comisai 1.0.45 → 1.0.46

package/node_modules/@comis/daemon/dist/wiring/setup-channels/setup-channels-memory-crons-wire.js

@@ -8,17 +8,17 @@
  * the existing test entry point are unchanged.
  *
  * Sentinels handled here:
- * - __MEMORY_LIFECYCLE__ (FORGET-01/06, Phase 200 Plan 06): the KEYLESS soft-eviction sweep.
+ * - __MEMORY_LIFECYCLE__: the KEYLESS soft-eviction sweep.
  *   Threads THIS agent's collapsed `learning.forget` eviction policy onto the per-call sweep
  *   scope (the shared store is constructed once; the behavior is per-agent) and emits the
  *   daemon-side learning:memory_demoted/evicted counts (the store has no bus). OFF by
  *   default → DORMANT (byte-identical). Moved here for the 600L setup-channels dir cap.
- * - __REFLECT__ (v2.31 Reflection, Phase 223): the composition root for the reflection loop
+ * - __REFLECT__: the composition root for the reflection loop
  *   — injects the @comis/memory mental-model store + the trusted-origin LCD source into
  *   runReflection and re-emits the counts-only learning:skill_* funnel daemon-side.
  *
- * (The __USEFULNESS_JUDGE__ + __MEMORY_TRIPLE_EXTRACTION__ dormant crons were DELETED in
- * Phase 226-03 — their dispatch branches are gone; an unrecognized sentinel returns false.)
+ * (The __USEFULNESS_JUDGE__ + __MEMORY_TRIPLE_EXTRACTION__ dormant crons were DELETED —
+ * their dispatch branches are gone; an unrecognized sentinel returns false.)
  *
  * Both re-check cfg.enabled (defence-in-depth — the scheduler already gates, a stale
  * persisted job must not run for a now-disabled agent), inject the segregated store(s)
@@ -27,7 +27,7 @@
  * @module
  */
 import { resolveCronJobCredential, cronCredentialSkipHint, cronCustomModelOpt } from "./setup-channels-cron-credential.js";
-import { resolveOperationModel, resolveProviderFamily, runReflection, classifyReflectOutcome, createLlmReflectionAdapter, REFLECT_PROMPT, PROFILE_REFLECT_PROMPT, TOPIC_REFLECT_PROMPT, } from "@comis/agent";
+import { resolveOperationModel, resolveProviderFamily, runReflection, classifyReflectOutcome, createLlmReflectionAdapter, REFLECT_PROMPT, PROFILE_REFLECT_PROMPT, TOPIC_REFLECT_PROMPT, PROCEDURE_REFLECT_PROMPT, } from "@comis/agent";
 /**
  * Handle the sibling-hosted memory-cron sentinels (the KEYLESS `__MEMORY_LIFECYCLE__`
  * forget sweep + the `__REFLECT__` engine). Returns `true` when the sentinel was
@@ -36,17 +36,17 @@ import { resolveOperationModel, resolveProviderFamily, runReflection, classifyRe
  */
 export async function handleWireMemoryCronSentinel(resultText, payload, ctx) {
     const { container, logger, clock, agents, tenantId, memoryLifecycleStore, reflection } = ctx;
-    // (The __USEFULNESS_JUDGE__ sentinel dispatch was DELETED in Phase 226 SIMPLIFY-03 (D-03).
+    // (The __USEFULNESS_JUDGE__ sentinel dispatch was DELETED.
     // It built a cheap-model usefulness-judge seam and WROTE its verdict through
-    // usefulnessStore.recordUsage — a dormant cost-gated cron. The FORGET-02 reward write
+    // usefulnessStore.recordUsage — a dormant cost-gated cron. The reward write
     // (success→recordUsage / failure→recordFailure) lives in setup-learning.ts (a separate
     // reward seam) and is untouched; the MemoryUsefulnessStore + its sqlite adapter survive.
-    // An unrecognized sentinel falls through to `return false` below — the T-226-08 benign
+    // An unrecognized sentinel falls through to `return false` below — the benign
     // no-op for any persisted stale judge job row.)
-    // -- Memory lifecycle sentinel intercept (FORGET-01/06) --
+    // -- Memory lifecycle sentinel intercept --
     // KEYLESS: no model/key/build seam. Re-checks memoryLifecycle.enabled (defence-in-depth, the
     // cron gate) + threads THIS agent's learningForgetting eviction policy onto the sweep CALL
-    // (the shared store is constructed once; the behavior is per-agent — resolved decision #3,
+    // (the shared store is constructed once; the behavior is per-agent —
     // learningForgetting drives eviction while memoryLifecycle is the cron gate). OFF by default →
     // no override → DORMANT sweep (byte-identical). On the result it emits the daemon-side
     // learning:memory_demoted/evicted counts (the store has no bus). Non-fatal + counts-only (§2.7).
@@ -72,11 +72,11 @@ export async function handleWireMemoryCronSentinel(resultText, payload, ctx) {
         }
         const lifecycleTenantId = tenantId ?? container.config.tenantId ?? "default";
         const lifecycleStartMs = clock.now();
-        // FORGET-06 per-call policy: thread THIS agent's collapsed learning forget policy onto the
+        // Per-call policy: thread THIS agent's collapsed learning forget policy onto the
         // sweep CALL. OFF (memory.enabled / learning.enabled) → no override → DORMANT sweep (byte-identical).
-        // Phase 226 (SIMPLIFY-01) collapsed the former `learningForgetting` block into `learning.forget`:
+        // The former `learningForgetting` block collapsed into `learning.forget`:
         // the eviction store consumes only the master gate + the corroborated-failure floor (the FadeMem
-        // strength-decay disjunct + its strengthThreshold/failurePenalty knobs were deleted in Phase 224-02
+        // strength-decay disjunct + its strengthThreshold/failurePenalty knobs were removed
         // — the strength branch floored above its threshold and never fired). With the per-loop block gone,
         // `evictionEnabled` folds into the single `learning.enabled` gate; the floor reads learning.forget.failureEvictionFloor.
         const learningCfg = agentConfig?.learning;
@@ -93,29 +93,29 @@ export async function handleWireMemoryCronSentinel(resultText, payload, ctx) {
             logger.error({ agentId, err: lifecycleResult.error, hint: "Memory lifecycle sweep failed -- will retry next cycle", errorKind: "internal" }, "Memory lifecycle sweep error");
         }
         else {
-            // FORGET-06/OBS-01: an INFO completion line (durationMs + the real counts) + the daemon-side
-            // learning:memory_* emits (counts-only convention). ids/bodies NEVER cross the bus (§2.7 /
-            // SEC-01). With eviction OFF the counts are 0 (DORMANT).
+            // An INFO completion line (durationMs + the real counts) + the daemon-side
+            // learning:memory_* emits (counts-only convention). ids/bodies NEVER cross the bus (§2.7).
+            // With eviction OFF the counts are 0 (DORMANT).
             const r = lifecycleResult.value;
             logger.child({ agentId, submodule: "memory-lifecycle" }).info({ agentId, scanned: r.scanned, promoted: r.promoted, demoted: r.demoted, evicted: r.evicted, durationMs: clock.now() - lifecycleStartMs }, "Memory lifecycle sweep complete");
             container.eventBus.emit("learning:memory_demoted", { agentId, count: r.demoted, timestamp: clock.now() });
             container.eventBus.emit("learning:memory_evicted", { agentId, count: r.evicted, timestamp: clock.now() });
-            // OBS-2b (reflect-obs-20260627): the once-per-run forget-sweep SUMMARY — parity with reflect:funnel
+            // The once-per-run forget-sweep SUMMARY — parity with reflect:funnel
             // so `cron.runs jobName "Memory lifecycle"` + the fleet lens answer "what did forget do" in one call
-            // (was a db.mjs evicted_at poll). Counts ONLY (§2.7 / SEC-01).
+            // (was a db.mjs evicted_at poll). Counts ONLY (§2.7).
             container.eventBus.emit("learning:lifecycle_swept", { agentId, scanned: r.scanned, promoted: r.promoted, demoted: r.demoted, evicted: r.evicted, timestamp: clock.now() });
         }
         payload.onComplete?.({ status: lifecycleResult.ok ? "ok" : "error", error: lifecycleResult.ok ? undefined : lifecycleResult.error?.message });
         return true;
     }
-    // (The __MEMORY_TRIPLE_EXTRACTION__ sentinel dispatch was DELETED in Phase 226 SIMPLIFY-03
-    // (D-03). It ran runMemoryTripleExtraction — a no-op scaffold whose `extract` returned []
+    // (The __MEMORY_TRIPLE_EXTRACTION__ sentinel dispatch was DELETED.
+    // It ran runMemoryTripleExtraction — a no-op scaffold whose `extract` returned []
     // (no triples were ever written), gated default-OFF. The TripleStorePort + its sqlite adapter
     // + the graphSpread recall lane (recall-graph-spread-lane.ts, gated rag.lanes.graphSpread)
     // SURVIVE — only the dormant extraction JOB + its cron-context `tripleStore` field went, not
     // the read lane. An unrecognized sentinel falls through to `return false` below — the
-    // T-226-08 benign no-op for any persisted stale triple-extraction job row.)
-    // -- Reflection sentinel intercept (v2.31 Reflection, Phase 223, REFLECT-01/02) --
+    // benign no-op for any persisted stale triple-extraction job row.)
+    // -- Reflection sentinel intercept --
     // The COMPOSITION ROOT for the reflection loop — the reflect-engine replacement for the
     // dead procedural-synthesis clustering handler: this is where the @comis/agent reflection
     // job (PORT TYPES only) meets the @comis/memory mental-model store + the trusted-origin
@@ -123,10 +123,9 @@ export async function handleWireMemoryCronSentinel(resultText, payload, ctx) {
     // bundle — the agent↛memory closed-graph cut). Re-checks learningSkills.enabled
     // (defence-in-depth — the scheduler already gates it; default OFF → clean ok no-op, ZERO
     // behavior change). Reads the LCD-merged source (NOT sessionStore.listDetailed — DAG-empty),
-    // builds the cheap-model reflect adapter (wraps the UNTRUSTED transcript, INV-5) on the MID
-    // tier, runs runReflection, and RE-EMITS the counts-only reflect:* funnel events DAEMON-SIDE
-    // (Phase 226 SIMPLIFY-04 renamed the old synthesis-funnel events to reflect:admitted/reflect:funnel
-    // so the A→B ground-truth read + `comis explain` still work). The bridge entry lands with the
+    // builds the cheap-model reflect adapter (wraps the UNTRUSTED transcript on the per-kind source label) on the MID
+    // tier, runs runReflection, and RE-EMITS the counts-only reflect:admitted/reflect:funnel events DAEMON-SIDE
+    // so the A→B ground-truth read + `comis explain` still work. The bridge entry lands with the
     // emit (no agent-side gate trip). Non-fatal + counts-only (§2.7).
     if (resultText === "__REFLECT__") {
         const { agentId } = payload;
@@ -154,7 +153,7 @@ export async function handleWireMemoryCronSentinel(resultText, payload, ctx) {
         // Resolve the cheap reflect model (the MID tier — a generalization op, not a fast classify) +
         // API key by NAME (Pino auto-redacts). NOT the agent's primary. The "skillSynthesis"
         // operationType STRING is REUSED (the MID-tier routing the dead synthesis used); the
-        // reflect:* operationType rename is Phase 226 — do not invent a new tier here.
+        // reflect:* naming is only for events — do not invent a new operationType tier here.
         const resolved = resolveOperationModel({
             operationType: "skillSynthesis",
             agentProvider: agentConfig.provider ?? "anthropic",
@@ -173,35 +172,50 @@ export async function handleWireMemoryCronSentinel(resultText, payload, ctx) {
         const scope = { tenantId: reflectTenantId, agentId };
         const reflectLogger = logger.child({ agentId, submodule: "reflection" });
         const reflectStartMs = clock.now();
-        // Phase 225 FOLD §3.2: ONE __REFLECT__ cron reflects ALL THREE kinds in one pass
-        // (the I1 model — ONE engine, LOOPED, not three engines). The model/cred resolution
-        // above runs ONCE (the same MID-tier reflect model for all kinds); per kind we vary
+        // ONE __REFLECT__ cron runs ALL FOUR reflect passes in one loop
+        // (ONE engine, LOOPED, not four engines). The model/cred resolution
+        // above runs ONCE (the same MID-tier reflect model for all passes); per pass we vary
         // only the adapter `systemPrompt` + `source` label and the per-kind source build +
         // `groupKey`. SKILL keys on the normalized opening-request signature (the default,
         // groupKey undefined); PROFILE groups by user (groupKey `t.sender` ⇒ topicKey ===
-        // userId, which Plan 02's <user_profile> read selects on); TOPIC keys like skill.
+        // userId, which the <user_profile> read selects on); TOPIC keys like skill. The 4th
+        // PROCEDURE pass is a kind:"skill" entry that groups by the audited descriptor KEY
+        // instead of the user intent (two kind:"skill" passes → DIFFERENT topicKeys → different
+        // doc names → no collision) and sets `populateProcedureMetadata` so its admit binds the
+        // DETERMINISTIC required_tools (and its reflect input carries the ordered tool sequence).
         const reflectKinds = [
             { kind: "skill", systemPrompt: REFLECT_PROMPT, source: "learned_skill_reflection" },
             { kind: "profile", systemPrompt: PROFILE_REFLECT_PROMPT, source: "learned_profile_reflection", groupKey: (t) => t.sender },
             { kind: "topic", systemPrompt: TOPIC_REFLECT_PROMPT, source: "learned_topic_reflection" },
+            // The PROCEDURE pass: kind:"skill" (surfaces through the shipped skill path) but grouped
+            // by the content-free descriptor key (a defined groupKey ⇒ the Jaccard signature-merge is
+            // bypassed; "" ⇒ ungroupable singleton, skipped). populateProcedureMetadata gates the
+            // deterministic required_tools bind + the ordered-sequence thread into the reflect input.
+            {
+                kind: "skill",
+                systemPrompt: PROCEDURE_REFLECT_PROMPT,
+                source: "learned_procedure_reflection",
+                groupKey: (t) => t.procedureDescriptor?.key ?? "",
+                populateProcedureMetadata: true,
+            },
         ];
         // SUMMED counts across the 3 kinds for ONE daemon-side reflect:* emit (counts
-        // only — INV-6 / §2.7; NEVER a doc body / finding crosses the bus, for ANY kind).
+        // only — §2.7; NEVER a doc body / finding crosses the bus, for ANY kind).
         let anyError = false;
         let firstError;
         let sumSelected = 0;
         let sumAdmitted = 0;
         let sumSkipped = 0;
         let maxCardinality = 0;
-        // Phase 226 (D5 salvage + the 225 WR-01 gap): the 2 new funnel counts SUMMED across the
+        // The 2 new funnel counts SUMMED across the
         // kinds for the once-per-run INFO line (the per-kind verdict already encodes them — see below).
         let sumUntrustedDrops = 0;
         let sumNameLengthRejections = 0;
-        // OBS-1: content-free source telemetry summed across kinds for the funnel emit.
+        // Content-free source telemetry summed across kinds for the funnel emit.
         let sumSourceTrajectoryCount = 0;
         let sumSourceChars = 0;
-        // OBS-4b (reflect-obs-20260627): the aggregate "why 0 admitted" verdict is RE-CLASSIFIED from the
-        // SUMMED counts AFTER the loop (classifyReflectOutcome) — NOT last-kind-wins. The old fold let a
+        // The aggregate "why 0 admitted" verdict is RE-CLASSIFIED from the
+        // SUMMED counts AFTER the loop (classifyReflectOutcome) — NOT last-kind-wins. A last-kind-wins fold would let a
         // later kind's `no_successes` overwrite an earlier kind's meaningful `uncorroborated`, surfacing a
         // verdict that contradicted its own `selected` count (selected:2 alongside no_successes) and
         // misdirected the operator to "nothing to learn from" instead of "successes under-merged →
@@ -210,12 +224,12 @@ export async function handleWireMemoryCronSentinel(resultText, payload, ctx) {
         // SUMMED reflect result" intent). `emptyReflections` is summed so a corroborated-but-empty kind
         // aggregates to `empty_reflection`, not a mis-attributed `rejected_validation`.
         let sumEmptyReflections = 0;
-        // OBS-7 (reflect-obs-20260627): distinct topicKey groups across the kinds — the under-merge
+        // Distinct topicKey groups across the kinds — the under-merge
         // discriminator (selected>1 + distinctTopicKeys>1 + maxCardinality<2 = successes that didn't merge).
         let sumDistinctTopicKeys = 0;
-        for (const { kind, systemPrompt, source, groupKey } of reflectKinds) {
+        for (const { kind, systemPrompt, source, groupKey, populateProcedureMetadata } of reflectKinds) {
             // CLOSED-GRAPH CUT: the per-kind @comis/agent reflect adapter (wraps the UNTRUSTED
-            // transcript via the per-kind `source` label, INV-5) is built HERE on the resolved
+            // transcript via the per-kind `source` label) is built HERE on the resolved
             // model; the @comis/memory store + the per-kind source come in via the daemon-assembled
             // bundle. The job consumes PORT TYPES only. The base model/key/custom-model opts are
             // identical across kinds — only systemPrompt + source vary.
@@ -234,20 +248,23 @@ export async function handleWireMemoryCronSentinel(resultText, payload, ctx) {
                 agentId,
                 tenantId: reflectTenantId,
                 scope,
-                kind, // Phase 225 FOLD — the threaded doc family (skill default if omitted)
+                kind, // the threaded doc family (skill default if omitted)
                 ...(groupKey ? { groupKey } : {}),
+                // Procedure pass ONLY — gates the deterministic required_tools bind + the
+                // ordered-descriptor thread into the reflect input (absent on the other passes).
+                ...(populateProcedureMetadata ? { populateProcedureMetadata } : {}),
                 config: {
                     enabled: cfg.enabled,
                     minConfidence: cfg.reflect.minConfidence,
-                    // The per-run topic ceiling (the DoS bound — one LLM call each). Phase 226 wires this
-                    // from `learning.reflect.maxDocsPerRun` (default 25; was a hardcoded 10). Each kind is
+                    // The per-run topic ceiling (the DoS bound — one LLM call each). Wired
+                    // from `learning.reflect.maxDocsPerRun` (default 25). Each kind is
                     // bounded independently → a known 3×maxDocsPerRun per-run LLM ceiling.
                     maxDocsPerRun: cfg.reflect.maxDocsPerRun,
                 },
                 sourceTrajectories,
                 reflectionAdapter,
                 outcomeSignal: reflection.outcomeSignal,
-                // FOLD-01: the store Pick now carries `supersede` — a profile/topic correction
+                // The store Pick carries `supersede` — a profile/topic correction
                 // routes through it (history-append); skill stays admit-only (engine-enforced).
                 mentalModelStore: reflection.learnedSkillStore,
                 clock,
@@ -267,7 +284,7 @@ export async function handleWireMemoryCronSentinel(resultText, payload, ctx) {
                 sumDistinctTopicKeys += v.distinctTopicKeys;
                 maxCardinality = Math.max(maxCardinality, v.maxTopicCardinality);
                 // Per-kind INFO completion line (the real counts) so an operator sees each kind's
-                // outcome; the SUMMED daemon emit follows the loop. Counts ONLY (§2.7 / SEC-01).
+                // outcome; the SUMMED daemon emit follows the loop. Counts ONLY (§2.7).
                 reflectLogger.info({ agentId, reflectKind: kind, selected: v.selected, admitted: v.admitted, maxTopicCardinality: v.maxTopicCardinality, skipped: v.skipped, admissionOutcome: v.admissionOutcome }, "Reflection (kind) complete");
             }
             else {
@@ -276,7 +293,7 @@ export async function handleWireMemoryCronSentinel(resultText, payload, ctx) {
                 reflectLogger.error({ agentId, reflectKind: kind, err: r.error, hint: "Reflection failed for kind -- will retry next cycle", errorKind: "internal" }, "Reflection error");
             }
         }
-        // OBS-4b: the aggregate verdict, re-classified from the SUMMED counts (consistent-by-construction
+        // The aggregate verdict, re-classified from the SUMMED counts (consistent-by-construction
         // with the counts the funnel emits below) — `admitted` if any kind admitted, else the most-acute
         // count-derived reason (uncorroborated / untrusted_origin / empty_reflection / … / no_successes).
         const admissionOutcome = classifyReflectOutcome({
@@ -287,13 +304,13 @@ export async function handleWireMemoryCronSentinel(resultText, payload, ctx) {
             untrustedDrops: sumUntrustedDrops,
             nameLengthRejections: sumNameLengthRejections,
         });
-        // OBS-01: ONE DAEMON-SIDE telemetry emit + completion line, SUMMED across the 3 kinds.
-        // Counts ONLY — NEVER a doc body / finding (§2.7 / SEC-01). With the disabled default the
-        // whole block is unreachable (the no-op short-circuits above). The funnel events are now
-        // reflect:* (Phase 226 SIMPLIFY-04 — the synthesis-funnel rename; the forget/outcome events
-        // KEEP their learning:* names, Pitfall 6). OBS-1 (hindsight-reflection-20260626): untrustedDrops /
-        // nameLengthRejections / skipped + the source counts now ALSO ride the content-free bus payload (they
-        // are COUNTS, like admitted/synthesized — INV-6 forbids bodies, not counts), so `comis explain`
+        // ONE DAEMON-SIDE telemetry emit + completion line, SUMMED across the 3 kinds.
+        // Counts ONLY — NEVER a doc body / finding (§2.7). With the disabled default the
+        // whole block is unreachable (the no-op short-circuits above). The funnel events are
+        // reflect:* (reflect:admitted/reflect:funnel; the forget/outcome events
+        // KEEP their learning:* names). untrustedDrops /
+        // nameLengthRejections / skipped + the source counts ALSO ride the content-free bus payload (they
+        // are COUNTS, like admitted/synthesized — bodies are forbidden on the bus, not counts), so `comis explain`
         // answers "HOW MANY untrusted dropped / was the source empty" without a daemon.log grep.
         reflectLogger.info({ agentId, selected: sumSelected, admitted: sumAdmitted, maxTopicCardinality: maxCardinality, distinctTopicKeys: sumDistinctTopicKeys, skipped: sumSkipped, untrustedDrops: sumUntrustedDrops, nameLengthRejections: sumNameLengthRejections, sourceTrajectoryCount: sumSourceTrajectoryCount, totalSourceChars: sumSourceChars, admissionOutcome, durationMs: clock.now() - reflectStartMs }, "Reflection complete (all kinds)");
         // The `reflect:admitted.count` contract is "how many were ADMITTED this run"
@@ -305,7 +322,7 @@ export async function handleWireMemoryCronSentinel(resultText, payload, ctx) {
         // reflect result: synthesized = selected (trusted-origin successes entering reflection),
         // validated/admitted = admitted (cleared the static validateLearnedDocBody guard + the write),
         // maxClusterCardinality = maxTopicCardinality (the distinct (session,sender) corroboration
-        // size — the load-bearing field), admissionOutcome = the reflect verdict enum (D5 + the 226
+        // size — the load-bearing field), admissionOutcome = the reflect verdict enum (including the
         // untrusted_origin / rejected_name_length values).
         container.eventBus.emit("reflect:funnel", {
             agentId,
@@ -313,10 +330,10 @@ export async function handleWireMemoryCronSentinel(resultText, payload, ctx) {
             validated: sumAdmitted,
             admitted: sumAdmitted,
             maxClusterCardinality: maxCardinality,
-            // OBS-7: distinct topicKey groups — the under-merge discriminator (paired with synthesized +
+            // Distinct topicKey groups — the under-merge discriminator (paired with synthesized +
             // maxClusterCardinality: synthesized>1 & distinctTopicKeys>1 & maxClusterCardinality<2 = under-merge).
             distinctTopicKeys: sumDistinctTopicKeys,
-            // OBS-1: the funnel MAGNITUDES alongside the verdict (counts only). untrustedDrops is the
+            // The funnel MAGNITUDES alongside the verdict (counts only). untrustedDrops is the
             // count behind an `untrusted_origin` verdict; sourceTrajectoryCount/totalSourceChars
             // distinguish an empty-source wiring gap from an LLM-yield (real text in, junk doc out).
             untrustedDrops: sumUntrustedDrops,
@@ -324,7 +341,7 @@ export async function handleWireMemoryCronSentinel(resultText, payload, ctx) {
             skipped: sumSkipped,
             sourceTrajectoryCount: sumSourceTrajectoryCount,
             totalSourceChars: sumSourceChars,
-            // RC-4: the acute "why 0 admitted" verdict — one readable field on the funnel (the reflect
+            // The acute "why 0 admitted" verdict — one readable field on the funnel (the reflect
             // enum: no_successes / untrusted_origin / uncorroborated / empty_reflection /
             // rejected_name_length / rejected_validation / admitted).
             admissionOutcome,

package/node_modules/@comis/daemon/dist/wiring/setup-channels/setup-channels-memory-crons.d.ts

@@ -1,13 +1,13 @@
 /**
  * The memory-cron sentinel dispatch entry — extracted from setup-channels-credentials.ts
- * to keep that leaf under the 600L setup-channels cap. After Phase 226 this file holds NO
+ * to keep that leaf under the 600L setup-channels cap. This file holds NO
  * LLM-backed intercept of its own: the LLM-backed sentinels were all removed —
- * __MEMORY_CONSOLIDATION__ / __MEMORY_REASONING__ / __USER_REPRESENTATION__ in Phase 225-05,
- * the KEYLESS __ONLINE_TUNING__ bandit in Phase 224, the __USEFULNESS_JUDGE__ +
- * __MEMORY_TRIPLE_EXTRACTION__ dormant crons in Phase 226-03, and the __SOCIAL_MODELING__
- * directional-relationship builder (the LAST LLM-backed intercept here) in Phase 226-04 with
+ * __MEMORY_CONSOLIDATION__ / __MEMORY_REASONING__ / __USER_REPRESENTATION__,
+ * the KEYLESS __ONLINE_TUNING__ bandit, the __USEFULNESS_JUDGE__ +
+ * __MEMORY_TRIPLE_EXTRACTION__ dormant crons, and the __SOCIAL_MODELING__
+ * directional-relationship builder (the LAST LLM-backed intercept here) with
  * the rest of the social-modeling subsystem. The surviving sentinels (the KEYLESS
- * __MEMORY_LIFECYCLE__ FORGET-01/06 sweep + the __REFLECT__ engine) live in
+ * __MEMORY_LIFECYCLE__ sweep + the __REFLECT__ engine) live in
  * setup-channels-memory-crons-wire.ts (the 600L dir cap); this entry delegates to it.
  *
  * @module
@@ -19,11 +19,11 @@ export type { MemoryCronPayload, MemoryCronContext } from "./setup-channels-memo
  * handled (the caller then returns), `false` when it is neither (the caller falls
  * through to the normal delivery path).
  *
- * Phase 226-04: the `__SOCIAL_MODELING__` intercept — the last LLM-backed sentinel that
+ * The `__SOCIAL_MODELING__` intercept — the last LLM-backed sentinel that
  * lived here — was REMOVED with the rest of the social-modeling subsystem (the
  * RelationshipStore port + sqlite adapter, the `relationship` table, the offline
  * directional-edge builder, the relationship-block prompt injection, the per-agent
- * socialModeling config key). The surviving WS7-wired sentinels (the KEYLESS
+ * socialModeling config key). The surviving wired sentinels (the KEYLESS
  * __MEMORY_LIFECYCLE__ sweep + the __REFLECT__ engine) live in the sibling wire leaf
  * (the 600L dir cap); this entry delegates the dispatch there. The signature is
  * preserved (it still returns a boolean) so the dispatch contract is unchanged.

package/node_modules/@comis/daemon/dist/wiring/setup-channels/setup-channels-memory-crons.js

@@ -1,14 +1,14 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
  * The memory-cron sentinel dispatch entry — extracted from setup-channels-credentials.ts
- * to keep that leaf under the 600L setup-channels cap. After Phase 226 this file holds NO
+ * to keep that leaf under the 600L setup-channels cap. This file holds NO
  * LLM-backed intercept of its own: the LLM-backed sentinels were all removed —
- * __MEMORY_CONSOLIDATION__ / __MEMORY_REASONING__ / __USER_REPRESENTATION__ in Phase 225-05,
- * the KEYLESS __ONLINE_TUNING__ bandit in Phase 224, the __USEFULNESS_JUDGE__ +
- * __MEMORY_TRIPLE_EXTRACTION__ dormant crons in Phase 226-03, and the __SOCIAL_MODELING__
- * directional-relationship builder (the LAST LLM-backed intercept here) in Phase 226-04 with
+ * __MEMORY_CONSOLIDATION__ / __MEMORY_REASONING__ / __USER_REPRESENTATION__,
+ * the KEYLESS __ONLINE_TUNING__ bandit, the __USEFULNESS_JUDGE__ +
+ * __MEMORY_TRIPLE_EXTRACTION__ dormant crons, and the __SOCIAL_MODELING__
+ * directional-relationship builder (the LAST LLM-backed intercept here) with
  * the rest of the social-modeling subsystem. The surviving sentinels (the KEYLESS
- * __MEMORY_LIFECYCLE__ FORGET-01/06 sweep + the __REFLECT__ engine) live in
+ * __MEMORY_LIFECYCLE__ sweep + the __REFLECT__ engine) live in
  * setup-channels-memory-crons-wire.ts (the 600L dir cap); this entry delegates to it.
  *
  * @module
@@ -19,19 +19,19 @@ import { handleWireMemoryCronSentinel } from "./setup-channels-memory-crons-wire
  * handled (the caller then returns), `false` when it is neither (the caller falls
  * through to the normal delivery path).
  *
- * Phase 226-04: the `__SOCIAL_MODELING__` intercept — the last LLM-backed sentinel that
+ * The `__SOCIAL_MODELING__` intercept — the last LLM-backed sentinel that
  * lived here — was REMOVED with the rest of the social-modeling subsystem (the
  * RelationshipStore port + sqlite adapter, the `relationship` table, the offline
  * directional-edge builder, the relationship-block prompt injection, the per-agent
- * socialModeling config key). The surviving WS7-wired sentinels (the KEYLESS
+ * socialModeling config key). The surviving wired sentinels (the KEYLESS
  * __MEMORY_LIFECYCLE__ sweep + the __REFLECT__ engine) live in the sibling wire leaf
  * (the 600L dir cap); this entry delegates the dispatch there. The signature is
  * preserved (it still returns a boolean) so the dispatch contract is unchanged.
  */
 export async function handleMemoryCronSentinel(resultText, payload, ctx) {
-    // NOTE: the __ONLINE_TUNING__ bandit sentinel was DELETED in Phase 224 (the UCB
+    // NOTE: the __ONLINE_TUNING__ bandit sentinel was DELETED (the UCB
     // tuned-alpha bandit is gone; recall scoring is the fixed config.rag.scoring alphas),
-    // and the __SOCIAL_MODELING__ directional-relationship sentinel in Phase 226-04 (the
+    // and the __SOCIAL_MODELING__ directional-relationship sentinel too (the
     // whole social-modeling subsystem is gone). The remaining sentinels — the KEYLESS
     // __MEMORY_LIFECYCLE__ sweep + the __REFLECT__ engine — live in the sibling
     // setup-channels-memory-crons-wire.ts (the 600L dir cap); delegate the dispatch there.

package/node_modules/@comis/daemon/dist/wiring/setup-channels/setup-channels-registry-builder.js

@@ -46,6 +46,8 @@ export function buildChannelCredentialMap(channels) {
         m.set("EMAIL_PASSWORD", "email");
         m.set("EMAIL_REFRESH_TOKEN", "email");
     }
+    if (ch.msteams?.enabled)
+        m.set("MSTEAMS_APP_PASSWORD", "msteams");
     return m;
 }
 export function buildReadOnlyChannelRegistry(channelPlugins) {

package/node_modules/@comis/daemon/dist/wiring/setup-channels/setup-channels-registry.d.ts

@@ -11,7 +11,7 @@
  *
  * @module
  */
-import type { AppContainer, ChannelPort, ChannelPluginPort, ExecutionPlanPort, NormalizedMessage, SessionKey, TranscriptionPort, TTSPort, ImageAnalysisPort, FileExtractionPort, FileExtractionConfig, MemoryPort, MemoryEntityStore, MemoryCausalStore, MemoryConsolidationStore, MemoryLifecyclePort, OutcomeSignalPort, MentalModelStorePort, QueueConfig, DeliveryService, WrapExternalContentOptions, ClockPort, TimerPort, ActivityStreamPort } from "@comis/core";
+import type { AppContainer, ChannelPort, ChannelPluginPort, ExecutionPlanPort, NormalizedMessage, SessionKey, TranscriptionPort, TTSPort, ImageAnalysisPort, FileExtractionPort, FileExtractionConfig, MemoryPort, MemoryEntityStore, MemoryCausalStore, MemoryConsolidationStore, MemoryLifecyclePort, OutcomeSignalPort, MentalModelStorePort, MsTeamsConversationStorePort, QueueConfig, DeliveryService, WrapExternalContentOptions, ClockPort, EnvPort, TimerPort, ActivityStreamPort } from "@comis/core";
 import type { ComisLogger } from "@comis/infra";
 import type { AgentExecutor, createSessionLifecycle, ActiveRunRegistry, BackgroundSessionResolver } from "@comis/agent";
 import type { createSessionStore, MemoryApi } from "@comis/memory";
@@ -41,6 +41,11 @@ export interface ChannelsResult {
      *  UUID resolver to translate daemon UUIDs back to native ids before
      *  calling the channel adapter). */
     channelPlugins: Map<string, ChannelPluginPort>;
+    /** Microsoft Teams inbound ingress sub-app, built by the adapter bootstrap
+     *  when the channel is enabled with valid credentials. The composition root
+     *  threads it into the gateway deps so `/channels/msteams` mounts only when a
+     *  caller-backed ingress exists. Undefined when the channel is disabled. */
+    msTeamsIngress?: import("hono").Hono;
     /** The command queue instance for parent session TTL extension during graph execution. */
     commandQueue?: CommandQueue;
     /** DeliveryService constructed once at the daemon composition root. Threaded
@@ -67,13 +72,19 @@ export interface ChannelsDeps {
     /** System clock (composition root). Threaded to buildActivityRenderers so the
      *  EditPlace renderer gates its delete on outcome.delivery.deliveredAtMs. */
     clock: ClockPort;
-    /** Per-agent OAuth access-token resolver (LEARN-01) — forwarded to the cron
+    /** Per-agent OAuth access-token resolver — forwarded to the cron
      *  event listeners so background memory/learning jobs run on an OAuth main
      *  provider (openai-codex) instead of skipping for "no API key". */
     resolveAccessToken?: (agentId: string, provider: string) => Promise<string | undefined>;
     /** System timers (composition root). Threaded to buildActivityRenderers so the
      *  EditPlace renderer debounces edits via TimerPort (no raw setTimeout). */
     timers: TimerPort;
+    /** Live composition-root EnvPort. Threaded through bootstrapAdapters into
+     *  createMsTeamsPlugin so the managed-identity token path reads the App-Service
+     *  IDENTITY_ENDPOINT/IDENTITY_HEADER live per mint (they rotate). Absent → the
+     *  managed-identity header path falls back to no env (secret/certificate modes
+     *  are unaffected). */
+    env?: EnvPort;
     /** The orchestrator-facing redacted activity stream port (the
      *  setupObservability ActivityStream). Threaded into the inbound
      *  coordinatorFactory built in buildAndStartChannelManager as its
@@ -162,15 +173,15 @@ export interface ChannelsDeps {
     /** Memory adapter for storing media file references. */
     memoryAdapter?: MemoryPort;
     /** LCD store + browse — the memory-review session source reads DAG
-     *  transcripts from them (live finding 2026-06-11: the daemon session store
-     *  is near-empty in DAG mode, so the nightly extraction was a silent
-     *  no-op). Absent ⇒ daemon-store-only review (pipeline byte-identical). */
+     *  transcripts from them (the daemon session store
+     *  is near-empty in DAG mode, so the nightly extraction would be a silent
+     *  no-op without them). Absent ⇒ daemon-store-only review (pipeline byte-identical). */
     lcdStore?: import("@comis/core").ContextStorePort;
     contextBrowse?: import("@comis/core").ContextBrowsePort;
     /** Memory read API — the __REFLECT__ / __MEMORY_REVIEW__ crons scope the
      *  per-(tenant, agent, user) high-trust source read over `inspect` (the
-     *  __USER_REPRESENTATION__ sentinel that formerly drove this was DELETED in
-     *  Phase 225 when that subsystem folded into the reflection engine). Built in
+     *  __USER_REPRESENTATION__ sentinel that formerly drove this was DELETED
+     *  when that subsystem folded into the reflection engine). Built in
      *  setup-memory; daemon-side (the agent imports no memory package). */
     memoryApi?: MemoryApi;
     /** Entity-associative store — forwarded to registerCronEventListeners so
@@ -182,8 +193,8 @@ export interface ChannelsDeps {
      *  successful store. Built in setup-memory on the shared db handle; injected as the port
      *  TYPE (agent↛memory cut). */
     causalStore?: MemoryCausalStore;
-    /** Consolidation store — ORPHANED in Phase 225-05 (the runMemoryConsolidation job +
-     *  the __MEMORY_CONSOLIDATION__ sentinel were deleted); the port is retired in Phase 226.
+    /** Consolidation store — ORPHANED (the runMemoryConsolidation job +
+     *  the __MEMORY_CONSOLIDATION__ sentinel were deleted); the port is retired.
      *  Still forwarded (no live writer). Built in setup-memory on the shared db handle; injected
      *  as the port TYPE (agent↛memory cut). */
     consolidationStore?: MemoryConsolidationStore;
@@ -193,12 +204,18 @@ export interface ChannelsDeps {
      *  the full daemon → registry → credentials chain — a missing thread silently disables the sweep
      *  (the field-plumbing lesson). Absent => off-by-default, never reached. */
     memoryLifecycleStore?: MemoryLifecyclePort;
-    /** Outcome-signal store (WS1) — forwarded to the __REFLECT__ cron path (runReflection
+    /** Outcome-signal store — forwarded to the __REFLECT__ cron path (runReflection
      *  fail-closed success gate). Built in setup-memory; port TYPE only (agent↛memory cut). */
     outcomeStore?: OutcomeSignalPort;
-    /** Mental-model store (WS2/skills) — forwarded to the __REFLECT__ cron path (runReflection get/admit).
+    /** Mental-model store (skills) — forwarded to the __REFLECT__ cron path (runReflection get/admit).
      *  Built in setup-memory on the shared db; port TYPE only (the agent↛memory closed-graph cut). */
     learnedSkillStore?: MentalModelStorePort;
+    /** Microsoft Teams conversation-reference store — constructed once on the shared
+     *  memory.db and forwarded through bootstrapAdapters into createMsTeamsPlugin so
+     *  every inbound captures its routing tuple and a proactive send (cron/heartbeat)
+     *  recovers it. Injected as the @comis/core port TYPE (no SQLite dep in channels).
+     *  Absent → capture is skipped and a proactive Teams send errs. */
+    msTeamsConversationStore?: MsTeamsConversationStorePort;
     /** Default tenant ID for memory storage. */
     tenantId?: string;
     /** Embedding queue for new memory entries (optional). */
@@ -214,13 +231,13 @@ export interface ChannelsDeps {
     /** Delivery queue for crash-safe persistence */
     deliveryQueue?: import("@comis/core").DeliveryQueuePort;
     /**
-     * REACT-04 (Verified Learning, Phase 206-04): the SAME outbound → trajectory
+     * Verified Learning: the SAME outbound → trajectory
      * binding threaded into the delivery-queue drain (setup-delivery.ts). Wired
      * into createDeliveryService so the PRIMARY inbound-reply path (which sends via
      * the direct ack, not the drain) also binds the minted reply id → trajectory —
-     * else a reaction on a normal agent reply map-misses (the 206-03 live finding).
+     * else a reaction on a normal agent reply map-misses.
      * `undefined` when learning-outcome is off for all agents (byte-identity).
-     * `participantId` (FLAG-2) carries the conversation participant (the inbound
+     * `participantId` carries the conversation participant (the inbound
      * sender) so a reaction from an unmapped group bystander resolves to "external"
      * (inert) and cannot spoof reaction-learning.
      */
@@ -274,8 +291,8 @@ export interface ChannelsDeps {
         destroySession(key: SessionKey): Promise<void>;
     }>;
     /** Complete three-layer conversation forget for slash /new + /reset
-     *  (createConversationReset — live finding 2026-06-11: runtime-only destroy
-     *  left the LCD context the DAG re-presented on the next turn). */
+     *  (createConversationReset — runtime-only destroy
+     *  leaves the LCD context the DAG re-presents on the next turn). */
     destroyConversation?: (agentId: string, key: SessionKey) => Promise<unknown>;
     /** Per-agent cost trackers for /usage and /status cost data. */
     costTrackers?: Map<string, {

package/node_modules/@comis/daemon/dist/wiring/setup-channels/setup-channels-registry.js

@@ -46,14 +46,25 @@ export async function setupChannels(deps) {
         hookRunner: container.hookRunner,
         deliveryQueue: deps.deliveryQueue ?? createNoOpDeliveryQueue(),
         eventBus: container.eventBus,
-        // REACT-04 (206-04): bind the minted reply id → trajectory on the DIRECT ack
+        // Bind the minted reply id → trajectory on the DIRECT ack
         // path too (the primary inbound-reply path sends here, not via the drain).
         // Same callback instance the drain receives (foundation.recordOutboundMessage);
         // undefined when learning-outcome is off for all agents (byte-identity).
         recordOutboundMessage: deps.recordOutboundMessage,
     });
-    // Bootstrap enabled channel adapters from config
-    const { adaptersByType, tgPlugin, linePlugin, channelPlugins } = await bootstrapAdapters({ container, channelsLogger });
+    // Bootstrap enabled channel adapters from config. The Teams conversation store
+    // + the daemon TimerPort are injected into createMsTeamsPlugin here (both are
+    // optional @comis/core-port seams on the adapter): capture + proactive recovery
+    // + the typing keepalive.
+    const { adaptersByType, tgPlugin, linePlugin, channelPlugins, msTeamsIngress, msTeamsPlugin } = await bootstrapAdapters({
+        container,
+        channelsLogger,
+        msTeamsConversationStore: deps.msTeamsConversationStore,
+        timer: deps.timers,
+        // Live EnvPort → the managed-identity App-Service header path reads
+        // IDENTITY_ENDPOINT/IDENTITY_HEADER per mint (they rotate).
+        env: deps.env,
+    });
     // Assemble media pipeline (resolvers, preprocessor, preflight)
     const { compositeResolver, resolveAttachment, preprocessMessage: preprocessMessageCallback, audioPreflight: preflightFn, } = await buildMediaPipeline({
         container,
@@ -61,6 +72,7 @@ export async function setupChannels(deps) {
         adaptersByType,
         tgPlugin,
         linePlugin,
+        msTeamsPlugin,
         ssrfFetcher,
         linkRunner,
         transcriber,
@@ -84,7 +96,7 @@ export async function setupChannels(deps) {
         sessionStore: deps.sessionStore,
         logger,
         clock: deps.clock,
-        resolveAccessToken: deps.resolveAccessToken, // LEARN-01: OAuth-provider background jobs
+        resolveAccessToken: deps.resolveAccessToken, // OAuth-provider background jobs
         adaptersByType,
         deliveryService,
         assembleToolsForAgent: deps.assembleToolsForAgent,
@@ -97,7 +109,7 @@ export async function setupChannels(deps) {
         causalStore: deps.causalStore,
         consolidationStore: deps.consolidationStore,
         memoryLifecycleStore: deps.memoryLifecycleStore,
-        // v2.31 Reflection: the outcome gate + mental-model store ride the SAME cron-deps chain →
+        // Reflection: the outcome gate + mental-model store ride the SAME cron-deps chain →
         // the __REFLECT__ sentinel assembles the closed-graph reflection bundle (no embedder — the
         // reflection job groups by topicKey, not clustering embeddings).
         outcomeStore: deps.outcomeStore,
@@ -162,6 +174,7 @@ export async function setupChannels(deps) {
         resolveAttachment: resolveAttachmentByUrl,
         lifecycleReactors,
         channelPlugins,
+        msTeamsIngress,
         commandQueue,
         deliveryService,
     };

package/node_modules/@comis/daemon/dist/wiring/setup-channels/setup-channels-runtime.d.ts

@@ -41,7 +41,7 @@ export interface ChannelManagerBuildDeps {
     /** Process-singleton circuit breaker (daemon.ts D2), shared across coordinators. */
     activityBreaker?: ActivityBreakerGate;
     /** SHARED ExecutionPlanHolder (DEFAULT agent) from createAcpWiring().holder — SAME ref as
-     *  PiExecutorDeps.executionPlanHolder + AcpServerDeps.executionPlanPort (Pitfall 1: a parallel holder reads empty).
+     *  PiExecutorDeps.executionPlanHolder + AcpServerDeps.executionPlanPort (a parallel holder reads empty).
      *  Absent → no chat plan-stream built (frame.planSnapshot undefined; elapsed fallback). */
     executionPlanPort?: ExecutionPlanPort;
     signCallbackData?: import("@comis/channels").SignCallbackData;
@@ -83,7 +83,7 @@ export interface ChannelManagerBuildDeps {
         } | undefined;
         destroySession(key: SessionKey): Promise<void>;
     }>;
-    /** Complete three-layer forget for slash /new + /reset (live 2026-06-11: runtime-only destroy left LCD context the DAG re-presented). */
+    /** Complete three-layer forget for slash /new + /reset (runtime-only destroy leaves the LCD context the DAG re-presents). */
     destroyConversation?: (agentId: string, key: SessionKey) => Promise<unknown>;
     costTrackers?: Map<string, {
         getByProvider(): Array<{