comisai 1.0.45 → 1.0.46

package/node_modules/@comis/core/dist/activity/template-engine.d.ts

@@ -1,9 +1,9 @@
 /**
  * template-engine — the pure, single chokepoint that turns redacted tool params
- * into a user-visible activity label (spec §10.1).
+ * into a user-visible activity label.
  *
  * `applyTemplate(spec, params)` is the projection-time enforcement of the
- * redaction rules. The pipeline (spec §10.1 lines 1219-1231):
+ * redaction rules. The pipeline:
  *
  *   raw params
  *     → allowlist filter   (accept ONLY the keys the LabelSpec declares —
@@ -12,13 +12,13 @@
  *     → redactValue()      (per surviving value: secret-key + secret-shape +
  *                           absolute-path compaction + PII masks)
  *     → static substitution of `{key}` placeholders (a plain string-replace
- *                           callback — NO dynamic code execution of any form,
- *                           §19.4); a referenced placeholder absent from the
+ *                           callback — NO dynamic code execution of any
+ *                           form); a referenced placeholder absent from the
  *                           allowlist → unknown_key
  *     → transform hook     (spec.transform(params) consumes RAW
  *                           params and produces the final label; non-empty
  *                           return wins. The transform output is piped through
- *                           redactValue defense-in-depth — Pitfall 4 — so a
+ *                           redactValue defense-in-depth, so a
  *                           transform that returns a secret shape still
  *                           renders as `<redacted>`. Skipped when spec has no
  *                           transform.)
@@ -30,14 +30,14 @@
  * `redactionsApplied` and emits the WARN; this engine never logs.
  *
  * The template engine is the ONLY path from `params` to user-visible strings —
- * raw `params` never reach a channel adapter (spec §10.1 line 1233).
+ * raw `params` never reach a channel adapter.
  *
  * @module
  */
 import { type Result } from "@comis/shared";
 import { type RedactionReason, type RedactOptions } from "../security/redact-value.js";
 import type { LabelSpec } from "./label-spec.js";
-/** The pure output of {@link applyTemplate}. Field names match spec §10.1. */
+/** The pure output of {@link applyTemplate}. */
 export interface TemplateOutput {
     /** Rendered, redacted, length-capped (≤120) label string. */
     defaultLabel: string;

package/node_modules/@comis/core/dist/activity/template-engine.js

@@ -1,10 +1,10 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
  * template-engine — the pure, single chokepoint that turns redacted tool params
- * into a user-visible activity label (spec §10.1).
+ * into a user-visible activity label.
  *
  * `applyTemplate(spec, params)` is the projection-time enforcement of the
- * redaction rules. The pipeline (spec §10.1 lines 1219-1231):
+ * redaction rules. The pipeline:
  *
  *   raw params
  *     → allowlist filter   (accept ONLY the keys the LabelSpec declares —
@@ -13,13 +13,13 @@
  *     → redactValue()      (per surviving value: secret-key + secret-shape +
  *                           absolute-path compaction + PII masks)
  *     → static substitution of `{key}` placeholders (a plain string-replace
- *                           callback — NO dynamic code execution of any form,
- *                           §19.4); a referenced placeholder absent from the
+ *                           callback — NO dynamic code execution of any
+ *                           form); a referenced placeholder absent from the
  *                           allowlist → unknown_key
  *     → transform hook     (spec.transform(params) consumes RAW
  *                           params and produces the final label; non-empty
  *                           return wins. The transform output is piped through
- *                           redactValue defense-in-depth — Pitfall 4 — so a
+ *                           redactValue defense-in-depth, so a
  *                           transform that returns a secret shape still
  *                           renders as `<redacted>`. Skipped when spec has no
  *                           transform.)
@@ -31,23 +31,23 @@
  * `redactionsApplied` and emits the WARN; this engine never logs.
  *
  * The template engine is the ONLY path from `params` to user-visible strings —
- * raw `params` never reach a channel adapter (spec §10.1 line 1233).
+ * raw `params` never reach a channel adapter.
  *
  * @module
  */
 import { ok, err } from "@comis/shared";
 import { redactValue, } from "../security/redact-value.js";
 // ---------------------------------------------------------------------------
-// Length caps — match ActivityEvent.defaultLabel/defaultDetail (spec §4.1).
+// Length caps — match ActivityEvent.defaultLabel/defaultDetail.
 // ---------------------------------------------------------------------------
-/** Maximum rendered `defaultLabel` length (spec §10.1; ActivityEvent cap). */
+/** Maximum rendered `defaultLabel` length (ActivityEvent cap). */
 const MAX_LABEL_LENGTH = 120;
-/** Maximum rendered `defaultDetail` length (spec §10.1; ActivityEvent cap). */
+/** Maximum rendered `defaultDetail` length (ActivityEvent cap). */
 const MAX_DETAIL_LENGTH = 280;
 /**
  * Placeholder token matcher: `{name}` where the name is one or more
  * word characters. A plain regex + `replace` callback — deliberately NOT a
- * template-literal that would execute its contents (§19.4). Capturing group 1
+ * template-literal that would execute its contents. Capturing group 1
  * is the placeholder key.
  */
 const PLACEHOLDER_RE = /\{([A-Za-z0-9_]+)\}/g;
@@ -106,8 +106,8 @@ export function applyTemplate(spec, params, opts = {}) {
     //     as the label text (an empty return falls through to the substituted
     //     label). The transform output is piped through `redactValue` even when
     //     the transform claims to self-redact (e.g. parseShellCommand at
-    //     shell-label-parser.ts:53) — defense-in-depth against the Pitfall 4
-    //     regression where a malicious or buggy transform leaks a secret shape.
+    //     shell-label-parser.ts:53) — defense-in-depth against a malicious
+    //     or buggy transform leaking a secret shape.
     //     The transform fires AFTER substitute() Result-checks above, so a
     //     missing-placeholder error is still surfaced as err({kind:'unknown_key'}).
     let labelText = labelResult.value;
@@ -118,7 +118,7 @@ export function applyTemplate(spec, params, opts = {}) {
             labelText = typeof redacted.value === "string" ? redacted.value : transformed;
         }
     }
-    // (5) Length cap (spec §10.1): label ≤ 120, detail ≤ 280; flag truncation.
+    // (5) Length cap: label ≤ 120, detail ≤ 280; flag truncation.
     let truncated = false;
     let defaultLabel = labelText;
     if (defaultLabel.length > MAX_LABEL_LENGTH) {

package/node_modules/@comis/core/dist/activity/themes/ascii.d.ts

@@ -1,7 +1,7 @@
 /**
  * The `ascii` activity theme.
  *
- * LOCKED FACT — "ASCII strips ALL emoji": every marker here is a bracketed
+ * INVARIANT — "ASCII strips ALL emoji": every marker here is a bracketed
  * pure-ASCII tag with ZERO emoji (and zero non-ASCII) codepoints. The
  * `ascii theme markers contain zero emoji codepoints` test
  * asserts `not.toMatch(/\p{Extended_Pictographic}/u)` plus literal negative

package/node_modules/@comis/core/dist/activity/themes/ascii.js

@@ -5,7 +5,7 @@ export const asciiTheme = {
         failure: "[ERR]",
         subagent: "[SUB]",
         running: "[..]",
-        // Per spec §9 + §8.9: lowercase Latin `x` so a coalesced surrogate
+        // Lowercase Latin `x` so a coalesced surrogate
         // renders `reading config x3` instead of `×3` (the default U+00D7 fails the
         // strict ASCII-parity test in ascii-parity.test.ts).
         surrogateSeparator: "x",

package/node_modules/@comis/core/dist/activity/themes/default.d.ts

@@ -1,13 +1,13 @@
 /**
  * The `default` activity theme.
  *
- * Baseline status markers — the glyphs currently hardcoded downstream
+ * Baseline status markers
  * (`✓ done` / `❌ {errorKind}` / `🤖 {agentId} subagent` / the running wrench).
- * Those downstream literals are redirected to read these markers so the
- * default rendering is byte-identical to today's behavior.
+ * Downstream renderers read these markers instead of hardcoding glyphs, so a
+ * theme can override them while the default rendering stays canonical.
  *
  * @module
  */
 import type { ActivityTheme } from "../label-spec.js";
-/** Default theme: the canonical emoji status glyphs (today's hardcoded set). */
+/** Default theme: the canonical emoji status glyphs. */
 export declare const defaultTheme: ActivityTheme;

package/node_modules/@comis/core/dist/activity/themes/default.js

@@ -1,11 +1,11 @@
-/** Default theme: the canonical emoji status glyphs (today's hardcoded set). */
+/** Default theme: the canonical emoji status glyphs. */
 export const defaultTheme = {
     markers: {
         success: "✓",
         failure: "❌",
         subagent: "🤖",
         running: "🔧",
-        // Per spec §9: surrogate-count separator (e.g. `reading config ×3`).
+        // Surrogate-count separator (e.g. `reading config ×3`).
         // The default theme uses the multiplication sign U+00D7 — humane glyph.
         surrogateSeparator: "×",
     },

package/node_modules/@comis/core/dist/activity/turn-activity-context.d.ts

@@ -1,5 +1,5 @@
 /**
- * TurnActivityContext — concrete per-turn routing context (spec §4.6).
+ * TurnActivityContext — concrete per-turn routing context.
  *
  * `ActivityEvent.channelKey` alone is too thin for renderers and routers.
  * Channels need agent identity, session correlation, channel-adapter selection,

package/node_modules/@comis/core/dist/activity/turn-outcome.d.ts

@@ -1,5 +1,5 @@
 /**
- * TurnOutcome + delivery receipts (spec §4.3).
+ * TurnOutcome + delivery receipts.
  *
  * Pure TS interfaces and a discriminated union — no Zod runtime. The delivery
  * stage captures `deliveredAtMs` itself (the chunk schema carries no per-chunk
@@ -13,7 +13,7 @@ import type { ActivityEvent } from "./activity-event.js";
  * Aggregated telemetry returned by the delivery stage when every chunk
  * was delivered successfully. `deliveredAtMs` is captured by
  * `deliverExecutionResponse` at the moment the last chunk's send-promise
- * resolves (§16.6). The chunk schema does NOT carry a per-chunk timestamp;
+ * resolves. The chunk schema does NOT carry a per-chunk timestamp;
  * the delivery stage takes one once at end.
  */
 export interface FinalDeliveryReceipt {
@@ -40,8 +40,9 @@ export interface DeliveryFailureReceipt {
     failedAtMs: number;
 }
 /**
- * The orchestrator's delivery stage now returns this Result. Previously
- * returned Promise<void>; §16.6 specifies the bridge change.
+ * The Result returned by the orchestrator's delivery stage: success carries
+ * the aggregated receipt; failure carries enough state for the coordinator
+ * to classify and render the turn.
  */
 export type DeliveryStageResult = Result<FinalDeliveryReceipt, DeliveryFailureReceipt>;
 export type TurnOutcome = {

package/node_modules/@comis/core/dist/api-contracts/agents.d.ts

@@ -2,7 +2,7 @@
  * Agents + models + providers-domain RPC contracts. Mirrors the three daemon
  * handler factory files that share the `AgentsApiDeps` cluster slice:
  *
- *   - `packages/daemon/src/api/agent-handlers.ts`     ( 8 methods — agents.*
+ *   - `packages/daemon/src/api/agent-handlers.ts`     ( 7 methods — agents.*
  *                                                       + agent.getOperationModels)
  *   - `packages/daemon/src/api/model-handlers.ts`     ( 3 methods — models.*)
  *   - `packages/daemon/src/api/provider-handlers.ts`  ( 7 methods — providers.*)

package/node_modules/@comis/core/dist/api-contracts/agents.js

@@ -3,7 +3,7 @@
  * Agents + models + providers-domain RPC contracts. Mirrors the three daemon
  * handler factory files that share the `AgentsApiDeps` cluster slice:
  *
- *   - `packages/daemon/src/api/agent-handlers.ts`     ( 8 methods — agents.*
+ *   - `packages/daemon/src/api/agent-handlers.ts`     ( 7 methods — agents.*
  *                                                       + agent.getOperationModels)
  *   - `packages/daemon/src/api/model-handlers.ts`     ( 3 methods — models.*)
  *   - `packages/daemon/src/api/provider-handlers.ts`  ( 7 methods — providers.*)

package/node_modules/@comis/core/dist/api-contracts/audit-query.d.ts

@@ -1,17 +1,17 @@
 /**
- * The `obs.audit.query` wire shape (AUDIT-05, Phase 176 Plan 05) — the read
- * surface onto the now-durable `obs_audit_events` table (Plan 03). The SIBLING
+ * The `obs.audit.query` wire shape — the read surface onto the durable
+ * `obs_audit_events` table. The SIBLING
  * of `obs.fleet.health` / `obs.explain`: a bounded, admin-gated, content-free
  * query over the persisted security-decision audit.
  *
- * Request: the {@link AuditQueryParams} filter shape (decision #4 — every field
+ * Request: the {@link AuditQueryParams} filter shape (every field
  * optional; absent widens the scan). The handler clamps `limit` to a hard
  * ceiling (the store already does too — defense-in-depth). NO `.default()` (off
  * the 12-shape allowlist); the bounded default limit is applied store-side.
  *
  * Response: `{ rows }` — content-free `AuditEventRow`s (id / scope ids / ts /
  * closed-enum kind+classification+outcome+severity / `refs` scrubbed JSON blob).
- * NO secret value field exists on the row (structural — Plan 03 scrubbed at
+ * NO secret value field exists on the row (structural — values are scrubbed at
  * write); a `value`-shaped field can never appear because the row type has no
  * such field. The rows ride the documented loose-record projection
  * (`z.record(z.string(), z.unknown())` — the `ObsRecordArray` mold the sibling
@@ -28,7 +28,7 @@ import { z } from "zod";
  * The content-free audit row shape (the `obs.audit.query` projection), mirroring
  * the `@comis/memory` `AuditEventRow` interface field-for-field — counts / ids /
  * closed enums / a scrubbed `refs` blob ONLY. There is NO `value` field (a secret
- * value never reaches a row — Plan 03 AUDIT-04). Exported as the TYPE consumers
+ * value never reaches a row). Exported as the TYPE consumers
  * narrow the loose wire rows to; the wire contract itself uses the loose-record
  * array (see the module JSDoc) to stay within the contracts bundle-size budget,
  * exactly as the sibling obs.* contracts do.
@@ -60,16 +60,16 @@ declare const AuditQueryResponseSchema: z.ZodObject<{
 /** The `obs.audit.query` response shape. Inferred from the Zod schema. */
 export type AuditQueryResponse = z.infer<typeof AuditQueryResponseSchema>;
 /**
- * `obs.audit.query` — the admin-gated read RPC onto `obs_audit_events`
- * (AUDIT-05). The SIBLING of {@link ObsExplainContract} / `ObsFleetHealthContract`:
+ * `obs.audit.query` — the admin-gated read RPC onto `obs_audit_events`.
+ * The SIBLING of {@link ObsExplainContract} / `ObsFleetHealthContract`:
  * a bounded, deterministic, content-free query over the persisted audit. The
- * daemon handler enforces the H1 dual-layer admin gate (gateway-router scope +
+ * daemon handler enforces the dual-layer admin gate (gateway-router scope +
  * an in-handler `_trustLevel === "admin"` re-check) and strips internal fields
  * before the parse, mirroring `obs.fleet.health`.
  *
  * Request: the {@link AuditQueryParams} filter shape — every field optional; an
  * absent field widens the scan. All filters become bound parameters in a
- * parameterized WHERE store-side (never interpolated SQL — T-176-14/T-176-17).
+ * parameterized WHERE store-side (never interpolated SQL).
  */
 export declare const ObsAuditQueryContract: import("./types.js").ApiContract<z.ZodObject<{
     kind: z.ZodOptional<z.ZodString>;

package/node_modules/@comis/core/dist/api-contracts/audit-query.js

@@ -1,18 +1,18 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
- * The `obs.audit.query` wire shape (AUDIT-05, Phase 176 Plan 05) — the read
- * surface onto the now-durable `obs_audit_events` table (Plan 03). The SIBLING
+ * The `obs.audit.query` wire shape — the read surface onto the durable
+ * `obs_audit_events` table. The SIBLING
  * of `obs.fleet.health` / `obs.explain`: a bounded, admin-gated, content-free
  * query over the persisted security-decision audit.
  *
- * Request: the {@link AuditQueryParams} filter shape (decision #4 — every field
+ * Request: the {@link AuditQueryParams} filter shape (every field
  * optional; absent widens the scan). The handler clamps `limit` to a hard
  * ceiling (the store already does too — defense-in-depth). NO `.default()` (off
  * the 12-shape allowlist); the bounded default limit is applied store-side.
  *
  * Response: `{ rows }` — content-free `AuditEventRow`s (id / scope ids / ts /
  * closed-enum kind+classification+outcome+severity / `refs` scrubbed JSON blob).
- * NO secret value field exists on the row (structural — Plan 03 scrubbed at
+ * NO secret value field exists on the row (structural — values are scrubbed at
  * write); a `value`-shaped field can never appear because the row type has no
  * such field. The rows ride the documented loose-record projection
  * (`z.record(z.string(), z.unknown())` — the `ObsRecordArray` mold the sibling
@@ -35,16 +35,16 @@ const AuditQueryResponseSchema = z.object({
     rows: z.array(z.record(z.string(), z.unknown())),
 });
 /**
- * `obs.audit.query` — the admin-gated read RPC onto `obs_audit_events`
- * (AUDIT-05). The SIBLING of {@link ObsExplainContract} / `ObsFleetHealthContract`:
+ * `obs.audit.query` — the admin-gated read RPC onto `obs_audit_events`.
+ * The SIBLING of {@link ObsExplainContract} / `ObsFleetHealthContract`:
  * a bounded, deterministic, content-free query over the persisted audit. The
- * daemon handler enforces the H1 dual-layer admin gate (gateway-router scope +
+ * daemon handler enforces the dual-layer admin gate (gateway-router scope +
  * an in-handler `_trustLevel === "admin"` re-check) and strips internal fields
  * before the parse, mirroring `obs.fleet.health`.
  *
  * Request: the {@link AuditQueryParams} filter shape — every field optional; an
  * absent field widens the scan. All filters become bound parameters in a
- * parameterized WHERE store-side (never interpolated SQL — T-176-14/T-176-17).
+ * parameterized WHERE store-side (never interpolated SQL).
  */
 export const ObsAuditQueryContract = defineContract({
     method: "obs.audit.query",

package/node_modules/@comis/core/dist/api-contracts/auth.d.ts

@@ -74,7 +74,7 @@ export declare const AuthLogoutContract: import("./types.js").ApiContract<z.ZodO
  * Carries a completed OAuthProfile (token-bearing) from the CLI to the daemon.
  * The daemon persists through the OAuthCredentialStorePort (file or encrypted,
  * selected by security.storage). Response is token-free — access/refresh/accountId
- * NEVER appear in the response. See §8.1 of DESIGN-credential-storage-modes.md.
+ * NEVER appear in the response (token values must not transit back over the wire).
  *
  * Residency: Zod response.parse() strips any accidentally-added fields because
  * the schema is closed (no .passthrough()). Dev-mode canary in the handler calls
@@ -102,9 +102,9 @@ export declare const AuthSetContract: import("./types.js").ApiContract<z.ZodObje
  * Auth-domain contract array. Registered into
  * `API_CONTRACTS_ORDERED` by `packages/core/src/api-contracts/index.ts`.
  *
- * AUTH_CONTRACTS grows 2 → 3 with `AuthSetContract`. The bidirectional
- * architecture test (`test/architecture/api-contracts-bidirectional.test.ts`)
- * enforces handler–contract count parity automatically.
+ * The bidirectional architecture test
+ * (`test/architecture/api-contracts-bidirectional.test.ts`) enforces
+ * handler–contract count parity automatically.
  */
 export declare const AUTH_CONTRACTS: readonly [import("./types.js").ApiContract<z.ZodObject<{
     provider: z.ZodOptional<z.ZodString>;

package/node_modules/@comis/core/dist/api-contracts/auth.js

@@ -111,7 +111,7 @@ export const AuthLogoutContract = defineContract({
  * Carries a completed OAuthProfile (token-bearing) from the CLI to the daemon.
  * The daemon persists through the OAuthCredentialStorePort (file or encrypted,
  * selected by security.storage). Response is token-free — access/refresh/accountId
- * NEVER appear in the response. See §8.1 of DESIGN-credential-storage-modes.md.
+ * NEVER appear in the response (token values must not transit back over the wire).
  *
  * Residency: Zod response.parse() strips any accidentally-added fields because
  * the schema is closed (no .passthrough()). Dev-mode canary in the handler calls
@@ -148,12 +148,12 @@ export const AuthSetContract = defineContract({
  * Auth-domain contract array. Registered into
  * `API_CONTRACTS_ORDERED` by `packages/core/src/api-contracts/index.ts`.
  *
- * AUTH_CONTRACTS grows 2 → 3 with `AuthSetContract`. The bidirectional
- * architecture test (`test/architecture/api-contracts-bidirectional.test.ts`)
- * enforces handler–contract count parity automatically.
+ * The bidirectional architecture test
+ * (`test/architecture/api-contracts-bidirectional.test.ts`) enforces
+ * handler–contract count parity automatically.
  */
 export const AUTH_CONTRACTS = [
     AuthListContract,
     AuthLogoutContract,
-    AuthSetContract, // AUTH_CONTRACTS grows 2 → 3
+    AuthSetContract,
 ];

package/node_modules/@comis/core/dist/api-contracts/capabilities.d.ts

@@ -1,20 +1,20 @@
 /**
- * Capabilities-domain RPC contract (Phase 215-02, INTRO-01/INTRO-02).
+ * Capabilities-domain RPC contract.
  *
  * `capabilities.introspect` is the read-only, agent-reachable RPC behind the
  * `comis whoami` surface: an agent (or operator) asks "what can I do + how much
  * budget/quota is left". It returns the run's resolved orchestration capabilities
  * plus the remaining per-root budget + outward-quota headroom (the numbers the
- * Plan-02 `BoundedAutonomy.snapshot` / `PerRootBudget.remaining` /
+ * `BoundedAutonomy.snapshot` / `PerRootBudget.remaining` /
  * `OutwardQuota.remaining` accessors expose).
  *
- * **Scope (INTRO-02).** `scopes:["rpc"]` — agent-reachable, NOT admin, NOT
- * cap-gated (disjoint from `AgentCapability`, the arch-tested split in 210). It
- * is the read-only "ungated" class: the handler (Plan 04) enforces `_agentId`
+ * **Scope.** `scopes:["rpc"]` — agent-reachable, NOT admin, NOT
+ * cap-gated (disjoint from `AgentCapability` — an architecture-tested split). It
+ * is the read-only "ungated" class: the handler enforces `_agentId`
  * self-scope (an agent gets ITS OWN caps/budget, never cross-agent) but calls NO
  * `requireCapability` — a read of one's own posture needs no cap.
  *
- * **Self-scoping (V4).** The request is `{}`. The caller agent is identified by
+ * **Self-scoping.** The request is `{}`. The caller agent is identified by
  * the dispatcher-injected `_agentId` internal field (stripped before the parse,
  * read by the handler) — NOT an arbitrary `agentId` request param, so a caller
  * cannot introspect another agent.
@@ -22,17 +22,15 @@
  * **Allowlist compliance.** Schemas use the 12-shape allowlist only (z.object,
  * z.string, z.number, z.array, z.nullable, z.optional). No refinements.
  *
- * **Deferred to Plan 04.** The matching daemon handler + `pnpm contracts:generate`
- * regen + the bidirectional contract↔handler parity land together in Plan 04
- * (the same-wave contract+handler rule, 188 BLOCKER-1). This file declares the
- * contract only.
+ * This file declares the contract only; the matching daemon handler lives in
+ * `packages/daemon/src/api/capabilities-handlers.ts`.
  *
  * @module
  */
 import { z } from "zod";
 /**
  * `capabilities.introspect` — the run's resolved caps + remaining budgets/quotas
- * (the `whoami` read). Handler path: deferred to Plan 04 (capabilities-handlers).
+ * (the `whoami` read). Handler: `capabilities-handlers.ts` in the daemon.
  *
  * Request: `{}` (self-scoped via the dispatcher-injected `_agentId` — NOT
  * declared here).
@@ -45,7 +43,7 @@ import { z } from "zod";
  *     handler maps the closed `AgentCapability` enum to strings).
  *   - `budget`       — OPTIONAL: the per-root remaining budget. Absent when no
  *     `rootRunId` is live (in-process, pre-spawn). `usdRemaining` is nullable for
- *     the honest-degrade unpriceable case (BUDGET-02) — the token/wall-clock
+ *     the honest-degrade unpriceable case — the token/wall-clock
  *     limbs are authoritative regardless.
  *   - `outwardQuota` — OPTIONAL: the remaining per-hour outward send allowance.
  */

package/node_modules/@comis/core/dist/api-contracts/capabilities.js

@@ -1,21 +1,21 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
- * Capabilities-domain RPC contract (Phase 215-02, INTRO-01/INTRO-02).
+ * Capabilities-domain RPC contract.
  *
  * `capabilities.introspect` is the read-only, agent-reachable RPC behind the
  * `comis whoami` surface: an agent (or operator) asks "what can I do + how much
  * budget/quota is left". It returns the run's resolved orchestration capabilities
  * plus the remaining per-root budget + outward-quota headroom (the numbers the
- * Plan-02 `BoundedAutonomy.snapshot` / `PerRootBudget.remaining` /
+ * `BoundedAutonomy.snapshot` / `PerRootBudget.remaining` /
  * `OutwardQuota.remaining` accessors expose).
  *
- * **Scope (INTRO-02).** `scopes:["rpc"]` — agent-reachable, NOT admin, NOT
- * cap-gated (disjoint from `AgentCapability`, the arch-tested split in 210). It
- * is the read-only "ungated" class: the handler (Plan 04) enforces `_agentId`
+ * **Scope.** `scopes:["rpc"]` — agent-reachable, NOT admin, NOT
+ * cap-gated (disjoint from `AgentCapability` — an architecture-tested split). It
+ * is the read-only "ungated" class: the handler enforces `_agentId`
  * self-scope (an agent gets ITS OWN caps/budget, never cross-agent) but calls NO
  * `requireCapability` — a read of one's own posture needs no cap.
  *
- * **Self-scoping (V4).** The request is `{}`. The caller agent is identified by
+ * **Self-scoping.** The request is `{}`. The caller agent is identified by
  * the dispatcher-injected `_agentId` internal field (stripped before the parse,
  * read by the handler) — NOT an arbitrary `agentId` request param, so a caller
  * cannot introspect another agent.
@@ -23,10 +23,8 @@
  * **Allowlist compliance.** Schemas use the 12-shape allowlist only (z.object,
  * z.string, z.number, z.array, z.nullable, z.optional). No refinements.
  *
- * **Deferred to Plan 04.** The matching daemon handler + `pnpm contracts:generate`
- * regen + the bidirectional contract↔handler parity land together in Plan 04
- * (the same-wave contract+handler rule, 188 BLOCKER-1). This file declares the
- * contract only.
+ * This file declares the contract only; the matching daemon handler lives in
+ * `packages/daemon/src/api/capabilities-handlers.ts`.
  *
  * @module
  */
@@ -37,7 +35,7 @@ import { defineContract } from "./types.js";
 // ---------------------------------------------------------------------------
 /**
  * `capabilities.introspect` — the run's resolved caps + remaining budgets/quotas
- * (the `whoami` read). Handler path: deferred to Plan 04 (capabilities-handlers).
+ * (the `whoami` read). Handler: `capabilities-handlers.ts` in the daemon.
  *
  * Request: `{}` (self-scoped via the dispatcher-injected `_agentId` — NOT
  * declared here).
@@ -50,7 +48,7 @@ import { defineContract } from "./types.js";
  *     handler maps the closed `AgentCapability` enum to strings).
  *   - `budget`       — OPTIONAL: the per-root remaining budget. Absent when no
  *     `rootRunId` is live (in-process, pre-spawn). `usdRemaining` is nullable for
- *     the honest-degrade unpriceable case (BUDGET-02) — the token/wall-clock
+ *     the honest-degrade unpriceable case — the token/wall-clock
  *     limbs are authoritative regardless.
  *   - `outwardQuota` — OPTIONAL: the remaining per-hour outward send allowance.
  */
@@ -59,9 +57,9 @@ export const CapabilitiesIntrospectContract = defineContract({
     request: z.object({}),
     response: z.object({
         agentId: z.string(),
-        /** Finding E (30uc-20260624): the caller's resolved `autonomy.enabled`. FALSE for a
+        /** The caller's resolved `autonomy.enabled`. FALSE for a
          *  disabled/assistant-profile agent — introspect then returns a clean disabled-state
-         *  ({enabled:false, caps:[]}) instead of "Unknown RPC method" (the method is now registered
+         *  ({enabled:false, caps:[]}) instead of "Unknown RPC method" (the method is registered
          *  unconditionally, not gated on bounded-autonomy being wired). */
         enabled: z.boolean(),
         caps: z.array(z.string()),

package/node_modules/@comis/core/dist/api-contracts/channels.d.ts

@@ -26,13 +26,14 @@
  *   - `delivery.queue.status`    (rpc — registered intrinsically via
  *                                 channel-handlers; read-only observability)
  *
- *   message-handlers.ts (all admin per setup-gateway-api.ts:265-270):
- *   - `message.send`             (admin)
- *   - `message.reply`            (admin)
+ *   message-handlers.ts:
+ *   - `message.send`             (rpc — outward-send subset; see the scope
+ *                                 rationale on the contract)
+ *   - `message.reply`            (rpc — outward-send subset)
  *   - `message.edit`             (admin)
  *   - `message.delete`           (admin)
  *   - `message.fetch`            (admin)
- *   - `message.react`            (admin)
+ *   - `message.react`            (rpc — outward-send subset)
  *   - `message.attach`           (admin)
  *   - `telegram.action`          (admin)
  *   - `discord.action`           (admin)
@@ -90,6 +91,7 @@ export declare const ChannelsHealthContract: import("./types.js").ApiContract<z.
         connectionMode: z.ZodString;
         lastCheckedAt: z.ZodNumber;
         lastMessageAt: z.ZodNullable<z.ZodNumber>;
+        lastInboundAt: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         error: z.ZodNullable<z.ZodString>;
         stateChangedAt: z.ZodNumber;
         consecutiveFailures: z.ZodNumber;
@@ -255,8 +257,8 @@ export declare const ChannelsRestartContract: import("./types.js").ApiContract<z
     message: z.ZodString;
 }, z.core.$strip>>;
 /**
- * `message.send` — Send a text message via a channel adapter. Admin-scoped
- * per setup-gateway-api.ts:265-270. Handler path: message-handlers.ts:104-123.
+ * `message.send` — Send a text message via a channel adapter. Rpc-scoped
+ * (see the scope rationale on the contract). Handler path: message-handlers.ts:104-123.
  *
  * Authorizes channel access via `authorizeChannelAccess`. Resolves adapter
  * via `resolveAdapter`. Optional rich content (`buttons`, `cards`, `effects`)
@@ -283,7 +285,7 @@ export declare const MessageSendContract: import("./types.js").ApiContract<z.Zod
 }, z.core.$strip>>;
 /**
  * `message.reply` — Reply to an existing message via a channel adapter.
- * Admin-only. Handler path: message-handlers.ts:125-146.
+ * Rpc-scoped. Handler path: message-handlers.ts:125-146.
  *
  * Resolves inbound UUID `message_id` to platform-native id via
  * `inboundMessageIdResolver` before adapter call. Same rich content options
@@ -306,7 +308,7 @@ export declare const MessageReplyContract: import("./types.js").ApiContract<z.Zo
     channelId: z.ZodString;
 }, z.core.$strip>>;
 /**
- * `message.react` — React to a message with an emoji. Admin-only. Handler
+ * `message.react` — React to a message with an emoji. Rpc-scoped. Handler
  * path: message-handlers.ts:148-159.
  *
  * Capability-gated (`reactions` feature). Resolves inbound UUID via
@@ -330,7 +332,7 @@ export declare const MessageReactContract: import("./types.js").ApiContract<z.Zo
  * `message.edit` — Edit an existing message. Admin-only. Handler path:
  * message-handlers.ts:163-175.
  *
- * 210-GAP / §3.5: edit/delete/fetch/attach STAY admin-only (deny-by-origin) and
+ * edit/delete/fetch/attach STAY admin-only (deny-by-origin) and
  * are NOT part of `orch:message` — the cap exposes only the genuinely-outward
  * send subset (send/reply/react). An agent origin is denied at the chokepoint.
  *
@@ -492,6 +494,7 @@ export declare const CHANNELS_CONTRACTS: readonly [import("./types.js").ApiContr
         connectionMode: z.ZodString;
         lastCheckedAt: z.ZodNumber;
         lastMessageAt: z.ZodNullable<z.ZodNumber>;
+        lastInboundAt: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         error: z.ZodNullable<z.ZodString>;
         stateChangedAt: z.ZodNumber;
         consecutiveFailures: z.ZodNumber;