@elizaos/agent 2.0.0-alpha.173 → 2.0.0-alpha.192

package/apps/app-lifeops/src/website-blocker/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../../../../../apps/app-lifeops/src/website-blocker/permissions.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,GACxB,SAAS,GACT,QAAQ,GACR,gBAAgB,GAChB,YAAY,GACZ,gBAAgB,CAAC;AAErB,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,kBAAkB,CAAC;IACvB,MAAM,EAAE,gBAAgB,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB"}

package/apps/app-lifeops/src/website-blocker/permissions.js

@@ -0,0 +1 @@
+export {};

package/apps/app-lifeops/src/website-blocker/public.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Self-control (hosts-file website blocker) — public API for
+ * `@elizaos/app-lifeops/selfcontrol` subpath imports.
+ */
+export { blockWebsitesAction, getWebsiteBlockStatusAction, requestWebsiteBlockingPermissionAction, selfControlBlockWebsitesAction, selfControlGetStatusAction, selfControlRequestPermissionAction, selfControlUnblockWebsitesAction, unblockWebsitesAction, } from "../actions/website-blocker.ts";
+export { selfControlProvider, websiteBlockerProvider, } from "../providers/website-blocker.ts";
+export { clearWebsiteBlockerExpiryTasks, executeWebsiteBlockerExpiryTask, registerWebsiteBlockerTaskWorker, SelfControlBlockerService, syncWebsiteBlockerExpiryTask, WEBSITE_BLOCKER_UNBLOCK_TASK_NAME, WEBSITE_BLOCKER_UNBLOCK_TASK_TAGS, WebsiteBlockerService, } from "./service.ts";
+export { getSelfControlPermissionState, getSelfControlStatus, openSelfControlPermissionLocation, parseSelfControlBlockRequest, registerNativeWebsiteBlockerBackend, getNativeWebsiteBlockerBackend, requestSelfControlPermission, setSelfControlPluginConfig, startSelfControlBlock, stopSelfControlBlock, } from "./engine.ts";
+export type { NativeWebsiteBlockerBackend, SelfControlBlockRequest, SelfControlElevationMethod, SelfControlPermissionState, SelfControlPluginConfig, SelfControlStatus, } from "./engine.ts";
+export { getSelfControlAccess, SELFCONTROL_ACCESS_ERROR } from "./access.ts";
+export { checkSenderRole } from "./roles.ts";
+export type { PermissionStatus } from "./permissions.ts";
+//# sourceMappingURL=public.d.ts.map

package/apps/app-lifeops/src/website-blocker/public.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public.d.ts","sourceRoot":"","sources":["../../../../../../../apps/app-lifeops/src/website-blocker/public.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,mBAAmB,EACnB,2BAA2B,EAC3B,sCAAsC,EACtC,8BAA8B,EAC9B,0BAA0B,EAC1B,kCAAkC,EAClC,gCAAgC,EAChC,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,8BAA8B,EAC9B,+BAA+B,EAC/B,gCAAgC,EAChC,yBAAyB,EACzB,4BAA4B,EAC5B,iCAAiC,EACjC,iCAAiC,EACjC,qBAAqB,GACtB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,6BAA6B,EAC7B,oBAAoB,EACpB,iCAAiC,EACjC,4BAA4B,EAC5B,mCAAmC,EACnC,8BAA8B,EAC9B,4BAA4B,EAC5B,0BAA0B,EAC1B,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AAErB,YAAY,EACV,2BAA2B,EAC3B,uBAAuB,EACvB,0BAA0B,EAC1B,0BAA0B,EAC1B,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAE7E,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC"}

package/apps/app-lifeops/src/website-blocker/public.js

@@ -0,0 +1,10 @@
+/**
+ * Self-control (hosts-file website blocker) — public API for
+ * `@elizaos/app-lifeops/selfcontrol` subpath imports.
+ */
+export { blockWebsitesAction, getWebsiteBlockStatusAction, requestWebsiteBlockingPermissionAction, selfControlBlockWebsitesAction, selfControlGetStatusAction, selfControlRequestPermissionAction, selfControlUnblockWebsitesAction, unblockWebsitesAction, } from "../actions/website-blocker.js";
+export { selfControlProvider, websiteBlockerProvider, } from "../providers/website-blocker.js";
+export { clearWebsiteBlockerExpiryTasks, executeWebsiteBlockerExpiryTask, registerWebsiteBlockerTaskWorker, SelfControlBlockerService, syncWebsiteBlockerExpiryTask, WEBSITE_BLOCKER_UNBLOCK_TASK_NAME, WEBSITE_BLOCKER_UNBLOCK_TASK_TAGS, WebsiteBlockerService, } from "./service.js";
+export { getSelfControlPermissionState, getSelfControlStatus, openSelfControlPermissionLocation, parseSelfControlBlockRequest, registerNativeWebsiteBlockerBackend, getNativeWebsiteBlockerBackend, requestSelfControlPermission, setSelfControlPluginConfig, startSelfControlBlock, stopSelfControlBlock, } from "./engine.js";
+export { getSelfControlAccess, SELFCONTROL_ACCESS_ERROR } from "./access.js";
+export { checkSenderRole } from "./roles.js";

package/apps/app-lifeops/src/website-blocker/roles.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Selfcontrol role checking — delegates to the core @elizaos/core roles module.
+ *
+ * No fallbacks.  If coreCheckSenderRole returns null the world/room/entity
+ * setup is broken and we throw so the caller surfaces a clear error instead
+ * of silently hiding the action from the LLM.
+ */
+import { type IAgentRuntime, type Memory, type RoleCheckResult as CoreRoleCheckResult } from "@elizaos/core";
+export type RoleCheckResult = CoreRoleCheckResult & {
+    hasPrivateAccess: boolean;
+};
+export declare function checkSenderRole(runtime: IAgentRuntime, message: Memory): Promise<RoleCheckResult>;
+//# sourceMappingURL=roles.d.ts.map

package/apps/app-lifeops/src/website-blocker/roles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles.d.ts","sourceRoot":"","sources":["../../../../../../../apps/app-lifeops/src/website-blocker/roles.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,MAAM,EACX,KAAK,eAAe,IAAI,mBAAmB,EAC5C,MAAM,eAAe,CAAC;AAEvB,MAAM,MAAM,eAAe,GAAG,mBAAmB,GAAG;IAClD,gBAAgB,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,wBAAsB,eAAe,CACnC,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,eAAe,CAAC,CAa1B"}

package/apps/app-lifeops/src/website-blocker/roles.js

@@ -0,0 +1,20 @@
+/**
+ * Selfcontrol role checking — delegates to the core @elizaos/core roles module.
+ *
+ * No fallbacks.  If coreCheckSenderRole returns null the world/room/entity
+ * setup is broken and we throw so the caller surfaces a clear error instead
+ * of silently hiding the action from the LLM.
+ */
+import { checkSenderRole as coreCheckSenderRole, } from "@elizaos/core";
+export async function checkSenderRole(runtime, message) {
+    const result = await coreCheckSenderRole(runtime, message);
+    if (!result) {
+        throw new Error(`[selfcontrol] checkSenderRole returned null — world/room/entity setup is broken. ` +
+            `roomId=${message.roomId}, entityId=${message.entityId}, agentId=${runtime.agentId}. ` +
+            `The room must have a worldId and the sender must be a participant with a resolvable role.`);
+    }
+    return {
+        ...result,
+        hasPrivateAccess: result.isAdmin,
+    };
+}

package/apps/app-lifeops/src/website-blocker/service.d.ts

@@ -0,0 +1,21 @@
+import type { IAgentRuntime, Task, UUID } from "@elizaos/core";
+import { Service } from "@elizaos/core";
+import { type SelfControlStatus } from "./engine.ts";
+export declare const WEBSITE_BLOCKER_UNBLOCK_TASK_NAME: "WEBSITE_BLOCKER_UNBLOCK";
+export declare const WEBSITE_BLOCKER_UNBLOCK_TASK_TAGS: readonly ["queue", "website-blocker", "selfcontrol"];
+export declare function clearWebsiteBlockerExpiryTasks(runtime: IAgentRuntime): Promise<void>;
+export declare function syncWebsiteBlockerExpiryTask(runtime: IAgentRuntime, status?: SelfControlStatus | null): Promise<UUID | null>;
+export declare function executeWebsiteBlockerExpiryTask(runtime: IAgentRuntime, task: Task): Promise<void>;
+export declare function registerWebsiteBlockerTaskWorker(runtime: IAgentRuntime): void;
+export declare class SelfControlBlockerService extends Service {
+    static serviceType: string;
+    capabilityDescription: string;
+    stop(): Promise<void>;
+    static start(runtime: IAgentRuntime): Promise<SelfControlBlockerService>;
+}
+export declare class WebsiteBlockerService extends SelfControlBlockerService {
+    static serviceType: string;
+    capabilityDescription: string;
+    static start(runtime: IAgentRuntime): Promise<WebsiteBlockerService>;
+}
+//# sourceMappingURL=service.d.ts.map

package/apps/app-lifeops/src/website-blocker/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../../../../../apps/app-lifeops/src/website-blocker/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,IAAI,EAAgB,IAAI,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAU,OAAO,EAAgB,MAAM,eAAe,CAAC;AAC9D,OAAO,EAGL,KAAK,iBAAiB,EAEvB,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,iCAAiC,EAC5C,yBAAkC,CAAC;AACrC,eAAO,MAAM,iCAAiC,sDAIpC,CAAC;AAoLX,wBAAsB,8BAA8B,CAClD,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,IAAI,CAAC,CASf;AA+DD,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,aAAa,EACtB,MAAM,GAAE,iBAAiB,GAAG,IAAW,GACtC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAatB;AAkCD,wBAAsB,+BAA+B,CACnD,OAAO,EAAE,aAAa,EACtB,IAAI,EAAE,IAAI,GACT,OAAO,CAAC,IAAI,CAAC,CAuBf;AAED,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAa7E;AAED,qBAAa,yBAA0B,SAAQ,OAAO;IACpD,MAAM,CAAC,WAAW,SAAyB;IAE3C,qBAAqB,SACwE;IAEvF,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;WAEL,KAAK,CACzB,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,yBAAyB,CAAC;CActC;AAED,qBAAa,qBAAsB,SAAQ,yBAAyB;IAClE,OAAgB,WAAW,SAAqB;IAEvC,qBAAqB,SAC+D;WAEvE,KAAK,CACzB,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,qBAAqB,CAAC;CAclC"}

package/apps/app-lifeops/src/website-blocker/service.js

@@ -0,0 +1,268 @@
+import { logger, Service, stringToUuid } from "@elizaos/core";
+import { getSelfControlStatus, reconcileSelfControlBlockState, stopSelfControlBlock, } from "./engine.js";
+export const WEBSITE_BLOCKER_UNBLOCK_TASK_NAME = "WEBSITE_BLOCKER_UNBLOCK";
+export const WEBSITE_BLOCKER_UNBLOCK_TASK_TAGS = [
+    "queue",
+    "website-blocker",
+    "selfcontrol",
+];
+const WEBSITE_BLOCKER_UNBLOCK_RETRY_MS = 60_000;
+function isRecord(value) {
+    return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function haveSameWebsiteSet(left, right) {
+    if (left.length !== right.length) {
+        return false;
+    }
+    const leftSorted = [...left].sort();
+    const rightSorted = [...right].sort();
+    return leftSorted.every((website, index) => website === rightSorted[index]);
+}
+function getWebsiteBlockerTaskRoomId(runtime) {
+    return stringToUuid(`website-blocker-unblock-${runtime.agentId}`);
+}
+function getRetryCount(task) {
+    const descriptor = readWebsiteBlockerTaskDescriptor(task);
+    return descriptor?.retryCount ?? 0;
+}
+function readWebsiteBlockerTaskDescriptor(task) {
+    const metadata = isRecord(task.metadata) ? task.metadata : null;
+    const descriptor = metadata?.websiteBlockerUnblock;
+    if (!isRecord(descriptor)) {
+        return null;
+    }
+    if (descriptor.kind !== "scheduled_unblock" ||
+        descriptor.version !== 1 ||
+        typeof descriptor.endsAt !== "string" ||
+        !Array.isArray(descriptor.websites)) {
+        return null;
+    }
+    const websites = descriptor.websites.filter((website) => typeof website === "string");
+    if (websites.length === 0) {
+        return null;
+    }
+    return {
+        kind: "scheduled_unblock",
+        version: 1,
+        startedAt: typeof descriptor.startedAt === "string" &&
+            descriptor.startedAt.length > 0
+            ? descriptor.startedAt
+            : null,
+        endsAt: descriptor.endsAt,
+        websites,
+        retryCount: typeof descriptor.retryCount === "number" &&
+            Number.isFinite(descriptor.retryCount) &&
+            descriptor.retryCount >= 0
+            ? descriptor.retryCount
+            : 0,
+    };
+}
+function isWebsiteBlockerUnblockTask(task) {
+    return (task.name === WEBSITE_BLOCKER_UNBLOCK_TASK_NAME &&
+        readWebsiteBlockerTaskDescriptor(task) !== null);
+}
+function buildWebsiteBlockerTaskMetadata(status, existing = null, retryCount = 0) {
+    if (!status.endsAt) {
+        throw new Error("Cannot build a website blocker task without an end time.");
+    }
+    return {
+        ...(existing ?? {}),
+        blocking: true,
+        websiteBlockerUnblock: {
+            kind: "scheduled_unblock",
+            version: 1,
+            startedAt: status.startedAt,
+            endsAt: status.endsAt,
+            websites: [...status.websites],
+            retryCount,
+        },
+    };
+}
+function buildWebsiteBlockerTaskDescription(status) {
+    const websites = status.websites.length > 0
+        ? status.websites.join(", ")
+        : "blocked websites";
+    return `Automatically unblock ${websites} at ${status.endsAt ?? "the scheduled end time"}`;
+}
+function isTaskOwnedByRuntime(runtime, status) {
+    return (!status.scheduledByAgentId ||
+        status.scheduledByAgentId === String(runtime.agentId));
+}
+function statusMatchesTask(status, descriptor) {
+    if (!status.active || status.endsAt !== descriptor.endsAt) {
+        return false;
+    }
+    if (descriptor.startedAt && status.startedAt !== descriptor.startedAt) {
+        return false;
+    }
+    return haveSameWebsiteSet(status.websites, descriptor.websites);
+}
+async function waitForTaskStoreReady(runtime, maxAttempts = 3, delayMs = 250) {
+    for (let attempt = 0; attempt < maxAttempts; attempt += 1) {
+        try {
+            await runtime.getTasks({
+                agentIds: [runtime.agentId],
+                tags: ["__website_blocker_ready_probe__"],
+            });
+            return;
+        }
+        catch {
+            if (attempt < maxAttempts - 1) {
+                await new Promise((resolve) => setTimeout(resolve, delayMs));
+            }
+        }
+    }
+}
+async function listWebsiteBlockerUnblockTasks(runtime) {
+    const tasks = await runtime.getTasks({
+        agentIds: [runtime.agentId],
+        tags: [...WEBSITE_BLOCKER_UNBLOCK_TASK_TAGS],
+    });
+    return tasks.filter(isWebsiteBlockerUnblockTask);
+}
+export async function clearWebsiteBlockerExpiryTasks(runtime) {
+    await waitForTaskStoreReady(runtime);
+    const tasks = await listWebsiteBlockerUnblockTasks(runtime);
+    for (const task of tasks) {
+        if (!task.id) {
+            continue;
+        }
+        await runtime.deleteTask(task.id);
+    }
+}
+async function upsertWebsiteBlockerExpiryTask(runtime, status, retryCount = 0) {
+    if (!status.active ||
+        !status.endsAt ||
+        !isTaskOwnedByRuntime(runtime, status)) {
+        await clearWebsiteBlockerExpiryTasks(runtime);
+        return null;
+    }
+    const dueAtMs = Date.parse(status.endsAt);
+    if (!Number.isFinite(dueAtMs)) {
+        await clearWebsiteBlockerExpiryTasks(runtime);
+        return null;
+    }
+    await waitForTaskStoreReady(runtime);
+    const tasks = await listWebsiteBlockerUnblockTasks(runtime);
+    const matchingTask = tasks.find((task) => {
+        const descriptor = readWebsiteBlockerTaskDescriptor(task);
+        return descriptor ? statusMatchesTask(status, descriptor) : false;
+    });
+    for (const task of tasks) {
+        if (!task.id || task.id === matchingTask?.id) {
+            continue;
+        }
+        await runtime.deleteTask(task.id);
+    }
+    const metadata = buildWebsiteBlockerTaskMetadata(status, isRecord(matchingTask?.metadata) ? matchingTask.metadata : null, retryCount);
+    const description = buildWebsiteBlockerTaskDescription(status);
+    const dueAt = Math.max(dueAtMs, Date.now());
+    if (matchingTask?.id) {
+        await runtime.updateTask(matchingTask.id, {
+            description,
+            dueAt,
+            metadata,
+        });
+        return matchingTask.id;
+    }
+    return runtime.createTask({
+        name: WEBSITE_BLOCKER_UNBLOCK_TASK_NAME,
+        description,
+        roomId: getWebsiteBlockerTaskRoomId(runtime),
+        tags: [...WEBSITE_BLOCKER_UNBLOCK_TASK_TAGS],
+        dueAt,
+        metadata,
+    });
+}
+export async function syncWebsiteBlockerExpiryTask(runtime, status = null) {
+    registerWebsiteBlockerTaskWorker(runtime);
+    const nextStatus = status ?? (await reconcileSelfControlBlockState());
+    if (!nextStatus.active ||
+        !nextStatus.endsAt ||
+        !isTaskOwnedByRuntime(runtime, nextStatus)) {
+        await clearWebsiteBlockerExpiryTasks(runtime);
+        return null;
+    }
+    return upsertWebsiteBlockerExpiryTask(runtime, nextStatus);
+}
+async function scheduleWebsiteBlockerRetryTask(runtime, task, status) {
+    const descriptor = readWebsiteBlockerTaskDescriptor(task);
+    if (!descriptor ||
+        !status.active ||
+        !status.endsAt ||
+        !statusMatchesTask(status, descriptor)) {
+        return null;
+    }
+    return runtime.createTask({
+        name: WEBSITE_BLOCKER_UNBLOCK_TASK_NAME,
+        description: buildWebsiteBlockerTaskDescription(status),
+        roomId: getWebsiteBlockerTaskRoomId(runtime),
+        tags: [...WEBSITE_BLOCKER_UNBLOCK_TASK_TAGS],
+        dueAt: Date.now() + WEBSITE_BLOCKER_UNBLOCK_RETRY_MS,
+        metadata: buildWebsiteBlockerTaskMetadata({
+            ...status,
+            endsAt: status.endsAt,
+        }, null, getRetryCount(task) + 1),
+    });
+}
+export async function executeWebsiteBlockerExpiryTask(runtime, task) {
+    const descriptor = readWebsiteBlockerTaskDescriptor(task);
+    if (!descriptor) {
+        return;
+    }
+    const status = await getSelfControlStatus();
+    if (!statusMatchesTask(status, descriptor)) {
+        return;
+    }
+    const stopResult = await stopSelfControlBlock();
+    if (stopResult.success === true) {
+        logger.info(`[selfcontrol] Automatically removed the website block scheduled for ${descriptor.endsAt}.`);
+        return;
+    }
+    await scheduleWebsiteBlockerRetryTask(runtime, task, status);
+    logger.warn(`[selfcontrol] Failed to remove the scheduled website block at ${descriptor.endsAt}; queued a retry in ${WEBSITE_BLOCKER_UNBLOCK_RETRY_MS / 1000}s: ${stopResult.error}`);
+}
+export function registerWebsiteBlockerTaskWorker(runtime) {
+    if (runtime.getTaskWorker(WEBSITE_BLOCKER_UNBLOCK_TASK_NAME)) {
+        return;
+    }
+    runtime.registerTaskWorker({
+        name: WEBSITE_BLOCKER_UNBLOCK_TASK_NAME,
+        shouldRun: async () => true,
+        execute: async (rt, _options, task) => {
+            await executeWebsiteBlockerExpiryTask(rt, task);
+            return undefined;
+        },
+    });
+}
+export class SelfControlBlockerService extends Service {
+    static serviceType = "selfcontrol_blocker";
+    capabilityDescription = "Maintains the local hosts-file website blocker and clears timed blocks when they expire.";
+    async stop() { }
+    static async start(runtime) {
+        registerWebsiteBlockerTaskWorker(runtime);
+        try {
+            const status = await reconcileSelfControlBlockState();
+            await syncWebsiteBlockerExpiryTask(runtime, status);
+        }
+        catch (error) {
+            logger.warn(`[selfcontrol] Failed to reconcile hosts-file blocker state: ${error instanceof Error ? error.message : String(error)}`);
+        }
+        return new SelfControlBlockerService(runtime);
+    }
+}
+export class WebsiteBlockerService extends SelfControlBlockerService {
+    static serviceType = "website_blocker";
+    capabilityDescription = "Maintains the local hosts-file website blocker and clears timed blocks when they expire.";
+    static async start(runtime) {
+        registerWebsiteBlockerTaskWorker(runtime);
+        try {
+            const status = await reconcileSelfControlBlockState();
+            await syncWebsiteBlockerExpiryTask(runtime, status);
+        }
+        catch (error) {
+            logger.warn(`[selfcontrol] Failed to reconcile hosts-file blocker state: ${error instanceof Error ? error.message : String(error)}`);
+        }
+        return new WebsiteBlockerService(runtime);
+    }
+}

package/apps/app-steward/src/api/tx-service.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Ethereum transaction signing and contract interaction layer.
+ *
+ * Provides the missing transaction capability to Eliza's wallet system,
+ * which currently only handles key generation and balance fetching.
+ * Used by the registry and drop services for on-chain operations.
+ */
+import { ethers } from "ethers";
+export declare class TxService {
+    private readonly provider;
+    private readonly wallet;
+    private readonly rpcUrl;
+    constructor(rpcUrl: string, privateKey: string);
+    /**
+     * Get fresh nonce for the wallet address.
+     * Always fetches from blockchain using a fresh provider to avoid caching issues.
+     * This ensures we always get the correct nonce even after failed transactions.
+     */
+    getFreshNonce(): Promise<number>;
+    get address(): string;
+    getBalance(): Promise<bigint>;
+    getBalanceFormatted(): Promise<string>;
+    getChainId(): Promise<number>;
+    getContract(address: string, abi: ethers.InterfaceAbi): ethers.Contract;
+    getReadOnlyContract(address: string, abi: ethers.InterfaceAbi): ethers.Contract;
+    estimateGas(tx: ethers.TransactionRequest): Promise<bigint>;
+    getFeeData(): Promise<ethers.FeeData>;
+    /**
+     * Wait for a transaction to be mined and return the receipt.
+     * Throws if the transaction fails or times out.
+     */
+    waitForTransaction(txHash: string, confirmations?: number, timeoutMs?: number): Promise<ethers.TransactionReceipt>;
+    /**
+     * Estimate the gas cost in ETH for a contract call.
+     * Useful for showing users how much gas they'll need.
+     */
+    estimateGasCostEth(tx: ethers.TransactionRequest): Promise<string>;
+    /**
+     * Check whether the wallet has enough balance for a given value + estimated gas.
+     */
+    hasEnoughBalance(value: bigint, gasEstimate: bigint): Promise<boolean>;
+    /**
+     * Log a summary of the tx service state for diagnostics.
+     */
+    logStatus(): Promise<void>;
+}
+//# sourceMappingURL=tx-service.d.ts.map

package/apps/app-steward/src/api/tx-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tx-service.d.ts","sourceRoot":"","sources":["../../../../../../../apps/app-steward/src/api/tx-service.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAahC,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAyB;IAClD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;gBAEpB,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM;IAwB9C;;;;OAIG;IACG,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC;IAsBtC,IAAI,OAAO,IAAI,MAAM,CAEpB;IAEK,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC;IAI7B,mBAAmB,IAAI,OAAO,CAAC,MAAM,CAAC;IAKtC,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC;IAKnC,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,QAAQ;IAIvE,mBAAmB,CACjB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,CAAC,YAAY,GACvB,MAAM,CAAC,QAAQ;IAIZ,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC;IAI3D,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;IAI3C;;;OAGG;IACG,kBAAkB,CACtB,MAAM,EAAE,MAAM,EACd,aAAa,GAAE,MAAU,EACzB,SAAS,GAAE,MAAgB,GAC1B,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC;IAiCrC;;;OAGG;IACG,kBAAkB,CAAC,EAAE,EAAE,MAAM,CAAC,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC;IAQxE;;OAEG;IACG,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQ5E;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;CASjC"}

package/apps/app-steward/src/api/tx-service.js

@@ -0,0 +1,156 @@
+/**
+ * Ethereum transaction signing and contract interaction layer.
+ *
+ * Provides the missing transaction capability to Eliza's wallet system,
+ * which currently only handles key generation and balance fetching.
+ * Used by the registry and drop services for on-chain operations.
+ */
+import { createIntegrationTelemetrySpan } from "@elizaos/agent/diagnostics/integration-observability";
+import { logger } from "@elizaos/core";
+import { ethers } from "ethers";
+/**
+ * Validate that a private key is a valid 32-byte hex string.
+ */
+function isValidPrivateKey(key) {
+    const normalized = key.startsWith("0x") ? key.slice(2) : key;
+    // Must be 64 hex characters (32 bytes)
+    if (normalized.length !== 64)
+        return false;
+    // Must be valid hex
+    return /^[0-9a-fA-F]+$/.test(normalized);
+}
+export class TxService {
+    provider;
+    wallet;
+    rpcUrl;
+    constructor(rpcUrl, privateKey) {
+        this.rpcUrl = rpcUrl;
+        this.provider = new ethers.JsonRpcProvider(rpcUrl);
+        // Validate private key before attempting to create wallet
+        if (!isValidPrivateKey(privateKey)) {
+            const preview = privateKey.length > 10
+                ? `${privateKey.slice(0, 6)}...${privateKey.slice(-4)}`
+                : "(empty or too short)";
+            throw new Error(`Invalid EVM_PRIVATE_KEY: expected 64-character hex string, got ${preview}. ` +
+                `Please set a valid private key in your environment or .env file.`);
+        }
+        const normalizedKey = privateKey.startsWith("0x")
+            ? privateKey
+            : `0x${privateKey}`;
+        // Create wallet with provider
+        this.wallet = new ethers.Wallet(normalizedKey, this.provider);
+    }
+    /**
+     * Get fresh nonce for the wallet address.
+     * Always fetches from blockchain using a fresh provider to avoid caching issues.
+     * This ensures we always get the correct nonce even after failed transactions.
+     */
+    async getFreshNonce() {
+        const span = createIntegrationTelemetrySpan({
+            boundary: "wallet",
+            operation: "rpc_get_nonce",
+        });
+        // Use a fresh provider for each nonce lookup to avoid ethers.js v6 caching
+        const freshProvider = new ethers.JsonRpcProvider(this.rpcUrl);
+        try {
+            const nonce = await freshProvider.getTransactionCount(this.wallet.address, "pending");
+            span.success();
+            return nonce;
+        }
+        catch (err) {
+            span.failure({ error: err });
+            throw err;
+        }
+        finally {
+            freshProvider.destroy();
+        }
+    }
+    get address() {
+        return this.wallet.address;
+    }
+    async getBalance() {
+        return this.provider.getBalance(this.wallet.address);
+    }
+    async getBalanceFormatted() {
+        const balance = await this.getBalance();
+        return ethers.formatEther(balance);
+    }
+    async getChainId() {
+        const network = await this.provider.getNetwork();
+        return Number(network.chainId);
+    }
+    getContract(address, abi) {
+        return new ethers.Contract(address, abi, this.wallet);
+    }
+    getReadOnlyContract(address, abi) {
+        return new ethers.Contract(address, abi, this.provider);
+    }
+    async estimateGas(tx) {
+        return this.provider.estimateGas(tx);
+    }
+    async getFeeData() {
+        return this.provider.getFeeData();
+    }
+    /**
+     * Wait for a transaction to be mined and return the receipt.
+     * Throws if the transaction fails or times out.
+     */
+    async waitForTransaction(txHash, confirmations = 1, timeoutMs = 120_000) {
+        const span = createIntegrationTelemetrySpan({
+            boundary: "wallet",
+            operation: "rpc_wait_for_transaction",
+            timeoutMs,
+        });
+        let receipt;
+        try {
+            receipt = await this.provider.waitForTransaction(txHash, confirmations, timeoutMs);
+        }
+        catch (err) {
+            span.failure({ error: err });
+            throw err;
+        }
+        if (!receipt) {
+            const err = new Error(`Transaction ${txHash} timed out after ${timeoutMs}ms`);
+            span.failure({ error: err, errorKind: "timeout" });
+            throw err;
+        }
+        if (receipt.status === 0) {
+            const err = new Error(`Transaction ${txHash} reverted`);
+            span.failure({ error: err, errorKind: "tx_reverted" });
+            throw err;
+        }
+        span.success();
+        return receipt;
+    }
+    /**
+     * Estimate the gas cost in ETH for a contract call.
+     * Useful for showing users how much gas they'll need.
+     */
+    async estimateGasCostEth(tx) {
+        const gasLimit = await this.estimateGas(tx);
+        const feeData = await this.getFeeData();
+        const gasPrice = feeData.gasPrice ?? feeData.maxFeePerGas ?? 0n;
+        const costWei = gasLimit * gasPrice;
+        return ethers.formatEther(costWei);
+    }
+    /**
+     * Check whether the wallet has enough balance for a given value + estimated gas.
+     */
+    async hasEnoughBalance(value, gasEstimate) {
+        const balance = await this.getBalance();
+        const feeData = await this.getFeeData();
+        const gasPrice = feeData.gasPrice ?? feeData.maxFeePerGas ?? 0n;
+        const gasCost = gasEstimate * gasPrice;
+        return balance >= value + gasCost;
+    }
+    /**
+     * Log a summary of the tx service state for diagnostics.
+     */
+    async logStatus() {
+        const [balance, chainId] = await Promise.all([
+            this.getBalanceFormatted(),
+            this.getChainId(),
+        ]);
+        logger.info(`[tx-service] address=${this.address} chain=${chainId} balance=${balance} ETH`);
+    }
+}

package/apps/app-steward/src/api/wallet-routes.d.ts

@@ -3,14 +3,7 @@ import type { RouteHelpers, RouteRequestMeta } from "@elizaos/agent/api/route-he
 import type { ElizaConfig } from "@elizaos/agent/config/config";
 import type { AgentRuntime } from "@elizaos/core";
 import { fetchEvmBalances, fetchSolanaBalances, fetchSolanaNativeBalanceViaRpc, generateWalletForChain, getWalletAddresses, importWallet, validatePrivateKey } from "./wallet";
-interface WalletExportRequestBody {
-    confirm?: boolean;
-    exportToken?: string;
-}
-interface WalletExportRejectionLike {
-    status: 401 | 403;
-    reason: string;
-}
+import type { WalletExportRequestBody, WalletExportRejection as WalletExportRejectionLike } from "@elizaos/shared/contracts";
 export interface WalletRouteDependencies {
     getWalletAddresses: typeof getWalletAddresses;
     fetchEvmBalances: typeof fetchEvmBalances;
@@ -31,5 +24,4 @@ export interface WalletRouteContext extends RouteRequestMeta, Pick<RouteHelpers,
     runtime?: AgentRuntime | null;
 }
 export declare function handleWalletRoutes(ctx: WalletRouteContext): Promise<boolean>;
-export {};
 //# sourceMappingURL=wallet-routes.d.ts.map

package/apps/app-steward/src/api/wallet-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wallet-routes.d.ts","sourceRoot":"","sources":["../../../../../../../apps/app-steward/src/api/wallet-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EACjB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAEhE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAOlD,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,8BAA8B,EAC9B,sBAAsB,EACtB,kBAAkB,EAClB,YAAY,EAEZ,kBAAkB,EAInB,MAAM,UAAU,CAAC;AASlB,UAAU,uBAAuB;IAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,yBAAyB;IACjC,MAAM,EAAE,GAAG,GAAG,GAAG,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AA4GD,MAAM,WAAW,uBAAuB;IACtC,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,mBAAmB,EAAE,OAAO,mBAAmB,CAAC;IAChD,8BAA8B,EAAE,OAAO,8BAA8B,CAAC;IACtE,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,YAAY,EAAE,OAAO,YAAY,CAAC;IAClC,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;CACvD;AAED,eAAO,MAAM,iCAAiC,EAAE,uBAQ/C,CAAC;AAEF,MAAM,WAAW,kBACf,SAAQ,gBAAgB,EACtB,IAAI,CAAC,YAAY,EAAE,cAAc,GAAG,MAAM,GAAG,OAAO,CAAC;IACvD,MAAM,EAAE,WAAW,CAAC;IACpB,UAAU,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,IAAI,CAAC;IAC1C,8BAA8B,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC;IACjE,4BAA4B,EAAE,CAC5B,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,IAAI,EAAE,uBAAuB,KAC1B,yBAAyB,GAAG,IAAI,CAAC;IACtC,sBAAsB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAClD,IAAI,CAAC,EAAE,uBAAuB,CAAC;IAC/B,OAAO,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;CAC/B;AAED,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,kBAAkB,GACtB,OAAO,CAAC,OAAO,CAAC,CAqdlB"}
+{"version":3,"file":"wallet-routes.d.ts","sourceRoot":"","sources":["../../../../../../../apps/app-steward/src/api/wallet-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EACjB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAEhE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAOlD,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,8BAA8B,EAC9B,sBAAsB,EACtB,kBAAkB,EAClB,YAAY,EAEZ,kBAAkB,EAInB,MAAM,UAAU,CAAC;AASlB,OAAO,KAAK,EACV,uBAAuB,EACvB,qBAAqB,IAAI,yBAAyB,EACnD,MAAM,2BAA2B,CAAC;AA4GnC,MAAM,WAAW,uBAAuB;IACtC,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,mBAAmB,EAAE,OAAO,mBAAmB,CAAC;IAChD,8BAA8B,EAAE,OAAO,8BAA8B,CAAC;IACtE,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,YAAY,EAAE,OAAO,YAAY,CAAC;IAClC,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;CACvD;AAED,eAAO,MAAM,iCAAiC,EAAE,uBAQ/C,CAAC;AAEF,MAAM,WAAW,kBACf,SAAQ,gBAAgB,EACtB,IAAI,CAAC,YAAY,EAAE,cAAc,GAAG,MAAM,GAAG,OAAO,CAAC;IACvD,MAAM,EAAE,WAAW,CAAC;IACpB,UAAU,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,IAAI,CAAC;IAC1C,8BAA8B,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC;IACjE,4BAA4B,EAAE,CAC5B,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,IAAI,EAAE,uBAAuB,KAC1B,yBAAyB,GAAG,IAAI,CAAC;IACtC,sBAAsB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAClD,IAAI,CAAC,EAAE,uBAAuB,CAAC;IAC/B,OAAO,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;CAC/B;AAED,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,kBAAkB,GACtB,OAAO,CAAC,OAAO,CAAC,CAqdlB"}

package/apps/app-steward/src/routes/wallet-export-guard.d.ts

@@ -11,14 +11,8 @@
  * keys without leaving an audit trail and hitting rate limits.
  */
 import type http from "node:http";
-interface WalletExportRequestBody {
-    confirm?: boolean;
-    exportToken?: string;
-}
-export interface WalletExportRejection {
-    status: 400 | 401 | 402 | 403 | 429;
-    reason: string;
-}
+import type { WalletExportRequestBody, WalletExportRejection } from "@elizaos/shared/contracts";
+export type { WalletExportRejection };
 type UpstreamRejectionFn = (req: http.IncomingMessage, body: WalletExportRequestBody) => WalletExportRejection | null;
 export interface WalletExportAuditEntry {
     timestamp: string;
@@ -47,5 +41,4 @@ interface HardenedExportRequestBody extends WalletExportRequestBody {
  *      → 200 with keys (if delay elapsed and rate limit not hit)
  */
 export declare function createHardenedExportGuard(upstream: UpstreamRejectionFn): (req: http.IncomingMessage, body: HardenedExportRequestBody) => WalletExportRejection | null;
-export {};
 //# sourceMappingURL=wallet-export-guard.d.ts.map

package/apps/app-steward/src/routes/wallet-export-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wallet-export-guard.d.ts","sourceRoot":"","sources":["../../../../../../../apps/app-steward/src/routes/wallet-export-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAIlC,UAAU,uBAAuB;IAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IACpC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,KAAK,mBAAmB,GAAG,CACzB,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,IAAI,EAAE,uBAAuB,KAC1B,qBAAqB,GAAG,IAAI,CAAC;AA6ClC,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,SAAS,GAAG,cAAc,GAAG,UAAU,CAAC;IACjD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAgBD,qEAAqE;AACrE,wBAAgB,uBAAuB,IAAI,aAAa,CAAC,sBAAsB,CAAC,CAE/E;AAED,4EAA4E;AAC5E,wBAAgB,gBAAgB,IAAI,IAAI,CAKvC;AAuED,UAAU,yBAA0B,SAAQ,uBAAuB;IACjE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mEAAmE;IACnE,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAID;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,mBAAmB,GAC5B,CACD,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,IAAI,EAAE,yBAAyB,KAC5B,qBAAqB,GAAG,IAAI,CAkIhC"}
+{"version":3,"file":"wallet-export-guard.d.ts","sourceRoot":"","sources":["../../../../../../../apps/app-steward/src/routes/wallet-export-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EACV,uBAAuB,EACvB,qBAAqB,EACtB,MAAM,2BAA2B,CAAC;AAEnC,YAAY,EAAE,qBAAqB,EAAE,CAAC;AAEtC,KAAK,mBAAmB,GAAG,CACzB,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,IAAI,EAAE,uBAAuB,KAC1B,qBAAqB,GAAG,IAAI,CAAC;AA6ClC,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,SAAS,GAAG,cAAc,GAAG,UAAU,CAAC;IACjD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAgBD,qEAAqE;AACrE,wBAAgB,uBAAuB,IAAI,aAAa,CAAC,sBAAsB,CAAC,CAE/E;AAED,4EAA4E;AAC5E,wBAAgB,gBAAgB,IAAI,IAAI,CAKvC;AAuED,UAAU,yBAA0B,SAAQ,uBAAuB;IACjE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mEAAmE;IACnE,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAID;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,mBAAmB,GAC5B,CACD,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,IAAI,EAAE,yBAAyB,KAC5B,qBAAqB,GAAG,IAAI,CAkIhC"}