comisai 1.0.44 → 1.0.46

package/node_modules/@comis/agent/dist/executor/cache-detection/cache-state-types.d.ts

@@ -73,17 +73,17 @@ export interface CacheBreakEvent {
     agentId: string;
     sessionKey: string;
     timestamp: number;
-    /** DIFF-CONTENT: Serialized previous system prompt content for diff generation. */
+    /** Serialized previous system prompt content for diff generation. */
     previousSystem?: string;
-    /** DIFF-CONTENT: Serialized current system prompt content for diff generation. */
+    /** Serialized current system prompt content for diff generation. */
     currentSystem?: string;
-    /** DIFF-CONTENT: Serialized previous tools JSON for diff generation. */
+    /** Serialized previous tools JSON for diff generation. */
     previousTools?: string;
-    /** DIFF-CONTENT: Serialized current tools JSON for diff generation. */
+    /** Serialized current tools JSON for diff generation. */
     currentTools?: string;
     /** Effort value from detection pipeline for downstream consumers (diff writer, analytics). */
     effortValue?: string;
-    /** W4: Number of message blocks in the conversation. Set for lookback window detection. */
+    /** Number of message blocks in the conversation. Set for lookback window detection. */
     conversationBlockCount?: number;
     /** Breakpoint budget context at time of cache break. */
     breakpointBudget?: {
@@ -137,7 +137,7 @@ export interface CheckCacheBreakInput {
     lastResponseElapsedMs?: number;
     /** When true, API returned an error (400/429/500). Do not treat zero usage as cache break. */
     apiError?: boolean;
-    /** W4: Number of message blocks in the conversation. Used for lookback window detection. */
+    /** Number of message blocks in the conversation. Used for lookback window detection. */
     messageBlockCount?: number;
 }
 export interface CacheBreakDetector {
@@ -145,7 +145,7 @@ export interface CacheBreakDetector {
     checkResponseForCacheBreak(input: CheckCacheBreakInput): CacheBreakEvent | null;
     notifyCompaction(sessionKey: string): void;
     notifyTtlExpiry(sessionKey: string): void;
-    /** G-09: Notify that content was intentionally modified (observation masking or microcompaction).
+    /** Notify that content was intentionally modified (observation masking or microcompaction).
      *  Must be called BEFORE the next checkResponseForCacheBreak(). */
     notifyContentModification(sessionKey: string): void;
     /** Alias a compaction session key to its parent session's DetectorState.

package/node_modules/@comis/agent/dist/executor/cache-detection/cache-state.d.ts

@@ -9,7 +9,7 @@
  * @module
  */
 import type { CacheBreakDetector, CacheBreakDetectorOptions } from "./cache-state-types.js";
-/** DIFF-CONTENT: Maximum chars per category (system, tools) for serialized snapshot content. */
+/** Maximum chars per category (system, tools) for serialized snapshot content. */
 export declare const MAX_SNAPSHOT_CHARS = 50000;
 /** Maximum number of tracked sessions before LRU eviction. */
 export declare const MAX_TRACKING_ENTRIES = 15;

package/node_modules/@comis/agent/dist/executor/cache-detection/cache-state.js

@@ -15,7 +15,7 @@ import { NO_CHANGES, attributeReason, buildPendingChanges, collectChangedTools,
 // ---------------------------------------------------------------------------
 // Constants
 // ---------------------------------------------------------------------------
-/** DIFF-CONTENT: Maximum chars per category (system, tools) for serialized snapshot content. */
+/** Maximum chars per category (system, tools) for serialized snapshot content. */
 export const MAX_SNAPSHOT_CHARS = 50_000;
 /** Maximum number of tracked sessions before LRU eviction. */
 export const MAX_TRACKING_ENTRIES = 15;
@@ -85,7 +85,7 @@ export function createCacheBreakDetector(logger, options) {
             // Compare with previous snapshot if exists
             if (state.currentSnapshot) {
                 state.pendingChanges = buildPendingChanges(state.currentSnapshot, newSnapshot);
-                // DIFF-CONTENT: Retain previous snapshot for serialized content diffing
+                // Retain previous snapshot for serialized content diffing
                 state.previousSnapshot = state.currentSnapshot;
             }
             state.currentSnapshot = newSnapshot;
@@ -154,7 +154,7 @@ export function createCacheBreakDetector(logger, options) {
             }
             // Attribute reason
             const changes = state.pendingChanges ?? NO_CHANGES;
-            // Thread messageBlockCount for lookback window detection (default 0 for backward compat)
+            // Thread messageBlockCount for lookback window detection (default 0 when the caller does not report it)
             const conversationBlockCount = input.messageBlockCount ?? 0;
             const reason = attributeReason(changes, state.ttlExpired, input.lastResponseElapsedMs, conversationBlockCount);
             // Clear TTL flag after attribution

package/node_modules/@comis/agent/dist/executor/cache-detection/index.d.ts

@@ -1,9 +1,8 @@
 /**
  * Cache-break detection module.
  *
- * Barrel re-export of the canonical public API of the former
- * cache-break-detection.ts monolith. No aliases — every export keeps
- * its canonical name.
+ * Barrel re-export of the cache-break detection public API.
+ * No aliases — every export keeps its canonical name.
  *
  * @module
  */

package/node_modules/@comis/agent/dist/executor/cache-detection/index.js

@@ -2,9 +2,8 @@
 /**
  * Cache-break detection module.
  *
- * Barrel re-export of the canonical public API of the former
- * cache-break-detection.ts monolith. No aliases — every export keeps
- * its canonical name.
+ * Barrel re-export of the cache-break detection public API.
+ * No aliases — every export keeps its canonical name.
  *
  * @module
  */

package/node_modules/@comis/agent/dist/executor/cache-detection/prompt-state-utils.js

@@ -140,7 +140,7 @@ export function attributeReason(changes, ttlExpired, lastResponseElapsedMs, conv
         return "retention_changed";
     if (changes.metadataChanged)
         return "cache_metadata_changed";
-    // New reasons after metadata, before TTL
+    // Header / extra-body reasons after metadata, before TTL
     if (changes.headersChanged)
         return "headers_changed";
     if (changes.extraBodyChanged)

package/node_modules/@comis/agent/dist/executor/capability-index-context.js

@@ -193,7 +193,7 @@ export function buildCapabilityIndexContext(deferralResult, port) {
     const clusterCount = orderedClusters.length;
     return Object.freeze({
         text,
-        // flat-by-design: machine-rendered Latin capability index — factor would be 1.0 by construction (TOK-01)
+        // flat-by-design: machine-rendered Latin capability index — factor would be 1.0 by construction
         capabilityIndexTokens: Math.ceil(text.length / CHARS_PER_TOKEN_RATIO),
         clusterCount,
         activeToolCount,

package/node_modules/@comis/agent/dist/executor/critic-isolation.d.ts

@@ -1,13 +1,13 @@
 /**
- * S2 critic isolation primitives.
+ * Critic isolation primitives.
  *
- * This is the security core of Phase 154. Every S2 threat (T-154-inject,
- * T-154-canary, T-154-scope, T-154-failclosed, T-154-safety) is mitigated here:
- * - T-154-inject: wrapReviewedOutput wraps the response as UNTRUSTED before the critic sees it
- * - T-154-canary: detectCanaryLeakage checks raw verdict text BEFORE Zod parse
- * - T-154-scope: detectImpliedToolCall intercepts scope-widening in verdict text
- * - T-154-failclosed: parseCriticVerdict never throws; every malformed path → not-verified
- * - T-154-safety: buildCriticSystemPrompt always receives buildSafetySection(false)
+ * This is the security core of the critic (verification) layer. Every
+ * critic-isolation threat is mitigated here:
+ * - injection: wrapReviewedOutput wraps the response as UNTRUSTED before the critic sees it
+ * - canary leakage: detectCanaryLeakage checks raw verdict text BEFORE Zod parse
+ * - scope widening: detectImpliedToolCall intercepts scope-widening in verdict text
+ * - fail-closed parse: parseCriticVerdict never throws; every malformed path → not-verified
+ * - safety core: buildCriticSystemPrompt always receives buildSafetySection(false)
  *
  * File-size: ≤200 lines (do not exceed; extract helpers if needed)
  * Forbidden: Date.now(), raw setTimeout (use systemSetTimeout in verification-gate.ts).
@@ -63,7 +63,7 @@ export interface CriticSystemPromptParams {
         status: string;
     }>;
     canaryToken: string;
-    /** Always pass buildSafetySection(false) — never [] (the S1 trap from passing true) */
+    /** Always pass buildSafetySection(false) — never [] (passing true returns [] and silently drops the safety core) */
     safetyCore: string[];
 }
 /**
@@ -74,7 +74,7 @@ export interface CriticSystemPromptParams {
  * - Explicit fail-closed and UNTRUSTED-content instructions
  *
  * CRITICAL: always call with safetyCore = buildSafetySection(false).
- * buildSafetySection(true) returns [] (S1 trap) — test asserts "## Safety" is present.
+ * buildSafetySection(true) returns [] (silently dropping the safety core) — test asserts "## Safety" is present.
  */
 export declare function buildCriticSystemPrompt(params: CriticSystemPromptParams): string;
 /**
@@ -87,7 +87,7 @@ export declare function buildCriticSystemPrompt(params: CriticSystemPromptParams
  * 3. Wraps in <<<UNTRUSTED_{delimiter}>>> / <<<END_UNTRUSTED_{delimiter}>>> delimiters
  *
  * MUST be called before any completeSimple() user message construction.
- * critic-isolation.test.ts D1 asserts this was called (spy assertion).
+ * critic-isolation.test.ts asserts this was called (spy assertion).
  */
 export declare function wrapReviewedOutput(response: string): string;
 export { detectCanaryLeakage };

package/node_modules/@comis/agent/dist/executor/critic-isolation.js

@@ -1,14 +1,14 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
- * S2 critic isolation primitives.
+ * Critic isolation primitives.
  *
- * This is the security core of Phase 154. Every S2 threat (T-154-inject,
- * T-154-canary, T-154-scope, T-154-failclosed, T-154-safety) is mitigated here:
- * - T-154-inject: wrapReviewedOutput wraps the response as UNTRUSTED before the critic sees it
- * - T-154-canary: detectCanaryLeakage checks raw verdict text BEFORE Zod parse
- * - T-154-scope: detectImpliedToolCall intercepts scope-widening in verdict text
- * - T-154-failclosed: parseCriticVerdict never throws; every malformed path → not-verified
- * - T-154-safety: buildCriticSystemPrompt always receives buildSafetySection(false)
+ * This is the security core of the critic (verification) layer. Every
+ * critic-isolation threat is mitigated here:
+ * - injection: wrapReviewedOutput wraps the response as UNTRUSTED before the critic sees it
+ * - canary leakage: detectCanaryLeakage checks raw verdict text BEFORE Zod parse
+ * - scope widening: detectImpliedToolCall intercepts scope-widening in verdict text
+ * - fail-closed parse: parseCriticVerdict never throws; every malformed path → not-verified
+ * - safety core: buildCriticSystemPrompt always receives buildSafetySection(false)
  *
  * File-size: ≤200 lines (do not exceed; extract helpers if needed)
  * Forbidden: Date.now(), raw setTimeout (use systemSetTimeout in verification-gate.ts).
@@ -43,7 +43,7 @@ export function isCompletionClaim(response) {
     return COMPLETION_CLAIM_PATTERNS.some((p) => p.test(response));
 }
 // ---------------------------------------------------------------------------
-// S2: detect implied tool calls in verdict text (scope-widening prevention)
+// Detect implied tool calls in verdict text (scope-widening prevention)
 // ---------------------------------------------------------------------------
 const TOOL_CALL_PATTERNS = [
     /\bcall\s+\w+/i,
@@ -60,7 +60,7 @@ export function detectImpliedToolCall(verdictText) {
     return TOOL_CALL_PATTERNS.some((p) => p.test(verdictText));
 }
 // ---------------------------------------------------------------------------
-// S2: total parse — never throws, fail-closed on malformed
+// Total parse — never throws, fail-closed on malformed
 // ---------------------------------------------------------------------------
 function extractFirstJsonObject(text) {
     const start = text.indexOf("{");
@@ -107,7 +107,7 @@ export function parseCriticVerdict(raw) {
  * - Explicit fail-closed and UNTRUSTED-content instructions
  *
  * CRITICAL: always call with safetyCore = buildSafetySection(false).
- * buildSafetySection(true) returns [] (S1 trap) — test asserts "## Safety" is present.
+ * buildSafetySection(true) returns [] (silently dropping the safety core) — test asserts "## Safety" is present.
  */
 export function buildCriticSystemPrompt(params) {
     const { checklist, canaryToken, safetyCore } = params;
@@ -130,7 +130,7 @@ export function buildCriticSystemPrompt(params) {
     ].join("\n");
 }
 // ---------------------------------------------------------------------------
-// S2: wrap the reviewed output as untrusted (mandatory before completeSimple)
+// Wrap the reviewed output as untrusted (mandatory before completeSimple)
 // ---------------------------------------------------------------------------
 /**
  * Wrap the agent response as untrusted input before sending to the critic.
@@ -142,7 +142,7 @@ export function buildCriticSystemPrompt(params) {
  * 3. Wraps in <<<UNTRUSTED_{delimiter}>>> / <<<END_UNTRUSTED_{delimiter}>>> delimiters
  *
  * MUST be called before any completeSimple() user message construction.
- * critic-isolation.test.ts D1 asserts this was called (spy assertion).
+ * critic-isolation.test.ts asserts this was called (spy assertion).
  */
 export function wrapReviewedOutput(response) {
     return wrapExternalContent(response, {

package/node_modules/@comis/agent/dist/executor/dag-repair-loop.d.ts

@@ -1,7 +1,7 @@
 /**
  * DAG repair loop — bounded retry wrapper around the existing DAG validation API.
  *
- * Implements O1: feeds GraphValidationError messages back to the model via
+ * Feeds GraphValidationError messages back to the model via
  * repromptFn and re-validates. Fail-closed: after maxAttempts exhausted
  * without a valid graph, returns the last error message.
  *

package/node_modules/@comis/agent/dist/executor/dag-repair-loop.js

@@ -2,7 +2,7 @@
 /**
  * DAG repair loop — bounded retry wrapper around the existing DAG validation API.
  *
- * Implements O1: feeds GraphValidationError messages back to the model via
+ * Feeds GraphValidationError messages back to the model via
  * repromptFn and re-validates. Fail-closed: after maxAttempts exhausted
  * without a valid graph, returns the last error message.
  *
@@ -53,7 +53,7 @@ export async function repairDagWithBoundedRetries(rawGraph, repromptFn, maxAttem
             break;
         }
         // Step 3: Collect fix-hints from GraphValidationError fields ONLY
-        // (no daemon import — B2 boundary: agent cannot import from packages/daemon)
+        // (no daemon import — the agent package cannot import from packages/daemon)
         const hints = [
             `Graph validation error (${validated.error.kind}): ${validated.error.message}`,
         ];

package/node_modules/@comis/agent/dist/executor/dag-synthesizer.d.ts

@@ -1,15 +1,15 @@
 /**
- * Deterministic intent → ExecutionGraph synthesizer (AUTHOR-02 / Phase 174-04).
+ * Deterministic intent → ExecutionGraph synthesizer.
  *
  * Expands a one-line intent — `{ pattern, agents|tasks, budget? }` — into a
  * VALIDATED ExecutionGraph by mapping `pattern` to one of the
  * CANONICAL_DAG_TEMPLATES (research-fanout / debate / vote / map-reduce),
  * deriving the template's slot values from `agents`/`tasks`, filling via
- * fillDagTemplate (which JSON-escapes weak-model slot values, CR-03), then
+ * fillDagTemplate (which JSON-escapes weak-model slot values), then
  * re-running the SAME governance a hand-authored graph takes
  * (parseExecutionGraph + validateAndSortGraph).
  *
- * WR-02: the synthesized graph is TEMPLATE-shaped — plain `{ nodeId, task,
+ * The synthesized graph is TEMPLATE-shaped — plain `{ nodeId, task,
  * dependsOn }` nodes, NOT the typed orchestration drivers. A synthesized
  * "debate" is a one-shot pro/con fan-in approximation, not the multi-round
  * `type_id: debate` driver; the typed drivers are authored via define/execute
@@ -19,7 +19,7 @@
  * + a few names) rather than the nested type_config union the raw pipeline
  * schema requires.
  *
- * GOVERNANCE (D-GOVERNANCE / §9): the synthesizer is PURE — it RETURNS a graph
+ * GOVERNANCE: the synthesizer is PURE — it RETURNS a graph
  * and NEVER executes one. The caller (the pipeline tool's from_intent action)
  * dispatches the returned graph through the EXISTING graph.execute path, so the
  * synthesized graph hits define-time governance (parse / topo-sort /
@@ -28,8 +28,7 @@
  * constructed-and-ran a graph directly would bypass all of it — forbidden.
  *
  * Returns err on an unknown pattern or a missing required slot input (e.g.
- * debate without 2 agents) — NEVER a partial or invalid graph
- * (T-174-SYNTH-INPUT).
+ * debate without 2 agents) — NEVER a partial or invalid graph.
  *
  * No daemon import — this lives in @comis/agent. The pipeline tool imports
  * synthesizeFromIntent; the synthesized graph then travels in-band on the

package/node_modules/@comis/agent/dist/executor/dag-synthesizer.js

@@ -1,16 +1,16 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
- * Deterministic intent → ExecutionGraph synthesizer (AUTHOR-02 / Phase 174-04).
+ * Deterministic intent → ExecutionGraph synthesizer.
  *
  * Expands a one-line intent — `{ pattern, agents|tasks, budget? }` — into a
  * VALIDATED ExecutionGraph by mapping `pattern` to one of the
  * CANONICAL_DAG_TEMPLATES (research-fanout / debate / vote / map-reduce),
  * deriving the template's slot values from `agents`/`tasks`, filling via
- * fillDagTemplate (which JSON-escapes weak-model slot values, CR-03), then
+ * fillDagTemplate (which JSON-escapes weak-model slot values), then
  * re-running the SAME governance a hand-authored graph takes
  * (parseExecutionGraph + validateAndSortGraph).
  *
- * WR-02: the synthesized graph is TEMPLATE-shaped — plain `{ nodeId, task,
+ * The synthesized graph is TEMPLATE-shaped — plain `{ nodeId, task,
  * dependsOn }` nodes, NOT the typed orchestration drivers. A synthesized
  * "debate" is a one-shot pro/con fan-in approximation, not the multi-round
  * `type_id: debate` driver; the typed drivers are authored via define/execute
@@ -20,7 +20,7 @@
  * + a few names) rather than the nested type_config union the raw pipeline
  * schema requires.
  *
- * GOVERNANCE (D-GOVERNANCE / §9): the synthesizer is PURE — it RETURNS a graph
+ * GOVERNANCE: the synthesizer is PURE — it RETURNS a graph
  * and NEVER executes one. The caller (the pipeline tool's from_intent action)
  * dispatches the returned graph through the EXISTING graph.execute path, so the
  * synthesized graph hits define-time governance (parse / topo-sort /
@@ -29,8 +29,7 @@
  * constructed-and-ran a graph directly would bypass all of it — forbidden.
  *
  * Returns err on an unknown pattern or a missing required slot input (e.g.
- * debate without 2 agents) — NEVER a partial or invalid graph
- * (T-174-SYNTH-INPUT).
+ * debate without 2 agents) — NEVER a partial or invalid graph.
  *
  * No daemon import — this lives in @comis/agent. The pipeline tool imports
  * synthesizeFromIntent; the synthesized graph then travels in-band on the
@@ -51,7 +50,7 @@ const DEFAULT_TOPIC = "the requested task";
  */
 function slotsForPattern(intent) {
     const topic = intent.tasks?.[0]?.trim() || DEFAULT_TOPIC;
-    // IN-02: trim + drop blank entries BEFORE any count/use. A blank agent name
+    // Trim + drop blank entries BEFORE any count/use. A blank agent name
     // is garbage-in — `["", ""]` would otherwise pass the debate length gate and
     // fill PRO_AGENT="" / CON_AGENT="" (a "...Agent: " blank-role graph). Filtering
     // here makes blank agents trip the same "requires 2 agents" err as `[]`, and
@@ -92,13 +91,13 @@ export function synthesizeFromIntent(intent) {
     const slots = slotsForPattern(intent);
     if (!slots.ok)
         return slots;
-    // Fill the template slots — JSON-escapes weak-model values (CR-03) and err's
+    // Fill the template slots — JSON-escapes weak-model values and err's
     // on any unresolved ${VAR} so a partial graph is never produced.
     const filled = fillDagTemplate(template, slots.value);
     if (!filled.ok)
         return filled;
-    // Build the raw graph and run the SAME governance a hand-authored graph takes
-    // (D-SAME-VALIDATION §9): the label carries the user's one-line intent.
+    // Build the raw graph and run the SAME governance a hand-authored graph
+    // takes: the label carries the user's one-line intent.
     const rawGraph = {
         nodes: filled.value,
         label: template.label,

package/node_modules/@comis/agent/dist/executor/dag-template-match.d.ts

@@ -22,7 +22,7 @@ export type TemplateMatch = {
 };
 /**
  * Conservatively match a weak-model raw graph to a canonical template by SHAPE
- * (node count + dependency topology) corroborated by KEYWORD (WR-01).
+ * (node count + dependency topology) corroborated by KEYWORD.
  * Deterministic, no model call. Returns "matched" ONLY when exactly one
  * template fits the shape AND a disambiguating keyword confirms the intent;
  * otherwise "ambiguous" (shape fits but content does not corroborate, or >=2

package/node_modules/@comis/agent/dist/executor/dag-template-match.js

@@ -1,24 +1,24 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
- * Deterministic, conservative DAG template matcher (AUTHOR-01 / Phase 174-03).
+ * Deterministic, conservative DAG template matcher.
  *
  * Maps a weak-model raw graph to one of the CANONICAL_DAG_TEMPLATES by SHAPE
  * (node count + dependency topology: N independent leaves + a single fan-in) and
  * slot/keyword inference. It is the daemon-side conservative repair primitive:
- * pure, deterministic, and NO model reprompt (D-CONSERVATIVE — the
- * repairDagWithBoundedRetries reprompt seam is the agent-side path; the daemon
- * RPC handler has no model loop, so the repair here is template-match only).
+ * pure, deterministic, and NO model reprompt (the repairDagWithBoundedRetries
+ * reprompt seam is the agent-side path; the daemon RPC handler has no model
+ * loop, so the repair here is template-match only).
  *
  * Returns "matched" ONLY when exactly one template fits unambiguously by SHAPE
  * AND the graph's task/nodeId text corroborates that template's intent via a
- * disambiguating keyword (WR-01: shape alone is never enough — buildMatch
+ * disambiguating keyword (shape alone is never enough — buildMatch
  * discards the user's tasks for the canonical strings, so a shape-only match
  * would silently rewrite the intent); otherwise "ambiguous" (a plausible shape
  * the content does not confirm, or >=2 plausible canonical shapes — surface a
  * structured did-you-mean) or "no-match" (fall through to the fail-closed throw).
  *
  * On "matched", slot values are filled via fillDagTemplate, which JSON-escapes
- * weak-model slot values (CR-03) so the filled graph parses clean.
+ * weak-model slot values so the filled graph parses clean.
  *
  * No daemon import — this lives in @comis/agent and is INJECTED into the daemon
  * buildGraphInput via deps.repairMatch (the daemon→agent boundary is crossed at
@@ -147,7 +147,7 @@ function inferSlots(pattern, rawGraph, nodes) {
 // ---------------------------------------------------------------------------
 /**
  * Conservatively match a weak-model raw graph to a canonical template by SHAPE
- * (node count + dependency topology) corroborated by KEYWORD (WR-01).
+ * (node count + dependency topology) corroborated by KEYWORD.
  * Deterministic, no model call. Returns "matched" ONLY when exactly one
  * template fits the shape AND a disambiguating keyword confirms the intent;
  * otherwise "ambiguous" (shape fits but content does not corroborate, or >=2
@@ -174,13 +174,13 @@ export function matchRawGraphToTemplate(rawGraph) {
     if (shapeCandidates.length === 0)
         return { kind: "no-match" };
     // The graph text (nodeId + task) used to corroborate the matched template's
-    // INTENT against its shape (WR-01). buildMatch's fillDagTemplate REPLACES the
+    // INTENT against its shape. buildMatch's fillDagTemplate REPLACES the
     // user's tasks with the canonical template strings, so a `matched` on shape
     // alone silently rewrites the user's intent — every `matched` must be gated
     // on at least one disambiguating keyword, never on shape alone.
     const text = graphText(nodes);
     // A single template fits the shape (e.g. debate's unique 3-node 2+1). SHAPE
-    // alone is NOT enough (WR-01): the user's tasks would be discarded for the
+    // alone is NOT enough: the user's tasks would be discarded for the
     // canonical strings. Require the candidate's keyword set to corroborate the
     // intent; on a keyword miss, return the structured did-you-mean (no false
     // synthesis) — the shape is plausible but the content does not confirm it.
@@ -197,7 +197,7 @@ export function matchRawGraphToTemplate(rawGraph) {
     if (keywordCandidates.length === 1) {
         return buildMatch(keywordCandidates[0], rawGraph, nodes);
     }
-    // Zero keyword hits, or >=2 → ambiguous (D-CONSERVATIVE: no false synthesis).
+    // Zero keyword hits, or >=2 → ambiguous (conservative: no false synthesis).
     // The candidate list is the shape-fitting templates (the genuinely plausible
     // ones), or the keyword-overlapping subset when that is the narrower set.
     const candidates = keywordCandidates.length >= 2 ? keywordCandidates : shapeCandidates;

package/node_modules/@comis/agent/dist/executor/dag-templates.d.ts

@@ -1,7 +1,7 @@
 /**
  * DAG templates — pre-structured pipeline templates with ${VAR} slot filling.
  *
- * Implements O2: four canonical named-graph templates (research-fanout, debate,
+ * Four canonical named-graph templates (research-fanout, debate,
  * vote, map-reduce) that can be filled by weak models supplying slot values
  * rather than emitting full graph JSON. Unresolved slots produce an err result
  * rather than silently propagating a malformed task string.
@@ -46,7 +46,7 @@ export interface NamedGraphStoreLike {
     }): string;
 }
 /**
- * Four canonical DAG templates for the small-model path (O2/O3).
+ * Four canonical DAG templates for the small-model path.
  *
  * Each template uses ${VAR} placeholders in task strings:
  *   - research-fanout: ${TOPIC}
@@ -63,14 +63,12 @@ export declare const CANONICAL_DAG_TEMPLATES: Record<string, DagTemplate>;
  * remain: VAR1, VAR2") if any slot remains after filling — the caller must
  * treat this as a failure and NOT proceed with the unfilled graph.
  *
- * WR-02 wiring status: the canonical templates ARE seeded into the named-graph
- * store at daemon boot (seedDefaultDagTemplates, wired in daemon.ts). The
- * PRODUCER that selects a template and calls fillDagTemplate with weak-model
- * slot values is the small-model graph-repair path, which lands in Phase 157
- * alongside repairDagWithBoundedRetries (see graph-helpers.ts buildGraphInput,
- * which fail-closes the weak+invalid branch and documents the same deferral).
- * fillDagTemplate is exported and ready for that caller — it is not silently
- * dead: seeding is live, and the fill call site is an explicit Phase-157 item.
+ * Wiring: the canonical templates are seeded into the named-graph store at
+ * daemon boot (seedDefaultDagTemplates, wired in daemon.ts). The producers
+ * that select a template and call fillDagTemplate with weak-model slot values
+ * are the small-model graph-repair path (the conservative template matcher in
+ * dag-template-match.ts, alongside repairDagWithBoundedRetries) and the intent
+ * synthesizer (dag-synthesizer.ts).
  *
  * @param template - The DAG template to fill.
  * @param vars - Map of slot name (e.g. "TOPIC") to replacement value.

package/node_modules/@comis/agent/dist/executor/dag-templates.js

@@ -2,7 +2,7 @@
 /**
  * DAG templates — pre-structured pipeline templates with ${VAR} slot filling.
  *
- * Implements O2: four canonical named-graph templates (research-fanout, debate,
+ * Four canonical named-graph templates (research-fanout, debate,
  * vote, map-reduce) that can be filled by weak models supplying slot values
  * rather than emitting full graph JSON. Unresolved slots produce an err result
  * rather than silently propagating a malformed task string.
@@ -19,7 +19,7 @@ import { ok, err } from "@comis/shared";
 // Canonical Templates
 // ---------------------------------------------------------------------------
 /**
- * Four canonical DAG templates for the small-model path (O2/O3).
+ * Four canonical DAG templates for the small-model path.
  *
  * Each template uses ${VAR} placeholders in task strings:
  *   - research-fanout: ${TOPIC}
@@ -143,14 +143,12 @@ const SLOT_REPLACE_RE = /\$\{([A-Z_]+)\}/g;
  * remain: VAR1, VAR2") if any slot remains after filling — the caller must
  * treat this as a failure and NOT proceed with the unfilled graph.
  *
- * WR-02 wiring status: the canonical templates ARE seeded into the named-graph
- * store at daemon boot (seedDefaultDagTemplates, wired in daemon.ts). The
- * PRODUCER that selects a template and calls fillDagTemplate with weak-model
- * slot values is the small-model graph-repair path, which lands in Phase 157
- * alongside repairDagWithBoundedRetries (see graph-helpers.ts buildGraphInput,
- * which fail-closes the weak+invalid branch and documents the same deferral).
- * fillDagTemplate is exported and ready for that caller — it is not silently
- * dead: seeding is live, and the fill call site is an explicit Phase-157 item.
+ * Wiring: the canonical templates are seeded into the named-graph store at
+ * daemon boot (seedDefaultDagTemplates, wired in daemon.ts). The producers
+ * that select a template and call fillDagTemplate with weak-model slot values
+ * are the small-model graph-repair path (the conservative template matcher in
+ * dag-template-match.ts, alongside repairDagWithBoundedRetries) and the intent
+ * synthesizer (dag-synthesizer.ts).
  *
  * @param template - The DAG template to fill.
  * @param vars - Map of slot name (e.g. "TOPIC") to replacement value.
@@ -162,7 +160,7 @@ export function fillDagTemplate(template, vars) {
     // Note: SLOT_REPLACE_RE is global — reset lastIndex between uses by
     // always using it only within .replace() which handles index internally.
     //
-    // CR-03: slot values come straight from a weak model and may contain JSON
+    // Slot values come straight from a weak model and may contain JSON
     // metacharacters (double-quote, backslash, newline). Substituting them RAW
     // into the serialized JSON string would corrupt the structure and make the
     // JSON.parse below throw an uncaught SyntaxError out of this Result-returning
@@ -182,7 +180,7 @@ export function fillDagTemplate(template, vars) {
     if (remaining.length > 0) {
         return err(`Unresolved template slots remain: ${remaining.join(", ")}`);
     }
-    // CR-03: defensive parse guard. Escaping above already prevents structural
+    // Defensive parse guard. Escaping above already prevents structural
     // corruption, but a Result-returning contract must never throw — surface any
     // residual parse failure as err() rather than letting it propagate.
     let filled;