comisai 1.0.44 → 1.0.46

package/node_modules/@comis/core/dist/config/schema-agent/schema-agent-autonomy.js

@@ -2,24 +2,24 @@
 /**
  * Agent config — Autonomy (named-profile) schema + resolver.
  *
- * Owns the v8 §3.8 named-profile posture: the `AutonomyConfigSchema` Zod leaf
+ * Owns the named-profile posture: the `AutonomyConfigSchema` Zod leaf
  * (whose `.default()` produces the `standard` posture — the zero-config
- * great-out-of-box default and the MIG-01 migration target), the
- * `AUTONOMY_PROFILES` resolved cap/guard table, and the PURE `resolveAutonomy()`
- * that expands a `profile:` into the full §3.3 cap/guard block (any explicit
- * field OVERRIDES the profile — progressive disclosure).
+ * great-out-of-box default), the `AUTONOMY_PROFILES` resolved cap/guard
+ * table, and the PURE `resolveAutonomy()` that expands a `profile:` into the
+ * full cap/guard block (any explicit field OVERRIDES the profile —
+ * progressive disclosure).
  *
  * Imports nothing from sibling leaves (model/context/prompt/runtime) —
  * one-directional dependency graph; the top-level `PerAgentConfigSchema` in
  * `schema-agent-runtime.ts` composes from this leaf.
  *
- * Design anchors: v8 §3.3 (the knob block), §3.8 (the named-profile table +
- * zero-config + the M1 clamp for `unattended`/`max`), §22.3 (the structural
- * floor — the `autoApprovable:false` caps that escalate, never auto, in EVERY
- * profile forever). Pure config→caps transform: NO `process.env` / `Date.now`
- * / `path.join` (AGENTS §2.2). The resolver's downshift (PROFILE-03) is driven
- * by a preflight-result INPUT, never a live bwrap probe (that probe is Phase
- * 211); this leaf only provides the profile→caps expansion.
+ * Design anchors: the knob block, the named-profile table (zero-config
+ * default + the clamp for `unattended`/`max`), and the structural floor —
+ * the `autoApprovable:false` caps that escalate, never auto, in EVERY
+ * profile forever. Pure config→caps transform: NO `process.env` / `Date.now`
+ * / `path.join` (AGENTS §2.2). The resolver's downshift is driven by a
+ * preflight-result INPUT, never a live bwrap probe (the probe is the
+ * caller's job); this leaf only provides the profile→caps expansion.
  *
  * @module
  */
@@ -27,52 +27,54 @@ import { z } from "zod";
 // ── Orchestration-capability vocabulary ─────────────────────────────────────
 //
 // SINGLE SOURCE OF TRUTH: the closed `orch:*` set and the `AgentCapability`
-// union are owned by the security layer (`security/capability.ts`, Phase 210)
+// union are owned by the security layer (`security/capability.ts`)
 // and imported here — the autonomy profiles below draw their caps from that one
-// canonical list. An earlier draft kept a config-leaf-local copy to avoid a
+// canonical list. A config-leaf-local copy would avoid the
 // config→security edge, but two arrays that must stay "identical by
 // construction" is exactly the drift the closed union exists to prevent, and the
 // import is benign (one-way, into a dependency-free leaf — no package cycle).
 // NAMING: the type is `AgentCapability` (NOT bare `Capability`) — bare
 // `Capability` collides with `CapabilityId`/`ChannelCapability`/
-// `CapabilityDescriptor` already in the tree (v8 / RESEARCH A1).
+// `CapabilityDescriptor` already in the tree.
 import { AGENT_CAPABILITIES } from "../../security/capability.js";
-// The four nested BOUNDS sub-blocks (BUDGET/RATE/SPAWN/OUTWARD, 213-03) live in a
+// The four nested BOUNDS sub-blocks (BUDGET/RATE/SPAWN/OUTWARD) live in a
 // sibling leaf to keep this file under the schema-agent file-size cap; re-exported
 // below so consumers continue to import them from `schema-agent-autonomy`.
 import { AutonomyBudgetConfigSchema, AutonomyRateConfigSchema, AutonomySpawnConfigSchema, AutonomyOutwardConfigSchema, STANDARD_AUTONOMY_BOUNDS, resolveAutonomyBounds, } from "./schema-agent-autonomy-bounds.js";
-// Phase 216 (DUR-01..04 / HB-01): the durable-run + resume-engine gate. Default-
-// off; nested into AutonomyConfigSchema below. Sibling leaf to keep this file
-// under the schema-agent file-size cap; re-exported via the schema-agent barrel.
+// The durable-run + resume-engine gate. Default-off; nested into
+// AutonomyConfigSchema below. Sibling leaf to keep this file under the
+// schema-agent file-size cap; re-exported via the schema-agent barrel.
 import { DurabilityConfigSchema } from "./schema-agent-autonomy-durability.js";
-// 217: the §22 mode vocabulary + the EVICT-02 fail-closed `resolveEffectiveMode`
+// The inbound MCP allowlist leaf (default-off) — nested below; docs in the leaf.
+import { AutonomyMcpConfigSchema } from "./schema-agent-autonomy-mcp.js";
+// The autonomy MODE vocabulary + the fail-closed `resolveEffectiveMode`
 // primitive + the two `unattended`/`max` posture notices live in a sibling leaf
 // (file-size cap), exported to `@comis/core` via the schema-agent barrel.
 import { AUTONOMY_MODES, UNATTENDED_NOTICE, MAX_M1_CLAMP_NOTICE, } from "./schema-agent-autonomy-mode.js";
-// 218-01 (COORD-01): the §23.10 lean-coordinator role vocabulary + the pure
+// The lean-coordinator role vocabulary + the pure
 // `coordinator → coordinatorToolGroups` expansion live in a sibling leaf (file-size cap).
 import { AUTONOMY_ROLES, resolveCoordinatorToolGroups } from "./schema-agent-autonomy-role.js";
-// 218-01 (file-size cap): the §22.3 always-escalate floor cap-set + the per-cap
-// `capIsAutoApprovable` predicate live in a sibling leaf (one-way import, no cycle).
+// The always-escalate floor cap-set + the per-cap `capIsAutoApprovable`
+// predicate live in a sibling leaf (file-size cap; one-way import, no cycle).
 import { capIsAutoApprovable } from "./schema-agent-autonomy-escalate.js";
 /**
- * The nine FLOOR-CONTAINED orchestration caps the `standard` profile turns on
- * (v8 §3.8 / §22.3). A profile MAY auto-allow these because the non-removable
- * §22.3 floor (deny-by-origin, secrets/host unreachability, the always-on
+ * The nine FLOOR-CONTAINED orchestration caps the `standard` profile turns on.
+ * A profile MAY auto-allow these because the non-removable structural floor
+ * (deny-by-origin, secrets/host unreachability, the always-on
  * budget/rate/spawn-ceiling, live revoke) bounds their blast radius.
  *
- * `orch:message` IS a member (210-GAP MIG-01 / v8 §3.8 line 253 profile table /
- * §3.3 line 190): the `standard` profile turns ON origin-channel messaging, and
- * Plan 04 gates `message.send/reply/react` on `requireCapability(_,
- * "orch:message")`. The held cap is what lets the most fundamental agent action
- * — sending a message to the channel it was spoken to — pass that gate. The
- * ORIGIN-vs-new-channel scoping rides the separate `message.channels` config
- * (`["origin"]` by default): origin sends are auto-allowable under quota, while
- * a send to a NEW channel is an `autoApprovable:false` floor item (§3.5/§22.3)
- * enforced by the message config + the §8.4 per-target grant — NOT by removing
- * the cap from the held set. The cap-literal `orch:message` is therefore
- * floor-contained + `autoApprovable:true` (origin); only its non-origin TARGET
- * escalates. (§3.5: the cap covers the genuinely-outward subset send/reply/react
+ * `orch:message` IS a member: the `standard` profile turns ON origin-channel
+ * messaging, and the daemon gates `message.send/reply/react` on
+ * `requireCapability(_, "orch:message")`. The held cap is what lets the most
+ * fundamental agent action — sending a message to the channel it was spoken to
+ * — pass that gate. The ORIGIN-vs-new-channel scoping rides the separate
+ * `message.channels` config (`["origin"]` by default): origin sends are
+ * auto-allowable under quota, while a send to a NEW channel is an
+ * `autoApprovable:false` floor item enforced by the message config + the
+ * per-target grant — NOT by removing the cap from the held set. The
+ * cap-literal `orch:message` is therefore floor-contained +
+ * `autoApprovable:true` (origin); only its non-origin TARGET escalates.
+ * (The cap covers the genuinely-outward subset send/reply/react
  * ONLY — edit/delete/fetch/attach stay admin-only and are not part of it.)
  */
 export const STANDARD_FLOOR_CAPABILITIES = [
@@ -86,11 +88,11 @@ export const STANDARD_FLOOR_CAPABILITIES = [
     "orch:skill",
     "orch:message",
 ];
-// ── The autonomy config schema (§3.3 knob surface, §6.4 defaulting) ──────────
+// ── The autonomy config schema (knob surface + defaulting) ──────────────────
 /** Per-agent autonomy posture. `accept-reversible` is the `standard` mode. */
 export const AUTONOMY_PROFILE_NAMES = ["assistant", "standard", "unattended", "max"];
 /**
- * The origin-channel message posture (§3.5/§8.4). `standard` resolves
+ * The origin-channel message posture. `standard` resolves
  * `channels: ["origin"]` (own channel only) under an hourly quota; any NEW
  * target is an explicit per-target grant (`autoApprovable:false`).
  */
@@ -101,21 +103,21 @@ export const AutonomyMessageConfigSchema = z.strictObject({
     maxPerHour: z.number().int().positive().default(20),
 });
 /**
- * `AutonomyConfigSchema` — the §3.3 knob surface. Every field carries a
- * `.default()` (§6.4); a fully-omitted block parses to the `standard` posture
- * (PROFILE-01 + MIG-01). `strictObject` is the typo guard.
+ * `AutonomyConfigSchema` — the autonomy knob surface. Every field carries a
+ * `.default()`; a fully-omitted block parses to the `standard` posture.
+ * `strictObject` is the typo guard.
  *
  * Most operators set ONLY `profile:` (or nothing → `standard`). The fields
  * below are the full resolved surface a profile expands to; any explicit field
  * OVERRIDES the profile (progressive disclosure).
  */
 export const AutonomyConfigSchema = z.strictObject({
-    /** §3.8 posture: assistant | standard (default) | unattended | max. */
+    /** Posture: assistant | standard (default) | unattended | max. */
     profile: z.enum(AUTONOMY_PROFILE_NAMES).default("standard"),
     /**
-     * §23.10 lean-coordinator role (COORD-01; full doc + expansion in
-     * `schema-agent-autonomy-role.ts`). `worker` (default) ⇒ byte-identical to
-     * today; `coordinator` NARROWS the resolved tool surface only (never a cap).
+     * Lean-coordinator role (full doc + expansion in
+     * `schema-agent-autonomy-role.ts`). `worker` (default) ⇒ byte-identical to a
+     * role-less config; `coordinator` NARROWS the resolved tool surface only (never a cap).
      * Operator-set; the agent CANNOT self-raise (like `mode`).
      */
     role: z.enum(AUTONOMY_ROLES).default("worker"),
@@ -124,78 +126,80 @@ export const AutonomyConfigSchema = z.strictObject({
      * resolver fills it from the profile when omitted (`standard` → true,
      * `assistant` → false). An explicit value overrides the profile.
      *
-     * IN-01 SEMANTICS (210-GAP, design option (a)): a per-surface toggle
+     * TOGGLE SEMANTICS: a per-surface toggle
      * (`web`/`analyze`/`write`/`browse`) is the ENABLE SIGNAL FOR THAT SURFACE and
      * OVERRIDES `enabled`. So `{ profile: "assistant", web: true }` resolves
      * `enabled:false` but STILL grants `orch:web` — progressive disclosure: an
      * operator who turned one surface ON gets that one cap, not silence. `enabled`
      * is the profile-level autonomy posture; it does NOT zero an explicitly-toggled
-     * surface (that would surprise an operator who set `web:true`). The §22.3 floor
-     * still bounds every granted cap regardless. Pinned by `schema-agent-autonomy`
-     * resolver tests (the toggle-overrides-enabled case).
+     * surface (that would surprise an operator who set `web:true`). The structural
+     * floor still bounds every granted cap regardless. Pinned by
+     * `schema-agent-autonomy` resolver tests (the toggle-overrides-enabled case).
      */
     enabled: z.boolean().optional(),
     /**
      * Explicit base capability list. Optional — the resolver expands the profile
      * into the floor-contained set when omitted. An explicit list overrides the
-     * profile's base set (still subject to the M1 clamp + the §22.3 floor).
+     * profile's base set (still subject to the profile clamp + the structural floor).
      */
     capabilities: z.array(z.enum(AGENT_CAPABILITIES)).optional(),
-    /** §22 autonomy mode (operator-set; the agent CANNOT self-raise). */
+    /** Autonomy mode (operator-set; the agent CANNOT self-raise). */
     mode: z.enum(AUTONOMY_MODES).optional(),
-    /** Per-root-run hard $ ceiling across the whole spawn tree (§8.7). */
+    /** Per-root-run hard $ ceiling across the whole spawn tree. */
     aggregateBudgetUsd: z.number().positive().optional(),
-    /** Tree-wide concurrent-self-agent ceiling (§8). */
+    /** Tree-wide concurrent-self-agent ceiling. */
     maxConcurrentSelfAgents: z.number().int().positive().optional(),
     /** Self-spawn rate limit per minute (concurrency ≠ rate). */
     maxSelfSpawnRatePerMin: z.number().int().positive().optional(),
-    /** Max agent-authored cron jobs (§8). */
+    /** Max agent-authored cron jobs. */
     cronSelfMax: z.number().int().positive().optional(),
     /**
-     * §8.8/§22.4 denial-limit circuit breaker (BREAK-01). The number of
+     * Denial-limit circuit breaker. The number of
      * CONSECUTIVE structural-floor blocks within one root run after which the run
      * aborts + escalates rather than retry-looping the budget away. A positive int
      * (a 0 would disable the breaker — `z.number().int().positive()` rejects it so
-     * a malformed config fails CLOSED, T-217-01). Default 5; inert until a deny
+     * a malformed config fails CLOSED). Default 5; inert until a deny
      * actually happens, so a default install is byte-identical.
      */
     denialBreakerN: z.number().int().positive().default(5),
     /**
-     * §22.5 fail-closed evict posture (EVICT-02). When the per-run autonomy mode
+     * Fail-closed evict posture. When the per-run autonomy mode
      * cannot be resolved (an unreachable/forged policy source), resolve to the
      * `default` (SAFE) mode, never a broader profile. Default true — which IS the
      * already-safe behavior, so a default install is byte-identical.
      */
     evictOnPolicyUnreachable: z.boolean().default(true),
     /**
-     * Capability-lease posture (§4.2 / LEASE-02). The nested `lease` sub-block —
+     * Capability-lease posture. The nested `lease` sub-block —
      * `autonomy.lease.{ leaseMaxTtlMin }` — bounds how long a renewable lease can
      * live. `leaseMaxTtlMin` is the renewal CEILING in MINUTES (a positive int);
-     * the LeaseManager (211-01) clamps each renew to a `maxExpiresAt` derived from
+     * the LeaseManager clamps each renew to a `maxExpiresAt` derived from
      * it, so revoke actually STOPS renewal (no unbounded re-lease). Omitted → the
      * profile default (60). Modeled as a nested object (the `message:` sub-block
-     * precedent above) per REQUIREMENTS.md `autonomy.lease.{...}`.
+     * precedent above).
      */
     lease: z.object({ leaseMaxTtlMin: z.number().int().positive().optional() }).optional(),
-    /** Origin-channel outward-message posture (§3.5/§8.4). */
+    /** Origin-channel outward-message posture. */
     message: AutonomyMessageConfigSchema.default(() => AutonomyMessageConfigSchema.parse({})),
-    // 213 nested BOUNDS sub-blocks (per-limb docs in schema-agent-autonomy-bounds.ts;
+    // Nested BOUNDS sub-blocks (per-limb docs in schema-agent-autonomy-bounds.ts;
     // flat aggregateBudgetUsd/maxConcurrentSelfAgents are aliases the resolver folds in).
-    budget: AutonomyBudgetConfigSchema.default(() => AutonomyBudgetConfigSchema.parse({})), // $/token/wall-clock (BUDGET-01/02)
-    rate: AutonomyRateConfigSchema.default(() => AutonomyRateConfigSchema.parse({})), // per-root/socket/churn (RATE-01)
-    spawn: AutonomySpawnConfigSchema.default(() => AutonomySpawnConfigSchema.parse({})), // concurrent/depth/fanout (CEIL-01)
-    outward: AutonomyOutwardConfigSchema.default(() => AutonomyOutwardConfigSchema.parse({})), // origin/grants/volume (QUOTA-01/02)
-    // Phase 216 DURABILITY sub-block (DUR-01..04 / HB-01). Default-off
+    budget: AutonomyBudgetConfigSchema.default(() => AutonomyBudgetConfigSchema.parse({})), // $/token/wall-clock
+    rate: AutonomyRateConfigSchema.default(() => AutonomyRateConfigSchema.parse({})), // per-root/socket/churn
+    spawn: AutonomySpawnConfigSchema.default(() => AutonomySpawnConfigSchema.parse({})), // concurrent/depth/fanout
+    outward: AutonomyOutwardConfigSchema.default(() => AutonomyOutwardConfigSchema.parse({})), // origin/grants/volume
+    // DURABILITY sub-block. Default-off
     // (`{ enabled:false, ... }` on a fully-omitted block) — a default install
     // constructs no durable stores / boot recovery / watchdog (byte-identical).
     // `.parse({})` materializes the per-field defaults (mirrors the sibling
     // budget/rate/spawn/outward blocks above; a bare `.default({})` does not
     // typecheck because every nested field is itself `.default()`-ed).
     durability: DurabilityConfigSchema.default(() => DurabilityConfigSchema.parse({})),
-    // ── per-surface ergonomic toggles → matching orch:* cap (§3.3 "one cap model") ──
+    // MCP inbound-allowlist sub-block (default-off): the orch:mcp grant + allowlist.
+    mcp: AutonomyMcpConfigSchema.default(() => AutonomyMcpConfigSchema.parse({})),
+    // ── per-surface ergonomic toggles → matching orch:* cap ("one cap model") ──
     /** orch:web — untrusted external content (Rule-of-Two leg A). */
     web: z.boolean().optional(),
-    /** orch:analyze — cost-bearing media analysis (behind the §8.7 budget). */
+    /** orch:analyze — cost-bearing media analysis (behind the aggregate budget). */
     analyze: z.boolean().optional(),
     /** orch:write — workspace mutation (jailed + reversible-ish). */
     write: z.boolean().optional(),
@@ -209,16 +213,18 @@ export const AutonomyConfigSchema = z.strictObject({
 // The nested-bounds schemas/types/helper live in `schema-agent-autonomy-bounds.ts`
 // (imported above for the schema fields + resolver) and are re-exported by the
 // `schema-agent/index.ts` barrel, so consumers reach them via `@comis/core`.
-/** A per-surface toggle field paired with the orch:* cap it maps to (§3.3). */
+/** A per-surface toggle field paired with the orch:* cap it maps to. */
 const SURFACE_TOGGLE_TO_CAP = {
     web: "orch:web",
     analyze: "orch:analyze",
     write: "orch:write",
     browse: "orch:browse",
+    // orch:mcp — MCP tools in the jailed SDK; grant gated on autonomy.mcp.enabled.
+    mcp: "orch:mcp",
 };
 /**
- * The §3.8 `standard` guard set — ON under every autonomy-bearing profile
- * (§8.7). The nested `budget`/`rate`/`spawn`/`outward` blocks derive their
+ * The `standard` guard set — ON under every autonomy-bearing profile.
+ * The nested `budget`/`rate`/`spawn`/`outward` blocks derive their
  * concrete defaults from the SCHEMA (`.parse({})`) so the profile table and the
  * Zod `.default()`s stay in single-source-of-truth lockstep — adding/retuning a
  * limb is a one-edit change in the schema above.
@@ -228,28 +234,28 @@ const STANDARD_GUARDS = {
     maxConcurrentSelfAgents: 4,
     maxSelfSpawnRatePerMin: 30,
     cronSelfMax: 8,
-    // 217 never-hang scalars (flow into all four profiles). Default-safe: the
+    // Never-hang scalars (flow into all four profiles). Default-safe: the
     // breaker is inert until a deny happens; evict fail-closed defaults to the
     // already-safe `true`. Kept in SSOT lockstep with the schema `.default()`s.
     denialBreakerN: 5,
     evictOnPolicyUnreachable: true,
-    // LEASE-02: a 1-hour renewal ceiling (Vault-style). Per-renew ttl is shorter
+    // A 1-hour renewal ceiling (Vault-style). Per-renew ttl is shorter
     // (e.g. 15 min) and renewable UP TO this max — so revoke stops renewal.
     leaseMaxTtlMin: 60,
-    // 213 nested limbs (BUDGET-01/02, RATE-01, CEIL-01, QUOTA-01/02).
+    // Nested bounds limbs (budget/rate/spawn/outward).
     ...STANDARD_AUTONOMY_BOUNDS,
 };
 const STANDARD_MESSAGE = { channels: ["origin"], maxPerHour: 20 };
 /**
- * The resolved cap/guard sets for the four named profiles (v8 §3.8).
+ * The resolved cap/guard sets for the four named profiles.
  *
  * - `assistant`: enabled off, zero orchestration surfaces.
  * - `standard` (default): enabled on, the nine floor-contained caps (incl.
  *   origin-channel `orch:message`), guards ON, origin-only message.
  * - `unattended`: cap set standard-equivalent (no over-grant) + a notice that
  *   the never-hang MODE behaviors (deny+escalate, denial breaker, evict) are
- *   ACTIVE as of Phase 217 (UNATT/BREAK/EVICT). `max`: CLAMPED to `standard`'s
- *   cap set in M1 + a clamp notice (sandbox auto-allow is M3 — no larger cap set).
+ *   ACTIVE. `max`: CLAMPED to `standard`'s cap set + a clamp notice
+ *   (sandbox auto-allow is not implemented — no larger cap set).
  */
 export const AUTONOMY_PROFILES = {
     assistant: {
@@ -268,7 +274,7 @@ export const AUTONOMY_PROFILES = {
     },
     unattended: {
         enabled: true,
-        capabilities: STANDARD_FLOOR_CAPABILITIES, // cap set standard-equivalent (no over-grant); mode behaviors active (217)
+        capabilities: STANDARD_FLOOR_CAPABILITIES, // cap set standard-equivalent (no over-grant); mode behaviors active
         mode: "unattended",
         ...STANDARD_GUARDS,
         message: STANDARD_MESSAGE,
@@ -276,7 +282,7 @@ export const AUTONOMY_PROFILES = {
     },
     max: {
         enabled: true,
-        capabilities: STANDARD_FLOOR_CAPABILITIES, // CLAMP — no over-grant in M1
+        capabilities: STANDARD_FLOOR_CAPABILITIES, // CLAMP — no over-grant beyond standard's set
         mode: "max",
         ...STANDARD_GUARDS,
         message: STANDARD_MESSAGE,
@@ -287,7 +293,7 @@ export const AUTONOMY_PROFILES = {
  * Expand a (possibly partial) autonomy config into the full resolved posture.
  *
  * PURE — a function of `cfg` only (no env/clock/fs, AGENTS §2.2). Algorithm:
- *  1. base = the §3.8 profile entry for `cfg.profile ?? "standard"` (the
+ *  1. base = the profile entry for `cfg.profile ?? "standard"` (the
  *     `unattended`/`max` entries are already CLAMPED to `standard`'s caps).
  *  2. start from the profile's base caps; if `cfg.capabilities` is given,
  *     use it as the base instead (explicit override).
@@ -295,7 +301,7 @@ export const AUTONOMY_PROFILES = {
  *     (`web`→`orch:web`, …), deduped.
  *  4. apply explicit scalar overrides (any defined field wins — progressive
  *     disclosure).
- *  5. attach the `autoApprovable` bit per cap (the §22.3 floor caps are
+ *  5. attach the `autoApprovable` bit per cap (the structural-floor caps are
  *     always-escalate, even when opted in).
  *
  * @param cfg the per-agent autonomy block (omitted → `standard`, zero-config).
@@ -319,6 +325,7 @@ export function resolveAutonomy(cfg) {
         [cfg?.analyze, SURFACE_TOGGLE_TO_CAP.analyze],
         [cfg?.write, SURFACE_TOGGLE_TO_CAP.write],
         [cfg?.browse, SURFACE_TOGGLE_TO_CAP.browse],
+        [cfg?.mcp?.enabled, SURFACE_TOGGLE_TO_CAP.mcp], // orch:mcp gated on autonomy.mcp.enabled
     ];
     for (const [enabled, cap] of surfaceToggles) {
         if (enabled === true)
@@ -339,7 +346,7 @@ export function resolveAutonomy(cfg) {
     // maxConcurrentSelfAgents resolved fields below mirror their nested twins (one
     // resolved source at the meter/semaphore).
     const bounds = resolveAutonomyBounds(cfg, base);
-    // COORD-01: the role NARROWS the tool surface only (the cap set above is
+    // The role NARROWS the tool surface only (the cap set above is
     // untouched); `worker` omits `coordinatorToolGroups` (see *-role.ts).
     const role = cfg?.role ?? "worker";
     const coordinatorToolGroups = resolveCoordinatorToolGroups(role);
@@ -368,10 +375,10 @@ export function resolveAutonomy(cfg) {
     };
     return resolved;
 }
-// ── The honest, legible degrade path (PROFILE-03) ────────────────────────────
+// ── The honest, legible degrade path ─────────────────────────────────────────
 //
-// Split into the sibling `schema-agent-autonomy-degrade.ts` leaf (PROFILE-03 is
-// a separate concern from PROFILE-01 resolution; keeps both files under the
+// Split into the sibling `schema-agent-autonomy-degrade.ts` leaf (degrade is
+// a separate concern from profile resolution; keeps both files under the
 // schema-agent file-size cap). It imports `resolveAutonomy`/`AutonomyConfigSchema`
 // from THIS leaf (one-directional: degrade → autonomy), and is re-exported
 // alongside this leaf by the `schema-agent/index.ts` barrel — so consumers keep

package/node_modules/@comis/core/dist/config/schema-agent/schema-agent-context.d.ts

@@ -8,7 +8,7 @@
  *     escalation; post-batch continuation).
  *   - Context guard: ContextPruningConfig, SourceGateConfig.
  *
- * Imports `CircuitBreakerConfigSchema` from the model leaf (the R1 summarizer
+ * Imports `CircuitBreakerConfigSchema` from the model leaf (the summarizer
  * breaker REUSES it — DRY, mirrors the embedding-resilience breaker) but nothing
  * else from sibling leaves; the dependency graph stays one-directional and
  * acyclic (model has no reverse import of context). The top-level

package/node_modules/@comis/core/dist/config/schema-agent/schema-agent-context.js

@@ -9,7 +9,7 @@
  *     escalation; post-batch continuation).
  *   - Context guard: ContextPruningConfig, SourceGateConfig.
  *
- * Imports `CircuitBreakerConfigSchema` from the model leaf (the R1 summarizer
+ * Imports `CircuitBreakerConfigSchema` from the model leaf (the summarizer
  * breaker REUSES it — DRY, mirrors the embedding-resilience breaker) but nothing
  * else from sibling leaves; the dependency graph stays one-directional and
  * acyclic (model has no reverse import of context). The top-level
@@ -158,7 +158,7 @@ export const ContextEngineConfigSchema = z.strictObject({
     // --- Core ---
     /** Master toggle for the context engine pipeline (enabled by default). */
     enabled: z.boolean().default(true),
-    /** Operating mode: "dag" (= the v2.12 LCD engine) is the DEFAULT
+    /** Operating mode: "dag" (= the LCD engine) is the DEFAULT
      *  working-context engine — it keeps a lossless verbatim history (full faithful
      *  reconstruction via the parts codec + a verbatim fresh tail of the last N
      *  steps + transcript repair, multi-tier zoomable compaction, and the in-session
@@ -174,7 +174,8 @@ export const ContextEngineConfigSchema = z.strictObject({
     thinkingKeepTurns: z.number().int().min(1).max(50).default(10),
     /** Idle gap (ms) above which signed thinking state is treated as drifted and
      *  scrubbed pre-send to avoid provider replay-rejection. Default 30 min —
-     *  below long-TTL caches and below the 74-min production incident gap. Also
+     *  below long-TTL caches and below the 74-min idle gap observed to trigger
+     *  replay rejection in production. Also
      *  triggers on model id / provider / api change (those checks are
      *  unconditional regardless of this idle threshold). Range: 1 min .. 24 h. */
     replayDriftIdleMs: z.number().int().min(60_000).max(24 * 60 * 60_000).default(30 * 60_000),
@@ -202,7 +203,7 @@ export const ContextEngineConfigSchema = z.strictObject({
     /** Turns to wait before re-triggering LLM compaction after a successful compaction. */
     compactionCooldownTurns: z.number().int().min(1).max(50).default(5),
     /** Number of user-turn cycles at the head of conversation to preserve during
-     *  LLM compaction for cache prefix stability. 0 = old behavior
+     *  LLM compaction for cache prefix stability. 0 disables the anchor
      *  (summarize everything, keep tail only). */
     compactionPrefixAnchorTurns: z.number().int().min(0).max(10).default(2),
     /** Output escalation configuration: auto-retry with higher output budget on max_tokens truncation. */
@@ -214,14 +215,14 @@ export const ContextEngineConfigSchema = z.strictObject({
     }).default({ enabled: true, escalatedMaxTokens: 32_768 }),
     // --- DAG mode ---
     /** Number of most recent STEPS (assistant + tool round-trips, NOT user-turns)
-     *  always included verbatim in the dag/LCD context (A1). A step = one assistant
+     *  always included verbatim in the dag/LCD context. A step = one assistant
      *  message plus the tool results it triggered; the last N steps are kept as the
      *  ORIGINAL structured blocks (never reconstructed-from-text) and are never
-     *  evicted. Default 8 is a safe production floor; the tuned value comes from
-     *  real-LLM measurement in a later phase. */
+     *  evicted. Default 8 is a safe production floor pending a tuned value from
+     *  real-LLM measurement. */
     freshTailTurns: z.number().int().min(1).max(50).default(8),
     /** Context utilization fraction that triggers DAG leaf summarization (0.1 to
-     *  0.95). LIVE in dag/LCD mode (Phase 129): at the end of a turn, when total
+     *  0.95). LIVE in dag/LCD mode: at the end of a turn, when total
      *  context tokens / model window exceeds this fraction, the oldest out-of-tail
      *  chunk is summarized into a leaf summary + the context is assembled under the
      *  token budget. Inert in pipeline mode. */
@@ -256,16 +257,14 @@ export const ContextEngineConfigSchema = z.strictObject({
     summaryModel: z.string().optional(),
     /** Optional provider override for DAG summary generation. */
     summaryProvider: z.string().optional(),
-    // --- DAG robustness / spend / deferred compaction (Phase 132 C4 + R1) ---
+    // --- DAG robustness / spend / deferred compaction ---
     /** When true (default), the afterTurn leaf + condense passes are deferred onto
-     *  the per-conversation serializer and never block the turn's afterTurn hook
-     *  (C4). When false, they run inline (the pre-132 behaviour) for deterministic
-     *  tests. */
+     *  the per-conversation serializer and never block the turn's afterTurn hook.
+     *  When false, they run inline for deterministic tests. */
     deferCompaction: z.boolean().default(true),
-    /** Per-tenant rolling-window ceilings on summarizer LLM input+output tokens
-     *  (R1). When a ceiling is exceeded the summarizer seam is bypassed →
-     *  truncation-only assembly (no LLM call), NOT a turn failure. Consumed by
-     *  plans 132-05/132-06. */
+    /** Per-tenant rolling-window ceilings on summarizer LLM input+output tokens.
+     *  When a ceiling is exceeded the summarizer seam is bypassed →
+     *  truncation-only assembly (no LLM call), NOT a turn failure. */
     summarizerSpend: z.strictObject({
         /** Rolling-hour per-tenant summarizer token ceiling. 0 disables the hourly
          *  cap. Default 500_000 — a few hundred-thousand tokens/hour, well below the
@@ -280,7 +279,7 @@ export const ContextEngineConfigSchema = z.strictObject({
         // in this file. Zod uses a `.default(value)` verbatim and does NOT re-parse it
         // through the inner field defaults, so `{}` would leave the ceilings undefined.
     }).default({ maxTokensPerTenantPerHour: 500_000, maxTokensPerTenantPerDay: 5_000_000 }),
-    /** Circuit breaker for the per-tenant summarizer seam (R1). N consecutive
+    /** Circuit breaker for the per-tenant summarizer seam. N consecutive
      *  summarizer failures open the breaker → truncation-only assembly until
      *  resetTimeoutMs elapses. Mirrors the embedding-resilience breaker
      *  (setup-memory.ts); REUSES CircuitBreakerConfigSchema (failureThreshold /
@@ -292,12 +291,11 @@ export const ContextEngineConfigSchema = z.strictObject({
         resetTimeoutMs: 60_000,
         halfOpenTimeoutMs: 30_000,
     }),
-    // --- Post-batch continuation (replaces SEP nudge enforcement) ---
+    // --- Post-batch continuation ---
     /** Post-batch continuation handler: when the LLM emits an empty final
      *  turn after a successful tool batch, fire a directive followUp with
-     *  multi-shot retry. Replaces the legacy SEP one-shot completeness nudge
-     *  (whose enforcement role was superseded; SEP plan extraction + step
-     *  counting remain intact for observability). */
+     *  multi-shot retry. This is the completeness-enforcement path — SEP plan
+     *  extraction + step counting are observability-only and do not enforce. */
     postBatchContinuation: z.strictObject({
         /** Master toggle. When false, handler returns
          *  {recovered: false, outcome: "disabled"} without calling followUp. */
@@ -306,8 +304,8 @@ export const ContextEngineConfigSchema = z.strictObject({
          *  synthesis. 0 = disabled. */
         maxRetries: z.number().int().min(0).max(5).default(2),
     }).default({ enabled: true, maxRetries: 2 }),
-    // --- Phase 152: Capacity + Prompt-Security (C1, C2/S1, C4/S4) ---
-    /** C1: Effective-context cap by capability class. For small/nano models with a large
+    // --- Capacity + Prompt-Security ---
+    /** Effective-context cap by capability class. For small/nano models with a large
      *  contextWindow, caps effective context before computing H to prevent 256K overfill.
      *  frontier/mid always receive the full contextWindow. Config-driven so operators can
      *  tune per their model's measured comprehension limit. */
@@ -316,17 +314,17 @@ export const ContextEngineConfigSchema = z.strictObject({
         effectiveContextCapSmall: z.number().int().nonnegative().default(32_000),
         /** Max effective context tokens for capabilityClass="nano". 0 = no cap. */
         effectiveContextCapNano: z.number().int().nonnegative().default(16_000),
-        /** Fix 3 / Phase 166 CWF-02: minimum visible output tokens guaranteed on every LLM
+        /** Minimum visible output tokens guaranteed on every LLM
          *  dispatch — the non-reasoning floor (answer/tool-call body after the thinking block).
          *  Runtime override for the compile-time constant MIN_VISIBLE_OUTPUT_TOKENS=768.
          *  Values below 256 are rejected by the schema (too small to be useful).
          *  Used by: lcd-assembler.ts headroom check + config-resolver.ts max_tokens clamp.
-         *  Design ref: design/small-model-context-fidelity.md §4 Fix 3. */
+         *  Design ref: design/small-model-context-fidelity.md. */
         minVisibleOutputTokens: z.number().int().min(256).max(8_192).default(768),
         // Fully-populated default object (NOT `.default({})`) — see summarizerSpend pattern above.
         // Zod does NOT re-parse inner field defaults from `.default({})`.
     }).default({ effectiveContextCapSmall: 32_000, effectiveContextCapNano: 16_000, minVisibleOutputTokens: 768 }),
-    /** C4: Capability-routed compaction. For small/nano capabilityClass, prefer eviction
+    /** Capability-routed compaction. For small/nano capabilityClass, prefer eviction
      *  or a configured stronger summarizer over same-model LLM summarization (which degrades). */
     compaction: z.strictObject({
         /** When true (default): small/nano → eviction-first (or strongerSummarizerModel if set).
@@ -335,14 +333,13 @@ export const ContextEngineConfigSchema = z.strictObject({
         /** Optional "provider:modelId" string for a stronger summarizer for small/nano.
          *  Empty string (default) = pure eviction/deterministic fallback. */
         strongerSummarizerModel: z.string().default(""),
-        /** SUM-03: ordered list of fallback "provider:modelId" strings for the summarizer
+        /** Ordered list of fallback "provider:modelId" strings for the summarizer
          *  seam. When the primary summarizer throws, each entry is tried in sequence.
          *  The per-tenant breaker wraps the OUTER seam and records a failure only when
-         *  ALL providers in the list are exhausted. Default [] = zero behavior change
-         *  for existing deployments. */
+         *  ALL providers in the list are exhausted. Default [] = no fallback attempts. */
         summarizerFallbackProviders: z.array(z.string()).default([]),
     }).default({ preferEvictionByCapability: true, strongerSummarizerModel: "", summarizerFallbackProviders: [] }),
-    /** C2/S1: Compact-secure prompt for small/nano. Retains safety core + sender-trust +
+    /** Compact-secure prompt for small/nano. Retains safety core + sender-trust +
      *  config-secret; drops interactive-only sections. NEVER uses buildSafetySection(true). */
     compactPrompt: z.strictObject({
         /** Enable compact-secure promptMode for small/nano capabilityClass. Default: true. */
@@ -350,7 +347,7 @@ export const ContextEngineConfigSchema = z.strictObject({
         /** Soft token target for the compact prompt (chars/3.5). Default 3000 tokens ≈ 10500 chars. */
         targetTokens: z.number().int().min(500).max(8_000).default(3_000),
     }).default({ enabled: true, targetTokens: 3_000 }),
-    // ── Phase 172: LCD→LTM distillation (DIST-01/04/05) ───────────────────
+    // ── LCD→LTM distillation ───────────────────────────────────────────────
     // Fully-populated default object (NOT `.default({})`) so an empty config
     // resolves to the real defaults — Zod uses .default(value) verbatim and does
     // NOT re-parse it through the inner field defaults (mirrors compaction above).
@@ -369,20 +366,20 @@ export const ContextEngineConfigSchema = z.strictObject({
             // Fully-populated default object — see note above about NOT using .default({}).
         }).default({ enabled: false, minDepth: 1, dedupCosineThreshold: 0.92 }),
     }).default({ distillFromLcd: { enabled: false, minDepth: 1, dedupCosineThreshold: 0.92 } }),
-    // ── Phase 173: Unified-retrieval relevance policy (RETR-03) ────────────
-    /** RETR-03: the relevance-first vs recency-first assembly policy gate. When
-     *  `relevance-first` is active the margin arbiter (RETR-02) allocates the
+    // ── Unified-retrieval relevance policy ─────────────────────────────────
+    /** The relevance-first vs recency-first assembly policy gate. When
+     *  `relevance-first` is active the margin arbiter allocates the
      *  discretionary history pool across tiers by fused rank; otherwise the
      *  existing recency-first eviction runs verbatim (frontier/mid byte-identical).
      *
      *  Precedence: explicit > capability-default > off. The capability default is
      *  resolved in scaffold-defaults.ts — small/nano on a NON-caching model
      *  (supportsPromptCache=false) default relevance-first; frontier/mid + caching
-     *  models default recency-first (byte-identical, LOCKED #2). The small/nano
-     *  default-on flip is MEASUREMENT-GATED (the Phase-171 harness) — this flag
+     *  models default recency-first (byte-identical). The small/nano
+     *  default-on flip is MEASUREMENT-GATED — this flag
      *  ships the mechanism; the live default flip is an operator step.
      *
-     *  CRITICAL (Pitfall 1 — the schema re-parse trap): the WHOLE block is
+     *  CRITICAL (the schema re-parse trap): the WHOLE block is
      *  `.optional()` and `firstByDefault` is an OPTIONAL boolean with NO `.default()`.
      *  An omitted field stays `undefined` (NOT `false`) so the resolver's
      *  `config.contextEngine?.relevance?.firstByDefault ?? (capability gate)` survives.

package/node_modules/@comis/core/dist/config/schema-agent/schema-agent-model.js

@@ -116,13 +116,14 @@ export const PromptTimeoutConfigSchema = z.strictObject({
     /** Wall-clock timeout for retry prompt calls in milliseconds. Default: 60s. */
     retryPromptTimeoutMs: z.number().int().positive().default(60_000),
     /**
-     * Makespan ceiling multiplier (LAT-02, R-1 non-optional): a
+     * Makespan ceiling multiplier: a
      * streaming-but-runaway generation is aborted at
      * promptTimeoutMs x stallCeilingMultiplier even though stream/tool
-     * activity keeps resetting the stall budget (gemma4 16x/810s receipt,
+     * activity keeps resetting the stall budget (gemma4 was measured
+     * streaming for 16x the timeout, 810s -- see
      * scripts/bench-small-model/README.md). Default: 10.
      *
-     * Bounded 1..100 (177-REVIEW WR-02): a value below 1 INVERTS the
+     * Bounded 1..100: a value below 1 INVERTS the
      * semantics (the makespan fires before the stall budget can ever elapse,
      * so every timeout -- including genuine provider hangs -- is classified
      * makespan and suppressed from providerHealth); a huge value overflows
@@ -162,6 +163,6 @@ export const OperationModelsSchema = z.strictObject({
     compaction: OperationModelEntrySchema.optional(),
     taskExtraction: OperationModelEntrySchema.optional(),
     condensation: OperationModelEntrySchema.optional(),
-    verification: OperationModelEntrySchema.optional(), // R4: pre-delivery critic (Phase 154)
-    planning: OperationModelEntrySchema.optional(), // R5: pre-execution planner (Phase 154)
+    verification: OperationModelEntrySchema.optional(), // pre-delivery critic
+    planning: OperationModelEntrySchema.optional(), // pre-execution planner
 }).default({});