@elizaos/agent 2.0.0-alpha.98 → 2.0.0-beta.1

package/packages/agent/src/api/whatsapp-routes.js

@@ -1,182 +0,0 @@
-import fs from "node:fs";
-import path from "node:path";
-import { readJsonBody as parseJsonBody, sendJson } from "./http-helpers";
-const MAX_BODY_BYTES = 1_048_576;
-export const MAX_PAIRING_SESSIONS = 10;
-async function readJsonBody(req, res) {
-    return parseJsonBody(req, res, { maxBytes: MAX_BODY_BYTES });
-}
-function json(res, data, status = 200) {
-    sendJson(res, data, status);
-}
-export async function handleWhatsAppRoute(req, res, pathname, method, state, deps) {
-    if (!pathname.startsWith("/api/whatsapp"))
-        return false;
-    if (method === "POST" && pathname === "/api/whatsapp/pair") {
-        const body = await readJsonBody(req, res);
-        let accountId;
-        try {
-            accountId = deps.sanitizeAccountId(body && typeof body.accountId === "string" && body.accountId.trim()
-                ? body.accountId.trim()
-                : "default");
-        }
-        catch (err) {
-            json(res, { error: err.message }, 400);
-            return true;
-        }
-        const isReplacing = state.whatsappPairingSessions.has(accountId);
-        if (!isReplacing &&
-            state.whatsappPairingSessions.size >= MAX_PAIRING_SESSIONS) {
-            json(res, {
-                error: `Too many concurrent pairing sessions (max ${MAX_PAIRING_SESSIONS})`,
-            }, 429);
-            return true;
-        }
-        const authDir = path.join(state.workspaceDir, "whatsapp-auth", accountId);
-        state.whatsappPairingSessions.get(accountId)?.stop();
-        const session = deps.createWhatsAppPairingSession({
-            authDir,
-            accountId,
-            onEvent: (event) => {
-                state.broadcastWs?.(event);
-                if (event.status === "connected") {
-                    if (!state.config.connectors)
-                        state.config.connectors = {};
-                    state.config.connectors.whatsapp = {
-                        ...(state.config.connectors.whatsapp ?? {}),
-                        authDir,
-                        enabled: true,
-                    };
-                    try {
-                        state.saveConfig();
-                    }
-                    catch {
-                        /* test envs */
-                    }
-                }
-            },
-        });
-        state.whatsappPairingSessions.set(accountId, session);
-        try {
-            await session.start();
-            json(res, { ok: true, accountId, status: session.getStatus() });
-        }
-        catch (err) {
-            json(res, { ok: false, error: err instanceof Error ? err.message : String(err) }, 500);
-        }
-        return true;
-    }
-    if (method === "GET" && pathname === "/api/whatsapp/status") {
-        const url = new URL(req.url ?? "/", `http://${req.headers.host ?? "localhost"}`);
-        let accountId;
-        try {
-            accountId = deps.sanitizeAccountId(url.searchParams.get("accountId") || "default");
-        }
-        catch (err) {
-            json(res, { error: err.message }, 400);
-            return true;
-        }
-        const session = state.whatsappPairingSessions.get(accountId);
-        let serviceConnected = false;
-        let servicePhone = null;
-        if (state.runtime) {
-            try {
-                const waService = state.runtime.getService("whatsapp");
-                if (waService) {
-                    serviceConnected = Boolean(waService.connected);
-                    servicePhone = waService.phoneNumber ?? null;
-                }
-            }
-            catch {
-                /* service not yet registered */
-            }
-        }
-        json(res, {
-            accountId,
-            status: session?.getStatus() ?? "idle",
-            authExists: deps.whatsappAuthExists(state.workspaceDir, accountId),
-            serviceConnected,
-            servicePhone,
-        });
-        return true;
-    }
-    if (method === "POST" && pathname === "/api/whatsapp/pair/stop") {
-        const body = await readJsonBody(req, res);
-        let accountId;
-        try {
-            accountId = deps.sanitizeAccountId(body && typeof body.accountId === "string" && body.accountId.trim()
-                ? body.accountId.trim()
-                : "default");
-        }
-        catch (err) {
-            json(res, { error: err.message }, 400);
-            return true;
-        }
-        const session = state.whatsappPairingSessions.get(accountId);
-        if (session) {
-            session.stop();
-            state.whatsappPairingSessions.delete(accountId);
-        }
-        json(res, { ok: true, accountId, status: "idle" });
-        return true;
-    }
-    if (method === "POST" && pathname === "/api/whatsapp/disconnect") {
-        const body = await readJsonBody(req, res);
-        let accountId;
-        try {
-            accountId = deps.sanitizeAccountId(body && typeof body.accountId === "string" && body.accountId.trim()
-                ? body.accountId.trim()
-                : "default");
-        }
-        catch (err) {
-            json(res, { error: err.message }, 400);
-            return true;
-        }
-        const session = state.whatsappPairingSessions.get(accountId);
-        if (session) {
-            session.stop();
-            state.whatsappPairingSessions.delete(accountId);
-        }
-        try {
-            await deps.whatsappLogout(state.workspaceDir, accountId);
-        }
-        catch (logoutErr) {
-            console.warn(`[whatsapp] Logout failed for ${accountId}, deleting auth files directly:`, logoutErr instanceof Error ? logoutErr.message : String(logoutErr));
-            const authDir = path.join(state.workspaceDir, "whatsapp-auth", accountId);
-            try {
-                fs.rmSync(authDir, { recursive: true, force: true });
-            }
-            catch {
-                /* may not exist */
-            }
-        }
-        if (state.config.connectors) {
-            delete state.config.connectors.whatsapp;
-            try {
-                state.saveConfig();
-            }
-            catch {
-                /* test envs */
-            }
-        }
-        json(res, { ok: true, accountId });
-        return true;
-    }
-    return false;
-}
-export function applyWhatsAppQrOverride(plugins, workspaceDir) {
-    try {
-        const waCredsPath = path.join(workspaceDir, "whatsapp-auth", "default", "creds.json");
-        if (fs.existsSync(waCredsPath)) {
-            const waPlugin = plugins.find((plugin) => plugin.id === "whatsapp");
-            if (waPlugin) {
-                waPlugin.validationErrors = [];
-                waPlugin.configured = true;
-                waPlugin.qrConnected = true;
-            }
-        }
-    }
-    catch {
-        /* workspace dir may not exist */
-    }
-}

package/packages/agent/src/auth/anthropic.d.ts

@@ -1,25 +0,0 @@
-/**
- * Anthropic OAuth flow (Claude Pro/Max subscription)
- *
- * Wraps @mariozechner/pi-ai's loginAnthropic for server-side use.
- * The pi-ai callback API is adapted to a start/exchange pattern
- * for HTTP route handlers.
- */
-import type { OAuthCredentials } from "./types";
-export interface AnthropicFlow {
-    authUrl: string;
-    /** Provide the authorization code (format: code#state) to complete the flow */
-    submitCode: (code: string) => void;
-    /** Resolves with credentials once submitCode() is called */
-    credentials: Promise<OAuthCredentials>;
-}
-/**
- * Start the Anthropic OAuth flow.
- * Returns an auth URL and a way to submit the code + get credentials.
- */
-export declare function startAnthropicLogin(): Promise<AnthropicFlow>;
-/**
- * Refresh an expired Anthropic token.
- */
-export declare function refreshAnthropicToken(refreshToken: string): Promise<OAuthCredentials>;
-//# sourceMappingURL=anthropic.d.ts.map

package/packages/agent/src/auth/anthropic.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"anthropic.d.ts","sourceRoot":"","sources":["../../../../../src/auth/anthropic.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAEhD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,4DAA4D;IAC5D,WAAW,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACxC;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,aAAa,CAAC,CA2BlE;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CACzC,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,gBAAgB,CAAC,CAE3B"}

package/packages/agent/src/auth/anthropic.js

@@ -1,40 +0,0 @@
-/**
- * Anthropic OAuth flow (Claude Pro/Max subscription)
- *
- * Wraps @mariozechner/pi-ai's loginAnthropic for server-side use.
- * The pi-ai callback API is adapted to a start/exchange pattern
- * for HTTP route handlers.
- */
-import { refreshAnthropicToken as _refreshAnthropicToken, loginAnthropic, } from "@mariozechner/pi-ai";
-/**
- * Start the Anthropic OAuth flow.
- * Returns an auth URL and a way to submit the code + get credentials.
- */
-export async function startAnthropicLogin() {
-    let authUrl = "";
-    let resolveCode = null;
-    let resolveUrlReady = null;
-    const codePromise = new Promise((resolve) => {
-        resolveCode = resolve;
-    });
-    const urlReady = new Promise((resolve) => {
-        resolveUrlReady = resolve;
-    });
-    const credentials = loginAnthropic((url) => {
-        authUrl = url;
-        resolveUrlReady?.();
-    }, () => codePromise);
-    // Wait for the onAuthUrl callback to fire before returning
-    await urlReady;
-    return {
-        authUrl,
-        submitCode: (code) => resolveCode?.(code),
-        credentials,
-    };
-}
-/**
- * Refresh an expired Anthropic token.
- */
-export async function refreshAnthropicToken(refreshToken) {
-    return _refreshAnthropicToken(refreshToken);
-}

package/packages/agent/src/auth/apply-stealth.d.ts

@@ -1,8 +0,0 @@
-/**
- * Walk up from `startDir` until we find a directory containing package.json
- * with name "elizaos". Returns the directory path, or falls back to `startDir`.
- */
-/** @internal Exported for testing only. */
-export declare function findProjectRoot(startDir: string): string;
-export declare function applyClaudeCodeStealth(): void;
-//# sourceMappingURL=apply-stealth.d.ts.map

package/packages/agent/src/auth/apply-stealth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"apply-stealth.d.ts","sourceRoot":"","sources":["../../../../../src/auth/apply-stealth.ts"],"names":[],"mappings":"AAIA;;;GAGG;AACH,2CAA2C;AAC3C,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAoBxD;AAED,wBAAgB,sBAAsB,IAAI,IAAI,CAO7C"}

package/packages/agent/src/auth/apply-stealth.js

@@ -1,35 +0,0 @@
-import fs from "node:fs";
-import path from "node:path";
-import { installClaudeCodeStealthFetchInterceptor } from "./claude-code-stealth";
-/**
- * Walk up from `startDir` until we find a directory containing package.json
- * with name "elizaos". Returns the directory path, or falls back to `startDir`.
- */
-/** @internal Exported for testing only. */
-export function findProjectRoot(startDir) {
-    let dir = startDir;
-    const { root } = path.parse(dir);
-    while (dir !== root) {
-        const pkgPath = path.join(dir, "package.json");
-        try {
-            const pkg = JSON.parse(fs.readFileSync(pkgPath, "utf-8"));
-            if (typeof pkg.name === "string" &&
-                (pkg.name.toLowerCase() === "elizaos" ||
-                    pkg.name.toLowerCase() === "elizaos")) {
-                return dir;
-            }
-        }
-        catch {
-            /* keep searching */
-        }
-        dir = path.dirname(dir);
-    }
-    return startDir;
-}
-export function applyClaudeCodeStealth() {
-    const apiKey = process.env.ANTHROPIC_API_KEY;
-    if (!apiKey?.startsWith("sk-ant-oat")) {
-        return;
-    }
-    installClaudeCodeStealthFetchInterceptor();
-}

package/packages/agent/src/auth/claude-code-stealth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"claude-code-stealth.d.ts","sourceRoot":"","sources":["../../../../../src/auth/claude-code-stealth.ts"],"names":[],"mappings":"AAqDA,wBAAgB,wCAAwC,IAAI,IAAI,CAuF/D"}

package/packages/agent/src/auth/claude-code-stealth.js

@@ -1,104 +0,0 @@
-const STEALTH_GUARD = Symbol.for("eliza.claudeCodeStealthInstalled");
-const CLAUDE_CODE_VERSION = "2.1.2";
-const CLAUDE_CODE_SYSTEM_PREFIX = "You are Claude Code, Anthropic's official CLI for Claude.";
-const ANTHROPIC_BETA = "claude-code-20250219,oauth-2025-04-20,fine-grained-tool-streaming-2025-05-14,interleaved-thinking-2025-05-14";
-function isSetupToken(value) {
-    return typeof value === "string" && value.startsWith("sk-ant-oat");
-}
-function getUrl(input) {
-    try {
-        if (typeof input === "string") {
-            return new URL(input);
-        }
-        if (input instanceof URL) {
-            return input;
-        }
-        return new URL(input.url);
-    }
-    catch {
-        return null;
-    }
-}
-function addSystemPrefix(body) {
-    if (!body || typeof body !== "object") {
-        return body;
-    }
-    const next = body;
-    const prefix = { type: "text", text: CLAUDE_CODE_SYSTEM_PREFIX };
-    if (Array.isArray(next.system)) {
-        const hasPrefix = next.system.some((block) => block?.text?.startsWith("You are Claude Code"));
-        if (!hasPrefix) {
-            next.system.unshift(prefix);
-        }
-    }
-    else if (typeof next.system === "string") {
-        next.system = [prefix, { type: "text", text: next.system }];
-    }
-    else {
-        next.system = [prefix];
-    }
-    return next;
-}
-export function installClaudeCodeStealthFetchInterceptor() {
-    if (globalThis[STEALTH_GUARD]) {
-        return;
-    }
-    const originalFetch = globalThis.fetch.bind(globalThis);
-    const stealthFetch = async function stealthFetch(input, init) {
-        const url = getUrl(input);
-        if (!url || url.hostname !== "api.anthropic.com") {
-            return originalFetch(input, init);
-        }
-        const request = input instanceof Request ? input : null;
-        const headers = new Headers(init?.headers ?? request?.headers ?? undefined);
-        const apiKey = headers.get("x-api-key");
-        const authHeader = headers.get("authorization");
-        const bearerToken = authHeader?.startsWith("Bearer ")
-            ? authHeader.slice(7)
-            : null;
-        const setupToken = isSetupToken(apiKey)
-            ? apiKey
-            : isSetupToken(bearerToken)
-                ? bearerToken
-                : null;
-        if (!setupToken) {
-            return originalFetch(input, init);
-        }
-        headers.delete("x-api-key");
-        headers.set("authorization", `Bearer ${setupToken}`);
-        headers.set("anthropic-beta", ANTHROPIC_BETA);
-        headers.set("user-agent", `claude-cli/${CLAUDE_CODE_VERSION} (external, cli)`);
-        headers.set("x-app", "cli");
-        let body = init?.body ?? request?.body;
-        if (typeof body === "string") {
-            try {
-                const parsed = JSON.parse(body);
-                const updated = addSystemPrefix(parsed);
-                body = JSON.stringify(updated);
-                console.log(`[stealth] Patched Anthropic request for ${String(updated.model ?? "unknown-model")}`);
-            }
-            catch {
-                console.log("[stealth] Anthropic request body was not JSON; skipping system prefix");
-            }
-        }
-        const nextInit = {
-            ...init,
-            headers,
-            body: init ? body : undefined,
-        };
-        if (request && !init) {
-            const nextRequest = new Request(request, {
-                headers,
-                body: typeof body === "string" ? body : undefined,
-            });
-            return originalFetch(nextRequest);
-        }
-        return originalFetch(input, nextInit);
-    };
-    if ("preconnect" in globalThis.fetch) {
-        stealthFetch.preconnect = globalThis.fetch.preconnect;
-    }
-    globalThis.fetch = stealthFetch;
-    globalThis[STEALTH_GUARD] = true;
-    console.log("[stealth] Claude Code setup token runtime support enabled");
-}

package/packages/agent/src/auth/credentials.d.ts

@@ -1,55 +0,0 @@
-/**
- * Credential storage and token refresh for subscription providers.
- *
- * Stores OAuth credentials in ~/.eliza/auth/ as JSON files.
- */
-import { type OAuthCredentials, type StoredCredentials, type SubscriptionProvider } from "./types";
-/**
- * Save credentials for a provider.
- */
-export declare function saveCredentials(provider: SubscriptionProvider, credentials: OAuthCredentials): void;
-/**
- * Load stored credentials for a provider.
- */
-export declare function loadCredentials(provider: SubscriptionProvider): StoredCredentials | null;
-/**
- * Delete stored credentials for a provider.
- */
-export declare function deleteCredentials(provider: SubscriptionProvider): void;
-/**
- * Check if credentials exist and are not expired.
- */
-export declare function hasValidCredentials(provider: SubscriptionProvider): boolean;
-/**
- * Get a valid access token, refreshing if needed.
- * Returns null if no credentials stored or refresh fails.
- */
-export declare function getAccessToken(provider: SubscriptionProvider): Promise<string | null>;
-/**
- * Get all configured subscription providers and their status.
- */
-export declare function getSubscriptionStatus(): Array<{
-    provider: SubscriptionProvider;
-    configured: boolean;
-    valid: boolean;
-    expiresAt: number | null;
-}>;
-/**
- * Apply subscription credentials to the environment.
- * Called at startup to make credentials available to elizaOS plugins.
- *
- * When a `config` is provided and the active subscription provider has
- * credentials, `model.primary` is auto-set so the user doesn't need to
- * configure it manually.
- */
-export declare function applySubscriptionCredentials(config?: {
-    agents?: {
-        defaults?: {
-            subscriptionProvider?: string;
-            model?: {
-                primary?: string;
-            };
-        };
-    };
-}): Promise<void>;
-//# sourceMappingURL=credentials.d.ts.map

package/packages/agent/src/auth/credentials.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../../../../src/auth/credentials.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAQH,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EAEtB,KAAK,oBAAoB,EAC1B,MAAM,SAAS,CAAC;AAoBjB;;GAEG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,oBAAoB,EAC9B,WAAW,EAAE,gBAAgB,GAC5B,IAAI,CAaN;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,oBAAoB,GAC7B,iBAAiB,GAAG,IAAI,CAW1B;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,oBAAoB,GAAG,IAAI,CAUtE;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,oBAAoB,GAAG,OAAO,CAI3E;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,oBAAoB,GAC7B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA+BxB;AAED;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,KAAK,CAAC;IAC7C,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,UAAU,EAAE,OAAO,CAAC;IACpB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC,CAcD;AAED;;;;;;;GAOG;AACH,wBAAsB,4BAA4B,CAAC,MAAM,CAAC,EAAE;IAC1D,MAAM,CAAC,EAAE;QACP,QAAQ,CAAC,EAAE;YAAE,oBAAoB,CAAC,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE;gBAAE,OAAO,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC;KAC5E,CAAC;CACH,GAAG,OAAO,CAAC,IAAI,CAAC,CAkDhB"}

package/packages/agent/src/auth/credentials.js

@@ -1,182 +0,0 @@
-/**
- * Credential storage and token refresh for subscription providers.
- *
- * Stores OAuth credentials in ~/.eliza/auth/ as JSON files.
- */
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-import { logger } from "@elizaos/core";
-import { refreshAnthropicToken } from "./anthropic";
-import { refreshCodexToken } from "./openai-codex";
-import { SUBSCRIPTION_PROVIDER_MAP, } from "./types";
-const AUTH_DIR = path.join(process.env.ELIZA_HOME || path.join(os.homedir(), ".eliza"), "auth");
-/** Buffer before expiry to trigger refresh (5 minutes) */
-const REFRESH_BUFFER_MS = 5 * 60 * 1000;
-function ensureAuthDir() {
-    if (!fs.existsSync(AUTH_DIR)) {
-        fs.mkdirSync(AUTH_DIR, { recursive: true, mode: 0o700 });
-    }
-}
-function credentialPath(provider) {
-    return path.join(AUTH_DIR, `${provider}.json`);
-}
-/**
- * Save credentials for a provider.
- */
-export function saveCredentials(provider, credentials) {
-    ensureAuthDir();
-    const stored = {
-        provider,
-        credentials,
-        createdAt: Date.now(),
-        updatedAt: Date.now(),
-    };
-    fs.writeFileSync(credentialPath(provider), JSON.stringify(stored, null, 2), {
-        encoding: "utf-8",
-        mode: 0o600,
-    });
-    logger.info(`[auth] Saved ${provider} credentials`);
-}
-/**
- * Load stored credentials for a provider.
- */
-export function loadCredentials(provider) {
-    const filePath = credentialPath(provider);
-    try {
-        const data = fs.readFileSync(filePath, "utf-8");
-        return JSON.parse(data);
-    }
-    catch (err) {
-        if (err.code === "ENOENT") {
-            return null;
-        }
-        throw err;
-    }
-}
-/**
- * Delete stored credentials for a provider.
- */
-export function deleteCredentials(provider) {
-    const filePath = credentialPath(provider);
-    try {
-        fs.unlinkSync(filePath);
-        logger.info(`[auth] Deleted ${provider} credentials`);
-    }
-    catch (err) {
-        if (err.code !== "ENOENT") {
-            throw err;
-        }
-    }
-}
-/**
- * Check if credentials exist and are not expired.
- */
-export function hasValidCredentials(provider) {
-    const stored = loadCredentials(provider);
-    if (!stored)
-        return false;
-    return stored.credentials.expires > Date.now();
-}
-/**
- * Get a valid access token, refreshing if needed.
- * Returns null if no credentials stored or refresh fails.
- */
-export async function getAccessToken(provider) {
-    const stored = loadCredentials(provider);
-    if (!stored)
-        return null;
-    const { credentials } = stored;
-    // Token still valid
-    if (credentials.expires > Date.now() + REFRESH_BUFFER_MS) {
-        return credentials.access;
-    }
-    // Need to refresh
-    logger.info(`[auth] Refreshing ${provider} token...`);
-    try {
-        let refreshed;
-        if (provider === "anthropic-subscription") {
-            refreshed = await refreshAnthropicToken(credentials.refresh);
-        }
-        else if (provider === "openai-codex") {
-            refreshed = await refreshCodexToken(credentials.refresh);
-        }
-        else {
-            logger.error(`[auth] Unknown provider: ${provider}`);
-            return null;
-        }
-        // Save refreshed credentials
-        saveCredentials(provider, refreshed);
-        return refreshed.access;
-    }
-    catch (err) {
-        logger.error(`[auth] Failed to refresh ${provider} token: ${err}`);
-        return null;
-    }
-}
-/**
- * Get all configured subscription providers and their status.
- */
-export function getSubscriptionStatus() {
-    const providers = [
-        "anthropic-subscription",
-        "openai-codex",
-    ];
-    return providers.map((provider) => {
-        const stored = loadCredentials(provider);
-        return {
-            provider,
-            configured: stored !== null,
-            valid: stored ? stored.credentials.expires > Date.now() : false,
-            expiresAt: stored?.credentials.expires ?? null,
-        };
-    });
-}
-/**
- * Apply subscription credentials to the environment.
- * Called at startup to make credentials available to elizaOS plugins.
- *
- * When a `config` is provided and the active subscription provider has
- * credentials, `model.primary` is auto-set so the user doesn't need to
- * configure it manually.
- */
-export async function applySubscriptionCredentials(config) {
-    // Anthropic subscription → set ANTHROPIC_API_KEY
-    const anthropicToken = await getAccessToken("anthropic-subscription");
-    if (anthropicToken) {
-        process.env.ANTHROPIC_API_KEY = anthropicToken;
-        logger.info("[auth] Applied Anthropic subscription credentials to environment");
-        // Install Claude stealth interceptor (non-fatal)
-        try {
-            const { applyClaudeCodeStealth } = await import("./apply-stealth");
-            applyClaudeCodeStealth();
-        }
-        catch (err) {
-            logger.warn(`[auth] Failed to apply Claude stealth: ${err instanceof Error ? err.message : err}`);
-        }
-    }
-    // OpenAI Codex subscription → set OPENAI_API_KEY
-    const codexToken = await getAccessToken("openai-codex");
-    if (codexToken) {
-        process.env.OPENAI_API_KEY = codexToken;
-        logger.info("[auth] Applied OpenAI Codex subscription credentials to environment");
-    }
-    // Auto-set model.primary from subscription provider when not explicitly
-    // configured, so users who connect a subscription don't need to manually
-    // choose a model provider.
-    if (config?.agents?.defaults) {
-        const defaults = config.agents.defaults;
-        const provider = defaults.subscriptionProvider;
-        const modelId = provider ? SUBSCRIPTION_PROVIDER_MAP[provider] : undefined;
-        if (modelId) {
-            if (!defaults.model) {
-                defaults.model = { primary: modelId };
-                logger.info(`[auth] Auto-set model.primary to "${modelId}" from subscription provider`);
-            }
-            else if (!defaults.model.primary) {
-                defaults.model.primary = modelId;
-                logger.info(`[auth] Auto-set model.primary to "${modelId}" from subscription provider`);
-            }
-        }
-    }
-}

package/packages/agent/src/auth/index.d.ts

@@ -1,7 +0,0 @@
-export type { AnthropicFlow } from "./anthropic";
-export { refreshAnthropicToken, startAnthropicLogin } from "./anthropic";
-export { applySubscriptionCredentials, deleteCredentials, getAccessToken, getSubscriptionStatus, hasValidCredentials, loadCredentials, saveCredentials, } from "./credentials";
-export type { CodexFlow } from "./openai-codex";
-export { refreshCodexToken, startCodexLogin } from "./openai-codex";
-export type { OAuthCredentials, StoredCredentials, SubscriptionProvider, } from "./types";
-//# sourceMappingURL=index.d.ts.map

package/packages/agent/src/auth/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/auth/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACzE,OAAO,EACL,4BAA4B,EAC5B,iBAAiB,EACjB,cAAc,EACd,qBAAqB,EACrB,mBAAmB,EACnB,eAAe,EACf,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACpE,YAAY,EACV,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,SAAS,CAAC"}

package/packages/agent/src/auth/index.js

@@ -1,3 +0,0 @@
-export { refreshAnthropicToken, startAnthropicLogin } from "./anthropic";
-export { applySubscriptionCredentials, deleteCredentials, getAccessToken, getSubscriptionStatus, hasValidCredentials, loadCredentials, saveCredentials, } from "./credentials";
-export { refreshCodexToken, startCodexLogin } from "./openai-codex";