@ixo/oracle-runtime 1.0.0 → 1.0.1

package/dist/config/base-env-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base-env-config.d.ts","sourceRoot":"","sources":["../../src/config/base-env-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAiB,KAAK,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAEnE;;;;;;;;;;GAUG;AACH,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG;IACzC,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,CAAC,SAAS,MAAM,kBAAkB,EACpC,GAAG,EAAE,CAAC,EACN,YAAY,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC,GACnC,kBAAkB,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;IACrC,UAAU,CAAC,CAAC,SAAS,MAAM,kBAAkB,EAAE,GAAG,EAAE,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;CAC/E;AAmDD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,aAAa,CAAC,EAAE,aAAa,CAAC,kBAAkB,CAAC,GAChD,eAAe,CAiBjB;AAED,wBAAgB,4BAA4B,IAAI,IAAI,CAEnD"}
+{"version":3,"file":"base-env-config.d.ts","sourceRoot":"","sources":["../../src/config/base-env-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAiB,KAAK,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAEnE;;;;;;;;;;GAUG;AACH,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG;IACzC,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,CAAC,SAAS,MAAM,kBAAkB,EACpC,GAAG,EAAE,CAAC,EACN,YAAY,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC,GACnC,kBAAkB,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;IACrC,UAAU,CAAC,CAAC,SAAS,MAAM,kBAAkB,EAAE,GAAG,EAAE,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;CAC/E;AAmDD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,aAAa,CAAC,EAAE,aAAa,CAAC,kBAAkB,CAAC,GAChD,eAAe,CAejB;AAED,wBAAgB,4BAA4B,IAAI,IAAI,CAEnD"}

package/dist/config/base-env-config.js

@@ -56,11 +56,9 @@ export function getBaseEnvConfig(configService) {
     const svc = configService ?? singletonConfigService();
     return {
         get(key, defaultValue) {
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
             return svc.get(key, defaultValue);
         },
         getOrThrow(key) {
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
             return svc.getOrThrow(key);
         },
     };

package/dist/graph/main-agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"main-agent.d.ts","sourceRoot":"","sources":["../../src/graph/main-agent.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAc9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AA0CjD;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,iBAAiB,CAAC,CA0P5B;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAC/B,YAAY,EACV,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"main-agent.d.ts","sourceRoot":"","sources":["../../src/graph/main-agent.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAc9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AA0CjD;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,iBAAiB,CAAC,CA2T5B;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAC/B,YAAY,EACV,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC"}

package/dist/graph/main-agent.js

@@ -2,6 +2,10 @@ import { createAgent, toolRetryMiddleware, } from 'langchain';
 import { renderTier1 } from '../manifest/tier1-renderer.js';
 import { buildMetaTools } from '../meta-tools/index.js';
 import { MEMORY_CLEAR_MCP_NAME, MemoryPlugin, } from '../plugins/memory/index.js';
+import { isUserInRoom } from '../matrix/room-membership.js';
+import { createEditorAccessDeniedTool } from '../plugins/editor/editor-access-denied-tool.js';
+import { EDITOR_AGENT_TOOL_NAME } from '../plugins/editor/editor-agent.js';
+import { EDITOR_MODE_PROMPTS, editorUnavailableMode, STANDALONE_EDITOR_PROMPTS, } from '../plugins/editor/prompts.js';
 import { buildPluginContext } from '../runtime-context/build-plugin.js';
 import { buildRuntimeContext, } from '../runtime-context/build-runtime.js';
 import { createCapabilityGateMiddleware, createPageContextMiddleware, createSafetyGuardrailMiddleware, createToolRepetitionGuardMiddleware, createToolValidationMiddleware, } from './middlewares/index.js';
@@ -54,6 +58,7 @@ export async function createMainAgent(args) {
         pluginName: PLUGIN_LOGGER_COMPONENT,
     });
     // ── 2. Request-time runtime context (drives getRequestTools/...SubAgents) ─
+    ambient.logger.debug?.(`[MainAgent] state.loadedPlugins:`, state.loadedPlugins);
     const loadedSet = new Set(state.loadedPlugins ?? []);
     // Carry the prior request state (editorRoomId, spaceId, browserTools,
     // agActions, …) into the per-request RuntimeContext and the tool-wrapper
@@ -214,11 +219,58 @@ export async function createMainAgent(args) {
     const tier1 = renderTier1({ manifests: eagerEntries });
     for (const warning of tier1.warnings)
         ambient.logger.warn(warning);
+    // Editor mode is selected per-request from the live state (the static
+    // `hooks` from the bundle can't carry request-scoped editorRoomId/spaceId).
+    // When a page is open (`editorRoomId`) the editor prompt is the "richer mode"
+    // that overrides the fork's operationalMode; with only a `spaceId` the
+    // standalone variant applies. Falls back to hooks/defaults otherwise.
+    //
+    // Gated on `call_editor_agent` actually being bound: the editor plugin can
+    // refuse to contribute its surface even when the state fields are set (room
+    // membership check failed, Matrix unavailable, sub-agent build error).
+    // Injecting "EDITOR MODE ACTIVE — use the Editor Agent tool" without the
+    // tool bound makes the model emit its sub-agent task as user-facing text
+    // instead of calling anything.
+    const editorToolBound = tools.some((t) => t.name === EDITOR_AGENT_TOOL_NAME);
+    // A page is open but the editor refused to bind. Tell the model WHY via a
+    // dedicated operational mode AND bind a stub `call_editor_agent` that
+    // returns the same denial — so even a model that ignores the prompt and
+    // calls the editor learns the truth from the tool result. The membership
+    // re-check hits the cache the editor plugin's own guard just populated
+    // (60s TTL), so this costs no extra Matrix round-trip; `isUserInRoom`
+    // fails closed, matching the plugin's decision.
+    let editorUnavailableBlock = null;
+    if (!editorToolBound && state.editorRoomId) {
+        const isMember = await isUserInRoom(state.editorRoomId, requestCtx.user.matrixUserId);
+        const reason = isMember ? 'bind-error' : 'not-member';
+        editorUnavailableBlock = editorUnavailableMode({
+            editorRoomId: state.editorRoomId,
+            reason,
+        });
+        tools.push(createEditorAccessDeniedTool({
+            editorRoomId: state.editorRoomId,
+            reason,
+        }));
+        ambient.logger.warn(`[main-agent] editorRoomId=${state.editorRoomId} set but ${EDITOR_AGENT_TOOL_NAME} did not bind (reason: ${reason}, user: ${requestCtx.user.matrixUserId}) — ` +
+            `binding access-denied stub and injecting the unavailable notice`);
+    }
+    else if (!editorToolBound && state.spaceId) {
+        ambient.logger.warn(`[main-agent] spaceId=${state.spaceId} set but ${EDITOR_AGENT_TOOL_NAME} did not bind — suppressing editor prompts; ` +
+            `see preceding [editor] log lines for the refusal reason`);
+    }
+    const editorPrompts = editorToolBound && state.editorRoomId
+        ? EDITOR_MODE_PROMPTS
+        : editorToolBound && state.spaceId
+            ? STANDALONE_EDITOR_PROMPTS
+            : null;
     const prompt = await composePrompt({
         identity,
         capabilityBlock: tier1.block,
-        operationalMode: hooks?.operationalMode ?? DEFAULT_OPERATIONAL_MODE,
-        editorSection: hooks?.editorSection ?? '',
+        operationalMode: editorPrompts?.operationalMode ??
+            editorUnavailableBlock ??
+            hooks?.operationalMode ??
+            DEFAULT_OPERATIONAL_MODE,
+        editorSection: editorPrompts?.editorSection ?? hooks?.editorSection ?? '',
         composioContext: hooks?.composioContext ?? '',
         slackFormattingConstraints: requestCtx.session.client === 'slack'
             ? SLACK_FORMATTING_CONSTRAINTS_CONTENT

package/dist/graph/subagent-as-tool.d.ts

@@ -56,6 +56,21 @@ export interface SubagentToolOptions {
     /** Called after subagent completes with the full message history. Fire-and-forget. */
     onComplete?: (messages: BaseMessage[], task: string) => void;
 }
+/**
+ * Filter subagent messages to only those whose tool name is in forwardTools.
+ * Returns AIMessages (with tool_calls filtered) and their matching ToolMessages.
+ *
+ * Rewrites each forwarded tool_call id with `idPrefix` so ids are unique
+ * across sub-agent invocations. Without this, each sub-agent run produces
+ * LangChain-generated ids like `functions.create_data_table:0` starting at
+ * 0, and two invocations in one chat collide — the frontend uses these
+ * ids as React keys and picks the wrong artifact.
+ *
+ * Exported so ad-hoc sub-agent runners (e.g. the editor's standalone tool,
+ * which spins up its own inner agent instead of going through
+ * `createSubagentAsTool`) forward with identical semantics.
+ */
+export declare function filterForwardedMessages(messages: BaseMessage[], forwardTools: Set<string>, idPrefix: string): BaseMessage[];
 /**
  * Wraps an AgentSpec as a LangChain tool. When the parent agent calls this
  * tool with a task, an ephemeral agent runs (model + tools + systemPrompt)

package/dist/graph/subagent-as-tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"subagent-as-tool.d.ts","sourceRoot":"","sources":["../../src/graph/subagent-as-tool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAIL,KAAK,WAAW,EACjB,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EACL,WAAW,EACX,KAAK,eAAe,EACpB,KAAK,cAAc,EACpB,MAAM,WAAW,CAAC;AAInB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAQrD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,cAAc,EAAE,CAAC;IACzB,gBAAgB,CAAC,EAAE,cAAc,EAAE,CAAC;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACnD,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,YAAY,CAAC,EACT,mBAAmB,GACnB,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACxD,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,sFAAsF;IACtF,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9D;AAsGD;;;;;;;GAOG;AACH;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAGpE;AAED,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,SAAS,EACf,OAAO,CAAC,EAAE,mBAAmB,GAC5B,cAAc,CA8HhB"}
+{"version":3,"file":"subagent-as-tool.d.ts","sourceRoot":"","sources":["../../src/graph/subagent-as-tool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAIL,KAAK,WAAW,EACjB,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EACL,WAAW,EACX,KAAK,eAAe,EACpB,KAAK,cAAc,EACpB,MAAM,WAAW,CAAC;AAInB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAQrD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,cAAc,EAAE,CAAC;IACzB,gBAAgB,CAAC,EAAE,cAAc,EAAE,CAAC;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACnD,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,YAAY,CAAC,EACT,mBAAmB,GACnB,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACxD,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,sFAAsF;IACtF,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9D;AA0CD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,WAAW,EAAE,EACvB,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,EACzB,QAAQ,EAAE,MAAM,GACf,WAAW,EAAE,CAkCf;AAYD;;;;;;;GAOG;AACH;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAGpE;AAED,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,SAAS,EACf,OAAO,CAAC,EAAE,mBAAmB,GAC5B,cAAc,CA8HhB"}

package/dist/graph/subagent-as-tool.js

@@ -52,8 +52,12 @@ function lastMessageContent(messages) {
  * LangChain-generated ids like `functions.create_data_table:0` starting at
  * 0, and two invocations in one chat collide — the frontend uses these
  * ids as React keys and picks the wrong artifact.
+ *
+ * Exported so ad-hoc sub-agent runners (e.g. the editor's standalone tool,
+ * which spins up its own inner agent instead of going through
+ * `createSubagentAsTool`) forward with identical semantics.
  */
-function filterForwardedMessages(messages, forwardTools, idPrefix) {
+export function filterForwardedMessages(messages, forwardTools, idPrefix) {
     const oldToNewId = new Map();
     return messages.reduce((acc, msg) => {
         if (msg.type === 'ai') {

package/dist/matrix/user-id.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Convert a canonical IXO DID (`did:ixo:abc`) to its Matrix user id
+ * (`@did-ixo-abc:homeserver`).
+ *
+ * Matrix localparts disallow `:`, so the DID's colons become hyphens and the
+ * whole thing is prefixed with `@`. The DID already starts with `did`, so the
+ * result naturally reads `@did-ixo-…` — do NOT add an extra `did-` prefix.
+ * This is the inverse of the `@did-…` → `did:…` parse used by the Matrix
+ * listener bridge and `normalizeDid` in the editor's page-functions.
+ *
+ * @example
+ * didToMatrixUserId('did:ixo:abc', 'devmx.ixo.earth')
+ * // => '@did-ixo-abc:devmx.ixo.earth'
+ */
+export declare function didToMatrixUserId(did: string, homeServer: string): string;
+//# sourceMappingURL=user-id.d.ts.map

package/dist/matrix/user-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-id.d.ts","sourceRoot":"","sources":["../../src/matrix/user-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAEzE"}

package/dist/matrix/user-id.js

@@ -0,0 +1,17 @@
+/**
+ * Convert a canonical IXO DID (`did:ixo:abc`) to its Matrix user id
+ * (`@did-ixo-abc:homeserver`).
+ *
+ * Matrix localparts disallow `:`, so the DID's colons become hyphens and the
+ * whole thing is prefixed with `@`. The DID already starts with `did`, so the
+ * result naturally reads `@did-ixo-…` — do NOT add an extra `did-` prefix.
+ * This is the inverse of the `@did-…` → `did:…` parse used by the Matrix
+ * listener bridge and `normalizeDid` in the editor's page-functions.
+ *
+ * @example
+ * didToMatrixUserId('did:ixo:abc', 'devmx.ixo.earth')
+ * // => '@did-ixo-abc:devmx.ixo.earth'
+ */
+export function didToMatrixUserId(did, homeServer) {
+    return `@${did.replace(/:/g, '-')}:${homeServer}`;
+}

package/dist/modules/messages/agent-builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-builder.d.ts","sourceRoot":"","sources":["../../../src/modules/messages/agent-builder.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EACV,iBAAiB,EAElB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAGjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,kBAAkB,CAAC;IAC5B,QAAQ,EAAE,eAAe,CAAC;IAC1B,aAAa,EAAE,WAAW,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,iBAAiB,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC1C;;;;;;;;;;OAUG;IACH,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC1C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,qBACa,YAAY;IAIrB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAJrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiC;gBAGrC,YAAY,EAAE,yBAAyB,EACvC,kBAAkB,EAAE,kBAAkB;IAGnD,KAAK,CACT,IAAI,EAAE,cAAc,EACpB,eAAe,CAAC,EAAE,eAAe,GAChC,OAAO,CAAC,UAAU,CAAC;CA6LvB"}
+{"version":3,"file":"agent-builder.d.ts","sourceRoot":"","sources":["../../../src/modules/messages/agent-builder.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EACV,iBAAiB,EAElB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAIjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,kBAAkB,CAAC;IAC5B,QAAQ,EAAE,eAAe,CAAC;IAC1B,aAAa,EAAE,WAAW,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,iBAAiB,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC1C;;;;;;;;;;OAUG;IACH,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC1C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,qBACa,YAAY;IAIrB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAJrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiC;gBAGrC,YAAY,EAAE,yBAAyB,EACvC,kBAAkB,EAAE,kBAAkB;IAGnD,KAAK,CACT,IAAI,EAAE,cAAc,EACpB,eAAe,CAAC,EAAE,eAAe,GAChC,OAAO,CAAC,UAAU,CAAC;CA6LvB"}

package/dist/modules/messages/agent-builder.js

@@ -10,6 +10,7 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 var AgentBuilder_1;
 import { Injectable, Logger } from '@nestjs/common';
 import { createMainAgent } from '../../graph/main-agent.js';
+import { didToMatrixUserId } from '../../matrix/user-id.js';
 import { UserPreferencesService } from '../../plugins/user-preferences/service/user-preferences.service.js';
 import { OracleRuntimeBundleHolder } from './oracle-runtime-bundle.js';
 import { UserContextFetcher } from './user-context-fetcher.js';
@@ -142,7 +143,7 @@ let AgentBuilder = AgentBuilder_1 = class AgentBuilder {
         const requestCtx = {
             user: {
                 did: payload.did,
-                matrixUserId: `@did-${payload.did.replace(/:/g, '-')}:${prepared.homeServerName}`,
+                matrixUserId: didToMatrixUserId(payload.did, prepared.homeServerName),
                 ucanDelegation,
                 timezone: prepared.timezone,
                 currentTime: prepared.currentTime,

package/dist/modules/sessions/session-history-processor.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-history-processor.service.d.ts","sourceRoot":"","sources":["../../../src/modules/sessions/session-history-processor.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAKzE,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,KAAK,KAAK,EAAE,MAAM,eAAe,CAAC;AAE3C,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEtD,MAAM,WAAW,2BAA2B;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,qBACa,uBAAuB;IAIhC,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,qBAAqB;IACtC,OAAO,CAAC,QAAQ,CAAC,aAAa;IACP,OAAO,CAAC,QAAQ,CAAC,YAAY;IACxC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;IAR3C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4C;gBAGhD,eAAe,EAAE,eAAe,EAChC,mBAAmB,EAAE,mBAAmB,EACxC,qBAAqB,EAAE,qBAAqB,EAC5C,aAAa,EAAE,aAAa,EACL,YAAY,EAAE,KAAK,EAC9B,WAAW,CAAC,EAAE,WAAW,YAAA;IAGxD;;;OAGG;IACG,qBAAqB,CACzB,MAAM,EAAE,2BAA2B,GAClC,OAAO,CAAC,IAAI,CAAC;YAuBF,8BAA8B;YAiC9B,6BAA6B;IAgJ3C;;;;;;;;OAQG;IACH,OAAO,CAAC,qCAAqC;IAyD7C;;;;;;;OAOG;YACW,sBAAsB;CAwBrC"}
+{"version":3,"file":"session-history-processor.service.d.ts","sourceRoot":"","sources":["../../../src/modules/sessions/session-history-processor.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAKzE,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,KAAK,KAAK,EAAE,MAAM,eAAe,CAAC;AAG3C,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEtD,MAAM,WAAW,2BAA2B;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,qBACa,uBAAuB;IAIhC,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,qBAAqB;IACtC,OAAO,CAAC,QAAQ,CAAC,aAAa;IACP,OAAO,CAAC,QAAQ,CAAC,YAAY;IACxC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;IAR3C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4C;gBAGhD,eAAe,EAAE,eAAe,EAChC,mBAAmB,EAAE,mBAAmB,EACxC,qBAAqB,EAAE,qBAAqB,EAC5C,aAAa,EAAE,aAAa,EACL,YAAY,EAAE,KAAK,EAC9B,WAAW,CAAC,EAAE,WAAW,YAAA;IAGxD;;;OAGG;IACG,qBAAqB,CACzB,MAAM,EAAE,2BAA2B,GAClC,OAAO,CAAC,IAAI,CAAC;YAuBF,8BAA8B;YAiC9B,6BAA6B;IAgJ3C;;;;;;;;OAQG;IACH,OAAO,CAAC,qCAAqC;IAyD7C;;;;;;;OAOG;YACW,sBAAsB;CAwBrC"}

package/dist/modules/sessions/session-history-processor.service.js

@@ -19,6 +19,7 @@ import { getMatrixHomeServerCroppedForDid } from '@ixo/oracles-chain-client';
 import { CACHE_MANAGER } from '@nestjs/cache-manager';
 import { Inject, Injectable, Logger, Optional } from '@nestjs/common';
 import { ConfigService } from '@nestjs/config';
+import { didToMatrixUserId } from '../../matrix/user-id.js';
 import { UserPreferencesService } from '../../plugins/user-preferences/service/user-preferences.service.js';
 import { MessagesService } from '../messages/messages.service.js';
 import { UcanService } from '../ucan/ucan.service.js';
@@ -230,7 +231,7 @@ let SessionHistoryProcessor = SessionHistoryProcessor_1 = class SessionHistoryPr
         if (fromPrefs)
             return fromPrefs;
         try {
-            const matrixUserId = `@did-${did.replace(/:/g, '-')}:${userHomeServer}`;
+            const matrixUserId = didToMatrixUserId(did, userHomeServer);
             const displayName = await MatrixManager.getInstance().getDisplayName(matrixUserId);
             const trimmed = displayName?.trim();
             if (trimmed)

package/dist/plugins/domain-indexer/domain-indexer-tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"domain-indexer-tools.d.ts","sourceRoot":"","sources":["../../../src/plugins/domain-indexer/domain-indexer-tools.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAiL5D;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,EAAE,CAgDtE"}
+{"version":3,"file":"domain-indexer-tools.d.ts","sourceRoot":"","sources":["../../../src/plugins/domain-indexer/domain-indexer-tools.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAqM5D;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,EAAE,CAgDtE"}

package/dist/plugins/domain-indexer/domain-indexer-tools.js

@@ -25,8 +25,9 @@ const searchSchema = z.object({
         .describe('Optional: Comma-separated list of scopes to search: domain_cards (default), agents, compositions, events. Use "domain_cards" to find organizations/projects/DAOs with summaries and FAQs.'),
     filters: z.record(z.string(), z.string()).optional()
         .describe(`Optional filters as key-value pairs. Examples:
+- {"dc.entity_type": "dao/pod"} - Filter by exact chain entity type (e.g. dao/pod, dao/protocol, dao — compound types are preserved, not split)
+- {"dc.entity_verified": "true"} - Only verified entities (chain-sourced: true/false/omit for all)
 - {"dc.categories": "dao,project"} - Filter by categories
-- {"dc.entity_type": "dao"} - Filter by entity type
 - {"dc.has_url": "true"} - Only entities with URLs
 - {"dc.keywords": "blockchain,web3"} - Filter by keywords
 - {"agent.domain_card_id": "did:ixo:entity:ixoworld"} - Agents for specific entity
@@ -84,11 +85,27 @@ WORKFLOW:
 5. If you need more complete information, use get_domain_card with the entity's DID (found in record.id)
 
 FILTERS (optional):
-- Domain cards: dc.categories (comma-separated), dc.entity_type, dc.keywords, dc.issuer, dc.has_url (true/false), dc.has_logo (true/false), dc.valid_from_gte (ISO date), dc.valid_from_lte (ISO date), dc.bbox (minLng,minLat,maxLng,maxLat), dc.near (lng,lat), dc.radius (meters)
+- Domain cards:
+  - dc.entity_type: exact chain entity type — "dao/pod" for pods, "dao/protocol" for protocol DAOs, "dao" for plain DAOs. Compound types are never split; "dao/pod" and "dao" are distinct values.
+  - dc.entity_verified: "true" or "false" — chain-verified status. Omit to include both.
+  - dc.categories: comma-separated category values
+  - dc.keywords: comma-separated keywords
+  - dc.issuer: DID of the issuer
+  - dc.has_url: "true"/"false" — whether entity has a URL
+  - dc.has_logo: "true"/"false" — whether entity has a logo
+  - dc.valid_from_gte / dc.valid_from_lte: ISO datetime bounds
+  - dc.bbox: minLng,minLat,maxLng,maxLat (geo bounding box)
+  - dc.near + dc.radius: lng,lat and radius in km (geo proximity)
 - Agents: agent.domain_card_id, agent.has_url (true/false)
 - Compositions: comp.domain_card_id, comp.creator, comp.has_url (true/false)
 - Events: event.domain_card_id, event.from (ISO date), event.to (ISO date), event.location
 
+ENTITY TYPE EXAMPLES:
+- Find all pods: {"dc.entity_type": "dao/pod"}
+- Find protocol DAOs: {"dc.entity_type": "dao/protocol"}
+- Find verified entities of type protocol/dao: {"dc.entity_type": "dao/protocol", "dc.entity_verified": "true"}
+- "verified entities of type protocol/dao relevant to mining" → query: "mining", filters: {"dc.entity_type": "dao/protocol", "dc.entity_verified": "true"}
+
 IMPORTANT: Always check the 'record' field in results for summary, overview, and faq data. These fields contain the curated information about the entity.`;
 const CARD_DESCRIPTION = `Get essential domain card details by DID (Decentralized Identifier) including summary, overview, FAQs, and key information. Returns only essential fields to optimize context usage.
 
@@ -119,7 +136,8 @@ WHAT IT RETURNS (filtered to essential fields only):
 - faq: Array of FAQ objects with question and answer fields
 - url: Entity website URL
 - keywords: Array of keywords
-- entity_type: Array of entity types
+- entity_type: Array containing the chain entity type (e.g. ["dao/pod"], ["dao/protocol"], ["dao"])
+- entity_verified: boolean or null — whether the entity is verified on-chain (null means not yet determined)
 
 WORKFLOW:
 1. First use domain_indexer_search to find entities
@@ -143,6 +161,7 @@ function projectDomainCard(card) {
         url: c.url,
         keywords: c.keywords ?? [],
         entity_type: c.entity_type ?? [],
+        entity_verified: c.entity_verified ?? null,
     };
 }
 /**

package/dist/plugins/editor/editor-access-denied-tool.d.ts

@@ -0,0 +1,21 @@
+import type { StructuredTool } from 'langchain';
+import type { EditorUnavailableReason } from './prompts.js';
+export interface EditorAccessDeniedToolOptions {
+    /** The page room the client reported open. */
+    editorRoomId: string;
+    /** Why the real editor surface refused to bind. */
+    reason: EditorUnavailableReason;
+}
+/**
+ * Stand-in for `call_editor_agent` bound when a page is open but the real
+ * editor surface refused to attach (the user is not a verified member of the
+ * page's room, or the sub-agent build failed).
+ *
+ * Without it, the model is shown an "editor" capability it cannot reach and
+ * either narrates its sub-agent task as user-facing text or hunts through
+ * `list_capabilities`/`load_capability` for a tool that will never appear.
+ * With it, any editor call returns the denial so the model can report the
+ * real reason to the user.
+ */
+export declare function createEditorAccessDeniedTool(options: EditorAccessDeniedToolOptions): StructuredTool;
+//# sourceMappingURL=editor-access-denied-tool.d.ts.map

package/dist/plugins/editor/editor-access-denied-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"editor-access-denied-tool.d.ts","sourceRoot":"","sources":["../../../src/plugins/editor/editor-access-denied-tool.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAGhD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAQ5D,MAAM,WAAW,6BAA6B;IAC5C,8CAA8C;IAC9C,YAAY,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,MAAM,EAAE,uBAAuB,CAAC;CACjC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,6BAA6B,GACrC,cAAc,CAqBhB"}

package/dist/plugins/editor/editor-access-denied-tool.js

@@ -0,0 +1,37 @@
+import { tool } from '@langchain/core/tools';
+import { z } from 'zod';
+import { EDITOR_AGENT_TOOL_NAME } from './editor-agent.js';
+// Mirrors the real sub-agent tool's schema so a model that composed a task
+// for the editor still produces a valid call — the answer is just the denial.
+const taskSchema = z.object({
+    task: z.string().describe('The task you intended to send to the editor.'),
+});
+/**
+ * Stand-in for `call_editor_agent` bound when a page is open but the real
+ * editor surface refused to attach (the user is not a verified member of the
+ * page's room, or the sub-agent build failed).
+ *
+ * Without it, the model is shown an "editor" capability it cannot reach and
+ * either narrates its sub-agent task as user-facing text or hunts through
+ * `list_capabilities`/`load_capability` for a tool that will never appear.
+ * With it, any editor call returns the denial so the model can report the
+ * real reason to the user.
+ */
+export function createEditorAccessDeniedTool(options) {
+    const { editorRoomId, reason } = options;
+    // Membership is resolved with the oracle's admin identity, so a failed
+    // check can mean either side is missing — the user OR the oracle itself
+    // (the lookup is forbidden and fails closed). Keep the wording unified.
+    const message = reason === 'not-member'
+        ? `Editor unavailable: membership of the page's room (${editorRoomId}) could not be verified — ` +
+            `either the user's account or this oracle is not a member of it, and BOTH must be members for page access. ` +
+            `Tell the user: the page can't be read or edited because either they or this oracle is missing from the page's room; ` +
+            `inviting this oracle to the page (or opening a page they own) fixes it. Do not retry this tool.`
+        : `Editor unavailable: the editor service failed to attach to the page's room (${editorRoomId}). ` +
+            `Tell the user the page editor is currently unavailable and they can retry shortly. Do not retry this tool.`;
+    return tool(async () => message, {
+        name: EDITOR_AGENT_TOOL_NAME,
+        description: 'Editor Agent (unavailable for this request — calls return the denial reason).',
+        schema: taskSchema,
+    });
+}

package/dist/plugins/editor/editor-agent.d.ts

@@ -2,6 +2,17 @@ import type { PluginSubAgent } from '../../plugin-api/types.js';
 import { type BlocknoteToolsConfig } from './blocknote-tools.js';
 import { type BlobStoreCapable, type UcanMintCapable } from './mint-invocation-tool.js';
 import type { AppConfig, MatrixRoomConfig } from './provider.js';
+/** Default sub-agent name surfaced to the main agent. */
+export declare const EDITOR_AGENT_NAME = "Editor Agent";
+/**
+ * The tool name the main agent sees for the editor surface — identical for
+ * the room-bound sub-agent (derived via `computeSubAgentToolName`) and the
+ * standalone tool (which sets it directly). The prompt composer checks this
+ * name to decide whether the editor-mode prompts may be injected: telling the
+ * model "EDITOR MODE ACTIVE — use the Editor Agent tool" without this tool
+ * bound makes it narrate its sub-agent task as user-facing text.
+ */
+export declare const EDITOR_AGENT_TOOL_NAME: string;
 type AppConfigOverrides = {
     matrix?: Partial<AppConfig['matrix']>;
     provider?: Partial<AppConfig['provider']>;

package/dist/plugins/editor/editor-agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"editor-agent.d.ts","sourceRoot":"","sources":["../../../src/plugins/editor/editor-agent.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAc,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EACL,KAAK,oBAAoB,EAE1B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACrB,MAAM,2BAA2B,CAAC;AAGnC,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AASjE,KAAK,kBAAkB,GAAG;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtC,QAAQ,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1C,SAAS,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;CAC7C,CAAC;AA+DF,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,UAAU,CAAC;AAElD,MAAM,WAAW,0BAA0B;IACzC,uEAAuE;IACvE,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAAC;IAChC,gEAAgE;IAChE,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB,2EAA2E;IAC3E,WAAW,EAAE,oBAAoB,CAAC;IAClC,yDAAyD;IACzD,eAAe,CAAC,EAAE,kBAAkB,CAAC;IACrC,qEAAqE;IACrE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4FAA4F;IAC5F,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;sDAEkD;IAClD,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B;;;2CAGuC;IACvC,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA6FD;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,0BAA0B,GACjC,OAAO,CAAC,cAAc,CAAC,CAyFzB"}
+{"version":3,"file":"editor-agent.d.ts","sourceRoot":"","sources":["../../../src/plugins/editor/editor-agent.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAc,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACrB,MAAM,2BAA2B,CAAC;AAGnC,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjE,yDAAyD;AACzD,eAAO,MAAM,iBAAiB,iBAAiB,CAAC;AAEhD;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,QACS,CAAC;AAS7C,KAAK,kBAAkB,GAAG;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtC,QAAQ,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1C,SAAS,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;CAC7C,CAAC;AA+DF,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,UAAU,CAAC;AAElD,MAAM,WAAW,0BAA0B;IACzC,uEAAuE;IACvE,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAAC;IAChC,gEAAgE;IAChE,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB,2EAA2E;IAC3E,WAAW,EAAE,oBAAoB,CAAC;IAClC,yDAAyD;IACzD,eAAe,CAAC,EAAE,kBAAkB,CAAC;IACrC,qEAAqE;IACrE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4FAA4F;IAC5F,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;sDAEkD;IAClD,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B;;;2CAGuC;IACvC,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA6FD;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,0BAA0B,GACjC,OAAO,CAAC,cAAc,CAAC,CAkFzB"}

package/dist/plugins/editor/editor-agent.js

@@ -1,9 +1,21 @@
+import { computeSubAgentToolName } from '../../graph/subagent-as-tool.js';
 import { tool as pluginTool } from '../../plugin-api/tool-helper.js';
 import { createBlocknoteTools, } from './blocknote-tools.js';
 import { resolveEditorMatrixClient } from './editor-mx.js';
 import { createMintInvocationEditorTool, } from './mint-invocation-tool.js';
 import { createPageTools } from './page-tools.js';
 import { editorAgentPrompt, editorAgentReadOnlyPrompt } from './prompts.js';
+/** Default sub-agent name surfaced to the main agent. */
+export const EDITOR_AGENT_NAME = 'Editor Agent';
+/**
+ * The tool name the main agent sees for the editor surface — identical for
+ * the room-bound sub-agent (derived via `computeSubAgentToolName`) and the
+ * standalone tool (which sets it directly). The prompt composer checks this
+ * name to decide whether the editor-mode prompts may be injected: telling the
+ * model "EDITOR MODE ACTIVE — use the Editor Agent tool" without this tool
+ * bound makes it narrate its sub-agent task as user-facing text.
+ */
+export const EDITOR_AGENT_TOOL_NAME = computeSubAgentToolName(EDITOR_AGENT_NAME);
 const normalizeRoom = (room) => {
     if (typeof room === 'string') {
         return { type: 'id', value: room };
@@ -96,7 +108,7 @@ function wrapStructuredTool(t) {
  * first call with the credentials carried in `toolsConfig`.
  */
 export async function createEditorSubAgent(params) {
-    const { room, mode = 'edit', toolsConfig, configOverrides, name = 'Editor Agent', description = 'AI Agent that reads and writes pages and blocks in the BlockNote editor.', userMatrixId, spaceId, ucanService, blobStore, userDid, } = params;
+    const { room, mode = 'edit', toolsConfig, configOverrides, name = EDITOR_AGENT_NAME, description = 'AI Agent that reads and writes pages and blocks in the BlockNote editor.', userMatrixId, spaceId, ucanService, blobStore, userDid, } = params;
     const roomConfig = normalizeRoom(room);
     const matrixClient = await resolveEditorMatrixClient({
         baseUrl: toolsConfig.matrix.baseUrl,
@@ -142,17 +154,10 @@ export async function createEditorSubAgent(params) {
         tools,
         model: 'subagent',
         middlewares: [],
-        // Bubble the page + block mutation events into the main chat so the FE
-        // renders artifact previews and edit confirmations inline. Names absent
-        // in the read-only toolset are simply nothing-to-forward. `mint_invocation`
-        // is forwarded so the main agent sees the returned `blobId` and can pass
-        // it straight to `sandbox_write_blob`.
-        forwardTools: [
-            'create_page',
-            'update_page',
-            'edit_block',
-            'create_block',
-            'mint_invocation',
-        ],
+        // Forward EVERY tool call (reads and writes) into the main chat so the
+        // FE renders page/block activity inline and the main agent sees results
+        // directly — e.g. `mint_invocation`'s `blobId`, which it passes straight
+        // to `sandbox_write_blob`.
+        forwardTools: true,
     };
 }

package/dist/plugins/editor/editor.plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"editor.plugin.d.ts","sourceRoot":"","sources":["../../../src/plugins/editor/editor.plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAGlD,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,KAAK,EACV,cAAc,EACd,cAAc,EACd,UAAU,EACV,cAAc,EACf,MAAM,2BAA2B,CAAC;AAUnC;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AA2FD;;;;;;;;;GASG;AACH,qBAAa,YAAa,SAAQ,YAAY;IAC5C,MAAM,CAAC,QAAQ,CAAC,IAAI,YAAY;IAEhC,QAAQ,CAAC,IAAI,YAAqB;IAElC,QAAQ,CAAC,OAAO,WAAW;IAE3B,QAAQ,CAAC,QAAQ,iBAAY;IAK7B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAe;gBAEjC,OAAO,GAAE,mBAAwB;IAK9B,mBAAmB,CAChC,KAAK,EAAE,cAAc,GACpB,OAAO,CAAC,cAAc,EAAE,CAAC;IAwCb,eAAe,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;CAyD7E"}
+{"version":3,"file":"editor.plugin.d.ts","sourceRoot":"","sources":["../../../src/plugins/editor/editor.plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAGlD,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,KAAK,EACV,cAAc,EACd,cAAc,EACd,UAAU,EACV,cAAc,EACf,MAAM,2BAA2B,CAAC;AAanC;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AA2FD;;;;;;;;;GASG;AACH,qBAAa,YAAa,SAAQ,YAAY;IAC5C,MAAM,CAAC,QAAQ,CAAC,IAAI,YAAY;IAEhC,QAAQ,CAAC,IAAI,YAAqB;IAElC,QAAQ,CAAC,OAAO,WAAW;IAE3B,QAAQ,CAAC,QAAQ,iBAAY;IAK7B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAe;gBAEjC,OAAO,GAAE,mBAAwB;IAK9B,mBAAmB,CAChC,KAAK,EAAE,cAAc,GACpB,OAAO,CAAC,cAAc,EAAE,CAAC;IAwCb,eAAe,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;CAyD7E"}

package/dist/plugins/editor/editor.plugin.js

@@ -4,7 +4,7 @@ import { OraclePlugin } from '../../plugin-api/oracle-plugin.js';
 import { SandboxPlugin } from '../sandbox/index.js';
 import { createApplySandboxOutputTool } from './apply-sandbox-output.js';
 import { buildBlocknoteToolsConfig, } from './blocknote-tools.js';
-import { createEditorSubAgent } from './editor-agent.js';
+import { createEditorSubAgent, EDITOR_AGENT_TOOL_NAME, } from './editor-agent.js';
 import { createStandaloneEditorTool } from './standalone-editor-tool.js';
 /**
  * Internal parse schema for `parseToolsConfig`. These 3 env vars already
@@ -42,17 +42,17 @@ const manifest = {
         {
             user: 'Summarize the current page.',
             thought: 'Delegate to the Editor sub-agent with the active room. It will read the page and return a summary.',
-            tool: 'call_editor_agent',
+            tool: EDITOR_AGENT_TOOL_NAME,
         },
         {
             user: 'Set the status block to completed.',
             thought: 'Page edit — delegate with explicit block target + new value. Never paraphrase block IDs or status names.',
-            tool: 'call_editor_agent',
+            tool: EDITOR_AGENT_TOOL_NAME,
         },
     ],
     tags: ['editor', 'blocknote', 'pages', 'documents'],
     category: 'data',
-    visibility: 'on-demand',
+    visibility: 'always',
     stability: 'stable',
 };
 function parseToolsConfig(cfg, matrixClient) {

package/dist/plugins/editor/index.d.ts

@@ -1,6 +1,7 @@
 export { EditorPlugin } from './editor.plugin.js';
-export { createEditorSubAgent, type CreateEditorSubAgentParams, type EditorAgentMode, } from './editor-agent.js';
+export { createEditorSubAgent, EDITOR_AGENT_NAME, EDITOR_AGENT_TOOL_NAME, type CreateEditorSubAgentParams, type EditorAgentMode, } from './editor-agent.js';
 export { createStandaloneEditorTool } from './standalone-editor-tool.js';
+export { createEditorAccessDeniedTool, type EditorAccessDeniedToolOptions, } from './editor-access-denied-tool.js';
 export { createApplySandboxOutputTool } from './apply-sandbox-output.js';
 export { buildBlocknoteToolsConfig, type BlocknoteToolsConfig, type BlocknoteToolsMatrixConfig, } from './blocknote-tools.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/plugins/editor/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/plugins/editor/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EACL,oBAAoB,EACpB,KAAK,0BAA0B,EAC/B,KAAK,eAAe,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EACL,yBAAyB,EACzB,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,GAChC,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/plugins/editor/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,sBAAsB,EACtB,KAAK,0BAA0B,EAC/B,KAAK,eAAe,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EACL,4BAA4B,EAC5B,KAAK,6BAA6B,GACnC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EACL,yBAAyB,EACzB,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,GAChC,MAAM,sBAAsB,CAAC"}

package/dist/plugins/editor/index.js

@@ -1,5 +1,6 @@
 export { EditorPlugin } from './editor.plugin.js';
-export { createEditorSubAgent, } from './editor-agent.js';
+export { createEditorSubAgent, EDITOR_AGENT_NAME, EDITOR_AGENT_TOOL_NAME, } from './editor-agent.js';
 export { createStandaloneEditorTool } from './standalone-editor-tool.js';
+export { createEditorAccessDeniedTool, } from './editor-access-denied-tool.js';
 export { createApplySandboxOutputTool } from './apply-sandbox-output.js';
 export { buildBlocknoteToolsConfig, } from './blocknote-tools.js';

package/dist/plugins/editor/page-functions.d.ts

@@ -1,6 +1,3 @@
-/**
- * Page management functions — reusable from services, API routes, and tests.
- */
 import type { MatrixClient } from 'matrix-js-sdk';
 import { type MatrixConfig, type ProviderConfig } from './provider.js';
 export interface CreatePageParams {

package/dist/plugins/editor/page-functions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"page-functions.d.ts","sourceRoot":"","sources":["../../../src/plugins/editor/page-functions.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAQlD,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,cAAc,EACpB,MAAM,eAAe,CAAC;AAwBvB,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,YAAY,CAAC;IAC3B,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACzC,cAAc,EAAE,cAAc,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,YAAY,CAAC;IAC3B,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACzC,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,MAAM,EAAE,KAAK,CAAC;QACZ,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAqCD;;;;;;GAMG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,gBAAgB,CAAC,CAuI3B;AAID,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,YAAY,CAAC;IAC3B,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACzC,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,QAAQ;IACvB,KAAK,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACrC,KAAK,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACrC,OAAO,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CACxC;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,gBAAgB,CAAC,CAgJ3B;AAED;;;;GAIG;AACH,wBAAsB,QAAQ,CAC5B,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,cAAc,CAAC,CAsCzB"}
+{"version":3,"file":"page-functions.d.ts","sourceRoot":"","sources":["../../../src/plugins/editor/page-functions.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAQlD,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,cAAc,EACpB,MAAM,eAAe,CAAC;AAwBvB,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,YAAY,CAAC;IAC3B,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACzC,cAAc,EAAE,cAAc,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,YAAY,CAAC;IAC3B,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACzC,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,MAAM,EAAE,KAAK,CAAC;QACZ,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAqCD;;;;;;GAMG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,gBAAgB,CAAC,CAwJ3B;AAID,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,YAAY,CAAC;IAC3B,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACzC,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,QAAQ;IACvB,KAAK,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACrC,KAAK,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACrC,OAAO,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CACxC;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,gBAAgB,CAAC,CA4I3B;AAED;;;;GAIG;AACH,wBAAsB,QAAQ,CAC5B,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,cAAc,CAAC,CAsCzB"}

package/dist/plugins/editor/page-functions.js

@@ -1,3 +1,4 @@
+/* eslint-disable @typescript-eslint/no-unnecessary-type-assertion */
 /**
  * Page management functions — reusable from services, API routes, and tests.
  */
@@ -107,15 +108,31 @@ export async function createPage(params) {
     });
     const roomId = createRoomResponse.room_id;
     logger.log(`Page room created: ${roomId}`);
-    // If parent space exists, add the room as a child of the space
+    // Link the page under its space by writing m.space.child INTO the space room.
+    // The oracle admin (this matrixClient) must be a member of the space with
+    // permission to send that state event. It may have been invited during space
+    // provisioning but not yet joined, so try to join first. If the admin has no
+    // access to the user's space this is expected to fail (M_FORBIDDEN) — the page
+    // still carries its m.space.parent claim (set in initial_state) and the
+    // returned spaceId, so a client acting as the user (who IS in the space) can
+    // complete the link.
     if (parentSpaceId) {
         try {
+            const adminInSpace = matrixClient.getRoom(parentSpaceId)?.getMember(creatorId)
+                ?.membership === 'join';
+            if (!adminInSpace) {
+                await matrixClient.joinRoom(parentSpaceId);
+            }
             await matrixClient.sendStateEvent(parentSpaceId, 
             // eslint-disable-next-line @typescript-eslint/no-explicit-any
             'm.space.child', { via: [homeserver] }, roomId);
+            logger.log(`Linked page ${roomId} under space ${parentSpaceId}`);
         }
         catch (error) {
-            logger.warn(`Failed to add page as child of space ${parentSpaceId}: ${error}`);
+            logger.warn(`Could not link page ${roomId} under space ${parentSpaceId}: the oracle ` +
+                `admin lacks membership/permission in that space. The page keeps its ` +
+                `m.space.parent claim and the returned spaceId — a user-authorized ` +
+                `client can complete the m.space.child link. (${error})`);
         }
     }
     // Parse markdown content into BlockNote blocks if provided
@@ -220,7 +237,6 @@ export async function updatePage(params) {
         let oldContentMd = '';
         if (content !== undefined || appendContent !== undefined) {
             const oldBlocks = serverEditor.yXmlFragmentToBlocks(doc.getXmlFragment('document'));
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
             oldContentMd = await serverEditor.blocksToMarkdownLossy(oldBlocks);
         }
         doc.transact(() => {
@@ -252,7 +268,6 @@ export async function updatePage(params) {
         // Snapshot new content as markdown (for diff) after mutations
         if (content !== undefined || appendContent !== undefined) {
             const newBlocks = serverEditor.yXmlFragmentToBlocks(doc.getXmlFragment('document'));
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
             const newContentMd = await serverEditor.blocksToMarkdownLossy(newBlocks);
             diff.content = { old: oldContentMd, new: newContentMd };
         }

package/dist/plugins/editor/prompts.d.ts

@@ -17,6 +17,22 @@ export declare const STANDALONE_EDITOR_PROMPTS: {
     operationalMode: string;
     editorSection: string;
 };
+/** Why the editor surface could not be attached to this request. */
+export type EditorUnavailableReason = 'not-member' | 'bind-error';
+/**
+ * Operational-mode block injected when a page is open in the client
+ * (`editorRoomId`) but the editor surface refused to bind — the user is not
+ * a verified member of the page's room, or the sub-agent build failed.
+ *
+ * Paired with the stub `call_editor_agent` tool (see
+ * `createEditorAccessDeniedTool`): even a model that skips this block and
+ * calls the editor anyway learns the denial from the tool result instead of
+ * narrating its sub-agent task as user-facing text.
+ */
+export declare function editorUnavailableMode(options: {
+    editorRoomId: string;
+    reason: EditorUnavailableReason;
+}): string;
 export declare const editorAgentPrompt: string;
 export declare const editorAgentReadOnlyPrompt: string;
 //# sourceMappingURL=prompts.d.ts.map

package/dist/plugins/editor/prompts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prompts.d.ts","sourceRoot":"","sources":["../../../src/plugins/editor/prompts.ts"],"names":[],"mappings":"AAyFA,eAAO,MAAM,4BAA4B,2tQAmHrC,CAAC;AAEL,eAAO,MAAM,sCAAsC,2/GAiE/C,CAAC;AAEL;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;;;CAwH/B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,yBAAyB;;;CA0CrC,CAAC;AAEF,eAAO,MAAM,iBAAiB,QAItB,CAAC;AAET,eAAO,MAAM,yBAAyB,QAI9B,CAAC"}
+{"version":3,"file":"prompts.d.ts","sourceRoot":"","sources":["../../../src/plugins/editor/prompts.ts"],"names":[],"mappings":"AAyFA,eAAO,MAAM,4BAA4B,2tQAmHrC,CAAC;AAEL,eAAO,MAAM,sCAAsC,2/GAiE/C,CAAC;AAEL;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;;;CAwH/B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,yBAAyB;;;CA8CrC,CAAC;AAEF,oEAAoE;AACpE,MAAM,MAAM,uBAAuB,GAAG,YAAY,GAAG,YAAY,CAAC;AAElE;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE;IAC7C,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,uBAAuB,CAAC;CACjC,GAAG,MAAM,CAwBT;AAED,eAAO,MAAM,iBAAiB,QAItB,CAAC;AAET,eAAO,MAAM,yBAAyB,QAI9B,CAAC"}

package/dist/plugins/editor/prompts.js

@@ -308,7 +308,7 @@ For read-only operations (reading, listing, summarizing), always proceed without
 confirmation — only pause when about to write or edit.
 
 **Page Management:**
-- **Create page:** Delegate to the Editor Agent — it has the \`create_page\` tool. Example: call_editor_agent with "Create a new page titled 'Meeting Notes' with the following content: ..."
+- **Create page:** Delegate to the Editor Agent — it has the \`create_page\` tool, which creates a **brand-new page room under the user's space automatically**. You do NOT supply, look up, or know a room ID to create a page — \`create_page\` generates the room and returns the new \`roomId\`. Example: call_editor_agent with "Create a new page titled 'Meeting Notes' with the following content: ..."
 - **List pages:** Use the \`list_workspace_pages\` browser tool to list all pages in the user's workspace. This runs on the client side and returns page names, room IDs, and types.
 - **Edit/read a specific page by name:** When the user asks to edit or read a page and you don't have its room ID:
   1. Call \`list_workspace_pages\` (browser tool) to find the page by name and get its room ID
@@ -404,22 +404,26 @@ You have \`call_editor_agent\` which starts an Editor Agent subagent for any pag
 
 **⚠️ Pages are BlockNote documents — NOT entities.** Pages are collaborative documents in the user's workspace. They are completely separate from IXO blockchain entities. NEVER use the Domain Indexer Agent for page operations — it has no knowledge of pages. ALL page operations (list, read, edit, create, update) go through \`list_workspace_pages\` and \`call_editor_agent\`.
 
-**Workflow for ANY page-related request (read, edit, update, create, list):**
+**Creating a NEW page:**
+- To create a new page, call \`call_editor_agent\` with ONLY a \`task\` and **NO \`room_id\`**. \`create_page\` makes a fresh page room under the user's space automatically and returns the new \`roomId\` — you never provide, look up, or guess a room ID to create a page.
+- Example: \`call_editor_agent({ task: "Create a new page titled 'Meeting Notes' with a short agenda" })\`
+
+**Workflow for reading/editing an EXISTING page:**
 1. Use \`list_workspace_pages\` (browser tool) to discover pages and their room IDs
-2. Call \`call_editor_agent\` with the \`room_id\` and your editing \`task\`
-3. The editor agent has full capabilities: list/edit/create/delete blocks, read/update/create pages, surveys, find-and-replace, bulk edits
+2. Call \`call_editor_agent\` with the \`room_id\` AND your editing \`task\`
+3. The editor agent has full capabilities: list/edit/create/delete blocks, read/update pages, surveys, find-and-replace, bulk edits
 
 **⚠️ Parameter format — room_id and task are SEPARATE fields:**
-- \`room_id\`: ONLY the Matrix room ID string (starts with "!", contains ":"). Nothing else.
+- \`room_id\`: the Matrix room ID of an EXISTING page (starts with "!", contains ":"). **OMIT it entirely to CREATE a new page.**
 - \`task\`: ONLY the detailed, self-contained instruction. No room IDs here.
 
 **Examples (correct):**
-- \`call_editor_agent({ room_id: "!abc:server.example", task: "Read this page and summarize its content" })\`
-- \`call_editor_agent({ room_id: "!abc:server.example", task: "Find the status block and set it to completed" })\`
-- \`call_editor_agent({ room_id: "!abc:server.example", task: "Create a new page titled 'Meeting Notes'" })\`
-- \`call_editor_agent({ room_id: "!abc:server.example", task: "Shorten the content by 50% while keeping key points" })\`
+- Create (no room_id): \`call_editor_agent({ task: "Create a new page titled 'Meeting Notes'" })\`
+- Read: \`call_editor_agent({ room_id: "!abc:server.example", task: "Read this page and summarize its content" })\`
+- Edit: \`call_editor_agent({ room_id: "!abc:server.example", task: "Find the status block and set it to completed" })\`
+- Rewrite: \`call_editor_agent({ room_id: "!abc:server.example", task: "Shorten the content by 50% while keeping key points" })\`
 
-**Important:** Always get the room ID from \`list_workspace_pages\` first — never guess room IDs.
+**Important:** When editing an existing page, get the room ID from \`list_workspace_pages\` first — never guess room IDs. Creating a page needs no room ID.
 
 **Page Context Switches:**
 The user may switch pages mid-conversation. When tool results (read_page, list_blocks)
@@ -439,6 +443,38 @@ Never send vague or empty tasks — the editor agent cannot infer intent from yo
 
 When a skill needs to authenticate against an external UCAN-gated service: call \`call_editor_agent\` with a task naming \`mint_invocation\` and the required args (\`delegationCid\`, \`serviceUrl\`, \`can\`, \`withResource\` — all from the companion prompt). The tool returns \`{ blobId, invocation, ... }\`. **Use \`blobId\` — pass it to \`sandbox_write_blob({ blobId, path: "/workspace/data/<skill>/ucan_token" })\`** so the runtime writes the value via \`sandbox_write_file\` without the long base64 CAR ever entering this conversation. Single-use; re-mint per protected call; expire ~90s so write the blob immediately. On "blob not found", re-mint and retry.`,
 };
+/**
+ * Operational-mode block injected when a page is open in the client
+ * (`editorRoomId`) but the editor surface refused to bind — the user is not
+ * a verified member of the page's room, or the sub-agent build failed.
+ *
+ * Paired with the stub `call_editor_agent` tool (see
+ * `createEditorAccessDeniedTool`): even a model that skips this block and
+ * calls the editor anyway learns the denial from the tool result instead of
+ * narrating its sub-agent task as user-facing text.
+ */
+export function editorUnavailableMode(options) {
+    const { editorRoomId, reason } = options;
+    // The membership lookup runs with the oracle's admin identity, so a failure
+    // can mean EITHER side is missing from the room: the user isn't a member,
+    // or the oracle itself isn't (the lookup is forbidden and fails closed).
+    // The check can't tell those apart — the wording stays unified.
+    const why = reason === 'not-member'
+        ? `membership of the page's room (\`${editorRoomId}\`) could not be verified — either the user's account or this oracle is not a member of it, and BOTH must be members for the editor to attach`
+        : `the editor service failed to attach to the page's room (\`${editorRoomId}\`)`;
+    const tellUser = reason === 'not-member'
+        ? "the page room membership could not be verified — either their account or this oracle is not a member of the page's room, and both must be. Inviting this oracle to the page (or opening a page they own) fixes it"
+        : 'the editor service is currently unavailable for this page — they can retry shortly';
+    return `**⚠️ PAGE OPEN BUT NOT ACCESSIBLE**
+
+A page is open in the client, but the editor could not be attached to this request: ${why}.
+
+- If the user asks about "the page" / "this page" / "the current page", tell them plainly that you cannot access it because ${tellUser}. Do not guess at the page's content.
+- Calling \`call_editor_agent\` will only return this same denial — do not retry it in a loop.
+- Do NOT call \`list_capabilities\` or \`load_capability\` hunting for editor tools — the editor cannot attach during this request regardless of what is loaded.
+- Never claim to have read or edited the page.
+- Everything unrelated to the page works normally.`;
+}
 export const editorAgentPrompt = `
 ${sharedExpectations}
 

package/dist/plugins/editor/standalone-editor-tool.d.ts

@@ -10,8 +10,11 @@ export interface CreateStandaloneEditorToolOptions {
 }
 /**
  * Build the `call_editor_agent` plugin tool for standalone (no preset room)
- * sessions. Each invocation spins up a short-lived inner agent over the
- * supplied `room_id` and returns its final reply text.
+ * sessions. Each invocation spins up a short-lived inner agent — over the
+ * supplied `room_id`, or in create mode (no `room_id`) with only the
+ * page-lifecycle tools — and returns a Command that pushes the inner tool
+ * calls plus the final reply into the parent graph, mirroring the
+ * `forwardTools: true` behaviour of the editor sub-agent path.
  */
 export declare function createStandaloneEditorTool(opts: CreateStandaloneEditorToolOptions): PluginTool;
 //# sourceMappingURL=standalone-editor-tool.d.ts.map

package/dist/plugins/editor/standalone-editor-tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"standalone-editor-tool.d.ts","sourceRoot":"","sources":["../../../src/plugins/editor/standalone-editor-tool.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAkB,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EACL,KAAK,oBAAoB,EAE1B,MAAM,sBAAsB,CAAC;AAsE9B,MAAM,WAAW,iCAAiC;IAChD,mDAAmD;IACnD,WAAW,EAAE,oBAAoB,CAAC;IAClC,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,4FAA4F;IAC5F,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,iCAAiC,GACtC,UAAU,CAoHZ"}
+{"version":3,"file":"standalone-editor-tool.d.ts","sourceRoot":"","sources":["../../../src/plugins/editor/standalone-editor-tool.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,UAAU,EAAkB,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,sBAAsB,CAAC;AA0E9B,MAAM,WAAW,iCAAiC;IAChD,mDAAmD;IACnD,WAAW,EAAE,oBAAoB,CAAC;IAClC,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,4FAA4F;IAC5F,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,iCAAiC,GACtC,UAAU,CAyKZ"}

package/dist/plugins/editor/standalone-editor-tool.js

@@ -1,8 +1,11 @@
-import { HumanMessage } from '@langchain/core/messages';
+import { HumanMessage, ToolMessage, } from '@langchain/core/messages';
+import { Command } from '@langchain/langgraph';
 import { createAgent } from 'langchain';
-import { emojify } from '../../utils/emoji.js';
 import { z } from 'zod';
+import { emojify } from '../../utils/emoji.js';
+import { filterForwardedMessages } from '../../graph/subagent-as-tool.js';
 import { isUserInRoom } from '../../matrix/room-membership.js';
+import { EDITOR_AGENT_TOOL_NAME } from './editor-agent.js';
 import { tool as pluginTool } from '../../plugin-api/tool-helper.js';
 import { createBlocknoteTools, } from './blocknote-tools.js';
 import { resolveEditorMatrixClient } from './editor-mx.js';
@@ -13,15 +16,19 @@ const standaloneEditorSchema = z.object({
     room_id: z
         .string()
         .regex(/^!.+:.+$/, 'Room ID must start with "!" (e.g., "!abc123:matrix.org")')
-        .describe('The Matrix room ID of the page (e.g., "!oeGkcJIKNpeSiaGHVE:devmx.ixo.earth"). Must start with "!".'),
+        .optional()
+        .describe('The Matrix room ID of an EXISTING page to read or edit (e.g., "!oeGkcJIKNpeSiaGHVE:devmx.ixo.earth"). ' +
+        "OMIT this entirely to CREATE a new page — create_page generates a fresh room under the user's space and returns its id."),
     task: z
         .string()
         .describe('A detailed, self-contained editing instruction. The editor agent has NO conversation context — ' +
         'this string is ALL it receives. Include: explicit objective, block IDs, property names, exact values, ' +
         'and expected outcome. Do NOT include the room ID here — it goes in room_id.'),
 });
-const STANDALONE_DESCRIPTION = 'Call Editor Agent as a sub-agent to operate on a BlockNote page by Matrix room ID. ' +
-    'Spins up an ephemeral editor session with full block-level capabilities and page management tools for the supplied room.';
+const STANDALONE_DESCRIPTION = 'Call Editor Agent as a sub-agent to operate on a BlockNote page. ' +
+    'Pass a `room_id` to read or edit an EXISTING page; OMIT `room_id` to CREATE a new page ' +
+    "(create_page makes a fresh room under the user's space and returns its id). " +
+    'Spins up an ephemeral editor session with full block-level and page-management tools.';
 function lastMessageContent(messages) {
     const last = messages.at(-1);
     if (!last?.content)
@@ -36,37 +43,43 @@ function lastMessageContent(messages) {
 }
 /**
  * Build the `call_editor_agent` plugin tool for standalone (no preset room)
- * sessions. Each invocation spins up a short-lived inner agent over the
- * supplied `room_id` and returns its final reply text.
+ * sessions. Each invocation spins up a short-lived inner agent — over the
+ * supplied `room_id`, or in create mode (no `room_id`) with only the
+ * page-lifecycle tools — and returns a Command that pushes the inner tool
+ * calls plus the final reply into the parent graph, mirroring the
+ * `forwardTools: true` behaviour of the editor sub-agent path.
  */
 export function createStandaloneEditorTool(opts) {
     return pluginTool(async (rawArgs, ctx) => {
         const { room_id: roomId, task } = standaloneEditorSchema.parse(rawArgs);
-        // The agent supplies `room_id` per call and the editor operates on it
-        // with the oracle's admin Matrix identity. Verify the authenticated user
-        // is a member of the room before touching it — without this an agent
-        // could be steered to read or edit any room id.
-        if (!(await isUserInRoom(roomId, ctx.user.matrixUserId))) {
-            ctx.logger.warn(`[StandaloneEditorTool] user ${ctx.user.did} is not a member of room ${roomId} — refusing access`);
-            return `You do not have access to room ${roomId}.`;
+        // Membership guard. For an EXISTING page the user must be a member of
+        // that room (the editor acts with the oracle's admin identity, so without
+        // this an agent could be steered to read/edit any room id it's handed).
+        // For CREATE (no roomId) the new page is nested under `opts.spaceId`, so
+        // guard on space membership instead. The refusal text is addressed to
+        // the agent so it can explain the situation to the user instead of
+        // surfacing a bare permission error.
+        const guardRoomId = roomId ?? opts.spaceId;
+        if (!(await isUserInRoom(guardRoomId, ctx.user.matrixUserId))) {
+            ctx.logger.warn(`[StandaloneEditorTool] user ${ctx.user.did} is not a member of ${guardRoomId} — refusing access`);
+            return roomId
+                ? `Access denied: the user is not a member of page room ${roomId}. ` +
+                    'Tell the user they do not have access to this page — they need to be ' +
+                    'invited to it before you can read or edit it on their behalf.'
+                : `Access denied: the user is not a member of workspace space ${opts.spaceId}. ` +
+                    'Tell the user they are not part of this workspace — they need to be ' +
+                    'invited to the space before you can create pages in it on their behalf.';
         }
         try {
-            const roomConfig = { type: 'id', value: roomId };
             const matrixClient = await resolveEditorMatrixClient({
                 baseUrl: opts.toolsConfig.matrix.baseUrl,
                 userId: opts.toolsConfig.matrix.userId,
                 accessToken: opts.toolsConfig.matrix.accessToken,
                 matrixClient: opts.toolsConfig.matrixClient,
             });
-            const appConfig = {
-                matrix: { ...opts.toolsConfig.matrix, room: roomConfig },
-                provider: { ...opts.toolsConfig.provider },
-                blocknote: { ...opts.toolsConfig.blocknote },
-            };
-            // `createBlocknoteTools` returns a discriminated union over the
-            // read-only flag. The standalone tool always wants the writable
-            // branch; this is the same narrowing the editor sub-agent applies.
-            const blocknoteTools = (await createBlocknoteTools(matrixClient, appConfig, false));
+            // `create_page` always mints a brand-new room under the space, so it
+            // needs no preset room. read/update fall back to a `room_id` argument
+            // when there's no `defaultRoomId` (create mode).
             const pageTools = createPageTools({
                 matrixClient,
                 toolsConfig: opts.toolsConfig,
@@ -74,46 +87,43 @@ export function createStandaloneEditorTool(opts) {
                 defaultSpaceId: opts.spaceId,
                 defaultRoomId: roomId,
             });
-            const innerTools = [
-                blocknoteTools.listBlocksTool,
-                blocknoteTools.editBlockTool,
-                blocknoteTools.createBlockTool,
-                blocknoteTools.deleteBlockTool,
-                blocknoteTools.readBlockByIdTool,
-                blocknoteTools.searchBlocksTool,
-                blocknoteTools.readFlowContextTool,
-                blocknoteTools.readFlowStatusTool,
-                blocknoteTools.readBlockHistoryTool,
-                blocknoteTools.readPermissionsTool,
-                blocknoteTools.readSurveyTool,
-                blocknoteTools.fillSurveyAnswersTool,
-                blocknoteTools.validateSurveyAnswersTool,
-                blocknoteTools.executeActionTool,
-                blocknoteTools.findAndReplaceTool,
-                blocknoteTools.moveBlockTool,
-                blocknoteTools.bulkEditBlocksTool,
-                pageTools.readPageTool,
-                pageTools.createPageTool,
-                pageTools.updatePageTool,
-            ].filter((t) => Boolean(t));
-            // mint_invocation — only when an oracle signing key is loaded. The
-            // ephemeral agent gets it for the same reasons the long-lived editor
-            // sub-agent does: the delegation CAR is read from the flow's Y.Doc
-            // by CID, which needs the matrixClient + roomId baked into this
-            // closure.
-            if (ctx.ucan.hasSigningKey()) {
-                innerTools.push(createMintInvocationEditorTool({
-                    matrixClient,
-                    appConfig,
-                    roomId,
-                    ucanService: ctx.ucan,
-                    blobStore: ctx.blobStore,
-                    userDid: ctx.user.did,
-                }));
+            const innerTools = [];
+            // Block-level tools (and mint_invocation) only make sense over an
+            // existing page's Y.Doc. In create mode there is no page yet, so we
+            // expose ONLY the page-lifecycle tools and let create_page make the
+            // room — binding block tools over a non-page room (e.g. the space)
+            // would be meaningless and error-prone.
+            if (roomId && roomId !== opts.spaceId) {
+                const roomConfig = { type: 'id', value: roomId };
+                const appConfig = {
+                    matrix: { ...opts.toolsConfig.matrix, room: roomConfig },
+                    provider: { ...opts.toolsConfig.provider },
+                    blocknote: { ...opts.toolsConfig.blocknote },
+                };
+                // `createBlocknoteTools` returns a discriminated union over the
+                // read-only flag. The standalone tool always wants the writable
+                // branch; this is the same narrowing the editor sub-agent applies.
+                const blocknoteTools = (await createBlocknoteTools(matrixClient, appConfig, false));
+                innerTools.push(blocknoteTools.listBlocksTool, blocknoteTools.editBlockTool, blocknoteTools.createBlockTool, blocknoteTools.deleteBlockTool, blocknoteTools.readBlockByIdTool, blocknoteTools.searchBlocksTool, blocknoteTools.readFlowContextTool, blocknoteTools.readFlowStatusTool, blocknoteTools.readBlockHistoryTool, blocknoteTools.readPermissionsTool, blocknoteTools.readSurveyTool, blocknoteTools.fillSurveyAnswersTool, blocknoteTools.validateSurveyAnswersTool, blocknoteTools.executeActionTool, blocknoteTools.findAndReplaceTool, blocknoteTools.moveBlockTool, blocknoteTools.bulkEditBlocksTool);
+                // mint_invocation — only when an oracle signing key is loaded. The
+                // delegation CAR is read from the flow's Y.Doc by CID, which needs
+                // the matrixClient + roomId baked into this closure.
+                if (ctx.ucan.hasSigningKey()) {
+                    innerTools.push(createMintInvocationEditorTool({
+                        matrixClient,
+                        appConfig,
+                        roomId,
+                        ucanService: ctx.ucan,
+                        blobStore: ctx.blobStore,
+                        userDid: ctx.user.did,
+                    }));
+                }
             }
+            innerTools.push(pageTools.readPageTool, pageTools.createPageTool, pageTools.updatePageTool);
+            const boundTools = innerTools.filter((t) => Boolean(t));
             const agent = createAgent({
                 model: ctx.llm.get('subagent'),
-                tools: innerTools,
+                tools: boundTools,
                 systemPrompt: editorAgentPrompt,
                 middleware: [],
             });
@@ -121,15 +131,37 @@ export function createStandaloneEditorTool(opts) {
                 messages: [new HumanMessage(task)],
             });
             const messages = result.messages;
-            return emojify(lastMessageContent(messages));
+            const text = emojify(lastMessageContent(messages));
+            // Forward every inner tool call + result into the parent graph via
+            // Command — same mechanism as `createSubagentAsTool` with the editor
+            // sub-agent's `forwardTools: true` — so the FE renders page/block
+            // activity inline regardless of which editor path handled the turn.
+            // Without a parent tool_call_id there is no call to attach the
+            // Command's ToolMessage to, so fall back to plain text.
+            const toolCallId = ctx.toolCallId;
+            if (!toolCallId)
+                return text;
+            const forwardSet = new Set(boundTools.map((t) => t.name));
+            const forwarded = filterForwardedMessages(messages, forwardSet, toolCallId);
+            if (forwarded.length === 0)
+                return text;
+            return new Command({
+                update: {
+                    messages: [
+                        ...forwarded,
+                        new ToolMessage({ content: text, tool_call_id: toolCallId }),
+                    ],
+                },
+            });
         }
         catch (err) {
             const message = err instanceof Error ? err.message : String(err);
-            ctx.logger.error(`[StandaloneEditorTool] Failed for room ${roomId}: ${message}`);
-            return `Error opening editor for room ${roomId}: ${message}`;
+            const label = roomId ?? 'new page';
+            ctx.logger.error(`[StandaloneEditorTool] Failed for ${label}: ${message}`);
+            return `Error opening editor for ${label}: ${message}`;
         }
     }, {
-        name: 'call_editor_agent',
+        name: EDITOR_AGENT_TOOL_NAME,
         description: STANDALONE_DESCRIPTION,
         schema: standaloneEditorSchema,
     });

package/package.json

@@ -1,11 +1,15 @@
 {
   "name": "@ixo/oracle-runtime",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Plugin-based runtime for QiForge oracles",
   "private": false,
   "publishConfig": {
     "access": "public"
   },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/ixoworld/qiforge.git"
+  },
   "type": "module",
   "engines": {
     "node": ">=22"
@@ -42,16 +46,16 @@
     "reflect-metadata": "^0.2.2",
     "typescript": "^5.7.3",
     "vitest": "^3.2.4",
+    "@ixo/typescript-config": "1.0.0",
     "@ixo/eslint-config": "2.0.0",
-    "@ixo/vitest-config": "1.0.0",
-    "@ixo/typescript-config": "1.0.0"
+    "@ixo/vitest-config": "1.0.0"
   },
   "dependencies": {
     "@blocknote/server-util": "0.29.1",
     "@composio/core": "0.10.0",
     "@composio/langchain": "0.9.2",
     "@ixo/editor": "3.0.0-beta.11",
-    "@ixo/matrix-crdt": "^1.2.1",
+    "@ixo/matrix-crdt": "^1.2.5",
     "@ixo/slack": "1.0.0",
     "@langchain/core": "1.1.48",
     "@langchain/langgraph": "1.3.2",
@@ -80,11 +84,11 @@
     "socket.io": "4.8.3",
     "yjs": "^13.6.27",
     "zod": "^4.4.3",
-    "@ixo/common": "1.1.41",
-    "@ixo/matrix": "1.2.33",
-    "@ixo/oracles-chain-client": "1.2.3",
-    "@ixo/oracles-events": "1.0.5",
+    "@ixo/common": "1.1.42",
+    "@ixo/oracles-chain-client": "1.3.1",
     "@ixo/sqlite-saver": "1.0.53",
+    "@ixo/oracles-events": "1.0.5",
+    "@ixo/matrix": "1.2.33",
     "@ixo/ucan": "1.2.3"
   },
   "peerDependencies": {