comisai 1.0.44 → 1.0.46

package/node_modules/@comis/core/dist/logging/fingerprint.js

@@ -1,13 +1,13 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
- * Shared stable digest util: a 12-hex sha256 prefix of a string (D4).
+ * Shared stable digest util: a 12-hex sha256 prefix of a string.
  *
  * Canonical (and ONLY) home is @comis/core — import it directly from here
  * everywhere, including @comis/agent (which is forbidden from depending on
  * @comis/infra). It is NOT re-exported by @comis/infra; do not write
- * `import { fingerprint } from "@comis/infra"`. (Phase 155's withDedup, in
- * @comis/infra, will consume it from @comis/core like every other caller;
- * re-export from infra only if a future consumer genuinely needs it.)
+ * `import { fingerprint } from "@comis/infra"`. (withDedup, in this same
+ * directory, consumes it like every other caller; re-export from infra
+ * only if a future consumer genuinely needs it.)
  * NON-security digest (a dedup/correlation key — collision-resistance is not
  * required; never hash a secret that has not already been redacted/bounded
  * upstream).

package/node_modules/@comis/core/dist/logging/log-fields.d.ts

@@ -8,7 +8,7 @@
  * The Pino-backed runtime implementation lives in @comis/infra and is
  * assignable to ComisLogger (proven by
  * `expectTypeOf<PinoComisLogger>().toExtend<ComisLogger>()` in
- * `packages/infra/src/logging/__tests__/logger-contract.type-check.ts`).
+ * `packages/infra/src/logging/__tests__/logger-contract.test.ts`).
  * Pino's runtime auto-redaction (apiKey, token, password, etc., 3 levels
  * deep) is a runtime feature of the Pino impl; this structural contract
  * does not (and cannot) enforce redaction.
@@ -43,8 +43,8 @@ export declare function isValidLogLevel(level: string): boolean;
  * - `internal`     -- Unexpected internal errors (assertion failures, logic bugs)
  * - `platform`     -- Chat platform API errors (Discord, Telegram, Slack rate limits)
  * - `sandbox_unavailable` -- No materializable OS sandbox jail (Linux bwrap) for a
- *                     fail-closed dynamic step (v2.26 Verified Learning skill
- *                     validation, SKILL-07). HONEST DEGRADATION, NOT a fault: the
+ *                     fail-closed dynamic step (verified-learning skill
+ *                     validation). HONEST DEGRADATION, NOT a fault: the
  *                     work degrades to a reduced-coverage path (`static-only`)
  *                     rather than running unsandboxed — `Defer ≠ Retry`, so this
  *                     must NOT inflate failure metrics or trip a breaker.

package/node_modules/@comis/core/dist/logging/log-fields.js

@@ -9,7 +9,7 @@
  * The Pino-backed runtime implementation lives in @comis/infra and is
  * assignable to ComisLogger (proven by
  * `expectTypeOf<PinoComisLogger>().toExtend<ComisLogger>()` in
- * `packages/infra/src/logging/__tests__/logger-contract.type-check.ts`).
+ * `packages/infra/src/logging/__tests__/logger-contract.test.ts`).
  * Pino's runtime auto-redaction (apiKey, token, password, etc., 3 levels
  * deep) is a runtime feature of the Pino impl; this structural contract
  * does not (and cannot) enforce redaction.

package/node_modules/@comis/core/dist/media/image-capability.d.ts

@@ -1,14 +1,14 @@
 /**
- * IMAGE_CAPABILITY — the single source of truth (CAP-01) for "which resolved
- * main provider can generate images, via which pi-ai images API, and with what
+ * IMAGE_CAPABILITY — the single source of truth for "which resolved main
+ * provider can generate images, via which pi-ai images API, and with what
  * default image model".
  *
- * TWO VOCABULARIES (do not conflate — RESEARCH Pitfall 2):
+ * TWO VOCABULARIES (do not conflate):
  *   - The config selection enum (`integrations.media.imageGeneration.provider`)
  *     is what an OPERATOR may configure: "auto" | "fal" | "openai" |
  *     "openai-codex" | "google" | "openrouter". `auto` is a selection MODE (it
- *     triggers the follow-main lookup), and `fal` is an explicit-only legacy
- *     backend routed through the relegated adapter (it has no main-provider
+ *     triggers the follow-main lookup), and `fal` is an explicit-only
+ *     backend routed through its own dedicated adapter (it has no main-provider
  *     equivalent and is NOT a follow-main capability).
  *   - The keys of THIS map are RESOLVED main-provider ids only — the concrete
  *     provider the completion path resolves an agent to. A provider absent from
@@ -22,14 +22,13 @@
  * id, providers not in the map fall through to `undefined`.
  *
  * Model-id provenance: the `openrouter` / `black-forest-labs/flux.2-pro` entry
- * is [VERIFIED] in the installed pi-ai 0.79.3 catalog and is the entry
- * exercised end-to-end in Phase 183 (PI-04). The `gpt-image-1` (openai /
- * openai-codex) and `gemini-2.5-flash-image` (google / google-vertex) default
- * ids are now [VERIFIED] too: `gpt-image-1` is a member of the installed
- * `openai@6.39.1` `ImageModel` union (images.d.ts:310) and
- * `gemini-2.5-flash-image` is a member of the installed `@google/genai@1.52.0`
- * `Model_2` union (genai.d.ts:8082) — confirmed at Phase 185 plan time when
- * their SDK transports landed. Both remain overridable by config/tool model.
+ * is verified in the installed pi-ai 0.79.3 catalog and is exercised
+ * end-to-end. The `gpt-image-1` (openai / openai-codex) and
+ * `gemini-2.5-flash-image` (google / google-vertex) default ids are verified
+ * too: `gpt-image-1` is a member of the installed `openai@6.39.1` `ImageModel`
+ * union (images.d.ts:310) and `gemini-2.5-flash-image` is a member of the
+ * installed `@google/genai@1.52.0` `Model_2` union (genai.d.ts:8082). Both
+ * remain overridable by config/tool model.
  *
  * @module
  */

package/node_modules/@comis/core/dist/media/image-capability.js

@@ -1,15 +1,15 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
- * IMAGE_CAPABILITY — the single source of truth (CAP-01) for "which resolved
- * main provider can generate images, via which pi-ai images API, and with what
+ * IMAGE_CAPABILITY — the single source of truth for "which resolved main
+ * provider can generate images, via which pi-ai images API, and with what
  * default image model".
  *
- * TWO VOCABULARIES (do not conflate — RESEARCH Pitfall 2):
+ * TWO VOCABULARIES (do not conflate):
  *   - The config selection enum (`integrations.media.imageGeneration.provider`)
  *     is what an OPERATOR may configure: "auto" | "fal" | "openai" |
  *     "openai-codex" | "google" | "openrouter". `auto` is a selection MODE (it
- *     triggers the follow-main lookup), and `fal` is an explicit-only legacy
- *     backend routed through the relegated adapter (it has no main-provider
+ *     triggers the follow-main lookup), and `fal` is an explicit-only
+ *     backend routed through its own dedicated adapter (it has no main-provider
  *     equivalent and is NOT a follow-main capability).
  *   - The keys of THIS map are RESOLVED main-provider ids only — the concrete
  *     provider the completion path resolves an agent to. A provider absent from
@@ -23,14 +23,13 @@
  * id, providers not in the map fall through to `undefined`.
  *
  * Model-id provenance: the `openrouter` / `black-forest-labs/flux.2-pro` entry
- * is [VERIFIED] in the installed pi-ai 0.79.3 catalog and is the entry
- * exercised end-to-end in Phase 183 (PI-04). The `gpt-image-1` (openai /
- * openai-codex) and `gemini-2.5-flash-image` (google / google-vertex) default
- * ids are now [VERIFIED] too: `gpt-image-1` is a member of the installed
- * `openai@6.39.1` `ImageModel` union (images.d.ts:310) and
- * `gemini-2.5-flash-image` is a member of the installed `@google/genai@1.52.0`
- * `Model_2` union (genai.d.ts:8082) — confirmed at Phase 185 plan time when
- * their SDK transports landed. Both remain overridable by config/tool model.
+ * is verified in the installed pi-ai 0.79.3 catalog and is exercised
+ * end-to-end. The `gpt-image-1` (openai / openai-codex) and
+ * `gemini-2.5-flash-image` (google / google-vertex) default ids are verified
+ * too: `gpt-image-1` is a member of the installed `openai@6.39.1` `ImageModel`
+ * union (images.d.ts:310) and `gemini-2.5-flash-image` is a member of the
+ * installed `@google/genai@1.52.0` `Model_2` union (genai.d.ts:8082). Both
+ * remain overridable by config/tool model.
  *
  * @module
  */
@@ -40,5 +39,5 @@ export const IMAGE_CAPABILITY = {
     "google": { imagesApi: "google-images", defaultModel: "gemini-2.5-flash-image" },
     "google-vertex": { imagesApi: "google-images", defaultModel: "gemini-2.5-flash-image" },
     "openrouter": { imagesApi: "openrouter-images", defaultModel: "black-forest-labs/flux.2-pro" },
-    // anthropic / amazon-bedrock / groq / mistral / deepseek / default → undefined (CAP-01).
+    // anthropic / amazon-bedrock / groq / mistral / deepseek / default → undefined (image-incapable).
 };

package/node_modules/@comis/core/dist/media/image-error.d.ts

@@ -11,7 +11,7 @@
  * `ImageErrorKind` is mapped onto exactly one of the closed log `ErrorKind`
  * values, so observability stays parseable while the domain vocabulary stays
  * expressive. Callers log `{ errorKind: IMAGE_ERR_TO_LOG[k], imageErrorKind: k,
- * hint }` per the §2.7 logging matrix.
+ * hint }` per the AGENTS.md §2.7 logging matrix.
  *
  * @module
  */

package/node_modules/@comis/core/dist/media/image-error.js

@@ -12,7 +12,7 @@
  * `ImageErrorKind` is mapped onto exactly one of the closed log `ErrorKind`
  * values, so observability stays parseable while the domain vocabulary stays
  * expressive. Callers log `{ errorKind: IMAGE_ERR_TO_LOG[k], imageErrorKind: k,
- * hint }` per the §2.7 logging matrix.
+ * hint }` per the AGENTS.md §2.7 logging matrix.
  *
  * @module
  */

package/node_modules/@comis/core/dist/media/image-models.d.ts

@@ -1,17 +1,17 @@
 /**
  * IMAGE_MODELS_BY_PROVIDER — the Comis-side per-provider image-model
- * enumeration (IN-02). The single source of truth for "which model ids are
+ * enumeration. The single source of truth for "which model ids are
  * valid for a given resolved main provider", used to validate an agent-supplied
  * `model` arg and to build the reject hint that LISTS the valid models.
  *
  * Why a Comis-side list (not pi-ai's catalog): pi-ai's `getImageModels(...)`
- * only knows the `openrouter` provider — `getImageModels("openai")` returns `[]`
- * (RESEARCH Pitfall 4). So enumeration for the native `openai`/`google` paths
+ * only knows the `openrouter` provider — `getImageModels("openai")` returns `[]`.
+ * So enumeration for the native `openai`/`google` paths
  * MUST come from here. (openrouter callers can still derive their list from
  * `getImageModels("openrouter").map(m => m.id)` at the call site; it is
  * deliberately NOT hardcoded here.)
  *
- * Model-id provenance (Phase 185 plan time):
+ * Model-id provenance:
  *   - openai: `gpt-image-1` (+ `gpt-image-1.5`/`gpt-image-2`/`dall-e-3`) are
  *     members of the installed `openai@6.39.1` `ImageModel` union
  *     (images.d.ts:310).
@@ -37,7 +37,7 @@ export declare const IMAGE_MODELS_BY_PROVIDER: Record<string, readonly string[]>
 export declare function isValidImageModel(providerId: string, model: string): boolean;
 /**
  * The valid image-model ids for `providerId`, or `[]` when the provider has no
- * Comis-side list. Used to build the IN-02 reject hint (lists the models the
+ * Comis-side list. Used to build the invalid-model reject hint (lists the models the
  * agent may choose from).
  */
 export declare function listImageModels(providerId: string): readonly string[];

package/node_modules/@comis/core/dist/media/image-models.js

@@ -1,18 +1,18 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
  * IMAGE_MODELS_BY_PROVIDER — the Comis-side per-provider image-model
- * enumeration (IN-02). The single source of truth for "which model ids are
+ * enumeration. The single source of truth for "which model ids are
  * valid for a given resolved main provider", used to validate an agent-supplied
  * `model` arg and to build the reject hint that LISTS the valid models.
  *
  * Why a Comis-side list (not pi-ai's catalog): pi-ai's `getImageModels(...)`
- * only knows the `openrouter` provider — `getImageModels("openai")` returns `[]`
- * (RESEARCH Pitfall 4). So enumeration for the native `openai`/`google` paths
+ * only knows the `openrouter` provider — `getImageModels("openai")` returns `[]`.
+ * So enumeration for the native `openai`/`google` paths
  * MUST come from here. (openrouter callers can still derive their list from
  * `getImageModels("openrouter").map(m => m.id)` at the call site; it is
  * deliberately NOT hardcoded here.)
  *
- * Model-id provenance (Phase 185 plan time):
+ * Model-id provenance:
  *   - openai: `gpt-image-1` (+ `gpt-image-1.5`/`gpt-image-2`/`dall-e-3`) are
  *     members of the installed `openai@6.39.1` `ImageModel` union
  *     (images.d.ts:310).
@@ -46,7 +46,7 @@ export function isValidImageModel(providerId, model) {
 }
 /**
  * The valid image-model ids for `providerId`, or `[]` when the provider has no
- * Comis-side list. Used to build the IN-02 reject hint (lists the models the
+ * Comis-side list. Used to build the invalid-model reject hint (lists the models the
  * agent may choose from).
  */
 export function listImageModels(providerId) {

package/node_modules/@comis/core/dist/media/index.js

@@ -5,20 +5,19 @@ export { IMAGE_MODELS_BY_PROVIDER, isValidImageModel, listImageModels, } from ".
 export { IMAGE_ERR_TO_LOG } from "./image-error.js";
 export { resolveImageProvider } from "./resolve-image-provider.js";
 export { resolveVisionPath } from "./resolve-vision-path.js";
-// Video generation (v2.24 Phase 188) — the video twins of the image symbols above.
+// Video generation — the video twins of the image symbols above.
 export { VIDEO_CAPABILITY } from "./video-capability.js";
 export { VIDEO_ERR_TO_LOG, VideoGenError } from "./video-error.js";
 export { resolveVideoProvider, isBlockedObjectKey } from "./resolve-video-provider.js";
 export { estimateVideoCostUsd, VIDEO_PRICING } from "./video-pricing.js";
-// CAP-02 per-model capability matrix — export the ACCESSORS + types only; the
-// raw VIDEO_MODELS const stays intra-core (public-export-consumers gate). Plan
-// 02 (handler) / Plan 03 (tool) import these from @comis/core (the package-root
-// barrel — there is no ./media subpath); the cross-package consumers land in
-// Wave 2, so the dead-export gate goes green at the Wave-2/phase gate.
+// Per-model video-capability matrix — export the ACCESSORS + types only; the
+// raw VIDEO_MODELS const stays intra-core (public-export-consumers gate). The
+// daemon video handler and the video-generate tool import these from
+// @comis/core (the package-root barrel — there is no ./media subpath).
 export { listVideoModelCaps, supportedModes, snapDuration } from "./video-models.js";
-// Keyless voice (v2.25 Phase 193) — the STT/TTS twins of the image/video
-// symbols above. The daemon setup-audio-provider.ts (Plan 03) is the
-// cross-package consumer of the resolvers + the capability map + the error bridge.
+// Keyless voice — the STT/TTS twins of the image/video symbols above. The
+// daemon setup-audio-provider.ts is the cross-package consumer of the
+// resolvers + the capability map + the error bridge.
 export { VOICE_KEYLESS, MAIN_PROVIDER_AUDIO } from "./voice-capability.js";
 export { STT_ERR_TO_LOG } from "./voice-error.js";
 export { resolveTranscriptionProvider } from "./resolve-transcription-provider.js";

package/node_modules/@comis/core/dist/media/resolve-image-provider.d.ts

@@ -1,6 +1,6 @@
 /**
  * resolveImageProvider — the pure, I/O-free priority resolver for
- * image-generation provider selection (RES-02/03/04).
+ * image-generation provider selection.
  *
  * Mirrors the numbered-priority structure of `resolveWorkspaceDir`
  * (packages/core/src/workspace/workspace-resolver.ts) and the logic of the
@@ -13,7 +13,7 @@
  * environment, and never imports a secret store — so it is trivially
  * unit-testable with no daemon and no network.
  *
- * Honest-capability invariant (I3 / T-183-01): an image-incapable main provider
+ * Honest-capability invariant: an image-incapable main provider
  * or absent credentials yields `{ ok: false, errorKind, hint }` — NEVER a
  * silent fall-through to a different paid provider. The `fallbackChain` is
  * consulted ONLY after the follow-main path fails, and each skip is reported.
@@ -24,16 +24,16 @@ import type { ImageErrorKind } from "./image-error.js";
 /**
  * The structural subset of the image-generation selection config this resolver
  * reads. Declared LOCALLY (not imported from the runtime
- * `ImageGenerationConfig` in schema-integrations.ts) so this Wave-1 plan stays
- * decoupled from Plan 02, which edits that schema in the same wave. The
- * resolver only needs these three fields.
+ * `ImageGenerationConfig` in schema-integrations.ts) to keep this pure
+ * resolver decoupled from the runtime config schema. The resolver only needs
+ * these three fields.
  */
 export type ImageGenSelectionConfig = {
     /** "auto" | "fal" | "openai" | "openai-codex" | "google" | "openrouter" */
     provider: string;
     /** Tool/config-supplied model that overrides the per-provider default. */
     model?: string;
-    /** Plan 02 lands the real field; this resolver reads it defensively. */
+    /** Defined by the runtime schema; this resolver reads it defensively. */
     fallbackChain?: string[];
 };
 /**

package/node_modules/@comis/core/dist/media/resolve-image-provider.js

@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
  * resolveImageProvider — the pure, I/O-free priority resolver for
- * image-generation provider selection (RES-02/03/04).
+ * image-generation provider selection.
  *
  * Mirrors the numbered-priority structure of `resolveWorkspaceDir`
  * (packages/core/src/workspace/workspace-resolver.ts) and the logic of the
@@ -14,7 +14,7 @@
  * environment, and never imports a secret store — so it is trivially
  * unit-testable with no daemon and no network.
  *
- * Honest-capability invariant (I3 / T-183-01): an image-incapable main provider
+ * Honest-capability invariant: an image-incapable main provider
  * or absent credentials yields `{ ok: false, errorKind, hint }` — NEVER a
  * silent fall-through to a different paid provider. The `fallbackChain` is
  * consulted ONLY after the follow-main path fails, and each skip is reported.
@@ -22,7 +22,7 @@
  * @module
  */
 import { IMAGE_CAPABILITY } from "./image-capability.js";
-/** The exact config knob a RES-03 hint must name (success-criterion #3). */
+/** The exact config knob every honest-unavailable hint must name. */
 const PROVIDER_KNOB = "integrations.media.imageGeneration.provider";
 function unavailableHint(mainProviderId) {
     return (`Main provider "${mainProviderId}" cannot generate images (or its ` +
@@ -34,8 +34,8 @@ export function resolveImageProvider(cfg, mainProviderId, credsAvailable, onSkip
     if (cfg.provider !== "auto") {
         const cap = IMAGE_CAPABILITY[cfg.provider];
         // `fal` (and any explicit provider with no IMAGE_CAPABILITY entry) is an
-        // explicit-only legacy backend with no follow-main capability — its
-        // relegated adapter path is wired separately in Plan 04. Here it resolves
+        // explicit-only backend with no follow-main capability — its concrete
+        // adapter path is wired separately in the daemon. Here it resolves
         // to honest-unavailable; do NOT special-case `fal` into the capability map.
         if (cap && credsAvailable(cap.imagesApi)) {
             return { ok: true, ...cap, model: cfg.model, source: "explicit" };
@@ -72,7 +72,7 @@ export function resolveImageProvider(cfg, mainProviderId, credsAvailable, onSkip
     return { ok: true, ...cap, model: cfg.model, source: "follow-main" };
 }
 /**
- * 3. Fallback chain (RES-04) — consulted ONLY after follow-main fails. Each
+ * 3. Fallback chain — consulted ONLY after follow-main fails. Each
  * entry that cannot serve (incapable or no creds) is reported via `onSkip` with
  * a reason naming it; the first usable entry wins. Returns undefined if the
  * chain is empty or exhausted (the caller emits the honest-unavailable).

package/node_modules/@comis/core/dist/media/resolve-transcription-provider.d.ts

@@ -1,23 +1,23 @@
 /**
  * resolveTranscriptionProvider — the pure, I/O-free, keyless-first priority
- * resolver for STT provider selection (RES-01/04/05, STEER-01/02, CRED-01).
+ * resolver for STT provider selection.
  *
  * Mirrors `resolveImageProvider` (resolve-image-provider.ts) exactly — a single
  * function, explicit numbered priority, a single discriminated return type, no
- * throws — with two STT-specific divergences (design §5a):
- *   1. a KEYLESS-LOCAL rung that runs BEFORE follow-main (the default; OAuth-safe
- *      and Hermes-parity), and
+ * throws — with two STT-specific divergences:
+ *   1. a KEYLESS-LOCAL rung that runs BEFORE follow-main (the default;
+ *      OAuth-safe), and
  *   2. a SECOND injected predicate (`localEngineAvailable`) the image resolver
  *      has no analog for.
  *
  * Purity is preserved by INJECTION: the daemon supplies `localEngineAvailable`
- * (FALSE until Phase 194 wires a real engine) and `audioKeyAvailable` (a closure
+ * (FALSE when no real local engine is wired) and `audioKeyAvailable` (a closure
  * over its SecretManager; FALSE for OAuth-only mains) plus an optional `onSkip`
  * reporter. This resolver never performs I/O, never reads the environment, and
  * never imports a secret store — so it is trivially unit-testable with no daemon
  * and no network.
  *
- * Honest-capability invariant (STEER-01/02): an OAuth-only main (whose
+ * Honest-capability invariant: an OAuth-only main (whose
  * MAIN_PROVIDER_AUDIO entry is `undefined`) or an absent audio key yields
  * `{ ok: false, errorKind, hint }` naming the ACTUAL remedy — NEVER a silent
  * empty-bearer call to a keyed provider. `fallbackProviders` is consulted ONLY
@@ -29,8 +29,8 @@ import type { SttErrorKind } from "./voice-error.js";
 /**
  * The structural subset of the transcription selection config this resolver
  * reads. Declared LOCALLY (not imported from the runtime `TranscriptionConfig`
- * in schema-integrations.ts) so this Wave-1 plan stays decoupled from Plan 02,
- * which edits that schema in the same wave. Note: STT uses `fallbackProviders`
+ * in schema-integrations.ts) to keep this pure resolver decoupled from the
+ * runtime config schema. Note: STT uses `fallbackProviders`
  * (the existing schema field name), where the image resolver uses `fallbackChain`.
  */
 export type SttSelectionConfig = {
@@ -38,7 +38,7 @@ export type SttSelectionConfig = {
     provider: string;
     /** Tool/config-supplied model that overrides the per-provider default. */
     model?: string;
-    /** Plan 02 lands the real field; this resolver reads it defensively. */
+    /** Defined by the runtime schema; this resolver reads it defensively. */
     fallbackProviders?: string[];
 };
 /**

package/node_modules/@comis/core/dist/media/resolve-transcription-provider.js

@@ -1,24 +1,24 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
  * resolveTranscriptionProvider — the pure, I/O-free, keyless-first priority
- * resolver for STT provider selection (RES-01/04/05, STEER-01/02, CRED-01).
+ * resolver for STT provider selection.
  *
  * Mirrors `resolveImageProvider` (resolve-image-provider.ts) exactly — a single
  * function, explicit numbered priority, a single discriminated return type, no
- * throws — with two STT-specific divergences (design §5a):
- *   1. a KEYLESS-LOCAL rung that runs BEFORE follow-main (the default; OAuth-safe
- *      and Hermes-parity), and
+ * throws — with two STT-specific divergences:
+ *   1. a KEYLESS-LOCAL rung that runs BEFORE follow-main (the default;
+ *      OAuth-safe), and
  *   2. a SECOND injected predicate (`localEngineAvailable`) the image resolver
  *      has no analog for.
  *
  * Purity is preserved by INJECTION: the daemon supplies `localEngineAvailable`
- * (FALSE until Phase 194 wires a real engine) and `audioKeyAvailable` (a closure
+ * (FALSE when no real local engine is wired) and `audioKeyAvailable` (a closure
  * over its SecretManager; FALSE for OAuth-only mains) plus an optional `onSkip`
  * reporter. This resolver never performs I/O, never reads the environment, and
  * never imports a secret store — so it is trivially unit-testable with no daemon
  * and no network.
  *
- * Honest-capability invariant (STEER-01/02): an OAuth-only main (whose
+ * Honest-capability invariant: an OAuth-only main (whose
  * MAIN_PROVIDER_AUDIO entry is `undefined`) or an absent audio key yields
  * `{ ok: false, errorKind, hint }` naming the ACTUAL remedy — NEVER a silent
  * empty-bearer call to a keyed provider. `fallbackProviders` is consulted ONLY
@@ -35,7 +35,7 @@ function keyHint(provider) {
         `${PROVIDER_KNOB}.`);
 }
 /**
- * The STEER-02 verbatim honest-unavailable hint (success-criterion #1): names
+ * The verbatim honest-unavailable hint: names
  * the local engine, the local.baseUrl escape hatch, AND the keyed-provider env
  * vars — and states explicitly that a Codex OAuth login cannot drive audio.
  */
@@ -58,13 +58,13 @@ export function resolveTranscriptionProvider(cfg, mainProviderId, localEngineAva
         }
         return { ok: false, errorKind: "auth_required", hint: keyHint(cfg.provider) };
     }
-    // 2. "auto" → KEYLESS LOCAL FIRST (the default; OAuth-safe, Hermes parity).
+    // 2. "auto" → KEYLESS LOCAL FIRST (the default; OAuth-safe).
     if (localEngineAvailable()) {
         return { ok: true, provider: "local", keyless: true, model: cfg.model, source: "keyless-local" };
     }
-    // 3. → follow the main provider's audio key ONLY IF it really exists (CRED-01).
+    // 3. → follow the main provider's audio key ONLY IF it really exists.
     //    An OAuth-only main (openai-codex) maps to `undefined` here, so it is never
-    //    queried for a key — STEER-01.
+    //    queried for a key.
     const mainAudio = MAIN_PROVIDER_AUDIO[mainProviderId];
     if (mainAudio && audioKeyAvailable(mainAudio)) {
         return { ok: true, provider: mainAudio, keyless: false, model: cfg.model, source: "follow-main-key" };
@@ -80,6 +80,6 @@ export function resolveTranscriptionProvider(cfg, mainProviderId, localEngineAva
         }
         onSkip?.(`fallback "${p}" skipped: no key`);
     }
-    // 5. honest-unavailable — names the ACTUAL remedy (STEER-02).
+    // 5. honest-unavailable — names the ACTUAL remedy.
     return { ok: false, errorKind: "no_keyless_engine", hint: noKeylessEngineHint() };
 }

package/node_modules/@comis/core/dist/media/resolve-tts-provider.d.ts

@@ -1,11 +1,11 @@
 /**
  * resolveTtsProvider — the pure, I/O-free, edge-first priority resolver for TTS
- * provider selection (RES-02/05). The TTS twin of resolveTranscriptionProvider,
+ * provider selection. The TTS twin of resolveTranscriptionProvider,
  * with the same shape (injected predicates, discriminated result, no throws) and
  * one difference: the keyless rung is `edge` (the shipped keyless Edge adapter),
  * not local-whisper.
  *
- * Priority (design §5): explicit provider wins → `auto` resolves to the
+ * Priority: explicit provider wins → `auto` resolves to the
  * always-keyless `edge` rung → (defensive) optional `piper`/main-key →
  * honest-unavailable. Unlike STT, the `auto` keyless rung (`edge`) is always
  * available — Edge needs no engine and no key — so `auto` resolves to `edge`
@@ -17,24 +17,24 @@
  * predicate) and `audioKeyAvailable` (a closure over its SecretManager) + an
  * optional `onSkip`. The resolver performs no I/O, reads no env, imports no
  * secret store — trivially unit-testable. Reuses VOICE_KEYLESS /
- * MAIN_PROVIDER_AUDIO and the SttErrorKind union (design §17 / Assumption A3 —
- * the same error vocabulary serves both STT and TTS).
+ * MAIN_PROVIDER_AUDIO and the SttErrorKind union (the same error vocabulary
+ * serves both STT and TTS).
  *
  * @module
  */
 import type { SttErrorKind } from "./voice-error.js";
 /**
  * The structural subset of the TTS selection config this resolver reads.
- * Declared LOCALLY (decoupled from Plan 02's `TtsConfig` schema, edited in the
- * same wave). Reads only the fields it needs; `voice`/`fallbackProviders` are
- * read defensively for parity with the STT resolver.
+ * Declared LOCALLY (decoupled from the runtime `TtsConfig` schema in
+ * schema-integrations.ts). Reads only the fields it needs; `voice`/
+ * `fallbackProviders` are read defensively for parity with the STT resolver.
  */
 export type TtsSelectionConfig = {
     /** "auto" | "edge" | "openai" | "elevenlabs" | "local" | "piper" */
     provider: string;
     /** Tool/config-supplied voice; carried through opaquely (not selection-relevant). */
     voice?: string;
-    /** Plan 02 lands the real field; this resolver reads it defensively. */
+    /** Defined by the runtime schema; this resolver reads it defensively. */
     fallbackProviders?: string[];
 };
 /**

package/node_modules/@comis/core/dist/media/resolve-tts-provider.js

@@ -1,12 +1,12 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
  * resolveTtsProvider — the pure, I/O-free, edge-first priority resolver for TTS
- * provider selection (RES-02/05). The TTS twin of resolveTranscriptionProvider,
+ * provider selection. The TTS twin of resolveTranscriptionProvider,
  * with the same shape (injected predicates, discriminated result, no throws) and
  * one difference: the keyless rung is `edge` (the shipped keyless Edge adapter),
  * not local-whisper.
  *
- * Priority (design §5): explicit provider wins → `auto` resolves to the
+ * Priority: explicit provider wins → `auto` resolves to the
  * always-keyless `edge` rung → (defensive) optional `piper`/main-key →
  * honest-unavailable. Unlike STT, the `auto` keyless rung (`edge`) is always
  * available — Edge needs no engine and no key — so `auto` resolves to `edge`
@@ -18,8 +18,8 @@
  * predicate) and `audioKeyAvailable` (a closure over its SecretManager) + an
  * optional `onSkip`. The resolver performs no I/O, reads no env, imports no
  * secret store — trivially unit-testable. Reuses VOICE_KEYLESS /
- * MAIN_PROVIDER_AUDIO and the SttErrorKind union (design §17 / Assumption A3 —
- * the same error vocabulary serves both STT and TTS).
+ * MAIN_PROVIDER_AUDIO and the SttErrorKind union (the same error vocabulary
+ * serves both STT and TTS).
  *
  * @module
  */
@@ -50,7 +50,7 @@ export function resolveTtsProvider(cfg, mainProviderId, edgeAvailable, audioKeyA
         }
         return { ok: false, errorKind: "auth_required", hint: keyHint(cfg.provider) };
     }
-    // 2. "auto" → the always-keyless EDGE rung (RES-02). Edge needs no key and no
+    // 2. "auto" → the always-keyless EDGE rung. Edge needs no key and no
     //    engine, so in production it wins the auto default — the daemon passes
     //    `edgeAvailable: () => true` (edge is the shipped keyless adapter, and a
     //    member of VOICE_KEYLESS). The predicate is gated (not hardcoded true) so
@@ -61,7 +61,7 @@ export function resolveTtsProvider(cfg, mainProviderId, edgeAvailable, audioKeyA
         return { ok: true, provider: TTS_KEYLESS_DEFAULT, keyless: true, source: "keyless-local" };
     }
     // 3. → (defensive fallthrough, unreachable while edge is keyless) follow the
-    //    main provider's audio key only if it really exists (CRED-01).
+    //    main provider's audio key only if it really exists.
     const mainAudio = MAIN_PROVIDER_AUDIO[mainProviderId];
     if (mainAudio && audioKeyAvailable(mainAudio)) {
         return { ok: true, provider: mainAudio, keyless: false, source: "follow-main-key" };

package/node_modules/@comis/core/dist/media/resolve-video-provider.d.ts

@@ -1,10 +1,10 @@
 /**
  * resolveVideoProvider — the pure, I/O-free priority resolver for
- * video-generation provider selection (RES-02/03/04, CAP-01, SEC-04).
+ * video-generation provider selection.
  *
  * A 1:1 mirror of `resolveImageProvider` (resolve-image-provider.ts) with the
- * video vocabulary, PLUS the SEC-04 prototype-pollution guard the image resolver
- * lacks (DIVERGENCE 4): `isBlockedObjectKey` rejects `__proto__` / `constructor`
+ * video vocabulary, PLUS a prototype-pollution guard the image resolver
+ * lacks: `isBlockedObjectKey` rejects `__proto__` / `constructor`
  * / `prototype` BEFORE every `VIDEO_CAPABILITY[...]` index (three sites — the
  * explicit branch, the follow-main branch, and the fallback-chain loop).
  *
@@ -14,7 +14,7 @@
  * environment, and never imports a secret store — so it is trivially
  * unit-testable with no daemon and no network.
  *
- * Honest-capability invariant (I3 / T-188-03): a video-incapable main provider
+ * Honest-capability invariant: a video-incapable main provider
  * or absent credentials yields `{ ok: false, errorKind, hint }` — NEVER a silent
  * fall-through to a different paid provider. The `fallbackChain` is consulted
  * ONLY after the follow-main path fails, and each skip is reported.
@@ -27,24 +27,24 @@ import type { VideoErrorKind } from "./video-error.js";
  * map, read or pollute the prototype chain instead of an own property
  * (`__proto__` → the prototype; `constructor` / `prototype` → built-in members).
  * Apply this BEFORE every `VIDEO_CAPABILITY` / `VIDEO_PRICING` index on a
- * config-/resolution-supplied provider id (SEC-04 / DIVERGENCE 4).
+ * config-/resolution-supplied provider id.
  *
- * Exported because Task 2's pricing estimate and Plan 04's selector reuse the
+ * Exported because the pricing estimate and the daemon's selector reuse the
  * exact same guard (single source of truth — no scattered inline checks).
  */
 export declare function isBlockedObjectKey(k: string): boolean;
 /**
  * The structural subset of the video-generation selection config this resolver
  * reads. Declared LOCALLY (not imported from the runtime `VideoGenerationConfig`
- * in schema-integrations.ts) so this Wave-1 plan stays decoupled from Plan 02,
- * which adds that schema in the same wave. The resolver only needs these fields.
+ * in schema-integrations.ts) to keep this pure resolver decoupled from the
+ * runtime config schema. The resolver only needs these fields.
  */
 export type VideoGenSelectionConfig = {
     /** "auto" | "fal" | "google" | "xai" */
     provider: string;
     /** Tool/config-supplied model that overrides the per-backend default. */
     model?: string;
-    /** Plan 02 lands the real field; this resolver reads it defensively. */
+    /** Defined by the runtime schema; this resolver reads it defensively. */
     fallbackChain?: string[];
 };
 /**