@elizaos/agent 2.0.0-alpha.358 → 2.0.0-alpha.376

package/packages/app-core/src/components/settings/PermissionsSection.js

@@ -0,0 +1,310 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Button } from "@elizaos/ui";
+import { Check } from "lucide-react";
+import { useCallback, useMemo, useState } from "react";
+import { useBootConfig } from "../../config";
+import { hasRequiredOnboardingPermissions, isDesktopPlatform, isNative, isWebPlatform, } from "../../platform";
+import { useApp } from "../../state";
+import { PermissionIcon } from "../permissions/PermissionIcon";
+import { StreamingPermissionsOnboardingView, StreamingPermissionsSettingsView, } from "../permissions/StreamingPermissions";
+import { CapabilityToggle, PermissionRow, useDesktopPermissionsState, } from "./permission-controls";
+import { CAPABILITIES, getPermissionAction, SYSTEM_PERMISSIONS, } from "./permission-types";
+const PLATFORM_COPY = {
+    darwin: {
+        systemDescription: {
+            key: "permissionssection.MacSystemPermissionsDescription",
+            defaultValue: "Review the native permissions the app needs for desktop control, voice input, and visual analysis. macOS changes may require opening System Settings.",
+        },
+        grantNote: {
+            key: "permissionssection.MacGrantAccessNote",
+            defaultValue: "macOS requires Accessibility permission for computer control. Open System Settings → Privacy & Security to grant access.",
+        },
+        permissionReady: {
+            key: "permissionssection.PermissionReadyNote",
+            defaultValue: "All required permissions are ready. Continue when you're ready.",
+        },
+        grantSubNote: {
+            key: "permissionssection.PermissionGrantNote",
+            defaultValue: "Granting now will request what can be approved immediately and open Settings for anything that must be enabled there.",
+        },
+        onboardingIntro: {
+            key: "permissionssection.GrantPermissionsTo",
+            defaultValue: "Grant permissions to unlock desktop features.",
+        },
+    },
+    win32: {
+        systemDescription: {
+            key: "permissionssection.WindowsSystemPermissionsDescription",
+            defaultValue: "Open Windows privacy settings for microphone and camera, then verify access by using those features in the app.",
+        },
+        grantNote: {
+            key: "permissionssection.WindowsGrantPermissionsNote",
+            defaultValue: "Windows may not list the app as a named app here. Use Privacy settings to enable microphone and camera access, then test them in the app.",
+        },
+        permissionReady: {
+            key: "permissionssection.WindowsPermissionReadyNote",
+            defaultValue: "Windows privacy settings are advisory here. Continue, then verify microphone and camera directly in the app.",
+        },
+        grantSubNote: {
+            key: "permissionssection.WindowsPermissionGrantNote",
+            defaultValue: "This opens Windows privacy settings for microphone and camera. The app may not appear as a named app there; the real check is whether capture works back in the app.",
+        },
+        onboardingIntro: {
+            key: "permissionssection.WindowsGrantPermissionsTo",
+            defaultValue: "Open Windows privacy settings to prepare microphone and camera access for desktop features.",
+        },
+    },
+    linux: {
+        systemDescription: {
+            key: "permissionssection.SystemPermissionsDescription",
+            defaultValue: "Grant the runtime access it needs for voice input, camera capture, shell tasks, and desktop automation features.",
+        },
+        grantNote: {
+            key: "permissionssection.GrantPermissionsNote",
+            defaultValue: "Grant permissions to enable features like voice input and computer control.",
+        },
+        permissionReady: {
+            key: "permissionssection.PermissionReadyNote",
+            defaultValue: "All required permissions are ready. Continue when you're ready.",
+        },
+        grantSubNote: {
+            key: "permissionssection.PermissionGrantNote",
+            defaultValue: "Granting now will request what can be approved immediately and open Settings for anything that must be enabled there.",
+        },
+        onboardingIntro: {
+            key: "permissionssection.GrantPermissionsTo",
+            defaultValue: "Grant permissions to unlock desktop features.",
+        },
+    },
+};
+function platformCopy(platform) {
+    if (platform === "darwin")
+        return PLATFORM_COPY.darwin;
+    if (platform === "win32")
+        return PLATFORM_COPY.win32;
+    return PLATFORM_COPY.linux;
+}
+/* ── Streaming permission views (mobile / web) ──────────────────── */
+function MobilePermissionsView() {
+    const { t } = useApp();
+    const { appBlockerSettingsCard: AppBlockerSettingsCard, websiteBlockerSettingsCard: WebsiteBlockerSettingsCard, } = useBootConfig();
+    return (_jsxs("div", { className: "space-y-6", children: [_jsx(StreamingPermissionsSettingsView, { mode: "mobile", testId: "mobile-permissions", title: t("permissionssection.StreamingPermissions", {
+                    defaultValue: "Streaming Permissions",
+                }), description: t("permissionssection.MobileStreamingDesc", {
+                    defaultValue: "Your device streams camera, microphone, and screen to your Eliza Cloud agent for processing.",
+                }) }), AppBlockerSettingsCard ? _jsx(AppBlockerSettingsCard, { mode: "mobile" }) : null, WebsiteBlockerSettingsCard ? (_jsx(WebsiteBlockerSettingsCard, { mode: "mobile" })) : null] }));
+}
+function WebPermissionsView() {
+    const { t } = useApp();
+    const { websiteBlockerSettingsCard: WebsiteBlockerSettingsCard } = useBootConfig();
+    return (_jsxs("div", { className: "space-y-6", children: [_jsx(StreamingPermissionsSettingsView, { mode: "web", testId: "web-permissions-info", title: t("permissionssection.BrowserPermissions", {
+                    defaultValue: "Browser Permissions",
+                }), description: t("permissionssection.WebStreamingDesc", {
+                    defaultValue: "Grant browser access to your camera, microphone, and screen to stream to your agent.",
+                }) }), WebsiteBlockerSettingsCard ? (isLocalBrowserRuntime() ? (_jsx(LocalWebsiteBlockingCard, { WebsiteBlockerSettingsCard: WebsiteBlockerSettingsCard })) : (_jsx(WebsiteBlockerSettingsCard, { mode: "web" }))) : null] }));
+}
+function isLocalBrowserRuntime() {
+    if (typeof window === "undefined")
+        return false;
+    const hostname = window.location.hostname.toLowerCase();
+    return (hostname === "localhost" || hostname === "127.0.0.1" || hostname === "::1");
+}
+function LocalWebsiteBlockingCard({ WebsiteBlockerSettingsCard, }) {
+    const { handleOpenSettings, handleRequest, loading, permissions, platform } = useDesktopPermissionsState();
+    if (loading) {
+        return (_jsx("p", { className: "py-4 text-center text-xs text-muted", children: "Loading website blocking..." }));
+    }
+    if (!permissions) {
+        return _jsx(WebsiteBlockerSettingsCard, { mode: "web" });
+    }
+    return (_jsx(WebsiteBlockerSettingsCard, { mode: "desktop", permission: permissions["website-blocking"], platform: platform, onRequestPermission: () => handleRequest("website-blocking"), onOpenPermissionSettings: () => handleOpenSettings("website-blocking") }));
+}
+/* ── Desktop permission view ────────────────────────────────────── */
+function DesktopPermissionsView() {
+    const { t, plugins, handlePluginToggle } = useApp();
+    const { websiteBlockerSettingsCard: WebsiteBlockerSettingsCard } = useBootConfig();
+    const { handleOpenSettings, handleRefresh, handleRequest, handleToggleShell, loading, permissions, platform, refreshing, shellEnabled, } = useDesktopPermissionsState();
+    const arePermissionsGranted = useCallback((requiredPerms) => {
+        if (!permissions)
+            return false;
+        return requiredPerms.every((id) => {
+            const state = permissions[id];
+            return (state?.status === "granted" || state?.status === "not-applicable");
+        });
+    }, [permissions]);
+    const applicablePermissions = useMemo(() => SYSTEM_PERMISSIONS.filter((def) => {
+        if (!permissions)
+            return true;
+        const state = permissions[def.id];
+        return state?.status !== "not-applicable";
+    }), [permissions]);
+    if (loading) {
+        return (_jsx("p", { className: "py-6 text-center text-xs text-muted", children: t("permissionssection.LoadingPermissions", {
+                defaultValue: "Loading permissions...",
+            }) }));
+    }
+    if (!permissions) {
+        return (_jsx("p", { className: "py-6 text-center text-xs text-muted", children: t("permissionssection.UnableToLoadPermi", {
+                defaultValue: "Unable to load permissions.",
+            }) }));
+    }
+    const copy = platformCopy(platform);
+    return (_jsxs("div", { className: "space-y-6", children: [_jsxs("section", { className: "space-y-2", children: [_jsxs("header", { className: "flex flex-col gap-2 sm:flex-row sm:items-start sm:justify-between", children: [_jsxs("div", { className: "space-y-0.5", children: [_jsx("h3", { className: "text-sm font-semibold text-txt", children: t("permissionssection.SystemPermissions", {
+                                            defaultValue: "System Permissions",
+                                        }) }), _jsx("p", { className: "max-w-2xl text-xs-tight leading-5 text-muted", children: t(copy.systemDescription.key, {
+                                            defaultValue: copy.systemDescription.defaultValue,
+                                        }) })] }), _jsxs("div", { className: "flex flex-wrap gap-2", children: [_jsx(Button, { variant: "default", size: "sm", className: "h-9 rounded-lg px-3 text-xs font-semibold", onClick: async () => {
+                                            for (const def of applicablePermissions) {
+                                                if (def.id === "shell")
+                                                    continue;
+                                                const state = permissions[def.id];
+                                                if (state?.status === "granted")
+                                                    continue;
+                                                if (state?.canRequest) {
+                                                    await handleRequest(def.id);
+                                                }
+                                                else {
+                                                    await handleOpenSettings(def.id);
+                                                }
+                                            }
+                                        }, children: t("permissionssection.AllowAll", { defaultValue: "Allow All" }) }), _jsx(Button, { variant: "outline", size: "sm", "data-testid": "permissions-refresh-button", className: "h-9 rounded-lg px-3 text-xs font-semibold", onClick: handleRefresh, disabled: refreshing, children: refreshing
+                                            ? t("common.refreshing", {
+                                                defaultValue: "Refreshing...",
+                                            })
+                                            : t("common.refresh", { defaultValue: "Refresh" }) })] })] }), _jsx("div", { className: "divide-y divide-border/40 rounded-lg border border-border/40", children: applicablePermissions.map((def) => {
+                            const state = permissions[def.id];
+                            return (_jsx(PermissionRow, { def: def, status: state?.status ?? "not-determined", reason: state?.reason, platform: platform, canRequest: state?.canRequest ?? false, onRequest: () => handleRequest(def.id), onOpenSettings: () => handleOpenSettings(def.id), isShell: def.id === "shell", shellEnabled: shellEnabled, onToggleShell: def.id === "shell" ? handleToggleShell : undefined }, def.id));
+                        }) }), _jsx("p", { className: "text-xs-tight leading-5 text-muted", children: t(copy.grantNote.key, { defaultValue: copy.grantNote.defaultValue }) })] }), WebsiteBlockerSettingsCard ? (_jsx(WebsiteBlockerSettingsCard, { mode: "desktop", permission: permissions["website-blocking"], platform: platform, onRequestPermission: () => handleRequest("website-blocking"), onOpenPermissionSettings: () => handleOpenSettings("website-blocking") })) : null, _jsxs("section", { className: "space-y-2 border-t border-border/40 pt-5", children: [_jsxs("header", { className: "space-y-0.5", children: [_jsx("h3", { className: "text-sm font-semibold text-txt", children: t("common.capabilities") }), _jsx("p", { className: "max-w-2xl text-xs-tight leading-5 text-muted", children: t("permissionssection.CapabilitiesDescription", {
+                                    defaultValue: "Turn higher-level capabilities on only after the required runtime permissions are available.",
+                                }) })] }), _jsx("div", { className: "space-y-2", children: CAPABILITIES.map((cap) => {
+                            const plugin = plugins.find((p) => p.id === cap.id) ?? null;
+                            const permissionsGranted = arePermissionsGranted(cap.requiredPermissions);
+                            return (_jsx(CapabilityToggle, { cap: cap, plugin: plugin, permissionsGranted: permissionsGranted, onToggle: (enabled) => {
+                                    if (plugin)
+                                        void handlePluginToggle(cap.id, enabled);
+                                } }, cap.id));
+                        }) })] })] }));
+}
+export function PermissionsSection() {
+    if (isWebPlatform())
+        return _jsx(WebPermissionsView, {});
+    if (isNative && !isDesktopPlatform())
+        return _jsx(MobilePermissionsView, {});
+    return _jsx(DesktopPermissionsView, {});
+}
+/* ── Onboarding permission views ────────────────────────────────── */
+function MobileOnboardingPermissions({ onContinue, onBack, }) {
+    const { t } = useApp();
+    return (_jsx(StreamingPermissionsOnboardingView, { mode: "mobile", onContinue: onContinue, onBack: onBack, testId: "mobile-onboarding-permissions", title: t("permissionssection.StreamingPermissions", {
+            defaultValue: "Streaming Permissions",
+        }), description: t("permissionssection.MobileOnboardingDesc", {
+            defaultValue: "Allow access so your device can stream to your cloud agent.",
+        }) }));
+}
+function WebOnboardingPermissions({ onContinue, onBack, }) {
+    const { t } = useApp();
+    return (_jsx(StreamingPermissionsOnboardingView, { mode: "web", onContinue: onContinue, onBack: onBack, testId: "web-onboarding-permissions", title: t("permissionssection.BrowserPermissions", {
+            defaultValue: "Browser Permissions",
+        }), description: t("permissionssection.WebOnboardingDesc", {
+            defaultValue: "Allow browser access so your camera, mic, and screen can stream to your agent.",
+        }) }));
+}
+export function PermissionsOnboardingSection({ onContinue, onBack, }) {
+    if (isWebPlatform()) {
+        return _jsx(WebOnboardingPermissions, { onContinue: onContinue, onBack: onBack });
+    }
+    if (isNative && !isDesktopPlatform()) {
+        return (_jsx(MobileOnboardingPermissions, { onContinue: onContinue, onBack: onBack }));
+    }
+    return (_jsx(DesktopOnboardingPermissions, { onContinue: onContinue, onBack: onBack }));
+}
+function DesktopOnboardingPermissions({ onContinue, onBack, }) {
+    const { t } = useApp();
+    const { handleOpenSettings, handleRequest, handleRefresh, loading, permissions, platform, } = useDesktopPermissionsState();
+    const [grantingPermissions, setGrantingPermissions] = useState(false);
+    const usesWindowsPrivacyFlow = platform === "win32";
+    const copy = platformCopy(platform);
+    const allGranted = hasRequiredOnboardingPermissions(permissions);
+    const canProceed = allGranted || usesWindowsPrivacyFlow;
+    const essentialPermissions = SYSTEM_PERMISSIONS.filter((def) => {
+        const state = permissions?.[def.id];
+        return state?.status !== "not-applicable" && def.id !== "shell";
+    });
+    const footerStatusMessage = canProceed
+        ? t(copy.permissionReady.key, {
+            defaultValue: copy.permissionReady.defaultValue,
+        })
+        : t("permissionssection.PermissionSkipNote", {
+            defaultValue: "Skipping keeps desktop features locked until you grant the missing permissions in Settings.",
+        });
+    const handleGrantPermissions = useCallback(async () => {
+        if (grantingPermissions)
+            return;
+        setGrantingPermissions(true);
+        try {
+            for (const def of essentialPermissions) {
+                const state = permissions?.[def.id];
+                if (state?.status === "granted")
+                    continue;
+                if (state?.status === "not-determined" && state.canRequest) {
+                    await handleRequest(def.id);
+                    continue;
+                }
+                await handleOpenSettings(def.id);
+            }
+            const refreshed = await handleRefresh();
+            if (refreshed &&
+                (usesWindowsPrivacyFlow ||
+                    hasRequiredOnboardingPermissions(refreshed.permissions))) {
+                onContinue();
+            }
+        }
+        finally {
+            setGrantingPermissions(false);
+        }
+    }, [
+        grantingPermissions,
+        essentialPermissions,
+        handleOpenSettings,
+        handleRefresh,
+        handleRequest,
+        onContinue,
+        permissions,
+        usesWindowsPrivacyFlow,
+    ]);
+    if (loading) {
+        return (_jsx("p", { className: "py-8 text-center text-sm text-muted", children: t("permissionssection.CheckingPermissions", {
+                defaultValue: "Checking permissions...",
+            }) }));
+    }
+    if (!permissions) {
+        return (_jsxs("div", { className: "py-8 text-center", children: [_jsx("p", { className: "mb-4 text-sm text-muted", children: t("permissionssection.UnableToCheckPerm", {
+                        defaultValue: "Unable to check permissions.",
+                    }) }), _jsx(Button, { type: "button", variant: "default", "data-testid": "permissions-onboarding-continue", onClick: () => onContinue(), children: t("common.continue", { defaultValue: "Continue" }) })] }));
+    }
+    return (_jsxs("div", { className: "space-y-5", children: [_jsxs("header", { className: "text-center", children: [_jsx("h2", { className: "mb-1 text-xl font-bold text-txt", children: t("permissionssection.SystemPermissions", {
+                            defaultValue: "System Permissions",
+                        }) }), _jsx("p", { className: "text-sm text-muted", children: t(copy.onboardingIntro.key, {
+                            defaultValue: copy.onboardingIntro.defaultValue,
+                        }) })] }), _jsx("div", { className: "space-y-2", children: essentialPermissions.map((def) => {
+                    const state = permissions[def.id];
+                    const status = state?.status ?? "not-determined";
+                    const isGranted = status === "granted";
+                    const action = getPermissionAction(t, def.id, status, state?.canRequest ?? false, platform);
+                    return (_jsxs("div", { "data-permission-id": def.id, className: `flex items-center gap-3 rounded-lg border px-3 py-2.5 ${isGranted
+                            ? "border-ok/30 bg-ok/5"
+                            : "border-border/50 bg-card/60"}`, children: [_jsx(PermissionIcon, { icon: def.icon }), _jsxs("div", { className: "min-w-0 flex-1", children: [_jsx("div", { className: "text-sm font-semibold text-txt", children: def.name }), _jsx("div", { className: "text-xs-tight leading-5 text-muted", children: def.description })] }), isGranted ? (_jsx(Check, { className: "h-4 w-4 shrink-0 text-ok" })) : action ? (_jsx(Button, { variant: "default", size: "sm", className: "h-9 rounded-lg px-3 text-xs font-semibold", onClick: () => action.type === "request"
+                                    ? handleRequest(def.id)
+                                    : handleOpenSettings(def.id), "aria-label": `${action.ariaLabelPrefix} ${def.name}`, children: action.label })) : null] }, def.id));
+                }) }), _jsxs("div", { className: "space-y-3 border-t border-border/40 pt-4", children: [_jsxs("div", { className: "space-y-1 text-xs-tight leading-5 text-muted", children: [_jsx("p", { children: footerStatusMessage }), !canProceed && (_jsx("p", { children: t(copy.grantSubNote.key, {
+                                    defaultValue: copy.grantSubNote.defaultValue,
+                                }) }))] }), _jsxs("div", { className: "flex flex-col gap-2 sm:flex-row sm:items-center sm:justify-between", children: [onBack ? (_jsx(Button, { variant: "ghost", size: "sm", className: "justify-start p-0 text-2xs uppercase tracking-[0.15em] text-muted hover:text-txt", onClick: () => onBack(), type: "button", children: t("onboarding.back", { defaultValue: "Back" }) })) : (_jsx("span", {})), _jsxs("div", { className: "flex flex-col gap-2 sm:flex-row sm:items-center sm:justify-end", children: [!canProceed && (_jsx(Button, { type: "button", variant: "outline", size: "sm", className: "h-10 rounded-lg px-4 text-xs font-semibold", disabled: grantingPermissions, onClick: () => onContinue({ allowPermissionBypass: true }), children: t("onboarding.rpcSkip", { defaultValue: "Skip for now" }) })), _jsx(Button, { type: "button", variant: "default", size: "sm", "data-testid": "permissions-onboarding-continue", className: "h-10 min-w-[8.5rem] rounded-lg px-4 text-xs font-semibold", disabled: grantingPermissions, onClick: canProceed ? () => onContinue() : handleGrantPermissions, children: canProceed
+                                            ? t("common.continue", { defaultValue: "Continue" })
+                                            : grantingPermissions
+                                                ? t("permissionssection.GrantingPermissions", {
+                                                    defaultValue: "Granting...",
+                                                })
+                                                : t("permissionssection.GrantPermissions", {
+                                                    defaultValue: "Grant Permissions",
+                                                }) })] })] })] })] }));
+}

package/packages/app-core/src/components/settings/PolicyControlsView.d.ts

@@ -0,0 +1,2 @@
+export declare function PolicyControlsView(): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=PolicyControlsView.d.ts.map

package/packages/app-core/src/components/settings/PolicyControlsView.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PolicyControlsView.d.ts","sourceRoot":"","sources":["../../../../../../../app-core/src/components/settings/PolicyControlsView.tsx"],"names":[],"mappings":"AAmDA,wBAAgB,kBAAkB,4CA6XjC"}

package/packages/app-core/src/components/settings/PolicyControlsView.js

@@ -0,0 +1,231 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { Button, ConfirmDialog, Input, Label, Slider, Spinner, Switch, } from "@elizaos/ui";
+import { AlertTriangle } from "lucide-react";
+import { useCallback, useEffect, useMemo, useState } from "react";
+import { client } from "../../api";
+import { approvedAddressValue, chainTypeLabel, DAY_NAMES, DEFAULT_APPROVED_ADDRESSES, DEFAULT_AUTO_APPROVE, DEFAULT_RATE_LIMIT, DEFAULT_SPENDING, DEFAULT_TIME_WINDOW, findPolicy, getPolicyConfig, isValidAddress, TIMEZONES, } from "../policy-controls";
+import { StewardLogo } from "../steward/injected";
+const asRecord = (v) => typeof v === "object" && v !== null ? v : {};
+/** Static hour options to avoid array-index-as-key lint issues. */
+const HOUR_FROM_OPTIONS = Array.from({ length: 24 }, (_, i) => ({
+    key: `from-${i}`,
+    value: i,
+    label: `${String(i).padStart(2, "0")}:00`,
+}));
+const HOUR_TO_OPTIONS = Array.from({ length: 24 }, (_, i) => ({
+    key: `to-${i + 1}`,
+    value: i + 1,
+    label: `${String(i + 1).padStart(2, "0")}:00`,
+}));
+export function PolicyControlsView() {
+    const [policies, setPolicies] = useState([]);
+    const [loading, setLoading] = useState(true);
+    const [saving, setSaving] = useState(false);
+    const [error, setError] = useState(null);
+    const [saveSuccess, setSaveSuccess] = useState(false);
+    const [stewardConnected, setStewardConnected] = useState(false);
+    const [dirty, setDirty] = useState(false);
+    const [confirmOpen, setConfirmOpen] = useState(false);
+    const [confirmMessage, setConfirmMessage] = useState("");
+    const [confirmCallback, setConfirmCallback] = useState(null);
+    useEffect(() => {
+        let cancelled = false;
+        async function load() {
+            try {
+                const status = await client.getStewardStatus();
+                if (cancelled)
+                    return;
+                setStewardConnected(status.connected);
+                if (!status.connected) {
+                    setLoading(false);
+                    return;
+                }
+                const result = await client.getStewardPolicies();
+                if (cancelled)
+                    return;
+                setPolicies(result);
+            }
+            catch (err) {
+                if (cancelled)
+                    return;
+                setError(err instanceof Error ? err.message : "Failed to load policies");
+            }
+            finally {
+                if (!cancelled)
+                    setLoading(false);
+            }
+        }
+        void load();
+        return () => {
+            cancelled = true;
+        };
+    }, []);
+    const getPolicy = useCallback((type) => findPolicy(policies, type), [policies]);
+    const updatePolicy = useCallback((type, updates) => {
+        setPolicies((prev) => {
+            const existing = prev.find((p) => p.type === type);
+            if (existing) {
+                return prev.map((p) => (p.type === type ? { ...p, ...updates } : p));
+            }
+            return [
+                ...prev,
+                {
+                    id: `${type}-${Date.now()}`,
+                    type,
+                    enabled: true,
+                    config: {},
+                    ...updates,
+                },
+            ];
+        });
+        setDirty(true);
+        setSaveSuccess(false);
+    }, []);
+    const togglePolicy = useCallback((type, enabled, defaultConfig) => {
+        const existing = findPolicy(policies, type);
+        if (!enabled && existing?.enabled) {
+            setConfirmMessage("Disabling this removes a safety guardrail. Are you sure?");
+            setConfirmCallback(() => () => updatePolicy(type, { enabled: false }));
+            setConfirmOpen(true);
+            return;
+        }
+        updatePolicy(type, {
+            enabled,
+            config: existing?.config ?? defaultConfig,
+        });
+    }, [policies, updatePolicy]);
+    const handleSave = useCallback(async () => {
+        setSaving(true);
+        setError(null);
+        try {
+            await client.setStewardPolicies(policies);
+            setSaveSuccess(true);
+            setDirty(false);
+        }
+        catch (err) {
+            setError(err instanceof Error ? err.message : "Failed to save policies");
+        }
+        finally {
+            setSaving(false);
+        }
+    }, [policies]);
+    // Extract configs (must be before early returns so hooks are unconditional)
+    const autoApprovePolicy = getPolicy("auto-approve-threshold");
+    const autoApproveConfig = getPolicyConfig(autoApprovePolicy, DEFAULT_AUTO_APPROVE);
+    const spendingPolicy = getPolicy("spending-limit");
+    const spendingConfig = getPolicyConfig(spendingPolicy, DEFAULT_SPENDING);
+    const addressPolicy = getPolicy("approved-addresses");
+    const addressConfig = getPolicyConfig(addressPolicy, DEFAULT_APPROVED_ADDRESSES);
+    const rateLimitPolicy = getPolicy("rate-limit");
+    const rateLimitConfig = getPolicyConfig(rateLimitPolicy, DEFAULT_RATE_LIMIT);
+    const timeWindowPolicy = getPolicy("time-window");
+    const timeWindowConfig = getPolicyConfig(timeWindowPolicy, DEFAULT_TIME_WINDOW);
+    const normalizedAddresses = useMemo(() => (addressConfig.addresses ?? []).map((addr) => approvedAddressValue(addr)), [addressConfig.addresses]);
+    if (loading) {
+        return (_jsxs("div", { className: "flex items-center justify-center py-12", children: [_jsx(Spinner, { size: 24 }), _jsx("span", { className: "ml-3 text-sm text-muted", children: "Loading\u2026" })] }));
+    }
+    if (!stewardConnected) {
+        return (_jsxs("div", { className: "flex flex-col items-center gap-4 py-8 text-center", children: [_jsx(StewardLogo, { size: 48, className: "opacity-30" }), _jsx("p", { className: "text-sm font-semibold text-txt", children: "Steward Not Connected" }), _jsx("p", { className: "text-xs text-muted max-w-sm", children: "Connect your Steward instance to manage wallet policies." })] }));
+    }
+    return (_jsxs("div", { className: "space-y-0 divide-y divide-border/20", children: [error && (_jsxs("div", { className: "flex items-center gap-2 rounded-lg border border-danger/30 bg-danger/10 px-3 py-2 mb-4", children: [_jsx(AlertTriangle, { className: "h-4 w-4 text-danger shrink-0" }), _jsx("span", { className: "text-xs text-danger", children: error })] })), _jsx(PolicyRow, { title: "Auto-Approve", desc: autoApprovePolicy?.enabled
+                    ? `Under $${autoApproveConfig.threshold ?? "5"}`
+                    : "Off", enabled: autoApprovePolicy?.enabled ?? false, onToggle: (v) => togglePolicy("auto-approve-threshold", v, asRecord(DEFAULT_AUTO_APPROVE)), children: _jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Label, { className: "text-xs text-muted whitespace-nowrap", children: "Threshold" }), _jsx(UsdField, { value: autoApproveConfig.threshold ?? "5", onChange: (v) => updatePolicy("auto-approve-threshold", {
+                                config: asRecord({ threshold: v }),
+                            }) })] }) }), _jsx(PolicyRow, { title: "Spending Limits", desc: spendingPolicy?.enabled
+                    ? `$${spendingConfig.maxPerTx}/tx · $${spendingConfig.maxPerDay}/day · $${spendingConfig.maxPerWeek}/wk`
+                    : "Off", enabled: spendingPolicy?.enabled ?? false, onToggle: (v) => togglePolicy("spending-limit", v, asRecord(DEFAULT_SPENDING)), children: _jsxs("div", { className: "grid grid-cols-3 gap-3", children: [_jsx(UsdFieldLabeled, { label: "Per Tx", value: spendingConfig.maxPerTx, onChange: (v) => updatePolicy("spending-limit", {
+                                config: asRecord({ ...spendingConfig, maxPerTx: v }),
+                            }) }), _jsx(UsdFieldLabeled, { label: "Daily", value: spendingConfig.maxPerDay, onChange: (v) => updatePolicy("spending-limit", {
+                                config: asRecord({ ...spendingConfig, maxPerDay: v }),
+                            }) }), _jsx(UsdFieldLabeled, { label: "Weekly", value: spendingConfig.maxPerWeek, onChange: (v) => updatePolicy("spending-limit", {
+                                config: asRecord({ ...spendingConfig, maxPerWeek: v }),
+                            }) })] }) }), _jsx(PolicyRow, { title: "Rate Limits", desc: rateLimitPolicy?.enabled
+                    ? `${rateLimitConfig.maxTxPerHour}/hr · ${rateLimitConfig.maxTxPerDay}/day`
+                    : "Off", enabled: rateLimitPolicy?.enabled ?? false, onToggle: (v) => togglePolicy("rate-limit", v, asRecord(DEFAULT_RATE_LIMIT)), children: _jsxs("div", { className: "grid grid-cols-2 gap-4", children: [_jsx(SliderField, { label: "Per Hour", value: rateLimitConfig.maxTxPerHour, min: 1, max: 100, onChange: (v) => updatePolicy("rate-limit", {
+                                config: asRecord({ ...rateLimitConfig, maxTxPerHour: v }),
+                            }) }), _jsx(SliderField, { label: "Per Day", value: rateLimitConfig.maxTxPerDay, min: 1, max: 500, onChange: (v) => updatePolicy("rate-limit", {
+                                config: asRecord({ ...rateLimitConfig, maxTxPerDay: v }),
+                            }) })] }) }), _jsx(PolicyRow, { title: "Address Controls", desc: addressPolicy?.enabled
+                    ? `${normalizedAddresses.length} ${addressConfig.mode === "whitelist" ? "allowed" : "blocked"}`
+                    : "Off", enabled: addressPolicy?.enabled ?? false, onToggle: (v) => togglePolicy("approved-addresses", v, asRecord(DEFAULT_APPROVED_ADDRESSES)), children: _jsx(AddressSection, { config: addressConfig, addresses: normalizedAddresses, onUpdate: (cfg) => updatePolicy("approved-addresses", { config: asRecord(cfg) }) }) }), _jsx(PolicyRow, { title: "Time Restrictions", desc: timeWindowPolicy?.enabled
+                    ? `${timeWindowConfig.allowedDays?.length ?? 0} days`
+                    : "Off", enabled: timeWindowPolicy?.enabled ?? false, onToggle: (v) => togglePolicy("time-window", v, asRecord(DEFAULT_TIME_WINDOW)), children: _jsx(TimeSection, { config: timeWindowConfig, onUpdate: (cfg) => updatePolicy("time-window", { config: asRecord(cfg) }) }) }), dirty && (_jsxs("div", { className: "flex items-center justify-end gap-3 pt-4 border-t-0", children: [_jsx("span", { className: "text-xs text-accent", children: "Unsaved changes" }), _jsx(Button, { variant: "default", size: "sm", className: "text-xs", onClick: () => void handleSave(), disabled: saving, children: saving ? (_jsxs(_Fragment, { children: [_jsx(Spinner, { size: 14 }), _jsx("span", { className: "ml-1.5", children: "Saving\u2026" })] })) : ("Save") })] })), saveSuccess && !dirty && (_jsx("div", { className: "pt-3 text-right border-t-0", children: _jsx("span", { className: "text-xs text-ok", children: "Saved" }) })), _jsx(ConfirmDialog, { open: confirmOpen, title: "Disable Policy", message: confirmMessage, confirmLabel: "Disable", cancelLabel: "Keep", variant: "warn", onConfirm: () => {
+                    confirmCallback?.();
+                    setConfirmOpen(false);
+                }, onCancel: () => setConfirmOpen(false) })] }));
+}
+/* ── Sub-components ──────────────────────────────────────────────────── */
+function PolicyRow({ title, desc, enabled, onToggle, children, }) {
+    return (_jsxs("div", { className: "py-3.5", children: [_jsxs("div", { className: "flex items-center justify-between", children: [_jsxs("div", { children: [_jsx("div", { className: "text-sm font-medium text-txt", children: title }), _jsx("div", { className: "text-xs text-muted mt-0.5", children: desc })] }), _jsx(Switch, { checked: enabled, onCheckedChange: onToggle, "aria-label": title })] }), enabled && children && _jsx("div", { className: "mt-3", children: children })] }));
+}
+function UsdField({ value, onChange, }) {
+    return (_jsxs("div", { className: "relative w-28", children: [_jsx("span", { className: "absolute left-2.5 top-1/2 -translate-y-1/2 text-2xs text-muted pointer-events-none", children: "$" }), _jsx(Input, { type: "text", inputMode: "decimal", value: value, onChange: (e) => {
+                    const v = e.target.value.slice(0, 32);
+                    if (/^(?:\d+(?:\.\d*)?|\.\d*)?$/.test(v))
+                        onChange(v);
+                }, className: "h-8 text-xs pl-6 tabular-nums", placeholder: "0" })] }));
+}
+function UsdFieldLabeled({ label, value, onChange, }) {
+    return (_jsxs("div", { className: "space-y-1", children: [_jsx(Label, { className: "text-xs-tight text-muted", children: label }), _jsx(UsdField, { value: value, onChange: onChange })] }));
+}
+function SliderField({ label, value, min, max, onChange, }) {
+    return (_jsxs("div", { className: "space-y-1.5", children: [_jsxs("div", { className: "flex justify-between", children: [_jsx(Label, { className: "text-xs text-muted", children: label }), _jsx("span", { className: "text-xs font-medium text-txt tabular-nums", children: value })] }), _jsx(Slider, { value: [value], min: min, max: max, step: 1, onValueChange: ([v]) => onChange(v) })] }));
+}
+function AddressSection({ config, addresses, onUpdate, }) {
+    const [newAddr, setNewAddr] = useState("");
+    const [addrError, setAddrError] = useState(null);
+    const handleAdd = () => {
+        const trimmed = newAddr.trim();
+        if (!trimmed)
+            return;
+        if (!isValidAddress(trimmed)) {
+            setAddrError("Invalid address (EVM 0x... or Solana base58)");
+            return;
+        }
+        if (config.addresses.some((entry) => approvedAddressValue(entry) === trimmed)) {
+            setAddrError("Already in list");
+            return;
+        }
+        onUpdate({ ...config, addresses: [...config.addresses, trimmed] });
+        setNewAddr("");
+        setAddrError(null);
+    };
+    const handleRemove = (addr) => {
+        const labels = { ...config.labels };
+        delete labels[addr];
+        onUpdate({
+            ...config,
+            addresses: config.addresses.filter((entry) => approvedAddressValue(entry) !== addr),
+            labels,
+        });
+    };
+    return (_jsxs("div", { className: "space-y-3", children: [_jsxs("div", { className: "flex gap-2", children: [_jsx(Button, { variant: config.mode === "whitelist" ? "default" : "ghost", size: "sm", className: "text-xs-tight h-7", onClick: () => onUpdate({ ...config, mode: "whitelist" }), children: "Allowlist" }), _jsx(Button, { variant: config.mode === "blacklist" ? "default" : "ghost", size: "sm", className: "text-xs-tight h-7", onClick: () => onUpdate({ ...config, mode: "blacklist" }), children: "Blocklist" })] }), addresses.length > 0 && (_jsx("div", { className: "space-y-1", children: addresses.map((addr) => {
+                    const chain = chainTypeLabel(addr);
+                    return (_jsxs("div", { className: "flex items-center justify-between group text-xs-tight font-mono text-muted py-1", children: [_jsxs("div", { className: "flex items-center gap-1.5 truncate", children: [_jsx("span", { className: "truncate", children: addr }), chain && (_jsx("span", { className: "text-3xs text-muted bg-muted/10 px-1.5 py-0.5 rounded shrink-0", children: chain }))] }), _jsx("button", { type: "button", className: "text-danger opacity-0 group-hover:opacity-100 text-2xs ml-2", onClick: () => handleRemove(addr), children: "remove" })] }, addr));
+                }) })), _jsxs("div", { className: "flex gap-2", children: [_jsx(Input, { type: "text", value: newAddr, onChange: (e) => {
+                            setNewAddr(e.target.value);
+                            setAddrError(null);
+                        }, onKeyDown: (e) => e.key === "Enter" && handleAdd(), placeholder: "EVM or Solana address", className: "h-8 text-xs font-mono flex-1" }), _jsx(Button, { variant: "ghost", size: "sm", className: "text-xs h-8", onClick: handleAdd, children: "Add" })] }), addrError && (_jsx("div", { className: "text-xs-tight text-danger", children: addrError }))] }));
+}
+function TimeSection({ config, onUpdate, }) {
+    const hours = config.allowedHours?.[0] ?? { start: 9, end: 17 };
+    const days = config.allowedDays ?? [1, 2, 3, 4, 5];
+    return (_jsxs("div", { className: "space-y-3", children: [_jsxs("div", { className: "flex items-center gap-3", children: [_jsxs("div", { className: "space-y-1", children: [_jsx(Label, { className: "text-xs-tight text-muted", children: "From" }), _jsx("select", { value: hours.start, onChange: (e) => onUpdate({
+                                    ...config,
+                                    allowedHours: [
+                                        { start: Number(e.target.value), end: hours.end },
+                                    ],
+                                }), className: "h-8 rounded-md border border-input bg-bg px-2 text-xs text-txt", children: HOUR_FROM_OPTIONS.map((h) => (_jsx("option", { value: h.value, children: h.label }, h.key))) })] }), _jsx("span", { className: "text-muted text-xs mt-5", children: "\u2192" }), _jsxs("div", { className: "space-y-1", children: [_jsx(Label, { className: "text-xs-tight text-muted", children: "To" }), _jsx("select", { value: hours.end, onChange: (e) => onUpdate({
+                                    ...config,
+                                    allowedHours: [
+                                        { start: hours.start, end: Number(e.target.value) },
+                                    ],
+                                }), className: "h-8 rounded-md border border-input bg-bg px-2 text-xs text-txt", children: HOUR_TO_OPTIONS.map((h) => (_jsx("option", { value: h.value, children: h.label }, h.key))) })] })] }), _jsx("div", { className: "flex gap-1", children: DAY_NAMES.map((name, i) => (_jsx("button", { type: "button", className: `h-7 w-9 rounded text-2xs font-medium transition-colors ${days.includes(i)
+                        ? "bg-accent/20 text-accent border border-accent/30"
+                        : "bg-bg text-muted border border-border/30 hover:border-border/50"}`, onClick: () => {
+                        const next = days.includes(i)
+                            ? days.filter((d) => d !== i)
+                            : [...days, i].sort();
+                        onUpdate({ ...config, allowedDays: next });
+                    }, children: name }, name))) }), _jsxs("div", { className: "space-y-1", children: [_jsx(Label, { className: "text-xs-tight text-muted", children: "Timezone" }), _jsx("select", { value: config.timezone ?? Intl.DateTimeFormat().resolvedOptions().timeZone, onChange: (e) => onUpdate({ ...config, timezone: e.target.value }), className: "h-8 rounded-md border border-input bg-bg px-2 text-xs text-txt w-full", children: TIMEZONES.map((tz) => (_jsx("option", { value: tz, children: tz }, tz))) })] })] }));
+}

package/packages/app-core/src/components/settings/ProviderSwitcher.d.ts

@@ -0,0 +1,22 @@
+import { type PluginParamDef } from "../../api";
+import type { ConfigUiHint } from "../../types";
+interface PluginInfo {
+    id: string;
+    name: string;
+    category: string;
+    enabled: boolean;
+    configured: boolean;
+    parameters: PluginParamDef[];
+    configUiHints?: Record<string, ConfigUiHint>;
+}
+interface ProviderSwitcherProps {
+    elizaCloudConnected?: boolean;
+    plugins?: PluginInfo[];
+    pluginSaving?: Set<string>;
+    pluginSaveSuccess?: Set<string>;
+    loadPlugins?: () => Promise<void>;
+    handlePluginConfigSave?: (pluginId: string, values: Record<string, unknown>) => void | Promise<void>;
+}
+export declare function ProviderSwitcher(props?: ProviderSwitcherProps): import("react/jsx-runtime").JSX.Element;
+export {};
+//# sourceMappingURL=ProviderSwitcher.d.ts.map

package/packages/app-core/src/components/settings/ProviderSwitcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProviderSwitcher.d.ts","sourceRoot":"","sources":["../../../../../../../app-core/src/components/settings/ProviderSwitcher.tsx"],"names":[],"mappings":"AAkCA,OAAO,EAAkC,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AAUhF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAoBhD,UAAU,UAAU;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;CAC9C;AASD,UAAU,qBAAqB;IAC7B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC;IACvB,YAAY,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,iBAAiB,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,sBAAsB,CAAC,EAAE,CACvB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC5B,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAwJD,wBAAgB,gBAAgB,CAAC,KAAK,GAAE,qBAA0B,2CAk7BjE"}