comisai 1.0.33 → 1.0.36

package/node_modules/@comis/skills/dist/bridge/tool-metadata-registry.js

@@ -188,6 +188,136 @@ export function registerAllToolMetadata() {
         },
     });
     // =========================================================================
+    // Tool-Entry Schema (260504-cac)
+    //
+    // Generic action enum + valid keys + per-action required fields. Consumed
+    // by validateToolEntry() in ./schema-validator.ts via
+    // wrapWithMetadataEnforcement BEFORE per-tool validateInput runs.
+    //
+    // Each tool's shape is sourced from its TypeBox Type.Union([Type.Literal(...)])
+    // action enum + each action handler's readStringParam(p, X) /
+    // throwToolError("missing_param", ...) calls in its actionOverrides.
+    //
+    // Cross-consistency: managed-section entries in
+    // @comis/core/src/config/managed-sections.ts also declare
+    // requiredByAction for the redirect-hint payload. The registrations
+    // here are the runtime gate; the managed-section entries are the
+    // user-facing redirect hint.
+    // =========================================================================
+    registerToolMetadata("mcp_manage", {
+        validActions: ["list", "status", "connect", "disconnect", "reconnect"],
+        validKeys: ["action", "server_name", "transport", "command", "args", "url", "headers"],
+        // connect requires [server_name, transport]; command (stdio) / url (sse|http) are
+        // transport-conditional and validated downstream by the handler.
+        requiredByAction: {
+            status: ["server_name"],
+            connect: ["server_name", "transport"],
+            disconnect: ["server_name"],
+            reconnect: ["server_name"],
+        },
+    });
+    registerToolMetadata("agents_manage", {
+        validActions: ["create", "get", "update", "delete", "suspend", "resume", "list"],
+        validKeys: ["action", "agent_id", "config"],
+        // agent_id is required for every action except list.
+        requiredByAction: {
+            create: ["agent_id", "config"],
+            get: ["agent_id"],
+            update: ["agent_id", "config"],
+            delete: ["agent_id"],
+            suspend: ["agent_id"],
+            resume: ["agent_id"],
+        },
+    });
+    registerToolMetadata("tokens_manage", {
+        validActions: ["list", "create", "revoke", "rotate"],
+        validKeys: ["action", "token_id", "scopes"],
+        // create: token_id is auto-generated when omitted (per the schema +
+        // handler's non-required readStringParam call); only scopes is strictly
+        // required.
+        requiredByAction: {
+            create: ["scopes"],
+            revoke: ["token_id"],
+            rotate: ["token_id"],
+        },
+    });
+    registerToolMetadata("providers_manage", {
+        validActions: ["list", "get", "create", "update", "delete", "enable", "disable"],
+        validKeys: ["action", "provider_id", "config"],
+        requiredByAction: {
+            get: ["provider_id"],
+            create: ["provider_id", "config"],
+            update: ["provider_id", "config"],
+            delete: ["provider_id"],
+            enable: ["provider_id"],
+            disable: ["provider_id"],
+        },
+    });
+    registerToolMetadata("channels_manage", {
+        validActions: ["list", "get", "enable", "disable", "restart", "configure"],
+        validKeys: ["action", "channel_type", "setting", "enabled"],
+        requiredByAction: {
+            get: ["channel_type"],
+            enable: ["channel_type"],
+            disable: ["channel_type"],
+            restart: ["channel_type"],
+            configure: ["channel_type", "setting", "enabled"],
+        },
+    });
+    registerToolMetadata("sessions_manage", {
+        validActions: ["delete", "reset", "export", "compact"],
+        validKeys: ["action", "session_key", "instructions"],
+        requiredByAction: {
+            delete: ["session_key"],
+            reset: ["session_key"],
+            export: ["session_key"],
+            compact: ["session_key"],
+        },
+    });
+    registerToolMetadata("skills_manage", {
+        validActions: ["list", "import", "delete", "create", "update"],
+        validKeys: ["action", "url", "name", "content", "description", "scope"],
+        requiredByAction: {
+            import: ["url"],
+            delete: ["name"],
+            create: ["name", "content"],
+            update: ["name", "content"],
+        },
+    });
+    registerToolMetadata("memory_manage", {
+        validActions: ["stats", "browse", "delete", "flush", "export"],
+        validKeys: [
+            "action", "tenant_id", "agent_id", "ids", "offset", "limit", "sort",
+            "memory_type", "trust_level", "tags",
+        ],
+        // tenant_id / agent_id are scope filters with defaults; only ids is
+        // strictly required (for delete).
+        requiredByAction: {
+            delete: ["ids"],
+        },
+    });
+    registerToolMetadata("models_manage", {
+        validActions: ["list", "test", "list_providers"],
+        validKeys: ["action", "provider", "model"],
+        requiredByAction: {
+            test: ["provider", "model"],
+        },
+    });
+    registerToolMetadata("heartbeat_manage", {
+        validActions: ["get", "update", "status", "trigger"],
+        validKeys: [
+            "action", "agent_id", "enabled", "interval_ms", "prompt", "model",
+            "target_channel_type", "target_channel_id", "target_chat_id", "target_is_dm",
+            "light_context", "show_ok", "show_alerts", "allow_dm",
+            "skip_heartbeat_only_delivery", "ack_max_chars", "response_prefix", "session",
+            "alert_threshold", "alert_cooldown_ms", "stale_ms",
+        ],
+        // Every action's params beyond `action` are Type.Optional. Empty
+        // requiredByAction still gates unknown action values + unknown keys via
+        // validActions / validKeys.
+        requiredByAction: {},
+    });
+    // =========================================================================
     // Output Schemas
     // =========================================================================
     registerToolMetadata("read", {

package/node_modules/@comis/skills/dist/builtin/exec-diagnostics.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Exec failure diagnostics: pattern-based recovery hints for known-recoverable
+ * subprocess failures. Pure functions — no throws, no I/O beyond synchronous
+ * filesystem existence checks scoped to `cwd` via safePath.
+ *
+ * Wired into executeForeground's stderr finalization in exec-tool.ts. When a
+ * matcher returns non-null, its hint is prepended to finalStderr with a
+ * `RECOVERY HINT:` prefix so the LLM sees actionable recovery info at the head
+ * of the error stream — same surfacing pattern as the existing
+ * breakSystemWarning on stdout.
+ *
+ * Day 1 ships ONE matcher (Python ModuleNotFoundError + missing pyproject.toml).
+ * Future matchers register as additional entries in the matchers array — no
+ * edits to exec-tool.ts required.
+ *
+ * @module
+ */
+export interface ExecRecoveryInput {
+    /** Final stderr text (post-truncation, post-timeout/abort suffix). */
+    stderr: string;
+    /** Process exit code. Matchers may early-return on 0. */
+    exitCode: number;
+    /** Absolute working directory the command ran in. Already workspace-bounded by exec-tool's resolveCwd. */
+    cwd: string;
+}
+/**
+ * Run all registered matchers against the failed exec result. Returns the
+ * first non-null hint, or `null` if no matcher applies. Multiple-hint
+ * concatenation is intentionally not supported on Day 1 — keep the surface
+ * narrow until we have a second matcher to motivate the shape.
+ */
+export declare function matchExecRecoveryHint(input: ExecRecoveryInput): string | null;

package/node_modules/@comis/skills/dist/builtin/exec-diagnostics.js

@@ -0,0 +1,127 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Exec failure diagnostics: pattern-based recovery hints for known-recoverable
+ * subprocess failures. Pure functions — no throws, no I/O beyond synchronous
+ * filesystem existence checks scoped to `cwd` via safePath.
+ *
+ * Wired into executeForeground's stderr finalization in exec-tool.ts. When a
+ * matcher returns non-null, its hint is prepended to finalStderr with a
+ * `RECOVERY HINT:` prefix so the LLM sees actionable recovery info at the head
+ * of the error stream — same surfacing pattern as the existing
+ * breakSystemWarning on stdout.
+ *
+ * Day 1 ships ONE matcher (Python ModuleNotFoundError + missing pyproject.toml).
+ * Future matchers register as additional entries in the matchers array — no
+ * edits to exec-tool.ts required.
+ *
+ * @module
+ */
+import { existsSync, statSync } from "node:fs";
+import { safePath } from "@comis/core";
+// ---------------------------------------------------------------------------
+// Matcher: Python ModuleNotFoundError + missing pyproject.toml
+// ---------------------------------------------------------------------------
+/**
+ * Match `python -m foo` failures where stderr is one of:
+ *   1. `ModuleNotFoundError: No module named 'foo'`  (Python traceback form,
+ *      raised when the import fires inside Python code — e.g. `python -m a.b`
+ *      where `a` imports a missing dep, or `python -m a.b.c` where `a` itself
+ *      can't be found and Python re-raises through runpy).
+ *   2. `<python-binary>: No module named foo`        (runpy CLI form, no quotes,
+ *      end-of-line — what `python3 -m <pkg>` emits when `<pkg>` is not findable
+ *      in sys.path. This is the most common real-world trigger.)
+ *
+ * Combined with `cwd/foo/` or `cwd/src/foo/` existing AND `cwd/pyproject.toml`
+ * missing, this means the user has a Python project but no installable package
+ * metadata. Suggest writing pyproject.toml + `pip install -e .`.
+ */
+// First alternation captures from the quoted ModuleNotFoundError form;
+// second alternation captures from the bare `: No module named foo` runpy form.
+// Anchored to end-of-line (m flag) so we don't accidentally swallow trailing
+// content on the runpy form.
+const PY_MODULE_NOT_FOUND_RE = /(?:ModuleNotFoundError:\s*No module named ['"]([^'"]+)['"]|: No module named ([A-Za-z_][A-Za-z0-9_.]*)\s*$)/m;
+const SAFE_PKG_NAME_RE = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
+function isDirectorySafe(p) {
+    try {
+        if (!existsSync(p))
+            return false;
+        return statSync(p).isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+const matchPythonModuleNotFound = ({ stderr, exitCode, cwd }) => {
+    if (exitCode === 0)
+        return null;
+    const m = PY_MODULE_NOT_FOUND_RE.exec(stderr);
+    if (!m)
+        return null;
+    // Group 1 = quoted ModuleNotFoundError form; Group 2 = bare runpy form.
+    // For `python -m a.b.c` ModuleNotFoundError reports the LEADING segment
+    // ('a') when 'a' itself can't be found. Take the first dotted segment;
+    // anything else (hyphens, empty, leading digit) abstains via SAFE_PKG_NAME_RE.
+    const fullName = m[1] ?? m[2];
+    if (!fullName)
+        return null;
+    const pkg = fullName.split(".")[0];
+    if (!SAFE_PKG_NAME_RE.test(pkg))
+        return null;
+    try {
+        // Already-installable project — different bug, abstain.
+        const pyproject = safePath(cwd, "pyproject.toml");
+        if (existsSync(pyproject))
+            return null;
+        // Look for cwd/<pkg>/ or cwd/src/<pkg>/. Both must be directories.
+        const directDir = safePath(cwd, pkg);
+        let foundLayout = null;
+        if (isDirectorySafe(directDir)) {
+            foundLayout = "flat";
+        }
+        else {
+            const srcDir = safePath(cwd, "src");
+            if (isDirectorySafe(srcDir)) {
+                const srcPkgDir = safePath(srcDir, pkg);
+                if (isDirectorySafe(srcPkgDir)) {
+                    foundLayout = "src";
+                }
+            }
+        }
+        if (!foundLayout)
+            return null;
+        const pkgPathHint = foundLayout === "src" ? `src/${pkg}/` : `${pkg}/`;
+        const layoutTable = foundLayout === "src"
+            ? `[tool.setuptools.packages.find] where=["src"]`
+            : `[tool.setuptools] packages=["${pkg}"]`;
+        return (`RECOVERY HINT: This Python project is missing pyproject.toml. ` +
+            `Found ${pkgPathHint} but no installable package metadata, so \`python -m ${pkg}\` cannot resolve it. ` +
+            `Fix: write a minimal pyproject.toml at the project root, then \`pip install -e .\`. ` +
+            `Example: [build-system] requires=["setuptools>=61"]  [project] name="${pkg}" version="0.1.0"  ` +
+            layoutTable);
+    }
+    catch {
+        // safePath/statSync surprise — abstain rather than break exec.
+        return null;
+    }
+};
+// ---------------------------------------------------------------------------
+// Registry + entry point
+// ---------------------------------------------------------------------------
+const matchers = [
+    matchPythonModuleNotFound,
+    // Future: matchNodeModuleNotFound, matchCommandNotFound, matchEnvVarMissing, ...
+];
+/**
+ * Run all registered matchers against the failed exec result. Returns the
+ * first non-null hint, or `null` if no matcher applies. Multiple-hint
+ * concatenation is intentionally not supported on Day 1 — keep the surface
+ * narrow until we have a second matcher to motivate the shape.
+ */
+export function matchExecRecoveryHint(input) {
+    for (const m of matchers) {
+        const hit = m(input);
+        if (hit)
+            return hit;
+    }
+    return null;
+}

package/node_modules/@comis/skills/dist/builtin/exec-security.js

@@ -263,6 +263,12 @@ export const DANGEROUS_COMMAND_PATTERNS = [
             "to see which secret names are configured (names only, no values). " +
             "Secret values are never returned to the agent.",
     },
+    {
+        pattern: /\.comis\/auth-profiles\.json/,
+        reason: "Access to the OAuth credential store (auth-profiles.json) is blocked. " +
+            "It contains refresh and access tokens for every connected provider. " +
+            "Use the gateway tool to manage OAuth profiles -- token values are never returned to the agent.",
+    },
     // Category E -- Config file modification bypass
     // Defense-in-depth: the agent system prompt is the primary guard.
     // These regexes can be bypassed via quoting, variable expansion, etc.
@@ -334,6 +340,38 @@ export const DANGEROUS_COMMAND_PATTERNS = [
         pattern: /\.comis\/\.env.*(?:sed|awk|tee|cat\s*>|echo\s*>)/,
         reason: "Direct .env file modification bypasses SecretManager and audit. Credentials must be managed through secure channels.",
     },
+    {
+        pattern: /(?:sed|awk|tee|cp|mv|perl|ruby)\b.*\.comis\/auth-profiles\.json/,
+        reason: "Direct OAuth credential store (auth-profiles.json) modification bypasses atomic-write, per-profile-lock, and schema-version validation in oauth-credential-store-file.ts. Use the gateway tool to manage OAuth profiles.",
+    },
+    {
+        pattern: /(?:echo|cat)\b.*>.*\.comis\/auth-profiles\.json/,
+        reason: "Direct OAuth credential store (auth-profiles.json) modification bypasses atomic-write, per-profile-lock, and schema-version validation in oauth-credential-store-file.ts. Use the gateway tool to manage OAuth profiles.",
+    },
+    {
+        pattern: /\.comis\/auth-profiles\.json.*(?:sed|awk|tee|cat\s*>|echo\s*>)/,
+        reason: "Direct OAuth credential store (auth-profiles.json) modification bypasses atomic-write, per-profile-lock, and schema-version validation in oauth-credential-store-file.ts. Use the gateway tool to manage OAuth profiles.",
+    },
+    // Category L -- Network reverse-shell primitives
+    // Direct attack primitives that establish a remote shell without going
+    // through a pipe (so the existing Gate 2 "pipe to bash/sh/curl/wget/nc"
+    // wouldn't catch them). Defense-in-depth: the agent has no legitimate
+    // reason to use any of these — the surrounding skills wrap network access
+    // through the daemon's HTTP client. A network egress allowlist (iptables
+    // --uid-owner) is the actual security boundary; these patterns just
+    // surface intent earlier in the chain.
+    {
+        pattern: /\/dev\/tcp\//,
+        reason: "Bash /dev/tcp/<host>/<port> opens a raw TCP socket — reverse-shell primitive.",
+    },
+    {
+        pattern: /\bnc(?:at)?\b[^|;&]*\s-e\b/,
+        reason: "netcat -e (--exec) attaches a process to the socket — reverse-shell primitive.",
+    },
+    {
+        pattern: /\bsocat\b[^|;&]*\bexec\s*:/,
+        reason: "socat exec: target attaches a process to the socket — reverse-shell primitive.",
+    },
 ];
 // --------------------------------------------------------------------------
 // Dangerous path protection constants

package/node_modules/@comis/skills/dist/builtin/exec-tool.js

@@ -33,6 +33,7 @@ import { generateSessionId, appendOutput } from "./process-registry.js";
 import { truncateTail, formatSize, DEFAULT_MAX_BYTES } from "./truncate.js";
 import { createOutputCleaner } from "./output-cleaner.js";
 import { extractHeredoc, validateExecCommand, interpretExitCode } from "./exec-security.js";
+import { matchExecRecoveryHint } from "./exec-diagnostics.js";
 import { tryGetContext } from "@comis/core";
 // ---------------------------------------------------------------------------
 // Constants
@@ -722,6 +723,14 @@ function executeForeground(command, cwd, env, timeoutMs, input, signal, onUpdate
             if (aborted) {
                 finalStderr += (finalStderr ? "\n" : "") + "Process aborted by signal";
             }
+            // Recovery diagnostics: prepend a `RECOVERY HINT:` line for known-recoverable
+            // failures (e.g. Python ModuleNotFoundError + missing pyproject.toml). Same
+            // surfacing pattern as breakSystemWarning on stdout — gives the LLM an
+            // actionable next step at the HEAD of stderr instead of buried in JSON.
+            const recoveryHint = matchExecRecoveryHint({ stderr: finalStderr, exitCode, cwd });
+            if (recoveryHint) {
+                finalStderr = recoveryHint + (finalStderr ? "\n" + finalStderr : "");
+            }
             const durationMs = Math.round(performance.now() - startTime);
             logger?.debug({ toolName: "exec", durationMs, exitCode, ...(description && { description }) }, "Exec command complete");
             const result = {

package/node_modules/@comis/skills/dist/builtin/file-tools/grep-tool.js

@@ -148,22 +148,22 @@ function buildRipgrepArgs(pattern, outputMode, options = {}) {
     }
     // Pattern (use -e to avoid pattern being confused with flags)
     args.push("-e", pattern);
-    // Phase 9: filtering
+    // Filtering
     if (options.glob)
         args.push("--glob", options.glob);
     if (options.type)
         args.push("--type", options.type);
-    // Phase 9: case-insensitive
+    // Case-insensitive
     if (options.caseInsensitive)
         args.push("-i");
     // Literal mode (fixed-strings)
     if (options.literal) {
         args.push("--fixed-strings");
     }
-    // Phase 9: multiline
+    // Multiline
     if (options.multiline)
         args.push("-U", "--multiline-dotall");
-    // Phase 9: context lines (content mode only -- ignored for other modes)
+    // Context lines (content mode only -- ignored for other modes)
     if (outputMode === "content") {
         if (options.afterContext !== undefined)
             args.push("-A", String(options.afterContext));
@@ -172,7 +172,7 @@ function buildRipgrepArgs(pattern, outputMode, options = {}) {
         if (options.context !== undefined)
             args.push("-C", String(options.context));
     }
-    // Phase 9: per-file match limit for pagination efficiency (content mode only)
+    // Per-file match limit for pagination efficiency (content mode only)
     if (outputMode === "content") {
         const headLimit = options.headLimit ?? 250;
         const offset = options.offset ?? 0;
@@ -327,7 +327,7 @@ export function createComisGrepTool(workspacePath, logger, readOnlyPaths, shared
                 const outputMode = outputModeRaw && OUTPUT_MODES.includes(outputModeRaw)
                     ? outputModeRaw
                     : "content";
-                // Phase 9: new parameters
+                // Optional filter / formatting parameters
                 const glob = readStringParam(params, "glob", false);
                 const type = readStringParam(params, "type", false);
                 const caseInsensitive = readBooleanParam(params, "-i", false) ?? false;

package/node_modules/@comis/skills/dist/builtin/platform/agents-manage-tool.d.ts

@@ -42,6 +42,7 @@ export declare const AgentsManageToolParams: Type.TObject<{
                 browser: Type.TOptional<Type.TBoolean>;
             }>>;
         }>>;
+        oauthProfiles: Type.TOptional<Type.TRecord<"^.*$", Type.TString>>;
     }>, Type.TString]>>;
 }>;
 export interface AgentInlineWritesValue {
@@ -68,13 +69,13 @@ export interface AgentInlineWritesError {
  * Pure string composition. No I/O, no Result<T,E> needed (per AGENTS.md
  * §2.1: Result is for fallible paths only; this is infallible).
  *
- * Three branches keyed on `inlineWritesResult` (260428-vyf):
+ * Three branches keyed on `inlineWritesResult`:
  *  - BOTH written → SHORT contract: "No further setup needed — agent is
  *    operationally ready". Skips the post-create write() roundtrip.
  *  - PARTIAL (only one of role/identity written) → mixed contract pointing
  *    only at the still-template file with a single "Next required action".
- *  - NEITHER (or write failure / undefined) → existing 260428-sw2 2-step
- *    contract verbatim, telling the LLM to call write() for ROLE.md.
+ *  - NEITHER (or write failure / undefined) → existing 2-step contract
+ *    verbatim, telling the LLM to call write() for ROLE.md.
  *
  * Case B (workspaceDir absent — defensive fallback): shorter form pinning
  * "Customize {agentId}'s workspace ROLE.md and IDENTITY.md before using."
@@ -94,7 +95,7 @@ export declare function buildCreateContract(agentId: string, workspaceDir: strin
  *
  * @param rpcCall - RPC call function for delegating to the daemon backend
  * @param logger - Required structured logger. Used to emit a per-create
- *   INFO log pinning the next-step contract emission (260428-sw2 Layer 1).
+ *   INFO log pinning the next-step contract emission.
  *   Mirrors the gateway-tool required-logger position; no overload-with-
  *   default-logger compat shim (per `feedback_no_backward_compat.md`).
  * @param approvalGate - Optional approval gate for create/delete actions

package/node_modules/@comis/skills/dist/builtin/platform/agents-manage-tool.js

@@ -48,19 +48,19 @@ export const AgentsManageToolParams = Type.Object({
                     "Default: full. Can be changed later via update action. " +
                     "Alternative shape: nested workspace.profile (see `workspace` field).",
             })),
-            // 260428-oyc: declare nested workspace shape explicitly. The LLM
-            // sometimes emits `workspace: {profile: "specialist"}` directly
-            // (mirroring the downstream Zod schema-agent.ts:733-738 shape).
-            // Without this declaration, the unknown nested object slipped past
-            // TypeBox structurally but the enum was never validated -- invalid
-            // values would only be caught later at the Zod layer with a less
+            // Declare nested workspace shape explicitly. The LLM sometimes
+            // emits `workspace: {profile: "specialist"}` directly (mirroring
+            // the downstream Zod schema-agent.ts:733-738 shape). Without this
+            // declaration, the unknown nested object slipped past TypeBox
+            // structurally but the enum was never validated -- invalid values
+            // would only be caught later at the Zod layer with a less
             // actionable error path. Declaring it here makes both shapes
             // first-class and gates the enum at the tool-validation boundary.
             workspace: Type.Optional(Type.Object({
                 profile: Type.Union([Type.Literal("full"), Type.Literal("specialist")], {
                     description: "Workspace profile (alternative to flat workspace_profile). Valid: full | specialist ONLY. NO other values accepted.",
                 }),
-                // 260428-vyf L2: inline ROLE.md / IDENTITY.md content. The tool
+                // Inline ROLE.md / IDENTITY.md content. The tool
                 // handler strips these from the config payload BEFORE the RPC
                 // and forwards them as a separate top-level `inlineContent`
                 // param. The daemon writes them as files (write-once side-
@@ -95,6 +95,17 @@ export const AgentsManageToolParams = Type.Object({
                     browser: Type.Optional(Type.Boolean({ description: "Enable headless browser control" })),
                 }, { description: "Built-in tool toggles (true=enabled, false=disabled)" })),
             }, { description: "Skills and tool configuration" })),
+            // Per-agent OAuth profile preference. Map of provider → profile-id
+            // (e.g. { "openai-codex": "openai-codex:user@example.com" }).
+            // The downstream Zod schema (PerAgentConfigSchema) is the
+            // canonical format gate via `validateProfileId`; the daemon-side
+            // `agents.update` handler additionally rejects unknown profile IDs
+            // via `OAuthCredentialStore.has()`.
+            oauthProfiles: Type.Optional(Type.Record(Type.String(), Type.String({
+                description: "<provider>:<identity> profile ID. Run `comis auth list` first to discover stored profiles.",
+            }), {
+                description: "OAuth profile preferences per provider (e.g., openai-codex). Each value must match an existing stored profile ID — the daemon rejects nonexistent IDs with a 'not found in store' error.",
+            })),
         }, { description: "Agent configuration for create/update actions" }),
         Type.String({
             description: "Agent configuration as a JSON string (fallback when the LLM stringifies the object). " +
@@ -110,9 +121,9 @@ const VALID_ACTIONS = ["create", "get", "update", "delete", "suspend", "resume",
  * Map flat workspace_profile param to nested workspace.profile config.
  * Mutates config in place.
  *
- * 260428-oyc: precedence is "flat wins" -- when both flat workspace_profile
- * and nested workspace.profile are present, the flat field overwrites the
- * nested one. This matches the existing spread semantics
+ * Precedence is "flat wins" -- when both flat workspace_profile and nested
+ * workspace.profile are present, the flat field overwrites the nested one.
+ * This matches the existing spread semantics
  * (`{...existing, profile}`) and keeps a single deterministic rule. When only
  * nested is present (no `workspace_profile` key), this is a no-op and the
  * nested shape flows through unchanged to the downstream Zod validator.
@@ -145,13 +156,13 @@ function mapWorkspaceProfile(config) {
  * Pure string composition. No I/O, no Result<T,E> needed (per AGENTS.md
  * §2.1: Result is for fallible paths only; this is infallible).
  *
- * Three branches keyed on `inlineWritesResult` (260428-vyf):
+ * Three branches keyed on `inlineWritesResult`:
  *  - BOTH written → SHORT contract: "No further setup needed — agent is
  *    operationally ready". Skips the post-create write() roundtrip.
  *  - PARTIAL (only one of role/identity written) → mixed contract pointing
  *    only at the still-template file with a single "Next required action".
- *  - NEITHER (or write failure / undefined) → existing 260428-sw2 2-step
- *    contract verbatim, telling the LLM to call write() for ROLE.md.
+ *  - NEITHER (or write failure / undefined) → existing 2-step contract
+ *    verbatim, telling the LLM to call write() for ROLE.md.
  *
  * Case B (workspaceDir absent — defensive fallback): shorter form pinning
  * "Customize {agentId}'s workspace ROLE.md and IDENTITY.md before using."
@@ -179,7 +190,7 @@ export function buildCreateContract(agentId, workspaceDir, inlineWritesResult) {
         ].join("\n");
     }
     // NEITHER (no inlineContent supplied, write failure, or undefined): fall
-    // through to the existing 260428-sw2 2-step contract verbatim.
+    // through to the existing 2-step contract verbatim.
     if (workspaceDir !== undefined) {
         return [
             `✓ Agent ${agentId} created at ${workspaceDir}.`,
@@ -222,7 +233,7 @@ function coerceConfig(p) {
  *
  * @param rpcCall - RPC call function for delegating to the daemon backend
  * @param logger - Required structured logger. Used to emit a per-create
- *   INFO log pinning the next-step contract emission (260428-sw2 Layer 1).
+ *   INFO log pinning the next-step contract emission.
  *   Mirrors the gateway-tool required-logger position; no overload-with-
  *   default-logger compat shim (per `feedback_no_backward_compat.md`).
  * @param approvalGate - Optional approval gate for create/delete actions
@@ -260,16 +271,16 @@ export function createAgentsManageTool(rpcCall, logger, approvalGate, callbacks)
                         }
                     }
                 }
-                // 260428-vyf L2 (Path A): strip workspace.role / workspace.identity
-                // from the config payload BEFORE the RPC and forward them as a
-                // separate top-level `inlineContent` parameter. Rationale: the
-                // downstream Zod schema (PerAgentConfigSchema.workspace at
+                // Strip workspace.role / workspace.identity from the config
+                // payload BEFORE the RPC and forward them as a separate top-level
+                // `inlineContent` parameter. Rationale: the downstream Zod schema
+                // (PerAgentConfigSchema.workspace at
                 // packages/core/src/config/schema-agent.ts) is z.strictObject —
                 // unknown keys would trigger Zod `unrecognized_keys` rejection.
                 // role/identity are write-once side-effects (ROLE.md / IDENTITY.md
                 // file writes), NOT durable state — they MUST NOT leak into
-                // config.yaml. Path B (extending Zod schema-agent.ts) was
-                // rejected because it would persist them.
+                // config.yaml. Extending the Zod schema instead would persist
+                // them and was rejected.
                 let inlineContent;
                 if (config && typeof config === "object") {
                     const ws = config.workspace;
@@ -295,11 +306,11 @@ export function createAgentsManageTool(rpcCall, logger, approvalGate, callbacks)
                     const aid = agentId;
                     const workspaceDir = result?.workspaceDir;
                     const inlineWritesResult = result?.inlineWritesResult;
-                    // 260428-sw2 Layer 1 + 260428-vyf Layer 2: emit the next-step
-                    // contract on the freshest, uncached surface the LLM reads each
-                    // turn (the tool_result text). The contract has 3 branches keyed
-                    // on inlineWritesResult (see buildCreateContract). One structured
-                    // INFO log pins this happened.
+                    // Emit the next-step contract on the freshest, uncached surface
+                    // the LLM reads each turn (the tool_result text). The contract
+                    // has 3 branches keyed on inlineWritesResult (see
+                    // buildCreateContract). One structured INFO log pins this
+                    // happened.
                     const contractText = buildCreateContract(aid, workspaceDir, inlineWritesResult);
                     // Distinguish the 3 inline-write outcomes for observability.
                     // "none"    — caller did not supply inlineContent
@@ -311,7 +322,7 @@ export function createAgentsManageTool(rpcCall, logger, approvalGate, callbacks)
                             ? "written"
                             : "failed";
                     logger.info({
-                        module: "skill.agents-manage",
+                        submodule: "skill.agents-manage",
                         action: "create",
                         agentId: aid,
                         workspaceDir: workspaceDir ?? null,

package/node_modules/@comis/skills/dist/builtin/platform/background-tasks-tool.d.ts

@@ -14,13 +14,16 @@ type TaskStatus = "running" | "completed" | "failed" | "cancelled";
 /** Minimal task shape used by this tool. */
 interface TaskInfo {
     id: string;
-    agentId: string;
     toolName: string;
     status: TaskStatus;
     startedAt: number;
     completedAt?: number;
     result?: string;
     error?: string;
+    /** agentId is nested under origin.agentId */
+    origin: {
+        agentId: string;
+    };
 }
 /** Subset of BackgroundTaskManager consumed by this tool. */
 export interface BackgroundTaskManagerLike {

package/node_modules/@comis/skills/dist/builtin/platform/background-tasks-tool.js

@@ -72,7 +72,7 @@ export function createBackgroundTasksTool(deps) {
                 case "get": {
                     const taskId = readStringParam(p, "taskId");
                     const task = deps.manager.getTask(taskId);
-                    if (!task || task.agentId !== deps.agentId) {
+                    if (!task || task.origin.agentId !== deps.agentId) {
                         return {
                             content: [{ type: "text", text: `Error: Task not found: ${taskId}` }],
                             details: null,
@@ -96,7 +96,7 @@ export function createBackgroundTasksTool(deps) {
                 case "cancel": {
                     const taskId = readStringParam(p, "taskId");
                     const task = deps.manager.getTask(taskId);
-                    if (!task || task.agentId !== deps.agentId) {
+                    if (!task || task.origin.agentId !== deps.agentId) {
                         return {
                             content: [{ type: "text", text: `Error: Task not found: ${taskId}` }],
                             details: null,
@@ -117,7 +117,7 @@ export function createBackgroundTasksTool(deps) {
                 case "read_output": {
                     const taskId = readStringParam(p, "taskId");
                     const task = deps.manager.getTask(taskId);
-                    if (!task || task.agentId !== deps.agentId) {
+                    if (!task || task.origin.agentId !== deps.agentId) {
                         return {
                             content: [{ type: "text", text: `Error: Task not found: ${taskId}` }],
                             details: null,