feat(mobile): add local voice and sandbox routing

.github/workflows/local-inference-matrix.yml

@@ -167,14 +167,14 @@ jobs:
           set -euo pipefail
           APT_ARGS=(-o Acquire::ForceIPv4=true -o Acquire::Retries=5 -o Acquire::http::Timeout=30)
           # Vulkan target additionally needs libvulkan-dev (loader headers
-          # path) and glslang-tools (provides glslc for the
+          # path), glslang-tools, and glslc for the
           # Vulkan_GLSLC_EXECUTABLE flag the build script passes).
           # The build script's prepareVulkanHeaders() fetches Khronos
           # vulkan.hpp + spirv.hpp regardless, so the only "extra" packages
-          # CI needs from apt are libvulkan-dev + glslang-tools.
+          # CI needs from apt are libvulkan-dev + glslang-tools + glslc.
           EXTRA_PKGS=""
           if [[ "${{ matrix.backend }}" == "vulkan" ]]; then
-            EXTRA_PKGS="libvulkan-dev glslang-tools"
+            EXTRA_PKGS="libvulkan-dev glslang-tools glslc"
           fi
           for attempt in 1 2 3; do
             if sudo apt-get "${APT_ARGS[@]}" update && \

packages/agent/tsconfig.json

@@ -50,6 +50,18 @@
       "@elizaos/plugin-registry": [
         "../../plugins/plugin-registry/src/index.ts"
       ],
+      "@elizaos/plugin-remote-manifest": [
+        "../plugin-remote-manifest/src/index.ts"
+      ],
+      "@elizaos/plugin-remote-manifest/*": [
+        "../plugin-remote-manifest/src/*"
+      ],
+      "@elizaos/plugin-worker-runtime": [
+        "../plugin-worker-runtime/src/index.ts"
+      ],
+      "@elizaos/plugin-worker-runtime/*": [
+        "../plugin-worker-runtime/src/*"
+      ],
       "@elizaos/plugin-wallet": ["../../plugins/plugin-wallet/src/index.ts"],
       "@elizaos/plugin-wifi": ["../../plugins/plugin-wifi/src/index.ts"],
       "@elizaos/app-core": ["../app-core/src/index.ts"],

packages/app-core/platforms/electrobun/README.md

@@ -37,13 +37,13 @@ Produces `src/libMacWindowEffects.dylib` (consumed via Bun FFI at runtime).
 
 ## First-party Satellites
 
-Prototype ElizaLaunch Satellites are folded into this shell under `satellites/` and seeded on desktop startup by `src/first-party-satellites.ts`. They use the existing `@elizaos/electrobun-carrots` install/start/log runtime instead of a parallel module system.
+Prototype ElizaLaunch Satellites are folded into this shell under `satellites/` and seeded on desktop startup by `src/first-party-satellites.ts`. They use the existing `@elizaos/plugin-remote-manifest` install/start/log runtime instead of a parallel module system.
 
 - `eliza.runtime` is required and runs as a Runtime Satellite adapter over the existing Electrobun `AgentManager`; production mode must not start a second elizaOS runtime process.
 - `eliza.fs`, `eliza.local-model`, `eliza.pty`, and `eliza.git` are first-party capability Satellites.
 - `eliza.surface` is a dev/admin surface and is only included when `ELIZA_ENABLE_DEV_SATELLITES=1`.
 
-The current worker-to-worker bridge supports the upstream `invoke-carrot` host request, and renderer/dev views can call workers through the typed `carrot:invokeWorker` RPC. Broad automatic event broadcast is still a host-level follow-up, so dev surfaces should use explicit invokes plus polling where needed.
+The current worker-to-worker bridge supports the upstream `invoke-remote-plugin` host request, and renderer/dev views can call workers through the typed `remote-plugin:invokeWorker` RPC. Broad automatic event broadcast is still a host-level follow-up, so dev surfaces should use explicit invokes plus polling where needed.
 
 `eliza.surface` is not the product dashboard. Keep it as an inspector harness while product work moves toward dynamic agent-created canvas/A2UI views, Eliza-1 routing, voice loop latency tracing, and OmniVoice/Kokoro validation.
 

packages/app-core/platforms/electrobun/satellites/git/README.md

@@ -72,4 +72,4 @@ When the host forwards worker events, the Git Satellite can emit operation event
 
 ## Upstream Packaging Boundary
 
-The current local module system still requires upstream packaging names like `carrot.json`, `build.carrot`, and `carrotOnly`. They are used only at the packaging boundary.
+The current local module system still requires upstream packaging names like `plugin.json`, `build.carrot`, and `carrotOnly`. They are used only at the packaging boundary.

packages/app-core/platforms/electrobun/satellites/git/electrobun.config.ts

@@ -8,7 +8,7 @@ const gitSatellite = {
 	permissions: {
 		host: {
 			storage: true,
-			"manage-carrots": true,
+			"manage-remote-plugins": true,
 		},
 		bun: {
 			read: true,

packages/app-core/platforms/electrobun/satellites/git/carrot.json → packages/app-core/platforms/electrobun/satellites/git/plugin.json

@@ -7,7 +7,7 @@
   "permissions": {
     "host": {
       "storage": true,
-      "manage-carrots": true
+      "manage-remote-plugins": true
     },
     "bun": {
       "read": true,

packages/app-core/platforms/electrobun/satellites/local-model/README.md

@@ -128,7 +128,7 @@ ELIZA_PHASE8_LIVE_API=1 bun run --cwd elizalaunch/satellites/local-model smoke:p
 
 ## Packaging Boundary
 
-The upstream Electrobun module system still names its package manifest `carrot.json` and config fields `build.carrot` / `carrotOnly`. Those names are kept only at the packaging boundary.
+The upstream Electrobun module system still names its package manifest `plugin.json` and config fields `build.carrot` / `carrotOnly`. Those names are kept only at the packaging boundary.
 
 ## Limitations
 

packages/app-core/platforms/electrobun/satellites/local-model/electrobun.config.ts

@@ -8,7 +8,7 @@ const localModelSatellite = {
 	permissions: {
 		host: {
 			storage: true,
-			"manage-carrots": true,
+			"manage-remote-plugins": true,
 		},
 		bun: {
 			read: true,

packages/app-core/platforms/electrobun/satellites/local-model/carrot.json → packages/app-core/platforms/electrobun/satellites/local-model/plugin.json

@@ -7,7 +7,7 @@
   "permissions": {
     "host": {
       "storage": true,
-      "manage-carrots": true
+      "manage-remote-plugins": true
     },
     "bun": {
       "read": true,

packages/app-core/platforms/electrobun/satellites/pty/README.md

@@ -62,4 +62,4 @@ bun run --cwd elizalaunch/satellites/pty smoke:phase6
 
 ## Upstream Packaging Boundary
 
-The current local module system still requires upstream packaging names like `carrot.json`, `build.carrot`, and `carrotOnly`. They are used only at the packaging boundary.
+The current local module system still requires upstream packaging names like `plugin.json`, `build.carrot`, and `carrotOnly`. They are used only at the packaging boundary.

packages/app-core/platforms/electrobun/satellites/pty/electrobun.config.ts

@@ -9,7 +9,7 @@ const terminalSatellite = {
 		host: {
 			storage: true,
 			notifications: true,
-			"manage-carrots": true,
+			"manage-remote-plugins": true,
 		},
 		bun: {
 			read: true,

packages/app-core/platforms/electrobun/satellites/pty/carrot.json → packages/app-core/platforms/electrobun/satellites/pty/plugin.json

@@ -8,7 +8,7 @@
     "host": {
       "storage": true,
       "notifications": true,
-      "manage-carrots": true
+      "manage-remote-plugins": true
     },
     "bun": {
       "read": true,

packages/app-core/platforms/electrobun/satellites/runtime/README.md

@@ -307,7 +307,7 @@ packages/app-core/platforms/electrobun/satellites/runtime
 
 The required package-side fields are present:
 
-- `carrot.json`
+- `plugin.json`
 - `id: "eliza.runtime"`
 - `mode: "background"`
 - `worker.relativePath: "src/bun/worker.ts"`
@@ -318,9 +318,9 @@ After install, start `eliza.runtime` from the existing module manager. If the cu
 
 ## Current Upstream Packaging Notes
 
-The existing Electrobun module system in this repo still uses upstream packaging names such as `carrot.json`, `build.carrot`, and `carrotOnly`. Those names are kept only where the upstream API requires them.
+The existing Electrobun module system in this repo still uses upstream packaging names such as `plugin.json`, `build.carrot`, and `carrotOnly`. Those names are kept only where the upstream API requires them.
 
-The current host manifest shape supports `host.storage`, `bun.read`, `bun.write`, `bun.env`, `bun.run`, and `bun.worker` through nested `host` and `bun` permission maps. The requested flat permission keys are not the shape used by the local `@elizaos/electrobun-carrots` types, so the Runtime Satellite uses the existing nested format.
+The current host manifest shape supports `host.storage`, `bun.read`, `bun.write`, `bun.env`, `bun.run`, and `bun.worker` through nested `host` and `bun` permission maps. The requested flat permission keys are not the shape used by the current `@elizaos/plugin-remote-manifest` types, so the Runtime Satellite uses the existing nested format.
 
 The current host can downgrade `isolation: "isolated-process"` to a shared worker. The bundled first-party Runtime Satellite delegates production process ownership to the existing Electrobun `AgentManager`; only standalone smoke tests use the subprocess manager directly.
 

packages/app-core/platforms/electrobun/satellites/runtime/carrot.json → packages/app-core/platforms/electrobun/satellites/runtime/plugin.json

@@ -7,7 +7,7 @@
 	"permissions": {
 		"host": {
 			"storage": true,
-			"manage-carrots": true
+			"manage-remote-plugins": true
 		},
     "bun": {
       "read": true,

packages/app-core/platforms/electrobun/satellites/runtime/src/bun/worker.ts

@@ -42,7 +42,7 @@ type HostRequestMessage = {
   type: "host-request";
   requestId: number;
   method:
-    | "invoke-carrot"
+    | "invoke-remote-plugin"
     | "agent-manager-start"
     | "agent-manager-stop"
     | "agent-manager-restart"
@@ -636,9 +636,9 @@ function invokeSatellite(
   params?: JsonValue,
 ): Promise<JsonValue | undefined> {
   return requestHost(
-    "invoke-carrot",
+    "invoke-remote-plugin",
     {
-      carrotId: satelliteId,
+      remotePluginId: satelliteId,
       method,
       ...(params === undefined ? {} : { params }),
     },

packages/app-core/platforms/electrobun/satellites/surface/README.md

@@ -126,16 +126,16 @@ It also mocks model calls through `eliza.runtime` and verifies Eliza-1 catalog,
 
 ## Module Manager Compatibility
 
-The current upstream module system still uses packaging names such as `carrot.json`, `build.carrot`, and `carrotOnly`. Those names remain only at the packaging boundary.
+The current upstream module system still uses packaging names such as `plugin.json`, `build.carrot`, and `carrotOnly`. Those names remain only at the packaging boundary.
 
 The Surface manifest uses:
 
 - ID: `eliza.surface`
 - Dependency: `eliza.runtime`
 - Mode: `window`
-- Permission: `host:manage-carrots`
+- Permission: `host:manage-remote-plugins`
 
-`host:manage-carrots` is required by the existing module host for cross-Satellite calls through the upstream `invoke-carrot` host request. No filesystem, shell, Git, model-download, or child-process permission is requested by Surface.
+`host:manage-remote-plugins` is required by the existing module host for cross-Satellite calls through the upstream `invoke-remote-plugin` host request. No filesystem, shell, Git, model-download, or child-process permission is requested by Surface.
 
 The Surface worker implements that module call path. The current host does not expose a completed public view-to-Satellite-worker RPC for window-mode Satellites, so the browser UI uses `RuntimeSatelliteClient` and can run against a host-provided bridge when available or the smoke-test mock bridge in Phase 4.
 

packages/app-core/platforms/electrobun/satellites/surface/electrobun.config.ts

@@ -7,7 +7,7 @@ const surfaceSatellite = {
 	mode: "window",
 	permissions: {
 		host: {
-			"manage-carrots": true,
+			"manage-remote-plugins": true,
 		},
 		bun: {},
 		isolation: "shared-worker",

packages/app-core/platforms/electrobun/satellites/surface/carrot.json → packages/app-core/platforms/electrobun/satellites/surface/plugin.json

@@ -9,7 +9,7 @@
   },
   "permissions": {
     "host": {
-      "manage-carrots": true
+      "manage-remote-plugins": true
     },
     "bun": {},
     "isolation": "shared-worker"

packages/app-core/platforms/electrobun/satellites/surface/src/bun/worker.ts

@@ -68,9 +68,9 @@ function invokeRuntime(
 	post({
 		type: "host-request",
 		requestId,
-		method: "invoke-carrot",
+		method: "invoke-remote-plugin",
 		params: {
-			carrotId: RUNTIME_SATELLITE_ID,
+			remotePluginId: RUNTIME_SATELLITE_ID,
 			method,
 			params,
 		},

packages/app-core/platforms/electrobun/satellites/surface/src/dev/phase4-smoke.ts

@@ -331,7 +331,7 @@ class TailRuntimeBridge extends MockRuntimeBridge {
       id: targetId,
       events: [
         {
-          carrotId: targetId,
+          remotePluginId: targetId,
           satelliteId: targetId,
           sequence: 1,
           name: "agent.message.stream.delta",
@@ -355,7 +355,7 @@ const root = process.cwd();
 for (const relativePath of [
   "package.json",
   "electrobun.config.ts",
-  "carrot.json",
+  "plugin.json",
   "src/protocol/runtime-client.ts",
   "src/web/index.html",
 ]) {

packages/app-core/platforms/electrobun/satellites/surface/src/protocol/runtime-client.ts

@@ -71,7 +71,7 @@ export type JsonValue =
 export type RuntimeEventHandler = (payload: unknown) => void;
 
 export type RuntimeEventRecord = {
-	carrotId?: string;
+	remotePluginId?: string;
 	satelliteId?: string;
 	sequence: number;
 	name: string;
@@ -103,12 +103,12 @@ type RuntimeGlobal = typeof globalThis & {
 	__ELIZA_SURFACE_RUNTIME_BRIDGE__?: RuntimeSatelliteBridge;
 	__ELIZA_ELECTROBUN_RPC__?: {
 		request?: {
-			carrotInvokeWorker?: (params: {
+			remotePluginInvokeWorker?: (params: {
 				id: string;
 				method: string;
 				params?: JsonValue;
 			}) => Promise<JsonValue | null>;
-			carrotTailWorkerEvents?: (params: {
+			remotePluginTailWorkerEvents?: (params: {
 				id: string;
 				afterSequence?: number;
 				limit?: number;
@@ -117,14 +117,6 @@ type RuntimeGlobal = typeof globalThis & {
 		onMessage?: (eventName: string, handler: RuntimeEventHandler) => void;
 		offMessage?: (eventName: string, handler: RuntimeEventHandler) => void;
 	};
-	Carrots?: {
-		invoke?: (
-			targetId: string,
-			method: string,
-			params?: unknown,
-		) => Promise<unknown>;
-		on?: (eventName: string, handler: RuntimeEventHandler) => () => void;
-	};
 };
 
 export type SurfaceBridgeError = {
@@ -597,9 +589,9 @@ function createDefaultBridge(): RuntimeSatelliteBridge | null {
 	}
 
 	const electrobunRpc = runtimeGlobal.__ELIZA_ELECTROBUN_RPC__;
-	const invokeWorker = electrobunRpc?.request?.carrotInvokeWorker;
+	const invokeWorker = electrobunRpc?.request?.remotePluginInvokeWorker;
 	if (invokeWorker) {
-		const tailEvents = electrobunRpc.request?.carrotTailWorkerEvents;
+		const tailEvents = electrobunRpc.request?.remotePluginTailWorkerEvents;
 		return {
 			invoke: (targetId, method, params) => {
 				const jsonParams = toJsonValue(params);
@@ -627,16 +619,6 @@ function createDefaultBridge(): RuntimeSatelliteBridge | null {
 		};
 	}
 
-	const upstream = runtimeGlobal.Carrots;
-	if (upstream?.invoke) {
-		return {
-			invoke: (targetId, method, params) =>
-				upstream.invoke?.(targetId, method, params) ??
-				Promise.reject(new Error("Module invoke bridge is unavailable.")),
-			on: upstream.on,
-		};
-	}
-
 	return null;
 }
 

packages/app-core/platforms/electrobun/src/dynamic-views/README.md

@@ -8,8 +8,8 @@ The platform contract is:
 agent/plugin/runtime event
   -> register or open a DynamicViewManifest
   -> canvas/A2UI hosts the view session
-  -> the view calls Satellites through eliza.runtime with carrotInvokeWorker
-  -> the view tails worker events with carrotTailWorkerEvents
+  -> the view calls Satellites through eliza.runtime with remotePluginInvokeWorker
+  -> the view tails worker events with remotePluginTailWorkerEvents
   -> the view is closed when the task no longer needs it
 ```
 
@@ -37,8 +37,8 @@ Trusted workers can use host requests:
 - `dynamic-view-push`
 - `dynamic-view-sessions`
 
-Worker host requests currently require `host:manage-carrots`. A narrower view-management permission should replace that once the manifest permission model adds it.
+Worker host requests currently require `host:manage-remote-plugins`. A narrower view-management permission should replace that once the manifest permission model adds it.
 
 ## Demo
 
-`agent.run.trace.demo` is a developer-only proof of the dynamic view path. It opens a floating canvas view, receives A2UI pushed events, calls `eliza.runtime` through `carrotInvokeWorker`, and tails `eliza.runtime` events through `carrotTailWorkerEvents`.
+`agent.run.trace.demo` is a developer-only proof of the dynamic view path. It opens a floating canvas view, receives A2UI pushed events, calls `eliza.runtime` through `remotePluginInvokeWorker`, and tails `eliza.runtime` events through `remotePluginTailWorkerEvents`.

packages/app-core/platforms/electrobun/src/dynamic-views/demo/agent-run-trace.html

@@ -103,7 +103,7 @@ <h1>Agent Run Trace Demo</h1>
         try {
           append(
             "runtime.status",
-            await request("carrotInvokeWorker", {
+            await request("remotePluginInvokeWorker", {
               id: "eliza.runtime",
               method: "runtime.status",
             }),
@@ -115,7 +115,7 @@ <h1>Agent Run Trace Demo</h1>
 
       document.getElementById("tail").addEventListener("click", async () => {
         try {
-          const result = await request("carrotTailWorkerEvents", {
+          const result = await request("remotePluginTailWorkerEvents", {
             id: "eliza.runtime",
             afterSequence: lastRuntimeSequence,
             limit: 100,

packages/app-core/platforms/electrobun/src/dynamic-views/errors.ts

@@ -1,4 +1,4 @@
-import type { JsonValue } from "@elizaos/electrobun-carrots";
+import type { JsonValue } from "@elizaos/plugin-remote-manifest";
 
 export type DynamicViewErrorCode =
   | "DYNAMIC_VIEW_DUPLICATE"

packages/app-core/platforms/electrobun/src/dynamic-views/host.ts

@@ -1,4 +1,4 @@
-import type { JsonValue } from "@elizaos/electrobun-carrots";
+import type { JsonValue } from "@elizaos/plugin-remote-manifest";
 import { DynamicViewError } from "./errors";
 import type { DynamicViewRegistry } from "./registry";
 import type { DynamicViewSessionManager } from "./session-manager";

packages/app-core/platforms/electrobun/src/dynamic-views/session-manager.test.ts

@@ -1,7 +1,7 @@
 import { mkdtempSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
-import type { JsonValue } from "@elizaos/electrobun-carrots";
+import type { JsonValue } from "@elizaos/plugin-remote-manifest";
 import { describe, expect, it } from "vitest";
 import { DynamicViewError } from "./errors";
 import { DynamicViewRegistry } from "./registry";

packages/app-core/platforms/electrobun/src/dynamic-views/session-manager.ts

@@ -2,7 +2,7 @@ import * as fs from "node:fs";
 import * as path from "node:path";
 import { randomUUID } from "node:crypto";
 import { fileURLToPath, pathToFileURL } from "node:url";
-import type { JsonValue } from "@elizaos/electrobun-carrots";
+import type { JsonValue } from "@elizaos/plugin-remote-manifest";
 import { DynamicViewError } from "./errors";
 import type { DynamicViewRegistry } from "./registry";
 import type {