@elizaos/plugin-agent-orchestrator 2.0.0-beta.1 → 2.0.3-beta.3

package/dist/node/src/services/view-deploy-guidance.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Cloud deployment guidance for elizaOS view/plugin builds.
+ *
+ * View plugins have a different deploy contract from generic web apps:
+ * the view bundle must be published, registered as a Cloud app, and wired
+ * back into `Plugin.views`/the published manifest with a concrete viewKind.
+ */
+export interface ViewPluginDeployPromptOptions {
+    /** Source directory the sub-agent should treat as the plugin root. */
+    sourceDir?: string;
+}
+export declare function buildViewPluginDeployPrompt(options?: ViewPluginDeployPromptOptions): string;
+export declare function buildLocalViewPluginPrompt(): string;
+//# sourceMappingURL=view-deploy-guidance.d.ts.map

package/dist/node/src/services/view-deploy-guidance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"view-deploy-guidance.d.ts","sourceRoot":"","sources":["../../../../src/services/view-deploy-guidance.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,6BAA6B;IAC5C,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,2BAA2B,CACzC,OAAO,GAAE,6BAAkC,GAC1C,MAAM,CAkBR;AAED,wBAAgB,0BAA0B,IAAI,MAAM,CAQnD"}

package/dist/node/src/services/workdir-validation.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Default per-task workdir for an auto-spawned coding agent:
+ * `~/.eliza/workspaces/<taskId>`, created if missing. Always inside the allowed
+ * workspace base (see {@link resolveAllowedWorkdir}), so messaging a task can
+ * spawn an agent without a caller-supplied workdir — the parity-with-claude/codex
+ * "just message it and it works" path relies on this.
+ */
+export declare function ensureTaskWorkdir(taskId: string): Promise<string>;
+export declare function resolveAllowedWorkdir(rawWorkdir: string): Promise<string>;
+//# sourceMappingURL=workdir-validation.d.ts.map

package/dist/node/src/services/workdir-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workdir-validation.d.ts","sourceRoot":"","sources":["../../../../src/services/workdir-validation.ts"],"names":[],"mappings":"AAQA;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAMvE;AAED,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,CAuBjB"}

package/dist/node/src/services/workspace-diff.d.ts

@@ -0,0 +1,50 @@
+/**
+ * What a sub-agent actually changed in its workspace, captured as ground
+ * truth from git (plus the agent's own edit/write tool calls) rather than from
+ * the model's frequently-confabulated description of its work. Persisted on
+ * session metadata at `task_complete` so the parent can answer "what did you
+ * change / show me the diff" from the real change set.
+ */
+export interface WorkspaceChangeSet {
+    changedFiles: string[];
+    diffStat: string;
+    diff: string;
+    truncated: boolean;
+    capturedAt: number;
+}
+/**
+ * The repo HEAD at spawn time, so the change set at completion is scoped to
+ * exactly what this sub-agent did (committed or not). Undefined when the
+ * workspace is not a git work tree or has no commits yet.
+ */
+export declare function captureBaselineSha(workdir: string): Promise<string | undefined>;
+/**
+ * Tracked files already modified in the workspace at spawn time. The completion
+ * diff (`git diff <baseline>`) compares the working tree to the baseline
+ * COMMIT, so files that were dirty BEFORE the session (a leftover edit, a dirty
+ * submodule pointer) show up even though this sub-agent never touched them.
+ * Recording them at spawn lets the change set exclude that pre-existing churn.
+ */
+export declare function captureBaselineDirty(workdir: string): Promise<string[]>;
+/**
+ * What this sub-agent changed in `workdir` since spawn, from the union of two
+ * SESSION-SCOPED signals — no filesystem walk, no path denylist, no mtime
+ * heuristics, so it works for any workdir/language/deployment:
+ *  - `git diff --name-status <base>`: tracked edits, deletions, renames since
+ *    the spawn baseline (covers shell-driven writes to tracked files);
+ *  - `toolPaths`: files the agent explicitly wrote via edit/write tool calls
+ *    this session — including gitignored DEPLOY targets (`data/apps/<name>/`)
+ *    that git won't surface.
+ *
+ * Deliberately NOT using `git ls-files --others`: it lists EVERY untracked file
+ * in the work tree regardless of when it appeared, so in a shared/long-lived
+ * workspace it scoops up accumulated clutter from prior sessions (stray .venv,
+ * old build output, scratch PDFs) that this task never touched. Both signals
+ * above are scoped to this session, so the change set stays accurate.
+ *
+ * Returns undefined when nothing changed or the workspace isn't a git repo.
+ */
+export declare function captureChangeSet(workdir: string, baselineSha?: string, toolPaths?: string[], baselineDirty?: string[]): Promise<WorkspaceChangeSet | undefined>;
+/** One-line, human-facing summary of a change set for a completion banner. */
+export declare function summarizeChangeSet(changeSet: WorkspaceChangeSet): string;
+//# sourceMappingURL=workspace-diff.d.ts.map

package/dist/node/src/services/workspace-diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-diff.d.ts","sourceRoot":"","sources":["../../../../src/services/workspace-diff.ts"],"names":[],"mappings":"AAwBA;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAsDD;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAI7B;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAM7E;AAkDD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,WAAW,CAAC,EAAE,MAAM,EACpB,SAAS,GAAE,MAAM,EAAO,EACxB,aAAa,GAAE,MAAM,EAAO,GAC3B,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAuDzC;AAqDD,8EAA8E;AAC9E,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,kBAAkB,GAAG,MAAM,CAMxE"}

package/dist/node/src/services/workspace-git-ops.d.ts

@@ -7,7 +7,7 @@
  * @module services/workspace-git-ops
  */
 import type { PullRequestInfo, WorkspaceService } from "git-workspace-service";
-import type { CommitOptions, PROptions, PushOptions, WorkspaceResult, WorkspaceStatusResult } from "./workspace-service.js";
+import type { CommitOptions, PROptions, PushOptions, WorkspaceResult, WorkspaceStatusResult } from "./workspace-types.js";
 /**
  * Get workspace git status (branch, staged/modified/untracked files).
  */
@@ -20,7 +20,7 @@ export declare function commit(workspacePath: string, options: CommitOptions, lo
 /**
  * Push changes to remote for a workspace.
  */
-export declare function push(workspacePath: string, branch: string, options: PushOptions | undefined, log: (msg: string) => void): Promise<void>;
+export declare function push(workspacePath: string, branch: string, options: PushOptions | undefined, log: (msg: string) => void, env?: NodeJS.ProcessEnv): Promise<void>;
 /**
  * Create a pull request for a workspace via the underlying WorkspaceService.
  */

package/dist/node/src/services/workspace-git-ops.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-git-ops.d.ts","sourceRoot":"","sources":["../../../../src/services/workspace-git-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,eAAe,EAEf,gBAAgB,EACjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EACV,aAAa,EACb,SAAS,EACT,WAAW,EACX,eAAe,EACf,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAEhC;;GAEG;AACH,wBAAsB,SAAS,CAC7B,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,qBAAqB,CAAC,CAuChC;AAED;;;GAGG;AACH,wBAAsB,MAAM,CAC1B,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,aAAa,EACtB,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GACzB,OAAO,CAAC,MAAM,CAAC,CAkBjB;AAED;;GAEG;AACH,wBAAsB,IAAI,CACxB,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,WAAW,GAAG,SAAS,EAChC,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GACzB,OAAO,CAAC,IAAI,CAAC,CAaf;AAED;;GAEG;AACH,wBAAsB,QAAQ,CAC5B,gBAAgB,EAAE,gBAAgB,EAClC,SAAS,EAAE,eAAe,EAC1B,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,SAAS,EAClB,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GACzB,OAAO,CAAC,eAAe,CAAC,CAsB1B"}
+{"version":3,"file":"workspace-git-ops.d.ts","sourceRoot":"","sources":["../../../../src/services/workspace-git-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,eAAe,EAEf,gBAAgB,EACjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EACV,aAAa,EACb,SAAS,EACT,WAAW,EACX,eAAe,EACf,qBAAqB,EACtB,MAAM,sBAAsB,CAAC;AAE9B;;GAEG;AACH,wBAAsB,SAAS,CAC7B,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,qBAAqB,CAAC,CAuChC;AAED;;;GAGG;AACH,wBAAsB,MAAM,CAC1B,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,aAAa,EACtB,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GACzB,OAAO,CAAC,MAAM,CAAC,CAkBjB;AAED;;GAEG;AACH,wBAAsB,IAAI,CACxB,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,WAAW,GAAG,SAAS,EAChC,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,EAC1B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GACtB,OAAO,CAAC,IAAI,CAAC,CAaf;AAED;;GAEG;AACH,wBAAsB,QAAQ,CAC5B,gBAAgB,EAAE,gBAAgB,EAClC,SAAS,EAAE,eAAe,EAC1B,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,SAAS,EAClB,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GACzB,OAAO,CAAC,eAAe,CAAC,CAsB1B"}

package/dist/node/src/services/workspace-github.d.ts

@@ -7,7 +7,7 @@
  * @module services/workspace-github
  */
 import type { IAgentRuntime } from "@elizaos/core";
-import { type CreateIssueOptions, GitHubPatClient, type IssueComment, type IssueInfo, type IssueState } from "git-workspace-service";
+import type { CreateIssueOptions, GitHubPatClient as GitHubPatClientInstance, IssueComment, IssueInfo, IssueState } from "git-workspace-service";
 /**
  * Callback for surfacing auth prompts to the user.
  * Returns true only when the prompt was delivered through an immediate
@@ -25,10 +25,10 @@ export type AuthPromptCallback = (prompt: {
  */
 export interface GitHubContext {
     runtime: IAgentRuntime;
-    githubClient: GitHubPatClient | null;
-    setGithubClient: (client: GitHubPatClient) => void;
-    githubAuthInProgress: Promise<GitHubPatClient> | null;
-    setGithubAuthInProgress: (p: Promise<GitHubPatClient> | null) => void;
+    githubClient: GitHubPatClientInstance | null;
+    setGithubClient: (client: GitHubPatClientInstance) => void;
+    githubAuthInProgress: Promise<GitHubPatClientInstance> | null;
+    setGithubAuthInProgress: (p: Promise<GitHubPatClientInstance> | null) => void;
     authPromptCallback: AuthPromptCallback | null;
     log: (msg: string) => void;
 }
@@ -36,8 +36,8 @@ export declare function parseOwnerRepo(repo: string): {
     owner: string;
     repo: string;
 };
-export declare function ensureGitHubClient(ctx: GitHubContext): Promise<GitHubPatClient>;
-export declare function performOAuthFlow(ctx: GitHubContext, clientId: string): Promise<GitHubPatClient>;
+export declare function ensureGitHubClient(ctx: GitHubContext): Promise<GitHubPatClientInstance>;
+export declare function performOAuthFlow(ctx: GitHubContext, clientId: string): Promise<GitHubPatClientInstance>;
 export declare function createIssue(ctx: GitHubContext, repo: string, options: CreateIssueOptions): Promise<IssueInfo>;
 export declare function getIssue(ctx: GitHubContext, repo: string, issueNumber: number): Promise<IssueInfo>;
 export declare function listIssues(ctx: GitHubContext, repo: string, options?: {

package/dist/node/src/services/workspace-github.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-github.d.ts","sourceRoot":"","sources":["../../../../src/services/workspace-github.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EACL,KAAK,kBAAkB,EACvB,eAAe,EACf,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,KAAK,UAAU,EAEhB,MAAM,uBAAuB,CAAC;AAE/B;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE;IACxC,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAEjC;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,aAAa,CAAC;IACvB,YAAY,EAAE,eAAe,GAAG,IAAI,CAAC;IACrC,eAAe,EAAE,CAAC,MAAM,EAAE,eAAe,KAAK,IAAI,CAAC;IACnD,oBAAoB,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC;IACtD,uBAAuB,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,KAAK,IAAI,CAAC;IACtE,kBAAkB,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC9C,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC5B;AAID,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd,CAOA;AAID,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,aAAa,GACjB,OAAO,CAAC,eAAe,CAAC,CAsC1B;AAED,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,aAAa,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,eAAe,CAAC,CA6C1B;AAID,wBAAsB,WAAW,CAC/B,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,SAAS,CAAC,CAMpB;AAED,wBAAsB,QAAQ,CAC5B,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,SAAS,CAAC,CAIpB;AAED,wBAAsB,UAAU,CAC9B,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IACR,KAAK,CAAC,EAAE,UAAU,GAAG,KAAK,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GACA,OAAO,CAAC,SAAS,EAAE,CAAC,CAItB;AAED,wBAAsB,WAAW,CAC/B,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE;IACP,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB,GACA,OAAO,CAAC,SAAS,CAAC,CAIpB;AAED,wBAAsB,UAAU,CAC9B,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,YAAY,CAAC,CAIvB;AAED,wBAAsB,YAAY,CAChC,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,YAAY,EAAE,CAAC,CAIzB;AAED,wBAAsB,UAAU,CAC9B,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,SAAS,CAAC,CAMpB;AAED,wBAAsB,WAAW,CAC/B,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,SAAS,CAAC,CAIpB;AAED,wBAAsB,SAAS,CAC7B,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EAAE,GACf,OAAO,CAAC,IAAI,CAAC,CAIf"}
+{"version":3,"file":"workspace-github.d.ts","sourceRoot":"","sources":["../../../../src/services/workspace-github.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,KAAK,EACV,kBAAkB,EAClB,eAAe,IAAI,uBAAuB,EAC1C,YAAY,EACZ,SAAS,EACT,UAAU,EACX,MAAM,uBAAuB,CAAC;AAM/B;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE;IACxC,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAEjC;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,aAAa,CAAC;IACvB,YAAY,EAAE,uBAAuB,GAAG,IAAI,CAAC;IAC7C,eAAe,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,IAAI,CAAC;IAC3D,oBAAoB,EAAE,OAAO,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC;IAC9D,uBAAuB,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,uBAAuB,CAAC,GAAG,IAAI,KAAK,IAAI,CAAC;IAC9E,kBAAkB,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC9C,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC5B;AAID,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd,CAOA;AAID,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,aAAa,GACjB,OAAO,CAAC,uBAAuB,CAAC,CAsClC;AAED,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,aAAa,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,uBAAuB,CAAC,CA6ClC;AAID,wBAAsB,WAAW,CAC/B,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,SAAS,CAAC,CAMpB;AAED,wBAAsB,QAAQ,CAC5B,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,SAAS,CAAC,CAIpB;AAED,wBAAsB,UAAU,CAC9B,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IACR,KAAK,CAAC,EAAE,UAAU,GAAG,KAAK,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GACA,OAAO,CAAC,SAAS,EAAE,CAAC,CAItB;AAED,wBAAsB,WAAW,CAC/B,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE;IACP,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB,GACA,OAAO,CAAC,SAAS,CAAC,CAIpB;AAED,wBAAsB,UAAU,CAC9B,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,YAAY,CAAC,CAIvB;AAED,wBAAsB,YAAY,CAChC,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,YAAY,EAAE,CAAC,CAIzB;AAED,wBAAsB,UAAU,CAC9B,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,SAAS,CAAC,CAMpB;AAED,wBAAsB,WAAW,CAC/B,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,SAAS,CAAC,CAIpB;AAED,wBAAsB,SAAS,CAC7B,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EAAE,GACf,OAAO,CAAC,IAAI,CAAC,CAIf"}

package/dist/node/src/services/workspace-lifecycle.d.ts

@@ -1,18 +1,5 @@
-/**
- * Workspace lifecycle utilities — garbage collection and scratch directory cleanup.
- *
- * Extracted from workspace-service.ts to reduce module size.
- *
- * @module services/workspace-lifecycle
- */
-/**
- * Remove a scratch directory (non-git workspace used for ad-hoc tasks).
- * Safe to call for any path under the workspaces base dir.
- */
+/** Remove a scratch directory safely — only if under baseDir or one of allowedDirs. */
 export declare function removeScratchDir(dirPath: string, baseDir: string, log: (msg: string) => void, allowedDirs?: string[]): Promise<void>;
-/**
- * Garbage-collect orphaned workspace directories.
- * Removes directories older than the given TTL that aren't tracked by the current session.
- */
+/** Garbage-collect orphaned workspace directories older than workspaceTtlMs. */
 export declare function gcOrphanedWorkspaces(baseDir: string, workspaceTtlMs: number, trackedWorkspaceIds: Set<string>, log: (msg: string) => void): Promise<void>;
 //# sourceMappingURL=workspace-lifecycle.d.ts.map

package/dist/node/src/services/workspace-lifecycle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-lifecycle.d.ts","sourceRoot":"","sources":["../../../../src/services/workspace-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,EAC1B,WAAW,CAAC,EAAE,MAAM,EAAE,GACrB,OAAO,CAAC,IAAI,CAAC,CA8Bf;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,MAAM,EACtB,mBAAmB,EAAE,GAAG,CAAC,MAAM,CAAC,EAChC,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GACzB,OAAO,CAAC,IAAI,CAAC,CAkDf"}
+{"version":3,"file":"workspace-lifecycle.d.ts","sourceRoot":"","sources":["../../../../src/services/workspace-lifecycle.ts"],"names":[],"mappings":"AAIA,uFAAuF;AACvF,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,EAC1B,WAAW,CAAC,EAAE,MAAM,EAAE,GACrB,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED,gFAAgF;AAChF,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,MAAM,EACtB,mBAAmB,EAAE,GAAG,CAAC,MAAM,CAAC,EAChC,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GACzB,OAAO,CAAC,IAAI,CAAC,CAiDf"}

package/dist/node/src/services/workspace-service.d.ts

@@ -10,7 +10,7 @@
  * @module services/workspace-service
  */
 import type { IAgentRuntime } from "@elizaos/core";
-import { type CreateIssueOptions, type IssueComment, type IssueInfo, type IssueState, type PullRequestInfo, type WorkspaceEvent } from "git-workspace-service";
+import type { CreateIssueOptions, IssueComment, IssueInfo, IssueState, PullRequestInfo, WorkspaceEvent } from "git-workspace-service";
 import type { AuthPromptCallback } from "./workspace-github.js";
 export type { AuthPromptCallback } from "./workspace-github.js";
 export type { CodingWorkspaceConfig, CommitOptions, PROptions, ProvisionWorkspaceOptions, PushOptions, WorkspaceResult, WorkspaceStatusResult, } from "./workspace-types.js";
@@ -27,7 +27,7 @@ export interface ScratchWorkspaceRecord {
     terminalEvent: ScratchTerminalEvent;
     expiresAt?: number;
 }
-export declare function resolveDefaultBranch(repoUrl: string): Promise<string>;
+export declare function resolveDefaultBranch(repoUrl: string, token?: string): Promise<string>;
 /** Test hook: drop the per-repo cache so each test starts clean. */
 export declare function _clearDefaultBranchCache(): void;
 export declare function getCodingWorkspaceService(runtime: IAgentRuntime): CodingWorkspaceService | null;
@@ -41,6 +41,7 @@ export declare class CodingWorkspaceService {
     private githubAuthInProgress;
     private serviceConfig;
     private workspaces;
+    private ambientCredentialWorkspaceIds;
     private labels;
     private scratchBySession;
     private scratchCleanupTimers;
@@ -52,6 +53,7 @@ export declare class CodingWorkspaceService {
     static start(runtime: IAgentRuntime): Promise<CodingWorkspaceService>;
     static stopRuntime(runtime: IAgentRuntime): Promise<void>;
     private initialize;
+    private installCredentialSafeClone;
     stop(): Promise<void>;
     /** Provision a new workspace */
     provisionWorkspace(options: ProvisionWorkspaceOptions): Promise<WorkspaceResult>;
@@ -109,6 +111,8 @@ export declare class CodingWorkspaceService {
     /** GC orphaned workspace directories older than workspaceTtlMs. */
     private gcOrphanedWorkspaces;
     private log;
+    private resolveUserCredentials;
+    private removeAmbientCredentialHelper;
     /** Read a key from the config file's env section (live, no restart needed). */
     private readConfigEnvKey;
     private getScratchRetentionPolicy;

package/dist/node/src/services/workspace-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-service.d.ts","sourceRoot":"","sources":["../../../../src/services/workspace-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EACL,KAAK,kBAAkB,EAGvB,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,KAAK,UAAU,EAEf,KAAK,eAAe,EAEpB,KAAK,cAAc,EAEpB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAchE,YAAY,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAehE,YAAY,EACV,qBAAqB,EACrB,aAAa,EACb,SAAS,EACT,yBAAyB,EACzB,WAAW,EACX,eAAe,EACf,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EACV,qBAAqB,EACrB,aAAa,EACb,SAAS,EACT,yBAAyB,EACzB,WAAW,EACX,eAAe,EACf,qBAAqB,EACtB,MAAM,sBAAsB,CAAC;AAE9B,KAAK,sBAAsB,GAAG,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;AAE9D,KAAK,oBAAoB,GAAG,SAAS,GAAG,eAAe,GAAG,OAAO,CAAC;AAElE,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,kBAAkB,GAAG,MAAM,GAAG,UAAU,CAAC;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,oBAAoB,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAsCD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAcrE;AAED,oEAAoE;AACpE,wBAAgB,wBAAwB,IAAI,IAAI,CAE/C;AA8BD,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,aAAa,GACrB,sBAAsB,GAAG,IAAI,CAG/B;AAED,qBAAa,sBAAsB;IACjC,MAAM,CAAC,WAAW,SAA8B;IAChD,qBAAqB,SAA6C;IAElE,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,gBAAgB,CAAiC;IACzD,OAAO,CAAC,iBAAiB,CAAkC;IAC3D,OAAO,CAAC,YAAY,CAAgC;IACpD,OAAO,CAAC,oBAAoB,CAAyC;IACrE,OAAO,CAAC,aAAa,CAAwB;IAC7C,OAAO,CAAC,UAAU,CAA2C;IAC7D,OAAO,CAAC,MAAM,CAAkC;IAChD,OAAO,CAAC,gBAAgB,CAAkD;IAC1E,OAAO,CAAC,oBAAoB,CAChB;IACZ,OAAO,CAAC,cAAc,CAAgC;IACtD,OAAO,CAAC,kBAAkB,CAAmC;IAC7D,6EAA6E;IAC7E,OAAO,CAAC,uBAAuB,CAEf;gBAEJ,OAAO,EAAE,aAAa,EAAE,MAAM,GAAE,qBAA0B;WAUzD,KAAK,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,sBAAsB,CAAC;WAU9D,WAAW,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;YAOjD,UAAU;IAkDlB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAmB3B,gCAAgC;IAC1B,kBAAkB,CACtB,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,eAAe,CAAC;IAqD3B,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAIrD,cAAc,IAAI,eAAe,EAAE;IAInC;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAkBlD,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAK/D,0CAA0C;IAC1C,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAQ1D,SAAS,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAQ9D,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC;IAYpE,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAW/D,QAAQ,CACZ,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,SAAS,GACjB,OAAO,CAAC,eAAe,CAAC;IAmB3B,OAAO,CAAC,gBAAgB;IAgBxB,gEAAgE;IAChE,qBAAqB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI;IAIzD;;;OAGG;IACH,0BAA0B,CACxB,QAAQ,EAAE,CAAC,MAAM,EAAE,sBAAsB,KAAK,OAAO,CAAC,IAAI,CAAC,GAC1D,IAAI;IAID,WAAW,CACf,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,SAAS,CAAC;IAIf,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAI/D,UAAU,CACd,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QACR,KAAK,CAAC,EAAE,UAAU,GAAG,KAAK,CAAC;QAC3B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GACA,OAAO,CAAC,SAAS,EAAE,CAAC;IAIjB,WAAW,CACf,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE;QACP,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,UAAU,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;KACtB,GACA,OAAO,CAAC,SAAS,CAAC;IAIf,UAAU,CACd,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,YAAY,CAAC;IAIlB,YAAY,CAChB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,YAAY,EAAE,CAAC;IAIpB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAIjE,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAIlE,SAAS,CACb,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EAAE,GACf,OAAO,CAAC,IAAI,CAAC;IAMV,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAazD,OAAO,CAAC,QAAQ,EAAE,sBAAsB,GAAG,MAAM,IAAI;IAUrD,OAAO,CAAC,SAAS;IAUjB,oFAAoF;IAC9E,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBtD,qBAAqB,IAAI,sBAAsB,EAAE;IAM3C,wBAAwB,CAC5B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,oBAAoB,GAClC,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAwDnC,oBAAoB,CACxB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,sBAAsB,CAAC;IAY5B,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOxD,uBAAuB,CAC3B,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,sBAAsB,CAAC;IA8BlC,mEAAmE;YACrD,oBAAoB;IASlC,OAAO,CAAC,GAAG;IAMX,+EAA+E;IAC/E,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,yBAAyB;IAsBjC,OAAO,CAAC,uBAAuB;IAW/B,OAAO,CAAC,uBAAuB;IAQ/B,OAAO,CAAC,wBAAwB;IAQhC,OAAO,CAAC,sBAAsB;IAmB9B,OAAO,CAAC,qBAAqB;YASf,oBAAoB;CAsBnC"}
+{"version":3,"file":"workspace-service.d.ts","sourceRoot":"","sources":["../../../../src/services/workspace-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,OAAO,KAAK,EACV,kBAAkB,EAGlB,YAAY,EACZ,SAAS,EACT,UAAU,EACV,eAAe,EAEf,cAAc,EAEf,MAAM,uBAAuB,CAAC;AAwB/B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAchE,YAAY,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAehE,YAAY,EACV,qBAAqB,EACrB,aAAa,EACb,SAAS,EACT,yBAAyB,EACzB,WAAW,EACX,eAAe,EACf,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EACV,qBAAqB,EACrB,aAAa,EACb,SAAS,EACT,yBAAyB,EACzB,WAAW,EACX,eAAe,EACf,qBAAqB,EACtB,MAAM,sBAAsB,CAAC;AAE9B,KAAK,sBAAsB,GAAG,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;AAE9D,KAAK,oBAAoB,GAAG,SAAS,GAAG,eAAe,GAAG,OAAO,CAAC;AAElE,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,kBAAkB,GAAG,MAAM,GAAG,UAAU,CAAC;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,oBAAoB,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA6CD,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,CAejB;AAED,oEAAoE;AACpE,wBAAgB,wBAAwB,IAAI,IAAI,CAE/C;AAiDD,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,aAAa,GACrB,sBAAsB,GAAG,IAAI,CAG/B;AAED,qBAAa,sBAAsB;IACjC,MAAM,CAAC,WAAW,SAA8B;IAChD,qBAAqB,SAA6C;IAElE,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,gBAAgB,CAAyC;IACjE,OAAO,CAAC,iBAAiB,CAA0C;IACnE,OAAO,CAAC,YAAY,CAAwC;IAC5D,OAAO,CAAC,oBAAoB,CAAiD;IAC7E,OAAO,CAAC,aAAa,CAAwB;IAC7C,OAAO,CAAC,UAAU,CAA2C;IAC7D,OAAO,CAAC,6BAA6B,CAAqB;IAC1D,OAAO,CAAC,MAAM,CAAkC;IAChD,OAAO,CAAC,gBAAgB,CAAkD;IAC1E,OAAO,CAAC,oBAAoB,CAChB;IACZ,OAAO,CAAC,cAAc,CAAgC;IACtD,OAAO,CAAC,kBAAkB,CAAmC;IAC7D,6EAA6E;IAC7E,OAAO,CAAC,uBAAuB,CAEf;gBAEJ,OAAO,EAAE,aAAa,EAAE,MAAM,GAAE,qBAA0B;WAUzD,KAAK,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,sBAAsB,CAAC;WAU9D,WAAW,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;YAOjD,UAAU;IA8DxB,OAAO,CAAC,0BAA0B;IAkC5B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAmB3B,gCAAgC;IAC1B,kBAAkB,CACtB,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,eAAe,CAAC;IAmE3B,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAIrD,cAAc,IAAI,eAAe,EAAE;IAInC;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAkBlD,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAK/D,0CAA0C;IAC1C,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAQ1D,SAAS,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAQ9D,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC;IAYpE,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAwB/D,QAAQ,CACZ,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,SAAS,GACjB,OAAO,CAAC,eAAe,CAAC;IAmB3B,OAAO,CAAC,gBAAgB;IAgBxB,gEAAgE;IAChE,qBAAqB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI;IAIzD;;;OAGG;IACH,0BAA0B,CACxB,QAAQ,EAAE,CAAC,MAAM,EAAE,sBAAsB,KAAK,OAAO,CAAC,IAAI,CAAC,GAC1D,IAAI;IAID,WAAW,CACf,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,SAAS,CAAC;IAIf,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAI/D,UAAU,CACd,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QACR,KAAK,CAAC,EAAE,UAAU,GAAG,KAAK,CAAC;QAC3B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GACA,OAAO,CAAC,SAAS,EAAE,CAAC;IAIjB,WAAW,CACf,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE;QACP,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,UAAU,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;KACtB,GACA,OAAO,CAAC,SAAS,CAAC;IAIf,UAAU,CACd,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,YAAY,CAAC;IAIlB,YAAY,CAChB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,YAAY,EAAE,CAAC;IAIpB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAIjE,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAIlE,SAAS,CACb,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EAAE,GACf,OAAO,CAAC,IAAI,CAAC;IAMV,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAazD,OAAO,CAAC,QAAQ,EAAE,sBAAsB,GAAG,MAAM,IAAI;IAUrD,OAAO,CAAC,SAAS;IAUjB,oFAAoF;IAC9E,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBtD,qBAAqB,IAAI,sBAAsB,EAAE;IAM3C,wBAAwB,CAC5B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,oBAAoB,GAClC,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAwDnC,oBAAoB,CACxB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,sBAAsB,CAAC;IAY5B,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOxD,uBAAuB,CAC3B,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,sBAAsB,CAAC;IA8BlC,mEAAmE;YACrD,oBAAoB;IASlC,OAAO,CAAC,GAAG;IAMX,OAAO,CAAC,sBAAsB;YA0BhB,6BAA6B;IAa3C,+EAA+E;IAC/E,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,yBAAyB;IAsBjC,OAAO,CAAC,uBAAuB;IAU/B,OAAO,CAAC,uBAAuB;IAQ/B,OAAO,CAAC,wBAAwB;IAQhC,OAAO,CAAC,sBAAsB;IAmB9B,OAAO,CAAC,qBAAqB;YASf,oBAAoB;CAsBnC"}

package/dist/node/src/setup-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup-routes.d.ts","sourceRoot":"","sources":["../../../src/setup-routes.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAiB,MAAM,EAAS,MAAM,eAAe,CAAC;AAuIlE,eAAO,MAAM,sBAAsB,EAAE,MAMpC,CAAC"}
+{"version":3,"file":"setup-routes.d.ts","sourceRoot":"","sources":["../../../src/setup-routes.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAGV,MAAM,EAIP,MAAM,eAAe,CAAC;AAgJvB,eAAO,MAAM,sBAAsB,EAAE,MAMpC,CAAC"}

package/docs/SUBAGENT_FLOW_AND_PARITY.md

@@ -0,0 +1,138 @@
+# Sub-agent flow & Codex / Claude-Code parity review
+
+A thorough walk of how the main agent creates a task, spawns sub-agents,
+provisions them, and communicates — across the elizaOS, Codex, and Claude
+frameworks — plus an honest parity assessment against standalone Codex CLI and
+Claude Code, and the concrete open items.
+
+## 1. End-to-end flow
+
+```
+user msg → planner → TASKS_CREATE ─────────────► durable task (status: open)
+                         │                         roomId, taskRoomId, ownerUserId,
+                         │                         originalRequest, acceptanceCriteria
+                         ▼
+                   TASKS_SPAWN_AGENT ────────────► AcpService.spawnSession(SpawnOptions)
+                         │   goal-prompt.ts wraps   agentType, workdir, goalPrompt,
+                         │   the goal + rooms +      approvalPreset, metadata{roomId,
+                         │   acceptance criteria     source, label, worldId, userId}
+                         ▼
+                   ACP subprocess (native JSON-RPC over stdio)
+                   elizaos | codex | claude | opencode | pi-agent
+                         │   session/new → session/prompt(goal)
+                         ▼
+                   events: ready · tool_running · message · reasoning · plan ·
+                           blocked · task_complete · error · usage_update
+                         │
+        ┌────────────────┴───────────────────────────────┐
+        ▼                                                  ▼
+  OrchestratorTaskService.onSessionEvent          SubAgentRouter.handleEvent
+  (durable: addEvent / updateSession /            (synthetic Memory → planner;
+   recordMessage; task_complete → "validating")    round-trip cap = 32)
+                                                          │
+                                                          ▼
+                                          planner ↔ subAgentCompletionResponseEvaluator
+                                          → reply to user OR TASKS_SEND_TO_AGENT
+```
+
+**Key files:** task create `actions/tasks.ts:685` → `services/orchestrator-task-service.ts:746`;
+spawn `actions/tasks.ts:743` → `services/acp-service.ts:511`; goal wrap
+`services/goal-prompt.ts:129`; event bridge `orchestrator-task-service.ts:519`;
+routing `services/sub-agent-router.ts`; completion gate
+`orchestrator-task-service.ts:608` (`task_complete` → `validating`, never straight
+to `done`); evaluator `evaluators/sub-agent-completion.ts`.
+
+**Provisioning** happens at spawn: `acp-service.ts` resolves the workdir, captures
+a git baseline SHA + dirty set (for the completion changeset), and writes a
+sub-agent `AGENTS.md`/`CLAUDE.md` identity manifest on bare workdirs
+(`sub-agent-identity.ts`). Explicit repo clone / worktree / branch / commit / push
+/ PR is `CodingWorkspaceService` (`workspace-*.ts`), driven by
+`TASKS_PROVISION_WORKSPACE` / `TASKS_SUBMIT_WORKSPACE`.
+
+## 2. Sub-agent rooms per task
+
+- `roomId` = the originating user channel (where the final reply goes).
+  `taskRoomId` = a dedicated task-scoped room; all sessions' messages
+  (`senderKind: user|orchestrator|sub_agent|system`) append there. Exposed via
+  `GET /api/orchestrator/tasks/:id/messages`, `/timeline`, and `/stream` (SSE).
+- The in-app **task view** (`plugin-task-coordinator/src/OrchestratorWorkbench.tsx`)
+  renders this as a per-task message room: the merged timeline + per-sub-agent
+  sessions list + plan + diff + usage + recovery, with near-live polling.
+- On chat connectors, the **progress thread** (`index.ts emitProgress`) routes all
+  sub-agent narration into a per-task Discord thread / Telegram forum topic
+  (capability-gated on `create_thread` + `post_to_thread` + threaded progress
+  mode), keeping the main channel clean. This is the "task info as threads in TG
+  and Discord" surface.
+
+## 3. Inter-agent communication
+
+**Topology: hub-and-spoke.** Sub-agents do not address each other directly. Each
+talks only to the parent:
+- parent → sub: initial goal prompt; mid-flight `TASKS_SEND_TO_AGENT`; live user
+  messages in the task room are auto-forwarded to the active session
+  (`index.ts` MESSAGE_RECEIVED listener).
+- sub → parent: terminal ACP events → synthetic memories; plus a sub-agent can
+  emit `USE_SKILL parent-agent {…}` which the router dispatches to the
+  parent-agent broker (`parent-agent-dispatch.ts` / `parent-agent-broker.ts`) and
+  replies back over the session.
+- sub → parent context: loopback-only bridge `GET /api/coding-agents/:id/context/*`
+  (parent character, current room, memory search, active workspaces).
+
+Multiple sub-agents per task are supported (`sessions[]`), unsynchronized; the
+router de-dupes concurrent `task_complete` so only the first posts to the user.
+
+## 4. Framework matrix (elizaOS / Codex / Claude)
+
+All run as ACP subprocesses over the native JSON-RPC transport
+(`acp-native-transport.ts`); spawn command per framework is env-overridable
+(`ELIZA_{ELIZAOS,CODEX,CLAUDE,OPENCODE,PI_AGENT}_ACP_COMMAND`; Codex/Claude default
+to pinned `npx` ACP shims). The orchestrator implements the ACP client side of:
+`session/new`, `session/prompt`, `session/cancel`, `session/update` (streaming
+`agent_message_chunk` / `agent_thought_chunk` / `tool_call` / `plan`),
+`session/request_permission`, `fs/read_text_file`, `fs/write_text_file`, and the
+`terminal/*` family. Approval presets (`readonly|standard|permissive|autonomous`)
+gate file/terminal ops. Credentials reach sub-agents via the loopback credential
+tunnel (`bridge-routes.ts`); host connector tokens are denylisted from the child
+env, and Claude OAuth-subscription tokens are stripped so the child uses its own
+subscription.
+
+## 5. Parity vs standalone Codex CLI / Claude Code
+
+**At parity:** multi-framework spawn + routing; file read/write; terminal exec;
+plan/reasoning/tool streaming; approval gates; real git-diff capture & surfacing
+(`coding-session-changes.ts`); token usage; orphaned-session recovery on restart;
+durable task store + task view; per-task threads on connectors.
+
+**Partial:** plan/todo events are emitted by OpenCode but not uniformly by
+Codex/Claude; diff surfacing truncates (20 files / 50 lines) with no inline
+per-line review UI; sub-agents run `--no-terminal` (event-driven, no interactive
+TUI — correct for orchestration, but differs from a human at the CLI).
+
+**Gaps:**
+1. **MCP forwarding** — ✅ implemented (opt-in). `acp-native-transport.ts`
+   forwards `ELIZA_ACP_MCP_SERVERS` (a JSON array of stdio/http MCP server
+   configs) into `session/new.mcpServers` via `parseAcpMcpServersEnv`, so
+   sub-agents get the parent's MCP tools (Codex / Claude-Code parity). Defaults
+   to `[]` (prior behavior) so spawning never regresses. Remaining: auto-inherit
+   the parent runtime's MCP set without explicit env config (needs a runtime
+   MCP-config surface, which doesn't exist yet).
+2. **Sub-agent nesting** (open) — no spawn-child API; a sub-agent cannot delegate
+   to its own sub-agents (single level of orchestration). Feature-level work.
+3. **Inline code-review surface** — diffs are captured but there's no structured
+   per-file/line review/approve UI in the task view.
+
+## 6. Open items checklist
+
+- [x] Interaction protocol (forms / choice + custom / secret / task) across app + TG + Discord
+- [x] Pick-an-option round-trip on both connectors; secret/OAuth DM link-out on both
+- [x] Per-task threads on TG + Discord (orchestrator-driven; both connectors now capable)
+- [x] Task view with sub-agent message room (OrchestratorWorkbench)
+- [x] Real interaction-widget + connector round-trip tests
+- [x] MCP server forwarding to sub-agents (opt-in via `ELIZA_ACP_MCP_SERVERS`)
+- [ ] Sub-agent nesting / delegation (gap #2 — feature-level)
+- [ ] Inline diff review UI in the task view (gap #3)
+- [ ] Live connector E2E (needs TG/Discord credentials) + orchestrator HTTP task-flow E2E
+- [ ] Optional: `outgoing_before_deliver` central interaction normalization hook
+
+See `@elizaos/core` `src/messaging/interactions/README.md` for the interaction
+protocol; this doc covers the orchestration + sub-agent layer.

package/docs/default-eliza-skills-and-agent-bridge-plan.md

@@ -7,7 +7,7 @@ Date: 2026-05-10
 Make Eliza's default task workers self-sufficient:
 
 - They should receive editable, repo-owned default skills for Eliza, elizaOS plugin/app development, Eliza Cloud APIs, and monetization.
-- Claude, Codex, OpenCode, Gemini, Aider, and other orchestrated workers should receive those defaults through the agent orchestrator.
+- Claude, Codex, and OpenCode workers should receive those defaults through the ACP agent orchestrator.
 - Applications should be able to override defaults without forking the shipped skill package.
 - Workers should be able to ask the running parent Eliza agent for context or actions that only the parent can perform.
 - Paid, private, or destructive operations should remain mediated by the parent agent and its confirmation flow.
@@ -39,10 +39,9 @@ The task agent infrastructure is in `plugins/plugin-agent-orchestrator`.
 
 Important surfaces:
 
-- `src/services/pty-service.ts` spawns agents, writes adapter memory files, injects parent runtime loopback context, and manages session lifecycle.
-- `src/actions/coding-task-handlers.ts` prepares `SKILLS.md`, recommends skills, spawns task sessions, and registers per-session skill allow-lists.
+- `src/services/acp-service.ts` spawns ACP agents, records session metadata, and manages session lifecycle.
+- `src/actions/tasks.ts` prepares ACP spawn/send/list/control requests through the single task-agent action surface.
 - `src/services/skill-manifest.ts` renders the task-local manifest and virtual broker skills.
-- `src/services/skill-callback-bridge.ts` listens for child output lines matching `USE_SKILL <slug> <json_args>` and routes them back to the parent runtime.
 - `src/services/skill-lifeops-context-broker.ts` already exposes task-scoped LifeOps context.
 
 ### Cloud and monetization
@@ -95,7 +94,7 @@ Sensitive broker access is session allow-listed. The orchestrator includes `pare
 
 ### Worker manifest
 
-`SKILLS.md` now tells workers to emit a standalone `USE_SKILL <slug> <json_args>` line. The orchestrator writes this manifest into the workspace and sets `ELIZA_SKILLS_MANIFEST`, so Codex/Claude/Gemini/Aider-style workers can discover skill protocol without hardcoding.
+`SKILLS.md` now tells workers to emit a standalone `USE_SKILL <slug> <json_args>` line. The orchestrator writes this manifest into the workspace and sets `ELIZA_SKILLS_MANIFEST`, so Codex/Claude/OpenCode workers can discover skill protocol without hardcoding.
 
 The injected parent runtime memory also now explains:
 
@@ -113,9 +112,6 @@ The orchestrator-managed gitignore block now includes common generated agent fil
 - `.claude/`
 - `AGENTS.md`
 - `.codex/`
-- `GEMINI.md`
-- `.gemini/`
-- `.aider*`
 - `.opencode/`
 - `SKILLS.md`
 
@@ -178,11 +174,11 @@ Review focus:
 
 - Type correctness around synthetic `Memory` construction and `messageService.handleMessage`.
 - Session allow-list behavior for virtual brokers.
-- Whether all spawned adapter types can see `SKILLS.md` and parent memory text.
+- Whether all ACP agent types can see `SKILLS.md` and parent memory text.
 - Whether tracked `AGENTS.md` repos need a safer memory-file strategy than writing in the workspace root.
-- Whether OpenCode should become a first-class adapter type instead of shell-compatible spawn.
+- Whether OpenCode's vendored ACP path has enough smoke coverage against Cerebras.
 
-Status: partially implemented. The first three are covered by code/tests; the last two remain follow-up design items.
+Status: partially implemented. The first three are covered by code/tests; live OpenCode/Cerebras validation remains credential-gated.
 
 ### Pass 5: Testing, Verification, Validation
 
@@ -197,8 +193,8 @@ Minimum local tests:
 Live validation:
 
 - Start a parent Eliza runtime with agent skills and orchestrator loaded.
-- Spawn Codex and Claude workers and verify they read `SKILLS.md`.
-- Spawn OpenCode using Eliza Cloud with Cerebras OpenAI `gpt-oss-120b` and verify it can emit `USE_SKILL parent-agent ...`.
+- Spawn Codex, Claude, and OpenCode workers and verify they read `SKILLS.md`.
+- Spawn OpenCode through ACP using the vendored OpenCode shim with Cerebras `gpt-oss-120b` and verify it can emit `USE_SKILL parent-agent ...`.
 - Simulate:
   - action listing
   - parent memory search
@@ -212,8 +208,6 @@ Status: local unit/type/skills tests are implemented and passing. Live OpenCode/
 
 ## Remaining Gaps
 
-- OpenCode is currently treated through shell-compatible spawn paths in parts of the orchestrator. It should become a first-class memory/config adapter if the project wants equivalent behavior to Claude/Codex/Gemini.
-- `PARALLAX_DEFAULT_AGENT_TYPE` fixed-default parsing still only accepts `claude`, `gemini`, `codex`, and `aider`. Routing can rank OpenCode, but fixed default should be extended after type/API review.
 - Writing adapter memory files named `AGENTS.md` can collide with repos that already track `AGENTS.md`. A safer strategy is needed for Codex memory injection in tracked-repo workspaces.
 - Live agent benchmarking against OpenCode + Eliza Cloud + Cerebras requires credentials and running infrastructure.
 - The parent-agent broker currently asks through the normal parent message pipeline. Direct action invocation APIs could be added later, but the message path is more flexible and preserves confirmation behavior.

package/docs/economics-goal-runbook.md

@@ -0,0 +1,140 @@
+# Economics `/goal` runbook — autonomous monetized-app loop
+
+How to drive (and what currently blocks) a `/goal` sub-agent that autonomously
+runs the monetized-app loop: create app → deploy container → enable monetization
+→ buy a domain → stay alive on earnings, with paid Cloud commands auto-authorized
+within a spend cap.
+
+## What already works (verified)
+
+- **Capped self-spend allowance.** `decideSpendAuthorization`
+  (`src/services/spend-allowance.ts`) gates each Cloud command by risk/cap, and
+  `runCloudCommand` (`src/services/parent-agent-broker.ts:1067`) emits the
+  structured `event: "spend_auto_authorized"` log when a self-spend command
+  auto-authorizes within `ELIZA_AGENT_SPEND_CAP_USD`. Confirmed by
+  `src/__tests__/parent-agent-broker.test.ts` › _capped self-spend allowance_
+  (4 cases pass: within-cap auto-authorizes, over-cap confirms, non-self-spend
+  mutating auto-authorizes).
+- **Economics capability profile.** `/economics` (or `/monetize`,
+  `/monetized-app`) in the composer sets `metadata.capabilityProfile = "economics"`
+  (`plugin-task-coordinator` composer directives → `createOrchestratorTask`), and
+  `spawnAgentForTask` reads `coerceGoalCapabilityProfile(task.metadata.capabilityProfile)`
+  and widens the goal fence via `ECONOMICS_GOAL_CAPABILITIES` (`goal-prompt.ts`).
+- **The Cloud loop itself.** `apps.create → monetization.update → domains.buy
+  (real credit debit) → earnings → survival economics` is exercised end-to-end
+  against the mock stack by
+  `packages/test/cloud-e2e/tests/monetized-app-loop.spec.ts`.
+
+## Runbook
+
+1. Boot a stubbed-but-real Cloud so paid commands succeed without real money:
+
+   ```bash
+   CLOUD_E2E=1 NODE_ENV=test bun run cloud:mock --reset
+   # note the printed "Ready on http://127.0.0.1:<apiPort>"
+   ```
+
+   `cloud:mock` opens its PGlite store as a single-writer file, so you cannot
+   seed an org/API key from a second process while it runs. To seed live (and to
+   give the broker a key the granular per-route permission gate accepts), boot
+   through the cloud-e2e stack fixture instead — it stands up a PGlite **TCP
+   bridge** + the same wrangler launcher, then `seedTestUser()` mints an org with
+   credits + an API key. Mint the key with `permissions: ["*"]` if you want the
+   actual `containers.create` / `domains.buy` cloud calls to succeed (the default
+   `read/write/admin` seed key still proves `spend_auto_authorized`, because that
+   log fires from the cap decision *before* the HTTP call — but the call itself
+   401s on routes that require granular scopes like `containers:write`).
+
+2. Point the broker at the mock and arm the spend cap (these resolve through
+   `config-env.ts`, so the eliza config `env` section or process env both work):
+
+   ```bash
+   ELIZA_CLOUD_BASE_URL=http://127.0.0.1:<apiPort>
+   ELIZAOS_CLOUD_API_KEY=<a seeded org API key>      # see cloud-e2e seedTestUser
+   ELIZA_AGENT_SPEND_CAP_USD=20
+   ELIZA_ACP_DEFAULT_AGENT=opencode                   # Cerebras auto-detected; or codex/claude with their keys
+   OPENCODE_DISABLE_AUTOUPDATE=1                       # opencode's network update check can blow the spawn timeout
+   ACPX_DEFAULT_TIMEOUT_MS=600000                      # first opencode init (compile + provider fetch) ~3-5min
+   ```
+
+3. Create an economics task — `/economics build and monetize a tiny app` in the
+   composer, or `POST /api/orchestrator` with
+   `metadata: { capabilityProfile: "economics" }`.
+
+4. The sub-agent loads the `build-monetized-app` skill and SKILLS.md and drives
+   the loop through the parent-agent broker. Watch the logs for
+   `event: "spend_auto_authorized"` on `containers.create` / `domains.buy` —
+   that line is the proof the agent spent within its cap without a human prompt.
+
+   - **Domains gotcha:** `domains.buy` (and `media.*`/`promote.*`) resolve to
+     unknown cost and stall on confirmation unless the agent first calls
+     `domains.check` and threads the quote into `params.spendEstimateUsd`.
+     `containers.create` has a built-in `$0.67/day` estimate, so it
+     auto-authorizes without a hint.
+   - **`containers.create` needs a `name`** in addition to `appId`/`image`, or
+     the cloud call 422s (the spend log still fires; the deploy record is not
+     created). A capable agent self-corrects via `list-cloud-commands`.
+
+## Sub-agent → broker dispatcher (now wired)
+
+`runCloudCommand` (the only emitter of `spend_auto_authorized`) is now reachable
+by a live agent. The three gaps the earlier draft of this runbook called out are
+closed:
+
+1. **Dispatch.** `SubAgentRouter.handleEvent` accumulates the child's streamed
+   `message` text and, when a complete `USE_SKILL parent-agent <json>` directive
+   appears, bridges it to `runParentAgentBroker({ runtime, sessionId, session,
+   args })` and streams `result.text` back via `acp.sendToSession`
+   (`src/services/parent-agent-dispatch.ts`). Detection is marker-guarded (it
+   only acts on text containing `USE_SKILL parent-agent`, which ordinary coding
+   tasks never emit) and capped by `ACPX_SUB_AGENT_ROUND_TRIP_CAP`.
+2. **Advertise.** `spawnAgentForTask` writes a `SKILLS.md` into the workdir for
+   `capabilityProfile === "economics"` tasks via `buildSkillsManifest(runtime, {
+   recommendedSlugs: ["build-monetized-app", "eliza-cloud"], virtualSkills:
+   [PARENT_AGENT_BROKER_MANIFEST_ENTRY] })`, so the child learns the `parent-agent`
+   slug and its arg contract.
+3. **Estimate.** The broker's unknown-cost stall now returns an *actionable*
+   instruction ("fetch a quote with `domains.check` and retry with
+   `params.spendEstimateUsd`") instead of a human-only yes/no, and the manifest
+   guidance advertises the same pattern — so an autonomous agent self-authorizes
+   `domains.buy` within the cap without a human turn.
+
+The directive parser and the broker→`sendToSession` bridge are unit-tested in
+`src/__tests__/parent-agent-dispatch.test.ts`; `spend_auto_authorized` itself
+stays covered by `parent-agent-broker.test.ts`.
+
+## Live verification (2026-06-06)
+
+The full loop was run end-to-end against `cloud:mock` with a real
+`opencode` ACP child on a Cerebras key (`gpt-oss-120b`) — no human in the loop:
+
+- The child read `SKILLS.md`, then drove `cloud.health → apps.create →
+  containers.create` entirely through `USE_SKILL parent-agent {…}` directives.
+  `apps.create` created a real app; `containers.create` self-authorized within
+  the cap and emitted, verbatim:
+  `event:"spend_auto_authorized" command:"containers.create" risk:"paid"
+  estimatedCostUsd:0.67 runningTotalUsd:0.67 capUsd:20 reason:"within-cap"`.
+  When the first `containers.create` 422'd (missing `name`), the child called
+  `list-cloud-commands`, corrected the params, and re-authorized — no human turn.
+- The `domains.buy` self-resolve path was verified at the broker level against
+  the same live mock: `domains.check` returned a `$14.95` quote, that price was
+  threaded into `params.spendEstimateUsd`, `domains.buy` emitted
+  `spend_auto_authorized` ($14.95 of the $20 cap), and the org credit balance
+  dropped **1000.00 → 985.05** — a real debit.
+
+Two defects the live run surfaced (both fixed):
+
+1. **Windows env forwarding (`acp-service.ts`).** `shouldForwardEnv` matched
+   `PATH` case-sensitively, but the repo runtime is Bun and Bun-on-Windows
+   reports the key as `Path` — so ACP sub-agents spawned with NO `PATH` and the
+   opencode shim died with `'bun' is not recognized`. Now matched
+   case-insensitively (+ Windows system vars), with the path key canonicalized
+   to `PATH` in `buildEnv`.
+2. **Mid-turn reply delivery (`parent-agent-dispatch.ts`).** A child emits its
+   directive *mid-turn* and ends the turn awaiting the reply; delivering the
+   reply is a new prompt, which the transport rejects ("session is already
+   busy") until the turn finishes. The old code dropped the reply, stalling the
+   loop on the first directive. Delivery now retries until the session goes idle.
+
+See `default-eliza-skills-and-agent-bridge-plan.md` for the broader bridge design;
+this runbook is the economics-specific slice.