comisai 1.0.44 → 1.0.46

package/node_modules/@comis/agent/dist/budget/spend-accumulator.d.ts

@@ -1,5 +1,5 @@
 /**
- * The single daemon-wide spend accumulator (Phase 177-01, WS3) — the load-bearing
+ * The single daemon-wide spend accumulator — the load-bearing
  * correctness piece of the dollars kill-switch.
  *
  * Holds the enforcement STATE for three ceiling scopes — per-`(tenant,agent)`,
@@ -7,7 +7,7 @@
  * boot from persisted `obs_token_usage.cost_total` and incremented LIVE from the
  * `observability:token_usage` event (the rows are its durability; there is NO
  * per-check SQL re-sum). It is the enforcement-state owner, SEPARATE from the
- * pure recorder `cost-tracker.ts` (recorder ≠ enforcer — principle 10).
+ * pure recorder `cost-tracker.ts` (recorder ≠ enforcer).
  *
  * The genuinely-new code shape — and the reason this module exists — is the
  * SYNCHRONOUS atomic {@link SpendAccumulator.checkAndReserve}. It models the
@@ -47,7 +47,7 @@ export interface SpendReservation {
 }
 /**
  * The DIMENSION whose post-reserve fraction crossed `warnAtFraction` on a granted
- * reserve (WR-1, 177-obs-loop). Carries the breaching scope + that dimension's
+ * reserve. Carries the breaching scope + that dimension's
  * own post-reserve running total + cap — so the bridge emits an internally
  * CONSISTENT `observability:spend_warning` (correct scope, the dimension's total,
  * the dimension's cap) instead of hard-coding `scope:"agent"` + a session-local
@@ -78,7 +78,7 @@ export interface SpendCeilings {
  * `BudgetError` (budget-guard.ts) but carries the dollars scope + numeric amounts
  * only — never a message body.
  */
-/** Which limb of the per-root autonomy.budget meter tripped (OBS-3). The priced
+/** Which limb of the per-root autonomy.budget meter tripped. The priced
  *  $-ceiling gate leaves it undefined (→ the aggregate USD spend). The per-root
  *  token / wall-clock limbs set it so `explain` can name the exact knob + the
  *  correct unit — the `currentUsd`/`capUsd` numbers are tokens / ms (NOT dollars)
@@ -90,15 +90,15 @@ export declare class SpendError extends Error {
     readonly currentUsd: number;
     readonly capUsd: number;
     readonly estUsd: number;
-    /** OBS-3: the tripped per-root limb (undefined for the priced $-ceiling gate). */
+    /** The tripped per-root limb (undefined for the priced $-ceiling gate). */
     readonly limb?: SpendLimb | undefined;
-    /** OBS-3: the unit of `currentUsd`/`capUsd` for this limb (defaults to usd). */
+    /** The unit of `currentUsd`/`capUsd` for this limb (defaults to usd). */
     readonly unit?: SpendUnit | undefined;
     readonly name = "SpendError";
     constructor(scope: SpendScopeKind, currentUsd: number, capUsd: number, estUsd: number, 
-    /** OBS-3: the tripped per-root limb (undefined for the priced $-ceiling gate). */
+    /** The tripped per-root limb (undefined for the priced $-ceiling gate). */
     limb?: SpendLimb | undefined, 
-    /** OBS-3: the unit of `currentUsd`/`capUsd` for this limb (defaults to usd). */
+    /** The unit of `currentUsd`/`capUsd` for this limb (defaults to usd). */
     unit?: SpendUnit | undefined);
 }
 /** The daemon-wide spend accumulator surface (the per-agent guards hold a reference). */
@@ -107,7 +107,7 @@ export interface SpendAccumulator {
      * Boot: seed the per-(tenant,agent), per-tenant, and global running totals from
      * persisted cost rows. The accumulator is agnostic — it accrues whatever rows it
      * is given (the boot read groups by `agent_id`; per-tenant may accrue
-     * live-from-boot, a documented honest degradation — see Plan 03 wiring).
+     * live-from-boot — a documented honest degradation).
      */
     rehydrate(rows: ReadonlyArray<{
         agentId: string;
@@ -126,7 +126,7 @@ export interface SpendAccumulator {
      * The granted reserve carries `warn`: the FIRST ceiling DIMENSION (checked in
      * (tenant,agent) → tenant → global order) whose post-reserve fraction is
      * at/above `warnAtFraction` (with that dimension's own total + cap), or `null`
-     * when none crossed (WR-1, 177-obs-loop — replaces the bare `warn: boolean` so
+     * when none crossed (a full dimension, not a bare `warn: boolean`, so
      * the bridge emits a scope-correct `observability:spend_warning`).
      */
     checkAndReserve(scope: SpendScope, estUsd: number): Result<SpendReservation & {
@@ -141,10 +141,10 @@ export interface SpendAccumulator {
     reconcile(reservation: SpendReservation, actualUsd: number): void;
     /**
      * Read-only snapshot of the three running totals for the OTel `comis_spend_*`
-     * gauges (the headroom-gauge source — Pitfall 3 / 178-01). A PURE read: no
+     * gauges (the headroom-gauge source). A PURE read: no
      * mutation, no wall-clock call, never throws (the `budget/` discipline). The
      * returned maps are FRESH COPIES — a caller mutating them cannot corrupt the
-     * accumulator's authoritative enforcement counters (the kill-switch state, T-178-02).
+     * accumulator's authoritative enforcement counters (the kill-switch state).
      * Content-free: dollar COUNTS only, keyed by the `${tenantId} ${agentId}` /
      * `tenantId` scope keys — no message/query/body. `perAgent` reflects BOTH billed
      * spend (`recordSpend`/`rehydrate`) and in-flight reservations (`checkAndReserve`).
@@ -162,7 +162,7 @@ export interface SpendAccumulator {
  *
  * `deps.clock` is injected per the globals gate and to keep the module honest for
  * a future rolling-window variant; the shipped ceilings are plain running totals
- * (the design's ceilings are cumulative, not windowed), so no wall-clock call is
+ * (cumulative by design, not windowed), so no wall-clock call is
  * made in the hot path.
  */
 export declare function createSpendAccumulator(deps: {

package/node_modules/@comis/agent/dist/budget/spend-accumulator.js

@@ -8,9 +8,9 @@ export class SpendError extends Error {
     unit;
     name = "SpendError";
     constructor(scope, currentUsd, capUsd, estUsd, 
-    /** OBS-3: the tripped per-root limb (undefined for the priced $-ceiling gate). */
+    /** The tripped per-root limb (undefined for the priced $-ceiling gate). */
     limb, 
-    /** OBS-3: the unit of `currentUsd`/`capUsd` for this limb (defaults to usd). */
+    /** The unit of `currentUsd`/`capUsd` for this limb (defaults to usd). */
     unit) {
         super(`Spend ceiling exceeded (${scope})`);
         this.scope = scope;
@@ -32,7 +32,7 @@ function agentKeyOf(scope) {
  *
  * `deps.clock` is injected per the globals gate and to keep the module honest for
  * a future rolling-window variant; the shipped ceilings are plain running totals
- * (the design's ceilings are cumulative, not windowed), so no wall-clock call is
+ * (cumulative by design, not windowed), so no wall-clock call is
  * made in the hot path.
  */
 export function createSpendAccumulator(deps) {
@@ -48,7 +48,7 @@ export function createSpendAccumulator(deps) {
         global += deltaUsd;
     }
     /**
-     * The breaching warn DIMENSION (WR-1): the FIRST non-null ceiling — checked in
+     * The breaching warn DIMENSION: the FIRST non-null ceiling — checked in
      * the SAME (tenant,agent) → tenant → global order as the breach check — whose
      * post-reserve fraction is at/above `warnAtFraction`, with that dimension's own
      * post-reserve total + cap. `null` when none crossed. A null/non-positive cap is
@@ -96,7 +96,7 @@ export function createSpendAccumulator(deps) {
             // All ceilings pass → RESERVE: mutate all three counters BEFORE returning,
             // so the next event-loop-concurrent caller sees this reservation.
             addToCounters(scope, estUsd);
-            // WR-1: report the breaching warn DIMENSION (scope + that dimension's own
+            // Report the breaching warn DIMENSION (scope + that dimension's own
             // post-reserve total + cap), not a bare boolean — the bridge emits a
             // scope-correct observability:spend_warning from it.
             const warn = firstWarnDimension(agentTotal + estUsd, tenantTotal + estUsd, globalTotal + estUsd);

package/node_modules/@comis/agent/dist/context-engine/budget-capacity-cap.d.ts

@@ -11,8 +11,8 @@ import type { ModelProfile } from "../executor/model-profile.js";
  * The `?? 32_000` final fallback in resolveEffectiveCap handles unknown classes.
  *
  * frontier/mid: Infinity (use raw contextWindow — behavior-neutral).
- * small: 32K (matches Zod schema default; validated against Phase 149 comprehension data).
- * nano: 16K (matches Zod schema default; validated against Phase 149 comprehension data).
+ * small: 32K (matches Zod schema default; validated against small-model comprehension data).
+ * nano: 16K (matches Zod schema default; validated against small-model comprehension data).
  * Operators can tune small/nano via contextEngine.budget.effectiveContextCapSmall/Nano.
  */
 export declare const DEFAULT_EFFECTIVE_CAP_BY_CLASS: Readonly<Record<string, number>>;
@@ -20,16 +20,16 @@ export declare const DEFAULT_EFFECTIVE_CAP_BY_CLASS: Readonly<Record<string, num
  * Compute a ModelProfile-aware token budget.
  *
  * @param profile       - The resolved ModelProfile (from resolveModelProfile()).
- * @param systemTokensEstimate - S: system tokens (÷3.5 of system prompt chars — B-1 applied by caller).
- * @param freshTailPreambleTokensEstimate - P: preamble tokens (÷3.5 of preamble chars — B-1 applied by caller).
+ * @param systemTokensEstimate - S: system tokens (÷3.5 of system prompt chars — over-reservation applied by caller).
+ * @param freshTailPreambleTokensEstimate - P: preamble tokens (÷3.5 of preamble chars — over-reservation applied by caller).
  * @param cacheFenceIndex - Optional; passed through to computeTokenBudget. Default: -1.
  * @param effectiveContextCapSmall - Optional override for the small class cap (from contextEngine.budget.effectiveContextCapSmall).
  * @param effectiveContextCapNano  - Optional override for the nano class cap (from contextEngine.budget.effectiveContextCapNano).
- * @param windowProvenance - Optional KNOB-02 provenance from the executor's
+ * @param windowProvenance - Optional provenance from the executor's
  *   resolveEffectiveContextWindow reconcile. When present, rawContextWindowTokens
  *   reports the TRUE configuredWindow (profile.contextWindow arrives ALREADY
  *   overwritten with the reconciled value) and windowCapSource gains "served" /
- *   the class knob for upstream binds. Absent ⇒ byte-identical pre-provenance
- *   behavior (I3 frontier/mid pin).
+ *   the class knob for upstream binds. Absent ⇒ the profile's contextWindow is
+ *   reported as the raw window and no upstream cap source is attributed.
  */
 export declare function computeTokenBudgetForProfile(profile: ModelProfile, systemTokensEstimate: number, freshTailPreambleTokensEstimate?: number, cacheFenceIndex?: number, effectiveContextCapSmall?: number, effectiveContextCapNano?: number, windowProvenance?: WindowProvenance): TokenBudget;

package/node_modules/@comis/agent/dist/context-engine/budget-capacity-cap.js

@@ -2,14 +2,14 @@
 /**
  * computeTokenBudgetForProfile — ModelProfile-aware token budget wrapper.
  *
- * C1: handles both:
+ * Handles both:
  *   1. 8K-starvation (effectiveO = min(OUTPUT_RESERVE_TOKENS, profile.maxOutputTokens))
  *   2. 256K-overfill (effectiveWindow = min(contextWindow, EFFECTIVE_CAP_BY_CLASS[class]))
  *
  * Frontier/mid: byte-identical to computeTokenBudget (behavior-neutral guarantee).
  * Small/nano: effective window capped by capability class to prevent 256K-overfill degradation.
  *
- * IMPORTANT: the B-1 3.5-ratio over-reservation (the ÷CHARS_PER_TOKEN_RATIO
+ * IMPORTANT: the 3.5-ratio over-reservation (the ÷CHARS_PER_TOKEN_RATIO
  * estimates in assembleTools step 5, "System token estimate", in
  * executor-tool-assembly.ts) is PRESERVED — it is applied at the call site
  * before passing systemTokensEstimate and freshTailPreambleTokensEstimate to
@@ -30,13 +30,13 @@ import { OUTPUT_RESERVE_TOKENS } from "./constants.js";
  * The `?? 32_000` final fallback in resolveEffectiveCap handles unknown classes.
  *
  * frontier/mid: Infinity (use raw contextWindow — behavior-neutral).
- * small: 32K (matches Zod schema default; validated against Phase 149 comprehension data).
- * nano: 16K (matches Zod schema default; validated against Phase 149 comprehension data).
+ * small: 32K (matches Zod schema default; validated against small-model comprehension data).
+ * nano: 16K (matches Zod schema default; validated against small-model comprehension data).
  * Operators can tune small/nano via contextEngine.budget.effectiveContextCapSmall/Nano.
  */
 export const DEFAULT_EFFECTIVE_CAP_BY_CLASS = {
     frontier: Infinity,
-    mid: Infinity, // mid (Google Gemini) genuinely uses long context; no cap in Phase 152
+    mid: Infinity, // mid (Google Gemini) genuinely uses long context; deliberately uncapped
     small: 32_000,
     nano: 16_000,
 };
@@ -44,33 +44,33 @@ export const DEFAULT_EFFECTIVE_CAP_BY_CLASS = {
  * Compute a ModelProfile-aware token budget.
  *
  * @param profile       - The resolved ModelProfile (from resolveModelProfile()).
- * @param systemTokensEstimate - S: system tokens (÷3.5 of system prompt chars — B-1 applied by caller).
- * @param freshTailPreambleTokensEstimate - P: preamble tokens (÷3.5 of preamble chars — B-1 applied by caller).
+ * @param systemTokensEstimate - S: system tokens (÷3.5 of system prompt chars — over-reservation applied by caller).
+ * @param freshTailPreambleTokensEstimate - P: preamble tokens (÷3.5 of preamble chars — over-reservation applied by caller).
  * @param cacheFenceIndex - Optional; passed through to computeTokenBudget. Default: -1.
  * @param effectiveContextCapSmall - Optional override for the small class cap (from contextEngine.budget.effectiveContextCapSmall).
  * @param effectiveContextCapNano  - Optional override for the nano class cap (from contextEngine.budget.effectiveContextCapNano).
- * @param windowProvenance - Optional KNOB-02 provenance from the executor's
+ * @param windowProvenance - Optional provenance from the executor's
  *   resolveEffectiveContextWindow reconcile. When present, rawContextWindowTokens
  *   reports the TRUE configuredWindow (profile.contextWindow arrives ALREADY
  *   overwritten with the reconciled value) and windowCapSource gains "served" /
- *   the class knob for upstream binds. Absent ⇒ byte-identical pre-provenance
- *   behavior (I3 frontier/mid pin).
+ *   the class knob for upstream binds. Absent ⇒ the profile's contextWindow is
+ *   reported as the raw window and no upstream cap source is attributed.
  */
 export function computeTokenBudgetForProfile(profile, systemTokensEstimate, freshTailPreambleTokensEstimate = 0, cacheFenceIndex = -1, effectiveContextCapSmall, effectiveContextCapNano, windowProvenance) {
     // Effective context window: cap for small/nano to prevent 256K-overfill degradation.
     // frontier/mid: Infinity → Math.min(contextWindow, Infinity) = contextWindow (byte-identical).
     const { cap: classCap, source: capKnob } = resolveEffectiveCap(profile.capabilityClass, effectiveContextCapSmall, effectiveContextCapNano);
     const effectiveWindow = Math.min(profile.contextWindow, classCap);
-    // W1 cap provenance: when this function's OWN class cap bit, it is the
+    // Cap provenance: when this function's OWN class cap bit, it is the
     // binding (tightest) constraint — name the budget knob (raising it genuinely
-    // works on this branch). Otherwise (KNOB-02) consult the executor-side
+    // works on this branch). Otherwise consult the executor-side
     // reconcile provenance: "served" when the Ollama-served window bound
     // upstream; "capabilityClass" when the executor's DEFAULT_EFFECTIVE_CAP_BY_CLASS
-    // cap bound upstream (WR-01: that cap comes from the operator's
+    // cap bound upstream (that cap comes from the operator's
     // providers.entries.<id>.capabilities.capabilityClass pin — it never reads
     // the contextEngine.budget.* knobs, so naming the budget knob here would send
     // operators to a dead lever); "none" when nothing clamped or no provenance
-    // was threaded (pre-KNOB-02 byte-identical behavior).
+    // was threaded.
     const capBit = effectiveWindow < profile.contextWindow;
     const windowCapSource = capBit
         ? capKnob
@@ -99,9 +99,9 @@ export function computeTokenBudgetForProfile(profile, systemTokensEstimate, fres
         return {
             ...rawBudget,
             windowTokens: effectiveWindow,
-            // KNOB-02: profile.contextWindow arrives executor-OVERWRITTEN with the
+            // profile.contextWindow arrives executor-OVERWRITTEN with the
             // reconciled (possibly served) value — the TRUE configured window lives
-            // on the provenance. Absent provenance ⇒ pre-KNOB-02 behavior.
+            // on the provenance. Absent provenance ⇒ report the profile value directly.
             rawContextWindowTokens: windowProvenance?.configuredWindow ?? profile.contextWindow,
             windowCapSource,
             ...(windowProvenance?.served !== undefined && { servedWindowTokens: windowProvenance.served }),
@@ -113,7 +113,7 @@ export function computeTokenBudgetForProfile(profile, systemTokensEstimate, fres
     // For frontier: effectiveWindow == contextWindow (Infinity cap) → byte-identical.
     return {
         ...computeTokenBudget(effectiveWindow, systemTokensEstimate, cacheFenceIndex, freshTailPreambleTokensEstimate),
-        // KNOB-02: see the starvation-path comment above — raw = the TRUE configured window.
+        // See the starvation-path comment above — raw = the TRUE configured window.
         rawContextWindowTokens: windowProvenance?.configuredWindow ?? profile.contextWindow,
         windowCapSource,
         ...(windowProvenance?.served !== undefined && { servedWindowTokens: windowProvenance.served }),
@@ -122,7 +122,7 @@ export function computeTokenBudgetForProfile(profile, systemTokensEstimate, fres
 /**
  * Resolve the class cap AND the knob it came from. `source` names the
  * `contextEngine.budget.*` knob that produced the cap so the budget can report
- * WHICH setting to raise (W1 cap provenance). The unknown-class `?? 32_000`
+ * WHICH setting to raise. The unknown-class `?? 32_000`
  * safety net is attributed to the small knob — it mirrors that knob's default
  * and only non-schema callers can reach it.
  */

package/node_modules/@comis/agent/dist/context-engine/cleanup-helpers.d.ts

@@ -2,8 +2,8 @@
  * Shared helpers for context engine cleanup layers (evictor + masker).
  *
  * These pure functions are used by both dead-content-evictor and observation-masker
- * to inspect and classify tool result messages. Layers remain separate per user
- * decision -- only shared PURE helpers are extracted here.
+ * to inspect and classify tool result messages. The two layers deliberately stay
+ * separate -- only shared PURE helpers are extracted here.
  *
  * @module
  */

package/node_modules/@comis/agent/dist/context-engine/cleanup-helpers.js

@@ -3,8 +3,8 @@
  * Shared helpers for context engine cleanup layers (evictor + masker).
  *
  * These pure functions are used by both dead-content-evictor and observation-masker
- * to inspect and classify tool result messages. Layers remain separate per user
- * decision -- only shared PURE helpers are extracted here.
+ * to inspect and classify tool result messages. The two layers deliberately stay
+ * separate -- only shared PURE helpers are extracted here.
  *
  * @module
  */

package/node_modules/@comis/agent/dist/context-engine/compaction-capability-router.d.ts

@@ -1,9 +1,9 @@
 /**
  * Capability-routed compaction strategy resolver.
  *
- * C4/C5/S4: for low-capabilityClass models (small/nano), routes to eviction
+ * For low-capabilityClass models (small/nano), routes to eviction
  * or a configured stronger summarizer rather than same-model LLM summarization.
- * frontier/mid: returns "llm" (unchanged behavior, byte-identical to today).
+ * frontier/mid: always returns "llm" (capability routing never changes their path).
  *
  * Fail-closed: unknown capabilityClass → "eviction" (the safe floor, not "llm").
  *

package/node_modules/@comis/agent/dist/context-engine/compaction-zone-helpers.d.ts

@@ -8,7 +8,7 @@
  *   assistant tool_use and its tool_results never split across zones
  * - `estimateRangeChars` — char total for a half-open message range
  * - `clampFactorText` — the text of one message used to compute its
- *   scriptTokenFactor at the SUMW-01 span-clamp walk (TOK-01, Phase 179)
+ *   scriptTokenFactor at the compaction span-clamp walk
  *
  * @module
  */
@@ -26,8 +26,8 @@ export declare function extendHeadForPairSafety(messages: AgentMessage[], headEn
  */
 export declare function estimateRangeChars(messages: AgentMessage[], startIdx: number, endIdx: number): number;
 /**
- * TOK-01 (Phase 179): the text of one message used to compute its
- * scriptTokenFactor at the SUMW-01 span-clamp walk — string content, or for
+ * The text of one message used to compute its
+ * scriptTokenFactor at the compaction span-clamp walk — string content, or for
  * array content the concatenated text/thinking fields plus JSON.stringify of
  * toolCall arguments, mirroring what estimateContextCharsWithDualRatio counts.
  * A plain concat is sufficient for the FACTOR; the dual-ratio CHAR COUNT stays
@@ -36,20 +36,21 @@ export declare function estimateRangeChars(messages: AgentMessage[], startIdx: n
  */
 export declare function clampFactorText(m: AgentMessage): string;
 /**
- * OBS-01 (Phase 180): the small-model G4 detector. Compare the dominant script
+ * The small-summarizer language-drift detector. Compare the dominant script
  * of a completed summary against its source chunk; when a NON-Latin source
  * produced a Latin summary, emit `context:summary_language_mismatch` (a weak
  * local summarizer silently writing English summaries of Hebrew chunks becomes
  * a counted `comis fleet` finding with the `strongerSummarizerModel` remedy hint).
  *
  * VISIBILITY ONLY — no gating, no rejection, no behavior change to the summarize
- * paths (design §8 REJECTs validation-gating: a mixed code-heavy chunk legitimately
- * skews Latin via the 0.3 dominance threshold in `dominantScript`, so this is a
- * count an operator reviews, not an error to block). The emit is strictly
- * additive and GUARDED: a throwing subscriber NEVER fails the summarize/compaction
- * pass (the `onCondensed` non-fatal contract). The payload carries the closed
- * `ScriptClass` enums + a depth count + ids ONLY — NEVER the summary or source
- * body (I8 / §2.7); `dominantScript` reads the text locally and nothing leaks.
+ * paths (validation-gating is deliberately rejected: a mixed code-heavy chunk
+ * legitimately skews Latin via the 0.3 dominance threshold in `dominantScript`,
+ * so this is a count an operator reviews, not an error to block). The emit is
+ * strictly additive and GUARDED: a throwing subscriber NEVER fails the
+ * summarize/compaction pass (the `onCondensed` non-fatal contract). The payload
+ * carries the closed `ScriptClass` enums + a depth count + ids ONLY — NEVER the
+ * summary or source body (log/event payloads never carry message content);
+ * `dominantScript` reads the text locally and nothing leaks.
  *
  * @param eventBus - the site's typed bus (absent ⇒ a silent no-op via the `?.`)
  * @param logger   - structured logger for the guarded-emit failure WARN

package/node_modules/@comis/agent/dist/context-engine/compaction-zone-helpers.js

@@ -9,7 +9,7 @@
  *   assistant tool_use and its tool_results never split across zones
  * - `estimateRangeChars` — char total for a half-open message range
  * - `clampFactorText` — the text of one message used to compute its
- *   scriptTokenFactor at the SUMW-01 span-clamp walk (TOK-01, Phase 179)
+ *   scriptTokenFactor at the compaction span-clamp walk
  *
  * @module
  */
@@ -58,8 +58,8 @@ export function estimateRangeChars(messages, startIdx, endIdx) {
     return total;
 }
 /**
- * TOK-01 (Phase 179): the text of one message used to compute its
- * scriptTokenFactor at the SUMW-01 span-clamp walk — string content, or for
+ * The text of one message used to compute its
+ * scriptTokenFactor at the compaction span-clamp walk — string content, or for
  * array content the concatenated text/thinking fields plus JSON.stringify of
  * toolCall arguments, mirroring what estimateContextCharsWithDualRatio counts.
  * A plain concat is sufficient for the FACTOR; the dual-ratio CHAR COUNT stays
@@ -100,20 +100,21 @@ export function clampFactorText(m) {
     return out;
 }
 /**
- * OBS-01 (Phase 180): the small-model G4 detector. Compare the dominant script
+ * The small-summarizer language-drift detector. Compare the dominant script
  * of a completed summary against its source chunk; when a NON-Latin source
  * produced a Latin summary, emit `context:summary_language_mismatch` (a weak
  * local summarizer silently writing English summaries of Hebrew chunks becomes
  * a counted `comis fleet` finding with the `strongerSummarizerModel` remedy hint).
  *
  * VISIBILITY ONLY — no gating, no rejection, no behavior change to the summarize
- * paths (design §8 REJECTs validation-gating: a mixed code-heavy chunk legitimately
- * skews Latin via the 0.3 dominance threshold in `dominantScript`, so this is a
- * count an operator reviews, not an error to block). The emit is strictly
- * additive and GUARDED: a throwing subscriber NEVER fails the summarize/compaction
- * pass (the `onCondensed` non-fatal contract). The payload carries the closed
- * `ScriptClass` enums + a depth count + ids ONLY — NEVER the summary or source
- * body (I8 / §2.7); `dominantScript` reads the text locally and nothing leaks.
+ * paths (validation-gating is deliberately rejected: a mixed code-heavy chunk
+ * legitimately skews Latin via the 0.3 dominance threshold in `dominantScript`,
+ * so this is a count an operator reviews, not an error to block). The emit is
+ * strictly additive and GUARDED: a throwing subscriber NEVER fails the
+ * summarize/compaction pass (the `onCondensed` non-fatal contract). The payload
+ * carries the closed `ScriptClass` enums + a depth count + ids ONLY — NEVER the
+ * summary or source body (log/event payloads never carry message content);
+ * `dominantScript` reads the text locally and nothing leaks.
  *
  * @param eventBus - the site's typed bus (absent ⇒ a silent no-op via the `?.`)
  * @param logger   - structured logger for the guarded-emit failure WARN
@@ -123,7 +124,7 @@ export function clampFactorText(m) {
  * @param args.nowMs       - the injected clock read for the event timestamp
  */
 export function emitSummaryLanguageMismatch(eventBus, logger, args) {
-    // One O(n) dominantScript pass each (SCRIPT-01). Fire ONLY on the predictable
+    // One O(n) dominantScript pass each. Fire ONLY on the predictable
     // small-summarizer failure: a non-Latin source whose summary came back Latin.
     const sourceScript = dominantScript(args.sourceText);
     if (sourceScript === "latin")
@@ -143,7 +144,7 @@ export function emitSummaryLanguageMismatch(eventBus, logger, args) {
     }
     catch (err) {
         // Guarded-emit (the onCondensed isolation pattern): observability NEVER
-        // fails the summarize/compaction pass. Content-free WARN (§2.7).
+        // fails the summarize/compaction pass. Content-free WARN — no message bodies.
         logger.warn({
             err: err instanceof Error ? err.message : String(err),
             agentId: args.agentId,

package/node_modules/@comis/agent/dist/context-engine/constants.d.ts

@@ -5,16 +5,15 @@
  * Each constant uses verbose UPPER_SNAKE_CASE naming and includes
  * a JSDoc comment explaining its purpose and which layer consumes it.
  *
- * Constants are NOT exposed in user config (per locked decision:
- * budget components are internal). Users control the pipeline via
+ * Constants are NOT exposed in user config — budget components are
+ * internal. Users control the pipeline via
  * ContextEngineConfigSchema (enabled, thinkingKeepTurns).
  *
  * @module
  */
 /** Minimum visible output tokens guaranteed on every LLM dispatch — the
  *  non-reasoning floor (the answer/tool-call body that must survive after the
- *  thinking block). Used by: output-headroom.ts + config-resolver.ts clamp.
- *  Design ref: design/small-model-context-fidelity.md §4 Fix 3 item 1. */
+ *  thinking block). Used by: output-headroom.ts + config-resolver.ts clamp. */
 export declare const MIN_VISIBLE_OUTPUT_TOKENS = 768;
 /** Safety margin as percentage of context window. Clamp: max(W * SAFETY_MARGIN_PERCENT / 100, MIN_SAFETY_MARGIN_TOKENS). Used by: token budget algebra. */
 export declare const SAFETY_MARGIN_PERCENT = 5;
@@ -76,8 +75,8 @@ export declare function resolveToolMaskingTier(toolName: string): ToolMaskingTie
  *  3.5 better matches Anthropic's tokenizer (measured 38.8% overcount at 4.0
  *  against production dashboard data). Aligned with estimateBlockTokens().
  *
- *  Ratios are Latin-calibrated and stay flat here; since Phase 179 (TOK-01),
- *  call sites with source text in scope modulate the divisor by
+ *  Ratios are Latin-calibrated and stay flat here; call sites with
+ *  source text in scope modulate the divisor by
  *  scriptTokenFactor(text) from @comis/core (dense scripts — Hebrew/Arabic/
  *  CJK/etc — carry ~2-3× tokens per char). Sites without text in scope are
  *  marked flat-by-design at the call site. */
@@ -92,7 +91,7 @@ export declare const SYSTEM_PROMPT_HASH_LENGTH = 16;
 /**
  * Warn if bootstrap content exceeds this percentage of estimated total prompt input.
  *
- * F4: denominator is `systemPromptChars + toolDefOverheadChars` (system prompt + tool schemas),
+ * The denominator is `systemPromptChars + toolDefOverheadChars` (system prompt + tool schemas),
  * not raw system prompt alone. Threshold lowered from 85→40: fires only when bootstrap is
  * genuinely disproportionate to the full assembled input, eliminating the 100% false-alarm
  * rate on small-model turns (compact-secure system prompt ~2.8K vs ~12K bootstrap).
@@ -145,10 +144,10 @@ export declare const DEFAULT_COMPACTION_PREFIX_ANCHOR_TURNS = 2;
  *  Below this threshold, compaction is skipped since savings are negligible.
  *  Used by: llm-compaction layer. */
 export declare const MIN_MIDDLE_MESSAGES_FOR_COMPACTION = 3;
-/** SUMW-01 (Phase 178): reserved token allowance for the summarizer prompt
+/** Reserved token allowance for the summarizer prompt
  *  TEMPLATE around the input span — the SDK generateSummary instruction
  *  template (order of a few hundred tokens), reserved with margin. The
- *  threaded previousSummary is NOT covered by this constant (review WR-03: it
+ *  threaded previousSummary is NOT covered by this constant (it
  *  can itself be ~target-sized — 1_200 leaf / 2_000 condense defaults, and
  *  `condensedTargetTokens` allows 10_000 — so a flat reserve cannot cover it
  *  by its own arithmetic); both LCD clamp sites subtract the ACTUAL
@@ -163,19 +162,19 @@ export declare const MIN_MIDDLE_MESSAGES_FOR_COMPACTION = 3;
  *  (leaf chunk clamp), lcd-condense-trigger (condense prefix clamp). */
 export declare const SUMMARIZER_PROMPT_OVERHEAD_TOKENS = 2048;
 /** Bounded token target for the deterministic Level-3 leaf-summary truncation —
- *  the guaranteed-shrink floor (LOSSLESS-CLAW §5). When both LLM summarization
+ *  the guaranteed-shrink floor. When both LLM summarization
  *  levels fail to reduce the chunk (oversized output or throws), Level 3 builds a
  *  count-only note capped at this size so the leaf summary ALWAYS ends up strictly
  *  smaller than the chunk it replaces (the escalation terminator — never loops).
  *  Used by: lcd-leaf-summarizer (Level-3 deterministic truncation). */
 export declare const LEAF_FALLBACK_TARGET_TOKENS = 512;
 /** Marker string prefixed onto the deterministic Level-3 leaf truncation output so
- *  a fallback (non-LLM) leaf summary is identifiable downstream (Phase 132
- *  taint-escapes it; the assembler/store record `fallback: true`). The two LLM
+ *  a fallback (non-LLM) leaf summary is identifiable downstream (the summarizer
+ *  wrapper taint-escapes it; the assembler/store record `fallback: true`). The two LLM
  *  levels never emit this marker — its presence means the deterministic floor ran.
  *  Used by: lcd-leaf-summarizer (Level-3 marker). */
 export declare const LEAF_FALLBACK_SUMMARY_MARKER = "[lcd-leaf-fallback]";
-/** B-2: hard cap on the number of leaf passes one afterTurn drain may fire (the
+/** Hard cap on the number of leaf passes one afterTurn drain may fire (the
  *  infinite-loop backstop). The drain loops `runOneLeafPass` — re-resolving the
  *  model-facing view each iteration so utilization reflects the prior pass's
  *  compaction — and terminates on the FIRST of: utilization ≤ contextThreshold
@@ -188,10 +187,10 @@ export declare const LEAF_FALLBACK_SUMMARY_MARKER = "[lcd-leaf-fallback]";
  *  is enough to drain a few back-to-back large turns' backlog under threshold in one
  *  turn while bounding worst-case added latency; a sustained over-threshold load that
  *  the cap cannot fully drain in one turn simply continues draining on the next
- *  afterTurn (the leaf gate stays armed) rather than stalling at one pass forever
- *  (the B-2 stall this fixes). Used by: lcd-compaction-trigger (the drain loop cap). */
+ *  afterTurn (the leaf gate stays armed) rather than stalling at one pass forever.
+ *  Used by: lcd-compaction-trigger (the drain loop cap). */
 export declare const LCD_MAX_LEAF_PASSES_PER_TURN = 4;
-/** TRUSTED-HEADER marker (R2, Phase 132) appended to a fallback summary's
+/** TRUSTED-HEADER marker appended to a fallback summary's
  *  `summaryRefToMessage` header — OUTSIDE the `wrapExternalContent` untrusted
  *  region — so the model is honestly told the summary is an emergency, degraded
  *  truncation (the breaker/spend-cap floor or the deterministic Level-3 floor
@@ -202,17 +201,17 @@ export declare const LCD_MAX_LEAF_PASSES_PER_TURN = 4;
  *  Distinct concern from {@link LEAF_FALLBACK_SUMMARY_MARKER} (the in-CONTENT
  *  Level-3 prefix); this is the header equivalent. Used by: lcd-assembler. */
 export declare const LCD_FALLBACK_HEADER_MARKER = "fallback=emergency-truncation";
-/** B-8: per-tool-RESULT character cap for tool results sitting in the LCD `dag`
+/** Per-tool-RESULT character cap for tool results sitting in the LCD `dag`
  *  assembler's UNCONDITIONAL fresh tail. The dag assembly path runs NEITHER the
  *  pipeline observation masker NOR the dead-content evictor (those are wired only
  *  in the pipeline branch), and the fresh tail is concatenated verbatim and
- *  UNCONDITIONALLY (`[...budgeted, ...freshTail]`, A1/A3) — so a turn whose last
+ *  UNCONDITIONALLY (`[...budgeted, ...freshTail]`) — so a turn whose last
  *  `freshTailTurns` steps carry a huge tool output (a 200K-char file read, a giant
  *  command dump) can overflow the model window before any budget pass sees it.
  *  This cap bounds each oversized fresh-tail tool RESULT's total text via the
  *  shared `createToolResultSizeGuard()` (head+tail+honest marker — NOT hand-rolled)
- *  while every result that fits passes through byte-identical (A1 preserved for
- *  what fits).
+ *  while every result that fits passes through byte-identical (verbatim
+ *  fresh-tail fidelity preserved for what fits).
  *
  *  Value = {@link TOOL_RESULT_HARD_CAP_CHARS} (100_000), the same absolute
  *  per-result ceiling the pipeline microcompaction guard enforces — chosen for
@@ -224,7 +223,7 @@ export declare const LCD_FALLBACK_HEADER_MARKER = "fallback=emergency-truncation
  *  per result at {@link CHARS_PER_TOKEN_RATIO}, so even a fresh tail of several
  *  capped results fits any modern window's fresh-tail allowance — masking is
  *  acceptable ONLY because the LCD store keeps the full content losslessly and
- *  `ctx_expand` recovers it. Used by: lcd-assembler (B-8 fresh-tail bounding). */
+ *  `ctx_expand` recovers it. Used by: lcd-assembler (fresh-tail bounding). */
 export declare const LCD_FRESH_TAIL_MAX_TOOL_RESULT_CHARS = 100000;
 /** Bounded token target for the deterministic Level-3 CONDENSATION truncation —
  *  the guaranteed-shrink floor mirroring {@link LEAF_FALLBACK_TARGET_TOKENS}. When
@@ -236,7 +235,7 @@ export declare const LCD_FRESH_TAIL_MAX_TOOL_RESULT_CHARS = 100000;
 export declare const CONDENSED_FALLBACK_TARGET_TOKENS = 512;
 /** Marker string prefixed onto the deterministic Level-3 condensation truncation
  *  output so a fallback (non-LLM) condensed summary is identifiable downstream
- *  (Phase 132 taint-escapes it; the store records `fallback: true`). The two LLM
+ *  (the summarizer wrapper taint-escapes it; the store records `fallback: true`). The two LLM
  *  levels never emit this marker — its presence means the deterministic floor ran.
  *  Distinct from the leaf marker so the two tiers' floors are separable in logs +
  *  the synthetic-session gate. Used by: lcd-condense (Level-3 marker). */