docs(schedules): remove internal tracker/design-doc references from comments

This repository is public. Strip internal ticket IDs and design-decision
shorthand from code comments and docstrings, keeping the descriptive text.
No behavior change.

Author: jromualdez-scale

agentex/database/migrations/alembic/versions/2026_06_22_1200_add_agent_run_schedules_3b1c9d2e4f6a.py

@@ -4,8 +4,8 @@
 Revises: c7a1b2d3e4f5
 Create Date: 2026-06-22 12:00:00.000000
 
-Creates the agent_run_schedules table backing the scheduled-agent-runs feature
-(AGX1-368). Schema-only and idempotent: the table and its indexes are created
+Creates the agent_run_schedules table backing the scheduled-agent-runs feature.
+Schema-only and idempotent: the table and its indexes are created
 with IF NOT EXISTS-style guards (Alembic create_table on a fresh table), and the
 indexes target the just-created table so they are non-blocking by construction.
 """

agentex/openapi.yaml

@@ -5591,7 +5591,7 @@ components:
         Never carries cookies, JWTs, API keys, OAuth tokens, or request headers —
         it
 
-        is creator *context* used only for AuthZ and ownership at fire time (D5/D6).'
+        is creator *context* used only for AuthZ and ownership at fire time.'
     ScheduleInitialInput:
       properties:
         type:

agentex/src/api/routes/agent_run_schedules.py

@@ -30,7 +30,7 @@
 
 # The canonical agent scheduling API. Schedules an agent *run* on each fire
 # (creates a fresh task + delivers the configured initial input), hiding the
-# underlying Temporal workflow/task-queue details (AGX1-368, D1). It replaced the
+# underlying Temporal workflow/task-queue details. It replaced the
 # earlier bare-workflow scheduler that previously owned this path.
 router = APIRouter(
     prefix="/agents/{agent_id}/schedules",
@@ -49,7 +49,7 @@ def _extract_creator_principal(principal_context: Any) -> dict[str, Any]:
     """Capture the credential-free creator subset from the request principal.
 
     Stores only identity selectors (principal_type / user_id / service_account_id
-    / account_id). Never cookies, JWTs, API keys, OAuth tokens, or headers (D5/D6).
+    / account_id). Never cookies, JWTs, API keys, OAuth tokens, or headers.
     Returns an empty dict under authz bypass / when no principal is present.
     """
     if principal_context is None:

agentex/src/api/schemas/agent_run_schedules.py

@@ -29,7 +29,7 @@ class ScheduleCreatorPrincipal(BaseModel):
     """Credential-free creator identity stored with the schedule.
 
     Never carries cookies, JWTs, API keys, OAuth tokens, or request headers — it
-    is creator *context* used only for AuthZ and ownership at fire time (D5/D6).
+    is creator *context* used only for AuthZ and ownership at fire time.
     """
 
     principal_type: str | None = Field(

agentex/src/domain/entities/agent_run_schedules.py

@@ -23,7 +23,7 @@ def infer_initial_input_method(acp_type: ACPType) -> InitialInputMethod:
     """Map an agent's ACP type to the delivery method for the initial input.
 
     async / agentic agents receive the first input as an ``event/send``; sync
-    agents receive it as a ``message/send`` (AGX1-368, D2 / Open Q5).
+    agents receive it as a ``message/send``.
     """
     if acp_type == ACPType.SYNC:
         return InitialInputMethod.MESSAGE_SEND
@@ -35,7 +35,7 @@ class AgentRunScheduleEntity(BaseModel):
 
     The Postgres row is the source of truth for what each future fire should do;
     the Temporal Schedule is only the recurring clock and carries nothing but the
-    schedule id (AGX1-368, D4).
+    schedule id.
 
     JSON-backed fields (``creator_principal``, ``task_params``, ``task_metadata``,
     ``initial_input``) are stored as plain dicts so they round-trip cleanly through
@@ -68,7 +68,7 @@ class AgentRunScheduleEntity(BaseModel):
     )
     paused: bool = Field(False, description="Whether the schedule is currently paused.")
     # Credential-free creator context: principal_type / user_id / service_account_id /
-    # account_id only. Never cookies, JWTs, API keys, OAuth tokens, or headers (D5/D6).
+    # account_id only. Never cookies, JWTs, API keys, OAuth tokens, or headers.
     creator_principal: dict[str, Any] = Field(
         ...,
         description="Credential-free creator identity used for AuthZ at fire time.",

agentex/src/domain/services/agent_run_schedule_service.py

@@ -60,7 +60,7 @@ class AgentRunScheduleService:
 
     The Postgres row is the source of truth for the schedule definition; the
     Temporal Schedule is only the recurring clock and is given nothing but the
-    schedule row id as its workflow argument (AGX1-368, D4).
+    schedule row id as its workflow argument.
     """
 
     def __init__(

agentex/src/temporal/activities/scheduled_agent_run_activities.py

@@ -1,5 +1,5 @@
 """
-Temporal activity for scheduled agent runs (AGX1-368).
+Temporal activity for scheduled agent runs.
 
 ``launch_scheduled_agent_run`` is the single activity each scheduled fire runs.
 It loads the persisted schedule, creates a fresh Agentex task with a deterministic
@@ -180,7 +180,7 @@ async def launch_scheduled_agent_run(
 
         # Re-check the stored creator principal's permission at fire time, mirroring
         # the JSON-RPC route's authorization order: agent.execute (the RPC endpoint
-        # gate) then task.create (implements AGX1-368 D5's `check`). A revoked
+        # gate) then task.create (re-checks the creator's permission at fire time). A revoked
         # creator stops future fires instead of running under stale ownership.
         # AuthorizationError (403) is a permanent denial → skip cleanly; transient
         # authz errors propagate so Temporal retries. Under authz bypass (local /

agentex/src/temporal/scheduled_agent_run_factory.py

@@ -4,7 +4,7 @@
 in task_retention_factory.py.
 
 Each scheduled fire creates a fresh Agentex task and delivers the schedule's
-configured initial input under the *stored creator principal* (AGX1-368, D5) —
+configured initial input under the *stored creator principal* —
 not as an agent identity. So the AgentsACPUseCase is rebuilt per fire with an
 AuthorizationService whose principal_context is that fire's creator principal and
 whose agent_identity is None, attributing task ownership and AuthZ checks to the
@@ -51,7 +51,7 @@ class _ScheduledRunRequest:
     Carries the stored creator principal as ``state.principal_context`` with no
     ``agent_identity`` (so AuthZ attributes ownership to the creator, not a
     service) and no headers (so no live user credentials — cookies, API keys —
-    are forwarded downstream; D5/D6). ``build_delegation_headers`` returns an
+    are forwarded downstream). ``build_delegation_headers`` returns an
     empty mapping when there are no inbound credential headers, which is exactly
     the intended behavior here.
     """

agentex/src/temporal/workflows/scheduled_agent_run_workflow.py

@@ -1,5 +1,5 @@
 """
-Scheduled agent run workflow (AGX1-368).
+Scheduled agent run workflow.
 
 Started by a Temporal Schedule on each cron / interval fire. The workflow is
 deliberately thin: it passes only the schedule id and a per-fire token to a