@elizaos/agent 2.0.0-alpha.358 → 2.0.0-alpha.376

package/packages/agent/src/actions/workflow/delete-workflow.js

@@ -0,0 +1,100 @@
+/**
+ * DELETE_WORKFLOW action — removes an n8n workflow by id.
+ *
+ * Mirrors the AutomationsView handleDeleteWorkflow handler, which calls
+ * DELETE /api/n8n/workflows/:id. Validates the workflow exists before
+ * destructively deleting. Attached schedules are NOT cascaded by this action
+ * — use DELETE_TRIGGER_TASK with cascade=true for that behavior.
+ */
+import { logger } from "@elizaos/core";
+import { hasOwnerAccess } from "../../security/access.js";
+import { fetchJson, findWorkflowById, getApiBase } from "./api.js";
+const DELETE_WORKFLOW_ACTION = "DELETE_WORKFLOW";
+function readString(value) {
+    return typeof value === "string" && value.trim() ? value.trim() : undefined;
+}
+export const deleteWorkflowAction = {
+    name: DELETE_WORKFLOW_ACTION,
+    similes: [
+        "DELETE_N8N_WORKFLOW",
+        "REMOVE_WORKFLOW",
+        "DESTROY_WORKFLOW",
+        "DELETE_AUTOMATION_WORKFLOW",
+        "REMOVE_N8N_WORKFLOW",
+    ],
+    description: "Permanently delete an n8n workflow by id. Use when the user wants to remove a workflow entirely. Attached trigger schedules are not cascaded — handle those separately.",
+    validate: async (runtime, message) => hasOwnerAccess(runtime, message),
+    handler: async (runtime, message, _state, options, callback) => {
+        if (!(await hasOwnerAccess(runtime, message))) {
+            return {
+                success: false,
+                text: "Permission denied: only the owner may delete workflows.",
+            };
+        }
+        const params = (options?.parameters ?? {});
+        const workflowId = readString(params.workflowId);
+        if (!workflowId) {
+            return { success: false, text: "workflowId parameter is required." };
+        }
+        const existing = await findWorkflowById(workflowId);
+        if (!existing) {
+            return { success: false, text: `Workflow not found: ${workflowId}` };
+        }
+        const base = getApiBase();
+        const result = await fetchJson(`${base}/api/n8n/workflows/${encodeURIComponent(workflowId)}`, { method: "DELETE" });
+        if (!result.ok) {
+            const errMsg = result.raw || `Failed to delete workflow (${result.status})`;
+            logger.warn(`[delete-workflow] failed: ${errMsg}`);
+            return { success: false, text: errMsg };
+        }
+        const successText = `Deleted workflow "${existing.name}".`;
+        if (callback) {
+            await callback({
+                text: successText,
+                action: DELETE_WORKFLOW_ACTION,
+                metadata: { workflowId, workflowName: existing.name },
+            });
+        }
+        return {
+            success: true,
+            text: successText,
+            data: { workflowId, workflowName: existing.name },
+        };
+    },
+    parameters: [
+        {
+            name: "workflowId",
+            description: "ID of the n8n workflow to delete.",
+            required: true,
+            schema: { type: "string" },
+        },
+    ],
+    examples: [
+        [
+            {
+                name: "{{name1}}",
+                content: { text: "Delete the Linear close → Slack workflow." },
+            },
+            {
+                name: "{{agentName}}",
+                content: {
+                    text: 'Deleted workflow "Linear close → Slack post".',
+                    action: DELETE_WORKFLOW_ACTION,
+                },
+            },
+        ],
+        [
+            {
+                name: "{{name1}}",
+                content: { text: "Remove that GitHub stars summary workflow." },
+            },
+            {
+                name: "{{agentName}}",
+                content: {
+                    text: 'Deleted workflow "GitHub stars morning summary".',
+                    action: DELETE_WORKFLOW_ACTION,
+                },
+            },
+        ],
+    ],
+};

package/packages/agent/src/actions/workflow/index.d.ts

@@ -0,0 +1,5 @@
+export { createWorkflowAction } from "./create-workflow.js";
+export { deleteWorkflowAction } from "./delete-workflow.js";
+export { promoteTaskToWorkflowAction } from "./promote-task-to-workflow.js";
+export { toggleWorkflowActiveAction } from "./toggle-workflow-active.js";
+//# sourceMappingURL=index.d.ts.map

package/packages/agent/src/actions/workflow/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/actions/workflow/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC"}

package/packages/agent/src/actions/workflow/index.js

@@ -0,0 +1,4 @@
+export { createWorkflowAction } from "./create-workflow.js";
+export { deleteWorkflowAction } from "./delete-workflow.js";
+export { promoteTaskToWorkflowAction } from "./promote-task-to-workflow.js";
+export { toggleWorkflowActiveAction } from "./toggle-workflow-active.js";

package/packages/agent/src/actions/workflow/promote-task-to-workflow.d.ts

@@ -0,0 +1,12 @@
+/**
+ * PROMOTE_TASK_TO_WORKFLOW action — generates an n8n workflow from an
+ * existing task or trigger.
+ *
+ * Mirrors AutomationsView.promoteAutomationToWorkflow, which seeds
+ * createWorkflowDraft with a compilation prompt built from the task's
+ * coordinator instructions and schedule. Here we build the same prompt and
+ * call POST /api/n8n/workflows/generate directly.
+ */
+import type { Action } from "@elizaos/core";
+export declare const promoteTaskToWorkflowAction: Action;
+//# sourceMappingURL=promote-task-to-workflow.d.ts.map

package/packages/agent/src/actions/workflow/promote-task-to-workflow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"promote-task-to-workflow.d.ts","sourceRoot":"","sources":["../../../../../../src/actions/workflow/promote-task-to-workflow.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,MAAM,EAUP,MAAM,eAAe,CAAC;AAkEvB,eAAO,MAAM,2BAA2B,EAAE,MAwHzC,CAAC"}

package/packages/agent/src/actions/workflow/promote-task-to-workflow.js

@@ -0,0 +1,154 @@
+/**
+ * PROMOTE_TASK_TO_WORKFLOW action — generates an n8n workflow from an
+ * existing task or trigger.
+ *
+ * Mirrors AutomationsView.promoteAutomationToWorkflow, which seeds
+ * createWorkflowDraft with a compilation prompt built from the task's
+ * coordinator instructions and schedule. Here we build the same prompt and
+ * call POST /api/n8n/workflows/generate directly.
+ */
+import { logger } from "@elizaos/core";
+import { hasOwnerAccess } from "../../security/access.js";
+import { readTriggerConfig, taskToTriggerSummary, } from "../../triggers/runtime.js";
+import { fetchJson, getApiBase } from "./api.js";
+const PROMOTE_TASK_TO_WORKFLOW_ACTION = "PROMOTE_TASK_TO_WORKFLOW";
+function readString(value) {
+    return typeof value === "string" && value.trim() ? value.trim() : undefined;
+}
+function buildSchedulePrompt(trigger) {
+    if (trigger.triggerType === "interval") {
+        return `Schedule: every ${trigger.intervalMs ?? 0} ms.`;
+    }
+    if (trigger.triggerType === "once") {
+        return `One-shot at ${trigger.scheduledAtIso ?? "unknown time"}.`;
+    }
+    if (trigger.triggerType === "cron") {
+        return `Cron: ${trigger.cronExpression ?? "unknown"}.`;
+    }
+    if (trigger.triggerType === "event") {
+        return `Event: ${trigger.eventKind ?? "event"}.`;
+    }
+    return `Schedule type: ${trigger.triggerType}.`;
+}
+function buildPromotePrompt(task, trigger, summary) {
+    const title = (summary?.displayName ??
+        task.name ??
+        "Promoted automation").trim();
+    const lines = [
+        "Compile this coordinator automation into an n8n workflow.",
+        `Automation title: ${title}`,
+        `Description: ${task.description?.trim() || "No additional description provided."}`,
+        "Keep the workflow in this dedicated automation room.",
+        "Use runtime actions and providers as workflow nodes when they fit the job.",
+        "Use owner-scoped LifeOps nodes for Gmail, Calendar, Signal, Telegram, Discord, and GitHub when they are set up. If not, request the required setup or keys.",
+    ];
+    if (trigger) {
+        lines.push(`Coordinator instructions: ${trigger.instructions}`);
+        lines.push(buildSchedulePrompt(trigger));
+    }
+    lines.push("Ask follow-up questions only when workflow intent is genuinely ambiguous.");
+    return { prompt: lines.join("\n"), title: `${title} Workflow` };
+}
+export const promoteTaskToWorkflowAction = {
+    name: PROMOTE_TASK_TO_WORKFLOW_ACTION,
+    similes: [
+        "PROMOTE_TASK",
+        "PROMOTE_TO_WORKFLOW",
+        "COMPILE_TO_WORKFLOW",
+        "COMPILE_TASK_TO_WORKFLOW",
+        "CONVERT_TASK_TO_WORKFLOW",
+        "TASK_TO_WORKFLOW",
+        "PROMOTE_AUTOMATION",
+    ],
+    description: "Promote an existing task or trigger into a full n8n workflow. Builds a compilation prompt from the task's instructions and schedule, then generates a new workflow.",
+    validate: async (runtime, message) => hasOwnerAccess(runtime, message),
+    handler: async (runtime, message, _state, options, callback) => {
+        if (!(await hasOwnerAccess(runtime, message))) {
+            return {
+                success: false,
+                text: "Permission denied: only the owner may promote tasks to workflows.",
+            };
+        }
+        const params = (options?.parameters ?? {});
+        const taskId = readString(params.taskId);
+        if (!taskId) {
+            return { success: false, text: "taskId parameter is required." };
+        }
+        const task = await runtime.getTask(taskId);
+        if (!task?.id) {
+            return { success: false, text: `Task not found: ${taskId}` };
+        }
+        const trigger = readTriggerConfig(task);
+        const summary = taskToTriggerSummary(task);
+        const { prompt, title } = buildPromotePrompt(task, trigger, summary);
+        const base = getApiBase();
+        const result = await fetchJson(`${base}/api/n8n/workflows/generate`, {
+            method: "POST",
+            body: JSON.stringify({ prompt, name: title }),
+        });
+        if (!result.ok || !result.data?.id) {
+            const errMsg = result.raw || `Failed to generate workflow (${result.status})`;
+            logger.warn(`[promote-task-to-workflow] failed: ${errMsg}`);
+            return { success: false, text: errMsg };
+        }
+        const workflow = result.data;
+        const successText = `Promoted "${task.name}" to workflow "${workflow.name}".`;
+        if (callback) {
+            await callback({
+                text: successText,
+                action: PROMOTE_TASK_TO_WORKFLOW_ACTION,
+                metadata: {
+                    taskId,
+                    workflowId: workflow.id,
+                    workflowName: workflow.name,
+                },
+            });
+        }
+        return {
+            success: true,
+            text: successText,
+            values: { taskId, workflowId: workflow.id, workflowName: workflow.name },
+            data: { task: { id: task.id, name: task.name }, workflow },
+        };
+    },
+    parameters: [
+        {
+            name: "taskId",
+            description: "ID of the task or trigger to compile into a workflow.",
+            required: true,
+            schema: { type: "string" },
+        },
+    ],
+    examples: [
+        [
+            {
+                name: "{{name1}}",
+                content: {
+                    text: "Promote my morning standup task into a real workflow.",
+                },
+            },
+            {
+                name: "{{agentName}}",
+                content: {
+                    text: 'Promoted "Morning standup" to workflow "Morning standup Workflow".',
+                    action: PROMOTE_TASK_TO_WORKFLOW_ACTION,
+                },
+            },
+        ],
+        [
+            {
+                name: "{{name1}}",
+                content: {
+                    text: "Compile that inbox sweep trigger into an n8n workflow.",
+                },
+            },
+            {
+                name: "{{agentName}}",
+                content: {
+                    text: 'Promoted "Inbox sweep" to workflow "Inbox sweep Workflow".',
+                    action: PROMOTE_TASK_TO_WORKFLOW_ACTION,
+                },
+            },
+        ],
+    ],
+};

package/packages/agent/src/actions/workflow/toggle-workflow-active.d.ts

@@ -0,0 +1,10 @@
+/**
+ * TOGGLE_WORKFLOW_ACTIVE action — activates or deactivates an n8n workflow.
+ *
+ * Mirrors AutomationsView.handleToggleWorkflowActive, which calls
+ * POST /api/n8n/workflows/:id/activate or .../deactivate based on desired
+ * state.
+ */
+import type { Action } from "@elizaos/core";
+export declare const toggleWorkflowActiveAction: Action;
+//# sourceMappingURL=toggle-workflow-active.d.ts.map

package/packages/agent/src/actions/workflow/toggle-workflow-active.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toggle-workflow-active.d.ts","sourceRoot":"","sources":["../../../../../../src/actions/workflow/toggle-workflow-active.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EACV,MAAM,EAQP,MAAM,eAAe,CAAC;AA+BvB,eAAO,MAAM,0BAA0B,EAAE,MAyHxC,CAAC"}

package/packages/agent/src/actions/workflow/toggle-workflow-active.js

@@ -0,0 +1,132 @@
+/**
+ * TOGGLE_WORKFLOW_ACTIVE action — activates or deactivates an n8n workflow.
+ *
+ * Mirrors AutomationsView.handleToggleWorkflowActive, which calls
+ * POST /api/n8n/workflows/:id/activate or .../deactivate based on desired
+ * state.
+ */
+import { logger } from "@elizaos/core";
+import { hasOwnerAccess } from "../../security/access.js";
+import { fetchJson, findWorkflowById, getApiBase, } from "./api.js";
+const TOGGLE_WORKFLOW_ACTIVE_ACTION = "TOGGLE_WORKFLOW_ACTIVE";
+function readString(value) {
+    return typeof value === "string" && value.trim() ? value.trim() : undefined;
+}
+function readBoolean(value) {
+    if (typeof value === "boolean")
+        return value;
+    if (typeof value === "string") {
+        const v = value.trim().toLowerCase();
+        if (v === "true" || v === "1" || v === "yes" || v === "on")
+            return true;
+        if (v === "false" || v === "0" || v === "no" || v === "off")
+            return false;
+    }
+    return undefined;
+}
+export const toggleWorkflowActiveAction = {
+    name: TOGGLE_WORKFLOW_ACTIVE_ACTION,
+    similes: [
+        "ACTIVATE_WORKFLOW",
+        "DEACTIVATE_WORKFLOW",
+        "ENABLE_WORKFLOW",
+        "DISABLE_WORKFLOW",
+        "PAUSE_WORKFLOW",
+        "RESUME_WORKFLOW",
+        "ACTIVATE_N8N_WORKFLOW",
+        "DEACTIVATE_N8N_WORKFLOW",
+    ],
+    description: "Activate or deactivate an n8n workflow by id. Set active=true to enable, active=false to pause it without deleting.",
+    validate: async (runtime, message) => hasOwnerAccess(runtime, message),
+    handler: async (runtime, message, _state, options, callback) => {
+        if (!(await hasOwnerAccess(runtime, message))) {
+            return {
+                success: false,
+                text: "Permission denied: only the owner may toggle workflows.",
+            };
+        }
+        const params = (options?.parameters ?? {});
+        const workflowId = readString(params.workflowId);
+        const active = readBoolean(params.active);
+        if (!workflowId) {
+            return { success: false, text: "workflowId parameter is required." };
+        }
+        if (active === undefined) {
+            return {
+                success: false,
+                text: "active parameter is required (true or false).",
+            };
+        }
+        const existing = await findWorkflowById(workflowId);
+        if (!existing) {
+            return { success: false, text: `Workflow not found: ${workflowId}` };
+        }
+        const base = getApiBase();
+        const verb = active ? "activate" : "deactivate";
+        const result = await fetchJson(`${base}/api/n8n/workflows/${encodeURIComponent(workflowId)}/${verb}`, { method: "POST" });
+        if (!result.ok || !result.data) {
+            const errMsg = result.raw || `Failed to ${verb} workflow (${result.status})`;
+            logger.warn(`[toggle-workflow-active] failed: ${errMsg}`);
+            return { success: false, text: errMsg };
+        }
+        const workflow = result.data;
+        const successText = active
+            ? `Activated workflow "${workflow.name}".`
+            : `Deactivated workflow "${workflow.name}".`;
+        if (callback) {
+            await callback({
+                text: successText,
+                action: TOGGLE_WORKFLOW_ACTIVE_ACTION,
+                metadata: { workflowId, active },
+            });
+        }
+        return {
+            success: true,
+            text: successText,
+            values: { workflowId, active },
+            data: { workflow },
+        };
+    },
+    parameters: [
+        {
+            name: "workflowId",
+            description: "ID of the n8n workflow to toggle.",
+            required: true,
+            schema: { type: "string" },
+        },
+        {
+            name: "active",
+            description: "Target state: true to activate, false to deactivate.",
+            required: true,
+            schema: { type: "boolean" },
+        },
+    ],
+    examples: [
+        [
+            {
+                name: "{{name1}}",
+                content: { text: "Activate the GitHub stars workflow." },
+            },
+            {
+                name: "{{agentName}}",
+                content: {
+                    text: 'Activated workflow "GitHub stars morning summary".',
+                    action: TOGGLE_WORKFLOW_ACTIVE_ACTION,
+                },
+            },
+        ],
+        [
+            {
+                name: "{{name1}}",
+                content: { text: "Pause the Linear → Slack workflow for now." },
+            },
+            {
+                name: "{{agentName}}",
+                content: {
+                    text: 'Deactivated workflow "Linear close → Slack post".',
+                    action: TOGGLE_WORKFLOW_ACTIVE_ACTION,
+                },
+            },
+        ],
+    ],
+};

package/packages/agent/src/api/agent-admin-routes.js

@@ -1,5 +1,5 @@
 import path from "node:path";
-import { getDefaultStylePreset, normalizeCharacterLanguage, } from "@elizaos/shared/onboarding-presets";
+import { getDefaultStylePreset, normalizeCharacterLanguage, } from "@elizaos/shared";
 import { loadElizaConfig, saveElizaConfig } from "../config/config.js";
 import { resolveUserPath } from "../config/paths.js";
 import { detectRuntimeModel } from "./agent-model.js";

package/packages/agent/src/api/apps-routes.d.ts

@@ -14,12 +14,19 @@ export interface AppManagerLike {
     recordHeartbeat: (runId: string) => unknown;
     getInfo: (pluginManager: PluginManagerLike, name: string) => Promise<unknown>;
 }
+export interface FavoriteAppsStore {
+    /** Read the persisted favorites list. Returns a fresh array. */
+    read: () => string[];
+    /** Replace the persisted favorites list. Implementation must persist. */
+    write: (apps: string[]) => string[];
+}
 export interface AppsRouteContext extends RouteRequestMeta, Pick<RouteHelpers, "readJsonBody" | "json" | "error"> {
     url: URL;
     appManager: AppManagerLike;
     getPluginManager: () => PluginManagerLike;
     parseBoundedLimit: (rawLimit: string | null, fallback?: number) => number;
     runtime: unknown | null;
+    favoriteApps?: FavoriteAppsStore;
 }
 export declare function handleAppsRoutes(ctx: AppsRouteContext): Promise<boolean>;
 //# sourceMappingURL=apps-routes.d.ts.map

package/packages/agent/src/api/apps-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apps-routes.d.ts","sourceRoot":"","sources":["../../../../../src/api/apps-routes.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAenD,OAAO,KAAK,EACV,mBAAmB,EACnB,iBAAiB,EAGlB,MAAM,qCAAqC,CAAC;AAK7C,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAwQzE,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,CAAC,aAAa,EAAE,iBAAiB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,MAAM,EAAE,CACN,aAAa,EAAE,iBAAiB,EAChC,KAAK,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,MAAM,KACX,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,aAAa,EAAE,CAAC,aAAa,EAAE,iBAAiB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,IAAI,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/D,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,IAAI,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5E,SAAS,EAAE,CACT,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,aAAa,GAAG,IAAI,KAC3B,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,EAAE,CACN,aAAa,EAAE,iBAAiB,EAChC,IAAI,EAAE,MAAM,EACZ,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,mBAAmB,KAAK,IAAI,EACpD,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,KACrB,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,IAAI,EAAE,CACJ,aAAa,EAAE,iBAAiB,EAChC,IAAI,EAAE,MAAM,EACZ,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,aAAa,GAAG,IAAI,KAC3B,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5C,OAAO,EAAE,CAAC,aAAa,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/E;AA4BD,MAAM,WAAW,gBACf,SAAQ,gBAAgB,EACtB,IAAI,CAAC,YAAY,EAAE,cAAc,GAAG,MAAM,GAAG,OAAO,CAAC;IACvD,GAAG,EAAE,GAAG,CAAC;IACT,UAAU,EAAE,cAAc,CAAC;IAC3B,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;IAC1C,iBAAiB,EAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IAC1E,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;CACzB;AAiUD,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC,OAAO,CAAC,CA2alB"}
+{"version":3,"file":"apps-routes.d.ts","sourceRoot":"","sources":["../../../../../src/api/apps-routes.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAenD,OAAO,KAAK,EACV,mBAAmB,EACnB,iBAAiB,EAGlB,MAAM,qCAAqC,CAAC;AAK7C,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAwQzE,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,CAAC,aAAa,EAAE,iBAAiB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,MAAM,EAAE,CACN,aAAa,EAAE,iBAAiB,EAChC,KAAK,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,MAAM,KACX,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,aAAa,EAAE,CAAC,aAAa,EAAE,iBAAiB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,IAAI,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/D,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,IAAI,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5E,SAAS,EAAE,CACT,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,aAAa,GAAG,IAAI,KAC3B,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,EAAE,CACN,aAAa,EAAE,iBAAiB,EAChC,IAAI,EAAE,MAAM,EACZ,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,mBAAmB,KAAK,IAAI,EACpD,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,KACrB,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,IAAI,EAAE,CACJ,aAAa,EAAE,iBAAiB,EAChC,IAAI,EAAE,MAAM,EACZ,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,aAAa,GAAG,IAAI,KAC3B,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5C,OAAO,EAAE,CAAC,aAAa,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/E;AA4BD,MAAM,WAAW,iBAAiB;IAChC,gEAAgE;IAChE,IAAI,EAAE,MAAM,MAAM,EAAE,CAAC;IACrB,yEAAyE;IACzE,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,MAAM,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,gBACf,SAAQ,gBAAgB,EACtB,IAAI,CAAC,YAAY,EAAE,cAAc,GAAG,MAAM,GAAG,OAAO,CAAC;IACvD,GAAG,EAAE,GAAG,CAAC;IACT,UAAU,EAAE,cAAc,CAAC;IAC3B,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;IAC1C,iBAAiB,EAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IAC1E,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB,YAAY,CAAC,EAAE,iBAAiB,CAAC;CAClC;AA+UD,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC,OAAO,CAAC,CAkelB"}

package/packages/agent/src/api/apps-routes.js

@@ -1,6 +1,6 @@
 import { promises as fs } from "node:fs";
 import path from "node:path";
-import { createGeneratedAppHeroSvg } from "@elizaos/shared/app-hero-art";
+import { createGeneratedAppHeroSvg } from "@elizaos/shared";
 import { hasAppInterface, packageNameToAppDisplayName, packageNameToAppRouteSlug, } from "../contracts/apps.js";
 import { importAppRouteModule, resolveWorkspacePackageDir, } from "../services/app-package-modules.js";
 import { setOverlayAppPresence } from "../services/overlay-app-presence.js";
@@ -183,6 +183,22 @@ async function resolveAppHero(pluginManager, slug) {
     }
     return null;
 }
+function sanitizeFavoriteAppNames(value) {
+    if (!Array.isArray(value))
+        return [];
+    const seen = new Set();
+    const apps = [];
+    for (const item of value) {
+        if (typeof item !== "string")
+            continue;
+        const trimmed = item.trim();
+        if (!trimmed || seen.has(trimmed))
+            continue;
+        seen.add(trimmed);
+        apps.push(trimmed);
+    }
+    return apps;
+}
 function isNonAppRegistryPlugin(plugin) {
     return !hasAppInterface(plugin);
 }
@@ -480,6 +496,55 @@ export async function handleAppsRoutes(ctx) {
         json(res, installed);
         return true;
     }
+    if (pathname === "/api/apps/favorites") {
+        const store = ctx.favoriteApps;
+        if (!store) {
+            error(res, "Favorites store is not configured", 503);
+            return true;
+        }
+        if (method === "GET") {
+            json(res, { favoriteApps: store.read() });
+            return true;
+        }
+        if (method === "PUT") {
+            const body = await readJsonBody(req, res);
+            if (!body)
+                return true;
+            const rawName = typeof body.appName === "string" ? body.appName.trim() : "";
+            if (!rawName) {
+                error(res, "appName is required", 400);
+                return true;
+            }
+            if (typeof body.isFavorite !== "boolean") {
+                error(res, "isFavorite must be a boolean", 400);
+                return true;
+            }
+            const current = store.read();
+            const filtered = current.filter((entry) => entry !== rawName);
+            const next = body.isFavorite ? [...filtered, rawName] : filtered;
+            const persisted = store.write(sanitizeFavoriteAppNames(next));
+            json(res, { favoriteApps: persisted });
+            return true;
+        }
+    }
+    if (method === "POST" && pathname === "/api/apps/favorites/replace") {
+        const store = ctx.favoriteApps;
+        if (!store) {
+            error(res, "Favorites store is not configured", 503);
+            return true;
+        }
+        const body = await readJsonBody(req, res);
+        if (!body)
+            return true;
+        if (!Array.isArray(body.favoriteAppNames)) {
+            error(res, "favoriteAppNames must be an array of strings", 400);
+            return true;
+        }
+        const sanitized = sanitizeFavoriteAppNames(body.favoriteAppNames);
+        const persisted = store.write(sanitized);
+        json(res, { favoriteApps: persisted });
+        return true;
+    }
     if (method === "GET" && pathname === "/api/apps/runs") {
         const runs = await appManager.listRuns(runtime);
         json(res, runs);

package/packages/agent/src/api/auth-routes.js

@@ -1,5 +1,5 @@
 import crypto from "node:crypto";
-import { resolveApiToken } from "@elizaos/shared/runtime-env";
+import { resolveApiToken } from "@elizaos/shared";
 import { isCloudProvisionedContainer } from "./cloud-provisioning.js";
 function getConfiguredApiToken() {
     return resolveApiToken(process.env) ?? undefined;

package/packages/agent/src/api/binance-skill-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"binance-skill-helpers.d.ts","sourceRoot":"","sources":["../../../../../src/api/binance-skill-helpers.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAEjB,KAAK,mBAAmB,EAEzB,MAAM,eAAe,CAAC;AAkBvB,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B,CAAC;AAoCF,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,GACZ,KAAK,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,GAAG,UAAU,CAOhD;AAED,wBAAgB,+BAA+B,CAC7C,aAAa,EAAE,oBAAoB,EAAE,EACrC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,OAAO,CAWT;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAKtD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAStE;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,OAAO,EACd,YAAY,CAAC,EAAE,MAAM,GACpB,oBAAoB,EAAE,CAsDxB;AAED,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,YAAY,EACrB,OAAO,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,EAC/C,aAAa,EAAE,oBAAoB,EAAE,EACrC,kBAAkB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,EAC9C,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,EAC/D,OAAO,CAAC,EAAE;IACR,cAAc,CAAC,EAAE,MAAM,MAAM,CAAC;IAC9B,cAAc,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7C,GACA,OAAO,CAAC,IAAI,CAAC,CAyGf;AAonBD,wBAAsB,oCAAoC,CACxD,OAAO,EAAE,YAAY,EACrB,OAAO,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,EAC/C,kBAAkB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,EAC9C,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GACnC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA6HxB"}
+{"version":3,"file":"binance-skill-helpers.d.ts","sourceRoot":"","sources":["../../../../../src/api/binance-skill-helpers.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAEjB,KAAK,mBAAmB,EAEzB,MAAM,eAAe,CAAC;AAkBvB,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B,CAAC;AAoCF,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,GACZ,KAAK,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,GAAG,UAAU,CAOhD;AAED,wBAAgB,+BAA+B,CAC7C,aAAa,EAAE,oBAAoB,EAAE,EACrC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,OAAO,CAWT;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAKtD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUtE;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,OAAO,EACd,YAAY,CAAC,EAAE,MAAM,GACpB,oBAAoB,EAAE,CAyDxB;AAED,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,YAAY,EACrB,OAAO,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,EAC/C,aAAa,EAAE,oBAAoB,EAAE,EACrC,kBAAkB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,EAC9C,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,EAC/D,OAAO,CAAC,EAAE;IACR,cAAc,CAAC,EAAE,MAAM,MAAM,CAAC;IAC9B,cAAc,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7C,GACA,OAAO,CAAC,IAAI,CAAC,CAyGf;AAunBD,wBAAsB,oCAAoC,CACxD,OAAO,EAAE,YAAY,EACrB,OAAO,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,EAC/C,kBAAkB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,EAC9C,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GACnC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA6HxB"}

package/packages/agent/src/api/binance-skill-helpers.js

@@ -68,7 +68,8 @@ export function isBalanceIntent(input) {
  */
 export function extractXmlParams(block) {
     const params = {};
-    const pairs = block.matchAll(/<([A-Za-z_][A-Za-z0-9_-]*)>\s*([^<]+?)\s*<\/\1>/g);
+    const safeBlock = block.length > 100_000 ? block.slice(0, 100_000) : block;
+    const pairs = safeBlock.matchAll(/<([A-Za-z_][A-Za-z0-9_-]*)>\s*([^<]+?)\s*<\/\1>/g);
     for (const [, key, val] of pairs) {
         params[key] = val.trim();
     }
@@ -107,11 +108,12 @@ export function parseFallbackActionBlocks(value, responseText) {
             continue;
         }
         for (const [, block = ""] of xmlActionMatches) {
-            const nameMatch = block.match(/<name>\s*([A-Za-z0-9_]+)\s*<\/name>/i);
+            const safeBlock = block.length > 100_000 ? block.slice(0, 100_000) : block;
+            const nameMatch = safeBlock.match(/<name>\s*([A-Za-z0-9_]+)\s*<\/name>/i);
             if (!nameMatch)
                 continue;
             const params = {};
-            const paramsMatch = block.match(/<params>([\s\S]*?)<\/params>/i);
+            const paramsMatch = safeBlock.match(/<params>([\s\S]*?)<\/params>/i);
             if (paramsMatch?.[1]) {
                 Object.assign(params, extractXmlParams(paramsMatch[1]));
             }
@@ -340,6 +342,7 @@ function extractDirectBinanceSearchKeyword(userText) {
     const quoted = extractQuotedUserText(userText);
     if (quoted)
         return quoted;
+    const safeText = userText.length > 10_000 ? userText.slice(0, 10_000) : userText;
     const patterns = [
         /\bsearch(?: for)?\s+(.+?)(?:\s+on\s+(?:bsc|bnb|solana|sol|base|eth|ethereum)\b|$)/i,
         /\bfind\s+(.+?)(?:\s+on\s+(?:bsc|bnb|solana|sol|base|eth|ethereum)\b|$)/i,
@@ -347,12 +350,12 @@ function extractDirectBinanceSearchKeyword(userText) {
         /\bfor\s+(.+?)(?:\s+on\s+(?:bsc|bnb|solana|sol|base|eth|ethereum)\b|$)/i,
     ];
     for (const pattern of patterns) {
-        const match = userText.match(pattern);
+        const match = safeText.match(pattern);
         const value = match?.[1]?.trim();
         if (value)
             return value.replace(/\s+/g, " ").trim();
     }
-    const cleaned = userText
+    const cleaned = safeText
         .replace(/\b(binance-[a-z0-9-]+)\b/gi, " ")
         .replace(/\b(use|run|show|tell|give|fetch|pull|get|search|find|lookup|look up|query|token|info|market|data|detail|details|price|please|me|and)\b/gi, " ")
         .replace(/\b(on|in)\s+(bsc|bnb|solana|sol|base|eth|ethereum)\b/gi, " ")

package/packages/agent/src/api/bug-report-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bug-report-routes.d.ts","sourceRoot":"","sources":["../../../../../src/api/bug-report-routes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,eAAO,MAAM,uBAAuB,mBAAmB,CAAC;AACxD,eAAO,MAAM,uBAAuB,0BAA0B,CAAC;AAU/D,wBAAgB,oBAAoB,CAClC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAMR;AAED,eAAO,MAAM,eAAe,QAAyB,CAAC;AAyBtD,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAe7D;AAED,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C;AAwBD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,GAAG,MAAM,CAE/D;AAkKD,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,mBAAmB,GACvB,OAAO,CAAC,OAAO,CAAC,CA2FlB"}
+{"version":3,"file":"bug-report-routes.d.ts","sourceRoot":"","sources":["../../../../../src/api/bug-report-routes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,eAAO,MAAM,uBAAuB,mBAAmB,CAAC;AACxD,eAAO,MAAM,uBAAuB,0BAA0B,CAAC;AAU/D,wBAAgB,oBAAoB,CAClC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAMR;AAED,eAAO,MAAM,eAAe,QAAyB,CAAC;AAyBtD,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAe7D;AAED,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C;AAwBD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,GAAG,MAAM,CAS/D;AAkKD,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,mBAAmB,GACvB,OAAO,CAAC,OAAO,CAAC,CA2FlB"}

package/packages/agent/src/api/bug-report-routes.js

@@ -54,7 +54,14 @@ export function resetBugReportRateLimit() {
     bugReportAttempts.clear();
 }
 export function sanitize(input, maxLen = 10_000) {
-    return input.replace(/<[^>]*>/g, "").slice(0, maxLen);
+    const clipped = input.length > maxLen ? input.slice(0, maxLen) : input;
+    let prev = clipped;
+    let next = prev.replace(/<[^<>]{0,1024}>/g, "");
+    while (next !== prev) {
+        prev = next;
+        next = prev.replace(/<[^<>]{0,1024}>/g, "");
+    }
+    return next.replace(/[<>]/g, "").slice(0, maxLen);
 }
 function redactSecrets(input, maxLen = 10_000) {
     const sanitized = sanitize(input, maxLen);

package/packages/agent/src/api/chat-augmentation.js

@@ -6,7 +6,7 @@
  */
 import crypto from "node:crypto";
 import { ContentType, createMessageMemory, ModelType, parseJSONObjectFromText, parseKeyValueXml, } from "@elizaos/core";
-import { normalizeCharacterLanguage } from "@elizaos/shared/onboarding-presets";
+import { normalizeCharacterLanguage } from "@elizaos/shared";
 import { detectRuntimeModel, resolveProviderFromModel } from "./agent-model.js";
 import { isCloudProvisionedContainer } from "./cloud-provisioning.js";
 import { extractCompatTextContent } from "./compat-utils.js";