comisai 1.0.37 → 1.0.41

package/node_modules/@comis/agent/dist/rag/hybrid-memory-injector.js

@@ -9,6 +9,7 @@
  *
  * @module
  */
+import { systemDateFrom } from "@comis/core";
 import { sanitizeToolOutput } from "../safety/tool-output-safety.js";
 import { formatMemorySection } from "./rag-retriever.js";
 // ---------------------------------------------------------------------------
@@ -34,7 +35,7 @@ export function createHybridMemoryInjector(opts) {
             // Check if top-1 qualifies for inline injection
             if (topScore >= inlineMinScore) {
                 // Format top-1 as inline memory
-                const date = new Date(top.entry.createdAt).toISOString().split("T")[0];
+                const date = systemDateFrom(top.entry.createdAt).toISOString().split("T")[0];
                 const sanitized = sanitizeToolOutput(top.entry.content);
                 const inlineMemory = `\n[Relevant context from memory: ${sanitized} (recorded ${date})]\n`;
                 // Format remaining results for system prompt

package/node_modules/@comis/agent/dist/rag/rag-retriever.d.ts

@@ -6,7 +6,7 @@
  * against prompt injection before injection into the LLM system prompt.
  */
 import type { MemoryPort, MemorySearchResult, SessionKey, RagConfig, WrapExternalContentOptions } from "@comis/core";
-import type { ComisLogger } from "@comis/infra";
+import type { ComisLogger } from "@comis/core";
 /**
  * RAG retriever interface -- produces formatted memory sections
  * suitable for system prompt injection.

package/node_modules/@comis/agent/dist/rag/rag-retriever.js

@@ -6,7 +6,7 @@
  * provenance annotations, enforces token budget, and sanitizes content
  * against prompt injection before injection into the LLM system prompt.
  */
-import { wrapExternalContent } from "@comis/core";
+import { wrapExternalContent, systemNowMs, systemDateFrom } from "@comis/core";
 import { sanitizeToolOutput } from "../safety/tool-output-safety.js";
 /**
  * Format a list of memory search results into a single annotated section.
@@ -26,7 +26,7 @@ export function formatMemorySection(results, maxChars, onSuspiciousContent) {
     for (const result of results) {
         const { entry } = result;
         // Format date as YYYY-MM-DD
-        const date = new Date(entry.createdAt).toISOString().split("T")[0];
+        const date = systemDateFrom(entry.createdAt).toISOString().split("T")[0];
         // Format trust tag -- external gets explicit untrusted warning
         const trustTag = entry.trustLevel === "external" ? "[external/untrusted]" : `[${entry.trustLevel}]`;
         // Format optional source channel
@@ -93,7 +93,7 @@ export function createRagRetriever(deps) {
             if (!deps.config.enabled) {
                 return [];
             }
-            const startMs = Date.now();
+            const startMs = systemNowMs();
             deps.logger?.debug({ query: query.slice(0, 100), agentId: options?.agentId }, "RAG search started");
             // Search memory
             const results = await deps.memoryPort.search(sessionKey, query, {
@@ -114,7 +114,7 @@ export function createRagRetriever(deps) {
             }
             // No results found
             if (results.value.length === 0) {
-                deps.logger?.debug({ resultCount: 0, durationMs: Date.now() - startMs, agentId: options?.agentId }, "RAG search complete");
+                deps.logger?.debug({ resultCount: 0, durationMs: systemNowMs() - startMs, agentId: options?.agentId }, "RAG search complete");
                 return [];
             }
             // Post-filter by allowed trust levels
@@ -126,14 +126,14 @@ export function createRagRetriever(deps) {
             // Deduplicate near-identical content (e.g., repeated cron instructions)
             const deduped = deduplicateResults(filtered);
             if (deduped.length === 0) {
-                deps.logger?.debug({ resultCount: 0, durationMs: Date.now() - startMs, agentId: options?.agentId }, "RAG search complete");
+                deps.logger?.debug({ resultCount: 0, durationMs: systemNowMs() - startMs, agentId: options?.agentId }, "RAG search complete");
                 return [];
             }
             deps.logger?.debug({
                 resultCount: deduped.length,
                 rawCount: results.value.length,
                 filteredCount: filtered.length,
-                durationMs: Date.now() - startMs,
+                durationMs: systemNowMs() - startMs,
                 agentId: options?.agentId,
             }, "RAG search complete");
             // Format and enforce budget

package/node_modules/@comis/agent/dist/safety/circuit-breaker.d.ts

@@ -1,4 +1,4 @@
-import type { CircuitBreakerConfig } from "@comis/core";
+import type { CircuitBreakerConfig, ClockPort } from "@comis/core";
 /** Three-state circuit breaker state */
 export type CircuitState = "closed" | "open" | "halfOpen";
 /** Circuit breaker interface for protecting against provider failure cascades */
@@ -24,6 +24,6 @@ export interface CircuitBreaker {
  * - **halfOpen**: A single probe call is allowed. `recordSuccess()` transitions to
  *   `closed`; `recordFailure()` transitions back to `open`.
  *
- * Uses synchronous `Date.now()` comparisons for timer checks (no setTimeout).
+ * Uses synchronous `clock.now()` comparisons for timer checks (no setTimeout).
  */
-export declare function createCircuitBreaker(config: CircuitBreakerConfig): CircuitBreaker;
+export declare function createCircuitBreaker(config: CircuitBreakerConfig, clock: ClockPort): CircuitBreaker;

package/node_modules/@comis/agent/dist/safety/circuit-breaker.js

@@ -8,15 +8,15 @@
  * - **halfOpen**: A single probe call is allowed. `recordSuccess()` transitions to
  *   `closed`; `recordFailure()` transitions back to `open`.
  *
- * Uses synchronous `Date.now()` comparisons for timer checks (no setTimeout).
+ * Uses synchronous `clock.now()` comparisons for timer checks (no setTimeout).
  */
-export function createCircuitBreaker(config) {
+export function createCircuitBreaker(config, clock) {
     const { failureThreshold, resetTimeoutMs } = config;
     let state = "closed";
     let consecutiveFailures = 0;
     let openedAt = 0;
     function tryTransitionToHalfOpen() {
-        if (state === "open" && Date.now() - openedAt >= resetTimeoutMs) {
+        if (state === "open" && clock.now() - openedAt >= resetTimeoutMs) {
             state = "halfOpen";
         }
     }
@@ -37,13 +37,13 @@ export function createCircuitBreaker(config) {
         recordFailure() {
             if (state === "halfOpen") {
                 state = "open";
-                openedAt = Date.now();
+                openedAt = clock.now();
                 return;
             }
             consecutiveFailures++;
             if (consecutiveFailures >= failureThreshold) {
                 state = "open";
-                openedAt = Date.now();
+                openedAt = clock.now();
             }
         },
         getState() {

package/node_modules/@comis/agent/dist/safety/provider-health-monitor.js

@@ -17,6 +17,7 @@
  * Provider Health Monitor
  * @module
  */
+import { systemNowMs } from "@comis/core";
 // ---------------------------------------------------------------------------
 // Factory
 // ---------------------------------------------------------------------------
@@ -80,7 +81,7 @@ export function createProviderHealthMonitor(opts) {
     }
     return {
         recordFailure(provider, agentId) {
-            const now = Date.now();
+            const now = systemNowMs();
             const record = getOrCreateProvider(provider);
             const agent = getOrCreateAgent(record, agentId);
             agent.consecutive++;
@@ -111,7 +112,7 @@ export function createProviderHealthMonitor(opts) {
             }
             // Recovery threshold is 1: any single success recovers
             if (record.degraded) {
-                const now = Date.now();
+                const now = systemNowMs();
                 record.degraded = false;
                 record.lastRecovery = now;
                 eventBus.emit("provider:recovered", {
@@ -126,7 +127,7 @@ export function createProviderHealthMonitor(opts) {
                 return false;
             // Prune expired timestamps on access to prevent stale degradation
             if (record.degraded) {
-                const now = Date.now();
+                const now = systemNowMs();
                 for (const [, agent] of record.agentFailures) {
                     pruneTimestamps(agent, now);
                 }
@@ -145,7 +146,7 @@ export function createProviderHealthMonitor(opts) {
         },
         getHealthSummary() {
             const summary = new Map();
-            const now = Date.now();
+            const now = systemNowMs();
             for (const [provider, record] of providerState) {
                 summary.set(provider, {
                     degraded: record.degraded,

package/node_modules/@comis/agent/dist/safety/token-estimator.d.ts

@@ -7,7 +7,7 @@
  *
  * @module
  */
-import type { Message } from "@mariozechner/pi-ai";
+import type { Message } from "@earendil-works/pi-ai";
 /** General text characters-per-token ratio (conservative 4:1 estimate). */
 export declare const CHARS_PER_TOKEN = 4;
 /**

package/node_modules/@comis/agent/dist/safety/tool-schema-safety.d.ts

@@ -7,7 +7,7 @@
  *
  * @module
  */
-import type { ToolDefinition } from "@mariozechner/pi-coding-agent";
+import type { ToolDefinition } from "@earendil-works/pi-coding-agent";
 /** Known LLM provider names. Accepts any string for forward-compatibility. */
 export type ProviderName = "anthropic" | "openai" | "google" | "openrouter" | string;
 /** Result of normalizing a single schema. */
@@ -32,25 +32,6 @@ export declare const PROVIDER_UNSUPPORTED_KEYWORDS: Record<string, Set<string>>;
  * @returns Normalized schema with list of stripped keywords
  */
 export declare function normalizeToolSchema(schema: Record<string, unknown>, provider: ProviderName): NormalizedSchema;
-/**
- * Normalize all tool definition schemas for a provider.
- *
- * @deprecated Use `normalizeToolSchemasForProvider()` from `provider/tool-schema/normalize.ts` instead.
- * This function only applies Layer 1 (keyword stripping). The new pipeline applies all 4 layers
- * (keyword stripping, Gemini cleaning, xAI stripping, OpenAI type forcing).
- *
- * @param tools - Array of tool definitions with optional inputSchema
- * @param provider - Target LLM provider name
- * @returns Normalized tool definitions with per-tool stripped keyword lists
- */
-export declare function normalizeToolSchemas(tools: Array<{
-    name: string;
-    inputSchema?: Record<string, unknown>;
-}>, provider: ProviderName): Array<{
-    name: string;
-    inputSchema?: Record<string, unknown>;
-    strippedKeywords: string[];
-}>;
 /** Result of pruning descriptions from a single schema. */
 export interface PruneResult {
     schema: Record<string, unknown>;

package/node_modules/@comis/agent/dist/safety/tool-schema-safety.js

@@ -133,26 +133,6 @@ export function normalizeToolSchema(schema, provider) {
     walkAndStrip(cloned, unsupported, stripped);
     return { schema: cloned, strippedKeywords: [...stripped].sort() };
 }
-/**
- * Normalize all tool definition schemas for a provider.
- *
- * @deprecated Use `normalizeToolSchemasForProvider()` from `provider/tool-schema/normalize.ts` instead.
- * This function only applies Layer 1 (keyword stripping). The new pipeline applies all 4 layers
- * (keyword stripping, Gemini cleaning, xAI stripping, OpenAI type forcing).
- *
- * @param tools - Array of tool definitions with optional inputSchema
- * @param provider - Target LLM provider name
- * @returns Normalized tool definitions with per-tool stripped keyword lists
- */
-export function normalizeToolSchemas(tools, provider) {
-    return tools.map((tool) => {
-        if (!tool.inputSchema) {
-            return { name: tool.name, inputSchema: undefined, strippedKeywords: [] };
-        }
-        const { schema, strippedKeywords } = normalizeToolSchema(tool.inputSchema, provider);
-        return { name: tool.name, inputSchema: schema, strippedKeywords };
-    });
-}
 // ---------------------------------------------------------------------------
 // Schema walking (pruning)
 // ---------------------------------------------------------------------------

package/node_modules/@comis/agent/dist/safety/turn-result-budget.d.ts

@@ -11,7 +11,7 @@
  *
  * @module
  */
-import type { Message } from "@mariozechner/pi-ai";
+import type { Message } from "@earendil-works/pi-ai";
 /** Metadata about a single tool result's budget outcome. */
 export interface TurnBudgetToolMeta {
     toolName: string;

package/node_modules/@comis/agent/dist/session/comis-session-manager.d.ts

@@ -14,8 +14,9 @@
  *
  * @module
  */
-import { SessionManager as SdkSessionManager } from "@mariozechner/pi-coding-agent";
+import { SessionManager as SdkSessionManager } from "@earendil-works/pi-coding-agent";
 import { type SessionKey } from "@comis/core";
+import type { ComisLogger, FileLockPort } from "@comis/core";
 import { type Result } from "@comis/shared";
 /** Dependencies for the Comis session manager. */
 export interface ComisSessionManagerDeps {
@@ -25,6 +26,21 @@ export interface ComisSessionManagerDeps {
     lockDir: string;
     /** Workspace directory for SessionManager (stored in session header cwd field) */
     cwd: string;
+    /**
+     * Per-session filesystem mutex. Injected by daemon composition
+     * (setup-agents.ts wires a single `createFileLock()` from `@comis/core`).
+     * Injected as a deps field so agent's production source does not reach
+     * into scheduler or the proper-lockfile package directly.
+     */
+    fileLock: FileLockPort;
+    /**
+     * Optional logger. When provided, structured-cause logging fires before
+     * withSessionLock collapses the FileLockPort's discriminated error union
+     * to the legacy 'locked' | 'error' string. Without it, operator triage
+     * cannot distinguish 'ELOCKED after N retries' from 'EACCES on the lock
+     * directory'. The public Result API is unchanged either way.
+     */
+    logger?: ComisLogger;
 }
 /**
  * Session metadata written as a companion file alongside the JSONL.

package/node_modules/@comis/agent/dist/session/comis-session-manager.js

@@ -15,8 +15,8 @@
  *
  * @module
  */
-import { SessionManager as SdkSessionManager } from "@mariozechner/pi-coding-agent";
-import { formatSessionKey, safePath } from "@comis/core";
+import { SessionManager as SdkSessionManager } from "@earendil-works/pi-coding-agent";
+import { formatSessionKey, safePath, systemNowDate } from "@comis/core";
 import { suppressError } from "@comis/shared";
 import { mkdir, unlink, rm, rmdir } from "node:fs/promises";
 import { existsSync, writeFileSync, readFileSync } from "node:fs";
@@ -38,7 +38,7 @@ export function createComisSessionManager(deps) {
         async withSession(sessionKey, fn) {
             const sessionPath = sessionKeyToPath(sessionKey, deps.sessionBaseDir);
             const sessionKeyStr = formatSessionKey(sessionKey);
-            return withSessionLock(deps.lockDir, sessionKeyStr, async () => {
+            return withSessionLock(deps.fileLock, deps.lockDir, sessionKeyStr, async () => {
                 // Ensure the directory tree exists for new sessions
                 await mkdir(dirname(sessionPath), { recursive: true });
                 // SdkSessionManager.open() handles both cases:
@@ -46,17 +46,31 @@ export function createComisSessionManager(deps) {
                 // - New file: creates in-memory header with flushed=false, defers
                 //   file write until first assistant message (SDK's _persist guard)
                 const sm = SdkSessionManager.open(sessionPath, dirname(sessionPath));
-                const result = await fn(sm);
-                // Post-execution: redact sensitive tool parameters (e.g., env_value)
-                // from the JSONL file while we still hold the write lock.
-                sanitizeSessionSecrets(sessionPath);
-                return result;
-            }, { retries: 10, retryMinTimeout: 1000 });
+                try {
+                    const result = await fn(sm);
+                    return result;
+                }
+                finally {
+                    // ALWAYS sanitize, even on throw — the SDK flushes entries to the
+                    // JSONL file before / during fn execution, so a mid-execution
+                    // exception can leave unredacted tool parameters (env_value, etc.)
+                    // on disk. Running in finally ensures the next reader of the file
+                    // (getSessionStats, replay, sessions.inspect RPC) sees the
+                    // redacted form even on the error path. Sanitization runs while
+                    // we still hold the write lock.
+                    sanitizeSessionSecrets(sessionPath);
+                }
+            }, {
+                retries: 10,
+                retryMinTimeout: 1000,
+                logger: deps.logger,
+                sessionKey: sessionKeyStr,
+            });
         },
         async destroySession(sessionKey) {
             const sessionPath = sessionKeyToPath(sessionKey, deps.sessionBaseDir);
             const sessionKeyStr = formatSessionKey(sessionKey);
-            await withSessionLock(deps.lockDir, sessionKeyStr, async () => {
+            await withSessionLock(deps.fileLock, deps.lockDir, sessionKeyStr, async () => {
                 try {
                     await unlink(sessionPath);
                 }
@@ -68,7 +82,12 @@ export function createComisSessionManager(deps) {
                     await rmdir(sessionDir);
                 }
                 catch { /* non-empty or already gone */ }
-            }, { retries: 10, retryMinTimeout: 500 });
+            }, {
+                retries: 10,
+                retryMinTimeout: 500,
+                logger: deps.logger,
+                sessionKey: sessionKeyStr,
+            });
         },
         getSessionPath(sessionKey) {
             // wire-edge diagnostic: pure delegation to sessionKeyToPath
@@ -77,6 +96,16 @@ export function createComisSessionManager(deps) {
         },
         writeSessionMetadata(sessionKey, metadata) {
             const sessionPath = sessionKeyToPath(sessionKey, deps.sessionBaseDir);
+            // Defensive: sessionKeyToPath has always returned paths ending in
+            // ".jsonl" at HEAD. If that invariant ever regresses (e.g., a future
+            // refactor switches the suffix or returns a directory), the
+            // `replace(/\.jsonl$/, ...)` below would be a no-op and
+            // metadataPath would equal sessionPath -- the subsequent
+            // writeFileSync would clobber the JSONL transcript with a JSON
+            // metadata object. Refuse to write rather than risk data loss.
+            if (!sessionPath.endsWith(".jsonl")) {
+                return;
+            }
             const metadataPath = sessionPath.replace(/\.jsonl$/, "_session-metadata.json");
             try {
                 // Merge with existing metadata if present (accumulates across executions)
@@ -93,7 +122,7 @@ export function createComisSessionManager(deps) {
                     ...(metadata.traceId && { traceId: metadata.traceId }),
                     ...(metadata.runId && { runId: metadata.runId }),
                     ...(metadata.sessionEnd && { sessionEnd: metadata.sessionEnd }),
-                    lastUpdated: new Date().toISOString(),
+                    lastUpdated: systemNowDate().toISOString(),
                 };
                 writeFileSync(metadataPath, JSON.stringify(merged, null, 2) + "\n");
             }
@@ -121,7 +150,7 @@ export function createComisSessionManager(deps) {
                 let createdAt;
                 // Extract creation time from session header
                 if (header?.timestamp) {
-                    createdAt = new Date(header.timestamp).getTime();
+                    createdAt = Date.parse(header.timestamp);
                 }
                 for (const entry of entries) {
                     if (entry.type === "message") {
@@ -141,11 +170,20 @@ export function createComisSessionManager(deps) {
                                     totalCost += cost.total ?? 0;
                                 }
                             }
-                            // Count tool_use content blocks within assistant messages
+                            // Count tool_use content blocks within assistant messages.
+                            // The content array is typed `unknown`, so individual blocks
+                            // can legitimately be null, undefined, or a primitive (string
+                            // content blocks exist in some pi-coding-agent versions).
+                            // Guard with object check before reading `.type` to prevent
+                            // a TypeError that would be swallowed by the outer catch
+                            // (turning a parse hiccup into a silent "no session" result).
                             if (Array.isArray(msg.message.content)) {
                                 for (const block of msg.message.content) {
-                                    if (block.type === "tool_use")
+                                    if (block !== null &&
+                                        typeof block === "object" &&
+                                        block.type === "tool_use") {
                                         toolCalls++;
+                                    }
                                 }
                             }
                         }

package/node_modules/@comis/agent/dist/session/orphaned-message-repair.d.ts

@@ -28,7 +28,7 @@
  *
  * @module
  */
-import type { SessionManager } from "@mariozechner/pi-coding-agent";
+import type { SessionManager } from "@earendil-works/pi-coding-agent";
 /** Result of orphaned message repair. */
 export interface RepairResult {
     /** Whether a repair was performed. */

package/node_modules/@comis/agent/dist/session/orphaned-message-repair.js

@@ -29,6 +29,7 @@
  *
  * @module
  */
+import { systemNowMs } from "@comis/core";
 // ---------------------------------------------------------------------------
 // Public API
 // ---------------------------------------------------------------------------
@@ -156,13 +157,13 @@ function createSyntheticMessage(role, text) {
                 cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: 0 },
             },
             stopReason: "stop",
-            timestamp: Date.now(),
+            timestamp: systemNowMs(),
         };
     }
     return {
         role: "user",
         content: text,
-        timestamp: Date.now(),
+        timestamp: systemNowMs(),
     };
 }
 /** Append a synthetic assistant message with the given text. */

package/node_modules/@comis/agent/dist/session/scrub-redacted-tool-calls.d.ts

@@ -28,7 +28,7 @@
  *
  * @module
  */
-import type { SessionManager } from "@mariozechner/pi-coding-agent";
+import type { SessionManager } from "@earendil-works/pi-coding-agent";
 /** Result of scrubbing redacted tool calls. */
 export interface RedactedScrubResult {
     scrubbed: boolean;

package/node_modules/@comis/agent/dist/session/session-label-store.d.ts

@@ -2,13 +2,13 @@
  * Session Label Store: Human-readable labels for sessions.
  *
  * Provides a thin facade for reading/writing session labels through the
- * existing `metadata.label` field in SessionStore's metadata JSON column.
+ * existing `metadata.label` field in SessionStorePort's metadata JSON column.
  * No schema migration required -- labels are stored as a regular metadata key.
  *
  * @module
  */
 import type { SessionKey } from "@comis/core";
-import type { SessionStore } from "@comis/memory";
+import type { SessionStorePort } from "@comis/core";
 /**
  * Facade for managing human-readable session labels via metadata.label.
  */
@@ -26,9 +26,9 @@ export interface SessionLabelStore {
     }>;
 }
 /**
- * Create a SessionLabelStore wrapping the given SessionStore.
+ * Create a SessionLabelStore wrapping the given SessionStorePort.
  *
  * Labels are stored in `metadata.label` -- no schema migration needed.
- * All operations delegate to the underlying SessionStore for persistence.
+ * All operations delegate to the underlying SessionStorePort for persistence.
  */
-export declare function createSessionLabelStore(store: SessionStore): SessionLabelStore;
+export declare function createSessionLabelStore(store: SessionStorePort): SessionLabelStore;

package/node_modules/@comis/agent/dist/session/session-label-store.js

@@ -3,7 +3,7 @@
  * Session Label Store: Human-readable labels for sessions.
  *
  * Provides a thin facade for reading/writing session labels through the
- * existing `metadata.label` field in SessionStore's metadata JSON column.
+ * existing `metadata.label` field in SessionStorePort's metadata JSON column.
  * No schema migration required -- labels are stored as a regular metadata key.
  *
  * @module
@@ -12,10 +12,10 @@
 // Factory
 // ---------------------------------------------------------------------------
 /**
- * Create a SessionLabelStore wrapping the given SessionStore.
+ * Create a SessionLabelStore wrapping the given SessionStorePort.
  *
  * Labels are stored in `metadata.label` -- no schema migration needed.
- * All operations delegate to the underlying SessionStore for persistence.
+ * All operations delegate to the underlying SessionStorePort for persistence.
  */
 export function createSessionLabelStore(store) {
     return {

package/node_modules/@comis/agent/dist/session/session-lifecycle.d.ts

@@ -1,7 +1,7 @@
 /**
- * Session Lifecycle: Lifecycle wrapper around @comis/memory SessionStore.
+ * Session Lifecycle: Lifecycle wrapper around the SessionStorePort.
  *
- * Wraps @comis/memory SessionStore for expiry/cleanup operations,
+ * Wraps SessionStorePort for expiry/cleanup operations,
  * NOT for JSONL persistence (see comis-session-manager.ts for that).
  *
  * Provides convenience operations for agent session management:
@@ -11,13 +11,13 @@
  * - expire: delete a session
  * - cleanStale: remove sessions older than a threshold
  *
- * Does NOT own the database connection -- receives a pre-existing SessionStore.
+ * Does NOT own the database connection -- receives a pre-existing SessionStorePort.
  *
  * @module
  */
 import type { SessionKey, HookRunner } from "@comis/core";
-import type { ComisLogger } from "@comis/infra";
-import type { SessionStore } from "@comis/memory";
+import type { ComisLogger } from "@comis/core";
+import type { SessionStorePort } from "@comis/core";
 /**
  * Configuration options for the session lifecycle manager.
  */
@@ -47,9 +47,9 @@ export interface SessionLifecycle {
     cleanStale(maxAgeMs?: number): number;
 }
 /**
- * Create a SessionLifecycle wrapping the given SessionStore.
+ * Create a SessionLifecycle wrapping the given SessionStorePort.
  *
  * The session lifecycle manager adds lifecycle semantics (load-or-create, expiry
- * detection, stale cleanup) on top of the raw CRUD provided by SessionStore.
+ * detection, stale cleanup) on top of the raw CRUD provided by SessionStorePort.
  */
-export declare function createSessionLifecycle(store: SessionStore, options?: SessionLifecycleOptions): SessionLifecycle;
+export declare function createSessionLifecycle(store: SessionStorePort, options?: SessionLifecycleOptions): SessionLifecycle;

package/node_modules/@comis/agent/dist/session/session-lifecycle.js

@@ -1,8 +1,8 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
- * Session Lifecycle: Lifecycle wrapper around @comis/memory SessionStore.
+ * Session Lifecycle: Lifecycle wrapper around the SessionStorePort.
  *
- * Wraps @comis/memory SessionStore for expiry/cleanup operations,
+ * Wraps SessionStorePort for expiry/cleanup operations,
  * NOT for JSONL persistence (see comis-session-manager.ts for that).
  *
  * Provides convenience operations for agent session management:
@@ -12,10 +12,11 @@
  * - expire: delete a session
  * - cleanStale: remove sessions older than a threshold
  *
- * Does NOT own the database connection -- receives a pre-existing SessionStore.
+ * Does NOT own the database connection -- receives a pre-existing SessionStorePort.
  *
  * @module
  */
+import { systemNowMs } from "@comis/core";
 // ---------------------------------------------------------------------------
 // Defaults
 // ---------------------------------------------------------------------------
@@ -25,10 +26,10 @@ const DEFAULT_IDLE_TIMEOUT_MS = 14_400_000;
 // Factory
 // ---------------------------------------------------------------------------
 /**
- * Create a SessionLifecycle wrapping the given SessionStore.
+ * Create a SessionLifecycle wrapping the given SessionStorePort.
  *
  * The session lifecycle manager adds lifecycle semantics (load-or-create, expiry
- * detection, stale cleanup) on top of the raw CRUD provided by SessionStore.
+ * detection, stale cleanup) on top of the raw CRUD provided by SessionStorePort.
  */
 export function createSessionLifecycle(store, options) {
     const defaultTimeout = options?.defaultIdleTimeoutMs ?? DEFAULT_IDLE_TIMEOUT_MS;
@@ -64,7 +65,7 @@ export function createSessionLifecycle(store, options) {
             if (data === undefined) {
                 return true;
             }
-            return data.updatedAt + timeout < Date.now();
+            return data.updatedAt + timeout < systemNowMs();
         },
         expire(key) {
             // Fire session_end hook before deletion