comisai 1.0.42 → 1.0.44

package/node_modules/@comis/skills/dist/platform-tools/tools/memory-get-tool.js

@@ -1,4 +1,5 @@
 // SPDX-License-Identifier: Apache-2.0
+// @allow-throw: platform-tool boundary; throws caught by AgentTool wrapper (returns AgentToolResult) — agent execution boundary catch.
 /**
  * Memory Get Tool: Read specific memory file sections by path.
  *
@@ -9,13 +10,26 @@
  * @module
  */
 import { Type } from "typebox";
+import { registerActivityLabelSpec } from "@comis/core";
 import { jsonResult, readStringParam, readNumberParam } from "../tool-helpers.js";
+// Activity label spec (§17.6). Descriptor name == emitted name.
+registerActivityLabelSpec("memory_get", {
+    semanticPhase: "memory",
+    label: "reading memory",
+});
 // ── Parameter Schema ────────────────────────────────────────────────
 const MemoryGetParams = Type.Object({
     path: Type.String({ description: "File path relative to workspace" }),
     start_line: Type.Optional(Type.Integer({ description: "Start line (1-based)" })),
     end_line: Type.Optional(Type.Integer({ description: "End line (1-based)" })),
 });
+/**
+ * A bare UUID is a long-term-memory row id (what memory_store returns),
+ * never a workspace file path. Caught tool-side so the model gets a
+ * redirect to the right tool instead of a daemon ENOENT that names the
+ * symptom, not the misuse (live finding, 2026-06-12 C7 run).
+ */
+const MEMORY_ID_SHAPE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 // ── Factory ─────────────────────────────────────────────────────────
 /**
  * Create a memory get tool that reads specific memory file sections.
@@ -30,11 +44,17 @@ export function createMemoryGetTool(rpcCall) {
     return {
         name: "memory_get",
         label: "Memory Get",
-        description: "Read specific memory file sections by path. Supports line range selection. Paths are validated for security via SafePath.",
+        description: "Read specific memory FILE sections by workspace path (e.g. paths returned by memory_search). " +
+            "Not for stored-memory ids: content of long-term memories comes back from memory_search/memory_ask, " +
+            "not from this tool. Supports line range selection. Paths are validated for security via SafePath.",
         parameters: MemoryGetParams,
         async execute(_toolCallId, params) {
             try {
                 const path = readStringParam(params, "path");
+                if (path !== undefined && MEMORY_ID_SHAPE.test(path.trim())) {
+                    throw new Error(`'${path}' is a memory id, not a workspace file path. memory_get reads memory FILES; ` +
+                        "stored-memory content is returned by memory_search or memory_ask directly.");
+                }
                 const startLine = readNumberParam(params, "start_line", false);
                 const endLine = readNumberParam(params, "end_line", false);
                 const rpcParams = { path };

package/node_modules/@comis/skills/dist/platform-tools/tools/memory-manage-tool.d.ts

@@ -1,7 +1,7 @@
 /**
  * Memory management tool: multi-action tool for memory lifecycle management.
  *
- * Supports 5 actions: stats, browse, delete, flush, export.
+ * Supports 7 actions: stats, browse, delete, flush, export, pin, unpin.
  * Destructive actions (delete, flush) require approval via the ApprovalGate.
  * All actions enforce admin trust level via createTrustGuard.
  * Delegates to memory.* RPC handlers via rpcCall.
@@ -13,7 +13,7 @@ import { Type } from "typebox";
 import type { ApprovalGate } from "@comis/core";
 import type { RpcCall } from "./cron-tool.js";
 declare const MemoryManageToolParams: Type.TObject<{
-    action: Type.TUnion<[Type.TLiteral<"stats">, Type.TLiteral<"browse">, Type.TLiteral<"delete">, Type.TLiteral<"flush">, Type.TLiteral<"export">]>;
+    action: Type.TUnion<[Type.TLiteral<"stats">, Type.TLiteral<"browse">, Type.TLiteral<"delete">, Type.TLiteral<"flush">, Type.TLiteral<"export">, Type.TLiteral<"pin">, Type.TLiteral<"unpin">]>;
     tenant_id: Type.TOptional<Type.TString>;
     agent_id: Type.TOptional<Type.TString>;
     ids: Type.TOptional<Type.TArray<Type.TString>>;
@@ -23,9 +23,10 @@ declare const MemoryManageToolParams: Type.TObject<{
     memory_type: Type.TOptional<Type.TString>;
     trust_level: Type.TOptional<Type.TString>;
     tags: Type.TOptional<Type.TArray<Type.TString>>;
+    id: Type.TOptional<Type.TString>;
 }>;
 /**
- * Create a memory management tool with 5 actions.
+ * Create a memory management tool with 7 actions.
  *
  * Actions:
  * - **stats** -- Get memory statistics (DB size, entry counts, FTS health)
@@ -33,6 +34,8 @@ declare const MemoryManageToolParams: Type.TObject<{
  * - **delete** -- Delete specific memory entries by ID array (requires approval)
  * - **flush** -- Flush all memory entries for a scope (requires approval)
  * - **export** -- Export full memory entries as JSON
+ * - **pin** -- Mark a memory entry as always-injected in recall (requires id)
+ * - **unpin** -- Remove the always-inject mark from a memory entry (requires id)
  *
  * @param rpcCall - RPC call function for delegating to the daemon backend
  * @param approvalGate - Optional approval gate for delete/flush actions

package/node_modules/@comis/skills/dist/platform-tools/tools/memory-manage-tool.js

@@ -2,7 +2,7 @@
 /**
  * Memory management tool: multi-action tool for memory lifecycle management.
  *
- * Supports 5 actions: stats, browse, delete, flush, export.
+ * Supports 7 actions: stats, browse, delete, flush, export, pin, unpin.
  * Destructive actions (delete, flush) require approval via the ApprovalGate.
  * All actions enforce admin trust level via createTrustGuard.
  * Delegates to memory.* RPC handlers via rpcCall.
@@ -10,8 +10,23 @@
  * @module
  */
 import { Type } from "typebox";
-import { tryGetContext } from "@comis/core";
+import { tryGetContext, registerActivityLabelSpec } from "@comis/core";
 import { jsonResult, throwToolError, readEnumParam, createTrustGuard, } from "../tool-helpers.js";
+// Activity label spec (§17.6). Descriptor name == emitted name.
+// Per-action overrides use the tool's REAL action enum.
+registerActivityLabelSpec("memory_manage", {
+    semanticPhase: "memory",
+    label: "managing memory",
+    actions: {
+        stats: { label: "reading memory stats" },
+        browse: { label: "browsing memory" },
+        delete: { label: "deleting memory entries" },
+        flush: { label: "flushing memory" },
+        export: { label: "exporting memory" },
+        pin: { label: "pinning memory entry" },
+        unpin: { label: "unpinning memory entry" },
+    },
+});
 // ---------------------------------------------------------------------------
 // Parameter schema
 // ---------------------------------------------------------------------------
@@ -22,7 +37,9 @@ const MemoryManageToolParams = Type.Object({
         Type.Literal("delete"),
         Type.Literal("flush"),
         Type.Literal("export"),
-    ], { description: "Memory management action. Valid values: stats (DB size and entry counts), browse (paginated entry listing), delete (remove entries by ID), flush (clear all entries for scope), export (full JSON export)" }),
+        Type.Literal("pin"),
+        Type.Literal("unpin"),
+    ], { description: "Memory management action. Valid values: stats (DB size and entry counts), browse (paginated entry listing), delete (remove entries by ID), flush (clear all entries for scope), export (full JSON export), pin (mark entry as always-injected in recall), unpin (remove always-inject mark)" }),
     tenant_id: Type.Optional(Type.String({
         description: "Tenant ID scope (defaults to current tenant)",
     })),
@@ -51,13 +68,16 @@ const MemoryManageToolParams = Type.Object({
     tags: Type.Optional(Type.Array(Type.String(), {
         description: "Filter by tags (entries must have all specified tags)",
     })),
+    id: Type.Optional(Type.String({
+        description: "Memory entry ID (required for pin/unpin actions)",
+    })),
 });
-const VALID_ACTIONS = ["stats", "browse", "delete", "flush", "export"];
+const VALID_ACTIONS = ["stats", "browse", "delete", "flush", "export", "pin", "unpin"];
 // ---------------------------------------------------------------------------
 // Factory
 // ---------------------------------------------------------------------------
 /**
- * Create a memory management tool with 5 actions.
+ * Create a memory management tool with 7 actions.
  *
  * Actions:
  * - **stats** -- Get memory statistics (DB size, entry counts, FTS health)
@@ -65,6 +85,8 @@ const VALID_ACTIONS = ["stats", "browse", "delete", "flush", "export"];
  * - **delete** -- Delete specific memory entries by ID array (requires approval)
  * - **flush** -- Flush all memory entries for a scope (requires approval)
  * - **export** -- Export full memory entries as JSON
+ * - **pin** -- Mark a memory entry as always-injected in recall (requires id)
+ * - **unpin** -- Remove the always-inject mark from a memory entry (requires id)
  *
  * @param rpcCall - RPC call function for delegating to the daemon backend
  * @param approvalGate - Optional approval gate for delete/flush actions
@@ -75,7 +97,7 @@ export function createMemoryManageTool(rpcCall, approvalGate) {
     return {
         name: "memory_manage",
         label: "Memory Management",
-        description: "Admin memory CRUD: stats, browse, delete, flush, export. Delete/flush require approval.",
+        description: "Admin memory CRUD: stats, browse, delete, flush, export, pin, unpin. Delete/flush require approval. Pin/unpin require id.",
         parameters: MemoryManageToolParams,
         async execute(_toolCallId, params) {
             try {
@@ -171,6 +193,30 @@ export function createMemoryManageTool(rpcCall, approvalGate) {
                         });
                         return jsonResult(result);
                     }
+                    case "pin": {
+                        if (!p.id || typeof p.id !== "string") {
+                            throwToolError("missing_param", "id is required for pin action");
+                        }
+                        const result = await rpcCall("memory.pin", {
+                            id: p.id,
+                            tenant_id: p.tenant_id,
+                            agent_id: p.agent_id,
+                            _trustLevel,
+                        });
+                        return jsonResult(result);
+                    }
+                    case "unpin": {
+                        if (!p.id || typeof p.id !== "string") {
+                            throwToolError("missing_param", "id is required for unpin action");
+                        }
+                        const result = await rpcCall("memory.unpin", {
+                            id: p.id,
+                            tenant_id: p.tenant_id,
+                            agent_id: p.agent_id,
+                            _trustLevel,
+                        });
+                        return jsonResult(result);
+                    }
                 }
             }
             catch (err) {

package/node_modules/@comis/skills/dist/platform-tools/tools/memory-search-tool.js

@@ -8,7 +8,13 @@
  * @module
  */
 import { Type } from "typebox";
+import { registerActivityLabelSpec } from "@comis/core";
 import { jsonResult, readStringParam, readNumberParam } from "../tool-helpers.js";
+// Activity label spec (§17.6). Descriptor name == emitted name.
+registerActivityLabelSpec("memory_search", {
+    semanticPhase: "memory",
+    label: "searching memory",
+});
 // ── Parameter Schema ────────────────────────────────────────────────
 const MemorySearchParams = Type.Object({
     query: Type.String({ description: "Semantic search query" }),

package/node_modules/@comis/skills/dist/platform-tools/tools/memory-store-tool.js

@@ -8,20 +8,13 @@
  * @module
  */
 import { Type } from "typebox";
+import { registerActivityLabelSpec } from "@comis/core";
 import { jsonResult, readStringParam } from "../tool-helpers.js";
-// ── Secret detection ────────────────────────────────────────────────
-/** Patterns that suggest content contains an API key or secret. */
-const SECRET_PATTERNS = [
-    /\bAIza[A-Za-z0-9_-]{30,}\b/, // Google / Gemini
-    /\bsk-[A-Za-z0-9]{20,}\b/, // OpenAI / Anthropic
-    /\bgsk_[A-Za-z0-9]{20,}\b/, // Groq
-    /\bghp_[A-Za-z0-9]{36,}\b/, // GitHub PAT
-    /\btvly-[A-Za-z0-9]{20,}\b/, // Tavily
-    /\bxai-[A-Za-z0-9]{20,}\b/, // xAI
-];
-function contentLooksLikeSecret(text) {
-    return SECRET_PATTERNS.some((re) => re.test(text));
-}
+// Activity label spec (§17.6). Descriptor name == emitted name.
+registerActivityLabelSpec("memory_store", {
+    semanticPhase: "memory",
+    label: "storing memory",
+});
 // ── Parameter Schema ────────────────────────────────────────────────
 const MemoryStoreParams = Type.Object({
     content: Type.String({ description: "The text content to store in memory" }),
@@ -47,13 +40,9 @@ export function createMemoryStoreTool(rpcCall) {
                     ? params.tags.filter((t) => typeof t === "string")
                     : [];
                 const result = await rpcCall("memory.store", { content, tags });
-                // Warn if content appears to contain an API key or secret
-                if (content && contentLooksLikeSecret(content)) {
-                    return jsonResult({
-                        ...((typeof result === "object" && result !== null) ? result : { stored: true }),
-                        warning: "This content appears to contain an API key or secret. Consider using environment variables ($HOME/.env or config.yaml SecretRef) instead of storing secrets in memory — they may leak into session logs when retrieved.",
-                    });
-                }
+                // Secret check now handled by validateMemoryWrite in @comis/core.
+                // The daemon-side validator (memory-write-validator.ts) calls scrubSecretsFromText
+                // as the FIRST check before any persistence — no redundant pattern match needed here.
                 return jsonResult(result);
             }
             catch (err) {

package/node_modules/@comis/skills/dist/platform-tools/tools/models-manage-tool.js

@@ -10,8 +10,20 @@
  * @module
  */
 import { Type } from "typebox";
+import { registerActivityLabelSpec } from "@comis/core";
 import { readStringParam } from "../tool-helpers.js";
 import { createAdminManageTool } from "../admin-manage-factory.js";
+// Activity label spec (§17.6). Descriptor name == emitted name.
+// Per-action overrides use the tool's REAL action enum.
+registerActivityLabelSpec("models_manage", {
+    semanticPhase: "tool",
+    label: "managing models",
+    actions: {
+        list: { label: "listing models" },
+        test: { label: "testing model" },
+        list_providers: { label: "listing model providers" },
+    },
+});
 // ---------------------------------------------------------------------------
 // Parameter schema
 // ---------------------------------------------------------------------------

package/node_modules/@comis/skills/dist/platform-tools/tools/notify-tool.js

@@ -10,7 +10,15 @@
  * @module
  */
 import { Type } from "typebox";
+import { registerActivityLabelSpec } from "@comis/core";
 import { createRpcDispatchTool } from "../messaging-factory.js";
+// Activity label spec (§17.6). Keyed on the EMITTED tool name
+// `notify_user` (NOT the `notify` descriptor name) — the activity stream
+// resolves on `AgentTool.name`.
+registerActivityLabelSpec("notify_user", {
+    semanticPhase: "tool",
+    label: "notifying user",
+});
 const NotifyToolParams = Type.Object({
     message: Type.String({
         description: "Notification text to send to the user.",

package/node_modules/@comis/skills/dist/platform-tools/tools/obs-query-tool.d.ts

@@ -1,10 +1,13 @@
 /**
  * Observability query tool: multi-action tool for platform diagnostics and metrics.
  *
- * Supports 4 action categories: diagnostics, billing, delivery, channels.
+ * Supports 9 action categories: diagnostics, billing, delivery, channels,
+ * explain, trace, session_report, fleet_health, audit.
  * Read-only observability tool -- no approval gate needed.
  * All actions enforce admin trust level via createTrustGuard.
- * Delegates to obs.* RPC handlers via rpcCall.
+ * Delegates to obs.* RPC handlers via rpcCall (explain and session_report both
+ * dispatch to obs.explain — the IncidentReport IS the session rollup, so
+ * session_report needs no new contract).
  *
  * @module
  */
@@ -12,7 +15,7 @@ import type { AgentTool } from "@earendil-works/pi-agent-core";
 import { Type } from "typebox";
 import type { RpcCall } from "./cron-tool.js";
 declare const ObsQueryToolParams: Type.TObject<{
-    action: Type.TUnion<[Type.TLiteral<"diagnostics">, Type.TLiteral<"billing">, Type.TLiteral<"delivery">, Type.TLiteral<"channels">]>;
+    action: Type.TUnion<[Type.TLiteral<"diagnostics">, Type.TLiteral<"billing">, Type.TLiteral<"delivery">, Type.TLiteral<"channels">, Type.TLiteral<"explain">, Type.TLiteral<"trace">, Type.TLiteral<"session_report">, Type.TLiteral<"fleet_health">, Type.TLiteral<"audit">]>;
     sub_action: Type.TOptional<Type.TString>;
     agent_id: Type.TOptional<Type.TString>;
     session_key: Type.TOptional<Type.TString>;
@@ -21,6 +24,14 @@ declare const ObsQueryToolParams: Type.TObject<{
     limit: Type.TOptional<Type.TInteger>;
     category: Type.TOptional<Type.TString>;
     threshold_ms: Type.TOptional<Type.TInteger>;
+    trace_id: Type.TOptional<Type.TString>;
+    depth: Type.TOptional<Type.TString>;
+    since_hours: Type.TOptional<Type.TInteger>;
+    kind: Type.TOptional<Type.TString>;
+    classification: Type.TOptional<Type.TString>;
+    tenant: Type.TOptional<Type.TString>;
+    outcome: Type.TOptional<Type.TString>;
+    until_ms: Type.TOptional<Type.TInteger>;
 }>;
 export declare function createObsQueryTool(rpcCall: RpcCall): AgentTool<typeof ObsQueryToolParams>;
 export {};

package/node_modules/@comis/skills/dist/platform-tools/tools/obs-query-tool.js

@@ -3,10 +3,13 @@
 /**
  * Observability query tool: multi-action tool for platform diagnostics and metrics.
  *
- * Supports 4 action categories: diagnostics, billing, delivery, channels.
+ * Supports 9 action categories: diagnostics, billing, delivery, channels,
+ * explain, trace, session_report, fleet_health, audit.
  * Read-only observability tool -- no approval gate needed.
  * All actions enforce admin trust level via createTrustGuard.
- * Delegates to obs.* RPC handlers via rpcCall.
+ * Delegates to obs.* RPC handlers via rpcCall (explain and session_report both
+ * dispatch to obs.explain — the IncidentReport IS the session rollup, so
+ * session_report needs no new contract).
  *
  * @module
  */
@@ -22,7 +25,12 @@ const ObsQueryToolParams = Type.Object({
         Type.Literal("billing"),
         Type.Literal("delivery"),
         Type.Literal("channels"),
-    ], { description: "Observability query category. Valid values: diagnostics (platform diagnostic data), billing (cost data by provider/agent/session), delivery (message delivery traces), channels (channel activity and staleness)" }),
+        Type.Literal("explain"),
+        Type.Literal("trace"),
+        Type.Literal("session_report"),
+        Type.Literal("fleet_health"),
+        Type.Literal("audit"),
+    ], { description: "Observability query category. Valid values: diagnostics (platform diagnostic data), billing (cost data by provider/agent/session), delivery (message delivery traces), channels (channel activity and staleness), explain (assembled IncidentReport / root-cause post-mortem for a session), trace (search trace rows), session_report (session rollup — reuses the IncidentReport), fleet_health (cross-session fleet-health triage: degradation rate, recurring WARNs, model/config health over a window), audit (the durable security-decision audit log: secret access, injection detection, command blocks — filter by kind/classification/agent/tenant/outcome/since/until)" }),
     sub_action: Type.Optional(Type.String({
         description: "Sub-action within the category. " +
             "billing: byProvider | byAgent | bySession | total. " +
@@ -36,23 +44,38 @@ const ObsQueryToolParams = Type.Object({
     limit: Type.Optional(Type.Integer({ description: "Maximum number of results to return" })),
     category: Type.Optional(Type.String({ description: "Diagnostic category filter (for diagnostics)" })),
     threshold_ms: Type.Optional(Type.Integer({ description: "Staleness threshold in ms (for channels.stale, default 300000)" })),
+    trace_id: Type.Optional(Type.String({ description: "Trace ID (for explain, trace, session_report)" })),
+    depth: Type.Optional(Type.String({ description: "Report depth for explain/session_report: summary | full" })),
+    since_hours: Type.Optional(Type.Integer({ description: "Window in hours for fleet_health (default 24)" })),
+    // AUDIT-05 (the 9th action): the audit-log filter surface. All optional; an
+    // absent filter widens the scan. since_ms/agent_id/limit are shared above.
+    kind: Type.Optional(Type.String({ description: "Audit event family filter (e.g. secret_access, injection_detected) — for audit" })),
+    classification: Type.Optional(Type.String({ description: "Audit risk class filter: read | mutate | destructive — for audit" })),
+    tenant: Type.Optional(Type.String({ description: 'Audit tenant scope ("" matches system-scoped tenant-less events) — for audit' })),
+    outcome: Type.Optional(Type.String({ description: "Audit outcome filter: success | failure | denied — for audit" })),
+    until_ms: Type.Optional(Type.Integer({ description: "Audit upper time bound (inclusive epoch ms) — for audit" })),
 });
 // ---------------------------------------------------------------------------
 // Factory
 // ---------------------------------------------------------------------------
 /**
- * Create an observability query tool with 4 action categories.
+ * Create an observability query tool with 9 action categories.
  *
  * Actions:
  * - **diagnostics** -- Query platform diagnostic data with optional category/limit filters
  * - **billing** -- Query billing data by provider, agent, session, or total
  * - **delivery** -- Query message delivery traces (recent) or aggregated stats
  * - **channels** -- Query channel activity: all channels, stale channels, or a specific channel
+ * - **explain** -- Assemble an IncidentReport (root-cause post-mortem) for a session via obs.explain
+ * - **trace** -- Search trace rows via obs.trace.search
+ * - **session_report** -- Session rollup; reuses obs.explain (the IncidentReport IS the rollup)
+ * - **fleet_health** -- Cross-session fleet-health triage via obs.fleet.health (admin)
+ * - **audit** -- Query the durable security-decision audit log via obs.audit.query (admin; content-free rows)
  *
  * @param rpcCall - RPC call function for delegating to the daemon backend
  * @returns AgentTool implementing the observability query interface
  */
-const VALID_ACTIONS = ["diagnostics", "billing", "delivery", "channels"];
+const VALID_ACTIONS = ["diagnostics", "billing", "delivery", "channels", "explain", "trace", "session_report", "fleet_health", "audit"];
 const VALID_BILLING_SUB_ACTIONS = ["byProvider", "byAgent", "bySession", "total"];
 const VALID_DELIVERY_SUB_ACTIONS = ["recent", "stats"];
 const VALID_CHANNELS_SUB_ACTIONS = ["all", "stale", "get"];
@@ -140,40 +163,115 @@ export function createObsQueryTool(rpcCall) {
                     const result = await rpcCall("obs.delivery.stats", { _trustLevel: tl });
                     return jsonResult(result);
                 }
-                // action === "channels"
-                const rawSubAction = readStringParam(p, "sub_action", false) ?? "all";
-                if (!VALID_CHANNELS_SUB_ACTIONS.includes(rawSubAction)) {
-                    throwToolError("invalid_value", `Unknown channels sub_action: "${rawSubAction}".`, {
-                        validValues: [...VALID_CHANNELS_SUB_ACTIONS],
-                        param: "sub_action",
-                        hint: "Use one of the listed values for sub_action.",
+                if (action === "channels") {
+                    const rawSubAction = readStringParam(p, "sub_action", false) ?? "all";
+                    if (!VALID_CHANNELS_SUB_ACTIONS.includes(rawSubAction)) {
+                        throwToolError("invalid_value", `Unknown channels sub_action: "${rawSubAction}".`, {
+                            validValues: [...VALID_CHANNELS_SUB_ACTIONS],
+                            param: "sub_action",
+                            hint: "Use one of the listed values for sub_action.",
+                        });
+                    }
+                    const subAction = rawSubAction;
+                    const ctx = tryGetContext();
+                    const tl = ctx?.trustLevel ?? "guest";
+                    if (subAction === "all") {
+                        const result = await rpcCall("obs.channels.all", { _trustLevel: tl });
+                        return jsonResult(result);
+                    }
+                    if (subAction === "stale") {
+                        const thresholdMs = readNumberParam(p, "threshold_ms", false);
+                        const result = await rpcCall("obs.channels.stale", {
+                            thresholdMs: thresholdMs ?? 300_000,
+                            _trustLevel: tl,
+                        });
+                        return jsonResult(result);
+                    }
+                    // subAction === "get"
+                    const channelId = readStringParam(p, "channel_id");
+                    const result = await rpcCall("obs.channels.get", { channelId, _trustLevel: tl });
+                    return jsonResult(result);
+                }
+                if (action === "explain") {
+                    const sessionKey = readStringParam(p, "session_key", false);
+                    const traceId = readStringParam(p, "trace_id", false);
+                    const depth = readStringParam(p, "depth", false);
+                    const ctx = tryGetContext();
+                    const result = await rpcCall("obs.explain", {
+                        sessionKey,
+                        traceId,
+                        depth,
+                        _trustLevel: ctx?.trustLevel ?? "guest",
                     });
+                    return jsonResult(result);
                 }
-                const subAction = rawSubAction;
-                const ctx = tryGetContext();
-                const tl = ctx?.trustLevel ?? "guest";
-                if (subAction === "all") {
-                    const result = await rpcCall("obs.channels.all", { _trustLevel: tl });
+                if (action === "fleet_health") {
+                    const sinceHours = readNumberParam(p, "since_hours", false);
+                    const ctx = tryGetContext();
+                    const result = await rpcCall("obs.fleet.health", {
+                        sinceHours,
+                        _trustLevel: ctx?.trustLevel ?? "guest",
+                    });
                     return jsonResult(result);
                 }
-                if (subAction === "stale") {
-                    const thresholdMs = readNumberParam(p, "threshold_ms", false);
-                    const result = await rpcCall("obs.channels.stale", {
-                        thresholdMs: thresholdMs ?? 300_000,
-                        _trustLevel: tl,
+                if (action === "audit") {
+                    // AUDIT-05 (the 9th action): the durable security-decision audit log.
+                    // Reuses the existing admin trustGuard — NO new auth surface. Delegates
+                    // to the admin-gated obs.audit.query RPC; the rows are content-free.
+                    const kind = readStringParam(p, "kind", false);
+                    const classification = readStringParam(p, "classification", false);
+                    const agentId = readStringParam(p, "agent_id", false);
+                    const tenant = readStringParam(p, "tenant", false);
+                    const outcome = readStringParam(p, "outcome", false);
+                    const since = readNumberParam(p, "since_ms", false);
+                    const until = readNumberParam(p, "until_ms", false);
+                    const limit = readNumberParam(p, "limit", false);
+                    const ctx = tryGetContext();
+                    const result = await rpcCall("obs.audit.query", {
+                        kind,
+                        classification,
+                        agentId,
+                        tenant,
+                        outcome,
+                        since,
+                        until,
+                        limit,
+                        _trustLevel: ctx?.trustLevel ?? "guest",
                     });
                     return jsonResult(result);
                 }
-                // subAction === "get"
-                const channelId = readStringParam(p, "channel_id");
-                const result = await rpcCall("obs.channels.get", { channelId, _trustLevel: tl });
+                if (action === "trace") {
+                    const traceId = readStringParam(p, "trace_id", false);
+                    const sinceMs = readNumberParam(p, "since_ms", false);
+                    const limit = readNumberParam(p, "limit", false);
+                    const ctx = tryGetContext();
+                    const result = await rpcCall("obs.trace.search", {
+                        traceId,
+                        sinceMs,
+                        limit,
+                        _trustLevel: ctx?.trustLevel ?? "guest",
+                    });
+                    return jsonResult(result);
+                }
+                // action === "session_report"
+                // session_report reuses obs.explain -- the IncidentReport IS the session
+                // rollup (cost/toolStats/outcome/timing/degraded). No new contract.
+                const sessionKey = readStringParam(p, "session_key", false);
+                const traceId = readStringParam(p, "trace_id", false);
+                const depth = readStringParam(p, "depth", false) ?? "summary";
+                const ctx = tryGetContext();
+                const result = await rpcCall("obs.explain", {
+                    sessionKey,
+                    traceId,
+                    depth,
+                    _trustLevel: ctx?.trustLevel ?? "guest",
+                });
                 return jsonResult(result);
             }
             catch (err) {
                 if (err instanceof Error && err.message.startsWith("["))
                     throw err;
-                // eslint-disable-next-line preserve-caught-error -- intentional: original error is contextual, not the thrown symptom
-                throw new Error(err instanceof Error ? err.message : String(err));
+                throw err instanceof Error ? err : new Error(String(err));
             }
         },
     };

package/node_modules/@comis/skills/dist/platform-tools/tools/pipeline-tool.d.ts

@@ -15,7 +15,7 @@ import { Type } from "typebox";
 import type { ApprovalGate } from "@comis/core";
 import type { RpcCall } from "./cron-tool.js";
 declare const PipelineParams: Type.TObject<{
-    action: Type.TOptional<Type.TUnion<[Type.TLiteral<"define">, Type.TLiteral<"execute">, Type.TLiteral<"status">, Type.TLiteral<"cancel">, Type.TLiteral<"save">, Type.TLiteral<"load">, Type.TLiteral<"list">, Type.TLiteral<"delete">, Type.TLiteral<"outputs">]>>;
+    action: Type.TOptional<Type.TUnion<[Type.TLiteral<"define">, Type.TLiteral<"execute">, Type.TLiteral<"status">, Type.TLiteral<"cancel">, Type.TLiteral<"save">, Type.TLiteral<"load">, Type.TLiteral<"list">, Type.TLiteral<"delete">, Type.TLiteral<"outputs">, Type.TLiteral<"from_intent">]>>;
     nodes: Type.TOptional<Type.TArray<Type.TObject<{
         node_id: Type.TString;
         task: Type.TString;
@@ -27,7 +27,27 @@ declare const PipelineParams: Type.TObject<{
         barrier_mode: Type.TOptional<Type.TUnion<[Type.TLiteral<"all">, Type.TLiteral<"majority">, Type.TLiteral<"best-effort">]>>;
         retries: Type.TOptional<Type.TInteger>;
         type_id: Type.TOptional<Type.TUnion<[Type.TLiteral<"agent">, Type.TLiteral<"debate">, Type.TLiteral<"vote">, Type.TLiteral<"refine">, Type.TLiteral<"collaborate">, Type.TLiteral<"approval-gate">, Type.TLiteral<"map-reduce">]>>;
-        type_config: Type.TOptional<Type.TRecord<"^.*$", Type.TUnknown>>;
+        type_config: Type.TOptional<Type.TObject<{
+            agents: Type.TOptional<Type.TArray<Type.TString>>;
+            rounds: Type.TOptional<Type.TInteger>;
+            synthesizer: Type.TOptional<Type.TString>;
+            voters: Type.TOptional<Type.TArray<Type.TString>>;
+            prompt_suffix: Type.TOptional<Type.TString>;
+            verdict_format: Type.TOptional<Type.TString>;
+            min_voters: Type.TOptional<Type.TInteger>;
+            reviewers: Type.TOptional<Type.TArray<Type.TString>>;
+            message: Type.TOptional<Type.TString>;
+            timeout_minutes: Type.TOptional<Type.TNumber>;
+            mappers: Type.TOptional<Type.TArray<Type.TObject<{
+                agent: Type.TString;
+                task_suffix: Type.TOptional<Type.TString>;
+            }>>>;
+            reducer: Type.TOptional<Type.TString>;
+            reducer_prompt: Type.TOptional<Type.TString>;
+            agent: Type.TOptional<Type.TString>;
+            model: Type.TOptional<Type.TString>;
+            max_steps: Type.TOptional<Type.TInteger>;
+        }>>;
         context_mode: Type.TOptional<Type.TUnion<[Type.TLiteral<"full">, Type.TLiteral<"summary">, Type.TLiteral<"none">]>>;
         mcp_servers: Type.TOptional<Type.TArray<Type.TString>>;
     }>>>;
@@ -53,6 +73,9 @@ declare const PipelineParams: Type.TObject<{
         max_cost: Type.TOptional<Type.TNumber>;
     }>>;
     variables: Type.TOptional<Type.TRecord<"^.*$", Type.TString>>;
+    pattern: Type.TOptional<Type.TUnion<[Type.TLiteral<"research-fanout">, Type.TLiteral<"debate">, Type.TLiteral<"vote">, Type.TLiteral<"map-reduce">]>>;
+    tasks: Type.TOptional<Type.TArray<Type.TString>>;
+    agents: Type.TOptional<Type.TArray<Type.TString>>;
 }>;
 /** Minimal pino-compatible logger for structured tool logging. */
 interface ToolLogger {