@elizaos/app-core 2.0.3-beta.2 → 2.0.3-beta.4

package/scripts/voice-e2e-hardware.ts

@@ -12,6 +12,7 @@ import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
+import { readVoiceE2eTestEnv } from "../../shared/src/test-env-config.ts";
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
@@ -158,23 +159,28 @@ Options:
 }
 
 function parseArgs(argv: readonly string[]): CliArgs {
+  const voiceEnv = readVoiceE2eTestEnv(process.env, {
+    backend: defaultBackend(),
+    cases: "roundtrip",
+    phrase: DEFAULT_PHRASE,
+    maxWer: 0.15,
+    maxBargeMs: 250,
+    maxFirstAudioMs: 1500,
+  });
   const args: CliArgs = {
-    bundle: process.env.ELIZA_VOICE_E2E_BUNDLE || "",
-    dylib: process.env.ELIZA_VOICE_E2E_DYLIB || "",
-    backend: process.env.ELIZA_VOICE_E2E_BACKEND || defaultBackend(),
-    cases: parseCases(process.env.ELIZA_VOICE_E2E_CASES || "roundtrip"),
-    phrase: process.env.ELIZA_VOICE_E2E_PHRASE || DEFAULT_PHRASE,
-    out: process.env.ELIZA_VOICE_E2E_REPORT || "",
-    audioDir: process.env.ELIZA_VOICE_E2E_AUDIO_DIR || "",
-    maxWer: Number(process.env.ELIZA_VOICE_E2E_MAX_WER || "0.15"),
-    maxBargeMs: Number(process.env.ELIZA_VOICE_E2E_MAX_BARGE_MS || "250"),
-    maxFirstAudioMs: Number(
-      process.env.ELIZA_VOICE_E2E_MAX_FIRST_AUDIO_MS || "1500",
-    ),
-    eventsJson: process.env.ELIZA_VOICE_E2E_EVENTS_JSON || "",
-    latencyBase: process.env.ELIZA_VOICE_E2E_LATENCY_BASE || "",
-    allowTtsOnlyBargeIn:
-      process.env.ELIZA_VOICE_E2E_ALLOW_TTS_ONLY_BARGE_IN === "1",
+    bundle: voiceEnv.bundle,
+    dylib: voiceEnv.dylib,
+    backend: voiceEnv.backend,
+    cases: parseCases(voiceEnv.cases),
+    phrase: voiceEnv.phrase,
+    out: voiceEnv.report,
+    audioDir: voiceEnv.audioDir,
+    maxWer: voiceEnv.maxWer,
+    maxBargeMs: voiceEnv.maxBargeMs,
+    maxFirstAudioMs: voiceEnv.maxFirstAudioMs,
+    eventsJson: voiceEnv.eventsJson,
+    latencyBase: voiceEnv.latencyBase,
+    allowTtsOnlyBargeIn: voiceEnv.allowTtsOnlyBargeIn,
     json: false,
   };
 

package/scripts/voice-interactive.mjs

@@ -5,7 +5,7 @@
  * Send a voice message, get a voice response back — the full optimized
  * voice-assistant loop the W1–W13 swarm landed, run interactively:
  *
- *   mic → VAD (RMS + Silero v5 GGUF) → streaming ASR (fused Qwen3-ASR)
+ *   mic → VAD (RMS + Silero v5 GGUF) → streaming local ASR
  *      → turn controller (prewarm-on-speech-start, speculative-on-pause,
  *        abort-on-resume, promote-or-rerun on speech-end)
  *      → runtime message handler (Stage-1 forced-JSON grammar, streamed)
@@ -43,7 +43,7 @@
  *   →first-replyText-char=Yms llm-first-token → llm-first-replytext-char
  *   →first-TTS-audio=Zms      vad-trigger → tts-first-audio-chunk
  *   →audio-played=Wms         vad-trigger → audio-first-played (the headline TTAP)
- *   mtp-accept=N%          MTP drafter token-acceptance rate (from llama-server /metrics)
+ *   mtp-accept=N%          MTP draft token-acceptance rate (from llama-server /metrics)
  */
 
 import { existsSync } from "node:fs";
@@ -146,7 +146,7 @@ async function inspectActiveOptimizations(args) {
     const { findCatalogModel, FIRST_RUN_DEFAULT_MODEL_ID } = await import(
       "../../shared/src/local-inference/catalog.ts"
     );
-    // The duet harness passes `args.modelId` (e.g. `eliza-1-0_8b`); the
+    // The duet harness passes `args.modelId` (e.g. `eliza-1-2b`); the
     // interactive harness leaves it unset → the first-run default.
     catalogEntry = findCatalogModel(
       args?.modelId ?? FIRST_RUN_DEFAULT_MODEL_ID,
@@ -281,12 +281,12 @@ async function inspectActiveOptimizations(args) {
     active.push({
       name: "streaming OmniVoice TTS",
       on: true,
-      detail: `fused libelizainference at ${ttsLibPath} (OmniVoice TTS + Qwen3-ASR); streaming LLM→TTS via the voice scheduler. On macOS-Metal this is the full graph; on a CPU fused build it runs but slower.`,
+      detail: `fused libelizainference at ${ttsLibPath} (OmniVoice TTS + local ASR); streaming LLM→TTS via the voice scheduler. On macOS-Metal this is the full graph; on a CPU fused build it runs but slower.`,
     });
   } else {
     missing.push({
       what: "no real TTS backend — interactive voice needs the fused libelizainference build (the stub backend emits silence and is rejected)",
-      fix: "build it: see packages/app-core/scripts/omnivoice-merged/README.md (the fused build ships real OmniVoice TTS + Qwen3-ASR on macOS-Metal; stub elsewhere)",
+      fix: "build it: see packages/app-core/scripts/omnivoice-merged/README.md (the fused build ships real OmniVoice TTS + local ASR on macOS-Metal; stub elsewhere)",
     });
     active.push({
       name: "streaming OmniVoice TTS",
@@ -296,17 +296,17 @@ async function inspectActiveOptimizations(args) {
     });
   }
 
-  // ── ASR backend (fused Qwen3-ASR via libelizainference only) ───────────
+  // ── ASR backend (eligible local ASR via libelizainference only) ─────────
   let asrBackend = null;
   if (bundleRoot && existsSync(path.join(bundleRoot, "asr"))) {
-    asrBackend = "fused (Qwen3-ASR region in the bundle)";
+    asrBackend = "fused (local ASR region in the bundle)";
   }
   if (asrBackend) {
     active.push({ name: "streaming ASR", on: true, detail: asrBackend });
   } else {
     missing.push({
-      what: "no ASR backend (no fused Qwen3-ASR region in the bundle)",
-      fix: "rebuild or download a libelizainference bundle that ships the Qwen3-ASR region (asr/ subdirectory).",
+      what: "no ASR backend (no fused local ASR region in the bundle)",
+      fix: "rebuild or download a libelizainference bundle that ships an eligible local ASR region (asr/ subdirectory).",
     });
   }
 
@@ -637,7 +637,7 @@ const PLATFORM_MATRIX = [
           "sox/play — or ffplay — (afplay needs a file, not used) — or renderer AudioContext",
         vad: "fused libelizainference Silero v5 (arm64)",
         ttsAsr:
-          "fused libelizainference.dylib (real OmniVoice TTS + Qwen3-ASR, full graph)",
+          "fused libelizainference.dylib (real OmniVoice TTS + local ASR, full graph)",
         verified:
           "Metal kernels hardware-verified on M4 Max; needs a macOS arm64 host to build",
       },
@@ -956,41 +956,12 @@ async function ensureBundleRegistered(catalogEntry, bundleRoot) {
     `registered ${catalogEntry.id} bundle in the local-inference registry (text=${textGguf})`,
   );
 
-  // Register the MTP drafter companion too (so the engine wires -md).
-  const companionId =
-    catalogEntry.runtime?.mtp?.drafterModelId ??
-    catalogEntry.companionModelIds?.[0];
-  if (companionId) {
-    const { findCatalogModel } = await import(
-      "../../shared/src/local-inference/catalog.ts"
+  if (catalogEntry.runtime?.mtp?.enabled) {
+    tag(
+      "setup",
+      "blue",
+      `${catalogEntry.id} declares same-file MTP metadata; no separate drafter registration is needed`,
     );
-    const companion = findCatalogModel(companionId);
-    if (companion) {
-      const drafterGguf = path.join(bundleRoot, companion.ggufFile);
-      if (existsSync(drafterGguf)) {
-        const dstat = await fs.stat(drafterGguf);
-        await upsertElizaModel({
-          id: companion.id,
-          displayName: companion.displayName ?? companion.id,
-          path: drafterGguf,
-          sizeBytes: dstat.size,
-          hfRepo: companion.hfRepo,
-          installedAt: now,
-          lastUsedAt: null,
-          source: "eliza-download",
-          sha256: null,
-          lastVerifiedAt: now,
-          runtimeRole: "mtp-drafter",
-          companionFor: catalogEntry.id,
-          ...bundleMeta,
-        });
-        tag(
-          "setup",
-          "blue",
-          `registered ${companion.id} (MTP drafter) at ${drafterGguf}`,
-        );
-      }
-    }
   }
   return model;
 }
@@ -1012,7 +983,7 @@ async function bootStandaloneRuntime({ roomId }) {
   // The runtime needs plugin-sql (storage) + the local-inference model handler.
   // Core wires DefaultMessageService during initialize(). Fail loudly if a
   // piece is missing rather than half-booting.
-  const { AgentRuntime, ModelType } = await import("@elizaos/core");
+  const { AgentRuntime } = await import("@elizaos/core");
   let sqlPlugin;
   try {
     sqlPlugin =

package/security/agent-vault-id.d.ts

@@ -1,4 +1,4 @@
-import type { SecureStoreSecretKind } from "./platform-secure-store";
+import type { SecureStoreSecretKind } from "./platform-secure-store.js";
 /** Fixed Keychain / Secret Service “service” identifier (see docs/guides/platform-secure-store.md). */
 export declare const ELIZA_AGENT_VAULT_SERVICE = "ai.elizaos.agent.vault";
 /**

package/security/platform-secure-store-node.d.ts

@@ -1,4 +1,4 @@
-import type { PlatformSecureStore } from "./platform-secure-store";
+import type { PlatformSecureStore } from "./platform-secure-store.js";
 /**
  * Node-side factory: macOS Keychain, Linux `secret-tool`, or the explicit
  * unavailable backend on platforms without an OS credential-store adapter.

package/services/ambient-audio/consent.d.ts

@@ -1,4 +1,4 @@
-import type { ConsentRecord } from "./types.ts";
+import type { ConsentRecord } from "./types.js";
 export declare class AmbientAudioConsentState {
     private records;
     grant(record: ConsentRecord): void;

package/services/ambient-audio/index.d.ts

@@ -1,7 +1,7 @@
-export { AmbientAudioConsentState } from "./consent.ts";
-export { ReplayBuffer } from "./replay-buffer.ts";
-export { decideResponse } from "./response-gate.ts";
-export type { InMemoryAmbientAudioServiceOptions } from "./service.ts";
-export { InMemoryAmbientAudioService } from "./service.ts";
-export type { AmbientAudioMode, AmbientAudioService, AudioFrame, ConsentRecord, ResponseDecision, ResponseGateSignals, TranscribedSegment, } from "./types.ts";
+export { AmbientAudioConsentState } from "./consent.js";
+export { ReplayBuffer } from "./replay-buffer.js";
+export { decideResponse } from "./response-gate.js";
+export type { InMemoryAmbientAudioServiceOptions } from "./service.js";
+export { InMemoryAmbientAudioService } from "./service.js";
+export type { AmbientAudioMode, AmbientAudioService, AudioFrame, ConsentRecord, ResponseDecision, ResponseGateSignals, TranscribedSegment, } from "./types.js";
 //# sourceMappingURL=index.d.ts.map

package/services/ambient-audio/replay-buffer.d.ts

@@ -1,4 +1,4 @@
-import type { AudioFrame } from "./types.ts";
+import type { AudioFrame } from "./types.js";
 export declare class ReplayBuffer {
     readonly sampleRate = 16000;
     readonly channels = 1;

package/services/ambient-audio/response-gate.d.ts

@@ -1,3 +1,3 @@
-import type { ResponseDecision, ResponseGateSignals } from "./types.ts";
+import type { ResponseDecision, ResponseGateSignals } from "./types.js";
 export declare function decideResponse(signals: ResponseGateSignals): ResponseDecision;
 //# sourceMappingURL=response-gate.d.ts.map

package/services/ambient-audio/service.d.ts

@@ -1,6 +1,6 @@
-import type { AmbientAudioConsentState } from "./consent.ts";
-import { ReplayBuffer } from "./replay-buffer.ts";
-import type { AmbientAudioMode, AmbientAudioService, AudioFrame } from "./types.ts";
+import type { AmbientAudioConsentState } from "./consent.js";
+import { ReplayBuffer } from "./replay-buffer.js";
+import type { AmbientAudioMode, AmbientAudioService, AudioFrame } from "./types.js";
 export interface InMemoryAmbientAudioServiceOptions {
     consent: AmbientAudioConsentState;
     replayBuffer?: ReplayBuffer;

package/services/connector-target-catalog.d.ts

@@ -13,7 +13,7 @@
  * `discordCache` instance — a "generate" call that already primed the
  * runtime-context cache pays no extra REST cost when the user picks.
  */
-import { type DiscordSourceCache, type DiscordSourceLogger } from "./discord-target-source";
+import { type DiscordSourceCache, type DiscordSourceLogger } from "./discord-target-source.js";
 export interface TargetGroup {
     /** Connector platform: 'discord', 'slack', 'telegram', 'gmail', etc. */
     platform: string;

package/services/sensitive-requests/index.d.ts

@@ -11,12 +11,12 @@
  * - `public_link` — unauthenticated payment URL for any-payer payments.
  * - `instruct_dm_only` — text-only "no link / no form" fallback.
  */
-export { cloudLinkSensitiveRequestAdapter, createCloudLinkSensitiveRequestAdapter, } from "./cloud-link-adapter";
-export { instructDmOnlySensitiveRequestAdapter } from "./instruct-dm-only-adapter";
-export { ownerAppInlineSensitiveRequestAdapter } from "./owner-app-inline-adapter";
-export { ownerAppOAuthSensitiveRequestAdapter } from "./owner-app-oauth-adapter";
-export { publicLinkSensitiveRequestAdapter } from "./public-link-adapter";
-export { createTunnelLinkSensitiveRequestAdapter, tunnelLinkSensitiveRequestAdapter, } from "./tunnel-link-adapter";
+export { cloudLinkSensitiveRequestAdapter, createCloudLinkSensitiveRequestAdapter, } from "./cloud-link-adapter.js";
+export { instructDmOnlySensitiveRequestAdapter } from "./instruct-dm-only-adapter.js";
+export { ownerAppInlineSensitiveRequestAdapter } from "./owner-app-inline-adapter.js";
+export { ownerAppOAuthSensitiveRequestAdapter } from "./owner-app-oauth-adapter.js";
+export { publicLinkSensitiveRequestAdapter } from "./public-link-adapter.js";
+export { createTunnelLinkSensitiveRequestAdapter, tunnelLinkSensitiveRequestAdapter, } from "./tunnel-link-adapter.js";
 /**
  * Registers app-core's first-party sensitive-request delivery adapters with
  * the runtime's `SensitiveRequestDispatchRegistry` service. No-op when the

package/services/steward-sidecar/wallet-setup.d.ts

@@ -1,7 +1,7 @@
 /**
  * Steward Sidecar - first-launch wallet creation and verification.
  */
-import type { StewardCredentials, StewardSidecarStatus } from "./types";
+import type { StewardCredentials, StewardSidecarStatus } from "./types.js";
 /**
  * Ensure wallet is set up: verify existing wallet or perform first-launch setup.
  */

package/services/steward-sidecar.d.ts

@@ -18,9 +18,9 @@
  *   const client = sidecar.getClient();
  *   await sidecar.stop();
  */
-import { type StewardCredentials, type StewardSidecarConfig, type StewardSidecarStatus } from "./steward-sidecar/types";
-export { allocateFirstFreeLoopbackPort, fingerprintRandomToken, generateApiKey, generateMasterPassword, resolveDataDir, } from "./steward-sidecar/helpers";
-export type { StewardCredentials, StewardSidecarConfig, StewardSidecarStatus, StewardWalletInfo, } from "./steward-sidecar/types";
+import { type StewardCredentials, type StewardSidecarConfig, type StewardSidecarStatus } from "./steward-sidecar/types.js";
+export { allocateFirstFreeLoopbackPort, fingerprintRandomToken, generateApiKey, generateMasterPassword, resolveDataDir, } from "./steward-sidecar/helpers.js";
+export type { StewardCredentials, StewardSidecarConfig, StewardSidecarStatus, StewardWalletInfo, } from "./steward-sidecar/types.js";
 export declare class StewardSidecar {
     private config;
     private status;

package/services/tunnel-to-mobile/index.d.ts

@@ -1,2 +1,2 @@
-export { TunnelToMobileClient, type TunnelToMobileOptions, type TunnelToMobileState, type WebSocketLike, } from "./tunnel-to-mobile-client";
+export { TunnelToMobileClient, type TunnelToMobileOptions, type TunnelToMobileState, type WebSocketLike, } from "./tunnel-to-mobile-client.js";
 //# sourceMappingURL=index.d.ts.map

package/services/vault-bootstrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vault-bootstrap.d.ts","sourceRoot":"","sources":["../../../../../src/services/vault-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAgCH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AA4C5C,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,UAAU,qBAAqB;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,KAAK,CAAC,EAAE,KAAK,CAAC;CACf;AA4LD,wBAAsB,iBAAiB,CACrC,IAAI,GAAE,qBAA0B,GAC/B,OAAO,CAAC,oBAAoB,CAAC,CAkE/B"}
+{"version":3,"file":"vault-bootstrap.d.ts","sourceRoot":"","sources":["../../../../../src/services/vault-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAoCH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAwC5C,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,UAAU,qBAAqB;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,KAAK,CAAC,EAAE,KAAK,CAAC;CACf;AA4LD,wBAAsB,iBAAiB,CACrC,IAAI,GAAE,qBAA0B,GAC/B,OAAO,CAAC,oBAAoB,CAAC,CAkE/B"}

package/services/vault-bootstrap.js

@@ -24,17 +24,21 @@ async function agentBridge() {
         return bridgeCache;
     // Dynamic import defers the agent ↔ app-core edge until after both
     // modules have fully evaluated. By the time this runs the runVaultBootstrap
-    // call site is already inside an async function body, so the cycle is
-    // long closed.
-    const mod = (await import("@elizaos/agent"));
+    // call site is already inside an async function body.
+    const [vaultBridge, configEnv, config, paths] = await Promise.all([
+        import("@elizaos/agent/runtime/operations/vault-bridge"),
+        import("@elizaos/agent/api/config-env"),
+        import("@elizaos/agent/config/config"),
+        import("@elizaos/agent/config/paths"),
+    ]);
     bridgeCache = {
-        formatVaultRef: mod.formatVaultRef,
-        isVaultRef: mod.isVaultRef,
-        loadElizaConfig: mod.loadElizaConfig,
-        persistConfigEnv: mod.persistConfigEnv,
-        readConfigEnv: mod.readConfigEnv,
-        resolveStateDir: mod.resolveStateDir,
-        saveElizaConfig: mod.saveElizaConfig,
+        formatVaultRef: vaultBridge.formatVaultRef,
+        isVaultRef: vaultBridge.isVaultRef,
+        loadElizaConfig: config.loadElizaConfig,
+        persistConfigEnv: configEnv.persistConfigEnv,
+        readConfigEnv: configEnv.readConfigEnv,
+        resolveStateDir: paths.resolveStateDir,
+        saveElizaConfig: config.saveElizaConfig,
     };
     return bridgeCache;
 }

package/services/voice-profiles/diarization-pipeline.d.ts

@@ -1,4 +1,4 @@
-import type { DiarizationSegment } from "./types.ts";
+import type { DiarizationSegment } from "./types.js";
 export interface DiarizationPipeline {
     diarize(audioRef: string): Promise<DiarizationSegment[]>;
 }

package/services/voice-profiles/index.d.ts

@@ -1,12 +1,12 @@
-export type { DiarizationPipeline } from "./diarization-pipeline.ts";
-export { MOCK_DIARIZATION_PIPELINE } from "./diarization-pipeline.ts";
-export type { NicknameEvaluator, NicknameProposal, } from "./nickname-evaluator.ts";
-export { NAIVE_NICKNAME_EVALUATOR } from "./nickname-evaluator.ts";
-export type { OwnerConfidenceInput } from "./owner-confidence.ts";
-export { scoreOwnerConfidence } from "./owner-confidence.ts";
-export type { ChallengeService, InMemoryChallengeServiceOptions, } from "./private-challenge.ts";
-export { InMemoryChallengeService } from "./private-challenge.ts";
-export type { VoiceProfileSearchHit, VoiceProfileStore } from "./store.ts";
-export { InMemoryVoiceProfileStore } from "./store.ts";
-export type { DiarizationSegment, OwnerChallenge, OwnerConfidence, VoiceEmbeddingSummary, VoiceProfile, VoiceProfileQuality, } from "./types.ts";
+export type { DiarizationPipeline } from "./diarization-pipeline.js";
+export { MOCK_DIARIZATION_PIPELINE } from "./diarization-pipeline.js";
+export type { NicknameEvaluator, NicknameProposal, } from "./nickname-evaluator.js";
+export { NAIVE_NICKNAME_EVALUATOR } from "./nickname-evaluator.js";
+export type { OwnerConfidenceInput } from "./owner-confidence.js";
+export { scoreOwnerConfidence } from "./owner-confidence.js";
+export type { ChallengeService, InMemoryChallengeServiceOptions, } from "./private-challenge.js";
+export { InMemoryChallengeService } from "./private-challenge.js";
+export type { VoiceProfileSearchHit, VoiceProfileStore } from "./store.js";
+export { InMemoryVoiceProfileStore } from "./store.js";
+export type { DiarizationSegment, OwnerChallenge, OwnerConfidence, VoiceEmbeddingSummary, VoiceProfile, VoiceProfileQuality, } from "./types.js";
 //# sourceMappingURL=index.d.ts.map

package/services/voice-profiles/owner-confidence.d.ts

@@ -1,4 +1,4 @@
-import type { OwnerConfidence } from "./types.ts";
+import type { OwnerConfidence } from "./types.js";
 export interface OwnerConfidenceInput {
     voiceSimilarityToOwnerProfile: number;
     deviceTrustLevel: "low" | "medium" | "high";

package/services/voice-profiles/private-challenge.d.ts

@@ -1,4 +1,4 @@
-import type { OwnerChallenge } from "./types.ts";
+import type { OwnerChallenge } from "./types.js";
 export interface ChallengeService {
     issue(seed?: string): Promise<OwnerChallenge>;
     verify(id: string, answer: string): Promise<boolean>;

package/services/voice-profiles/store.d.ts

@@ -1,4 +1,4 @@
-import type { VoiceProfile } from "./types.ts";
+import type { VoiceProfile } from "./types.js";
 export interface VoiceProfileSearchHit {
     profile: VoiceProfile;
     similarity: number;

package/test/helpers/live-provider.test.ts

@@ -1,3 +1,6 @@
+import { mkdtemp, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import path from "node:path";
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 
 describe("selectLiveProvider", () => {
@@ -18,6 +21,11 @@ describe("selectLiveProvider", () => {
       "OPENROUTER_API_KEY",
       "ELIZA_E2E_OPENROUTER_API_KEY",
       "ELIZA_PROVIDER",
+      "ELIZA_LIVE_PROVIDER_CONFIG_PATH",
+      "ELIZA_LIVE_PROVIDER_STATE_DIR",
+      "ELIZA_STATE_DIR",
+      "ELIZA_NAMESPACE",
+      "XDG_STATE_HOME",
     ]) {
       vi.stubEnv(key, "");
     }
@@ -25,6 +33,7 @@ describe("selectLiveProvider", () => {
 
   afterEach(() => {
     vi.resetModules();
+    vi.doUnmock("@elizaos/vault");
     vi.unstubAllEnvs();
   });
 
@@ -98,9 +107,90 @@ describe("selectLiveProvider", () => {
     const provider = selectLiveProvider();
     expect(provider?.name).toBe("cerebras");
     expect(provider?.baseUrl).toBe("https://api.cerebras.ai/v1");
-    expect(provider?.largeModel).toBe("gpt-oss-120b");
+    expect(provider?.largeModel).toBe("zai-glm-4.7");
     expect(provider?.smallModel).toBe("gpt-oss-120b");
     expect(provider?.env.ELIZA_PROVIDER).toBe("cerebras");
+    expect(provider?.env.CEREBRAS_MODEL).toBe("zai-glm-4.7");
+    expect(provider?.env.OPENAI_SMALL_MODEL).toBe("gpt-oss-120b");
+    expect(provider?.env.OPENAI_LARGE_MODEL).toBe("zai-glm-4.7");
+  });
+
+  it("resolves Cerebras vault references in the async selector", async () => {
+    vi.stubEnv("CEREBRAS_API_KEY", "vault://providers.cerebras.api-key");
+    vi.stubEnv("GROQ_API_KEY", "");
+    vi.stubEnv("OPENAI_API_KEY", "");
+    vi.stubEnv("ELIZA_PROVIDER", "cerebras");
+
+    const get = vi.fn(async (key: string) => {
+      expect(key).toBe("providers.cerebras.api-key");
+      return "csk_resolved_cerebras_key";
+    });
+    const close = vi.fn(async () => {});
+    vi.doMock("@elizaos/vault", () => ({
+      createVault: vi.fn(() => ({ get, close })),
+    }));
+
+    const { selectLiveProviderAsync } = await import("./live-provider.ts");
+
+    const provider = await selectLiveProviderAsync();
+    expect(provider?.name).toBe("cerebras");
+    expect(provider?.apiKey).toBe("csk_resolved_cerebras_key");
+    expect(provider?.env.CEREBRAS_API_KEY).toBe("csk_resolved_cerebras_key");
+    expect(provider?.env.OPENAI_API_KEY).toBe("csk_resolved_cerebras_key");
+    expect(close).toHaveBeenCalledTimes(1);
+  });
+
+  it("loads a vault-referenced Cerebras key from local eliza.json in the async selector", async () => {
+    const stateDir = await mkdtemp(path.join(tmpdir(), "eliza-live-provider-"));
+    await writeFile(
+      path.join(stateDir, "eliza.json"),
+      JSON.stringify({
+        env: {
+          vars: {
+            CEREBRAS_API_KEY: "vault://CEREBRAS_API_KEY",
+          },
+        },
+      }),
+      "utf8",
+    );
+    vi.stubEnv("ELIZA_LIVE_PROVIDER_STATE_DIR", stateDir);
+    vi.stubEnv("ELIZA_PROVIDER", "cerebras");
+    vi.stubEnv("CEREBRAS_API_KEY", "");
+    vi.stubEnv("GROQ_API_KEY", "");
+    vi.stubEnv("OPENAI_API_KEY", "");
+
+    const createVault = vi.fn(() => ({
+      get: vi.fn(async (key: string) => {
+        expect(key).toBe("CEREBRAS_API_KEY");
+        return "csk_local_config_cerebras_key";
+      }),
+      close: vi.fn(async () => {}),
+    }));
+    vi.doMock("@elizaos/vault", () => ({ createVault }));
+
+    try {
+      const { selectLiveProviderAsync } = await import("./live-provider.ts");
+
+      const provider = await selectLiveProviderAsync();
+      expect(provider?.name).toBe("cerebras");
+      expect(provider?.apiKey).toBe("csk_local_config_cerebras_key");
+      expect(createVault).toHaveBeenCalledWith({ workDir: stateDir });
+    } finally {
+      await rm(stateDir, { force: true, recursive: true });
+    }
+  });
+
+  it("uses the first-class Cerebras first-run provider id", async () => {
+    const { getFirstRunProviderForLiveProvider } = await import(
+      "./live-provider.ts"
+    );
+
+    expect(getFirstRunProviderForLiveProvider({ name: "cerebras" })).toBe(
+      "cerebras",
+    );
+    expect(
+      getFirstRunProviderForLiveProvider({ name: "local-llama-cpp" }),
+    ).toBe("openai");
   });
 
   it("prefers groq over a bare cerebras eval key unless cerebras is explicitly selected", async () => {