@elizaos/agent 2.0.0-alpha.520 → 2.0.0-alpha.521

package/apps/app-steward/src/routes/wallet-trade-compat-routes.js

@@ -1,528 +0,0 @@
-import { loadElizaConfig } from "@elizaos/agent/config/config";
-import { ensureCompatApiAuthorized } from "@elizaos/app-core/api/auth";
-import { readCompatJsonBody, } from "@elizaos/app-core/api/compat-route-shared";
-import { sendJsonError as sendJsonErrorResponse, sendJson as sendJsonResponse, } from "@elizaos/app-core/api/response";
-import { logger } from "@elizaos/core";
-import { StewardApiError } from "@stwd/sdk";
-import { ethers } from "ethers";
-import { buildBscApproveUnsignedTx, buildBscBuyUnsignedTx, buildBscSellUnsignedTx, buildBscTradeQuote, resolveBscApprovalSpender, resolvePrimaryBscRpcUrl, } from "../api/bsc-trade";
-import { getWalletAddresses } from "../api/wallet";
-import { resolveWalletRpcReadiness } from "../api/wallet-rpc";
-import { recordWalletTradeLedgerEntry } from "../api/wallet-trading-profile";
-import { canUseLocalTradeExecution as _canUseLocalTradeExecution, resolveTradePermissionMode as _resolveTradePermissionMode, } from "./server-wallet-trade";
-import { isStewardConfigured, signTransactionWithOptionalSteward, } from "./steward-bridge";
-// ---------------------------------------------------------------------------
-// Constants
-// ---------------------------------------------------------------------------
-const AGENT_AUTOMATION_HEADER = "x-elizaos-agent-action";
-// ---------------------------------------------------------------------------
-// Helpers (only used by trade / transfer routes)
-// ---------------------------------------------------------------------------
-function isAgentAutomationRequest(req) {
-    const raw = req.headers[AGENT_AUTOMATION_HEADER];
-    return typeof raw === "string" && /^(1|true|yes|agent)$/i.test(raw.trim());
-}
-function resolveBscExecutionNetwork() {
-    if (process.env.ELIZA_WALLET_NETWORK?.trim().toLowerCase() === "testnet") {
-        const parsedChainId = Number.parseInt(process.env.BSC_TESTNET_CHAIN_ID?.trim() ?? "97", 10);
-        return {
-            chainId: Number.isNaN(parsedChainId) ? 97 : parsedChainId,
-            explorerBaseUrl: "https://testnet.bscscan.com",
-        };
-    }
-    return {
-        chainId: 56,
-        explorerBaseUrl: "https://bscscan.com",
-    };
-}
-function resolveWalletExecutionMode(canSign, canExecuteLocally, hasStewardSigner) {
-    if (!canSign || !canExecuteLocally) {
-        return "user-sign";
-    }
-    return hasStewardSigner ? "steward" : "local-key";
-}
-/** Broadcast a signed tx using `EVM_PRIVATE_KEY` and a JSON-RPC provider (local execution path). */
-async function sendLocalWalletTransaction(rpcUrl, tx) {
-    const evmKey = process.env.EVM_PRIVATE_KEY ?? "";
-    const provider = new ethers.JsonRpcProvider(rpcUrl);
-    try {
-        const wallet = new ethers.Wallet(evmKey.startsWith("0x") ? evmKey : `0x${evmKey}`, provider);
-        const txResponse = await wallet.sendTransaction(tx);
-        return {
-            hash: txResponse.hash,
-            nonce: txResponse.nonce,
-            gasLimit: txResponse.gasLimit?.toString() ?? "0",
-        };
-    }
-    finally {
-        provider.destroy();
-    }
-}
-function getStewardPolicyResults(error) {
-    if (error.data &&
-        typeof error.data === "object" &&
-        "results" in error.data &&
-        Array.isArray(error.data.results)) {
-        return error.data.results;
-    }
-    return [];
-}
-function isStewardPolicyRejection(error) {
-    return error instanceof StewardApiError && error.status === 403;
-}
-// ---------------------------------------------------------------------------
-// Route handler
-// ---------------------------------------------------------------------------
-export async function handleWalletTradeCompatRoutes(req, res, _state) {
-    const method = (req.method ?? "GET").toUpperCase();
-    const url = new URL(req.url ?? "/", "http://localhost");
-    // ── POST /api/wallet/trade/execute ─────────────────────────────────────
-    if (method === "POST" && url.pathname === "/api/wallet/trade/execute") {
-        if (!ensureCompatApiAuthorized(req, res)) {
-            return true;
-        }
-        const body = await readCompatJsonBody(req, res);
-        if (body == null) {
-            return true;
-        }
-        const side = typeof body.side === "string" ? body.side : "";
-        const tokenAddress = typeof body.tokenAddress === "string" ? body.tokenAddress : "";
-        const amount = typeof body.amount === "string" ? body.amount : "";
-        const routeProvider = body.routeProvider === "0x" ||
-            body.routeProvider === "pancakeswap-v2" ||
-            body.routeProvider === "auto"
-            ? body.routeProvider
-            : undefined;
-        if (!side || !tokenAddress || !amount) {
-            sendJsonErrorResponse(res, 400, "side, tokenAddress, and amount are required");
-            return true;
-        }
-        if (side !== "buy" && side !== "sell") {
-            sendJsonErrorResponse(res, 400, 'side must be "buy" or "sell"');
-            return true;
-        }
-        const config = loadElizaConfig();
-        const tradePermissionMode = _resolveTradePermissionMode(config);
-        const canExecuteLocally = _canUseLocalTradeExecution(tradePermissionMode, isAgentAutomationRequest(req));
-        const addresses = getWalletAddresses();
-        const walletAddress = addresses.evmAddress ?? null;
-        const hasLocalKey = Boolean(process.env.EVM_PRIVATE_KEY?.trim());
-        const hasStewardSigner = isStewardConfigured();
-        const canSign = hasLocalKey || hasStewardSigner;
-        const rpcReadiness = resolveWalletRpcReadiness(config);
-        const bscExecutionNetwork = resolveBscExecutionNetwork();
-        try {
-            const quote = await buildBscTradeQuote({
-                walletAddress,
-                rpcUrls: rpcReadiness.bscRpcUrls,
-                cloudManagedAccess: rpcReadiness.cloudManagedAccess,
-                request: {
-                    side,
-                    tokenAddress,
-                    amount,
-                    slippageBps: typeof body.slippageBps === "number" ? body.slippageBps : undefined,
-                    routeProvider,
-                },
-            });
-            const unsignedTx = quote.side === "buy"
-                ? buildBscBuyUnsignedTx(quote, walletAddress, typeof body.deadlineSeconds === "number"
-                    ? body.deadlineSeconds
-                    : undefined)
-                : buildBscSellUnsignedTx(quote, walletAddress, typeof body.deadlineSeconds === "number"
-                    ? body.deadlineSeconds
-                    : undefined);
-            let unsignedApprovalTx;
-            let requiresApproval = false;
-            if (quote.side === "sell" && walletAddress) {
-                unsignedApprovalTx = buildBscApproveUnsignedTx(quote.tokenAddress, walletAddress, resolveBscApprovalSpender(quote), quote.quoteIn.amountWei);
-                requiresApproval = true;
-            }
-            if (!canSign || !canExecuteLocally || body.confirm !== true) {
-                sendJsonResponse(res, 200, {
-                    ok: true,
-                    side: quote.side,
-                    mode: resolveWalletExecutionMode(canSign, canExecuteLocally, hasStewardSigner),
-                    quote,
-                    executed: false,
-                    requiresUserSignature: true,
-                    unsignedTx,
-                    unsignedApprovalTx,
-                    requiresApproval,
-                });
-                return true;
-            }
-            const rpcUrl = resolvePrimaryBscRpcUrl({
-                rpcUrls: rpcReadiness.bscRpcUrls,
-                cloudManagedAccess: rpcReadiness.cloudManagedAccess,
-            });
-            let approvalHash;
-            let finalHash = "";
-            let finalNonce = null;
-            let finalGasLimit = "0";
-            let finalMode = hasLocalKey
-                ? "local-key"
-                : "steward";
-            if (hasLocalKey && canExecuteLocally) {
-                if (!rpcUrl) {
-                    sendJsonErrorResponse(res, 503, "BSC RPC not configured for local execution");
-                    return true;
-                }
-                if (requiresApproval && unsignedApprovalTx) {
-                    const approvalResult = await sendLocalWalletTransaction(rpcUrl, {
-                        to: unsignedApprovalTx.to,
-                        data: unsignedApprovalTx.data,
-                        value: BigInt(unsignedApprovalTx.valueWei),
-                        chainId: unsignedApprovalTx.chainId,
-                    });
-                    approvalHash = approvalResult.hash;
-                    const provider = new ethers.JsonRpcProvider(rpcUrl);
-                    try {
-                        await provider.waitForTransaction(approvalHash, 1);
-                    }
-                    finally {
-                        provider.destroy();
-                    }
-                }
-                const localExecution = await sendLocalWalletTransaction(rpcUrl, {
-                    to: unsignedTx.to,
-                    data: unsignedTx.data,
-                    value: BigInt(unsignedTx.valueWei),
-                    chainId: unsignedTx.chainId,
-                });
-                finalHash = localExecution.hash;
-                finalNonce = localExecution.nonce;
-                finalGasLimit = localExecution.gasLimit;
-            }
-            else {
-                finalMode = "steward";
-                if (requiresApproval && unsignedApprovalTx) {
-                    const approvalResult = await signTransactionWithOptionalSteward({
-                        evmAddress: walletAddress,
-                        tx: {
-                            to: unsignedApprovalTx.to,
-                            data: unsignedApprovalTx.data,
-                            value: unsignedApprovalTx.valueWei,
-                            chainId: unsignedApprovalTx.chainId,
-                            broadcast: true,
-                        },
-                    });
-                    if (approvalResult.mode === "steward" &&
-                        approvalResult.pendingApproval) {
-                        sendJsonResponse(res, 200, {
-                            ok: true,
-                            side: quote.side,
-                            mode: "steward",
-                            quote,
-                            executed: false,
-                            requiresUserSignature: false,
-                            unsignedTx,
-                            unsignedApprovalTx,
-                            requiresApproval,
-                            approval: {
-                                status: "pending_approval",
-                                policyResults: approvalResult.policyResults,
-                            },
-                        });
-                        return true;
-                    }
-                    approvalHash =
-                        "txHash" in approvalResult ? approvalResult.txHash : "";
-                    if (approvalResult.mode === "steward" && rpcUrl) {
-                        const provider = new ethers.JsonRpcProvider(rpcUrl);
-                        try {
-                            await provider.waitForTransaction(approvalHash, 1);
-                        }
-                        finally {
-                            provider.destroy();
-                        }
-                    }
-                }
-                const executionResult = await signTransactionWithOptionalSteward({
-                    evmAddress: walletAddress,
-                    tx: {
-                        to: unsignedTx.to,
-                        data: unsignedTx.data,
-                        value: unsignedTx.valueWei,
-                        chainId: unsignedTx.chainId,
-                        broadcast: true,
-                    },
-                });
-                if (executionResult.mode === "steward" &&
-                    executionResult.pendingApproval) {
-                    sendJsonResponse(res, 200, {
-                        ok: true,
-                        side: quote.side,
-                        mode: "steward",
-                        quote,
-                        executed: false,
-                        requiresUserSignature: false,
-                        unsignedTx,
-                        unsignedApprovalTx,
-                        requiresApproval,
-                        approvalHash,
-                        execution: {
-                            status: "pending_approval",
-                            policyResults: executionResult.policyResults,
-                        },
-                    });
-                    return true;
-                }
-                finalHash = "txHash" in executionResult ? executionResult.txHash : "";
-            }
-            try {
-                const tradeSource = body.source === "agent" || body.source === "manual"
-                    ? body.source
-                    : "manual";
-                recordWalletTradeLedgerEntry({
-                    hash: finalHash,
-                    source: tradeSource,
-                    side: quote.side,
-                    tokenAddress: quote.tokenAddress,
-                    slippageBps: quote.slippageBps,
-                    route: quote.route,
-                    quoteIn: {
-                        symbol: quote.quoteIn.symbol,
-                        amount: quote.quoteIn.amount,
-                        amountWei: quote.quoteIn.amountWei,
-                    },
-                    quoteOut: {
-                        symbol: quote.quoteOut.symbol,
-                        amount: quote.quoteOut.amount,
-                        amountWei: quote.quoteOut.amountWei,
-                    },
-                    status: "pending",
-                    confirmations: 0,
-                    nonce: finalNonce,
-                    blockNumber: null,
-                    gasUsed: null,
-                    effectiveGasPriceWei: null,
-                    explorerUrl: `${bscExecutionNetwork.explorerBaseUrl}/tx/${finalHash}`,
-                });
-            }
-            catch (ledgerErr) {
-                logger.warn(`[api] Failed to record trade ledger entry: ${ledgerErr instanceof Error ? ledgerErr.message : ledgerErr}`);
-            }
-            sendJsonResponse(res, 200, {
-                ok: true,
-                side: quote.side,
-                mode: finalMode,
-                quote,
-                executed: true,
-                requiresUserSignature: false,
-                unsignedTx,
-                unsignedApprovalTx,
-                requiresApproval,
-                execution: {
-                    hash: finalHash,
-                    nonce: finalNonce,
-                    gasLimit: finalGasLimit,
-                    valueWei: unsignedTx.valueWei,
-                    explorerUrl: `${bscExecutionNetwork.explorerBaseUrl}/tx/${finalHash}`,
-                    blockNumber: null,
-                    status: "pending",
-                    approvalHash,
-                },
-            });
-        }
-        catch (err) {
-            if (isStewardPolicyRejection(err)) {
-                sendJsonResponse(res, 403, {
-                    ok: false,
-                    mode: "steward",
-                    executed: false,
-                    requiresUserSignature: false,
-                    error: err.message,
-                    execution: {
-                        status: "rejected",
-                        policyResults: getStewardPolicyResults(err),
-                    },
-                });
-                return true;
-            }
-            sendJsonErrorResponse(res, 500, `Trade execution failed: ${err instanceof Error ? err.message : "unknown error"}`);
-        }
-        return true;
-    }
-    // ── POST /api/wallet/transfer/execute ──────────────────────────────────
-    if (method === "POST" && url.pathname === "/api/wallet/transfer/execute") {
-        if (!ensureCompatApiAuthorized(req, res)) {
-            return true;
-        }
-        const body = await readCompatJsonBody(req, res);
-        if (body == null) {
-            return true;
-        }
-        const toAddressRaw = typeof body.toAddress === "string" ? body.toAddress.trim() : "";
-        const amount = typeof body.amount === "string" ? body.amount.trim() : "";
-        const assetSymbol = typeof body.assetSymbol === "string" ? body.assetSymbol.trim() : "";
-        if (!toAddressRaw || !amount || !assetSymbol) {
-            sendJsonErrorResponse(res, 400, "toAddress, amount, and assetSymbol are required");
-            return true;
-        }
-        const config = loadElizaConfig();
-        const tradePermissionMode = _resolveTradePermissionMode(config);
-        const canExecuteLocally = _canUseLocalTradeExecution(tradePermissionMode, isAgentAutomationRequest(req));
-        const hasLocalKey = Boolean(process.env.EVM_PRIVATE_KEY?.trim());
-        const hasStewardSigner = isStewardConfigured();
-        const canSign = hasLocalKey || hasStewardSigner;
-        const addresses = getWalletAddresses();
-        const rpcReadiness = resolveWalletRpcReadiness(config);
-        const bscExecutionNetwork = resolveBscExecutionNetwork();
-        let toAddress;
-        try {
-            toAddress = ethers.getAddress(toAddressRaw);
-        }
-        catch {
-            sendJsonErrorResponse(res, 400, "Invalid toAddress — must be a valid EVM address");
-            return true;
-        }
-        const isBnb = assetSymbol.toUpperCase() === "BNB";
-        let decimals = 18;
-        if (typeof body.tokenAddress === "string" && body.tokenAddress.trim()) {
-            const provider = new ethers.JsonRpcProvider(resolvePrimaryBscRpcUrl({
-                rpcUrls: rpcReadiness.bscRpcUrls,
-                cloudManagedAccess: rpcReadiness.cloudManagedAccess,
-            }) ?? "https://bsc-dataseed1.binance.org/");
-            try {
-                const tokenContract = new ethers.Contract(body.tokenAddress, ["function decimals() view returns (uint8)"], provider);
-                decimals = Number(await tokenContract.decimals());
-            }
-            finally {
-                provider.destroy();
-            }
-        }
-        const unsignedTx = {
-            chainId: bscExecutionNetwork.chainId,
-            from: addresses.evmAddress ?? null,
-            to: isBnb || typeof body.tokenAddress !== "string"
-                ? toAddress
-                : body.tokenAddress,
-            data: isBnb
-                ? "0x"
-                : new ethers.Interface([
-                    "function transfer(address to, uint256 amount) returns (bool)",
-                ]).encodeFunctionData("transfer", [
-                    toAddress,
-                    ethers.parseUnits(amount, decimals),
-                ]),
-            valueWei: isBnb ? ethers.parseEther(amount).toString() : "0",
-            explorerUrl: bscExecutionNetwork.explorerBaseUrl,
-            assetSymbol,
-            amount,
-            tokenAddress: typeof body.tokenAddress === "string" ? body.tokenAddress : undefined,
-        };
-        if (!canSign || !canExecuteLocally || body.confirm !== true) {
-            sendJsonResponse(res, 200, {
-                ok: true,
-                mode: resolveWalletExecutionMode(canSign, canExecuteLocally, hasStewardSigner),
-                executed: false,
-                requiresUserSignature: true,
-                toAddress,
-                amount,
-                assetSymbol,
-                tokenAddress: unsignedTx.tokenAddress,
-                unsignedTx,
-            });
-            return true;
-        }
-        const _rpcUrl = resolvePrimaryBscRpcUrl({
-            rpcUrls: rpcReadiness.bscRpcUrls,
-            cloudManagedAccess: rpcReadiness.cloudManagedAccess,
-        });
-        try {
-            let finalHash = "";
-            let finalNonce = null;
-            let finalGasLimit = "0";
-            let finalMode = hasLocalKey
-                ? "local-key"
-                : "steward";
-            if (hasLocalKey && canExecuteLocally) {
-                if (!_rpcUrl) {
-                    sendJsonErrorResponse(res, 503, "BSC RPC not configured for local execution");
-                    return true;
-                }
-                const localExecution = await sendLocalWalletTransaction(_rpcUrl, {
-                    to: unsignedTx.to,
-                    data: unsignedTx.data,
-                    value: BigInt(unsignedTx.valueWei),
-                    chainId: unsignedTx.chainId,
-                });
-                finalHash = localExecution.hash;
-                finalNonce = localExecution.nonce;
-                finalGasLimit = localExecution.gasLimit;
-            }
-            else {
-                finalMode = "steward";
-                const executionResult = await signTransactionWithOptionalSteward({
-                    evmAddress: addresses.evmAddress,
-                    tx: {
-                        to: unsignedTx.to,
-                        data: unsignedTx.data,
-                        value: unsignedTx.valueWei,
-                        chainId: unsignedTx.chainId,
-                        broadcast: true,
-                    },
-                });
-                if (executionResult.mode === "steward" &&
-                    executionResult.pendingApproval) {
-                    sendJsonResponse(res, 200, {
-                        ok: true,
-                        mode: "steward",
-                        executed: false,
-                        requiresUserSignature: false,
-                        toAddress,
-                        amount,
-                        assetSymbol,
-                        tokenAddress: unsignedTx.tokenAddress,
-                        unsignedTx,
-                        execution: {
-                            status: "pending_approval",
-                            policyResults: executionResult.policyResults,
-                        },
-                    });
-                    return true;
-                }
-                finalHash = "txHash" in executionResult ? executionResult.txHash : "";
-            }
-            sendJsonResponse(res, 200, {
-                ok: true,
-                mode: finalMode,
-                executed: true,
-                requiresUserSignature: false,
-                toAddress,
-                amount,
-                assetSymbol,
-                tokenAddress: unsignedTx.tokenAddress,
-                unsignedTx,
-                execution: {
-                    hash: finalHash,
-                    nonce: finalNonce,
-                    gasLimit: finalGasLimit,
-                    valueWei: unsignedTx.valueWei,
-                    explorerUrl: `${bscExecutionNetwork.explorerBaseUrl}/tx/${finalHash}`,
-                    blockNumber: null,
-                    status: "pending",
-                },
-            });
-        }
-        catch (err) {
-            if (isStewardPolicyRejection(err)) {
-                sendJsonResponse(res, 403, {
-                    ok: false,
-                    mode: "steward",
-                    executed: false,
-                    requiresUserSignature: false,
-                    error: err.message,
-                    execution: {
-                        status: "rejected",
-                        policyResults: getStewardPolicyResults(err),
-                    },
-                });
-                return true;
-            }
-            sendJsonErrorResponse(res, 500, `Transfer failed: ${err instanceof Error ? err.message : "unknown error"}`);
-        }
-        return true;
-    }
-    return false;
-}

package/apps/app-steward/src/security/hydrate-wallet-keys-from-platform-store.d.ts

@@ -1,7 +0,0 @@
-/**
- * Fills `process.env` wallet keys from the OS secret store when the key is
- * unset/blank. Runs before upstream `startApiServer` merges `config.env`, so
- * persisted config only fills gaps the store did not supply.
- */
-export declare function hydrateWalletKeysFromNodePlatformSecureStore(): Promise<void>;
-//# sourceMappingURL=hydrate-wallet-keys-from-platform-store.d.ts.map

package/apps/app-steward/src/security/hydrate-wallet-keys-from-platform-store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"hydrate-wallet-keys-from-platform-store.d.ts","sourceRoot":"","sources":["../../../../../../../apps/app-steward/src/security/hydrate-wallet-keys-from-platform-store.ts"],"names":[],"mappings":"AAgBA;;;;GAIG;AACH,wBAAsB,4CAA4C,IAAI,OAAO,CAAC,IAAI,CAAC,CA6BlF"}

package/apps/app-steward/src/security/hydrate-wallet-keys-from-platform-store.js

@@ -1,40 +0,0 @@
-import { deriveAgentVaultId } from "@elizaos/app-core/security/agent-vault-id";
-import { createNodePlatformSecureStore, isWalletOsStoreReadEnabled, } from "@elizaos/app-core/security/platform-secure-store-node";
-import { logger } from "@elizaos/core";
-const WALLET_ENV_PAIRS = [
-    ["EVM_PRIVATE_KEY", "wallet.evm_private_key"],
-    ["SOLANA_PRIVATE_KEY", "wallet.solana_private_key"],
-    ["STEWARD_API_URL", "steward.api_url"],
-    ["STEWARD_AGENT_ID", "steward.agent_id"],
-    ["STEWARD_AGENT_TOKEN", "steward.agent_token"],
-];
-/**
- * Fills `process.env` wallet keys from the OS secret store when the key is
- * unset/blank. Runs before upstream `startApiServer` merges `config.env`, so
- * persisted config only fills gaps the store did not supply.
- */
-export async function hydrateWalletKeysFromNodePlatformSecureStore() {
-    if (!isWalletOsStoreReadEnabled()) {
-        return;
-    }
-    try {
-        const store = createNodePlatformSecureStore();
-        if (!(await store.isAvailable())) {
-            return;
-        }
-        const vaultId = deriveAgentVaultId();
-        for (const [envKey, kind] of WALLET_ENV_PAIRS) {
-            const cur = process.env[envKey];
-            if (typeof cur === "string" && cur.trim()) {
-                continue;
-            }
-            const got = await store.get(vaultId, kind);
-            if (got.ok) {
-                process.env[envKey] = got.value;
-            }
-        }
-    }
-    catch (err) {
-        logger.warn(`[wallet][os-store] hydrate failed: ${err instanceof Error ? err.message : String(err)}`);
-    }
-}

package/apps/app-steward/src/security/wallet-os-store-actions.d.ts

@@ -1,14 +0,0 @@
-export declare function deleteWalletSecretsFromOsStore(): Promise<void>;
-export type MigrateWalletPrivateKeysToOsStoreResult = {
-    migrated: string[];
-    failed: string[];
-    /** True when the backend cannot run on this host (e.g. Linux without secret-tool). */
-    unavailable?: boolean;
-};
-/**
- * Copies wallet keys from `process.env` and/or persisted `config.env` into the
- * OS store, strips them from saved config, and ensures `process.env` holds the
- * values for the running process.
- */
-export declare function migrateWalletPrivateKeysToOsStore(): Promise<MigrateWalletPrivateKeysToOsStoreResult>;
-//# sourceMappingURL=wallet-os-store-actions.d.ts.map

package/apps/app-steward/src/security/wallet-os-store-actions.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"wallet-os-store-actions.d.ts","sourceRoot":"","sources":["../../../../../../../apps/app-steward/src/security/wallet-os-store-actions.ts"],"names":[],"mappings":"AAUA,wBAAsB,8BAA8B,IAAI,OAAO,CAAC,IAAI,CAAC,CAKpE;AAED,MAAM,MAAM,uCAAuC,GAAG;IACpD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,sFAAsF;IACtF,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF;;;;GAIG;AACH,wBAAsB,iCAAiC,IAAI,OAAO,CAAC,uCAAuC,CAAC,CA6D1G"}

package/apps/app-steward/src/security/wallet-os-store-actions.js

@@ -1,70 +0,0 @@
-import { loadElizaConfig, saveElizaConfig } from "@elizaos/agent/config/config";
-import { deriveAgentVaultId } from "@elizaos/app-core/security/agent-vault-id";
-import { createNodePlatformSecureStore } from "@elizaos/app-core/security/platform-secure-store-node";
-const WALLET_PAIRS = [
-    ["EVM_PRIVATE_KEY", "wallet.evm_private_key"],
-    ["SOLANA_PRIVATE_KEY", "wallet.solana_private_key"],
-];
-export async function deleteWalletSecretsFromOsStore() {
-    const store = createNodePlatformSecureStore();
-    const vaultId = deriveAgentVaultId();
-    await store.delete(vaultId, "wallet.evm_private_key");
-    await store.delete(vaultId, "wallet.solana_private_key");
-}
-/**
- * Copies wallet keys from `process.env` and/or persisted `config.env` into the
- * OS store, strips them from saved config, and ensures `process.env` holds the
- * values for the running process.
- */
-export async function migrateWalletPrivateKeysToOsStore() {
-    const store = createNodePlatformSecureStore();
-    const migrated = [];
-    const failed = [];
-    if (!(await store.isAvailable())) {
-        return { migrated, failed: [], unavailable: true };
-    }
-    const vaultId = deriveAgentVaultId();
-    const config = loadElizaConfig();
-    const persisted = config.env && typeof config.env === "object" && !Array.isArray(config.env)
-        ? config.env
-        : {};
-    for (const [envKey, kind] of WALLET_PAIRS) {
-        const fromProcess = typeof process.env[envKey] === "string"
-            ? process.env[envKey]?.trim()
-            : "";
-        const fromConfig = typeof persisted[envKey] === "string"
-            ? String(persisted[envKey]).trim()
-            : "";
-        const value = fromProcess || fromConfig;
-        if (!value) {
-            continue;
-        }
-        const r = await store.set(vaultId, kind, value);
-        if (!r.ok) {
-            failed.push(envKey);
-            continue;
-        }
-        migrated.push(envKey);
-        if (!fromProcess) {
-            process.env[envKey] = value;
-        }
-    }
-    let dirty = false;
-    const nextEnv = { ...persisted };
-    for (const [envKey] of WALLET_PAIRS) {
-        if (typeof nextEnv[envKey] === "string") {
-            delete nextEnv[envKey];
-            dirty = true;
-        }
-    }
-    if (dirty) {
-        if (Object.keys(nextEnv).length === 0) {
-            delete config.env;
-        }
-        else {
-            config.env = nextEnv;
-        }
-        saveElizaConfig(config);
-    }
-    return { migrated, failed };
-}