@elizaos/agent 2.0.0-alpha.173 → 2.0.0-alpha.192

package/apps/app-lifeops/src/lifeops/approval-queue.types.d.ts

@@ -0,0 +1,162 @@
+/**
+ * WS6 — Approval queue as first-class state. Type-only stub published by WS5
+ * so background-job code can compile against the interface WS6 will
+ * implement. NO runtime behavior lives in this file: WS6 owns the
+ * implementation, persistence, state machine, and UI.
+ *
+ * State machine (strict — no fallback transitions, no implicit re-entry):
+ *
+ *   pending  ──approve──▶ approved ──markExecuting──▶ executing ──markDone──▶ done
+ *      │                       │                            │
+ *      │                       └────────reject──────────────┤
+ *      │                                                    │
+ *      └──reject──▶ rejected                                │
+ *      │                                                    │
+ *      └──markExpired/purgeExpired──▶ expired               │
+ *
+ * Invalid transitions throw `ApprovalStateTransitionError`. Callers MUST
+ * handle it — there is no defensive fallback.
+ */
+/** Lifecycle states an approval request can occupy. */
+export type ApprovalRequestState = "pending" | "approved" | "executing" | "done" | "rejected" | "expired";
+/** Closed enum of action kinds that can be queued for approval. */
+export type ApprovalAction = "send_message" | "send_email" | "schedule_event" | "modify_event" | "cancel_event" | "book_travel" | "make_call" | "execute_workflow" | "spend_money";
+/** Channel through which the underlying action will be carried out. */
+export type ApprovalChannel = "telegram" | "discord" | "slack" | "imessage" | "sms" | "email" | "google_calendar" | "browser" | "phone" | "internal";
+/** Action-specific payload. Discriminated by `ApprovalAction`. */
+export type ApprovalPayload = {
+    action: "send_message";
+    recipient: string;
+    body: string;
+    replyToMessageId: string | null;
+} | {
+    action: "send_email";
+    to: ReadonlyArray<string>;
+    cc: ReadonlyArray<string>;
+    bcc: ReadonlyArray<string>;
+    subject: string;
+    body: string;
+    threadId: string | null;
+} | {
+    action: "schedule_event";
+    calendarId: string;
+    title: string;
+    startsAtMs: number;
+    endsAtMs: number;
+    attendees: ReadonlyArray<string>;
+    location: string | null;
+    description: string | null;
+} | {
+    action: "modify_event";
+    calendarId: string;
+    eventId: string;
+    patch: {
+        title: string | null;
+        startsAtMs: number | null;
+        endsAtMs: number | null;
+        attendees: ReadonlyArray<string> | null;
+        location: string | null;
+        description: string | null;
+    };
+} | {
+    action: "cancel_event";
+    calendarId: string;
+    eventId: string;
+    notifyAttendees: boolean;
+} | {
+    action: "book_travel";
+    kind: "flight" | "hotel" | "ground";
+    provider: string;
+    itineraryRef: string;
+    totalCents: number;
+    currency: string;
+} | {
+    action: "make_call";
+    to: string;
+    script: string;
+    maxDurationSeconds: number;
+} | {
+    action: "execute_workflow";
+    workflowId: string;
+    input: Readonly<Record<string, string | number | boolean>>;
+} | {
+    action: "spend_money";
+    vendor: string;
+    amountCents: number;
+    currency: string;
+    memo: string;
+};
+/** Persisted approval request. */
+export interface ApprovalRequest {
+    readonly id: string;
+    readonly createdAt: Date;
+    readonly updatedAt: Date;
+    readonly state: ApprovalRequestState;
+    readonly requestedBy: string;
+    readonly subjectUserId: string;
+    readonly action: ApprovalAction;
+    readonly payload: ApprovalPayload;
+    readonly channel: ApprovalChannel;
+    readonly reason: string;
+    readonly expiresAt: Date;
+    readonly resolvedAt: Date | null;
+    readonly resolvedBy: string | null;
+    readonly resolutionReason: string | null;
+}
+/** Input to `enqueue` — server fills in id, timestamps, and initial state. */
+export interface ApprovalEnqueueInput {
+    readonly requestedBy: string;
+    readonly subjectUserId: string;
+    readonly action: ApprovalAction;
+    readonly payload: ApprovalPayload;
+    readonly channel: ApprovalChannel;
+    readonly reason: string;
+    readonly expiresAt: Date;
+}
+/** Filter for `list`. All fields combine with AND. */
+export interface ApprovalListFilter {
+    readonly subjectUserId: string | null;
+    readonly state: ApprovalRequestState | null;
+    readonly action: ApprovalAction | null;
+    readonly limit: number;
+}
+/** Resolution input for `approve` / `reject`. */
+export interface ApprovalResolution {
+    readonly resolvedBy: string;
+    readonly resolutionReason: string;
+}
+/** Thrown when a state transition is invalid. */
+export declare class ApprovalStateTransitionError extends Error {
+    readonly requestId: string;
+    readonly from: ApprovalRequestState;
+    readonly to: ApprovalRequestState;
+    constructor(requestId: string, from: ApprovalRequestState, to: ApprovalRequestState);
+}
+/** Thrown when an operation references an unknown request id. */
+export declare class ApprovalNotFoundError extends Error {
+    readonly requestId: string;
+    constructor(requestId: string);
+}
+/**
+ * Queue interface. WS6 implementations MUST:
+ *  - Reject invalid state transitions by throwing `ApprovalStateTransitionError`.
+ *  - Reject unknown ids by throwing `ApprovalNotFoundError`.
+ *  - Use the structured logger only (no `console.*`).
+ *  - Treat `purgeExpired` as idempotent.
+ *
+ * WS5 callers use `enqueue` only. Convenience overload: `enqueue(req)` may
+ * also be invoked as the minimal `Promise<id>` form called out in the task
+ * spec — the `id` is read from the returned `ApprovalRequest`.
+ */
+export interface ApprovalQueue {
+    enqueue(input: ApprovalEnqueueInput): Promise<ApprovalRequest>;
+    list(filter: ApprovalListFilter): Promise<ReadonlyArray<ApprovalRequest>>;
+    byId(id: string): Promise<ApprovalRequest | null>;
+    approve(id: string, resolution: ApprovalResolution): Promise<ApprovalRequest>;
+    reject(id: string, resolution: ApprovalResolution): Promise<ApprovalRequest>;
+    markExecuting(id: string): Promise<ApprovalRequest>;
+    markDone(id: string): Promise<ApprovalRequest>;
+    markExpired(id: string): Promise<ApprovalRequest>;
+    purgeExpired(now: Date): Promise<ReadonlyArray<string>>;
+}
+//# sourceMappingURL=approval-queue.types.d.ts.map

package/apps/app-lifeops/src/lifeops/approval-queue.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-queue.types.d.ts","sourceRoot":"","sources":["../../../../../../../apps/app-lifeops/src/lifeops/approval-queue.types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,uDAAuD;AACvD,MAAM,MAAM,oBAAoB,GAC5B,SAAS,GACT,UAAU,GACV,WAAW,GACX,MAAM,GACN,UAAU,GACV,SAAS,CAAC;AAEd,mEAAmE;AACnE,MAAM,MAAM,cAAc,GACtB,cAAc,GACd,YAAY,GACZ,gBAAgB,GAChB,cAAc,GACd,cAAc,GACd,aAAa,GACb,WAAW,GACX,kBAAkB,GAClB,aAAa,CAAC;AAElB,uEAAuE;AACvE,MAAM,MAAM,eAAe,GACvB,UAAU,GACV,SAAS,GACT,OAAO,GACP,UAAU,GACV,KAAK,GACL,OAAO,GACP,iBAAiB,GACjB,SAAS,GACT,OAAO,GACP,UAAU,CAAC;AAEf,kEAAkE;AAClE,MAAM,MAAM,eAAe,GACvB;IACE,MAAM,EAAE,cAAc,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC,GACD;IACE,MAAM,EAAE,YAAY,CAAC;IACrB,EAAE,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC1B,EAAE,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC1B,GAAG,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB,GACD;IACE,MAAM,EAAE,gBAAgB,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACjC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,GACD;IACE,MAAM,EAAE,cAAc,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE;QACL,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;QACxC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,CAAC;CACH,GACD;IACE,MAAM,EAAE,cAAc,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,OAAO,CAAC;CAC1B,GACD;IACE,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB,GACD;IACE,MAAM,EAAE,WAAW,CAAC;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,EAAE,MAAM,CAAC;CAC5B,GACD;IACE,MAAM,EAAE,kBAAkB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;CAC5D,GACD;IACE,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEN,kCAAkC;AAClC,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1C;AAED,8EAA8E;AAC9E,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B;AAED,sDAAsD;AACtD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,iDAAiD;AACjD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED,iDAAiD;AACjD,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,IAAI,EAAE,oBAAoB,CAAC;IAC3C,SAAgB,EAAE,EAAE,oBAAoB,CAAC;gBAGvC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,oBAAoB,EAC1B,EAAE,EAAE,oBAAoB;CAU3B;AAED,iEAAiE;AACjE,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,SAAgB,SAAS,EAAE,MAAM,CAAC;gBAEtB,SAAS,EAAE,MAAM;CAK9B;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC/D,IAAI,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC,CAAC;IAC1E,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAClD,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC9E,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC7E,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACpD,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC/C,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAClD,YAAY,CAAC,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;CACzD"}

package/apps/app-lifeops/src/lifeops/approval-queue.types.js

@@ -0,0 +1,41 @@
+/**
+ * WS6 — Approval queue as first-class state. Type-only stub published by WS5
+ * so background-job code can compile against the interface WS6 will
+ * implement. NO runtime behavior lives in this file: WS6 owns the
+ * implementation, persistence, state machine, and UI.
+ *
+ * State machine (strict — no fallback transitions, no implicit re-entry):
+ *
+ *   pending  ──approve──▶ approved ──markExecuting──▶ executing ──markDone──▶ done
+ *      │                       │                            │
+ *      │                       └────────reject──────────────┤
+ *      │                                                    │
+ *      └──reject──▶ rejected                                │
+ *      │                                                    │
+ *      └──markExpired/purgeExpired──▶ expired               │
+ *
+ * Invalid transitions throw `ApprovalStateTransitionError`. Callers MUST
+ * handle it — there is no defensive fallback.
+ */
+/** Thrown when a state transition is invalid. */
+export class ApprovalStateTransitionError extends Error {
+    requestId;
+    from;
+    to;
+    constructor(requestId, from, to) {
+        super(`[ApprovalQueue] invalid transition for request ${requestId}: ${from} -> ${to}`);
+        this.name = "ApprovalStateTransitionError";
+        this.requestId = requestId;
+        this.from = from;
+        this.to = to;
+    }
+}
+/** Thrown when an operation references an unknown request id. */
+export class ApprovalNotFoundError extends Error {
+    requestId;
+    constructor(requestId) {
+        super(`[ApprovalQueue] request not found: ${requestId}`);
+        this.name = "ApprovalNotFoundError";
+        this.requestId = requestId;
+    }
+}

package/apps/app-lifeops/src/lifeops/autofill-whitelist.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Agent-side copy of the autofill whitelist logic.
+ *
+ * Kept in sync with the browser extension's `autofill/whitelist.ts`. The
+ * default list is duplicated intentionally — the extension reads its JSON
+ * via an `import ... with { type: "json" }`, and we do not want the agent
+ * process to reach into `apps/browser-extension-lifeops/` at runtime (that
+ * would couple build boundaries in a way the project explicitly avoids).
+ *
+ * If the two lists drift, the source of truth for the extension's own
+ * behavior remains the JSON file; the agent-side list is used for the
+ * initial refusal decision that keeps credentials safe even if the
+ * extension is unreachable.
+ */
+export declare const DEFAULT_AUTOFILL_WHITELIST: readonly string[];
+export declare function extractRegistrableDomain(input: string): string | null;
+export declare function normalizeAutofillDomain(input: string): string | null;
+export interface WhitelistCheckResult {
+    readonly allowed: boolean;
+    readonly registrableDomain: string | null;
+    readonly matched: string | null;
+}
+export declare function isUrlWhitelisted(url: string, domains: readonly string[]): WhitelistCheckResult;
+//# sourceMappingURL=autofill-whitelist.d.ts.map

package/apps/app-lifeops/src/lifeops/autofill-whitelist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"autofill-whitelist.d.ts","sourceRoot":"","sources":["../../../../../../../apps/app-lifeops/src/lifeops/autofill-whitelist.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,eAAO,MAAM,0BAA0B,EAAE,SAAS,MAAM,EAgDvD,CAAC;AAEF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAsBrE;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAEpE;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,SAAS,MAAM,EAAE,GACzB,oBAAoB,CAuBtB"}

package/apps/app-lifeops/src/lifeops/autofill-whitelist.js

@@ -0,0 +1,125 @@
+/**
+ * Agent-side copy of the autofill whitelist logic.
+ *
+ * Kept in sync with the browser extension's `autofill/whitelist.ts`. The
+ * default list is duplicated intentionally — the extension reads its JSON
+ * via an `import ... with { type: "json" }`, and we do not want the agent
+ * process to reach into `apps/browser-extension-lifeops/` at runtime (that
+ * would couple build boundaries in a way the project explicitly avoids).
+ *
+ * If the two lists drift, the source of truth for the extension's own
+ * behavior remains the JSON file; the agent-side list is used for the
+ * initial refusal decision that keeps credentials safe even if the
+ * extension is unreachable.
+ */
+export const DEFAULT_AUTOFILL_WHITELIST = [
+    "github.com",
+    "gitlab.com",
+    "bitbucket.org",
+    "google.com",
+    "googlemail.com",
+    "gmail.com",
+    "microsoft.com",
+    "live.com",
+    "outlook.com",
+    "office.com",
+    "apple.com",
+    "icloud.com",
+    "stripe.com",
+    "figma.com",
+    "notion.so",
+    "linear.app",
+    "slack.com",
+    "discord.com",
+    "zoom.us",
+    "dropbox.com",
+    "box.com",
+    "twitter.com",
+    "x.com",
+    "facebook.com",
+    "instagram.com",
+    "linkedin.com",
+    "reddit.com",
+    "youtube.com",
+    "bing.com",
+    "duckduckgo.com",
+    "amazon.com",
+    "ebay.com",
+    "shopify.com",
+    "paypal.com",
+    "wellsfargo.com",
+    "chase.com",
+    "bankofamerica.com",
+    "citi.com",
+    "1password.com",
+    "proton.me",
+    "protonmail.com",
+    "anthropic.com",
+    "openai.com",
+    "cloudflare.com",
+    "vercel.com",
+    "netlify.com",
+    "npmjs.com",
+];
+export function extractRegistrableDomain(input) {
+    if (typeof input !== "string")
+        return null;
+    const trimmed = input.trim();
+    if (trimmed.length === 0)
+        return null;
+    let host;
+    if (/^[a-z]+:\/\//i.test(trimmed)) {
+        try {
+            host = new URL(trimmed).hostname;
+        }
+        catch {
+            return null;
+        }
+    }
+    else {
+        host = trimmed.replace(/^\/+/, "").split("/")[0] ?? "";
+    }
+    host = host.toLowerCase().replace(/\.$/, "");
+    if (host.length === 0)
+        return null;
+    if (host === "localhost")
+        return null;
+    if (/^\d+\.\d+\.\d+\.\d+$/.test(host))
+        return null;
+    if (host.startsWith("[") && host.endsWith("]"))
+        return null;
+    const labels = host.split(".").filter((l) => l.length > 0);
+    if (labels.length < 2)
+        return null;
+    return labels.slice(-2).join(".");
+}
+export function normalizeAutofillDomain(input) {
+    return extractRegistrableDomain(input);
+}
+export function isUrlWhitelisted(url, domains) {
+    const registrable = extractRegistrableDomain(url);
+    if (registrable === null) {
+        return { allowed: false, registrableDomain: null, matched: null };
+    }
+    let host = registrable;
+    if (/^[a-z]+:\/\//i.test(url)) {
+        try {
+            host = new URL(url).hostname.toLowerCase().replace(/\.$/, "");
+        }
+        catch {
+            return { allowed: false, registrableDomain: null, matched: null };
+        }
+    }
+    else {
+        host = url.trim().toLowerCase().split("/")[0] ?? registrable;
+    }
+    for (const raw of domains) {
+        const entry = normalizeAutofillDomain(raw);
+        if (!entry)
+            continue;
+        if (host === entry || host.endsWith(`.${entry}`)) {
+            return { allowed: true, registrableDomain: registrable, matched: entry };
+        }
+    }
+    return { allowed: false, registrableDomain: registrable, matched: null };
+}

package/apps/app-lifeops/src/lifeops/background-planner-dispatch.d.ts

@@ -0,0 +1,59 @@
+/**
+ * WS5 — glue between {@link planJob} and the WS6 approval queue.
+ *
+ * Every background job calls {@link planJob} and passes the result here.
+ * Sensitive actions (`requiresApproval === true` with a usable payload)
+ * are enqueued via the queue exposed by the runtime as service
+ * "APPROVAL_QUEUE". Non-sensitive actions and noops are recorded for
+ * observability and returned.
+ *
+ * No side-effects other than enqueue + logger. No try/catch swallow: a
+ * missing queue is a typed error that surfaces to the caller.
+ */
+import type { IAgentRuntime } from "@elizaos/core";
+import type { ApprovalRequest } from "./approval-queue.types.js";
+import type { BackgroundJobContext, TypedJobPlan } from "./background-planner.js";
+export declare const APPROVAL_QUEUE_SERVICE_NAME: "APPROVAL_QUEUE";
+/** Default expiry window for queued background-job approvals: 24 hours. */
+export declare const DEFAULT_BACKGROUND_APPROVAL_EXPIRY_MS: number;
+/**
+ * Raised when a sensitive plan cannot be enqueued because the WS6 queue is
+ * not registered on the runtime. We surface this loudly so the bug cannot
+ * hide as a silent skip.
+ */
+export declare class ApprovalQueueUnavailableError extends Error {
+    readonly jobKind: string;
+    constructor(jobKind: string);
+}
+/**
+ * Result returned from {@link enqueueIfSensitive} so callers and tests can
+ * introspect what the planner decided for this tick.
+ */
+export interface PlannerDispatchResult {
+    readonly jobKind: string;
+    readonly plan: TypedJobPlan;
+    /** Non-null when a request was enqueued. */
+    readonly approvalRequest: ApprovalRequest | null;
+    /** True when the plan was a noop or purely internal (no enqueue). */
+    readonly skipped: boolean;
+    /** When skipped=true, the reason. */
+    readonly skipReason: string | null;
+}
+/**
+ * If the plan is sensitive AND has a usable payload, enqueue it in the WS6
+ * approval queue. Otherwise, return a skipped result. Always records the
+ * decision to the runtime-scoped observability log via
+ * {@link recordPlannerDispatch} so the contract test can introspect.
+ */
+export declare function enqueueIfSensitive(runtime: IAgentRuntime, jobContext: BackgroundJobContext, plan: TypedJobPlan, now?: Date): Promise<PlannerDispatchResult>;
+/**
+ * Record a planner dispatch decision on the runtime object so the contract
+ * test can inspect every invocation without racing against the real
+ * approval queue or LLM.
+ */
+export declare function recordPlannerDispatch(runtime: IAgentRuntime, result: PlannerDispatchResult): void;
+/** Test-only: read the in-memory dispatch log for a runtime. */
+export declare function readPlannerDispatchLog(runtime: IAgentRuntime): ReadonlyArray<PlannerDispatchResult>;
+/** Test-only: clear the dispatch log between runs. */
+export declare function resetPlannerDispatchLog(runtime: IAgentRuntime): void;
+//# sourceMappingURL=background-planner-dispatch.d.ts.map

package/apps/app-lifeops/src/lifeops/background-planner-dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"background-planner-dispatch.d.ts","sourceRoot":"","sources":["../../../../../../../apps/app-lifeops/src/lifeops/background-planner-dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,OAAO,KAAK,EAGV,eAAe,EAChB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EACV,oBAAoB,EACpB,YAAY,EACb,MAAM,yBAAyB,CAAC;AAEjC,eAAO,MAAM,2BAA2B,EAAG,gBAAyB,CAAC;AAErE,2EAA2E;AAC3E,eAAO,MAAM,qCAAqC,QAAsB,CAAC;AAEzE;;;;GAIG;AACH,qBAAa,6BAA8B,SAAQ,KAAK;IACtD,SAAgB,OAAO,EAAE,MAAM,CAAC;gBACpB,OAAO,EAAE,MAAM;CAO5B;AAUD;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,4CAA4C;IAC5C,QAAQ,CAAC,eAAe,EAAE,eAAe,GAAG,IAAI,CAAC;IACjD,qEAAqE;IACrE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,qCAAqC;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,aAAa,EACtB,UAAU,EAAE,oBAAoB,EAChC,IAAI,EAAE,YAAY,EAClB,GAAG,GAAE,IAAiB,GACrB,OAAO,CAAC,qBAAqB,CAAC,CAoEhC;AAYD;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,qBAAqB,GAC5B,IAAI,CAKN;AAED,gEAAgE;AAChE,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,aAAa,GACrB,aAAa,CAAC,qBAAqB,CAAC,CAGtC;AAED,sDAAsD;AACtD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAGpE"}

package/apps/app-lifeops/src/lifeops/background-planner-dispatch.js

@@ -0,0 +1,129 @@
+/**
+ * WS5 — glue between {@link planJob} and the WS6 approval queue.
+ *
+ * Every background job calls {@link planJob} and passes the result here.
+ * Sensitive actions (`requiresApproval === true` with a usable payload)
+ * are enqueued via the queue exposed by the runtime as service
+ * "APPROVAL_QUEUE". Non-sensitive actions and noops are recorded for
+ * observability and returned.
+ *
+ * No side-effects other than enqueue + logger. No try/catch swallow: a
+ * missing queue is a typed error that surfaces to the caller.
+ */
+import { logger } from "@elizaos/core";
+export const APPROVAL_QUEUE_SERVICE_NAME = "APPROVAL_QUEUE";
+/** Default expiry window for queued background-job approvals: 24 hours. */
+export const DEFAULT_BACKGROUND_APPROVAL_EXPIRY_MS = 24 * 60 * 60 * 1000;
+/**
+ * Raised when a sensitive plan cannot be enqueued because the WS6 queue is
+ * not registered on the runtime. We surface this loudly so the bug cannot
+ * hide as a silent skip.
+ */
+export class ApprovalQueueUnavailableError extends Error {
+    jobKind;
+    constructor(jobKind) {
+        super(`[BackgroundPlanner:${jobKind}] approval queue service '${APPROVAL_QUEUE_SERVICE_NAME}' is not registered`);
+        this.name = "ApprovalQueueUnavailableError";
+        this.jobKind = jobKind;
+    }
+}
+function getApprovalQueue(runtime) {
+    const service = runtime.getService(APPROVAL_QUEUE_SERVICE_NAME);
+    if (!service)
+        return null;
+    const candidate = service;
+    if (typeof candidate.enqueue !== "function")
+        return null;
+    return candidate;
+}
+/**
+ * If the plan is sensitive AND has a usable payload, enqueue it in the WS6
+ * approval queue. Otherwise, return a skipped result. Always records the
+ * decision to the runtime-scoped observability log via
+ * {@link recordPlannerDispatch} so the contract test can introspect.
+ */
+export async function enqueueIfSensitive(runtime, jobContext, plan, now = new Date()) {
+    if (plan.action === null) {
+        const result = {
+            jobKind: jobContext.jobKind,
+            plan,
+            approvalRequest: null,
+            skipped: true,
+            skipReason: "planner returned noop",
+        };
+        recordPlannerDispatch(runtime, result);
+        return result;
+    }
+    if (!plan.requiresApproval) {
+        const result = {
+            jobKind: jobContext.jobKind,
+            plan,
+            approvalRequest: null,
+            skipped: true,
+            skipReason: "planner marked requiresApproval=false",
+        };
+        recordPlannerDispatch(runtime, result);
+        return result;
+    }
+    if (plan.payload === null) {
+        const result = {
+            jobKind: jobContext.jobKind,
+            plan,
+            approvalRequest: null,
+            skipped: true,
+            skipReason: "planner produced sensitive action without usable payload",
+        };
+        recordPlannerDispatch(runtime, result);
+        logger.warn(`[BackgroundPlanner:${jobContext.jobKind}] sensitive action ${plan.action} skipped — no payload`);
+        return result;
+    }
+    const queue = getApprovalQueue(runtime);
+    if (!queue) {
+        throw new ApprovalQueueUnavailableError(jobContext.jobKind);
+    }
+    const input = {
+        requestedBy: `background-job:${jobContext.jobKind}`,
+        subjectUserId: jobContext.subjectUserId,
+        action: plan.action,
+        payload: plan.payload,
+        channel: plan.channel,
+        reason: plan.reason,
+        expiresAt: new Date(now.getTime() + DEFAULT_BACKGROUND_APPROVAL_EXPIRY_MS),
+    };
+    const approvalRequest = await queue.enqueue(input);
+    const result = {
+        jobKind: jobContext.jobKind,
+        plan,
+        approvalRequest,
+        skipped: false,
+        skipReason: null,
+    };
+    recordPlannerDispatch(runtime, result);
+    logger.info(`[BackgroundPlanner:${jobContext.jobKind}] enqueued approval ${approvalRequest.id} (${plan.action} on ${plan.channel})`);
+    return result;
+}
+// ---------------------------------------------------------------------------
+// Test observability
+// ---------------------------------------------------------------------------
+const DISPATCH_LOG_KEY = Symbol.for("milady.lifeops.background-planner.log");
+/**
+ * Record a planner dispatch decision on the runtime object so the contract
+ * test can inspect every invocation without racing against the real
+ * approval queue or LLM.
+ */
+export function recordPlannerDispatch(runtime, result) {
+    const holder = runtime;
+    const log = holder[DISPATCH_LOG_KEY] ?? [];
+    log.push(result);
+    holder[DISPATCH_LOG_KEY] = log;
+}
+/** Test-only: read the in-memory dispatch log for a runtime. */
+export function readPlannerDispatchLog(runtime) {
+    const holder = runtime;
+    return holder[DISPATCH_LOG_KEY] ?? [];
+}
+/** Test-only: clear the dispatch log between runs. */
+export function resetPlannerDispatchLog(runtime) {
+    const holder = runtime;
+    holder[DISPATCH_LOG_KEY] = [];
+}