comisai 1.0.36 → 1.0.40

package/node_modules/@comis/core/dist/exports/delivery.js

@@ -0,0 +1,42 @@
+// SPDX-License-Identifier: Apache-2.0
+// @comis/core exports — Delivery primitives.
+//
+// The channel-platform-agnostic delivery helpers (formatForChannel,
+// chunkForDelivery, chunkBlocks, RetryEngine, isPermanentError) live in
+// core/src/delivery/ so that `core → channels` stays one-way per AGENTS.md §1.
+//
+// The Markdown IR pipeline that underlies formatForChannel and chunkForDelivery
+// (markdown-ir, ir-renderer, ir-chunker, markdown-tables, sanitize-for-plain-text,
+// table-converter, telegram-file-ref-guard) lives alongside as a Rule 3 fix.
+// Those internals are intentionally NOT exported from this aggregator: the
+// public surface is limited to the names below plus the telegram-file-ref-guard
+// symbols the daemon needs at bootstrap.
+export { formatForChannel } from "../delivery/format-for-channel.js";
+export { chunkForDelivery } from "../delivery/chunk-for-delivery.js";
+export { chunkBlocks } from "../delivery/block-chunker.js";
+// Note: block-chunker's ChunkMode + ChunkOptions are intentionally NOT
+// re-exported — block-chunker's "paragraph"/"newline"/"sentence"/"length"
+// ChunkMode collides with the streaming-config ChunkMode in
+// exports/config.js, and AGENTS.md §2.3 (KISS/YAGNI) forbids speculative
+// public exports without callers. chunkBlocks is the only block-chunker
+// symbol consumed cross-package.
+export { createRetryEngine, createBlockRetryGuard } from "../delivery/retry-engine.js";
+export { isPermanentError, PERMANENT_ERROR_PATTERNS } from "../delivery/permanent-errors.js";
+// Markdown IR types — re-exported as a narrow public type surface so the
+// Signal channel adapter (signal-format.ts, signal-adapter.ts) can keep its
+// existing typed pipeline import after the Markdown IR pipeline's
+// relocation into core. The IR parser (parseMarkdownToIR) is also exported
+// because signal-format.test.ts exercises it directly.
+export { parseMarkdownToIR } from "../delivery/markdown-ir.js";
+// Telegram file-ref guard — moved alongside the Markdown IR pipeline so
+// ir-renderer (now in core/delivery) keeps a relative import. The daemon
+// initializes the guard during bootstrap (setup-channels.ts), so the
+// initializer + classification sets stay in the public surface.
+export { guardTelegramFileRefs, initTelegramFileGuardConfig, isTelegramFileGuardEnabled, ALWAYS_GUARD_EXTENSIONS, AMBIGUOUS_EXTENSIONS, } from "../delivery/telegram-file-ref-guard.js";
+// DeliveryService factory + interfaces. Provides a `createDeliveryService(deps):
+// DeliveryService` factory in core; callers invoke the method form
+// `deps.deliveryService.deliverToChannel(adapter, ...)`.
+export { createDeliveryService, } from "../delivery/delivery-service.js";
+// Queue-backoff helpers. Consumed by daemon's setup-delivery.ts (drain loop)
+// and by the DeliveryService factory itself.
+export { QUEUE_BACKOFF_SCHEDULE_MS, computeQueueBackoff, resolveChunkLimit, } from "../delivery/queue-backoff.js";

package/node_modules/@comis/core/dist/exports/hooks.d.ts

@@ -1,6 +1,6 @@
-export { createPluginRegistry, createHookRunner, BeforeAgentStartResultSchema, BeforeToolCallResultSchema, ToolResultPersistResultSchema, BeforeCompactionResultSchema, BeforeDeliveryResultSchema, mergeBeforeAgentStart, mergeBeforeToolCall, mergeToolResultPersist, mergeBeforeCompaction, mergeBeforeDelivery, setGlobalHookRunner, getGlobalHookRunner, clearGlobalHookRunner, } from "../hooks/index.js";
+export { createPluginRegistry, createHookRunner, BeforeAgentStartResultSchema, BeforeToolCallResultSchema, ToolResultPersistResultSchema, BeforeCompactionResultSchema, BeforeDeliveryResultSchema, mergeBeforeAgentStart, mergeBeforeToolCall, mergeToolResultPersist, mergeBeforeCompaction, mergeBeforeDelivery, } from "../hooks/index.js";
 export type { PluginRegistry, PluginRegistryOptions, HookRunner, HookRunnerOptions, } from "../hooks/index.js";
 export { createApprovalGate } from "../approval/index.js";
 export type { ApprovalGate, ApprovalGateDeps } from "../approval/index.js";
 export { registerToolMetadata, getToolMetadata, getAllToolMetadata, truncateContentBlocks, } from "../tool-metadata.js";
-export type { ComisToolMetadata } from "../tool-metadata.js";
+export type { ComisToolMetadata, ToolCapabilityMetadata } from "../tool-metadata.js";

package/node_modules/@comis/core/dist/exports/hooks.js

@@ -1,6 +1,6 @@
 // SPDX-License-Identifier: Apache-2.0
 // @comis/core exports — Hooks (plugin system, lifecycle hooks, approval gate, tool metadata)
-export { createPluginRegistry, createHookRunner, BeforeAgentStartResultSchema, BeforeToolCallResultSchema, ToolResultPersistResultSchema, BeforeCompactionResultSchema, BeforeDeliveryResultSchema, mergeBeforeAgentStart, mergeBeforeToolCall, mergeToolResultPersist, mergeBeforeCompaction, mergeBeforeDelivery, setGlobalHookRunner, getGlobalHookRunner, clearGlobalHookRunner, } from "../hooks/index.js";
+export { createPluginRegistry, createHookRunner, BeforeAgentStartResultSchema, BeforeToolCallResultSchema, ToolResultPersistResultSchema, BeforeCompactionResultSchema, BeforeDeliveryResultSchema, mergeBeforeAgentStart, mergeBeforeToolCall, mergeToolResultPersist, mergeBeforeCompaction, mergeBeforeDelivery, } from "../hooks/index.js";
 // Approval gate (pending request lifecycle with timeout auto-deny)
 export { createApprovalGate } from "../approval/index.js";
 // Tool metadata registry

package/node_modules/@comis/core/dist/exports/logging.d.ts

@@ -0,0 +1,3 @@
+export type { ComisLogger, LogFields, ErrorKind } from "../logging/index.js";
+export { VALID_LOG_LEVELS, isValidLogLevel } from "../logging/index.js";
+export { createConsoleLogger } from "../logging/console-logger.js";

package/node_modules/@comis/core/dist/exports/logging.js

@@ -0,0 +1,7 @@
+// SPDX-License-Identifier: Apache-2.0
+// @comis/core exports -- Logging contracts (Pino-free structural interfaces).
+// Canonical home for ComisLogger / LogFields / ErrorKind / VALID_LOG_LEVELS /
+// isValidLogLevel. createConsoleLogger is a Pino-free stderr-JSON writer used
+// by CLI call sites.
+export { VALID_LOG_LEVELS, isValidLogLevel } from "../logging/index.js";
+export { createConsoleLogger } from "../logging/console-logger.js";

package/node_modules/@comis/core/dist/exports/model.d.ts

@@ -0,0 +1,2 @@
+export { createModelCatalog, resolveModelPricing, ZERO_COST, } from "../model/model-catalog.js";
+export type { CatalogEntry, ModelCatalog, PerTokenCostRates, } from "../model/model-catalog.js";

package/node_modules/@comis/core/dist/exports/model.js

@@ -0,0 +1,3 @@
+// SPDX-License-Identifier: Apache-2.0
+// Model catalog re-exports for the @comis/core barrel (relocated from @comis/agent).
+export { createModelCatalog, resolveModelPricing, ZERO_COST, } from "../model/model-catalog.js";

package/node_modules/@comis/core/dist/exports/oauth.d.ts

@@ -0,0 +1,10 @@
+/**
+ * OAuth helper re-exports for the @comis/core barrel.
+ *
+ * CLI consumers import these names from @comis/core (no longer from
+ * @comis/agent; the agent-side re-exports have been removed).
+ *
+ * @module
+ */
+export { selectOAuthCredentialStore, loginOpenAICodexOAuth, createOAuthCredentialStoreFile, loginOpenAICodexDeviceCode, runOAuthTlsPreflight, } from "../oauth/index.js";
+export type { SelectOAuthCredentialStoreInput, OAuthStorageMode, LoginError, LoginRunnerSuccess, LoginRunnerParams, RunnerPrompter, OAuthError, OAuthTokenManager, OAuthTokenManagerDeps, OAuthCredentials, OAuthCredentialStoreFileConfig, DeviceCodeVerificationPrompt, LoginOpenAICodexDeviceCodeOptions, TlsPreflightResult, TlsPreflightFailureKind, RunOAuthTlsPreflightOptions, } from "../oauth/index.js";

package/node_modules/@comis/core/dist/exports/oauth.js

@@ -0,0 +1,10 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * OAuth helper re-exports for the @comis/core barrel.
+ *
+ * CLI consumers import these names from @comis/core (no longer from
+ * @comis/agent; the agent-side re-exports have been removed).
+ *
+ * @module
+ */
+export { selectOAuthCredentialStore, loginOpenAICodexOAuth, createOAuthCredentialStoreFile, loginOpenAICodexDeviceCode, runOAuthTlsPreflight, } from "../oauth/index.js";

package/node_modules/@comis/core/dist/exports/ports.d.ts

@@ -1,2 +1,6 @@
-export { ChannelCapabilitySchema, createNoOpDeliveryQueue, createNoOpDeliveryMirror, validateProfileId, PROFILE_ID_RE, } from "../ports/index.js";
-export type { ChannelPort, MessageHandler, SendMessageOptions, FetchMessagesOptions, FetchedMessage, AttachmentPayload, ChannelPluginPort, ChannelCapability, ChannelStatus, MemoryPort, MemorySearchOptions, MemorySearchResult, MemoryUpdateFields, SkillPort, SkillPermissions, SkillInput, SkillOutput, SkillManifest, EmbeddingPort, TranscriptionPort, TranscriptionOptions, TranscriptionResult, TTSPort, TTSOptions, TTSResult, ImageAnalysisPort, ImageAnalysisOptions, VisionRequest, VideoRequest, VisionResult, VisionProvider, ResolvedMedia, MediaResolverPort, FileClassification, FileExtractionErrorKind, FileExtractionError, FileExtractionInput, FileExtractionResult, FileExtractionPort, HookName, ModifyingHookName, VoidHookName, HookHandlerMap, HookBeforeAgentStartEvent, HookBeforeAgentStartContext, HookBeforeAgentStartResult, HookAgentEndEvent, HookAgentEndContext, HookBeforeToolCallEvent, HookBeforeToolCallContext, HookBeforeToolCallResult, HookAfterToolCallEvent, HookAfterToolCallContext, HookToolResultPersistEvent, HookToolResultPersistContext, HookToolResultPersistResult, HookBeforeCompactionEvent, HookBeforeCompactionContext, HookBeforeCompactionResult, HookAfterCompactionEvent, HookAfterCompactionContext, HookSessionStartEvent, HookSessionStartContext, HookSessionEndEvent, HookSessionEndContext, HookGatewayStartEvent, HookGatewayStartContext, HookGatewayStopEvent, HookGatewayStopContext, PluginPort, PluginRegistryApi, RegisteredHook, PluginToolDefinition, PluginHttpRoute, DeviceIdentity, DeviceIdentityPort, PairingRequest, PairedDevice, OutputGuardPort, OutputGuardFinding, OutputGuardResult, SecretStorePort, SecretMetadata, CredentialMappingPort, OAuthCredentialStorePort, OAuthProfile, DeliveryQueuePort, DeliveryQueueEntry, DeliveryQueueEnqueueInput, DeliveryQueueStatusCounts, DeliveryMirrorPort, DeliveryMirrorEntry, DeliveryMirrorRecordInput, Provider, ImageGenInput, ImageGenOutput, ImageGenerationPort, } from "../ports/index.js";
+export { ChannelCapabilitySchema } from "../domain/channel-capability.js";
+export { createNoOpDeliveryQueue } from "../delivery/no-op-delivery-queue.js";
+export { createNoOpDeliveryMirror } from "../delivery/no-op-delivery-mirror.js";
+export { createNoOpCapabilityPort } from "../tool-capability/no-op-tool-capability.js";
+export { validateProfileId, PROFILE_ID_RE } from "../security/profile-id.js";
+export type { ChannelPort, MessageHandler, SendMessageOptions, FetchMessagesOptions, FetchedMessage, AttachmentPayload, ChannelPluginPort, ChannelCapability, ChannelStatus, MemoryPort, MemorySearchOptions, MemorySearchResult, MemoryUpdateFields, SkillPort, SkillPermissions, SkillInput, SkillOutput, SkillManifest, EmbeddingPort, ContextStorePort, CtxConversationRow, CtxMessageRow, CtxMessagePartRow, CtxSummaryRow, CtxSummaryMessageRow, CtxSummaryParentRow, CtxContextItemRow, CtxLargeFileRow, CtxExpansionGrantRow, SessionStorePort, SessionData, SessionListEntry, SessionDetailedEntry, FileLockPort, LockOptions, LockError, ComputeDailyResetNextRun, TranscriptionPort, TranscriptionOptions, TranscriptionResult, TTSPort, TTSOptions, TTSResult, ImageAnalysisPort, ImageAnalysisOptions, VisionRequest, VideoRequest, VisionResult, VisionProvider, ResolvedMedia, MediaResolverPort, FileClassification, FileExtractionErrorKind, FileExtractionError, FileExtractionInput, FileExtractionResult, FileExtractionPort, HookName, ModifyingHookName, VoidHookName, HookHandlerMap, HookBeforeAgentStartEvent, HookBeforeAgentStartContext, HookBeforeAgentStartResult, HookAgentEndEvent, HookAgentEndContext, HookBeforeToolCallEvent, HookBeforeToolCallContext, HookBeforeToolCallResult, HookAfterToolCallEvent, HookAfterToolCallContext, HookToolResultPersistEvent, HookToolResultPersistContext, HookToolResultPersistResult, HookBeforeCompactionEvent, HookBeforeCompactionContext, HookBeforeCompactionResult, HookAfterCompactionEvent, HookAfterCompactionContext, HookSessionStartEvent, HookSessionStartContext, HookSessionEndEvent, HookSessionEndContext, HookGatewayStartEvent, HookGatewayStartContext, HookGatewayStopEvent, HookGatewayStopContext, PluginPort, PluginRegistryApi, RegisteredHook, PluginToolDefinition, PluginHttpRoute, DeviceIdentity, DeviceIdentityPort, PairingRequest, PairedDevice, OutputGuardPort, OutputGuardFinding, OutputGuardResult, SecretStorePort, SecretMetadata, CredentialMappingPort, OAuthCredentialStorePort, OAuthProfile, DeliveryQueuePort, DeliveryQueueEntry, DeliveryQueueEnqueueInput, DeliveryQueueStatusCounts, DeliveryMirrorPort, DeliveryMirrorEntry, DeliveryMirrorRecordInput, Provider, ImageGenInput, ImageGenOutput, ImageGenerationPort, ToolCapabilityPort, PromptSkillCapability, CapabilitySourceRef, ClusterConfig, McpServerHint, SkillHint, ClockPort, EnvPort, TimerPort, TimerHandle, } from "../ports/index.js";

package/node_modules/@comis/core/dist/exports/ports.js

@@ -1,3 +1,10 @@
 // SPDX-License-Identifier: Apache-2.0
 // @comis/core exports — Port interfaces (hexagonal architecture boundaries)
-export { ChannelCapabilitySchema, createNoOpDeliveryQueue, createNoOpDeliveryMirror, validateProfileId, PROFILE_ID_RE, } from "../ports/index.js";
+// Runtime values that previously lived under core/src/ports/ now live in
+// non-ports/ home modules. The public surface stays byte-identical — only
+// the re-export targets shifted.
+export { ChannelCapabilitySchema } from "../domain/channel-capability.js";
+export { createNoOpDeliveryQueue } from "../delivery/no-op-delivery-queue.js";
+export { createNoOpDeliveryMirror } from "../delivery/no-op-delivery-mirror.js";
+export { createNoOpCapabilityPort } from "../tool-capability/no-op-tool-capability.js";
+export { validateProfileId, PROFILE_ID_RE } from "../security/profile-id.js";

package/node_modules/@comis/core/dist/exports/runtime.d.ts

@@ -0,0 +1,6 @@
+export { isDocker } from "../runtime/is-docker.js";
+export { isRemoteEnvironment } from "../runtime/is-remote-env.js";
+export type { IsRemoteEnvironmentInput } from "../runtime/is-remote-env.js";
+export { createFileLock } from "../runtime/file-lock.js";
+export type { ExecutionLockOptions } from "../runtime/file-lock.js";
+export { systemNowMs, systemNowDate, systemDateFrom, systemSleep, systemSetTimeout, systemClearTimeout, systemSetInterval, systemClearInterval, systemGetEnv, systemEnvSnapshot, systemScheduleTimeout, } from "../runtime/system-time.js";

package/node_modules/@comis/core/dist/exports/runtime.js

@@ -0,0 +1,15 @@
+// SPDX-License-Identifier: Apache-2.0
+// @comis/core exports — Runtime detection helpers + proper-lockfile-backed
+// FileLockPort adapter. `createFileLock` is the canonical adapter target for
+// non-scheduler consumers (CLI, agent OAuth call sites, agent
+// session-write-lock).
+export { isDocker } from "../runtime/is-docker.js";
+export { isRemoteEnvironment } from "../runtime/is-remote-env.js";
+export { createFileLock } from "../runtime/file-lock.js";
+// Sanctioned system-time helpers for in-package consumers that cannot
+// accept an injected ClockPort/TimerPort. Exempt from the globals
+// architecture rule by BOOTSTRAP_PATH_PATTERNS (see
+// test/support/globals-classifier.ts — `packages/(core|infra)/src/runtime/`).
+// Only helpers with actual consumers are exported; the rest stay internal to
+// the runtime/ root (public-export-consumers gate forbids dead exports).
+export { systemNowMs, systemNowDate, systemDateFrom, systemSleep, systemSetTimeout, systemClearTimeout, systemSetInterval, systemClearInterval, systemGetEnv, systemEnvSnapshot, systemScheduleTimeout, } from "../runtime/system-time.js";

package/node_modules/@comis/core/dist/exports/security.d.ts

@@ -1,4 +1,6 @@
 export { safePath, PathTraversalError } from "../security/index.js";
+export { writeMasterKeyIfAbsent, generateMasterKey } from "../security/index.js";
+export type { MasterKeyWriteResult } from "../security/index.js";
 export { createSecretManager, envSubset } from "../security/index.js";
 export type { SecretManager } from "../security/index.js";
 export { classifyAction, requiresConfirmation } from "../security/index.js";
@@ -36,3 +38,5 @@ export { scanConfigForSecrets, scanEnvForSecrets, auditSecrets } from "../securi
 export type { AuditFinding, AuditSeverity, AuditOptions } from "../security/index.js";
 export { ZERO_WIDTH_REGEX, TAG_BLOCK_REGEX, stripInvisible, containsTagBlockChars, IGNORE_PREV_INSTRUCTIONS, YOU_ARE_NOW, FORGET_EVERYTHING, NEW_INSTRUCTIONS, IMPORTANT_OVERRIDE, IGNORE_INSTRUCTIONS_BROAD, DISREGARD_PREVIOUS, FORGET_INSTRUCTIONS_BROAD, YOU_ARE_NOW_ARTICLE, NEW_INSTRUCTIONS_COLON, DISREGARD_INSTRUCTIONS, ACT_AS_ROLE, ASSISTANT_ROLE_MARKER, SPECIAL_TOKEN_DELIMITERS, CONTEXT_RESET, RULE_REPLACEMENT, OVERRIDE_SAFETY, SYSTEM_COLON, SYSTEM_BRACKET, INST_BRACKET, SYSTEM_TAG, SYSTEM_COMMAND, ROLE_BOUNDARY, EXEC_COMMAND, ELEVATED_TRUE, RM_RF, DELETE_ALL, DANGEROUS_COMMAND_PATTERNS, HEX_SECRET_32, BASE64_SECRET, PRIVATE_KEY_HEADER, GITHUB_TOKEN, SLACK_TOKEN, SYSTEM_PROMPT_LABEL, INSTRUCTIONS_LABEL, PROMPT_EXTRACTION_PATTERNS, SK_API_KEY, BEARER_TOKEN_LOG, TELEGRAM_BOT_TOKEN, GOOGLE_API_KEY, JWT_PATTERN, URL_PASSWORD, EXEC_SUBSHELL_PATTERN, EXEC_BACKTICK_PATTERN, EXEC_EVAL_PATTERN, EXEC_PIPE_BASH_PATTERN, ENV_PRINTENV_PATTERN, ENV_PROC_ENVIRON_PATTERN, ENV_MASS_DUMP_PATTERN, CRYPTO_STRATUM_PATTERN, CRYPTO_MINER_BINARY_PATTERN, CRYPTO_POOL_DOMAIN_PATTERN, NET_CURL_PIPE_PATTERN, NET_WGET_EXEC_PATTERN, NET_REVERSE_SHELL_PATTERN, OBF_BASE64_LONG_PATTERN, OBF_HEX_LONG_PATTERN, OBF_BASE64_DECODE_PIPE_PATTERN, XML_SKILL_CLOSE_TAG, XML_SYSTEM_TAG, HTML_COMMENT_INJECTION, HIDDEN_DIV_PATTERN, TRANSLATE_EXECUTE_PATTERN, EXFIL_CURL_PATTERN, READ_SECRETS_PATTERN, WORKSPACE_SCANNER_PATTERNS, } from "../security/index.js";
 export type { StripResult } from "../security/index.js";
+export { decodeCodexJwtPayload, resolveCodexAuthIdentity, resolveCodexStableSubject, resolveCodexAccessTokenExpiry, redactEmailForLog, rewriteOAuthError, } from "../security/index.js";
+export type { OAuthErrorCode, RewrittenOAuthError } from "../security/index.js";

package/node_modules/@comis/core/dist/exports/security.js

@@ -1,6 +1,8 @@
 // SPDX-License-Identifier: Apache-2.0
 // @comis/core exports — Security utilities
 export { safePath, PathTraversalError } from "../security/index.js";
+// Master-key file helpers (daemon-free `secrets init` body)
+export { writeMasterKeyIfAbsent, generateMasterKey } from "../security/index.js";
 export { createSecretManager, envSubset } from "../security/index.js";
 export { classifyAction, requiresConfirmation } from "../security/index.js";
 export { AuditEventSchema, createAuditEvent } from "../security/index.js";
@@ -43,3 +45,5 @@ EXEC_SUBSHELL_PATTERN, EXEC_BACKTICK_PATTERN, EXEC_EVAL_PATTERN, EXEC_PIPE_BASH_
 XML_SKILL_CLOSE_TAG, XML_SYSTEM_TAG, 
 // Workspace scanner patterns
 HTML_COMMENT_INJECTION, HIDDEN_DIV_PATTERN, TRANSLATE_EXECUTE_PATTERN, EXFIL_CURL_PATTERN, READ_SECRETS_PATTERN, WORKSPACE_SCANNER_PATTERNS, } from "../security/index.js";
+// OAuth helpers
+export { decodeCodexJwtPayload, resolveCodexAuthIdentity, resolveCodexStableSubject, resolveCodexAccessTokenExpiry, redactEmailForLog, rewriteOAuthError, } from "../security/index.js";

package/node_modules/@comis/core/dist/exports/workspace.d.ts

@@ -0,0 +1,2 @@
+export { ensureWorkspace, getWorkspaceStatus, registerWorkspaceFilesInTracker, resolveWorkspaceDir, WORKSPACE_SUBDIRS, WORKSPACE_FILE_NAMES, DEFAULT_TEMPLATES, TEMPLATE_MARKER, readWorkspaceState, writeWorkspaceState, incrementOnboardingCount, isIdentityFilled, STATE_FILENAME, WorkspaceStateSchema, } from "../workspace/index.js";
+export type { WorkspaceFiles, EnsureWorkspaceOptions, WorkspaceStatus, WorkspaceSeedTracker, RegisterWorkspaceResult, WorkspaceFileName, WorkspaceState, } from "../workspace/index.js";

package/node_modules/@comis/core/dist/exports/workspace.js

@@ -0,0 +1,3 @@
+// SPDX-License-Identifier: Apache-2.0
+// Workspace helper re-exports for the @comis/core barrel.
+export { ensureWorkspace, getWorkspaceStatus, registerWorkspaceFilesInTracker, resolveWorkspaceDir, WORKSPACE_SUBDIRS, WORKSPACE_FILE_NAMES, DEFAULT_TEMPLATES, TEMPLATE_MARKER, readWorkspaceState, writeWorkspaceState, incrementOnboardingCount, isIdentityFilled, STATE_FILENAME, WorkspaceStateSchema, } from "../workspace/index.js";

package/node_modules/@comis/core/dist/hooks/hook-runner.js

@@ -1,3 +1,4 @@
+import { systemNowMs } from "../runtime/system-time.js";
 import { BeforeAgentStartResultSchema, BeforeToolCallResultSchema, ToolResultPersistResultSchema, BeforeCompactionResultSchema, BeforeDeliveryResultSchema, mergeBeforeAgentStart, mergeBeforeToolCall, mergeToolResultPersist, mergeBeforeCompaction, mergeBeforeDelivery, } from "./hook-strategies.js";
 /**
  * Create a hook runner that executes hooks from the plugin registry.
@@ -18,10 +19,10 @@ export function createHookRunner(registry, options = {}) {
             eventBus.emit("hook:executed", {
                 hookName,
                 pluginId,
-                durationMs: Date.now() - startMs,
+                durationMs: systemNowMs() - startMs,
                 success,
                 error,
-                timestamp: Date.now(),
+                timestamp: systemNowMs(),
             });
         }
     }
@@ -31,7 +32,7 @@ export function createHookRunner(registry, options = {}) {
     function emitAuditEvent(hookName, pluginId, metadata) {
         if (eventBus) {
             eventBus.emit("audit:event", {
-                timestamp: Date.now(),
+                timestamp: systemNowMs(),
                 agentId: "hook-runner",
                 tenantId: "system",
                 actionType: "hook_modification",
@@ -53,7 +54,7 @@ export function createHookRunner(registry, options = {}) {
         if (registeredHooks.length === 0)
             return;
         await Promise.all(registeredHooks.map(async (hook) => {
-            const startMs = Date.now();
+            const startMs = systemNowMs();
             try {
                 await hook.handler(event, ctx);
                 emitHookEvent(hookName, hook.pluginId, startMs, true);
@@ -77,7 +78,7 @@ export function createHookRunner(registry, options = {}) {
             return undefined;
         let result;
         for (const hook of registeredHooks) {
-            const startMs = Date.now();
+            const startMs = systemNowMs();
             try {
                 const r = await hook.handler(event, ctx);
                 if (r) {
@@ -118,7 +119,7 @@ export function createHookRunner(registry, options = {}) {
             return undefined;
         let result;
         for (const hook of registeredHooks) {
-            const startMs = Date.now();
+            const startMs = systemNowMs();
             try {
                 const r = hook.handler(event, ctx);
                 if (r) {

package/node_modules/@comis/core/dist/hooks/index.d.ts

@@ -3,4 +3,3 @@ export type { PluginRegistry, PluginRegistryOptions } from "./plugin-registry.js
 export { createHookRunner } from "./hook-runner.js";
 export type { HookRunner, HookRunnerOptions } from "./hook-runner.js";
 export { BeforeAgentStartResultSchema, BeforeToolCallResultSchema, ToolResultPersistResultSchema, BeforeCompactionResultSchema, BeforeDeliveryResultSchema, mergeBeforeAgentStart, mergeBeforeToolCall, mergeToolResultPersist, mergeBeforeCompaction, mergeBeforeDelivery, } from "./hook-strategies.js";
-export { setGlobalHookRunner, getGlobalHookRunner, clearGlobalHookRunner } from "./hook-runner-global.js";

package/node_modules/@comis/core/dist/hooks/index.js

@@ -3,4 +3,3 @@
 export { createPluginRegistry } from "./plugin-registry.js";
 export { createHookRunner } from "./hook-runner.js";
 export { BeforeAgentStartResultSchema, BeforeToolCallResultSchema, ToolResultPersistResultSchema, BeforeCompactionResultSchema, BeforeDeliveryResultSchema, mergeBeforeAgentStart, mergeBeforeToolCall, mergeToolResultPersist, mergeBeforeCompaction, mergeBeforeDelivery, } from "./hook-strategies.js";
-export { setGlobalHookRunner, getGlobalHookRunner, clearGlobalHookRunner } from "./hook-runner-global.js";

package/node_modules/@comis/core/dist/hooks/plugin-registry.js

@@ -1,4 +1,5 @@
 import { ok, err } from "@comis/shared";
+import { systemNowMs } from "../runtime/system-time.js";
 /**
  * Create a plugin registry that stores plugins and their hooks.
  *
@@ -98,7 +99,7 @@ export function createPluginRegistry(options = {}) {
                     pluginId: plugin.id,
                     pluginName: plugin.name,
                     hookCount: facade.hookCount,
-                    timestamp: Date.now(),
+                    timestamp: systemNowMs(),
                 });
             }
             return ok(undefined);
@@ -163,7 +164,7 @@ export function createPluginRegistry(options = {}) {
                     eventBus.emit("plugin:deactivated", {
                         pluginId: plugin.id,
                         reason: "shutdown",
-                        timestamp: Date.now(),
+                        timestamp: systemNowMs(),
                     });
                 }
             }

package/node_modules/@comis/core/dist/index.d.ts

@@ -1,7 +1,14 @@
 export * from "./exports/domain.js";
 export * from "./exports/ports.js";
 export * from "./exports/security.js";
+export * from "./exports/logging.js";
 export * from "./exports/event-bus.js";
 export * from "./exports/config.js";
 export * from "./exports/hooks.js";
 export * from "./exports/bootstrap.js";
+export * from "./exports/delivery.js";
+export * from "./exports/runtime.js";
+export * from "./exports/oauth.js";
+export * from "./exports/model.js";
+export * from "./exports/workspace.js";
+export * from "./api-contracts/index.js";

package/node_modules/@comis/core/dist/index.js

@@ -6,7 +6,14 @@
 export * from "./exports/domain.js";
 export * from "./exports/ports.js";
 export * from "./exports/security.js";
+export * from "./exports/logging.js";
 export * from "./exports/event-bus.js";
 export * from "./exports/config.js";
 export * from "./exports/hooks.js";
 export * from "./exports/bootstrap.js";
+export * from "./exports/delivery.js";
+export * from "./exports/runtime.js";
+export * from "./exports/oauth.js";
+export * from "./exports/model.js";
+export * from "./exports/workspace.js";
+export * from "./api-contracts/index.js";

package/node_modules/@comis/core/dist/load-env.js

@@ -1,4 +1,5 @@
 // SPDX-License-Identifier: Apache-2.0
+// @allow-throw: loadEnv() failure on missing dotenv file; consumed at daemon bootstrap entry (daemon.ts catch boundary). Bootstrap-time hard fail is the correct contract per AGENTS.md §6.2 (bootstrap() returns Result, but env loader is a primitive consumed before composition root).
 /**
  * Minimal .env file loader.
  *

package/node_modules/@comis/core/dist/logging/console-logger.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Pino-free console logger.
+ *
+ * Writes structured JSON lines to stderr. Satisfies the ComisLogger structural
+ * contract from core/src/logging/log-fields.ts — drop-in replacement for
+ * @comis/infra's Pino-backed createLogger() at CLI call sites.
+ *
+ * Redaction is NOT applied (the Pino-backed logger's redaction is its
+ * runtime feature; the structural contract does not enforce it). CLI use
+ * cases avoid logging credentials by construction.
+ *
+ * @module
+ */
+import type { ComisLogger } from "./log-fields.js";
+export declare function createConsoleLogger(initialLevel?: string, initialBindings?: Record<string, unknown>): ComisLogger;

package/node_modules/@comis/core/dist/logging/console-logger.js

@@ -0,0 +1,47 @@
+import { systemNowMs } from "../runtime/system-time.js";
+function emit(level, bindings, args) {
+    let obj = {};
+    let msg;
+    if (args.length > 0 && typeof args[0] === "object" && args[0] !== null) {
+        obj = { ...args[0] };
+        if (typeof args[1] === "string")
+            msg = args[1];
+    }
+    else if (typeof args[0] === "string") {
+        msg = args[0];
+    }
+    const line = JSON.stringify({
+        level,
+        time: systemNowMs(),
+        ...bindings,
+        ...obj,
+        msg,
+    });
+    process.stderr.write(line + "\n");
+}
+function method(level, bindings) {
+    return (...args) => emit(level, bindings, args);
+}
+export function createConsoleLogger(initialLevel = "info", initialBindings = {}) {
+    let level = initialLevel;
+    const bindings = { ...initialBindings };
+    const logger = {
+        get level() {
+            return level;
+        },
+        set level(l) {
+            level = l;
+        },
+        trace: method("trace", bindings),
+        debug: method("debug", bindings),
+        info: method("info", bindings),
+        warn: method("warn", bindings),
+        error: method("error", bindings),
+        fatal: method("fatal", bindings),
+        audit: method("audit", bindings),
+        child(extraBindings) {
+            return createConsoleLogger(level, { ...bindings, ...extraBindings });
+        },
+    };
+    return logger;
+}

package/node_modules/@comis/core/dist/logging/index.d.ts

@@ -0,0 +1 @@
+export * from "./log-fields.js";

package/node_modules/@comis/core/dist/logging/index.js

@@ -0,0 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// @comis/core/logging -- Pino-free structural logger contract + canonical log fields.
+// Canonical home is here; @comis/infra re-exports these for the
+// daemon/skills/cli runtime path.
+export * from "./log-fields.js";