@elizaos/plugin-agent-orchestrator 2.0.3-beta.2 → 2.0.3-beta.3

package/dist/node/src/services/active-session-forward.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Mid-task message forwarding for live sub-agents.
+ *
+ * When a user posts into a room that has a live sub-agent session bound to it,
+ * this handler decides — via {@link decideInterruption} — whether to deliver the
+ * message now, queue it until the current turn ends, interrupt the turn, or
+ * ignore it (ambient chatter). Extracted from the plugin `init` closure so the
+ * decision→action wiring is unit-testable in isolation (see
+ * `active-session-forward.test.ts`).
+ */
+import type { IAgentRuntime, Memory } from "@elizaos/core";
+import type { SubAgentInbox } from "./sub-agent-inbox.js";
+export declare const INTERNAL_FORWARD_SKIP_SOURCES: Set<string>;
+/**
+ * A session is "busy" (not safe to prompt now) whenever it is neither a
+ * terminal status nor `ready`. This covers `busy`, `tool_running` (the dominant
+ * mid-turn state on the native transport), `running`, `blocked`, and
+ * `authenticating` — for all of these `acp.sendPrompt` would throw or be
+ * inappropriate, so the message must queue and flush when the session returns
+ * to `ready`. Only `ready` is promptable.
+ */
+export declare function isSessionBusy(status: string): boolean;
+/**
+ * Build the MESSAGE_RECEIVED handler that forwards mid-task user messages to the
+ * live sub-agent bound to the message's room. Bind is on (source, roomId) — no
+ * Discord-thread dependency, so plain SMS/WhatsApp follow-ups work too.
+ */
+export declare function createActiveSessionForwardHandler(runtime: IAgentRuntime, subAgentInbox: SubAgentInbox): (payload: {
+    message: Memory;
+}) => Promise<void>;
+//# sourceMappingURL=active-session-forward.d.ts.map

package/dist/node/src/services/active-session-forward.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"active-session-forward.d.ts","sourceRoot":"","sources":["../../../../src/services/active-session-forward.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAG3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAO1D,eAAO,MAAM,6BAA6B,aAIxC,CAAC;AAEH;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAErD;AAID;;;;GAIG;AACH,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,aAAa,EACtB,aAAa,EAAE,aAAa,GAC3B,CAAC,OAAO,EAAE;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAoJjD"}

package/dist/node/src/services/agent-name-assignment.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Sub-agent name assignment.
+ *
+ * Every spawned sub-agent is given a real, distinct person-name — the way the
+ * main agent is named — so an operator can tell workers apart and the agent
+ * knows its own identity (the name is woven into the goal prompt by
+ * {@link buildGoalPrompt}). This is the single place that decides that name, so
+ * the orchestrator-task spawn path and the direct `/api/coding-agents/spawn`
+ * route stay consistent.
+ *
+ * The pool mirrors `AGENT_NAME_POOL` in `@elizaos/agent`'s first-run flow, but
+ * is owned locally: this plugin depends only on `@elizaos/core`, and
+ * `@elizaos/agent` already depends on this plugin, so importing the agent
+ * package here would close a dependency cycle and tie sub-agent naming to the
+ * agent package's build artifact. The pool is pure, dependency-free data, so a
+ * local copy is the correct seam.
+ *
+ * Precedence:
+ *  1. An explicit, human-provided label always wins — never overwrite a user's
+ *     deliberate choice.
+ *  2. Otherwise assign a pooled person-name, unique among the names already in
+ *     use by live sibling sessions and distinct from the running agent's own
+ *     name, so a sub-agent is never confused with the orchestrator.
+ *
+ * @module services/agent-name-assignment
+ */
+/**
+ * Pick a pooled name not present in `exclude` (case-insensitive). When every
+ * pooled name is taken the pool is exhausted, so a numeric suffix is appended to
+ * the first pooled name — an explicit, intended fallback that guarantees a
+ * non-empty, distinct result rather than crashing or returning "".
+ */
+export declare function pickSubAgentName(exclude?: readonly string[]): string;
+export interface AssignAgentNameInput {
+    /** A human-provided label (e.g. the "Add agent" form field). When present and
+     * non-empty it is kept verbatim. */
+    explicitLabel?: string;
+    /** Names already taken by live sibling sessions on the same task. */
+    activeNames: readonly string[];
+    /** The running (parent) agent's name, excluded so a worker is never confused
+     * with the orchestrator. */
+    mainAgentName?: string;
+}
+/**
+ * Resolve the final name for a sub-agent at spawn time. Used both as the
+ * session `label` and as the `agentName` passed into the goal prompt, so the
+ * displayed name and the identity the agent is told are always the same.
+ */
+export declare function assignAgentName(input: AssignAgentNameInput): string;
+//# sourceMappingURL=agent-name-assignment.d.ts.map

package/dist/node/src/services/agent-name-assignment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-name-assignment.d.ts","sourceRoot":"","sources":["../../../../src/services/agent-name-assignment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AA8DH;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,SAAS,MAAM,EAAO,GAAG,MAAM,CAiBxE;AAED,MAAM,WAAW,oBAAoB;IACnC;wCACoC;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B;gCAC4B;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,MAAM,CAYnE"}

package/dist/node/src/services/ansi-utils.d.ts

@@ -0,0 +1,64 @@
+/**
+ * ANSI/terminal utility functions for processing ACP CLI output.
+ *
+ * Pure functions — no state, no dependencies beyond the standard library.
+ *
+ * @module services/ansi-utils
+ */
+/**
+ * Strip ANSI escape sequences from raw terminal output for readable text.
+ * Replaces cursor-forward codes with spaces (TUI uses these instead of actual spaces).
+ */
+export declare function stripAnsi(raw: string): string;
+export declare function formatMarkdownTablesForChat(text: string): string;
+export declare function closeUnbalancedMarkdownFences(text: string): string;
+/**
+ * Clean terminal output for display in chat messages.
+ *
+ * Goes beyond {@link stripAnsi} by also removing:
+ * - Unicode spinner/box-drawing/decorative characters from CLI TUIs
+ * - Lines that are only loading/thinking status text
+ * - Spinner status bar metadata (token counts, timing)
+ * - Consecutive blank lines (collapsed to one)
+ */
+export declare function cleanForChat(raw: string): string;
+/**
+ * Failover prompts need stricter transcript sanitization than chat messages.
+ * The replacement agent already gets the workspace path and failure reason
+ * separately, so Claude/Codex trust screens, onboarding banners, and echoed
+ * workspace selectors should be dropped here instead of being forwarded.
+ */
+export declare function cleanForFailoverContext(raw: string, workdir?: string): string;
+/**
+ * Extract meaningful artifacts (PR URLs, commit hashes, key results) from raw
+ * terminal output.  Returns a compact summary suitable for chat messages,
+ * without dumping raw TUI output.
+ */
+export declare function extractCompletionSummary(raw: string): string;
+export declare function summarizeUserFacingTurnOutput(raw: string): string;
+/**
+ * Extract a dev server URL from recent terminal output, if present.
+ *
+ * Looks for common patterns like:
+ *   - http://localhost:3000
+ *   - http://127.0.0.1:8080
+ *   - http://0.0.0.0:5173
+ *   - https://localhost:4200
+ *
+ * Returns the first match, or null if no dev server URL is found.
+ */
+export declare function extractDevServerUrl(raw: string): string | null;
+/**
+ * Capture the agent's output since the last task was sent, cleaned for chat display.
+ * Returns readable text with TUI noise removed, or empty string if no marker exists.
+ *
+ * Mutates `markers` by deleting the entry for `sessionId` after capture.
+ */
+export declare function captureTaskResponse(sessionId: string, buffers: Map<string, string[]>, markers: Map<string, number>): string;
+/**
+ * Peek at the current task response without consuming the marker.
+ * Useful for state reconciliation paths that need to inspect a response
+ * before deciding whether to emit a synthetic completion event.
+ */
+export declare function peekTaskResponse(sessionId: string, buffers: Map<string, string[]>, markers: Map<string, number>): string;
+//# sourceMappingURL=ansi-utils.d.ts.map

package/dist/node/src/services/ansi-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ansi-utils.d.ts","sourceRoot":"","sources":["../../../../src/services/ansi-utils.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAwCH;;;GAGG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE7C;AAkOD,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CA+BhE;AAoPD,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CA8DlE;AAqDD;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAyBhD;AAgCD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAY7E;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CA6D5D;AAED,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CA0CjE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAO9D;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAC9B,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAC3B,MAAM,CASR;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAC9B,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAC3B,MAAM,CAKR"}

package/dist/node/src/services/app-deploy-guidance.d.ts

@@ -0,0 +1,52 @@
+/**
+ * App-deployment guidance for spawned coding sub-agents.
+ *
+ * When a sub-agent is asked to build an app / website, the planner-level
+ * app-build contract (in the parent agent's system prompt) does not survive the
+ * terse spawn task. Without it the sub-agent just writes local files that are
+ * never served, so the user gets "no live URL". This module re-injects a
+ * deployment contract into the sub-agent's initial task at the spawn chokepoint
+ * so the result is actually hosted and a verified URL is reported.
+ *
+ * Default target is **Eliza Cloud** (the productized path for every user).
+ * Operators can opt into a personal **agent-home** static host via env — that
+ * is gated so other users never see it.
+ *
+ * @module services/app-deploy-guidance
+ */
+import { type ViewPluginDeployPromptOptions } from "./view-deploy-guidance.js";
+/**
+ * Whether a task builds a HOSTED web surface that should get the deploy
+ * contract. Uses the narrow APP_DEPLOY_TASK_RE — a CLI tool / library / doc
+ * page must NOT be told to deploy and report a live URL.
+ */
+export declare function isAppBuildTask(taskText: string | undefined | null): boolean;
+export declare function isViewPluginTask(taskText: string | undefined | null): boolean;
+export type AppDeployTarget = "eliza-cloud" | "cloud" | "agent-home";
+export interface AppDeployConfig {
+    target: AppDeployTarget;
+    /** agent-home: absolute dir whose `<slug>/` subdirs are served as apps. */
+    agentHomeAppsDir?: string;
+    /** agent-home: public base URL; apps resolve at `<baseUrl>/apps/<slug>/`. */
+    agentHomeBaseUrl?: string;
+}
+/**
+ * Resolve the deploy target from env. agent-home requires BOTH an apps dir and
+ * a base URL to be configured; otherwise we fall back to Eliza Cloud so a
+ * half-configured operator override can never strand a normal user.
+ */
+export declare function resolveAppDeployConfig(): AppDeployConfig;
+/**
+ * Cloud-vs-local-sandbox contract for a view/plugin task (#8918). A view-plugin
+ * follows the configured target: Eliza Cloud gets the full publish/register
+ * contract, while non-cloud targets stay local-sandbox only.
+ */
+export declare function viewPluginGuidance(config?: AppDeployConfig, options?: ViewPluginDeployPromptOptions): string;
+/** Build the deploy-guidance block for the configured target. */
+export declare function buildAppDeployGuidance(config?: AppDeployConfig): string;
+/**
+ * Append the deploy contract to an app-build task; pass non-app tasks through
+ * unchanged. Idempotent — skips if the block is already present.
+ */
+export declare function augmentTaskWithDeployGuidance(task: string, config?: AppDeployConfig): string;
+//# sourceMappingURL=app-deploy-guidance.d.ts.map

package/dist/node/src/services/app-deploy-guidance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-deploy-guidance.d.ts","sourceRoot":"","sources":["../../../../src/services/app-deploy-guidance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,EAGL,KAAK,6BAA6B,EACnC,MAAM,2BAA2B,CAAC;AAEnC;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAK3E;AAUD,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAK7E;AAED,MAAM,MAAM,eAAe,GAAG,aAAa,GAAG,OAAO,GAAG,YAAY,CAAC;AAErE,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,eAAe,CAAC;IACxB,2EAA2E;IAC3E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,eAAe,CAkBxD;AA2BD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,CAAC,EAAE,eAAe,EACxB,OAAO,CAAC,EAAE,6BAA6B,GACtC,MAAM,CAKR;AAED,iEAAiE;AACjE,wBAAgB,sBAAsB,CAAC,MAAM,CAAC,EAAE,eAAe,GAAG,MAAM,CAKvE;AAcD;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,eAAe,GACvB,MAAM,CAuBR"}

package/dist/node/src/services/audit.d.ts

@@ -0,0 +1,18 @@
+import type { IAgentRuntime } from "@elizaos/core";
+export declare const TASK_AUDIT_EVENT = "TASK_AUDIT";
+export type TaskAuditAction = "spawn_agent" | "send_agent" | "stop_agent" | "cancel_agent";
+export interface TaskAuditPayload {
+    action: TaskAuditAction;
+    outcome: "allowed" | "forbidden" | "error";
+    entityId?: string;
+    sessionId?: string;
+    agentType?: string;
+    workdir?: string;
+    source?: string;
+    reason?: string;
+    ts: string;
+}
+export declare function emitTaskAudit(runtime: IAgentRuntime, payload: Omit<TaskAuditPayload, "ts">): Promise<void>;
+export declare function defaultAuditLogPath(): string;
+export declare function appendAuditLine(path: string, payload: TaskAuditPayload): Promise<void>;
+//# sourceMappingURL=audit.d.ts.map

package/dist/node/src/services/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../../../src/services/audit.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AASnD,eAAO,MAAM,gBAAgB,eAAe,CAAC;AAE7C,MAAM,MAAM,eAAe,GACvB,aAAa,GACb,YAAY,GACZ,YAAY,GACZ,cAAc,CAAC;AAEnB,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,SAAS,GAAG,WAAW,GAAG,OAAO,CAAC;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,wBAAsB,aAAa,CACjC,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,GACpC,OAAO,CAAC,IAAI,CAAC,CAcf;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,IAAI,CAAC,CAIf"}

package/dist/node/src/services/coding-account-selection.d.ts

@@ -0,0 +1,79 @@
+/**
+ * Orchestrator-side reader for the coding-agent account-selector bridge.
+ *
+ * The bridge itself lives in `@elizaos/app-core` (it owns the `AccountPool` and
+ * the credential store). This plugin depends only on `@elizaos/core`, so — like
+ * the parent-context bridge — it reads the contract off a `globalThis` symbol
+ * rather than importing app-core. When no pool/accounts are configured the
+ * bridge is absent and every helper here no-ops, leaving the single-account
+ * behavior untouched.
+ */
+export type CodingAccountStrategy = "priority" | "round-robin" | "least-used" | "quota-aware";
+export interface CodingAccountUsage {
+    sessionPct?: number;
+    weeklyPct?: number;
+    resetsAt?: number;
+    refreshedAt: number;
+}
+/** A selected account plus the env vars the coding subprocess needs. */
+export interface CodingAccountSelection {
+    providerId: string;
+    accountId: string;
+    label: string;
+    source: "oauth" | "api-key";
+    strategy: string;
+    usage?: CodingAccountUsage;
+    /** Secrets — injected into the spawn env, never persisted to the task store. */
+    envPatch: Record<string, string>;
+}
+export interface CodingProviderAvailability {
+    providerId: string;
+    total: number;
+    enabled: number;
+    healthy: number;
+}
+interface CodingAgentSelectorBridge {
+    describe(): Record<string, CodingProviderAvailability[]>;
+    select(agentType: string, opts?: {
+        sessionKey?: string;
+        strategy?: CodingAccountStrategy;
+        exclude?: string[];
+    }): Promise<CodingAccountSelection | null>;
+    markRateLimited(providerId: string, accountId: string, untilMs: number, detail?: string): Promise<void>;
+    markNeedsReauth(providerId: string, accountId: string, detail?: string): Promise<void>;
+    recordUsage(providerId: string, accountId: string, result: {
+        tokens?: number;
+        ok: boolean;
+        model?: string;
+        latencyMs?: number;
+    }): Promise<void>;
+}
+/** Non-secret account descriptor stamped onto the session record. */
+export interface CodingAccountMeta {
+    providerId: string;
+    accountId: string;
+    label: string;
+    source: string;
+    strategy: string;
+}
+export interface ResolvedCodingAccount {
+    selection: CodingAccountSelection;
+    meta: CodingAccountMeta;
+}
+export declare function isMultiAccountAgentType(agentType: string): boolean;
+export declare function getCodingAccountBridge(): CodingAgentSelectorBridge | null;
+export declare function resolveCodingAccountStrategy(raw: string | undefined): CodingAccountStrategy | undefined;
+/**
+ * Pick an account for a coding sub-agent. Returns null (single-account
+ * fallback) when the bridge is absent, the agent type is not multi-account, or
+ * no eligible account exists. Never throws.
+ */
+export declare function selectCodingAccount(agentType: string, opts?: {
+    sessionKey?: string;
+    strategy?: CodingAccountStrategy;
+    exclude?: string[];
+}): Promise<ResolvedCodingAccount | null>;
+/** Read the account descriptor previously stamped onto a session's metadata. */
+export declare function accountMetaFromSessionMetadata(metadata: Record<string, unknown> | undefined): CodingAccountMeta | null;
+export {};
+//# sourceMappingURL=coding-account-selection.d.ts.map

package/dist/node/src/services/coding-account-selection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coding-account-selection.d.ts","sourceRoot":"","sources":["../../../../src/services/coding-account-selection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,MAAM,MAAM,qBAAqB,GAC7B,UAAU,GACV,aAAa,GACb,YAAY,GACZ,aAAa,CAAC;AAElB,MAAM,WAAW,kBAAkB;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,wEAAwE;AACxE,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,GAAG,SAAS,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,gFAAgF;IAChF,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,yBAAyB;IACjC,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,0BAA0B,EAAE,CAAC,CAAC;IACzD,MAAM,CACJ,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE;QACL,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,qBAAqB,CAAC;QACjC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;KACpB,GACA,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;IAC1C,eAAe,CACb,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,eAAe,CACb,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,WAAW,CACT,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE;QACN,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,EAAE,EAAE,OAAO,CAAC;QACZ,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GACA,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,qEAAqE;AACrE,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,sBAAsB,CAAC;IAClC,IAAI,EAAE,iBAAiB,CAAC;CACzB;AAYD,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAElE;AAED,wBAAgB,sBAAsB,IAAI,yBAAyB,GAAG,IAAI,CAMzE;AAED,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,MAAM,GAAG,SAAS,GACtB,qBAAqB,GAAG,SAAS,CAWnC;AAYD;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE;IACJ,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACf,GACL,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAYvC;AAED,gFAAgF;AAChF,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAC5C,iBAAiB,GAAG,IAAI,CAc1B"}

package/dist/node/src/services/completion-envelope.d.ts

@@ -0,0 +1,63 @@
+/**
+ * CompletionEnvelope — a structured, machine-checkable contract a sub-agent
+ * returns when it claims a task is done (#8895, EPIC #8884).
+ *
+ * Today sub-agents claim completion in free-form prose, so grilling is
+ * prompt-based, not contract-based. This module defines the envelope schema,
+ * the instruction injected into the spawn prompt, and a pure parser/validator.
+ * The completion path runs structural validation BEFORE the LLM judge: a present
+ * but malformed envelope is auto-blocked with a targeted re-prompt, while an
+ * ABSENT envelope falls back to the existing heuristic path (back-compat).
+ */
+/** One command the sub-agent ran to verify its work. */
+export interface EnvelopeTestResult {
+    command: string;
+    exitCode: number;
+    summary: string;
+}
+/** Per-criterion self-assessment with the evidence backing it. */
+export interface EnvelopeCriterionStatus {
+    criterion: string;
+    met: boolean;
+    evidence: string;
+}
+/** The structured final report a sub-agent returns on completion. */
+export interface CompletionEnvelope {
+    diffSummary: string;
+    filesChanged: string[];
+    testResults: EnvelopeTestResult[];
+    screenshotPaths: string[];
+    trajectoryPath?: string;
+    acceptanceCriteriaStatus: EnvelopeCriterionStatus[];
+    residualRisks: string[];
+}
+/**
+ * The instruction appended to the spawn prompt. Asks the agent to END its final
+ * message with a fenced ```json block matching the schema, in ADDITION to its
+ * prose — so weak adapters that ignore it still produce a usable prose
+ * completion (the parser treats a missing block as "fall back to heuristic").
+ */
+export declare const COMPLETION_ENVELOPE_INSTRUCTION: string;
+/** Result of attempting to read an envelope out of a completion message. */
+export type CompletionEnvelopeParse = {
+    present: false;
+} | {
+    present: true;
+    ok: true;
+    envelope: CompletionEnvelope;
+} | {
+    present: true;
+    ok: false;
+    errors: string[];
+};
+/**
+ * Pure: detect + validate a CompletionEnvelope in a sub-agent's final message.
+ * Absent → `{present:false}` (caller uses the heuristic path). Present but
+ * invalid → `{present:true, ok:false, errors}` (caller re-prompts/blocks).
+ */
+export declare function parseCompletionEnvelope(text: string): CompletionEnvelopeParse;
+/** Compact human summary of a validated envelope, for the verifier/log. */
+export declare function summarizeEnvelope(env: CompletionEnvelope): string;
+/** A targeted re-prompt for a present-but-malformed envelope. */
+export declare function envelopeCorrection(errors: string[]): string;
+//# sourceMappingURL=completion-envelope.d.ts.map

package/dist/node/src/services/completion-envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"completion-envelope.d.ts","sourceRoot":"","sources":["../../../../src/services/completion-envelope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,wDAAwD;AACxD,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,kEAAkE;AAClE,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,OAAO,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,qEAAqE;AACrE,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAClC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wBAAwB,EAAE,uBAAuB,EAAE,CAAC;IACpD,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B,QA0BhC,CAAC;AAEb,4EAA4E;AAC5E,MAAM,MAAM,uBAAuB,GAC/B;IAAE,OAAO,EAAE,KAAK,CAAA;CAAE,GAClB;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,kBAAkB,CAAA;CAAE,GACzD;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAyBnD;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,uBAAuB,CAmG7E;AAED,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,kBAAkB,GAAG,MAAM,CAmBjE;AAED,iEAAiE;AACjE,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAM3D"}

package/dist/node/src/services/completion-evidence.d.ts

@@ -0,0 +1,144 @@
+/**
+ * Completion-evidence assembly for the auto goal-verifier.
+ *
+ * The auto goal-verifier ("grill until truly done") historically judged a
+ * completed sub-agent task against its acceptance criteria using only the thin
+ * `task_complete` event-summary string. That makes it trivially foolable: a
+ * sub-agent that *claims* success but pasted no proof reads identically to one
+ * that actually shipped.
+ *
+ * This module turns the rich signals the orchestrator ALREADY has into a single
+ * clearly-SECTIONED evidence string the verifier can grill against:
+ *
+ *   - **CHANGESET** — the real git diffstat + changed files + a capped diff,
+ *     captured from git at `task_complete` (same {@link WorkspaceChangeSet} the
+ *     CODING_SESSION_CHANGES provider renders), so "I changed X" is checkable.
+ *   - **DELIVERABLE** — the sub-agent's captured deliverable (printed/tool
+ *     output the router extracted) and its final reply text.
+ *   - **VERIFIED URLS** — URLs the router probed at completion, flagged
+ *     loopback-vs-public so the verifier can reject localhost-only "deploys".
+ *   - **TEST / BUILD / TYPECHECK OUTPUT** — lines mined from the session's
+ *     recorded events/messages that look like build/test/typecheck output, so a
+ *     real green run is distinguishable from a bare claim.
+ *   - **ARTIFACTS** — references to screenshot/trajectory artifacts found on the
+ *     task/session, so UI and agent-behavior criteria have something to cite.
+ *
+ * Pure (no IO): the caller gathers the inputs (durable store + live ACP session
+ * metadata) and hands them in. The whole assembly is null-safe and size-capped
+ * so it can be fed straight into the verifier without blowing the prompt
+ * budget.
+ *
+ * @module services/completion-evidence
+ */
+import type { WorkspaceChangeSet } from "./workspace-diff.js";
+/** One recorded signal (a durable event or sub-agent message) the assembler
+ *  mines for test/build/typecheck output. Kept minimal so the service can map
+ *  its store rows in without coupling this module to the full record types. */
+export interface EvidenceSignal {
+    /** Free-text body to scan (event summary, message content, …). */
+    text: string;
+    /** Optional label for the section header (e.g. the event type). */
+    source?: string;
+}
+export interface CompletionEvidenceInput {
+    /** The `task_complete` response summary — the original thin evidence; kept as
+     *  the fallback and as the sub-agent's final reply when nothing richer. */
+    fallbackSummary: string;
+    /** Real git change set captured at completion, if any. */
+    changeSet?: WorkspaceChangeSet;
+    /** Captured deliverable (router-extracted printed/tool output), if any. */
+    deliverable?: string;
+    /** The sub-agent's final reply text, if distinct from the summary. */
+    finalReply?: string;
+    /** URLs the router probed/verified at completion. */
+    verifiedUrls?: readonly string[];
+    /** Recorded events/messages to mine for build/test/typecheck output. */
+    signals?: readonly EvidenceSignal[];
+    /** Artifact references (screenshots, trajectories) found on task/session. */
+    artifacts?: readonly EvidenceArtifactRef[];
+}
+export interface EvidenceArtifactRef {
+    artifactType: string;
+    title: string;
+    /** A path or uri — whichever locates the artifact for the verifier. */
+    ref?: string;
+}
+/**
+ * Captured stdout from the sub-agent's tool runs, split by tool class. Each
+ * field is the raw (already-bounded) output of a `vitest`/`tsc`/`biome`-style
+ * run mined from the recorded ACP tool events, so the verifier can read the
+ * actual run result rather than the agent's narration of it. `raw` is a
+ * catch-all for tool output that matched a build/test marker but couldn't be
+ * confidently classed as test/build/lint.
+ */
+export interface ToolOutputEvidence {
+    test?: string;
+    build?: string;
+    lint?: string;
+    raw?: string;
+}
+/**
+ * The TYPED completion-evidence bundle (issue #8894). This is the formalized,
+ * collect-once shape the orchestrator assembles BEFORE verification: every
+ * evidence source resolves to a named field instead of being threaded through
+ * the prompt as loose strings. {@link buildCompletionEvidenceString} serializes
+ * it into the same clearly-sectioned string the verifier already grills
+ * against, emitting exactly one section per POPULATED field and omitting empty
+ * ones.
+ *
+ * `verifiedUrls` and `screenshots` are required (default to `[]`); everything
+ * else is optional and contributes a section only when present.
+ */
+export interface CompletionEvidenceBundle {
+    /** The sub-agent's reported result — the fallback/final-reply text. */
+    summary: string;
+    /** Human-readable git diff summary (diffstat + changed files + capped diff)
+     *  captured at completion, if any. */
+    diffSummary?: string;
+    /** Captured tool stdout split by class (test/build/lint) plus a raw bucket. */
+    toolOutput?: ToolOutputEvidence;
+    /** URLs the router probed/verified at completion (loopback-flagged on render). */
+    verifiedUrls: string[];
+    /** Screenshot artifact paths found on the task/session. */
+    screenshots: string[];
+    /** Path to the persisted trajectory JSONL artifact for this completion. */
+    trajectoryPath?: string;
+}
+/**
+ * Classify the build/test/typecheck/lint output mined from recorded tool
+ * signals into a {@link ToolOutputEvidence} bucket per tool class, so the
+ * verifier can read the actual test/build stdout under named headers. A signal
+ * is routed by the markers in its body (and source label): test markers →
+ * `test`, build/typecheck → `build`, lint → `lint`; build-test-looking lines
+ * that match none fall into `raw`. Returns undefined when nothing matched.
+ */
+export declare function classifyToolOutput(signals: readonly EvidenceSignal[]): ToolOutputEvidence | undefined;
+/**
+ * Render the human-readable body of a {@link WorkspaceChangeSet} (diffstat +
+ * changed files + a capped diff) WITHOUT the section header. Used as the
+ * `diffSummary` field of a {@link CompletionEvidenceBundle}, so the bundle and
+ * the legacy assembler produce byte-identical changeset text.
+ */
+export declare function renderChangeSetBody(changeSet: WorkspaceChangeSet): string;
+/**
+ * Serialize the TYPED {@link CompletionEvidenceBundle} into the clearly-
+ * sectioned evidence string the verifier grills against — one section per
+ * POPULATED field, empty fields omitted. When nothing richer than the bare
+ * summary is present, returns the bare summary (prior thin-completion
+ * behavior). This is the issue #8894 entry point; the legacy signal-mining
+ * assembler lives in {@link buildEvidenceStringFromInput} and remains exported.
+ */
+export declare function buildCompletionEvidenceString(bundle: CompletionEvidenceBundle): string;
+/**
+ * Assemble the sectioned completion-evidence string from the loose signals the
+ * orchestrator already has. Always returns a non-empty string: when nothing
+ * richer than the fallback summary is available it still returns the summary,
+ * so the verifier behaves exactly as before for thin completions.
+ *
+ * Retained for backward compatibility and as the signal-mining helper the
+ * bundle collector reuses to extract build/test lines; new callers should
+ * assemble a {@link CompletionEvidenceBundle} and use
+ * {@link buildCompletionEvidenceString}.
+ */
+export declare function buildEvidenceStringFromInput(input: CompletionEvidenceInput): string;
+//# sourceMappingURL=completion-evidence.d.ts.map

package/dist/node/src/services/completion-evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"completion-evidence.d.ts","sourceRoot":"","sources":["../../../../src/services/completion-evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE9D;;+EAE+E;AAC/E,MAAM,WAAW,cAAc;IAC7B,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB;IACtC;+EAC2E;IAC3E,eAAe,EAAE,MAAM,CAAC;IACxB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,kBAAkB,CAAC;IAC/B,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,wEAAwE;IACxE,OAAO,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IACpC,6EAA6E;IAC7E,SAAS,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,wBAAwB;IACvC,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB;0CACsC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+EAA+E;IAC/E,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC,kFAAkF;IAClF,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,2DAA2D;IAC3D,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,2EAA2E;IAC3E,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAiED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,SAAS,cAAc,EAAE,GACjC,kBAAkB,GAAG,SAAS,CAyBhC;AAsBD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,kBAAkB,GAAG,MAAM,CAezE;AA8DD;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,wBAAwB,GAC/B,MAAM,CAyDR;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,uBAAuB,GAC7B,MAAM,CAmER"}

package/dist/node/src/services/config-env.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Read settings from the eliza/eliza config file's env section.
+ *
+ * runtime.getSetting() checks character.settings but NOT the config's env
+ * section which is where the UI writes settings. This reads the config
+ * file directly so settings take effect without restart.
+ *
+ * @module services/config-env
+ */
+import type { AcpMcpServerConfig } from "./acp-native-transport.js";
+export declare function readConfigEnvKey(key: string): string | undefined;
+/** Read a key from the cloud section of the config (e.g. "apiKey"). */
+export declare function readConfigCloudKey(key: string): string | undefined;
+/**
+ * Read the runtime's configured MCP servers from the config's `mcp.servers`
+ * object — the same map the dashboard `/api/config` route validates and
+ * persists — and convert it to the ACP `session/new.mcpServers` array shape, so
+ * spawned sub-agents automatically inherit the parent's MCP tools (Codex /
+ * Claude-Code parity) without the operator duplicating them in
+ * `ELIZA_ACP_MCP_SERVERS`.
+ *
+ * Returns undefined when nothing is configured (so the env-var fallback in the
+ * transport still applies) and silently drops malformed entries — it must never
+ * throw, since it runs on the sub-agent spawn path.
+ */
+export declare function readConfigMcpServers(): AcpMcpServerConfig[] | undefined;
+//# sourceMappingURL=config-env.d.ts.map

package/dist/node/src/services/config-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-env.d.ts","sourceRoot":"","sources":["../../../../src/services/config-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAoBpE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAahE;AAED,uEAAuE;AACvE,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAIlE;AAeD;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,IAAI,kBAAkB,EAAE,GAAG,SAAS,CAoCvE"}

package/dist/node/src/services/goal-contract.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Default acceptance-criteria generation (#8896).
+ *
+ * When a task is created with no acceptance criteria, automatic verification
+ * never fires (`autoVerifyCompletion` returns early on an empty list), so a
+ * sub-agent's "done" is taken on faith. This module supplies sensible,
+ * task-kind-specific default criteria so verification always has something
+ * concrete to check.
+ *
+ * Deterministic + template-based on purpose: defaults must be stable, instant,
+ * and dependency-free (no model call on the task-creation hot path).
+ */
+/**
+ * Whether to auto-fill default acceptance criteria for criteria-less tasks.
+ * On by default; set `ELIZA_REQUIRE_GOAL_CONTRACT=0` to opt out.
+ */
+export declare function shouldRequireGoalContract(): boolean;
+/**
+ * Build default acceptance criteria for a task that was created without any.
+ * Returns the base coding criteria plus any kind-specific extras. The `goal`
+ * is currently unused by the templates but kept in the signature so a future
+ * model-assisted variant can specialize without a call-site change.
+ */
+export declare function buildDefaultAcceptanceCriteria(_goal: string, kind?: string): string[];
+//# sourceMappingURL=goal-contract.d.ts.map

package/dist/node/src/services/goal-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"goal-contract.d.ts","sourceRoot":"","sources":["../../../../src/services/goal-contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;GAGG;AACH,wBAAgB,yBAAyB,IAAI,OAAO,CAEnD;AAoBD;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,MAAM,GACZ,MAAM,EAAE,CAGV"}