comisai 1.0.44 → 1.0.46

package/node_modules/@comis/core/dist/media/resolve-video-provider.js

@@ -1,11 +1,11 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
  * resolveVideoProvider — the pure, I/O-free priority resolver for
- * video-generation provider selection (RES-02/03/04, CAP-01, SEC-04).
+ * video-generation provider selection.
  *
  * A 1:1 mirror of `resolveImageProvider` (resolve-image-provider.ts) with the
- * video vocabulary, PLUS the SEC-04 prototype-pollution guard the image resolver
- * lacks (DIVERGENCE 4): `isBlockedObjectKey` rejects `__proto__` / `constructor`
+ * video vocabulary, PLUS a prototype-pollution guard the image resolver
+ * lacks: `isBlockedObjectKey` rejects `__proto__` / `constructor`
  * / `prototype` BEFORE every `VIDEO_CAPABILITY[...]` index (three sites — the
  * explicit branch, the follow-main branch, and the fallback-chain loop).
  *
@@ -15,7 +15,7 @@
  * environment, and never imports a secret store — so it is trivially
  * unit-testable with no daemon and no network.
  *
- * Honest-capability invariant (I3 / T-188-03): a video-incapable main provider
+ * Honest-capability invariant: a video-incapable main provider
  * or absent credentials yields `{ ok: false, errorKind, hint }` — NEVER a silent
  * fall-through to a different paid provider. The `fallbackChain` is consulted
  * ONLY after the follow-main path fails, and each skip is reported.
@@ -28,15 +28,15 @@ import { VIDEO_CAPABILITY } from "./video-capability.js";
  * map, read or pollute the prototype chain instead of an own property
  * (`__proto__` → the prototype; `constructor` / `prototype` → built-in members).
  * Apply this BEFORE every `VIDEO_CAPABILITY` / `VIDEO_PRICING` index on a
- * config-/resolution-supplied provider id (SEC-04 / DIVERGENCE 4).
+ * config-/resolution-supplied provider id.
  *
- * Exported because Task 2's pricing estimate and Plan 04's selector reuse the
+ * Exported because the pricing estimate and the daemon's selector reuse the
  * exact same guard (single source of truth — no scattered inline checks).
  */
 export function isBlockedObjectKey(k) {
     return k === "__proto__" || k === "constructor" || k === "prototype";
 }
-/** The exact config knob a RES-03 hint must name (success-criterion). */
+/** The exact config knob every honest-unavailable hint must name. */
 const PROVIDER_KNOB = "integrations.media.videoGeneration.provider";
 function unavailableHint(mainProviderId) {
     return (`Main provider "${mainProviderId}" cannot generate video (or its ` +
@@ -46,14 +46,14 @@ function unavailableHint(mainProviderId) {
 export function resolveVideoProvider(cfg, mainProviderId, credsAvailable, onSkip) {
     // 1. Explicit non-"auto" provider takes priority over follow-main.
     if (cfg.provider !== "auto") {
-        // SEC-04: reject a poisoned provider id BEFORE indexing VIDEO_CAPABILITY.
+        // Reject a poisoned (prototype-polluting) provider id BEFORE indexing VIDEO_CAPABILITY.
         if (isBlockedObjectKey(cfg.provider)) {
             return { ok: false, errorKind: "unsupported_provider", hint: unavailableHint(cfg.provider) };
         }
         const cap = VIDEO_CAPABILITY[cfg.provider];
         // `fal` (and any explicit provider with no VIDEO_CAPABILITY entry) is an
         // explicit-only backend with no follow-main capability — its concrete
-        // adapter path is wired separately in Plan 04. Here it resolves to
+        // adapter path is wired separately in the daemon. Here it resolves to
         // honest-unavailable; do NOT special-case `fal` into the capability map.
         if (cap && credsAvailable(cap.videoApi)) {
             return { ok: true, ...cap, model: cfg.model, source: "explicit" };
@@ -69,7 +69,7 @@ export function resolveVideoProvider(cfg, mainProviderId, credsAvailable, onSkip
         return { ok: false, errorKind: "auth_required", hint: unavailableHint(cfg.provider) };
     }
     // 2. provider === "auto": follow the agent's main provider.
-    // SEC-04: reject a poisoned resolved main-provider id BEFORE indexing.
+    // Reject a poisoned resolved main-provider id BEFORE indexing.
     if (isBlockedObjectKey(mainProviderId)) {
         return { ok: false, errorKind: "unsupported_provider", hint: unavailableHint(mainProviderId) };
     }
@@ -94,7 +94,7 @@ export function resolveVideoProvider(cfg, mainProviderId, credsAvailable, onSkip
     return { ok: true, ...cap, model: cfg.model, source: "follow-main" };
 }
 /**
- * 3. Fallback chain (RES-04) — consulted ONLY after follow-main fails. Each
+ * 3. Fallback chain — consulted ONLY after follow-main fails. Each
  * entry that cannot serve (blocked key, incapable, or no creds) is reported via
  * `onSkip` with a reason naming it; the first usable entry wins. Returns
  * undefined if the chain is empty or exhausted (the caller emits the
@@ -102,7 +102,7 @@ export function resolveVideoProvider(cfg, mainProviderId, credsAvailable, onSkip
  */
 function tryFallbackChain(cfg, credsAvailable, onSkip, followMainSkipReason) {
     const chain = cfg.fallbackChain ?? [];
-    // WR-04: when there is no fallback to try (the schema-default empty chain),
+    // When there is no fallback to try (the schema-default empty chain),
     // the follow-main-skip line is pure log noise — there was no fallback
     // consultation to narrate, and the caller emits its own honest-unavailable
     // hint. Only report the skip when a chain actually exists (then it IS the
@@ -112,7 +112,7 @@ function tryFallbackChain(cfg, credsAvailable, onSkip, followMainSkipReason) {
     // Report that follow-main was tried first (it is the reason we are here).
     onSkip?.(`follow-main skipped: ${followMainSkipReason}`);
     for (const p of chain) {
-        // SEC-04: reject a poisoned fallback entry BEFORE indexing VIDEO_CAPABILITY.
+        // Reject a poisoned fallback entry BEFORE indexing VIDEO_CAPABILITY.
         if (isBlockedObjectKey(p)) {
             onSkip?.(`fallback "${p}" skipped: blocked object key`);
             continue;

package/node_modules/@comis/core/dist/media/resolve-vision-path.d.ts

@@ -1,6 +1,6 @@
 /**
  * resolveVisionPath — the pure, I/O-free ladder resolver for the
- * provider-following VISION path (VIS-02/03).
+ * provider-following VISION path.
  *
  * Mirrors the numbered-priority structure of `resolveImageProvider`
  * (packages/core/src/media/resolve-image-provider.ts): a single function,
@@ -15,27 +15,26 @@
  * or the pi-ai catalog — so it is trivially unit-testable with no daemon and no
  * network. It only LABELS which path (`main-vision` / `registry` /
  * `gemini-video` / `unavailable`) the handler must execute; the handler runs the
- * chosen tier (the 183 firewall: the handler consumes a resolver, never
- * re-derives selection).
+ * chosen tier (the handler consumes a resolver, never re-derives selection).
  *
- * Honest-capability invariant (I3 / T-187-03): a vision-incapable main provider
+ * Honest-capability invariant: a vision-incapable main provider
  * or absent main credentials falls to the registry (which has its OWN keys) or,
  * when nothing can serve, yields `{ ok: false, errorKind, hint }` — NEVER a
  * silent fall-through that bills a different provider. Each skipped tier is
- * reported via `onSkip` (VIS-03 path-logging).
+ * reported via `onSkip` (path-logging).
  *
- * The locked ladder ORDER (CONTEXT/RESEARCH): main-vision FIRST (image only —
- * pi-ai has no video content type, Pitfall 3, so `mediaKind:"video"` NEVER
+ * The locked ladder ORDER: main-vision FIRST (image only —
+ * pi-ai has no video content type, so `mediaKind:"video"` NEVER
  * returns `main-vision`) → registry SECOND → gemini-video THIRD (raw video only)
  * → honest-unavailable LAST. An explicit vision `defaultProvider` overrides
- * main-first (A3 — I2 parity: explicit operator config wins).
+ * main-first (explicit operator config wins).
  *
  * @module
  */
 import type { ImageErrorKind } from "./image-error.js";
 /**
  * Discriminated result: a concrete vision path (with its `path` provenance
- * label — the VIS-03 "which path" signal) or an honest-unavailable carrying a
+ * label — the "which path" signal) or an honest-unavailable carrying a
  * domain `errorKind` + a knob-naming `hint`.
  */
 export type VisionPathSelection = {
@@ -69,13 +68,13 @@ export interface VisionPathInput {
     mainCredsAvailable: boolean;
     /** Would `selectVisionProvider(registry, mediaKind)` return a provider? */
     registryAvailable: boolean;
-    /** `integrations.media.vision.defaultProvider` — when set (non-empty), explicit wins (A3). */
+    /** `integrations.media.vision.defaultProvider` — when set (non-empty), explicit wins. */
     explicitDefaultProvider?: string;
 }
 /**
  * Decide the vision path. Pure: same input → same output, no I/O.
  *
  * @param input precomputed capability/cred/registry signals (the daemon resolves them)
- * @param onSkip optional VIS-03 reporter — each non-chosen tier reports its reason
+ * @param onSkip optional skip reporter — each non-chosen tier reports its reason
  */
 export declare function resolveVisionPath(input: VisionPathInput, onSkip?: (reason: string) => void): VisionPathSelection;

package/node_modules/@comis/core/dist/media/resolve-vision-path.js

@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
  * resolveVisionPath — the pure, I/O-free ladder resolver for the
- * provider-following VISION path (VIS-02/03).
+ * provider-following VISION path.
  *
  * Mirrors the numbered-priority structure of `resolveImageProvider`
  * (packages/core/src/media/resolve-image-provider.ts): a single function,
@@ -16,24 +16,23 @@
  * or the pi-ai catalog — so it is trivially unit-testable with no daemon and no
  * network. It only LABELS which path (`main-vision` / `registry` /
  * `gemini-video` / `unavailable`) the handler must execute; the handler runs the
- * chosen tier (the 183 firewall: the handler consumes a resolver, never
- * re-derives selection).
+ * chosen tier (the handler consumes a resolver, never re-derives selection).
  *
- * Honest-capability invariant (I3 / T-187-03): a vision-incapable main provider
+ * Honest-capability invariant: a vision-incapable main provider
  * or absent main credentials falls to the registry (which has its OWN keys) or,
  * when nothing can serve, yields `{ ok: false, errorKind, hint }` — NEVER a
  * silent fall-through that bills a different provider. Each skipped tier is
- * reported via `onSkip` (VIS-03 path-logging).
+ * reported via `onSkip` (path-logging).
  *
- * The locked ladder ORDER (CONTEXT/RESEARCH): main-vision FIRST (image only —
- * pi-ai has no video content type, Pitfall 3, so `mediaKind:"video"` NEVER
+ * The locked ladder ORDER: main-vision FIRST (image only —
+ * pi-ai has no video content type, so `mediaKind:"video"` NEVER
  * returns `main-vision`) → registry SECOND → gemini-video THIRD (raw video only)
  * → honest-unavailable LAST. An explicit vision `defaultProvider` overrides
- * main-first (A3 — I2 parity: explicit operator config wins).
+ * main-first (explicit operator config wins).
  *
  * @module
  */
-/** The exact config knobs a VIS-03 hint names (the actionable levers). */
+/** The exact config knob an unavailable hint names (the actionable lever). */
 const VISION_KNOB = "integrations.media.vision.defaultProvider";
 function unavailableHint(mainProviderId) {
     return (`No vision provider available for main provider "${mainProviderId}". Either ` +
@@ -45,11 +44,11 @@ function unavailableHint(mainProviderId) {
  * Decide the vision path. Pure: same input → same output, no I/O.
  *
  * @param input precomputed capability/cred/registry signals (the daemon resolves them)
- * @param onSkip optional VIS-03 reporter — each non-chosen tier reports its reason
+ * @param onSkip optional skip reporter — each non-chosen tier reports its reason
  */
 export function resolveVisionPath(input, onSkip) {
     const { mediaKind, mainProviderId, visionCapable, mainCredsAvailable, registryAvailable, explicitDefaultProvider, } = input;
-    // VIDEO: pi-ai has NO video content type (Pitfall 3) — main-vision is N/A.
+    // VIDEO: pi-ai has NO video content type — main-vision is N/A.
     // Raw video stays Gemini-only via the registry's video selection.
     if (mediaKind === "video") {
         if (registryAvailable) {
@@ -63,7 +62,7 @@ export function resolveVisionPath(input, onSkip) {
         };
     }
     // IMAGE ladder.
-    // 1. A3 explicit-override (I2 parity): an explicit, non-empty vision
+    // 1. Explicit-override: an explicit, non-empty vision
     //    defaultProvider beats main-first — skip main-vision, go to the registry.
     const hasExplicit = typeof explicitDefaultProvider === "string" && explicitDefaultProvider.length > 0;
     if (hasExplicit) {

package/node_modules/@comis/core/dist/media/video-capability.d.ts

@@ -1,5 +1,5 @@
 /**
- * VIDEO_CAPABILITY — the single source of truth (CAP-01) for "which resolved
+ * VIDEO_CAPABILITY — the single source of truth for "which resolved
  * main provider can generate video, via which backend, and with what default
  * video model".
  *
@@ -21,15 +21,12 @@
  * API-available; Anthropic / openai-codex / Groq have none → they resolve to
  * `undefined` (honest-unavailable, or explicit FAL).
  *
- * Phase 188 RETURNS the veo/grok SELECTION; the live Veo/Grok adapters land in
- * Phase 190 (the selector returns the selection, not a live provider call).
- *
- * Model-id provenance ([VERIFIED] against the v2.24 design §5b/§15 at plan time,
- * 2026-06-15): `veo-3.0-fast-generate-001` is the GA Veo recommended default
- * (VEO-01); `grok-imagine-video` is the public xAI Grok Imagine video model
- * (GROK-01, public REST API since 2026-01-28). Both remain overridable by
+ * Model-id provenance (verified against the live provider docs, 2026-06-15):
+ * `veo-3.0-fast-generate-001` is the GA Veo recommended default;
+ * `grok-imagine-video` is the public xAI Grok Imagine video model
+ * (public REST API since 2026-01-28). Both remain overridable by
  * config/tool model. Per-second pricing and preview model ids drift ~monthly —
- * re-verify at the plan time of the phase that wires the live adapter.
+ * re-verify when touching the live adapters.
  *
  * @module
  */

package/node_modules/@comis/core/dist/media/video-capability.js

@@ -1,6 +1,6 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
- * VIDEO_CAPABILITY — the single source of truth (CAP-01) for "which resolved
+ * VIDEO_CAPABILITY — the single source of truth for "which resolved
  * main provider can generate video, via which backend, and with what default
  * video model".
  *
@@ -22,15 +22,12 @@
  * API-available; Anthropic / openai-codex / Groq have none → they resolve to
  * `undefined` (honest-unavailable, or explicit FAL).
  *
- * Phase 188 RETURNS the veo/grok SELECTION; the live Veo/Grok adapters land in
- * Phase 190 (the selector returns the selection, not a live provider call).
- *
- * Model-id provenance ([VERIFIED] against the v2.24 design §5b/§15 at plan time,
- * 2026-06-15): `veo-3.0-fast-generate-001` is the GA Veo recommended default
- * (VEO-01); `grok-imagine-video` is the public xAI Grok Imagine video model
- * (GROK-01, public REST API since 2026-01-28). Both remain overridable by
+ * Model-id provenance (verified against the live provider docs, 2026-06-15):
+ * `veo-3.0-fast-generate-001` is the GA Veo recommended default;
+ * `grok-imagine-video` is the public xAI Grok Imagine video model
+ * (public REST API since 2026-01-28). Both remain overridable by
  * config/tool model. Per-second pricing and preview model ids drift ~monthly —
- * re-verify at the plan time of the phase that wires the live adapter.
+ * re-verify when touching the live adapters.
  *
  * @module
  */
@@ -39,7 +36,7 @@ export const VIDEO_CAPABILITY = {
     "google-vertex": { videoApi: "veo", defaultModel: "veo-3.0-fast-generate-001" },
     "xai": { videoApi: "grok", defaultModel: "grok-imagine-video" },
     // openai / openai-codex / anthropic / amazon-bedrock / groq / mistral /
-    // deepseek / default → undefined (CAP-01: no native video API).
+    // deepseek / default → undefined (no native video API).
     // auto / fal are NOT keys (selection-mode + explicit-only, not follow-main
     // capabilities).
 };

package/node_modules/@comis/core/dist/media/video-error.d.ts

@@ -6,9 +6,9 @@
  * NOT be added to it. This mirrors `ImageErrorKind` (image-error.ts), where the
  * domain classification is its own type, separate from the log union.
  *
- * DIVERGENCE 2 from the image union: video adds `job_timeout` for the bounded
- * poll-loop deadline of `execute()` (VPORT-02) — distinct from `timeout` (a single
- * provider HTTP call timing out) — and (WR-02, Phase 192) `delivery_failed` for a
+ * Video diverges from the image union in two ways: it adds `job_timeout` for the
+ * bounded poll-loop deadline of `execute()` — distinct from `timeout` (a single
+ * provider HTTP call timing out) — and `delivery_failed` for a
  * render that SUCCEEDED but whose off-turn channel delivery exhausted its retries.
  * These are video-only additions; each is mapped onto an EXISTING closed log
  * `ErrorKind` (the closed log union is never extended). `delivery_failed` keeps the
@@ -20,7 +20,7 @@
  * `VideoErrorKind` is mapped onto exactly one of the closed log `ErrorKind`
  * values, so observability stays parseable while the domain vocabulary stays
  * expressive. Callers log `{ errorKind: VIDEO_ERR_TO_LOG[k], videoErrorKind: k,
- * hint }` per the §2.7 logging matrix.
+ * hint }` per the AGENTS.md §2.7 logging matrix.
  *
  * @module
  */
@@ -30,7 +30,7 @@ export type VideoErrorKind = "content_blocked" | "auth_required" | "quota_exceed
  * Maps each domain `VideoErrorKind` onto one of the CLOSED 10-member log
  * `ErrorKind` literals. The closed union is never extended — this map is the
  * single point where the two vocabularies meet. Both `timeout` and the
- * video-only `job_timeout` collapse onto the closed log `"timeout"` (DIVERGENCE 2).
+ * video-only `job_timeout` collapse onto the closed log `"timeout"`.
  */
 export declare const VIDEO_ERR_TO_LOG: Record<VideoErrorKind, ErrorKind>;
 /**
@@ -39,9 +39,9 @@ export declare const VIDEO_ERR_TO_LOG: Record<VideoErrorKind, ErrorKind>;
  * Mirrors `ImageGenError` (packages/daemon/src/api/pi-image-adapter.ts). A video
  * adapter throws this inside its `execute()`/`submit()` boundary (caught by
  * `fromPromise`), so the resulting `Result` err carries a structured error — NOT
- * a message-only/string-encoded one. Plan 04's `makeUnavailableVideoPort` +
+ * a message-only/string-encoded one. `makeUnavailableVideoPort` +
  * the handler's `extractVideoHint` construct/read this exact shape, so the
- * typed-class form is the cross-plan contract. The `message` is user-safe (it
+ * typed-class form is a cross-module contract. The `message` is user-safe (it
  * never echoes the raw provider error, which could contain a key or token).
  */
 export declare class VideoGenError extends Error {

package/node_modules/@comis/core/dist/media/video-error.js

@@ -7,9 +7,9 @@
  * NOT be added to it. This mirrors `ImageErrorKind` (image-error.ts), where the
  * domain classification is its own type, separate from the log union.
  *
- * DIVERGENCE 2 from the image union: video adds `job_timeout` for the bounded
- * poll-loop deadline of `execute()` (VPORT-02) — distinct from `timeout` (a single
- * provider HTTP call timing out) — and (WR-02, Phase 192) `delivery_failed` for a
+ * Video diverges from the image union in two ways: it adds `job_timeout` for the
+ * bounded poll-loop deadline of `execute()` — distinct from `timeout` (a single
+ * provider HTTP call timing out) — and `delivery_failed` for a
  * render that SUCCEEDED but whose off-turn channel delivery exhausted its retries.
  * These are video-only additions; each is mapped onto an EXISTING closed log
  * `ErrorKind` (the closed log union is never extended). `delivery_failed` keeps the
@@ -21,7 +21,7 @@
  * `VideoErrorKind` is mapped onto exactly one of the closed log `ErrorKind`
  * values, so observability stays parseable while the domain vocabulary stays
  * expressive. Callers log `{ errorKind: VIDEO_ERR_TO_LOG[k], videoErrorKind: k,
- * hint }` per the §2.7 logging matrix.
+ * hint }` per the AGENTS.md §2.7 logging matrix.
  *
  * @module
  */
@@ -29,7 +29,7 @@
  * Maps each domain `VideoErrorKind` onto one of the CLOSED 10-member log
  * `ErrorKind` literals. The closed union is never extended — this map is the
  * single point where the two vocabularies meet. Both `timeout` and the
- * video-only `job_timeout` collapse onto the closed log `"timeout"` (DIVERGENCE 2).
+ * video-only `job_timeout` collapse onto the closed log `"timeout"`.
  */
 export const VIDEO_ERR_TO_LOG = {
     unsupported_provider: "precondition",
@@ -39,7 +39,7 @@ export const VIDEO_ERR_TO_LOG = {
     job_timeout: "timeout",
     empty_response: "dependency",
     content_blocked: "dependency",
-    // WR-02: a delivery exhaustion is a channel/transport (platform-side) failure,
+    // A delivery exhaustion is a channel/transport (platform-side) failure,
     // NOT a provider dependency failure — keep it distinct from empty_response.
     delivery_failed: "platform",
 };
@@ -49,9 +49,9 @@ export const VIDEO_ERR_TO_LOG = {
  * Mirrors `ImageGenError` (packages/daemon/src/api/pi-image-adapter.ts). A video
  * adapter throws this inside its `execute()`/`submit()` boundary (caught by
  * `fromPromise`), so the resulting `Result` err carries a structured error — NOT
- * a message-only/string-encoded one. Plan 04's `makeUnavailableVideoPort` +
+ * a message-only/string-encoded one. `makeUnavailableVideoPort` +
  * the handler's `extractVideoHint` construct/read this exact shape, so the
- * typed-class form is the cross-plan contract. The `message` is user-safe (it
+ * typed-class form is a cross-module contract. The `message` is user-safe (it
  * never echoes the raw provider error, which could contain a key or token).
  */
 export class VideoGenError extends Error {

package/node_modules/@comis/core/dist/media/video-models.d.ts

@@ -1,25 +1,25 @@
 /**
  * VIDEO_MODELS + listVideoModelCaps + supportedModes + snapDuration — the
- * per-model video-capability matrix (CAP-02). The single source of truth the
- * IN-02 param validator (Plan 02 `video-handlers.ts`) and the IN-03 dynamic
- * tool description (Plan 03 `video-generate-tool.ts`) both read.
+ * per-model video-capability matrix. The single source of truth the
+ * param validator (`video-handlers.ts`) and the dynamic
+ * tool description (`video-generate-tool.ts`) both read.
  *
  * Shape mirrors the sibling `video-pricing.ts` (a backend-keyed
- * `Record<string, ...| undefined>` indexed only AFTER the SEC-04
+ * `Record<string, ...| undefined>` indexed only AFTER the
  * `isBlockedObjectKey` guard, with the const kept intra-core and only the
  * accessors on the barrel) and `image-models.ts`'s accessor-export discipline,
- * extended with OpenClaw-style mode-keying (`t2v`/`i2v`/`v2v`) + per-model
- * `byModel` overrides and Hermes's enum-snap-vs-range-clamp duration heuristic.
+ * extended with mode-keying (`t2v`/`i2v`/`v2v`) + per-model
+ * `byModel` overrides and an enum-snap-vs-range-clamp duration heuristic.
  *
  * The per-model enums are POINT-IN-TIME — re-verified against the live FAL/Veo/
- * Grok docs 2026-06-15 (carrying the Phase-190 corrections: Grok 480p/720p only
+ * Grok docs 2026-06-15 (Grok 480p/720p only
  * + `grok-imagine-video` the only id; Veo 3.0 audio-by-default; FAL
  * `fal-ai/veo3.1/fast`). They drift ~monthly and are overridable by the
  * config/tool `model` arg (the `byModel` overrides cover the cells that differ
  * today, e.g. Veo 2 = 720p-only + no audio). Do NOT treat them as permanent —
- * re-verify at the plan time of any later phase touching this matrix.
+ * re-verify against the live provider docs before any change to this matrix.
  *
- * SEC-04: every `VIDEO_MODELS[backend]` and `modeCaps.byModel[model]` index is
+ * Prototype-pollution guard: every `VIDEO_MODELS[backend]` and `modeCaps.byModel[model]` index is
  * preceded by `isBlockedObjectKey` (the prototype-pollution guard reused from
  * `resolve-video-provider.ts`, same as `estimateVideoCostUsd` in
  * `video-pricing.ts`). A poisoned key returns `undefined`/`[]`/the default
@@ -53,14 +53,14 @@ export interface VideoModelCaps {
     audio: boolean;
     maxReferenceImages: number;
     /**
-     * Pitfall 2 (Veo): resolutions that REQUIRE `durationSecs === 8` (1080p/4k).
-     * The IN-02 validator (Plan 02) special-cases this as an honest pre-submit
+     * Veo cross-field rule: resolutions that REQUIRE `durationSecs === 8` (1080p/4k).
+     * The param validator special-cases this as an honest pre-submit
      * reject ("4k requires duration 8") rather than letting it surface as a
      * provider 4xx. Absent = no cross-field rule.
      */
     requires8sFor?: readonly string[];
 }
-/** A mode's default caps plus optional per-model overrides (OpenClaw `*ByModel`). */
+/** A mode's default caps plus optional per-model overrides. */
 type ModeCaps = {
     default: VideoModelCaps;
     byModel?: Record<string, VideoModelCaps>;
@@ -72,26 +72,26 @@ type BackendCaps = {
     v2v?: ModeCaps;
 };
 /**
- * The CAP-02 matrix: backend → mode → {default + per-model overrides}. Keyed by
+ * The capability matrix: backend → mode → {default + per-model overrides}. Keyed by
  * the resolved port id (`fal`/`veo`/`grok`) — the only key both the daemon
  * handler (`deps.provider.id`) and the skills tool builder (`ctx.videoGenProvider.id`)
  * share. `v2v` is RESERVED (omitted on every backend → `undefined` on lookup,
  * deferred). Kept intra-core (NOT on the `@comis/core` barrel) — consumed only
- * via the accessors below (`public-export-consumers` gate, Pitfall 6).
+ * via the accessors below (enforced by the `public-export-consumers` gate).
  */
 export declare const VIDEO_MODELS: Record<string, BackendCaps | undefined>;
 /**
  * The caps for a (backend, mode[, model]) cell, or `undefined` when the backend
- * is unknown/blocked or the mode key is absent (CAP-02 (b): an i2v request on a
+ * is unknown/blocked or the mode key is absent (an i2v request on a
  * t2v-only backend, or any `v2v` request → the handler rejects with the
  * supported-modes list). A per-model `byModel` override wins over the mode
- * default (CAP-02 (c)). SEC-04 precedes EVERY index.
+ * default. The blocked-key guard precedes EVERY index.
  */
 export declare function listVideoModelCaps(backend: string, mode: "t2v" | "i2v" | "v2v", model?: string): VideoModelCaps | undefined;
 /**
  * The modes a backend supports (the present mode keys), `[]` for an
- * unknown/blocked backend. Used to build the IN-02 reject hint (Plan 02) when a
- * requested mode is unsupported. SEC-04 guarded.
+ * unknown/blocked backend. Used to build the validator's reject hint when a
+ * requested mode is unsupported. Blocked-key guarded.
  */
 export declare function supportedModes(backend: string): ("t2v" | "i2v" | "v2v")[];
 /**

package/node_modules/@comis/core/dist/media/video-models.js

@@ -1,26 +1,26 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
  * VIDEO_MODELS + listVideoModelCaps + supportedModes + snapDuration — the
- * per-model video-capability matrix (CAP-02). The single source of truth the
- * IN-02 param validator (Plan 02 `video-handlers.ts`) and the IN-03 dynamic
- * tool description (Plan 03 `video-generate-tool.ts`) both read.
+ * per-model video-capability matrix. The single source of truth the
+ * param validator (`video-handlers.ts`) and the dynamic
+ * tool description (`video-generate-tool.ts`) both read.
  *
  * Shape mirrors the sibling `video-pricing.ts` (a backend-keyed
- * `Record<string, ...| undefined>` indexed only AFTER the SEC-04
+ * `Record<string, ...| undefined>` indexed only AFTER the
  * `isBlockedObjectKey` guard, with the const kept intra-core and only the
  * accessors on the barrel) and `image-models.ts`'s accessor-export discipline,
- * extended with OpenClaw-style mode-keying (`t2v`/`i2v`/`v2v`) + per-model
- * `byModel` overrides and Hermes's enum-snap-vs-range-clamp duration heuristic.
+ * extended with mode-keying (`t2v`/`i2v`/`v2v`) + per-model
+ * `byModel` overrides and an enum-snap-vs-range-clamp duration heuristic.
  *
  * The per-model enums are POINT-IN-TIME — re-verified against the live FAL/Veo/
- * Grok docs 2026-06-15 (carrying the Phase-190 corrections: Grok 480p/720p only
+ * Grok docs 2026-06-15 (Grok 480p/720p only
  * + `grok-imagine-video` the only id; Veo 3.0 audio-by-default; FAL
  * `fal-ai/veo3.1/fast`). They drift ~monthly and are overridable by the
  * config/tool `model` arg (the `byModel` overrides cover the cells that differ
  * today, e.g. Veo 2 = 720p-only + no audio). Do NOT treat them as permanent —
- * re-verify at the plan time of any later phase touching this matrix.
+ * re-verify against the live provider docs before any change to this matrix.
  *
- * SEC-04: every `VIDEO_MODELS[backend]` and `modeCaps.byModel[model]` index is
+ * Prototype-pollution guard: every `VIDEO_MODELS[backend]` and `modeCaps.byModel[model]` index is
  * preceded by `isBlockedObjectKey` (the prototype-pollution guard reused from
  * `resolve-video-provider.ts`, same as `estimateVideoCostUsd` in
  * `video-pricing.ts`). A poisoned key returns `undefined`/`[]`/the default
@@ -66,12 +66,12 @@ const GROK_BASE = {
     audio: false,
 };
 /**
- * The CAP-02 matrix: backend → mode → {default + per-model overrides}. Keyed by
+ * The capability matrix: backend → mode → {default + per-model overrides}. Keyed by
  * the resolved port id (`fal`/`veo`/`grok`) — the only key both the daemon
  * handler (`deps.provider.id`) and the skills tool builder (`ctx.videoGenProvider.id`)
  * share. `v2v` is RESERVED (omitted on every backend → `undefined` on lookup,
  * deferred). Kept intra-core (NOT on the `@comis/core` barrel) — consumed only
- * via the accessors below (`public-export-consumers` gate, Pitfall 6).
+ * via the accessors below (enforced by the `public-export-consumers` gate).
  */
 export const VIDEO_MODELS = {
     fal: {
@@ -95,27 +95,27 @@ export const VIDEO_MODELS = {
 };
 /**
  * The caps for a (backend, mode[, model]) cell, or `undefined` when the backend
- * is unknown/blocked or the mode key is absent (CAP-02 (b): an i2v request on a
+ * is unknown/blocked or the mode key is absent (an i2v request on a
  * t2v-only backend, or any `v2v` request → the handler rejects with the
  * supported-modes list). A per-model `byModel` override wins over the mode
- * default (CAP-02 (c)). SEC-04 precedes EVERY index.
+ * default. The blocked-key guard precedes EVERY index.
  */
 export function listVideoModelCaps(backend, mode, model) {
     if (isBlockedObjectKey(backend))
-        return undefined; // SEC-04 (backend index)
+        return undefined; // pollution guard (backend index)
     const be = VIDEO_MODELS[backend];
     const modeCaps = be?.[mode];
     if (!modeCaps)
-        return undefined; // CAP-02 (b): mode omitted → undefined
+        return undefined; // mode omitted from the matrix → undefined
     if (model && !isBlockedObjectKey(model) && modeCaps.byModel?.[model]) {
-        return modeCaps.byModel[model]; // CAP-02 (c): override wins (SEC-04 on model)
+        return modeCaps.byModel[model]; // override wins (model key guarded too)
     }
     return modeCaps.default;
 }
 /**
  * The modes a backend supports (the present mode keys), `[]` for an
- * unknown/blocked backend. Used to build the IN-02 reject hint (Plan 02) when a
- * requested mode is unsupported. SEC-04 guarded.
+ * unknown/blocked backend. Used to build the validator's reject hint when a
+ * requested mode is unsupported. Blocked-key guarded.
  */
 export function supportedModes(backend) {
     if (isBlockedObjectKey(backend))
@@ -134,7 +134,7 @@ export function supportedModes(backend) {
  *   than requested is the safer default over slightly shorter. Deterministic.
  */
 export function snapDuration(caps, d) {
-    // IN-01: fail CLOSED on a non-finite duration (defense-in-depth — upstream Zod
+    // Fail CLOSED on a non-finite duration (defense-in-depth — upstream Zod
     // normally rejects NaN). For a range cell, Math.min(max, Math.max(min, NaN))
     // would pass NaN straight to the wire; for an enum cell the reduce silently
     // coerces to the seed. Snap to the smallest/min member so a non-finite value

package/node_modules/@comis/core/dist/media/video-pricing.d.ts

@@ -1,6 +1,6 @@
 /**
  * estimateVideoCostUsd + VIDEO_PRICING — the pure worst-case pre-submit cost
- * estimate (SEC-02 / I6). A video clip is ALREADY rendering once submitted, so
+ * estimate. A video clip is ALREADY rendering once submitted, so
  * the `maxCostPerHourUsd` ceiling cannot wait for the actual cost — it must be
  * gated against a conservative estimate computed BEFORE the provider call. Audio
  * and 4k raise the per-second rate (worst-case upper bound). The handler
@@ -10,15 +10,14 @@
  * pre-estimated (the image cost limiter's `canSpend(agentId)` takes no estimate).
  *
  * Per-second USD rates live in ONE table and are POINT-IN-TIME — re-verified
- * against the live provider docs at plan time (2026-06-15, Phase 190 wiring the
- * live adapters): FAL-hosted Veo 3.1 Fast $0.10/s (audio-off) · $0.15/s
+ * against the live provider docs 2026-06-15: FAL-hosted Veo 3.1 Fast $0.10/s (audio-off) · $0.15/s
  * (audio-on) @720/1080p · ~$0.30/s @4k; NATIVE Veo 3.0 Fast $0.10/s @720p ·
  * $0.12/s @1080p · $0.30/s @4k with audio INCLUDED in the base (no surcharge —
  * Veo 3.x GA generates audio by default); xAI Grok Imagine ~$0.05–$0.07/s @720p
  * (sources disagree → conservative $0.07; the ACTUAL is reconciled from
  * `cost_in_usd_ticks` by the Grok adapter). They drift ~monthly and are
- * overridable by config; do NOT treat them as permanent. Re-verify at the plan
- * time of any later phase touching the live adapters.
+ * overridable by config; do NOT treat them as permanent. Re-verify against the
+ * provider docs before any change touching the live adapters.
  *
  * @module
  */
@@ -31,7 +30,7 @@ export declare const VIDEO_PRICING: Record<string, {
 /**
  * Worst-case dollar estimate for a render: `max(0, durationSecs) × per-second
  * rate`, where the rate uses the audio surcharge when audio is requested and is
- * multiplied for 4k. An unknown (or prototype-pollution — SEC-04) provider id
+ * multiplied for 4k. An unknown (or prototype-pollution) provider id
  * falls back to the `fal` rate so the estimate is always conservative and the
  * pricing table is never indexed with a poisoned key.
  */