@avocadostudio-ai/orchestrator-core 0.23.0 → 0.24.0

package/dist/agents/edit-safety-runner.js

@@ -3,6 +3,7 @@ import { buildBlockManifest } from "@avocadostudio-ai/shared";
 import { getDurableStore, noteDurableFailure } from "../durable/durable-store-singleton.js";
 import { agentState } from "./settings.js";
 import { countIssues, describeIssues, detectEditDamage } from "./edit-safety.js";
+import { siteOpsAgentsEnabled } from "./enabled.js";
 /*
  * Binds the Edit safety diff to a real edit, and records what it found.
  *
@@ -55,7 +56,7 @@ export function pagesBefore(ops, getPage, also = []) {
  */
 export async function checkEditSafety(args) {
     try {
-        if (args.before.size === 0)
+        if (args.before.size === 0 || !siteOpsAgentsEnabled())
             return null;
         const agent = await agentState(args.scopeKey, "edit-safety");
         if (!agent.enabled)

package/dist/agents/enabled.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Site ops agents — Edit safety, the Inbox, scheduled and custom agents, site
+ * facts, @mentions — are pre-alpha, and off unless `SITE_OPS_AGENTS=1`.
+ *
+ * Off has to mean off on the server, not just hidden tabs: Edit safety alerts
+ * hold publishing (409) until someone resolves them in the Inbox, so an editor
+ * that hides the Inbox while the server still raises alerts leaves publish
+ * stuck with no screen that can unstick it. Each entry point checks this:
+ * Edit safety raises nothing, nothing holds publish, the planner is given no
+ * site facts, a tick runs nothing, and an @handle goes to the planner. The
+ * editor reads it from `/status/planner` (`features.siteOpsAgents`) and hides
+ * Inbox, Agents and @-agent routing.
+ *
+ * Read per call, like every flag here, so a test or a library-mode host can set
+ * it after import. The hermetic test runner switches it on; the tests that pin
+ * the default delete it.
+ */
+export declare function siteOpsAgentsEnabled(): boolean;

package/dist/agents/enabled.js

@@ -0,0 +1,21 @@
+import { envFlag } from "../env-flags.js";
+/**
+ * Site ops agents — Edit safety, the Inbox, scheduled and custom agents, site
+ * facts, @mentions — are pre-alpha, and off unless `SITE_OPS_AGENTS=1`.
+ *
+ * Off has to mean off on the server, not just hidden tabs: Edit safety alerts
+ * hold publishing (409) until someone resolves them in the Inbox, so an editor
+ * that hides the Inbox while the server still raises alerts leaves publish
+ * stuck with no screen that can unstick it. Each entry point checks this:
+ * Edit safety raises nothing, nothing holds publish, the planner is given no
+ * site facts, a tick runs nothing, and an @handle goes to the planner. The
+ * editor reads it from `/status/planner` (`features.siteOpsAgents`) and hides
+ * Inbox, Agents and @-agent routing.
+ *
+ * Read per call, like every flag here, so a test or a library-mode host can set
+ * it after import. The hermetic test runner switches it on; the tests that pin
+ * the default delete it.
+ */
+export function siteOpsAgentsEnabled() {
+    return envFlag("SITE_OPS_AGENTS", false);
+}

package/dist/agents/inbox.js

@@ -11,6 +11,7 @@ import { withoutPages } from "./edit-safety-resolve.js";
 import { currentValue, fixFieldFor, fixOps, writeFix } from "./fix-writer.js";
 import { listSiteFacts, recordOutcome } from "./learning.js";
 import { resolveSiteAgents } from "./settings.js";
+import { siteOpsAgentsEnabled } from "./enabled.js";
 /** How many closed items the Done tab shows. */
 export const DONE_TAB_LIMIT = 50;
 function entryFromItem(stored) {
@@ -137,6 +138,9 @@ export async function buildInboxView(scopeKey, now = Date.now()) {
  * hold for the site — a whole-site publish ships every page.
  */
 export async function publishHolds(scopeKey, slugs) {
+    // With agents off nobody can see or resolve an alert, so none may hold.
+    if (!siteOpsAgentsEnabled())
+        return [];
     const open = await getDurableStore().listInboxItems({ scopeKey, status: "open", limit: 500 });
     const wanted = slugs && slugs.length > 0 ? new Set(slugs) : null;
     return open.filter((item) => item.blocksPublish && (!wanted || item.slugs.some((slug) => wanted.has(slug))));

package/dist/agents/learning.js

@@ -1,4 +1,5 @@
 import { getDurableStore, noteDurableFailure } from "../durable/durable-store-singleton.js";
+import { siteOpsAgentsEnabled } from "./enabled.js";
 /*
  * Memory and corrections, wired in (site-ops-agents.md SO-10, SO-11).
  *
@@ -55,6 +56,8 @@ export async function listSiteFacts(scopeKey, limit = 200) {
  * because memory could not be read; it plans without it, as it did before.
  */
 export async function siteFactsForPlanner(scopeKey, log) {
+    if (!siteOpsAgentsEnabled())
+        return [];
     try {
         const facts = await listSiteFacts(scopeKey, SITE_FACTS_IN_PROMPT);
         if (facts.length === 0)

package/dist/agents/mention.js

@@ -4,6 +4,7 @@ import { agentOfFinding } from "./inbox.js";
 import { runAgentSpec } from "./run-spec.js";
 import { resolveSiteAgents } from "./settings.js";
 import { CUSTOM_AGENT_PREFIX } from "./spec.js";
+import { siteOpsAgentsEnabled } from "./enabled.js";
 const WEEK = 7 * 24 * 3_600_000;
 const TOP = 3;
 /** An agent's handle in chat: its id, without the `custom:` prefix. */
@@ -47,6 +48,9 @@ async function openFor(scopeKey, agentId, store) {
     return open.filter((f) => agentOfFinding(f) === agentId);
 }
 export async function handleMention(args) {
+    // Off, an @handle is just text: the planner gets it, as before agents existed.
+    if (!siteOpsAgentsEnabled())
+        return { handled: false };
     const head = /^\s*@([a-z0-9][a-z0-9:-]*)\b(.*)$/is.exec(args.message);
     if (!head)
         return { handled: false };

package/dist/agents/tick.js

@@ -3,6 +3,7 @@ import { agentOfFinding } from "./inbox.js";
 import { runAgentSpec } from "./run-spec.js";
 import { isDue, latestSlot } from "./schedule.js";
 import { resolveSiteAgents } from "./settings.js";
+import { siteOpsAgentsEnabled } from "./enabled.js";
 /*
  * POST /agents/tick (site-ops-agents.md §8 item 6): run every scheduled agent
  * whose slot has passed, on every site, and post each site's weekly digest.
@@ -22,6 +23,8 @@ export async function tickAgents(args = {}) {
     const now = args.now ?? Date.now();
     const store = args.store ?? getDurableStore();
     const outcome = { at: now, sites: 0, ran: [], failed: [], digests: [] };
+    if (!siteOpsAgentsEnabled())
+        return outcome;
     for (const scopeKey of await store.listAgentScopes()) {
         outcome.sites += 1;
         try {

package/dist/handler/create-orchestrator.js

@@ -43,6 +43,7 @@ import { screenshotAction } from "../http/screenshot-actions.js";
 import { runChecksAction, listFindingsAction, listCheckRunsAction, updateFindingAction } from "../http/checks-actions.js";
 import { listInboxAction, resolveAlertAction, undoAlertAction, markReportReadAction, approveFindingsAction, writeFixesAction, rejectFindingsAction, listAgentsAction, agentStatsAction, updateAgentsAction, backtestAgentsAction, listTemplatesAction, saveAgentSpecAction, removeAgentSpecAction, runAgentAction, tickAgentsAction, draftAgentAction, mentionAction, listFactsAction, addFactAction, removeFactAction } from "../http/inbox-actions.js";
 import { publishHoldResponse } from "../agents/inbox.js";
+import { siteOpsAgentsEnabled } from "../agents/enabled.js";
 import { fileImageStore, formatImageChatFrame, generateImageAction, imageChatAction, imageChatStreamAction, interpretImageAction, validateImageChatRequest } from "../http/image-generate-actions.js";
 import { transcribeAudioAction, transcriptionUnavailable, validateAudioInput } from "../http/audio-actions.js";
 import { formatVariationFrame, parseVariationRequest, scopeVariationSession, variationsAction, variationsStreamAction } from "../http/variations-actions.js";
@@ -1204,7 +1205,9 @@ export function createOrchestrator(config = {}) {
                      * offered.
                      */
                     audioTranscription: Boolean(process.env.OPENAI_API_KEY?.trim() || process.env.GOOGLE_GENAI_API_KEY?.trim()),
-                    agentMode: false
+                    agentMode: false,
+                    // Pre-alpha; the editor hides Inbox, Agents and @-agents unless this is true.
+                    siteOpsAgents: siteOpsAgentsEnabled()
                 },
                 /*
                  * The capability probe lives here rather than on `/whoami` because

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@avocadostudio-ai/orchestrator-core",
-  "version": "0.23.0",
+  "version": "0.24.0",
   "type": "module",
   "exports": {
     "./package.json": "./package.json",
@@ -22,8 +22,8 @@
     "openai": "^4.87.1",
     "sharp": "^0.35.4",
     "zod": "^4.3.6",
-    "@avocadostudio-ai/migration-sdk": "^0.23.0",
-    "@avocadostudio-ai/shared": "^0.23.0"
+    "@avocadostudio-ai/migration-sdk": "^0.24.0",
+    "@avocadostudio-ai/shared": "^0.24.0"
   },
   "devDependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.3.220",