@elizaos/agent 0.25.9 → 2.0.0-alpha.151

package/packages/typescript/src/features/secrets/types.d.ts

@@ -0,0 +1,438 @@
+/**
+ * Plugin Secrets Manager - Shared Type Definitions
+ *
+ * This module defines all core types for the multi-level secrets management system.
+ * Designed for ElizaOS native storage: character settings, world metadata, and components.
+ */
+export declare const SECRET_KEY_MAX_LENGTH = 256;
+export declare const SECRET_VALUE_MAX_LENGTH = 65536;
+export declare const SECRET_DESCRIPTION_MAX_LENGTH = 1024;
+export declare const SECRET_KEY_PATTERN: RegExp;
+export declare const MAX_ACCESS_LOG_ENTRIES = 1000;
+export type SecretLevel = "global" | "world" | "user";
+export type SecretType = "api_key" | "private_key" | "public_key" | "url" | "credential" | "token" | "config" | "secret";
+export type SecretStatus = "missing" | "generating" | "validating" | "invalid" | "valid" | "expired" | "revoked";
+export type SecretPermissionType = "read" | "write" | "delete" | "share";
+export type ValidationStrategy = "none" | "api_key:openai" | "api_key:anthropic" | "api_key:groq" | "api_key:google" | "api_key:mistral" | "api_key:cohere" | "url:valid" | "url:reachable" | "custom";
+export type StorageBackend = "memory" | "character" | "world" | "component";
+/**
+ * Configuration for a single secret/environment variable
+ */
+export interface SecretConfig {
+    /** Type classification of the secret */
+    type: SecretType;
+    /** Whether this secret is required for the plugin to function */
+    required: boolean;
+    /** Human-readable description */
+    description: string;
+    /** Whether this secret can be auto-generated */
+    canGenerate: boolean;
+    /** Validation method to use */
+    validationMethod?: ValidationStrategy;
+    /** Current status of the secret */
+    status: SecretStatus;
+    /** Last error message if validation failed */
+    lastError?: string;
+    /** Number of validation attempts */
+    attempts: number;
+    /** Timestamp when secret was created */
+    createdAt?: number;
+    /** Timestamp when secret was last validated */
+    validatedAt?: number;
+    /** Plugin that declared this secret requirement */
+    plugin: string;
+    /** Storage level (global, world, or user) */
+    level: SecretLevel;
+    /** Owner entity ID for user-level secrets */
+    ownerId?: string;
+    /** World ID for world-level secrets */
+    worldId?: string;
+    /** Whether the value is encrypted */
+    encrypted?: boolean;
+    /** Explicit permissions granted to other entities */
+    permissions?: SecretPermission[];
+    /** List of entity IDs with shared access */
+    sharedWith?: string[];
+    /** Optional expiration timestamp */
+    expiresAt?: number;
+}
+/**
+ * Stored secret with value and config
+ */
+export interface StoredSecret {
+    /** The secret value (may be encrypted) */
+    value: string | EncryptedSecret;
+    /** Secret configuration */
+    config: SecretConfig;
+}
+/**
+ * Context for secret operations - determines access level and scope
+ */
+export interface SecretContext {
+    /** Storage level to operate on */
+    level: SecretLevel;
+    /** World ID (required for world-level operations) */
+    worldId?: string;
+    /** User ID (required for user-level operations) */
+    userId?: string;
+    /** Agent ID (always required) */
+    agentId: string;
+    /** Entity making the request (for permission checks) */
+    requesterId?: string;
+}
+/**
+ * Permission grant for a secret
+ */
+export interface SecretPermission {
+    /** Entity ID that has this permission */
+    entityId: string;
+    /** List of allowed operations */
+    permissions: SecretPermissionType[];
+    /** Entity that granted this permission */
+    grantedBy: string;
+    /** Timestamp when permission was granted */
+    grantedAt: number;
+    /** Optional expiration timestamp */
+    expiresAt?: number;
+}
+/**
+ * Metadata collection for multiple secrets (without values)
+ */
+export interface SecretMetadata {
+    [key: string]: SecretConfig;
+}
+/**
+ * Access log entry for auditing
+ */
+export interface SecretAccessLog {
+    /** Secret key that was accessed */
+    secretKey: string;
+    /** Entity that performed the access */
+    accessedBy: string;
+    /** Type of access operation */
+    action: SecretPermissionType;
+    /** Timestamp of access */
+    timestamp: number;
+    /** Context of the access */
+    context: SecretContext;
+    /** Whether the access succeeded */
+    success: boolean;
+    /** Error message if access failed */
+    error?: string;
+}
+/**
+ * Encrypted secret container
+ */
+export interface EncryptedSecret {
+    /** Encrypted value (base64) */
+    value: string;
+    /** Initialization vector (base64) */
+    iv: string;
+    /** Authentication tag for GCM mode (base64) */
+    authTag?: string;
+    /** Encryption algorithm used */
+    algorithm: "aes-256-gcm" | "aes-256-cbc";
+    /** Key identifier for key rotation */
+    keyId: string;
+}
+/**
+ * Key derivation parameters
+ */
+export interface KeyDerivationParams {
+    /** Salt for key derivation (base64) */
+    salt: string;
+    /** Number of iterations for PBKDF2 */
+    iterations: number;
+    /** Algorithm used for derivation */
+    algorithm: "pbkdf2-sha256" | "argon2id";
+    /** Key length in bytes */
+    keyLength: number;
+}
+/**
+ * Secret requirement declared by a plugin
+ */
+export interface PluginSecretRequirement {
+    /** Human-readable description */
+    description: string;
+    /** Type of secret */
+    type: SecretType;
+    /** Whether the secret is required for plugin to function */
+    required: boolean;
+    /** Validation method to use */
+    validationMethod?: ValidationStrategy;
+    /** Environment variable name (for backward compatibility) */
+    envVar?: string;
+    /** Whether this secret can be auto-generated */
+    canGenerate?: boolean;
+    /** Generation script if auto-generatable */
+    generationScript?: string;
+}
+/**
+ * Status of plugin requirements
+ */
+export interface PluginRequirementStatus {
+    /** Plugin identifier */
+    pluginId: string;
+    /** Whether all required secrets are available */
+    ready: boolean;
+    /** List of missing required secrets */
+    missingRequired: string[];
+    /** List of missing optional secrets */
+    missingOptional: string[];
+    /** List of invalid secrets */
+    invalid: string[];
+    /** Overall status message */
+    message: string;
+}
+/**
+ * Callback for secret changes
+ */
+export type SecretChangeCallback = (key: string, value: string | null, context: SecretContext) => Promise<void>;
+/**
+ * Plugin activation registration
+ */
+export interface PendingPluginActivation {
+    /** Plugin identifier */
+    pluginId: string;
+    /** Required secrets for activation */
+    requiredSecrets: string[];
+    /** Callback to invoke when ready */
+    callback: () => Promise<void>;
+    /** Registration timestamp */
+    registeredAt: number;
+}
+/**
+ * Storage backend interface
+ */
+export interface ISecretStorage {
+    /** Storage backend type */
+    readonly storageType: StorageBackend;
+    /** Initialize the storage backend */
+    initialize(): Promise<void>;
+    /** Check if a secret exists */
+    exists(key: string, context: SecretContext): Promise<boolean>;
+    /** Get a secret value */
+    get(key: string, context: SecretContext): Promise<string | null>;
+    /** Set a secret value */
+    set(key: string, value: string, context: SecretContext, config?: Partial<SecretConfig>): Promise<boolean>;
+    /** Delete a secret */
+    delete(key: string, context: SecretContext): Promise<boolean>;
+    /** List all secrets in a context */
+    list(context: SecretContext): Promise<SecretMetadata>;
+    /** Get secret configuration without value */
+    getConfig(key: string, context: SecretContext): Promise<SecretConfig | null>;
+    /** Update secret configuration */
+    updateConfig(key: string, context: SecretContext, config: Partial<SecretConfig>): Promise<boolean>;
+}
+/**
+ * Result of secret validation
+ */
+export interface ValidationResult {
+    /** Whether the value is valid */
+    isValid: boolean;
+    /** Error message if invalid */
+    error?: string;
+    /** Additional details */
+    details?: string;
+    /** Validation timestamp */
+    validatedAt: number;
+}
+/**
+ * Custom validation function signature
+ */
+export type CustomValidator = (key: string, value: string) => Promise<ValidationResult>;
+/**
+ * Validation strategy registry entry
+ */
+export interface ValidationStrategyEntry {
+    /** Strategy identifier */
+    id: ValidationStrategy;
+    /** Human-readable name */
+    name: string;
+    /** Description of validation */
+    description: string;
+    /** Validator function */
+    validate: CustomValidator;
+}
+/**
+ * Script for auto-generating secrets
+ */
+export interface GenerationScript {
+    /** Variable name to generate */
+    variableName: string;
+    /** Plugin that owns this script */
+    pluginName: string;
+    /** Script content (shell/node) */
+    script: string;
+    /** Required dependencies */
+    dependencies: string[];
+    /** Number of generation attempts */
+    attempts: number;
+    /** Last output */
+    output?: string;
+    /** Last error */
+    error?: string;
+    /** Current status */
+    status: "pending" | "running" | "success" | "failed";
+    /** Creation timestamp */
+    createdAt: number;
+}
+/**
+ * Secrets service configuration
+ */
+export interface SecretsServiceConfig {
+    /** Whether to enable encryption */
+    enableEncryption: boolean;
+    /** Salt for key derivation */
+    encryptionSalt?: string;
+    /** Whether to enable access logging */
+    enableAccessLogging: boolean;
+    /** Maximum access log entries to keep */
+    maxAccessLogEntries: number;
+}
+/**
+ * Plugin activator service configuration
+ */
+export interface PluginActivatorConfig {
+    /** Whether to enable auto-activation */
+    enableAutoActivation: boolean;
+    /** Polling interval for checking requirements (ms) */
+    pollingIntervalMs: number;
+    /** Maximum time to wait for secrets (ms, 0 = forever) */
+    maxWaitMs: number;
+}
+/**
+ * Secret change event
+ */
+export interface SecretChangeEvent {
+    /** Event type */
+    type: "created" | "updated" | "deleted" | "expired";
+    /** Secret key */
+    key: string;
+    /** New value (null for deleted) */
+    value: string | null;
+    /** Previous value (if updated) */
+    previousValue?: string;
+    /** Context of the change */
+    context: SecretContext;
+    /** Timestamp */
+    timestamp: number;
+}
+/**
+ * Plugin activation event
+ */
+export interface PluginActivationEvent {
+    /** Event type */
+    type: "queued" | "activated" | "failed" | "timeout";
+    /** Plugin identifier */
+    pluginId: string;
+    /** Missing secrets (if queued/failed) */
+    missingSecrets?: string[];
+    /** Error message (if failed) */
+    error?: string;
+    /** Timestamp */
+    timestamp: number;
+}
+export type FormFieldType = "text" | "password" | "textarea" | "select" | "checkbox" | "radio" | "file" | "hidden";
+export interface FormValidationRule {
+    /** Rule type */
+    type: "required" | "minLength" | "maxLength" | "pattern" | "custom";
+    /** Value for the rule */
+    value?: string | number | boolean;
+    /** Error message */
+    message: string;
+}
+export interface FormField {
+    /** Field name (becomes secret key) */
+    name: string;
+    /** Field label */
+    label: string;
+    /** Field type */
+    type: FormFieldType;
+    /** Placeholder text */
+    placeholder?: string;
+    /** Default value */
+    defaultValue?: string;
+    /** Help text */
+    helpText?: string;
+    /** Options for select/radio */
+    options?: Array<{
+        value: string;
+        label: string;
+    }>;
+    /** Validation rules */
+    validation?: FormValidationRule[];
+    /** Whether field is disabled */
+    disabled?: boolean;
+    /** Custom CSS classes */
+    className?: string;
+}
+export interface FormSchema {
+    /** Form title */
+    title: string;
+    /** Form description */
+    description?: string;
+    /** Form fields */
+    fields: FormField[];
+    /** Submit button text */
+    submitText?: string;
+    /** Cancel button text */
+    cancelText?: string;
+    /** Success message */
+    successMessage?: string;
+    /** Redirect URL after success */
+    redirectUrl?: string;
+}
+export interface FormSession {
+    /** Session ID */
+    id: string;
+    /** Form schema */
+    schema: FormSchema;
+    /** Context for storing secrets */
+    context: SecretContext;
+    /** Expiration timestamp */
+    expiresAt: number;
+    /** Created timestamp */
+    createdAt: number;
+    /** Public URL for form access */
+    publicUrl?: string;
+    /** Tunnel ID (if using ngrok) */
+    tunnelId?: string;
+    /** Whether form has been submitted */
+    submitted: boolean;
+    /** Submission timestamp */
+    submittedAt?: number;
+}
+export interface FormSubmission {
+    /** Session ID */
+    sessionId: string;
+    /** Submitted values */
+    values: Record<string, string>;
+    /** Submission timestamp */
+    submittedAt: number;
+    /** Client IP address */
+    clientIp?: string;
+    /** User agent */
+    userAgent?: string;
+}
+export declare class SecretsError extends Error {
+    readonly code: string;
+    readonly details?: Record<string, unknown>;
+    constructor(message: string, code: string, details?: Record<string, unknown>);
+}
+export declare class PermissionDeniedError extends SecretsError {
+    constructor(key: string, action: SecretPermissionType, context: SecretContext);
+}
+export declare class SecretNotFoundError extends SecretsError {
+    constructor(key: string, context: SecretContext);
+}
+export declare class ValidationError extends SecretsError {
+    constructor(key: string, message: string, details?: Record<string, unknown>);
+}
+export declare class EncryptionError extends SecretsError {
+    constructor(message: string, details?: Record<string, unknown>);
+}
+export declare class StorageError extends SecretsError {
+    constructor(message: string, details?: Record<string, unknown>);
+}
+//# sourceMappingURL=types.d.ts.map

package/packages/typescript/src/features/secrets/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../../typescript/src/features/secrets/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,eAAO,MAAM,qBAAqB,MAAM,CAAC;AACzC,eAAO,MAAM,uBAAuB,QAAQ,CAAC;AAC7C,eAAO,MAAM,6BAA6B,OAAO,CAAC;AAClD,eAAO,MAAM,kBAAkB,QAAsB,CAAC;AACtD,eAAO,MAAM,sBAAsB,OAAO,CAAC;AAM3C,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;AAEtD,MAAM,MAAM,UAAU,GACnB,SAAS,GACT,aAAa,GACb,YAAY,GACZ,KAAK,GACL,YAAY,GACZ,OAAO,GACP,QAAQ,GACR,QAAQ,CAAC;AAEZ,MAAM,MAAM,YAAY,GACrB,SAAS,GACT,YAAY,GACZ,YAAY,GACZ,SAAS,GACT,OAAO,GACP,SAAS,GACT,SAAS,CAAC;AAEb,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEzE,MAAM,MAAM,kBAAkB,GAC3B,MAAM,GACN,gBAAgB,GAChB,mBAAmB,GACnB,cAAc,GACd,gBAAgB,GAChB,iBAAiB,GACjB,gBAAgB,GAChB,WAAW,GACX,eAAe,GACf,QAAQ,CAAC;AAEZ,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,WAAW,GAAG,OAAO,GAAG,WAAW,CAAC;AAM5E;;GAEG;AACH,MAAM,WAAW,YAAY;IAC5B,wCAAwC;IACxC,IAAI,EAAE,UAAU,CAAC;IACjB,iEAAiE;IACjE,QAAQ,EAAE,OAAO,CAAC;IAClB,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,WAAW,EAAE,OAAO,CAAC;IACrB,+BAA+B;IAC/B,gBAAgB,CAAC,EAAE,kBAAkB,CAAC;IACtC,mCAAmC;IACnC,MAAM,EAAE,YAAY,CAAC;IACrB,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,MAAM,EAAE,MAAM,CAAC;IACf,6CAA6C;IAC7C,KAAK,EAAE,WAAW,CAAC;IACnB,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qCAAqC;IACrC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,qDAAqD;IACrD,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACjC,4CAA4C;IAC5C,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,oCAAoC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC5B,0CAA0C;IAC1C,KAAK,EAAE,MAAM,GAAG,eAAe,CAAC;IAChC,2BAA2B;IAC3B,MAAM,EAAE,YAAY,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC7B,kCAAkC;IAClC,KAAK,EAAE,WAAW,CAAC;IACnB,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAChC,yCAAyC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,iCAAiC;IACjC,WAAW,EAAE,oBAAoB,EAAE,CAAC;IACpC,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC/B,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,+BAA+B;IAC/B,MAAM,EAAE,oBAAoB,CAAC;IAC7B,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,4BAA4B;IAC5B,OAAO,EAAE,aAAa,CAAC;IACvB,mCAAmC;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,qCAAqC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAMD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC/B,+BAA+B;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,qCAAqC;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,SAAS,EAAE,aAAa,GAAG,aAAa,CAAC;IACzC,sCAAsC;IACtC,KAAK,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IACnC,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,oCAAoC;IACpC,SAAS,EAAE,eAAe,GAAG,UAAU,CAAC;IACxC,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;CAClB;AAMD;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACvC,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,qBAAqB;IACrB,IAAI,EAAE,UAAU,CAAC;IACjB,4DAA4D;IAC5D,QAAQ,EAAE,OAAO,CAAC;IAClB,+BAA+B;IAC/B,gBAAgB,CAAC,EAAE,kBAAkB,CAAC;IACtC,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,4CAA4C;IAC5C,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACvC,wBAAwB;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,KAAK,EAAE,OAAO,CAAC;IACf,uCAAuC;IACvC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,uCAAuC;IACvC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,8BAA8B;IAC9B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAClC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,OAAO,EAAE,aAAa,KAClB,OAAO,CAAC,IAAI,CAAC,CAAC;AAEnB;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACvC,wBAAwB;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,oCAAoC;IACpC,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,6BAA6B;IAC7B,YAAY,EAAE,MAAM,CAAC;CACrB;AAMD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC9B,2BAA2B;IAC3B,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;IAErC,qCAAqC;IACrC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5B,+BAA+B;IAC/B,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE9D,yBAAyB;IACzB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAEjE,yBAAyB;IACzB,GAAG,CACF,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,aAAa,EACtB,MAAM,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAC5B,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpB,sBAAsB;IACtB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE9D,oCAAoC;IACpC,IAAI,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAEtD,6CAA6C;IAC7C,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAE7E,kCAAkC;IAClC,YAAY,CACX,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,GAC3B,OAAO,CAAC,OAAO,CAAC,CAAC;CACpB;AAMD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAChC,iCAAiC;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,+BAA+B;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yBAAyB;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2BAA2B;IAC3B,WAAW,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,CAC7B,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,KACT,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAE/B;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACvC,0BAA0B;IAC1B,EAAE,EAAE,kBAAkB,CAAC;IACvB,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,gCAAgC;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,yBAAyB;IACzB,QAAQ,EAAE,eAAe,CAAC;CAC1B;AAMD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAChC,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,4BAA4B;IAC5B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qBAAqB;IACrB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;IACrD,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;CAClB;AAMD;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACpC,mCAAmC;IACnC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,8BAA8B;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uCAAuC;IACvC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,yCAAyC;IACzC,mBAAmB,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACrC,wCAAwC;IACxC,oBAAoB,EAAE,OAAO,CAAC;IAC9B,sDAAsD;IACtD,iBAAiB,EAAE,MAAM,CAAC;IAC1B,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;CAClB;AAMD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IACjC,iBAAiB;IACjB,IAAI,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;IACpD,iBAAiB;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,mCAAmC;IACnC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,kCAAkC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,4BAA4B;IAC5B,OAAO,EAAE,aAAa,CAAC;IACvB,gBAAgB;IAChB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACrC,iBAAiB;IACjB,IAAI,EAAE,QAAQ,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;IACpD,wBAAwB;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,yCAAyC;IACzC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,gCAAgC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB;IAChB,SAAS,EAAE,MAAM,CAAC;CAClB;AAMD,MAAM,MAAM,aAAa,GACtB,MAAM,GACN,UAAU,GACV,UAAU,GACV,QAAQ,GACR,UAAU,GACV,OAAO,GACP,MAAM,GACN,QAAQ,CAAC;AAEZ,MAAM,WAAW,kBAAkB;IAClC,gBAAgB;IAChB,IAAI,EAAE,UAAU,GAAG,WAAW,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAC;IACpE,yBAAyB;IACzB,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAClC,oBAAoB;IACpB,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,SAAS;IACzB,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB;IACjB,IAAI,EAAE,aAAa,CAAC;IACpB,uBAAuB;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oBAAoB;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClD,uBAAuB;IACvB,UAAU,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAClC,gCAAgC;IAChC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,yBAAyB;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IAC1B,iBAAiB;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,uBAAuB;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB;IAClB,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,yBAAyB;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yBAAyB;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sBAAsB;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iCAAiC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC3B,iBAAiB;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,kBAAkB;IAClB,MAAM,EAAE,UAAU,CAAC;IACnB,kCAAkC;IAClC,OAAO,EAAE,aAAa,CAAC;IACvB,2BAA2B;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,wBAAwB;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,SAAS,EAAE,OAAO,CAAC;IACnB,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC9B,iBAAiB;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,uBAAuB;IACvB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,2BAA2B;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,wBAAwB;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAMD,qBAAa,YAAa,SAAQ,KAAK;aAGrB,IAAI,EAAE,MAAM;aACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFjD,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAKlD;AAED,qBAAa,qBAAsB,SAAQ,YAAY;gBAErD,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EAAE,aAAa;CASvB;AAED,qBAAa,mBAAoB,SAAQ,YAAY;gBACxC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa;CAQ/C;AAED,qBAAa,eAAgB,SAAQ,YAAY;gBACpC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAQ3E;AAED,qBAAa,eAAgB,SAAQ,YAAY;gBACpC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI9D;AAED,qBAAa,YAAa,SAAQ,YAAY;gBACjC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI9D"}

package/packages/typescript/src/features/secrets/types.js

@@ -0,0 +1,57 @@
+/**
+ * Plugin Secrets Manager - Shared Type Definitions
+ *
+ * This module defines all core types for the multi-level secrets management system.
+ * Designed for ElizaOS native storage: character settings, world metadata, and components.
+ */
+// ============================================================================
+// Constants
+// ============================================================================
+export const SECRET_KEY_MAX_LENGTH = 256;
+export const SECRET_VALUE_MAX_LENGTH = 65536;
+export const SECRET_DESCRIPTION_MAX_LENGTH = 1024;
+export const SECRET_KEY_PATTERN = /^[A-Z][A-Z0-9_]*$/;
+export const MAX_ACCESS_LOG_ENTRIES = 1000;
+// ============================================================================
+// Error Types
+// ============================================================================
+export class SecretsError extends Error {
+    code;
+    details;
+    constructor(message, code, details) {
+        super(message);
+        this.code = code;
+        this.details = details;
+        this.name = "SecretsError";
+    }
+}
+export class PermissionDeniedError extends SecretsError {
+    constructor(key, action, context) {
+        super(`Permission denied: cannot ${action} secret '${key}' at level '${context.level}'`, "PERMISSION_DENIED", { key, action, context });
+        this.name = "PermissionDeniedError";
+    }
+}
+export class SecretNotFoundError extends SecretsError {
+    constructor(key, context) {
+        super(`Secret '${key}' not found at level '${context.level}'`, "SECRET_NOT_FOUND", { key, context });
+        this.name = "SecretNotFoundError";
+    }
+}
+export class ValidationError extends SecretsError {
+    constructor(key, message, details) {
+        super(`Validation failed for secret '${key}': ${message}`, "VALIDATION_FAILED", { key, ...details });
+        this.name = "ValidationError";
+    }
+}
+export class EncryptionError extends SecretsError {
+    constructor(message, details) {
+        super(message, "ENCRYPTION_ERROR", details);
+        this.name = "EncryptionError";
+    }
+}
+export class StorageError extends SecretsError {
+    constructor(message, details) {
+        super(message, "STORAGE_ERROR", details);
+        this.name = "StorageError";
+    }
+}

package/packages/typescript/src/features/secrets/validation.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Secret Validation Module
+ *
+ * Provides validation strategies for different types of secrets
+ * including API keys, URLs, and custom validation.
+ */
+import type { CustomValidator, ValidationResult, ValidationStrategy } from "./types.ts";
+/**
+ * Validation strategy implementations
+ */
+export declare const ValidationStrategies: Record<string, CustomValidator>;
+/**
+ * Register a custom validator
+ */
+export declare function registerValidator(name: string, validator: CustomValidator): void;
+/**
+ * Unregister a custom validator
+ */
+export declare function unregisterValidator(name: string): boolean;
+/**
+ * Get a validator by strategy name
+ */
+export declare function getValidator(strategy: string): CustomValidator | undefined;
+/**
+ * Validate a secret value
+ */
+export declare function validateSecret(key: string, value: string, strategy?: string): Promise<ValidationResult>;
+/**
+ * Infer validation strategy from secret key name
+ */
+export declare function inferValidationStrategy(key: string): ValidationStrategy;
+export { validateSecret as validate };
+//# sourceMappingURL=validation.d.ts.map

package/packages/typescript/src/features/secrets/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../../../../typescript/src/features/secrets/validation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EACX,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,MAAM,YAAY,CAAC;AAEpB;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAkQhE,CAAC;AAOF;;GAEG;AACH,wBAAgB,iBAAiB,CAChC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,eAAe,GACxB,IAAI,CAGN;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAQ1E;AAED;;GAEG;AACH,wBAAsB,cAAc,CACnC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,QAAQ,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,gBAAgB,CAAC,CAyB3B;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,kBAAkB,CAgCvE;AA4GD,OAAO,EAAE,cAAc,IAAI,QAAQ,EAAE,CAAC"}