comisai 1.0.41 → 1.0.44

package/node_modules/@comis/core/dist/event-bus/events-trajectory.d.ts

@@ -0,0 +1,161 @@
+/**
+ * TrajectoryEvents: the trajectory-observability lifecycle events
+ * (`prompt:*`, `session:*`, `memory:injected`, `tool:timeout`) consumed by the
+ * trajectory event-bus bridge.
+ *
+ * Extracted from `events-agent.ts` (which crossed the file-size cap) into its
+ * own domain interface, composed into `EventMap` (events.ts) exactly like the
+ * other domain groups (AgentEvents / ChannelEvents / TerminalEvents / …). No
+ * behavior change — the event names + payload shapes are byte-identical to
+ * their prior declarations in `AgentEvents`.
+ *
+ * Subscribed via @comis/observability/trajectory/event-bus-bridge.ts. Each is
+ * emitted at a single canonical site and consumed via the EventBus rather than
+ * call-site instrumentation.
+ *
+ * @module
+ */
+export interface TrajectoryEvents {
+    /**
+     * Prompt assembly completed; the next pi-mono `agent_start` call will
+     * submit this exact `(systemPrompt, messages)` pair to the model.
+     * `systemDigest` and `messagesDigest` are sha256 over the canonical
+     * `stableStringify` of the respective inputs — they line up with the
+     * SystemPromptReport digest and the cache-trace artifact for
+     * cross-correlation.
+     *
+     * Emit site: `packages/agent/src/executor/prompt-runner/prompt-runner.ts`
+     * after `wrapEnvelope()` returns and before `runRetryLoop`.
+     */
+    "prompt:submitted": {
+        agentId: string;
+        sessionKey?: string;
+        traceId: string;
+        promptChars: number;
+        provider: string;
+        modelId: string;
+        messageCount: number;
+        systemDigest: string;
+        messagesDigest: string;
+        timestamp: number;
+    };
+    /**
+     * Agent run started — emitted on pi-mono `agent_start` (first turn of
+     * an execution). Distinct from `session:created` which fires on
+     * sessionStore creation; this fires per execute() lifecycle (every
+     * inbound message starts a new agent run).
+     *
+     * Emit site: `packages/agent/src/bridge/pi-event-bridge.ts`
+     */
+    "session:started": {
+        agentId: string;
+        sessionKey?: string;
+        traceId: string;
+        channelType: string;
+        channelId: string;
+        accountId?: string;
+        timestamp: number;
+    };
+    /**
+     * Agent run ended — emitted on pi-mono `agent_end`. Carries aggregated
+     * turn / token totals for the run plus an `exitReason` discriminator.
+     *
+     * Emit site: `packages/agent/src/bridge/pi-event-bridge.ts`
+     */
+    "session:ended": {
+        agentId: string;
+        sessionKey?: string;
+        traceId: string;
+        totalTurns: number;
+        totalInputTokens: number;
+        totalOutputTokens: number;
+        durationMs: number;
+        exitReason: string;
+        timestamp: number;
+    };
+    /**
+     * Per-session health rollup emitted once at agent-end. Emit site:
+     * packages/agent/src/executor/executor-post-execution.ts (D5/F2).
+     *
+     * `topErrorKinds` (keys ⊂ the closed `ErrorKind` union, capped at 3) and
+     * `source` (provenance enum, mirroring the session-index SSOT) are carried
+     * onto the event so they land in the persisted `obs_diagnostics` row and the
+     * fleet aggregate (`aggregateSessionsInWindow`, Phase 159 A1/A2) can read them
+     * without opening per-session `_session-metadata.json` files. Production emits
+     * the constant `source: "runtime"`; tests inject `"test"` / `"bench"`.
+     *
+     * `endReason` is the SAME mapped `SessionMetadata.sessionEnd.endReason` the
+     * chokepoint derives ONCE via `END_REASON_MAP` (executor-post-execution.ts) and
+     * co-persists onto `sessionEnd`. Carrying it here threads the NAMED degradation
+     * cause (e.g. `context_exhausted` / `output_starved`, the Glass Box degradation
+     * detectors) into the persisted row so `obs.fleet.health` can aggregate
+     * `degradedByCause` from the rows alone — never opening per-session metadata. It
+     * is a closed-set label (the endReason union), never free text.
+     */
+    "session:summary": {
+        sessionKey: string;
+        agentId: string;
+        traceId: string;
+        degraded: boolean;
+        turnCount: number;
+        costUsd: number;
+        toolStats: Record<string, {
+            ok: number;
+            failed: number;
+        }>;
+        breakerTripCount: number;
+        topErrorKinds: Record<string, number>;
+        source: "runtime" | "test" | "bench";
+        /** The mapped endReason (the named degradation cause) — closed-set label. */
+        endReason: string;
+        timestamp: number;
+    };
+    /**
+     * RAG memory was injected into the prompt for this turn. Fires only on
+     * turns where the hybrid memory injector actually emitted at least one
+     * section / inline string — no-injection turns produce no event.
+     *
+     * Emit site: `packages/agent/src/executor/prompt-assembly.ts`, after the
+     * hybrid split. `charsInjected`/`hitCount` count RETRIEVED memory only
+     * (inline + retrieved sections); the §7.3 temporal-guidance block is fixed
+     * guidance text and is deliberately NOT tallied here.
+     */
+    "memory:injected": {
+        agentId: string;
+        sessionKey?: string;
+        traceId: string;
+        hitCount: number;
+        charsInjected: number;
+        trustTags: string[];
+        /** Number of pinned entries prepended to the recall result (Step 0 of the
+         *  recall pipeline). Zero when pinning is disabled or no pins exist — the
+         *  default-off byte-identical path. Surfaced here so trajectory consumers
+         *  can distinguish pinned-first from fused-recall injection budgets. */
+        pinnedCount?: number;
+        timestamp: number;
+    };
+    /**
+     * Explicit tool-timeout signal. Fires alongside `tool:executed` with
+     * `errorKind: "timeout"` for the SAME physical timeout — both events
+     * share `toolCallId` so the trajectory consumer can dedupe (the
+     * `tool:executed` emit carries the full result; this event makes the
+     * timeout case enumerable for the architecture test).
+     *
+     * Dedup contract: downstream trajectory consumers see both
+     * `tool.result` (from `tool:executed`) AND `tool.timeout` (from this
+     * event) for any physical tool timeout. Both carry `toolCallId`; join
+     * on that key to avoid double-counting.
+     *
+     * Emit site: `packages/agent/src/bridge/pi-event-bridge.ts` in the
+     * `tool_execution_end` branch when `toolErrorKind === "timeout"`.
+     */
+    "tool:timeout": {
+        agentId: string;
+        sessionKey?: string;
+        traceId: string;
+        toolName: string;
+        toolCallId?: string;
+        timeoutMs: number;
+        timestamp: number;
+    };
+}

package/node_modules/@comis/core/dist/event-bus/events-trajectory.js

@@ -0,0 +1,19 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * TrajectoryEvents: the trajectory-observability lifecycle events
+ * (`prompt:*`, `session:*`, `memory:injected`, `tool:timeout`) consumed by the
+ * trajectory event-bus bridge.
+ *
+ * Extracted from `events-agent.ts` (which crossed the file-size cap) into its
+ * own domain interface, composed into `EventMap` (events.ts) exactly like the
+ * other domain groups (AgentEvents / ChannelEvents / TerminalEvents / …). No
+ * behavior change — the event names + payload shapes are byte-identical to
+ * their prior declarations in `AgentEvents`.
+ *
+ * Subscribed via @comis/observability/trajectory/event-bus-bridge.ts. Each is
+ * emitted at a single canonical site and consumed via the EventBus rather than
+ * call-site instrumentation.
+ *
+ * @module
+ */
+export {};

package/node_modules/@comis/core/dist/event-bus/events.d.ts

@@ -1,15 +1,30 @@
 import type { MessagingEvents } from "./events-messaging.js";
 import type { AgentEvents } from "./events-agent.js";
+import type { ModelEvents } from "./events-model.js";
+import type { OrchestrationEvents } from "./events-orchestration.js";
+import type { LearningEvents } from "./events-learning.js";
+import type { TrajectoryEvents } from "./events-trajectory.js";
 import type { ChannelEvents } from "./events-channel.js";
 import type { InfraEvents } from "./events-infra.js";
+import type { TerminalEvents } from "./events-terminal.js";
+import type { MediaGenerationEvents, MediaVisionEvents, MediaVideoGenerationEvents, MediaSttEvents, MediaTtsEvents } from "./events-media.js";
 /**
  * EventMap: Central type registry for all system events.
  *
  * Composed from domain-grouped sub-interfaces. Find events by subsystem:
  * - MessagingEvents: message, session, compaction, context, response, command
- * - AgentEvents: skill, tool, model, audit, observability (token/latency)
+ * - AgentEvents: skill, tool, audit, security, memory, observability (token/latency/spend)
+ * - ModelEvents: model-failover (model:*) + provider-health (provider:*) lifecycle
+ * - OrchestrationEvents: multi-agent graph lifecycle (graph:*, subagent:budget_exceeded — BUDGET-03)
+ * - LearningEvents: verified-learning write-back/telemetry (memory:skill_used — ATTR-02)
+ * - TrajectoryEvents: trajectory-bridge lifecycle (prompt:submitted, session:started/ended/summary, memory:injected, tool:timeout)
  * - ChannelEvents: channel, queue, streaming, typing, autoreply, sendpolicy, debounce, priority, retry, ack
  * - InfraEvents: config, plugin, hook, browser, auth, device, diagnostic, media, scheduler, system, metrics
+ * - TerminalEvents: interactive terminal-driver session lifecycle (session_state, spawn_failed)
+ * - MediaGenerationEvents: image-generation lifecycle (image:requested/generated/delivered/failed — OBS-04)
+ * - MediaVisionEvents: vision-analysis lifecycle (media.vision:requested/completed/failed — VIS-04)
+ * - MediaVideoGenerationEvents: video-generation lifecycle (video:requested/submitted/generated/delivered/failed — OBS-04, Phase 192)
+ * - MediaSttEvents / MediaTtsEvents: voice STT/TTS lifecycle (media.stt / media.tts requested/completed/failed — OBS-02/03, Phase 196)
  */
-export interface EventMap extends MessagingEvents, AgentEvents, ChannelEvents, InfraEvents {
+export interface EventMap extends MessagingEvents, AgentEvents, ModelEvents, OrchestrationEvents, LearningEvents, TrajectoryEvents, ChannelEvents, InfraEvents, TerminalEvents, MediaGenerationEvents, MediaVisionEvents, MediaVideoGenerationEvents, MediaSttEvents, MediaTtsEvents {
 }

package/node_modules/@comis/core/dist/event-bus/index.d.ts

@@ -3,5 +3,9 @@ export type { EventHandler } from "./bus.js";
 export type { EventMap } from "./events.js";
 export type { MessagingEvents } from "./events-messaging.js";
 export type { AgentEvents } from "./events-agent.js";
+export type { SpendScopeKind } from "./events-agent.js";
+export type { ModelEvents } from "./events-model.js";
+export type { OrchestrationEvents } from "./events-orchestration.js";
 export type { ChannelEvents } from "./events-channel.js";
 export type { InfraEvents } from "./events-infra.js";
+export type { ReflectAdmissionOutcome } from "./events-learning.js";

package/node_modules/@comis/core/dist/exports/activity.d.ts

@@ -0,0 +1,4 @@
+export { ActivityEventSchema, RedactedParamValueSchema, RedactedParamsSchema, parseActivityEvent, ApprovalChoiceSchema, ApprovalCorrelationSchema, isNonEmptyEvents, applyTemplate, classifySemanticPhase, registerActivityLabelSpec, resolveLabelSpec, hasRegisteredLabelSpec, selectStrategy, chatProjection, acpProjection, coalesce, CHAT_COALESCE_RULES, themeForName, } from "../activity/index.js";
+export { narrowChatType } from "../domain/chat-type.js";
+export type { ActivityEvent, ActivityParseError, ApprovalCorrelation, ApprovalChoice, FinalDeliveryReceipt, DeliveryFailureReceipt, DeliveryStageResult, TurnOutcome, TemplateOutput, TemplateError, SemanticPhase, LabelSpec, ActionLabelSpec, RegisteredLabelSpec, ActivityTheme, ResolveLabelOptions, ThemeName, ActivityStatusMarkers, TurnActivityContext, ActivityStrategy, ActivityRenderFrame, PlanSnapshot, ChannelActivityRenderer, ActivityRenderError, ActivitySubscription, ActivityStreamPort, ProjectionConfig, CoalesceResult, ActivityVerbosity, } from "../activity/index.js";
+export type { ExecutionPlanPort, ReadonlyExecutionPlan, ReadonlyPlanStep, } from "../ports/execution-plan-port.js";

package/node_modules/@comis/core/dist/exports/activity.js

@@ -0,0 +1,30 @@
+// SPDX-License-Identifier: Apache-2.0
+// @comis/core exports — Activity surface (domain envelope + pure logic + ports
+// + projections). This per-surface file re-exports the SOLE `core/activity`
+// barrel and the read-only `ExecutionPlanPort` (the execution-plan port rides
+// on the activity surface — there is no separate `exports/ports.ts` edit in the
+// owning plan). Downstream packages import all of this from "@comis/core" —
+// the barrel stays "."-only, no deep-import subpaths.
+export { 
+// activity-event
+ActivityEventSchema, RedactedParamValueSchema, RedactedParamsSchema, parseActivityEvent, 
+// approval
+ApprovalChoiceSchema, ApprovalCorrelationSchema, 
+// turn-outcome
+isNonEmptyEvents, 
+// template-engine / semantic-classifier / label-spec
+applyTemplate, classifySemanticPhase, registerActivityLabelSpec, resolveLabelSpec, hasRegisteredLabelSpec, 
+// strategy + projections
+selectStrategy, chatProjection, acpProjection, coalesce, CHAT_COALESCE_RULES, 
+// themes — the name→bundle registry. The daemon composition root resolves
+// `themeForName(<default-agent theme>)` and bakes the resolved marker set
+// into `ActivityEvent.defaultLabel`.
+themeForName, } from "../activity/index.js";
+// ChatType narrowing (§4.6). Surfaced here so the
+// orchestrator composition can build `TurnActivityContext.chatType`
+// from a `NormalizedMessage.chatType` via the canonical `narrowChatType` instead
+// of re-hand-rolling the 5→3 fold. Only the `narrowChatType` value is re-exported:
+// the `ChatType` type already reaches consumers transitively through
+// `TurnActivityContext.chatType`, and `ChatTypeSchema`/`NormalizedChatType` have no
+// in-repo by-name consumer yet (re-export them when one lands — dead-export guard).
+export { narrowChatType } from "../domain/chat-type.js";

package/node_modules/@comis/core/dist/exports/bootstrap.d.ts

@@ -1,5 +1,5 @@
 export { loadEnvFile, assertEnvLoaded, resetEnvLoadedForTest } from "../load-env.js";
 export { RequestContextSchema, UserTrustLevelSchema, getContext, tryGetContext, runWithContext, } from "../context/index.js";
 export type { RequestContext, UserTrustLevel } from "../context/index.js";
-export { bootstrap } from "../bootstrap.js";
+export { bootstrap, INTERACTIVE_CALLBACK_SIGNING_SECRET_NAME } from "../bootstrap.js";
 export type { BootstrapOptions, AppContainer } from "../bootstrap.js";

package/node_modules/@comis/core/dist/exports/bootstrap.js

@@ -5,4 +5,4 @@ export { loadEnvFile, assertEnvLoaded, resetEnvLoadedForTest } from "../load-env
 // Request context (AsyncLocalStorage-based tenant/user/trace propagation)
 export { RequestContextSchema, UserTrustLevelSchema, getContext, tryGetContext, runWithContext, } from "../context/index.js";
 // Bootstrap (composition root)
-export { bootstrap } from "../bootstrap.js";
+export { bootstrap, INTERACTIVE_CALLBACK_SIGNING_SECRET_NAME } from "../bootstrap.js";

package/node_modules/@comis/core/dist/exports/config.d.ts

@@ -1,2 +1,2 @@
-export { AppConfigSchema, AgentConfigSchema, AgentsMapSchema, BudgetConfigSchema, CircuitBreakerConfigSchema, DmScopeConfigSchema, ElevatedReplyConfigSchema, ModelRoutesSchema, HeartbeatConfigSchema, HeartbeatTargetSchema, PerAgentConfigSchema, PerAgentCronConfigSchema, PerAgentHeartbeatConfigSchema, PerAgentSchedulerConfigSchema, PruningConfigSchema, RagConfigSchema, ResetPolicyOverrideSchema, RoutingBindingSchema, RoutingConfigSchema, SessionResetPolicySchema, TracingConfigSchema, ChannelConfigSchema, ChannelEntrySchema, ChannelHealthCheckSchema, MemoryConfigSchema, CompactionConfigSchema, RetentionConfigSchema, SecurityConfigSchema, PermissionConfigSchema, ActionConfirmationConfigSchema, AgentToAgentConfigSchema, SkillsConfigSchema, DaemonConfigSchema, LoggingConfigSchema, TracingDefaultsSchema, ConfigWebhookSchema, SchedulerConfigSchema, GatewayConfigSchema, GatewayTlsConfigSchema, GatewayTokenSchema, GatewayRateLimitSchema, IntegrationsConfigSchema, BraveSearchConfigSchema, McpServerEntrySchema, McpConfigSchema, TranscriptionConfigSchema, TtsConfigSchema, TtsAutoModeSchema, ElevenLabsVoiceSettingsSchema, TtsOutputFormatSchema, ImageAnalysisConfigSchema, VisionScopeRuleSchema, VisionConfigSchema, LinkUnderstandingConfigSchema, MediaConfigSchema, DOCUMENT_MIME_WHITELIST, FileExtractionConfigSchema, AutoReplyRuleSchema, AutoReplyConfigSchema, MonitoringConfigSchema, PluginsConfigSchema, PluginEntrySchema, QueueConfigSchema, QueueModeSchema, OverflowPolicySchema, PerChannelQueueConfigSchema, OverflowConfigSchema, DebounceBufferConfigSchema, FollowupConfigSchema, PriorityLaneConfigSchema, LaneAssignmentConfigSchema, StreamingConfigSchema, PerChannelStreamingConfigSchema, TypingModeSchema, ChunkModeSchema, DeliveryMirrorConfigSchema, DeliveryQueueConfigSchema, DeliveryTimingConfigSchema, DeliveryTimingModeSchema, CoalescerConfigSchema, AutoReplyEngineConfigSchema, GroupActivationModeSchema, SendPolicyConfigSchema, SendPolicyRuleSchema, SendActionSchema, EnvelopeConfigSchema, RetryConfigSchema, WebhooksConfigSchema, WebhookMappingConfigSchema, WebhookMappingMatchSchema, AgentSecretsConfigSchema, SecretsConfigSchema, DocumentationConfigSchema, DocumentationLinkSchema, ImageGenerationConfigSchema, NotificationConfigSchema, VerbosityConfigSchema, VerbosityLevelSchema, VerbosityOverrideSchema, ContextEngineConfigSchema, BackgroundTasksConfigSchema, OutputRetentionConfigSchema, MemoryReviewConfigSchema, ProviderEntrySchema, ProvidersConfigSchema, UserModelSchema, ModelCostSchema, OperationModelEntrySchema, OperationModelsSchema, OAuthConfigSchema, substituteEnvVars, warnSuspiciousEnvValues, findUnresolvedEnvRefs, formatMissingEnvRefError, loadConfigFile, validateConfig, deepMerge, mergeLayered, loadLayered, IMMUTABLE_CONFIG_PREFIXES, MUTABLE_CONFIG_OVERRIDES, isImmutableConfigPath, matchesOverridePattern, getMutableOverridesForSection, MANAGED_SECTIONS, getManagedSectionRedirect, formatRedirectHint, getConfigSchema, getConfigSections, getFieldMetadata, validatePartial, createConfigGitManager, ToolingConfigSchema, DEFAULT_CLUSTER_CONFIG, DEFAULT_BUILTIN_ASSIGNMENTS, checkApprovalsConfig, } from "../config/index.js";
-export type { AppConfig, AgentConfig, BudgetConfig, CircuitBreakerConfig, DmScopeConfig, ElevatedReplyConfig, ModelRoutes, PruningConfig, HeartbeatConfig, HeartbeatTarget, PerAgentConfig, PerAgentCronConfig, PerAgentHeartbeatConfig, PerAgentSchedulerConfig, RagConfig, ResetPolicyOverride, RoutingBinding, RoutingConfig, SessionResetPolicyConfig, TracingConfig, ChannelConfig, ChannelEntry, ChannelHealthCheckConfig, AckReactionConfig, MemoryConfig, CompactionConfig, RetentionConfig, SecurityConfig, PermissionConfig, ActionConfirmationConfig, AgentToAgentConfig, SkillsConfig, DaemonConfig, LoggingConfig, TracingDefaults, ConfigWebhook, SchedulerConfig, GatewayConfig, GatewayTlsConfig, GatewayToken, GatewayRateLimit, IntegrationsConfig, BraveSearchConfig, McpServerEntry, McpConfig, TranscriptionConfig, TtsConfig, TtsAutoMode, ElevenLabsVoiceSettings, TtsOutputFormat, ImageAnalysisConfig, VisionScopeRule, VisionConfig, LinkUnderstandingConfig, MediaConfig, FileExtractionConfig, AutoReplyRule, AutoReplyConfig, MonitoringConfig, DiskMonitorConfig, ResourceMonitorConfig, SystemdMonitorConfig, SecurityUpdateMonitorConfig, GitMonitorConfig, PluginsConfig, PluginEntry, QueueConfig, PerChannelQueueConfig, QueueMode, OverflowPolicy, OverflowConfig, DebounceBufferConfig, FollowupConfig, PriorityLaneConfig, LaneAssignmentConfig, StreamingConfig, PerChannelStreamingConfig, TypingMode, ChunkMode, DeliveryMirrorConfig, DeliveryQueueConfig, DeliveryTimingConfig, DeliveryTimingMode, CoalescerConfig, AutoReplyEngineConfig, GroupActivationMode, SendPolicyConfig, SendPolicyRule, SendAction, EnvelopeConfig, RetryConfig, WebhooksConfig, WebhookMappingConfig, AgentSecretsConfig, SecretsConfig, ConfigError, ConfigErrorCode, FieldMetadata, PartialValidationResult, ConfigGitManager, GitCommitMetadata, HistoryEntry, GitManagerDeps, ExecGitFn, EnvValueWarning, UnresolvedEnvRef, LifecycleReactionsConfig, LifecycleReactionsTimingConfig, SenderTrustDisplayConfig, DocumentationConfig, DocumentationLink, ImageGenerationConfig, NotificationConfig, VerbosityConfig, VerbosityLevel, VerbosityOverride, ContextEngineConfig, BackgroundTasksConfig, OutputRetentionConfig, RetentionClass, MemoryReviewConfig, ProviderEntry, ProvidersConfig, UserModel, ModelCost, OperationModelEntry, OperationModels, ModelOperationType, ToolingConfig, OAuthConfig, } from "../config/index.js";
+export { AppConfigSchema, AgentConfigSchema, AgentsMapSchema, BudgetConfigSchema, CircuitBreakerConfigSchema, DmScopeConfigSchema, ElevatedReplyConfigSchema, ModelRoutesSchema, HeartbeatConfigSchema, HeartbeatTargetSchema, PerAgentConfigSchema, PerAgentCronConfigSchema, PerAgentHeartbeatConfigSchema, PerAgentSchedulerConfigSchema, PruningConfigSchema, RagConfigSchema, ResetPolicyOverrideSchema, RoutingBindingSchema, RoutingConfigSchema, SessionResetPolicySchema, TracingConfigSchema, ChannelConfigSchema, ChannelEntrySchema, ChannelHealthCheckSchema, MemoryConfigSchema, CompactionConfigSchema, RetentionConfigSchema, SecurityConfigSchema, PermissionConfigSchema, ActionConfirmationConfigSchema, AgentToAgentConfigSchema, SkillsConfigSchema, DaemonConfigSchema, LoggingConfigSchema, TracingDefaultsSchema, ConfigWebhookSchema, SchedulerConfigSchema, GatewayConfigSchema, GatewayTlsConfigSchema, GatewayTokenSchema, GatewayRateLimitSchema, IntegrationsConfigSchema, BraveSearchConfigSchema, McpServerEntrySchema, McpConfigSchema, TranscriptionConfigSchema, TtsConfigSchema, TtsAutoModeSchema, ElevenLabsVoiceSettingsSchema, TtsOutputFormatSchema, ImageAnalysisConfigSchema, VisionScopeRuleSchema, VisionConfigSchema, LinkUnderstandingConfigSchema, MediaConfigSchema, DOCUMENT_MIME_WHITELIST, FileExtractionConfigSchema, AutoReplyRuleSchema, AutoReplyConfigSchema, MonitoringConfigSchema, PluginsConfigSchema, PluginEntrySchema, QueueConfigSchema, QueueModeSchema, OverflowPolicySchema, PerChannelQueueConfigSchema, OverflowConfigSchema, DebounceBufferConfigSchema, FollowupConfigSchema, StreamingConfigSchema, PerChannelStreamingConfigSchema, TypingModeSchema, ChunkModeSchema, DeliveryMirrorConfigSchema, DeliveryQueueConfigSchema, DeliveryTimingConfigSchema, DeliveryTimingModeSchema, CoalescerConfigSchema, AutoReplyEngineConfigSchema, GroupActivationModeSchema, SendPolicyConfigSchema, SendPolicyRuleSchema, SendActionSchema, EnvelopeConfigSchema, RetryConfigSchema, WebhooksConfigSchema, WebhookMappingConfigSchema, WebhookMappingMatchSchema, AgentSecretsConfigSchema, DocumentationConfigSchema, DocumentationLinkSchema, ImageGenerationConfigSchema, VideoGenerationConfigSchema, NotificationConfigSchema, VerbosityConfigSchema, VerbosityLevelSchema, VerbosityOverrideSchema, ContextEngineConfigSchema, BackgroundTasksConfigSchema, OutputRetentionConfigSchema, MemoryReviewConfigSchema, ProviderEntrySchema, ProvidersConfigSchema, UserModelSchema, ModelCostSchema, PROVIDER_TIMEOUT_MS_DEFAULT, OperationModelEntrySchema, OperationModelsSchema, substituteEnvVars, warnSuspiciousEnvValues, findUnresolvedEnvRefs, formatMissingEnvRefError, loadConfigFile, preReadStorageMode, validateConfig, deepMerge, mergeLayered, loadLayered, IMMUTABLE_CONFIG_PREFIXES, MUTABLE_CONFIG_OVERRIDES, isImmutableConfigPath, matchesOverridePattern, getMutableOverridesForSection, MANAGED_SECTIONS, getManagedSectionRedirect, formatRedirectHint, getConfigSchema, getConfigSections, getFieldMetadata, validatePartial, createConfigGitManager, ToolingConfigSchema, DEFAULT_CLUSTER_CONFIG, DEFAULT_BUILTIN_ASSIGNMENTS, checkApprovalsConfig, BrokerBindingConfigSchema, OrchestrationConfigSchema, OrchestrationAuthoringConfigSchema, AutonomyConfigSchema, AutonomyMessageConfigSchema, AUTONOMY_PROFILES, STANDARD_FLOOR_CAPABILITIES, resolveAutonomy, resolveEffectiveMode, DurabilityConfigSchema, degradeAutonomy, } from "../config/index.js";
+export type { AppConfig, AgentConfig, BudgetConfig, CircuitBreakerConfig, DmScopeConfig, ElevatedReplyConfig, ModelRoutes, PruningConfig, HeartbeatConfig, HeartbeatTarget, PerAgentConfig, PerAgentCronConfig, PerAgentHeartbeatConfig, PerAgentSchedulerConfig, RagConfig, ResetPolicyOverride, RoutingBinding, RoutingConfig, SessionResetPolicyConfig, TracingConfig, ChannelConfig, ChannelEntry, ChannelHealthCheckConfig, AckReactionConfig, MemoryConfig, CompactionConfig, RetentionConfig, SecurityConfig, PermissionConfig, ActionConfirmationConfig, AgentToAgentConfig, CredentialStorageMode, SkillsConfig, TerminalAllowEntry, TerminalDriverConfig, DaemonConfig, LoggingConfig, TracingDefaults, ConfigWebhook, SchedulerConfig, GatewayConfig, GatewayTlsConfig, GatewayToken, GatewayRateLimit, IntegrationsConfig, BraveSearchConfig, McpServerEntry, McpConfig, TranscriptionConfig, TtsConfig, TtsAutoMode, ElevenLabsVoiceSettings, TtsOutputFormat, ImageAnalysisConfig, VisionScopeRule, VisionConfig, LinkUnderstandingConfig, MediaConfig, FileExtractionConfig, AutoReplyRule, AutoReplyConfig, MonitoringConfig, DiskMonitorConfig, ResourceMonitorConfig, SystemdMonitorConfig, SecurityUpdateMonitorConfig, GitMonitorConfig, PluginsConfig, PluginEntry, QueueConfig, PerChannelQueueConfig, QueueMode, OverflowPolicy, OverflowConfig, DebounceBufferConfig, FollowupConfig, StreamingConfig, PerChannelStreamingConfig, TypingMode, ChunkMode, DeliveryMirrorConfig, DeliveryQueueConfig, DeliveryTimingConfig, DeliveryTimingMode, CoalescerConfig, AutoReplyEngineConfig, GroupActivationMode, SendPolicyConfig, SendPolicyRule, SendAction, EnvelopeConfig, RetryConfig, WebhooksConfig, WebhookMappingConfig, AgentSecretsConfig, ConfigError, ConfigErrorCode, FieldMetadata, PartialValidationResult, ConfigGitManager, GitCommitMetadata, HistoryEntry, GitManagerDeps, ExecGitFn, EnvValueWarning, UnresolvedEnvRef, LifecycleReactionsConfig, LifecycleReactionsTimingConfig, SenderTrustDisplayConfig, DocumentationConfig, DocumentationLink, ImageGenerationConfig, VideoGenerationConfig, NotificationConfig, VerbosityConfig, VerbosityLevel, VerbosityOverride, ContextEngineConfig, BackgroundTasksConfig, OutputRetentionConfig, RetentionClass, MemoryReviewConfig, ProviderEntry, ProvidersConfig, UserModel, ModelCost, OperationModelEntry, OperationModels, ModelOperationType, ToolingConfig, BrokerBindingConfig, StorageModePreRead, OrchestrationConfig, OrchestrationAuthoringConfig, SpendConfig, AutonomyConfig, AutonomyMessageConfig, AutonomyProfileName, AutonomyMode, ResolvedAutonomy, ResolvedCapability, AutonomyDownshift, AutonomyPreflightResult, } from "../config/index.js";

package/node_modules/@comis/core/dist/exports/config.js

@@ -1,5 +1,24 @@
 // SPDX-License-Identifier: Apache-2.0
 // @comis/core exports — Config (layered configuration with Zod validation)
-export { AppConfigSchema, AgentConfigSchema, AgentsMapSchema, BudgetConfigSchema, CircuitBreakerConfigSchema, DmScopeConfigSchema, ElevatedReplyConfigSchema, ModelRoutesSchema, HeartbeatConfigSchema, HeartbeatTargetSchema, PerAgentConfigSchema, PerAgentCronConfigSchema, PerAgentHeartbeatConfigSchema, PerAgentSchedulerConfigSchema, PruningConfigSchema, RagConfigSchema, ResetPolicyOverrideSchema, RoutingBindingSchema, RoutingConfigSchema, SessionResetPolicySchema, TracingConfigSchema, ChannelConfigSchema, ChannelEntrySchema, ChannelHealthCheckSchema, MemoryConfigSchema, CompactionConfigSchema, RetentionConfigSchema, SecurityConfigSchema, PermissionConfigSchema, ActionConfirmationConfigSchema, AgentToAgentConfigSchema, SkillsConfigSchema, DaemonConfigSchema, LoggingConfigSchema, TracingDefaultsSchema, ConfigWebhookSchema, SchedulerConfigSchema, GatewayConfigSchema, GatewayTlsConfigSchema, GatewayTokenSchema, GatewayRateLimitSchema, IntegrationsConfigSchema, BraveSearchConfigSchema, McpServerEntrySchema, McpConfigSchema, TranscriptionConfigSchema, TtsConfigSchema, TtsAutoModeSchema, ElevenLabsVoiceSettingsSchema, TtsOutputFormatSchema, ImageAnalysisConfigSchema, VisionScopeRuleSchema, VisionConfigSchema, LinkUnderstandingConfigSchema, MediaConfigSchema, DOCUMENT_MIME_WHITELIST, FileExtractionConfigSchema, AutoReplyRuleSchema, AutoReplyConfigSchema, MonitoringConfigSchema, PluginsConfigSchema, PluginEntrySchema, QueueConfigSchema, QueueModeSchema, OverflowPolicySchema, PerChannelQueueConfigSchema, OverflowConfigSchema, DebounceBufferConfigSchema, FollowupConfigSchema, PriorityLaneConfigSchema, LaneAssignmentConfigSchema, StreamingConfigSchema, PerChannelStreamingConfigSchema, TypingModeSchema, ChunkModeSchema, DeliveryMirrorConfigSchema, DeliveryQueueConfigSchema, DeliveryTimingConfigSchema, DeliveryTimingModeSchema, CoalescerConfigSchema, AutoReplyEngineConfigSchema, GroupActivationModeSchema, SendPolicyConfigSchema, SendPolicyRuleSchema, SendActionSchema, EnvelopeConfigSchema, RetryConfigSchema, WebhooksConfigSchema, WebhookMappingConfigSchema, WebhookMappingMatchSchema, AgentSecretsConfigSchema, SecretsConfigSchema, DocumentationConfigSchema, DocumentationLinkSchema, ImageGenerationConfigSchema, NotificationConfigSchema, VerbosityConfigSchema, VerbosityLevelSchema, VerbosityOverrideSchema, ContextEngineConfigSchema, BackgroundTasksConfigSchema, OutputRetentionConfigSchema, MemoryReviewConfigSchema, ProviderEntrySchema, ProvidersConfigSchema, UserModelSchema, ModelCostSchema, OperationModelEntrySchema, OperationModelsSchema, OAuthConfigSchema, substituteEnvVars, warnSuspiciousEnvValues, findUnresolvedEnvRefs, formatMissingEnvRefError, loadConfigFile, validateConfig, deepMerge, mergeLayered, loadLayered, IMMUTABLE_CONFIG_PREFIXES, MUTABLE_CONFIG_OVERRIDES, isImmutableConfigPath, matchesOverridePattern, getMutableOverridesForSection, MANAGED_SECTIONS, getManagedSectionRedirect, formatRedirectHint, getConfigSchema, getConfigSections, getFieldMetadata, validatePartial, createConfigGitManager, 
-// Tooling subtree (capability layer v1.1)
-ToolingConfigSchema, DEFAULT_CLUSTER_CONFIG, DEFAULT_BUILTIN_ASSIGNMENTS, checkApprovalsConfig, } from "../config/index.js";
+export { AppConfigSchema, AgentConfigSchema, AgentsMapSchema, BudgetConfigSchema, CircuitBreakerConfigSchema, DmScopeConfigSchema, ElevatedReplyConfigSchema, ModelRoutesSchema, HeartbeatConfigSchema, HeartbeatTargetSchema, PerAgentConfigSchema, PerAgentCronConfigSchema, PerAgentHeartbeatConfigSchema, PerAgentSchedulerConfigSchema, PruningConfigSchema, RagConfigSchema, ResetPolicyOverrideSchema, RoutingBindingSchema, RoutingConfigSchema, SessionResetPolicySchema, TracingConfigSchema, ChannelConfigSchema, ChannelEntrySchema, ChannelHealthCheckSchema, MemoryConfigSchema, CompactionConfigSchema, RetentionConfigSchema, SecurityConfigSchema, PermissionConfigSchema, ActionConfirmationConfigSchema, AgentToAgentConfigSchema, SkillsConfigSchema, DaemonConfigSchema, LoggingConfigSchema, TracingDefaultsSchema, ConfigWebhookSchema, SchedulerConfigSchema, GatewayConfigSchema, GatewayTlsConfigSchema, GatewayTokenSchema, GatewayRateLimitSchema, IntegrationsConfigSchema, BraveSearchConfigSchema, McpServerEntrySchema, McpConfigSchema, TranscriptionConfigSchema, TtsConfigSchema, TtsAutoModeSchema, ElevenLabsVoiceSettingsSchema, TtsOutputFormatSchema, ImageAnalysisConfigSchema, VisionScopeRuleSchema, VisionConfigSchema, LinkUnderstandingConfigSchema, MediaConfigSchema, DOCUMENT_MIME_WHITELIST, FileExtractionConfigSchema, AutoReplyRuleSchema, AutoReplyConfigSchema, MonitoringConfigSchema, PluginsConfigSchema, PluginEntrySchema, QueueConfigSchema, QueueModeSchema, OverflowPolicySchema, PerChannelQueueConfigSchema, OverflowConfigSchema, DebounceBufferConfigSchema, FollowupConfigSchema, StreamingConfigSchema, PerChannelStreamingConfigSchema, TypingModeSchema, ChunkModeSchema, DeliveryMirrorConfigSchema, DeliveryQueueConfigSchema, DeliveryTimingConfigSchema, DeliveryTimingModeSchema, CoalescerConfigSchema, AutoReplyEngineConfigSchema, GroupActivationModeSchema, SendPolicyConfigSchema, SendPolicyRuleSchema, SendActionSchema, EnvelopeConfigSchema, RetryConfigSchema, WebhooksConfigSchema, WebhookMappingConfigSchema, WebhookMappingMatchSchema, AgentSecretsConfigSchema, DocumentationConfigSchema, DocumentationLinkSchema, ImageGenerationConfigSchema, VideoGenerationConfigSchema, NotificationConfigSchema, VerbosityConfigSchema, VerbosityLevelSchema, VerbosityOverrideSchema, ContextEngineConfigSchema, BackgroundTasksConfigSchema, OutputRetentionConfigSchema, MemoryReviewConfigSchema, ProviderEntrySchema, ProvidersConfigSchema, UserModelSchema, ModelCostSchema, PROVIDER_TIMEOUT_MS_DEFAULT, OperationModelEntrySchema, OperationModelsSchema, substituteEnvVars, warnSuspiciousEnvValues, findUnresolvedEnvRefs, formatMissingEnvRefError, loadConfigFile, preReadStorageMode, validateConfig, deepMerge, mergeLayered, loadLayered, IMMUTABLE_CONFIG_PREFIXES, MUTABLE_CONFIG_OVERRIDES, isImmutableConfigPath, matchesOverridePattern, getMutableOverridesForSection, MANAGED_SECTIONS, getManagedSectionRedirect, formatRedirectHint, getConfigSchema, getConfigSections, getFieldMetadata, validatePartial, createConfigGitManager, 
+// Tooling subtree (capability layer)
+ToolingConfigSchema, DEFAULT_CLUSTER_CONFIG, DEFAULT_BUILTIN_ASSIGNMENTS, checkApprovalsConfig, 
+// Broker binding config schema
+BrokerBindingConfigSchema, 
+// Orchestration authoring gate (Phase 174 / v2.27 P2) — top-level, default-OFF.
+// Public so downstream packages (Plans 02-05) read the gate from @comis/core.
+OrchestrationConfigSchema, OrchestrationAuthoringConfigSchema, 
+// Agent autonomy named-profile resolver (Phase 210 / v8 §3.8). Public so the
+// daemon (Plan 04 cap injection, Plan 06 boot logging) + the PROFILE-02
+// arch-test read the resolver + the resolved cap/guard table from @comis/core.
+AutonomyConfigSchema, AutonomyMessageConfigSchema, AUTONOMY_PROFILES, STANDARD_FLOOR_CAPABILITIES, resolveAutonomy, 
+// Phase 217: the EVICT-02 fail-closed mode resolver — the Wave-2 dispatch
+// chokepoint runs the run's effective mode through this (absent/forged/unknown →
+// "default"). A VALUE export (runtime function), so the daemon can import it.
+resolveEffectiveMode, 
+// Phase 216: the autonomy.durability sub-block schema — the daemon reads it for
+// the boot-time durability resolution (setupDurableResume gate + thresholds).
+DurabilityConfigSchema, 
+// Honest legible degrade (Phase 210 / PROFILE-03) — consumed by the daemon
+// boot log + the preflight doctor (Plan 06).
+degradeAutonomy, } from "../config/index.js";

package/node_modules/@comis/core/dist/exports/delivery.js

@@ -3,7 +3,7 @@
 //
 // The channel-platform-agnostic delivery helpers (formatForChannel,
 // chunkForDelivery, chunkBlocks, RetryEngine, isPermanentError) live in
-// core/src/delivery/ so that `core → channels` stays one-way per AGENTS.md §1.
+// core/src/delivery/ so that `core → channels` stays one-way.
 //
 // The Markdown IR pipeline that underlies formatForChannel and chunkForDelivery
 // (markdown-ir, ir-renderer, ir-chunker, markdown-tables, sanitize-for-plain-text,
@@ -17,8 +17,8 @@ export { chunkBlocks } from "../delivery/block-chunker.js";
 // Note: block-chunker's ChunkMode + ChunkOptions are intentionally NOT
 // re-exported — block-chunker's "paragraph"/"newline"/"sentence"/"length"
 // ChunkMode collides with the streaming-config ChunkMode in
-// exports/config.js, and AGENTS.md §2.3 (KISS/YAGNI) forbids speculative
-// public exports without callers. chunkBlocks is the only block-chunker
+// exports/config.js, and KISS/YAGNI forbids speculative public exports
+// without callers. chunkBlocks is the only block-chunker
 // symbol consumed cross-package.
 export { createRetryEngine, createBlockRetryGuard } from "../delivery/retry-engine.js";
 export { isPermanentError, PERMANENT_ERROR_PATTERNS } from "../delivery/permanent-errors.js";

package/node_modules/@comis/core/dist/exports/domain.d.ts

@@ -1,4 +1,5 @@
-export { AttachmentSchema, NormalizedMessageSchema, parseMessage, TrustLevelSchema, MemorySourceSchema, MemoryEntrySchema, ToolCallSchema, TokenUsageSchema, AgentResponseSchema, SessionKeySchema, parseSessionKey, formatSessionKey, parseFormattedSessionKey, PollInputSchema, PollOptionResultSchema, NormalizedPollResultSchema, normalizePollDurationHours, RichButtonSchema, RichCardFieldSchema, RichCardSchema, RichEffectSchema, ApprovalRequestSchema, ApprovalResolutionSchema, SerializedApprovalRequestSchema, SerializedApprovalCacheEntrySchema, InjectionTypeSchema, CredentialMappingSchema, SecretRefSchema, isSecretRef, SecretRefOrStringSchema, DeliveryOriginSchema, createDeliveryOrigin, NodeStatusSchema, GraphStatusSchema, GraphNodeSchema, NodeExecutionStateSchema, ExecutionGraphSchema, GraphValidationError, parseExecutionGraph, topologicalSort, validateAndSortGraph, SubagentResultSchema, SubagentEndReasonSchema, parseSubagentResult, SubagentContextConfigSchema, NodeTypeIdSchema, ToolSchemaProfileSchema, ToolCallArgumentsEncodingSchema, ModelCompatConfigSchema, ProviderFamilySchema, TranscriptToolCallIdModeSchema, ProviderCapabilitiesSchema, } from "../domain/index.js";
+export { AttachmentSchema, NormalizedMessageSchema, parseMessage, getMessageTraceId, NormalizedReactionSchema, parseReaction, TrustLevelSchema, MemorySourceSchema, MemoryEntrySchema, ExtractedEntitySchema, StructuredMemorySchema, MemoryExtractionResultSchema, MemoryEntitySchema, ToolCallSchema, TokenUsageSchema, AgentResponseSchema, SessionKeySchema, parseSessionKey, formatSessionKey, parseFormattedSessionKey, PollInputSchema, PollOptionResultSchema, NormalizedPollResultSchema, normalizePollDurationHours, RichButtonSchema, RichCardFieldSchema, RichCardSchema, RichEffectSchema, ApprovalRequestSchema, ApprovalResolutionSchema, SerializedApprovalRequestSchema, SerializedApprovalCacheEntrySchema, InjectionTypeSchema, CredentialMappingSchema, SecretRefSchema, isSecretRef, SecretRefOrStringSchema, DeliveryOriginSchema, createDeliveryOrigin, NodeStatusSchema, GraphStatusSchema, GraphNodeSchema, NodeExecutionStateSchema, ExecutionGraphSchema, GraphValidationError, parseExecutionGraph, topologicalSort, validateAndSortGraph, SubagentResultSchema, SubagentEndReasonSchema, parseSubagentResult, SubagentContextConfigSchema, NodeTypeIdSchema, ToolSchemaProfileSchema, ToolCallArgumentsEncodingSchema, ModelCompatConfigSchema, ProviderFamilySchema, TranscriptToolCallIdModeSchema, ProviderCapabilitiesSchema, SUB_AGENT_TOOL_DENYLIST, SUB_AGENT_TOOL_PROFILES, SUB_AGENT_TOOL_GROUPS, RequiredToolsUnreachableError, toolReachableGroups, computeReachableToolNames, MemoryExportEnvelopeSchema, MemoryExportEntrySchema, parseMemoryExportEnvelope, } from "../domain/index.js";
 export { BackgroundTaskOriginSchema } from "../domain/background-task-origin.js";
 export type { BackgroundTaskOrigin } from "../domain/background-task-origin.js";
-export type { Attachment, NormalizedMessage, TrustLevel, MemoryEntry, ToolCall, TokenUsage, AgentResponse, SessionKey, PollInput, NormalizedPollResult, PollOptionResult, RichButton, RichCard, RichEffect, ApprovalRequest, ApprovalResolution, SerializedApprovalRequest, SerializedApprovalCacheEntry, InjectionType, CredentialMapping, SecretRef, DeliveryOrigin, NodeStatus, GraphStatus, GraphNode, NodeExecutionState, ExecutionGraph, ValidatedGraph, SubagentResult, SubagentEndReason, SpawnPacket, CondensedResult, SubAgentSpawnPreparedEvent, SubAgentSpawnRejectedEvent, SubAgentSpawnStartedEvent, SubAgentResultCondensedEvent, SubAgentLifecycleEndedEvent, SubAgentContextCompactedEvent, SubagentContextConfig, NodeTypeId, NodeTypeDriver, NodeDriverAction, NodeDriverContext, ToolSchemaProfile, ToolCallArgumentsEncoding, ModelCompatConfig, ProviderFamily, TranscriptToolCallIdMode, ProviderCapabilities, } from "../domain/index.js";
+export { KEYLESS_PROVIDER_TYPES, KEYLESS_API_KEY_SENTINEL } from "../provider/keyless-providers.js";
+export type { Attachment, NormalizedMessage, NormalizedReaction, TrustLevel, MemoryEntry, MemoryExportEnvelope, MemoryExportEntry, MemorySource, ExtractedEntity, StructuredMemory, MemoryExtractionResult, MemoryEntity, ToolCall, TokenUsage, AgentResponse, SessionKey, PollInput, NormalizedPollResult, PollOptionResult, RichButton, RichCard, RichEffect, ApprovalRequest, ApprovalResolution, SerializedApprovalRequest, SerializedApprovalCacheEntry, InjectionType, CredentialMapping, SecretRef, DeliveryOrigin, NodeStatus, GraphStatus, GraphNode, NodeExecutionState, ExecutionGraph, ValidatedGraph, SubagentResult, SubagentEndReason, SpawnPacket, CondensedResult, SubAgentSpawnPreparedEvent, SubAgentSpawnRejectedEvent, SubAgentSpawnStartedEvent, SubAgentResultCondensedEvent, SubAgentLifecycleEndedEvent, SubAgentContextCompactedEvent, SubagentContextConfig, NodeTypeId, NodeTypeDriver, NodeDriverAction, NodeDriverContext, ToolSchemaProfile, ToolCallArgumentsEncoding, ModelCompatConfig, ProviderFamily, TranscriptToolCallIdMode, ProviderCapabilities, UnreachableToolEntry, } from "../domain/index.js";

package/node_modules/@comis/core/dist/exports/domain.js

@@ -2,9 +2,13 @@
 // @comis/core exports — Domain types (Zod schemas, inferred types, parse functions)
 export { 
 // NormalizedMessage
-AttachmentSchema, NormalizedMessageSchema, parseMessage, 
+AttachmentSchema, NormalizedMessageSchema, parseMessage, getMessageTraceId, 
+// NormalizedReaction
+NormalizedReactionSchema, parseReaction, 
 // MemoryEntry
 TrustLevelSchema, MemorySourceSchema, MemoryEntrySchema, 
+// Structured extraction + domain target
+ExtractedEntitySchema, StructuredMemorySchema, MemoryExtractionResultSchema, MemoryEntitySchema, 
 // AgentResponse
 ToolCallSchema, TokenUsageSchema, AgentResponseSchema, 
 // SessionKey
@@ -30,5 +34,10 @@ NodeTypeIdSchema,
 // Model compat config
 ToolSchemaProfileSchema, ToolCallArgumentsEncodingSchema, ModelCompatConfigSchema, 
 // Provider capabilities
-ProviderFamilySchema, TranscriptToolCallIdModeSchema, ProviderCapabilitiesSchema, } from "../domain/index.js";
+ProviderFamilySchema, TranscriptToolCallIdModeSchema, ProviderCapabilitiesSchema, 
+// Sub-agent tool governance
+SUB_AGENT_TOOL_DENYLIST, SUB_AGENT_TOOL_PROFILES, SUB_AGENT_TOOL_GROUPS, RequiredToolsUnreachableError, toolReachableGroups, computeReachableToolNames, 
+// MemoryExportEnvelope
+MemoryExportEnvelopeSchema, MemoryExportEntrySchema, parseMemoryExportEnvelope, } from "../domain/index.js";
 export { BackgroundTaskOriginSchema } from "../domain/background-task-origin.js";
+export { KEYLESS_PROVIDER_TYPES, KEYLESS_API_KEY_SENTINEL } from "../provider/keyless-providers.js";

package/node_modules/@comis/core/dist/exports/event-bus.d.ts

@@ -1,2 +1,2 @@
 export { TypedEventBus } from "../event-bus/index.js";
-export type { EventHandler, EventMap, MessagingEvents, AgentEvents, ChannelEvents, InfraEvents, } from "../event-bus/index.js";
+export type { EventHandler, EventMap, MessagingEvents, AgentEvents, ChannelEvents, InfraEvents, SpendScopeKind, ReflectAdmissionOutcome, } from "../event-bus/index.js";

package/node_modules/@comis/core/dist/exports/hooks.d.ts

@@ -1,4 +1,4 @@
-export { createPluginRegistry, createHookRunner, BeforeAgentStartResultSchema, BeforeToolCallResultSchema, ToolResultPersistResultSchema, BeforeCompactionResultSchema, BeforeDeliveryResultSchema, mergeBeforeAgentStart, mergeBeforeToolCall, mergeToolResultPersist, mergeBeforeCompaction, mergeBeforeDelivery, } from "../hooks/index.js";
+export { createPluginRegistry, createHookRunner, BeforeAgentStartResultSchema, BeforeCompactionResultSchema, BeforeDeliveryResultSchema, mergeBeforeAgentStart, mergeBeforeCompaction, mergeBeforeDelivery, } from "../hooks/index.js";
 export type { PluginRegistry, PluginRegistryOptions, HookRunner, HookRunnerOptions, } from "../hooks/index.js";
 export { createApprovalGate } from "../approval/index.js";
 export type { ApprovalGate, ApprovalGateDeps } from "../approval/index.js";

package/node_modules/@comis/core/dist/exports/hooks.js

@@ -1,6 +1,6 @@
 // SPDX-License-Identifier: Apache-2.0
 // @comis/core exports — Hooks (plugin system, lifecycle hooks, approval gate, tool metadata)
-export { createPluginRegistry, createHookRunner, BeforeAgentStartResultSchema, BeforeToolCallResultSchema, ToolResultPersistResultSchema, BeforeCompactionResultSchema, BeforeDeliveryResultSchema, mergeBeforeAgentStart, mergeBeforeToolCall, mergeToolResultPersist, mergeBeforeCompaction, mergeBeforeDelivery, } from "../hooks/index.js";
+export { createPluginRegistry, createHookRunner, BeforeAgentStartResultSchema, BeforeCompactionResultSchema, BeforeDeliveryResultSchema, mergeBeforeAgentStart, mergeBeforeCompaction, mergeBeforeDelivery, } from "../hooks/index.js";
 // Approval gate (pending request lifecycle with timeout auto-deny)
 export { createApprovalGate } from "../approval/index.js";
 // Tool metadata registry

package/node_modules/@comis/core/dist/exports/logging.d.ts

@@ -1,3 +1,5 @@
 export type { ComisLogger, LogFields, ErrorKind } from "../logging/index.js";
 export { VALID_LOG_LEVELS, isValidLogLevel } from "../logging/index.js";
 export { createConsoleLogger } from "../logging/console-logger.js";
+export { fingerprint } from "../logging/index.js";
+export { withDedup } from "../logging/dedup-logger.js";

package/node_modules/@comis/core/dist/exports/logging.js

@@ -5,3 +5,5 @@
 // by CLI call sites.
 export { VALID_LOG_LEVELS, isValidLogLevel } from "../logging/index.js";
 export { createConsoleLogger } from "../logging/console-logger.js";
+export { fingerprint } from "../logging/index.js";
+export { withDedup } from "../logging/dedup-logger.js";

package/node_modules/@comis/core/dist/exports/media.d.ts

@@ -0,0 +1,10 @@
+export { IMAGE_ERR_TO_LOG, resolveImageProvider } from "../media/index.js";
+export { isValidImageModel, listImageModels } from "../media/index.js";
+export type { ImageErrorKind } from "../media/index.js";
+export { resolveVisionPath } from "../media/index.js";
+export { VIDEO_ERR_TO_LOG, VideoGenError, resolveVideoProvider, isBlockedObjectKey, estimateVideoCostUsd, VIDEO_PRICING, } from "../media/index.js";
+export type { VideoErrorKind } from "../media/index.js";
+export { listVideoModelCaps, supportedModes, snapDuration } from "../media/index.js";
+export type { VideoModelCaps, VideoDurations } from "../media/index.js";
+export { VOICE_KEYLESS, MAIN_PROVIDER_AUDIO, STT_ERR_TO_LOG, resolveTranscriptionProvider, resolveTtsProvider, } from "../media/index.js";
+export type { SttErrorKind } from "../media/index.js";

package/node_modules/@comis/core/dist/exports/media.js

@@ -0,0 +1,74 @@
+// SPDX-License-Identifier: Apache-2.0
+// Media (image-generation resolution) helper re-exports for the @comis/core barrel.
+// Only the cross-package-consumed symbols are surfaced: the daemon pi-image
+// shim imports `resolveImageProvider`/`IMAGE_ERR_TO_LOG`/`ImageErrorKind`, and
+// the daemon image-handlers (IN-02, Phase 185) import `isValidImageModel` /
+// `listImageModels` to validate an agent-supplied `model` arg + build the
+// reject hint (the in-repo consumer that satisfies the public-export-consumers
+// gate). `IMAGE_CAPABILITY` and the `ImageProviderSelection`/
+// `ImageGenSelectionConfig` types are consumed only inside `@comis/core/media`
+// (relative imports) today, so they stay off the public barrel until a
+// cross-package consumer exists. A later phase re-exports them here if needed.
+export { IMAGE_ERR_TO_LOG, resolveImageProvider } from "../media/index.js";
+// IN-02 (Phase 185): only the two validators are surfaced — they are consumed
+// cross-package by the daemon image-handlers. The backing `IMAGE_MODELS_BY_PROVIDER`
+// const stays off the public barrel (no cross-package consumer; the validators
+// encapsulate it — same policy as `IMAGE_CAPABILITY` above). It is importable
+// intra-`@comis/core/media` via a relative path for the unit test.
+export { isValidImageModel, listImageModels } from "../media/index.js";
+// VIS-02/03 (Phase 187): the pure vision-path resolver is consumed CROSS-PACKAGE
+// by the daemon media-handlers ladder (the two seams call `resolveVisionPath` and
+// switch on the returned `path`). Surfaced here on the public barrel so the
+// daemon imports it from `@comis/core` (mirrors `resolveImageProvider` above;
+// 187-01 added it to ../media/index.js but only the intra-core media barrel
+// re-exported it — this is the missing cross-package surface the handler needs).
+// The `VisionPathSelection`/`VisionPathInput` types stay OFF the public barrel
+// (the handler consumes the return STRUCTURALLY, no named type import) — the same
+// policy as `ImageProviderSelection`, which stays intra-`@comis/core/media`.
+export { resolveVisionPath } from "../media/index.js";
+// Video generation (v2.24 Phase 188) — the video twins of the image media
+// symbols above, surfaced on the public barrel so Plan 03 (the @comis/skills FAL
+// adapter) and Plan 04 (the @comis/daemon video handler + selector) can import
+// them. Plan 04 consumes `resolveVideoProvider` / `VIDEO_ERR_TO_LOG` /
+// `VideoErrorKind` / `VideoGenError` / `estimateVideoCostUsd` / `isBlockedObjectKey`;
+// Plan 03 consumes `VideoGenError` (+ the port types from exports/ports.ts).
+// Those plans land in LATER waves, so until then these are documented
+// planned-orphans tracked in test/support/public-api-policy.ts (the
+// SessionStorePort / ContextStorePort ahead-of-consumer precedent — NOT a
+// shrink-only architecture-allowlist entry). `VIDEO_CAPABILITY` and the
+// `VideoProviderSelection` / `VideoGenSelectionConfig` types stay OFF the public
+// barrel (intra-`@comis/core/media` only — the same policy as `IMAGE_CAPABILITY`
+// / `ImageProviderSelection`); a later phase re-exports them here if a
+// cross-package consumer ever needs them.
+export { VIDEO_ERR_TO_LOG, VideoGenError, resolveVideoProvider, isBlockedObjectKey, estimateVideoCostUsd, VIDEO_PRICING, } from "../media/index.js";
+// CAP-02 per-model capability matrix accessors (v2.24 Phase 191). Surfaced on
+// the public @comis/core barrel — the SINGLE public surface (there is no
+// ./media subpath) — so Plan 02 (the @comis/daemon video-handlers IN-02
+// validator: listVideoModelCaps + supportedModes + snapDuration) and Plan 03
+// (the @comis/skills video-generate tool's IN-03 dynamic description:
+// listVideoModelCaps) can import them from @comis/core. Those consumers land in
+// LATER waves (this is Plan 01, Wave 1), so until then the accessors + the two
+// types are documented ahead-of-consumer planned-orphans tracked in
+// test/support/public-api-policy.ts (the Phase-188 video-foundation /
+// SessionStorePort precedent — over-listing a soon-consumed symbol, NOT a
+// shrink-only architecture-allowlist entry). Each SHRINKS out when its real
+// cross-package consumer lands (Plan 02 Task 4 / Plan 03 Task 4 re-confirm the
+// public-export-consumers gate fully green). The raw VIDEO_MODELS const stays
+// OFF the public barrel (intra-`@comis/core/media` only — the IMAGE_CAPABILITY
+// / IMAGE_MODELS_BY_PROVIDER policy: the accessors encapsulate it).
+export { listVideoModelCaps, supportedModes, snapDuration } from "../media/index.js";
+// Keyless voice (v2.25 Phase 193) — the daemon setup-audio-provider.ts (Plan 03,
+// Wave 2) consumes resolveTranscriptionProvider / resolveTtsProvider /
+// VOICE_KEYLESS / MAIN_PROVIDER_AUDIO / STT_ERR_TO_LOG / SttErrorKind
+// cross-package (the predicate-injection wiring + the honest-unavailable
+// branch). Surfaced on the public @comis/core barrel (the single public surface
+// — there is no ./media subpath) so the daemon imports them from @comis/core,
+// mirroring resolveImageProvider / resolveVideoProvider above. Until Wave 2
+// lands that consumer these are documented ahead-of-consumer planned-orphans
+// tracked in test/support/public-api-policy.ts (the video-foundation /
+// PollDeadline precedent at :30-43 — over-listing a soon-consumed symbol, NOT a
+// shrink-only architecture-allowlist entry); each SHRINKS out when Plan 03's
+// consumer lands. The SttSelection / TtsSelection / *SelectionConfig TYPES stay
+// OFF the public barrel (consumed structurally by the daemon, the same policy as
+// ImageProviderSelection / VideoProviderSelection above).
+export { VOICE_KEYLESS, MAIN_PROVIDER_AUDIO, STT_ERR_TO_LOG, resolveTranscriptionProvider, resolveTtsProvider, } from "../media/index.js";

package/node_modules/@comis/core/dist/exports/model.d.ts

@@ -1,2 +1,3 @@
-export { createModelCatalog, resolveModelPricing, ZERO_COST, } from "../model/model-catalog.js";
+export { createModelCatalog, resolveModelPricing, resolvePricingState, ZERO_COST, } from "../model/model-catalog.js";
 export type { CatalogEntry, ModelCatalog, PerTokenCostRates, } from "../model/model-catalog.js";
+export { isProviderModelChimera } from "../model/model-family.js";

package/node_modules/@comis/core/dist/exports/model.js

@@ -1,3 +1,7 @@
 // SPDX-License-Identifier: Apache-2.0
 // Model catalog re-exports for the @comis/core barrel (relocated from @comis/agent).
-export { createModelCatalog, resolveModelPricing, ZERO_COST, } from "../model/model-catalog.js";
+export { createModelCatalog, resolveModelPricing, resolvePricingState, ZERO_COST, } from "../model/model-catalog.js";
+// RESOLVE-01: provider↔model chimera detector (observability-excellence). Only the
+// consumed entry point is on the public barrel; `resolveModelFamily`/`ModelFamily` stay
+// module-local (used internally + via the module's own test) until a consumer needs them.
+export { isProviderModelChimera } from "../model/model-family.js";

package/node_modules/@comis/core/dist/exports/oauth.d.ts

@@ -7,4 +7,4 @@
  * @module
  */
 export { selectOAuthCredentialStore, loginOpenAICodexOAuth, createOAuthCredentialStoreFile, loginOpenAICodexDeviceCode, runOAuthTlsPreflight, } from "../oauth/index.js";
-export type { SelectOAuthCredentialStoreInput, OAuthStorageMode, LoginError, LoginRunnerSuccess, LoginRunnerParams, RunnerPrompter, OAuthError, OAuthTokenManager, OAuthTokenManagerDeps, OAuthCredentials, OAuthCredentialStoreFileConfig, DeviceCodeVerificationPrompt, LoginOpenAICodexDeviceCodeOptions, TlsPreflightResult, TlsPreflightFailureKind, RunOAuthTlsPreflightOptions, } from "../oauth/index.js";
+export type { SelectOAuthCredentialStoreInput, CredentialStorageMode, LoginError, LoginRunnerSuccess, LoginRunnerParams, RunnerPrompter, OAuthError, OAuthTokenManager, OAuthTokenManagerDeps, OAuthCredentials, OAuthCredentialStoreFileConfig, DeviceCodeVerificationPrompt, LoginOpenAICodexDeviceCodeOptions, TlsPreflightResult, TlsPreflightFailureKind, RunOAuthTlsPreflightOptions, } from "../oauth/index.js";

package/node_modules/@comis/core/dist/exports/ports.d.ts

@@ -3,4 +3,6 @@ export { createNoOpDeliveryQueue } from "../delivery/no-op-delivery-queue.js";
 export { createNoOpDeliveryMirror } from "../delivery/no-op-delivery-mirror.js";
 export { createNoOpCapabilityPort } from "../tool-capability/no-op-tool-capability.js";
 export { validateProfileId, PROFILE_ID_RE } from "../security/profile-id.js";
-export type { ChannelPort, MessageHandler, SendMessageOptions, FetchMessagesOptions, FetchedMessage, AttachmentPayload, ChannelPluginPort, ChannelCapability, ChannelStatus, MemoryPort, MemorySearchOptions, MemorySearchResult, MemoryUpdateFields, SkillPort, SkillPermissions, SkillInput, SkillOutput, SkillManifest, EmbeddingPort, ContextStorePort, CtxConversationRow, CtxMessageRow, CtxMessagePartRow, CtxSummaryRow, CtxSummaryMessageRow, CtxSummaryParentRow, CtxContextItemRow, CtxLargeFileRow, CtxExpansionGrantRow, SessionStorePort, SessionData, SessionListEntry, SessionDetailedEntry, FileLockPort, LockOptions, LockError, ComputeDailyResetNextRun, TranscriptionPort, TranscriptionOptions, TranscriptionResult, TTSPort, TTSOptions, TTSResult, ImageAnalysisPort, ImageAnalysisOptions, VisionRequest, VideoRequest, VisionResult, VisionProvider, ResolvedMedia, MediaResolverPort, FileClassification, FileExtractionErrorKind, FileExtractionError, FileExtractionInput, FileExtractionResult, FileExtractionPort, HookName, ModifyingHookName, VoidHookName, HookHandlerMap, HookBeforeAgentStartEvent, HookBeforeAgentStartContext, HookBeforeAgentStartResult, HookAgentEndEvent, HookAgentEndContext, HookBeforeToolCallEvent, HookBeforeToolCallContext, HookBeforeToolCallResult, HookAfterToolCallEvent, HookAfterToolCallContext, HookToolResultPersistEvent, HookToolResultPersistContext, HookToolResultPersistResult, HookBeforeCompactionEvent, HookBeforeCompactionContext, HookBeforeCompactionResult, HookAfterCompactionEvent, HookAfterCompactionContext, HookSessionStartEvent, HookSessionStartContext, HookSessionEndEvent, HookSessionEndContext, HookGatewayStartEvent, HookGatewayStartContext, HookGatewayStopEvent, HookGatewayStopContext, PluginPort, PluginRegistryApi, RegisteredHook, PluginToolDefinition, PluginHttpRoute, DeviceIdentity, DeviceIdentityPort, PairingRequest, PairedDevice, OutputGuardPort, OutputGuardFinding, OutputGuardResult, SecretStorePort, SecretMetadata, CredentialMappingPort, OAuthCredentialStorePort, OAuthProfile, DeliveryQueuePort, DeliveryQueueEntry, DeliveryQueueEnqueueInput, DeliveryQueueStatusCounts, DeliveryMirrorPort, DeliveryMirrorEntry, DeliveryMirrorRecordInput, Provider, ImageGenInput, ImageGenOutput, ImageGenerationPort, ToolCapabilityPort, PromptSkillCapability, CapabilitySourceRef, ClusterConfig, McpServerHint, SkillHint, ClockPort, EnvPort, TimerPort, TimerHandle, } from "../ports/index.js";
+export type { ChannelPort, MessageHandler, ReactionHandler, SendMessageOptions, FetchMessagesOptions, FetchedMessage, AttachmentPayload, ReconcileSendQuery, ReconcileSendOutcome, ChannelPluginPort, ChannelCapability, ChannelStatus, MemoryPort, MemorySearchOptions, MemorySearchResult, EmbeddingPort, RerankerPort, MemoryEntityStore, EntityScope, EntityRow, MemoryPinnedStore, MemoryTemporalStore, MemoryEmbeddingStore, MemoryCausalStore, CausalScope, TripleStorePort, TripleScope, TripleTrust, TripleInput, MemoryLifecyclePort, MemoryLifecycleScope, LifecycleSweepReport, MemoryUsefulnessStore, UsefulnessScope, UsefulnessSignal, OutcomeSignalPort, LearningScope, OutcomeObservation, ResolvedOutcome, OutcomePruneResult, MentalModelStorePort, MentalModel, AdmitMentalModelInput, DocSection, StructuredBody, DeltaOp, MemoryConsolidationStore, SessionStorePort, SessionData, SessionListEntry, SessionDetailedEntry, ContextStorePort, ContextBrowsePort, LcdProvenanceReadStore, LcdMessage, LcdMessagePart, LcdPartMetadata, LcdPartKind, LcdRole, ContextStoreScope, ContextBrowseScope, LcdConversationSummary, LcdConversationPage, AppendMessageInput, LcdSummary, LcdSummaryKind, LcdContextItem, LcdRefKind, LcdSearchHit, LcdSearchResult, AppendSummaryInput, AppendCondensedSummaryInput, AppendProvenanceInput, FileLockPort, LockOptions, LockError, ComputeDailyResetNextRun, TranscriptionPort, TranscriptionOptions, TranscriptionResult, TTSPort, TTSOptions, TTSResult, ImageAnalysisPort, ImageAnalysisOptions, VisionRequest, VideoRequest, VisionResult, VisionProvider, ResolvedMedia, MediaResolverPort, FileClassification, FileExtractionErrorKind, FileExtractionError, FileExtractionInput, FileExtractionResult, FileExtractionPort, HookName, ModifyingHookName, VoidHookName, HookHandlerMap, HookBeforeAgentStartEvent, HookBeforeAgentStartContext, HookBeforeAgentStartResult, HookBeforeCompactionEvent, HookBeforeCompactionContext, HookBeforeCompactionResult, HookAfterCompactionEvent, HookAfterCompactionContext, HookSessionStartEvent, HookSessionStartContext, HookSessionEndEvent, HookSessionEndContext, HookGatewayStartEvent, HookGatewayStartContext, HookGatewayStopEvent, HookGatewayStopContext, PluginPort, PluginRegistryApi, RegisteredHook, OutputGuardPort, OutputGuardFinding, OutputGuardResult, SecretStorePort, SecretMetadata, OAuthCredentialStorePort, OAuthProfile, DeliveryQueuePort, DeliveryQueueEntry, DeliveryQueueEnqueueInput, DeliveryQueueStatusCounts, DeliveryMirrorPort, DeliveryMirrorEntry, DeliveryMirrorRecordInput, ImageGenInput, ImageGenOutput, ImageGenerationPort, VideoGenInput, VideoGenJob, VideoJobStatus, VideoGenOutput, VideoGenerationPort, ToolCapabilityPort, PromptSkillCapability, CapabilitySourceRef, ClusterConfig, McpServerHint, SkillHint, ClockPort, EnvPort, TimerPort, TimerHandle, CaManagerPort, EgressControlPort, EgressMaterialization, } from "../ports/index.js";
+export { messageToParts, partsToMessage } from "../context-store/index.js";
+export { applyDeltaOps, renderStructuredBody } from "../reflection/delta-ops.js";

package/node_modules/@comis/core/dist/exports/ports.js

@@ -8,3 +8,14 @@ export { createNoOpDeliveryQueue } from "../delivery/no-op-delivery-queue.js";
 export { createNoOpDeliveryMirror } from "../delivery/no-op-delivery-mirror.js";
 export { createNoOpCapabilityPort } from "../tool-capability/no-op-tool-capability.js";
 export { validateProfileId, PROFILE_ID_RE } from "../security/profile-id.js";
+// LCD parts <-> pi-ai Message codec (v2.12, Phase 127). Runtime VALUES (not
+// types) — the pure round-trip functions the memory adapter (Plan 04) and
+// Phase 128 ingest consume. The port + DTO TYPES are in the export-type block
+// above; these two functions are the value seam.
+export { messageToParts, partsToMessage } from "../context-store/index.js";
+// Reflection delta-ops (v2.31 Phase 223). Runtime VALUES (not types) — the pure
+// `applyDeltaOps` (byte-stable section refresh, REFLECT-04) + `renderStructuredBody`
+// (AST → markdown) the agent reflection job (Plan 04) consumes. They live in the
+// non-ports home module (`core/src/ports/*.ts` is type-only); the DeltaOp /
+// DocSection / StructuredBody TYPES are in the export-type block above.
+export { applyDeltaOps, renderStructuredBody } from "../reflection/delta-ops.js";