@elizaos/agent 2.0.0-alpha.144 → 2.0.0-alpha.151

package/packages/agent/src/lifeops/google-oauth.js

@@ -1,494 +1 @@
-import crypto from "node:crypto";
-import fs from "node:fs";
-import path from "node:path";
-import { resolveOAuthDir } from "../config/paths.js";
-import { googleCapabilitiesToScopes, googleScopesToCapabilities, normalizeGoogleCapabilities, unionGoogleCapabilities, } from "./google-scopes.js";
-const GOOGLE_AUTHORIZATION_ENDPOINT = "https://accounts.google.com/o/oauth2/v2/auth";
-const GOOGLE_TOKEN_ENDPOINT = "https://oauth2.googleapis.com/token";
-const GOOGLE_USERINFO_ENDPOINT = "https://openidconnect.googleapis.com/v1/userinfo";
-const GOOGLE_OAUTH_SESSION_TTL_MS = 10 * 60 * 1000;
-const GOOGLE_ACCESS_TOKEN_REFRESH_BUFFER_MS = 5 * 60 * 1000;
-const pendingGoogleOAuthSessions = new Map();
-const DESKTOP_CLIENT_ID_KEYS = [
-    "ELIZA_GOOGLE_OAUTH_DESKTOP_CLIENT_ID",
-    "ELIZA_GOOGLE_OAUTH_DESKTOP_CLIENT_ID",
-];
-const DESKTOP_CLIENT_SECRET_KEYS = [
-    "ELIZA_GOOGLE_OAUTH_DESKTOP_CLIENT_SECRET",
-    "ELIZA_GOOGLE_OAUTH_DESKTOP_CLIENT_SECRET",
-];
-const WEB_CLIENT_ID_KEYS = [
-    "ELIZA_GOOGLE_OAUTH_WEB_CLIENT_ID",
-    "ELIZA_GOOGLE_OAUTH_WEB_CLIENT_ID",
-];
-const WEB_CLIENT_SECRET_KEYS = [
-    "ELIZA_GOOGLE_OAUTH_WEB_CLIENT_SECRET",
-    "ELIZA_GOOGLE_OAUTH_WEB_CLIENT_SECRET",
-];
-const PUBLIC_BASE_URL_KEYS = [
-    "ELIZA_GOOGLE_OAUTH_PUBLIC_BASE_URL",
-    "ELIZA_GOOGLE_OAUTH_PUBLIC_BASE_URL",
-];
-export class GoogleOAuthError extends Error {
-    status;
-    constructor(status, message) {
-        super(message);
-        this.status = status;
-        this.name = "GoogleOAuthError";
-    }
-}
-function readEnvOverride(env, keys) {
-    for (const key of keys) {
-        const value = env[key]?.trim();
-        if (value) {
-            return value;
-        }
-    }
-    return undefined;
-}
-function isLoopbackHostname(hostname) {
-    const normalized = hostname.trim().toLowerCase();
-    return (normalized === "localhost" ||
-        normalized === "127.0.0.1" ||
-        normalized === "::1" ||
-        normalized === "[::1]");
-}
-function normalizeBaseUrl(value) {
-    return value.endsWith("/") ? value.slice(0, -1) : value;
-}
-export function resolveConfiguredGoogleModes(env = process.env) {
-    const modes = [];
-    if (readEnvOverride(env, DESKTOP_CLIENT_ID_KEYS)) {
-        modes.push("local");
-    }
-    if (readEnvOverride(env, WEB_CLIENT_ID_KEYS) &&
-        readEnvOverride(env, WEB_CLIENT_SECRET_KEYS) &&
-        readEnvOverride(env, PUBLIC_BASE_URL_KEYS)) {
-        modes.push("remote");
-    }
-    return modes;
-}
-export function resolveGoogleDefaultMode(requestUrl, env = process.env) {
-    const configuredModes = resolveConfiguredGoogleModes(env);
-    const loopbackRequest = isLoopbackHostname(requestUrl.hostname);
-    if (loopbackRequest && configuredModes.includes("local")) {
-        return "local";
-    }
-    if (!loopbackRequest && configuredModes.includes("remote")) {
-        return "remote";
-    }
-    if (configuredModes.length > 0) {
-        return configuredModes[0] ?? "local";
-    }
-    return loopbackRequest ? "local" : "remote";
-}
-export function resolveGoogleOAuthConfig(requestUrl, requestedMode, env = process.env) {
-    const availableModes = resolveConfiguredGoogleModes(env);
-    const defaultMode = resolveGoogleDefaultMode(requestUrl, env);
-    const mode = requestedMode ?? defaultMode;
-    if (mode === "local") {
-        const clientId = readEnvOverride(env, DESKTOP_CLIENT_ID_KEYS) ?? null;
-        const clientSecret = readEnvOverride(env, DESKTOP_CLIENT_SECRET_KEYS) ?? null;
-        const port = requestUrl.port || (requestUrl.protocol === "https:" ? "443" : "80");
-        return {
-            mode,
-            defaultMode,
-            availableModes,
-            configured: clientId !== null,
-            clientId,
-            clientSecret,
-            redirectUri: `http://127.0.0.1:${port}/api/lifeops/connectors/google/callback`,
-        };
-    }
-    const clientId = readEnvOverride(env, WEB_CLIENT_ID_KEYS) ?? null;
-    const clientSecret = readEnvOverride(env, WEB_CLIENT_SECRET_KEYS) ?? null;
-    const publicBaseUrl = readEnvOverride(env, PUBLIC_BASE_URL_KEYS);
-    return {
-        mode,
-        defaultMode,
-        availableModes,
-        configured: Boolean(clientId && clientSecret && publicBaseUrl),
-        clientId,
-        clientSecret,
-        redirectUri: publicBaseUrl
-            ? `${normalizeBaseUrl(publicBaseUrl)}/api/lifeops/connectors/google/callback`
-            : `${requestUrl.origin}/api/lifeops/connectors/google/callback`,
-    };
-}
-function requireGoogleOAuthConfig(config, requestUrl) {
-    if (config.mode === "local" && !isLoopbackHostname(requestUrl.hostname)) {
-        throw new GoogleOAuthError(400, "Local Google OAuth requires the API to be addressed over a loopback host.");
-    }
-    if (!config.configured || !config.clientId) {
-        throw new GoogleOAuthError(503, `Google OAuth ${config.mode} mode is not configured.`);
-    }
-    if (config.mode === "remote" && !config.clientSecret) {
-        throw new GoogleOAuthError(503, "Google OAuth remote mode is missing the web client secret.");
-    }
-}
-function createCodeVerifier() {
-    return crypto.randomBytes(64).toString("base64url");
-}
-function createCodeChallenge(codeVerifier) {
-    return crypto.createHash("sha256").update(codeVerifier).digest("base64url");
-}
-function createState() {
-    return crypto.randomBytes(32).toString("hex");
-}
-function cleanupExpiredGoogleOAuthSessions(now = Date.now()) {
-    for (const [state, session] of pendingGoogleOAuthSessions.entries()) {
-        if (now - session.createdAt > GOOGLE_OAUTH_SESSION_TTL_MS) {
-            pendingGoogleOAuthSessions.delete(state);
-        }
-    }
-}
-function clearPendingSessionsForAgent(agentId, side, mode) {
-    for (const [state, session] of pendingGoogleOAuthSessions.entries()) {
-        if (session.agentId === agentId &&
-            session.side === side &&
-            session.mode === mode) {
-            pendingGoogleOAuthSessions.delete(state);
-        }
-    }
-}
-function splitScopes(value) {
-    if (typeof value !== "string") {
-        return [];
-    }
-    return value
-        .split(/\s+/)
-        .map((scope) => scope.trim())
-        .filter((scope) => scope.length > 0);
-}
-async function readGoogleErrorMessage(response) {
-    const text = await response.text();
-    if (!text) {
-        return `Google request failed with ${response.status}`;
-    }
-    try {
-        const parsed = JSON.parse(text);
-        return (parsed.error_description ||
-            parsed.error_description_internal ||
-            parsed.error ||
-            text);
-    }
-    catch {
-        return text;
-    }
-}
-function tokenStorageRoot(env = process.env) {
-    return path.join(resolveOAuthDir(env), "lifeops", "google");
-}
-function sanitizePathSegment(value) {
-    return value.replace(/[^a-zA-Z0-9._-]/g, "_");
-}
-function ensureTokenStorageDir(dir) {
-    fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
-}
-function buildGoogleTokenRef(agentId, side, mode) {
-    return path.join(sanitizePathSegment(agentId), sanitizePathSegment(side), `${mode}.json`);
-}
-function resolveTokenPath(tokenRef, env = process.env) {
-    return path.join(tokenStorageRoot(env), tokenRef);
-}
-function readStoredGoogleTokenFile(tokenRef, env = process.env) {
-    const filePath = resolveTokenPath(tokenRef, env);
-    try {
-        const raw = fs.readFileSync(filePath, "utf-8");
-        const parsed = JSON.parse(raw);
-        if (!parsed || typeof parsed !== "object") {
-            return null;
-        }
-        return {
-            ...parsed,
-            side: parsed.side === "agent" ? "agent" : "owner",
-        };
-    }
-    catch (error) {
-        if (error.code === "ENOENT") {
-            return null;
-        }
-        throw error;
-    }
-}
-function writeStoredGoogleTokenFile(tokenRef, token, env = process.env) {
-    const filePath = resolveTokenPath(tokenRef, env);
-    ensureTokenStorageDir(path.dirname(filePath));
-    fs.writeFileSync(filePath, JSON.stringify(token, null, 2), {
-        encoding: "utf-8",
-        mode: 0o600,
-    });
-    try {
-        fs.chmodSync(filePath, 0o600);
-    }
-    catch {
-        // Non-fatal on platforms without chmod semantics.
-    }
-}
-export function deleteStoredGoogleToken(tokenRef, env = process.env) {
-    const filePath = resolveTokenPath(tokenRef, env);
-    try {
-        fs.unlinkSync(filePath);
-    }
-    catch (error) {
-        if (error.code !== "ENOENT") {
-            throw error;
-        }
-    }
-}
-export function readStoredGoogleToken(tokenRef, env = process.env) {
-    return readStoredGoogleTokenFile(tokenRef, env);
-}
-function parseIdTokenClaims(idToken) {
-    if (!idToken) {
-        return {};
-    }
-    const segments = idToken.split(".");
-    if (segments.length < 2) {
-        return {};
-    }
-    try {
-        const json = Buffer.from(segments[1] ?? "", "base64url").toString("utf-8");
-        const parsed = JSON.parse(json);
-        return parsed && typeof parsed === "object" && !Array.isArray(parsed)
-            ? parsed
-            : {};
-    }
-    catch {
-        return {};
-    }
-}
-async function fetchGoogleUserInfo(accessToken) {
-    const response = await fetch(GOOGLE_USERINFO_ENDPOINT, {
-        headers: {
-            Authorization: `Bearer ${accessToken}`,
-        },
-    });
-    if (!response.ok) {
-        return {};
-    }
-    const parsed = (await response.json());
-    return parsed && typeof parsed === "object" && !Array.isArray(parsed)
-        ? parsed
-        : {};
-}
-async function exchangeGoogleToken(params) {
-    const response = await fetch(GOOGLE_TOKEN_ENDPOINT, {
-        method: "POST",
-        headers: {
-            "Content-Type": "application/x-www-form-urlencoded",
-        },
-        body: params.toString(),
-    });
-    if (!response.ok) {
-        throw new GoogleOAuthError(502, await readGoogleErrorMessage(response));
-    }
-    const parsed = (await response.json());
-    if (!parsed.access_token || !Number.isFinite(parsed.expires_in)) {
-        throw new GoogleOAuthError(502, "Google token exchange returned an invalid payload.");
-    }
-    return parsed;
-}
-function buildStoredGoogleToken(session, token, grantedScopes, existing) {
-    const now = new Date();
-    const refreshTokenExpiresAt = typeof token.refresh_token_expires_in === "number" &&
-        Number.isFinite(token.refresh_token_expires_in)
-        ? Date.now() + token.refresh_token_expires_in * 1000
-        : (existing?.refreshTokenExpiresAt ?? null);
-    return {
-        provider: "google",
-        agentId: session.agentId,
-        side: session.side,
-        mode: session.mode,
-        clientId: session.clientId,
-        redirectUri: session.redirectUri,
-        accessToken: token.access_token,
-        refreshToken: token.refresh_token ?? existing?.refreshToken ?? null,
-        tokenType: token.token_type || existing?.tokenType || "Bearer",
-        grantedScopes,
-        expiresAt: Date.now() + token.expires_in * 1000,
-        refreshTokenExpiresAt,
-        createdAt: existing?.createdAt ?? now.toISOString(),
-        updatedAt: now.toISOString(),
-    };
-}
-export function startGoogleConnectorOAuth(args) {
-    cleanupExpiredGoogleOAuthSessions();
-    const config = resolveGoogleOAuthConfig(args.requestUrl, args.mode, args.env);
-    requireGoogleOAuthConfig(config, args.requestUrl);
-    const side = args.side ?? "owner";
-    clearPendingSessionsForAgent(args.agentId, side, config.mode);
-    const requestedCapabilities = unionGoogleCapabilities(args.existingCapabilities, args.requestedCapabilities
-        ? normalizeGoogleCapabilities(args.requestedCapabilities)
-        : undefined);
-    const scopes = googleCapabilitiesToScopes(requestedCapabilities);
-    const state = createState();
-    const codeVerifier = createCodeVerifier();
-    const codeChallenge = createCodeChallenge(codeVerifier);
-    pendingGoogleOAuthSessions.set(state, {
-        state,
-        agentId: args.agentId,
-        side,
-        mode: config.mode,
-        clientId: config.clientId,
-        clientSecret: config.clientSecret,
-        redirectUri: config.redirectUri,
-        requestedCapabilities,
-        codeVerifier,
-        createdAt: Date.now(),
-    });
-    const params = new URLSearchParams({
-        client_id: config.clientId,
-        redirect_uri: config.redirectUri,
-        response_type: "code",
-        scope: scopes.join(" "),
-        state,
-        access_type: "offline",
-        prompt: "consent",
-        code_challenge: codeChallenge,
-        code_challenge_method: "S256",
-        include_granted_scopes: "true",
-    });
-    return {
-        provider: "google",
-        side,
-        mode: config.mode,
-        requestedCapabilities,
-        redirectUri: config.redirectUri,
-        authUrl: `${GOOGLE_AUTHORIZATION_ENDPOINT}?${params.toString()}`,
-    };
-}
-export async function completeGoogleConnectorOAuth(args) {
-    cleanupExpiredGoogleOAuthSessions();
-    const state = args.callbackUrl.searchParams.get("state")?.trim();
-    if (!state) {
-        throw new GoogleOAuthError(400, "Google callback is missing state.");
-    }
-    const session = pendingGoogleOAuthSessions.get(state);
-    if (!session) {
-        throw new GoogleOAuthError(400, "Google callback does not match an active login session.");
-    }
-    pendingGoogleOAuthSessions.delete(state);
-    if (Date.now() - session.createdAt > GOOGLE_OAUTH_SESSION_TTL_MS) {
-        throw new GoogleOAuthError(410, "Google login session expired. Start the connection flow again.");
-    }
-    const upstreamError = args.callbackUrl.searchParams.get("error")?.trim();
-    if (upstreamError) {
-        const description = args.callbackUrl.searchParams.get("error_description")?.trim() ||
-            upstreamError;
-        throw new GoogleOAuthError(400, description);
-    }
-    const code = args.callbackUrl.searchParams.get("code")?.trim();
-    if (!code) {
-        throw new GoogleOAuthError(400, "Google callback is missing an authorization code.");
-    }
-    const params = new URLSearchParams({
-        client_id: session.clientId,
-        code,
-        code_verifier: session.codeVerifier,
-        grant_type: "authorization_code",
-        redirect_uri: session.redirectUri,
-    });
-    if (session.clientSecret) {
-        params.set("client_secret", session.clientSecret);
-    }
-    const token = await exchangeGoogleToken(params);
-    const grantedScopes = splitScopes(token.scope);
-    const normalizedScopes = grantedScopes.length > 0
-        ? grantedScopes
-        : googleCapabilitiesToScopes(session.requestedCapabilities);
-    const grantedCapabilities = googleScopesToCapabilities(normalizedScopes).length > 0
-        ? googleScopesToCapabilities(normalizedScopes)
-        : normalizeGoogleCapabilities(session.requestedCapabilities);
-    let identity = parseIdTokenClaims(token.id_token);
-    if (Object.keys(identity).length === 0) {
-        identity = await fetchGoogleUserInfo(token.access_token);
-    }
-    const tokenRef = buildGoogleTokenRef(session.agentId, session.side, session.mode);
-    const existing = readStoredGoogleTokenFile(tokenRef, args.env);
-    const storedToken = buildStoredGoogleToken(session, token, normalizedScopes, existing);
-    writeStoredGoogleTokenFile(tokenRef, storedToken, args.env);
-    return {
-        agentId: session.agentId,
-        side: session.side,
-        mode: session.mode,
-        tokenRef,
-        identity,
-        grantedCapabilities,
-        grantedScopes: normalizedScopes,
-        expiresAt: new Date(storedToken.expiresAt).toISOString(),
-        hasRefreshToken: Boolean(storedToken.refreshToken),
-    };
-}
-/**
- * In-flight refresh promises keyed by tokenRef. Deduplicates concurrent
- * callers so only one token exchange runs per tokenRef at a time — prevents
- * the race where parallel refreshes overwrite each other's tokens on disk.
- */
-const inflightRefreshes = new Map();
-export async function ensureFreshGoogleAccessToken(tokenRef, env = process.env) {
-    const stored = readStoredGoogleTokenFile(tokenRef, env);
-    if (!stored) {
-        throw new GoogleOAuthError(404, "Google connector token is missing.");
-    }
-    if (stored.expiresAt > Date.now() + GOOGLE_ACCESS_TOKEN_REFRESH_BUFFER_MS) {
-        return stored;
-    }
-    if (!stored.refreshToken) {
-        throw new GoogleOAuthError(401, "Google connector needs re-authentication.");
-    }
-    // Deduplicate concurrent refreshes for the same tokenRef
-    const existing = inflightRefreshes.get(tokenRef);
-    if (existing) {
-        return existing;
-    }
-    const refreshPromise = refreshGoogleAccessTokenImpl(tokenRef, stored, env);
-    inflightRefreshes.set(tokenRef, refreshPromise);
-    try {
-        return await refreshPromise;
-    }
-    finally {
-        inflightRefreshes.delete(tokenRef);
-    }
-}
-async function refreshGoogleAccessTokenImpl(tokenRef, stored, env) {
-    if (!stored.refreshToken) {
-        throw new GoogleOAuthError(400, "Google OAuth token is missing a refresh token.");
-    }
-    const params = new URLSearchParams({
-        client_id: stored.clientId,
-        grant_type: "refresh_token",
-        refresh_token: stored.refreshToken,
-    });
-    if (stored.mode === "remote") {
-        const clientSecret = readEnvOverride(env, WEB_CLIENT_SECRET_KEYS);
-        if (!clientSecret) {
-            throw new GoogleOAuthError(503, "Google OAuth remote mode is missing the web client secret.");
-        }
-        params.set("client_secret", clientSecret);
-    }
-    else if (stored.mode === "local") {
-        const clientSecret = readEnvOverride(env, DESKTOP_CLIENT_SECRET_KEYS);
-        if (clientSecret) {
-            params.set("client_secret", clientSecret);
-        }
-    }
-    const token = await exchangeGoogleToken(params);
-    const grantedScopes = splitScopes(token.scope);
-    const storedToken = buildStoredGoogleToken({
-        state: "refresh",
-        agentId: stored.agentId,
-        side: stored.side,
-        mode: stored.mode,
-        clientId: stored.clientId,
-        clientSecret: stored.mode === "remote"
-            ? (readEnvOverride(env, WEB_CLIENT_SECRET_KEYS) ?? null)
-            : null,
-        redirectUri: stored.redirectUri,
-        requestedCapabilities: googleScopesToCapabilities(stored.grantedScopes),
-        codeVerifier: "",
-        createdAt: Date.now(),
-    }, token, grantedScopes.length > 0 ? grantedScopes : stored.grantedScopes, stored);
-    writeStoredGoogleTokenFile(tokenRef, storedToken, env);
-    return storedToken;
-}
+export * from "@elizaos/app-lifeops/lifeops/google-oauth";

package/packages/agent/src/lifeops/google-scopes.d.ts

@@ -1,13 +1,2 @@
-import { type LifeOpsGoogleCapability } from "@elizaos/shared/contracts/lifeops";
-export declare const GOOGLE_OPENID_SCOPES: readonly ["openid", "email", "profile"];
-export declare const GOOGLE_CALENDAR_READ_SCOPE = "https://www.googleapis.com/auth/calendar.readonly";
-export declare const GOOGLE_CALENDAR_WRITE_SCOPE = "https://www.googleapis.com/auth/calendar.events";
-export declare const GOOGLE_GMAIL_METADATA_SCOPE = "https://www.googleapis.com/auth/gmail.metadata";
-export declare const GOOGLE_GMAIL_READ_SCOPE = "https://www.googleapis.com/auth/gmail.readonly";
-export declare const GOOGLE_GMAIL_SEND_SCOPE = "https://www.googleapis.com/auth/gmail.send";
-export declare const DEFAULT_GOOGLE_CONNECTOR_CAPABILITIES: LifeOpsGoogleCapability[];
-export declare function normalizeGoogleCapabilities(value: Iterable<unknown> | undefined, defaultCapabilities?: readonly LifeOpsGoogleCapability[]): LifeOpsGoogleCapability[];
-export declare function unionGoogleCapabilities(...capabilityLists: Array<readonly LifeOpsGoogleCapability[] | undefined>): LifeOpsGoogleCapability[];
-export declare function googleCapabilitiesToScopes(capabilities: readonly LifeOpsGoogleCapability[]): string[];
-export declare function googleScopesToCapabilities(scopes: readonly string[]): LifeOpsGoogleCapability[];
+export * from "@elizaos/app-lifeops/lifeops/google-scopes";
 //# sourceMappingURL=google-scopes.d.ts.map

package/packages/agent/src/lifeops/google-scopes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"google-scopes.d.ts","sourceRoot":"","sources":["../../../../../src/lifeops/google-scopes.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,mCAAmC,CAAC;AAE3C,eAAO,MAAM,oBAAoB,yCAA0C,CAAC;AAC5E,eAAO,MAAM,0BAA0B,sDACc,CAAC;AACtD,eAAO,MAAM,2BAA2B,oDACW,CAAC;AACpD,eAAO,MAAM,2BAA2B,mDACU,CAAC;AACnD,eAAO,MAAM,uBAAuB,mDACc,CAAC;AACnD,eAAO,MAAM,uBAAuB,+CACU,CAAC;AAW/C,eAAO,MAAM,qCAAqC,EAAE,uBAAuB,EACzC,CAAC;AAEnC,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,SAAS,EACpC,mBAAmB,GAAE,SAAS,uBAAuB,EAA0C,GAC9F,uBAAuB,EAAE,CA0B3B;AAED,wBAAgB,uBAAuB,CACrC,GAAG,eAAe,EAAE,KAAK,CAAC,SAAS,uBAAuB,EAAE,GAAG,SAAS,CAAC,GACxE,uBAAuB,EAAE,CAgB3B;AAED,wBAAgB,0BAA0B,CACxC,YAAY,EAAE,SAAS,uBAAuB,EAAE,GAC/C,MAAM,EAAE,CAWV;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,SAAS,MAAM,EAAE,GACxB,uBAAuB,EAAE,CA+B3B"}
+{"version":3,"file":"google-scopes.d.ts","sourceRoot":"","sources":["../../../../../src/lifeops/google-scopes.ts"],"names":[],"mappings":"AAAA,cAAc,4CAA4C,CAAC"}

package/packages/agent/src/lifeops/google-scopes.js

@@ -1,96 +1 @@
-import { LIFEOPS_GOOGLE_CAPABILITIES, } from "@elizaos/shared/contracts/lifeops";
-export const GOOGLE_OPENID_SCOPES = ["openid", "email", "profile"];
-export const GOOGLE_CALENDAR_READ_SCOPE = "https://www.googleapis.com/auth/calendar.readonly";
-export const GOOGLE_CALENDAR_WRITE_SCOPE = "https://www.googleapis.com/auth/calendar.events";
-export const GOOGLE_GMAIL_METADATA_SCOPE = "https://www.googleapis.com/auth/gmail.metadata";
-export const GOOGLE_GMAIL_READ_SCOPE = "https://www.googleapis.com/auth/gmail.readonly";
-export const GOOGLE_GMAIL_SEND_SCOPE = "https://www.googleapis.com/auth/gmail.send";
-const GOOGLE_CAPABILITY_SCOPE_MAP = {
-    "google.basic_identity": [...GOOGLE_OPENID_SCOPES],
-    "google.calendar.read": [GOOGLE_CALENDAR_READ_SCOPE],
-    "google.calendar.write": [GOOGLE_CALENDAR_WRITE_SCOPE],
-    // Reading message bodies requires gmail.readonly rather than gmail.metadata.
-    "google.gmail.triage": [GOOGLE_GMAIL_READ_SCOPE],
-    "google.gmail.send": [GOOGLE_GMAIL_SEND_SCOPE],
-};
-export const DEFAULT_GOOGLE_CONNECTOR_CAPABILITIES = [...LIFEOPS_GOOGLE_CAPABILITIES];
-export function normalizeGoogleCapabilities(value, defaultCapabilities = DEFAULT_GOOGLE_CONNECTOR_CAPABILITIES) {
-    const allowed = new Set(LIFEOPS_GOOGLE_CAPABILITIES);
-    const normalized = [];
-    const seen = new Set();
-    const source = value ? Array.from(value) : [...defaultCapabilities];
-    for (const candidate of source) {
-        if (typeof candidate !== "string") {
-            continue;
-        }
-        if (!allowed.has(candidate)) {
-            continue;
-        }
-        const capability = candidate;
-        if (seen.has(capability)) {
-            continue;
-        }
-        seen.add(capability);
-        normalized.push(capability);
-    }
-    if (!seen.has("google.basic_identity")) {
-        normalized.unshift("google.basic_identity");
-    }
-    return normalized;
-}
-export function unionGoogleCapabilities(...capabilityLists) {
-    const merged = [];
-    const seen = new Set();
-    for (const list of capabilityLists) {
-        if (!list) {
-            continue;
-        }
-        for (const capability of normalizeGoogleCapabilities(list)) {
-            if (seen.has(capability))
-                continue;
-            seen.add(capability);
-            merged.push(capability);
-        }
-    }
-    return merged.length > 0
-        ? merged
-        : [...DEFAULT_GOOGLE_CONNECTOR_CAPABILITIES];
-}
-export function googleCapabilitiesToScopes(capabilities) {
-    const scopes = [];
-    const seen = new Set();
-    for (const capability of normalizeGoogleCapabilities(capabilities)) {
-        for (const scope of GOOGLE_CAPABILITY_SCOPE_MAP[capability]) {
-            if (seen.has(scope))
-                continue;
-            seen.add(scope);
-            scopes.push(scope);
-        }
-    }
-    return scopes;
-}
-export function googleScopesToCapabilities(scopes) {
-    const granted = new Set(scopes.map((scope) => scope.trim()).filter(Boolean));
-    const capabilities = [];
-    const hasIdentity = GOOGLE_OPENID_SCOPES.some((scope) => granted.has(scope));
-    if (hasIdentity) {
-        capabilities.push("google.basic_identity");
-    }
-    const hasCalendarRead = granted.has(GOOGLE_CALENDAR_READ_SCOPE) ||
-        granted.has(GOOGLE_CALENDAR_WRITE_SCOPE);
-    if (hasCalendarRead) {
-        capabilities.push("google.calendar.read");
-    }
-    if (granted.has(GOOGLE_CALENDAR_WRITE_SCOPE)) {
-        capabilities.push("google.calendar.write");
-    }
-    const hasGmailTriage = granted.has(GOOGLE_GMAIL_METADATA_SCOPE) ||
-        granted.has(GOOGLE_GMAIL_READ_SCOPE);
-    if (hasGmailTriage) {
-        capabilities.push("google.gmail.triage");
-    }
-    if (granted.has(GOOGLE_GMAIL_SEND_SCOPE)) {
-        capabilities.push("google.gmail.send");
-    }
-    return capabilities;
-}
+export * from "@elizaos/app-lifeops/lifeops/google-scopes";

package/packages/agent/src/lifeops/index.d.ts

@@ -1,3 +1,2 @@
-export * from "./repository.js";
-export * from "./service.js";
+export * from "@elizaos/app-lifeops/lifeops";
 //# sourceMappingURL=index.d.ts.map

package/packages/agent/src/lifeops/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lifeops/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lifeops/index.ts"],"names":[],"mappings":"AAAA,cAAc,8BAA8B,CAAC"}

package/packages/agent/src/lifeops/index.js

@@ -1,2 +1 @@
-export * from "./repository.js";
-export * from "./service.js";
+export * from "@elizaos/app-lifeops/lifeops";

package/packages/agent/src/lifeops/owner-profile.d.ts

@@ -1,15 +1,2 @@
-import type { IAgentRuntime } from "@elizaos/core";
-export declare const OWNER_NAME_MAX_LENGTH = 60;
-export declare const LIFEOPS_OWNER_PROFILE_FIELDS: readonly ["name", "relationshipStatus", "partnerName", "orientation", "gender", "age", "location"];
-export type LifeOpsOwnerProfileField = (typeof LIFEOPS_OWNER_PROFILE_FIELDS)[number];
-export type LifeOpsOwnerProfilePatch = Partial<Record<LifeOpsOwnerProfileField, string>>;
-export type LifeOpsOwnerProfile = Record<LifeOpsOwnerProfileField, string> & {
-    updatedAt: string | null;
-};
-export declare function normalizeLifeOpsOwnerProfilePatch(patch: Record<string, unknown> | LifeOpsOwnerProfilePatch | null | undefined): LifeOpsOwnerProfilePatch;
-export declare function fetchConfiguredOwnerName(): Promise<string | null>;
-export declare function persistConfiguredOwnerName(name: string): Promise<boolean>;
-export declare function resolveLifeOpsOwnerProfile(metadata: Record<string, unknown> | null | undefined, configuredName?: string | null): LifeOpsOwnerProfile;
-export declare function readLifeOpsOwnerProfile(runtime: IAgentRuntime): Promise<LifeOpsOwnerProfile>;
-export declare function updateLifeOpsOwnerProfile(runtime: IAgentRuntime, patch: LifeOpsOwnerProfilePatch | Record<string, unknown>): Promise<LifeOpsOwnerProfile | null>;
+export * from "@elizaos/app-lifeops/lifeops/owner-profile";
 //# sourceMappingURL=owner-profile.d.ts.map

package/packages/agent/src/lifeops/owner-profile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"owner-profile.d.ts","sourceRoot":"","sources":["../../../../../src/lifeops/owner-profile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAQ,MAAM,eAAe,CAAC;AAUzD,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAGxC,eAAO,MAAM,4BAA4B,oGAQ/B,CAAC;AAEX,MAAM,MAAM,wBAAwB,GAClC,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhD,MAAM,MAAM,wBAAwB,GAAG,OAAO,CAC5C,MAAM,CAAC,wBAAwB,EAAE,MAAM,CAAC,CACzC,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,wBAAwB,EAAE,MAAM,CAAC,GAAG;IAC3E,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AAiGF,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,wBAAwB,GAAG,IAAI,GAAG,SAAS,GAC3E,wBAAwB,CAgB1B;AAED,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmBvE;AAED,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,OAAO,CAAC,CAkBlB;AAED,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,EACpD,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,GAC7B,mBAAmB,CAgBrB;AAED,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,mBAAmB,CAAC,CAO9B;AAED,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,wBAAwB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACxD,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CA8BrC"}
+{"version":3,"file":"owner-profile.d.ts","sourceRoot":"","sources":["../../../../../src/lifeops/owner-profile.ts"],"names":[],"mappings":"AAAA,cAAc,4CAA4C,CAAC"}