@elizaos/ui 2.0.0-alpha.526 → 2.0.0-alpha.528

package/packages/agent/src/auth/account-storage.js

@@ -13,6 +13,7 @@ import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { logger } from "@elizaos/core";
+import { writeJsonAtomicSync } from "../utils/atomic-json.js";
 function authRoot() {
     return path.join(process.env.ELIZA_HOME || path.join(os.homedir(), ".eliza"), "auth");
 }
@@ -31,18 +32,6 @@ function ensureProviderDir(provider) {
         fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
     }
 }
-function atomicWriteJsonSync(filePath, value) {
-    const dir = path.dirname(filePath);
-    if (!fs.existsSync(dir)) {
-        fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
-    }
-    const tmp = `${filePath}.tmp`;
-    fs.writeFileSync(tmp, JSON.stringify(value, null, 2), {
-        encoding: "utf-8",
-        mode: 0o600,
-    });
-    fs.renameSync(tmp, filePath);
-}
 function isAccountCredentialRecord(value) {
     if (!value || typeof value !== "object")
         return false;
@@ -99,7 +88,7 @@ function migrateProvider(provider) {
         updatedAt: typeof parsed.updatedAt === "number" ? parsed.updatedAt : now,
     };
     ensureProviderDir(provider);
-    atomicWriteJsonSync(accountFile(provider, "default"), record);
+    writeJsonAtomicSync(accountFile(provider, "default"), record);
     // Atomic-ish delete: rename to a side path first so a concurrent
     // reader sees either the legacy file or nothing — then unlink.
     const removed = `${legacy}.migrated-${now}`;
@@ -211,7 +200,7 @@ export function saveAccount(record) {
         ...record,
         updatedAt: Date.now(),
     };
-    atomicWriteJsonSync(accountFile(record.providerId, record.id), next);
+    writeJsonAtomicSync(accountFile(record.providerId, record.id), next);
     logger.info(`[auth] Saved ${record.providerId} account "${record.id}" (label="${record.label}")`);
 }
 export function deleteAccount(provider, accountId) {
@@ -234,5 +223,5 @@ export function touchAccount(provider, accountId) {
         ...existing,
         lastUsedAt: Date.now(),
     };
-    atomicWriteJsonSync(accountFile(provider, accountId), next);
+    writeJsonAtomicSync(accountFile(provider, accountId), next);
 }

package/packages/agent/src/runtime/eliza.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"eliza.d.ts","sourceRoot":"","sources":["../../../../../../agent/src/runtime/eliza.ts"],"names":[],"mappings":"AA8BA,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAO/B,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,EACvB,6BAA6B,EAC7B,uBAAuB,EACvB,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,yBAAyB,EACzB,iCAAiC,EACjC,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,+BAA+B,GAChC,MAAM,mBAAmB,CAAC;AAiB3B,OAAO,EACL,YAAY,EASZ,KAAK,QAAQ,EAIb,KAAK,MAAM,EAKZ,MAAM,eAAe,CAAC;AA0BvB,OAAO,EAEL,KAAK,WAAW,EAEjB,MAAM,qBAAqB,CAAC;AAuB7B,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAqQxE,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,WAAW,GACnB,IAAI,CA2IN;AAqPD;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,YAAY,GAAG,IAAI,GAAG,SAAS,EACxC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAgBhE;AAgMD,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAC;AA4B/C;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CA+BjE;AAunBD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAMzD;AA8KD,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAO/D;AA8MD,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CA6NxE;AA0YD;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,WAAW,EACnB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,GAAG,SAAS,CAKpB;AA0DD,8CAA8C;AAC9C,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;OAGG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,GAAE,uBAA4B,GACjC,OAAO,CAAC,YAAY,CAAC,CAYvB;AAcD,eAAO,MAAM,iBAAiB,GAAI,OAAO,QAAQ,SAiChD,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,IAAI,CAAC,EAAE,iBAAiB,GACvB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAq8CnC;AASD;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,iBAAiB,GACvB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CA8FnC"}
+{"version":3,"file":"eliza.d.ts","sourceRoot":"","sources":["../../../../../../agent/src/runtime/eliza.ts"],"names":[],"mappings":"AA8BA,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAO/B,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,EACvB,6BAA6B,EAC7B,uBAAuB,EACvB,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,yBAAyB,EACzB,iCAAiC,EACjC,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,+BAA+B,GAChC,MAAM,mBAAmB,CAAC;AAiB3B,OAAO,EACL,YAAY,EASZ,KAAK,QAAQ,EAIb,KAAK,MAAM,EAKZ,MAAM,eAAe,CAAC;AA2BvB,OAAO,EAEL,KAAK,WAAW,EAEjB,MAAM,qBAAqB,CAAC;AAuB7B,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAqQxE,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,WAAW,GACnB,IAAI,CA2IN;AAgPD;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,YAAY,GAAG,IAAI,GAAG,SAAS,EACxC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAgBhE;AAgMD,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAC;AA4B/C;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CA+BjE;AAunBD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAMzD;AA8KD,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAO/D;AA8MD,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CA6NxE;AA0YD;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,WAAW,EACnB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,GAAG,SAAS,CAKpB;AA0DD,8CAA8C;AAC9C,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;OAGG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,GAAE,uBAA4B,GACjC,OAAO,CAAC,YAAY,CAAC,CAYvB;AAcD,eAAO,MAAM,iBAAiB,GAAI,OAAO,QAAQ,SAiChD,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,IAAI,CAAC,EAAE,iBAAiB,GACvB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAq8CnC;AASD;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,iBAAiB,GACvB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CA8FnC"}

package/packages/agent/src/runtime/eliza.js

@@ -46,7 +46,7 @@ import * as pluginAgentSkills from "@elizaos/plugin-agent-skills";
 import * as pluginBrowserBridge from "@elizaos/plugin-browser-bridge";
 import * as pluginPdf from "@elizaos/plugin-pdf";
 import * as pluginSql from "@elizaos/plugin-sql";
-import { getDefaultStylePreset, getOnboardingProviderOption, isElizaSettingsDebugEnabled, migrateLegacyRuntimeConfig, normalizeCharacterLanguage, normalizeOnboardingProviderId, resolveDeploymentTargetInConfig, resolveElizaCloudTopology, resolveServerOnlyPort, resolveServiceRoutingInConfig, resolveStylePresetByAvatarIndex, resolveStylePresetById, resolveStylePresetByName, settingsDebugCloudSummary, } from "@elizaos/shared";
+import { formatError, getDefaultStylePreset, getOnboardingProviderOption, isElizaSettingsDebugEnabled, migrateLegacyRuntimeConfig, normalizeCharacterLanguage, normalizeOnboardingProviderId, resolveDeploymentTargetInConfig, resolveElizaCloudTopology, resolveServerOnlyPort, resolveServiceRoutingInConfig, resolveStylePresetByAvatarIndex, resolveStylePresetById, resolveStylePresetByName, settingsDebugCloudSummary, } from "@elizaos/shared";
 import { debugLogResolvedContext, validateRuntimeContext, } from "../api/plugin-validation.js";
 import { getWalletAddresses, syncSolanaPublicKeyEnv } from "../api/wallet.js";
 import { configFileExists, loadElizaConfig, } from "../config/config.js";
@@ -391,10 +391,6 @@ export function configureLocalEmbeddingPlugin(_plugin, config) {
 // ---------------------------------------------------------------------------
 // Helpers
 // ---------------------------------------------------------------------------
-/** Extract a human-readable error message from an unknown thrown value. */
-function formatError(err) {
-    return err instanceof Error ? err.message : String(err);
-}
 function trimEnvString(value) {
     if (typeof value !== "string")
         return undefined;
@@ -2975,7 +2971,7 @@ export async function startEliza(opts) {
                     // per-session timeout (up to ~5s). runtime.stop() awaits every
                     // service.stop() sequentially, so a single idle PTY session
                     // turns a provider switch into a multi-second block. During
-                    // that window server.ts's providerSwitchInProgress flag +
+                    // that window the runtime-operations active-op slot +
                     // agentState === "restarting" guard reject further clicks,
                     // which is why flipping through providers rapidly feels stuck.
                     //

package/packages/agent/src/runtime/first-time-setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"first-time-setup.d.ts","sourceRoot":"","sources":["../../../../../../agent/src/runtime/first-time-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAUH,OAAO,EAAE,KAAK,WAAW,EAAmB,MAAM,qBAAqB,CAAC;AAmBxE,KAAK,yBAAyB,GAC5B,OAAO,uBAAuB,EAAE,qBAAqB,CAAC;AAGxD,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,WAAW,EACnB,IAAI,EAAE;IACJ,cAAc,EAAE,OAAO,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qBAAqB,CAAC,EAAE,yBAAyB,GAAG,IAAI,CAAC;IACzD,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,GACA,WAAW,CA4Db;AAyFD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAqC1E;AAMD,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,WAAW,CAAC,CAmiBtB"}
+{"version":3,"file":"first-time-setup.d.ts","sourceRoot":"","sources":["../../../../../../agent/src/runtime/first-time-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAUH,OAAO,EAAE,KAAK,WAAW,EAAmB,MAAM,qBAAqB,CAAC;AAexE,KAAK,yBAAyB,GAC5B,OAAO,uBAAuB,EAAE,qBAAqB,CAAC;AAGxD,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,WAAW,EACnB,IAAI,EAAE;IACJ,cAAc,EAAE,OAAO,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qBAAqB,CAAC,EAAE,yBAAyB,GAAG,IAAI,CAAC;IACzD,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,GACA,WAAW,CA4Db;AAyFD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAqC1E;AAMD,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,WAAW,CAAC,CAmiBtB"}

package/packages/agent/src/runtime/first-time-setup.js

@@ -18,7 +18,7 @@
  *
  * @module first-time-setup
  */
-import { getStylePresets } from "@elizaos/shared";
+import { formatError, getStylePresets } from "@elizaos/shared";
 import { persistConfigEnv } from "../api/config-env.js";
 import { CLOUD_EVM_ADDRESS_ENV_KEY, CLOUD_SOLANA_ADDRESS_ENV_KEY, WALLET_SOURCE_EVM_ENV_KEY, WALLET_SOURCE_SOLANA_ENV_KEY, } from "../api/wallet.js";
 import { saveElizaConfig } from "../config/config.js";
@@ -26,12 +26,6 @@ import { isCloudWalletEnabled } from "../config/feature-flags.js";
 import { migrateLegacyRuntimeConfig } from "../contracts/onboarding.js";
 import { buildDefaultElizaCloudServiceRouting, buildElizaCloudServiceRoute, } from "../contracts/service-routing.js";
 import { pickRandomNames } from "./onboarding-names.js";
-// ---------------------------------------------------------------------------
-// Helpers (private)
-// ---------------------------------------------------------------------------
-function formatError(err) {
-    return err instanceof Error ? err.message : String(err);
-}
 const DEFAULT_ONBOARDING_AGENT_NAME = getStylePresets()[0]?.name ?? "Eliza";
 export function applyFirstTimeSetupTopology(config, args) {
     const linkedAccounts = {

package/packages/agent/src/runtime/operations/cold-strategy.d.ts

@@ -1,10 +1,10 @@
 /**
  * Cold reload strategy — full runtime swap.
  *
- * Phase 1: delegates to the existing `restartRuntime` closure injected by
- * the API server. Reports phase boundaries (`shutdown-old`, `start-new`,
- * `swap`) from the manager's perspective; `restartRuntime` itself is
- * opaque, so the inner phases are recorded as a single bracketed step.
+ * Delegates to the `restartRuntime` closure injected by the API server.
+ * The closure is opaque (it owns shutdown + boot + state swap), so the
+ * strategy reports a single terminal `cold-restart` phase rather than
+ * synthetic timestamp-only sub-phases.
  */
 import type { AgentRuntime } from "@elizaos/core";
 import type { ReloadStrategy } from "./types.js";

package/packages/agent/src/runtime/operations/cold-strategy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cold-strategy.d.ts","sourceRoot":"","sources":["../../../../../../../agent/src/runtime/operations/cold-strategy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAiB,cAAc,EAAE,MAAM,YAAY,CAAC;AAEhE,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;CAClE;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,mBAAmB,GAAG,cAAc,CAqE5E"}
+{"version":3,"file":"cold-strategy.d.ts","sourceRoot":"","sources":["../../../../../../../agent/src/runtime/operations/cold-strategy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAGV,cAAc,EACf,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;CAClE;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,mBAAmB,GAAG,cAAc,CA+B5E"}

package/packages/agent/src/runtime/operations/cold-strategy.js

@@ -1,67 +1,34 @@
 /**
  * Cold reload strategy — full runtime swap.
  *
- * Phase 1: delegates to the existing `restartRuntime` closure injected by
- * the API server. Reports phase boundaries (`shutdown-old`, `start-new`,
- * `swap`) from the manager's perspective; `restartRuntime` itself is
- * opaque, so the inner phases are recorded as a single bracketed step.
+ * Delegates to the `restartRuntime` closure injected by the API server.
+ * The closure is opaque (it owns shutdown + boot + state swap), so the
+ * strategy reports a single terminal `cold-restart` phase rather than
+ * synthetic timestamp-only sub-phases.
  */
 export function createColdStrategy(opts) {
     const { restartRuntime } = opts;
     return {
         tier: "cold",
         async apply(ctx) {
-            const reason = describeIntent(ctx.intent);
-            const shutdownStart = Date.now();
-            await ctx.reportPhase({
-                name: "shutdown-old",
-                status: "running",
-                startedAt: shutdownStart,
-            });
-            const startNewStart = Date.now();
-            await ctx.reportPhase({
-                name: "shutdown-old",
-                status: "succeeded",
-                startedAt: shutdownStart,
-                finishedAt: startNewStart,
-            });
-            await ctx.reportPhase({
-                name: "start-new",
-                status: "running",
-                startedAt: startNewStart,
-            });
-            const newRuntime = await restartRuntime(reason);
-            const startNewEnd = Date.now();
+            const startedAt = Date.now();
+            const newRuntime = await restartRuntime(describeIntent(ctx.intent));
+            const finishedAt = Date.now();
             if (!newRuntime) {
                 await ctx.reportPhase({
-                    name: "start-new",
+                    name: "cold-restart",
                     status: "failed",
-                    startedAt: startNewStart,
-                    finishedAt: startNewEnd,
+                    startedAt,
+                    finishedAt,
                     error: { message: "Cold restart returned null runtime" },
                 });
                 throw new Error("Cold restart returned null runtime");
             }
             await ctx.reportPhase({
-                name: "start-new",
-                status: "succeeded",
-                startedAt: startNewStart,
-                finishedAt: startNewEnd,
-            });
-            const swapStart = startNewEnd;
-            await ctx.reportPhase({
-                name: "swap",
-                status: "running",
-                startedAt: swapStart,
-            });
-            // The actual swap into server.ts state is owned by `restartRuntime`'s
-            // closure; from the strategy's perspective, the moment we've received
-            // a non-null runtime back the swap has happened.
-            await ctx.reportPhase({
-                name: "swap",
+                name: "cold-restart",
                 status: "succeeded",
-                startedAt: swapStart,
-                finishedAt: Date.now(),
+                startedAt,
+                finishedAt,
             });
             return newRuntime;
         },

package/packages/agent/src/runtime/operations/health-checks.d.ts

@@ -12,6 +12,7 @@
  *   - Treat real failures (DB ping false, provider unreachable) as failures.
  */
 import type { HealthCheck } from "./types.js";
+export declare function describeError(err: unknown): string;
 export declare const runtimeReadyCheck: HealthCheck;
 export declare const essentialServicesCheck: HealthCheck;
 export declare const dbConnectionCheck: HealthCheck;

package/packages/agent/src/runtime/operations/health-checks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"health-checks.d.ts","sourceRoot":"","sources":["../../../../../../../agent/src/runtime/operations/health-checks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAqB,MAAM,YAAY,CAAC;AA2CjE,eAAO,MAAM,iBAAiB,EAAE,WAuB/B,CAAC;AAMF,eAAO,MAAM,sBAAsB,EAAE,WAmCpC,CAAC;AAMF,eAAO,MAAM,iBAAiB,EAAE,WA2B/B,CAAC;AAOF,eAAO,MAAM,kBAAkB,EAAE,WAwChC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,WAAW,EAKrD,CAAC"}
+{"version":3,"file":"health-checks.d.ts","sourceRoot":"","sources":["../../../../../../../agent/src/runtime/operations/health-checks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAqB,MAAM,YAAY,CAAC;AA6BjE,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAQlD;AAMD,eAAO,MAAM,iBAAiB,EAAE,WAuB/B,CAAC;AAMF,eAAO,MAAM,sBAAsB,EAAE,WAmCpC,CAAC;AAMF,eAAO,MAAM,iBAAiB,EAAE,WA2B/B,CAAC;AAOF,eAAO,MAAM,kBAAkB,EAAE,WAwChC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,WAAW,EAKrD,CAAC"}

package/packages/agent/src/runtime/operations/health-checks.js

@@ -23,7 +23,7 @@ function getDbAdapter(runtime) {
 function asServiceRegistry(runtime) {
     return runtime;
 }
-function describeError(err) {
+export function describeError(err) {
     if (err instanceof Error)
         return err.message;
     if (typeof err === "string")

package/packages/agent/src/runtime/operations/health.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../../../../../../agent/src/runtime/operations/health.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,KAAK,YAAY,EAAU,MAAM,eAAe,CAAC;AAE1D,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EAElB,MAAM,YAAY,CAAC;AAWpB,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;IAEzD,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI;IAiBlC,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAI9B,2EAA2E;IAC3E,IAAI,IAAI,SAAS,WAAW,EAAE;IAIxB,aAAa,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,iBAAiB,CAAC;CA8DvE;AA2DD;;;GAGG;AACH,wBAAgB,uBAAuB,IAAI,aAAa,CASvD"}
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../../../../../../agent/src/runtime/operations/health.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,KAAK,YAAY,EAAU,MAAM,eAAe,CAAC;AAE1D,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EAElB,MAAM,YAAY,CAAC;AAWpB,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;IAEzD,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI;IAiBlC,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAI9B,2EAA2E;IAC3E,IAAI,IAAI,SAAS,WAAW,EAAE;IAIxB,aAAa,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,iBAAiB,CAAC;CA8DvE;AAiDD;;;GAGG;AACH,wBAAgB,uBAAuB,IAAI,aAAa,CASvD"}

package/packages/agent/src/runtime/operations/health.js

@@ -15,7 +15,7 @@
  * Logging prefix: `[runtime-ops:health]`.
  */
 import { logger } from "@elizaos/core";
-import { builtInHealthChecks } from "./health-checks.js";
+import { builtInHealthChecks, describeError } from "./health-checks.js";
 const LOG_PREFIX = "[runtime-ops:health]";
 export class HealthChecker {
     checks = new Map();
@@ -119,18 +119,6 @@ async function runOne(check, runtime) {
             clearTimeout(timeoutHandle);
     }
 }
-function describeError(err) {
-    if (err instanceof Error)
-        return err.message;
-    if (typeof err === "string")
-        return err;
-    try {
-        return JSON.stringify(err);
-    }
-    catch {
-        return String(err);
-    }
-}
 // ---------------------------------------------------------------------------
 // Default singleton. Lazy, swappable in tests.
 // ---------------------------------------------------------------------------

package/packages/agent/src/runtime/operations/index.d.ts

@@ -13,4 +13,5 @@ export { DefaultRuntimeOperationManager, type DefaultRuntimeOperationManagerOpti
 export { createHotStrategy, type HotStrategyDeps } from "./reload-hot.js";
 export { FilesystemRuntimeOperationRepository, getDefaultRepository, } from "./repository.js";
 export * from "./types.js";
+export { _resetDefaultSecretsManagerForTesting, defaultSecretsManager, persistProviderApiKey, resolveProviderApiKey, vaultKeyForProviderApiKey, } from "./vault-bridge.js";
 //# sourceMappingURL=index.d.ts.map

package/packages/agent/src/runtime/operations/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../agent/src/runtime/operations/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,KAAK,eAAe,EACpB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,8BAA8B,EAC9B,KAAK,qCAAqC,EAC1C,KAAK,gBAAgB,GACtB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,iBAAiB,EAAE,KAAK,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EACL,oCAAoC,EACpC,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../agent/src/runtime/operations/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,KAAK,eAAe,EACpB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,8BAA8B,EAC9B,KAAK,qCAAqC,EAC1C,KAAK,gBAAgB,GACtB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,iBAAiB,EAAE,KAAK,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EACL,oCAAoC,EACpC,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,OAAO,EACL,qCAAqC,EACrC,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC"}

package/packages/agent/src/runtime/operations/index.js

@@ -12,3 +12,4 @@ export { DefaultRuntimeOperationManager, } from "./manager.js";
 export { createHotStrategy } from "./reload-hot.js";
 export { FilesystemRuntimeOperationRepository, getDefaultRepository, } from "./repository.js";
 export * from "./types.js";
+export { _resetDefaultSecretsManagerForTesting, defaultSecretsManager, persistProviderApiKey, resolveProviderApiKey, vaultKeyForProviderApiKey, } from "./vault-bridge.js";

package/packages/agent/src/runtime/operations/manager.d.ts

@@ -56,8 +56,10 @@ export declare class DefaultRuntimeOperationManager implements RuntimeOperationM
      * The repo's active-op slot is the cross-process gate.
      */
     private executionChain;
+    private startChain;
     constructor(opts: DefaultRuntimeOperationManagerOptions);
     start(req: StartOperationRequest): Promise<StartOperationOutcome>;
+    private startLocked;
     get(id: string): Promise<RuntimeOperation | null>;
     list(opts?: RuntimeOperationListOptions): Promise<RuntimeOperation[]>;
     findActive(): Promise<RuntimeOperation | null>;

package/packages/agent/src/runtime/operations/manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../../../../../../agent/src/runtime/operations/manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EACV,eAAe,EAEf,cAAc,EACd,UAAU,EACV,gBAAgB,EAChB,2BAA2B,EAC3B,uBAAuB,EACvB,0BAA0B,EAC1B,qBAAqB,EACrB,qBAAqB,EACtB,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,gBAAgB,GAAG,CAC7B,MAAM,EAAE,eAAe,EACvB,GAAG,EAAE,eAAe,KACjB,UAAU,CAAC;AAEhB,MAAM,WAAW,qCAAqC;IACpD,UAAU,EAAE,0BAA0B,CAAC;IACvC;;;OAGG;IACH,OAAO,EAAE,MAAM,YAAY,GAAG,IAAI,CAAC;IACnC;;;;OAIG;IACH,eAAe,EAAE,MAAM,eAAe,CAAC;IACvC;;;OAGG;IACH,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,aAAa,EAAE,aAAa,CAAC;IAC7B;;;OAGG;IACH,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC;CACzD;AAID,qBAAa,8BAA+B,YAAW,uBAAuB;IAC5E,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IACxD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4B;IACpD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAwB;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8C;IACzE;;;OAGG;IACH,OAAO,CAAC,cAAc,CAAoC;gBAE9C,IAAI,EAAE,qCAAqC;IASjD,KAAK,CAAC,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IA8CjE,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAIjD,IAAI,CAAC,IAAI,CAAC,EAAE,2BAA2B,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAIrE,UAAU,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAIpD,OAAO,CAAC,iBAAiB;YAUX,gBAAgB;YAsGhB,aAAa;CAa5B"}
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../../../../../../agent/src/runtime/operations/manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAGV,eAAe,EAEf,cAAc,EACd,UAAU,EACV,gBAAgB,EAChB,2BAA2B,EAC3B,uBAAuB,EACvB,0BAA0B,EAC1B,qBAAqB,EACrB,qBAAqB,EACtB,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,gBAAgB,GAAG,CAC7B,MAAM,EAAE,eAAe,EACvB,GAAG,EAAE,eAAe,KACjB,UAAU,CAAC;AAEhB,MAAM,WAAW,qCAAqC;IACpD,UAAU,EAAE,0BAA0B,CAAC;IACvC;;;OAGG;IACH,OAAO,EAAE,MAAM,YAAY,GAAG,IAAI,CAAC;IACnC;;;;OAIG;IACH,eAAe,EAAE,MAAM,eAAe,CAAC;IACvC;;;OAGG;IACH,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,aAAa,EAAE,aAAa,CAAC;IAC7B;;;OAGG;IACH,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC;CACzD;AASD,qBAAa,8BAA+B,YAAW,uBAAuB;IAC5E,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IACxD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4B;IACpD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAwB;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8C;IACzE;;;OAGG;IACH,OAAO,CAAC,cAAc,CAAoC;IAC1D,OAAO,CAAC,UAAU,CAAoC;gBAE1C,IAAI,EAAE,qCAAqC;IASjD,KAAK,CAAC,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC;YAgBzD,WAAW;IAmDnB,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAIjD,IAAI,CAAC,IAAI,CAAC,EAAE,2BAA2B,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAIrE,UAAU,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAIpD,OAAO,CAAC,iBAAiB;YAUX,gBAAgB;YAqGhB,aAAa;CAa5B"}

package/packages/agent/src/runtime/operations/manager.js

@@ -17,6 +17,10 @@
 import crypto from "node:crypto";
 import { logger } from "@elizaos/core";
 const DEFAULT_CLASSIFIER = () => "cold";
+function strategyErrorCode(err) {
+    const code = err?.code;
+    return code === "vault-resolve-failed" ? code : "strategy-failed";
+}
 export class DefaultRuntimeOperationManager {
     repository;
     runtime;
@@ -29,6 +33,7 @@ export class DefaultRuntimeOperationManager {
      * The repo's active-op slot is the cross-process gate.
      */
     executionChain = Promise.resolve();
+    startChain = Promise.resolve();
     constructor(opts) {
         this.repository = opts.repository;
         this.runtime = opts.runtime;
@@ -38,6 +43,18 @@ export class DefaultRuntimeOperationManager {
         this.strategies = opts.strategies;
     }
     async start(req) {
+        let outcome;
+        const run = this.startChain.then(async () => {
+            outcome = await this.startLocked(req);
+        });
+        this.startChain = run.then(() => undefined, () => undefined);
+        await run;
+        if (!outcome) {
+            throw new Error("[runtime-ops] start did not produce an outcome");
+        }
+        return outcome;
+    }
+    async startLocked(req) {
         if (req.idempotencyKey) {
             const existing = await this.repository.findByIdempotencyKey(req.idempotencyKey);
             if (existing) {
@@ -50,12 +67,14 @@ export class DefaultRuntimeOperationManager {
             logger.info(`[runtime-ops] Rejected new op: active operation in flight ${active.id}`);
             return { kind: "rejected-busy", activeOperationId: active.id };
         }
-        const tier = this.classifier(req.intent, this.classifyContext());
+        const prepareResult = req.prepare ? await req.prepare() : undefined;
+        const preparedIntent = prepareResult === undefined ? req.intent : prepareResult;
+        const tier = this.classifier(preparedIntent, this.classifyContext());
         const now = Date.now();
         const op = {
             id: crypto.randomUUID(),
-            kind: req.intent.kind,
-            intent: req.intent,
+            kind: preparedIntent.kind,
+            intent: preparedIntent,
             tier,
             idempotencyKey: req.idempotencyKey,
             status: "pending",
@@ -127,7 +146,7 @@ export class DefaultRuntimeOperationManager {
         catch (err) {
             const message = err instanceof Error ? err.message : String(err);
             logger.warn(`[runtime-ops] Strategy failed for op ${id}: ${message}`);
-            await this.failOperation(id, { message, code: "strategy-failed" });
+            await this.failOperation(id, { message, code: strategyErrorCode(err) });
             return;
         }
         // Phase: health-check.
@@ -148,9 +167,10 @@ export class DefaultRuntimeOperationManager {
                     failed: report.failed,
                 },
             });
-            // Phase 2: real rollback. For Phase 1 the swap has already happened
-            // via the cold strategy; we record the failure and surface it.
-            logger.warn(`[runtime-ops] Health check failed for op ${id}; rollback deferred to Phase 2`);
+            // The cold strategy has already swapped the runtime by the time we
+            // observe a failed health check. Surface the failure; rollback to the
+            // previous runtime is not implemented yet.
+            logger.warn(`[runtime-ops] Health check failed for op ${id}`);
             await this.failOperation(id, {
                 message: "Required health checks failed",
                 code: "health-check-failed",

package/packages/agent/src/runtime/operations/reload-hot.d.ts

@@ -15,6 +15,7 @@
  * is the one defined on the elizaOS Plugin contract for config-only updates.
  */
 import type { AgentRuntime } from "@elizaos/core";
+import type { SecretsManager } from "@elizaos/vault";
 import type { ProviderSwitchIntent, ReloadStrategy } from "./types.js";
 export interface HotStrategyDeps {
     /**
@@ -36,5 +37,7 @@ export interface HotStrategyDeps {
         detail?: Record<string, unknown>;
     }) => Promise<void>;
 }
-export declare function createHotStrategy(opts?: Partial<HotStrategyDeps>): ReloadStrategy;
+export declare function createHotStrategy(opts?: Partial<HotStrategyDeps> & {
+    secrets?: SecretsManager;
+}): ReloadStrategy;
 //# sourceMappingURL=reload-hot.d.ts.map

package/packages/agent/src/runtime/operations/reload-hot.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reload-hot.d.ts","sourceRoot":"","sources":["../../../../../../../agent/src/runtime/operations/reload-hot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAU,MAAM,eAAe,CAAC;AAE1D,OAAO,KAAK,EAGV,oBAAoB,EAEpB,cAAc,EACf,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,gBAAgB,EAAE,CAAC,MAAM,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE;;;;;;;OAOG;IACH,mBAAmB,EAAE,CACnB,OAAO,EAAE,YAAY,EACrB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,KACvD,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB;AA6ID,wBAAgB,iBAAiB,CAC/B,IAAI,GAAE,OAAO,CAAC,eAAe,CAAM,GAClC,cAAc,CAiEhB"}
+{"version":3,"file":"reload-hot.d.ts","sourceRoot":"","sources":["../../../../../../../agent/src/runtime/operations/reload-hot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAU,MAAM,eAAe,CAAC;AAG1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,EAGV,oBAAoB,EAEpB,cAAc,EACf,MAAM,YAAY,CAAC;AAMpB,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,gBAAgB,EAAE,CAAC,MAAM,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE;;;;;;;OAOG;IACH,mBAAmB,EAAE,CACnB,OAAO,EAAE,YAAY,EACrB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,KACvD,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB;AAiJD,wBAAgB,iBAAiB,CAC/B,IAAI,GAAE,OAAO,CAAC,eAAe,CAAC,GAAG;IAAE,OAAO,CAAC,EAAE,cAAc,CAAA;CAAO,GACjE,cAAc,CAgEhB"}

package/packages/agent/src/runtime/operations/reload-hot.js

@@ -15,9 +15,8 @@
  * is the one defined on the elizaOS Plugin contract for config-only updates.
  */
 import { logger } from "@elizaos/core";
-function nowMs() {
-    return Date.now();
-}
+import { formatErrorWithStack } from "@elizaos/shared";
+import { defaultSecretsManager, resolveProviderApiKey, } from "./vault-bridge.js";
 function buildPhase(name, status, startedAt, finishedAt, extra = {}) {
     return {
         name,
@@ -36,7 +35,7 @@ function describeIntent(intent) {
                 detail: {
                     provider: intent.provider,
                     ...(intent.primaryModel ? { primaryModel: intent.primaryModel } : {}),
-                    ...(intent.apiKey ? { apiKeyChanged: true } : {}),
+                    ...(intent.apiKeyRef ? { apiKeyChanged: true } : {}),
                 },
             };
         case "config-reload":
@@ -58,28 +57,36 @@ function describeIntent(intent) {
             return { kind: "restart", detail: { reason: intent.reason } };
     }
 }
-function formatError(err) {
-    return err instanceof Error ? (err.stack ?? err.message) : String(err);
-}
 /**
  * Default env-pump wrapper. Lazy-imports the onboarding env-pump to keep the
  * dependency graph clean (the operations module sits below the api module
  * in the layering, but the env-pump genuinely owns the canonical mutation).
+ *
+ * The intent carries `apiKeyRef` (a vault key), not the secret itself. The
+ * vault is consulted here on every hot reload and only the resolved
+ * plaintext is passed downstream to `createProviderSwitchConnection`.
  */
-async function defaultApplyProviderEnv(intent) {
-    const { applyOnboardingConnectionConfig, createProviderSwitchConnection } = await import("../../api/provider-switch-config.js");
-    const { loadElizaConfig, saveElizaConfig } = await import("../../config/config.js");
-    const connection = createProviderSwitchConnection({
-        provider: intent.provider,
-        ...(intent.apiKey ? { apiKey: intent.apiKey } : {}),
-        ...(intent.primaryModel ? { primaryModel: intent.primaryModel } : {}),
-    });
-    if (!connection) {
-        throw new Error(`[runtime-ops] hot reload: invalid provider "${intent.provider}"`);
-    }
-    const config = loadElizaConfig();
-    await applyOnboardingConnectionConfig(config, connection);
-    saveElizaConfig(config);
+function makeDefaultApplyProviderEnv(secrets) {
+    return async (intent) => {
+        const { applyOnboardingConnectionConfig, createProviderSwitchConnection } = await import("../../api/provider-switch-config.js");
+        const { loadElizaConfig, saveElizaConfig } = await import("../../config/config.js");
+        const apiKey = await resolveProviderApiKey({
+            secrets,
+            apiKeyRef: intent.apiKeyRef,
+            caller: "runtime-ops:reload-hot",
+        });
+        const connection = createProviderSwitchConnection({
+            provider: intent.provider,
+            ...(apiKey ? { apiKey } : {}),
+            ...(intent.primaryModel ? { primaryModel: intent.primaryModel } : {}),
+        });
+        if (!connection) {
+            throw new Error(`[runtime-ops] hot reload: invalid provider "${intent.provider}"`);
+        }
+        const config = loadElizaConfig();
+        await applyOnboardingConnectionConfig(config, connection);
+        saveElizaConfig(config);
+    };
 }
 /**
  * Default plugin notify. Iterates the runtime's plugins and calls
@@ -112,7 +119,7 @@ async function defaultNotifyConfigChanged(runtime, change) {
         }
         catch (err) {
             failures += 1;
-            logger.warn(`[runtime-ops] hot reload: plugin "${plugin.name}" applyConfig failed: ${formatError(err)}`);
+            logger.warn(`[runtime-ops] hot reload: plugin "${plugin.name}" applyConfig failed: ${formatErrorWithStack(err)}`);
         }
     }
     if (notified === 0 && failures === 0) {
@@ -122,52 +129,50 @@ async function defaultNotifyConfigChanged(runtime, change) {
     logger.info(`[runtime-ops] hot reload: notified ${notified} plugin(s), ${failures} failure(s) (change=${change.kind})`);
 }
 export function createHotStrategy(opts = {}) {
-    const applyProviderEnv = opts.applyProviderEnv ?? defaultApplyProviderEnv;
+    const secrets = opts.secrets ?? defaultSecretsManager();
+    const applyProviderEnv = opts.applyProviderEnv ?? makeDefaultApplyProviderEnv(secrets);
     const notifyConfigChanged = opts.notifyConfigChanged ?? defaultNotifyConfigChanged;
     return {
         tier: "hot",
         async apply(ctx) {
-            // ── Phase 1: apply-env ──────────────────────────────────────────────
-            const envStarted = nowMs();
+            const envStarted = Date.now();
             if (ctx.intent.kind !== "provider-switch") {
-                // The hot strategy currently only handles provider-switch env mutations
-                // directly. Other hot-eligible intents (config-reload over env./vars./
-                // models.) flow through the plugin notify step only — env was already
-                // mutated by whoever scheduled the operation (e.g. the config writer).
-                await ctx.reportPhase(buildPhase("apply-env", "skipped", envStarted, nowMs(), {
+                // Other hot-eligible intents (config-reload over env./vars./models.)
+                // flow through the plugin notify step only — env was already mutated
+                // by whoever scheduled the operation (e.g. the config writer).
+                await ctx.reportPhase(buildPhase("apply-env", "skipped", envStarted, Date.now(), {
                     detail: { reason: `intent=${ctx.intent.kind}` },
                 }));
             }
             else {
                 try {
                     await applyProviderEnv(ctx.intent);
-                    await ctx.reportPhase(buildPhase("apply-env", "succeeded", envStarted, nowMs(), {
+                    await ctx.reportPhase(buildPhase("apply-env", "succeeded", envStarted, Date.now(), {
                         detail: { provider: ctx.intent.provider },
                     }));
                 }
                 catch (err) {
-                    await ctx.reportPhase(buildPhase("apply-env", "failed", envStarted, nowMs(), {
-                        error: { message: formatError(err) },
+                    await ctx.reportPhase(buildPhase("apply-env", "failed", envStarted, Date.now(), {
+                        error: { message: formatErrorWithStack(err) },
                     }));
                     throw err;
                 }
             }
-            // ── Phase 2: notify-plugins ─────────────────────────────────────────
-            const notifyStarted = nowMs();
+            const notifyStarted = Date.now();
             const change = describeIntent(ctx.intent);
             try {
                 await notifyConfigChanged(ctx.runtime, change);
-                await ctx.reportPhase(buildPhase("notify-plugins", "succeeded", notifyStarted, nowMs(), {
+                await ctx.reportPhase(buildPhase("notify-plugins", "succeeded", notifyStarted, Date.now(), {
                     detail: change.detail,
                 }));
             }
             catch (err) {
                 // Best-effort: env is already applied, so we surface this as a failed
-                // phase with a warning but do NOT throw — the operation should still
-                // succeed at the manager level.
-                logger.warn(`[runtime-ops] hot reload: notify-plugins failed (env already applied): ${formatError(err)}`);
-                await ctx.reportPhase(buildPhase("notify-plugins", "failed", notifyStarted, nowMs(), {
-                    error: { message: formatError(err) },
+                // phase with a warning but do NOT throw — the operation still
+                // succeeds at the manager level.
+                logger.warn(`[runtime-ops] hot reload: notify-plugins failed (env already applied): ${formatErrorWithStack(err)}`);
+                await ctx.reportPhase(buildPhase("notify-plugins", "failed", notifyStarted, Date.now(), {
+                    error: { message: formatErrorWithStack(err) },
                 }));
             }
             return ctx.runtime;