comisai 1.0.45 → 1.0.46

package/node_modules/@comis/daemon/dist/api/vision-obs-emit.d.ts

@@ -1,13 +1,12 @@
 /**
- * VIS-04 (Phase 187): the vision-turn trajectory direct-emit + §2.7 log-line
- * helper.
+ * The vision-turn trajectory direct-emit + §2.7 log-line helper.
  *
  * The daemon vision RPC handlers (`image.analyze` / `media.describe_video` in
  * `media-handlers.ts`) record a vision turn's lifecycle onto the per-session
  * trajectory so `comis explain <sessionKey>` reconstructs it (provider /
  * mainProvider / model / path / costUsd / outcome), AND emit the §2.7 INFO
  * completion line / WARN failure line — the SAME observability image generation
- * got in Phase 186 (`image-handlers.ts:210` / `:604` are the templates).
+ * has (`image-handlers.ts:210` / `:604` are the templates).
  *
  * Extracted to a sibling (NOT inlined into `media-handlers.ts`) because that
  * file is at its 800-line cap — routing the emits + the §2.7 lines through this
@@ -20,12 +19,12 @@
  * without one, env-disabled session, or no session key) makes the trajectory
  * emits NO-OPs (never a crash). The §2.7 log lines ALWAYS fire (recorder or not).
  *
- * CONTENT-FREE (T-187-12): every recorded payload + log field carries ids /
+ * CONTENT-FREE: every recorded payload + log field carries ids /
  * labels / the `path` / `costUsd` / `outcome` / `errorKind` / `durationMs` ONLY
  * — NEVER the image bytes, the analysis prompt, the model's answer, or a
  * credential. `costUsd` rides `media.vision.completed` + the INFO line
  * (= `AssistantMessage.usage.cost.total`, OPTIONAL — absent on the
- * registry/gemini-video tiers; Pitfall 4). The domain `ImageErrorKind` maps onto
+ * registry/gemini-video tiers). The domain `ImageErrorKind` maps onto
  * the CLOSED log `ErrorKind` via `IMAGE_ERR_TO_LOG` on every failure line (the
  * closed-errorKind architecture invariant; `imageErrorKind` carries the domain).
  *
@@ -33,7 +32,7 @@
  */
 import type { SessionTrajectoryHandleRegistry } from "@comis/observability";
 import type { ComisLogger, ImageErrorKind } from "@comis/core";
-/** The ladder tier a vision turn took — VIS-03's "which path" signal. Mirrors
+/** The ladder tier a vision turn took — the "which path" signal. Mirrors
  *  the `path` literals `resolveVisionPath` returns (+ the `MediaVisionEvents`
  *  EventMap `VisionPath`); kept local so the daemon helper takes no extra
  *  `@comis/core` barrel surface. `unavailable` is failure-only. */
@@ -47,14 +46,14 @@ type VisionSelection = {
     hint: string;
 };
 /**
- * WR-03: resolve the honest-unavailable terminal's `{ errorKind, hint }`. A
+ * Resolve the honest-unavailable terminal's `{ errorKind, hint }`. A
  * resolver refusal (`sel.ok === false`) is authoritative and wins. Otherwise
  * (a chosen path that then could not serve — e.g. main-vision ran and failed,
  * or a registry/video provider was absent) the caller-supplied `fallbackKind`/
  * `fallbackHint` are used: the image handler passes the LAST bridge failure
  * kind/hint so the terminal keeps the specific reason (auth_required/timeout)
  * instead of the generic `unsupported_provider`; the video handler passes its
- * own generic kind/message (no bridge runs for video — Pitfall 3).
+ * own generic kind/message (no bridge runs for video).
  */
 export declare function resolveTerminalUnavailable(sel: VisionSelection, fallbackKind: ImageErrorKind, fallbackHint: string): {
     errorKind: ImageErrorKind;
@@ -70,7 +69,7 @@ export interface VisionObsEmitter {
     readonly active: boolean;
     /**
      * A tier SUCCEEDED: emit media.vision.completed (content-free; costUsd
-     * OPTIONAL — Pitfall 4) AND the §2.7 INFO completion line carrying
+     * OPTIONAL) AND the §2.7 INFO completion line carrying
      * { agentId, visionProvider, mainProvider, model, path, costUsd, durationMs,
      * step:"vision_complete" }. ONE call per success site.
      */
@@ -97,7 +96,7 @@ export interface VisionObsEmitter {
         message: string;
     }): void;
     /**
-     * WR-01 convenience: read the domain `errorKind` off a Result error (a
+     * Convenience: read the domain `errorKind` off a Result error (a
      * `VisionUnavailable` or any Error) — `?? "dependency"` when absent — then
      * delegate to {@link failed}. Lets each tier-failure branch instrument in ONE
      * line (the registry / gemini-video throw sites) without re-deriving the cast.

package/node_modules/@comis/daemon/dist/api/vision-obs-emit.js

@@ -1,14 +1,13 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
- * VIS-04 (Phase 187): the vision-turn trajectory direct-emit + §2.7 log-line
- * helper.
+ * The vision-turn trajectory direct-emit + §2.7 log-line helper.
  *
  * The daemon vision RPC handlers (`image.analyze` / `media.describe_video` in
  * `media-handlers.ts`) record a vision turn's lifecycle onto the per-session
  * trajectory so `comis explain <sessionKey>` reconstructs it (provider /
  * mainProvider / model / path / costUsd / outcome), AND emit the §2.7 INFO
  * completion line / WARN failure line — the SAME observability image generation
- * got in Phase 186 (`image-handlers.ts:210` / `:604` are the templates).
+ * has (`image-handlers.ts:210` / `:604` are the templates).
  *
  * Extracted to a sibling (NOT inlined into `media-handlers.ts`) because that
  * file is at its 800-line cap — routing the emits + the §2.7 lines through this
@@ -21,12 +20,12 @@
  * without one, env-disabled session, or no session key) makes the trajectory
  * emits NO-OPs (never a crash). The §2.7 log lines ALWAYS fire (recorder or not).
  *
- * CONTENT-FREE (T-187-12): every recorded payload + log field carries ids /
+ * CONTENT-FREE: every recorded payload + log field carries ids /
  * labels / the `path` / `costUsd` / `outcome` / `errorKind` / `durationMs` ONLY
  * — NEVER the image bytes, the analysis prompt, the model's answer, or a
  * credential. `costUsd` rides `media.vision.completed` + the INFO line
  * (= `AssistantMessage.usage.cost.total`, OPTIONAL — absent on the
- * registry/gemini-video tiers; Pitfall 4). The domain `ImageErrorKind` maps onto
+ * registry/gemini-video tiers). The domain `ImageErrorKind` maps onto
  * the CLOSED log `ErrorKind` via `IMAGE_ERR_TO_LOG` on every failure line (the
  * closed-errorKind architecture invariant; `imageErrorKind` carries the domain).
  *
@@ -34,14 +33,14 @@
  */
 import { IMAGE_ERR_TO_LOG } from "@comis/core";
 /**
- * WR-03: resolve the honest-unavailable terminal's `{ errorKind, hint }`. A
+ * Resolve the honest-unavailable terminal's `{ errorKind, hint }`. A
  * resolver refusal (`sel.ok === false`) is authoritative and wins. Otherwise
  * (a chosen path that then could not serve — e.g. main-vision ran and failed,
  * or a registry/video provider was absent) the caller-supplied `fallbackKind`/
  * `fallbackHint` are used: the image handler passes the LAST bridge failure
  * kind/hint so the terminal keeps the specific reason (auth_required/timeout)
  * instead of the generic `unsupported_provider`; the video handler passes its
- * own generic kind/message (no bridge runs for video — Pitfall 3).
+ * own generic kind/message (no bridge runs for video).
  */
 export function resolveTerminalUnavailable(sel, fallbackKind, fallbackHint) {
     return sel.ok === false

package/node_modules/@comis/daemon/dist/api/voice-handler-wiring.d.ts

@@ -1,22 +1,22 @@
 /**
- * OBS-02/03 (Phase 196): the daemon voice-handler wiring shim.
+ * The daemon voice-handler wiring shim.
  *
  * `media-handlers.ts` is at its 800-line cap with ZERO allowlist cushion, so the
  * `media.transcribe` / `tts.synthesize` obs wiring lives HERE (a sibling), not
  * inline — each handler call-site becomes `const voice = wireVoiceForHandler(
  * rawParams, deps, "stt"|"tts")` + `voice.completed(...)` / `voice.failed(...)`.
  *
- * The shim resolves the OBS-03 selection (`provider`/`keyless`/`source` + the
+ * The shim resolves the voice selection (`provider`/`keyless`/`source` + the
  * `onSkip` reasons) from the boot-resolved `deps.voiceSelection` (the SAME
  * `SttSelection`/`TtsSelection` the adapter construction used — NO second source
  * of truth). When `voiceSelection` is absent (a boot mode without the audio
- * selector / a pre-193 test harness) it falls back to the config provider +
+ * selector / a test harness that omits it) it falls back to the config provider +
  * a keyless heuristic (`local`/`edge`) — an honest best effort, never a crash:
  * a concrete config provider is labeled `source:"explicit"`, but an unpinned
- * `auto`/`configured` is labeled `source:"fallback"` (WR-03 — never fabricate an
- * explicit rung the resolver never produced). It then delegates to `wireVoiceObs` (the
- * record + the §2.7 INFO/WARN line + the SEC-01 host-only redaction), so this
- * module adds NO logging/redaction of its own.
+ * `auto`/`configured` is labeled `source:"fallback"` (never fabricate an
+ * explicit rung the resolver never produced). It then delegates to `wireVoiceObs`
+ * (the record + the one INFO/WARN log line + the host-only credential redaction),
+ * so this module adds NO logging/redaction of its own.
  *
  * @module
  */
@@ -39,10 +39,10 @@ type VoiceWiringDeps = Pick<MediaApiDeps, "mediaConfig" | "trajectoryRegistry" |
  *  error. Content-free — reads only the closed-union tag, never the message. */
 export declare function toSttErrorKind(err: unknown): SttErrorKind;
 /**
- * Build the wired voice-obs for a daemon voice handler. Resolves the OBS-03
+ * Build the wired voice-obs for a daemon voice handler. Resolves the voice
  * selection, fires `media.${kind}.requested` (with `source` + `onSkip`), and
  * returns the {@link WiredVoiceObs} whose `.completed` / `.failed` each record the
- * trajectory event AND emit the one §2.7 line. The `provider`/`keyless`/`source`
+ * trajectory event AND emit the one log line. The `provider`/`keyless`/`source`
  * are surfaced on the return so the handler does not re-derive them.
  */
 export declare function wireVoiceForHandler(rawParams: Record<string, unknown>, deps: VoiceWiringDeps & {

package/node_modules/@comis/daemon/dist/api/voice-handler-wiring.js

@@ -1,23 +1,23 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
- * OBS-02/03 (Phase 196): the daemon voice-handler wiring shim.
+ * The daemon voice-handler wiring shim.
  *
  * `media-handlers.ts` is at its 800-line cap with ZERO allowlist cushion, so the
  * `media.transcribe` / `tts.synthesize` obs wiring lives HERE (a sibling), not
  * inline — each handler call-site becomes `const voice = wireVoiceForHandler(
  * rawParams, deps, "stt"|"tts")` + `voice.completed(...)` / `voice.failed(...)`.
  *
- * The shim resolves the OBS-03 selection (`provider`/`keyless`/`source` + the
+ * The shim resolves the voice selection (`provider`/`keyless`/`source` + the
  * `onSkip` reasons) from the boot-resolved `deps.voiceSelection` (the SAME
  * `SttSelection`/`TtsSelection` the adapter construction used — NO second source
  * of truth). When `voiceSelection` is absent (a boot mode without the audio
- * selector / a pre-193 test harness) it falls back to the config provider +
+ * selector / a test harness that omits it) it falls back to the config provider +
  * a keyless heuristic (`local`/`edge`) — an honest best effort, never a crash:
  * a concrete config provider is labeled `source:"explicit"`, but an unpinned
- * `auto`/`configured` is labeled `source:"fallback"` (WR-03 — never fabricate an
- * explicit rung the resolver never produced). It then delegates to `wireVoiceObs` (the
- * record + the §2.7 INFO/WARN line + the SEC-01 host-only redaction), so this
- * module adds NO logging/redaction of its own.
+ * `auto`/`configured` is labeled `source:"fallback"` (never fabricate an
+ * explicit rung the resolver never produced). It then delegates to `wireVoiceObs`
+ * (the record + the one INFO/WARN log line + the host-only credential redaction),
+ * so this module adds NO logging/redaction of its own.
  *
  * @module
  */
@@ -74,7 +74,7 @@ export function toSttErrorKind(err) {
             return "dependency";
     }
 }
-/** Resolve the OBS-03 voice selection for `kind` from the boot-resolved
+/** Resolve the voice selection for `kind` from the boot-resolved
  *  `deps.voiceSelection`, falling back to the config provider + keyless heuristic. */
 function resolveVoiceRequested(deps, kind) {
     const resolved = kind === "stt" ? deps.voiceSelection?.stt : deps.voiceSelection?.tts;
@@ -89,7 +89,7 @@ function resolveVoiceRequested(deps, kind) {
     // Fallback (no selector ran): derive from config. Defensive `?.` — the obs path
     // must never crash the handler even if a config slice is unexpectedly absent.
     const provider = (kind === "stt" ? deps.mediaConfig.transcription?.provider : deps.mediaConfig.tts?.provider) ?? "configured";
-    // WR-03 (196 review): be HONEST about the rung. A concrete config provider
+    // Be HONEST about the rung. A concrete config provider
     // (e.g. `local`/`edge`/`openai`) was used verbatim → that IS an explicit pin.
     // But `auto` / the `?? "configured"` placeholder is NOT an explicit choice —
     // the resolver never ran, so labeling it `explicit` would fabricate a selection
@@ -102,10 +102,10 @@ function resolveVoiceRequested(deps, kind) {
     return { provider, keyless: KEYLESS_VOICE_PROVIDERS.has(provider), source };
 }
 /**
- * Build the wired voice-obs for a daemon voice handler. Resolves the OBS-03
+ * Build the wired voice-obs for a daemon voice handler. Resolves the voice
  * selection, fires `media.${kind}.requested` (with `source` + `onSkip`), and
  * returns the {@link WiredVoiceObs} whose `.completed` / `.failed` each record the
- * trajectory event AND emit the one §2.7 line. The `provider`/`keyless`/`source`
+ * trajectory event AND emit the one log line. The `provider`/`keyless`/`source`
  * are surfaced on the return so the handler does not re-derive them.
  */
 export function wireVoiceForHandler(rawParams, deps, kind) {
@@ -116,7 +116,7 @@ export function wireVoiceForHandler(rawParams, deps, kind) {
         sessionKey: rawParams._callerSessionKey,
         trajectoryRegistry: deps.trajectoryRegistry,
         logger: deps.logger,
-        // OBS-04: thread the obsStore so a failure feeds the fleet voice_health finding.
+        // Thread the obsStore so a failure feeds the fleet voice_health finding.
         ...(deps.obsStore !== undefined ? { obsStore: deps.obsStore } : {}),
         agentId,
         kind,

package/node_modules/@comis/daemon/dist/api/voice-obs-emit.d.ts

@@ -1,36 +1,36 @@
 /**
- * OBS-02/03 (Phase 196): the voice-turn (STT/TTS) trajectory direct-emit helper
+ * The voice-turn (STT/TTS) trajectory direct-emit helper
  * + the `wireVoiceObs` handler-wiring closure.
  *
  * The daemon voice RPC handlers (`media.transcribe` / `tts.synthesize` in
  * `media-handlers.ts`) record a voice turn's lifecycle onto the per-session
  * trajectory so `comis explain <sessionKey>` reconstructs it (provider /
  * keyless? / model / durationMs / audioBytes / costUsd / the resolved `source`
- * rung + the `onSkip` reasons / outcome) — the SAME observability image/vision/
- * video got in Phases 186/187/192.
+ * rung + the `onSkip` reasons / outcome) — the SAME observability the image/
+ * vision/video paths get.
  *
  * Extracted to a SIBLING (NOT inlined into `media-handlers.ts`, which is at its
- * 800-line cap with ZERO allowlist cushion) — routing the emits + the §2.7 log
- * lines through `wireVoiceObs` keeps that file shrink-only and the per-handler
- * wiring delta a few lines (Plan 03 calls `wireVoiceObs(...)` + `.completed` /
+ * 800-line cap with ZERO allowlist cushion) — routing the emits + the structured
+ * log lines through `wireVoiceObs` keeps that file shrink-only and the per-handler
+ * wiring delta a few lines (each handler calls `wireVoiceObs(...)` + `.completed` /
  * `.failed`), NOT 20-40 inline lines across two handlers (the file-size gate keys
  * on path).
  *
  * DIVERGENCE FROM `createVisionObsEmitter` (vision-obs-emit.ts): the vision twin
- * FUSES the trajectory record AND the §2.7 log line into one call, because the
- * vision handler had NO prior structured logging. The voice handlers/pipeline
- * ALREADY carry the §2.7 logger floor (Plan 01 / the inbound handler / the
+ * FUSES the trajectory record AND the structured log line into one call, because
+ * the vision handler had NO prior structured logging. The voice handlers/pipeline
+ * ALREADY carry the standard logger floor (the inbound handler / the
  * voice-out pipeline). So `createVoiceObsEmitter` is trajectory-RECORD-focused —
- * it does NOT re-log (a fused log would DOUBLE-emit the §2.7 line). The §2.7 line
+ * it does NOT re-log (a fused log would DOUBLE-emit the line). The log line
  * lives in the SEPARATE `wireVoiceObs` logger closure, BESIDE the record (the
  * video-handler convention), so the handler call-site stays tiny while the record
  * and the log stay decoupled.
  *
- * CONTENT-FREE (T-196-04/05): every recorded payload carries ids / labels /
+ * CONTENT-FREE: every recorded payload carries ids / labels /
  * numbers / booleans / closed-enum reasons ONLY — NEVER the audio bytes, the
  * transcript text, the synthesized audio, or a credential. `costUsd` rides
- * `media.*.completed` presence-conditionally (OBS-05 Route a); the keyless caller
- * passes `0` EXPLICITLY so "free" is visible (FLAG 4), keyed-no-cost omits it. The
+ * `media.*.completed` presence-conditionally; the keyless caller
+ * passes `0` EXPLICITLY so "free" is visible, keyed-no-cost omits it. The
  * domain `SttErrorKind` rides `media.*.failed.errorKind` verbatim; the closed log
  * union (via `STT_ERR_TO_LOG`) + the SANITIZED provider message ride the
  * structured Pino LOG (the `wireVoiceObs` WARN closure), never the trajectory.
@@ -42,23 +42,23 @@
 import type { SessionTrajectoryHandleRegistry } from "@comis/observability";
 import type { ComisLogger, SttErrorKind } from "@comis/core";
 import type { ObservabilityStore } from "@comis/memory";
-/** The resolved STT/TTS selection rung (OBS-03). Mirrors `SttSelection.source`. */
+/** The resolved STT/TTS selection rung. Mirrors `SttSelection.source`. */
 export type VoiceSource = "explicit" | "keyless-local" | "follow-main-key" | "fallback";
 /** Which voice family this emitter records — selects the `media.${kind}.*` event names. */
 export type VoiceKind = "stt" | "tts";
 /** A bound voice-trajectory emitter. Returned by `createVoiceObsEmitter` (which
  *  fires `media.${kind}.requested` at construction). The handler calls
  *  `completed` / `failed` on the branch it takes. Every emit is a no-op when no
- *  recorder resolved (off-turn / boot safe) — the offline assembler (Plan 03's
+ *  recorder resolved (off-turn / boot safe) — the offline assembler (the
  *  reconstruct test) is the binding oracle. */
 export interface VoiceObsEmitter {
     /** True when a non-null recorder resolved (a session key + a registry + an open
      *  recorder). False off-turn / boot-without-registry — every method then no-ops. */
     readonly active: boolean;
     /** A transcription/synthesis SUCCEEDED: record `media.${kind}.completed` with the
-     *  cost-carry. The keyless `costUsd:0` is derived centrally (WR-02) — the caller
+     *  cost-carry. The keyless `costUsd:0` is derived centrally — the caller
      *  need NOT pass `0`; an explicit `costUsd` wins, keyless-without-cost ⇒ `0`
-     *  (present, so "free" is visible — FLAG 4), keyed-without-cost ⇒ omitted. */
+     *  (present, so "free" is visible), keyed-without-cost ⇒ omitted. */
     completed(args: {
         provider: string;
         keyless: boolean;
@@ -78,7 +78,7 @@ export interface VoiceObsEmitter {
 }
 /**
  * Resolve the per-session recorder by `sessionKey`, fire the
- * `media.${kind}.requested` entry record (with the OBS-03 `onSkip` reasons when
+ * `media.${kind}.requested` entry record (with the `onSkip` reasons when
  * supplied), and return a bound {@link VoiceObsEmitter}. In-turn the handler passes
  * the dispatcher-injected `_callerSessionKey`. When the registry is absent,
  * `getRecorder` returns null/undefined, or there is no session key, the trajectory
@@ -99,7 +99,7 @@ export declare function createVoiceObsEmitter(args: {
         onSkip?: string[];
     };
 }): VoiceObsEmitter;
-/** The handler-wiring helper return shape: the emitter + the two §2.7-logging
+/** The handler-wiring helper return shape: the emitter + the two logging
  *  closures (each does BOTH the trajectory record AND the one log line). */
 export interface WiredVoiceObs {
     obs: VoiceObsEmitter;
@@ -121,13 +121,13 @@ export interface WiredVoiceObs {
     }): void;
 }
 /**
- * wireVoiceObs — the PRIMARY handler-wiring path (the WARNING-2 lever for the
- * `media-handlers.ts` 799/800 cap). Bundles {@link createVoiceObsEmitter} with a
- * typed §2.7 logger closure so Plan 03's per-handler delta is a `wireVoiceObs(...)`
+ * wireVoiceObs — the PRIMARY handler-wiring path (what keeps
+ * `media-handlers.ts` under its 800-line cap). Bundles {@link createVoiceObsEmitter}
+ * with a typed logger closure so each handler's delta is a `wireVoiceObs(...)`
  * call + the `.completed` / `.failed` calls — not 20-40 inline lines.
  *
  * - Construction fires the `media.${kind}.requested` record (with `onSkip`).
- * - `completed(a)` → `obs.completed(a)` AND ONE `logger.info` (the §2.7 completion
+ * - `completed(a)` → `obs.completed(a)` AND ONE `logger.info` (the completion
  *   line carrying provider/keyless/model/durationMs/audioBytes/costUsd/source).
  * - `failed(a)` → `obs.failed({ errorKind: a.sttErrorKind, ... })` AND ONE
  *   `logger.warn` carrying `err:` (the SANITIZED host-only message — no Bearer/
@@ -141,10 +141,10 @@ export declare function wireVoiceObs(args: {
     sessionKey: string | undefined;
     trajectoryRegistry: SessionTrajectoryHandleRegistry | undefined;
     logger: ComisLogger;
-    /** OBS-04 (196): the observability store. When present, `failed()` ALSO inserts a
+    /** The observability store. When present, `failed()` ALSO inserts a
      *  content-free `voice_degraded` health_signal row for the `comis fleet`
      *  voice_health finding. Optional — absent off-turn / on a boot mode without it
-     *  (the row insert then no-ops; the §2.7 line + the trajectory record still fire). */
+     *  (the row insert then no-ops; the log line + the trajectory record still fire). */
     obsStore?: ObservabilityStore;
     agentId: string;
     kind: VoiceKind;

package/node_modules/@comis/daemon/dist/api/voice-obs-emit.js

@@ -1,37 +1,37 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
- * OBS-02/03 (Phase 196): the voice-turn (STT/TTS) trajectory direct-emit helper
+ * The voice-turn (STT/TTS) trajectory direct-emit helper
  * + the `wireVoiceObs` handler-wiring closure.
  *
  * The daemon voice RPC handlers (`media.transcribe` / `tts.synthesize` in
  * `media-handlers.ts`) record a voice turn's lifecycle onto the per-session
  * trajectory so `comis explain <sessionKey>` reconstructs it (provider /
  * keyless? / model / durationMs / audioBytes / costUsd / the resolved `source`
- * rung + the `onSkip` reasons / outcome) — the SAME observability image/vision/
- * video got in Phases 186/187/192.
+ * rung + the `onSkip` reasons / outcome) — the SAME observability the image/
+ * vision/video paths get.
  *
  * Extracted to a SIBLING (NOT inlined into `media-handlers.ts`, which is at its
- * 800-line cap with ZERO allowlist cushion) — routing the emits + the §2.7 log
- * lines through `wireVoiceObs` keeps that file shrink-only and the per-handler
- * wiring delta a few lines (Plan 03 calls `wireVoiceObs(...)` + `.completed` /
+ * 800-line cap with ZERO allowlist cushion) — routing the emits + the structured
+ * log lines through `wireVoiceObs` keeps that file shrink-only and the per-handler
+ * wiring delta a few lines (each handler calls `wireVoiceObs(...)` + `.completed` /
  * `.failed`), NOT 20-40 inline lines across two handlers (the file-size gate keys
  * on path).
  *
  * DIVERGENCE FROM `createVisionObsEmitter` (vision-obs-emit.ts): the vision twin
- * FUSES the trajectory record AND the §2.7 log line into one call, because the
- * vision handler had NO prior structured logging. The voice handlers/pipeline
- * ALREADY carry the §2.7 logger floor (Plan 01 / the inbound handler / the
+ * FUSES the trajectory record AND the structured log line into one call, because
+ * the vision handler had NO prior structured logging. The voice handlers/pipeline
+ * ALREADY carry the standard logger floor (the inbound handler / the
  * voice-out pipeline). So `createVoiceObsEmitter` is trajectory-RECORD-focused —
- * it does NOT re-log (a fused log would DOUBLE-emit the §2.7 line). The §2.7 line
+ * it does NOT re-log (a fused log would DOUBLE-emit the line). The log line
  * lives in the SEPARATE `wireVoiceObs` logger closure, BESIDE the record (the
  * video-handler convention), so the handler call-site stays tiny while the record
  * and the log stay decoupled.
  *
- * CONTENT-FREE (T-196-04/05): every recorded payload carries ids / labels /
+ * CONTENT-FREE: every recorded payload carries ids / labels /
  * numbers / booleans / closed-enum reasons ONLY — NEVER the audio bytes, the
  * transcript text, the synthesized audio, or a credential. `costUsd` rides
- * `media.*.completed` presence-conditionally (OBS-05 Route a); the keyless caller
- * passes `0` EXPLICITLY so "free" is visible (FLAG 4), keyed-no-cost omits it. The
+ * `media.*.completed` presence-conditionally; the keyless caller
+ * passes `0` EXPLICITLY so "free" is visible, keyed-no-cost omits it. The
  * domain `SttErrorKind` rides `media.*.failed.errorKind` verbatim; the closed log
  * union (via `STT_ERR_TO_LOG`) + the SANITIZED provider message ride the
  * structured Pino LOG (the `wireVoiceObs` WARN closure), never the trajectory.
@@ -42,12 +42,12 @@
  */
 import { STT_ERR_TO_LOG, sanitizeLogString, systemNowMs } from "@comis/core";
 /**
- * OBS-05 (Phase 196, WR-02): the SINGLE source of truth for the keyless-cost rule
- * — `keyless ⇒ costUsd:0 explicit` (so "free" is VISIBLE — FLAG 4), `keyed-no-cost
- * ⇒ omit`. Previously this ternary was duplicated inline at the two `media-handlers.ts`
- * voice call sites; a third voice handler could silently omit it and regress the
- * keyless `$0` visibility with no test catching it. Centralized here so every
- * `completed` path (the trajectory record AND the §2.7 log line) derives it once.
+ * The SINGLE source of truth for the keyless-cost rule
+ * — `keyless ⇒ costUsd:0 explicit` (so "free" is VISIBLE), `keyed-no-cost
+ * ⇒ omit`. Duplicating this ternary inline at the `media-handlers.ts`
+ * voice call sites would let a third voice handler silently omit it and regress
+ * the keyless `$0` visibility with no test catching it. Centralized here so every
+ * `completed` path (the trajectory record AND the log line) derives it once.
  * An explicit caller `costUsd` always wins (keyed providers that DO know their cost).
  */
 function effectiveCostUsd(costUsd, keyless) {
@@ -57,7 +57,7 @@ function effectiveCostUsd(costUsd, keyless) {
 }
 /**
  * Resolve the per-session recorder by `sessionKey`, fire the
- * `media.${kind}.requested` entry record (with the OBS-03 `onSkip` reasons when
+ * `media.${kind}.requested` entry record (with the `onSkip` reasons when
  * supplied), and return a bound {@link VoiceObsEmitter}. In-turn the handler passes
  * the dispatcher-injected `_callerSessionKey`. When the registry is absent,
  * `getRecorder` returns null/undefined, or there is no session key, the trajectory
@@ -76,7 +76,7 @@ export function createVoiceObsEmitter(args) {
             recorder.recordEvent(type, data);
     };
     // The `media.${kind}.*` template literal narrows to the six closed
-    // TRAJECTORY_EVENT_TYPES literals (DOT form — FLAG 3) added in Task 1.
+    // TRAJECTORY_EVENT_TYPES literals (the DOT-separated form).
     const REQUESTED = `media.${kind}.requested`;
     const COMPLETED = `media.${kind}.completed`;
     const FAILED = `media.${kind}.failed`;
@@ -89,7 +89,7 @@ export function createVoiceObsEmitter(args) {
     return {
         active: recorder != null,
         completed({ provider, keyless, model, durationMs, audioBytes, costUsd, source }) {
-            // WR-02: derive the keyless `costUsd:0` centrally (the single source of truth).
+            // Derive the keyless `costUsd:0` centrally (the single source of truth).
             const cost = effectiveCostUsd(costUsd, keyless);
             emit(COMPLETED, {
                 provider,
@@ -98,7 +98,7 @@ export function createVoiceObsEmitter(args) {
                 ...(model !== undefined ? { model } : {}),
                 ...(durationMs !== undefined ? { durationMs } : {}),
                 ...(audioBytes !== undefined ? { audioBytes } : {}),
-                ...(cost !== undefined ? { costUsd: cost } : {}), // keyless ⇒ 0 (present — FLAG 4)
+                ...(cost !== undefined ? { costUsd: cost } : {}), // keyless ⇒ 0 (present — "free" stays visible)
                 source,
             });
         },
@@ -107,7 +107,7 @@ export function createVoiceObsEmitter(args) {
         },
     };
 }
-/** The default WARN hint per domain kind (the actionable §2.7 remedy). */
+/** The default WARN hint per domain kind (the actionable remedy the operator reads). */
 const HINT_BY_KIND = {
     no_keyless_engine: "enable the local whisper engine or set an audio API key (a Codex OAuth login cannot drive audio)",
     auth_required: "set the provider's audio API key, or switch to a keyless provider (local/edge)",
@@ -118,15 +118,15 @@ const HINT_BY_KIND = {
     dependency: "a voice dependency failed; check the provider/engine status",
 };
 /**
- * SEC-01 host-only redaction: strip credentials from a free-text provider error
+ * Host-only redaction: strip credentials from a free-text provider error
  * BEFORE it reaches a log line, and reduce any URL to its HOST (drop path +
  * query, where a token may hide). `sanitizeLogString` (the @comis/core
  * defense-in-depth scrubber) removes Bearer tokens / sk- keys / URL-embedded
  * passwords; the URL→host reduction here removes the path/query a token can ride
- * in. Never log a raw credential-bearing URL or `Bearer` (the §2.7 floor); Pino's
+ * in. Never log a raw credential-bearing URL or `Bearer`; Pino's
  * depth-3 censor is the layer-1 backstop.
  *
- * ORDER MATTERS (Phase 196 CR-02): `sanitizeLogString` must run FIRST, while the
+ * ORDER MATTERS: `sanitizeLogString` must run FIRST, while the
  * literal `Bearer <token>` is still intact — its `BEARER_TOKEN_LOG`
  * (`/Bearer\s+.../`) rule is the ONLY one that catches a GENERIC opaque bearer
  * (a Deepgram/ElevenLabs/custom token that is not `sk-`/hex-40+/a known prefix),
@@ -153,33 +153,32 @@ function redactVoiceLogMessage(message) {
     const sanitized = sanitizeLogString(hostOnly);
     // THEN drop the now-residual `Authorization:` / `Bearer` scheme markers so the
     // line carries no credential CONTEXT at all (the token is already redacted by
-    // this point) — the 196-01 redactErrorMessage precedent.
+    // this point) — the same discipline as @comis/core's `redactErrorMessage`.
     const noScheme = sanitized.replace(/\bAuthorization:/gi, "").replace(/\bBearer\b/gi, "");
     // Strip any BARE keyless-Ollama sentinel value (`ollama-no-auth`) not preceded
     // by `Bearer` (those were caught above): it is a platform-wide credential-
     // position sentinel (the keyless-LLM bearer), so it must never appear in a
-    // voice log line at any level (T-196-08). It is too short for
+    // voice log line at any level. It is too short for
     // `sanitizeLogString`'s long-token rule, so strip it by exact name.
     return noScheme.replace(/\bollama-no-auth\b/gi, "");
 }
 /**
- * OBS-04 (Phase 196): emit a CONTENT-FREE `voice_degraded` health_signal
+ * Emit a CONTENT-FREE `voice_degraded` health_signal
  * diagnostic row on a voice failure, so the cross-session `comis fleet`
  * `voice_health` finding (fleet-findings.ts `voiceDegradedFromRow`/`buildFindings`)
  * has a source. The fleet assembler reads `obs_diagnostics` (`health_signal` /
  * `model_health` / `config_posture`) — voice failures emit NO row otherwise (the
  * per-session trajectory record is daemon-context-only; the executor session_summary
  * rollup that feeds the fleet carries only the closed LOG ErrorKinds, which conflate
- * voice with non-voice). This is the route-(b)-minimal emit: the ONLY new emit site,
- * and it lives in THIS obs-layer module (not media-handlers.ts), reading the obsStore
- * already on MediaApiDeps — so no earlier-wave file is touched (the plan's FLAG-7
- * route decision).
+ * voice with non-voice). This is the ONLY voice emit site into the store, and it
+ * lives in THIS obs-layer module (not media-handlers.ts), reading the obsStore
+ * already on MediaApiDeps — so no new dependency is introduced.
  *
  * Details carry the signal label + the closed domain `SttErrorKind` + the voice
- * family ONLY — NEVER the raw provider message, a URL, or a secret (H1 no-body;
- * the fleet finding is safe to paste). Best-effort: an absent store no-ops and a
- * throwing store is swallowed (observability is non-fatal — the §2.7 lines + the
- * trajectory record are the primary obligations; the store DEGRADES SILENTLY).
+ * family ONLY — NEVER the raw provider message, a URL, or a secret (no message
+ * bodies; the fleet finding is safe to paste). Best-effort: an absent store no-ops
+ * and a throwing store is swallowed (observability is non-fatal — the log lines +
+ * the trajectory record are the primary obligations; the store DEGRADES SILENTLY).
  */
 function emitVoiceDegradedSignal(obsStore, args) {
     if (obsStore === undefined)
@@ -201,13 +200,13 @@ function emitVoiceDegradedSignal(obsStore, args) {
     }
 }
 /**
- * wireVoiceObs — the PRIMARY handler-wiring path (the WARNING-2 lever for the
- * `media-handlers.ts` 799/800 cap). Bundles {@link createVoiceObsEmitter} with a
- * typed §2.7 logger closure so Plan 03's per-handler delta is a `wireVoiceObs(...)`
+ * wireVoiceObs — the PRIMARY handler-wiring path (what keeps
+ * `media-handlers.ts` under its 800-line cap). Bundles {@link createVoiceObsEmitter}
+ * with a typed logger closure so each handler's delta is a `wireVoiceObs(...)`
  * call + the `.completed` / `.failed` calls — not 20-40 inline lines.
  *
  * - Construction fires the `media.${kind}.requested` record (with `onSkip`).
- * - `completed(a)` → `obs.completed(a)` AND ONE `logger.info` (the §2.7 completion
+ * - `completed(a)` → `obs.completed(a)` AND ONE `logger.info` (the completion
  *   line carrying provider/keyless/model/durationMs/audioBytes/costUsd/source).
  * - `failed(a)` → `obs.failed({ errorKind: a.sttErrorKind, ... })` AND ONE
  *   `logger.warn` carrying `err:` (the SANITIZED host-only message — no Bearer/
@@ -226,7 +225,7 @@ export function wireVoiceObs(args) {
         obs,
         completed(a) {
             obs.completed(a);
-            // WR-02: the §2.7 line carries the SAME centrally-derived keyless cost as the
+            // The log line carries the SAME centrally-derived keyless cost as the
             // trajectory record (keyless ⇒ 0 visible; an explicit cost wins; keyed ⇒ omit).
             const cost = effectiveCostUsd(a.costUsd, a.keyless);
             logger.info({
@@ -244,7 +243,7 @@ export function wireVoiceObs(args) {
         },
         failed(a) {
             obs.failed({ errorKind: a.sttErrorKind, provider: a.provider, source: a.source });
-            // OBS-04: feed the cross-session fleet voice_health finding (content-free,
+            // Feed the cross-session fleet voice_health finding (content-free,
             // best-effort — never breaks the handler).
             emitVoiceDegradedSignal(obsStore, { kind, errorKind: a.sttErrorKind, agentId });
             logger.warn({