comisai 1.0.45 → 1.0.46

package/node_modules/@comis/skills/dist/tools/builtin/orchestrate/comis_tools.js

@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: Apache-2.0
 /* AUTOGENERATED — do not edit. Run `pnpm sdk:generate`. */
 /* eslint-disable */
-import { invoke, wrapResultRef } from "./orchestrate-sdk-runtime.js";
+import { invoke, wrapResultRef, callCapSocket } from "./orchestrate-sdk-runtime.js";
 
 // ---------------------------------------------------------------------------
 // The discovery surface (progressive disclosure) + one delegating method per
@@ -11,85 +11,125 @@ import { invoke, wrapResultRef } from "./orchestrate-sdk-runtime.js";
 // ---------------------------------------------------------------------------
 
 const DESCRIPTORS = [
+  {
+    "name": "checkpoint",
+    "capability": "orch:write",
+    "summary": "Persist this run's state so it survives a restart: comis_tools.checkpoint(state). Durable (longer TTL), capped like any result; requires the resume surface.",
+    "example": "await comis_tools.write({ path: 'summary.md', content: '# Findings' });"
+  },
   {
     "name": "extract_document",
     "capability": "orch:read",
-    "summary": "Extract readable text from a document (pdf/docx/…)."
+    "summary": "Extract readable text from a document (pdf/docx/…).",
+    "example": "const ref = await comis_tools.grep({ path: 'logs/app.jsonl', pattern: 'ERROR' }); const rows = await ref.jq('.[0:20]'); const head = await ref.read(0, 40);"
   },
   {
     "name": "find",
     "capability": "orch:read",
-    "summary": "Find files in the jailed workspace by name/glob."
+    "summary": "Find files in the jailed workspace by name/glob.",
+    "example": "const ref = await comis_tools.grep({ path: 'logs/app.jsonl', pattern: 'ERROR' }); const rows = await ref.jq('.[0:20]'); const head = await ref.read(0, 40);"
   },
   {
     "name": "grep",
     "capability": "orch:read",
-    "summary": "Search the jailed workspace for a pattern (recursive)."
+    "summary": "Search the jailed workspace for a pattern (recursive).",
+    "example": "const ref = await comis_tools.grep({ path: 'logs/app.jsonl', pattern: 'ERROR' }); const rows = await ref.jq('.[0:20]'); const head = await ref.read(0, 40);"
   },
   {
     "name": "jq",
     "capability": "orch:read",
-    "summary": "Run a jq expression over JSON (a value or a ResultRef)."
+    "summary": "Run a jq expression over JSON (a value or a ResultRef).",
+    "example": "const ref = await comis_tools.grep({ path: 'logs/app.jsonl', pattern: 'ERROR' }); const rows = await ref.jq('.[0:20]'); const head = await ref.read(0, 40);"
   },
   {
     "name": "jsonpath",
     "capability": "orch:read",
-    "summary": "Extract a precise value from a JSON ResultRef via JSONPath (no eval)."
+    "summary": "Extract a precise value from a JSON ResultRef via JSONPath (no eval).",
+    "example": "const ref = await comis_tools.grep({ path: 'logs/app.jsonl', pattern: 'ERROR' }); const rows = await ref.jq('.[0:20]'); const head = await ref.read(0, 40);"
   },
   {
     "name": "ls",
     "capability": "orch:read",
-    "summary": "List a directory in the jailed workspace."
+    "summary": "List a directory in the jailed workspace.",
+    "example": "const ref = await comis_tools.grep({ path: 'logs/app.jsonl', pattern: 'ERROR' }); const rows = await ref.jq('.[0:20]'); const head = await ref.read(0, 40);"
+  },
+  {
+    "name": "mcp",
+    "capability": "orch:mcp",
+    "summary": "Call an allowlisted connected MCP server's tool: comis_tools.mcp.<server>.<tool>(args). The server/tool set is operator-configured.",
+    "example": "const result = await comis_tools.mcp.myserver.mytool({ query: 'hello' });"
   },
   {
     "name": "memory_get",
     "capability": "orch:read",
-    "summary": "Fetch a specific memory file by id (self-tenant)."
+    "summary": "Fetch a specific memory file by id (self-tenant).",
+    "example": "const ref = await comis_tools.grep({ path: 'logs/app.jsonl', pattern: 'ERROR' }); const rows = await ref.jq('.[0:20]'); const head = await ref.read(0, 40);"
   },
   {
     "name": "memory_search",
     "capability": "orch:read",
-    "summary": "Search the agent's long-term memory (self-tenant)."
+    "summary": "Search the agent's long-term memory (self-tenant).",
+    "example": "const ref = await comis_tools.grep({ path: 'logs/app.jsonl', pattern: 'ERROR' }); const rows = await ref.jq('.[0:20]'); const head = await ref.read(0, 40);"
   },
   {
     "name": "read",
     "capability": "orch:read",
-    "summary": "Read a file from the jailed workspace (offset/limit)."
+    "summary": "Read a file from the jailed workspace (offset/limit).",
+    "example": "const ref = await comis_tools.grep({ path: 'logs/app.jsonl', pattern: 'ERROR' }); const rows = await ref.jq('.[0:20]'); const head = await ref.read(0, 40);"
+  },
+  {
+    "name": "resume",
+    "capability": "orch:read",
+    "summary": "Return this run's last checkpoint state (wrapped as data, never executed) or null if none: comis_tools.resume(). Requires the resume surface.",
+    "example": "const ref = await comis_tools.grep({ path: 'logs/app.jsonl', pattern: 'ERROR' }); const rows = await ref.jq('.[0:20]'); const head = await ref.read(0, 40);"
   },
   {
     "name": "session_search",
     "capability": "orch:read",
-    "summary": "Search across the agent's own session history."
+    "summary": "Search across the agent's own session history.",
+    "example": "const ref = await comis_tools.grep({ path: 'logs/app.jsonl', pattern: 'ERROR' }); const rows = await ref.jq('.[0:20]'); const head = await ref.read(0, 40);"
   },
   {
     "name": "session_status",
     "capability": "orch:read",
-    "summary": "Read the status of one of the agent's sessions."
+    "summary": "Read the status of one of the agent's sessions.",
+    "example": "const ref = await comis_tools.grep({ path: 'logs/app.jsonl', pattern: 'ERROR' }); const rows = await ref.jq('.[0:20]'); const head = await ref.read(0, 40);"
   },
   {
     "name": "sessions_history",
     "capability": "orch:read",
-    "summary": "Read the message history of the agent's own session."
+    "summary": "Read the message history of the agent's own session.",
+    "example": "const ref = await comis_tools.grep({ path: 'logs/app.jsonl', pattern: 'ERROR' }); const rows = await ref.jq('.[0:20]'); const head = await ref.read(0, 40);"
   },
   {
     "name": "sessions_list",
     "capability": "orch:read",
-    "summary": "List the agent's own sessions."
+    "summary": "List the agent's own sessions.",
+    "example": "const ref = await comis_tools.grep({ path: 'logs/app.jsonl', pattern: 'ERROR' }); const rows = await ref.jq('.[0:20]'); const head = await ref.read(0, 40);"
   },
   {
     "name": "sql",
     "capability": "orch:read",
-    "summary": "Run DuckDB SQL over a CSV/JSONL/JSON ResultRef (daemon-side, read-only)."
+    "summary": "Run DuckDB SQL over a CSV/JSONL/JSON ResultRef (daemon-side, read-only).",
+    "example": "const ref = await comis_tools.grep({ path: 'logs/app.jsonl', pattern: 'ERROR' }); const rows = await ref.jq('.[0:20]'); const head = await ref.read(0, 40);"
   },
   {
     "name": "web_fetch",
     "capability": "orch:web",
-    "summary": "Fetch a URL's readable content (daemon-side, DNS-pinned)."
+    "summary": "Fetch a URL's readable content (daemon-side, DNS-pinned).",
+    "example": "const hits = await comis_tools.web_search({ query: 'site reliability' }); const top3 = await hits.jq('.[0:3]'); const page = await comis_tools.web_fetch({ url: top3[0].url }); const text = await page.read(0, 200);"
   },
   {
     "name": "web_search",
     "capability": "orch:web",
-    "summary": "Search the web (daemon-side, DNS-pinned)."
+    "summary": "Search the web (daemon-side, DNS-pinned).",
+    "example": "const hits = await comis_tools.web_search({ query: 'site reliability' }); const top3 = await hits.jq('.[0:3]'); const page = await comis_tools.web_fetch({ url: top3[0].url }); const text = await page.read(0, 200);"
+  },
+  {
+    "name": "write",
+    "capability": "orch:write",
+    "summary": "Write a file into the jailed run workspace (path-confined, run-ephemeral).",
+    "example": "await comis_tools.write({ path: 'summary.md', content: '# Findings' });"
   }
 ];
 
@@ -97,6 +137,9 @@ export const comis_tools = {
   describe() {
     return DESCRIPTORS;
   },
+  async checkpoint(args) {
+    return invoke("checkpoint", args);
+  },
   async extract_document(args) {
     return wrapResultRef(await invoke("extract_document", args));
   },
@@ -115,6 +158,35 @@ export const comis_tools = {
   async ls(args) {
     return invoke("ls", args);
   },
+  mcp: (() => {
+    const isNonToolKey = (k) =>
+      typeof k === "symbol" ||
+      k === "then" ||
+      k === "catch" ||
+      k === "finally" ||
+      k === "toJSON";
+    return new Proxy(
+      {},
+      {
+        get(_serverTarget, server) {
+          if (isNonToolKey(server)) return undefined;
+          return new Proxy(
+            {},
+            {
+              get(_toolTarget, tool) {
+                if (isNonToolKey(tool)) return undefined;
+                return (args) =>
+                  callCapSocket("tool.invoke", {
+                    tool: "mcp",
+                    args: { server, tool, args },
+                  });
+              },
+            },
+          );
+        },
+      },
+    );
+  })(),
   async memory_get(args) {
     return invoke("memory_get", args);
   },
@@ -124,6 +196,9 @@ export const comis_tools = {
   async read(args) {
     return wrapResultRef(await invoke("read", args));
   },
+  async resume(args) {
+    return invoke("resume", args);
+  },
   async session_search(args) {
     return invoke("session_search", args);
   },
@@ -145,6 +220,18 @@ export const comis_tools = {
   async web_search(args) {
     return wrapResultRef(await invoke("web_search", args));
   },
+  async write(args) {
+    return invoke("write", args);
+  },
+  async message_send(args) {
+    return callCapSocket("message.send", args);
+  },
+  async message_reply(args) {
+    return callCapSocket("message.reply", args);
+  },
+  async message_react(args) {
+    return callCapSocket("message.react", args);
+  },
 };
 
 export default comis_tools;

package/node_modules/@comis/skills/dist/tools/builtin/orchestrate/comis_tools.py

@@ -0,0 +1,316 @@
+# SPDX-License-Identifier: Apache-2.0
+# AUTOGENERATED — do not edit. Run `pnpm sdk:generate`.
+
+import json
+import os
+import socket
+
+_ENV_SOCK = "COMIS_ORCH_SOCKET"
+_ENV_LEASE = "COMIS_CAP_LEASE"
+
+
+def _call_cap_socket(method, params):
+    sock_path = os.environ.get(_ENV_SOCK)
+    bearer = os.environ.get(_ENV_LEASE)
+    if not sock_path or not bearer:
+        raise RuntimeError(
+            "comis-agent / orchestrate runtime requires "
+            "COMIS_ORCH_SOCKET/COMIS_CAP_LEASE — only valid inside an orchestrate jail"
+        )
+    payload = (
+        json.dumps(
+            {"bearer": bearer, "method": method, "params": params},
+            separators=(",", ":"),
+        )
+        + "\n"
+    )
+    sock = socket.socket(socket.AF_UNIX, socket.SOCK_STREAM)
+    try:
+        sock.connect(sock_path)
+        sock.sendall(payload.encode("utf-8"))
+        buf = b""
+        while b"\n" not in buf:
+            chunk = sock.recv(65536)
+            if not chunk:
+                raise RuntimeError("cap socket closed before a complete response line")
+            buf += chunk
+    finally:
+        sock.close()
+    reply = json.loads(buf.split(b"\n", 1)[0].decode("utf-8"))
+    if reply.get("error") is not None:
+        err = reply["error"]
+        raise RuntimeError(err if isinstance(err, str) else "capability call failed")
+    return reply.get("result")
+
+
+def _invoke(tool, args=None):
+    return _call_cap_socket("tool.invoke", {"tool": tool, "args": args or {}})
+
+
+class ResultRef:
+    """A handle to a high-volume tool return materialized on the jailed workspace.
+
+    The big (untrusted) payload stays on disk as data; only this handle
+    re-enters context. Slice it in-jail via grep/jq/sql/jsonpath/read so only
+    the requested rows/lines re-enter -- the full payload never does.
+    """
+
+    def __init__(self, ref):
+        raw = ref if isinstance(ref, dict) else {}
+        self.ref = raw.get("ref")
+        self.kind = raw.get("kind")
+        self.bytes = raw.get("bytes")
+        self.rows = raw.get("rows")
+        self.schema = raw.get("schema")
+        self.preview = raw.get("preview")
+        self.expires_at = raw.get("expiresAt")
+
+    def grep(self, pattern):
+        return _invoke("grep", {"path": self.ref, "pattern": pattern})
+
+    def jq(self, expr):
+        return _invoke("jq", {"path": self.ref, "expr": expr})
+
+    def sql(self, query):
+        return _invoke("sql", {"path": self.ref, "query": query})
+
+    def jsonpath(self, expr):
+        return _invoke("jsonpath", {"path": self.ref, "expr": expr})
+
+    def read(self, offset=None, limit=None):
+        params = {"path": self.ref}
+        if offset is not None:
+            params["offset"] = offset
+        if limit is not None:
+            params["limit"] = limit
+        return _invoke("read", params)
+
+
+def _wrap_result_ref(ref):
+    return ResultRef(ref)
+
+
+class _McpNamespace:
+    """Runtime proxy for the operator-configured connected-MCP-server tools.
+
+    comis_tools.mcp.<server>.<tool>(args) resolves to a single tool.invoke over the
+    cap socket -- the fixed wire tool is "mcp" and the {server, tool} ride inside
+    args. The server/tool set is dynamic per connection, so it cannot be a static
+    per-tool binding; attribute access builds the {server, tool} pair.
+    """
+
+    def __init__(self, server=None):
+        self._server = server
+
+    def __getattr__(self, name):
+        # Dunder / special-attribute probes (introspection, copy, pickle, the
+        # format/await protocols) must NOT build a fresh namespace or a bound
+        # call -- raise the normal AttributeError so a partial-namespace probe is
+        # a clean miss (mirrors the JS proxy dropping then/catch/finally).
+        if name.startswith("__") and name.endswith("__"):
+            raise AttributeError(name)
+        server = self.__dict__.get("_server")
+        if server is None:
+            return _McpNamespace(name)
+
+        def _call(args=None):
+            return _call_cap_socket(
+                "tool.invoke",
+                {"tool": "mcp", "args": {"server": server, "tool": name, "args": args or {}}},
+            )
+
+        return _call
+
+DESCRIPTORS = [
+  {
+    "name": "checkpoint",
+    "capability": "orch:write",
+    "summary": "Persist this run's state so it survives a restart: comis_tools.checkpoint(state). Durable (longer TTL), capped like any result; requires the resume surface.",
+    "example": "comis_tools.write({\"path\": \"summary.md\", \"content\": \"# Findings\"})"
+  },
+  {
+    "name": "extract_document",
+    "capability": "orch:read",
+    "summary": "Extract readable text from a document (pdf/docx/…).",
+    "example": "ref = comis_tools.grep({\"path\": \"logs/app.jsonl\", \"pattern\": \"ERROR\"}); rows = ref.jq(\".[0:20]\"); head = ref.read(0, 40)"
+  },
+  {
+    "name": "find",
+    "capability": "orch:read",
+    "summary": "Find files in the jailed workspace by name/glob.",
+    "example": "ref = comis_tools.grep({\"path\": \"logs/app.jsonl\", \"pattern\": \"ERROR\"}); rows = ref.jq(\".[0:20]\"); head = ref.read(0, 40)"
+  },
+  {
+    "name": "grep",
+    "capability": "orch:read",
+    "summary": "Search the jailed workspace for a pattern (recursive).",
+    "example": "ref = comis_tools.grep({\"path\": \"logs/app.jsonl\", \"pattern\": \"ERROR\"}); rows = ref.jq(\".[0:20]\"); head = ref.read(0, 40)"
+  },
+  {
+    "name": "jq",
+    "capability": "orch:read",
+    "summary": "Run a jq expression over JSON (a value or a ResultRef).",
+    "example": "ref = comis_tools.grep({\"path\": \"logs/app.jsonl\", \"pattern\": \"ERROR\"}); rows = ref.jq(\".[0:20]\"); head = ref.read(0, 40)"
+  },
+  {
+    "name": "jsonpath",
+    "capability": "orch:read",
+    "summary": "Extract a precise value from a JSON ResultRef via JSONPath (no eval).",
+    "example": "ref = comis_tools.grep({\"path\": \"logs/app.jsonl\", \"pattern\": \"ERROR\"}); rows = ref.jq(\".[0:20]\"); head = ref.read(0, 40)"
+  },
+  {
+    "name": "ls",
+    "capability": "orch:read",
+    "summary": "List a directory in the jailed workspace.",
+    "example": "ref = comis_tools.grep({\"path\": \"logs/app.jsonl\", \"pattern\": \"ERROR\"}); rows = ref.jq(\".[0:20]\"); head = ref.read(0, 40)"
+  },
+  {
+    "name": "mcp",
+    "capability": "orch:mcp",
+    "summary": "Call an allowlisted connected MCP server's tool: comis_tools.mcp.<server>.<tool>(args). The server/tool set is operator-configured.",
+    "example": "result = comis_tools.mcp.myserver.mytool({\"query\": \"hello\"})"
+  },
+  {
+    "name": "memory_get",
+    "capability": "orch:read",
+    "summary": "Fetch a specific memory file by id (self-tenant).",
+    "example": "ref = comis_tools.grep({\"path\": \"logs/app.jsonl\", \"pattern\": \"ERROR\"}); rows = ref.jq(\".[0:20]\"); head = ref.read(0, 40)"
+  },
+  {
+    "name": "memory_search",
+    "capability": "orch:read",
+    "summary": "Search the agent's long-term memory (self-tenant).",
+    "example": "ref = comis_tools.grep({\"path\": \"logs/app.jsonl\", \"pattern\": \"ERROR\"}); rows = ref.jq(\".[0:20]\"); head = ref.read(0, 40)"
+  },
+  {
+    "name": "read",
+    "capability": "orch:read",
+    "summary": "Read a file from the jailed workspace (offset/limit).",
+    "example": "ref = comis_tools.grep({\"path\": \"logs/app.jsonl\", \"pattern\": \"ERROR\"}); rows = ref.jq(\".[0:20]\"); head = ref.read(0, 40)"
+  },
+  {
+    "name": "resume",
+    "capability": "orch:read",
+    "summary": "Return this run's last checkpoint state (wrapped as data, never executed) or null if none: comis_tools.resume(). Requires the resume surface.",
+    "example": "ref = comis_tools.grep({\"path\": \"logs/app.jsonl\", \"pattern\": \"ERROR\"}); rows = ref.jq(\".[0:20]\"); head = ref.read(0, 40)"
+  },
+  {
+    "name": "session_search",
+    "capability": "orch:read",
+    "summary": "Search across the agent's own session history.",
+    "example": "ref = comis_tools.grep({\"path\": \"logs/app.jsonl\", \"pattern\": \"ERROR\"}); rows = ref.jq(\".[0:20]\"); head = ref.read(0, 40)"
+  },
+  {
+    "name": "session_status",
+    "capability": "orch:read",
+    "summary": "Read the status of one of the agent's sessions.",
+    "example": "ref = comis_tools.grep({\"path\": \"logs/app.jsonl\", \"pattern\": \"ERROR\"}); rows = ref.jq(\".[0:20]\"); head = ref.read(0, 40)"
+  },
+  {
+    "name": "sessions_history",
+    "capability": "orch:read",
+    "summary": "Read the message history of the agent's own session.",
+    "example": "ref = comis_tools.grep({\"path\": \"logs/app.jsonl\", \"pattern\": \"ERROR\"}); rows = ref.jq(\".[0:20]\"); head = ref.read(0, 40)"
+  },
+  {
+    "name": "sessions_list",
+    "capability": "orch:read",
+    "summary": "List the agent's own sessions.",
+    "example": "ref = comis_tools.grep({\"path\": \"logs/app.jsonl\", \"pattern\": \"ERROR\"}); rows = ref.jq(\".[0:20]\"); head = ref.read(0, 40)"
+  },
+  {
+    "name": "sql",
+    "capability": "orch:read",
+    "summary": "Run DuckDB SQL over a CSV/JSONL/JSON ResultRef (daemon-side, read-only).",
+    "example": "ref = comis_tools.grep({\"path\": \"logs/app.jsonl\", \"pattern\": \"ERROR\"}); rows = ref.jq(\".[0:20]\"); head = ref.read(0, 40)"
+  },
+  {
+    "name": "web_fetch",
+    "capability": "orch:web",
+    "summary": "Fetch a URL's readable content (daemon-side, DNS-pinned).",
+    "example": "hits = comis_tools.web_search({\"query\": \"site reliability\"}); top3 = hits.jq(\".[0:3]\"); page = comis_tools.web_fetch({\"url\": top3[0][\"url\"]}); text = page.read(0, 200)"
+  },
+  {
+    "name": "web_search",
+    "capability": "orch:web",
+    "summary": "Search the web (daemon-side, DNS-pinned).",
+    "example": "hits = comis_tools.web_search({\"query\": \"site reliability\"}); top3 = hits.jq(\".[0:3]\"); page = comis_tools.web_fetch({\"url\": top3[0][\"url\"]}); text = page.read(0, 200)"
+  },
+  {
+    "name": "write",
+    "capability": "orch:write",
+    "summary": "Write a file into the jailed run workspace (path-confined, run-ephemeral).",
+    "example": "comis_tools.write({\"path\": \"summary.md\", \"content\": \"# Findings\"})"
+  }
+]
+
+def describe():
+    return DESCRIPTORS
+
+def checkpoint(args=None):
+    return _invoke("checkpoint", args)
+
+def extract_document(args=None):
+    return _wrap_result_ref(_invoke("extract_document", args))
+
+def find(args=None):
+    return _invoke("find", args)
+
+def grep(args=None):
+    return _wrap_result_ref(_invoke("grep", args))
+
+def jq(args=None):
+    return _invoke("jq", args)
+
+def jsonpath(args=None):
+    return _invoke("jsonpath", args)
+
+def ls(args=None):
+    return _invoke("ls", args)
+
+mcp = _McpNamespace()
+
+def memory_get(args=None):
+    return _invoke("memory_get", args)
+
+def memory_search(args=None):
+    return _invoke("memory_search", args)
+
+def read(args=None):
+    return _wrap_result_ref(_invoke("read", args))
+
+def resume(args=None):
+    return _invoke("resume", args)
+
+def session_search(args=None):
+    return _invoke("session_search", args)
+
+def session_status(args=None):
+    return _invoke("session_status", args)
+
+def sessions_history(args=None):
+    return _invoke("sessions_history", args)
+
+def sessions_list(args=None):
+    return _invoke("sessions_list", args)
+
+def sql(args=None):
+    return _invoke("sql", args)
+
+def web_fetch(args=None):
+    return _wrap_result_ref(_invoke("web_fetch", args))
+
+def web_search(args=None):
+    return _wrap_result_ref(_invoke("web_search", args))
+
+def write(args=None):
+    return _invoke("write", args)
+
+def message_send(args=None):
+    return _call_cap_socket("message.send", args or {})
+
+def message_reply(args=None):
+    return _call_cap_socket("message.reply", args or {})
+
+def message_react(args=None):
+    return _call_cap_socket("message.react", args or {})

package/node_modules/@comis/skills/dist/tools/builtin/orchestrate/index.d.ts

@@ -1,20 +1,25 @@
 /**
- * `orchestrate` — the Surface-2 autonomy runner barrel (Phase 212).
+ * `orchestrate` — the Surface-2 autonomy runner barrel.
  *
  * Re-exports the runner ({@link createOrchestrateTool}), its ResultRef store
  * ({@link createResultRefStore}), and the cap-socket runtime shim that the
  * generated `comis_tools.js` imports. The actual TOOL ASSEMBLY (adding
  * `orchestrate` to an agent's tool set under the autonomy profile) + the
  * dormancy activation (starting the cap socket, threading `capSocketPath` and the
- * store into the runner deps) is Plan 05's daemon wiring; this barrel only makes
+ * store into the runner deps) is the daemon's wiring; this barrel only makes
  * the pieces importable.
  *
  * @module
  */
 export { createOrchestrateTool, scrubSecretEnv, } from "./orchestrate-tool.js";
 export type { OrchestrateToolDeps, OrchestrateResultStore, OrchestrateSpawnFn, OrchestrateSpawnedChild, } from "./orchestrate-tool.js";
-export { createResultRefStore, buildPreview, inferKind, } from "./result-ref-store.js";
+export { runJailedScript } from "./jailed-script-runner.js";
+export type { JailedScriptRunnerDeps, JailedScriptResultStore, JailedScriptSpawnFn, JailedScriptSpawnedChild, } from "./jailed-script-runner.js";
+export { createResultRefStore, buildPreview, inferKind, CHECKPOINT_TTL_MS, } from "./result-ref-store.js";
 export type { ResultRefStore, ResultRefStoreDeps, MaterializeContext, GcRunContext, CleanupRunContext, MaterializeError, } from "./result-ref-store.js";
+export type { OrchestrateDurableRuns } from "./orchestrate-durable.js";
+export { createOrchestrateReplayRespawn } from "./orchestrate-replay-respawn.js";
+export type { OrchestrateReplayRespawnDeps, OrchestrateReplayRespawnFn, OrchestrateReplayRespawnInput, } from "./orchestrate-replay-respawn.js";
 export { createOrchestrateExecutorCores } from "./orchestrate-executor-cores.js";
 export type { OrchestrateExecutorCores, OrchestrateExecutorCoresDeps, OrchestrateFileCores, OrchestrateFileCore, OrchestrateFileCoreContext, OrchestrateWebSearchCore, } from "./orchestrate-executor-cores.js";
 export { invoke, wrapResultRef } from "./orchestrate-sdk-runtime.js";

package/node_modules/@comis/skills/dist/tools/builtin/orchestrate/index.js

@@ -1,28 +1,39 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
- * `orchestrate` — the Surface-2 autonomy runner barrel (Phase 212).
+ * `orchestrate` — the Surface-2 autonomy runner barrel.
  *
  * Re-exports the runner ({@link createOrchestrateTool}), its ResultRef store
  * ({@link createResultRefStore}), and the cap-socket runtime shim that the
  * generated `comis_tools.js` imports. The actual TOOL ASSEMBLY (adding
  * `orchestrate` to an agent's tool set under the autonomy profile) + the
  * dormancy activation (starting the cap socket, threading `capSocketPath` and the
- * store into the runner deps) is Plan 05's daemon wiring; this barrel only makes
+ * store into the runner deps) is the daemon's wiring; this barrel only makes
  * the pieces importable.
  *
  * @module
  */
 export { createOrchestrateTool, scrubSecretEnv, } from "./orchestrate-tool.js";
-export { createResultRefStore, buildPreview, inferKind, } from "./result-ref-store.js";
-// The shipped daemon-side `tool.invoke` executor cores (Plan 05): the real
-// read/grep/find/ls/jq file cores + the web_search core the Plan-02 executor
+// The shared cap-socket jailed-run core, reused by the cron wake-gate (and any
+// other jailed-run caller) so they drive the SAME base jail. The `orchestrate`
+// tool keeps its own richer run lifecycle (durable resume, one-shot repair,
+// savings estimate, py) in orchestrate-tool.js.
+export { runJailedScript } from "./jailed-script-runner.js";
+export { createResultRefStore, buildPreview, inferKind, CHECKPOINT_TTL_MS, } from "./result-ref-store.js";
+// The deterministic-replay pinned-byte re-spawn seam: re-runs a durable run's
+// PINNED bytes in the SAME jail envelope with COMIS_ORCH_SOCKET pointed at the
+// SEPARATE operator replay socket (INV-1). The daemon assembles it at the
+// composition root (it needs the sandbox provider) + threads it into the
+// orchestrate.replay RPC wiring; the real bwrap round-trip is the .linux/VPS tier.
+export { createOrchestrateReplayRespawn } from "./orchestrate-replay-respawn.js";
+// The shipped daemon-side `tool.invoke` executor cores: the real
+// read/grep/find/ls/jq file cores + the web_search core the executor
 // routes to. Consumed by the daemon's dormancy-activation wiring.
 export { createOrchestrateExecutorCores } from "./orchestrate-executor-cores.js";
 // The cap-socket CLIENT runtime the generated SDK imports by a relative path
 // (`./orchestrate-sdk-runtime.js`) at jail-run time. Re-exported here for local
 // cohesion; the in-jail import does NOT go through this barrel.
 export { invoke, wrapResultRef } from "./orchestrate-sdk-runtime.js";
-// WT-01/WT-02 (Phase 219): the git-worktree lifecycle for `spawn --worktree`.
+// The git-worktree lifecycle for `spawn --worktree`.
 // The daemon (executeSubAgent + the boot orphan-sweep) consumes these over the
 // injected GitExec seam — the @comis/skills package owns the lifecycle, the
 // daemon binds the real execFile-backed GitExec at the composition root.