@elizaos/agent 2.0.0-alpha.97 → 2.0.0-beta.1

package/dist/packages/agent/src/hooks/loader.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Hook Loader — load and register hooks into the event system.
+ *
+ * Orchestrates discovery -> eligibility -> loading -> registration.
+ *
+ * @module hooks/loader
+ */
+import type { InternalHooksConfig } from "../config/types.hooks.ts";
+import { type DiscoveryOptions } from "./discovery.ts";
+export interface LoadHooksOptions extends DiscoveryOptions {
+    /** Internal hooks configuration. */
+    internalConfig?: InternalHooksConfig;
+    /** Full Eliza config for eligibility checks. */
+    elizaConfig?: Record<string, unknown>;
+}
+export interface LoadHooksResult {
+    /** Total hooks discovered. */
+    discovered: number;
+    /** Hooks that passed eligibility. */
+    eligible: number;
+    /** Hooks successfully loaded and registered. */
+    registered: number;
+    /** Hooks that were skipped (disabled or ineligible). */
+    skipped: string[];
+    /** Hooks that failed to load. */
+    failed: string[];
+}
+/**
+ * Discover, filter, load, and register all hooks.
+ *
+ * This is the main entry point called during gateway startup.
+ */
+export declare function loadHooks(options?: LoadHooksOptions): Promise<LoadHooksResult>;
+//# sourceMappingURL=loader.d.ts.map

package/dist/packages/agent/src/hooks/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../../../../src/hooks/loader.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAOH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,KAAK,gBAAgB,EAAiB,MAAM,gBAAgB,CAAC;AAqGtE,MAAM,WAAW,gBAAiB,SAAQ,gBAAgB;IACxD,oCAAoC;IACpC,cAAc,CAAC,EAAE,mBAAmB,CAAC;IACrC,gDAAgD;IAChD,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,eAAe;IAC9B,8BAA8B;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,gDAAgD;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,wDAAwD;IACxD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,iCAAiC;IACjC,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAC7B,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,eAAe,CAAC,CAsJ1B"}

package/dist/packages/agent/src/hooks/loader.js

@@ -0,0 +1,214 @@
+/**
+ * Hook Loader — load and register hooks into the event system.
+ *
+ * Orchestrates discovery -> eligibility -> loading -> registration.
+ *
+ * @module hooks/loader
+ */
+var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
+    if (typeof path === "string" && /^\.\.?\//.test(path)) {
+        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
+            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
+        });
+    }
+    return path;
+};
+import { lstat, realpath } from "node:fs/promises";
+import { homedir } from "node:os";
+import { resolve, sep } from "node:path";
+import { pathToFileURL } from "node:url";
+import { logger } from "@elizaos/core";
+import { discoverHooks } from "./discovery.js";
+import { checkEligibility, resolveHookConfig } from "./eligibility.js";
+import { clearHooks, registerHook } from "./registry.js";
+// ---------- Path Safety ----------
+/** Directories from which hook modules may be loaded. */
+function getSafeHookRoots(workspacePath, bundledDir) {
+    const roots = [resolve(homedir(), ".eliza", "hooks")];
+    if (bundledDir)
+        roots.push(resolve(bundledDir));
+    if (workspacePath) {
+        roots.push(resolve(workspacePath.replace(/^~/, homedir()), "hooks"));
+    }
+    return roots;
+}
+/**
+ * Ensure a module path resolves to a file under one of the allowed hook
+ * roots.  Blocks absolute paths to arbitrary locations and path-traversal
+ * attacks (e.g. "../../etc/malicious").
+ */
+async function normalizeRootPath(root) {
+    const resolvedRoot = resolve(root);
+    try {
+        return await realpath(resolvedRoot);
+    }
+    catch {
+        return resolvedRoot;
+    }
+}
+async function normalizeModulePath(modulePath) {
+    const resolvedModulePath = resolve(modulePath);
+    try {
+        const stats = await lstat(resolvedModulePath);
+        if (stats.isSymbolicLink()) {
+            return await realpath(resolvedModulePath).catch(() => null);
+        }
+        return await realpath(resolvedModulePath).catch(() => resolvedModulePath);
+    }
+    catch (err) {
+        if (err.code === "ENOENT") {
+            return resolvedModulePath;
+        }
+        return null;
+    }
+}
+async function isPathUnderRoots(modulePath, roots) {
+    const normalizedModulePath = await normalizeModulePath(modulePath);
+    if (!normalizedModulePath) {
+        return false;
+    }
+    return roots.some((root) => {
+        const normalizedRoot = root.endsWith(sep) ? root : root + sep;
+        return (normalizedModulePath.startsWith(normalizedRoot) ||
+            normalizedModulePath === root);
+    });
+}
+// ---------- Dynamic Handler Loading ----------
+/**
+ * Dynamically import a hook handler module.
+ * Uses cache-busting query parameter for dev mode hot reload.
+ */
+async function loadHandlerModule(handlerPath, exportName = "default") {
+    try {
+        const url = pathToFileURL(handlerPath).href;
+        // Cache-busting for dev mode
+        const mod = await import(__rewriteRelativeImportExtension(`${url}?t=${Date.now()}`));
+        const handler = mod[exportName];
+        if (typeof handler !== "function") {
+            logger.warn(`[hooks] Handler at ${handlerPath} does not export a function as "${exportName}"`);
+            return null;
+        }
+        return handler;
+    }
+    catch (err) {
+        const msg = String(err);
+        logger.error(`[hooks] Failed to load handler ${handlerPath}: ${msg}`);
+        return null;
+    }
+}
+/**
+ * Discover, filter, load, and register all hooks.
+ *
+ * This is the main entry point called during gateway startup.
+ */
+export async function loadHooks(options = {}) {
+    const { internalConfig, elizaConfig = {} } = options;
+    // Check if hooks are enabled
+    if (internalConfig?.enabled === false) {
+        logger.info("[hooks] Internal hooks disabled");
+        return {
+            discovered: 0,
+            eligible: 0,
+            registered: 0,
+            skipped: [],
+            failed: [],
+        };
+    }
+    // Clear existing hooks (for reload)
+    clearHooks();
+    // Validate config-supplied extraDirs: only allow paths under ~/.eliza/
+    // to prevent config injection from scanning attacker-controlled directories.
+    const safeExtraDirs = [...(options.extraDirs ?? [])];
+    const elizaHome = resolve(homedir(), ".eliza");
+    for (const dir of internalConfig?.load?.extraDirs ?? []) {
+        const resolved = resolve(dir.replace(/^~/, homedir()));
+        if (resolved.startsWith(elizaHome + sep) || resolved === elizaHome) {
+            safeExtraDirs.push(dir);
+        }
+        else {
+            logger.warn(`[hooks] Rejected config extraDir "${dir}": must be under ~/.eliza/`);
+        }
+    }
+    // Discover hooks
+    const entries = await discoverHooks({
+        workspacePath: options.workspacePath,
+        bundledDir: options.bundledDir,
+        extraDirs: safeExtraDirs,
+    });
+    const result = {
+        discovered: entries.length,
+        eligible: 0,
+        registered: 0,
+        skipped: [],
+        failed: [],
+    };
+    // Process each hook
+    for (const entry of entries) {
+        const hookKey = entry.metadata?.hookKey ?? entry.hook.name;
+        const hookConfig = resolveHookConfig(internalConfig, hookKey);
+        // Check eligibility
+        const eligibility = checkEligibility(entry.metadata, hookConfig, elizaConfig);
+        if (!eligibility.eligible) {
+            result.skipped.push(`${entry.hook.name}: ${eligibility.missing.join(", ")}`);
+            continue;
+        }
+        result.eligible++;
+        // Check if explicitly disabled
+        if (hookConfig?.enabled === false) {
+            result.skipped.push(`${entry.hook.name}: disabled in config`);
+            continue;
+        }
+        // Load handler
+        const exportName = entry.metadata?.export ?? "default";
+        const handler = await loadHandlerModule(entry.hook.handlerPath, exportName);
+        if (!handler) {
+            result.failed.push(entry.hook.name);
+            continue;
+        }
+        // Register for all configured events
+        const events = entry.metadata?.events ?? [];
+        if (events.length === 0) {
+            logger.warn(`[hooks] Hook "${entry.hook.name}" has no events configured`);
+            result.skipped.push(`${entry.hook.name}: no events`);
+            continue;
+        }
+        for (const eventKey of events) {
+            registerHook(eventKey, handler);
+        }
+        const emoji = entry.metadata?.emoji ?? "🔗";
+        logger.info(`[hooks] ${emoji} Registered: ${entry.hook.name} -> ${events.join(", ")}`);
+        result.registered++;
+    }
+    // Load legacy config handlers (backwards compatibility)
+    if (internalConfig?.handlers) {
+        const safeRoots = await Promise.all(getSafeHookRoots(options.workspacePath, options.bundledDir).map(normalizeRootPath));
+        for (const legacyHandler of internalConfig.handlers) {
+            // Validate module path is under a known hook directory to prevent
+            // arbitrary code execution via config-injected module paths.
+            if (!(await isPathUnderRoots(legacyHandler.module, safeRoots))) {
+                logger.warn(`[hooks] Rejected legacy handler: module path "${legacyHandler.module}" is outside allowed hook directories`);
+                result.failed.push(legacyHandler.module);
+                continue;
+            }
+            try {
+                const handler = await loadHandlerModule(legacyHandler.module, legacyHandler.export ?? "default");
+                if (handler) {
+                    registerHook(legacyHandler.event, handler);
+                    logger.info(`[hooks] Registered legacy handler: ${legacyHandler.event} -> ${legacyHandler.module}`);
+                    result.registered++;
+                }
+                else {
+                    result.failed.push(legacyHandler.module);
+                }
+            }
+            catch (err) {
+                const msg = String(err);
+                logger.warn(`[hooks] Failed to load legacy handler: ${msg}`);
+                result.failed.push(legacyHandler.module);
+            }
+        }
+    }
+    logger.info(`[hooks] Load complete: ${result.registered}/${result.discovered} registered, ` +
+        `${result.skipped.length} skipped, ${result.failed.length} failed`);
+    return result;
+}

package/dist/packages/agent/src/hooks/registry.d.ts

@@ -0,0 +1,11 @@
+import type { HookEvent, HookHandler } from "./types.ts";
+/**
+ * Event keys: "command" matches all command events,
+ * "command:new" matches only /new.
+ */
+export declare function registerHook(eventKey: string, handler: HookHandler): void;
+export declare function clearHooks(): void;
+/** Dispatches to specific ("command:new") then general ("command") handlers. */
+export declare function triggerHook(event: HookEvent): Promise<void>;
+export declare function createHookEvent(type: HookEvent["type"], action: string, sessionKey: string, context?: Record<string, unknown>): HookEvent;
+//# sourceMappingURL=registry.d.ts.map

package/dist/packages/agent/src/hooks/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../../../src/hooks/registry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAIzD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,IAAI,CAIzE;AAED,wBAAgB,UAAU,IAAI,IAAI,CAEjC;AAED,gFAAgF;AAChF,wBAAsB,WAAW,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAqCjE;AAED,wBAAgB,eAAe,CAC7B,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,EACvB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACpC,SAAS,CASX"}

package/dist/packages/agent/src/index.d.ts

@@ -0,0 +1,73 @@
+export { DEFAULT_MAX_BODY_BYTES, readJsonBody, readRequestBody, readRequestBodyBuffer, sendJson, sendJsonError, } from "@elizaos/core";
+export type { CloudConfigLike } from "@elizaos/plugin-elizacloud";
+export { handleCloudBillingRoute, handleCloudCompatRoute, handleCloudRoute, normalizeCloudSiteUrl, resolveCloudApiBaseUrl, validateCloudBaseUrl, } from "@elizaos/plugin-elizacloud";
+export type { ElizaConfig, ReleaseChannel, RolesConfig } from "@elizaos/shared";
+export { CONNECTOR_PLUGINS, STREAMING_PLUGINS, } from "@elizaos/shared";
+export { type ExtractActionParamsArgs, extractActionParamsViaLlm, type ParamSchemaDescriptor, } from "./actions/extract-params.ts";
+export * from "./actions/index.ts";
+export * from "./api/config-env.ts";
+export { handleConnectorAccountRoutes } from "./api/connector-account-routes.ts";
+export * from "./api/conversation-metadata.ts";
+export * from "./api/index.ts";
+export { setOwnerContact } from "./api/owner-contact-helpers.ts";
+export { findPrimaryEnvKey, readBundledPluginPackageMetadata, } from "./api/plugin-discovery-helpers.ts";
+export * from "./api/plugin-runtime-apply.ts";
+export { applyCanonicalOnboardingConfig, clearPersistedOnboardingConfig, } from "./api/provider-switch-config.ts";
+export { RegistryService } from "./api/registry-service.ts";
+export { AGENT_EVENT_ALLOWED_STREAMS, CONFIG_WRITE_ALLOWED_TOP_KEYS, type ConversationMeta, type captureEarlyLogs, cloneWithoutBlockedObjectKeys, decodePathComponent, discoverInstalledPlugins, discoverPluginsFromManifest, ensureApiTokenForBindHost, extractAuthToken, fetchWithTimeoutGuard, injectApiBaseIntoHtml, isAllowedHost, isAuthorized, isSafeResetStateDir, normalizeWsClientId, persistConversationRoomTitle, resolveCorsOrigin, resolveMcpServersRejection, resolveMcpTerminalAuthorizationRejection, resolvePluginConfigMutationRejections, resolveTerminalRunClientId, resolveTerminalRunRejection, resolveWalletExportRejection, resolveWebSocketUpgradeRejection, routeAutonomyTextToUser, startApiServer, streamResponseBodyWithByteLimit, validateMcpServerConfig, } from "./api/server.ts";
+export { getConfiguredApiToken, isLoopbackBindHost, isTrustedLocalRequest, type PluginConfigMutationRejection, tokenMatches, } from "./api/server-auth.ts";
+export { type DeletedConversationsStateFile, getAgentEventSvc, initializeOGCodeInState, persistDeletedConversationIdsToState, readDeletedConversationIdsFromState, readOGCodeFromState, requireCoreManager, requirePluginManager, } from "./api/server-helpers.ts";
+export type { AgentAutomationMode, ChatAttachmentWithData, ConnectorRouteHandler, ConversationAutomationType, ConversationMetadata, ConversationScope, PluginEntry, PluginParamDef, StreamEventType, TradePermissionMode, } from "./api/server-types.ts";
+export { normalizeJsonRpcUrl, probeJsonRpcEndpoint, TxService, } from "./api/tx-service.ts";
+export { getWalletAddresses, initStewardWalletCache } from "./api/wallet.ts";
+export * from "./api/wallet-capability.ts";
+export * from "./api/workbench-helpers.ts";
+export * from "./auth/index.ts";
+export * from "./awareness/index.ts";
+export { runBenchmark } from "./cli/benchmark.ts";
+export { CharacterSchema } from "./config/character-schema.ts";
+export { loadElizaConfig, saveElizaConfig } from "./config/config.ts";
+export * from "./config/index.ts";
+export { resolveUserPath } from "./config/paths.ts";
+export * from "./contracts/awareness.ts";
+export * from "./diagnostics/integration-observability.ts";
+export * from "./hooks/index.ts";
+export * from "./providers/workspace.ts";
+export * from "./runtime/advanced-capabilities-config.ts";
+export * from "./runtime/agent-event-service.ts";
+export * from "./runtime/core-plugins.ts";
+export * from "./runtime/eliza.ts";
+export * from "./runtime/eliza-plugin.ts";
+export * from "./runtime/embedding-presets.ts";
+export { isCloudExecutionMode, type LocalExecutionMode, type RuntimeExecutionMode, type RuntimeExecutionModeSource, resolveLocalExecutionMode, resolveRuntimeExecutionMode, shouldUseSandboxExecution, } from "./runtime/local-execution-mode.ts";
+export * from "./runtime/onboarding-names.ts";
+export * from "./runtime/operations/vault-bridge.ts";
+export * from "./runtime/owner-entity.ts";
+export * from "./runtime/plugin-collector.ts";
+export * from "./runtime/plugin-lifecycle.ts";
+export { getLastFailedPluginNames, resolvePlugins, } from "./runtime/plugin-resolver.ts";
+export * from "./runtime/plugin-types.ts";
+export * from "./runtime/release-plugin-policy.ts";
+export * from "./runtime/restart.ts";
+export * from "./runtime/trajectory-internals.ts";
+export * from "./runtime/trajectory-persistence.ts";
+export * from "./runtime/trajectory-query.ts";
+export * from "./runtime/version.ts";
+export * from "./security/index.ts";
+export { isStewardEvmBridgeActive, setStewardEvmBridgeActive, } from "./services/external-bridge-state.ts";
+export * from "./services/index.ts";
+export { type JsRuntimeBridge, type JsRuntimeEvaluateOptions, type JsRuntimeFactory, type JsRuntimeImportOptions, type JsRuntimeKind, type JsValue, registerJsRuntimeFactory, resolveJsRuntimeBridge, } from "./services/js-runtime-bridge.ts";
+export * from "./services/plugin-installer";
+export { type ClusterMemoriesQuery, type ClusterSearchQuery, createNativeRelationshipsGraphService, getMemoriesForCluster, type RelationshipsGraphEdge, type RelationshipsGraphQuery, type RelationshipsGraphService, type RelationshipsGraphSnapshot, type RelationshipsGraphStats, type RelationshipsPersonDetail, type RelationshipsPersonFact, type RelationshipsPersonSummary, resolveRelationshipsGraphService, searchMemoriesForCluster, } from "./services/relationships-graph.ts";
+export { runShell, type ShellExecutionMode, type ShellRequest, type ShellResult, type ShellRouterContext, type ShellSandboxBackend, } from "./services/shell-execution-router.ts";
+export { resolveDefaultAgentWorkspaceDir } from "./shared/workspace-resolution.ts";
+export * from "./test-support/index.ts";
+export * from "./test-utils/sqlite-compat.ts";
+export * from "./triggers/runtime.ts";
+export * from "./triggers/scheduling.ts";
+export * from "./triggers/text-to-workflow.ts";
+export * from "./triggers/types.ts";
+export * from "./types/index.ts";
+export * from "./utils/number-parsing.ts";
+export * from "./version-resolver.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/packages/agent/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,eAAe,EACf,qBAAqB,EACrB,QAAQ,EACR,aAAa,GACd,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAqBlE,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,gBAAgB,EAChB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,4BAA4B,CAAC;AACpC,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EACL,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,KAAK,uBAAuB,EAC5B,yBAAyB,EACzB,KAAK,qBAAqB,GAC3B,MAAM,6BAA6B,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AACjF,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gBAAgB,CAAC;AAC/B,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EACL,iBAAiB,EACjB,gCAAgC,GACjC,MAAM,mCAAmC,CAAC;AAC3C,cAAc,+BAA+B,CAAC;AAC9C,OAAO,EACL,8BAA8B,EAC9B,8BAA8B,GAC/B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EACL,2BAA2B,EAC3B,6BAA6B,EAC7B,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,6BAA6B,EAC7B,mBAAmB,EACnB,wBAAwB,EACxB,2BAA2B,EAC3B,yBAAyB,EACzB,gBAAgB,EAChB,qBAAqB,EACrB,qBAAqB,EACrB,aAAa,EACb,YAAY,EACZ,mBAAmB,EACnB,mBAAmB,EACnB,4BAA4B,EAC5B,iBAAiB,EACjB,0BAA0B,EAC1B,wCAAwC,EACxC,qCAAqC,EACrC,0BAA0B,EAC1B,2BAA2B,EAC3B,4BAA4B,EAC5B,gCAAgC,EAChC,uBAAuB,EACvB,cAAc,EACd,+BAA+B,EAC/B,uBAAuB,GACxB,MAAM,iBAAiB,CAAC;AAIzB,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,qBAAqB,EACrB,KAAK,6BAA6B,EAClC,YAAY,GACb,MAAM,sBAAsB,CAAC;AAK9B,OAAO,EACL,KAAK,6BAA6B,EAClC,gBAAgB,EAChB,uBAAuB,EACvB,oCAAoC,EACpC,mCAAmC,EACnC,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,yBAAyB,CAAC;AAKjC,YAAY,EACV,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,0BAA0B,EAC1B,oBAAoB,EACpB,iBAAiB,EACjB,WAAW,EACX,cAAc,EACd,eAAe,EACf,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,SAAS,GACV,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAC7E,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACtE,cAAc,mBAAmB,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAKpD,cAAc,0BAA0B,CAAC;AACzC,cAAc,4CAA4C,CAAC;AAC3D,cAAc,kBAAkB,CAAC;AACjC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2CAA2C,CAAC;AAC1D,cAAc,kCAAkC,CAAC;AACjD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gCAAgC,CAAC;AAC/C,OAAO,EACL,oBAAoB,EACpB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,yBAAyB,EACzB,2BAA2B,EAC3B,yBAAyB,GAC1B,MAAM,mCAAmC,CAAC;AAC3C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,sCAAsC,CAAC;AACrD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,+BAA+B,CAAC;AAC9C,OAAO,EACL,wBAAwB,EACxB,cAAc,GACf,MAAM,8BAA8B,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oCAAoC,CAAC;AACnD,cAAc,sBAAsB,CAAC;AACrC,cAAc,mCAAmC,CAAC;AAClD,cAAc,qCAAqC,CAAC;AACpD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,OAAO,EACL,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,qCAAqC,CAAC;AAC7C,cAAc,qBAAqB,CAAC;AACpC,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,KAAK,OAAO,EACZ,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,iCAAiC,CAAC;AACzC,cAAc,6BAA6B,CAAC;AAC5C,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,qCAAqC,EACrC,qBAAqB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAC/B,gCAAgC,EAChC,wBAAwB,GACzB,MAAM,mCAAmC,CAAC;AAI3C,OAAO,EACL,QAAQ,EACR,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,GACzB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,+BAA+B,EAAE,MAAM,kCAAkC,CAAC;AACnF,cAAc,yBAAyB,CAAC;AACxC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,qBAAqB,CAAC;AAEpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC"}

package/dist/packages/agent/src/index.js

@@ -0,0 +1,104 @@
+export { DEFAULT_MAX_BODY_BYTES, readJsonBody, readRequestBody, readRequestBodyBuffer, sendJson, sendJsonError, } from "@elizaos/core";
+// ── Compat re-exports for the published `@elizaos/app-core` alpha bundle ──
+//
+// `@elizaos/app-core@2.0.0-alpha.537` (the version embedded in
+// `eliza-dist` for packaged Electrobun and the AOSP installer) imports
+// these names from `@elizaos/agent`. The agent's API surface was reorganised
+// in commit 334a6ea2 — the symbols moved out into
+// `@elizaos/plugin-elizacloud`, `./api/provider-switch-config`,
+// `./config/config`, `./config/paths`, `./api/wallet`, and
+// `./shared/workspace-resolution` without the corresponding agent-side
+// re-exports. Until app-core is republished against the new surface the
+// embedded runtime fails to start with `SyntaxError: Export named ...`,
+// so we restore them here as a thin compat layer.
+//
+// New code should import each from its real home:
+//   • cloud helpers → `@elizaos/plugin-elizacloud`
+//   • provider/onboarding config helpers → `./api/provider-switch-config`
+//   • elizaConfig file IO → `./config/config`
+//   • wallet helpers → `./api/wallet`
+//   • workspace resolution → `./shared/workspace-resolution`
+//   • user path resolution → `./config/paths`
+export { handleCloudBillingRoute, handleCloudCompatRoute, handleCloudRoute, normalizeCloudSiteUrl, resolveCloudApiBaseUrl, validateCloudBaseUrl, } from "@elizaos/plugin-elizacloud";
+export { CONNECTOR_PLUGINS, STREAMING_PLUGINS, } from "@elizaos/shared";
+export { extractActionParamsViaLlm, } from "./actions/extract-params.js";
+export * from "./actions/index.js";
+export * from "./api/config-env.js";
+export { handleConnectorAccountRoutes } from "./api/connector-account-routes.js";
+export * from "./api/conversation-metadata.js";
+export * from "./api/index.js";
+export { setOwnerContact } from "./api/owner-contact-helpers.js";
+export { findPrimaryEnvKey, readBundledPluginPackageMetadata, } from "./api/plugin-discovery-helpers.js";
+export * from "./api/plugin-runtime-apply.js";
+export { applyCanonicalOnboardingConfig, clearPersistedOnboardingConfig, } from "./api/provider-switch-config.js";
+export { RegistryService } from "./api/registry-service.js";
+export { AGENT_EVENT_ALLOWED_STREAMS, CONFIG_WRITE_ALLOWED_TOP_KEYS, cloneWithoutBlockedObjectKeys, decodePathComponent, discoverInstalledPlugins, discoverPluginsFromManifest, ensureApiTokenForBindHost, extractAuthToken, fetchWithTimeoutGuard, injectApiBaseIntoHtml, isAllowedHost, isAuthorized, isSafeResetStateDir, normalizeWsClientId, persistConversationRoomTitle, resolveCorsOrigin, resolveMcpServersRejection, resolveMcpTerminalAuthorizationRejection, resolvePluginConfigMutationRejections, resolveTerminalRunClientId, resolveTerminalRunRejection, resolveWalletExportRejection, resolveWebSocketUpgradeRejection, routeAutonomyTextToUser, startApiServer, streamResponseBodyWithByteLimit, validateMcpServerConfig, } from "./api/server.js";
+// Re-export non-colliding helpers from `./api/server-auth.js`. Names that
+// `./api/server.js` already re-exports are intentionally omitted here so the
+// canonical `server.js` definitions remain authoritative.
+export { getConfiguredApiToken, isLoopbackBindHost, isTrustedLocalRequest, tokenMatches, } from "./api/server-auth.js";
+// `server-helpers.ts` exposes auth/conversation/wallet helpers that the
+// canonical `server.ts` already re-exports for backwards compat. Re-exporting
+// the entire file would clash with those re-exports, so only surface helpers
+// that aren't visible through `server.ts`.
+export { getAgentEventSvc, initializeOGCodeInState, persistDeletedConversationIdsToState, readDeletedConversationIdsFromState, readOGCodeFromState, requireCoreManager, requirePluginManager, } from "./api/server-helpers.js";
+export { normalizeJsonRpcUrl, probeJsonRpcEndpoint, TxService, } from "./api/tx-service.js";
+export { getWalletAddresses, initStewardWalletCache } from "./api/wallet.js";
+export * from "./api/wallet-capability.js";
+export * from "./api/workbench-helpers.js";
+export * from "./auth/index.js";
+export * from "./awareness/index.js";
+export { runBenchmark } from "./cli/benchmark.js";
+export { CharacterSchema } from "./config/character-schema.js";
+export { loadElizaConfig, saveElizaConfig } from "./config/config.js";
+export * from "./config/index.js";
+export { resolveUserPath } from "./config/paths.js";
+// `contracts/awareness.js` adds the local-only (non-shared) contract surface.
+// Config media/custom-action contract types are exported from `./config/index.js`
+// (via `@elizaos/shared`); do not re-export `./contracts/config.js` here or
+// `tsc` reports duplicate symbol errors (TS2308).
+export * from "./contracts/awareness.js";
+export * from "./diagnostics/integration-observability.js";
+export * from "./hooks/index.js";
+export * from "./providers/workspace.js";
+export * from "./runtime/advanced-capabilities-config.js";
+export * from "./runtime/agent-event-service.js";
+export * from "./runtime/core-plugins.js";
+export * from "./runtime/eliza.js";
+export * from "./runtime/eliza-plugin.js";
+export * from "./runtime/embedding-presets.js";
+export { isCloudExecutionMode, resolveLocalExecutionMode, resolveRuntimeExecutionMode, shouldUseSandboxExecution, } from "./runtime/local-execution-mode.js";
+export * from "./runtime/onboarding-names.js";
+export * from "./runtime/operations/vault-bridge.js";
+export * from "./runtime/owner-entity.js";
+export * from "./runtime/plugin-collector.js";
+export * from "./runtime/plugin-lifecycle.js";
+export { getLastFailedPluginNames, resolvePlugins, } from "./runtime/plugin-resolver.js";
+export * from "./runtime/plugin-types.js";
+export * from "./runtime/release-plugin-policy.js";
+export * from "./runtime/restart.js";
+export * from "./runtime/trajectory-internals.js";
+export * from "./runtime/trajectory-persistence.js";
+export * from "./runtime/trajectory-query.js";
+export * from "./runtime/version.js";
+export * from "./security/index.js";
+export { isStewardEvmBridgeActive, setStewardEvmBridgeActive, } from "./services/external-bridge-state.js";
+export * from "./services/index.js";
+export { registerJsRuntimeFactory, resolveJsRuntimeBridge, } from "./services/js-runtime-bridge.js";
+export * from "./services/plugin-installer";
+export { createNativeRelationshipsGraphService, getMemoriesForCluster, resolveRelationshipsGraphService, searchMemoriesForCluster, } from "./services/relationships-graph.js";
+// Re-export the shell-execution router by name to keep a stable surface for
+// callers that consume the chokepoint directly without unpacking the wider
+// services barrel.
+export { runShell, } from "./services/shell-execution-router.js";
+export { resolveDefaultAgentWorkspaceDir } from "./shared/workspace-resolution.js";
+export * from "./test-support/index.js";
+export * from "./test-utils/sqlite-compat.js";
+export * from "./triggers/runtime.js";
+export * from "./triggers/scheduling.js";
+export * from "./triggers/text-to-workflow.js";
+export * from "./triggers/types.js";
+// `types/index.js` aggregates `agent-skills`, `config-like`, and `trajectory`.
+export * from "./types/index.js";
+export * from "./utils/number-parsing.js";
+export * from "./version-resolver.js";

package/dist/packages/agent/src/providers/admin-panel.d.ts

@@ -0,0 +1,4 @@
+import type { Provider } from "@elizaos/core";
+export declare const adminPanelProvider: Provider;
+export declare function createAdminPanelProvider(): Provider;
+//# sourceMappingURL=admin-panel.d.ts.map

package/dist/packages/agent/src/providers/admin-panel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-panel.d.ts","sourceRoot":"","sources":["../../../../../src/providers/admin-panel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAGV,QAAQ,EAIT,MAAM,eAAe,CAAC;AAwEvB,eAAO,MAAM,kBAAkB,EAAE,QAAqC,CAAC;AAEvE,wBAAgB,wBAAwB,IAAI,QAAQ,CAgDnD"}

package/dist/packages/agent/src/providers/admin-panel.js

@@ -0,0 +1,89 @@
+import { resolveCanonicalOwnerIdForMessage } from "@elizaos/core";
+import { hasAdminAccess } from "../security/access.js";
+/** Maximum total characters for the provider text output. */
+const MAX_TEXT_LENGTH = 2000;
+/** Maximum messages to fetch per client_chat room. */
+const MESSAGES_PER_ROOM = 10;
+/** Maximum client_chat rooms to scan (most recent activity wins). */
+const MAX_ROOMS = 3;
+/**
+ * Fetch recent messages from the owner's client_chat rooms.
+ * Returns messages newest-first, capped to a sensible limit.
+ */
+async function fetchOwnerChatMessages(runtime, adminEntityId) {
+    const roomIds = await runtime.getRoomsForParticipant(adminEntityId);
+    if (roomIds.length === 0)
+        return [];
+    // Resolve rooms and filter to client_chat source
+    const roomResults = await Promise.all(roomIds.map((id) => runtime.getRoom(id)));
+    const chatRooms = roomResults.filter((r) => r != null && r.source === "client_chat");
+    if (chatRooms.length === 0)
+        return [];
+    // Limit how many rooms we scan
+    const targetRooms = chatRooms.slice(0, MAX_ROOMS);
+    const targetRoomIds = targetRooms.map((r) => r.id);
+    const memories = await runtime.getMemoriesByRoomIds({
+        tableName: "messages",
+        roomIds: targetRoomIds,
+        limit: MESSAGES_PER_ROOM * MAX_ROOMS,
+    });
+    // Sort newest-first (getMemoriesByRoomIds default may vary)
+    memories.sort((a, b) => {
+        const ta = a.createdAt ?? 0;
+        const tb = b.createdAt ?? 0;
+        return tb - ta;
+    });
+    return memories.slice(0, MESSAGES_PER_ROOM * MAX_ROOMS);
+}
+function formatMessages(messages, agentId) {
+    if (messages.length === 0)
+        return "";
+    // Display oldest-first for natural reading order
+    const ordered = [...messages].reverse();
+    const lines = ordered.map((m) => {
+        const sender = m.entityId === agentId ? "Agent" : "Owner";
+        const text = m.content?.text ?? "";
+        return `[${sender}] ${text.substring(0, 200)}`;
+    });
+    let result = `# Recent Owner Conversation (Eliza App)\n${lines.join("\n")}`;
+    if (result.length > MAX_TEXT_LENGTH) {
+        result = `${result.substring(0, MAX_TEXT_LENGTH - 3)}...`;
+    }
+    return result;
+}
+export const adminPanelProvider = createAdminPanelProvider();
+export function createAdminPanelProvider() {
+    return {
+        name: "adminPanel",
+        description: "Surfaces the owner's recent Eliza app chat so the agent has context across platforms.",
+        descriptionCompressed: "surface owner recent Eliza app chat agent context across platform",
+        dynamic: true,
+        position: 14,
+        contexts: ["admin", "settings"],
+        contextGate: { anyOf: ["admin", "settings"] },
+        cacheStable: false,
+        cacheScope: "turn",
+        roleGate: { minRole: "ADMIN" },
+        async get(runtime, message, _state) {
+            const empty = {
+                text: "",
+                values: { hasAdminChat: false },
+                data: { messageCount: 0 },
+            };
+            if (!(await hasAdminAccess(runtime, message))) {
+                return empty;
+            }
+            const adminEntityId = await resolveCanonicalOwnerIdForMessage(runtime, message);
+            if (!adminEntityId) {
+                return empty;
+            }
+            const messages = await fetchOwnerChatMessages(runtime, adminEntityId);
+            const text = formatMessages(messages, runtime.agentId);
+            return {
+                text,
+                values: { hasAdminChat: messages.length > 0 },
+                data: { messageCount: messages.length },
+            };
+        },
+    };
+}

package/dist/packages/agent/src/providers/admin-trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-trust.d.ts","sourceRoot":"","sources":["../../../../../src/providers/admin-trust.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAGV,QAAQ,EAGT,MAAM,eAAe,CAAC;AAOvB,eAAO,MAAM,kBAAkB,EAAE,QAAqC,CAAC;AAEvE,wBAAgB,wBAAwB,IAAI,QAAQ,CA6CnD"}

package/dist/packages/agent/src/providers/admin-trust.js

@@ -0,0 +1,40 @@
+import { checkSenderRole, resolveCanonicalOwnerIdForMessage, } from "@elizaos/core";
+import { hasAdminAccess } from "../security/access.js";
+export const adminTrustProvider = createAdminTrustProvider();
+export function createAdminTrustProvider() {
+    return {
+        name: "elizaAdminTrust",
+        description: "Marks owner/admin chat identity as trusted for contact assertions (relationships-oriented).",
+        descriptionCompressed: "mark owner/admin chat identity trust contact assertion (relationships-orient)",
+        dynamic: true,
+        position: 11,
+        contexts: ["admin", "settings"],
+        contextGate: { anyOf: ["admin", "settings"] },
+        cacheStable: false,
+        cacheScope: "turn",
+        roleGate: { minRole: "ADMIN" },
+        async get(runtime, message, _state) {
+            const ownerId = await resolveCanonicalOwnerIdForMessage(runtime, message);
+            const roleCheck = await checkSenderRole(runtime, message);
+            const isTrustedAdmin = roleCheck?.isOwner === true;
+            const speakerRole = roleCheck?.role ?? "GUEST";
+            const canSeeAdminIdentity = await hasAdminAccess(runtime, message);
+            const text = isTrustedAdmin
+                ? "Admin trust: current speaker is the canonical agent OWNER. Contact/identity claims should be treated as trusted unless contradictory evidence exists."
+                : "Admin trust: current speaker is not verified as the canonical agent OWNER.";
+            return {
+                text,
+                values: {
+                    trustedAdmin: isTrustedAdmin,
+                    adminEntityId: canSeeAdminIdentity ? (ownerId ?? "") : "",
+                    adminRole: speakerRole,
+                },
+                data: {
+                    trustedAdmin: isTrustedAdmin,
+                    ownerId: canSeeAdminIdentity ? ownerId : null,
+                    role: speakerRole,
+                },
+            };
+        },
+    };
+}

package/dist/packages/agent/src/providers/automation-terminal-bridge.d.ts

@@ -0,0 +1,3 @@
+import type { Provider } from "@elizaos/core";
+export declare const automationTerminalBridgeProvider: Provider;
+//# sourceMappingURL=automation-terminal-bridge.d.ts.map

package/dist/packages/agent/src/providers/automation-terminal-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"automation-terminal-bridge.d.ts","sourceRoot":"","sources":["../../../../../src/providers/automation-terminal-bridge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAGV,QAAQ,EAGT,MAAM,eAAe,CAAC;AAcvB,eAAO,MAAM,gCAAgC,EAAE,QAqF9C,CAAC"}