@elizaos/app-core 2.0.0-beta.3 → 2.0.11-beta.6

package/security/hydrate-wallet-keys-from-platform-store.js

@@ -1,21 +1,30 @@
 import { logger } from "@elizaos/core";
-import { sharedVault } from "../services/vault-mirror";
-import { deriveAgentVaultId } from "./agent-vault-id";
-import { createNodePlatformSecureStore, isWalletOsStoreReadEnabled, } from "./platform-secure-store-node";
-const WALLET_VAULT_KEYS = [
-    "EVM_PRIVATE_KEY",
-    "SOLANA_PRIVATE_KEY",
-];
+import { sharedVault } from "../services/vault-mirror.js";
+import { deriveAgentVaultId } from "./agent-vault-id.js";
+import { createNodePlatformSecureStore, isWalletOsStoreReadEnabled, } from "./platform-secure-store-node.js";
+// TDZ-hardening (see also packages/app-core/src/services/vault-mirror.ts).
+// These module-top `const` literals are referenced inside async functions
+// that run on the boot path. If a circular import (e.g. vault-bootstrap →
+// agent → app-core → … → this module) re-enters those functions before this
+// file's top-level initializers complete, Bun's strict ESM throws
+// `Cannot access 'WALLET_VAULT_KEYS' before initialization`. Wrapping the
+// arrays in functions makes them callable regardless of init order — the
+// array literal builds when the getter is invoked, not at module top.
+function walletVaultKeys() {
+    return ["EVM_PRIVATE_KEY", "SOLANA_PRIVATE_KEY"];
+}
 /**
  * Steward-only env vars (non-wallet) that still ride the OS keystore. They
  * never moved into the unified vault because the steward backend has its
  * own auth model — leave them on the keystore-only path.
  */
-const STEWARD_OS_PAIRS = [
-    ["STEWARD_API_URL", "steward.api_url"],
-    ["STEWARD_AGENT_ID", "steward.agent_id"],
-    ["STEWARD_AGENT_TOKEN", "steward.agent_token"],
-];
+function stewardOsPairs() {
+    return [
+        ["STEWARD_API_URL", "steward.api_url"],
+        ["STEWARD_AGENT_ID", "steward.agent_id"],
+        ["STEWARD_AGENT_TOKEN", "steward.agent_token"],
+    ];
+}
 /**
  * One-shot copy of legacy OS-keystore wallet keys into the shared vault.
  * Returns the env keys that were copied across so the caller can log /
@@ -69,7 +78,7 @@ export async function hydrateWalletKeysFromNodePlatformSecureStore() {
     // ── 1. Vault read for wallet keys ────────────────────────────────
     const vault = sharedVault();
     const missingWalletKeys = [];
-    for (const envKey of WALLET_VAULT_KEYS) {
+    for (const envKey of walletVaultKeys()) {
         const cur = process.env[envKey];
         if (typeof cur === "string" && cur.trim())
             continue;
@@ -101,7 +110,7 @@ export async function hydrateWalletKeysFromNodePlatformSecureStore() {
         if (!(await store.isAvailable()))
             return;
         const vaultId = deriveAgentVaultId();
-        for (const [envKey, kind] of STEWARD_OS_PAIRS) {
+        for (const [envKey, kind] of stewardOsPairs()) {
             const cur = process.env[envKey];
             if (typeof cur === "string" && cur.trim())
                 continue;

package/security/platform-secure-store-node.d.ts

@@ -1,7 +1,7 @@
 import type { PlatformSecureStore } from "./platform-secure-store";
 /**
- * Node-side factory: macOS Keychain, Linux `secret-tool`, or unavailable placeholder.
- * Windows Credential Manager is not wired yet (`none`).
+ * Node-side factory: macOS Keychain, Linux `secret-tool`, or the explicit
+ * unavailable backend on platforms without an OS credential-store adapter.
  */
 export declare function createNodePlatformSecureStore(): PlatformSecureStore;
 export declare function isNodePlatformSecureStoreDefaultAvailable(): boolean;

package/security/platform-secure-store-node.js

@@ -2,7 +2,7 @@ import { execFile, spawn } from "node:child_process";
 import fs from "node:fs";
 import path from "node:path";
 import { promisify } from "node:util";
-import { ELIZA_AGENT_VAULT_SERVICE, keychainAccountForSecretKind, } from "./agent-vault-id";
+import { ELIZA_AGENT_VAULT_SERVICE, keychainAccountForSecretKind, } from "./agent-vault-id.js";
 const execFileAsync = promisify(execFile);
 function isDarwin() {
     return process.platform === "darwin";
@@ -274,8 +274,8 @@ class NonePlatformSecureStore {
     async delete() { }
 }
 /**
- * Node-side factory: macOS Keychain, Linux `secret-tool`, or unavailable placeholder.
- * Windows Credential Manager is not wired yet (`none`).
+ * Node-side factory: macOS Keychain, Linux `secret-tool`, or the explicit
+ * unavailable backend on platforms without an OS credential-store adapter.
  */
 export function createNodePlatformSecureStore() {
     if (isDarwin()) {

package/security/wallet-os-store-actions.d.ts

@@ -15,7 +15,6 @@
  * when the OS-keystore read path is enabled (default on supported desktops,
  * or explicitly via `ELIZA_WALLET_OS_STORE=1`).
  */
-import { setEntryMeta } from "@elizaos/vault";
 /**
  * Remove main wallet keys from BOTH the vault and the OS keystore.
  * Used by `POST /api/agent/reset` and the equivalent CLI flow.
@@ -24,8 +23,6 @@ export declare function deleteWalletSecretsFromOsStore(): Promise<void>;
 export type MigrateWalletPrivateKeysToOsStoreResult = {
     migrated: string[];
     failed: string[];
-    /** Reserved for compat — vault writes are always available. Always undefined now. */
-    unavailable?: boolean;
 };
 /**
  * Copies wallet keys from `process.env` and/or persisted `config.env` into
@@ -36,10 +33,4 @@ export type MigrateWalletPrivateKeysToOsStoreResult = {
  * is left in place but not re-written to the vault.
  */
 export declare function migrateWalletPrivateKeysToOsStore(): Promise<MigrateWalletPrivateKeysToOsStoreResult>;
-/**
- * Re-export for callers that want to write the wallet metadata explicitly
- * (currently unused by external code; the inventory categorizer already
- * recognizes `EVM_PRIVATE_KEY` / `SOLANA_PRIVATE_KEY` via heuristic).
- */
-export { setEntryMeta };
 //# sourceMappingURL=wallet-os-store-actions.d.ts.map

package/security/wallet-os-store-actions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wallet-os-store-actions.d.ts","sourceRoot":"","sources":["../../../../../src/security/wallet-os-store-actions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAc9C;;;GAGG;AACH,wBAAsB,8BAA8B,IAAI,OAAO,CAAC,IAAI,CAAC,CAqBpE;AAED,MAAM,MAAM,uCAAuC,GAAG;IACpD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,qFAAqF;IACrF,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAsB,iCAAiC,IAAI,OAAO,CAAC,uCAAuC,CAAC,CAoE1G;AAED;;;;GAIG;AACH,OAAO,EAAE,YAAY,EAAE,CAAC"}
+{"version":3,"file":"wallet-os-store-actions.d.ts","sourceRoot":"","sources":["../../../../../src/security/wallet-os-store-actions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAgBH;;;GAGG;AACH,wBAAsB,8BAA8B,IAAI,OAAO,CAAC,IAAI,CAAC,CAqBpE;AAED,MAAM,MAAM,uCAAuC,GAAG;IACpD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAsB,iCAAiC,IAAI,OAAO,CAAC,uCAAuC,CAAC,CAoE1G"}

package/security/wallet-os-store-actions.js

@@ -16,10 +16,9 @@
  * or explicitly via `ELIZA_WALLET_OS_STORE=1`).
  */
 import { loadElizaConfig, saveElizaConfig } from "@elizaos/agent";
-import { setEntryMeta } from "@elizaos/vault";
-import { sharedVault } from "../services/vault-mirror";
-import { deriveAgentVaultId } from "./agent-vault-id";
-import { createNodePlatformSecureStore, isWalletOsStoreReadEnabled, } from "./platform-secure-store-node";
+import { sharedVault } from "../services/vault-mirror.js";
+import { deriveAgentVaultId } from "./agent-vault-id.js";
+import { createNodePlatformSecureStore, isWalletOsStoreReadEnabled, } from "./platform-secure-store-node.js";
 const WALLET_PAIRS = [
     ["EVM_PRIVATE_KEY", "wallet.evm_private_key"],
     ["SOLANA_PRIVATE_KEY", "wallet.solana_private_key"],
@@ -117,9 +116,3 @@ export async function migrateWalletPrivateKeysToOsStore() {
     }
     return { migrated, failed };
 }
-/**
- * Re-export for callers that want to write the wallet metadata explicitly
- * (currently unused by external code; the inventory categorizer already
- * recognizes `EVM_PRIVATE_KEY` / `SOLANA_PRIVATE_KEY` via heuristic).
- */
-export { setEntryMeta };

package/services/account-pool.d.ts

@@ -8,16 +8,12 @@
  * The pool never reads OAuth credentials directly — callers resolve them
  * via `getAccessToken(providerId, accountId)` from `@elizaos/agent` once
  * the pool returns an account. Health, priority, and usage live in this
- * layer; the OAuth blob lives under `~/.eliza/auth/` (see WS1's
- * `account-storage.ts`).
+ * layer; the OAuth blob lives under the active state-dir auth directory.
  *
  * Persistence: the pool layers rich metadata (priority, enabled, health,
- * usage) on top of WS1's credential records. The metadata is written to
- * `<ELIZA_HOME>/auth/_pool-metadata.json` atomically so it survives
- * process restarts and is independent of WS3's eventual `eliza.json`
- * field — when WS3 lands its CRUD API on top of `LinkedAccountsConfig`
- * we can swap `createDefaultAccountPool()`'s deps without touching the
- * pool itself.
+ * usage) on top of the credential records from `@elizaos/agent`. The
+ * metadata is written to `<stateDir>/auth/_pool-metadata.json` atomically
+ * so it survives process restarts.
  */
 import type { LinkedAccountConfig, LinkedAccountProviderId, LinkedAccountsConfig } from "@elizaos/shared";
 export type Strategy = "priority" | "round-robin" | "least-used" | "quota-aware";
@@ -57,10 +53,25 @@ export declare class AccountPool {
     private readonly deps;
     private readonly affinity;
     private readonly roundRobinCursor;
+    private readonly recentlySelectedAt;
+    private selectionClock;
     constructor(deps: AccountPoolDeps);
     select(input: SelectInput): Promise<LinkedAccountConfig | null>;
     private filterEligible;
     private applyStrategy;
+    /** Record that `accountId` was just selected, with a strictly-increasing,
+     * epoch-aligned stamp so a same-millisecond burst still rotates. */
+    private stampSelection;
+    /** Most recent of the persisted `lastUsedAt` and the in-memory selection
+     * stamp — so a just-picked account sorts as "more recently used". */
+    private effectiveLastUsed;
+    /** least-used comparator: spread load first by reported usage, then by
+     * recency-of-use (persisted + in-flight selection). Recency is ranked ABOVE
+     * `priority` here because least-used is a load-spreading strategy and the
+     * default `priority` is just creation order — honoring it would pin every
+     * equal-usage pick to the oldest account (the burst herd). `priority` only
+     * breaks a recency tie. */
+    private byLeastUsedEffective;
     list(providerId?: PoolProviderId): LinkedAccountConfig[];
     get(accountId: string, providerId?: PoolProviderId): LinkedAccountConfig | null;
     upsert(account: LinkedAccountConfig): Promise<void>;
@@ -105,12 +116,10 @@ export declare function __getDefaultAccountPoolSelectionForTests(providerId: Poo
 };
 export declare function configureDefaultAccountPoolSelection(config?: AccountPoolSelectionConfig): void;
 /**
- * Module-level singleton for the default pool wired against WS1's
- * `account-storage` and the pool-owned metadata file. Plugins / runtime
- * resolvers should import `getDefaultAccountPool()` rather than building
- * a new pool. WS3 may later swap the default deps to read/write the
- * `LinkedAccountsConfig` field directly out of `eliza.json`; consumers
- * keep the same accessor.
+ * Module-level singleton for the default pool wired against `@elizaos/agent`'s
+ * account-storage and the pool-owned metadata file. Plugins and runtime
+ * resolvers should import `getDefaultAccountPool()` rather than constructing
+ * a new pool directly.
  */
 export declare function getDefaultAccountPool(): AccountPool;
 export declare function applyAccountPoolApiCredentials(opts?: {

package/services/account-pool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account-pool.d.ts","sourceRoot":"","sources":["../../../../../src/services/account-pool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAuBH,OAAO,KAAK,EACV,mBAAmB,EAGnB,uBAAuB,EACvB,oBAAoB,EAErB,MAAM,iBAAiB,CAAC;AAOzB,MAAM,MAAM,QAAQ,GAChB,UAAU,GACV,aAAa,GACb,YAAY,GACZ,aAAa,CAAC;AAElB,MAAM,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAErD,MAAM,WAAW,eAAe;IAC9B,sDAAsD;IACtD,YAAY,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACxD,iDAAiD;IACjD,YAAY,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,kDAAkD;IAClD,aAAa,CAAC,EAAE,CACd,UAAU,EAAE,cAAc,EAC1B,SAAS,EAAE,MAAM,KACd,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,cAAc,CAAC;IAC3B,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gCAAgC;IAChC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAOD,UAAU,yBAAyB;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,0BAA0B;IAClC,iBAAiB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7D,cAAc,CAAC,EAAE;QACf,OAAO,CAAC,EAAE,yBAAyB,CAAC;KACrC,GAAG,IAAI,CAAC;CACV;AAuBD,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAkB;IACvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoC;IAC7D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqC;gBAE1D,IAAI,EAAE,eAAe;IAM3B,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IA+BrE,OAAO,CAAC,cAAc;IA6BtB,OAAO,CAAC,aAAa;IAoCrB,IAAI,CAAC,UAAU,CAAC,EAAE,cAAc,GAAG,mBAAmB,EAAE;IAMxD,GAAG,CACD,SAAS,EAAE,MAAM,EACjB,UAAU,CAAC,EAAE,cAAc,GAC1B,mBAAmB,GAAG,IAAI;IAIvB,MAAM,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAInD,cAAc,CAClB,UAAU,EAAE,cAAc,EAC1B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC;IAOV,UAAU,CACd,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE;QACN,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,EAAE,EAAE,OAAO,CAAC;QACZ,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,EACD,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,cAAc,CAAA;KAAE,GACrC,OAAO,CAAC,IAAI,CAAC;IAeV,YAAY,CAChB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE;QACL,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;QACrB,UAAU,CAAC,EAAE,cAAc,CAAC;KAC7B,GACA,OAAO,CAAC,IAAI,CAAC;IA+BV,eAAe,CACnB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,cAAc,CAAA;KAAE,GACrC,OAAO,CAAC,IAAI,CAAC;IAsBV,eAAe,CACnB,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,cAAc,CAAA;KAAE,GACrC,OAAO,CAAC,IAAI,CAAC;IAiBV,WAAW,CACf,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,cAAc,CAAA;KAAE,GACrC,OAAO,CAAC,IAAI,CAAC;IAiBV,WAAW,CACf,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,cAAc,CAAA;KAAE,GACrC,OAAO,CAAC,IAAI,CAAC;IAehB;;;;;OAKG;IACG,cAAc,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;CAc1C;AAySD,wBAAgB,wCAAwC,CACtD,UAAU,EAAE,cAAc,GACzB;IACD,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB,CAEA;AAED,wBAAgB,oCAAoC,CAClD,MAAM,GAAE,0BAA+B,GACtC,IAAI,CAKN;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,IAAI,WAAW,CAWnD;AAED,wBAAsB,8BAA8B,CAClD,IAAI,GAAE;IACJ,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,iBAAiB,CAAC,EAAE,0BAA0B,CAAC,mBAAmB,CAAC,CAAC;IACpE,cAAc,CAAC,EAAE,0BAA0B,CAAC,gBAAgB,CAAC,CAAC;CAC1D,GACL,OAAO,CAAC,IAAI,CAAC,CA+Df;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,0BAA0B,CAAC,CAqDrF;AAKD,wBAAgB,yBAAyB,CACvC,UAAU,GAAE,MAA+B,GAC1C,IAAI,CA4BN;AAED,wBAAgB,gCAAgC,IAAI,IAAI,CAMvD;AAsDD;;GAEG;AACH,wBAAgB,iCAAiC,IAAI,IAAI,CAGxD;AAED,YAAY,EAAE,oBAAoB,EAAE,CAAC"}
+{"version":3,"file":"account-pool.d.ts","sourceRoot":"","sources":["../../../../../src/services/account-pool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAwBH,OAAO,KAAK,EACV,mBAAmB,EAGnB,uBAAuB,EACvB,oBAAoB,EAErB,MAAM,iBAAiB,CAAC;AAQzB,MAAM,MAAM,QAAQ,GAChB,UAAU,GACV,aAAa,GACb,YAAY,GACZ,aAAa,CAAC;AAElB,MAAM,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAErD,MAAM,WAAW,eAAe;IAC9B,sDAAsD;IACtD,YAAY,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACxD,iDAAiD;IACjD,YAAY,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,kDAAkD;IAClD,aAAa,CAAC,EAAE,CACd,UAAU,EAAE,cAAc,EAC1B,SAAS,EAAE,MAAM,KACd,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,cAAc,CAAC;IAC3B,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gCAAgC;IAChC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAOD,UAAU,yBAAyB;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,0BAA0B;IAClC,iBAAiB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7D,cAAc,CAAC,EAAE;QACf,OAAO,CAAC,EAAE,yBAAyB,CAAC;KACrC,GAAG,IAAI,CAAC;CACV;AA6BD,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAkB;IACvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoC;IAC7D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqC;IAMtE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA6B;IAChE,OAAO,CAAC,cAAc,CAAK;gBAEf,IAAI,EAAE,eAAe;IAM3B,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAqCrE,OAAO,CAAC,cAAc;IA6BtB,OAAO,CAAC,aAAa;IAkCrB;wEACoE;IACpE,OAAO,CAAC,cAAc;IAUtB;yEACqE;IACrE,OAAO,CAAC,iBAAiB;IAOzB;;;;;+BAK2B;IAC3B,OAAO,CAAC,oBAAoB;IAkB5B,IAAI,CAAC,UAAU,CAAC,EAAE,cAAc,GAAG,mBAAmB,EAAE;IAMxD,GAAG,CACD,SAAS,EAAE,MAAM,EACjB,UAAU,CAAC,EAAE,cAAc,GAC1B,mBAAmB,GAAG,IAAI;IAIvB,MAAM,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAInD,cAAc,CAClB,UAAU,EAAE,cAAc,EAC1B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC;IAOV,UAAU,CACd,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE;QACN,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,EAAE,EAAE,OAAO,CAAC;QACZ,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,EACD,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,cAAc,CAAA;KAAE,GACrC,OAAO,CAAC,IAAI,CAAC;IAeV,YAAY,CAChB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE;QACL,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;QACrB,UAAU,CAAC,EAAE,cAAc,CAAC;KAC7B,GACA,OAAO,CAAC,IAAI,CAAC;IA+BV,eAAe,CACnB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,cAAc,CAAA;KAAE,GACrC,OAAO,CAAC,IAAI,CAAC;IAsBV,eAAe,CACnB,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,cAAc,CAAA;KAAE,GACrC,OAAO,CAAC,IAAI,CAAC;IAiBV,WAAW,CACf,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,cAAc,CAAA;KAAE,GACrC,OAAO,CAAC,IAAI,CAAC;IAiBV,WAAW,CACf,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,cAAc,CAAA;KAAE,GACrC,OAAO,CAAC,IAAI,CAAC;IAehB;;;;;OAKG;IACG,cAAc,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;CAc1C;AAgTD,wBAAgB,wCAAwC,CACtD,UAAU,EAAE,cAAc,GACzB;IACD,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB,CAEA;AAED,wBAAgB,oCAAoC,CAClD,MAAM,GAAE,0BAA+B,GACtC,IAAI,CAKN;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,IAAI,WAAW,CAYnD;AAED,wBAAsB,8BAA8B,CAClD,IAAI,GAAE;IACJ,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,iBAAiB,CAAC,EAAE,0BAA0B,CAAC,mBAAmB,CAAC,CAAC;IACpE,cAAc,CAAC,EAAE,0BAA0B,CAAC,gBAAgB,CAAC,CAAC;CAC1D,GACL,OAAO,CAAC,IAAI,CAAC,CA+Df;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,0BAA0B,CAAC,CA2DrF;AAKD,wBAAgB,yBAAyB,CACvC,UAAU,GAAE,MAA+B,GAC1C,IAAI,CA4BN;AAED,wBAAgB,gCAAgC,IAAI,IAAI,CAMvD;AAsDD;;GAEG;AACH,wBAAgB,iCAAiC,IAAI,IAAI,CAGxD;AAED,YAAY,EAAE,oBAAoB,EAAE,CAAC"}

package/services/account-pool.js

@@ -8,23 +8,20 @@
  * The pool never reads OAuth credentials directly — callers resolve them
  * via `getAccessToken(providerId, accountId)` from `@elizaos/agent` once
  * the pool returns an account. Health, priority, and usage live in this
- * layer; the OAuth blob lives under `~/.eliza/auth/` (see WS1's
- * `account-storage.ts`).
+ * layer; the OAuth blob lives under the active state-dir auth directory.
  *
  * Persistence: the pool layers rich metadata (priority, enabled, health,
- * usage) on top of WS1's credential records. The metadata is written to
- * `<ELIZA_HOME>/auth/_pool-metadata.json` atomically so it survives
- * process restarts and is independent of WS3's eventual `eliza.json`
- * field — when WS3 lands its CRUD API on top of `LinkedAccountsConfig`
- * we can swap `createDefaultAccountPool()`'s deps without touching the
- * pool itself.
+ * usage) on top of the credential records from `@elizaos/agent`. The
+ * metadata is written to `<stateDir>/auth/_pool-metadata.json` atomically
+ * so it survives process restarts.
  */
 import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync, } from "node:fs";
-import os from "node:os";
 import path from "node:path";
-import { ACCOUNT_CREDENTIAL_PROVIDER_IDS, DIRECT_ACCOUNT_PROVIDER_ENV, DIRECT_ACCOUNT_PROVIDER_IDS, getAccessToken as getAccountAccessToken, isSubscriptionProvider, listProviderAccounts, } from "@elizaos/agent";
-import { logger } from "@elizaos/core";
+import { getAccessToken as getAccountAccessToken, listProviderAccounts, } from "@elizaos/agent/auth/credentials";
+import { ACCOUNT_CREDENTIAL_PROVIDER_IDS, DIRECT_ACCOUNT_PROVIDER_ENV, DIRECT_ACCOUNT_PROVIDER_IDS, isSubscriptionProvider, } from "@elizaos/agent/auth/types";
+import { logger, resolveStateDir } from "@elizaos/core";
 import { pollAnthropicUsage, pollCodexUsage, recordCall as recordUsageEntry, } from "./account-usage.js";
+import { installCodingAgentSelectorBridge } from "./coding-account-bridge.js";
 const DEFAULT_RATE_LIMIT_BACKOFF_MS = 60_000;
 const QUOTA_AWARE_SKIP_PCT = 85;
 const SESSION_AFFINITY_MAX_ATTEMPTS = 3;
@@ -39,10 +36,22 @@ const OPENAI_COMPAT_BASE_BY_DIRECT_PROVIDER = {
     "moonshot-api": "https://api.moonshot.ai/v1",
 };
 const KEEP_ALIVE_INTERVAL_MS = 5 * 60_000;
+// affinity is keyed by sessionKey, which is per-conversation/per-request, so the
+// map grows one entry per distinct session over the process lifetime. Cap it
+// (FIFO by Map insertion order) — an evicted session simply re-selects on its
+// next call, which is the same behavior as a cold session.
+const MAX_AFFINITY_ENTRIES = 10_000;
 export class AccountPool {
     deps;
     affinity = new Map();
     roundRobinCursor = new Map();
+    // Burst-spread for least-used: `usage.sessionPct` is only refreshed every few
+    // minutes, so a burst of fresh spawns inside one poll window would otherwise
+    // all stack on the single lowest-sessionPct account. Stamping each pick lets
+    // the tiebreak rotate across equally-/un-probed accounts until real usage
+    // diverges. Monotonic + epoch-aligned so it composes with `lastUsedAt`.
+    recentlySelectedAt = new Map();
+    selectionClock = 0;
     constructor(deps) {
         this.deps = deps;
     }
@@ -67,11 +76,18 @@ export class AccountPool {
         const picked = this.applyStrategy(strategy, eligible, input.providerId);
         if (!picked)
             return null;
+        this.stampSelection(picked.id);
         if (input.sessionKey) {
             this.affinity.set(input.sessionKey, {
                 accountId: picked.id,
                 attempts: 1,
             });
+            while (this.affinity.size > MAX_AFFINITY_ENTRIES) {
+                const oldest = this.affinity.keys().next().value;
+                if (oldest === undefined)
+                    break;
+                this.affinity.delete(oldest);
+            }
         }
         return picked;
     }
@@ -115,7 +131,8 @@ export class AccountPool {
                 return sorted[index] ?? null;
             }
             case "least-used": {
-                return [...eligible].sort(byLeastUsedThenPriority)[0] ?? null;
+                return ([...eligible].sort((a, b) => this.byLeastUsedEffective(a, b))[0] ??
+                    null);
             }
             case "quota-aware": {
                 const underQuota = eligible.filter((a) => (a.usage?.sessionPct ?? 0) < QUOTA_AWARE_SKIP_PCT);
@@ -126,6 +143,40 @@ export class AccountPool {
                 return [...eligible].sort(byPriorityThenAge)[0] ?? null;
         }
     }
+    /** Record that `accountId` was just selected, with a strictly-increasing,
+     * epoch-aligned stamp so a same-millisecond burst still rotates. */
+    stampSelection(accountId) {
+        this.selectionClock = Math.max(Date.now(), this.selectionClock + 1);
+        this.recentlySelectedAt.set(accountId, this.selectionClock);
+        while (this.recentlySelectedAt.size > MAX_AFFINITY_ENTRIES) {
+            const oldest = this.recentlySelectedAt.keys().next().value;
+            if (oldest === undefined)
+                break;
+            this.recentlySelectedAt.delete(oldest);
+        }
+    }
+    /** Most recent of the persisted `lastUsedAt` and the in-memory selection
+     * stamp — so a just-picked account sorts as "more recently used". */
+    effectiveLastUsed(account) {
+        return Math.max(account.lastUsedAt ?? 0, this.recentlySelectedAt.get(account.id) ?? 0);
+    }
+    /** least-used comparator: spread load first by reported usage, then by
+     * recency-of-use (persisted + in-flight selection). Recency is ranked ABOVE
+     * `priority` here because least-used is a load-spreading strategy and the
+     * default `priority` is just creation order — honoring it would pin every
+     * equal-usage pick to the oldest account (the burst herd). `priority` only
+     * breaks a recency tie. */
+    byLeastUsedEffective(a, b) {
+        const aPct = a.usage?.sessionPct ?? 0;
+        const bPct = b.usage?.sessionPct ?? 0;
+        if (aPct !== bPct)
+            return aPct - bPct;
+        const aUsed = this.effectiveLastUsed(a);
+        const bUsed = this.effectiveLastUsed(b);
+        if (aUsed !== bUsed)
+            return aUsed - bUsed;
+        return a.priority - b.priority;
+    }
     // CRUD — used by accounts-routes.ts as the single source of truth for
     // LinkedAccountConfig records. Both reads and writes go through here so
     // changes from the HTTP API and from runtime mutations (markRateLimited,
@@ -284,7 +335,7 @@ function byPriorityThenAge(a, b) {
     const bLast = b.lastUsedAt ?? 0;
     return aLast - bLast; // older first
 }
-function byLeastUsedThenPriority(a, b) {
+function _byLeastUsedThenPriority(a, b) {
     const aPct = a.usage?.sessionPct ?? 0;
     const bPct = b.usage?.sessionPct ?? 0;
     if (aPct !== bPct)
@@ -292,7 +343,7 @@ function byLeastUsedThenPriority(a, b) {
     return byPriorityThenAge(a, b);
 }
 function authRoot() {
-    return path.join(process.env.ELIZA_HOME || path.join(os.homedir(), ".eliza"), "auth");
+    return path.join(process.env.ELIZA_HOME || resolveStateDir(), "auth");
 }
 function metadataFile() {
     return path.join(authRoot(), "_pool-metadata.json");
@@ -308,7 +359,8 @@ function isPoolProviderId(value) {
         value === "openai-api" ||
         value === "deepseek-api" ||
         value === "zai-api" ||
-        value === "moonshot-api");
+        value === "moonshot-api" ||
+        value === "cerebras-api");
 }
 function readMetaStore() {
     const file = metadataFile();
@@ -350,8 +402,10 @@ function recordToLinked(record, meta, providerId, defaultPriority) {
         priority: meta?.priority ?? defaultPriority,
         createdAt: record.createdAt,
         health: meta?.health ?? "ok",
-        ...(record.lastUsedAt !== undefined
-            ? { lastUsedAt: record.lastUsedAt }
+        // Prefer the pool-meta lastUsedAt (bumped by recordCall) over the credential
+        // record's (bumped only by touchAccount); fall back to the record's.
+        ...((meta?.lastUsedAt ?? record.lastUsedAt) !== undefined
+            ? { lastUsedAt: meta?.lastUsedAt ?? record.lastUsedAt }
             : {}),
         ...(meta?.healthDetail ? { healthDetail: meta.healthDetail } : {}),
         ...(meta?.usage ? { usage: meta.usage } : {}),
@@ -389,6 +443,9 @@ async function persistAccount(account) {
         health: account.health,
         ...(account.healthDetail ? { healthDetail: account.healthDetail } : {}),
         ...(account.usage ? { usage: account.usage } : {}),
+        ...(account.lastUsedAt !== undefined
+            ? { lastUsedAt: account.lastUsedAt }
+            : {}),
     };
     writeMetaStore(store);
 }
@@ -474,12 +531,10 @@ export function configureDefaultAccountPoolSelection(config = {}) {
     };
 }
 /**
- * Module-level singleton for the default pool wired against WS1's
- * `account-storage` and the pool-owned metadata file. Plugins / runtime
- * resolvers should import `getDefaultAccountPool()` rather than building
- * a new pool. WS3 may later swap the default deps to read/write the
- * `LinkedAccountsConfig` field directly out of `eliza.json`; consumers
- * keep the same accessor.
+ * Module-level singleton for the default pool wired against `@elizaos/agent`'s
+ * account-storage and the pool-owned metadata file. Plugins and runtime
+ * resolvers should import `getDefaultAccountPool()` rather than constructing
+ * a new pool directly.
  */
 export function getDefaultAccountPool() {
     if (!cachedDefaultPool) {
@@ -490,6 +545,7 @@ export function getDefaultAccountPool() {
         });
         installAnthropicBridge(cachedDefaultPool);
         installSubscriptionSelectorBridge(cachedDefaultPool);
+        installCodingAgentSelectorBridge(cachedDefaultPool);
     }
     return cachedDefaultPool;
 }
@@ -571,6 +627,12 @@ export async function sweepAccountPoolKeepAlive() {
                 continue;
             }
             if (!isSubscriptionProvider(providerId)) {
+                // Direct-API providers have no usage probe, but a successful token
+                // resolve proves the credential works — clear any stale needs-reauth /
+                // invalid flag so a transient earlier failure doesn't strand the account
+                // out of rotation (filterEligible only re-admits OK + reset rate-limits,
+                // and refreshUsage — the only other path to `ok` — skips direct APIs).
+                await pool.markHealthy(record.id, { providerId });
                 continue;
             }
             try {
@@ -624,7 +686,7 @@ export function startAccountPoolKeepAlive(intervalMs = KEEP_ALIVE_INTERVAL_MS) {
         });
     };
     keepAliveTimer = setInterval(run, Math.max(60_000, intervalMs));
-    keepAliveTimer.unref?.();
+    keepAliveTimer.unref();
     run();
 }
 export function stopAccountPoolKeepAliveForTests() {

package/services/account-usage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account-usage.d.ts","sourceRoot":"","sources":["../../../../../src/services/account-usage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAE1D;;;;GAIG;AACH,MAAM,WAAW,aAAc,SAAQ,kBAAkB;IACvD,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAID,KAAK,SAAS,GAAG,OAAO,KAAK,CAAC;AAmC9B;;;;;;;;;;;GAWG;AACH,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,MAAM,EACnB,SAAS,GAAE,SAAiB,GAC3B,OAAO,CAAC,aAAa,CAAC,CAiCxB;AAaD;;;;;;;;;;GAUG;AACH,wBAAsB,cAAc,CAClC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,SAAS,GAAE,SAAiB,GAC3B,OAAO,CAAC,aAAa,CAAC,CA6BxB;AA8BD;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,GAC5B,IAAI,CAYN;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,aAAa,CA0Bf"}
+{"version":3,"file":"account-usage.d.ts","sourceRoot":"","sources":["../../../../../src/services/account-usage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAE1D;;;;GAIG;AACH,MAAM,WAAW,aAAc,SAAQ,kBAAkB;IACvD,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAID,KAAK,SAAS,GAAG,OAAO,KAAK,CAAC;AAmC9B;;;;;;;;;;;GAWG;AACH,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,MAAM,EACnB,SAAS,GAAE,SAAiB,GAC3B,OAAO,CAAC,aAAa,CAAC,CAiCxB;AAaD;;;;;;;;;;GAUG;AACH,wBAAsB,cAAc,CAClC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,SAAS,GAAE,SAAiB,GAC3B,OAAO,CAAC,aAAa,CAAC,CA6BxB;AA0BD;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,GAC5B,IAAI,CAYN;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,aAAa,CA0Bf"}

package/services/account-usage.js

@@ -13,8 +13,8 @@
  * are best-effort and synchronous — at our scale appendFileSync is fine.
  */
 import { appendFileSync, existsSync, mkdirSync, readFileSync } from "node:fs";
-import os from "node:os";
 import path from "node:path";
+import { resolveStateDir } from "@elizaos/core";
 const ANTHROPIC_USAGE_URL = "https://api.anthropic.com/api/oauth/usage";
 const CODEX_USAGE_URL = "https://chatgpt.com/backend-api/wham/usage";
 function utilizationToPct(value) {
@@ -113,9 +113,6 @@ export async function pollCodexUsage(accessToken, accountId, fetchImpl = fetch)
     };
 }
 // Local JSONL counters.
-function elizaHome() {
-    return process.env.ELIZA_HOME || path.join(os.homedir(), ".eliza");
-}
 function dayStamp(ts = Date.now()) {
     const d = new Date(ts);
     const yyyy = d.getUTCFullYear();
@@ -124,7 +121,7 @@ function dayStamp(ts = Date.now()) {
     return `${yyyy}-${mm}-${dd}`;
 }
 function counterFile(providerId, accountId, ts = Date.now()) {
-    return path.join(elizaHome(), "usage", providerId, accountId, `${dayStamp(ts)}.jsonl`);
+    return path.join(resolveStateDir(), "usage", providerId, accountId, `${dayStamp(ts)}.jsonl`);
 }
 /**
  * Append a usage entry for the given `(providerId, accountId)` pair.

package/services/ambient-audio/consent.d.ts

@@ -0,0 +1,9 @@
+import type { ConsentRecord } from "./types.ts";
+export declare class AmbientAudioConsentState {
+    private records;
+    grant(record: ConsentRecord): void;
+    revoke(ownerId: string): void;
+    get(ownerId: string, now?: number): ConsentRecord | null;
+    require(ownerId: string, now?: number): ConsentRecord;
+}
+//# sourceMappingURL=consent.d.ts.map

package/services/ambient-audio/consent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent.d.ts","sourceRoot":"","sources":["../../../../../../src/services/ambient-audio/consent.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,qBAAa,wBAAwB;IACnC,OAAO,CAAC,OAAO,CAAoC;IAEnD,KAAK,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI;IAOlC,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAI7B,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,aAAa,GAAG,IAAI;IAS5D,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,aAAa;CAS1D"}

package/services/ambient-audio/consent.js

@@ -0,0 +1,28 @@
+export class AmbientAudioConsentState {
+    records = new Map();
+    grant(record) {
+        if (!record.ownerId) {
+            throw new Error("ownerId is required");
+        }
+        this.records.set(record.ownerId, { ...record });
+    }
+    revoke(ownerId) {
+        this.records.delete(ownerId);
+    }
+    get(ownerId, now = Date.now()) {
+        const record = this.records.get(ownerId);
+        if (!record)
+            return null;
+        if (record.expiresAt !== undefined && record.expiresAt <= now) {
+            return null;
+        }
+        return { ...record };
+    }
+    require(ownerId, now = Date.now()) {
+        const record = this.get(ownerId, now);
+        if (!record) {
+            throw new Error("ambient audio consent is required before capture starts");
+        }
+        return record;
+    }
+}

package/services/ambient-audio/index.d.ts

@@ -0,0 +1,7 @@
+export { AmbientAudioConsentState } from "./consent.ts";
+export { ReplayBuffer } from "./replay-buffer.ts";
+export { decideResponse } from "./response-gate.ts";
+export type { InMemoryAmbientAudioServiceOptions } from "./service.ts";
+export { InMemoryAmbientAudioService } from "./service.ts";
+export type { AmbientAudioMode, AmbientAudioService, AudioFrame, ConsentRecord, ResponseDecision, ResponseGateSignals, TranscribedSegment, } from "./types.ts";
+//# sourceMappingURL=index.d.ts.map

package/services/ambient-audio/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/services/ambient-audio/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,YAAY,EAAE,kCAAkC,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAC3D,YAAY,EACV,gBAAgB,EAChB,mBAAmB,EACnB,UAAU,EACV,aAAa,EACb,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,YAAY,CAAC"}

package/services/ambient-audio/index.js

@@ -0,0 +1,4 @@
+export { AmbientAudioConsentState } from "./consent.js";
+export { ReplayBuffer } from "./replay-buffer.js";
+export { decideResponse } from "./response-gate.js";
+export { InMemoryAmbientAudioService } from "./service.js";

package/services/ambient-audio/replay-buffer.d.ts

@@ -0,0 +1,14 @@
+import type { AudioFrame } from "./types.ts";
+export declare class ReplayBuffer {
+    readonly sampleRate = 16000;
+    readonly channels = 1;
+    readonly maxSeconds: number;
+    private frames;
+    private totalSamples;
+    constructor(maxSeconds?: number);
+    push(frame: AudioFrame): void;
+    readTail(seconds?: number): Int16Array;
+    clear(): void;
+    private trim;
+}
+//# sourceMappingURL=replay-buffer.d.ts.map

package/services/ambient-audio/replay-buffer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay-buffer.d.ts","sourceRoot":"","sources":["../../../../../../src/services/ambient-audio/replay-buffer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAO7C,qBAAa,YAAY;IACvB,QAAQ,CAAC,UAAU,SAAS;IAC5B,QAAQ,CAAC,QAAQ,KAAK;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,YAAY,CAAK;gBAEb,UAAU,SAAK;IAO3B,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAiB7B,QAAQ,CAAC,OAAO,SAAkB,GAAG,UAAU;IAqB/C,KAAK,IAAI,IAAI;IAKb,OAAO,CAAC,IAAI;CAmBb"}

package/services/ambient-audio/replay-buffer.js

@@ -0,0 +1,66 @@
+export class ReplayBuffer {
+    sampleRate = 16000;
+    channels = 1;
+    maxSeconds;
+    frames = [];
+    totalSamples = 0;
+    constructor(maxSeconds = 30) {
+        if (!Number.isFinite(maxSeconds) || maxSeconds <= 0) {
+            throw new Error("maxSeconds must be positive");
+        }
+        this.maxSeconds = maxSeconds;
+    }
+    push(frame) {
+        if (frame.sampleRate !== this.sampleRate ||
+            frame.channels !== this.channels) {
+            throw new Error("ambient audio frames must be 16 kHz mono Int16");
+        }
+        if (!(frame.samples instanceof Int16Array)) {
+            throw new Error("ambient audio samples must be Int16Array");
+        }
+        const samples = new Int16Array(frame.samples);
+        this.frames.push({ samples, capturedAt: frame.capturedAt });
+        this.totalSamples += samples.length;
+        this.trim();
+    }
+    readTail(seconds = this.maxSeconds) {
+        if (!Number.isFinite(seconds) || seconds <= 0)
+            return new Int16Array();
+        const maxSamples = Math.min(this.totalSamples, Math.floor(seconds * this.sampleRate));
+        const out = new Int16Array(maxSamples);
+        let writeOffset = maxSamples;
+        for (let i = this.frames.length - 1; i >= 0 && writeOffset > 0; i--) {
+            const frame = this.frames[i];
+            if (!frame)
+                continue;
+            const take = Math.min(writeOffset, frame.samples.length);
+            const start = frame.samples.length - take;
+            writeOffset -= take;
+            out.set(frame.samples.subarray(start), writeOffset);
+        }
+        return out;
+    }
+    clear() {
+        this.frames = [];
+        this.totalSamples = 0;
+    }
+    trim() {
+        const maxSamples = Math.floor(this.maxSeconds * this.sampleRate);
+        while (this.totalSamples > maxSamples && this.frames.length > 0) {
+            const frame = this.frames[0];
+            if (!frame)
+                break;
+            const overflow = this.totalSamples - maxSamples;
+            if (overflow >= frame.samples.length) {
+                this.frames.shift();
+                this.totalSamples -= frame.samples.length;
+                continue;
+            }
+            this.frames[0] = {
+                ...frame,
+                samples: frame.samples.slice(overflow),
+            };
+            this.totalSamples -= overflow;
+        }
+    }
+}