comisai 1.0.44 → 1.0.46

package/node_modules/@comis/daemon/dist/wiring/setup-tools.d.ts

@@ -5,7 +5,7 @@
  */
 import type { AppContainer, ApprovalGate, WrapExternalContentOptions, SessionKey, ToolCapabilityPort, McpServerEntry, TimerPort, ContextStorePort, DurableRunPort } from "@comis/core";
 import type { ComisLogger } from "@comis/infra";
-import type { SessionTrackerRegistry, CapabilityClass } from "@comis/agent";
+import type { SessionTrackerRegistry, CapabilityClass, OrchestrateRepairSeam } from "@comis/agent";
 import type { PerAgentConfig } from "@comis/core";
 import type { ImageGenerationPort, VideoGenerationPort } from "@comis/core";
 import { assembleToolPipeline, type LinkRunner, type McpClientManager } from "@comis/skills";
@@ -20,15 +20,19 @@ import type { CapabilityLayerHandle } from "./setup-capability-endpoint-boot.js"
 export interface ToolsDeps {
     /** In-process RPC dispatcher. */
     rpcCall: RpcCall;
-    /** Phase 216 (HIGH-1 / NEW-4): durable store + rootRunId resolver → the agent
+    /** Durable store + rootRunId resolver → the agent
      *  rpcCall factory so an in-process OUTWARD send gets a monotonic `_outwardStepIndex`.
-     *  Both optional; absent ⇒ no index → the Plan-05 wrap is a pass-through (pre-216). */
+     *  Both optional; absent ⇒ no index → the outward-send wrap is a pass-through. */
     durableRuns?: DurableRunPort;
     resolveRootRunId?: (sessionKey: SessionKey) => string;
     /** Per-agent config map (container.config.agents). */
     agents: Record<string, PerAgentConfig>;
-    /** WR-04 (Phase 174-04): resolve a provider's operator capabilityClass override (providers.entries.<id>.capabilities.capabilityClass) for ctx_expand's walk depth. */
+    /** Resolve a provider's operator capabilityClass override (providers.entries.<id>.capabilities.capabilityClass) for ctx_expand's walk depth. */
     getProviderCapabilityClass?: (provider: string | undefined) => CapabilityClass | undefined;
+    /** Resolve a per-agent class-gated one-shot orchestrate repair seam (daemon-minted via
+     *  buildOrchestrateRepairResolver — keyless-safe; ON for small/nano, OFF for frontier/mid).
+     *  Absent ⇒ no repair seam threaded into the orchestrate runner (repair off). */
+    resolveOrchestrateRepairSeam?: (agentConfig: PerAgentConfig | undefined, agentId: string, capabilityClass: CapabilityClass) => OrchestrateRepairSeam | undefined;
     /** Default agent ID from routing config. */
     defaultAgentId: string;
     /** Per-agent workspace directory paths. */
@@ -81,7 +85,7 @@ export interface ToolsDeps {
     imageGenProvider?: ImageGenerationPort;
     /** Video generation provider (undefined when disabled -- video_generate tool not registered; the registry descriptor is gated on this context signal). */
     videoGenProvider?: VideoGenerationPort;
-    /** JOB-04 (189): truthy when the async video stack (store + poller) is wired — gates the video_status descriptor (SAME condition videoGenProvider uses). */
+    /** Truthy when the async video stack (store + poller) is wired — gates the video_status descriptor (SAME condition videoGenProvider uses). */
     videoStatusEnabled?: unknown;
     /** OS-level sandbox provider detected once at daemon startup. */
     sandboxProvider?: SandboxProvider;
@@ -96,16 +100,16 @@ export interface ToolsDeps {
      * Absent (undefined) → default open network, no proxy env, no regression.
      */
     brokerContext?: BrokerContextDeps;
-    /** The daemon's injected `TimerPort` — threaded toward the terminal reaper (124-09 WR-01
-     *  closure) so the idle-TTL/max-sessions sweep composes. Absent ⇒ no terminal reaper. */
+    /** The daemon's injected `TimerPort` — threaded toward the terminal reaper
+     *  closure so the idle-TTL/max-sessions sweep composes. Absent ⇒ no terminal reaper. */
     timers?: TimerPort;
     /** The concrete LCD `ContextStorePort` (`createLcdStore`) from setupMemory — injected so
-     *  assembleToolsForAgent wires the dag-mode `ctx_*` tools (E1/E2); the agent sees only the
+     *  assembleToolsForAgent wires the dag-mode `ctx_*` tools; the agent sees only the
      *  core port TYPE (the agent-to-store cut). Absent ⇒ ctx_* not wired. */
     lcdStore?: ContextStorePort;
-    /** Phase 212 Gap 3 — the KEPT capability-layer handle (lease + cap socket + outputGuard),
+    /** The KEPT capability-layer handle (lease + cap socket + outputGuard),
      *  present when ANY agent is autonomy-bearing. buildAutonomyToolWiring (setup-tools-autonomy.ts)
-     *  reads it to mint the per-spawn lease + assemble orchestrate. Absent ⇒ neither (no regression). */
+     *  reads it to mint the per-spawn lease + assemble orchestrate. Absent ⇒ neither. */
     capEndpointHandle?: CapabilityLayerHandle;
 }
 /** Options for assembleToolsForAgent controlling platform tool selection. */
@@ -144,13 +148,13 @@ export interface ToolsResult {
      * that silently no-op'd in production.
      */
     shutdownBackgroundProcesses: () => Promise<void>;
-    /** 124-09: the per-agent terminal registries map (closure-local) — the composition root
+    /** The per-agent terminal registries map (closure-local) — the composition root
      *  wires the one-per-daemon wake-FSM against the SAME registries (owner-scoped active-check). */
     terminalRegistries: ReadonlyMap<string, TerminalSessionRegistry>;
-    /** 124-09: resolve the per-agent terminal attention config (allow-entry autoAnswer/
+    /** Resolve the per-agent terminal attention config (allow-entry autoAnswer/
      *  hintPatterns + caps); read per-wake so a config swap applies; undefined ⇒ escalate. */
     getTerminalAttentionConfig: (agentId: string) => ReturnType<typeof deriveTerminalAttentionConfig>;
-    /** 165-07: the durable wake deps (journal store + checkLiveness + heartbeatMs/maxCostUsd)
+    /** The durable wake deps (journal store + checkLiveness + heartbeatMs/maxCostUsd)
      *  the composition root spreads into setupTerminalWake. */
     terminalDurability: ReturnType<typeof buildTerminalWakeDurability>;
 }

package/node_modules/@comis/daemon/dist/wiring/setup-tools.js

@@ -8,7 +8,7 @@ import { resolve } from "node:path";
 import { resolveSkillDiscoveryPaths } from "./setup-agents/skill-discovery-paths.js";
 import { enterConfigMutationFence, leaveConfigMutationFence } from "../api/shared/persist-to-config.js";
 import { SkillsConfigSchema, tryGetContext, parseFormattedSessionKey, safePath, formatSessionKey, systemNowMs, resolveAutonomy, } from "@comis/core";
-import { sessionKeyToPath } from "@comis/agent";
+import { sessionKeyToPath, capabilityClassFromProvider } from "@comis/agent";
 import { toolResultsDirFromSessionPath } from "./tool-results-dir.js";
 import { WORKSPACE_FILE_NAMES, DEFAULT_TEMPLATES, registerWorkspaceFilesInTracker, } from "@comis/core";
 import { stat as fsStat } from "node:fs/promises";
@@ -19,14 +19,14 @@ import { TOOL_PROFILES, TOOL_GROUPS, assembleToolPipeline, mcpToolsToAgentTools,
 // Tool capability adapters + factories (exec/process/apply-patch, file-state
 // tracker, media-persistence/image-sanitizer) live on the `./tools` subpath.
 import { createExecTool, createProcessTool, createProcessRegistry, createApplyPatchTool, createSleepTool, createFileStateTracker, sanitizeImageForApi, createMediaPersistenceService, } from "@comis/skills/tools";
-// Terminal-driver (v2.11) wiring extracted to setup-terminal-tools.ts (file-size cap).
+// Terminal-driver wiring extracted to setup-terminal-tools.ts (file-size cap).
 import { wireAgentTerminalTools, buildTerminalEgressDeps, deriveTerminalAttentionConfig } from "./setup-terminal-tools.js";
 import { buildTerminalWakeDurability, recreateStrandedTmuxServerForDataDir, } from "./terminal-durable-wiring.js";
-// In-session expansion-loop (v2.12 Phase 131, E1/E2) dag-gated ctx_* wiring.
+// In-session expansion-loop dag-gated ctx_* wiring.
 import { maybeWireContextTools } from "./setup-context-tools.js";
 // Tool-audit DEBUG-line subscription extracted to setup-tool-audit.ts (file-size cap).
 import { setupToolAuditLogging } from "./setup-tool-audit.js";
-// Agent-scoped rpcCall factory (the _capabilities injection point, CAP-03)
+// Agent-scoped rpcCall factory (the _capabilities injection point)
 // extracted to setup-tools-capabilities.ts (file-size cap).
 import { makeCreateAgentRpcCall } from "./setup-tools-capabilities.js";
 // Descriptor registry on the `./platform-tools` subpath. Replaces the
@@ -34,7 +34,7 @@ import { makeCreateAgentRpcCall } from "./setup-tools-capabilities.js";
 // factories.
 import { createPlatformToolRegistry, } from "@comis/skills/platform-tools";
 import { buildAutonomyToolWiring } from "./setup-tools-autonomy.js";
-import { selectEffectiveToolGroups, expandToolGroupsToNames } from "./setup-tools-coordinator.js"; // COORD-01 (218-01)
+import { selectEffectiveToolGroups, expandToolGroupsToNames } from "./setup-tools-coordinator.js"; // role:coordinator narrowing
 // Setup function
 /**
  * Create per-agent tool-assembly + message-preprocessing closures over the injected deps.
@@ -80,12 +80,12 @@ export function setupTools(deps) {
         }
         return svc;
     }
-    // Agent-scoped rpcCall factory (the _capabilities injection point, CAP-03)
+    // Agent-scoped rpcCall factory (the _capabilities injection point)
     // extracted to setup-tools-capabilities.ts (file-size cap). createAgentRpcCall
     // is the per-agent builder; behavior is byte-identical to the prior inline form.
     const createAgentRpcCall = makeCreateAgentRpcCall({
         rpcCall, agents, defaultAgentId,
-        // Phase 216 (HIGH-1 / NEW-4): durable store + resolver → in-process outward send gets _outwardStepIndex (off ⇒ pass-through).
+        // Durable store + resolver → in-process outward send gets _outwardStepIndex (off ⇒ pass-through).
         ...(deps.durableRuns ? { durableRuns: deps.durableRuns } : {}),
         ...(deps.resolveRootRunId ? { resolveRootRunId: deps.resolveRootRunId } : {}),
     });
@@ -162,7 +162,7 @@ export function setupTools(deps) {
         // <location> even when a custom discoveryPaths omits the default ./skills. Without this the
         // registry surfaces the skill (skill-discovery-paths.ts, same force-include) but the agent's
         // read of its body is a `[path_traversal] outside workspace bounds` refusal — the skill is
-        // visible yet its how-to is unreadable (webhook-claude-cli-tdd-20260630-rerun).
+        // visible yet its how-to is unreadable.
         const readOnlyPaths = resolveSkillDiscoveryPaths(skillsConfig.discoveryPaths, dataDir, agentWorkspaceSkillsDir);
         // Default read-only access to daemon logs directory for troubleshooting
         const logsDir = resolve(dataDir, "logs");
@@ -204,7 +204,7 @@ export function setupTools(deps) {
                 onSuspiciousContent,
                 imageGenProvider: deps.imageGenProvider,
                 videoGenProvider: deps.videoGenProvider,
-                videoStatusEnabled: deps.videoStatusEnabled, // JOB-04: gates the video_status descriptor
+                videoStatusEnabled: deps.videoStatusEnabled, // gates the video_status descriptor
                 backgroundTaskManager: deps.backgroundTaskManager,
                 toolCapabilityPort: deps.getCapabilityPortForAgent(agentId),
                 contextEngineVersion: agentConfig?.contextEngine?.version ?? "pipeline",
@@ -248,7 +248,7 @@ export function setupTools(deps) {
                 .filter((d) => !d.conditional || d.conditional(ctx))
                 .map((d) => d.build(ctx))
                 .filter((t) => t !== undefined);
-            // HOISTED (Phase 131) so BOTH the exec tool and the dag-gated ctx_* wiring (below) reuse
+            // HOISTED so BOTH the exec tool and the dag-gated ctx_* wiring (below) reuse
             // the ONE ALS-resolved session tool-results resolver.
             const agentWorkspaceDir = workspaceDirs.get(agentId) ?? defaultWorkspaceDir;
             const getToolResultsDir = () => {
@@ -287,12 +287,31 @@ export function setupTools(deps) {
                     warnedNoSandboxAgents.add(agentId);
                 }
             }
-            // Phase 212 Gap 3 (dormancy activation, setup-tools-autonomy.ts): the per-spawn lease + the
+            // The effective capability class: operator override → provider-family
+            // heuristic → the "small" fail-safe (the platform resolve idiom). The
+            // one-shot auto-repair is a PURE class-gate off this (no config toggle);
+            // defaulting absent to "small" (repair-ON) keeps an unknown/keyless
+            // small-target deployment self-repairing rather than silently OFF.
+            const capabilityClass = deps.getProviderCapabilityClass?.(agentConfig?.provider)
+                ?? capabilityClassFromProvider(agentConfig?.provider)
+                ?? "small";
+            // The daemon-minted repair closure — resolved ONLY when the class is
+            // repair-eligible AND a utility model resolves (else undefined → repair off).
+            const repairSeam = deps.resolveOrchestrateRepairSeam?.(agentConfig, agentId, capabilityClass);
+            // Dormancy activation (setup-tools-autonomy.ts): the per-spawn lease + the
             // orchestrate tool minted ONCE (SAME env for exec+orchestrate; both off w/o autonomy/handle/sandbox).
             const { brokerSpawnEnv, orchestrateTool } = buildAutonomyToolWiring({
                 agentConfig, agentId, agentWorkspaceDir, capEndpointHandle: deps.capEndpointHandle,
                 brokerContext: deps.brokerContext, sandboxProvider, namespacePreflightOk: deps.namespacePreflightOk,
                 sessionKey: options?.sessionKey, logger: skillsLogger, baseEnv: subprocessEnv,
+                eventBus, // the run_summary emit channel (reaches the live per-session trajectory bridge)
+                approvalGate, // the orchestrate pre-flight approval seam — undefined unless config.approvals.enabled
+                capabilityClass, // the one-shot auto-repair class-gate (pure class-gate off the model profile; no toggle)
+                ...(repairSeam !== undefined ? { repairSeam } : {}), // the daemon-minted repair closure (absent ⇒ repair off)
+                // The durable-run store — passed whenever the durable-resume subsystem is
+                // wired; buildAutonomyToolWiring forwards it into the runner only when THIS
+                // agent's autonomy.durability.orchestrateResume is on (the surface gate).
+                ...(deps.durableRuns !== undefined ? { durableRuns: deps.durableRuns } : {}),
             });
             // Exec tool -- always instantiated; builtinTools ceiling applied after profile filtering.
             // (agentWorkspaceDir + getToolResultsDir are HOISTED above — shared with the ctx_* wiring.)
@@ -314,8 +333,8 @@ export function setupTools(deps) {
                     // convention.
                     toolCapabilityPort: deps.getCapabilityPortForAgent(agentId),
                     approvalGate, // Soft-stop override path
-                    // Broker proxy env + (212) the minted cap lease — only present when the
-                    // broker is wired and/or the agent is autonomy-bearing (Gap 3).
+                    // Broker proxy env + the minted cap lease — only present when the
+                    // broker is wired and/or the agent is autonomy-bearing.
                     brokerSpawnEnv,
                 }));
             }
@@ -333,23 +352,23 @@ export function setupTools(deps) {
             }
             // Apply patch tool -- always included, gated by tool policy
             tools.push(createApplyPatchTool(workspaceDirs.get(agentId) ?? defaultWorkspaceDir, effectiveSharedPaths, skillsLogger));
-            // Sleep primitive (STREAM-03) -- always included; the model paces between
+            // Sleep primitive -- always included; the model paces between
             // turns (defers for the ~5-min cache TTL) instead of polling. Stateless; see sleep-tool.ts.
             tools.push(createSleepTool());
-            // Orchestrate tool (Phase 212 Plan 04, ORCH-01) — built by buildAutonomyToolWiring above.
+            // Orchestrate tool — built by buildAutonomyToolWiring above.
             if (orchestrateTool)
                 tools.push(orchestrateTool);
-            // Terminal driver (v2.11): per-agent registry + nine never-export tools (165-07 durability
+            // Terminal driver: per-agent registry + nine never-export tools (durability
             // wired inside). wireAgentTerminalTools folds the base deps + operator config in one call.
             wireAgentTerminalTools(tools, terminalRegistries, agentId, { dataDir, skillsLogger, eventBus, sandboxProvider, approvalGate, ...terminalEgress, timers: deps.timers, agentWorkspaceDir: workspaceDirs.get(agentId) ?? defaultWorkspaceDir }, skillsConfig.terminal);
-            // Context expansion tools (v2.12 Phase 131): dag-gated ctx_* wiring — gate + WR-04/WR-05 in maybeWireContextTools (file-size cap; see its doc).
+            // Context expansion tools: dag-gated ctx_* wiring — the gate + depth resolution live in maybeWireContextTools (file-size cap; see its doc).
             maybeWireContextTools(tools, deps.lcdStore, agentId, agentConfig, {
                 skillsLogger, nowMs: systemNowMs, getToolResultsDir, eventBus,
                 capabilityClassOverride: deps.getProviderCapabilityClass?.(agentConfig?.provider),
             });
             return tools;
         };
-        // COORD-01 (218-01): narrow a role:coordinator lead (selector + rationale in
+        // Narrow a role:coordinator lead (selector + rationale in
         // setup-tools-coordinator.ts). Narrows the TOOL SURFACE only — caps unchanged.
         const resolvedAutonomy = resolveAutonomy(agentConfig?.autonomy);
         const { effectiveGroups, narrowed: coordinatorNarrowed } = selectEffectiveToolGroups(resolvedAutonomy, toolGroups);
@@ -471,23 +490,23 @@ export function setupTools(deps) {
         }
         processRegistries.clear();
     }
-    // RECUR-02 (live VPS 2026-06-17): BEFORE any registry's recover-on-boot, recreate the durable
+    // Observed on a live deployment: BEFORE any registry's recover-on-boot, recreate the durable
     // tmux server if it survived the restart into the PRIOR daemon generation's now-dismantled mount
     // namespace (systemd PrivateTmp/ProtectHome give each start a fresh ns; KillMode=process keeps the
     // old server). New `bwrap` sessions in that stranded ns die ~2.5s, so the server is torn down here;
     // the recover-on-boot then finds its sessions gone and flips them `lost` with the journal preserved
     // (resumed on a fresh server in the live ns). A no-op on a normal first boot / a healthy server.
     recreateStrandedTmuxServerForDataDir(dataDir, skillsLogger);
-    // 165-07: the daemon-wide wake durability bundle spread into setupTerminalWake (built in the helper).
+    // The daemon-wide wake durability bundle spread into setupTerminalWake (built in the helper).
     const terminalDurability = buildTerminalWakeDurability({ dataDir, registries: terminalRegistries, nowMs: systemNowMs, config: agents[defaultAgentId]?.skills?.terminal });
     return {
         assembleToolsForAgent,
         preprocessMessageText,
         shutdownBackgroundProcesses,
         terminalRegistries,
-        // 124-09: per-agent terminal attention config (allow-entry autoAnswer/hintPatterns + caps); read per-wake.
+        // Per-agent terminal attention config (allow-entry autoAnswer/hintPatterns + caps); read per-wake.
         getTerminalAttentionConfig: (agentId) => deriveTerminalAttentionConfig((agents[agentId] ?? agents[defaultAgentId])?.skills?.terminal),
-        // 165-07: the durable wake deps the composition root spreads into setupTerminalWake.
+        // The durable wake deps the composition root spreads into setupTerminalWake.
         terminalDurability,
     };
 }

package/node_modules/@comis/daemon/dist/wiring/setup-video-poller.d.ts

@@ -1,6 +1,5 @@
 /**
- * Background video poller (Phase 189 / Plan 02 — JOB-02 / JOB-03, the
- * milestone's durability keystone).
+ * Background video poller — the durability keystone for long video renders.
  *
  * This is the two-phase crash-safe delivery queue (`setup-delivery.ts`
  * `setupDeliveryQueue`) RETYPED for an EXTERNAL-provider poll. A long video
@@ -12,15 +11,15 @@
  *   1. `createVideoPoller(...)` returns `{ track, startAndResume, shutdown }`
  *      IMMEDIATELY — before `setupChannels` exists. `track(record)` may be called
  *      from the handler once a job is submitted; it takes the FULL in-memory
- *      `VideoJobRecord` the handler already has (WR-02/WR-06 — no `listPending`
+ *      `VideoJobRecord` the handler already has (no `listPending`
  *      scan, and the insert-failure path still delivers in-memory, never orphans).
  *   2. `startAndResume()` is called AFTER `setupChannels` populates the channel
  *      registry (so `sendAttachment` works outside a turn): it reloads
  *      `store.listPending()` and resumes each, then arms the low-frequency outer
  *      sweeper (single-tick gate + `.unref()`).
- *   3. `shutdown()` aborts in-flight loops/downloads (WR-05) + clears the sweeper.
+ *   3. `shutdown()` aborts in-flight loops/downloads + clears the sweeper.
  *
- * REDELIVERY BOUND (CR-01): a row whose channel delivery keeps failing is
+ * REDELIVERY BOUND: a row whose channel delivery keeps failing is
  * re-driven by the sweeper every `pollIntervalMs`; without a bound that re-poll +
  * re-download (up to 200 MB) + re-send repeats forever, and the cost was being
  * re-recorded each pass. The poller now (a) bumps the persisted `deliver_attempts`
@@ -30,8 +29,8 @@
  * and (c) checks the `markFailed` Result (a failed terminal write is logged at
  * ERROR, with the attempt bound as the backstop).
  *
- * THE PER-JOB POLL IS THE SHIPPED `pollUntilDone` (I5) — `@comis/core` authored
- * it in 188 EXPRESSLY for this reuse; this file does NOT re-author a second loop
+ * THE PER-JOB POLL IS THE SHIPPED `pollUntilDone` — `@comis/core` authored
+ * it EXPRESSLY for this reuse; this file does NOT re-author a second loop
  * (zero raw `setTimeout`/`while`-poll). The genuinely-NEW outer code is the
  * lifecycle: which jobs to poll, the resume scan, and the sweeper.
  *
@@ -42,18 +41,17 @@
  *      media mirroring is deferred).
  *   3. explicit off-turn `traceId`: the poller tick runs in a FRESH context with
  *      NO ALS frame, so the Pino mixin won't auto-inject `traceId`. It is read
- *      from the persisted job row and put ON every log object (I8 / Pitfall 5).
+ *      from the persisted job row and put ON every log object.
  *   4. at-least-once announce: `markDone` is the LAST step — AFTER delivery — so
  *      a `pending` row on restart re-runs poll→fetch→deliver→markDone. A crash
  *      AFTER deliver but BEFORE the `markDone` write yields ONE bounded duplicate
- *      (T-189-08, accepted: announce-on-complete is "deliver the clip", not
- *      exactly-once).
+ *      (accepted: announce-on-complete is "deliver the clip", not exactly-once).
  *
  * SECURITY: delivery targets ONLY the recorded `channelType`/`channelId`/`agentId`
- * from the job row (T-189-06 — never a silent default, never another agent's
- * channel). The off-turn log lines carry `{ traceId, jobId, errorKind, hint,
- * costUsd }` only — never a key/token (T-189-05; the boot-bound adapter holds the
- * credential, the poller never re-reads it).
+ * from the job row (never a silent default, never another agent's channel). The
+ * off-turn log lines carry `{ traceId, jobId, errorKind, hint, costUsd }` only —
+ * never a key/token (the boot-bound adapter holds the credential, the poller never
+ * re-reads it).
  *
  * @module
  */
@@ -66,7 +64,7 @@ import type { AppContainer } from "@comis/core";
 /** The two-phase background poller (mirrors `DeliveryQueueResult`). */
 export interface VideoPoller {
     /**
-     * Hand a freshly-submitted job to the poller. WR-02/WR-06: the caller passes
+     * Hand a freshly-submitted job to the poller. The caller passes
      * the FULL in-memory `VideoJobRecord` it already has at submit (jobId +
      * routing + traceId + estimate), so the poller starts the loop directly WITHOUT
      * an `O(pending)` `listPending()` scan and WITHOUT depending on the row being
@@ -79,7 +77,7 @@ export interface VideoPoller {
      */
     track(record: VideoJobRecord): void;
     /**
-     * RESTART RESUME (JOB-03): reload `listPending()` + resume each, then arm the
+     * RESTART RESUME: reload `listPending()` + resume each, then arm the
      * outer sweeper. Call AFTER `setupChannels` (the channel registry is now
      * populated so `sendAttachment` reaches a live adapter outside a turn).
      */
@@ -87,7 +85,7 @@ export interface VideoPoller {
     /** Clear the sweeper interval + stop in-flight per-job loops (call on shutdown). */
     shutdown(): void;
 }
-/** Persist getter — the per-agent `persistVideo` from the bundle (DEL-01). */
+/** Persist getter — the per-agent `persistVideo` from the bundle. */
 type PersistVideo = (agentId: string, buffer: Buffer, opts: {
     mediaKind: "video";
     mimeType: string;
@@ -95,18 +93,18 @@ type PersistVideo = (agentId: string, buffer: Buffer, opts: {
 export interface VideoPollerDeps {
     store: VideoJobStore;
     provider: VideoGenerationPort;
-    /** DEL-01: per-agent persist getter (videos/). */
+    /** Per-agent persist getter (videos/). */
     persist: PersistVideo;
-    /** SEC-02 reconcile: record the actual cost on done. Optional (count-only). */
+    /** Reconcile: record the actual cost on done. Optional (count-only). */
     costLimiter?: {
         record(agentId: string, cost: number): void;
     };
     /** The announce path — resolve a channel adapter by type (live reference).
-     *  DEL-03: widened to also expose `sendMessage` (a REQUIRED ChannelPort method,
+     *  Widened to also expose `sendMessage` (a REQUIRED ChannelPort method,
      *  present on every adapter) so the oversized-degrade link/notice can be sent
      *  without an attachment. The runtime objects ARE full ChannelPorts (the
      *  main-helpers `resolveAttachmentAdapter` runtime-narrow note); `sendAttachment`
-     *  stays optional (IRC omits it — the DEL-02 capability gate). */
+     *  stays optional (IRC omits it — the capability gate). */
     getChannelAdapter: (channelType: string) => Pick<ChannelPort, "sendAttachment" | "sendMessage"> | undefined;
     config: VideoGenerationConfig;
     logger: ComisLogger;
@@ -117,20 +115,20 @@ export interface VideoPollerDeps {
     sleep?: (ms: number) => Promise<void>;
     /** Injectable clock for the per-job deadline (default: `systemNowMs`). */
     nowMs?: () => number;
-    /** OBS-04 (Phase 192): the per-session trajectory recorder registry. On the
+    /** The per-session trajectory recorder registry. On the
      *  terminal done/fail branches the poller BEST-EFFORT live-emits
      *  video.generated/delivered/failed via getRecorder(record.sessionKey) — the
-     *  OFF-TURN key read from the ROW (the poller tick has NO ALS frame; MUST-DIFFER
-     *  3). Optional + no-op when absent OR when the recorder is gone (session
-     *  closed / daemon restarted) — the OFFLINE assembler (Plan 02) is the binding
-     *  reconstruction oracle; the live emit captures the common fast-render case. */
+     *  OFF-TURN key read from the ROW (the poller tick has NO ALS frame). Optional +
+     *  no-op when absent OR when the recorder is gone (session closed / daemon
+     *  restarted) — the OFFLINE assembler is the binding reconstruction oracle; the
+     *  live emit captures the common fast-render case. */
     trajectoryRegistry?: SessionTrajectoryHandleRegistry;
-    /** OBS-03 (Phase 192): the typed event bus for the off-turn synthetic
+    /** The typed event bus for the off-turn synthetic
      *  `observability:token_usage` cost route (the cost rollup is emitted from the
-     *  poller's done branch — Plan 02 adds the emit). Threaded here now so the
-     *  wiring lands in one place. Optional → no-op when absent. */
+     *  poller's done branch). Threaded here so the wiring lands in one place.
+     *  Optional → no-op when absent. */
     eventBus?: AppContainer["eventBus"];
-    /** DEL-03 (Phase 192): optional operator override for the per-channelType video
+    /** Optional operator override for the per-channelType video
      *  upload limit (the media-compressor `maxVideoBytes` knob). When set it WINS
      *  over the per-channel constant in `resolveVideoSizeLimit`; when absent each
      *  channel's documented limit applies (the honest default). Not a field on the
@@ -138,9 +136,9 @@ export interface VideoPollerDeps {
      *  MediaCompressionConfig); injected here so a future config wire-up threads it
      *  in one place without a schema change. */
     maxVideoBytes?: number;
-    /** SEC-03 (Phase 192 / CR-01): the RESOLVED video creds (GOOGLE_API_KEY /
+    /** The RESOLVED video creds (GOOGLE_API_KEY /
      *  XAI_API_KEY / FAL_KEY / Grok bearer), bound for EXACT-MATCH scrub of every
-     *  off-turn log surface (the v2.20 knownSecrets precedent — catches the FAL
+     *  off-turn log surface (the knownSecrets precedent — catches the FAL
      *  `uuid:hex` shape + any future shape). Absent → pattern scrub only (no crash). */
     videoSecrets?: readonly string[];
 }