@ixo/oracle-runtime 0.0.1

package/dist/config/base-env-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-env-config.d.ts","sourceRoot":"","sources":["../../src/config/base-env-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAiB,KAAK,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAEnE;;;;;;;;;;GAUG;AACH,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG;IACzC,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,CAAC,SAAS,MAAM,kBAAkB,EACpC,GAAG,EAAE,CAAC,EACN,YAAY,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC,GACnC,kBAAkB,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;IACrC,UAAU,CAAC,CAAC,SAAS,MAAM,kBAAkB,EAAE,GAAG,EAAE,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;CAC/E;AAmDD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,aAAa,CAAC,EAAE,aAAa,CAAC,kBAAkB,CAAC,GAChD,eAAe,CAiBjB;AAED,wBAAgB,4BAA4B,IAAI,IAAI,CAEnD"}

package/dist/config/base-env-config.js

@@ -0,0 +1,70 @@
+import { ConfigService } from '@nestjs/config';
+import { baseEnvSchema } from './base-env-schema.js';
+/**
+ * Convert hyphen-delimited Matrix usernames (`@did-ixo-ixo1...:host`) to
+ * colon DIDs (`did:ixo:ixo1...`). Lifted verbatim from
+ * `apps/app/src/utils/header.utils.ts` so the checkpointer can derive
+ * `ORACLE_DID` from `MATRIX_ORACLE_ADMIN_USER_ID` without depending on
+ * the AuthModule (which lives in a parallel relocation task).
+ */
+function normalizeDid(input) {
+    const username = input.split(':')[0] ?? '';
+    const parts = username.split('-');
+    if (parts.length < 3 || parts[0] !== '@did') {
+        throw new Error(`Invalid DID format: ${input}`);
+    }
+    const namespace = parts[1];
+    const identifier = parts.slice(2).join('-');
+    return `did:${namespace}:${identifier}`;
+}
+let _singleton;
+function singletonConfigService() {
+    if (!_singleton) {
+        const parsed = baseEnvSchema.safeParse(process.env);
+        const baseVars = parsed.success
+            ? parsed.data
+            : process.env;
+        let oracleDid;
+        const matrixUserId = typeof process.env.MATRIX_ORACLE_ADMIN_USER_ID === 'string'
+            ? process.env.MATRIX_ORACLE_ADMIN_USER_ID
+            : undefined;
+        if (matrixUserId) {
+            try {
+                oracleDid = normalizeDid(matrixUserId);
+            }
+            catch {
+                // Leave ORACLE_DID unset; getOrThrow callers will fail loudly.
+            }
+        }
+        const merged = {
+            ...baseVars,
+            ...(oracleDid ? { ORACLE_DID: oracleDid } : {}),
+        };
+        _singleton = new ConfigService(merged);
+    }
+    return _singleton;
+}
+/**
+ * Returns a `BaseEnvAccessor` backed by the supplied `ConfigService`
+ * (when called from inside a Nest DI scope) or by the lazily-built
+ * singleton seeded from `process.env`.
+ *
+ * Test helpers can call `resetBaseEnvConfigForTesting()` to clear the
+ * singleton between cases.
+ */
+export function getBaseEnvConfig(configService) {
+    const svc = configService ?? singletonConfigService();
+    return {
+        get(key, defaultValue) {
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            return svc.get(key, defaultValue);
+        },
+        getOrThrow(key) {
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            return svc.getOrThrow(key);
+        },
+    };
+}
+export function resetBaseEnvConfigForTesting() {
+    _singleton = undefined;
+}

package/dist/config/base-env-schema.d.ts

@@ -0,0 +1,77 @@
+import { z } from 'zod';
+/**
+ * Tier-0 (core) environment variables. Always required by the runtime
+ * regardless of which plugins are installed.
+ *
+ * Plugin-owned env vars (Composio, Slack, Memory, Firecrawl, Domain Indexer,
+ * Sandbox, Skills, Credits/Subscription, Tasks/Redis) are NOT declared here —
+ * each plugin contributes its own `configSchema` which the boot composer
+ * extends onto this base schema at runtime.
+ *
+ * `LANGSMITH_*` keys are declared here because LangChain auto-wires tracing
+ * when they are present in `process.env`; the runtime never reads them
+ * directly, but documenting them in the base schema makes them visible to
+ * `qiforge env` / inspect tooling.
+ *
+ * Field names match today's `apps/app/src/config.ts` exactly so existing
+ * `.env` files keep working without renames.
+ */
+export declare const baseEnvSchema: z.ZodObject<{
+    NODE_ENV: z.ZodDefault<z.ZodEnum<{
+        development: "development";
+        production: "production";
+        test: "test";
+    }>>;
+    PORT: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    ORACLE_NAME: z.ZodString;
+    CORS_ORIGIN: z.ZodDefault<z.ZodString>;
+    NETWORK: z.ZodEnum<{
+        mainnet: "mainnet";
+        testnet: "testnet";
+        devnet: "devnet";
+    }>;
+    MATRIX_BASE_URL: z.ZodString;
+    MATRIX_RECOVERY_PHRASE: z.ZodString;
+    MATRIX_STORE_PATH: z.ZodDefault<z.ZodString>;
+    MATRIX_ORACLE_ADMIN_USER_ID: z.ZodString;
+    MATRIX_ORACLE_ADMIN_PASSWORD: z.ZodString;
+    MATRIX_ORACLE_ADMIN_ACCESS_TOKEN: z.ZodString;
+    MATRIX_ACCOUNT_ROOM_ID: z.ZodString;
+    MATRIX_VALUE_PIN: z.ZodString;
+    SQLITE_DATABASE_PATH: z.ZodString;
+    BLOCKSYNC_GRAPHQL_URL: z.ZodString;
+    ORACLE_DID: z.ZodString;
+    ORACLE_ENTITY_DID: z.ZodString;
+    SECP_MNEMONIC: z.ZodString;
+    RPC_URL: z.ZodString;
+    LLM_PROVIDER: z.ZodDefault<z.ZodEnum<{
+        openrouter: "openrouter";
+        nebius: "nebius";
+    }>>;
+    OPENAI_API_KEY: z.ZodOptional<z.ZodString>;
+    OPEN_ROUTER_API_KEY: z.ZodOptional<z.ZodString>;
+    NEBIUS_API_KEY: z.ZodOptional<z.ZodString>;
+    ORACLE_SECRETS: z.ZodDefault<z.ZodString>;
+    LIVE_AGENT_AUTH_API_KEY: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    LANGSMITH_TRACING: z.ZodOptional<z.ZodString>;
+    LANGSMITH_API_KEY: z.ZodOptional<z.ZodString>;
+    LANGSMITH_PROJECT: z.ZodOptional<z.ZodString>;
+    LANGSMITH_ENDPOINT: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type BaseEnv = z.infer<typeof baseEnvSchema>;
+/**
+ * Cross-field check the merged schema cannot express on its own (we keep the
+ * base schema as a `ZodObject` so plugins can still `.extend()` on top of it
+ * via the schema composer).
+ *
+ * Enforces that the API key for the selected `LLM_PROVIDER` is set —
+ * otherwise the runtime would boot fine and every model call would fail at
+ * request time with a generic upstream 401. Returns a list of structured
+ * errors in the same shape as the schema composer's so they slot into the
+ * existing boot-error reporter without special-casing.
+ */
+export declare function validateLlmProviderKey(env: Record<string, unknown>): Array<{
+    field: string;
+    message: string;
+}>;
+//# sourceMappingURL=base-env-schema.d.ts.map

package/dist/config/base-env-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-env-schema.d.ts","sourceRoot":"","sources":["../../src/config/base-env-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAsDxB,CAAC;AAEH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC3B,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CA0B3C"}

package/dist/config/base-env-schema.js

@@ -0,0 +1,102 @@
+import { z } from 'zod';
+/**
+ * Tier-0 (core) environment variables. Always required by the runtime
+ * regardless of which plugins are installed.
+ *
+ * Plugin-owned env vars (Composio, Slack, Memory, Firecrawl, Domain Indexer,
+ * Sandbox, Skills, Credits/Subscription, Tasks/Redis) are NOT declared here —
+ * each plugin contributes its own `configSchema` which the boot composer
+ * extends onto this base schema at runtime.
+ *
+ * `LANGSMITH_*` keys are declared here because LangChain auto-wires tracing
+ * when they are present in `process.env`; the runtime never reads them
+ * directly, but documenting them in the base schema makes them visible to
+ * `qiforge env` / inspect tooling.
+ *
+ * Field names match today's `apps/app/src/config.ts` exactly so existing
+ * `.env` files keep working without renames.
+ */
+export const baseEnvSchema = z.object({
+    // Runtime
+    NODE_ENV: z
+        .enum(['development', 'production', 'test'])
+        .default('development'),
+    PORT: z.coerce.number().default(3000),
+    ORACLE_NAME: z.string(),
+    CORS_ORIGIN: z.string().default('*'),
+    NETWORK: z.enum(['mainnet', 'testnet', 'devnet']),
+    // Matrix
+    MATRIX_BASE_URL: z.string(),
+    MATRIX_RECOVERY_PHRASE: z.string(),
+    MATRIX_STORE_PATH: z.string().default('./matrix-storage'),
+    MATRIX_ORACLE_ADMIN_USER_ID: z.string(),
+    MATRIX_ORACLE_ADMIN_PASSWORD: z.string(),
+    MATRIX_ORACLE_ADMIN_ACCESS_TOKEN: z.string(),
+    MATRIX_ACCOUNT_ROOM_ID: z.string(),
+    MATRIX_VALUE_PIN: z.string(),
+    // Storage paths
+    SQLITE_DATABASE_PATH: z.string(),
+    // Blocksync / chain
+    BLOCKSYNC_GRAPHQL_URL: z.string(),
+    /**
+     * The oracle's own DID (`did:ixo:ixo1...`). Distinct from the
+     * `ORACLE_ENTITY_DID` (entity record on chain). Used by UcanService as
+     * the signer identity when minting downstream-service invocations.
+     */
+    ORACLE_DID: z.string(),
+    ORACLE_ENTITY_DID: z.string(),
+    SECP_MNEMONIC: z.string(),
+    RPC_URL: z.string(),
+    // LLM provider selection (provider-specific keys are optional so a fork
+    // can choose between OpenRouter and Nebius without setting both).
+    LLM_PROVIDER: z.enum(['openrouter', 'nebius']).default('openrouter'),
+    OPENAI_API_KEY: z.string().optional(),
+    OPEN_ROUTER_API_KEY: z.string().optional(),
+    NEBIUS_API_KEY: z.string().optional(),
+    // Operator-defined secrets surfaced to capabilities as `x-os-*` headers.
+    // Format: `KEY1=value1,KEY2=value2`. Defaults to empty.
+    ORACLE_SECRETS: z.string().default(''),
+    // Live agent auth
+    LIVE_AGENT_AUTH_API_KEY: z.string().optional().default(''),
+    // LangSmith tracing — auto-wired by LangChain when these are set. Optional.
+    LANGSMITH_TRACING: z.string().optional(),
+    LANGSMITH_API_KEY: z.string().optional(),
+    LANGSMITH_PROJECT: z.string().optional(),
+    LANGSMITH_ENDPOINT: z.string().optional(),
+});
+/**
+ * Cross-field check the merged schema cannot express on its own (we keep the
+ * base schema as a `ZodObject` so plugins can still `.extend()` on top of it
+ * via the schema composer).
+ *
+ * Enforces that the API key for the selected `LLM_PROVIDER` is set —
+ * otherwise the runtime would boot fine and every model call would fail at
+ * request time with a generic upstream 401. Returns a list of structured
+ * errors in the same shape as the schema composer's so they slot into the
+ * existing boot-error reporter without special-casing.
+ */
+export function validateLlmProviderKey(env) {
+    const errors = [];
+    const provider = env.LLM_PROVIDER;
+    if (provider === 'nebius') {
+        const key = env.NEBIUS_API_KEY;
+        if (typeof key !== 'string' || key.length === 0) {
+            errors.push({
+                field: 'NEBIUS_API_KEY',
+                message: "LLM provider 'nebius' selected via LLM_PROVIDER but NEBIUS_API_KEY is not set. " +
+                    'Set NEBIUS_API_KEY, or switch LLM_PROVIDER to openrouter and set OPEN_ROUTER_API_KEY.',
+            });
+        }
+        return errors;
+    }
+    // Default (openrouter) — selected when LLM_PROVIDER is unset or 'openrouter'.
+    const key = env.OPEN_ROUTER_API_KEY;
+    if (typeof key !== 'string' || key.length === 0) {
+        errors.push({
+            field: 'OPEN_ROUTER_API_KEY',
+            message: "LLM provider 'openrouter' selected via LLM_PROVIDER but OPEN_ROUTER_API_KEY is not set. " +
+                'Set OPEN_ROUTER_API_KEY, or switch LLM_PROVIDER to nebius and set NEBIUS_API_KEY.',
+        });
+    }
+    return errors;
+}

package/dist/events/scoped-emitter.d.ts

@@ -0,0 +1,33 @@
+import type { ActionCallEventPayload, BrowserToolCallEventPayload, MessageCacheInvalidationPayload, ReasoningEventPayload, RenderComponentEventPayload, RouterEventPayload, ToolCallEventPayload } from '../plugin-api/types.js';
+import type { EmitAdapter } from '../runtime-context/ambient.js';
+/** Identity of the current request — every emitted event carries these. */
+export interface ScopeKeys {
+    sessionId: string;
+    requestId: string;
+}
+/** The seven typed emitter methods a RuntimeContext exposes via `ctx.emit`. */
+export interface ScopedEmitter {
+    toolCall(payload: ToolCallEventPayload): void;
+    actionCall(payload: ActionCallEventPayload): void;
+    renderComponent(payload: RenderComponentEventPayload): void;
+    reasoning(payload: ReasoningEventPayload): void;
+    browserToolCall(payload: BrowserToolCallEventPayload): void;
+    router(payload: RouterEventPayload): void;
+    messageCacheInvalidation(payload: MessageCacheInvalidationPayload): void;
+}
+/** Event names exposed by `@ixo/oracles-events`. */
+export declare const EVENT_NAMES: {
+    readonly toolCall: "tool_call";
+    readonly actionCall: "action_call";
+    readonly renderComponent: "render_component";
+    readonly reasoning: "reasoning";
+    readonly browserToolCall: "browser_tool_call";
+    readonly router: "router.update";
+    readonly messageCacheInvalidation: "message_cache_invalidation";
+};
+/**
+ * Build a scoped emitter that injects the current `sessionId`/`requestId`
+ * onto every emitted payload before forwarding to the underlying sink.
+ */
+export declare function createScopedEmitter(scope: ScopeKeys, sink: EmitAdapter): ScopedEmitter;
+//# sourceMappingURL=scoped-emitter.d.ts.map

package/dist/events/scoped-emitter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoped-emitter.d.ts","sourceRoot":"","sources":["../../src/events/scoped-emitter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,sBAAsB,EACtB,2BAA2B,EAC3B,+BAA+B,EAC/B,qBAAqB,EACrB,2BAA2B,EAC3B,kBAAkB,EAClB,oBAAoB,EACrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EACV,WAAW,EAEZ,MAAM,+BAA+B,CAAC;AAEvC,2EAA2E;AAC3E,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,+EAA+E;AAC/E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC9C,UAAU,CAAC,OAAO,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAClD,eAAe,CAAC,OAAO,EAAE,2BAA2B,GAAG,IAAI,CAAC;IAC5D,SAAS,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAChD,eAAe,CAAC,OAAO,EAAE,2BAA2B,GAAG,IAAI,CAAC;IAC5D,MAAM,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC1C,wBAAwB,CAAC,OAAO,EAAE,+BAA+B,GAAG,IAAI,CAAC;CAC1E;AAED,oDAAoD;AACpD,eAAO,MAAM,WAAW;;;;;;;;CAQd,CAAC;AAEX;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,SAAS,EAChB,IAAI,EAAE,WAAW,GAChB,aAAa,CAmBf"}

package/dist/events/scoped-emitter.js

@@ -0,0 +1,32 @@
+/** Event names exposed by `@ixo/oracles-events`. */
+export const EVENT_NAMES = {
+    toolCall: 'tool_call',
+    actionCall: 'action_call',
+    renderComponent: 'render_component',
+    reasoning: 'reasoning',
+    browserToolCall: 'browser_tool_call',
+    router: 'router.update',
+    messageCacheInvalidation: 'message_cache_invalidation',
+};
+/**
+ * Build a scoped emitter that injects the current `sessionId`/`requestId`
+ * onto every emitted payload before forwarding to the underlying sink.
+ */
+export function createScopedEmitter(scope, sink) {
+    const send = (eventName, payload) => {
+        sink.emit(eventName, {
+            ...payload,
+            sessionId: scope.sessionId,
+            requestId: scope.requestId,
+        });
+    };
+    return {
+        toolCall: (payload) => send(EVENT_NAMES.toolCall, payload),
+        actionCall: (payload) => send(EVENT_NAMES.actionCall, payload),
+        renderComponent: (payload) => send(EVENT_NAMES.renderComponent, payload),
+        reasoning: (payload) => send(EVENT_NAMES.reasoning, payload),
+        browserToolCall: (payload) => send(EVENT_NAMES.browserToolCall, payload),
+        router: (payload) => send(EVENT_NAMES.router, payload),
+        messageCacheInvalidation: (payload) => send(EVENT_NAMES.messageCacheInvalidation, payload),
+    };
+}

package/dist/graph/index.d.ts

@@ -0,0 +1,8 @@
+export { createSubagentAsTool, type AgentSpec, type SubagentToolOptions, } from './subagent-as-tool.js';
+export * from './middlewares/index.js';
+export { createMainAgent, MainAgentGraphState, type CompiledMainAgent, type MainAgentArgs, type MainAgentHooks, type MainAgentRegistries, type MainAgentRequestContext, type TMainAgentGraphState, } from './main-agent.js';
+export { composePrompt, formatTimeContext, formatUserPreferences, buildOracleSection, SLACK_FORMATTING_CONSTRAINTS_CONTENT, type ComposePromptInput, } from './prompt-composer.js';
+export { collectSubAgentsWithFallback, type CollectSubAgentsInput, } from './sub-agent-fallback.js';
+export { wrapPluginTool, type WrapPluginToolOptions, } from './wrap-plugin-tool.js';
+export { type UserPreferences, type BrowserToolCall, type AgAction, } from './state.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/graph/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/graph/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,KAAK,SAAS,EACd,KAAK,mBAAmB,GACzB,MAAM,uBAAuB,CAAC;AAE/B,cAAc,wBAAwB,CAAC;AAEvC,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,GAC1B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,oCAAoC,EACpC,KAAK,kBAAkB,GACxB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,4BAA4B,EAC5B,KAAK,qBAAqB,GAC3B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,cAAc,EACd,KAAK,qBAAqB,GAC3B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,QAAQ,GACd,MAAM,YAAY,CAAC"}

package/dist/graph/index.js

@@ -0,0 +1,6 @@
+export { createSubagentAsTool, } from './subagent-as-tool.js';
+export * from './middlewares/index.js';
+export { createMainAgent, MainAgentGraphState, } from './main-agent.js';
+export { composePrompt, formatTimeContext, formatUserPreferences, buildOracleSection, SLACK_FORMATTING_CONSTRAINTS_CONTENT, } from './prompt-composer.js';
+export { collectSubAgentsWithFallback, } from './sub-agent-fallback.js';
+export { wrapPluginTool, } from './wrap-plugin-tool.js';

package/dist/graph/main-agent-types.d.ts

@@ -0,0 +1,88 @@
+import type { BaseChatModel } from '@langchain/core/language_models/chat_models';
+import type { BaseCheckpointSaver } from '@langchain/langgraph';
+import type { ReactAgent } from 'langchain';
+import { z } from 'zod';
+import type { ChatOpenAIFields, MergedConfig, ModelRole, OracleIdentity } from '../plugin-api/types.js';
+import type { ConfigSchemaRegistry } from '../registries/config-schema-registry.js';
+import type { ManifestRegistry } from '../registries/manifest-registry.js';
+import type { MiddlewareRegistry } from '../registries/middleware-registry.js';
+import type { SharedStateRegistry } from '../registries/shared-state-registry.js';
+import type { SubAgentRegistry } from '../registries/subagent-registry.js';
+import type { ToolRegistry } from '../registries/tool-registry.js';
+import type { AmbientServices } from '../runtime-context/ambient.js';
+import type { TMainAgentGraphState } from './state.js';
+/** The 6 internal registries the runtime composes. */
+export interface MainAgentRegistries {
+    tools: ToolRegistry;
+    subAgents: SubAgentRegistry;
+    middlewares: MiddlewareRegistry;
+    manifests: ManifestRegistry;
+    configSchema: ConfigSchemaRegistry;
+    sharedState: SharedStateRegistry;
+}
+export declare const mainAgentRequestContextSchema: z.ZodObject<{
+    user: z.ZodObject<{
+        did: z.ZodString;
+        matrixUserId: z.ZodString;
+        ucanDelegation: z.ZodAny;
+        timezone: z.ZodOptional<z.ZodString>;
+        currentTime: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    session: z.ZodObject<{
+        id: z.ZodString;
+        client: z.ZodEnum<{
+            portal: "portal";
+            matrix: "matrix";
+            slack: "slack";
+        }>;
+        requestId: z.ZodString;
+        wsId: z.ZodOptional<z.ZodString>;
+        roomId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    history: z.ZodObject<{
+        userContext: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+/** Per-request shape — exposes only what the main-agent build needs. */
+export type MainAgentRequestContext = z.infer<typeof mainAgentRequestContextSchema>;
+/**
+ * Optional hooks the consuming app provides to keep platform-specific behaviour
+ * (model selection, checkpointer wiring, secret injection) out of the runtime.
+ *
+ * Sandbox-tool secret-wrapping (today: `wrappedSandboxTools`) deliberately
+ * lives outside this hook surface — the sandbox plugin owns it once it lands.
+ */
+export interface MainAgentHooks {
+    /** Resolve a checkpointer for a user. Mirrors apps/app's per-user SQLite store. */
+    checkpointerForUser?: (userDid: string) => Promise<BaseCheckpointSaver>;
+    /** Optional model resolver. Default: `ambient.llm.get('main')`. */
+    resolveModel?: (role: ModelRole, params?: ChatOpenAIFields) => ReturnType<AmbientServices['llm']['get']>;
+    /** Look up a human-readable page title for the page-context middleware. */
+    getRoomTitle?: (roomId: string) => Promise<string | undefined>;
+    /** Cheap classification model used by the safety-guardrail middleware. */
+    safetyModel?: BaseChatModel;
+    /** Tool names whose `ToolMessage` outputs should be stripped between turns. */
+    validationSkipToolNames?: string[];
+    /** Operational-mode block — overridden when a richer mode applies. */
+    operationalMode?: string;
+    /** Editor block — populated by the editor plugin. */
+    editorSection?: string;
+    /** Composio guidance block — populated by the composio plugin. */
+    composioContext?: string;
+    /** Per-key secret bullet list (e.g. `- _USER_SECRET_FOO`). */
+    userSecretsContext?: string;
+    /** Degraded-services notice appended to the system prompt body. */
+    degradedServicesBlock?: string;
+}
+export interface MainAgentArgs {
+    registries: MainAgentRegistries;
+    identity: OracleIdentity;
+    config: MergedConfig;
+    requestCtx: MainAgentRequestContext;
+    ambient: AmbientServices;
+    state: Partial<TMainAgentGraphState>;
+    availablePlugins: ReadonlySet<string>;
+    hooks?: MainAgentHooks;
+}
+export type CompiledMainAgent = ReactAgent<any>;
+//# sourceMappingURL=main-agent-types.d.ts.map

package/dist/graph/main-agent-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main-agent-types.d.ts","sourceRoot":"","sources":["../../src/graph/main-agent-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAC;AACjF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EACZ,SAAS,EACT,cAAc,EACf,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC/E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACvD,sDAAsD;AACtD,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,YAAY,CAAC;IACpB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,WAAW,EAAE,kBAAkB,CAAC;IAChC,SAAS,EAAE,gBAAgB,CAAC;IAC5B,YAAY,EAAE,oBAAoB,CAAC;IACnC,WAAW,EAAE,mBAAmB,CAAC;CAClC;AAED,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;iBAkBxC,CAAC;AACH,wEAAwE;AACxE,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,6BAA6B,CACrC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,mFAAmF;IACnF,mBAAmB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACxE,mEAAmE;IACnE,YAAY,CAAC,EAAE,CACb,IAAI,EAAE,SAAS,EACf,MAAM,CAAC,EAAE,gBAAgB,KACtB,UAAU,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/C,2EAA2E;IAC3E,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/D,0EAA0E;IAC1E,WAAW,CAAC,EAAE,aAAa,CAAC;IAC5B,+EAA+E;IAC/E,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,sEAAsE;IACtE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qDAAqD;IACrD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,8DAA8D;IAC9D,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,mEAAmE;IACnE,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,mBAAmB,CAAC;IAChC,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,YAAY,CAAC;IACrB,UAAU,EAAE,uBAAuB,CAAC;IACpC,OAAO,EAAE,eAAe,CAAC;IACzB,KAAK,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACrC,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACtC,KAAK,CAAC,EAAE,cAAc,CAAC;CACxB;AAGD,MAAM,MAAM,iBAAiB,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC"}

package/dist/graph/main-agent-types.js

@@ -0,0 +1,20 @@
+import { z } from 'zod';
+export const mainAgentRequestContextSchema = z.object({
+    user: z.object({
+        did: z.string(),
+        matrixUserId: z.string(),
+        ucanDelegation: z.any(), // You may prefer a stricter schema for UCAN later.
+        timezone: z.string().optional(),
+        currentTime: z.string().optional(),
+    }),
+    session: z.object({
+        id: z.string(),
+        client: z.enum(['portal', 'matrix', 'slack']),
+        requestId: z.string(),
+        wsId: z.string().optional(),
+        roomId: z.string().optional(),
+    }),
+    history: z.object({
+        userContext: z.record(z.string(), z.unknown()).optional(),
+    }),
+});

package/dist/graph/main-agent.d.ts

@@ -0,0 +1,16 @@
+import type { CompiledMainAgent, MainAgentArgs } from './main-agent-types.js';
+import { MainAgentGraphState } from './state.js';
+/**
+ * Build a compiled main agent from the runtime's registries plus per-request
+ * context. Replaces the legacy 1,052-line monolith — every behaviour
+ * preserved, the inlined arrays now flow from registries.
+ *
+ * Sandbox tools, MCP setup, and oracle→service UCAN minting (memory,
+ * sandbox, composio) move into the corresponding bundled plugins; this
+ * function deliberately knows nothing about them.
+ */
+export declare function createMainAgent(args: MainAgentArgs): Promise<CompiledMainAgent>;
+export { MainAgentGraphState };
+export type { CompiledMainAgent, MainAgentArgs, MainAgentHooks, MainAgentRegistries, MainAgentRequestContext, } from './main-agent-types.js';
+export type { TMainAgentGraphState } from './state.js';
+//# sourceMappingURL=main-agent.d.ts.map

package/dist/graph/main-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main-agent.d.ts","sourceRoot":"","sources":["../../src/graph/main-agent.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAc9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AA0CjD;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,iBAAiB,CAAC,CA0P5B;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAC/B,YAAY,EACV,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC"}