comisai 1.0.45 → 1.0.46

package/node_modules/@comis/skills/dist/tools/builtin/terminal-driver/terminal-worker-supervisor.js

@@ -1,25 +1,24 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
- * terminal-worker-supervisor -- the registry's worker-supervision glue (the OPS-01
- * crash-isolation listeners + the 124-05 fd3 attention reader), extracted from
+ * terminal-worker-supervisor -- the registry's worker-supervision glue (the
+ * crash-isolation listeners + the fd3 attention reader), extracted from
  * `terminal-session-registry.ts` so that file keeps headroom under the 800-line cap.
  *
- * {@link wireWorkerSupervision} installs the three OPS-01 listeners (stdout/error/close)
- * AND, since 124-05 (TR-11), the no-poll fd3 events-push reader on `child.stdio?.[3]` —
+ * {@link wireWorkerSupervision} installs the three crash-isolation listeners
+ * (stdout/error/close) AND the no-poll fd3 events-push reader on `child.stdio?.[3]` —
  * decoding each `TerminalEventFrame` the worker pushes on a state transition and
  * dispatching it to the daemon-injected `onTerminalEvent` hook. The fd3 reader copies the
- * stdout HR-02 guard VERBATIM (a corrupt event frame WARNs + drops the worker, never
- * crashes the daemon — OPS-01). The three OPS-01 listeners are:
- *   - stdout `data`: the HR-02-guarded frame decoder (a malformed reply NEVER throws out of the
+ * stdout decode guard VERBATIM (a corrupt event frame WARNs + drops the worker, never
+ * crashes the daemon). The three listeners are:
+ *   - stdout `data`: the guarded frame decoder (a malformed reply NEVER throws out of the
  *     listener — a throw on a stream listener becomes an `uncaughtException` that takes the
  *     DAEMON down, the opposite of "a crash restarts the WORKER, never the daemon"). A
- *     `FrameTooLargeError` (HR-01 corrupt/hostile length prefix) is logged with a distinct
+ *     `FrameTooLargeError` (corrupt/hostile length prefix) is logged with a distinct
  *     `hint` from a JSON-parse failure; both WARN `errorKind:"validation"`, flip the worker's
  *     running sessions to `lost`, clear the handle (next `create` re-spawns), and NEVER rethrow.
  *     On success: `for (const f of frames) correlate(pending, f)`.
  *   - `error`: WARN `errorKind:"dependency"`, flip sessions `lost`, clear the handle.
  *   - `close`: INFO, flip running sessions to `exited(code)`, clear the handle.
- * Only the LOCATION of this block changed.
  *
  * INFRA-FREE (like the registry + every worker-side sibling): value-imports ONLY the
  * terminal-ipc framer + node builtins, and type-imports the registry's structural contracts
@@ -32,28 +31,28 @@
  */
 import { createFrameDecoder, correlate, FrameTooLargeError, } from "./terminal-ipc.js";
 /**
- * Wire the OPS-01 crash-isolation listeners (stdout/error/close) + the 124-05 fd3
- * events-push reader onto a freshly-spawned worker child — see the module doc for the
- * per-listener contract. The fd3 reader (spec §2.3, TR-11) on `child.stdio?.[3]` decodes
- * the worker's attention/event frames with the SAME HR-02 guard the stdout reader has
+ * Wire the crash-isolation listeners (stdout/error/close) + the fd3 events-push
+ * reader onto a freshly-spawned worker child — see the module doc for the
+ * per-listener contract. The fd3 reader on `child.stdio?.[3]` decodes the worker's
+ * attention/event frames with the SAME decode guard the stdout reader has
  * (a corrupt event frame never crashes the daemon) and dispatches each to `onTerminalEvent`.
  */
 export function wireWorkerSupervision(args) {
     const { child, pending, sessions, logger, markRunningSessionsLost, clearWorker, onTerminalEvent } = args;
-    // MR-02: the worker-crash paths (error / close / a corrupt-frame decode fault) flip this
-    // worker's still-`running` sessions to `lost`/`exited` IN MEMORY, but pre-patch they emitted
-    // NO lifecycle signal — so the daemon's per-session reclaimers (onSessionGone →
+    // The worker-crash paths (error / close / a corrupt-frame decode fault) flip this
+    // worker's still-`running` sessions to `lost`/`exited` IN MEMORY; they MUST also emit a
+    // lifecycle signal, or the daemon's per-session reclaimers (onSessionGone →
     // promotedSessions / driveJournals / driveStartedAtMs / the loop-guard ring / the FSM state /
-    // the wake-state file) never fired and a promoted drive whose worker crashed leaked its
+    // the wake-state file) never fire and a promoted drive whose worker crashed leaks its
     // drive-state for the daemon's lifetime. This re-publishes a CONTENT-FREE
-    // terminal:session_state frame (sessionId + a `state` enum ONLY — no screen/keys/payload, I3)
+    // terminal:session_state frame (sessionId + a `state` enum ONLY — no screen/keys/payload)
     // per affected session through the SAME injected onTerminalEvent seam the PTY-exit path uses
     // (buildTerminalEventHook re-publishes it onto the bus → onSessionGone reclaims). Snapshot the
     // running ids BEFORE the caller flips them (the flip clears `status === "running"`), then emit.
     //
     // Wrapped never-throw: onTerminalEvent runs inside a stream 'data' / 'error' / 'close'
     // listener, so a hook fault must NEVER become an uncaughtException that takes the daemon down
-    // (the OPS-01 guarantee this whole module upholds). A null sink (no daemon hook) is a no-op.
+    // (the crash-isolation guarantee this whole module upholds). A null sink (no daemon hook) is a no-op.
     const runningSessionIds = () => {
         const ids = [];
         for (const handle of sessions.values()) {
@@ -76,12 +75,12 @@ export function wireWorkerSupervision(args) {
     };
     // Decode reply frames off the worker's stdout and correlate them to waiters.
     //
-    // HR-02 (OPS-01 guarantee): decode/correlate is wrapped in try/catch so a
+    // Crash-isolation guarantee: decode/correlate is wrapped in try/catch so a
     // malformed reply frame NEVER throws out of this 'data' listener (a throw on a
     // stream listener becomes an `uncaughtException` that takes the DAEMON down —
     // the opposite of "a crash restarts the WORKER, never the daemon"). Throw
     // sources: `JSON.parse` on non-JSON body bytes (stray console.log / partial
-    // write / post-desync garbage) + the HR-01 `FrameTooLargeError` on a corrupt
+    // write / post-desync garbage) + the `FrameTooLargeError` on a corrupt
     // length prefix. On any decode failure we treat the worker as corrupt: WARN,
     // flip its running sessions to `lost`, clear the handle so the next `create`
     // re-spawns — never reaching `uncaughtException`.
@@ -92,7 +91,7 @@ export function wireWorkerSupervision(args) {
             frames = decoder.push(chunk);
         }
         catch (err) {
-            // A FrameTooLargeError (HR-01: corrupt/hostile length prefix) is a distinct,
+            // A FrameTooLargeError (corrupt/hostile length prefix) is a distinct,
             // more-actionable signal than a JSON parse failure — surface it precisely.
             const hint = err instanceof FrameTooLargeError
                 ? "oversized worker frame length (corrupt/hostile prefix); dropping worker"
@@ -100,7 +99,7 @@ export function wireWorkerSupervision(args) {
             // errorKind:"validation" — the inbound frame failed structural decode
             // (the closest closed-union member for a corrupt/malformed wire frame).
             logger.warn({ err, hint, errorKind: "validation" }, "terminal worker frame decode failed");
-            // MR-02: snapshot the running ids BEFORE the flip, then emit the lost-lifecycle signal.
+            // Snapshot the running ids BEFORE the flip, then emit the lost-lifecycle signal.
             const lostIds = runningSessionIds();
             markRunningSessionsLost();
             publishCrashLifecycle(lostIds, "lost");
@@ -110,15 +109,15 @@ export function wireWorkerSupervision(args) {
         for (const frame of frames)
             correlate(pending, frame);
     });
-    // 124-05 (TR-11, spec §2.3): the no-poll attention READER on fd3 (child.stdio[3]).
-    // The worker writes a TerminalEventFrame to fd3 on a state TRANSITION (the emitter,
-    // 124-05 Task 1/2); this reads it and dispatches to the daemon-injected onTerminalEvent
+    // The no-poll attention READER on fd3 (child.stdio[3]).
+    // The worker writes a TerminalEventFrame to fd3 on a state TRANSITION (the emitter);
+    // this reads it and dispatches to the daemon-injected onTerminalEvent
     // hook (which re-publishes onto the TypedEventBus). A SEPARATE push channel from the
     // busy stdout reply stream so a busy session cannot delay an attention event.
     //
-    // HR-02 (OPS-01 guarantee — identical to the stdout guard above): decode is wrapped in
+    // Crash-isolation guarantee (identical to the stdout guard above): decode is wrapped in
     // try/catch so a malformed/oversized event frame (a stray worker write on fd3, a partial
-    // write, post-desync garbage, or an HR-01 oversized length prefix) NEVER throws out of
+    // write, post-desync garbage, or an oversized length prefix) NEVER throws out of
     // this 'data' listener (a throw on a stream listener becomes an `uncaughtException` that
     // takes the DAEMON down). On any decode failure we treat the worker as corrupt: WARN
     // errorKind:"validation" (FrameTooLargeError gets a distinct hint), flip its running
@@ -137,7 +136,7 @@ export function wireWorkerSupervision(args) {
                 ? "oversized worker event frame length (corrupt/hostile prefix); dropping worker"
                 : "corrupt worker event frame on fd3; dropping worker";
             logger.warn({ err, hint, errorKind: "validation" }, "terminal worker event frame decode failed");
-            // MR-02: snapshot the running ids BEFORE the flip, then emit the lost-lifecycle signal.
+            // Snapshot the running ids BEFORE the flip, then emit the lost-lifecycle signal.
             const lostIds = runningSessionIds();
             markRunningSessionsLost();
             publishCrashLifecycle(lostIds, "lost");
@@ -149,21 +148,21 @@ export function wireWorkerSupervision(args) {
                 onTerminalEvent?.(frame);
         }
     });
-    // OPS-01: a worker error flips its sessions to `lost` and clears the handle.
+    // A worker error flips its sessions to `lost` and clears the handle.
     child.on("error", (err) => {
         logger.warn({ err, hint: "terminal worker error; sessions lost, worker will re-spawn", errorKind: "dependency" }, "terminal worker error");
-        // MR-02: snapshot the running ids BEFORE the flip, then emit the lost-lifecycle signal so
+        // Snapshot the running ids BEFORE the flip, then emit the lost-lifecycle signal so
         // the daemon reclaims the per-session drive-state (no leak across a worker crash).
         const lostIds = runningSessionIds();
         markRunningSessionsLost();
         publishCrashLifecycle(lostIds, "lost");
         clearWorker();
     });
-    // OPS-01: a worker close flips its sessions to `exited(code)` and clears.
+    // A worker close flips its sessions to `exited(code)` and clears.
     child.on("close", (code) => {
         const exitCode = typeof code === "number" ? code : null;
         logger.info({ exitCode, hint: "terminal worker closed; sessions exited, worker will re-spawn", errorKind: "dependency" }, "terminal worker closed");
-        // MR-02: snapshot the running ids BEFORE the flip, then emit the exited-lifecycle signal so
+        // Snapshot the running ids BEFORE the flip, then emit the exited-lifecycle signal so
         // the daemon reclaims the per-session drive-state (no leak across a worker close/crash).
         const exitedIds = runningSessionIds();
         for (const handle of sessions.values()) {

package/node_modules/@comis/skills/dist/tools/builtin/terminal-driver/terminal-worker-types.d.ts

@@ -2,7 +2,7 @@
  * terminal-worker-types -- the neutral LEAF type-module for the worker's shared
  * structural contracts.
  *
- * Extracted from `terminal-worker-entry.ts` (124-01) to break the source-level import
+ * Extracted from `terminal-worker-entry.ts` to break the source-level import
  * cycle the backend-attach extraction introduced: the entry value-imports `attachBackend`
  * FROM `terminal-worker-backend-attach.ts`, while backend-attach needed
  * `PipeChildLike`/`PtyModuleLike`/`SessionState`/`WorkerLogger` back FROM the entry — a
@@ -34,7 +34,7 @@ export interface WorkerLogger {
     warn(obj: Record<string, unknown>, msg: string): void;
     error(obj: Record<string, unknown>, msg: string): void;
 }
-/** The durable-fs ops the worker uses — injected so the fsync-thrower test runs on macOS. Moved to this neutral leaf (165-REVIEW) so the worker-defaults sibling can type the default fs port without an import cycle back through the entry. */
+/** The durable-fs ops the worker uses — injected so the fsync-thrower test runs on macOS. Moved to this neutral leaf so the worker-defaults sibling can type the default fs port without an import cycle back through the entry. */
 export interface WorkerFsPort {
     writeFileSync(path: string, data: string): void;
     renameSync(from: string, to: string): void;
@@ -77,15 +77,15 @@ export interface PipeChildLike {
 /**
  * Which backend a session is driven by:
  *   - `pty`      — node-pty (the default, full TUI);
- *   - `tmux`     — the named-session backend required for milestone-length runs
- *                  (OPS-05): the tmux server outlives the worker so a restart
- *                  RE-ATTACHES by the deterministic `comis-<id>` name (124-08);
- *   - `degraded` — the pipe fallback (TR-08), when node-pty is unavailable.
+ *   - `tmux`     — the named-session backend required for long-running jobs:
+ *                  the tmux server outlives the worker so a restart
+ *                  RE-ATTACHES by the deterministic `comis-<id>` name;
+ *   - `degraded` — the pipe fallback, when node-pty is unavailable.
  */
 export type WorkerBackend = "pty" | "tmux" | "degraded";
 /**
  * The tmux-backend LOADER seam — the third option behind the same backend interface as
- * `loadPty` (124-08, OPS-05). The daemon binds the session-agnostic deps (the resolved
+ * `loadPty`. The daemon binds the session-agnostic deps (the resolved
  * tmux path, the `has-session` probe, the `runTmux` spawner) and hands the worker this
  * factory; the worker calls it per session with the composed plan command + geometry and
  * gets back a {@link FakePtyLike} handle (onData→ring, onExit→markExited, write/resize/kill
@@ -102,7 +102,7 @@ export interface TmuxBackendLike {
         env: NodeJS.ProcessEnv;
     }): FakePtyLike;
     /**
-     * BL-01 (165-REVIEW): RE-ATTACH to an EXISTING tmux session by name on
+     * RE-ATTACH to an EXISTING tmux session by name on
      * recover-on-boot — the load-bearing fix for the recover zombie. The registry
      * rehydrates a recovered durable session `running`, but the freshly-spawned worker
      * has an EMPTY sessions map; without this it re-attaches a pane ONLY inside
@@ -112,7 +112,7 @@ export interface TmuxBackendLike {
      * (onData→ring, onExit→markExited) WITHOUT a `new-session`; a GONE session
      * (`hasSession` false) returns `undefined` so the worker replies `ok:false` (the
      * registry then flips `lost` + fires `onUnrecoverable` — honest death, never a
-     * fresh CLI / double-drive, I10). Distinct from {@link spawn} (which creates-OR-
+     * fresh CLI / double-drive). Distinct from {@link spawn} (which creates-OR-
      * attaches) so the no-double-create is structural, not conventional.
      */
     reattach(args: {
@@ -120,7 +120,7 @@ export interface TmuxBackendLike {
         cols: number;
         rows: number;
         env: NodeJS.ProcessEnv;
-        /** RECUR-03: the surviving session's OWN per-boot `-S` socket (from its descriptor) — re-attach
+        /** The surviving session's OWN per-boot `-S` socket (from its descriptor) — re-attach
          *  targets THIS server, not this boot's fresh one. Absent ⇒ the legacy single-socket default. */
         tmuxSocket?: string;
     }): FakePtyLike | undefined;
@@ -135,43 +135,43 @@ export interface SessionState {
     backend: WorkerBackend;
     cols: number;
     rows: number;
-    /** The accumulated stdout ring (P0: a growing string; a true ring is P2/121). */
+    /** The accumulated stdout ring (a growing string). */
     ring: string;
     alive: boolean;
     pty?: FakePtyLike;
     pipe?: PipeChildLike;
-    /** Per-session @xterm emulator (P2/121) — SOURCE OF TRUTH for `read` (grid+cursor+alt). Closure-local; fed by `appendRing`, serialized by `handleRead`, resized by `handleResize`. */
+    /** Per-session @xterm emulator — SOURCE OF TRUTH for `read` (grid+cursor+alt). Closure-local; fed by `appendRing`, serialized by `handleRead`, resized by `handleResize`. */
     emu?: SessionEmulator;
-    /** Latest emulator write-parse promise (P2/121): `appendRing` chains each `emu.write(chunk)` (serialized, @xterm-PARSE-backed); `handleRead` awaits it so a settled frame reflects every byte (§2.4). */
+    /** Latest emulator write-parse promise: `appendRing` chains each `emu.write(chunk)` (serialized, @xterm-PARSE-backed); `handleRead` awaits it so a settled frame reflects every byte. */
     writeFlush?: Promise<void>;
-    /** Previous read's emulator snapshot (TR-14): `handleRead` diffs the new one against this (per-session screen-diff) then stores it. */
+    /** Previous read's emulator snapshot: `handleRead` diffs the new one against this (per-session screen-diff) then stores it. */
     lastSnapshot?: EmulatorSnapshot;
-    /** The per-session attention emitter (124-05): the worker hands each settled frame's `Classification` to `emitter.observe`, which writes a fd3 `TerminalEventFrame` on a state TRANSITION only (TR-11, no poll). Absent when the worker was built with no `writeFd3` (the emit is best-effort). */
+    /** The per-session attention emitter: the worker hands each settled frame's `Classification` to `emitter.observe`, which writes a fd3 `TerminalEventFrame` on a state TRANSITION only (no poll). Absent when the worker was built with no `writeFd3` (the emit is best-effort). */
     emitter?: AttentionEmitter;
-    /** The exit-wake observe hook (124-05 gap-close): bound by `handleCreate` alongside {@link emitter}; `markExited` fires it so a child that exits with NO settle pending STILL pushes its `terminal:session_state(exited)` transition on fd3 (TR-11 holds for completion, not just prompts — without this an event-driven agent is never woken on exit and must poll). Fire-and-forget + never throws; the edge-triggered emitter dedups it against a concurrent settle-path observe. Absent when no emitter is wired. */
+    /** The exit-wake observe hook: bound by `handleCreate` alongside {@link emitter}; `markExited` fires it so a child that exits with NO settle pending STILL pushes its `terminal:session_state(exited)` transition on fd3 (the no-poll model holds for completion, not just prompts — without this an event-driven agent is never woken on exit and must poll). Fire-and-forget + never throws; the edge-triggered emitter dedups it against a concurrent settle-path observe. Absent when no emitter is wired. */
     observeExit?: () => void;
-    /** Previously-CLASSIFIED emulator snapshot (124-05): the attention diff anchor, kept SEPARATE from {@link lastSnapshot} (read's diff) so the two never fight over one field. */
+    /** Previously-CLASSIFIED emulator snapshot: the attention diff anchor, kept SEPARATE from {@link lastSnapshot} (read's diff) so the two never fight over one field. */
     lastClassifiedSnapshot?: EmulatorSnapshot;
-    /** Epoch ms of the last observed PROGRESS (classified screen changed) — the OPS-04 stuck-by-progress signal; `noProgressMs = nowMs - lastProgressMs`. Stamped by the classify glue against the worker's injected clock. */
+    /** Epoch ms of the last observed PROGRESS (classified screen changed) — the stuck-by-progress signal; `noProgressMs = nowMs - lastProgressMs`. Stamped by the classify glue against the worker's injected clock. */
     lastProgressMs?: number;
-    /** Per-session interaction count (124-06): incremented at the single `logInteraction` chokepoint (every send_text / send_key / wait / resize). Surfaced by the `status` frame as the spec §5 `interactions` perception. */
+    /** Per-session interaction count: incremented at the single `logInteraction` chokepoint (every send_text / send_key / wait / resize). Surfaced by the `status` frame as the `interactions` perception. */
     interactions: number;
-    /** The PTY exit code when the backend reported one (124-06): captured on the pty `onExit` payload; surfaced by the `status` frame as the spec §5 `exitCode`. Absent on the pipe close/error path (no code) and while alive. */
+    /** The PTY exit code when the backend reported one: captured on the pty `onExit` payload; surfaced by the `status` frame as the `exitCode`. Absent on the pipe close/error path (no code) and while alive. */
     exitCode?: number;
     /** Settle ring-grow subscribers (`SettleDeps.onRingChange`), closure-local; `appendRing` notifies these. */
     ringListeners: Set<() => void>;
     /** Settle exit subscribers (onExit half); the pipe close/error + live pty exit notify these. */
     exitListeners: Set<() => void>;
-    /** Operator-declared sandbox scope (SEC-02) off the create frame — materialized into the bwrap jail by the 122-06 composer. */
+    /** Operator-declared sandbox scope off the create frame — materialized into the bwrap jail by the scope composer. */
     scope?: TerminalScope;
-    /** Operator-declared allowId (create frame) — selects the read-side platform profile (RENDER-01/§5; by allowId only, never content-sniffed). Absent ⇒ the agnostic default. Consumed by the emulator's render transform + (Phase 168) the classifier's perception. */
+    /** Operator-declared allowId (create frame) — selects the read-side platform profile (by allowId only, never content-sniffed). Absent ⇒ the agnostic default. Consumed by the emulator's render transform + the classifier's perception. */
     allowId?: string;
     /** Session workspace root (create frame) — the always-bound jail workspace. */
     workspace?: string;
     /** Session working directory (create frame) — the jail `--chdir` target. */
     cwd?: string;
     /**
-     * The egress materialization for `network: listed-hosts` (122-05/06). Disposed
+     * The egress materialization for `network: listed-hosts`. Disposed
      * ONCE on session teardown (`markExited`) so the per-session socket is
      * cleaned up (no leak). Absent for `none`/`full`.
      */
@@ -184,7 +184,7 @@ export interface CreateResult {
     cols: number;
     rows: number;
 }
-/** Post-action snapshot a mutating handler (send_text/send_key) returns (TR-03): the SETTLED `{screen,cursor}` subset; `cursor` stays `{0,0}` until the real cursor lands (P2/121). */
+/** Post-action snapshot a mutating handler (send_text/send_key) returns: the SETTLED `{screen,cursor}` subset; `cursor` stays `{0,0}` until the real cursor lands. */
 export interface SendResult {
     screen: string;
     cursor: {
@@ -192,15 +192,15 @@ export interface SendResult {
         y: number;
     };
 }
-/** The `resize` reply payload (spec §5: `{ ok }`). */
+/** The `resize` reply payload (`{ ok }`). */
 export interface ResizeResult {
     ok: boolean;
 }
 /**
- * The `wait` reply payload (spec §5 / TR-05). The canonical shape + its defensive
+ * The `wait` reply payload. The canonical shape + its defensive
  * worker→daemon mapping live in terminal-wait-reply so the worker and the daemon share
  * ONE type; re-exported here for the worker's reply-builder. `isComplete` is LOAD-BEARING
- * — it flows from `runSettle` VERBATIM (a timeout's `false` survives; the P5 attention
- * model RESUMES the turn, never finalizes a live session). T1.1 adds `producing` + `hint`.
+ * — it flows from `runSettle` VERBATIM (a timeout's `false` survives; the attention
+ * model RESUMES the turn, never finalizes a live session). The payload also carries `producing` + `hint`.
  */
 export type { WaitResult } from "./terminal-wait-reply.js";

package/node_modules/@comis/skills/dist/tools/builtin/terminal-driver/terminal-worker-types.js

@@ -3,7 +3,7 @@
  * terminal-worker-types -- the neutral LEAF type-module for the worker's shared
  * structural contracts.
  *
- * Extracted from `terminal-worker-entry.ts` (124-01) to break the source-level import
+ * Extracted from `terminal-worker-entry.ts` to break the source-level import
  * cycle the backend-attach extraction introduced: the entry value-imports `attachBackend`
  * FROM `terminal-worker-backend-attach.ts`, while backend-attach needed
  * `PipeChildLike`/`PtyModuleLike`/`SessionState`/`WorkerLogger` back FROM the entry — a

package/node_modules/@comis/skills/dist/tools/builtin/terminal-driver/terminal-workspace.d.ts

@@ -96,12 +96,11 @@ export declare function allocateSessionWorkspace(sessionId: string, deps?: Works
 /**
  * The stable per-agent terminal projects root, a subdir of the agent's OWN workspace dir.
  *
- * PROJECTS-MOVE (live VPS 2026-06-17): renamed `terminal` → `projects` so a driven project lands
- * at the operator-legible `<agentWorkspaceDir>/projects/<slug>` rather than the redundant
- * `<agentWorkspaceDir>/terminal/projects/<slug>`. This subtree IS the jail's bind-root (the
- * registry threads it as the session `workspace`, which `buildScopeArgs` always binds + re-binds),
- * so the agent's SIBLING `sessions/` (conversation trajectories), `memory.db`, and secrets stay
- * masked by the `~/.comis` carve-out — least-privilege is preserved by the move, not weakened.
+ * A driven project lands at the operator-legible `<agentWorkspaceDir>/projects/<slug>`.
+ * This subtree IS the jail's bind-root (the registry threads it as the session `workspace`,
+ * which `buildScopeArgs` always binds + re-binds), so the agent's SIBLING `sessions/`
+ * (conversation trajectories), `memory.db`, and secrets stay masked by the `~/.comis`
+ * carve-out — least-privilege is preserved.
  */
 export declare const AGENT_PROJECTS_SUBDIR = "projects";
 /**
@@ -109,7 +108,7 @@ export declare const AGENT_PROJECTS_SUBDIR = "projects";
  * (a stable subdir of the agent's OWN workspace — the same dir the agent's read/write/exec
  * tools operate on). Unlike {@link allocateSessionWorkspace} (a throwaway `mkdtemp` removed
  * on kill), the daemon injects THIS as `allocateWorkspace` together with a NO-OP
- * `cleanupWorkspace`, so a driven session's work (e.g. a full GSD milestone's TODO app)
+ * `cleanupWorkspace`, so a driven session's work (e.g. a multi-step project like a TODO app)
  * PERSISTS across session end and the agent can see it under its workspace.
  *
  * Created idempotently (recursive) so reuse across the agent's sessions is safe, and still

package/node_modules/@comis/skills/dist/tools/builtin/terminal-driver/terminal-workspace.js

@@ -146,12 +146,11 @@ export function allocateSessionWorkspace(sessionId, deps = {}) {
 /**
  * The stable per-agent terminal projects root, a subdir of the agent's OWN workspace dir.
  *
- * PROJECTS-MOVE (live VPS 2026-06-17): renamed `terminal` → `projects` so a driven project lands
- * at the operator-legible `<agentWorkspaceDir>/projects/<slug>` rather than the redundant
- * `<agentWorkspaceDir>/terminal/projects/<slug>`. This subtree IS the jail's bind-root (the
- * registry threads it as the session `workspace`, which `buildScopeArgs` always binds + re-binds),
- * so the agent's SIBLING `sessions/` (conversation trajectories), `memory.db`, and secrets stay
- * masked by the `~/.comis` carve-out — least-privilege is preserved by the move, not weakened.
+ * A driven project lands at the operator-legible `<agentWorkspaceDir>/projects/<slug>`.
+ * This subtree IS the jail's bind-root (the registry threads it as the session `workspace`,
+ * which `buildScopeArgs` always binds + re-binds), so the agent's SIBLING `sessions/`
+ * (conversation trajectories), `memory.db`, and secrets stay masked by the `~/.comis`
+ * carve-out — least-privilege is preserved.
  */
 export const AGENT_PROJECTS_SUBDIR = "projects";
 /**
@@ -159,7 +158,7 @@ export const AGENT_PROJECTS_SUBDIR = "projects";
  * (a stable subdir of the agent's OWN workspace — the same dir the agent's read/write/exec
  * tools operate on). Unlike {@link allocateSessionWorkspace} (a throwaway `mkdtemp` removed
  * on kill), the daemon injects THIS as `allocateWorkspace` together with a NO-OP
- * `cleanupWorkspace`, so a driven session's work (e.g. a full GSD milestone's TODO app)
+ * `cleanupWorkspace`, so a driven session's work (e.g. a multi-step project like a TODO app)
  * PERSISTS across session end and the agent can see it under its workspace.
  *
  * Created idempotently (recursive) so reuse across the agent's sessions is safe, and still

package/node_modules/@comis/skills/dist/tools/builtin/web-fetch-tool.js

@@ -25,9 +25,9 @@ import { createPdfExtractor } from "../integrations/document/pdf-extractor.js";
 import { detectErrorPagePattern, extractReadableContent, htmlToMarkdown, markdownToText, truncateText, } from "./web-fetch-utils.js";
 import { sanitizeHtmlVisibility, stripInvisibleUnicode } from "./web-fetch-visibility.js";
 import { DEFAULT_TIMEOUT_SECONDS, DEFAULT_CACHE_TTL_MINUTES, DEFAULT_MAX_RESPONSE_BYTES, clampMaxBytes, normalizeCacheKey, createWebCache, resolveCacheTtlMs, resolveTimeoutSeconds, } from "./web-shared.js";
-// Activity label spec (see spec §6.1). The EMITTED name
-// uses an UNDERSCORE — `web-fetch-tool.ts:614 → name: "web_fetch"` — while
-// the file basename is hyphenated (RESEARCH Pitfall 2). The `{url}`
+// Activity label spec. The EMITTED name
+// uses an UNDERSCORE — `name: "web_fetch"` — while
+// the file basename is hyphenated. The `{url}`
 // placeholder is allowlisted via detailKeys; the LLM-supplied URL passes
 // through redactValue before substitution (an absolute path in the URL is
 // compacted to `~`).

package/node_modules/@comis/skills/dist/tools/builtin/web-search-tool/index.js

@@ -30,9 +30,9 @@ import "../web-search-tavily.js";
 import { buildProviderChain, parseProvider, resolveProvider, } from "./web-search-providers.js";
 import { capSearchResults, deepFetchResults, DEFAULT_DEEP_FETCH_MAX_CHARS_PER_PAGE, DEFAULT_DEEP_FETCH_TIMEOUT_SECONDS, mapFreshnessToProvider, } from "./web-search-normalization.js";
 import { ensureSearchCache, executeWebSearch, WebSearchParams, } from "./web-search-formatting.js";
-// Activity label spec (see spec §6.1). The EMITTED name
-// uses an UNDERSCORE — `web-search-tool/index.ts:114 → name: "web_search"` —
-// while the file basename is hyphenated (RESEARCH Pitfall 2). The `{query}`
+// Activity label spec. The EMITTED name
+// uses an UNDERSCORE — `name: "web_search"` —
+// while the file basename is hyphenated. The `{query}`
 // placeholder is allowlisted via detailKeys; LLM-supplied search queries
 // pass through redactValue (a query containing a secret-shape token renders
 // as `<redacted>`).

package/node_modules/@comis/skills/dist/tools/index.d.ts

@@ -26,6 +26,7 @@ export { createWebSearchTool, __clearSearchCache } from "./builtin/web-search-to
 export { createWebFetchTool, fetchUrlContent, __clearFetchCache } from "./builtin/web-fetch-tool.js";
 export { fetchPinned, createPinnedAgent } from "./integrations/pinned-fetch.js";
 export { extractReadableContent, type ExtractMode } from "./builtin/web-fetch-utils.js";
+export { sanitizeMcpToolResult } from "./integrations/mcp-result-sanitizer.js";
 export { type ToolSourceProfile, DEFAULT_SOURCE_PROFILES, resolveSourceProfile, resolveAllProfiles, } from "./builtin/tool-source-profiles.js";
 export { type LazyPaths, resolvePaths } from "./builtin/file/safe-path-wrapper.js";
 export { createFileStateTracker, isDeviceFile } from "./builtin/file/file-state-tracker.js";
@@ -76,5 +77,5 @@ export { createImageGenProvider, createImageGenRateLimiter } from "./integration
 export type { ImageGenRateLimiter } from "./integrations/image-gen/index.js";
 export { createVideoGenProvider, createVideoGenRateLimiter, createFalVideoAdapter, } from "./integrations/video-gen/index.js";
 export type { VideoGenRateLimiter } from "./integrations/video-gen/index.js";
-export { createOrchestrateTool, scrubSecretEnv, createResultRefStore, createOrchestrateExecutorCores, createWorktree, isWorktreeCleanIfUnchanged, cleanIfUnchanged, sweepOrphans, } from "./builtin/orchestrate/index.js";
-export type { OrchestrateToolDeps, OrchestrateResultStore, ResultRefStore, ResultRefStoreDeps, MaterializeContext, GcRunContext, CleanupRunContext, OrchestrateExecutorCores, OrchestrateExecutorCoresDeps, OrchestrateFileCores, OrchestrateFileCore, OrchestrateFileCoreContext, OrchestrateWebSearchCore, GitExec, WorktreeEntry, CreateWorktreeOptions, CleanIfUnchangedResult, SweepSummary, SweepDeps, } from "./builtin/orchestrate/index.js";
+export { createOrchestrateTool, runJailedScript, scrubSecretEnv, createResultRefStore, CHECKPOINT_TTL_MS, createOrchestrateExecutorCores, createOrchestrateReplayRespawn, createWorktree, isWorktreeCleanIfUnchanged, cleanIfUnchanged, sweepOrphans, } from "./builtin/orchestrate/index.js";
+export type { OrchestrateToolDeps, OrchestrateResultStore, OrchestrateDurableRuns, OrchestrateReplayRespawnDeps, OrchestrateReplayRespawnFn, OrchestrateReplayRespawnInput, JailedScriptRunnerDeps, JailedScriptResultStore, JailedScriptSpawnFn, JailedScriptSpawnedChild, ResultRefStore, ResultRefStoreDeps, MaterializeContext, GcRunContext, CleanupRunContext, OrchestrateExecutorCores, OrchestrateExecutorCoresDeps, OrchestrateFileCores, OrchestrateFileCore, OrchestrateFileCoreContext, OrchestrateWebSearchCore, GitExec, WorktreeEntry, CreateWorktreeOptions, CleanIfUnchangedResult, SweepSummary, SweepDeps, } from "./builtin/orchestrate/index.js";

package/node_modules/@comis/skills/dist/tools/index.js

@@ -26,12 +26,16 @@
 // Built-in tools (web-search, web-fetch)
 export { createWebSearchTool, __clearSearchCache } from "./builtin/web-search-tool/index.js";
 export { createWebFetchTool, fetchUrlContent, __clearFetchCache } from "./builtin/web-fetch-tool.js";
-// Web-fetch internals reused by the daemon-side `tool.invoke` executor (Phase 212,
-// WEB-02): the DNS-pinned fetch primitive + the fetch-free readability extractor.
+// Web-fetch internals reused by the daemon-side `tool.invoke` executor: the
+// DNS-pinned fetch primitive + the fetch-free readability extractor.
 // The autonomous `orch:web` path is validateUrl → fetchPinned → extractReadableContent
 // (undici, DNS-pinned, NO impit re-resolve), distinct from the in-process web_fetch tool.
 export { fetchPinned, createPinnedAgent } from "./integrations/pinned-fetch.js";
 export { extractReadableContent } from "./builtin/web-fetch-utils.js";
+// The MCP result sanitizer (NFKC + invisible-char strip) reused by the
+// daemon-side `case "mcp"` tool.invoke executor — a FRESH call site from the
+// in-process mcp-tool-bridge, so the sanitize+wrap pair is replicated there.
+export { sanitizeMcpToolResult } from "./integrations/mcp-result-sanitizer.js";
 // Built-in tools -- Source profiles (per-tool limits and extraction config)
 export { DEFAULT_SOURCE_PROFILES, resolveSourceProfile, resolveAllProfiles, } from "./builtin/tool-source-profiles.js";
 // Built-in tools -- safe-path types (lazy resolution for hot-add)
@@ -44,7 +48,7 @@ export { createApplyPatchTool } from "./builtin/file/apply-patch-tool.js";
 export { createExecTool } from "./builtin/exec-tool/index.js";
 export { createProcessTool } from "./builtin/process-tool.js";
 export { createProcessRegistry } from "./builtin/process-registry.js";
-// Built-in tools -- Sleep (STREAM-03): the pacing primitive the model calls to
+// Built-in tools -- Sleep: the pacing primitive the model calls to
 // defer for the ~5-min prompt-cache TTL instead of polling in a token-burning
 // loop. Consumed by the daemon toolset assembly (setup-tools.ts) next to the
 // other always-on builtins (createExecTool/createProcessTool).
@@ -57,30 +61,30 @@ export { createTerminalSessionCreateTool, createTerminalSessionReadTool, createT
 // instance per agent (from the matched entry's limits) feeding both the tool deps
 // (consume*) and the registry onCapForget (caps.forget).
 createSessionCaps, 
-// 164-01/03: the daemon woken-turn driver (164-06) consumes the pure drive-state journal
+// The daemon woken-turn driver consumes the pure drive-state journal
 // (cross-wake memory) + the bounded digest/diff read selector + the content-free screen
-// digest line — DRIVE-01 / READ-01. The read tool (164-06) delegates to boundedReadDigest.
+// digest line. The read tool delegates to boundedReadDigest.
 emptyJournal, appendAnswered, appendStep, updateJournal, serializeJournal, deserializeJournal, boundedReadDigest, screenDigestLine, READ_DIGEST_BYTE_CAP, 
-// 165-01/02/03/06 (DUR-01/02 / LIVE-01 / ENDURE-01): the Phase-165 pure siblings the
-// daemon-side durability/endurance wiring (165-07) consumes — the re-attach DECISION +
-// the durable descriptor (de)serialize + the busy-vs-hung predicate (the LIVE-01 backstop
-// + the ENDURE-01 reaper exclusion) + the spend-ceiling check + the registry's injected
-// descriptor-store port + recover-on-boot seams. Promoted to the top-level barrel here
-// (the integration plan is their first `@comis/skills/tools`-level consumer).
+// The pure durability/endurance siblings the daemon-side wiring consumes — the
+// re-attach DECISION + the durable descriptor (de)serialize + the busy-vs-hung
+// predicate (the liveness backstop + the reaper exclusion) + the spend-ceiling
+// check + the registry's injected descriptor-store port + recover-on-boot seams.
+// Promoted to the top-level barrel here (the daemon is their first
+// `@comis/skills/tools`-level consumer).
 reattachDecision, serializeDescriptor, deserializeDescriptor, buildSessionDescriptor, busyOrHung, checkSpendCeiling, 
-// The daemon-side has-session liveness probe builder (165-07 wiring): `tmux has-session -t
+// The daemon-side has-session liveness probe builder: `tmux has-session -t
 // comis-<id>` — the re-attach + backstop probe (exit 0 ⇒ alive).
 buildTmuxHasSessionArgv, buildTmuxKillArgv, 
-// 166-01/02 (NOTIFY-01/02): the pure user-facing notification kernel — the three-way wake
-// decision + the I9-safe done/needs-you/failed outcome map (the failed outcome deferred
-// from Phase 165 lands here), the drive.notify gate (needs-you always fires — I4), and the
-// content-free heartbeat one-liner (I3). The daemon wake-notify wiring (plan 03) is their
-// first `@comis/skills/tools`-level consumer (the public-export-consumers arch gate).
+// The pure user-facing notification kernel — the three-way wake decision + the
+// done/needs-you/failed outcome map, the drive.notify gate (needs-you always
+// fires), and the content-free heartbeat one-liner. The daemon wake-notify
+// wiring is their first `@comis/skills/tools`-level consumer (the
+// public-export-consumers arch gate).
 decideWakeAction, mapTerminalOutcome, shouldNotifyOutcome, heartbeatLine, 
-// 124-09: the woken-turn driver (daemon-side) consumes the safe-only auto-answer policy
-// (124-04) + the normalized loop-guard (124-04) — the SEC-12/SEC-11 governance modules.
+// The woken-turn driver (daemon-side) consumes the safe-only auto-answer policy
+// + the normalized loop-guard — the auto-answer governance modules.
 decideAutoAnswer, createLoopGuard, 
-// v2.26 DIALOG-01: the woken-turn driver resolves a session's platform profile by allowId to feed
+// The woken-turn driver resolves a session's platform profile by allowId to feed
 // decideAutoAnswer the profile's dialogs (the safe-only policy still disposes).
 getPlatformProfile, } from "./builtin/terminal-driver/index.js";
 export { parseInstallDetour } from "./builtin/install-detour.js";
@@ -91,14 +95,13 @@ export { parseInstallDetour } from "./builtin/install-detour.js";
 // ContextStorePort — structurally distinct from the RPC session_search/
 // memory_search recall path (no rpcCall / memory.* / @comis/memory).
 export { createCtxSearchTool, createCtxInspectTool, createCtxExpandTool, 
-// DEPTH-02: tier→multi-hop-depth map for the daemon wiring site.
+// The tier→multi-hop-depth map for the daemon wiring site.
 depthForTier, } from "./builtin/context-tools/index.js";
 // Built-in tools -- Exec sandbox detection
 export { detectSandboxProvider } from "./builtin/sandbox/detect-provider.js";
-// JAIL-03 namespace preflight (Phase 211) — the boot probe that PRODUCES
-// `namespacePreflightOk` for the shipped degradeAutonomy downshift. Re-exported
-// on the barrel now that the daemon (211-06) is the out-of-package consumer
-// (mirrors detectSandboxProvider — was deep-path-only in 211-04 to avoid a dead export).
+// Namespace preflight — the boot probe that PRODUCES `namespacePreflightOk` for
+// the degradeAutonomy downshift. Re-exported on the barrel now that the daemon is
+// the out-of-package consumer (mirrors detectSandboxProvider).
 export { namespacePreflight } from "./builtin/sandbox/detect-provider.js";
 // Browser -- service
 export { createBrowserService } from "./browser/index.js";
@@ -109,7 +112,7 @@ export { createLocalWhisperAdapter } from "./integrations/local-stt-adapter.js";
 export { detectLocalSttEngine } from "./integrations/local-stt-probe.js";
 // Integrations -- TTS provider factory
 export { createTTSProvider } from "./integrations/tts-factory.js";
-// Integrations -- keyless local/Piper (in-process) text-to-audio TTS adapter (TTS-02)
+// Integrations -- keyless local/Piper (in-process) text-to-audio TTS adapter
 export { createLocalTtsAdapter } from "./integrations/local-tts-adapter.js";
 // Integrations -- TTS enhancements
 export { shouldAutoTts } from "./integrations/tts/tts-auto-mode.js";
@@ -138,21 +141,29 @@ export { createPdfPageRenderer } from "./integrations/document/pdf-page-renderer
 export { createCompositeFileExtractor } from "./integrations/document/composite-extractor.js";
 // Image generation (provider adapters, factory, rate limiter)
 export { createImageGenProvider, createImageGenRateLimiter } from "./integrations/image-gen/index.js";
-// Video generation (FAL queue adapter, factory, rate limiter) — consumed by
-// Plan 04's daemon wiring (createVideoGenProvider + createVideoGenRateLimiter +
+// Video generation (FAL queue adapter, factory, rate limiter) — consumed by the
+// daemon wiring (createVideoGenProvider + createVideoGenRateLimiter +
 // createFalVideoAdapter), mirroring the image route.
 export { createVideoGenProvider, createVideoGenRateLimiter, createFalVideoAdapter, } from "./integrations/video-gen/index.js";
-// Orchestrate — the Surface-2 autonomy runner (Phase 212, ORCH-01/02). The
-// runner + its ResultRef store; consumed by Phase 212 Plan 05's daemon wiring
-// (the dormancy activation threads capSocketPath + the store into the runner and
-// adds `orchestrate` to the autonomy tool set). The cap-socket runtime shim
+// Orchestrate — the autonomy runner. The runner + its ResultRef store; consumed
+// by the daemon wiring (the dormancy activation threads capSocketPath + the store
+// into the runner and adds `orchestrate` to the autonomy tool set). The cap-socket runtime shim
 // (invoke/wrapResultRef) is NOT surfaced here — the generated comis_tools.js
 // imports it by a relative in-jail path, never through this barrel.
-export { createOrchestrateTool, scrubSecretEnv, createResultRefStore, 
-// Plan 05 dormancy activation: the shipped daemon-side executor cores
-// (read/grep/find/ls/jq + web_search) the Plan-02 tool.invoke executor routes to.
+export { createOrchestrateTool, 
+// The shared cap-socket jailed-run core the orchestrate tool delegates to,
+// reusable by other jailed-run callers so they drive the SAME jail.
+runJailedScript, scrubSecretEnv, createResultRefStore, 
+// The durable checkpoint TTL (RESUME-05) — the daemon boot wiring threads it as
+// MaterializeContext.ttlMs for the checkpoint materialize bridge.
+CHECKPOINT_TTL_MS, 
+// The daemon-side executor cores (read/grep/find/ls/jq + web_search) the
+// tool.invoke executor routes to.
 createOrchestrateExecutorCores, 
-// WT-01/WT-02 (Phase 219): the git-worktree lifecycle for `spawn --worktree`,
-// consumed by the daemon's executeSubAgent + boot orphan-sweep (the daemon
-// binds the real execFile-backed GitExec at the composition root).
+// The deterministic-replay pinned-byte re-spawn seam (INV-1 replay socket target);
+// the daemon assembles it + threads it into the orchestrate.replay RPC wiring.
+createOrchestrateReplayRespawn, 
+// The git-worktree lifecycle for `spawn --worktree`, consumed by the daemon's
+// executeSubAgent + boot orphan-sweep (the daemon binds the real
+// execFile-backed GitExec at the composition root).
 createWorktree, isWorktreeCleanIfUnchanged, cleanIfUnchanged, sweepOrphans, } from "./builtin/orchestrate/index.js";

package/node_modules/@comis/skills/dist/tools/integrations/edge-tts-adapter.js

@@ -7,9 +7,9 @@ const MAX_TEXT_LENGTH = 5000;
  * OpenAI TTS voice names. The shared `media.tts.voice` config default is "alloy"
  * (an OpenAI voice) but applies across ALL providers — so when the keyless-default
  * provider is "edge", "alloy" leaks here and Edge rejects it ("Invalid voice
- * 'alloy'"), breaking keyless TTS out-of-the-box (v2.25 keyless-default-voice
- * regression, live 2026-06-20). Mapping a known OpenAI voice name to the Edge
- * default keeps keyless TTS working while an explicit *Edge* voice still passes through.
+ * 'alloy'"), breaking keyless TTS out-of-the-box. Mapping a known OpenAI voice name
+ * to the Edge default keeps keyless TTS working while an explicit *Edge* voice still
+ * passes through.
  */
 const OPENAI_VOICE_NAMES = new Set([
     "alloy", "echo", "fable", "onyx", "nova", "shimmer",