docs: purge chain-of-thought leakage from prose

Delete design-session citations (decision/audit/plan ordinals, stack
positions), change narration, review choreography, and reviewer-addressed
justification from comments, JSDoc, docs, READMEs, Agent Notes, tests, and
generator templates; restate every affected fact as current-state contract
prose. Fix generated docs at their sources and regenerate the catalogs and
cordis-surface regions; re-paste type-equiv blocks; update every bilingual
counterpart and re-record the pairs. Record the citation rule in the
committed-artifact-citations Agent Note.

packages/client/web/src/AppRoot.tsx

@@ -3,7 +3,7 @@
  * Pure kernel component with zero plugin dependencies — before settled it may
  * only rely on itself (the fail-loud presentation must not depend on the
  * system whose failure it reports; the status/signal stores are kernel-own,
- * web2 shell self-sufficiency rule); the real UI is produced by the
+ * shell self-sufficiency rule); the real UI is produced by the
  * app-shell entry once every entry is active. A failed boot keeps the
  * loading page, lists the per-entry fiber states and the sweep report (fail
  * loud, no partial UI).

packages/client/web/src/boot.tsx

@@ -1,15 +1,15 @@
 /**
  * Web shell boot kernel — the face consumed by the apps/web entry. Everything
  * here is machinery that cannot itself be a loader entry, and none of it
- * value-imports a plugin package (web2 shell self-sufficiency rule: the
+ * value-imports a plugin package (shell self-sufficiency rule: the
  * loading page must work while — especially when — plugins fail). The one
- * sanctioned exception is the modules package (design §4.7 bootstrap
+ * sanctioned exception is the modules package (bootstrap
  * identity): the module system cannot arrive through itself, so its class
  * and its client-half wrapper are shell-bundled and the kernel adopts its
  * plugin entry once cordis is up.
  *
  * AppWebEntry.run(), module face first, then plugin face: parse
- * `window.__DSH_BOOT__` into the two-view BootManifest (wire boundary, D16)
+ * `window.__DSH_BOOT__` into the two-view BootManifest (wire boundary)
  * → build the module system over the module-view rows → render the loading
  * page → prefetch every `immediately` row in parallel with mounting the
  * vendored cordis Loader (`internal` contract injection BEFORE any entry exists —
@@ -101,9 +101,9 @@ export class AppWebEntry {
       modules: this.manifest.modules, staticModules: getStaticModules(), ...this.seams,
     })
     // The app-shell assembly is the only shell-own module: every other graph
-    // row is a plugin bundle arriving through fetch (web2 single package form).
+    // row is a plugin bundle arriving through fetch.
     this.modules.registerStatic(APP_SHELL_ID, AppShell)
-    // Adoption handoff, supply side (design §4.7): register the modules
+    // Adoption handoff, supply side: register the modules
     // package's own client half under its bare package name (= graph row id
     // = entry name — a suffixed key would miss the statics branch and
     // trigger a real fetch), and put the instance on the kernel slot the

packages/client/web/src/index.ts

@@ -2,7 +2,7 @@
  * Web shell library entry. The shell's product is {@link AppWebEntry} —
  * apps/web's vite entry runs it against #root; everything else (AppRoot
  * gate, app-shell assembly entry, module-table staticModules, platform constants) is
- * internal to the boot chain. PLATFORM_MODULES is re-exported as the C1
+ * internal to the boot chain. PLATFORM_MODULES is re-exported as the
  * single source of truth for the tsdown client externals projection.
  * @module @deepseek-ai/dsh-client-web
  */

packages/client/web/src/loader-status.ts

@@ -4,8 +4,8 @@
  * cordis fiber states (display the truth, not a retelling) — the boot chain
  * subscribes `internal/status` and recomputes one row per loader entry.
  *
- * The store is hand-rolled here because of the shell self-sufficiency rule
- * (web2 §0): the snapshot-store machinery lives in the runtime PLUGIN
+ * The store is hand-rolled here because of the shell self-sufficiency rule:
+ * the snapshot-store machinery lives in the runtime PLUGIN
  * package, and the shell kernel must not value-import any plugin package —
  * the loading page has to work while (and especially when) plugins fail.
  * @module @deepseek-ai/dsh-client-web/src/loader-status

packages/client/web/src/seed.ts

@@ -2,7 +2,7 @@
  * Platform-singleton module-table. These are the ONLY entities the shell
  * shares into the frozen module table — fetch bundles resolve their externals
  * against exactly this set through the loader's require. Keys come from the
- * platform constant module ({@link ./platform.ts}, contract C1: single source
+ * platform constant module ({@link ./platform.ts}, the single source
  * of truth with the tsdown client externals); values stay shell-static
  * imports so every bundle sees the same instance.
  */