comisai 1.0.44 → 1.0.46

package/node_modules/@comis/daemon/dist/api/shared/persist-to-config.js

@@ -178,7 +178,7 @@ export function _pendingConfigMutations() {
  * Run `fn` inside a config-mutation fence so any SIGUSR2 restart that a
  * config-mutating tool schedules MID-`fn` is deferred until `fn` settles.
  *
- * RESTART-01 (live VPS 2026-06-20): a config-mutating agent tool
+ * Without the fence, a config-mutating agent tool
  * (heartbeat_manage / config.patch / agents_manage / …) called inside a
  * SYNCHRONOUS chat/responses-API turn triggered a debounced SIGUSR2 that
  * restarted the daemon UNDER the in-flight HTTP request → the request died

package/node_modules/@comis/daemon/dist/api/skill-handlers.js

@@ -133,7 +133,7 @@ export function createSkillHandlers(deps) {
             return result;
         },
         [SkillsUploadContract.method]: async (rawParams) => {
-            // CAP-03/05 (v8 §3.7): in-process capability gate — the agent loop skips
+            // In-process capability gate — the agent loop skips
             // checkScope, so orch:skill is enforced here, reading the injected
             // _capabilities from raw params BEFORE the strip.
             requireCapability(rawParams._capabilities, "orch:skill");
@@ -271,7 +271,7 @@ export function createSkillHandlers(deps) {
             return result;
         },
         [SkillsImportContract.method]: async (rawParams) => {
-            // CAP-03/05 (v8 §3.7): in-process capability gate (see skills.upload).
+            // In-process capability gate (see skills.upload).
             requireCapability(rawParams._capabilities, "orch:skill");
             const callingAgentId = resolveCallingAgentId(rawParams);
             const userParams = stripInternalFields(rawParams);
@@ -400,7 +400,7 @@ export function createSkillHandlers(deps) {
             return result;
         },
         [SkillsDeleteContract.method]: async (rawParams) => {
-            // CAP-03/05 (v8 §3.7): in-process capability gate (see skills.upload).
+            // In-process capability gate (see skills.upload).
             requireCapability(rawParams._capabilities, "orch:skill");
             const callingAgentId = resolveCallingAgentId(rawParams);
             const userParams = stripInternalFields(rawParams);
@@ -471,7 +471,7 @@ export function createSkillHandlers(deps) {
             return result;
         },
         [SkillsCreateContract.method]: async (rawParams) => {
-            // CAP-03/05 (v8 §3.7): in-process capability gate (see skills.upload).
+            // In-process capability gate (see skills.upload).
             requireCapability(rawParams._capabilities, "orch:skill");
             const callingAgentId = resolveCallingAgentId(rawParams);
             const userParams = stripInternalFields(rawParams);
@@ -571,7 +571,7 @@ export function createSkillHandlers(deps) {
             return result;
         },
         [SkillsUpdateContract.method]: async (rawParams) => {
-            // CAP-03/05 (v8 §3.7): in-process capability gate (see skills.upload).
+            // In-process capability gate (see skills.upload).
             requireCapability(rawParams._capabilities, "orch:skill");
             const callingAgentId = resolveCallingAgentId(rawParams);
             const userParams = stripInternalFields(rawParams);

package/node_modules/@comis/daemon/dist/api/ssrf-image-fetch.js

@@ -3,7 +3,7 @@
 // caller's `@allow-throw` boundary (image-handlers / media-handlers) and
 // converted to a JSON-RPC error response by rpc-dispatch.ts.
 /**
- * Shared DNS-pinned, SSRF-safe image byte fetch (CR-01).
+ * Shared DNS-pinned, SSRF-safe image byte fetch.
  *
  * Closes the DNS-rebinding time-of-check/time-of-use (TOCTOU) SSRF gap that a
  * bare `fetch(url, { redirect: "error" })` leaves open: `validateUrl` resolves

package/node_modules/@comis/daemon/dist/api/subagent-handlers.d.ts

@@ -5,8 +5,8 @@
  *   subagent.list, subagent.kill, subagent.steer
  *
  * List returns filtered runs from SubAgentRunner. Kill marks a running
- * run as failed. Steer is flag-gated on security.agentToAgent.steerInject
- * (STEER-01): OFF (default) → kill+respawn with a new task (status "steered");
+ * run as failed. Steer is flag-gated on security.agentToAgent.steerInject:
+ * OFF (default) → kill+respawn with a new task (status "steered");
  * ON → inject the message into the running child's live session at its next
  * step boundary (no kill/respawn, same runId, status "steered_inject").
  * Rate-limited at 2s per target (shared across both branches).

package/node_modules/@comis/daemon/dist/api/subagent-handlers.js

@@ -7,8 +7,8 @@
  *   subagent.list, subagent.kill, subagent.steer
  *
  * List returns filtered runs from SubAgentRunner. Kill marks a running
- * run as failed. Steer is flag-gated on security.agentToAgent.steerInject
- * (STEER-01): OFF (default) → kill+respawn with a new task (status "steered");
+ * run as failed. Steer is flag-gated on security.agentToAgent.steerInject:
+ * OFF (default) → kill+respawn with a new task (status "steered");
  * ON → inject the message into the running child's live session at its next
  * step boundary (no kill/respawn, same runId, status "steered_inject").
  * Rate-limited at 2s per target (shared across both branches).
@@ -92,16 +92,16 @@ export function createSubagentHandlers(deps) {
                     steerTimestamps.delete(key);
                 }
             }
-            // STEER-01: flag-gated branch. Flag ON → inject into the live child (no
+            // Flag-gated branch. Flag ON → inject into the live child (no
             // kill, no respawn — transcript + progress preserved, same runId). Flag
-            // OFF (default) → the historical kill+respawn, BYTE-IDENTICAL. The 2s
+            // OFF (default) → kill+respawn. The 2s
             // rate-limit above is shared by both branches.
             if (deps.securityConfig.agentToAgent?.steerInject) {
                 const run = deps.subAgentRunner.getRunStatus(target);
                 if (!run) {
                     throw new Error(`Unknown run ID: ${target}`);
                 }
-                // WR-02: mirror killRun's status guard (sub-agent-runner.ts:1910-1912).
+                // Mirror killRun's status guard (sub-agent-runner.ts:1910-1912).
                 // getRunStatus returns a run for ANY status still inside the retention
                 // window; a steer aimed at a completed/failed/queued run has no live
                 // handle, so fail fast with an actionable status-named error instead of
@@ -111,7 +111,7 @@ export function createSubagentHandlers(deps) {
                 }
                 const steerResult = await deps.subAgentRunner.steerRun(target, message);
                 if (!steerResult.steered) {
-                    // WR-03 (§2.7): the inject-failure branch is a path an operator must
+                    // The inject-failure branch is a path an operator must
                     // diagnose. Log a WARN with an actionable hint + errorKind before the
                     // throw (which the @allow-throw dispatcher converts to a JSON-RPC
                     // error) — never the steer message body. The success branch already
@@ -150,10 +150,10 @@ export function createSubagentHandlers(deps) {
                 throw new Error(`Run details not found after kill: ${target}`);
             }
             // Respawn with new task — reads internal fields directly off rawParams.
-            // Phase 213 CR-01: the respawn must stay in the KILLED run's spawn tree, so
+            // The respawn must stay in the KILLED run's spawn tree, so
             // inherit its rootRunId (+ the authorizing parentLeaseId). Without this the
-            // steer-respawn minted a fresh root → a later run.kill {rootRunId} of the
-            // original tree would miss the steered continuation (a survivor — REVOKE-03).
+            // steer-respawn would mint a fresh root → a later run.kill {rootRunId} of the
+            // original tree would miss the steered continuation (a surviving orphan).
             const newRunId = deps.subAgentRunner.spawn({
                 task: message,
                 agentId: run.agentId,

package/node_modules/@comis/daemon/dist/api/types.d.ts

@@ -1,16 +1,14 @@
 /**
  * Per-domain API dependency slices for daemon RPC handlers.
  *
- * The monolithic dispatcher-deps superset is replaced with 11 per-domain
- * cluster slices. Each handler factory consumes its narrow slice; the
- * ApiDispatchDeps aggregator (extends all 11) is consumed ONLY by the
- * dispatcher itself.
+ * The dispatcher deps are partitioned into 11 per-domain cluster slices.
+ * Each handler factory consumes its narrow slice; the ApiDispatchDeps
+ * aggregator (extends all 11) is consumed ONLY by the dispatcher itself.
  *
- * The field partition is exhaustive: every field on the legacy
- * dispatcher-deps interface maps to exactly one cluster slice. The
- * aggregator's `extends` clause unions all 11 slices back into the legacy
- * shape, preserving structural compatibility with the 27 still-legacy
- * `*HandlerDeps` interfaces in api/*-handlers.ts.
+ * The field partition is exhaustive: every dispatcher dep maps to exactly
+ * one cluster slice. The aggregator's `extends` clause unions all 11 slices
+ * into the full dispatch shape, preserving structural compatibility with
+ * the 27 `*HandlerDeps` interfaces in api/*-handlers.ts.
  *
  * @module
  */
@@ -89,13 +87,13 @@ export interface SessionsApiDeps {
      *  consumes the derived field to filter to CONFIRMED-only messages, but the
      *  field is also useful to the dashboard / observers. */
     deliveryQueue?: import("@comis/core").DeliveryQueuePort;
-    /** LCD lossless-store write+run surface — `session.reset_conversation` (164-06)
+    /** LCD lossless-store write+run surface — `session.reset_conversation`
      *  calls `deleteConversationLcd` in `runOnConversation` to clear lcd_* rows.
      *  Optional: the handler fails-closed (throws "LCD store not available") when
      *  absent, never a silent 0 count. Same instance as MemoryApiDeps; the copy here
      *  lets session-archive.ts access it without widening to the full MemoryApiDeps slice. */
     lcdStore?: import("@comis/core").ContextStorePort;
-    /** MemoryPort for session-archive --memory reset (DIST-05). The concrete
+    /** MemoryPort for session-archive --memory reset. The concrete
      *  adapter is SqliteMemoryAdapter (which implements MemoryPort) — it is the
      *  SAME object as MemoryApiDeps.memoryAdapter, threaded onto this slice at the
      *  composition root (daemon.ts) so the session.reset_conversation handler can
@@ -104,22 +102,22 @@ export interface SessionsApiDeps {
      *  --memory flag logs a not-available WARN and clears LCD + sessionStore only. */
     memoryPort?: import("@comis/core").MemoryPort;
     /** MemoryConsolidationStore for --memory consolidated-observation unlink /
-     *  --purge-derived (DIST-05). The SAME instance as MemoryApiDeps.consolidationStore.
+     *  --purge-derived. The SAME instance as MemoryApiDeps.consolidationStore.
      *  Optional for the same handler-test reason; absent ⇒ the unlink/purge steps are
      *  skipped (the by-session memory delete itself still runs). */
     consolidationStore?: import("@comis/core").MemoryConsolidationStore;
-    /** Runtime-layer (L3) destroy for `session.reset_conversation` — live finding
-     *  2026-06-11: clearing LCD + sessionStore alone resurrects (the surviving pi
+    /** Runtime-layer (L3) destroy for `session.reset_conversation` — clearing
+     *  LCD + sessionStore alone resurrects the conversation (the surviving pi
      *  runtime JSONL re-ingests wholesale via the lcd-ingest epoch rebase). Wired
      *  at the composition root from `createConversationReset(...).destroyRuntimeSession`
      *  bound to the default agent. Returns true when an adapter destroy ran.
      *  Optional: absent ⇒ the handler reports `runtimeSessionDestroyed: false`
      *  and WARNs with the resurrection consequence (honest degradation). */
     destroyRuntimeSession?: (formattedSessionKey: string) => Promise<boolean>;
-    /** Executor session-scoped state cleanup (175-REVIEW CR-02): wired at the
+    /** Executor session-scoped state cleanup: wired at the
      *  composition root (daemon.ts) to @comis/agent's clearSessionState — the
      *  single authoritative path that drops the per-key tool-schema snapshots,
-     *  the GBNF-02 strip-retry once-gate, JIT-guide delivery, cache latches,
+     *  the GBNF strip-retry once-gate, JIT-guide delivery, cache latches,
      *  etc. session.reset_conversation / session.delete call it so a reset or
      *  recreated session does not inherit the old key's executor state (the
      *  strip once-gate would otherwise terminal-fail the "fresh" session's
@@ -205,13 +203,13 @@ export interface MemoryApiDeps {
     onSuspiciousContent?: import("@comis/core").WrapExternalContentOptions["onSuspiciousContent"];
     /** LCD lossless-store read surface — the `context.tree` handler resolves a
      *  conversation's context_items + summaries via `getContextItems` /
-     *  `getSummaries` (R4 agent+tenant scoped). The SAME ContextStorePort
+     *  `getSummaries` (agent+tenant scoped). The SAME ContextStorePort
      *  setup-memory builds (`lcdStore`). Optional so existing handler tests build
      *  deps without it; the context.* handlers fail-closed (empty result) when absent. */
     lcdStore?: import("@comis/core").ContextStorePort;
     /** LCD operator-browse read surface — the `context.conversations` handler
      *  enumerates the agent's distinct conversations via `listConversations`
-     *  (R4 agent+tenant scoped). Built by setup-memory (`createLcdBrowseStore`).
+     *  (agent+tenant scoped). Built by setup-memory (`createLcdBrowseStore`).
      *  Optional for the same handler-test reason; absent ⇒ empty result. */
     contextBrowse?: import("@comis/core").ContextBrowsePort;
 }
@@ -244,11 +242,11 @@ export interface ChannelsApiDeps {
     workspaceDirs: Map<string, string>;
     logger: ComisLogger;
     persistDeps?: PersistToConfigDeps;
-    /** Phase 213 (QUOTA-01/02): the bounded-autonomy service. message.send/reply/react consult `tryOutward` (origin/grant/per-hour/volume) before deliver. Optional; absent ⇒ inert. A daemon-initiated send (no `_agentId`) is never gated. */
+    /** The bounded-autonomy service. message.send/reply/react consult `tryOutward` (origin/grant/per-hour/volume) before deliver. Optional; absent ⇒ inert. A daemon-initiated send (no `_agentId`) is never gated. */
     boundedAutonomy?: import("../autonomy/bounded-autonomy.js").BoundedAutonomy;
-    /** Phase 216 ONCE-01/02: tree-stable rootRunId resolver (same as SessionsApiDeps.resolveRootRunId, already spread into the flat dispatch deps). message.send/reply/react derive the outward-ledger idempotency key from it; absent ⇒ the wrap is a pass-through. */
+    /** Tree-stable rootRunId resolver (same as SessionsApiDeps.resolveRootRunId, already spread into the flat dispatch deps). message.send/reply/react derive the outward-ledger idempotency key from it; absent ⇒ the wrap is a pass-through. */
     resolveRootRunId?: (sessionKey: import("@comis/core").SessionKey) => string;
-    /** Phase 216 ONCE-01: the three-state outward ledger; absent ⇒ no exactly-once wrap (older/non-autonomy daemon) */
+    /** The three-state outward ledger; absent ⇒ no exactly-once wrap (non-autonomy daemon) */
     outwardLedger?: import("@comis/core").OutwardSendLedgerPort;
 }
 /**
@@ -286,7 +284,7 @@ export interface AgentsApiDeps {
 /**
  * Dependencies for cron-handlers + graph-handlers + heartbeat-handlers + subagent-handlers
  * (cron.list/run, graph.list/run, heartbeat.list/run, subagent.list).
- * @optional-field-count: 14 — daemon-internal orchestration-plane slice; every optional gates on a daemon-global resource (graph coordinator, heartbeat runner, leaseManager/durableRuns, the Phase-217 autonomy plane denialBreaker/evictRegistry/escalate). daemon.ts supplies each from the cap-endpoint handle or config; a non-autonomy boot leaves them absent (byte-identical pre-217). Keep until a structural slice split.
+ * @optional-field-count: 15 — daemon-internal orchestration-plane slice; every optional gates on a daemon-global resource (graph coordinator, heartbeat runner, leaseManager/durableRuns, the autonomy plane denialBreaker/evictRegistry/escalate, the orchestrateReplay wiring cluster). daemon.ts supplies each from the cap-endpoint handle or config; a non-autonomy boot leaves them absent. Keep until a structural slice split.
  */
 export interface OrchestratorApiDeps {
     getAgentCronScheduler: (agentId: string) => CronScheduler;
@@ -320,12 +318,14 @@ export interface OrchestratorApiDeps {
     logger: ComisLogger;
     /** graph-handlers reads deps.dataDir for graph-runs output. */
     dataDir?: string;
-    /** subagent-handlers reads deps.subAgentRunner.list/kill/steer; autonomy-handlers (213-06) reads killByRootRun for run.kill. */
+    /** subagent-handlers reads deps.subAgentRunner.list/kill/steer; autonomy-handlers reads killByRootRun for run.kill. */
     subAgentRunner: ReturnType<typeof createSubAgentRunner>;
-    /** autonomy-handlers (213-06 REVOKE-01/03) revoke fan-outs. Optional: Plan 07 wires it; absent ⇒ handlers not registered. */ leaseManager?: import("@comis/infra").LeaseManager;
-    /** Phase 216 DUR-03: the durable-run store — autonomy-handlers ALSO calls invalidateForRevoke(rootRunId) on lease.revoke/run.kill so a restart cannot resume pre-revoke caps. Optional; absent ⇒ the persisted record is not poisoned (only matters when durability is enabled, which is when Plan 07 wires it). */ durableRuns?: import("@comis/core").DurableRunPort;
+    /** autonomy-handlers revoke fan-outs. Optional: wired at the composition root; absent ⇒ handlers not registered. */ leaseManager?: import("@comis/infra").LeaseManager;
+    /** The durable-run store — autonomy-handlers ALSO calls invalidateForRevoke(rootRunId) on lease.revoke/run.kill so a restart cannot resume pre-revoke caps. Optional; absent ⇒ the persisted record is not poisoned (only matters when durability is enabled, which is when the composition root wires it). */ durableRuns?: import("@comis/core").DurableRunPort;
     denialBreaker?: import("../autonomy/denial-breaker.js").DenialBreaker;
     evictRegistry?: import("../autonomy/evict-registry.js").EvictRegistry;
+    /** The operator deterministic-replay wiring cluster (outputGuard + the sandbox-backed pinned-byte re-spawn seam + an optional replay-socket factory). OPTIONAL — the composition root assembles it from the cap-endpoint handle + the sandbox; absent ⇒ `orchestrate.replay` is not registered. Combined in rpc-dispatch with `durableRuns` (runId validation) + a workspace resolver into the createOrchestrateReplayHandlers session deps. The SEPARATE replay socket + re-spawn are never a mode of the production endpoint (INV-1). */
+    orchestrateReplay?: import("../wiring/setup-orchestrate-replay.js").OrchestrateReplayWiring;
     escalate?: import("../autonomy/durable-resume-engine.js").NotifyFn;
     eventBus?: AppContainer["eventBus"];
     getProviderCapabilityClass?: (provider: string | undefined) => import("@comis/agent").CapabilityClass | undefined;
@@ -503,9 +503,9 @@ export interface AuthApiDeps {
  * Dependencies for media-handlers + image-handlers
  * (media.transcribe/extract_document/tts, image.generate).
  */
-/** OBS-03 (196): the boot-resolved voice (STT/TTS) selection threaded to the
+/** The boot-resolved voice (STT/TTS) selection threaded to the
  *  daemon RPC handlers for the trajectory emit — `provider`/`keyless`/`source` rung
- *  + the collected `onSkip` reasons (the OBS-03 selection observability). Resolved
+ *  + the collected `onSkip` reasons (the selection observability). Resolved
  *  ONCE at boot by `setupMedia` from the SAME `SttSelection`/`TtsSelection` the
  *  adapter construction used (no second source of truth). Optional — a selector-less
  *  boot leaves it undefined and the handler derives provider+keyless from config. */
@@ -526,9 +526,9 @@ export interface MediaApiDeps {
             defaultScopeAction: "allow" | "deny";
             defaultProvider?: string;
         };
-        /** OBS-03 (196): the STT (transcription) config slice. The runtime object is the
+        /** The STT (transcription) config slice. The runtime object is the
          *  full `integrations.media` config, so this is already present; declared here so
-         *  `media.test.stt` reports the STT provider (the :595 reads-TTS RED-proof fix). */
+         *  `media.test.stt` reports the STT provider (not the TTS one). */
         transcription: {
             provider?: string;
             model?: string;
@@ -557,19 +557,19 @@ export interface MediaApiDeps {
         logger: ComisLogger;
         /** Direct channel delivery -- resolve adapter by channel type. */
         getChannelAdapter: (channelType: string) => Pick<import("@comis/core").ChannelPort, "sendAttachment"> | undefined;
-        /** RES-01: resolve the agent's main provider in lockstep with the
-         *  completion path (I4 — delegates to the same resolveAgentModel). The
+        /** Resolve the agent's main provider in lockstep with the
+         *  completion path (delegates to the same resolveAgentModel). The
          *  handler uses this only for observability + lockstep verification; the
          *  provider INSTANCE is selected at wiring time (setup-image-provider.ts),
          *  never re-derived here (no second source of truth). */
         resolveAgentMainProvider: (agentId: string) => {
             providerId: string;
         };
-        /** IN-01 (185): resolve a `reference_image` workspace file path under the
+        /** Resolve a `reference_image` workspace file path under the
          *  caller's agent dir (safePath confinement). Mirror MediaApiDeps:572-573. */
         workspaceDirs: Map<string, string>;
         defaultWorkspaceDir: string;
-        /** DEL-01 (186): the per-agent persistence getter. Persists the generated
+        /** The per-agent persistence getter. Persists the generated
          *  image buffer to the agent's confined workspace (`~/.comis/workspace/media/
          *  photos/`) via MediaPersistenceService — replacing the ephemeral tmpdir
          *  write+delete. The agentId resolves the workspace inside the getter
@@ -581,7 +581,7 @@ export interface MediaApiDeps {
             mediaKind: "image";
             mimeType: string;
         }) => Promise<import("@comis/shared").Result<import("@comis/skills/tools").PersistedFile, Error>>;
-        /** OBS-04 (186): the per-session trajectory recorder registry. The handler
+        /** The per-session trajectory recorder registry. The handler
          *  resolves the recorder by `_callerSessionKey` and direct-emits the 4
          *  image.* lifecycle events via `getRecorder(sessionKey)?.recordEvent(...)`
          *  (the comis-session-manager.ts:298 precedent — the daemon RPC context has
@@ -589,7 +589,7 @@ export interface MediaApiDeps {
          *  a boot mode without a registry, and a null recorder is skipped. Read off
          *  the BootContext `c.trajectoryRegistry` (already a field). */
         trajectoryRegistry?: import("@comis/observability").SessionTrajectoryHandleRegistry;
-        /** SEC-02 (186): the per-agent/hour USD cost ceiling. Optional — undefined
+        /** The per-agent/hour USD cost ceiling. Optional — undefined
          *  when `integrations.media.imageGeneration.maxCostPerHourUsd` is unset, in
          *  which case the ceiling check is skipped and only the count rate limit
          *  applies (no regression). When present, the handler pre-checks
@@ -598,40 +598,40 @@ export interface MediaApiDeps {
          *  rate limiter (maxPerHour) is RETAINED and orthogonal. Constructed in
          *  buildImageGenBundle (main-helpers.ts), gated on maxCostPerHourUsd. */
         costLimiter?: import("./image-cost-limiter.js").ImageCostLimiter;
-        /** OBS-03 (186, optional secondary): the typed event bus. After a successful
+        /** The typed event bus (optional secondary route). After a successful
          *  generation with a non-zero costUsd the handler emits a synthetic
          *  `observability:token_usage` (tokens all 0, cost.total = costUsd) so the
          *  image cost reaches sharedCostTracker + the token_usage SQLite table +
-         *  billing — the BINDING OBS-03 assertion is the trajectory `image.generated`
-         *  cost-carry (Route a), this is the secondary. Same shape as the
+         *  billing — the BINDING assertion is the trajectory `image.generated`
+         *  cost-carry, this is the secondary. Same shape as the
          *  MemoryApiDeps / WorkspaceApiDeps eventBus so the slices unify. */
         eventBus?: AppContainer["eventBus"];
     };
     videoHandlerDeps?: import("./video-handler-deps.js").VideoHandlerDepsShape;
-    /** Video status deps (Phase 189 / Plan 03 — JOB-04). The READ side of the
+    /** Video status deps. The READ side of the
      *  async lifecycle: `video.status` reads the agent-scoped job store the poller
      *  writes. Lives in the same sibling leaf module (`./video-handler-deps.ts`) to
      *  keep THIS file under the 800-line cap; the dispatcher passes it through to
      *  createVideoStatusHandlers. */
     videoStatusHandlerDeps?: import("./video-handler-deps.js").VideoStatusHandlerDepsShape;
-    /** VIS-01 (187): resolve the agent's MAIN provider id in lockstep with the
-     *  completion path (I4) — used for the obs label + the resolveVisionPath
+    /** Resolve the agent's MAIN provider id in lockstep with the
+     *  completion path — used for the obs label + the resolveVisionPath
      *  input. The provider INSTANCE/creds are resolved inside mainProviderVision
-     *  (no second source of truth — the 183 firewall). Top-level (the vision
+     *  (no second source of truth). Top-level (the vision
      *  handlers read `deps.X` directly, unlike image's nested imageHandlerDeps).
      *  Optional — absent on a boot mode without vision wiring → the handler treats
      *  the main as "unknown" (not vision-capable) and falls to the registry. */
     resolveAgentMainProvider?: (agentId: string) => {
         providerId: string;
     };
-    /** VIS-01 (187): resolve the agent's MAIN model id, the SAME way
+    /** Resolve the agent's MAIN model id, the SAME way
      *  buildMediaVisionBundle resolves it (the single resolveAgentModel source of
      *  truth). The handler-side vision gate computes `isVisionCapable(getModel(
      *  main.providerId, mainModelIdFor(agentId)))` to short-circuit a non-vision
      *  main WITHOUT an LLM call (the setup-channels-media.ts:135 try/catch dance).
      *  Optional/undefined → the gate is conservative (not vision-capable). */
     mainModelIdFor?: (agentId: string) => string | undefined;
-    /** VIS-01 (187): the main-provider vision bridge — ONE bounded completeSimple
+    /** The main-provider vision bridge — ONE bounded completeSimple
      *  over a multimodal [text,image] message on the agent's MAIN model, reusing
      *  the main creds (no separate vision key). Returns the description + optional
      *  costUsd, or an honest err (errorKind). The handler tries this FIRST when
@@ -642,20 +642,19 @@ export interface MediaApiDeps {
             costUsd?: number;
         }, Error>>;
     };
-    /** VIS-04 (187, Plan 03 fills the emits): the per-session trajectory recorder
+    /** The per-session trajectory recorder
      *  registry — the handler resolves getRecorder(_callerSessionKey) and direct-
      *  emits the media.vision.* lifecycle (the comis-session-manager.ts:298
-     *  precedent — no eventBus bridge in the daemon RPC context). Declared now;
-     *  the emits land in Plan 03. */
+     *  precedent — no eventBus bridge in the daemon RPC context). */
     trajectoryRegistry?: import("@comis/observability").SessionTrajectoryHandleRegistry;
-    /** OBS-03 (196): the boot-resolved voice selections the daemon voice handlers
+    /** The boot-resolved voice selections the daemon voice handlers
      *  thread onto the `media.stt.*`/`media.tts.*` trajectory via `wireVoiceObs`.
      *  Optional — undefined on a selector-less boot (handler derives from config). */
     voiceSelection?: {
         stt?: ResolvedVoiceSelection;
         tts?: ResolvedVoiceSelection;
     };
-    /** OBS-04 (196): the obs store the voice obs inserts a `voice_degraded`
+    /** The obs store the voice obs inserts a `voice_degraded`
      *  health_signal row into on a STT/TTS failure (feeds the `comis fleet`
      *  voice_health finding). Same instance as `ObservabilityApiDeps.obsStore`;
      *  declared here so the voice handlers' deps slice can read it. Optional. */
@@ -673,7 +672,7 @@ export interface MediaApiDeps {
 /**
  * Dependencies for obs-handlers (obs.usage/billing/diagnostics/budget/spend).
  * @optional-field-count: 14 — a composition-root deps bag; each optional field is a
- * distinct obs source present iff wired (absent ⇒ honest-degrade). +1 per new source (spendSnapshot 179; durableRuns 220-03 autonomy).
+ * distinct obs source present iff wired (absent ⇒ honest-degrade). +1 per new source.
  */
 export interface ObservabilityApiDeps {
     diagnosticCollector: DiagnosticCollector;
@@ -687,8 +686,8 @@ export interface ObservabilityApiDeps {
             perDay: number;
         };
     }>;
-    /** WEBUI-02 (179-04): reader for the LIVE daemon-wide spend the kill-switch enforces (locked
-     *  A1 — `getSnapshot()`, NOT the lagging SQL) + the ceilings, so `obs.spend.snapshot` computes
+    /** Reader for the LIVE daemon-wide spend the kill-switch enforces
+     *  (`getSnapshot()`, NOT the lagging SQL) + the ceilings, so `obs.spend.snapshot` computes
      *  headroom = ceiling − spend (the `budgetGuards` precedent). Absent ⇒ off → `enabled:false`. @optional-field */
     spendSnapshot?: () => {
         perAgent: ReadonlyMap<string, number>;
@@ -728,12 +727,12 @@ export interface ObservabilityApiDeps {
      * Injected ClockPort for obs.fleet.health's `sinceHours` -> `sinceMs`
      * conversion (the globals gate forbids Date.now()/new Date() in the
      * handler/assembler). Populated by `buildRpcDispatchDeps` in daemon.ts
-     * (Phase 161-02) from `boot.clock`. Optional preserves existing handler
+     * from `boot.clock`. Optional preserves existing handler
      * tests that pass {} for deps; the fleet handler asserts `deps.clock!`
-     * because 161-02 always populates it, and the fleet tests inject a fakeClock.
+     * because buildRpcDispatchDeps always populates it, and the fleet tests inject a fakeClock.
      */
     clock?: import("@comis/core").ClockPort;
-    /** FLEET-01/02/04 (220-03): the durable-run store the fleet assembler reads (`countByStatus`) for the autonomy block. Soft-fail (obsStore? precedent): absent ⇒ the block is OMITTED (offline CLI / non-durability boot). Wired on the SAME object as obsStore/clock by buildRpcDispatchDeps (daemon.ts:893). @optional-field */ durableRuns?: import("@comis/core").DurableRunPort;
+    /** The durable-run store the fleet assembler reads (`countByStatus`) for the autonomy block. Soft-fail (obsStore? precedent): absent ⇒ the block is OMITTED (offline CLI / non-durability boot). Wired on the SAME object as obsStore/clock by buildRpcDispatchDeps (daemon.ts:893). @optional-field */ durableRuns?: import("@comis/core").DurableRunPort;
     /**
      * DI seam for the bundle pipeline.
      * Tests inject a stub that returns ok({ bundleDir: "/tmp/bundle", ... }).
@@ -757,10 +756,10 @@ export interface DaemonApiDeps {
  * architecture test bans handler-to-handler imports; aggregator narrowing is
  * structural and happens at the dispatcher boundary.
  *
- * Structural-typing invariant: the union of the 11 slices is structurally
- * IDENTICAL to the legacy aggregator. Every field name and type was
- * lifted verbatim and partitioned across slices with NO duplication. The
- * 27 legacy `*HandlerDeps` interfaces in api/*-handlers.ts remain assignable
+ * Structural-typing invariant: every field lives on exactly ONE slice
+ * (no duplication), and the union of the 11 slices is the full dispatch
+ * shape. The
+ * 27 `*HandlerDeps` interfaces in api/*-handlers.ts remain assignable
  * from ApiDispatchDeps via structural subtyping at every dispatcher call
  * site (createSessionHandlers(deps), createMemoryHandlers(deps), ...).
  */

package/node_modules/@comis/daemon/dist/api/types.js

@@ -2,16 +2,14 @@
 /**
  * Per-domain API dependency slices for daemon RPC handlers.
  *
- * The monolithic dispatcher-deps superset is replaced with 11 per-domain
- * cluster slices. Each handler factory consumes its narrow slice; the
- * ApiDispatchDeps aggregator (extends all 11) is consumed ONLY by the
- * dispatcher itself.
+ * The dispatcher deps are partitioned into 11 per-domain cluster slices.
+ * Each handler factory consumes its narrow slice; the ApiDispatchDeps
+ * aggregator (extends all 11) is consumed ONLY by the dispatcher itself.
  *
- * The field partition is exhaustive: every field on the legacy
- * dispatcher-deps interface maps to exactly one cluster slice. The
- * aggregator's `extends` clause unions all 11 slices back into the legacy
- * shape, preserving structural compatibility with the 27 still-legacy
- * `*HandlerDeps` interfaces in api/*-handlers.ts.
+ * The field partition is exhaustive: every dispatcher dep maps to exactly
+ * one cluster slice. The aggregator's `extends` clause unions all 11 slices
+ * into the full dispatch shape, preserving structural compatibility with
+ * the 27 `*HandlerDeps` interfaces in api/*-handlers.ts.
  *
  * @module
  */

package/node_modules/@comis/daemon/dist/api/veo-adapter.d.ts

@@ -1,6 +1,6 @@
 import type { VideoGenerationPort } from "@comis/core";
 import type { ComisLogger } from "@comis/infra";
-/** Options bounding the result download (WR-01). Copied from fal-adapter.ts. */
+/** Options bounding the result download. Copied from fal-adapter.ts. */
 export interface VideoFetchResultOpts {
     signal?: AbortSignal;
     maxBytes?: number;