@elizaos/agent 2.0.0-alpha.358 → 2.0.0-alpha.376

package/apps/app-lifeops/src/lifeops/token-encryption.d.ts

@@ -0,0 +1,49 @@
+/**
+ * AES-256-GCM encryption helpers for Google OAuth tokens at rest.
+ *
+ * Tokens used to be persisted as plaintext JSON files (mode 0600). That meant
+ * any process or backup with read access to the credentials directory could
+ * lift live OAuth refresh tokens. We now encrypt the JSON payload with a
+ * symmetric key sourced from one of:
+ *
+ *   1. `ELIZA_TOKEN_ENCRYPTION_KEY` env var (32 raw bytes, base64- or
+ *      hex-encoded). Preferred — operators who manage their own secret
+ *      management can inject the key directly.
+ *   2. `<credentials-dir>/.encryption-key` file (mode 0600). Generated lazily
+ *      the first time we need to write a token and no env var is configured.
+ *      The agent reuses this key on subsequent boots.
+ *
+ * The on-disk format is intentionally minimal so we can detect legacy
+ * plaintext tokens during the transition: encrypted blobs are JSON objects
+ * with a top-level `__enc` discriminator. Any file without `__enc` is treated
+ * as legacy plaintext, decoded once with the legacy reader, then re-encrypted
+ * on the next write.
+ */
+declare const ENVELOPE_VERSION = 1;
+declare const ENVELOPE_DISCRIMINATOR: "__enc";
+export interface EncryptedTokenEnvelope {
+    readonly [ENVELOPE_DISCRIMINATOR]: "aes-256-gcm";
+    readonly v: typeof ENVELOPE_VERSION;
+    readonly iv: string;
+    readonly tag: string;
+    readonly ct: string;
+}
+/**
+ * Resolve the symmetric key for token encryption.
+ *
+ * Resolution order: env var (`ELIZA_TOKEN_ENCRYPTION_KEY`) → file at
+ * `<credentialsDir>/.encryption-key`. The file is created (with mode 0600)
+ * lazily on first call so existing deployments keep working without an env
+ * var.
+ */
+export declare function resolveTokenEncryptionKey(credentialsDir: string, env?: NodeJS.ProcessEnv): Buffer;
+export declare function encryptTokenPayload(plaintextJson: string, key: Buffer): EncryptedTokenEnvelope;
+export declare function decryptTokenEnvelope(envelope: EncryptedTokenEnvelope, key: Buffer): string;
+/**
+ * Returns true when the parsed JSON value looks like an encrypted envelope
+ * (has the `__enc` discriminator). Used to detect legacy plaintext token
+ * files during the migration window.
+ */
+export declare function isEncryptedTokenEnvelope(value: unknown): value is EncryptedTokenEnvelope;
+export {};
+//# sourceMappingURL=token-encryption.d.ts.map

package/apps/app-lifeops/src/lifeops/token-encryption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-encryption.d.ts","sourceRoot":"","sources":["../../../../../../../apps/app-lifeops/src/lifeops/token-encryption.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAWH,QAAA,MAAM,gBAAgB,IAAI,CAAC;AAC3B,QAAA,MAAM,sBAAsB,EAAG,OAAgB,CAAC;AAEhD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,CAAC,sBAAsB,CAAC,EAAE,aAAa,CAAC;IACjD,QAAQ,CAAC,CAAC,EAAE,OAAO,gBAAgB,CAAC;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAiCD;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,cAAc,EAAE,MAAM,EACtB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAMR;AAED,wBAAgB,mBAAmB,CACjC,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,MAAM,GACV,sBAAsB,CAuBxB;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,sBAAsB,EAChC,GAAG,EAAE,MAAM,GACV,MAAM,CAiBR;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,sBAAsB,CAMjC"}

package/apps/app-lifeops/src/lifeops/token-encryption.js

@@ -0,0 +1,123 @@
+/**
+ * AES-256-GCM encryption helpers for Google OAuth tokens at rest.
+ *
+ * Tokens used to be persisted as plaintext JSON files (mode 0600). That meant
+ * any process or backup with read access to the credentials directory could
+ * lift live OAuth refresh tokens. We now encrypt the JSON payload with a
+ * symmetric key sourced from one of:
+ *
+ *   1. `ELIZA_TOKEN_ENCRYPTION_KEY` env var (32 raw bytes, base64- or
+ *      hex-encoded). Preferred — operators who manage their own secret
+ *      management can inject the key directly.
+ *   2. `<credentials-dir>/.encryption-key` file (mode 0600). Generated lazily
+ *      the first time we need to write a token and no env var is configured.
+ *      The agent reuses this key on subsequent boots.
+ *
+ * The on-disk format is intentionally minimal so we can detect legacy
+ * plaintext tokens during the transition: encrypted blobs are JSON objects
+ * with a top-level `__enc` discriminator. Any file without `__enc` is treated
+ * as legacy plaintext, decoded once with the legacy reader, then re-encrypted
+ * on the next write.
+ */
+import crypto from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+const KEY_ENV_VAR = "ELIZA_TOKEN_ENCRYPTION_KEY";
+const KEY_FILENAME = ".encryption-key";
+const KEY_BYTES = 32; // AES-256
+const IV_BYTES = 12; // GCM standard nonce length
+const AUTH_TAG_BYTES = 16;
+const ENVELOPE_VERSION = 1;
+const ENVELOPE_DISCRIMINATOR = "__enc";
+function decodeKeyMaterial(raw) {
+    const trimmed = raw.trim();
+    // Hex first (deterministic length check).
+    if (/^[0-9a-fA-F]+$/.test(trimmed) && trimmed.length === KEY_BYTES * 2) {
+        return Buffer.from(trimmed, "hex");
+    }
+    // Otherwise assume base64 / base64url.
+    const buf = Buffer.from(trimmed, "base64");
+    if (buf.length === KEY_BYTES) {
+        return buf;
+    }
+    throw new Error(`${KEY_ENV_VAR} must decode to exactly ${KEY_BYTES} bytes (got ${buf.length})`);
+}
+function loadOrCreateKeyFile(credentialsDir) {
+    const filePath = path.join(credentialsDir, KEY_FILENAME);
+    if (fs.existsSync(filePath)) {
+        const raw = fs.readFileSync(filePath, "utf8");
+        return decodeKeyMaterial(raw);
+    }
+    fs.mkdirSync(credentialsDir, { recursive: true, mode: 0o700 });
+    const key = crypto.randomBytes(KEY_BYTES);
+    fs.writeFileSync(filePath, key.toString("base64"), {
+        encoding: "utf8",
+        mode: 0o600,
+    });
+    return key;
+}
+/**
+ * Resolve the symmetric key for token encryption.
+ *
+ * Resolution order: env var (`ELIZA_TOKEN_ENCRYPTION_KEY`) → file at
+ * `<credentialsDir>/.encryption-key`. The file is created (with mode 0600)
+ * lazily on first call so existing deployments keep working without an env
+ * var.
+ */
+export function resolveTokenEncryptionKey(credentialsDir, env = process.env) {
+    const fromEnv = env[KEY_ENV_VAR]?.trim();
+    if (fromEnv) {
+        return decodeKeyMaterial(fromEnv);
+    }
+    return loadOrCreateKeyFile(credentialsDir);
+}
+export function encryptTokenPayload(plaintextJson, key) {
+    if (key.length !== KEY_BYTES) {
+        throw new Error(`Token encryption key must be ${KEY_BYTES} bytes (got ${key.length})`);
+    }
+    const iv = crypto.randomBytes(IV_BYTES);
+    const cipher = crypto.createCipheriv("aes-256-gcm", key, iv);
+    const ciphertext = Buffer.concat([
+        cipher.update(plaintextJson, "utf8"),
+        cipher.final(),
+    ]);
+    const authTag = cipher.getAuthTag();
+    if (authTag.length !== AUTH_TAG_BYTES) {
+        throw new Error("AES-GCM auth tag had unexpected length");
+    }
+    return {
+        [ENVELOPE_DISCRIMINATOR]: "aes-256-gcm",
+        v: ENVELOPE_VERSION,
+        iv: iv.toString("base64"),
+        tag: authTag.toString("base64"),
+        ct: ciphertext.toString("base64"),
+    };
+}
+export function decryptTokenEnvelope(envelope, key) {
+    if (envelope[ENVELOPE_DISCRIMINATOR] !== "aes-256-gcm") {
+        throw new Error("Unsupported token envelope algorithm");
+    }
+    if (envelope.v !== ENVELOPE_VERSION) {
+        throw new Error(`Unsupported token envelope version: ${envelope.v}`);
+    }
+    const iv = Buffer.from(envelope.iv, "base64");
+    const tag = Buffer.from(envelope.tag, "base64");
+    const ciphertext = Buffer.from(envelope.ct, "base64");
+    const decipher = crypto.createDecipheriv("aes-256-gcm", key, iv);
+    decipher.setAuthTag(tag);
+    const plaintext = Buffer.concat([
+        decipher.update(ciphertext),
+        decipher.final(),
+    ]);
+    return plaintext.toString("utf8");
+}
+/**
+ * Returns true when the parsed JSON value looks like an encrypted envelope
+ * (has the `__enc` discriminator). Used to detect legacy plaintext token
+ * files during the migration window.
+ */
+export function isEncryptedTokenEnvelope(value) {
+    return (typeof value === "object" &&
+        value !== null &&
+        value[ENVELOPE_DISCRIMINATOR] === "aes-256-gcm");
+}

package/apps/app-lifeops/src/lifeops/travel-booking.types.d.ts

@@ -1,4 +1,4 @@
-import type { LifeOpsCalendarEvent } from "@elizaos/shared/contracts/lifeops";
+import type { LifeOpsCalendarEvent } from "@elizaos/shared";
 import type { DuffelOffer, DuffelOrder, DuffelPayment, SearchFlightsRequest } from "./travel-adapters/duffel.js";
 export interface TravelBookingPassenger {
     readonly offerPassengerId?: string | null;

package/apps/app-lifeops/src/lifeops/travel-booking.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"travel-booking.types.d.ts","sourceRoot":"","sources":["../../../../../../../apps/app-lifeops/src/lifeops/travel-booking.types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,KAAK,EACV,WAAW,EACX,WAAW,EACX,aAAa,EACb,oBAAoB,EACrB,MAAM,6BAA6B,CAAC;AAErC,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC9C,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC,sBAAsB,CAAC,CAAC;IAC5D,QAAQ,CAAC,YAAY,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACtD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAC;CAC9C;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,aAAa,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACrD"}
+{"version":3,"file":"travel-booking.types.d.ts","sourceRoot":"","sources":["../../../../../../../apps/app-lifeops/src/lifeops/travel-booking.types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,KAAK,EACV,WAAW,EACX,WAAW,EACX,aAAa,EACb,oBAAoB,EACrB,MAAM,6BAA6B,CAAC;AAErC,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC9C,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC,sBAAsB,CAAC,CAAC;IAC5D,QAAQ,CAAC,YAAY,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACtD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAC;CAC9C;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,aAAa,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACrD"}

package/apps/app-lifeops/src/lifeops/x-managed-client.d.ts

@@ -1,4 +1,4 @@
-import type { LifeOpsConnectorSide, LifeOpsXCapability, LifeOpsXFeedType, StartLifeOpsXConnectorResponse } from "@elizaos/app-lifeops/contracts";
+import type { LifeOpsConnectorSide, LifeOpsXCapability, LifeOpsXFeedType, StartLifeOpsXConnectorResponse } from "../contracts/index.js";
 import { type ResolvedManagedGoogleCloudConfig } from "./google-managed-client.js";
 export declare class ManagedXClientError extends Error {
     readonly status: number;

package/apps/app-lifeops/src/lifeops/x-managed-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"x-managed-client.d.ts","sourceRoot":"","sources":["../../../../../../../apps/app-lifeops/src/lifeops/x-managed-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,8BAA8B,EAC/B,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,KAAK,gCAAgC,EAEtC,MAAM,4BAA4B,CAAC;AAIpC,qBAAa,mBAAoB,SAAQ,KAAK;aAE1B,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM,EAC9B,OAAO,EAAE,MAAM;CAKlB;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,EAAE,GAAG,CAAC;IACd,IAAI,EAAE,oBAAoB,CAAC;IAC3B,IAAI,EAAE,eAAe,CAAC;IACtB,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,WAAW,GAAG,cAAc,GAAG,gBAAgB,GAAG,cAAc,CAAC;IACzE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzC,mBAAmB,EAAE,kBAAkB,EAAE,CAAC;IAC1C,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EACJ,SAAS,GACT,MAAM,GACN,YAAY,GACZ,SAAS,GACT,SAAS,GACT,SAAS,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,UAAU,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzC,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,WAAW,CAAC;IACvB,MAAM,EAAE;QACN,aAAa,EAAE,MAAM,CAAC;QACtB,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,MAAM,EAAE,CAAC;QACzB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;KAChC,CAAC;IACF,QAAQ,EAAE,qBAAqB,EAAE,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,EAAE,SAAS,CAAC;IACrB,OAAO,EAAE,qBAAqB,CAAC;CAChC;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gBAAgB,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtD,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC9C,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC1C;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,WAAW,CAAC;IACvB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAsDD,qBAAa,cAAc;IAEvB,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAAZ,YAAY,GACzB,gCAAgC,GAChC,CAAC,MAAM,gCAAgC,CAAmC;IAGhF,OAAO,CAAC,SAAS;IAMjB,IAAI,UAAU,IAAI,OAAO,CAExB;IAED,OAAO,CAAC,aAAa;YAaP,OAAO;IAsBf,SAAS,CACb,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,+BAA+B,CAAC;IAiErC,cAAc,CAAC,IAAI,EAAE;QACzB,IAAI,EAAE,oBAAoB,CAAC;QAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC,8BAA8B,CAAC;IAwBrC,mBAAmB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAS9D,UAAU,CAAC,IAAI,EAAE;QACrB,IAAI,EAAE,oBAAoB,CAAC;QAC3B,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,IAAI,CAAC;KACnB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAmB3B,WAAW,CAAC,IAAI,EAAE;QACtB,IAAI,EAAE,oBAAoB,CAAC;QAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAe/B,OAAO,CAAC,IAAI,EAAE;QAClB,IAAI,EAAE,oBAAoB,CAAC;QAC3B,QAAQ,EAAE,gBAAgB,CAAC;QAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAgB3B,MAAM,CAAC,IAAI,EAAE;QACjB,IAAI,EAAE,oBAAoB,CAAC;QAC3B,aAAa,EAAE,MAAM,CAAC;QACtB,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAY7B,oBAAoB,CAAC,IAAI,EAAE;QAC/B,IAAI,EAAE,oBAAoB,CAAC;QAC3B,cAAc,EAAE,MAAM,CAAC;QACvB,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAY7B,aAAa,CAAC,IAAI,EAAE;QACxB,IAAI,EAAE,oBAAoB,CAAC;QAC3B,cAAc,EAAE,MAAM,EAAE,CAAC;QACzB,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,sBAAsB,GAAG;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;CAcjE"}
+{"version":3,"file":"x-managed-client.d.ts","sourceRoot":"","sources":["../../../../../../../apps/app-lifeops/src/lifeops/x-managed-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,8BAA8B,EAC/B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,KAAK,gCAAgC,EAEtC,MAAM,4BAA4B,CAAC;AAIpC,qBAAa,mBAAoB,SAAQ,KAAK;aAE1B,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM,EAC9B,OAAO,EAAE,MAAM;CAKlB;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,EAAE,GAAG,CAAC;IACd,IAAI,EAAE,oBAAoB,CAAC;IAC3B,IAAI,EAAE,eAAe,CAAC;IACtB,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,WAAW,GAAG,cAAc,GAAG,gBAAgB,GAAG,cAAc,CAAC;IACzE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzC,mBAAmB,EAAE,kBAAkB,EAAE,CAAC;IAC1C,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EACJ,SAAS,GACT,MAAM,GACN,YAAY,GACZ,SAAS,GACT,SAAS,GACT,SAAS,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,UAAU,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzC,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,WAAW,CAAC;IACvB,MAAM,EAAE;QACN,aAAa,EAAE,MAAM,CAAC;QACtB,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,MAAM,EAAE,CAAC;QACzB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;KAChC,CAAC;IACF,QAAQ,EAAE,qBAAqB,EAAE,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,EAAE,SAAS,CAAC;IACrB,OAAO,EAAE,qBAAqB,CAAC;CAChC;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gBAAgB,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtD,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC9C,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC1C;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,WAAW,CAAC;IACvB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAsDD,qBAAa,cAAc;IAEvB,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAAZ,YAAY,GACzB,gCAAgC,GAChC,CAAC,MAAM,gCAAgC,CAAmC;IAGhF,OAAO,CAAC,SAAS;IAMjB,IAAI,UAAU,IAAI,OAAO,CAExB;IAED,OAAO,CAAC,aAAa;YAaP,OAAO;IAsBf,SAAS,CACb,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,+BAA+B,CAAC;IAiErC,cAAc,CAAC,IAAI,EAAE;QACzB,IAAI,EAAE,oBAAoB,CAAC;QAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC,8BAA8B,CAAC;IAwBrC,mBAAmB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAS9D,UAAU,CAAC,IAAI,EAAE;QACrB,IAAI,EAAE,oBAAoB,CAAC;QAC3B,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,IAAI,CAAC;KACnB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAmB3B,WAAW,CAAC,IAAI,EAAE;QACtB,IAAI,EAAE,oBAAoB,CAAC;QAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAe/B,OAAO,CAAC,IAAI,EAAE;QAClB,IAAI,EAAE,oBAAoB,CAAC;QAC3B,QAAQ,EAAE,gBAAgB,CAAC;QAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAgB3B,MAAM,CAAC,IAAI,EAAE;QACjB,IAAI,EAAE,oBAAoB,CAAC;QAC3B,aAAa,EAAE,MAAM,CAAC;QACtB,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAY7B,oBAAoB,CAAC,IAAI,EAAE;QAC/B,IAAI,EAAE,oBAAoB,CAAC;QAC3B,cAAc,EAAE,MAAM,CAAC;QACvB,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAY7B,aAAa,CAAC,IAAI,EAAE;QACxB,IAAI,EAAE,oBAAoB,CAAC;QAC3B,cAAc,EAAE,MAAM,EAAE,CAAC;QACzB,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,sBAAsB,GAAG;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;CAcjE"}

package/apps/app-lifeops/src/lifeops/x-managed-client.js

@@ -1,4 +1,4 @@
-import { LIFEOPS_X_CAPABILITIES } from "@elizaos/app-lifeops/contracts";
+import { LIFEOPS_X_CAPABILITIES } from "../contracts/index.js";
 import { resolveManagedGoogleCloudConfig, } from "./google-managed-client.js";
 const MANAGED_X_REQUEST_TIMEOUT_MS = 20_000;
 export class ManagedXClientError extends Error {

package/apps/app-lifeops/src/lifeops-route.d.ts

@@ -0,0 +1,74 @@
+/**
+ * URL-hash routing for LifeOps detail views and the cross-tab automation
+ * selection.
+ *
+ * Design: we piggyback on `window.location.hash` because the app's top-level
+ * tab router already owns the pathname (`/lifeops`, `/automations`, …). The
+ * hash is free for deep-linking to sub-entities without touching the main
+ * navigation state.
+ *
+ * Hash format: `#key=value&key=value` (query-string-in-fragment). Two
+ * namespaces live here in practice:
+ *
+ *   - `lifeops.section`    → current LifeOps section id
+ *   - `lifeops.event`      → calendar event id (implies section=calendar)
+ *   - `lifeops.message`    → inbox message id  (implies section=messages)
+ *   - `automations.trigger`→ trigger id selected on the /automations page
+ *
+ * The helpers here are pure: no DOM access. The hooks in
+ * `hooks/useLifeOpsSection.ts` and the widget row handlers call into them.
+ */
+export type LifeOpsRouteSection = "overview" | "sleep" | "screen-time" | "setup" | "reminders" | "calendar" | "messages" | "mail" | "money";
+export declare const LIFEOPS_ROUTE_SECTIONS: readonly LifeOpsRouteSection[];
+export interface LifeOpsRouteState {
+    section: LifeOpsRouteSection | null;
+    eventId: string | null;
+    messageId: string | null;
+}
+export interface AutomationsRouteState {
+    triggerId: string | null;
+}
+/**
+ * Parse `#key=value&…` into a plain map. Leading `#` is optional.
+ * Tolerates empty / malformed input by returning an empty map.
+ */
+export declare function parseHashParams(hash: string): Record<string, string>;
+/**
+ * Serialize a map back into a `#key=value&…` hash. Empty / null values are
+ * stripped so toggling a key off removes it from the URL cleanly.
+ */
+export declare function serializeHashParams(params: Record<string, string | null | undefined>): string;
+export declare function parseLifeOpsRoute(hash: string): LifeOpsRouteState;
+export declare function parseAutomationsRoute(hash: string): AutomationsRouteState;
+/**
+ * Merge an existing hash string with a LifeOps state update. Keeps unrelated
+ * keys (so we don't wipe an `automations.trigger` when navigating inside
+ * LifeOps, and vice versa).
+ */
+export declare function buildLifeOpsHash(existingHash: string, next: {
+    section?: LifeOpsRouteSection | null;
+    eventId?: string | null;
+    messageId?: string | null;
+}): string;
+export declare function buildAutomationsHash(existingHash: string, next: {
+    triggerId?: string | null;
+}): string;
+export declare function primeLifeOpsEvent<T extends {
+    id: string;
+}>(event: T): void;
+export declare function getPrimedLifeOpsEvent<T extends {
+    id: string;
+}>(id: string): T | null;
+export declare function primeLifeOpsMessage<T extends {
+    id: string;
+}>(message: T): void;
+export declare function getPrimedLifeOpsMessage<T extends {
+    id: string;
+}>(id: string): T | null;
+export declare function primeAutomationsTrigger<T extends {
+    id: string;
+}>(trigger: T): void;
+export declare function getPrimedAutomationsTrigger<T extends {
+    id: string;
+}>(id: string): T | null;
+//# sourceMappingURL=lifeops-route.d.ts.map

package/apps/app-lifeops/src/lifeops-route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifeops-route.d.ts","sourceRoot":"","sources":["../../../../../../apps/app-lifeops/src/lifeops-route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,MAAM,mBAAmB,GAC3B,UAAU,GACV,OAAO,GACP,aAAa,GACb,OAAO,GACP,WAAW,GACX,UAAU,GACV,UAAU,GACV,MAAM,GACN,OAAO,CAAC;AAEZ,eAAO,MAAM,sBAAsB,EAAE,SAAS,mBAAmB,EAUvD,CAAC;AAEX,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACpC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAcD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAiBpE;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,GAChD,MAAM,CAOR;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAWjE;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,qBAAqB,CAIzE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE;IACJ,OAAO,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACrC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,GACA,MAAM,CAeR;AAED,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAClC,MAAM,CAOR;AA+DD,wBAAgB,iBAAiB,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAE1E;AACD,wBAAgB,qBAAqB,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EAC5D,EAAE,EAAE,MAAM,GACT,CAAC,GAAG,IAAI,CAEV;AAED,wBAAgB,mBAAmB,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EAC1D,OAAO,EAAE,CAAC,GACT,IAAI,CAEN;AACD,wBAAgB,uBAAuB,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EAC9D,EAAE,EAAE,MAAM,GACT,CAAC,GAAG,IAAI,CAEV;AAED,wBAAgB,uBAAuB,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EAC9D,OAAO,EAAE,CAAC,GACT,IAAI,CAEN;AACD,wBAAgB,2BAA2B,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EAClE,EAAE,EAAE,MAAM,GACT,CAAC,GAAG,IAAI,CAEV"}

package/apps/app-lifeops/src/lifeops-route.js

@@ -0,0 +1,204 @@
+/**
+ * URL-hash routing for LifeOps detail views and the cross-tab automation
+ * selection.
+ *
+ * Design: we piggyback on `window.location.hash` because the app's top-level
+ * tab router already owns the pathname (`/lifeops`, `/automations`, …). The
+ * hash is free for deep-linking to sub-entities without touching the main
+ * navigation state.
+ *
+ * Hash format: `#key=value&key=value` (query-string-in-fragment). Two
+ * namespaces live here in practice:
+ *
+ *   - `lifeops.section`    → current LifeOps section id
+ *   - `lifeops.event`      → calendar event id (implies section=calendar)
+ *   - `lifeops.message`    → inbox message id  (implies section=messages)
+ *   - `automations.trigger`→ trigger id selected on the /automations page
+ *
+ * The helpers here are pure: no DOM access. The hooks in
+ * `hooks/useLifeOpsSection.ts` and the widget row handlers call into them.
+ */
+export const LIFEOPS_ROUTE_SECTIONS = [
+    "overview",
+    "sleep",
+    "screen-time",
+    "setup",
+    "reminders",
+    "calendar",
+    "messages",
+    "mail",
+    "money",
+];
+const LIFEOPS_SECTION_KEY = "lifeops.section";
+const LIFEOPS_EVENT_KEY = "lifeops.event";
+const LIFEOPS_MESSAGE_KEY = "lifeops.message";
+const AUTOMATIONS_TRIGGER_KEY = "automations.trigger";
+function isSection(value) {
+    return (value !== null &&
+        LIFEOPS_ROUTE_SECTIONS.includes(value));
+}
+/**
+ * Parse `#key=value&…` into a plain map. Leading `#` is optional.
+ * Tolerates empty / malformed input by returning an empty map.
+ */
+export function parseHashParams(hash) {
+    const raw = hash.startsWith("#") ? hash.slice(1) : hash;
+    if (!raw)
+        return {};
+    const result = {};
+    for (const chunk of raw.split("&")) {
+        if (!chunk)
+            continue;
+        const eq = chunk.indexOf("=");
+        const key = eq >= 0 ? chunk.slice(0, eq) : chunk;
+        const value = eq >= 0 ? chunk.slice(eq + 1) : "";
+        if (!key)
+            continue;
+        try {
+            result[decodeURIComponent(key)] = decodeURIComponent(value);
+        }
+        catch {
+            // Skip malformed encodings silently.
+        }
+    }
+    return result;
+}
+/**
+ * Serialize a map back into a `#key=value&…` hash. Empty / null values are
+ * stripped so toggling a key off removes it from the URL cleanly.
+ */
+export function serializeHashParams(params) {
+    const pairs = [];
+    for (const [key, value] of Object.entries(params)) {
+        if (value === null || value === undefined || value === "")
+            continue;
+        pairs.push(`${encodeURIComponent(key)}=${encodeURIComponent(value)}`);
+    }
+    return pairs.length > 0 ? `#${pairs.join("&")}` : "";
+}
+export function parseLifeOpsRoute(hash) {
+    const params = parseHashParams(hash);
+    const rawSection = params[LIFEOPS_SECTION_KEY] ?? null;
+    const section = isSection(rawSection) ? rawSection : null;
+    const eventId = params[LIFEOPS_EVENT_KEY] || null;
+    const messageId = params[LIFEOPS_MESSAGE_KEY] || null;
+    // Intentionally permissive: an `lifeops.event=<id>` without a matching
+    // section implies `calendar`, and `lifeops.message=<id>` implies `messages`.
+    // The hook derives that after parsing; the route itself just reports what
+    // the hash literally said.
+    return { section, eventId, messageId };
+}
+export function parseAutomationsRoute(hash) {
+    const params = parseHashParams(hash);
+    const triggerId = params[AUTOMATIONS_TRIGGER_KEY] || null;
+    return { triggerId };
+}
+/**
+ * Merge an existing hash string with a LifeOps state update. Keeps unrelated
+ * keys (so we don't wipe an `automations.trigger` when navigating inside
+ * LifeOps, and vice versa).
+ */
+export function buildLifeOpsHash(existingHash, next) {
+    const params = parseHashParams(existingHash);
+    if (next.section !== undefined) {
+        if (next.section === null)
+            delete params[LIFEOPS_SECTION_KEY];
+        else
+            params[LIFEOPS_SECTION_KEY] = next.section;
+    }
+    if (next.eventId !== undefined) {
+        if (next.eventId === null)
+            delete params[LIFEOPS_EVENT_KEY];
+        else
+            params[LIFEOPS_EVENT_KEY] = next.eventId;
+    }
+    if (next.messageId !== undefined) {
+        if (next.messageId === null)
+            delete params[LIFEOPS_MESSAGE_KEY];
+        else
+            params[LIFEOPS_MESSAGE_KEY] = next.messageId;
+    }
+    return serializeHashParams(params);
+}
+export function buildAutomationsHash(existingHash, next) {
+    const params = parseHashParams(existingHash);
+    if (next.triggerId !== undefined) {
+        if (next.triggerId === null)
+            delete params[AUTOMATIONS_TRIGGER_KEY];
+        else
+            params[AUTOMATIONS_TRIGGER_KEY] = next.triggerId;
+    }
+    return serializeHashParams(params);
+}
+// ── Prime cache ──────────────────────────────────────────────────────────
+//
+// When a user clicks a row in the chat-sidebar widget, we already have the
+// row payload in hand. The detail view that opens via URL hash does not
+// share a React context with the widget (it lives inside LifeOpsPageView,
+// the widget lives in the app's right rail), so we drop the row into a
+// small module-level cache. The detail view pulls it for instant first
+// paint and then still refetches the batch endpoint to stay live.
+//
+// Stored values are light (≤ a few KB), and the cache is pruned both by
+// TTL (unused rows expire after 60 s) and by LRU cap. The cache is a
+// best-effort hint — detail views MUST render correctly even if the cache
+// miss (e.g. the user deep-linked).
+const PRIME_TTL_MS = 60_000;
+const PRIME_MAX_ENTRIES = 32;
+function primeCache() {
+    const store = new Map();
+    function prune() {
+        const now = Date.now();
+        for (const [id, row] of store) {
+            if (now - row.storedAt > PRIME_TTL_MS)
+                store.delete(id);
+        }
+        while (store.size > PRIME_MAX_ENTRIES) {
+            const oldest = store.keys().next().value;
+            if (oldest === undefined)
+                break;
+            store.delete(oldest);
+        }
+    }
+    return {
+        set(id, value) {
+            if (!id)
+                return;
+            store.set(id, { value, storedAt: Date.now() });
+            prune();
+        },
+        get(id) {
+            if (!id)
+                return null;
+            const entry = store.get(id);
+            if (!entry)
+                return null;
+            if (Date.now() - entry.storedAt > PRIME_TTL_MS) {
+                store.delete(id);
+                return null;
+            }
+            return entry.value;
+        },
+    };
+}
+const EVENT_CACHE = primeCache();
+const MESSAGE_CACHE = primeCache();
+const TRIGGER_CACHE = primeCache();
+export function primeLifeOpsEvent(event) {
+    EVENT_CACHE.set(event.id, event);
+}
+export function getPrimedLifeOpsEvent(id) {
+    return EVENT_CACHE.get(id) ?? null;
+}
+export function primeLifeOpsMessage(message) {
+    MESSAGE_CACHE.set(message.id, message);
+}
+export function getPrimedLifeOpsMessage(id) {
+    return MESSAGE_CACHE.get(id) ?? null;
+}
+export function primeAutomationsTrigger(trigger) {
+    TRIGGER_CACHE.set(trigger.id, trigger);
+}
+export function getPrimedAutomationsTrigger(id) {
+    return TRIGGER_CACHE.get(id) ?? null;
+}

package/apps/app-lifeops/src/platform/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./lifeops-github.js";
+//# sourceMappingURL=index.d.ts.map

package/apps/app-lifeops/src/platform/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../apps/app-lifeops/src/platform/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC"}

package/apps/app-lifeops/src/platform/index.js

@@ -0,0 +1 @@
+export * from "./lifeops-github.js";

package/apps/app-lifeops/src/platform/lifeops-github.d.ts

@@ -0,0 +1,15 @@
+import { type LifeOpsGithubCallbackDetail } from "../events/index.js";
+export declare const LIFEOPS_GITHUB_POST_MESSAGE_TYPE = "elizaos-lifeops-github-complete";
+declare global {
+    interface Window {
+        __ELIZAOS_LIFEOPS_GITHUB_CALLBACK_QUEUE__?: LifeOpsGithubCallbackDetail[];
+    }
+}
+export declare function readLifeOpsGithubCallbackFromWindowMessage(value: unknown): LifeOpsGithubCallbackDetail | null;
+export declare function readLifeOpsGithubCallbackFromUrl(url: string): LifeOpsGithubCallbackDetail | null;
+export declare function queueLifeOpsGithubCallback(detail: LifeOpsGithubCallbackDetail): void;
+export declare function consumeQueuedLifeOpsGithubCallback(detail: LifeOpsGithubCallbackDetail): void;
+export declare function drainLifeOpsGithubCallbacks(): LifeOpsGithubCallbackDetail[];
+export declare function dispatchLifeOpsGithubCallbackFromWindowMessage(value: unknown): boolean;
+export declare function dispatchQueuedLifeOpsGithubCallbackFromUrl(url: string): boolean;
+//# sourceMappingURL=lifeops-github.d.ts.map

package/apps/app-lifeops/src/platform/lifeops-github.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifeops-github.d.ts","sourceRoot":"","sources":["../../../../../../../apps/app-lifeops/src/platform/lifeops-github.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,2BAA2B,EACjC,MAAM,oBAAoB,CAAC;AAE5B,eAAO,MAAM,gCAAgC,oCACV,CAAC;AAEpC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,MAAM;QACd,yCAAyC,CAAC,EAAE,2BAA2B,EAAE,CAAC;KAC3E;CACF;AAwED,wBAAgB,0CAA0C,CACxD,KAAK,EAAE,OAAO,GACb,2BAA2B,GAAG,IAAI,CASpC;AAED,wBAAgB,gCAAgC,CAC9C,GAAG,EAAE,MAAM,GACV,2BAA2B,GAAG,IAAI,CA2BpC;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,2BAA2B,GAClC,IAAI,CAKN;AAED,wBAAgB,kCAAkC,CAChD,MAAM,EAAE,2BAA2B,GAClC,IAAI,CAQN;AAED,wBAAgB,2BAA2B,IAAI,2BAA2B,EAAE,CAO3E;AAED,wBAAgB,8CAA8C,CAC5D,KAAK,EAAE,OAAO,GACb,OAAO,CAOT;AAED,wBAAgB,0CAA0C,CACxD,GAAG,EAAE,MAAM,GACV,OAAO,CAQT"}