comisai 1.0.44 → 1.0.46

package/node_modules/@comis/skills/dist/tools/builtin/terminal-driver/index.js

@@ -13,26 +13,25 @@
  */
 // The eight implemented tools + their shared deps contract.
 export { createTerminalSessionCreateTool, createTerminalSessionReadTool, createTerminalSessionListTool, createTerminalSessionKillTool, createTerminalSessionSendTextTool, createTerminalSessionSendKeyTool, createTerminalSessionResizeTool, createTerminalSessionWaitTool, } from "./terminal-tools.js";
-// 124-06: terminal_session_status is now a REAL, classifier-backed, owner-scoped tool
-// (the lone P0 not_implemented stub is closed). Its body lives in terminal-status-tool.ts;
-// terminal-tools-stubs.ts re-exports it so this import path is unchanged. Still never-export
-// (the tool-metadata-registry entry is unchanged — default-deny preserved).
+// terminal_session_status is a REAL, classifier-backed, owner-scoped tool. Its body lives in
+// terminal-status-tool.ts; terminal-tools-stubs.ts re-exports it so this import path is unchanged.
+// Still never-export (the tool-metadata-registry entry is unchanged — default-deny preserved).
 export { createTerminalSessionStatusTool } from "./terminal-tools-stubs.js";
 // The daemon-side session registry.
 export { createTerminalSessionRegistry, } from "./terminal-session-registry.js";
-// Deterministic unattended honest-fail backstop (webhook-claude-cli-tdd-20260701): reap a turn's
-// LIVE never-tasked drives at an unattended (webhook/cron) turn-end so the origin records an honest
-// failure instead of a silent success with a leaked idle drive (the model-independent floor beneath
-// the wait-tool `WAIT_TASK_NOT_DELIVERED_NOTE` best-effort recovery).
+// Deterministic unattended honest-fail backstop: reap a turn's LIVE never-tasked drives at an
+// unattended (webhook/cron) turn-end so the origin records an honest failure instead of a silent
+// success with a leaked idle drive (the model-independent floor beneath the wait-tool
+// `WAIT_TASK_NOT_DELIVERED_NOTE` best-effort recovery).
 export { reapNeverTaskedDrives } from "./terminal-reap-untasked.js";
 // The production worker-spawn posture helper (extracted from the registry to keep it
 // under the 800-line cap; re-exported here so the package surface is unchanged).
 export { buildProductionSpawnWorker, resolveWorkerMainPath, WORKER_PERMISSION_ARGS, } from "./terminal-worker-launch.js";
-// DUR-01 socket-path helpers (PURE) — re-exported so the daemon's recover-on-boot
+// Socket-path helpers (PURE) — re-exported so the daemon's recover-on-boot
 // liveness probe derives the SAME `<dataDir>/terminal-worker/tmux.sock` the worker binds.
 // Importing for the re-export runs no side effect: worker-main's `main()` is `isEntryScript`-guarded.
 export { terminalWorkerDir, resolveTmuxSocketPath } from "./terminal-worker-main.js";
-// The no-secret host-allowlist egress proxy (EgressControlPort impl, spec §3.5),
+// The no-secret host-allowlist egress proxy (EgressControlPort impl),
 // moved here from @comis/daemon so the standalone worker process can construct
 // its OWN egress for `network: listed-hosts` (the worker runs outside the jail
 // and has network; the daemon also constructs one for the in-process test path).
@@ -59,82 +58,77 @@ export { FrameTooLargeError, MAX_FRAME_BYTES, } from "./terminal-ipc.js";
 export { matchAllowEntry, buildDirectSpawn, canonicalize, } from "./allowlist-matcher.js";
 // The supervised worker entry (the daemon wires its production spawn posture).
 export { createTerminalWorker, defaultLoadPty, } from "./terminal-worker-entry.js";
-// P5 124-08 (OPS-05, spec §4.6): the tmux worker backend — the THIRD loadBackend option
-// (node-pty | pipe | tmux) for milestone-length runs. tmux owns the PTY in a
-// DETERMINISTICALLY-named session (comis-<sessionId>) so the server outlives the worker and
-// a restart RE-ATTACHES (has-session → read the existing pane) rather than re-creating
-// (RESEARCH Pitfall 6). The daemon (124-09) binds the resolved tmux path + has-session probe
-// into the loadTmux seam. Pure command builders + the FakePtyLike-shaped factory (a node-pty
-// `tmux attach` that streams + drives); dependency-free (the one-shot runner + attach-pty
-// spawner are injected). The live drive/survival test is Linux-gated.
+// The tmux worker backend — the THIRD loadBackend option (node-pty | pipe | tmux) for
+// long-running sessions. tmux owns the PTY in a DETERMINISTICALLY-named session
+// (comis-<sessionId>) so the server outlives the worker and a restart RE-ATTACHES
+// (has-session → read the existing pane) rather than re-creating. The daemon binds the
+// resolved tmux path + has-session probe into the loadTmux seam. Pure command builders +
+// the FakePtyLike-shaped factory (a node-pty `tmux attach` that streams + drives);
+// dependency-free (the one-shot runner + attach-pty spawner are injected). The live
+// drive/survival test is Linux-gated.
 export { createTmuxBackend, tmuxSessionName, buildTmuxSpawnArgv, buildTmuxHasSessionArgv, buildTmuxKillArgv, buildTmuxAttachArgv, buildTmuxSetOptionArgv, } from "./terminal-tmux-backend.js";
-// P5 124-03 (spec §4.3, the #1 de-risk): the pure state classifier + the
-// load-bearing cursor-parked gate. The worker (124-05/06) drives classifyFrame each
-// settled frame; the session_status tool surfaces its state. Pure + infra-free + no
-// raw clock — value-imports only node builtins + the render snapshot type.
+// The pure state classifier + the load-bearing cursor-parked gate. The worker drives
+// classifyFrame each settled frame; the session_status tool surfaces its state. Pure +
+// infra-free + no raw clock — value-imports only node builtins + the render snapshot type.
 export { classifyFrame, isCursorParked, } from "./terminal-classifier.js";
-// P5 124-04 (spec §4.5/§4.6, SEC-12): the pure safe-only auto-answer policy. The woken
-// turn (124-09) calls decideAutoAnswer on a settled prompt — a safe-pattern match sends
-// a canned keystroke via the P4 send-guards; everything else (incl. auth/destructive/
-// approval, escalate-always) escalates with no keystroke. Operator-dialable, never
-// model-dialable; pure + infra-free (only @comis/core's scrubSecretsFromText).
+// The pure safe-only auto-answer policy. The woken turn calls decideAutoAnswer on a settled
+// prompt — a safe-pattern match sends a canned keystroke via the send-guards; everything else
+// (incl. auth/destructive/approval, escalate-always) escalates with no keystroke.
+// Operator-dialable, never model-dialable; pure + infra-free (only @comis/core's
+// scrubSecretsFromText).
 export { decideAutoAnswer, } from "./terminal-auto-answer.js";
-// v2.26 (Terminal Platform Profiles): the read-side per-platform perception/render profile
-// registry. The daemon woken turn resolves a session's profile by its operator-declared allowId
-// to feed `decideAutoAnswer` the profile's dialogs (DIALOG-01); the worker/classifier consume the
-// render transform + perception package-internally. Selection is by allowId only (§5/INV-3).
+// Terminal Platform Profiles: the read-side per-platform perception/render profile registry.
+// The daemon woken turn resolves a session's profile by its operator-declared allowId to feed
+// `decideAutoAnswer` the profile's dialogs; the worker/classifier consume the render transform +
+// perception package-internally. Selection is by allowId only.
 export { getPlatformProfile, } from "./platforms/index.js";
-// P5 124-04 (spec §4.6, SEC-11): the normalized region-scoped loop guard. The woken
-// turn (124-09) calls observe() on a settled prompt region — a repeated NORMALIZED
-// prompt (spinner/timestamp/progress-only diff) escalates (terminal:escalated, reason
-// loop_detected) and COMPOSES with the P4 maxInteractions EVICT. Closure-local ring,
-// injected clock, never-throw typed result; infra-free (only node:crypto).
+// The normalized region-scoped loop guard. The woken turn calls observe() on a settled prompt
+// region — a repeated NORMALIZED prompt (spinner/timestamp/progress-only diff) escalates
+// (terminal:escalated, reason loop_detected) and COMPOSES with the maxInteractions EVICT.
+// Closure-local ring, injected clock, never-throw typed result; infra-free (only node:crypto).
 export { createLoopGuard, } from "./terminal-loop-guard.js";
-// 164-01 (DRIVE-01, design §7.1.6): the pure bounded content-free drive-state journal —
-// a promoted drive's CROSS-WAKE MEMORY. The daemon woken-turn driver (164-06) reads+updates
-// it per wake via the closure-local Map<sessionId, DriveJournal> holder in setupTerminalWake.
-// Pure shape + (de)serialize/append/oldest-trim; content-free (I3), bounded (I7).
+// The pure bounded content-free drive-state journal — a promoted drive's CROSS-WAKE MEMORY.
+// The daemon woken-turn driver reads+updates it per wake via the closure-local
+// Map<sessionId, DriveJournal> holder in setupTerminalWake. Pure shape +
+// (de)serialize/append/oldest-trim; content-free and bounded.
 export { emptyJournal, appendAnswered, appendStep, updateJournal, serializeJournal, deserializeJournal, CAP_ANSWERED, CAP_STEPS, TAG_MAX, } from "./terminal-drive-journal.js";
-// 164-03 (READ-01, design §7.1 OD-3): the pure bounded digest/diff read selector + the
-// content-free one-line screen digest. The daemon woken-turn read (164-06) applies
-// boundedReadDigest to the returned view + threads screenDigestLine into the journal's
-// lastScreenDigest (run through scrubSecretsFromText); the read tool delegates to
-// boundedReadDigest (digest default). Pure, byte-capped (I7), never throws.
+// The pure bounded digest/diff read selector + the content-free one-line screen digest.
+// The daemon woken-turn read applies boundedReadDigest to the returned view + threads
+// screenDigestLine into the journal's lastScreenDigest (run through scrubSecretsFromText);
+// the read tool delegates to boundedReadDigest (digest default). Pure, byte-capped, never throws.
 export { boundedReadDigest, screenDigestLine, READ_DIGEST_BYTE_CAP, } from "./terminal-read-digest.js";
-// 165-01 (DUR-01): the pure re-attach DECISION + the persisted durable session IDENTITY.
-// The registry's recover-on-boot (165-06) consumes reattachDecision; the daemon (165-07)
-// (de)serializes descriptors via serialize/deserialize for the durable descriptor store.
-// Pure, total, infra-free (injected has-session probe); the descriptor (de)serialize rejects
-// a malformed/partial identity to undefined (corrupt-skip, never partial-trust authorization).
+// The pure re-attach DECISION + the persisted durable session IDENTITY. The registry's
+// recover-on-boot consumes reattachDecision; the daemon (de)serializes descriptors via
+// serialize/deserialize for the durable descriptor store. Pure, total, infra-free (injected
+// has-session probe); the descriptor (de)serialize rejects a malformed/partial identity to
+// undefined (corrupt-skip, never partial-trust authorization).
 export { reattachDecision, serializeDescriptor, deserializeDescriptor, } from "./terminal-reattach-match.js";
-// 165-06 (DUR-01): the recover-on-boot SCAN orchestrator + the injected descriptor-store
-// port + the rehydrate/persist/durable-lost helpers the registry delegates to (kept here so
-// the 800-line registry stays lean). The daemon (165-07) implements SessionDescriptorStorePort
-// as the fs-safe durable descriptor store + injects it onto the registry deps. Pure via the
-// injected port; consumes 165-01's reattachDecision; the bulk lives here, not the registry.
+// The recover-on-boot SCAN orchestrator + the injected descriptor-store port + the
+// rehydrate/persist/durable-lost helpers the registry delegates to (kept here so the
+// 800-line registry stays lean). The daemon implements SessionDescriptorStorePort as the
+// fs-safe durable descriptor store + injects it onto the registry deps. Pure via the injected
+// port; consumes reattachDecision; the bulk lives here, not the registry.
 export { recoverSessionDescriptors, rehydrateHandleFromDescriptor, buildSessionDescriptor, applyRecoveredSessions, markRunningSessionsLost, staysRecoverable, } from "./terminal-session-reattach.js";
-// 165-02 (LIVE-01 / ENDURE-01): the pure busy-vs-hung predicate the LIVE-01 backstop
-// (165-07) turns into a synthesized `stuck` ONLY on `"hung"` + the ENDURE-01 reaper idle
-// exclusion consumes on `"busy"` — ONE shared definition of "alive and making progress".
-// Promoted to the barrel here (165-07 is its first cross-package consumer).
+// The pure busy-vs-hung predicate: the liveness backstop turns it into a synthesized `stuck`
+// ONLY on `"hung"`, and the reaper idle exclusion consumes it on `"busy"` — ONE shared
+// definition of "alive and making progress". Promoted to the barrel here as its first
+// cross-package consumer.
 export { busyOrHung } from "./terminal-busy-predicate.js";
-// 165-03 (ENDURE-01): the pure spend-ceiling check over the drive journal's run-total cost
-// — the 165-07 wake-turn loop escalates/stops on a breach (never a silent overspend).
+// The pure spend-ceiling check over the drive journal's run-total cost — the wake-turn loop
+// escalates/stops on a breach (never a silent overspend).
 export { checkSpendCeiling } from "./terminal-spend-ceiling.js";
-// 166-01 (NOTIFY-01): the pure three-way wake decision + the I9-safe terminal-outcome map
-// (done/needs-you/failed — the failed outcome deferred from Phase 165 lands here). The
-// daemon wake-notify wiring (plan 03) is their first consumer.
+// The pure three-way wake decision + the terminal-outcome map (done/needs-you/failed). The
+// daemon wake-notify wiring is their first consumer.
 export { decideWakeAction, mapTerminalOutcome, } from "./terminal-drive-outcome.js";
-// 166-01 (NOTIFY-01): the pure drive.notify gate — needs-you ALWAYS fires (I4); done/failed
-// suppressed only under "none". Consumed by the plan-03 outcome-notify wiring.
+// The pure drive.notify gate — needs-you ALWAYS fires; done/failed suppressed only under
+// "none". Consumed by the outcome-notify wiring.
 export { shouldNotifyOutcome } from "./terminal-notify-policy.js";
-// 166-02 (NOTIFY-02): the pure content-free heartbeat one-liner from the drive journal (I3).
-// The plan-03 heartbeat cadence timer notifies it for each promoted drive.
+// The pure content-free heartbeat one-liner from the drive journal. The heartbeat cadence
+// timer notifies it for each promoted drive.
 export { heartbeatLine } from "./terminal-heartbeat-digest.js";
-// P5 124-05 (spec §2.3, TR-11): the transition-only in-worker attention emitter — the
-// WORKER half of the no-poll mechanism. The worker (124-05 Task 2) calls observe() with
-// each settled frame's classification; the emitter writes a redaction-safe
-// TerminalEventFrame to the injected fd3-writer ONLY on a state TRANSITION (edge-, not
-// level-triggered) — NO timer, NO clock. Closure-local last-state; infra-free (only the
-// terminal-ipc framer).
+// The transition-only in-worker attention emitter — the WORKER half of the no-poll mechanism.
+// The worker calls observe() with each settled frame's classification; the emitter writes a
+// redaction-safe TerminalEventFrame to the injected fd3-writer ONLY on a state TRANSITION
+// (edge-, not level-triggered) — NO timer, NO clock. Closure-local last-state; infra-free
+// (only the terminal-ipc framer).
 export { createAttentionEmitter, } from "./terminal-attention-emitter.js";

package/node_modules/@comis/skills/dist/tools/builtin/terminal-driver/platforms/claude-code/profile.d.ts

@@ -2,17 +2,17 @@
  * The `claude-code` platform profile (Layer 2) — paired with
  * `packages/daemon/bundled-skills/claude-code/SKILL.md` by the shared `id` + `platformVersion`.
  *
- * Phase 167: the render transform — the FINDING-3 dim-autocomplete ghost-strip, RELOCATED here out
- * of the agnostic `terminal-render.ts` (RENDER-01). Perception (Phase 168) and dialogs (Phase 169)
- * follow in later phases.
+ * This profile carries the render transform (the dim-autocomplete ghost-strip, which lives here
+ * rather than in the agnostic `terminal-render.ts`), the perception signatures, and the
+ * interactive dialogs.
  *
  * @module
  */
 import type { RenderCell } from "../../terminal-render.js";
 import type { TerminalPlatformProfile } from "../terminal-platform-profile.js";
 /**
- * Render one terminal row to text while STRIPPING the dim autocomplete ghost-text (FINDING-3,
- * live VPS 2026-06-17). Claude Code shows a DIM suggestion in its composer (e.g. `commit this`);
+ * Render one terminal row to text while STRIPPING the dim autocomplete ghost-text.
+ * Claude Code shows a DIM suggestion in its composer (e.g. `commit this`);
  * the plain-text `read()` capture can't convey the dim styling, so the driving model can't tell
  * the suggestion from real queued input — it halts to ask about it and drops later steps. On the
  * cursor's row, a cell at column `>= cursorX` that is DIM is autocomplete (real input is NON-dim
@@ -22,7 +22,8 @@ import type { TerminalPlatformProfile } from "../terminal-platform-profile.js";
  * flag (the tmux backend's `tmux attach` renders in the alt screen, so the flag can't gate it);
  * the (also-dim) status bar on other rows is never touched.
  *
- * Relocated VERBATIM from `terminal-render.ts` (v2.26 RENDER-01) — the engine no longer carries it.
+ * This lives here, not in the agnostic `terminal-render.ts` engine — the ghost-strip is
+ * platform-specific and the engine no longer carries it.
  */
 export declare function stripGhostFromRow(cells: readonly RenderCell[], cursorX: number): string;
 /**

package/node_modules/@comis/skills/dist/tools/builtin/terminal-driver/platforms/claude-code/profile.js

@@ -3,15 +3,15 @@
  * The `claude-code` platform profile (Layer 2) — paired with
  * `packages/daemon/bundled-skills/claude-code/SKILL.md` by the shared `id` + `platformVersion`.
  *
- * Phase 167: the render transform — the FINDING-3 dim-autocomplete ghost-strip, RELOCATED here out
- * of the agnostic `terminal-render.ts` (RENDER-01). Perception (Phase 168) and dialogs (Phase 169)
- * follow in later phases.
+ * This profile carries the render transform (the dim-autocomplete ghost-strip, which lives here
+ * rather than in the agnostic `terminal-render.ts`), the perception signatures, and the
+ * interactive dialogs.
  *
  * @module
  */
 /**
- * Render one terminal row to text while STRIPPING the dim autocomplete ghost-text (FINDING-3,
- * live VPS 2026-06-17). Claude Code shows a DIM suggestion in its composer (e.g. `commit this`);
+ * Render one terminal row to text while STRIPPING the dim autocomplete ghost-text.
+ * Claude Code shows a DIM suggestion in its composer (e.g. `commit this`);
  * the plain-text `read()` capture can't convey the dim styling, so the driving model can't tell
  * the suggestion from real queued input — it halts to ask about it and drops later steps. On the
  * cursor's row, a cell at column `>= cursorX` that is DIM is autocomplete (real input is NON-dim
@@ -21,7 +21,8 @@
  * flag (the tmux backend's `tmux attach` renders in the alt screen, so the flag can't gate it);
  * the (also-dim) status bar on other rows is never touched.
  *
- * Relocated VERBATIM from `terminal-render.ts` (v2.26 RENDER-01) — the engine no longer carries it.
+ * This lives here, not in the agnostic `terminal-render.ts` engine — the ghost-strip is
+ * platform-specific and the engine no longer carries it.
  */
 export function stripGhostFromRow(cells, cursorX) {
     let out = "";
@@ -39,7 +40,7 @@ export function stripGhostFromRow(cells, cursorX) {
  * The `claude-code` `transformSnapshot`: re-render the cursor row of the plain-text snapshot with
  * the ghost-strip applied, using the viewport cell grid (`snap.grid`) for the dim attributes the
  * flattened `screen` string has lost. A no-op when `snap.grid` is absent (the engine populates it
- * only for text-format snapshots) — so ansi/html reads and the agnostic path are untouched (INV-1).
+ * only for text-format snapshots) — so ansi/html reads and the agnostic path are untouched.
  *
  * The cursor row's index WITHIN `screen` accounts for any scrollback rows the engine prepended:
  * `screen` carries `(lines.length - rows)` scrollback rows before the viewport, so the cursor's
@@ -70,26 +71,26 @@ export const claudeCodeProfile = {
     allowIds: ["claude", "claude-code"],
     platformVersion: "1.1.5",
     transformSnapshot,
-    // CLASSIFY-01 (Phase 168): Claude Code perception signatures the classifier consumes (layered on
-    // the generic structural detection). All anchored + ReDoS-safe (the registry guard enforces at load).
+    // Claude Code perception signatures the classifier consumes (layered on the generic structural
+    // detection). All anchored + ReDoS-safe (the registry guard enforces at load).
     perception: {
-        // The composer input caret — Claude's `❯ ` prompt box (the LIVE-02 idle-`❯` awaiting-input cue).
+        // The composer input caret — Claude's `❯ ` prompt box (the idle-`❯` awaiting-input cue).
         promptAffordance: [/(?:^|\s)❯\s/u],
-        // The working spinner: a SPINNER GLYPH (not the generic `·` middot — review WR-02, it over-matches
+        // The working spinner: a SPINNER GLYPH (not the generic `·` middot — it over-matches
         // prose `· Building`) + a gerund (e.g. `✻ Crunching`), or the `(esc to interrupt)` hint Claude
         // renders while busy — a settled-but-RECENT frame showing this is mid-work, not a prompt.
         workingLine: [/[✢✳✶✻✽]\s+\w+ing\b/u, /\(esc to interrupt\)/iu],
         // Pickers/menus: the `/model` picker, a dismiss affordance, or a `❯`/`›` selector on an
-        // enumerated option — the D5 fix for the v2.11 full-screen menu → awaiting-input misread.
+        // enumerated option — so a full-screen menu classifies as awaiting-input rather than being misread.
         menuOrPicker: [/Select\s+(?:a\s+)?Model/iu, /\bEsc to (?:cancel|exit|go back)\b/iu, /(?:^|\s)[›❯]\s+\d+[.)]/u],
-        // A completed-action bullet. POPULATED (the §6-v2 structured-perception field) but NOT routed into
+        // A completed-action bullet. POPULATED (the structured-perception field) but NOT routed into
         // the classifier's awaiting-input branch: `⏺` is Claude's per-tool-action bullet (`⏺ Read(…)`), so
-        // feeding it would over-fire awaiting-input on a mid-turn tool-use pause (review WR-01). The idle
+        // feeding it would over-fire awaiting-input on a mid-turn tool-use pause. The idle
         // `❯` composer (promptAffordance) is the real awaiting-input cue.
         turnEnd: [/⏺\s+\S/u],
     },
-    // DIALOG-01 (Phase 169): Claude's interactive dialogs + their SAFE answer. The operator safe-only
-    // policy + the escalate-always veto STILL gate these (a profile proposes; the policy disposes) — a
+    // Claude's interactive dialogs + their SAFE answer. The operator safe-only policy + the
+    // escalate-always veto STILL gate these (a profile proposes; the policy disposes) — a
     // screen carrying an auth/destructive/approval cue escalates regardless. safeAnswer is RAW text
     // (Enter), sent via send_text exactly like the canned hintPattern answer.
     dialogs: [
@@ -100,8 +101,8 @@ export const claudeCodeProfile = {
             //   pre-2.1:  "Do you trust the files in this folder?"
             //   >= 2.1.x: "Quick safety check: Is this a project you created or one you trust?"
             //             with option "1. Yes, I trust this folder"
-            // (webhook-claude-cli-tdd-20260630: a stale regex matching only the pre-2.1 wording stalled a
-            // driven claude 2.1.196 session at the gate — auto-answer never fired.)
+            // (A regex matching only the pre-2.1 wording once stalled a driven claude session at the gate —
+            // auto-answer never fired — so all known forms must be matched here.)
             name: "trust-gate",
             detect: /trust the files in this folder|is this a project you[^\n]{0,80}trust|yes, i trust this folder/iu,
             safeAnswer: ["\r"],

package/node_modules/@comis/skills/dist/tools/builtin/terminal-driver/platforms/codex/profile.d.ts

@@ -2,8 +2,8 @@
  * The `codex` platform profile (Layer 2) — paired with
  * `packages/daemon/bundled-skills/codex/SKILL.md` by the shared `id` + `platformVersion`.
  *
- * Phase 167 (scaffold): no render transform (Codex has no ghost-strip). Perception (Phase 168)
- * and dialogs (Phase 169 — the approval overlay) are added in later phases.
+ * No render transform (Codex has no ghost-strip); the profile carries perception
+ * signatures and one dialog (the approval overlay).
  *
  * @module
  */

package/node_modules/@comis/skills/dist/tools/builtin/terminal-driver/platforms/codex/profile.js

@@ -3,8 +3,8 @@
  * The `codex` platform profile (Layer 2) — paired with
  * `packages/daemon/bundled-skills/codex/SKILL.md` by the shared `id` + `platformVersion`.
  *
- * Phase 167 (scaffold): no render transform (Codex has no ghost-strip). Perception (Phase 168)
- * and dialogs (Phase 169 — the approval overlay) are added in later phases.
+ * No render transform (Codex has no ghost-strip); the profile carries perception
+ * signatures and one dialog (the approval overlay).
  *
  * @module
  */
@@ -17,21 +17,21 @@ export const codexProfile = {
     id: "codex",
     allowIds: ["codex"],
     platformVersion: "1.1.1",
-    // CLASSIFY-01 (Phase 168): Codex perception signatures the classifier consumes (layered on the
-    // generic structural detection). All anchored + ReDoS-safe (the registry guard enforces at load).
+    // Codex perception signatures the classifier consumes (layered on the generic structural
+    // detection). All anchored + ReDoS-safe (the registry guard enforces at load).
     perception: {
         // The Codex composer caret.
         promptAffordance: [/(?:^|\s)›\s/u],
         // The canonical Codex working line `Working (Ns)`, the working banner, and the ascii spinner
-        // (ANCHORED to line-start so a markdown bullet `- thinking` / table cell does not match — review
-        // WR-03) — a settled-but-RECENT frame showing one of these is mid-work, not a hang.
+        // (ANCHORED to line-start so a markdown bullet `- thinking` / table cell does not match) —
+        // a settled-but-RECENT frame showing one of these is mid-work, not a hang.
         workingLine: [/Working \(\d+s\)/u, /Working on your request/iu, /^\s*[|/\\-]\s+thinking\b/iu],
         // A Codex selection menu (approval/sandbox/model). Boxed Codex menus are also caught generically.
         menuOrPicker: [/Select\s+(?:approval|sandbox|model)\b/iu],
         // The composer-return banner after a turn completes.
         turnEnd: [/(?:^|\s)›\s*$/u],
     },
-    // DIALOG-01 (Phase 169): Codex's approval overlay. Approving COMMAND EXECUTION is privilege-bearing,
+    // Codex's approval overlay. Approving COMMAND EXECUTION is privilege-bearing,
     // so it is flagged `destructive` ⇒ ALWAYS escalates to a human (never auto-answered, even under mode
     // `all`) — an operator who wants unattended Codex uses Codex's own auto-approve flag, not the driver.
     // The safeAnswer is declared but moot (destructive wins); even a missed `detect` still escalates

package/node_modules/@comis/skills/dist/tools/builtin/terminal-driver/platforms/index.d.ts

@@ -1,22 +1,23 @@
 /**
- * The platform-profile REGISTRY (design §4/§7) — `getPlatformProfile(allowId)`.
+ * The platform-profile REGISTRY — `getPlatformProfile(allowId)`.
  *
  * Selection is by the operator-declared `allowId` (exact-string match, unique). `undefined` ⇒ the
- * agnostic default (§3). The driven program cannot pick its own profile (no content-sniffing —
- * §5/INV-3): only an allowId the operator declared in the allowlist resolves a profile.
+ * agnostic default. The driven program cannot pick its own profile (no content-sniffing):
+ * only an allowId the operator declared in the allowlist resolves a profile.
  *
  * Two load-time guards run ONCE at module import over `ALL_PROFILES`, so a malformed profile set
  * FAILS AT LOAD (never a silent mis-selection):
- *   - `assertUniqueAllowIds` — no allowId maps to >1 profile (D3).
+ *   - `assertUniqueAllowIds` — no allowId maps to >1 profile.
  *   - `assertSafeProfilePatterns` — every perception/dialog regex is free of nested unbounded
- *     quantifiers (the ReDoS shapes); patterns run on every read/settle frame (hot path — D1).
+ *     quantifiers (the ReDoS shapes); patterns run on every read/settle frame (hot path).
  *
  * @module
  */
 import type { TerminalPlatformProfile } from "./terminal-platform-profile.js";
 export type { TerminalPlatformProfile, PlatformPerception, PlatformDialog, KeySpec, } from "./terminal-platform-profile.js";
 /**
- * Throw when two profiles claim the same `allowId` — the D3 1:1 invariant. Called at module load
+ * Throw when two profiles claim the same `allowId` — each allowId must map to exactly one
+ * profile. Called at module load
  * over the shipped set AND exported for the registry test. The message names the colliding allowId.
  */
 export declare function assertUniqueAllowIds(profiles: readonly TerminalPlatformProfile[]): void;
@@ -29,7 +30,7 @@ export declare function assertSafeProfilePatterns(profile: TerminalPlatformProfi
 export declare const ALL_PROFILES: readonly TerminalPlatformProfile[];
 /**
  * Resolve the read-side platform profile for an operator-declared `allowId`. Exact-string match;
- * `undefined` ⇒ the agnostic default (§3). This is the SOLE selection path — by allowId, never by
- * content (§5/INV-3).
+ * `undefined` ⇒ the agnostic default. This is the SOLE selection path — by allowId, never by
+ * content.
  */
 export declare function getPlatformProfile(allowId: string): TerminalPlatformProfile | undefined;

package/node_modules/@comis/skills/dist/tools/builtin/terminal-driver/platforms/index.js

@@ -4,24 +4,25 @@
 // developer shipped a malformed profile (an allowId collision or a ReDoS-prone hot-path pattern) —
 // caught at load / by the registry test, NEVER a runtime user path and never a silent mis-selection.
 /**
- * The platform-profile REGISTRY (design §4/§7) — `getPlatformProfile(allowId)`.
+ * The platform-profile REGISTRY — `getPlatformProfile(allowId)`.
  *
  * Selection is by the operator-declared `allowId` (exact-string match, unique). `undefined` ⇒ the
- * agnostic default (§3). The driven program cannot pick its own profile (no content-sniffing —
- * §5/INV-3): only an allowId the operator declared in the allowlist resolves a profile.
+ * agnostic default. The driven program cannot pick its own profile (no content-sniffing):
+ * only an allowId the operator declared in the allowlist resolves a profile.
  *
  * Two load-time guards run ONCE at module import over `ALL_PROFILES`, so a malformed profile set
  * FAILS AT LOAD (never a silent mis-selection):
- *   - `assertUniqueAllowIds` — no allowId maps to >1 profile (D3).
+ *   - `assertUniqueAllowIds` — no allowId maps to >1 profile.
  *   - `assertSafeProfilePatterns` — every perception/dialog regex is free of nested unbounded
- *     quantifiers (the ReDoS shapes); patterns run on every read/settle frame (hot path — D1).
+ *     quantifiers (the ReDoS shapes); patterns run on every read/settle frame (hot path).
  *
  * @module
  */
 import { claudeCodeProfile } from "./claude-code/profile.js";
 import { codexProfile } from "./codex/profile.js";
 /**
- * Throw when two profiles claim the same `allowId` — the D3 1:1 invariant. Called at module load
+ * Throw when two profiles claim the same `allowId` — each allowId must map to exactly one
+ * profile. Called at module load
  * over the shipped set AND exported for the registry test. The message names the colliding allowId.
  */
 export function assertUniqueAllowIds(profiles) {
@@ -43,7 +44,7 @@ export function assertUniqueAllowIds(profiles) {
  * could stall the worker, so the registry rejects it at LOAD rather than at the first hostile screen.
  *
  * Implemented as a paren-matching scan (not a single-level regex — which misses nested and brace/
- * alternation shapes, WR-01): walk the source skipping escaped chars + character classes, and for each
+ * alternation shapes): walk the source skipping escaped chars + character classes, and for each
  * group whose CLOSING paren is followed by an unbounded quantifier (`*`/`+`/`{`), flag it if its BODY
  * contains an inner unbounded quantifier (`*`/`+`/`{n,}`) OR an alternation (`|`). Conservative by
  * design — it favors rejection (an author rewrites a flagged pattern), but it does NOT trip on the
@@ -130,8 +131,8 @@ const BY_ALLOW_ID = (() => {
 })();
 /**
  * Resolve the read-side platform profile for an operator-declared `allowId`. Exact-string match;
- * `undefined` ⇒ the agnostic default (§3). This is the SOLE selection path — by allowId, never by
- * content (§5/INV-3).
+ * `undefined` ⇒ the agnostic default. This is the SOLE selection path — by allowId, never by
+ * content.
  */
 export function getPlatformProfile(allowId) {
     return BY_ALLOW_ID.get(allowId);

package/node_modules/@comis/skills/dist/tools/builtin/terminal-driver/platforms/terminal-platform-profile.d.ts

@@ -1,17 +1,17 @@
 /**
- * The `TerminalPlatformProfile` interface — Layer 2 of the 3-layer model (design §2/§4):
+ * The `TerminalPlatformProfile` interface — Layer 2 of the 3-layer model:
  * the read-side perception/render tuning for a first-class TUI (Claude Code, Codex, …),
  * selected by the operator-declared `allowId`.
  *
- * READ-SIDE ONLY (§5/INV-2): a profile transforms what we *perceive* (the post-jail emulator
+ * READ-SIDE ONLY: a profile transforms what we *perceive* (the post-jail emulator
  * snapshot) and how we *classify* it. It NEVER widens the bwrap jail, the env, or the launch —
  * those stay operator-controlled Layer 3. Selection is by `allowId` (operator-declared in the
- * allowlist), so the driven program cannot choose its own profile (no content-sniffing — D3/INV-3).
+ * allowlist), so the driven program cannot choose its own profile (no content-sniffing).
  *
- * Declarative-first (D1): perception + dialogs are DATA (pattern lists), reviewable and testable
+ * Declarative-first: perception + dialogs are DATA (pattern lists), reviewable and testable
  * as data. `transformSnapshot` is the SINGLE code escape hatch — render needs cell-level access
- * (the FINDING-3 ghost-strip reads `RenderCell.dim`). The agnostic default (no profile) keeps
- * today's generic behavior byte-identical (§3/INV-1).
+ * (the ghost-strip reads `RenderCell.dim`). The agnostic default (no profile) keeps
+ * the generic behavior byte-identical.
  *
  * LEAF + type-only deps: this module type-imports the render snapshot/cell shapes from the
  * sibling engine leaf (`terminal-render.ts`) and value-imports NOTHING — the registry composes it.
@@ -23,15 +23,16 @@ import type { EmulatorSnapshot } from "../terminal-render.js";
  * A safe auto-answer keystroke — RAW text fragments that the auto-answer path joins
  * (`keys.join("")`) and sends via `send_text`, EXACTLY like the canned `["\r"]` Enter the
  * operator-hintPattern path already sends (the woken turn does not name-key-encode these).
- * E.g. `["\r"]` to accept a default (Enter), `["2", "\r"]` for choice-2-then-Enter. Consumed in
- * Phase 169. (NOT the named-key `send_key` vocabulary — that path is not used by the auto-answer.)
+ * E.g. `["\r"]` to accept a default (Enter), `["2", "\r"]` for choice-2-then-Enter. Consumed by
+ * the auto-answer path. (NOT the named-key `send_key` vocabulary — that path is not used by the
+ * auto-answer.)
  */
 export type KeySpec = readonly string[];
 /**
  * Perception patterns the classifier consumes INSTEAD of hardcoding platform special-cases.
  * Each is additive: present ⇒ refine/override the generic heuristics; absent ⇒ generic only.
- * Populated in Phase 168 (empty for the scaffold). All patterns are hot-path (run per
- * read/settle frame) ⇒ ReDoS-guarded at registry load (`assertSafeProfilePatterns`).
+ * All patterns are hot-path (run per read/settle frame) ⇒ ReDoS-guarded at registry load
+ * (`assertSafeProfilePatterns`).
  */
 export interface PlatformPerception {
     /** The "input is awaited" affordance — Claude's `❯`-box composer ; Codex composer. */
@@ -46,7 +47,7 @@ export interface PlatformPerception {
 /**
  * A known dialog + its SAFE auto-answer keystroke. The operator's safe-only auto-answer policy
  * still gates these (a profile proposes; the operator policy disposes). `destructive` entries are
- * NEVER auto-answered — they escalate (§4/§5). Populated in Phase 169 (empty for the scaffold).
+ * NEVER auto-answered — they escalate to a human.
  */
 export interface PlatformDialog {
     /** A stable label — `"trust-gate" | "permission-prompt" | "approval-overlay"`. */
@@ -60,8 +61,8 @@ export interface PlatformDialog {
 }
 /**
  * A read-side per-platform perception/render profile. `undefined` from the registry ⇒ the agnostic
- * default (§3). Selected by `allowId` exact-match (D3); paired with the bundled SKILL.md by a shared
- * `id` + a shared `platformVersion` (drift-guarded at build time — D2).
+ * default. Selected by `allowId` exact-match; paired with the bundled SKILL.md by a shared
+ * `id` + a shared `platformVersion` (drift-guarded at build time).
  */
 export interface TerminalPlatformProfile {
     /** Conceptual pairing id (matches the bundled SKILL.md name): `"claude-code" | "codex" | …`. */
@@ -74,18 +75,18 @@ export interface TerminalPlatformProfile {
     readonly allowIds: readonly string[];
     /**
      * The version this profile is paired with — MUST equal the bundled SKILL.md frontmatter
-     * `version` (enforced by a build-time architecture test, D2; never a runtime gate).
+     * `version` (enforced by a build-time architecture test; never a runtime gate).
      */
     readonly platformVersion: string;
     /**
      * READ-SIDE render transform on the agnostic emulator snapshot (post-jail; pure; total).
      * Default (no profile) = identity. The Claude ghost-strip is the `claude-code` profile's
-     * transform (Phase 167). The transform reads `snap.grid` (the viewport cell grid, present for
+     * transform. The transform reads `snap.grid` (the viewport cell grid, present for
      * text-format snapshots) when it needs cell-level attributes; it must no-op when `grid` is absent.
      */
     readonly transformSnapshot?: (snap: EmulatorSnapshot) => EmulatorSnapshot;
-    /** Perception patterns the classifier consumes (Phase 168). */
+    /** Perception patterns the classifier consumes. */
     readonly perception?: PlatformPerception;
-    /** Known dialogs + safe answers the dialog-detector/auto-answer consume (Phase 169). */
+    /** Known dialogs + safe answers the dialog-detector/auto-answer consume. */
     readonly dialogs?: readonly PlatformDialog[];
 }

package/node_modules/@comis/skills/dist/tools/builtin/terminal-driver/platforms/terminal-platform-profile.js

@@ -1,18 +1,18 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
- * The `TerminalPlatformProfile` interface — Layer 2 of the 3-layer model (design §2/§4):
+ * The `TerminalPlatformProfile` interface — Layer 2 of the 3-layer model:
  * the read-side perception/render tuning for a first-class TUI (Claude Code, Codex, …),
  * selected by the operator-declared `allowId`.
  *
- * READ-SIDE ONLY (§5/INV-2): a profile transforms what we *perceive* (the post-jail emulator
+ * READ-SIDE ONLY: a profile transforms what we *perceive* (the post-jail emulator
  * snapshot) and how we *classify* it. It NEVER widens the bwrap jail, the env, or the launch —
  * those stay operator-controlled Layer 3. Selection is by `allowId` (operator-declared in the
- * allowlist), so the driven program cannot choose its own profile (no content-sniffing — D3/INV-3).
+ * allowlist), so the driven program cannot choose its own profile (no content-sniffing).
  *
- * Declarative-first (D1): perception + dialogs are DATA (pattern lists), reviewable and testable
+ * Declarative-first: perception + dialogs are DATA (pattern lists), reviewable and testable
  * as data. `transformSnapshot` is the SINGLE code escape hatch — render needs cell-level access
- * (the FINDING-3 ghost-strip reads `RenderCell.dim`). The agnostic default (no profile) keeps
- * today's generic behavior byte-identical (§3/INV-1).
+ * (the ghost-strip reads `RenderCell.dim`). The agnostic default (no profile) keeps
+ * the generic behavior byte-identical.
  *
  * LEAF + type-only deps: this module type-imports the render snapshot/cell shapes from the
  * sibling engine leaf (`terminal-render.ts`) and value-imports NOTHING — the registry composes it.