead_lettered": {
         runId: string;

package/node_modules/@comis/core/dist/exports/config.d.ts

@@ -1,2 +1,2 @@
-export { AppConfigSchema, AgentConfigSchema, AgentsMapSchema, BudgetConfigSchema, CircuitBreakerConfigSchema, DmScopeConfigSchema, ElevatedReplyConfigSchema, ModelRoutesSchema, HeartbeatConfigSchema, HeartbeatTargetSchema, PerAgentConfigSchema, PerAgentCronConfigSchema, PerAgentHeartbeatConfigSchema, PerAgentSchedulerConfigSchema, PruningConfigSchema, RagConfigSchema, ResetPolicyOverrideSchema, RoutingBindingSchema, RoutingConfigSchema, SessionResetPolicySchema, TracingConfigSchema, ChannelConfigSchema, ChannelEntrySchema, ChannelHealthCheckSchema, MemoryConfigSchema, CompactionConfigSchema, RetentionConfigSchema, SecurityConfigSchema, PermissionConfigSchema, ActionConfirmationConfigSchema, AgentToAgentConfigSchema, SkillsConfigSchema, DaemonConfigSchema, LoggingConfigSchema, TracingDefaultsSchema, ConfigWebhookSchema, SchedulerConfigSchema, GatewayConfigSchema, GatewayTlsConfigSchema, GatewayTokenSchema, GatewayRateLimitSchema, IntegrationsConfigSchema, BraveSearchConfigSchema, McpServerEntrySchema, McpConfigSchema, TranscriptionConfigSchema, TtsConfigSchema, TtsAutoModeSchema, ElevenLabsVoiceSettingsSchema, TtsOutputFormatSchema, ImageAnalysisConfigSchema, VisionScopeRuleSchema, VisionConfigSchema, LinkUnderstandingConfigSchema, MediaConfigSchema, DOCUMENT_MIME_WHITELIST, FileExtractionConfigSchema, AutoReplyRuleSchema, AutoReplyConfigSchema, MonitoringConfigSchema, PluginsConfigSchema, PluginEntrySchema, QueueConfigSchema, QueueModeSchema, OverflowPolicySchema, PerChannelQueueConfigSchema, OverflowConfigSchema, DebounceBufferConfigSchema, FollowupConfigSchema, PriorityLaneConfigSchema, LaneAssignmentConfigSchema, StreamingConfigSchema, PerChannelStreamingConfigSchema, TypingModeSchema, ChunkModeSchema, DeliveryMirrorConfigSchema, DeliveryQueueConfigSchema, DeliveryTimingConfigSchema, DeliveryTimingModeSchema, CoalescerConfigSchema, AutoReplyEngineConfigSchema, GroupActivationModeSchema, SendPolicyConfigSchema, SendPolicyRuleSchema, SendActionSchema, EnvelopeConfigSchema, RetryConfigSchema, WebhooksConfigSchema, WebhookMappingConfigSchema, WebhookMappingMatchSchema, AgentSecretsConfigSchema, SecretsConfigSchema, DocumentationConfigSchema, DocumentationLinkSchema, ImageGenerationConfigSchema, NotificationConfigSchema, VerbosityConfigSchema, VerbosityLevelSchema, VerbosityOverrideSchema, ContextEngineConfigSchema, BackgroundTasksConfigSchema, MemoryReviewConfigSchema, UserModelSchema, ModelCostSchema, OperationModelEntrySchema, OperationModelsSchema, substituteEnvVars, warnSuspiciousEnvValues, loadConfigFile, validateConfig, deepMerge, mergeLayered, loadLayered, IMMUTABLE_CONFIG_PREFIXES, MUTABLE_CONFIG_OVERRIDES, isImmutableConfigPath, matchesOverridePattern, getMutableOverridesForSection, getConfigSchema, getConfigSections, getFieldMetadata, validatePartial, createConfigGitManager, checkApprovalsConfig, } from "../config/index.js";
+export { AppConfigSchema, AgentConfigSchema, AgentsMapSchema, BudgetConfigSchema, CircuitBreakerConfigSchema, DmScopeConfigSchema, ElevatedReplyConfigSchema, ModelRoutesSchema, HeartbeatConfigSchema, HeartbeatTargetSchema, PerAgentConfigSchema, PerAgentCronConfigSchema, PerAgentHeartbeatConfigSchema, PerAgentSchedulerConfigSchema, PruningConfigSchema, RagConfigSchema, ResetPolicyOverrideSchema, RoutingBindingSchema, RoutingConfigSchema, SessionResetPolicySchema, TracingConfigSchema, ChannelConfigSchema, ChannelEntrySchema, ChannelHealthCheckSchema, MemoryConfigSchema, CompactionConfigSchema, RetentionConfigSchema, SecurityConfigSchema, PermissionConfigSchema, ActionConfirmationConfigSchema, AgentToAgentConfigSchema, SkillsConfigSchema, DaemonConfigSchema, LoggingConfigSchema, TracingDefaultsSchema, ConfigWebhookSchema, SchedulerConfigSchema, GatewayConfigSchema, GatewayTlsConfigSchema, GatewayTokenSchema, GatewayRateLimitSchema, IntegrationsConfigSchema, BraveSearchConfigSchema, McpServerEntrySchema, McpConfigSchema, TranscriptionConfigSchema, TtsConfigSchema, TtsAutoModeSchema, ElevenLabsVoiceSettingsSchema, TtsOutputFormatSchema, ImageAnalysisConfigSchema, VisionScopeRuleSchema, VisionConfigSchema, LinkUnderstandingConfigSchema, MediaConfigSchema, DOCUMENT_MIME_WHITELIST, FileExtractionConfigSchema, AutoReplyRuleSchema, AutoReplyConfigSchema, MonitoringConfigSchema, PluginsConfigSchema, PluginEntrySchema, QueueConfigSchema, QueueModeSchema, OverflowPolicySchema, PerChannelQueueConfigSchema, OverflowConfigSchema, DebounceBufferConfigSchema, FollowupConfigSchema, PriorityLaneConfigSchema, LaneAssignmentConfigSchema, StreamingConfigSchema, PerChannelStreamingConfigSchema, TypingModeSchema, ChunkModeSchema, DeliveryMirrorConfigSchema, DeliveryQueueConfigSchema, DeliveryTimingConfigSchema, DeliveryTimingModeSchema, CoalescerConfigSchema, AutoReplyEngineConfigSchema, GroupActivationModeSchema, SendPolicyConfigSchema, SendPolicyRuleSchema, SendActionSchema, EnvelopeConfigSchema, RetryConfigSchema, WebhooksConfigSchema, WebhookMappingConfigSchema, WebhookMappingMatchSchema, AgentSecretsConfigSchema, SecretsConfigSchema, DocumentationConfigSchema, DocumentationLinkSchema, ImageGenerationConfigSchema, NotificationConfigSchema, VerbosityConfigSchema, VerbosityLevelSchema, VerbosityOverrideSchema, ContextEngineConfigSchema, BackgroundTasksConfigSchema, MemoryReviewConfigSchema, UserModelSchema, ModelCostSchema, OperationModelEntrySchema, OperationModelsSchema, substituteEnvVars, warnSuspiciousEnvValues, loadConfigFile, validateConfig, deepMerge, mergeLayered, loadLayered, IMMUTABLE_CONFIG_PREFIXES, MUTABLE_CONFIG_OVERRIDES, isImmutableConfigPath, matchesOverridePattern, getMutableOverridesForSection, MANAGED_SECTIONS, getManagedSectionRedirect, formatRedirectHint, getConfigSchema, getConfigSections, getFieldMetadata, validatePartial, createConfigGitManager, checkApprovalsConfig, } from "../config/index.js";
 export type { AppConfig, AgentConfig, BudgetConfig, CircuitBreakerConfig, DmScopeConfig, ElevatedReplyConfig, ModelRoutes, PruningConfig, HeartbeatConfig, HeartbeatTarget, PerAgentConfig, PerAgentCronConfig, PerAgentHeartbeatConfig, PerAgentSchedulerConfig, RagConfig, ResetPolicyOverride, RoutingBinding, RoutingConfig, SessionResetPolicyConfig, TracingConfig, ChannelConfig, ChannelEntry, ChannelHealthCheckConfig, AckReactionConfig, MemoryConfig, CompactionConfig, RetentionConfig, SecurityConfig, PermissionConfig, ActionConfirmationConfig, AgentToAgentConfig, SkillsConfig, DaemonConfig, LoggingConfig, TracingDefaults, ConfigWebhook, SchedulerConfig, GatewayConfig, GatewayTlsConfig, GatewayToken, GatewayRateLimit, IntegrationsConfig, BraveSearchConfig, McpServerEntry, McpConfig, TranscriptionConfig, TtsConfig, TtsAutoMode, ElevenLabsVoiceSettings, TtsOutputFormat, ImageAnalysisConfig, VisionScopeRule, VisionConfig, LinkUnderstandingConfig, MediaConfig, FileExtractionConfig, AutoReplyRule, AutoReplyConfig, MonitoringConfig, DiskMonitorConfig, ResourceMonitorConfig, SystemdMonitorConfig, SecurityUpdateMonitorConfig, GitMonitorConfig, PluginsConfig, PluginEntry, QueueConfig, PerChannelQueueConfig, QueueMode, OverflowPolicy, OverflowConfig, DebounceBufferConfig, FollowupConfig, PriorityLaneConfig, LaneAssignmentConfig, StreamingConfig, PerChannelStreamingConfig, TypingMode, ChunkMode, DeliveryMirrorConfig, DeliveryQueueConfig, DeliveryTimingConfig, DeliveryTimingMode, CoalescerConfig, AutoReplyEngineConfig, GroupActivationMode, SendPolicyConfig, SendPolicyRule, SendAction, EnvelopeConfig, RetryConfig, WebhooksConfig, WebhookMappingConfig, AgentSecretsConfig, SecretsConfig, ConfigError, ConfigErrorCode, FieldMetadata, PartialValidationResult, ConfigGitManager, GitCommitMetadata, HistoryEntry, GitManagerDeps, ExecGitFn, EnvValueWarning, LifecycleReactionsConfig, LifecycleReactionsTimingConfig, SenderTrustDisplayConfig, DocumentationConfig, DocumentationLink, ImageGenerationConfig, NotificationConfig, VerbosityConfig, VerbosityLevel, VerbosityOverride, ContextEngineConfig, BackgroundTasksConfig, MemoryReviewConfig, UserModel, ModelCost, OperationModelEntry, OperationModels, ModelOperationType, } from "../config/index.js";

package/node_modules/@comis/core/dist/exports/config.js

@@ -1,3 +1,3 @@
 // SPDX-License-Identifier: Apache-2.0
 // @comis/core exports — Config (layered configuration with Zod validation)
-export { AppConfigSchema, AgentConfigSchema, AgentsMapSchema, BudgetConfigSchema, CircuitBreakerConfigSchema, DmScopeConfigSchema, ElevatedReplyConfigSchema, ModelRoutesSchema, HeartbeatConfigSchema, HeartbeatTargetSchema, PerAgentConfigSchema, PerAgentCronConfigSchema, PerAgentHeartbeatConfigSchema, PerAgentSchedulerConfigSchema, PruningConfigSchema, RagConfigSchema, ResetPolicyOverrideSchema, RoutingBindingSchema, RoutingConfigSchema, SessionResetPolicySchema, TracingConfigSchema, ChannelConfigSchema, ChannelEntrySchema, ChannelHealthCheckSchema, MemoryConfigSchema, CompactionConfigSchema, RetentionConfigSchema, SecurityConfigSchema, PermissionConfigSchema, ActionConfirmationConfigSchema, AgentToAgentConfigSchema, SkillsConfigSchema, DaemonConfigSchema, LoggingConfigSchema, TracingDefaultsSchema, ConfigWebhookSchema, SchedulerConfigSchema, GatewayConfigSchema, GatewayTlsConfigSchema, GatewayTokenSchema, GatewayRateLimitSchema, IntegrationsConfigSchema, BraveSearchConfigSchema, McpServerEntrySchema, McpConfigSchema, TranscriptionConfigSchema, TtsConfigSchema, TtsAutoModeSchema, ElevenLabsVoiceSettingsSchema, TtsOutputFormatSchema, ImageAnalysisConfigSchema, VisionScopeRuleSchema, VisionConfigSchema, LinkUnderstandingConfigSchema, MediaConfigSchema, DOCUMENT_MIME_WHITELIST, FileExtractionConfigSchema, AutoReplyRuleSchema, AutoReplyConfigSchema, MonitoringConfigSchema, PluginsConfigSchema, PluginEntrySchema, QueueConfigSchema, QueueModeSchema, OverflowPolicySchema, PerChannelQueueConfigSchema, OverflowConfigSchema, DebounceBufferConfigSchema, FollowupConfigSchema, PriorityLaneConfigSchema, LaneAssignmentConfigSchema, StreamingConfigSchema, PerChannelStreamingConfigSchema, TypingModeSchema, ChunkModeSchema, DeliveryMirrorConfigSchema, DeliveryQueueConfigSchema, DeliveryTimingConfigSchema, DeliveryTimingModeSchema, CoalescerConfigSchema, AutoReplyEngineConfigSchema, GroupActivationModeSchema, SendPolicyConfigSchema, SendPolicyRuleSchema, SendActionSchema, EnvelopeConfigSchema, RetryConfigSchema, WebhooksConfigSchema, WebhookMappingConfigSchema, WebhookMappingMatchSchema, AgentSecretsConfigSchema, SecretsConfigSchema, DocumentationConfigSchema, DocumentationLinkSchema, ImageGenerationConfigSchema, NotificationConfigSchema, VerbosityConfigSchema, VerbosityLevelSchema, VerbosityOverrideSchema, ContextEngineConfigSchema, BackgroundTasksConfigSchema, MemoryReviewConfigSchema, UserModelSchema, ModelCostSchema, OperationModelEntrySchema, OperationModelsSchema, substituteEnvVars, warnSuspiciousEnvValues, loadConfigFile, validateConfig, deepMerge, mergeLayered, loadLayered, IMMUTABLE_CONFIG_PREFIXES, MUTABLE_CONFIG_OVERRIDES, isImmutableConfigPath, matchesOverridePattern, getMutableOverridesForSection, getConfigSchema, getConfigSections, getFieldMetadata, validatePartial, createConfigGitManager, checkApprovalsConfig, } from "../config/index.js";
+export { AppConfigSchema, AgentConfigSchema, AgentsMapSchema, BudgetConfigSchema, CircuitBreakerConfigSchema, DmScopeConfigSchema, ElevatedReplyConfigSchema, ModelRoutesSchema, HeartbeatConfigSchema, HeartbeatTargetSchema, PerAgentConfigSchema, PerAgentCronConfigSchema, PerAgentHeartbeatConfigSchema, PerAgentSchedulerConfigSchema, PruningConfigSchema, RagConfigSchema, ResetPolicyOverrideSchema, RoutingBindingSchema, RoutingConfigSchema, SessionResetPolicySchema, TracingConfigSchema, ChannelConfigSchema, ChannelEntrySchema, ChannelHealthCheckSchema, MemoryConfigSchema, CompactionConfigSchema, RetentionConfigSchema, SecurityConfigSchema, PermissionConfigSchema, ActionConfirmationConfigSchema, AgentToAgentConfigSchema, SkillsConfigSchema, DaemonConfigSchema, LoggingConfigSchema, TracingDefaultsSchema, ConfigWebhookSchema, SchedulerConfigSchema, GatewayConfigSchema, GatewayTlsConfigSchema, GatewayTokenSchema, GatewayRateLimitSchema, IntegrationsConfigSchema, BraveSearchConfigSchema, McpServerEntrySchema, McpConfigSchema, TranscriptionConfigSchema, TtsConfigSchema, TtsAutoModeSchema, ElevenLabsVoiceSettingsSchema, TtsOutputFormatSchema, ImageAnalysisConfigSchema, VisionScopeRuleSchema, VisionConfigSchema, LinkUnderstandingConfigSchema, MediaConfigSchema, DOCUMENT_MIME_WHITELIST, FileExtractionConfigSchema, AutoReplyRuleSchema, AutoReplyConfigSchema, MonitoringConfigSchema, PluginsConfigSchema, PluginEntrySchema, QueueConfigSchema, QueueModeSchema, OverflowPolicySchema, PerChannelQueueConfigSchema, OverflowConfigSchema, DebounceBufferConfigSchema, FollowupConfigSchema, PriorityLaneConfigSchema, LaneAssignmentConfigSchema, StreamingConfigSchema, PerChannelStreamingConfigSchema, TypingModeSchema, ChunkModeSchema, DeliveryMirrorConfigSchema, DeliveryQueueConfigSchema, DeliveryTimingConfigSchema, DeliveryTimingModeSchema, CoalescerConfigSchema, AutoReplyEngineConfigSchema, GroupActivationModeSchema, SendPolicyConfigSchema, SendPolicyRuleSchema, SendActionSchema, EnvelopeConfigSchema, RetryConfigSchema, WebhooksConfigSchema, WebhookMappingConfigSchema, WebhookMappingMatchSchema, AgentSecretsConfigSchema, SecretsConfigSchema, DocumentationConfigSchema, DocumentationLinkSchema, ImageGenerationConfigSchema, NotificationConfigSchema, VerbosityConfigSchema, VerbosityLevelSchema, VerbosityOverrideSchema, ContextEngineConfigSchema, BackgroundTasksConfigSchema, MemoryReviewConfigSchema, UserModelSchema, ModelCostSchema, OperationModelEntrySchema, OperationModelsSchema, substituteEnvVars, warnSuspiciousEnvValues, loadConfigFile, validateConfig, deepMerge, mergeLayered, loadLayered, IMMUTABLE_CONFIG_PREFIXES, MUTABLE_CONFIG_OVERRIDES, isImmutableConfigPath, matchesOverridePattern, getMutableOverridesForSection, MANAGED_SECTIONS, getManagedSectionRedirect, formatRedirectHint, getConfigSchema, getConfigSections, getFieldMetadata, validatePartial, createConfigGitManager, checkApprovalsConfig, } from "../config/index.js";

package/node_modules/@comis/core/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/core",
   "private": true,
-  "version": "1.0.19",
+  "version": "1.0.23",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Core domain types, ports, event bus, security, and config for Comis",

package/node_modules/@comis/daemon/dist/daemon.js

@@ -182,13 +182,20 @@ export async function main(overrides = {}) {
     // better-sqlite3 'bindings' module fails fast with a clear repair hint
     // instead of cascading into a systemd restart loop.
     await _preflightDoctor(exitFn);
-    // 0. Load secrets from .env
-    const envPath = safePath(safePath(os.homedir(), ".comis"), ".env");
-    loadEnvFile(envPath);
-    // 0.5. Decrypt secrets, merge with env, scrub process.env
+    // 0. Resolve data directory, then load secrets from <dataDir>/.env.
+    // The env file always lives alongside the data dir, so it follows
+    // COMIS_DATA_DIR — set to /data inside the Docker container (matches
+    // the compose mount of ${COMIS_ENV_FILE:-~/.comis/.env}:/data/.env:ro),
+    // unset on bare-metal so it falls back to ~/.comis/.env. This is what
+    // makes the legacy "credentials in a flat .env file" workflow the
+    // default for both deployment modes; secrets.db is opt-in via
+    // SECRETS_MASTER_KEY.
     // eslint-disable-next-line no-restricted-syntax -- process.env access needed before SecretManager is initialized
     const dataDir = process.env["COMIS_DATA_DIR"]
         ?? safePath(os.homedir(), ".comis");
+    const envPath = safePath(dataDir, ".env");
+    loadEnvFile(envPath);
+    // 0.5. Decrypt secrets, merge with env, scrub process.env
     // Scan and correct permissions on known sensitive files
     const permissionCorrections = hardenDataDirPermissions(dataDir);
     const secretsBootResult = _setupSecrets({

package/node_modules/@comis/daemon/dist/rpc/config-handlers.js

@@ -8,7 +8,7 @@
  * Extracted from daemon.ts rpcCallInner switch block
  * @module
  */
-import { isImmutableConfigPath, getConfigSchema, getConfigSections, deepMerge, AppConfigSchema, redactConfigSecrets, warnSuspiciousEnvValues, } from "@comis/core";
+import { isImmutableConfigPath, getConfigSchema, getConfigSections, deepMerge, AppConfigSchema, redactConfigSecrets, warnSuspiciousEnvValues, getManagedSectionRedirect, formatRedirectHint, } from "@comis/core";
 import { suppressError } from "@comis/shared";
 import { stringify as yamlStringify } from "yaml";
 import { existsSync, readFileSync, writeFileSync, mkdirSync, renameSync } from "node:fs";
@@ -406,10 +406,18 @@ export function createConfigHandlers(deps) {
             const coercedValue = coerceConfigValue(value, subSchema);
             const ctx = params._context;
             try {
-                // Check immutable paths
+                // Check immutable paths.
+                // Backstop for direct-RPC clients (web UI, CLI). The gateway tool
+                // pre-flight and bridge metadata validator catch this earlier for
+                // LLM tool calls -- this path is reached when those layers are
+                // bypassed. Emit the same redirect hint so all clients see
+                // identical, model-agnostic recovery instructions (quick-260425-t40).
                 if (isImmutableConfigPath(section, key)) {
-                    throw new Error(`Config path "${key ? `${section}.${key}` : section}" is immutable and cannot be modified at runtime. ` +
-                        "This setting requires manual operator intervention via config files.");
+                    const redirect = getManagedSectionRedirect(section, key);
+                    const suffix = redirect
+                        ? ` ${formatRedirectHint(redirect)}`
+                        : " This setting requires manual operator intervention via config files.";
+                    throw new Error(`Config path "${key ? `${section}.${key}` : section}" is immutable and cannot be modified at runtime.${suffix}`);
                 }
                 // Build patch object (use coerced value for the actual data, keep original for audit)
                 let patch;
@@ -582,10 +590,15 @@ export function createConfigHandlers(deps) {
                 if (!(section in deps.container.config)) {
                     throw new Error(`Unknown config section: "${section}". Valid sections: ${getConfigSections().join(", ")}.`);
                 }
-                // Check immutable paths -- entire section is being replaced
+                // Check immutable paths -- entire section is being replaced.
+                // Backstop for direct-RPC clients; LLM tool calls hit the same redirect
+                // earlier via gateway-tool / bridge validator (quick-260425-t40).
                 if (isImmutableConfigPath(section)) {
-                    throw new Error(`Config section "${section}" is immutable and cannot be replaced at runtime. ` +
-                        "This section requires manual operator intervention via config files.");
+                    const redirect = getManagedSectionRedirect(section);
+                    const suffix = redirect
+                        ? ` ${formatRedirectHint(redirect)}`
+                        : " This section requires manual operator intervention via config files.";
+                    throw new Error(`Config section "${section}" is immutable and cannot be replaced at runtime.${suffix}`);
                 }
                 // Build replacement: replace the section entirely (NOT deep merge)
                 const currentConfig = structuredClone(deps.container.config);

package/node_modules/@comis/daemon/dist/rpc/session-handlers.js

@@ -181,6 +181,28 @@ function loadJsonlSession(filePath) {
     }
 }
 // ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+/**
+ * Collect available session keys from all sources (SQLite, JSONL, workspace)
+ * for inclusion in "session not found" error messages.
+ */
+function collectAvailableSessionKeys(deps) {
+    const keys = [];
+    for (const s of deps.sessionStore.listDetailed()) {
+        keys.push(s.sessionKey);
+    }
+    if (deps.defaultWorkspaceDir) {
+        const existing = new Set(keys);
+        for (const ws of scanWorkspaceSessions(deps.defaultWorkspaceDir)) {
+            if (!existing.has(ws.sessionKey)) {
+                keys.push(ws.sessionKey);
+            }
+        }
+    }
+    return keys;
+}
+// ---------------------------------------------------------------------------
 // Factory
 // ---------------------------------------------------------------------------
 /**
@@ -428,7 +450,11 @@ export function createSessionHandlers(deps) {
                 }
             }
             if (!data) {
-                throw new Error(`Session not found: ${sessionKey}`);
+                const available = collectAvailableSessionKeys(deps);
+                const hint = available.length > 0
+                    ? `. Available session keys: ${available.join(", ")}`
+                    : ". Use action 'list' to discover available session keys";
+                throw new Error(`Session not found: ${sessionKey}${hint}`);
             }
             // Parse session key for metadata
             const parsed = parseFormattedSessionKey(sessionKey);

package/node_modules/@comis/daemon/dist/wiring/setup-gateway.d.ts

@@ -14,6 +14,28 @@ import type { MemoryApi, SqliteMemoryAdapter, createEmbeddingQueue, createSessio
 import type { RpcCall } from "@comis/skills";
 import { createGatewayServer, WsConnectionManager, type GatewayServerHandle } from "@comis/gateway";
 import type { RpcDispatchDeps } from "../rpc/rpc-dispatch.js";
+/**
+ * Build the structured log fields for the gateway "Agent execution requested"
+ * INFO line. Replaces the previous behavior of logging the first 200 chars
+ * of the raw user message, which violated AGENTS.md §2.2 (no message bodies
+ * in logs at any level). Emits message length plus a short SHA-256 prefix
+ * for correlation, never the body itself.
+ *
+ * @param input.agentId       Resolved agent ID (already trust-derived).
+ * @param input.message       Raw user message (may be empty / undefined).
+ * @param input.connectionId  Optional WebSocket connection ID.
+ * @returns Object suitable for `logger.info(obj, "Agent execution requested")`.
+ */
+export declare function buildExecutionRequestedLogFields(input: {
+    agentId: string;
+    message: string | undefined;
+    connectionId: string | undefined;
+}): {
+    agentId: string;
+    messageLen: number;
+    messageHash?: string;
+    connectionId?: string;
+};
 /** All services produced by the RPC bridge setup phase. */
 export interface RpcBridgeResult {
     /** The rpcCall function usable immediately (delegates to inner dispatch once wired). */

package/node_modules/@comis/daemon/dist/wiring/setup-gateway.js

@@ -15,10 +15,39 @@ import { suppressError } from "@comis/shared";
 import { readFileSync, existsSync } from "node:fs";
 import { parseSlashCommand, createCommandHandler, createGreetingGenerator, } from "@comis/agent";
 import { createDynamicMethodRouter, createRpcAdapters, createTokenStore, WsConnectionManager, } from "@comis/gateway";
-import { randomUUID } from "node:crypto";
+import { createHash, randomUUID } from "node:crypto";
 import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { createRpcDispatch, classifyRpcError } from "../rpc/rpc-dispatch.js";
+// ===========================================================================
+// Execution-request log redaction helper
+// ===========================================================================
+/**
+ * Build the structured log fields for the gateway "Agent execution requested"
+ * INFO line. Replaces the previous behavior of logging the first 200 chars
+ * of the raw user message, which violated AGENTS.md §2.2 (no message bodies
+ * in logs at any level). Emits message length plus a short SHA-256 prefix
+ * for correlation, never the body itself.
+ *
+ * @param input.agentId       Resolved agent ID (already trust-derived).
+ * @param input.message       Raw user message (may be empty / undefined).
+ * @param input.connectionId  Optional WebSocket connection ID.
+ * @returns Object suitable for `logger.info(obj, "Agent execution requested")`.
+ */
+export function buildExecutionRequestedLogFields(input) {
+    const raw = input.message ?? "";
+    const fields = {
+        agentId: input.agentId,
+        messageLen: raw.length,
+    };
+    if (raw.length > 0) {
+        fields.messageHash = createHash("sha256").update(raw).digest("hex").slice(0, 12);
+    }
+    if (input.connectionId !== undefined) {
+        fields.connectionId = input.connectionId;
+    }
+    return fields;
+}
 /**
  * Create the rpcCall wrapper and deferred dispatch mechanism.
  * The returned rpcCall can be passed to setupTools immediately. After
@@ -296,14 +325,11 @@ export async function setupGateway(deps) {
             // Admin scope or wildcard -> admin trust; otherwise -> user trust (fail-closed).
             const trustLevel = deriveTrustLevel(params.scopes);
             gatewayLogger.debug({ scopes: params.scopes, trustLevel, agentId: execAgentId }, "Trust level derived from token scopes");
-            const rawMsg = params.message ?? "";
-            const truncated = rawMsg.length > 200;
-            gatewayLogger.info({
+            gatewayLogger.info(buildExecutionRequestedLogFields({
                 agentId: execAgentId,
-                message: rawMsg.slice(0, 200),
-                ...(truncated && { messageTruncated: true }),
-                ...(connectionId && { connectionId }),
-            }, "Agent execution requested");
+                message: params.message,
+                connectionId,
+            }), "Agent execution requested");
             // Link understanding preprocessing: enrich message text with fetched URL content
             const enrichedText = await preprocessMessageText(params.message);
             const msg = {

package/node_modules/@comis/daemon/dist/wiring/setup-tools.js

@@ -28,6 +28,11 @@ export function setupTools(deps) {
     const { rpcCall, agents, defaultAgentId, workspaceDirs, defaultWorkspaceDir, dataDir, secretManager, platformSecretNames, eventBus, skillsLogger, linkRunner, approvalGate, subprocessEnv, credentialMappingStore, onSuspiciousContent, mcpClientManager, sandboxProvider, sessionTrackerRegistry, } = deps;
     /** Per-agent ProcessRegistry instances for background process lifecycle management. */
     const processRegistries = new Map();
+    /** Agents we've already logged the no-sandbox WARN for. Per-agent assembly
+     * runs on every session/heartbeat/cron tick; without this guard the WARN
+     * repeats on every LLM call even though the underlying state is fixed at
+     * daemon startup (detectSandboxProvider runs once). */
+    const warnedNoSandboxAgents = new Set();
     function getOrCreateRegistry(agentId) {
         let registry = processRegistries.get(agentId);
         if (!registry) {
@@ -238,7 +243,15 @@ export function setupTools(deps) {
                 }
                 : undefined;
             if (!sandboxCfg && skillsConfig.execSandbox.enabled === "always") {
-                skillsLogger.warn({ agentId, hint: "Sandbox enabled in config but no provider available -- exec tool will run without OS sandbox", errorKind: "config" }, "Exec tool running without OS sandbox");
+                if (warnedNoSandboxAgents.has(agentId)) {
+                    // Already warned for this agent at WARN level — drop to DEBUG so
+                    // every per-call assembly doesn't re-log the same fact.
+                    skillsLogger.debug({ agentId }, "Exec tool running without OS sandbox (already warned at startup; per-call DEBUG)");
+                }
+                else {
+                    skillsLogger.warn({ agentId, hint: "Sandbox enabled in config but no provider available -- exec tool will run without OS sandbox", errorKind: "config" }, "Exec tool running without OS sandbox");
+                    warnedNoSandboxAgents.add(agentId);
+                }
             }
             // Exec tool -- always instantiated; builtinTools ceiling applied after profile filtering
             {

package/node_modules/@comis/daemon/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/daemon",
   "private": true,
-  "version": "1.0.19",
+  "version": "1.0.23",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Background daemon and orchestrator for the Comis platform",

package/node_modules/@comis/gateway/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/gateway",
   "private": true,
-  "version": "1.0.19",
+  "version": "1.0.23",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "HTTP, JSON-RPC, and WebSocket gateway for Comis",

package/node_modules/@comis/infra/dist/logging/log-fields.d.ts

@@ -119,10 +119,10 @@ export interface LogFields {
     closeReason: string;
     /** Semantic categorization of the WebSocket close code (e.g., "normal", "abnormal", "no-status"). */
     closeType: string;
-    /** Whether the logged message text was truncated from the original. */
-    messageTruncated: boolean;
     /** Input message character length. */
     messageLen: number;
+    /** First 12 hex chars of SHA-256 of input message; omitted when empty. Stable per content. */
+    messageHash: string;
     /** Output response character length. */
     responseLen: number;
     /** Flat input token count for easy aggregation. */

package/node_modules/@comis/infra/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/infra",
   "private": true,
-  "version": "1.0.19",
+  "version": "1.0.23",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Structured logging infrastructure for Comis",

package/node_modules/@comis/memory/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/memory",
   "private": true,
-  "version": "1.0.19",
+  "version": "1.0.23",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "SQLite memory, embeddings, and RAG storage for Comis agents",

package/node_modules/@comis/scheduler/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/scheduler",
   "private": true,
-  "version": "1.0.19",
+  "version": "1.0.23",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Task scheduling and cron management for Comis",

package/node_modules/@comis/shared/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/shared",
   "private": true,
-  "version": "1.0.19",
+  "version": "1.0.23",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Shared types and utilities for the Comis platform",

package/node_modules/@comis/skills/dist/bridge/tool-metadata-registry.js

@@ -11,7 +11,7 @@
  *
  * @module
  */
-import { registerToolMetadata, isImmutableConfigPath, getMutableOverridesForSection } from "@comis/core";
+import { registerToolMetadata, isImmutableConfigPath, getMutableOverridesForSection, getManagedSectionRedirect, formatRedirectHint, } from "@comis/core";
 import { validateExecCommand } from "../builtin/exec-security.js";
 import { GATEWAY_ACTIONS } from "../builtin/platform/gateway-tool.js";
 export function registerAllToolMetadata() {
@@ -149,25 +149,40 @@ export function registerAllToolMetadata() {
             return undefined;
         },
     });
-    // Gateway tool -- action enum + immutable path rejection for patch.
+    // Gateway tool -- action enum + immutable path rejection for patch and apply.
     // Whitelist is derived from the tool's exported GATEWAY_ACTIONS tuple so
     // bridge + handler cannot drift (quick-260420-iv2 regression fix).
+    // When the rejected section has a dedicated *_manage tool, the message
+    // includes a parameter-correct redirect via formatRedirectHint() so any
+    // LLM (Opus/Sonnet/Haiku, GPT-5, Gemini, Mistral, etc.) can self-recover
+    // without model-specific prompting (quick-260425-t40).
     registerToolMetadata("gateway", {
         validateInput: (params) => {
             const action = typeof params.action === "string" ? params.action : undefined;
             if (!action || !GATEWAY_ACTIONS.includes(action)) {
                 return `Invalid action: "${action ?? ""}". Valid: ${GATEWAY_ACTIONS.join(", ")}`;
             }
-            // Only check immutability for patch action (reads must succeed on immutable paths)
+            const section = typeof params.section === "string" ? params.section : undefined;
+            // Only check immutability for mutating actions (reads must succeed on immutable paths).
             if (action === "patch") {
-                const section = typeof params.section === "string" ? params.section : undefined;
                 const key = typeof params.key === "string" ? params.key : undefined;
                 if (section && isImmutableConfigPath(section, key)) {
                     const mutablePaths = getMutableOverridesForSection(section, key);
-                    const pathHint = mutablePaths.length > 0
-                        ? ` Patchable: ${mutablePaths.join(", ")}`
-                        : "";
-                    return `Cannot patch immutable config path: ${section}${key ? "." + key : ""}.${pathHint}`;
+                    const redirect = getManagedSectionRedirect(section, key);
+                    const fullPath = `${section}${key ? "." + key : ""}`;
+                    const suffix = redirect
+                        ? ` ${formatRedirectHint(redirect, mutablePaths)}`
+                        : mutablePaths.length > 0
+                            ? ` Patchable: ${mutablePaths.join(", ")}.`
+                            : "";
+                    return `Cannot patch immutable config path: ${fullPath}.${suffix}`;
+                }
+            }
+            if (action === "apply") {
+                if (section && isImmutableConfigPath(section)) {
+                    const redirect = getManagedSectionRedirect(section);
+                    const suffix = redirect ? ` ${formatRedirectHint(redirect)}` : "";
+                    return `Cannot apply to immutable config section: ${section}.${suffix}`;
                 }
             }
             return undefined;

package/node_modules/@comis/skills/dist/builtin/platform/gateway-tool.d.ts

@@ -21,7 +21,7 @@ import type { RpcCall } from "./cron-tool.js";
 export declare const GATEWAY_ACTIONS: readonly ["read", "patch", "apply", "restart", "schema", "status", "history", "diff", "rollback", "env_set", "env_list"];
 export type GatewayAction = typeof GATEWAY_ACTIONS[number];
 declare const GatewayToolParams: import("@sinclair/typebox").TObject<{
-    action: import("@sinclair/typebox").TUnion<import("@sinclair/typebox").TLiteral<"status" | "read" | "patch" | "apply" | "restart" | "schema" | "history" | "diff" | "rollback" | "env_set" | "env_list">[]>;
+    action: import("@sinclair/typebox").TUnion<import("@sinclair/typebox").TLiteral<"status" | "read" | "patch" | "diff" | "apply" | "restart" | "schema" | "history" | "rollback" | "env_set" | "env_list">[]>;
     section: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     key: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     value: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnknown>;

package/node_modules/@comis/skills/dist/builtin/platform/gateway-tool.js

@@ -10,7 +10,7 @@
  * @module
  */
 import { Type } from "@sinclair/typebox";
-import { tryGetContext, isImmutableConfigPath, MUTABLE_CONFIG_OVERRIDES, matchesOverridePattern, getMutableOverridesForSection } from "@comis/core";
+import { tryGetContext, isImmutableConfigPath, MUTABLE_CONFIG_OVERRIDES, matchesOverridePattern, getMutableOverridesForSection, getManagedSectionRedirect, formatRedirectHint, } from "@comis/core";
 import { readStringParam, throwToolError, createActionGate, } from "./tool-helpers.js";
 import { createMultiActionDispatchTool } from "./messaging-factory.js";
 // ---------------------------------------------------------------------------
@@ -123,19 +123,18 @@ export function createGatewayTool(rpcCall) {
                 case "patch": {
                     const section = readStringParam(p, "section");
                     const key = readStringParam(p, "key");
-                    // Pre-gate immutability check: reject before asking for confirmation
+                    // Pre-gate immutability check: reject before asking for confirmation.
+                    // When the section has a dedicated *_manage tool, redirect there with
+                    // a parameter-correct example call so the LLM can self-recover without
+                    // needing model-specific prompting.
                     if (isImmutableConfigPath(section, key)) {
                         const mutablePaths = getMutableOverridesForSection(section, key);
-                        let hint;
-                        if (mutablePaths.length > 0) {
-                            hint = `Patchable paths under "${section}": ${mutablePaths.join(", ")}`;
-                        }
-                        else if (section === "agents") {
-                            hint = `Key must start with the agent ID. Use action="read" section="agents" first to see agent IDs, then patch as e.g. key="<agentId>.model"`;
-                        }
-                        else {
-                            hint = "This section has no runtime-patchable paths.";
-                        }
+                        const redirect = getManagedSectionRedirect(section, key);
+                        const hint = redirect
+                            ? formatRedirectHint(redirect, mutablePaths)
+                            : mutablePaths.length > 0
+                                ? `Patchable paths under "${section}": ${mutablePaths.join(", ")}.`
+                                : "This section has no runtime-patchable paths and no dedicated management tool.";
                         throwToolError("permission_denied", `Cannot patch immutable config path: ${section}.${key}.`, { hint });
                     }
                     // Skip confirmation gate for known mutable override paths (no round-trip needed)
@@ -183,9 +182,14 @@ export function createGatewayTool(rpcCall) {
                 }
                 case "apply": {
                     const section = readStringParam(p, "section");
-                    // Pre-gate immutability check: reject before asking for confirmation
+                    // Pre-gate immutability check: reject before asking for confirmation.
+                    // Redirect to the dedicated *_manage tool when one exists for this section.
                     if (isImmutableConfigPath(section)) {
-                        throwToolError("permission_denied", `Cannot apply to immutable config section: ${section}.`, { hint: "Security-sensitive sections cannot be replaced at runtime." });
+                        const redirect = getManagedSectionRedirect(section);
+                        const hint = redirect
+                            ? formatRedirectHint(redirect)
+                            : "Security-sensitive sections cannot be replaced at runtime.";
+                        throwToolError("permission_denied", `Cannot apply to immutable config section: ${section}.`, { hint });
                     }
                     const gate = applyGate(p);
                     if (gate.requiresConfirmation) {

package/node_modules/@comis/skills/dist/builtin/platform/unified-session-tool.js

@@ -36,7 +36,7 @@ const UnifiedSessionParams = Type.Object({
     ], { description: "Filter by message role: 'all' (default), 'user', 'assistant', 'tool' (action: search)" })),
     summarize: Type.Optional(Type.Boolean({ description: "Summarize matched sessions using LLM (default: true when query provided) (action: search)" })),
     // history params
-    session_key: Type.Optional(Type.String({ description: "Target session key to retrieve history for (action: history)" })),
+    session_key: Type.Optional(Type.String({ description: "Session key for action: history. Use action 'list' first to discover available keys. Format: {tenantId}:{filename}, e.g. 'default:678314278~peer~678314278'" })),
     offset: Type.Optional(Type.Integer({ description: "Pagination offset (default: 0) (action: history)" })),
     // shared params
     limit: Type.Optional(Type.Integer({ description: "Maximum results to return (action: search default 10 max 30, action: history default 20)" })),

package/node_modules/@comis/skills/dist/builtin/sandbox/detect-provider.d.ts

@@ -10,6 +10,7 @@
 import type { SandboxProvider } from "./types.js";
 /** Minimal logger interface for sandbox detection. */
 export interface DetectLogger {
+    info(obj: Record<string, unknown>, msg: string): void;
     warn(obj: Record<string, unknown>, msg: string): void;
 }
 /**