@elizaos/agent 0.25.9 → 2.0.0-alpha.151

package/packages/agent/src/config/plugin-auto-enable.d.ts

@@ -0,0 +1,36 @@
+import type { Plugin } from "@elizaos/core";
+import type { ElizaConfig } from "./types.js";
+export interface ApplyPluginAutoEnableResult {
+    config: ElizaConfig;
+    changes: string[];
+}
+export interface ApplyPluginAutoEnableParams {
+    config: Partial<ElizaConfig>;
+    env: NodeJS.ProcessEnv;
+    /**
+     * Already-loaded plugin instances. When provided, the function checks each
+     * plugin's `autoEnable` declaration BEFORE falling back to the hardcoded maps.
+     * This enables a gradual migration: plugins that self-declare their enable
+     * conditions no longer need entries in the central map.
+     */
+    loadedPlugins?: Plugin[];
+}
+export declare const CONNECTOR_PLUGINS: Record<string, string>;
+export declare const STREAMING_PLUGINS: Record<string, string>;
+export declare const AUTH_PROVIDER_PLUGINS: Record<string, string>;
+export declare function isConnectorConfigured(connectorName: string, connectorConfig: unknown): boolean;
+export declare function isStreamingDestinationConfigured(destName: string, destConfig: unknown): boolean;
+export declare function applyPluginAutoEnable(params: ApplyPluginAutoEnableParams): ApplyPluginAutoEnableResult;
+/**
+ * Check loaded plugins for self-declared `autoEnable` conditions and add
+ * matching ones to the config allow list.
+ *
+ * This is the data-driven counterpart to the hardcoded maps above. Plugins
+ * that declare `autoEnable` on their Plugin object can be auto-enabled
+ * without any central map entry.
+ *
+ * Can be called standalone (e.g., after a second-pass plugin resolution)
+ * or implicitly via `applyPluginAutoEnable({ loadedPlugins })`.
+ */
+export declare function applyPluginSelfDeclaredAutoEnable(loadedPlugins: Plugin[], config: ElizaConfig, env: NodeJS.ProcessEnv, changes: string[]): void;
+//# sourceMappingURL=plugin-auto-enable.d.ts.map

package/packages/agent/src/config/plugin-auto-enable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-auto-enable.d.ts","sourceRoot":"","sources":["../../../../../src/config/plugin-auto-enable.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,WAAW,CAAC;IACpB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC7B,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAsBpD,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAMpD,CAAC;AAsBF,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAyCxD,CAAC;AAmDF,wBAAgB,qBAAqB,CACnC,aAAa,EAAE,MAAM,EACrB,eAAe,EAAE,OAAO,GACvB,OAAO,CA8ET;AAED,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,OAAO,GAClB,OAAO,CAmBT;AAoCD,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,2BAA2B,GAClC,2BAA2B,CAoU7B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iCAAiC,CAC/C,aAAa,EAAE,MAAM,EAAE,EACvB,MAAM,EAAE,WAAW,EACnB,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,OAAO,EAAE,MAAM,EAAE,GAChB,IAAI,CAgFN"}

package/packages/agent/src/config/plugin-auto-enable.js

@@ -0,0 +1,519 @@
+import { SUBSCRIPTION_PROVIDER_MAP } from "../auth/types.js";
+export const CONNECTOR_PLUGINS = {
+    bluebubbles: "@elizaos/plugin-bluebubbles",
+    telegram: "@elizaos/plugin-telegram",
+    discord: "@elizaos/plugin-discord",
+    discordLocal: "@elizaos/plugin-discord-local",
+    slack: "@elizaos/plugin-slack",
+    twitter: "@elizaos/plugin-twitter",
+    // Internal connector built from src/plugins/whatsapp (not an npm package).
+    whatsapp: "@elizaos/plugin-whatsapp",
+    // Internal connector built from src/plugins/signal (not an npm package).
+    signal: "@elizaos/plugin-signal",
+    imessage: "@elizaos/plugin-imessage",
+    farcaster: "@elizaos/plugin-farcaster",
+    lens: "@elizaos/plugin-lens",
+    msteams: "@elizaos/plugin-msteams",
+    feishu: "@elizaos/plugin-feishu",
+    matrix: "@elizaos/plugin-matrix",
+    nostr: "@elizaos/plugin-nostr",
+    blooio: "@elizaos/plugin-blooio",
+    twitch: "@elizaos/plugin-twitch",
+    mattermost: "@elizaos/plugin-mattermost",
+    googlechat: "@elizaos/plugin-google-chat",
+};
+export const STREAMING_PLUGINS = {
+    twitch: "@elizaos/plugin-twitch-streaming",
+    youtube: "@elizaos/plugin-youtube-streaming",
+    customRtmp: "@elizaos/plugin-custom-rtmp",
+    pumpfun: "@elizaos/plugin-pumpfun-streaming",
+    x: "@elizaos/plugin-x-streaming",
+};
+const PROVIDER_PLUGINS = {
+    "google-antigravity": "@elizaos/plugin-google-antigravity",
+    "google-genai": "@elizaos/plugin-google-genai",
+    "vercel-ai-gateway": "@elizaos/plugin-vercel-ai-gateway",
+    openai: "@elizaos/plugin-openai",
+    anthropic: "@elizaos/plugin-anthropic",
+    qwen: "@elizaos/plugin-qwen",
+    minimax: "@elizaos/plugin-minimax",
+    groq: "@elizaos/plugin-groq",
+    xai: "@elizaos/plugin-xai",
+    openrouter: "@elizaos/plugin-openrouter",
+    ollama: "@elizaos/plugin-ollama",
+    zai: "@homunculuslabs/plugin-zai",
+    deepseek: "@elizaos/plugin-deepseek",
+    together: "@elizaos/plugin-together",
+    mistral: "@elizaos/plugin-mistral",
+    cohere: "@elizaos/plugin-cohere",
+    perplexity: "@elizaos/plugin-perplexity",
+};
+export const AUTH_PROVIDER_PLUGINS = {
+    ANTHROPIC_API_KEY: "@elizaos/plugin-anthropic",
+    CLAUDE_API_KEY: "@elizaos/plugin-anthropic",
+    OPENAI_API_KEY: "@elizaos/plugin-openai",
+    AI_GATEWAY_API_KEY: "@elizaos/plugin-vercel-ai-gateway",
+    AIGATEWAY_API_KEY: "@elizaos/plugin-vercel-ai-gateway",
+    GOOGLE_API_KEY: "@elizaos/plugin-google-genai",
+    GOOGLE_GENERATIVE_AI_API_KEY: "@elizaos/plugin-google-genai",
+    GOOGLE_CLOUD_API_KEY: "@elizaos/plugin-google-antigravity",
+    GROQ_API_KEY: "@elizaos/plugin-groq",
+    XAI_API_KEY: "@elizaos/plugin-xai",
+    GROK_API_KEY: "@elizaos/plugin-xai",
+    OPENROUTER_API_KEY: "@elizaos/plugin-openrouter",
+    OLLAMA_BASE_URL: "@elizaos/plugin-ollama",
+    ZAI_API_KEY: "@homunculuslabs/plugin-zai",
+    DEEPSEEK_API_KEY: "@elizaos/plugin-deepseek",
+    TOGETHER_API_KEY: "@elizaos/plugin-together",
+    MISTRAL_API_KEY: "@elizaos/plugin-mistral",
+    COHERE_API_KEY: "@elizaos/plugin-cohere",
+    PERPLEXITY_API_KEY: "@elizaos/plugin-perplexity",
+    ELIZAOS_CLOUD_API_KEY: "@elizaos/plugin-elizacloud",
+    ELIZAOS_CLOUD_ENABLED: "@elizaos/plugin-elizacloud",
+    CUA_API_KEY: "@elizaos/plugin-cua",
+    CUA_HOST: "@elizaos/plugin-cua",
+    OBSIDIAN_VAULT_PATH: "@elizaos/plugin-obsidian",
+    OBSIDAN_VAULT_PATH: "@elizaos/plugin-obsidian",
+    REPOPROMPT_CLI_PATH: "@elizaos/plugin-repoprompt",
+    CLAUDE_CODE_WORKBENCH_ENABLED: "@elizaos/plugin-claude-code-workbench",
+    // EVM plugin gated behind explicit opt-in flag instead of EVM_PRIVATE_KEY.
+    // plugin-evm's CROSS_CHAIN_TRANSFER action has a 'BRIDGE' simile that
+    // crashes with 'Action spec not found: BRIDGE' during startup.
+    // Gate behind ENABLE_EVM_PLUGIN=1 until the spec registration is fixed.
+    ENABLE_EVM_PLUGIN: "@elizaos/plugin-evm",
+    SOLANA_PRIVATE_KEY: "@elizaos/plugin-solana",
+    LASTFM_API_KEY: "@elizaos/plugin-music-library",
+    GENIUS_API_KEY: "@elizaos/plugin-music-library",
+    THEAUDIODB_API_KEY: "@elizaos/plugin-music-library",
+    SPOTIFY_CLIENT_ID: "@elizaos/plugin-music-library",
+    SPOTIFY_CLIENT_SECRET: "@elizaos/plugin-music-library",
+    RS_SDK_BOT_NAME: "@elizaos/app-2004scape",
+    SHOPIFY_ACCESS_TOKEN: "@elizaos/plugin-shopify",
+};
+const FEATURE_PLUGINS = {
+    browser: "@elizaos/plugin-browser",
+    cua: "@elizaos/plugin-cua",
+    obsidian: "@elizaos/plugin-obsidian",
+    cron: "@elizaos/plugin-cron",
+    shell: "@elizaos/plugin-shell",
+    imageGen: "@elizaos/plugin-image-generation",
+    tts: "@elizaos/plugin-edge-tts",
+    stt: "@elizaos/plugin-stt",
+    agentSkills: "@elizaos/plugin-agent-skills",
+    // directives: "@elizaos/plugin-directives", // not yet ready — package doesn't exist
+    commands: "@elizaos/plugin-commands",
+    diagnosticsOtel: "@elizaos/plugin-diagnostics-otel",
+    webhooks: "@elizaos/plugin-webhooks",
+    gmailWatch: "@elizaos/plugin-gmail-watch",
+    // personality and form are now built-in advanced capabilities
+    x402: "@elizaos/plugin-x402",
+    // Media generation plugins
+    fal: "@elizaos/plugin-fal",
+    suno: "@elizaos/plugin-suno",
+    musicLibrary: "@elizaos/plugin-music-library",
+    musicPlayer: "@elizaos/plugin-music-player",
+    vision: "@elizaos/plugin-vision",
+    computeruse: "@elizaos/plugin-computeruse",
+    repoprompt: "@elizaos/plugin-repoprompt",
+    claudeCodeWorkbench: "@elizaos/plugin-claude-code-workbench",
+    rs2004scape: "@elizaos/app-2004scape",
+};
+const EVM_PLUGIN_PACKAGE = "@elizaos/plugin-evm";
+const EVM_PLUGIN_SHORT_ID = "evm";
+const STEWARD_ELIZA_PLUGIN_PACKAGE = "@stwd/eliza-plugin";
+const STEWARD_ELIZA_PLUGIN_SHORT_ID = "stwd-eliza-plugin";
+function resolveEvmAutoEnableReason(env) {
+    if (env.EVM_PRIVATE_KEY?.trim()) {
+        return "env: EVM_PRIVATE_KEY";
+    }
+    const cloudProvisioned = env.ELIZA_CLOUD_PROVISIONED === "1";
+    if (cloudProvisioned && env.STEWARD_AGENT_TOKEN?.trim()) {
+        return "cloud-provisioned Steward wallet";
+    }
+    return null;
+}
+export function isConnectorConfigured(connectorName, connectorConfig) {
+    if (!connectorConfig || typeof connectorConfig !== "object") {
+        return false;
+    }
+    const config = connectorConfig;
+    if (config.enabled === false) {
+        return false;
+    }
+    if (config.botToken || config.token || config.apiKey) {
+        return true;
+    }
+    const hasEnabledSignalAccount = connectorName === "signal" &&
+        typeof config.accounts === "object" &&
+        config.accounts !== null &&
+        Object.values(config.accounts).some((account) => {
+            if (!account || typeof account !== "object")
+                return false;
+            const accountConfig = account;
+            if (accountConfig.enabled === false)
+                return false;
+            return Boolean(accountConfig.authDir ||
+                accountConfig.account ||
+                accountConfig.httpUrl ||
+                accountConfig.httpHost ||
+                accountConfig.httpPort ||
+                accountConfig.cliPath);
+        });
+    if (hasEnabledSignalAccount) {
+        return true;
+    }
+    switch (connectorName) {
+        case "bluebubbles":
+            return Boolean(config.serverUrl && config.password);
+        case "discordLocal":
+            return Boolean(config.clientId && config.clientSecret);
+        case "imessage":
+            return Boolean(config.cliPath);
+        case "signal":
+            return Boolean(config.authDir ||
+                config.account ||
+                config.httpUrl ||
+                config.httpHost ||
+                config.httpPort ||
+                config.cliPath);
+        case "whatsapp":
+            // authState/sessionPath: legacy field names
+            // authDir: Baileys multi-file auth state directory (WhatsAppAccountSchema)
+            // accounts: at least one account with authDir set and not explicitly disabled
+            return Boolean(config.authState ||
+                config.sessionPath ||
+                config.authDir ||
+                (config.accounts &&
+                    typeof config.accounts === "object" &&
+                    Object.values(config.accounts).some((account) => {
+                        if (!account || typeof account !== "object")
+                            return false;
+                        const acc = account;
+                        if (acc.enabled === false)
+                            return false;
+                        return Boolean(acc.authDir);
+                    })));
+        case "twitch":
+            return Boolean(config.accessToken || config.clientId || config.enabled === true);
+        default:
+            return false;
+    }
+}
+export function isStreamingDestinationConfigured(destName, destConfig) {
+    if (!destConfig || typeof destConfig !== "object")
+        return false;
+    const config = destConfig;
+    if (config.enabled === false)
+        return false;
+    switch (destName) {
+        case "twitch":
+            return Boolean(config.streamKey || config.enabled === true);
+        case "youtube":
+            return Boolean(config.streamKey || config.enabled === true);
+        case "customRtmp":
+            return Boolean(config.rtmpUrl && config.rtmpKey);
+        case "pumpfun":
+            return Boolean(config.streamKey && config.rtmpUrl);
+        case "x":
+            return Boolean(config.streamKey && config.rtmpUrl);
+        default:
+            return false;
+    }
+}
+function addToAllowlist(allow, pluginName, shortId, changes, reason) {
+    let added = false;
+    if (!allow.includes(shortId)) {
+        allow.push(shortId);
+        added = true;
+    }
+    if (pluginName !== shortId && !allow.includes(pluginName)) {
+        // Keep the fully qualified package too so older collector paths and
+        // external config consumers still work when they expect package names.
+        allow.push(pluginName);
+        added = true;
+    }
+    if (added) {
+        changes.push(`Auto-enabled plugin: ${pluginName} (${reason})`);
+    }
+}
+/** Safely extract `agents.defaults.subscriptionProvider` from an untyped config. */
+function getSubscriptionProvider(config) {
+    if (typeof config !== "object" || config === null)
+        return undefined;
+    const agents = config.agents;
+    if (typeof agents !== "object" || agents === null)
+        return undefined;
+    const defaults = agents.defaults;
+    if (typeof defaults !== "object" || defaults === null)
+        return undefined;
+    const provider = defaults.subscriptionProvider;
+    return typeof provider === "string" ? provider : undefined;
+}
+export function applyPluginAutoEnable(params) {
+    const { config, env } = params;
+    const changes = [];
+    const updatedConfig = structuredClone(config);
+    if (updatedConfig.plugins?.enabled === false) {
+        return { config: updatedConfig, changes };
+    }
+    updatedConfig.plugins = updatedConfig.plugins ?? {};
+    const pluginsConfig = updatedConfig.plugins;
+    pluginsConfig.allow = pluginsConfig.allow ?? [];
+    pluginsConfig.entries = pluginsConfig.entries ?? {};
+    const connectors = (updatedConfig.connectors ??
+        updatedConfig.channels ??
+        {});
+    if (connectors) {
+        for (const [connectorName, connectorConfig] of Object.entries(connectors)) {
+            const pluginName = CONNECTOR_PLUGINS[connectorName];
+            if (!pluginName)
+                continue;
+            if (!isConnectorConfigured(connectorName, connectorConfig))
+                continue;
+            if (pluginsConfig.entries[connectorName]?.enabled === false)
+                continue;
+            addToAllowlist(pluginsConfig.allow, pluginName, connectorName, changes, `connector: ${connectorName}`);
+        }
+    }
+    // Streaming destinations
+    const streaming = updatedConfig.streaming;
+    if (streaming) {
+        for (const [destName, destConfig] of Object.entries(streaming)) {
+            if (destName === "activeDestination")
+                continue; // skip meta field
+            const pluginName = STREAMING_PLUGINS[destName];
+            if (!pluginName)
+                continue;
+            if (!isStreamingDestinationConfigured(destName, destConfig))
+                continue;
+            // Derive short ID from the package name (e.g. "@elizaos/plugin-twitch-streaming" → "twitch-streaming")
+            const shortId = pluginName.includes("/plugin-")
+                ? pluginName.slice(pluginName.lastIndexOf("/plugin-") + "/plugin-".length)
+                : destName;
+            if (pluginsConfig.entries[shortId]?.enabled === false)
+                continue;
+            addToAllowlist(pluginsConfig.allow, pluginName, shortId, changes, `streaming: ${destName}`);
+        }
+    }
+    // Auth profiles
+    if (updatedConfig.auth?.profiles) {
+        for (const [profileKey, profile] of Object.entries(updatedConfig.auth.profiles)) {
+            const provider = profile.provider;
+            if (!provider)
+                continue;
+            const pluginName = PROVIDER_PLUGINS[provider];
+            if (!pluginName)
+                continue;
+            addToAllowlist(pluginsConfig.allow, pluginName, provider, changes, `auth profile: ${profileKey}`);
+        }
+    }
+    // Subscription provider — when a subscription is configured, force-enable
+    // the corresponding provider plugin so the user doesn't need to manually
+    // toggle entries.  This takes priority over explicit `enabled: false` for
+    // the subscription's own plugin because the user deliberately connected
+    // the subscription.
+    //
+    // Exception: Anthropic subscriptions are restricted to the Claude Code
+    // CLI by TOS.  Their tokens cannot be used by the runtime, so we must
+    // NOT force-enable @elizaos/plugin-anthropic based on subscription alone.
+    // A direct ANTHROPIC_API_KEY (set below via env-var detection) will still
+    // enable the plugin if available.
+    const subscriptionProvider = getSubscriptionProvider(updatedConfig);
+    const subscriptionIsRuntimeApplicable = typeof subscriptionProvider === "string" &&
+        subscriptionProvider !== "anthropic-subscription";
+    const subscriptionPluginId = subscriptionIsRuntimeApplicable
+        ? SUBSCRIPTION_PROVIDER_MAP[subscriptionProvider]
+        : undefined;
+    if (subscriptionPluginId) {
+        const pluginName = PROVIDER_PLUGINS[subscriptionPluginId];
+        if (pluginName) {
+            // Force-enable the subscription plugin (override enabled: false)
+            pluginsConfig.entries[subscriptionPluginId] = {
+                ...pluginsConfig.entries[subscriptionPluginId],
+                enabled: true,
+            };
+            addToAllowlist(pluginsConfig.allow, pluginName, subscriptionPluginId, changes, `subscription: ${subscriptionProvider}`);
+        }
+    }
+    // Env var API keys
+    for (const [envKey, pluginName] of Object.entries(AUTH_PROVIDER_PLUGINS)) {
+        const envValue = env[envKey];
+        if (!envValue || typeof envValue !== "string" || envValue.trim() === "")
+            continue;
+        const pluginId = pluginName.includes("/plugin-")
+            ? pluginName.slice(pluginName.lastIndexOf("/plugin-") + "/plugin-".length)
+            : pluginName;
+        if (pluginsConfig.entries[pluginId]?.enabled === false)
+            continue;
+        addToAllowlist(pluginsConfig.allow, pluginName, pluginId, changes, `env: ${envKey}`);
+    }
+    const evmAutoEnableReason = resolveEvmAutoEnableReason(env);
+    if (evmAutoEnableReason &&
+        pluginsConfig.entries[EVM_PLUGIN_SHORT_ID]?.enabled !== false) {
+        addToAllowlist(pluginsConfig.allow, EVM_PLUGIN_PACKAGE, EVM_PLUGIN_SHORT_ID, changes, evmAutoEnableReason);
+    }
+    // Auto-enable @stwd/eliza-plugin when Steward API is configured.
+    // This mirrors the desktop (app-core) path and ensures cloud containers get
+    // StewardService + STEWARD_TRANSFER action registered with the runtime.
+    if (env.STEWARD_API_URL?.trim() &&
+        pluginsConfig.entries[STEWARD_ELIZA_PLUGIN_SHORT_ID]?.enabled !== false) {
+        addToAllowlist(pluginsConfig.allow, STEWARD_ELIZA_PLUGIN_PACKAGE, STEWARD_ELIZA_PLUGIN_SHORT_ID, changes, "env: STEWARD_API_URL");
+    }
+    const cloudProvisioned = env.ELIZA_CLOUD_PROVISIONED === "1";
+    if (cloudProvisioned &&
+        pluginsConfig.entries["edge-tts"]?.enabled !== false) {
+        addToAllowlist(pluginsConfig.allow, "@elizaos/plugin-edge-tts", "edge-tts", changes, "cloud-provisioned voice output");
+    }
+    // Feature flags
+    if (updatedConfig.features) {
+        for (const [featureName, featureConfig] of Object.entries(updatedConfig.features)) {
+            const pluginName = FEATURE_PLUGINS[featureName];
+            if (!pluginName)
+                continue;
+            const isEnabled = featureConfig === true ||
+                (typeof featureConfig === "object" &&
+                    featureConfig !== null &&
+                    featureConfig.enabled !== false);
+            if (!isEnabled)
+                continue;
+            const pluginId = pluginName.includes("/plugin-")
+                ? pluginName.slice(pluginName.lastIndexOf("/plugin-") + "/plugin-".length)
+                : pluginName;
+            if (pluginsConfig.entries[pluginId]?.enabled === false)
+                continue;
+            addToAllowlist(pluginsConfig.allow, pluginName, pluginId, changes, `feature: ${featureName}`);
+        }
+    }
+    // Hooks: webhooks + gmail
+    const hooksConfig = updatedConfig.hooks;
+    if (hooksConfig && hooksConfig.enabled !== false && hooksConfig.token) {
+        const webhooksPlugin = FEATURE_PLUGINS.webhooks;
+        if (webhooksPlugin) {
+            addToAllowlist(pluginsConfig.allow, webhooksPlugin, webhooksPlugin.replace("@elizaos/plugin-", ""), changes, "hooks.token");
+        }
+    }
+    if (hooksConfig) {
+        const gmailConfig = hooksConfig.gmail;
+        if (gmailConfig?.account?.trim()) {
+            const gmailPlugin = FEATURE_PLUGINS.gmailWatch;
+            if (gmailPlugin) {
+                addToAllowlist(pluginsConfig.allow, gmailPlugin, gmailPlugin.replace("@elizaos/plugin-", ""), changes, "hooks.gmail.account");
+            }
+        }
+    }
+    // Media generation plugins
+    const mediaConfig = updatedConfig.media;
+    if (mediaConfig) {
+        // Image generation - FAL provider
+        if (mediaConfig.image?.enabled !== false &&
+            mediaConfig.image?.mode === "own-key" &&
+            mediaConfig.image?.provider === "fal") {
+            const falPlugin = FEATURE_PLUGINS.fal;
+            if (falPlugin) {
+                addToAllowlist(pluginsConfig.allow, falPlugin, "fal", changes, "media.image.provider=fal");
+            }
+        }
+        // Video generation - FAL provider
+        if (mediaConfig.video?.enabled !== false &&
+            mediaConfig.video?.mode === "own-key" &&
+            mediaConfig.video?.provider === "fal") {
+            const falPlugin = FEATURE_PLUGINS.fal;
+            if (falPlugin) {
+                addToAllowlist(pluginsConfig.allow, falPlugin, "fal", changes, "media.video.provider=fal");
+            }
+        }
+        // Audio/Music generation - Suno provider
+        if (mediaConfig.audio?.enabled !== false &&
+            mediaConfig.audio?.mode === "own-key" &&
+            mediaConfig.audio?.provider === "suno") {
+            const sunoPlugin = FEATURE_PLUGINS.suno;
+            if (sunoPlugin) {
+                addToAllowlist(pluginsConfig.allow, sunoPlugin, "suno", changes, "media.audio.provider=suno");
+            }
+        }
+        // Vision - enable vision plugin when configured
+        if (mediaConfig.vision?.enabled !== false && mediaConfig.vision?.provider) {
+            const visionPlugin = FEATURE_PLUGINS.vision;
+            if (visionPlugin) {
+                addToAllowlist(pluginsConfig.allow, visionPlugin, "vision", changes, `media.vision.provider=${mediaConfig.vision.provider}`);
+            }
+        }
+    }
+    // ── Self-declared autoEnable on loaded plugins ────────────────────────
+    // When loadedPlugins are provided, check each plugin's autoEnable field.
+    // This runs after the hardcoded maps so self-declared plugins can add to
+    // the allow list without needing a central map entry.
+    if (params.loadedPlugins) {
+        applyPluginSelfDeclaredAutoEnable(params.loadedPlugins, updatedConfig, env, changes);
+    }
+    return { config: updatedConfig, changes };
+}
+/**
+ * Check loaded plugins for self-declared `autoEnable` conditions and add
+ * matching ones to the config allow list.
+ *
+ * This is the data-driven counterpart to the hardcoded maps above. Plugins
+ * that declare `autoEnable` on their Plugin object can be auto-enabled
+ * without any central map entry.
+ *
+ * Can be called standalone (e.g., after a second-pass plugin resolution)
+ * or implicitly via `applyPluginAutoEnable({ loadedPlugins })`.
+ */
+export function applyPluginSelfDeclaredAutoEnable(loadedPlugins, config, env, changes) {
+    config.plugins = config.plugins ?? {};
+    const pluginsConfig = config.plugins;
+    pluginsConfig.allow = pluginsConfig.allow ?? [];
+    const connectors = (config.connectors ??
+        config.channels ??
+        {});
+    for (const plugin of loadedPlugins) {
+        if (!plugin.autoEnable)
+            continue;
+        const { envKeys, connectorKeys, shouldEnable } = plugin.autoEnable;
+        // Derive a short ID from the plugin name for allow-list and entries lookup.
+        // e.g. "@elizaos/plugin-telegram" → "telegram", "shopify" → "shopify"
+        const pluginName = plugin.name;
+        const shortId = pluginName.includes("/plugin-")
+            ? pluginName.slice(pluginName.lastIndexOf("/plugin-") + "/plugin-".length)
+            : pluginName;
+        // Skip if explicitly disabled in config entries
+        if (pluginsConfig.entries?.[shortId]?.enabled === false)
+            continue;
+        // Skip if already in the allow list (already enabled by hardcoded map or earlier pass)
+        if (pluginsConfig.allow.includes(shortId) ||
+            pluginsConfig.allow.includes(pluginName)) {
+            continue;
+        }
+        let enableReason = null;
+        // Check env keys (OR — any match enables)
+        if (envKeys?.length) {
+            for (const key of envKeys) {
+                const val = env[key];
+                if (val && typeof val === "string" && val.trim() !== "") {
+                    enableReason = `self-declared env: ${key}`;
+                    break;
+                }
+            }
+        }
+        // Check connector keys (OR — any match enables)
+        if (!enableReason && connectorKeys?.length) {
+            for (const connectorName of connectorKeys) {
+                const connectorConfig = connectors[connectorName];
+                if (connectorConfig &&
+                    isConnectorConfigured(connectorName, connectorConfig)) {
+                    enableReason = `self-declared connector: ${connectorName}`;
+                    break;
+                }
+            }
+        }
+        // Check custom predicate
+        if (!enableReason && shouldEnable) {
+            if (shouldEnable(env, config)) {
+                enableReason = "self-declared shouldEnable predicate";
+            }
+        }
+        if (enableReason) {
+            addToAllowlist(pluginsConfig.allow, pluginName, shortId, changes, enableReason);
+        }
+    }
+}

package/packages/agent/src/config/plugin-widgets.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Server-side plugin widget declarations.
+ *
+ * Maps plugin IDs to their widget metadata. This is the authoritative source
+ * for widget declarations until upstream elizaOS adds a `widgets` field to the
+ * Plugin type. When that happens, this map becomes a fallback for plugins
+ * that haven't adopted the new field yet.
+ *
+ * Widget types are intentionally kept as plain objects (not imported from
+ * app-core) to avoid circular dependencies between server and client packages.
+ */
+export interface PluginWidgetDeclarationServer {
+    id: string;
+    pluginId: string;
+    slot: "chat-sidebar" | "chat-inline" | "wallet" | "browser" | "heartbeats" | "character" | "settings" | "nav-page";
+    label: string;
+    icon?: string;
+    order?: number;
+    defaultEnabled?: boolean;
+    navGroup?: string;
+}
+/**
+ * Static map of plugin widget declarations.
+ * Key: plugin ID. Value: array of widget declarations.
+ */
+export declare const PLUGIN_WIDGET_MAP: Record<string, PluginWidgetDeclarationServer[]>;
+/** Resolve widget declarations for a plugin by ID. */
+export declare function getPluginWidgets(pluginId: string): PluginWidgetDeclarationServer[];
+//# sourceMappingURL=plugin-widgets.d.ts.map

package/packages/agent/src/config/plugin-widgets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-widgets.d.ts","sourceRoot":"","sources":["../../../../../src/config/plugin-widgets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,WAAW,6BAA6B;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EACA,cAAc,GACd,aAAa,GACb,QAAQ,GACR,SAAS,GACT,YAAY,GACZ,WAAW,GACX,UAAU,GACV,UAAU,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CACpC,MAAM,EACN,6BAA6B,EAAE,CAmDhC,CAAC;AAEF,sDAAsD;AACtD,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,GACf,6BAA6B,EAAE,CAEjC"}

package/packages/agent/src/config/plugin-widgets.js

@@ -0,0 +1,70 @@
+/**
+ * Server-side plugin widget declarations.
+ *
+ * Maps plugin IDs to their widget metadata. This is the authoritative source
+ * for widget declarations until upstream elizaOS adds a `widgets` field to the
+ * Plugin type. When that happens, this map becomes a fallback for plugins
+ * that haven't adopted the new field yet.
+ *
+ * Widget types are intentionally kept as plain objects (not imported from
+ * app-core) to avoid circular dependencies between server and client packages.
+ */
+/**
+ * Static map of plugin widget declarations.
+ * Key: plugin ID. Value: array of widget declarations.
+ */
+export const PLUGIN_WIDGET_MAP = {
+    lifeops: [
+        {
+            id: "lifeops.overview",
+            pluginId: "lifeops",
+            slot: "chat-sidebar",
+            label: "LifeOps Overview",
+            icon: "Sparkles",
+            order: 90,
+            defaultEnabled: true,
+        },
+        {
+            id: "lifeops.google",
+            pluginId: "lifeops",
+            slot: "chat-sidebar",
+            label: "Google Services",
+            icon: "Plug2",
+            order: 150,
+            defaultEnabled: true,
+        },
+    ],
+    "agent-orchestrator": [
+        {
+            id: "agent-orchestrator.apps",
+            pluginId: "agent-orchestrator",
+            slot: "chat-sidebar",
+            label: "App Runs",
+            icon: "Activity",
+            order: 150,
+            defaultEnabled: true,
+        },
+        {
+            id: "agent-orchestrator.tasks",
+            pluginId: "agent-orchestrator",
+            slot: "chat-sidebar",
+            label: "Tasks",
+            icon: "ListTodo",
+            order: 200,
+            defaultEnabled: true,
+        },
+        {
+            id: "agent-orchestrator.activity",
+            pluginId: "agent-orchestrator",
+            slot: "chat-sidebar",
+            label: "Activity",
+            icon: "Activity",
+            order: 300,
+            defaultEnabled: true,
+        },
+    ],
+};
+/** Resolve widget declarations for a plugin by ID. */
+export function getPluginWidgets(pluginId) {
+    return PLUGIN_WIDGET_MAP[pluginId] ?? [];
+}

package/packages/agent/src/config/runtime-env.d.ts

@@ -0,0 +1,2 @@
+export * from "@elizaos/shared/runtime-env";
+//# sourceMappingURL=runtime-env.d.ts.map

package/packages/agent/src/config/runtime-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-env.d.ts","sourceRoot":"","sources":["../../../../../src/config/runtime-env.ts"],"names":[],"mappings":"AAAA,cAAc,6BAA6B,CAAC"}

package/packages/agent/src/config/runtime-env.js

@@ -0,0 +1 @@
+export * from "@elizaos/shared/runtime-env";