@elizaos/agent 0.25.8 → 2.0.0-alpha.83

package/packages/agent/src/services/registry-client-types.d.ts

@@ -0,0 +1,115 @@
+export interface RegistryAppViewerMeta {
+    url: string;
+    embedParams?: Record<string, string>;
+    postMessageAuth?: boolean;
+    sandbox?: string;
+}
+export interface AppUiExtensionConfig {
+    detailPanelId: string;
+}
+export interface RegistryAppMeta {
+    displayName: string;
+    category: string;
+    launchType: string;
+    launchUrl: string | null;
+    icon: string | null;
+    capabilities: string[];
+    minPlayers: number | null;
+    maxPlayers: number | null;
+    uiExtension?: AppUiExtensionConfig;
+    viewer?: RegistryAppViewerMeta;
+}
+export interface RegistryPluginInfo {
+    name: string;
+    gitRepo: string;
+    gitUrl: string;
+    description: string;
+    homepage: string | null;
+    topics: string[];
+    stars: number;
+    language: string;
+    npm: {
+        package: string;
+        v0Version: string | null;
+        v1Version: string | null;
+        v2Version: string | null;
+    };
+    git: {
+        v0Branch: string | null;
+        v1Branch: string | null;
+        v2Branch: string | null;
+    };
+    supports: {
+        v0: boolean;
+        v1: boolean;
+        v2: boolean;
+    };
+    localPath?: string;
+    kind?: string;
+    appMeta?: RegistryAppMeta;
+}
+export interface RegistryAppInfo {
+    name: string;
+    displayName: string;
+    description: string;
+    category: string;
+    launchType: string;
+    launchUrl: string | null;
+    icon: string | null;
+    capabilities: string[];
+    stars: number;
+    repository: string;
+    latestVersion: string | null;
+    supports: {
+        v0: boolean;
+        v1: boolean;
+        v2: boolean;
+    };
+    npm: {
+        package: string;
+        v0Version: string | null;
+        v1Version: string | null;
+        v2Version: string | null;
+    };
+    uiExtension?: AppUiExtensionConfig;
+    viewer?: {
+        url: string;
+        embedParams?: Record<string, string>;
+        postMessageAuth?: boolean;
+        sandbox?: string;
+    };
+}
+export interface RegistrySearchResult {
+    name: string;
+    description: string;
+    score: number;
+    tags: string[];
+    latestVersion: string | null;
+    stars: number;
+    supports: {
+        v0: boolean;
+        v1: boolean;
+        v2: boolean;
+    };
+    repository: string;
+}
+export interface RegistryPluginListItem {
+    name: string;
+    description: string;
+    stars: number;
+    repository: string;
+    topics: string[];
+    latestVersion: string | null;
+    supports: {
+        v0: boolean;
+        v1: boolean;
+        v2: boolean;
+    };
+    npm: {
+        package: string;
+        v0Version: string | null;
+        v1Version: string | null;
+        v2Version: string | null;
+    };
+}
+//# sourceMappingURL=registry-client-types.d.ts.map

package/packages/agent/src/services/registry-client-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-client-types.d.ts","sourceRoot":"","sources":["../../../../../src/services/registry-client-types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,CAAC,EAAE,oBAAoB,CAAC;IACnC,MAAM,CAAC,EAAE,qBAAqB,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE;QACH,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,CAAC;IACF,GAAG,EAAE;QACH,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;KACzB,CAAC;IACF,QAAQ,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAA;KAAE,CAAC;IACpD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,eAAe,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAA;KAAE,CAAC;IACpD,GAAG,EAAE;QACH,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,CAAC;IACF,WAAW,CAAC,EAAE,oBAAoB,CAAC;IACnC,MAAM,CAAC,EAAE;QACP,GAAG,EAAE,MAAM,CAAC;QACZ,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;CACH;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAA;KAAE,CAAC;IACpD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,EAAE,EAAE,OAAO,CAAA;KAAE,CAAC;IACpD,GAAG,EAAE;QACH,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,CAAC;CACH"}

package/packages/agent/src/services/registry-client-types.js

@@ -0,0 +1 @@
+export {};

package/packages/agent/src/services/registry-client.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Registry Client for Eliza.
+ *
+ * Provides a 3-tier cached registry (memory → file → network) that works
+ * offline, in .app bundles, and in dev. Fetches from the next branch.
+ *
+ * @module services/registry-client
+ */
+import type { RegistryEndpoint } from "../config/types.eliza.js";
+import type { RegistryAppInfo, RegistryPluginInfo, RegistryPluginListItem, RegistrySearchResult } from "./registry-client-types.js";
+export type { AppUiExtensionConfig, RegistryAppInfo, RegistryAppMeta, RegistryAppViewerMeta, RegistryPluginInfo, RegistryPluginListItem, RegistrySearchResult, } from "./registry-client-types.js";
+/** Return the list of custom registry endpoints from config. */
+export declare function getConfiguredEndpoints(): RegistryEndpoint[];
+/** Add a custom registry endpoint. Blocks duplicate URLs. */
+export declare function addRegistryEndpoint(label: string, url: string): void;
+/** Remove a custom registry endpoint by URL. Cannot remove the default. */
+export declare function removeRegistryEndpoint(url: string): void;
+/** Toggle an endpoint's enabled status. */
+export declare function toggleRegistryEndpoint(url: string, enabled: boolean): void;
+export declare function isDefaultEndpoint(url: string): boolean;
+/** Get all plugins. Resolution: memory → file → network. */
+export declare function getRegistryPlugins(): Promise<Map<string, RegistryPluginInfo>>;
+/** Force-refresh from network. */
+export declare function refreshRegistry(): Promise<Map<string, RegistryPluginInfo>>;
+/** Look up a plugin by name (exact → @elizaos/ prefix → bare suffix). */
+export declare function getPluginInfo(name: string): Promise<RegistryPluginInfo | null>;
+/** Search plugins by query (local fuzzy match on name/description/topics). */
+export declare function searchPlugins(query: string, limit?: number): Promise<RegistrySearchResult[]>;
+/** List all registered apps. */
+export declare function listApps(): Promise<RegistryAppInfo[]>;
+/** Look up a specific app by name. */
+export declare function getAppInfo(name: string): Promise<RegistryAppInfo | null>;
+/** Search apps by query. */
+export declare function searchApps(query: string, limit?: number): Promise<RegistryAppInfo[]>;
+/** List all non-app plugins from the registry. */
+export declare function listNonAppPlugins(): Promise<RegistryPluginListItem[]>;
+/** Search non-app plugins by query. */
+export declare function searchNonAppPlugins(query: string, limit?: number): Promise<RegistryPluginListItem[]>;
+//# sourceMappingURL=registry-client.d.ts.map

package/packages/agent/src/services/registry-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-client.d.ts","sourceRoot":"","sources":["../../../../../src/services/registry-client.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AA0BjE,OAAO,KAAK,EACV,eAAe,EACf,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,EACrB,MAAM,4BAA4B,CAAC;AAepC,YAAY,EACV,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,4BAA4B,CAAC;AA6EpC,gEAAgE;AAChE,wBAAgB,sBAAsB,IAAI,gBAAgB,EAAE,CAO3D;AAED,6DAA6D;AAC7D,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAkBpE;AAED,2EAA2E;AAC3E,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAiBxD;AAED,2CAA2C;AAC3C,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAW1E;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEtD;AAMD,4DAA4D;AAC5D,wBAAsB,kBAAkB,IAAI,OAAO,CACjD,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAChC,CA2BA;AAED,kCAAkC;AAClC,wBAAsB,eAAe,IAAI,OAAO,CAC9C,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAChC,CAQA;AAED,yEAAyE;AACzE,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAWpC;AAED,8EAA8E;AAC9E,wBAAsB,aAAa,CACjC,KAAK,EAAE,MAAM,EACb,KAAK,SAAK,GACT,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAIjC;AAED,gCAAgC;AAChC,wBAAsB,QAAQ,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC,CAY3D;AAED,sCAAsC;AACtC,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAMjC;AAED,4BAA4B;AAC5B,wBAAsB,UAAU,CAC9B,KAAK,EAAE,MAAM,EACb,KAAK,SAAK,GACT,OAAO,CAAC,eAAe,EAAE,CAAC,CAmB5B;AAED,kDAAkD;AAClD,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAY3E;AAED,uCAAuC;AACvC,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,MAAM,EACb,KAAK,SAAK,GACT,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAMnC"}

package/packages/agent/src/services/registry-client.js

@@ -0,0 +1,249 @@
+/**
+ * Registry Client for Eliza.
+ *
+ * Provides a 3-tier cached registry (memory → file → network) that works
+ * offline, in .app bundles, and in dev. Fetches from the next branch.
+ *
+ * @module services/registry-client
+ */
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { logger } from "@elizaos/core";
+import { loadElizaConfig, saveElizaConfig } from "../config/config.js";
+import { LOCAL_APP_DEFAULT_SANDBOX, resolveAppOverride, sanitizeSandbox, } from "./registry-client-app-meta.js";
+import { isDefaultEndpoint as isDefaultEndpointForUrl, mergeCustomEndpoints, normaliseEndpointUrl, parseRegistryEndpointUrl, } from "./registry-client-endpoints.js";
+import { applyLocalWorkspaceApps, applyNodeModulePlugins, } from "./registry-client-local.js";
+import { fetchFromNetwork as fetchRegistryFromNetwork } from "./registry-client-network.js";
+import { getPluginInfoFromRegistry, normalizePluginLookupAlias, scoreEntries, toAppEntry, toAppInfo, toPluginListItem, toSearchResults, } from "./registry-client-queries.js";
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+const GENERATED_REGISTRY_URL = "https://raw.githubusercontent.com/elizaos-plugins/registry/next/generated-registry.json";
+const INDEX_REGISTRY_URL = "https://raw.githubusercontent.com/elizaos-plugins/registry/next/index.json";
+const CACHE_TTL_MS = 3_600_000; // 1 hour
+// ---------------------------------------------------------------------------
+// Cache state
+// ---------------------------------------------------------------------------
+let memoryCache = null;
+// ---------------------------------------------------------------------------
+// Network fetch + parse (inlined wire types — not exported)
+// ---------------------------------------------------------------------------
+async function fetchFromNetwork() {
+    try {
+        return await fetchRegistryFromNetwork({
+            generatedRegistryUrl: GENERATED_REGISTRY_URL,
+            indexRegistryUrl: INDEX_REGISTRY_URL,
+            applyLocalWorkspaceApps,
+            applyNodeModulePlugins,
+            sanitizeSandbox,
+        });
+    }
+    catch (err) {
+        logger.warn(`[registry-client] generated-registry/index fallback failed: ${err instanceof Error ? err.message : String(err)}`);
+        throw err;
+    }
+}
+// ---------------------------------------------------------------------------
+// File cache
+// ---------------------------------------------------------------------------
+function cacheFilePath() {
+    const base = process.env.ELIZA_STATE_DIR?.trim() || path.join(os.homedir(), ".eliza");
+    return path.join(base, "cache", "registry.json");
+}
+async function readFileCache() {
+    try {
+        const raw = await fs.readFile(cacheFilePath(), "utf-8");
+        const parsed = JSON.parse(raw);
+        if (typeof parsed.fetchedAt !== "number" || !Array.isArray(parsed.plugins))
+            return null;
+        if (Date.now() - parsed.fetchedAt > CACHE_TTL_MS)
+            return null;
+        return new Map(parsed.plugins);
+    }
+    catch {
+        return null;
+    }
+}
+async function writeFileCache(plugins) {
+    const filePath = cacheFilePath();
+    await fs.mkdir(path.dirname(filePath), { recursive: true });
+    await fs.writeFile(filePath, JSON.stringify({ fetchedAt: Date.now(), plugins: [...plugins.entries()] }), "utf-8");
+}
+// ---------------------------------------------------------------------------
+// Multi-endpoint management
+// ---------------------------------------------------------------------------
+/** Return the list of custom registry endpoints from config. */
+export function getConfiguredEndpoints() {
+    try {
+        const cfg = loadElizaConfig();
+        return cfg.plugins?.registryEndpoints ?? [];
+    }
+    catch {
+        return [];
+    }
+}
+/** Add a custom registry endpoint. Blocks duplicate URLs. */
+export function addRegistryEndpoint(label, url) {
+    const parsed = parseRegistryEndpointUrl(url);
+    const normalised = normaliseEndpointUrl(parsed.toString());
+    if (isDefaultEndpoint(normalised)) {
+        throw new Error("Cannot add the default registry as a custom endpoint.");
+    }
+    const cfg = loadElizaConfig();
+    const endpoints = cfg.plugins?.registryEndpoints ?? [];
+    if (endpoints.some((ep) => normaliseEndpointUrl(ep.url) === normalised)) {
+        throw new Error(`Endpoint already exists: ${url}`);
+    }
+    if (!cfg.plugins)
+        cfg.plugins = {};
+    cfg.plugins.registryEndpoints = [
+        ...endpoints,
+        { label, url: normalised, enabled: true },
+    ];
+    saveElizaConfig(cfg);
+    memoryCache = null;
+}
+/** Remove a custom registry endpoint by URL. Cannot remove the default. */
+export function removeRegistryEndpoint(url) {
+    const normalised = normaliseEndpointUrl(url);
+    if (isDefaultEndpoint(normalised)) {
+        throw new Error("Cannot remove the default elizaOS registry.");
+    }
+    const cfg = loadElizaConfig();
+    const endpoints = cfg.plugins?.registryEndpoints ?? [];
+    const updated = endpoints.filter((ep) => normaliseEndpointUrl(ep.url) !== normalised);
+    if (updated.length === endpoints.length) {
+        throw new Error(`Endpoint not found: ${url}`);
+    }
+    if (!cfg.plugins)
+        cfg.plugins = {};
+    cfg.plugins.registryEndpoints = updated;
+    saveElizaConfig(cfg);
+    memoryCache = null;
+}
+/** Toggle an endpoint's enabled status. */
+export function toggleRegistryEndpoint(url, enabled) {
+    const normalised = normaliseEndpointUrl(url);
+    const cfg = loadElizaConfig();
+    const endpoints = cfg.plugins?.registryEndpoints ?? [];
+    const ep = endpoints.find((e) => normaliseEndpointUrl(e.url) === normalised);
+    if (!ep)
+        throw new Error(`Endpoint not found: ${url}`);
+    ep.enabled = enabled;
+    if (!cfg.plugins)
+        cfg.plugins = {};
+    cfg.plugins.registryEndpoints = endpoints;
+    saveElizaConfig(cfg);
+    memoryCache = null;
+}
+export function isDefaultEndpoint(url) {
+    return isDefaultEndpointForUrl(url, GENERATED_REGISTRY_URL);
+}
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/** Get all plugins. Resolution: memory → file → network. */
+export async function getRegistryPlugins() {
+    if (memoryCache && Date.now() - memoryCache.fetchedAt < CACHE_TTL_MS) {
+        return memoryCache.plugins;
+    }
+    const fromFile = await readFileCache();
+    if (fromFile) {
+        await applyLocalWorkspaceApps(fromFile);
+        await applyNodeModulePlugins(fromFile);
+        await mergeCustomEndpoints(fromFile, getConfiguredEndpoints());
+        memoryCache = { plugins: fromFile, fetchedAt: Date.now() };
+        return fromFile;
+    }
+    logger.info("[registry-client] Fetching plugin registry from next branch...");
+    const plugins = await fetchFromNetwork();
+    await mergeCustomEndpoints(plugins, getConfiguredEndpoints());
+    logger.info(`[registry-client] Loaded ${plugins.size} plugins`);
+    memoryCache = { plugins, fetchedAt: Date.now() };
+    writeFileCache(plugins).catch((err) => logger.warn(`[registry-client] Cache write failed: ${err instanceof Error ? err.message : String(err)}`));
+    return plugins;
+}
+/** Force-refresh from network. */
+export async function refreshRegistry() {
+    memoryCache = null;
+    try {
+        await fs.unlink(cacheFilePath());
+    }
+    catch {
+        /* noop */
+    }
+    return getRegistryPlugins();
+}
+/** Look up a plugin by name (exact → @elizaos/ prefix → bare suffix). */
+export async function getPluginInfo(name) {
+    const registry = await getRegistryPlugins();
+    const normalizedName = normalizePluginLookupAlias(name);
+    const candidates = Array.from(new Set([normalizedName, name]));
+    for (const candidate of candidates) {
+        const info = getPluginInfoFromRegistry(registry, candidate);
+        if (info)
+            return info;
+    }
+    return null;
+}
+/** Search plugins by query (local fuzzy match on name/description/topics). */
+export async function searchPlugins(query, limit = 15) {
+    const registry = await getRegistryPlugins();
+    const results = scoreEntries(registry.values(), query, limit);
+    return toSearchResults(results);
+}
+/** List all registered apps. */
+export async function listApps() {
+    const registry = await getRegistryPlugins();
+    const apps = [];
+    for (const p of registry.values()) {
+        const appEntry = toAppEntry(p, resolveAppOverride);
+        if (!appEntry)
+            continue;
+        apps.push(toAppInfo(appEntry, sanitizeSandbox, LOCAL_APP_DEFAULT_SANDBOX));
+    }
+    apps.sort((a, b) => b.stars - a.stars);
+    return apps;
+}
+/** Look up a specific app by name. */
+export async function getAppInfo(name) {
+    const info = await getPluginInfo(name);
+    if (!info)
+        return null;
+    const appEntry = toAppEntry(info, resolveAppOverride);
+    if (!appEntry)
+        return null;
+    return toAppInfo(appEntry, sanitizeSandbox, LOCAL_APP_DEFAULT_SANDBOX);
+}
+/** Search apps by query. */
+export async function searchApps(query, limit = 15) {
+    const registry = await getRegistryPlugins();
+    const appEntries = [];
+    for (const p of registry.values()) {
+        const appEntry = toAppEntry(p, resolveAppOverride);
+        if (appEntry)
+            appEntries.push(appEntry);
+    }
+    const results = scoreEntries(appEntries, query, limit, (p) => [p.appMeta?.displayName?.toLowerCase() ?? ""], (p) => p.appMeta?.capabilities ?? []);
+    return results.map(({ p }) => toAppInfo(p, sanitizeSandbox, LOCAL_APP_DEFAULT_SANDBOX));
+}
+/** List all non-app plugins from the registry. */
+export async function listNonAppPlugins() {
+    const registry = await getRegistryPlugins();
+    const plugins = [];
+    for (const p of registry.values()) {
+        if (p.kind !== "app") {
+            plugins.push(toPluginListItem(p));
+        }
+    }
+    plugins.sort((a, b) => b.stars - a.stars);
+    return plugins;
+}
+/** Search non-app plugins by query. */
+export async function searchNonAppPlugins(query, limit = 15) {
+    const registry = await getRegistryPlugins();
+    const pluginEntries = [...registry.values()].filter((p) => p.kind !== "app");
+    const results = scoreEntries(pluginEntries, query, limit);
+    return results.map(({ p }) => toPluginListItem(p));
+}

package/packages/agent/src/services/remote-signing-service.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Remote signing service. Private keys stay on the host;
+ * sandboxed agents submit unsigned tx → policy check → sign → return.
+ */
+import type { SandboxAuditLog } from "../security/audit-log";
+import { type PolicyDecision, type SigningPolicy, type SigningRequest } from "./signing-policy";
+export interface SignerBackend {
+    getAddress(): Promise<string>;
+    signMessage(message: string): Promise<string>;
+    signTransaction(tx: UnsignedTransaction): Promise<string>;
+}
+export interface UnsignedTransaction {
+    to: string;
+    value: string;
+    data: string;
+    chainId: number;
+    nonce?: number;
+    gasLimit?: string;
+    maxFeePerGas?: string;
+    maxPriorityFeePerGas?: string;
+}
+export interface SigningResult {
+    success: boolean;
+    signature?: string;
+    error?: string;
+    policyDecision: PolicyDecision;
+    humanConfirmed: boolean;
+}
+export interface PendingApproval {
+    requestId: string;
+    request: SigningRequest;
+    decision: PolicyDecision;
+    createdAt: number;
+    expiresAt: number;
+}
+export interface RemoteSigningServiceConfig {
+    signer: SignerBackend;
+    policy?: SigningPolicy;
+    auditLog?: SandboxAuditLog;
+    approvalTimeoutMs?: number;
+}
+export declare class RemoteSigningService {
+    private signer;
+    private policyEvaluator;
+    private auditLog?;
+    private pendingApprovals;
+    private approvalTimeoutMs;
+    constructor(config: RemoteSigningServiceConfig);
+    getAddress(): Promise<string>;
+    submitSigningRequest(request: SigningRequest): Promise<SigningResult>;
+    approveRequest(requestId: string): Promise<SigningResult>;
+    rejectRequest(requestId: string): boolean;
+    getPendingApprovals(): PendingApproval[];
+    updatePolicy(policy: SigningPolicy): void;
+    getPolicy(): SigningPolicy;
+    private executeSign;
+}
+//# sourceMappingURL=remote-signing-service.d.ts.map

package/packages/agent/src/services/remote-signing-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-signing-service.d.ts","sourceRoot":"","sources":["../../../../../src/services/remote-signing-service.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,aAAa,EAElB,KAAK,cAAc,EACpB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,WAAW,aAAa;IAC5B,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,eAAe,CAAC,EAAE,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,cAAc,CAAC;IAC/B,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,cAAc,CAAC;IACxB,QAAQ,EAAE,cAAc,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,eAAe,CAAyB;IAChD,OAAO,CAAC,QAAQ,CAAC,CAAkB;IACnC,OAAO,CAAC,gBAAgB,CAAsC;IAC9D,OAAO,CAAC,iBAAiB,CAAS;gBAEtB,MAAM,EAAE,0BAA0B;IAOxC,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC;IAI7B,oBAAoB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;IA4DrE,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAgC/D,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAgBzC,mBAAmB,IAAI,eAAe,EAAE;IAWxC,YAAY,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI;IASzC,SAAS,IAAI,aAAa;YAIZ,WAAW;CAyD1B"}

package/packages/agent/src/services/remote-signing-service.js

@@ -0,0 +1,185 @@
+/**
+ * Remote signing service. Private keys stay on the host;
+ * sandboxed agents submit unsigned tx → policy check → sign → return.
+ */
+import { SigningPolicyEvaluator, } from "./signing-policy";
+export class RemoteSigningService {
+    signer;
+    policyEvaluator;
+    auditLog;
+    pendingApprovals = new Map();
+    approvalTimeoutMs;
+    constructor(config) {
+        this.signer = config.signer;
+        this.policyEvaluator = new SigningPolicyEvaluator(config.policy);
+        this.auditLog = config.auditLog;
+        this.approvalTimeoutMs = config.approvalTimeoutMs ?? 5 * 60 * 1000;
+    }
+    async getAddress() {
+        return this.signer.getAddress();
+    }
+    async submitSigningRequest(request) {
+        // Evaluate policy
+        const decision = this.policyEvaluator.evaluate(request);
+        this.auditLog?.record({
+            type: "signing_request_submitted",
+            summary: `Sign request ${request.requestId}: chain=${request.chainId} to=${request.to} value=${request.value}`,
+            metadata: {
+                requestId: request.requestId,
+                chainId: request.chainId,
+                to: request.to,
+                value: request.value,
+                allowed: decision.allowed,
+                reason: decision.reason,
+            },
+            severity: "info",
+        });
+        if (!decision.allowed) {
+            this.auditLog?.record({
+                type: "signing_request_rejected",
+                summary: `Rejected: ${decision.reason}`,
+                metadata: {
+                    requestId: request.requestId,
+                    matchedRule: decision.matchedRule,
+                },
+                severity: "warn",
+            });
+            return {
+                success: false,
+                error: decision.reason,
+                policyDecision: decision,
+                humanConfirmed: false,
+            };
+        }
+        // Check if human confirmation is required
+        if (decision.requiresHumanConfirmation) {
+            const approval = {
+                requestId: request.requestId,
+                request,
+                decision,
+                createdAt: Date.now(),
+                expiresAt: Date.now() + this.approvalTimeoutMs,
+            };
+            this.pendingApprovals.set(request.requestId, approval);
+            return {
+                success: false,
+                error: "Human confirmation required. Use approve endpoint.",
+                policyDecision: decision,
+                humanConfirmed: false,
+            };
+        }
+        // Sign the transaction
+        return this.executeSign(request, decision, false);
+    }
+    async approveRequest(requestId) {
+        const approval = this.pendingApprovals.get(requestId);
+        if (!approval) {
+            return {
+                success: false,
+                error: "No pending approval found for this request ID",
+                policyDecision: {
+                    allowed: false,
+                    reason: "Approval not found",
+                    requiresHumanConfirmation: false,
+                    matchedRule: "approval_not_found",
+                },
+                humanConfirmed: false,
+            };
+        }
+        // Check expiration
+        if (Date.now() > approval.expiresAt) {
+            this.pendingApprovals.delete(requestId);
+            return {
+                success: false,
+                error: "Approval expired",
+                policyDecision: approval.decision,
+                humanConfirmed: false,
+            };
+        }
+        this.pendingApprovals.delete(requestId);
+        return this.executeSign(approval.request, approval.decision, true);
+    }
+    rejectRequest(requestId) {
+        const existed = this.pendingApprovals.has(requestId);
+        this.pendingApprovals.delete(requestId);
+        if (existed) {
+            this.auditLog?.record({
+                type: "signing_request_rejected",
+                summary: `Human rejected request ${requestId}`,
+                metadata: { requestId },
+                severity: "info",
+            });
+        }
+        return existed;
+    }
+    getPendingApprovals() {
+        // Clean expired
+        const now = Date.now();
+        for (const [id, approval] of this.pendingApprovals) {
+            if (now > approval.expiresAt) {
+                this.pendingApprovals.delete(id);
+            }
+        }
+        return [...this.pendingApprovals.values()];
+    }
+    updatePolicy(policy) {
+        this.policyEvaluator.updatePolicy(policy);
+        this.auditLog?.record({
+            type: "policy_decision",
+            summary: "Signing policy updated",
+            severity: "warn",
+        });
+    }
+    getPolicy() {
+        return this.policyEvaluator.getPolicy();
+    }
+    async executeSign(request, decision, humanConfirmed) {
+        try {
+            const signedTx = await this.signer.signTransaction({
+                to: request.to,
+                value: request.value,
+                data: request.data,
+                chainId: request.chainId,
+                nonce: request.nonce,
+                gasLimit: request.gasLimit,
+            });
+            // Record for replay protection and rate limiting
+            this.policyEvaluator.recordRequest(request.requestId);
+            this.auditLog?.record({
+                type: "signing_request_approved",
+                summary: `Signed request ${request.requestId}: chain=${request.chainId} to=${request.to}`,
+                metadata: {
+                    requestId: request.requestId,
+                    chainId: request.chainId,
+                    to: request.to,
+                    humanConfirmed,
+                },
+                severity: "info",
+            });
+            return {
+                success: true,
+                signature: signedTx,
+                policyDecision: decision,
+                humanConfirmed,
+            };
+        }
+        catch (err) {
+            const errorMsg = err instanceof Error ? err.message : String(err);
+            this.auditLog?.record({
+                type: "signing_request_rejected",
+                summary: `Signing failed for ${request.requestId}: ${errorMsg}`,
+                metadata: {
+                    requestId: request.requestId,
+                    error: errorMsg,
+                },
+                severity: "error",
+            });
+            return {
+                success: false,
+                error: `Signing failed: ${errorMsg}`,
+                policyDecision: decision,
+                humanConfirmed,
+            };
+        }
+    }
+}