comisai 1.0.44 → 1.0.46

package/node_modules/@comis/memory/dist/observability-store/observability-mutations.js

@@ -9,22 +9,22 @@
  */
 import { resolveModelPricing } from "@comis/core";
 /**
- * PERSIST-01: map an `observability:cache_break` event to a content-free
- * `obs_diagnostics` row under `category:"cache_break"` (Landmine L4 — a DISTINCT
+ * Map an `observability:cache_break` event to a content-free
+ * `obs_diagnostics` row under `category:"cache_break"` (a DISTINCT
  * category, NOT "health_signal", so "rate by reason" is a clean
  * `GROUP BY json_extract(details,'$.reason')` over the existing
- * `idx_obs_diag_category` — NO new table, §14). Mirrors the daemon's
+ * `idx_obs_diag_category` — NO new table). Mirrors the daemon's
  * `sandboxDowngradeRefusedEventToRow` row-builder mold.
  *
- * **est-$ is COMPUTED here (decision #1, Landmine L1).** The event carries NO
+ * **est-$ is COMPUTED here.** The event carries NO
  * dollar field, so the directly-lost cache-read saving is reconstructed as
  * `tokenDrop × resolveModelPricing(provider, model).cacheRead`: a catalog-priced
  * model yields a non-zero estimate; an unknown model yields 0 (ZERO_COST.cacheRead
  * === 0 — honest best-effort, never a fabricated cost). The companion
- * `pricing_state` column on `obs_token_usage` (PERSIST-03) surfaces the unknown so
+ * `pricing_state` column on `obs_token_usage` surfaces the unknown so
  * an operator sees coverage.
  *
- * **I3 content-free (the load-bearing constraint).** The event's `toolsAdded`/
+ * **Content-free (the load-bearing constraint).** The event's `toolsAdded`/
  * `toolsRemoved`/`toolsSchemaChanged` are tool-NAME arrays (already MCP-sanitized to
  * bare `'mcp'` at the emit, but STILL names) — they are NEVER stored. They are
  * reduced to a `changedDimsDigest` carrying only the COUNTS of changed dimensions
@@ -32,7 +32,7 @@ import { resolveModelPricing } from "@comis/core";
  * system/query text crosses into a persisted row.
  */
 export function cacheBreakEventToRow(payload) {
-    // est-$ (decision #1, Landmine L1): the event has no $ field, so compute the
+    // est-$: the event has no $ field, so compute the
     // directly-lost cache-read saving from the catalog. The model may be absent
     // (`model?`) — fall back to "" so resolveModelPricing returns ZERO_COST (→ 0).
     const cacheReadRate = resolveModelPricing(payload.provider, payload.model ?? "").cacheRead;
@@ -73,7 +73,7 @@ export function bindMutations(db) {
     // --- Prepared statements (fixed SQL, prepared once) ---
     // The column list + placeholders + .run() args MUST stay in lockstep with the
     // obs_token_usage schema (schema.ts ensureObsTokenColumns). cache_retention was
-    // DROPPED (dead); the 5 PERSIST-02 cost-correctness columns + the COST-01
+    // DROPPED (dead); the 5 cost-correctness columns + the
     // tool_tag column were added at the tail (25 cols / 25 placeholders / 25 args).
     const insertTokenUsageStmt = db.prepare(`
     INSERT INTO obs_token_usage (
@@ -114,11 +114,11 @@ export function bindMutations(db) {
     // --- Bound methods ---
     function insertTokenUsage(entry) {
         insertTokenUsageStmt.run(entry.timestamp, entry.traceId, entry.agentId, entry.channelId ?? "", entry.sessionKey ?? "", entry.provider, entry.model, entry.promptTokens, entry.completionTokens, entry.totalTokens, entry.cacheReadTokens ?? 0, entry.cacheWriteTokens ?? 0, entry.costInput, entry.costOutput, entry.costTotal, entry.costCacheRead ?? 0, entry.costCacheWrite ?? 0, entry.cacheSaved ?? 0, entry.latencyMs, 
-        // PERSIST-02 cost-correctness columns (in the same order as the column list).
+        // Cost-correctness columns (in the same order as the column list).
         // SQLite has no boolean — the two flags coerce to 0/1; nulls when absent.
         entry.warmupTurn === undefined ? null : entry.warmupTurn ? 1 : 0, entry.cacheEligible === undefined ? null : entry.cacheEligible ? 1 : 0, entry.costCorrection ?? null, entry.pendingCacheInvestmentUsd ?? null, entry.pricingState ?? null, 
-        // COST-01: the JSON-stringified DISTINCT tool array (content-free names);
-        // NULL when the turn fired no tool. Already de-duped at the emit (Task 2).
+        // The JSON-stringified DISTINCT tool array (content-free names);
+        // NULL when the turn fired no tool. Already de-duped at the emit.
         entry.toolTag === undefined ? null : JSON.stringify(entry.toolTag));
     }
     function insertDelivery(entry) {

package/node_modules/@comis/memory/dist/observability-store/observability-queries.js

@@ -15,8 +15,8 @@ import { deliveryFromRow, diagnosticFromRow, snapshotFromRow, systemPromptReport
  * Validate the `details.toolStats` record from an untrusted session_summary row,
  * keeping ONLY entries whose value is an object with finite numeric `ok`/`failed`.
  * A malformed entry (a bare number, a string, a missing field) is DROPPED rather
- * than passed through — the A2 reducer does raw arithmetic on these and would
- * otherwise emit `NaN`. Mirrors the A3 reader's `Number.isFinite` discipline.
+ * than passed through — the fleet reducer does raw arithmetic on these and would
+ * otherwise emit `NaN`. Mirrors the session reader's `Number.isFinite` discipline.
  */
 function parseToolStats(value) {
     if (value === null || typeof value !== "object" || Array.isArray(value))
@@ -36,8 +36,8 @@ function parseToolStats(value) {
 /**
  * Validate the `details.topErrorKinds` record from an untrusted session_summary
  * row, keeping ONLY entries whose value is a finite number. A string/NaN count is
- * DROPPED rather than passed through (the A2 reducer would otherwise concatenate it
- * into a string or propagate `NaN`). Mirrors the A3 reader's `Number.isFinite` discipline.
+ * DROPPED rather than passed through (the fleet reducer would otherwise concatenate it
+ * into a string or propagate `NaN`). Mirrors the session reader's `Number.isFinite` discipline.
  */
 function parseErrorKinds(value) {
     if (value === null || typeof value !== "object" || Array.isArray(value))
@@ -90,31 +90,22 @@ export function bindQueries(db) {
     SELECT (timestamp / 3600000) * 3600000 as hour, SUM(cost_total) as total_cost, SUM(total_tokens) as total_tokens, COUNT(*) as call_count, COALESCE(SUM(cache_saved), 0) as total_cache_saved
     FROM obs_token_usage WHERE timestamp >= ? GROUP BY (timestamp / 3600000) ORDER BY hour
   `);
-    // A1 (fleet aggregate): one rollup per session_key over session_summary rows,
-    // latest-wins via the MAX(id) correlated subquery (a session with >1 summary
-    // row collapses to its newest member, not an arbitrary one). The health fields
-    // live inside `details` JSON — parsed per row in the bound method below. Rides
-    // the idx_obs_diag_session_cat composite index.
-    //
-    // The MAX(id) subquery is WINDOW-CONSISTENT: it carries the same `timestamp >= ?`
-    // predicate as the outer query so "latest" means "latest WITHIN the window". A
-    // backdated/clock-skewed global-latest row (event-time below the window while its
-    // insert-order id is highest) must not be the one the subquery picks and then have
-    // the outer window predicate drop — that silently under-counts the session. With
-    // the predicate pushed in, a session is represented by its latest in-window summary,
-    // so an in-window session whose only in-window row is not the global-latest still
-    // counts. `sinceMs` is therefore bound TWICE (subquery, then outer).
+    // Fleet aggregate: ALL in-window session_summary rows, ordered by insert id so
+    // the bound method's per-session reduce sees a session's executions in order
+    // (last row seen = latest state). A session emits ONE summary row per
+    // EXECUTION — each row carries that execution's own cost/turns/toolStats —
+    // so a rollup must SUM the additive fields across the session's in-window
+    // rows; representing the session by its latest row alone under-reported every
+    // additive field (a 4-execution session that spent ~$0.50 fleet-reported at
+    // $0.03 with empty toolStats). The health fields live inside `details` JSON —
+    // parsed per row in the bound method below. Rides the
+    // idx_obs_diag_session_cat composite index.
     const aggSessionsInWindowStmt = db.prepare(`
-    SELECT session_key, MAX(timestamp) as last_ts, details, severity
+    SELECT session_key, timestamp as last_ts, details, severity
     FROM obs_diagnostics
     WHERE category = 'session_summary'
       AND timestamp >= ?
-      AND id IN (
-        SELECT MAX(id) FROM obs_diagnostics
-        WHERE category = 'session_summary' AND timestamp >= ?
-        GROUP BY session_key
-      )
-    GROUP BY session_key
+    ORDER BY id
   `);
     const deliveryStatsAllStmt = db.prepare(`
     SELECT
@@ -233,12 +224,15 @@ export function bindQueries(db) {
         }));
     }
     function aggregateSessionsInWindow(sinceMs) {
-        // `sinceMs` is bound twice: once for the windowed MAX(id) subquery, once for
-        // the outer window predicate (see the prepared-statement comment above).
-        const parsed = sessionSummaryRollupMapper.parseRows(aggSessionsInWindowStmt.all(sinceMs, sinceMs));
+        const parsed = sessionSummaryRollupMapper.parseRows(aggSessionsInWindowStmt.all(sinceMs));
         // Degrade-on-validation-error: observability aggregate -> empty.
         const rows = parsed.ok ? parsed.value : [];
-        const out = [];
+        // One accumulator per session_key, reduced over ALL its in-window rows
+        // (one row per execution). Additive fields SUM; `degraded` ORs; the state
+        // fields (`lastTs`/`source`) take the latest row (rows arrive in id order);
+        // `endReason` keeps the latest DEGRADED row's named cause so a later clean
+        // execution does not erase what degradedByCause buckets on.
+        const bySession = new Map();
         for (const r of rows) {
             let d;
             try {
@@ -247,41 +241,60 @@ export function bindQueries(db) {
                 // throwing — they parse to a non-record JS value, after which a property
                 // read (e.g. `d.degraded` on `null`) throws an uncaught TypeError that
                 // would abort the WHOLE scan. Degrade-on-error on any non-object shape so
-                // a single corrupt row never aborts the aggregate (T-159-01).
+                // a single corrupt row never aborts the aggregate.
                 if (value === null || typeof value !== "object" || Array.isArray(value)) {
                     continue;
                 }
                 d = value;
             }
             catch {
-                // A corrupt `details` JSON for one row never aborts the scan (T-159-01).
+                // A corrupt `details` JSON for one row never aborts the scan.
                 continue;
             }
-            out.push({
+            const acc = bySession.get(r.session_key) ?? {
                 sessionKey: r.session_key,
                 lastTs: r.last_ts,
-                degraded: d.degraded === true,
-                costUsd: typeof d.costUsd === "number" ? d.costUsd : 0,
-                // Validate the nested record shapes rather than blind-casting: a malformed
-                // value (a bare number for toolStats, a string for an errorKind count)
-                // would otherwise flow unchecked into the A2 reducer and corrupt its
-                // arithmetic (NaN / string concatenation). Mirrors the A3 reader's
-                // `typeof … && Number.isFinite(…)` discipline (fleet-session-index.ts).
-                toolStats: parseToolStats(d.toolStats),
-                breakerTripCount: typeof d.breakerTripCount === "number" ? d.breakerTripCount : 0,
-                turnCount: typeof d.turnCount === "number" ? d.turnCount : 0,
-                topErrorKinds: parseErrorKinds(d.topErrorKinds),
-                // Pre-change rows lack `source` -> parse-default "runtime" (additive
-                // read-time default per AGENTS §2.9; not a migration shim). The A2
-                // reducer filters on this.
-                source: typeof d.source === "string" ? d.source : "runtime",
-                // QT2/QT3: the named degradation cause. Pre-change rows (and a blank
-                // value) parse-default to "unknown" (additive read-time default) so the
-                // A2 reducer's degradedByCause always has a stable, finite bucket key.
-                endReason: typeof d.endReason === "string" && d.endReason.length > 0 ? d.endReason : "unknown",
-            });
+                degraded: false,
+                costUsd: 0,
+                toolStats: {},
+                breakerTripCount: 0,
+                turnCount: 0,
+                topErrorKinds: {},
+                source: "runtime",
+                endReason: "unknown",
+            };
+            const rowDegraded = d.degraded === true;
+            acc.lastTs = Math.max(acc.lastTs, r.last_ts);
+            acc.costUsd += typeof d.costUsd === "number" ? d.costUsd : 0;
+            acc.breakerTripCount += typeof d.breakerTripCount === "number" ? d.breakerTripCount : 0;
+            acc.turnCount += typeof d.turnCount === "number" ? d.turnCount : 0;
+            // Validate the nested record shapes rather than blind-casting: a malformed
+            // value (a bare number for toolStats, a string for an errorKind count)
+            // would otherwise flow unchecked into the fleet reducer and corrupt its
+            // arithmetic (NaN / string concatenation). Mirrors the session reader's
+            // `typeof … && Number.isFinite(…)` discipline (fleet-session-index.ts).
+            for (const [tool, s] of Object.entries(parseToolStats(d.toolStats))) {
+                const t = acc.toolStats[tool] ?? { ok: 0, failed: 0 }; // eslint-disable-line security/detect-object-injection -- validated tool-name key from parseToolStats
+                acc.toolStats[tool] = { ok: t.ok + s.ok, failed: t.failed + s.failed }; // eslint-disable-line security/detect-object-injection -- validated tool-name key from parseToolStats
+            }
+            for (const [kind, n] of Object.entries(parseErrorKinds(d.topErrorKinds))) {
+                acc.topErrorKinds[kind] = (acc.topErrorKinds[kind] ?? 0) + n; // eslint-disable-line security/detect-object-injection -- validated ErrorKind key from parseErrorKinds
+            }
+            // Pre-change rows lack `source` -> parse-default "runtime" (additive
+            // read-time default per AGENTS §2.9; not a migration shim). The fleet
+            // reducer filters on this; the latest row's provenance wins.
+            acc.source = typeof d.source === "string" ? d.source : "runtime";
+            // The named degradation cause. Pre-change rows (and a blank value)
+            // parse-default to "unknown" so degradedByCause always has a stable,
+            // finite bucket key. A degraded row's cause overwrites; a clean row's
+            // endReason only applies while the session has no degradation yet.
+            const rowEndReason = typeof d.endReason === "string" && d.endReason.length > 0 ? d.endReason : "unknown";
+            if (rowDegraded || !acc.degraded)
+                acc.endReason = rowEndReason;
+            acc.degraded = acc.degraded || rowDegraded;
+            bySession.set(r.session_key, acc);
         }
-        return out;
+        return [...bySession.values()];
     }
     function queryDelivery(params) {
         const conditions = [];

package/node_modules/@comis/memory/dist/observability-store/observability-row-shapes.js

@@ -43,14 +43,14 @@ export function tokenUsageFromRow(row) {
         costCacheWrite: row.cost_cache_write,
         cacheSaved: row.cache_saved,
         latencyMs: row.latency_ms,
-        // PERSIST-02: INTEGER 0/1 ↔ boolean for the two flags (NULL → undefined);
+        // INTEGER 0/1 ↔ boolean for the two flags (NULL → undefined);
         // REAL/TEXT passthroughs (NULL → undefined) for the rest.
         warmupTurn: row.warmup_turn === null ? undefined : row.warmup_turn === 1,
         cacheEligible: row.cache_eligible === null ? undefined : row.cache_eligible === 1,
         costCorrection: row.cost_correction === null ? undefined : row.cost_correction,
         pendingCacheInvestmentUsd: row.pending_cache_investment_usd === null ? undefined : row.pending_cache_investment_usd,
         pricingState: row.pricing_state === null ? undefined : row.pricing_state,
-        // COST-01: parse the JSON distinct-tool array back (NULL/malformed → undefined,
+        // Parse the JSON distinct-tool array back (NULL/malformed → undefined,
         // never a throw — observability reads degrade, never crash the read path).
         toolTag: parseToolTag(row.tool_tag),
     };

package/node_modules/@comis/memory/dist/observability-store/observability-store-types.d.ts

@@ -94,7 +94,7 @@ export declare const agentAggMapper: import("../row-mapper.js").RowMapper<{
     total_cache_saved: number;
 }>;
 /**
- * LOW-1 (177-obs-loop): the spend-accumulator BOOT-read row — `SELECT agent_id,
+ * The spend-accumulator BOOT-read row — `SELECT agent_id,
  * SUM(cost_total) AS total_cost ... GROUP BY agent_id`. Store-local (the
  * SessionSummaryRollupDbRowSchema precedent) since only `rollingSpendMapper` consumes
  * it and row-schemas.ts is `export *`'d (a public schema there would be dead).
@@ -124,8 +124,8 @@ export declare const hourlyBucketMapper: import("../row-mapper.js").RowMapper<{
     total_cache_saved: number;
 }>;
 /**
- * Schema for the per-session GROUP-BY result of `aggregateSessionsInWindow` (A1,
- * Phase 159) over `obs_diagnostics` `category='session_summary'`. Health fields live
+ * Schema for the per-session GROUP-BY result of `aggregateSessionsInWindow`
+ * over `obs_diagnostics` `category='session_summary'`. Health fields live
  * INSIDE the `details` JSON (parsed in the query layer), so this row carries only the
  * grouping key + latest timestamp + raw `details`/`severity`. Distinct from
  * `DiagnosticDbRowSchema` — strict mode rejects the extra `last_ts`/missing columns.
@@ -136,7 +136,7 @@ export declare const SessionSummaryRollupDbRowSchema: z.ZodObject<{
     details: z.ZodString;
     severity: z.ZodString;
 }, z.core.$strict>;
-/** Per-session GROUP-BY rollup row mapper (A1 `aggregateSessionsInWindow`). */
+/** Per-session GROUP-BY rollup row mapper (`aggregateSessionsInWindow`). */
 export declare const sessionSummaryRollupMapper: import("../row-mapper.js").RowMapper<{
     session_key: string;
     last_ts: number;
@@ -194,10 +194,10 @@ export interface TokenUsageRow {
     costCorrection?: number;
     /** Estimated cache investment not yet recouped at this point in the session ($). */
     pendingCacheInvestmentUsd?: number;
-    /** The honest three-state pricing signal for this provider/model (PERSIST-03). */
+    /** The honest three-state pricing signal for this provider/model. */
     pricingState?: "priced" | "free" | "unknown";
     /**
-     * COST-01: the DISTINCT tool names (content-free ids — never args/output) that fired
+     * The DISTINCT tool names (content-free ids — never args/output) that fired
      * during this usage row's turn. Persisted JSON-stringified on the `tool_tag` column;
      * omission persists as NULL and reads back undefined. The per-tool $ attribution is
      * the best-effort/labeled even-split (`aggregateToolCostByAgent`) — the tag is just the set.
@@ -205,7 +205,7 @@ export interface TokenUsageRow {
     toolTag?: string[];
 }
 /**
- * A security-audit event row (AUDIT-01/02) — the camelCase shape of an
+ * A security-audit event row — the camelCase shape of an
  * `obs_audit_events` table row. `tenantId` is the trace-resolved tenant, else the
  * `''` system-scope sentinel (NOT NULL). `agentId` is NULL for tenant/agent-less
  * sources (e.g. `command:blocked`). `refs` is a scrubbed JSON blob (the `audit:event`
@@ -298,10 +298,10 @@ export interface AgentAggregation {
     totalCacheSaved: number;
 }
 /**
- * Per-tool cost attribution for one agent (HG-01, the COST-01 `tool_tag`
+ * Per-tool cost attribution for one agent (the `tool_tag`
  * even-split). For a row whose `tool_tag` lists N distinct tools, `cost_total/N`
  * (+ `total_tokens/N`, `1/N` call share) is attributed to EACH tool, summed per
- * tool — best-effort/labeled (N3), conserving Σ per-tool cost === Σ row
+ * tool — best-effort/labeled, conserving Σ per-tool cost === Σ row
  * `cost_total` (never exactness). `calls` is fractional (a tool's share of its
  * co-fired turns). Content-free: tool names + numbers only.
  */
@@ -312,7 +312,7 @@ export interface ToolCostAggregation {
     calls: number;
 }
 /**
- * Per-agent rolling spend (SPEND-03) — the minimal boot-rehydration shape the spend
+ * Per-agent rolling spend — the minimal boot-rehydration shape the spend
  * accumulator seeds from: the agent + its windowed SUM(cost_total). Distinct from
  * {@link AgentAggregation} (tokens/callCount/cache) — the accumulator needs ONLY the
  * dollar total, so it stays a 2-field row.
@@ -338,12 +338,12 @@ export interface HourlyBucket {
     totalCacheSaved: number;
 }
 /**
- * Quarter-hour (15-min) time bucket aggregation (COST-03). The {@link HourlyBucket}
- * shape — keyed on a 900000-ms `bucket` instead of `hour` — PLUS the E1 pricing
+ * Quarter-hour (15-min) time bucket aggregation. The {@link HourlyBucket}
+ * shape — keyed on a 900000-ms `bucket` instead of `hour` — PLUS the pricing
  * coverage (`totalCostCorrection` = SDK-vs-corrected delta; `pricingState` = the
  * DOMINANT priced>free>unknown signal; `missingPricingCount` = the unknown/NULL row
  * count whose dollars are NOT catalog-backed). Content-free: counts + the enum only.
- * The four buckets inside an hour SUM to that hour's {@link HourlyBucket} (the WS6
+ * The four buckets inside an hour SUM to that hour's {@link HourlyBucket} (the
  * conservation invariant). Field semantics also documented in observability-aggregates.ts.
  */
 export interface QuarterHourBucket {
@@ -357,7 +357,7 @@ export interface QuarterHourBucket {
     missingPricingCount: number;
 }
 /**
- * The export's SPA-equivalent filter for the cost-bucket aggregates (COST-03).
+ * The export's SPA-equivalent filter for the cost-bucket aggregates.
  * Every field is optional; an absent field widens the scan. All become BOUND
  * parameters in a parameterized WHERE (never interpolated SQL) — so the export
  * honors agent/provider/model isolation safely.
@@ -368,10 +368,10 @@ export interface CostBucketFilter {
     model?: string;
 }
 /**
- * Per-session health rollup (A1 `aggregateSessionsInWindow`) over the latest
- * (`MAX(id)`) `session_summary` row per `session_key`; fields parsed from its
- * `details` JSON. `source` is the provenance enum the A2 reducer filters on.
- */
+ * Per-session health rollup (A1 `aggregateSessionsInWindow`): reduced over ALL
+ * in-window `session_summary` rows per key (one per execution) — additive fields
+ * sum, `degraded` ORs, `endReason` keeps the latest degraded execution's cause.
+ * `source` is the provenance enum the A2 reducer filters on. */
 export interface SessionSummaryRollup {
     sessionKey: string;
     lastTs: number;
@@ -385,7 +385,7 @@ export interface SessionSummaryRollup {
     turnCount: number;
     topErrorKinds: Record<string, number>;
     source: string;
-    /** Mapped terminal `endReason` (NAMED cause, QT2/QT3); missing/blank → `"unknown"`. A2 `degradedByCause` buckets on it. */
+    /** Mapped terminal `endReason` (NAMED cause); missing/blank → `"unknown"`. `degradedByCause` buckets on it. */
     endReason: string;
 }
 /** Delivery status breakdown statistics. */
@@ -416,12 +416,12 @@ export interface DeliveryQueryParams {
     limit?: number;
 }
 /**
- * Filter surface for `queryAuditEvents` (AUDIT-01) — mirrors the
- * `obs_query {action:"audit"}` filter shape (decision #4). Every field is
+ * Filter surface for `queryAuditEvents` — mirrors the
+ * `obs_query {action:"audit"}` filter shape. Every field is
  * optional; absent fields widen the scan. All filters become bound parameters
  * in a parameterized WHERE (never interpolated SQL). Declared HERE (beside the
  * interface that consumes it) rather than in audit-mutations.ts so the store
- * interface does not form a types↔impl `.d.ts` import cycle (the Plan-01
+ * interface does not form a types↔impl `.d.ts` import cycle (the
  * row-shapes precedent).
  */
 export interface AuditQueryParams {
@@ -457,20 +457,20 @@ export interface ObservabilityStore extends CacheStatsQueriesSlice, CacheBreakQu
     aggregateBySession(sessionKey: string, sinceMs?: number): SessionAggregation;
     aggregateHourly(sinceMs?: number): HourlyBucket[];
     /**
-     * COST-03: the 900000-ms (15-min) bucket aggregate, each bucket carrying the E1
+     * The 900000-ms (15-min) bucket aggregate, each bucket carrying the
      * pricing coverage (see {@link QuarterHourBucket}). The four buckets inside an hour
      * SUM to the matching `aggregateHourly` bucket (conservation). `sinceMs` = lower
      * bound; `filter` isolates one agent/provider/model.
      */
     aggregateQuarterHourly(sinceMs?: number, filter?: CostBucketFilter): QuarterHourBucket[];
     /**
-     * COST-03: the 3600000-ms (60-min) variant of {@link aggregateQuarterHourly} —
+     * The 3600000-ms (60-min) variant of {@link aggregateQuarterHourly} —
      * IDENTICAL columns, the `comis cost export` default granularity (stable CSV header
      * across granularities). Same `sinceMs` + optional `filter`.
      */
     aggregateHourlyCost(sinceMs?: number, filter?: CostBucketFilter): QuarterHourBucket[];
     /**
-     * HG-01: the per-tool even-split for ONE agent — turns the persisted COST-01
+     * The per-tool even-split for ONE agent — turns the persisted
      * `tool_tag` distinct-tool set into a per-tool cost share (see
      * {@link ToolCostAggregation}). NULL-tag rows are excluded. `sinceMs` = lower bound.
      */
@@ -478,8 +478,8 @@ export interface ObservabilityStore extends CacheStatsQueriesSlice, CacheBreakQu
     /**
      * Per-agent rolling SUM(cost_total) over the last `windowMs` (window bound derived
      * from the current time INSIDE the method — the prune() precedent). The spend
-     * accumulator's BOOT rehydration read (SPEND-03), NOT a per-check read; the rows
-     * ARE the durability. Grouped by agent_id only (obs_token_usage has no tenant_id, L1).
+     * accumulator's BOOT rehydration read, NOT a per-check read; the rows
+     * ARE the durability. Grouped by agent_id only (obs_token_usage has no tenant_id).
      */
     getRollingSpendUsd(windowMs: number): AgentRollingSpend[];
     aggregateSessionsInWindow(sinceMs: number): SessionSummaryRollup[];

package/node_modules/@comis/memory/dist/observability-store/observability-store-types.js

@@ -24,7 +24,7 @@ export const channelSnapshotMapper = createRowMapper(ChannelSnapshotDbRowSchema)
 export const providerAggMapper = createRowMapper(ProviderAggDbRowSchema);
 export const agentAggMapper = createRowMapper(AgentAggDbRowSchema);
 /**
- * LOW-1 (177-obs-loop): the spend-accumulator BOOT-read row — `SELECT agent_id,
+ * The spend-accumulator BOOT-read row — `SELECT agent_id,
  * SUM(cost_total) AS total_cost ... GROUP BY agent_id`. Store-local (the
  * SessionSummaryRollupDbRowSchema precedent) since only `rollingSpendMapper` consumes
  * it and row-schemas.ts is `export *`'d (a public schema there would be dead).
@@ -38,12 +38,12 @@ export const RollingSpendDbRowSchema = z.strictObject({
 export const rollingSpendMapper = createRowMapper(RollingSpendDbRowSchema);
 export const sessionAggMapper = createRowMapper(SessionAggDbRowSchema);
 export const hourlyBucketMapper = createRowMapper(HourlyBucketDbRowSchema);
-// COST-03 (Phase 179): the quarter-hour/hourly-cost bucket row schema + mapper live in
+// The quarter-hour/hourly-cost bucket row schema + mapper live in
 // the sibling `observability-aggregates.ts` (their ONLY consumer) to keep THIS file under
-// the 500-line subdir cap — the Plan-01 row-shapes extraction precedent (shrink, no allowlist).
+// the 500-line subdir cap (the row-shapes extraction precedent).
 /**
- * Schema for the per-session GROUP-BY result of `aggregateSessionsInWindow` (A1,
- * Phase 159) over `obs_diagnostics` `category='session_summary'`. Health fields live
+ * Schema for the per-session GROUP-BY result of `aggregateSessionsInWindow`
+ * over `obs_diagnostics` `category='session_summary'`. Health fields live
  * INSIDE the `details` JSON (parsed in the query layer), so this row carries only the
  * grouping key + latest timestamp + raw `details`/`severity`. Distinct from
  * `DiagnosticDbRowSchema` — strict mode rejects the extra `last_ts`/missing columns.
@@ -54,7 +54,7 @@ export const SessionSummaryRollupDbRowSchema = z.strictObject({
     details: z.string(),
     severity: z.string(),
 });
-/** Per-session GROUP-BY rollup row mapper (A1 `aggregateSessionsInWindow`). */
+/** Per-session GROUP-BY rollup row mapper (`aggregateSessionsInWindow`). */
 export const sessionSummaryRollupMapper = createRowMapper(SessionSummaryRollupDbRowSchema);
 export const deliveryStatsMapper = createRowMapper(DeliveryStatsDbRowSchema);
 /** SystemPromptReport row mapper. */

package/node_modules/@comis/memory/dist/observability-store/pricing-coverage-types.d.ts

@@ -1,5 +1,5 @@
 /**
- * Pricing-coverage query slice types (WEBUI-02, 179-04).
+ * Pricing-coverage query slice types.
  *
  * Extracted from `observability-store-types.ts` for file-size cap compliance (the
  * `cache-stats-types.ts` / `cache-break-types.ts` precedent). The
@@ -27,9 +27,9 @@ export interface PricingCoverage {
  */
 export interface PricingCoverageSlice {
     /**
-     * WEBUI-02 (179-04): the daemon-wide three-state pricing-coverage count over
-     * `obs_token_usage` (optional `sinceMs` lower bound). Reuses the E1 pricing-state
-     * CASE expressions the cost-bucket aggregate already uses. Content-free.
+     * The daemon-wide three-state pricing-coverage count over `obs_token_usage`
+     * (optional `sinceMs` lower bound). Reuses the pricing-state CASE expressions
+     * the cost-bucket aggregate already uses. Content-free.
      */
     pricingCoverage(sinceMs?: number): PricingCoverage;
 }

package/node_modules/@comis/memory/dist/observability-store/pricing-coverage-types.js

@@ -1,6 +1,6 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
- * Pricing-coverage query slice types (WEBUI-02, 179-04).
+ * Pricing-coverage query slice types.
  *
  * Extracted from `observability-store-types.ts` for file-size cap compliance (the
  * `cache-stats-types.ts` / `cache-break-types.ts` precedent). The

package/node_modules/@comis/memory/dist/observability-store/spend-queries.d.ts

@@ -1,17 +1,17 @@
 /**
- * Spend-enforcement queries over `obs_token_usage` (SPEND-03).
+ * Spend-enforcement queries over `obs_token_usage`.
  *
  * The spend accumulator's BOOT rehydration read: a per-agent rolling
  * `SUM(cost_total)` over a window. The rows ARE the durability — this seeds the
  * accumulator's starting headroom at boot and is NEVER a per-check read (no
  * per-check SQL re-aggregation; the live path increments in-memory from the
- * `observability:token_usage` event, Plan 03).
+ * `observability:token_usage` event).
  *
  * Carved into its own `bind*` leaf module (the `bindQueries`/`bindMutations`/
  * `bindReset` composition precedent in index.ts) to keep `observability-queries.ts`
- * under the 500-line per-subdirectory cap. The minimal boot-read form WS6 (Phase
- * 179) extends with cost buckets + a pricing-coverage column — kept on the
- * `getRollingSpendUsd(windowMs)` signature so WS6 extends rather than replaces.
+ * under the 500-line per-subdirectory cap. The boot-read form extends with cost
+ * buckets + a pricing-coverage column — kept on the `getRollingSpendUsd(windowMs)`
+ * signature so it extends rather than replaces.
  *
  * @module spend-queries
  */

package/node_modules/@comis/memory/dist/observability-store/spend-queries.js

@@ -1,18 +1,18 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
- * Spend-enforcement queries over `obs_token_usage` (SPEND-03).
+ * Spend-enforcement queries over `obs_token_usage`.
  *
  * The spend accumulator's BOOT rehydration read: a per-agent rolling
  * `SUM(cost_total)` over a window. The rows ARE the durability — this seeds the
  * accumulator's starting headroom at boot and is NEVER a per-check read (no
  * per-check SQL re-aggregation; the live path increments in-memory from the
- * `observability:token_usage` event, Plan 03).
+ * `observability:token_usage` event).
  *
  * Carved into its own `bind*` leaf module (the `bindQueries`/`bindMutations`/
  * `bindReset` composition precedent in index.ts) to keep `observability-queries.ts`
- * under the 500-line per-subdirectory cap. The minimal boot-read form WS6 (Phase
- * 179) extends with cost buckets + a pricing-coverage column — kept on the
- * `getRollingSpendUsd(windowMs)` signature so WS6 extends rather than replaces.
+ * under the 500-line per-subdirectory cap. The boot-read form extends with cost
+ * buckets + a pricing-coverage column — kept on the `getRollingSpendUsd(windowMs)`
+ * signature so it extends rather than replaces.
  *
  * @module spend-queries
  */
@@ -26,8 +26,8 @@ import { rollingSpendMapper } from "./observability-store-types.js";
 export function bindSpendQueries(db) {
     // Per-agent rolling cost total — just the dollars (no tokens/callCount; the
     // accumulator seeds only headroom). Grouped by agent_id ONLY: obs_token_usage
-    // has no per-tenant key column (L1), so per-tenant accrues live-from-boot in
-    // the wiring (Plan 03). Cloned from observability-queries.ts's aggByAgentSinceStmt.
+    // has no per-tenant key column, so per-tenant accrues live-from-boot in
+    // the wiring. Cloned from observability-queries.ts's aggByAgentSinceStmt.
     const rollingSpendByAgentStmt = db.prepare(`
     SELECT agent_id, SUM(cost_total) AS total_cost
     FROM obs_token_usage
@@ -40,7 +40,7 @@ export function bindSpendQueries(db) {
         // way) — this is a one-shot BOOT read, so it reads the clock once here rather
         // than taking a `sinceMs` param like the analytics aggregations do.
         const since = systemNowMs() - windowMs;
-        // LOW-1 (177-obs-loop): route the rows through the Zod row mapper (§6.8) — the
+        // Route the rows through the Zod row mapper (§6.8) — the
         // cloned-from observability-queries.ts agentAggMapper pattern — instead of an
         // inline `as {...}[]` cast that bypassed validation. Degrade-on-validation-error
         // to empty (a broken DB seeds zero headroom, never a NaN — the accumulator must

package/node_modules/@comis/memory/dist/offline-secrets-write.d.ts

@@ -41,7 +41,7 @@ export declare function offlineSecretSet(opts: {
  * @returns ok(SecretMetadata[]) on success, err(Error) when key absent or store fails
  */
 /**
- * W15 (obs-llm-troubleshooting): daemon-free decrypted read of ONE secret.
+ * Daemon-free decrypted read of ONE secret.
  *
  * Breaks the gateway-token chicken-and-egg: `comis secrets get
  * COMIS_GATEWAY_TOKEN` previously required the daemon RPC, which required the

package/node_modules/@comis/memory/dist/offline-secrets-write.js

@@ -64,7 +64,7 @@ export function offlineSecretSet(opts) {
  * @returns ok(SecretMetadata[]) on success, err(Error) when key absent or store fails
  */
 /**
- * W15 (obs-llm-troubleshooting): daemon-free decrypted read of ONE secret.
+ * Daemon-free decrypted read of ONE secret.
  *
  * Breaks the gateway-token chicken-and-egg: `comis secrets get
  * COMIS_GATEWAY_TOKEN` previously required the daemon RPC, which required the

package/node_modules/@comis/memory/dist/outcome-event-row-schema.d.ts

@@ -1,6 +1,6 @@
 /**
- * Zod row schema for the `outcome_events` `resolve()` projection — the v2.26
- * Verified Learning (WS1) outcome ledger (OUTCOME-01). Consumed by the
+ * Zod row schema for the `outcome_events` `resolve()` projection — the durable
+ * ledger recording each finished trajectory's net task-outcome. Consumed by the
  * `createRowMapper` in `sqlite-outcome-store.ts`.
  *
  * Lives in its OWN module (NOT `row-schemas.ts`) because that file is at the
@@ -13,12 +13,13 @@
  *   - INTEGER `observed_at` → `z.number()`; REAL `confidence` → `z.number()`.
  *
  * PROJECTION: the scoped `SELECT id, session_id, trajectory_id, outcome, source,
- * confidence, sender_trust, recalled_ids, used_skill_ids, observed_at FROM
- * outcome_events WHERE tenant_id=? AND agent_id=? AND trajectory_id=?` read.
+ * confidence, sender_trust, recalled_ids, used_skill_ids, procedure_descriptor,
+ * observed_at FROM outcome_events WHERE tenant_id=? AND agent_id=? AND trajectory_id=?` read.
  * `tenant_id`/`agent_id` are NOT projected — the WHERE pins them, the load-bearing
- * SEC-01 isolation boundary (mirror the usefulness-row JSDoc). `outcome`/`source`
- * are NOT NULL (the DDL CHECK pins the closed enums); `recalled_ids`/`used_skill_ids`
- * are JSON TEXT parsed downstream (NULL when absent — empty in P0 for skills).
+ * tenant/agent isolation boundary (mirror the usefulness-row JSDoc). `outcome`/`source`
+ * are NOT NULL (the DDL CHECK pins the closed enums); `recalled_ids`/`used_skill_ids`/
+ * `procedure_descriptor` are JSON TEXT parsed downstream (NULL when absent — empty when
+ * no skills recorded).
  *
  * @module
  */
@@ -37,5 +38,6 @@ export declare const OutcomeEventRowSchema: z.ZodObject<{
     sender_trust: z.ZodNullable<z.ZodString>;
     recalled_ids: z.ZodNullable<z.ZodString>;
     used_skill_ids: z.ZodNullable<z.ZodString>;
+    procedure_descriptor: z.ZodNullable<z.ZodString>;
     observed_at: z.ZodNumber;
 }, z.core.$strict>;