comisai 1.0.24 → 1.0.26

package/node_modules/@comis/core/dist/config/layered.js

@@ -73,9 +73,20 @@ export function mergeLayered(layers) {
  * This supports the common pattern: defaults.yaml < config.yaml < config.local.yaml
  *
  * If any file fails to load, returns the error immediately.
+ *
+ * `envLayer` (when provided) is prepended to the layer sequence so it sits
+ * between Zod schema defaults and YAML files in precedence order:
+ *   defaults < envLayer < config files
+ * Explicit user config in YAML always wins over env-derived values, which
+ * preserves secure-by-default semantics for security-sensitive fields like
+ * `gateway.host` — an inherited env var can never silently broaden a bind
+ * the operator pinned in config.yaml.
  */
 export function loadLayered(configPaths, options) {
     const layers = [];
+    if (options?.envLayer && Object.keys(options.envLayer).length > 0) {
+        layers.push(options.envLayer);
+    }
     for (const configPath of configPaths) {
         const result = loadConfigFile(configPath, options?.getSecret ? { getSecret: options.getSecret } : undefined);
         if (!result.ok) {

package/node_modules/@comis/core/dist/config/managed-sections.d.ts

@@ -35,6 +35,29 @@ export interface ManagedSectionRedirect {
      * already present in config.
      */
     fullyManaged: boolean;
+    /**
+     * Compact schema fragment so the LLM can call the tool without a separate
+     * discover_tools round-trip. Populated when the action enum + required
+     * fields fit in < 20 lines of hint text. Verified against the tool's
+     * TypeBox parameter schema as of this commit.
+     *
+     * Bug B (260428-gj6): production trace c7b91328 showed the agent burning
+     * ~30s × 4 LLM calls re-loading the agents_manage schema after an
+     * immutable-path rejection. Surfacing the fragment inline closes that
+     * round-trip tax.
+     */
+    schemaFragment?: {
+        /** Valid `action` enum values (pinned to the tool's TypeBox Union literals). */
+        actions: readonly string[];
+        /**
+         * Required field names per action -- only entries that are strictly
+         * required by the tool's handler (omitting Type.Optional fields with
+         * sensible defaults). Omit the whole property when no action has
+         * required-beyond-action fields (e.g., channels_manage operates on
+         * existing entries only).
+         */
+        requiredByAction?: Record<string, readonly string[]>;
+    };
 }
 /**
  * Registered managed sections.
@@ -55,10 +78,26 @@ export declare function getManagedSectionRedirect(section: string | undefined, k
 /**
  * Format an LLM-readable hint for an immutability rejection.
  *
- * The output uses an explicit two-step "Recovery:" framing because smaller
- * models (Haiku 4.5, Gemini Flash, GPT-OSS-20b) parse numbered steps more
- * reliably than prose. The example call is JSON-stringified compactly so it
- * can be copy-pasted into the next tool invocation.
+ * Output is a single-step "Recovery: call <tool>(<example>)." line: the
+ * dedicated `*_manage` tool auto-loads on first direct invocation under
+ * every supported provider path:
+ *
+ * - Anthropic Sonnet/Opus 4.x: request-body-injector strips client-side
+ *   `discover_tools` from the payload and marks deferred tools
+ *   `defer_loading: true`; calling the tool by name auto-loads it.
+ * - Anthropic Haiku / OpenAI / xAI / Google: tools surface via the
+ *   client-side `discover_tools` corpus, but a stub-filter wraps deferred
+ *   entries so that calling the tool by name still works first try (the
+ *   stub forwards to the real tool and registers it as discovered).
+ *
+ * Naming `discover_tools` in the hint actively misleads Anthropic
+ * Sonnet/Opus 4.x because that tool is not in their payload (260428-oyc
+ * production repro: agent saw "Recovery: (1) call discover_tools(...)" and
+ * gave up, reporting "I don't have a discover_tools function"). The
+ * single-step framing works on every provider.
+ *
+ * The example call is JSON-stringified compactly so it can be copy-pasted
+ * verbatim into the next tool invocation.
  *
  * @param redirect - The matched managed-section entry
  * @param mutablePaths - Optional override paths for in-place patching of

package/node_modules/@comis/core/dist/config/managed-sections.js

@@ -36,6 +36,17 @@ export const MANAGED_SECTIONS = [
             args: [],
         },
         fullyManaged: true,
+        // Action enum pinned to mcp-manage-tool.ts TypeBox Union (lines 25-31).
+        // requiredByAction.connect captures the stdio-transport happy path
+        // (transport="sse"|"http" requires `url` instead of `command` -- the
+        // exampleArgs above documents the stdio shape, the schema fragment
+        // documents required fields for that same shape).
+        schemaFragment: {
+            actions: ["list", "status", "connect", "disconnect", "reconnect"],
+            requiredByAction: {
+                connect: ["name", "transport", "command"],
+            },
+        },
     },
     {
         pathPrefix: "gateway.tokens",
@@ -44,6 +55,43 @@ export const MANAGED_SECTIONS = [
         // Verified against tokens-manage-tool.ts TokensManageToolParams.
         exampleArgs: { action: "create", token_id: "<token-id>", scopes: ["rpc", "ws"] },
         fullyManaged: true,
+        // Action enum pinned to tokens-manage-tool.ts TypeBox Union (lines 25-31).
+        // token_id is genuinely Type.Optional (auto-generated when omitted, per
+        // the schema description at L36); only `scopes` is strictly required for
+        // create.
+        schemaFragment: {
+            actions: ["list", "create", "revoke", "rotate"],
+            requiredByAction: {
+                create: ["scopes"],
+            },
+        },
+    },
+    {
+        pathPrefix: "providers",
+        tool: "providers_manage",
+        description: "Manage LLM providers (list, get, create, update, delete, enable, disable).",
+        // Verified against providers-manage-tool.ts ProvidersManageToolParams.
+        exampleArgs: {
+            action: "create",
+            provider_id: "<any-name>",
+            config: {
+                type: "<sdk-type>",
+                name: "<display-name>",
+                baseUrl: "<api-base-url>",
+                apiKeyName: "<SECRET_KEY_NAME>",
+                models: [{ id: "<model-id>" }],
+            },
+        },
+        fullyManaged: true,
+        // Action enum pinned to providers-manage-tool.ts TypeBox Union.
+        // provider_id + config are required for create; other actions require
+        // only provider_id or nothing (list).
+        schemaFragment: {
+            actions: ["list", "get", "create", "update", "delete", "enable", "disable"],
+            requiredByAction: {
+                create: ["provider_id", "config"],
+            },
+        },
     },
     {
         pathPrefix: "channels",
@@ -52,6 +100,12 @@ export const MANAGED_SECTIONS = [
         // No exampleArgs -- no create-equivalent action; channels are configured
         // via operator config + media-setting toggles only.
         fullyManaged: false,
+        // Action enum pinned to channels-manage-tool.ts TypeBox Union (lines 32-37).
+        // No requiredByAction -- channels_manage operates on existing entries; all
+        // fields beyond `action` are looked up from config or optional.
+        schemaFragment: {
+            actions: ["list", "get", "enable", "disable", "restart", "configure"],
+        },
     },
     {
         pathPrefix: "agents",
@@ -69,6 +123,17 @@ export const MANAGED_SECTIONS = [
             },
         },
         fullyManaged: true,
+        // Action enum pinned to agents-manage-tool.ts TypeBox Union (lines 27-32).
+        // agent_id is required on every action (Type.String, not Optional);
+        // config is required for create (the action handler rejects create
+        // without a config payload, even though the schema marks it Optional to
+        // accept the alternate JSON-string fallback shape).
+        schemaFragment: {
+            actions: ["create", "get", "update", "delete", "suspend", "resume"],
+            requiredByAction: {
+                create: ["agent_id", "config"],
+            },
+        },
     },
 ];
 /**
@@ -95,10 +160,26 @@ export function getManagedSectionRedirect(section, key) {
 /**
  * Format an LLM-readable hint for an immutability rejection.
  *
- * The output uses an explicit two-step "Recovery:" framing because smaller
- * models (Haiku 4.5, Gemini Flash, GPT-OSS-20b) parse numbered steps more
- * reliably than prose. The example call is JSON-stringified compactly so it
- * can be copy-pasted into the next tool invocation.
+ * Output is a single-step "Recovery: call <tool>(<example>)." line: the
+ * dedicated `*_manage` tool auto-loads on first direct invocation under
+ * every supported provider path:
+ *
+ * - Anthropic Sonnet/Opus 4.x: request-body-injector strips client-side
+ *   `discover_tools` from the payload and marks deferred tools
+ *   `defer_loading: true`; calling the tool by name auto-loads it.
+ * - Anthropic Haiku / OpenAI / xAI / Google: tools surface via the
+ *   client-side `discover_tools` corpus, but a stub-filter wraps deferred
+ *   entries so that calling the tool by name still works first try (the
+ *   stub forwards to the real tool and registers it as discovered).
+ *
+ * Naming `discover_tools` in the hint actively misleads Anthropic
+ * Sonnet/Opus 4.x because that tool is not in their payload (260428-oyc
+ * production repro: agent saw "Recovery: (1) call discover_tools(...)" and
+ * gave up, reporting "I don't have a discover_tools function"). The
+ * single-step framing works on every provider.
+ *
+ * The example call is JSON-stringified compactly so it can be copy-pasted
+ * verbatim into the next tool invocation.
  *
  * @param redirect - The matched managed-section entry
  * @param mutablePaths - Optional override paths for in-place patching of
@@ -109,10 +190,23 @@ export function formatRedirectHint(redirect, mutablePaths) {
     parts.push(`Use the "${redirect.tool}" tool: ${redirect.description}`);
     if (redirect.exampleArgs) {
         const example = JSON.stringify(redirect.exampleArgs);
-        parts.push(`Recovery: (1) call discover_tools("${redirect.tool}") to load the schema, then (2) call ${redirect.tool}(${example}).`);
+        parts.push(`Recovery: call ${redirect.tool}(${example}).`);
     }
     else {
-        parts.push(`Load it via discover_tools("${redirect.tool}") if not yet available.`);
+        parts.push(`Call ${redirect.tool} directly; it will auto-load on first invocation.`);
+    }
+    // Bug B (260428-gj6): inline the dedicated tool's action enum + required
+    // fields so the LLM can call it without a separate discover_tools round-
+    // trip. Positioned AFTER the Recovery example (so the example is the first
+    // thing the model sees) and BEFORE the mutablePaths block (which is the
+    // alternative path for already-existing entries).
+    if (redirect.schemaFragment) {
+        parts.push(`Tool actions: ${redirect.schemaFragment.actions.join(", ")}.`);
+        if (redirect.schemaFragment.requiredByAction) {
+            for (const [action, fields] of Object.entries(redirect.schemaFragment.requiredByAction)) {
+                parts.push(`Required fields for \`${action}\`: ${fields.join(", ")}.`);
+            }
+        }
     }
     if (mutablePaths && mutablePaths.length > 0) {
         parts.push(`For in-place updates of an entry that ALREADY exists, gateway/patch also accepts these specific paths: ${mutablePaths.join(", ")}.`);

package/node_modules/@comis/core/dist/config/schema-agent.d.ts

@@ -460,6 +460,19 @@ export declare const ContextEngineConfigSchema: z.ZodObject<{
     summaryModel: z.ZodOptional<z.ZodString>;
     /** Optional provider override for DAG summary generation. */
     summaryProvider: z.ZodOptional<z.ZodString>;
+    /** Post-batch continuation handler: when the LLM emits an empty final
+     *  turn after a successful tool batch, fire a directive followUp with
+     *  multi-shot retry. Replaces the legacy SEP one-shot completeness nudge
+     *  (whose enforcement role was superseded; SEP plan extraction + step
+     *  counting remain intact for observability). */
+    postBatchContinuation: z.ZodDefault<z.ZodObject<{
+        /** Master toggle. When false, handler returns
+         *  {recovered: false, outcome: "disabled"} without calling followUp. */
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        /** Maximum directive followUp attempts before falling through to L3
+         *  synthesis. 0 = disabled. */
+        maxRetries: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>>;
 }, z.core.$strict>;
 export type ContextEngineConfig = z.infer<typeof ContextEngineConfigSchema>;
 /**
@@ -1666,6 +1679,19 @@ export declare const PerAgentConfigSchema: z.ZodObject<{
         summaryModel: z.ZodOptional<z.ZodString>;
         /** Optional provider override for DAG summary generation. */
         summaryProvider: z.ZodOptional<z.ZodString>;
+        /** Post-batch continuation handler: when the LLM emits an empty final
+         *  turn after a successful tool batch, fire a directive followUp with
+         *  multi-shot retry. Replaces the legacy SEP one-shot completeness nudge
+         *  (whose enforcement role was superseded; SEP plan extraction + step
+         *  counting remain intact for observability). */
+        postBatchContinuation: z.ZodDefault<z.ZodObject<{
+            /** Master toggle. When false, handler returns
+             *  {recovered: false, outcome: "disabled"} without calling followUp. */
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            /** Maximum directive followUp attempts before falling through to L3
+             *  synthesis. 0 = disabled. */
+            maxRetries: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>>;
     }, z.core.$strict>>;
     sourceGate: z.ZodOptional<z.ZodObject<{
         /** Default byte cap for HTTP responses (matches DEFAULT_SOURCE_PROFILES.web_fetch.maxResponseBytes) */
@@ -2346,6 +2372,19 @@ export declare const AgentsMapSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
         summaryModel: z.ZodOptional<z.ZodString>;
         /** Optional provider override for DAG summary generation. */
         summaryProvider: z.ZodOptional<z.ZodString>;
+        /** Post-batch continuation handler: when the LLM emits an empty final
+         *  turn after a successful tool batch, fire a directive followUp with
+         *  multi-shot retry. Replaces the legacy SEP one-shot completeness nudge
+         *  (whose enforcement role was superseded; SEP plan extraction + step
+         *  counting remain intact for observability). */
+        postBatchContinuation: z.ZodDefault<z.ZodObject<{
+            /** Master toggle. When false, handler returns
+             *  {recovered: false, outcome: "disabled"} without calling followUp. */
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            /** Maximum directive followUp attempts before falling through to L3
+             *  synthesis. 0 = disabled. */
+            maxRetries: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>>;
     }, z.core.$strict>>;
     sourceGate: z.ZodOptional<z.ZodObject<{
         /** Default byte cap for HTTP responses (matches DEFAULT_SOURCE_PROFILES.web_fetch.maxResponseBytes) */

package/node_modules/@comis/core/dist/config/schema-agent.js

@@ -359,6 +359,20 @@ export const ContextEngineConfigSchema = z.strictObject({
     summaryModel: z.string().optional(),
     /** Optional provider override for DAG summary generation. */
     summaryProvider: z.string().optional(),
+    // --- Post-batch continuation (L4 — replaces SEP nudge enforcement) ---
+    /** Post-batch continuation handler: when the LLM emits an empty final
+     *  turn after a successful tool batch, fire a directive followUp with
+     *  multi-shot retry. Replaces the legacy SEP one-shot completeness nudge
+     *  (whose enforcement role was superseded; SEP plan extraction + step
+     *  counting remain intact for observability). */
+    postBatchContinuation: z.strictObject({
+        /** Master toggle. When false, handler returns
+         *  {recovered: false, outcome: "disabled"} without calling followUp. */
+        enabled: z.boolean().default(true),
+        /** Maximum directive followUp attempts before falling through to L3
+         *  synthesis. 0 = disabled. */
+        maxRetries: z.number().int().min(0).max(5).default(2),
+    }).default({ enabled: true, maxRetries: 2 }),
 });
 // ── Context Guard Schemas ──────────────────────────────────────���────────
 /**

package/node_modules/@comis/core/dist/config/schema.d.ts

@@ -422,6 +422,10 @@ export declare const AppConfigSchema: z.ZodObject<{
             annotationTriggerChars: z.ZodDefault<z.ZodNumber>;
             summaryModel: z.ZodOptional<z.ZodString>;
             summaryProvider: z.ZodOptional<z.ZodString>;
+            postBatchContinuation: z.ZodDefault<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodBoolean>;
+                maxRetries: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>>;
         }, z.core.$strict>>;
         sourceGate: z.ZodOptional<z.ZodObject<{
             maxResponseBytes: z.ZodDefault<z.ZodNumber>;

package/node_modules/@comis/core/dist/config/schema.js

@@ -112,4 +112,18 @@ export const AppConfigSchema = z.strictObject({
     documentation: DocumentationConfigSchema.default(() => DocumentationConfigSchema.parse({})),
     /** Telegram file reference guard: detects hallucinated file paths in responses */
     telegramFileRefGuard: TelegramFileRefGuardConfigSchema.default(() => TelegramFileRefGuardConfigSchema.parse({})),
+}).superRefine((config, ctx) => {
+    // Startup invariant: reject the reserved "default" provider name.
+    // "default" collides with PerAgentConfigSchema.provider's schema default
+    // value, making it impossible to distinguish "user explicitly chose the
+    // provider named 'default'" from "user omitted the provider field and got
+    // the schema default". Reject at parse time with an actionable rename hint.
+    if (config.providers?.entries?.default !== undefined) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["providers", "entries", "default"],
+            message: "providers.entries.default is reserved (it collides with the PerAgentConfig.provider " +
+                "schema default). Rename to a specific identifier like providers.entries.anthropic-default.",
+        });
+    }
 });

package/node_modules/@comis/core/dist/domain/execution-graph.d.ts

@@ -201,8 +201,8 @@ export declare const ExecutionGraphSchema: z.ZodObject<{
     label: z.ZodOptional<z.ZodString>;
     /** Failure strategy: fail-fast stops on first failure, continue runs remaining */
     onFailure: z.ZodDefault<z.ZodEnum<{
-        "fail-fast": "fail-fast";
         continue: "continue";
+        "fail-fast": "fail-fast";
     }>>;
     /** Graph-level timeout in milliseconds (default: 1 500 000 — 25 minutes) */
     timeoutMs: z.ZodDefault<z.ZodNumber>;

package/node_modules/@comis/core/dist/event-bus/events-agent.d.ts

@@ -234,6 +234,20 @@ export interface AgentEvents {
         totalAttempts: number;
         timestamp: number;
     };
+    /** Last-known-working model fallback: attempt to use a recently successful model */
+    "model:lkw_fallback_attempt": {
+        fromProvider: string;
+        fromModel: string;
+        toProvider: string;
+        toModel: string;
+        timestamp: number;
+    };
+    /** Last-known-working model fallback: LKW model succeeded */
+    "model:lkw_fallback_succeeded": {
+        provider: string;
+        model: string;
+        timestamp: number;
+    };
     /** Auth profile entered cooldown after failure */
     "model:auth_cooldown": {
         keyName: string;
@@ -346,14 +360,15 @@ export interface AgentEvents {
         stepCount: number;
         timestamp: number;
     };
-    /** SEP plan completed (all steps resolved) */
+    /** SEP plan completed (all steps resolved). Observability-only post-L4 —
+     *  the legacy enforcement nudge was replaced by the post-batch
+     *  continuation handler. */
     "sep:plan_completed": {
         agentId: string;
         sessionKey: string;
         stepsPlanned: number;
         stepsCompleted: number;
         stepsSkipped: number;
-        nudgeTriggered: boolean;
         durationMs: number;
         timestamp: number;
     };

package/node_modules/@comis/core/dist/exports/config.d.ts

@@ -1,2 +1,2 @@
-export { AppConfigSchema, AgentConfigSchema, AgentsMapSchema, BudgetConfigSchema, CircuitBreakerConfigSchema, DmScopeConfigSchema, ElevatedReplyConfigSchema, ModelRoutesSchema, HeartbeatConfigSchema, HeartbeatTargetSchema, PerAgentConfigSchema, PerAgentCronConfigSchema, PerAgentHeartbeatConfigSchema, PerAgentSchedulerConfigSchema, PruningConfigSchema, RagConfigSchema, ResetPolicyOverrideSchema, RoutingBindingSchema, RoutingConfigSchema, SessionResetPolicySchema, TracingConfigSchema, ChannelConfigSchema, ChannelEntrySchema, ChannelHealthCheckSchema, MemoryConfigSchema, CompactionConfigSchema, RetentionConfigSchema, SecurityConfigSchema, PermissionConfigSchema, ActionConfirmationConfigSchema, AgentToAgentConfigSchema, SkillsConfigSchema, DaemonConfigSchema, LoggingConfigSchema, TracingDefaultsSchema, ConfigWebhookSchema, SchedulerConfigSchema, GatewayConfigSchema, GatewayTlsConfigSchema, GatewayTokenSchema, GatewayRateLimitSchema, IntegrationsConfigSchema, BraveSearchConfigSchema, McpServerEntrySchema, McpConfigSchema, TranscriptionConfigSchema, TtsConfigSchema, TtsAutoModeSchema, ElevenLabsVoiceSettingsSchema, TtsOutputFormatSchema, ImageAnalysisConfigSchema, VisionScopeRuleSchema, VisionConfigSchema, LinkUnderstandingConfigSchema, MediaConfigSchema, DOCUMENT_MIME_WHITELIST, FileExtractionConfigSchema, AutoReplyRuleSchema, AutoReplyConfigSchema, MonitoringConfigSchema, PluginsConfigSchema, PluginEntrySchema, QueueConfigSchema, QueueModeSchema, OverflowPolicySchema, PerChannelQueueConfigSchema, OverflowConfigSchema, DebounceBufferConfigSchema, FollowupConfigSchema, PriorityLaneConfigSchema, LaneAssignmentConfigSchema, StreamingConfigSchema, PerChannelStreamingConfigSchema, TypingModeSchema, ChunkModeSchema, DeliveryMirrorConfigSchema, DeliveryQueueConfigSchema, DeliveryTimingConfigSchema, DeliveryTimingModeSchema, CoalescerConfigSchema, AutoReplyEngineConfigSchema, GroupActivationModeSchema, SendPolicyConfigSchema, SendPolicyRuleSchema, SendActionSchema, EnvelopeConfigSchema, RetryConfigSchema, WebhooksConfigSchema, WebhookMappingConfigSchema, WebhookMappingMatchSchema, AgentSecretsConfigSchema, SecretsConfigSchema, DocumentationConfigSchema, DocumentationLinkSchema, ImageGenerationConfigSchema, NotificationConfigSchema, VerbosityConfigSchema, VerbosityLevelSchema, VerbosityOverrideSchema, ContextEngineConfigSchema, BackgroundTasksConfigSchema, MemoryReviewConfigSchema, UserModelSchema, ModelCostSchema, OperationModelEntrySchema, OperationModelsSchema, substituteEnvVars, warnSuspiciousEnvValues, loadConfigFile, validateConfig, deepMerge, mergeLayered, loadLayered, IMMUTABLE_CONFIG_PREFIXES, MUTABLE_CONFIG_OVERRIDES, isImmutableConfigPath, matchesOverridePattern, getMutableOverridesForSection, MANAGED_SECTIONS, getManagedSectionRedirect, formatRedirectHint, getConfigSchema, getConfigSections, getFieldMetadata, validatePartial, createConfigGitManager, checkApprovalsConfig, } from "../config/index.js";
-export type { AppConfig, AgentConfig, BudgetConfig, CircuitBreakerConfig, DmScopeConfig, ElevatedReplyConfig, ModelRoutes, PruningConfig, HeartbeatConfig, HeartbeatTarget, PerAgentConfig, PerAgentCronConfig, PerAgentHeartbeatConfig, PerAgentSchedulerConfig, RagConfig, ResetPolicyOverride, RoutingBinding, RoutingConfig, SessionResetPolicyConfig, TracingConfig, ChannelConfig, ChannelEntry, ChannelHealthCheckConfig, AckReactionConfig, MemoryConfig, CompactionConfig, RetentionConfig, SecurityConfig, PermissionConfig, ActionConfirmationConfig, AgentToAgentConfig, SkillsConfig, DaemonConfig, LoggingConfig, TracingDefaults, ConfigWebhook, SchedulerConfig, GatewayConfig, GatewayTlsConfig, GatewayToken, GatewayRateLimit, IntegrationsConfig, BraveSearchConfig, McpServerEntry, McpConfig, TranscriptionConfig, TtsConfig, TtsAutoMode, ElevenLabsVoiceSettings, TtsOutputFormat, ImageAnalysisConfig, VisionScopeRule, VisionConfig, LinkUnderstandingConfig, MediaConfig, FileExtractionConfig, AutoReplyRule, AutoReplyConfig, MonitoringConfig, DiskMonitorConfig, ResourceMonitorConfig, SystemdMonitorConfig, SecurityUpdateMonitorConfig, GitMonitorConfig, PluginsConfig, PluginEntry, QueueConfig, PerChannelQueueConfig, QueueMode, OverflowPolicy, OverflowConfig, DebounceBufferConfig, FollowupConfig, PriorityLaneConfig, LaneAssignmentConfig, StreamingConfig, PerChannelStreamingConfig, TypingMode, ChunkMode, DeliveryMirrorConfig, DeliveryQueueConfig, DeliveryTimingConfig, DeliveryTimingMode, CoalescerConfig, AutoReplyEngineConfig, GroupActivationMode, SendPolicyConfig, SendPolicyRule, SendAction, EnvelopeConfig, RetryConfig, WebhooksConfig, WebhookMappingConfig, AgentSecretsConfig, SecretsConfig, ConfigError, ConfigErrorCode, FieldMetadata, PartialValidationResult, ConfigGitManager, GitCommitMetadata, HistoryEntry, GitManagerDeps, ExecGitFn, EnvValueWarning, LifecycleReactionsConfig, LifecycleReactionsTimingConfig, SenderTrustDisplayConfig, DocumentationConfig, DocumentationLink, ImageGenerationConfig, NotificationConfig, VerbosityConfig, VerbosityLevel, VerbosityOverride, ContextEngineConfig, BackgroundTasksConfig, MemoryReviewConfig, UserModel, ModelCost, OperationModelEntry, OperationModels, ModelOperationType, } from "../config/index.js";
+export { AppConfigSchema, AgentConfigSchema, AgentsMapSchema, BudgetConfigSchema, CircuitBreakerConfigSchema, DmScopeConfigSchema, ElevatedReplyConfigSchema, ModelRoutesSchema, HeartbeatConfigSchema, HeartbeatTargetSchema, PerAgentConfigSchema, PerAgentCronConfigSchema, PerAgentHeartbeatConfigSchema, PerAgentSchedulerConfigSchema, PruningConfigSchema, RagConfigSchema, ResetPolicyOverrideSchema, RoutingBindingSchema, RoutingConfigSchema, SessionResetPolicySchema, TracingConfigSchema, ChannelConfigSchema, ChannelEntrySchema, ChannelHealthCheckSchema, MemoryConfigSchema, CompactionConfigSchema, RetentionConfigSchema, SecurityConfigSchema, PermissionConfigSchema, ActionConfirmationConfigSchema, AgentToAgentConfigSchema, SkillsConfigSchema, DaemonConfigSchema, LoggingConfigSchema, TracingDefaultsSchema, ConfigWebhookSchema, SchedulerConfigSchema, GatewayConfigSchema, GatewayTlsConfigSchema, GatewayTokenSchema, GatewayRateLimitSchema, IntegrationsConfigSchema, BraveSearchConfigSchema, McpServerEntrySchema, McpConfigSchema, TranscriptionConfigSchema, TtsConfigSchema, TtsAutoModeSchema, ElevenLabsVoiceSettingsSchema, TtsOutputFormatSchema, ImageAnalysisConfigSchema, VisionScopeRuleSchema, VisionConfigSchema, LinkUnderstandingConfigSchema, MediaConfigSchema, DOCUMENT_MIME_WHITELIST, FileExtractionConfigSchema, AutoReplyRuleSchema, AutoReplyConfigSchema, MonitoringConfigSchema, PluginsConfigSchema, PluginEntrySchema, QueueConfigSchema, QueueModeSchema, OverflowPolicySchema, PerChannelQueueConfigSchema, OverflowConfigSchema, DebounceBufferConfigSchema, FollowupConfigSchema, PriorityLaneConfigSchema, LaneAssignmentConfigSchema, StreamingConfigSchema, PerChannelStreamingConfigSchema, TypingModeSchema, ChunkModeSchema, DeliveryMirrorConfigSchema, DeliveryQueueConfigSchema, DeliveryTimingConfigSchema, DeliveryTimingModeSchema, CoalescerConfigSchema, AutoReplyEngineConfigSchema, GroupActivationModeSchema, SendPolicyConfigSchema, SendPolicyRuleSchema, SendActionSchema, EnvelopeConfigSchema, RetryConfigSchema, WebhooksConfigSchema, WebhookMappingConfigSchema, WebhookMappingMatchSchema, AgentSecretsConfigSchema, SecretsConfigSchema, DocumentationConfigSchema, DocumentationLinkSchema, ImageGenerationConfigSchema, NotificationConfigSchema, VerbosityConfigSchema, VerbosityLevelSchema, VerbosityOverrideSchema, ContextEngineConfigSchema, BackgroundTasksConfigSchema, MemoryReviewConfigSchema, ProviderEntrySchema, ProvidersConfigSchema, UserModelSchema, ModelCostSchema, OperationModelEntrySchema, OperationModelsSchema, substituteEnvVars, warnSuspiciousEnvValues, loadConfigFile, validateConfig, deepMerge, mergeLayered, loadLayered, IMMUTABLE_CONFIG_PREFIXES, MUTABLE_CONFIG_OVERRIDES, isImmutableConfigPath, matchesOverridePattern, getMutableOverridesForSection, MANAGED_SECTIONS, getManagedSectionRedirect, formatRedirectHint, getConfigSchema, getConfigSections, getFieldMetadata, validatePartial, createConfigGitManager, checkApprovalsConfig, } from "../config/index.js";
+export type { AppConfig, AgentConfig, BudgetConfig, CircuitBreakerConfig, DmScopeConfig, ElevatedReplyConfig, ModelRoutes, PruningConfig, HeartbeatConfig, HeartbeatTarget, PerAgentConfig, PerAgentCronConfig, PerAgentHeartbeatConfig, PerAgentSchedulerConfig, RagConfig, ResetPolicyOverride, RoutingBinding, RoutingConfig, SessionResetPolicyConfig, TracingConfig, ChannelConfig, ChannelEntry, ChannelHealthCheckConfig, AckReactionConfig, MemoryConfig, CompactionConfig, RetentionConfig, SecurityConfig, PermissionConfig, ActionConfirmationConfig, AgentToAgentConfig, SkillsConfig, DaemonConfig, LoggingConfig, TracingDefaults, ConfigWebhook, SchedulerConfig, GatewayConfig, GatewayTlsConfig, GatewayToken, GatewayRateLimit, IntegrationsConfig, BraveSearchConfig, McpServerEntry, McpConfig, TranscriptionConfig, TtsConfig, TtsAutoMode, ElevenLabsVoiceSettings, TtsOutputFormat, ImageAnalysisConfig, VisionScopeRule, VisionConfig, LinkUnderstandingConfig, MediaConfig, FileExtractionConfig, AutoReplyRule, AutoReplyConfig, MonitoringConfig, DiskMonitorConfig, ResourceMonitorConfig, SystemdMonitorConfig, SecurityUpdateMonitorConfig, GitMonitorConfig, PluginsConfig, PluginEntry, QueueConfig, PerChannelQueueConfig, QueueMode, OverflowPolicy, OverflowConfig, DebounceBufferConfig, FollowupConfig, PriorityLaneConfig, LaneAssignmentConfig, StreamingConfig, PerChannelStreamingConfig, TypingMode, ChunkMode, DeliveryMirrorConfig, DeliveryQueueConfig, DeliveryTimingConfig, DeliveryTimingMode, CoalescerConfig, AutoReplyEngineConfig, GroupActivationMode, SendPolicyConfig, SendPolicyRule, SendAction, EnvelopeConfig, RetryConfig, WebhooksConfig, WebhookMappingConfig, AgentSecretsConfig, SecretsConfig, ConfigError, ConfigErrorCode, FieldMetadata, PartialValidationResult, ConfigGitManager, GitCommitMetadata, HistoryEntry, GitManagerDeps, ExecGitFn, EnvValueWarning, LifecycleReactionsConfig, LifecycleReactionsTimingConfig, SenderTrustDisplayConfig, DocumentationConfig, DocumentationLink, ImageGenerationConfig, NotificationConfig, VerbosityConfig, VerbosityLevel, VerbosityOverride, ContextEngineConfig, BackgroundTasksConfig, MemoryReviewConfig, ProviderEntry, ProvidersConfig, UserModel, ModelCost, OperationModelEntry, OperationModels, ModelOperationType, } from "../config/index.js";

package/node_modules/@comis/core/dist/exports/config.js

@@ -1,3 +1,3 @@
 // SPDX-License-Identifier: Apache-2.0
 // @comis/core exports — Config (layered configuration with Zod validation)
-export { AppConfigSchema, AgentConfigSchema, AgentsMapSchema, BudgetConfigSchema, CircuitBreakerConfigSchema, DmScopeConfigSchema, ElevatedReplyConfigSchema, ModelRoutesSchema, HeartbeatConfigSchema, HeartbeatTargetSchema, PerAgentConfigSchema, PerAgentCronConfigSchema, PerAgentHeartbeatConfigSchema, PerAgentSchedulerConfigSchema, PruningConfigSchema, RagConfigSchema, ResetPolicyOverrideSchema, RoutingBindingSchema, RoutingConfigSchema, SessionResetPolicySchema, TracingConfigSchema, ChannelConfigSchema, ChannelEntrySchema, ChannelHealthCheckSchema, MemoryConfigSchema, CompactionConfigSchema, RetentionConfigSchema, SecurityConfigSchema, PermissionConfigSchema, ActionConfirmationConfigSchema, AgentToAgentConfigSchema, SkillsConfigSchema, DaemonConfigSchema, LoggingConfigSchema, TracingDefaultsSchema, ConfigWebhookSchema, SchedulerConfigSchema, GatewayConfigSchema, GatewayTlsConfigSchema, GatewayTokenSchema, GatewayRateLimitSchema, IntegrationsConfigSchema, BraveSearchConfigSchema, McpServerEntrySchema, McpConfigSchema, TranscriptionConfigSchema, TtsConfigSchema, TtsAutoModeSchema, ElevenLabsVoiceSettingsSchema, TtsOutputFormatSchema, ImageAnalysisConfigSchema, VisionScopeRuleSchema, VisionConfigSchema, LinkUnderstandingConfigSchema, MediaConfigSchema, DOCUMENT_MIME_WHITELIST, FileExtractionConfigSchema, AutoReplyRuleSchema, AutoReplyConfigSchema, MonitoringConfigSchema, PluginsConfigSchema, PluginEntrySchema, QueueConfigSchema, QueueModeSchema, OverflowPolicySchema, PerChannelQueueConfigSchema, OverflowConfigSchema, DebounceBufferConfigSchema, FollowupConfigSchema, PriorityLaneConfigSchema, LaneAssignmentConfigSchema, StreamingConfigSchema, PerChannelStreamingConfigSchema, TypingModeSchema, ChunkModeSchema, DeliveryMirrorConfigSchema, DeliveryQueueConfigSchema, DeliveryTimingConfigSchema, DeliveryTimingModeSchema, CoalescerConfigSchema, AutoReplyEngineConfigSchema, GroupActivationModeSchema, SendPolicyConfigSchema, SendPolicyRuleSchema, SendActionSchema, EnvelopeConfigSchema, RetryConfigSchema, WebhooksConfigSchema, WebhookMappingConfigSchema, WebhookMappingMatchSchema, AgentSecretsConfigSchema, SecretsConfigSchema, DocumentationConfigSchema, DocumentationLinkSchema, ImageGenerationConfigSchema, NotificationConfigSchema, VerbosityConfigSchema, VerbosityLevelSchema, VerbosityOverrideSchema, ContextEngineConfigSchema, BackgroundTasksConfigSchema, MemoryReviewConfigSchema, UserModelSchema, ModelCostSchema, OperationModelEntrySchema, OperationModelsSchema, substituteEnvVars, warnSuspiciousEnvValues, loadConfigFile, validateConfig, deepMerge, mergeLayered, loadLayered, IMMUTABLE_CONFIG_PREFIXES, MUTABLE_CONFIG_OVERRIDES, isImmutableConfigPath, matchesOverridePattern, getMutableOverridesForSection, MANAGED_SECTIONS, getManagedSectionRedirect, formatRedirectHint, getConfigSchema, getConfigSections, getFieldMetadata, validatePartial, createConfigGitManager, checkApprovalsConfig, } from "../config/index.js";
+export { AppConfigSchema, AgentConfigSchema, AgentsMapSchema, BudgetConfigSchema, CircuitBreakerConfigSchema, DmScopeConfigSchema, ElevatedReplyConfigSchema, ModelRoutesSchema, HeartbeatConfigSchema, HeartbeatTargetSchema, PerAgentConfigSchema, PerAgentCronConfigSchema, PerAgentHeartbeatConfigSchema, PerAgentSchedulerConfigSchema, PruningConfigSchema, RagConfigSchema, ResetPolicyOverrideSchema, RoutingBindingSchema, RoutingConfigSchema, SessionResetPolicySchema, TracingConfigSchema, ChannelConfigSchema, ChannelEntrySchema, ChannelHealthCheckSchema, MemoryConfigSchema, CompactionConfigSchema, RetentionConfigSchema, SecurityConfigSchema, PermissionConfigSchema, ActionConfirmationConfigSchema, AgentToAgentConfigSchema, SkillsConfigSchema, DaemonConfigSchema, LoggingConfigSchema, TracingDefaultsSchema, ConfigWebhookSchema, SchedulerConfigSchema, GatewayConfigSchema, GatewayTlsConfigSchema, GatewayTokenSchema, GatewayRateLimitSchema, IntegrationsConfigSchema, BraveSearchConfigSchema, McpServerEntrySchema, McpConfigSchema, TranscriptionConfigSchema, TtsConfigSchema, TtsAutoModeSchema, ElevenLabsVoiceSettingsSchema, TtsOutputFormatSchema, ImageAnalysisConfigSchema, VisionScopeRuleSchema, VisionConfigSchema, LinkUnderstandingConfigSchema, MediaConfigSchema, DOCUMENT_MIME_WHITELIST, FileExtractionConfigSchema, AutoReplyRuleSchema, AutoReplyConfigSchema, MonitoringConfigSchema, PluginsConfigSchema, PluginEntrySchema, QueueConfigSchema, QueueModeSchema, OverflowPolicySchema, PerChannelQueueConfigSchema, OverflowConfigSchema, DebounceBufferConfigSchema, FollowupConfigSchema, PriorityLaneConfigSchema, LaneAssignmentConfigSchema, StreamingConfigSchema, PerChannelStreamingConfigSchema, TypingModeSchema, ChunkModeSchema, DeliveryMirrorConfigSchema, DeliveryQueueConfigSchema, DeliveryTimingConfigSchema, DeliveryTimingModeSchema, CoalescerConfigSchema, AutoReplyEngineConfigSchema, GroupActivationModeSchema, SendPolicyConfigSchema, SendPolicyRuleSchema, SendActionSchema, EnvelopeConfigSchema, RetryConfigSchema, WebhooksConfigSchema, WebhookMappingConfigSchema, WebhookMappingMatchSchema, AgentSecretsConfigSchema, SecretsConfigSchema, DocumentationConfigSchema, DocumentationLinkSchema, ImageGenerationConfigSchema, NotificationConfigSchema, VerbosityConfigSchema, VerbosityLevelSchema, VerbosityOverrideSchema, ContextEngineConfigSchema, BackgroundTasksConfigSchema, MemoryReviewConfigSchema, ProviderEntrySchema, ProvidersConfigSchema, UserModelSchema, ModelCostSchema, OperationModelEntrySchema, OperationModelsSchema, substituteEnvVars, warnSuspiciousEnvValues, loadConfigFile, validateConfig, deepMerge, mergeLayered, loadLayered, IMMUTABLE_CONFIG_PREFIXES, MUTABLE_CONFIG_OVERRIDES, isImmutableConfigPath, matchesOverridePattern, getMutableOverridesForSection, MANAGED_SECTIONS, getManagedSectionRedirect, formatRedirectHint, getConfigSchema, getConfigSections, getFieldMetadata, validatePartial, createConfigGitManager, checkApprovalsConfig, } from "../config/index.js";

package/node_modules/@comis/core/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/core",
   "private": true,
-  "version": "1.0.24",
+  "version": "1.0.26",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Core domain types, ports, event bus, security, and config for Comis",

package/node_modules/@comis/daemon/dist/daemon.d.ts

@@ -4,6 +4,28 @@
  */
 import type { DaemonInstance, DaemonOverrides } from "./daemon-types.js";
 export type { DaemonInstance, DaemonOverrides } from "./daemon-types.js";
+/**
+ * When ANTHROPIC_LOG=debug|info is set, the Anthropic SDK calls
+ * `console.debug('[req] sending request', { ...payload })`, which Node
+ * formats with util.inspect using the default `depth: 2`. That collapses
+ * the request body to `messages: [Array]`, so we lose the actual body
+ * we are trying to capture.
+ *
+ * This helper deepens util.inspect ONLY when the SDK debug logger is
+ * actually enabled. When ANTHROPIC_LOG is unset, the SDK emits no debug
+ * lines anyway, so we leave inspect defaults alone — keeping production
+ * logs unchanged.
+ *
+ * `breakLength: Infinity` keeps each log line single-line so grep-based
+ * inspection of the daemon log keeps working.
+ *
+ * Returns whether each default was changed (used by tests; ignored at
+ * runtime).
+ */
+export declare function applyInspectDefaultsForLogging(env: Record<string, string | undefined>): {
+    depthChanged: boolean;
+    breakLengthChanged: boolean;
+};
 interface PermissionCorrection {
     file: string;
     oldMode: number;

package/node_modules/@comis/daemon/dist/daemon.js

@@ -26,6 +26,7 @@ import { setupChannelHealthLogging } from "./observability/channel-health-logger
 import { registerGracefulShutdown } from "./process/graceful-shutdown.js";
 import { createProcessMonitor } from "./process/process-monitor.js";
 import { startWatchdog } from "./health/watchdog.js";
+import { emitDockerRestartPolicyWarn } from "./setup-docker-restart-warn.js";
 import { randomUUID, createHmac } from "node:crypto";
 import { existsSync, chmodSync, statSync, mkdirSync, readFileSync, unlinkSync, cpSync } from "node:fs";
 import { writeFile as fsWriteFile, rm } from "node:fs/promises";
@@ -36,10 +37,40 @@ import { logOperationModelDryRun } from "./wiring/startup-dry-run.js";
 import os from "node:os";
 import { join as pathJoin, dirname as pathDirname, resolve as pathResolve } from "node:path";
 import { fileURLToPath } from "node:url";
+import { inspect } from "node:util";
 const DEFAULT_CONFIG_PATHS = [
     safePath(safePath(os.homedir(), ".comis"), "config.yaml"),
     safePath(safePath(os.homedir(), ".comis"), "config.local.yaml"),
 ];
+/**
+ * When ANTHROPIC_LOG=debug|info is set, the Anthropic SDK calls
+ * `console.debug('[req] sending request', { ...payload })`, which Node
+ * formats with util.inspect using the default `depth: 2`. That collapses
+ * the request body to `messages: [Array]`, so we lose the actual body
+ * we are trying to capture.
+ *
+ * This helper deepens util.inspect ONLY when the SDK debug logger is
+ * actually enabled. When ANTHROPIC_LOG is unset, the SDK emits no debug
+ * lines anyway, so we leave inspect defaults alone — keeping production
+ * logs unchanged.
+ *
+ * `breakLength: Infinity` keeps each log line single-line so grep-based
+ * inspection of the daemon log keeps working.
+ *
+ * Returns whether each default was changed (used by tests; ignored at
+ * runtime).
+ */
+export function applyInspectDefaultsForLogging(env) {
+    const lvl = env["ANTHROPIC_LOG"];
+    if (lvl !== "debug" && lvl !== "info") {
+        return { depthChanged: false, breakLengthChanged: false };
+    }
+    const depthChanged = inspect.defaultOptions.depth !== null;
+    const breakLengthChanged = inspect.defaultOptions.breakLength !== Infinity;
+    inspect.defaultOptions.depth = null;
+    inspect.defaultOptions.breakLength = Infinity;
+    return { depthChanged, breakLengthChanged };
+}
 /**
  * Sensitive environment variable prefixes to remove from process.env after
  * the SecretManager snapshot captures them. Prevents leakage through
@@ -165,6 +196,13 @@ export async function runPreflightDoctor(exitFn, opts = {}) {
 export async function main(overrides = {}) {
     const startupStartMs = Date.now();
     const instanceId = randomUUID().slice(0, 8);
+    // Anthropic SDK debug log lines route through console.debug -> util.inspect.
+    // Deepen inspect defaults BEFORE any code path that may construct an
+    // Anthropic client (skills/agent setup, prewarm, etc.) so the very first
+    // `[req] sending request` line shows the full body. Gated on ANTHROPIC_LOG
+    // so production runs are unaffected.
+    // eslint-disable-next-line no-restricted-syntax -- process.env access required before SecretManager is initialized; ANTHROPIC_LOG is the SDK-owned switch, not a comis credential.
+    applyInspectDefaultsForLogging(process.env);
     const _bootstrap = overrides.bootstrap ?? bootstrap;
     const _setupSecrets = overrides.setupSecrets ?? _setupSecretsImpl;
     const _createTracingLogger = overrides.createTracingLogger ?? createTracingLogger;
@@ -1044,6 +1082,9 @@ export async function main(overrides = {}) {
     };
     wireDispatch(rpcDispatchDeps);
     // 7. Gateway
+    // gateway.host / .port are resolved through the layered config in bootstrap:
+    // schema defaults < env layer (COMIS_GATEWAY_HOST/PORT) < config.yaml.
+    // See packages/core/src/config/env-layer.ts.
     const gwConfig = container.config.gateway;
     const { gatewayHandle, activeExecutions, getActiveConnectionCount, wsConnections } = await setupGateway({
         container, gwConfig, webhooksConfig: container.config.webhooks, agents, defaultAgentId,
@@ -1278,6 +1319,10 @@ export async function main(overrides = {}) {
             },
         },
     }, "Comis daemon started");
+    // Docker-only: surface restart-policy requirement immediately after the
+    // startup banner. No-op outside containers. Wired here so the WARN lands
+    // in `docker logs` next to the banner, where operators look first.
+    emitDockerRestartPolicyWarn(daemonLogger);
     // Snapshot current config as last-known-good after successful startup
     if (configPaths.length > 0) {
         const activeConfigPath = configPaths[configPaths.length - 1];

package/node_modules/@comis/daemon/dist/rpc/agent-handlers.d.ts

@@ -12,7 +12,7 @@
  * the runtime agents map, and returns structured results.
  * @module
  */
-import type { PerAgentConfig } from "@comis/core";
+import type { PerAgentConfig, ProviderEntry } from "@comis/core";
 import { type PersistToConfigDeps } from "./persist-to-config.js";
 import type { RpcHandler } from "./types.js";
 /** Dependencies required by agent management RPC handlers. */
@@ -29,10 +29,13 @@ export interface AgentHandlerDeps {
     hotAdd?: (agentId: string, config: PerAgentConfig) => Promise<void>;
     /** Hot-remove callback: tears down agent runtime without restart. When provided, skipRestart: true is passed to persistToConfig. */
     hotRemove?: (agentId: string) => Promise<void>;
-    /** SecretManager for API key availability checks. */
+    /** SecretManager for API key availability checks and probe key retrieval. */
     secretManager?: {
         has(key: string): boolean;
+        get(key: string): string | undefined;
     };
+    /** Provider entries map for probe lookups when agents switch providers. */
+    providerEntries?: Record<string, ProviderEntry>;
 }
 /**
  * Create a record of agent management RPC handlers bound to the given deps.