comisai 1.0.45 → 1.0.46

package/node_modules/@comis/daemon/dist/wiring/main-helpers.d.ts

@@ -14,7 +14,7 @@ import { type VideoCostLimiter } from "../api/video-cost-limiter.js";
 import type { LoggingResult } from "./setup-logging.js";
 import type { BootContext } from "../daemon-types.js";
 import { type MainProviderVision } from "../api/main-provider-vision.js";
-/** The Phase 213-08 (BUDGET-01/02 + RATE-02) bounded-autonomy late-bind seam built in
+/** The bounded-autonomy late-bind seam built in
  *  `bootAgents`: the per-root budget holder (populated by the cap layer in bootChannels) +
  *  the session→rootRunId index + resolver (synthetic root-session-* fallback) + the
  *  daemon-wide LeaseManager (shared by the cron-fire mint AND the cap layer). Built before
@@ -84,19 +84,19 @@ export declare function resolveGatewayTokens(deps: {
     daemonLogger: BootContext["daemonLogger"];
 }): Array<ResolvedGatewayToken>;
 /**
- * EMB-01: resolve the two advisory multilingual booleans for the boot
+ * Resolve the two advisory multilingual booleans for the boot
  * `model_health` snapshot, PROVIDER-AWARE.
  *
  * The embedder id mirrors `setup-memory.ts:308,316` — OpenAI provider →
  * `embedding.openai.model`; local/auto → `embedding.local.modelUri`. It is NOT
- * the legacy `memory.recall.embeddingModel` field (Pitfall 3 — that predates the
+ * the legacy `memory.recall.embeddingModel` field (that predates the
  * top-level embedding block and is not the running embedder). The reranker id is
  * `memory.recall.rerankerModel` (default `bge-reranker-v2-m3`, which the core heuristic
- * classifies multilingual — Pitfall 2). Only the embedder has a config override
+ * classifies multilingual). Only the embedder has a config override
  * flag today, so the reranker passes `undefined` declared.
  *
  * Pure (config in → booleans out); no I/O. ADVISORY ONLY — nothing gates recall
- * on the result (I4; the FTS trigram floor carries recall regardless). Extracted
+ * on the result (the FTS trigram floor carries recall regardless). Extracted
  * from `daemon.ts` to keep the composition root under its architecture line cap.
  */
 export declare function resolveModelHealthMultilingual(config: BootContext["container"]["config"]): {
@@ -108,32 +108,32 @@ export declare function resolveModelHealthMultilingual(config: BootContext["cont
  * config). Extracted from `daemon.ts` to keep the composition root under its
  * architecture line cap.
  *
- * RES-02/CRED-01: the selector routes provider:"auto"/pi-ai-backed providers to
- * the Plan-03 pi-image-adapter (following the DEFAULT agent's resolved main
+ * The selector routes provider:"auto"/pi-ai-backed providers to
+ * the pi-image-adapter (following the DEFAULT agent's resolved main
  * provider, key via SecretManager), keeps explicit fal/openai on the legacy
  * skills adapter (additive), and returns an honest-unavailable port (with the
- * knob hint) for an image-incapable main (RES-03) — never a misroute. The
+ * knob hint) for an image-incapable main — never a misroute. The
  * getter reads the config + secretManager on use, but is invoked ONCE here at
  * boot and the handler holds that boot-built adapter instance — so key rotation
- * requires a daemon restart to take effect (NOT live per-request; IN-01
- * 183-REVIEW — parity with the pre-existing fal/openai one-shot probe).
- * Per-call per-agent re-selection (and live rotation) is a 186/multi-agent
- * refinement; Phase 183 resolves the common case (the default agent's main
- * provider) at boot.
+ * requires a daemon restart to take effect (NOT live per-request — parity with
+ * the pre-existing fal/openai one-shot probe).
+ * Per-call per-agent re-selection (and live rotation) is a multi-agent
+ * refinement; boot resolves the common case (the default agent's main
+ * provider).
  */
 export declare function buildImageGenBundle(deps: {
     container: BootContext["container"];
     defaultAgentId: string;
     skillsLogger: BootContext["skillsLogger"];
     /**
-     * The DEFAULT agent's OAuthTokenManager (184), surfaced from setupAgents
+     * The DEFAULT agent's OAuthTokenManager, surfaced from setupAgents
      * (AgentsResult.oauthManagers). Threaded into the selector so the Codex image
-     * path resolves its OAuth bearer (CDX-01/CRED-01). Undefined when the default
+     * path resolves its OAuth bearer. Undefined when the default
      * agent has no OAuth config → codex is honest-unavailable (never a crash).
      */
     oauthManager?: OAuthTokenManager;
     /**
-     * DEL-01 (186): the per-agent workspace dirs + default, threaded from
+     * The per-agent workspace dirs + default, threaded from
      * `c.workspaceDirs`/`c.defaultWorkspaceDir` at the call site. The per-agent
      * `persistImage` getter (below) resolves the agent's confined workspace from
      * these (mirrors the screenshot getter at setup-tools.ts:305-316).
@@ -144,12 +144,12 @@ export declare function buildImageGenBundle(deps: {
     imageGenConfig: BootContext["container"]["config"]["integrations"]["media"]["imageGeneration"];
     imageGenProvider: ImageGenerationPort | undefined;
     imageGenRateLimiter: ReturnType<typeof createImageGenRateLimiter> | undefined;
-    /** DEL-01 (186): per-agent persist getter → MediaPersistenceService.persist. */
+    /** Per-agent persist getter → MediaPersistenceService.persist. */
     persistImage: (agentId: string, buffer: Buffer, opts: {
         mediaKind: "image";
         mimeType: string;
     }) => ReturnType<MediaPersistenceService["persist"]>;
-    /** SEC-02 (186): per-agent/hour USD cost ceiling. Undefined when
+    /** Per-agent/hour USD cost ceiling. Undefined when
      *  `maxCostPerHourUsd` is unset (ceiling skipped — count limit still applies). */
     imageGenCostLimiter: ImageCostLimiter | undefined;
 }>;
@@ -166,7 +166,7 @@ type ImageHandlerBootSlice = Pick<BootContext, "imageGenProvider" | "imageGenRat
  * image generation is disabled (no provider or no rate limiter), else the dep
  * object the image.generate RPC handler consumes.
  *
- * WR-04 (186-REVIEW): extracted from `daemon.ts` (buildRpcDispatchDeps) to keep
+ * Extracted from `daemon.ts` (buildRpcDispatchDeps) to keep
  * the composition root under its 3000-line architecture cap. The original site
  * folded six concerns (workspaceDirs / defaultWorkspaceDir / persist /
  * trajectoryRegistry / eventBus / costLimiter) onto one >300-char line to stay
@@ -183,11 +183,11 @@ export declare function buildImageHandlerDeps(c: ImageHandlerBootSlice, resolveA
  * limiter + cost limiter + per-agent persist getter + config). Mirrors
  * `buildImageGenBundle`; extracted from `daemon.ts` to hold its 3000-line cap.
  *
- * RES-02/CRED-01: the selector routes explicit `fal` to the skills FAL adapter,
+ * The selector routes explicit `fal` to the skills FAL adapter,
  * follows the DEFAULT agent's resolved main provider for `auto` (veo/grok
- * selection, live adapters land Phase 190 → honest-unavailable here), and returns
+ * selection → honest-unavailable here until those live adapters land), and returns
  * an honest-unavailable port (with the knob hint) for a video-incapable main
- * (RES-03) — never a misroute. The getter reads the config + secretManager on
+ * — never a misroute. The getter reads the config + secretManager on
  * use, but is invoked ONCE here at boot and the handler holds that boot-built
  * port — key rotation requires a daemon restart (parity with the image bundle).
  */
@@ -195,16 +195,16 @@ export declare function buildVideoGenBundle(deps: {
     container: BootContext["container"];
     defaultAgentId: string;
     skillsLogger: BootContext["skillsLogger"];
-    /** DEL-01: per-agent workspace dirs + default, threaded from the call site;
+    /** Per-agent workspace dirs + default, threaded from the call site;
      *  the per-agent `persistVideo` getter resolves the agent's confined workspace
      *  from these. */
     workspaceDirs: Map<string, string>;
     defaultWorkspaceDir: string;
-    /** JOB-01 (189): the shared better-sqlite3 memory.db handle the VideoJobStore
+    /** The shared better-sqlite3 memory.db handle the VideoJobStore
      *  binds (the SAME handle setupDeliveryQueue takes — typed `unknown` to avoid a
      *  cross-package better-sqlite3 type dep, exactly like setupDeliveryQueue). */
     db: unknown;
-    /** JOB-03 (189) — WARNING-1: the EARLY-created channel-adapter registry the
+    /** The EARLY-created channel-adapter registry the
      *  delivery queue closes over. It is populated BY REFERENCE in
      *  wirePostChannelsLifecycle (after setupChannels), so the poller resolves a
      *  LIVE adapter at delivery time — NOT the late `adaptersByType` (which is not
@@ -212,26 +212,26 @@ export declare function buildVideoGenBundle(deps: {
     channelAdaptersRef: Map<string, DeliveryAdapter>;
     /** The daemon TimerPort drives the poller's outer sweeper (sanctioned, unref'd). */
     timers: TimerPort;
-    /** DEFAULT agent's OAuthTokenManager — threaded to the selector for the Grok-video OAuth path (190 / CRED-01). @see buildImageGenBundle. */
+    /** DEFAULT agent's OAuthTokenManager — threaded to the selector for the Grok-video OAuth path. @see buildImageGenBundle. */
     oauthManager?: OAuthTokenManager;
-    /** OBS-04/OBS-03 (192): trajectory registry + event bus → createVideoPoller (off-turn video.* live emit by record.sessionKey + the cost route). Optional. */
+    /** Trajectory registry + event bus → createVideoPoller (off-turn video.* live emit by record.sessionKey + the cost route). Optional. */
     trajectoryRegistry?: import("@comis/observability").SessionTrajectoryHandleRegistry;
     eventBus?: BootContext["container"]["eventBus"];
 }): {
     videoGenConfig: BootContext["container"]["config"]["integrations"]["media"]["videoGeneration"];
     videoGenProvider: VideoGenerationPort | undefined;
     videoGenRateLimiter: ReturnType<typeof createVideoGenRateLimiter> | undefined;
-    /** DEL-01: per-agent persist getter → MediaPersistenceService.persist (videos/). */
+    /** Per-agent persist getter → MediaPersistenceService.persist (videos/). */
     persistVideo: (agentId: string, buffer: Buffer, opts: {
         mediaKind: "video";
         mimeType: string;
     }) => ReturnType<MediaPersistenceService["persist"]>;
-    /** SEC-02 (DIVERGENCE 3): per-agent/hour USD cost ceiling, gated PRE-submit.
+    /** Per-agent/hour USD cost ceiling, gated PRE-submit.
      *  Undefined when `maxCostPerHourUsd` is unset (ceiling skipped, count-only). */
     videoGenCostLimiter: VideoCostLimiter | undefined;
-    /** JOB-01 (189): the durable async job store (undefined when video disabled). */
+    /** The durable async job store (undefined when video disabled). */
     videoJobStore: ReturnType<typeof createVideoJobStore> | undefined;
-    /** JOB-02 (189): the two-phase background poller (undefined when video disabled). */
+    /** The two-phase background poller (undefined when video disabled). */
     videoPoller: VideoPoller | undefined;
 };
 /**
@@ -241,15 +241,15 @@ export declare function buildVideoGenBundle(deps: {
 type VideoHandlerBootSlice = Pick<BootContext, "videoGenProvider" | "videoGenRateLimiter" | "videoGenCostLimiter" | "videoJobStore" | "videoPoller" | "trajectoryRegistry" | "skillsLogger" | "container"> & Required<Pick<BootContext, "videoGenConfig" | "adaptersByType" | "workspaceDirs" | "defaultWorkspaceDir" | "persistVideo">>;
 /**
  * Build the `videoHandlerDeps` slice of `ApiDispatchDeps` — `undefined` when
- * video disabled. Mirrors `buildImageHandlerDeps`. OBS-04 (192): threads
+ * video disabled. Mirrors `buildImageHandlerDeps`. Threads
  * `trajectoryRegistry` (in-turn video.* direct-emit) + `eventBus` off `c`.
  */
 export declare function buildVideoHandlerDeps(c: VideoHandlerBootSlice, resolveAgentMainProvider: (agentId: string) => {
     providerId: string;
 }): import("../api/rpc-dispatch.js").ApiDispatchDeps["videoHandlerDeps"];
 /**
- * Build the `videoStatusHandlerDeps` slice of `ApiDispatchDeps` (Phase 189 /
- * Plan 03 — JOB-04). The READ side of the async lifecycle: `video.status` reads
+ * Build the `videoStatusHandlerDeps` slice of `ApiDispatchDeps`.
+ * The READ side of the async lifecycle: `video.status` reads
  * the SAME agent-scoped `videoJobStore` the poller writes (single source — no
  * second instance). `undefined` when video generation is disabled (no store),
  * which also leaves the `video_status` tool ungated (see `videoStatusEnabled`).
@@ -258,28 +258,28 @@ export declare function buildVideoHandlerDeps(c: VideoHandlerBootSlice, resolveA
  */
 export declare function buildVideoStatusHandlerDeps(c: VideoHandlerBootSlice): import("../api/rpc-dispatch.js").ApiDispatchDeps["videoStatusHandlerDeps"];
 /**
- * VIS-01 (187): resolve the VISION API key by PROVIDER. Mirrors
+ * Resolve the VISION API key by PROVIDER. Mirrors
  * `resolveImageApiKey` (pi-image-adapter.ts:279) but keyed by PROVIDER, since
  * vision keys are the SAME completion-path keys (`OPENAI_API_KEY` /
- * `ANTHROPIC_API_KEY` / `GOOGLE_API_KEY`) — there is no separate vision key
- * (I7). Reads the SAME `SecretManager` the main provider uses, never the raw
+ * `ANTHROPIC_API_KEY` / `GOOGLE_API_KEY`) — there is no separate vision
+ * key. Reads the SAME `SecretManager` the main provider uses, never the raw
  * environment. Returns undefined for `openai-codex` (its bearer comes from the
- * OAuth manager, the 184 path) and for any unknown / key-less provider, which
+ * OAuth manager) and for any unknown / key-less provider, which
  * surfaces as honest-unavailable inside the bridge.
  */
 export declare function resolveVisionApiKey(provider: string, secretManager: {
     get(key: string): string | undefined;
 }): string | undefined;
 /**
- * VIS-01 (187): build the provider-following VISION bridge capability the media
+ * Build the provider-following VISION bridge capability the media
  * handler consumes via `MediaApiDeps.mainProviderVision`. Mirrors
  * `buildImageGenBundle`'s cred closure (:290-313) + `buildImageHandlerDeps`'s
  * literal assembly — it closes over `container.secretManager` + the default
  * agent's `oauthManager`/`oauthProfiles` + `resolveAgentModel` + the
- * agents/models config, and delegates to Plan 01's `createMainProviderVision`.
+ * agents/models config, and delegates to `createMainProviderVision`.
  *
  * The capability resolves the agent's main `{ provider, modelId }` via the
- * EXACT completion-path `resolveAgentModel` (the I4 lockstep — no second source
+ * EXACT completion-path `resolveAgentModel` (the lockstep — no second source
  * of truth), then the key by-provider (`resolveVisionApiKey`) with the codex
  * bearer fallback (the DEFAULT agent's OAuth manager). Also returns
  * `resolveMainModelId` — the SAME resolver, surfaced so the handler-side vision
@@ -292,7 +292,7 @@ export declare function buildMediaVisionBundle(deps: {
     skillsLogger: BootContext["skillsLogger"];
     /** The boot ClockPort (the bridge needs a non-Date.now() per-message timestamp). */
     clock: ClockPort;
-    /** The DEFAULT agent's OAuth manager (184), for the codex cred path. Undefined
+    /** The DEFAULT agent's OAuth manager, for the codex cred path. Undefined
      *  → codex resolves no bearer → honest-unavailable (never a crash). */
     oauthManager?: OAuthTokenManager;
 }): {

package/node_modules/@comis/daemon/dist/wiring/main-helpers.js

@@ -12,12 +12,12 @@ import { createChannelHealthMonitor } from "@comis/channels";
 import { createImageGenRateLimiter } from "@comis/skills";
 import { createLeaseManager } from "@comis/infra";
 import { createRootRunIdResolver } from "./setup-capability-endpoint-boot.js";
-// Video generation (Phase 188 / Plan 04): the FAL queue factory + per-agent rate
+// Video generation: the FAL queue factory + per-agent rate
 // limiter, imported from the bare @comis/skills barrel exactly like the image
 // route (the adapter + @fal-ai/client dep stay in @comis/skills — no daemon
 // phantom dep).
 import { createVideoGenProvider, createVideoGenRateLimiter } from "@comis/skills";
-// JOB-01/JOB-02 (189): the durable async job store (shared memory.db) + the
+// The durable async job store (shared memory.db) + the
 // two-phase background poller. createVideoJobStore is from @comis/memory (the
 // store lives beside the delivery queue); createVideoPoller is the sibling daemon
 // wiring. Both are CONSTRUCTED here in buildVideoGenBundle (the construction site
@@ -25,14 +25,14 @@ import { createVideoGenProvider, createVideoGenRateLimiter } from "@comis/skills
 import { createVideoJobStore } from "@comis/memory";
 import { createVideoPoller } from "./setup-video-poller.js";
 import { resolveVideoSecretsForRedaction } from "./video-log-redaction.js";
-// DEL-01 (186): the per-agent media persistence getter mirrors the screenshot
+// The per-agent media persistence getter mirrors the screenshot
 // precedent (setup-tools.ts:69,305). Sibling-direct on the `@comis/skills/tools`
 // subpath (the proven path), NOT the bare `@comis/skills` barrel.
 import { createMediaPersistenceService } from "@comis/skills/tools";
-// SEC-02 (186): the per-agent/hour USD cost ceiling, a daemon-side accumulator
+// The per-agent/hour USD cost ceiling, a daemon-side accumulator
 // (sibling api/ module) constructed beside the count rate limiter below.
 import { createImageCostLimiter } from "../api/image-cost-limiter.js";
-// SEC-02 (188 / DIVERGENCE 3): the per-agent/hour video USD cost ceiling, gated
+// The per-agent/hour video USD cost ceiling, gated
 // PRE-submit against a worst-case estimate (sibling api/ module).
 import { createVideoCostLimiter } from "../api/video-cost-limiter.js";
 // Sibling-direct imports (not via the wiring barrel) to keep main-helpers free
@@ -42,7 +42,7 @@ import { createImageProviderSelector } from "./setup-image-provider.js";
 import { createVideoProviderSelector } from "./setup-video-provider.js";
 import { resolveAgentModel } from "./setup-agents/setup-agents-tooling.js";
 import { registerComisImageProviders } from "../api/pi-image-adapter.js";
-// VIS-01 (187): the provider-following vision bridge (Plan 01) — the bundle
+// The provider-following vision bridge — the bundle
 // builds its capability by closing over the cred resolvers + resolveAgentModel.
 import { createMainProviderVision } from "../api/main-provider-vision.js";
 /** Build the {@link BoundedAutonomyWiring} late-bind seam (see the interface doc). */
@@ -198,19 +198,19 @@ export function resolveGatewayTokens(deps) {
     return resolved;
 }
 /**
- * EMB-01: resolve the two advisory multilingual booleans for the boot
+ * Resolve the two advisory multilingual booleans for the boot
  * `model_health` snapshot, PROVIDER-AWARE.
  *
  * The embedder id mirrors `setup-memory.ts:308,316` — OpenAI provider →
  * `embedding.openai.model`; local/auto → `embedding.local.modelUri`. It is NOT
- * the legacy `memory.recall.embeddingModel` field (Pitfall 3 — that predates the
+ * the legacy `memory.recall.embeddingModel` field (that predates the
  * top-level embedding block and is not the running embedder). The reranker id is
  * `memory.recall.rerankerModel` (default `bge-reranker-v2-m3`, which the core heuristic
- * classifies multilingual — Pitfall 2). Only the embedder has a config override
+ * classifies multilingual). Only the embedder has a config override
  * flag today, so the reranker passes `undefined` declared.
  *
  * Pure (config in → booleans out); no I/O. ADVISORY ONLY — nothing gates recall
- * on the result (I4; the FTS trigram floor carries recall regardless). Extracted
+ * on the result (the FTS trigram floor carries recall regardless). Extracted
  * from `daemon.ts` to keep the composition root under its architecture line cap.
  */
 export function resolveModelHealthMultilingual(config) {
@@ -227,26 +227,26 @@ export function resolveModelHealthMultilingual(config) {
  * config). Extracted from `daemon.ts` to keep the composition root under its
  * architecture line cap.
  *
- * RES-02/CRED-01: the selector routes provider:"auto"/pi-ai-backed providers to
- * the Plan-03 pi-image-adapter (following the DEFAULT agent's resolved main
+ * The selector routes provider:"auto"/pi-ai-backed providers to
+ * the pi-image-adapter (following the DEFAULT agent's resolved main
  * provider, key via SecretManager), keeps explicit fal/openai on the legacy
  * skills adapter (additive), and returns an honest-unavailable port (with the
- * knob hint) for an image-incapable main (RES-03) — never a misroute. The
+ * knob hint) for an image-incapable main — never a misroute. The
  * getter reads the config + secretManager on use, but is invoked ONCE here at
  * boot and the handler holds that boot-built adapter instance — so key rotation
- * requires a daemon restart to take effect (NOT live per-request; IN-01
- * 183-REVIEW — parity with the pre-existing fal/openai one-shot probe).
- * Per-call per-agent re-selection (and live rotation) is a 186/multi-agent
- * refinement; Phase 183 resolves the common case (the default agent's main
- * provider) at boot.
+ * requires a daemon restart to take effect (NOT live per-request — parity with
+ * the pre-existing fal/openai one-shot probe).
+ * Per-call per-agent re-selection (and live rotation) is a multi-agent
+ * refinement; boot resolves the common case (the default agent's main
+ * provider).
  */
 export async function buildImageGenBundle(deps) {
     const { container, defaultAgentId, skillsLogger, oauthManager, workspaceDirs, defaultWorkspaceDir } = deps;
     const imageGenConfig = container.config.integrations.media.imageGeneration;
-    registerComisImageProviders(); // PI-02 — once at boot, before any generateImages().
+    registerComisImageProviders(); // Once at boot, before any generateImages().
     // defaultAgentId is tried FIRST; the literal "default" is only a redundant
-    // secondary guard for the agents-omitted case (WR-01's fix aligns the HANDLER
-    // accessor with this boot selector — defaultAgentId-first).
+    // secondary guard for the agents-omitted case (the HANDLER accessor aligns
+    // with this boot selector — defaultAgentId-first).
     const defaultAgentCfg = container.config.agents[defaultAgentId] ?? container.config.agents["default"];
     // Resolve the default agent's provider AND chat model ONCE (the SAME
     // resolveAgentModel the completion path uses — lockstep). The chat model
@@ -257,7 +257,7 @@ export async function buildImageGenBundle(deps) {
         ? resolveAgentModel(defaultAgentCfg, container.config.models)
         : undefined;
     const defaultMain = defaultResolved?.provider ?? "default";
-    // CRED-01 (store-aware): pre-resolve Codex availability from the PERSISTED
+    // Store-aware: pre-resolve Codex availability from the PERSISTED
     // store (NOT the cold-at-boot in-memory cache) so a logged-in Codex profile
     // counts as available at boot — the fix for the follow-main regression where
     // a Codex agent's images froze unavailable for the daemon's life despite the
@@ -273,9 +273,9 @@ export async function buildImageGenBundle(deps) {
         mainProviderId: defaultMain,
         legacyGetter: createImageGenGetter(imageGenConfig, container.secretManager),
         logger: skillsLogger,
-        // 184: the DEFAULT agent's OAuth manager + its per-agent oauthProfiles map.
-        // The Codex image path resolves its bearer through this exact manager
-        // (CDX-01/CRED-01). defaultAgentCfg is the same defaultAgentId-first lookup
+        // The DEFAULT agent's OAuth manager + its per-agent oauthProfiles map.
+        // The Codex image path resolves its bearer through this exact manager.
+        // defaultAgentCfg is the same defaultAgentId-first lookup
         // used for defaultMain above (the agents-omitted "default" guard).
         oauthManager,
         oauthProfiles: defaultAgentCfg?.oauthProfiles,
@@ -286,14 +286,14 @@ export async function buildImageGenBundle(deps) {
     const imageGenRateLimiter = imageGenProvider
         ? createImageGenRateLimiter({ maxPerHour: imageGenConfig.maxPerHour })
         : undefined;
-    // SEC-02 (186): the USD cost ceiling is wired BESIDE the count rate limiter
+    // The USD cost ceiling is wired BESIDE the count rate limiter
     // (which is retained). Constructed ONLY when `maxCostPerHourUsd` is set AND a
     // provider exists — otherwise undefined, and the handler skips the ceiling
     // (count-only, no regression). Mirrors the createImageGenRateLimiter guard.
     const imageGenCostLimiter = imageGenProvider && imageGenConfig.maxCostPerHourUsd
         ? createImageCostLimiter({ maxCostPerHourUsd: imageGenConfig.maxCostPerHourUsd })
         : undefined;
-    // DEL-01 (186): per-agent MediaPersistenceService getter — the EXACT shape of
+    // Per-agent MediaPersistenceService getter — the EXACT shape of
     // the screenshot precedent (setup-tools.ts:305-316). Lazily built per agent,
     // keyed on agentId, writing to the agent's confined workspace
     // (`~/.comis/workspace/media/photos/` via KIND_TO_SUBDIR["image"]). Replaces
@@ -324,7 +324,7 @@ export async function buildImageGenBundle(deps) {
  * image generation is disabled (no provider or no rate limiter), else the dep
  * object the image.generate RPC handler consumes.
  *
- * WR-04 (186-REVIEW): extracted from `daemon.ts` (buildRpcDispatchDeps) to keep
+ * Extracted from `daemon.ts` (buildRpcDispatchDeps) to keep
  * the composition root under its 3000-line architecture cap. The original site
  * folded six concerns (workspaceDirs / defaultWorkspaceDir / persist /
  * trajectoryRegistry / eventBus / costLimiter) onto one >300-char line to stay
@@ -342,26 +342,26 @@ export function buildImageHandlerDeps(c, resolveAgentMainProvider) {
         config: c.imageGenConfig,
         logger: c.skillsLogger,
         getChannelAdapter: (channelType) => c.adaptersByType.get(channelType),
-        resolveAgentMainProvider, // RES-01
-        workspaceDirs: c.workspaceDirs, // IN-01 (185): reference_image path
+        resolveAgentMainProvider, // resolves the agent's main provider id
+        workspaceDirs: c.workspaceDirs, // reference_image path resolution
         defaultWorkspaceDir: c.defaultWorkspaceDir,
-        persist: c.persistImage, // DEL-01 (186): persist getter
-        trajectoryRegistry: c.trajectoryRegistry, // OBS-04 (186): trajectory direct-emit
-        eventBus: c.container.eventBus, // OBS-03 (186): synthetic cost
-        costLimiter: c.imageGenCostLimiter, // SEC-02 (186): USD cost ceiling
+        persist: c.persistImage, // per-agent persist getter
+        trajectoryRegistry: c.trajectoryRegistry, // trajectory direct-emit
+        eventBus: c.container.eventBus, // synthetic cost event
+        costLimiter: c.imageGenCostLimiter, // USD cost ceiling
     };
 }
-/** Raised persistence cap for video (DEL-01): 200 MB (vs the 50 MB image
+/** Raised persistence cap for video: 200 MB (vs the 50 MB image
  *  default) holds a multi-minute 1080p mp4 while bounding a runaway download. */
 const VIDEO_PERSIST_MAX_BYTES = 200 * 1024 * 1024;
 /**
- * WR-06: narrow a live channel adapter to its capabilities at RUNTIME.
+ * Narrow a live channel adapter to its capabilities at RUNTIME.
  * `channelAdaptersRef` is typed `Map<string, DeliveryAdapter>` (the delivery queue
  * needs only `sendMessage`), but the runtime entries are the FULL channel adapters
  * — some expose `sendAttachment`, some (IRC) do not. A `typeof sendAttachment ===
  * "function"` check (not a blind double-cast) returns `undefined` for a
  * non-attaching adapter, so the poller's IRC-degrade branch triggers on a typed
- * `undefined`. DEL-03: the return type also exposes `sendMessage` (a REQUIRED
+ * `undefined`. The return type also exposes `sendMessage` (a REQUIRED
  * ChannelPort + DeliveryAdapter method) for the oversized-degrade link/notice; the
  * cast stays sound — an adapter passing the typeof check is a full ChannelPort.
  */
@@ -377,11 +377,11 @@ function resolveAttachmentAdapter(adapter) {
  * limiter + cost limiter + per-agent persist getter + config). Mirrors
  * `buildImageGenBundle`; extracted from `daemon.ts` to hold its 3000-line cap.
  *
- * RES-02/CRED-01: the selector routes explicit `fal` to the skills FAL adapter,
+ * The selector routes explicit `fal` to the skills FAL adapter,
  * follows the DEFAULT agent's resolved main provider for `auto` (veo/grok
- * selection, live adapters land Phase 190 → honest-unavailable here), and returns
+ * selection → honest-unavailable here until those live adapters land), and returns
  * an honest-unavailable port (with the knob hint) for a video-incapable main
- * (RES-03) — never a misroute. The getter reads the config + secretManager on
+ * — never a misroute. The getter reads the config + secretManager on
  * use, but is invoked ONCE here at boot and the handler holds that boot-built
  * port — key rotation requires a daemon restart (parity with the image bundle).
  */
@@ -404,7 +404,7 @@ export function buildVideoGenBundle(deps) {
             return r.ok ? r.value : undefined;
         },
         logger: skillsLogger,
-        // 190 (CRED-01): the DEFAULT agent's OAuth manager + oauthProfiles for the
+        // The DEFAULT agent's OAuth manager + oauthProfiles for the
         // Grok-video key-or-OAuth path (mirrors buildImageGenBundle:331-332).
         oauthManager,
         oauthProfiles: defaultAgentCfg?.oauthProfiles,
@@ -413,13 +413,13 @@ export function buildVideoGenBundle(deps) {
     const videoGenRateLimiter = videoGenProvider
         ? createVideoGenRateLimiter({ maxPerHour: videoGenConfig.maxPerHour })
         : undefined;
-    // SEC-02 (DIVERGENCE 3): the USD cost ceiling, constructed ONLY when
+    // The USD cost ceiling, constructed ONLY when
     // `maxCostPerHourUsd` is set AND a provider exists — otherwise undefined and
     // the handler skips the ceiling (count-only, no regression).
     const videoGenCostLimiter = videoGenProvider && videoGenConfig.maxCostPerHourUsd
         ? createVideoCostLimiter({ maxCostPerHourUsd: videoGenConfig.maxCostPerHourUsd })
         : undefined;
-    // DEL-01: per-agent MediaPersistenceService getter (mirrors persistImage) with
+    // Per-agent MediaPersistenceService getter (mirrors persistImage) with
     // a RAISED maxBytes for video. Writes to `~/.comis/workspace/media/videos/`.
     const videoPersistenceServices = new Map();
     const persistVideo = (agentId, buffer, opts) => {
@@ -434,11 +434,11 @@ export function buildVideoGenBundle(deps) {
         }
         return svc.persist(buffer, opts);
     };
-    // JOB-01/JOB-02 (189): construct the durable store + background poller ONLY when
+    // Construct the durable store + background poller ONLY when
     // a provider exists (else they are undefined and the boot wiring + handler-deps
     // builder short-circuit on `!videoGenProvider`). The store binds the SHARED
-    // memory.db handle (Q1/O3 LOCKED). The poller closes over `channelAdaptersRef`
-    // (WARNING-1: the EARLY registry the delivery queue uses, populated by reference
+    // memory.db handle. The poller closes over `channelAdaptersRef`
+    // (the EARLY registry the delivery queue uses, populated by reference
     // after setupChannels) so announce-on-complete reaches a LIVE adapter outside a
     // turn — never the late `adaptersByType` (not in scope here).
     let videoJobStore;
@@ -450,17 +450,17 @@ export function buildVideoGenBundle(deps) {
             store: videoJobStore,
             provider: videoGenProvider,
             persist: persistVideo,
-            videoSecrets: resolveVideoSecretsForRedaction(container.secretManager), // SEC-03 (CR-01) exact-match log scrub
+            videoSecrets: resolveVideoSecretsForRedaction(container.secretManager), // exact-match log scrub
             ...(videoGenCostLimiter ? { costLimiter: videoGenCostLimiter } : {}),
             // The poller resolves a LIVE adapter at delivery time from the early
             // channelAdaptersRef (populated by reference post-setupChannels) — the
             // delivery-queue mechanism retyped for an attachment send. Runtime-narrowed
-            // by resolveAttachmentAdapter (WR-06 / DEL-03 — see its doc).
+            // by resolveAttachmentAdapter (see its doc).
             getChannelAdapter: (channelType) => resolveAttachmentAdapter(channelAdaptersRef.get(channelType)),
             config: videoGenConfig,
             logger: skillsLogger,
             timers,
-            // OBS-04/OBS-03 (192): off-turn video.* live emit + the cost route (optional).
+            // Off-turn video.* live emit + the cost route (optional).
             ...(trajectoryRegistry ? { trajectoryRegistry } : {}),
             ...(eventBus ? { eventBus } : {}),
         });
@@ -473,11 +473,11 @@ export function buildVideoGenBundle(deps) {
 }
 /**
  * Build the `videoHandlerDeps` slice of `ApiDispatchDeps` — `undefined` when
- * video disabled. Mirrors `buildImageHandlerDeps`. OBS-04 (192): threads
+ * video disabled. Mirrors `buildImageHandlerDeps`. Threads
  * `trajectoryRegistry` (in-turn video.* direct-emit) + `eventBus` off `c`.
  */
 export function buildVideoHandlerDeps(c, resolveAgentMainProvider) {
-    // 189: the async store + poller are REQUIRED for the submit path. They are
+    // The async store + poller are REQUIRED for the submit path. They are
     // constructed in buildVideoGenBundle alongside the provider, so when the
     // provider exists they always do — but guard explicitly (no undefined slip).
     if (!c.videoGenProvider || !c.videoGenRateLimiter || !c.videoJobStore || !c.videoPoller)
@@ -488,20 +488,20 @@ export function buildVideoHandlerDeps(c, resolveAgentMainProvider) {
         config: c.videoGenConfig,
         logger: c.skillsLogger,
         getChannelAdapter: (channelType) => c.adaptersByType.get(channelType),
-        resolveAgentMainProvider, // RES-01 (obs/lockstep only)
-        workspaceDirs: c.workspaceDirs, // SEC-03: image_url path confinement
+        resolveAgentMainProvider, // obs/lockstep only
+        workspaceDirs: c.workspaceDirs, // image_url path confinement
         defaultWorkspaceDir: c.defaultWorkspaceDir,
-        persist: c.persistVideo, // DEL-01: persist getter (videos/)
-        costLimiter: c.videoGenCostLimiter, // SEC-02 (DIVERGENCE 3): pre-submit ceiling
-        videoJobStore: c.videoJobStore, // JOB-01: handler inserts a pending row on submit
-        videoPoller: c.videoPoller, // JOB-02: hand the job to the background poller
-        trajectoryRegistry: c.trajectoryRegistry, // OBS-04 (192): in-turn video.* direct-emit
-        eventBus: c.container.eventBus, // OBS-03 (192): parity (off-turn cost route = poller)
+        persist: c.persistVideo, // persist getter (videos/)
+        costLimiter: c.videoGenCostLimiter, // pre-submit ceiling
+        videoJobStore: c.videoJobStore, // handler inserts a pending row on submit
+        videoPoller: c.videoPoller, // hand the job to the background poller
+        trajectoryRegistry: c.trajectoryRegistry, // in-turn video.* direct-emit
+        eventBus: c.container.eventBus, // parity (off-turn cost route = poller)
     };
 }
 /**
- * Build the `videoStatusHandlerDeps` slice of `ApiDispatchDeps` (Phase 189 /
- * Plan 03 — JOB-04). The READ side of the async lifecycle: `video.status` reads
+ * Build the `videoStatusHandlerDeps` slice of `ApiDispatchDeps`.
+ * The READ side of the async lifecycle: `video.status` reads
  * the SAME agent-scoped `videoJobStore` the poller writes (single source — no
  * second instance). `undefined` when video generation is disabled (no store),
  * which also leaves the `video_status` tool ungated (see `videoStatusEnabled`).
@@ -512,18 +512,18 @@ export function buildVideoStatusHandlerDeps(c) {
     if (!c.videoJobStore)
         return undefined;
     return {
-        videoJobStore: c.videoJobStore, // JOB-04: agent-scoped get(job_id, agentId)
+        videoJobStore: c.videoJobStore, // agent-scoped get(job_id, agentId)
         logger: c.skillsLogger,
     };
 }
 /**
- * VIS-01 (187): resolve the VISION API key by PROVIDER. Mirrors
+ * Resolve the VISION API key by PROVIDER. Mirrors
  * `resolveImageApiKey` (pi-image-adapter.ts:279) but keyed by PROVIDER, since
  * vision keys are the SAME completion-path keys (`OPENAI_API_KEY` /
- * `ANTHROPIC_API_KEY` / `GOOGLE_API_KEY`) — there is no separate vision key
- * (I7). Reads the SAME `SecretManager` the main provider uses, never the raw
+ * `ANTHROPIC_API_KEY` / `GOOGLE_API_KEY`) — there is no separate vision
+ * key. Reads the SAME `SecretManager` the main provider uses, never the raw
  * environment. Returns undefined for `openai-codex` (its bearer comes from the
- * OAuth manager, the 184 path) and for any unknown / key-less provider, which
+ * OAuth manager) and for any unknown / key-less provider, which
  * surfaces as honest-unavailable inside the bridge.
  */
 export function resolveVisionApiKey(provider, secretManager) {
@@ -534,26 +534,26 @@ export function resolveVisionApiKey(provider, secretManager) {
             return secretManager.get("ANTHROPIC_API_KEY");
         case "google":
         case "google-vertex":
-            // CRED-01 lockstep (185): GOOGLE_API_KEY — the SAME key the completion
+            // Lockstep: GOOGLE_API_KEY — the SAME key the completion
             // path, the vision provider registry, and the env-vars docs use for google.
             return secretManager.get("GOOGLE_API_KEY");
         // "openai-codex" → oauthManager.getApiKey("openai-codex") via the bundle's
-        // resolveCodexKey closure (184 precedent); image-incapable/unknown → honest-
+        // resolveCodexKey closure; image-incapable/unknown → honest-
         // unavailable inside the bridge.
         default:
             return undefined;
     }
 }
 /**
- * VIS-01 (187): build the provider-following VISION bridge capability the media
+ * Build the provider-following VISION bridge capability the media
  * handler consumes via `MediaApiDeps.mainProviderVision`. Mirrors
  * `buildImageGenBundle`'s cred closure (:290-313) + `buildImageHandlerDeps`'s
  * literal assembly — it closes over `container.secretManager` + the default
  * agent's `oauthManager`/`oauthProfiles` + `resolveAgentModel` + the
- * agents/models config, and delegates to Plan 01's `createMainProviderVision`.
+ * agents/models config, and delegates to `createMainProviderVision`.
  *
  * The capability resolves the agent's main `{ provider, modelId }` via the
- * EXACT completion-path `resolveAgentModel` (the I4 lockstep — no second source
+ * EXACT completion-path `resolveAgentModel` (the lockstep — no second source
  * of truth), then the key by-provider (`resolveVisionApiKey`) with the codex
  * bearer fallback (the DEFAULT agent's OAuth manager). Also returns
  * `resolveMainModelId` — the SAME resolver, surfaced so the handler-side vision
@@ -566,7 +566,7 @@ export function buildMediaVisionBundle(deps) {
         container.config.agents[defaultAgentId] ??
         container.config.agents["default"];
     const oauthProfiles = (container.config.agents[defaultAgentId] ?? container.config.agents["default"])?.oauthProfiles;
-    // The I4 lockstep — the SAME resolver the completion path uses. A
+    // The lockstep — the SAME resolver the completion path uses. A
     // missing/misconfigured agent resolves to a sentinel that the bridge maps to
     // honest-unavailable (getModel("unknown", "") fails the model guard).
     const resolveMain = (agentId) => {
@@ -581,7 +581,7 @@ export function buildMediaVisionBundle(deps) {
         // cred-by-PROVIDER (vision keys: OPENAI/ANTHROPIC/GOOGLE_API_KEY) via the
         // SAME SecretManager the completion path reads.
         resolveApiKey: (provider) => resolveVisionApiKey(provider, container.secretManager),
-        // codex bearer via the DEFAULT agent's OAuth manager (184 precedent),
+        // codex bearer via the DEFAULT agent's OAuth manager,
         // unwrapped to string | undefined so the bridge stays OAuthError-decoupled.
         resolveCodexKey: oauthManager
             ? async (provider) => {