@elizaos/agent 2.0.0-alpha.98 → 2.0.0-beta.2

package/packages/agent/src/runtime/conversation-compactor.types.d.ts

@@ -0,0 +1,102 @@
+/**
+ * Shared type contract for conversation-history compactors.
+ *
+ * Distinct from prompt-compaction.ts (presentation-layer regex stripping).
+ * A Compactor takes a multi-turn transcript and returns a smaller artifact
+ * that preserves the load-bearing facts, decisions, and tool-call/tool-result
+ * pairs needed for the agent to continue coherently.
+ *
+ * Mirrors the shape used by CompactBench
+ * (https://github.com/compactbench/compactbench) so our compactors can be
+ * benchmarked through that harness without per-method shims.
+ */
+export type CompactorRole = "system" | "user" | "assistant" | "tool";
+export type CompactorToolCall = {
+    id: string;
+    name: string;
+    arguments: Record<string, unknown>;
+};
+export type CompactorMessage = {
+    role: CompactorRole;
+    /** Plain text content. Multi-modal blocks are flattened to text upstream. */
+    content: string;
+    /** For assistant messages that invoke tools. */
+    toolCalls?: CompactorToolCall[];
+    /** For tool-role messages, the id of the assistant tool_call this answers. */
+    toolCallId?: string;
+    /** Tool name, mirrored on tool-role messages for readability/auditing. */
+    toolName?: string;
+    /** Optional epoch ms — used for time-aware summarization, not required. */
+    timestamp?: number;
+    /** Free-form tags propagated by the runtime (e.g. "thought", "observation"). */
+    tags?: string[];
+};
+export type CompactorTranscript = {
+    /** All messages in chronological order. The system prompt, if present, is index 0. */
+    messages: CompactorMessage[];
+    /** Free-form metadata (scenario id, agent name, intent, etc.). */
+    metadata?: Record<string, unknown>;
+};
+export type CompactionStats = {
+    originalMessageCount: number;
+    compactedMessageCount: number;
+    /** Approximate token counts using the configured counter. */
+    originalTokens: number;
+    compactedTokens: number;
+    /** Model id used for summarization, if the strategy called a model. */
+    summarizationModel?: string;
+    /** End-to-end wall time in ms. */
+    latencyMs: number;
+    /** Strategy-specific telemetry — never assume keys; for inspection only. */
+    extra?: Record<string, unknown>;
+};
+export type CompactionArtifact = {
+    /**
+     * Replacement messages for the compacted region. The runtime concatenates
+     * these in place of the messages that were summarized; tail messages
+     * (within `preserveTailMessages`) remain untouched.
+     */
+    replacementMessages: CompactorMessage[];
+    stats: CompactionStats;
+};
+/**
+ * Token counter callback. Implementations may use tiktoken, a model API,
+ * or a heuristic (4 chars per token). Must be deterministic for a given input.
+ */
+export type TokenCounter = (text: string) => number;
+/**
+ * Model invocation callback used by summarization-based compactors.
+ * Should return the raw text response. Errors propagate.
+ */
+export type CompactorModelCall = (params: {
+    systemPrompt: string;
+    messages: CompactorMessage[];
+    /** Hard cap on response tokens; implementations may ignore. */
+    maxOutputTokens?: number;
+}) => Promise<string>;
+export type CompactorOptions = {
+    /** Soft target token budget for the compacted artifact. */
+    targetTokens: number;
+    /**
+     * Number of trailing messages to preserve verbatim. Default 6.
+     * Tool-call/tool-result pairs that straddle this boundary are kept paired
+     * (the compactor may shift the boundary outward to avoid splitting a pair).
+     */
+    preserveTailMessages?: number;
+    /** Token counter; defaults to a 4-chars-per-token heuristic if omitted. */
+    countTokens?: TokenCounter;
+    /** Required for summarization-based strategies; optional for stripping ones. */
+    callModel?: CompactorModelCall;
+    /** Model id to record in stats — does not change `callModel` behavior. */
+    summarizationModel?: string;
+};
+export interface Compactor {
+    readonly name: string;
+    readonly version: string;
+    compact(transcript: CompactorTranscript, options: CompactorOptions): Promise<CompactionArtifact>;
+}
+/** 4-chars-per-token heuristic. Cheap, deterministic, model-agnostic. */
+export declare function approxCountTokens(text: string): number;
+/** Sum of approximate tokens across all message contents and tool args. */
+export declare function countTranscriptTokens(transcript: CompactorTranscript, counter?: TokenCounter): number;
+//# sourceMappingURL=conversation-compactor.types.d.ts.map

package/packages/agent/src/runtime/conversation-compactor.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation-compactor.types.d.ts","sourceRoot":"","sources":["../../../../../src/runtime/conversation-compactor.types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;AAErE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,aAAa,CAAC;IACpB,6EAA6E;IAC7E,OAAO,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,SAAS,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAChC,8EAA8E;IAC9E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,sFAAsF;IACtF,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,6DAA6D;IAC7D,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,uEAAuE;IACvE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kCAAkC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B;;;;OAIG;IACH,mBAAmB,EAAE,gBAAgB,EAAE,CAAC;IACxC,KAAK,EAAE,eAAe,CAAC;CACxB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;AAEpD;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE;IACxC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,+DAA+D;IAC/D,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAEtB,MAAM,MAAM,gBAAgB,GAAG;IAC7B,2DAA2D;IAC3D,YAAY,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,2EAA2E;IAC3E,WAAW,CAAC,EAAE,YAAY,CAAC;IAC3B,gFAAgF;IAChF,SAAS,CAAC,EAAE,kBAAkB,CAAC;IAC/B,0EAA0E;IAC1E,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,OAAO,CACL,UAAU,EAAE,mBAAmB,EAC/B,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAChC;AAED,yEAAyE;AACzE,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,2EAA2E;AAC3E,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,mBAAmB,EAC/B,OAAO,GAAE,YAAgC,GACxC,MAAM,CAYR"}

package/packages/agent/src/runtime/conversation-compactor.types.js

@@ -0,0 +1,30 @@
+/**
+ * Shared type contract for conversation-history compactors.
+ *
+ * Distinct from prompt-compaction.ts (presentation-layer regex stripping).
+ * A Compactor takes a multi-turn transcript and returns a smaller artifact
+ * that preserves the load-bearing facts, decisions, and tool-call/tool-result
+ * pairs needed for the agent to continue coherently.
+ *
+ * Mirrors the shape used by CompactBench
+ * (https://github.com/compactbench/compactbench) so our compactors can be
+ * benchmarked through that harness without per-method shims.
+ */
+/** 4-chars-per-token heuristic. Cheap, deterministic, model-agnostic. */
+export function approxCountTokens(text) {
+    return Math.ceil(text.length / 4);
+}
+/** Sum of approximate tokens across all message contents and tool args. */
+export function countTranscriptTokens(transcript, counter = approxCountTokens) {
+    let total = 0;
+    for (const m of transcript.messages) {
+        total += counter(m.content);
+        if (m.toolCalls) {
+            for (const tc of m.toolCalls) {
+                total += counter(tc.name);
+                total += counter(JSON.stringify(tc.arguments));
+            }
+        }
+    }
+    return total;
+}

package/packages/agent/src/runtime/core-plugins.d.ts

@@ -4,6 +4,56 @@
  * Keeping this in a standalone module avoids a circular dependency between
  * `api/server.ts` and `runtime/eliza.ts`.
  */
+/**
+ * Plugins that depend on PTY/native workspace tooling.
+ * Keep them out of cloud images where those binaries are intentionally absent.
+ */
+export declare const DESKTOP_ONLY_PLUGINS: readonly string[];
+/**
+ * Mobile-safe core plugins. Used when `ELIZA_PLATFORM=android` (or `ios`).
+ *
+ * Phones cannot host the workflow runtime, the Signal CLI, the swarm orchestrator,
+ * the sandbox engine, the desktop launch hooks, or the autonomous PTY tools.
+ * They also have no `/usr/bin/open`, `osascript`, `xdg-open`, `ffmpeg`,
+ * `wmctrl`, etc., so plugins that bind to those at init crash the runtime.
+ *
+ * The mobile boot ships only `@elizaos/plugin-sql` (PGlite-backed memory
+ * store, required) plus AI provider plugins (`@elizaos/plugin-anthropic`,
+ * `@elizaos/plugin-openai`, `@elizaos/plugin-ollama`) which `collectPluginNames`
+ * adds based on the user's API keys. They are statically imported in the agent
+ * runtime so they bundle cleanly without filesystem-based plugin resolution.
+ *
+ * `@elizaos/plugin-local-embedding` is intentionally excluded: it pulls in
+ * `node-llama-cpp`, which has no Android build. On mobile, embeddings come
+ * either from a cloud provider or from the upcoming `llama-cpp-capacitor`
+ * JNI binding (separate task).
+ */
+export declare const MOBILE_CORE_PLUGINS: readonly string[];
+/**
+ * ElizaOS-only overlay app plugins. Used when the runtime is the custom
+ * Android OS build (`ELIZA_PLATFORM=android` plus `ELIZA_LOCAL_LLAMA=1`),
+ * appended to `MOBILE_CORE_PLUGINS` in `collectPluginNames`. Each one is a
+ * runtime-app plugin (the `/plugin` subpath of the matching overlay app)
+ * that exposes privileged system surfaces — WiFi, Contacts, Phone — to the
+ * agent as actions. The overlay UIs themselves register at app boot via
+ * `@elizaos/app-{wifi,contacts,phone}/register`, gated on `isElizaOS()` so
+ * stock Android, iOS, web, and desktop are no-ops.
+ *
+ * Stock Android does not get these because Play Store style builds should not
+ * expose privileged OS-control surfaces merely because `Capacitor` reports
+ * `android`.
+ */
+export declare const ELIZAOS_ANDROID_CORE_PLUGINS: readonly string[];
+/**
+ * Terminal / shell / coding-tool plugins available on the privileged AOSP
+ * build only. The privileged Android service spawns bun under the priv_app
+ * SELinux context which permits `execve`, so shell + native file actions
+ * work where they would not on stock Android.
+ *
+ * Stock Play-Store Android cannot have these — `execve` of arbitrary binaries
+ * is blocked by the default SELinux policy and would also fail Play review.
+ */
+export declare const ELIZAOS_ANDROID_TERMINAL_PLUGINS: readonly string[];
 /** Core plugins that should always be loaded. collectPluginNames() seeds from this list only. */
 export declare const CORE_PLUGINS: readonly string[];
 /**

package/packages/agent/src/runtime/core-plugins.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core-plugins.d.ts","sourceRoot":"","sources":["../../../../../src/runtime/core-plugins.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,iGAAiG;AACjG,eAAO,MAAM,YAAY,EAAE,SAAS,MAAM,EAiBzC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAqBlD,CAAC"}
+{"version":3,"file":"core-plugins.d.ts","sourceRoot":"","sources":["../../../../../src/runtime/core-plugins.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAGjD,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAA4B,CAAC;AAE9E;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,4BAA4B,EAAE,SAAS,MAAM,EAIzD,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,gCAAgC,EAAE,SAAS,MAAM,EAG7D,CAAC;AAEF,iGAAiG;AACjG,eAAO,MAAM,YAAY,EAAE,SAAS,MAAM,EAsBzC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAyBlD,CAAC"}

package/packages/agent/src/runtime/core-plugins.js

@@ -4,48 +4,117 @@
  * Keeping this in a standalone module avoids a circular dependency between
  * `api/server.ts` and `runtime/eliza.ts`.
  */
+/**
+ * Plugins that depend on PTY/native workspace tooling.
+ * Keep them out of cloud images where those binaries are intentionally absent.
+ */
+export const DESKTOP_ONLY_PLUGINS = [
+    "agent-orchestrator",
+    "coding-tools",
+];
+/**
+ * Mobile-safe core plugins. Used when `ELIZA_PLATFORM=android` (or `ios`).
+ *
+ * Phones cannot host the workflow runtime, the Signal CLI, the swarm orchestrator,
+ * the sandbox engine, the desktop launch hooks, or the autonomous PTY tools.
+ * They also have no `/usr/bin/open`, `osascript`, `xdg-open`, `ffmpeg`,
+ * `wmctrl`, etc., so plugins that bind to those at init crash the runtime.
+ *
+ * The mobile boot ships only `@elizaos/plugin-sql` (PGlite-backed memory
+ * store, required) plus AI provider plugins (`@elizaos/plugin-anthropic`,
+ * `@elizaos/plugin-openai`, `@elizaos/plugin-ollama`) which `collectPluginNames`
+ * adds based on the user's API keys. They are statically imported in the agent
+ * runtime so they bundle cleanly without filesystem-based plugin resolution.
+ *
+ * `@elizaos/plugin-local-embedding` is intentionally excluded: it pulls in
+ * `node-llama-cpp`, which has no Android build. On mobile, embeddings come
+ * either from a cloud provider or from the upcoming `llama-cpp-capacitor`
+ * JNI binding (separate task).
+ */
+export const MOBILE_CORE_PLUGINS = ["@elizaos/plugin-sql"];
+/**
+ * ElizaOS-only overlay app plugins. Used when the runtime is the custom
+ * Android OS build (`ELIZA_PLATFORM=android` plus `ELIZA_LOCAL_LLAMA=1`),
+ * appended to `MOBILE_CORE_PLUGINS` in `collectPluginNames`. Each one is a
+ * runtime-app plugin (the `/plugin` subpath of the matching overlay app)
+ * that exposes privileged system surfaces — WiFi, Contacts, Phone — to the
+ * agent as actions. The overlay UIs themselves register at app boot via
+ * `@elizaos/app-{wifi,contacts,phone}/register`, gated on `isElizaOS()` so
+ * stock Android, iOS, web, and desktop are no-ops.
+ *
+ * Stock Android does not get these because Play Store style builds should not
+ * expose privileged OS-control surfaces merely because `Capacitor` reports
+ * `android`.
+ */
+export const ELIZAOS_ANDROID_CORE_PLUGINS = [
+    "@elizaos/app-wifi",
+    "@elizaos/app-contacts",
+    "@elizaos/app-phone",
+];
+/**
+ * Terminal / shell / coding-tool plugins available on the privileged AOSP
+ * build only. The privileged Android service spawns bun under the priv_app
+ * SELinux context which permits `execve`, so shell + native file actions
+ * work where they would not on stock Android.
+ *
+ * Stock Play-Store Android cannot have these — `execve` of arbitrary binaries
+ * is blocked by the default SELinux policy and would also fail Play review.
+ */
+export const ELIZAOS_ANDROID_TERMINAL_PLUGINS = [
+    "@elizaos/plugin-shell",
+    "@elizaos/plugin-coding-tools",
+];
 /** Core plugins that should always be loaded. collectPluginNames() seeds from this list only. */
 export const CORE_PLUGINS = [
     "@elizaos/plugin-sql", // database adapter — required
     "@elizaos/plugin-local-embedding", // local embeddings — required for memory
-    "@elizaos/plugin-form", // form handling for guided user journeys
-    "@elizaos/plugin-knowledge", // RAG knowledge management — required for knowledge tab
-    "@elizaos/plugin-trajectory-logger", // trajectory logging for debugging and RL training
-    "@elizaos/plugin-agent-orchestrator", // multi-agent orchestration (PTY, SwarmCoordinator, workspace provisioning)
-    "@elizaos/plugin-cron", // scheduled jobs and automation
+    // @elizaos/plugin-form — standalone form plugin; load via plugin registry/config
+    "@elizaos/app-companion", // VRM companion emotes; actions gated until app session is active
+    // @elizaos/plugin-agent-orchestrator — opt-in via ELIZA_AGENT_ORCHESTRATOR (Eliza app enables by default)
+    // Recurring work uses runtime TaskService + triggers (no @elizaos/plugin-cron).
+    "@elizaos/plugin-app-control", // launch, close, and list running Eliza apps from agent chat
     "@elizaos/plugin-shell", // shell command execution
+    "@elizaos/plugin-coding-tools", // native Read/Write/Edit/Bash/Grep/Glob/etc. (desktop-only
     "@elizaos/plugin-agent-skills", // skill execution and marketplace runtime
-    // "@elizaos/plugin-secrets-manager", // secrets management — load early, other plugins depend on it
-    // "@elizaos/plugin-rolodex", // contact graph and relationship/social memory
-    // "@elizaos/plugin-plugin-manager", // dynamic plugin management
-    // "@elizaos/plugin-trust", // trust scoring and policy signals
-    // "@elizaos/plugin-todo", // todo/task management
-    // "@elizaos/plugin-personality", // personality coherence
-    // "@elizaos/plugin-experience", // learning from interactions
+    "@elizaos/plugin-commands", // slash command handling (skills auto-register as /commands)
+    "@elizaos/app-lifeops", // LifeOps: personal ops — tasks, goals, calendar, inbox, website blocking
+    "@elizaos/plugin-browser", // Browser plugin: unified BROWSER + MANAGE_BROWSER_BRIDGE actions; workspace browser + Chrome/Safari companion bridge
+    "@elizaos/plugin-video", // Video download / transcription (managed yt-dlp + ffmpeg with auto-update on extractor failure)
+    // Built-in runtime capabilities (no longer external plugins):
+    // - experience, todos, personality: advanced capabilities (advancedCapabilities: true)
+    // - form: standalone @elizaos/plugin-form
+    // - trust: core capability (enableTrust: true)
+    // - secrets (SECRETS): core capability (enableSecretsManager: true)
+    // - plugin-manager: core capability (enablePluginManager: true)
+    // - knowledge, relationships, trajectories: native features
 ];
 /**
  * Plugins that can be enabled from the admin panel.
  * Not loaded by default — require explicit configuration or have platform dependencies.
  */
 export const OPTIONAL_CORE_PLUGINS = [
+    // plugin-manager, secrets (SECRETS), trust: now built-in core capabilities
+    // Enable via character settings: ENABLE_PLUGIN_MANAGER, ENABLE_SECRETS_MANAGER, ENABLE_TRUST
+    // "@elizaos/app-lifeops" — moved to CORE_PLUGINS above
     "@elizaos/plugin-pdf", // PDF processing (published bundle broken in alpha.15)
     "@elizaos/plugin-cua", // CUA computer-use agent (cloud sandbox automation)
     "@elizaos/plugin-obsidian", // Obsidian vault CLI integration
-    "@elizaos/plugin-code", // code writing and file operations
     "@elizaos/plugin-repoprompt", // RepoPrompt CLI integration and workflow orchestration
-    "@elizaos/plugin-claude-code-workbench", // Claude Code companion workflows for this monorepo
     "@elizaos/plugin-computeruse", // computer use automation (requires platform-specific binaries)
     "@elizaos/plugin-browser", // browser automation (requires stagehand-server)
     "@elizaos/plugin-vision", // vision/image understanding (feature-gated)
     "@elizaos/plugin-cli", // CLI interface
     "@elizaos/plugin-discord", // Discord bot integration
+    "@elizaos/plugin-discord-local", // Local Discord desktop integration for macOS
+    "@elizaos/plugin-bluebubbles", // BlueBubbles-backed iMessage integration for macOS
     "@elizaos/plugin-telegram", // Telegram bot integration
+    "@elizaos/plugin-signal", // Signal user-account integration
     "@elizaos/plugin-twitch", // Twitch integration
     "@elizaos/plugin-edge-tts", // text-to-speech (Microsoft Edge TTS)
     "@elizaos/plugin-elevenlabs", // ElevenLabs text-to-speech
+    "@elizaos/plugin-music", // library + playback + streaming routes (unified MUSIC action)
     // "@elizaos/plugin-directives", // directive processing - not yet ready
-    // "@elizaos/plugin-commands", // slash command handling - not yet ready
     // "@elizaos/plugin-mcp", // MCP protocol support - not yet ready
     // "@elizaos/plugin-scheduling", // scheduling - not yet ready
-    // "@elizaos/plugin-scratchpad", // scratchpad notes - not yet ready
+    // todos: now built-in as advanced capability (advancedCapabilities: true)
 ];

package/packages/agent/src/runtime/custom-actions.d.ts

@@ -6,8 +6,8 @@
  *
  * @module runtime/custom-actions
  */
-import type { Action, IAgentRuntime } from "@elizaos/core";
-import type { CustomActionDef } from "../config/types.eliza";
+import { type Action, type IAgentRuntime } from "@elizaos/core";
+import type { CustomActionDef } from "../config/types.eliza.ts";
 /**
  * Store the runtime reference so we can hot-register actions later.
  * Called once from plugin.init().
@@ -18,6 +18,9 @@ export declare function setCustomActionsRuntime(runtime: IAgentRuntime): void;
  * Returns the elizaOS Action that was registered, or null if no runtime.
  */
 export declare function registerCustomActionLive(def: CustomActionDef): Action | null;
+export declare class CustomActionTimeoutError extends Error {
+    constructor(message: string);
+}
 type ResolvedUrlTarget = {
     parsed: URL;
     hostname: string;

package/packages/agent/src/runtime/custom-actions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"custom-actions.d.ts","sourceRoot":"","sources":["../../../../../src/runtime/custom-actions.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAWH,OAAO,KAAK,EAAE,MAAM,EAAkB,aAAa,EAAE,MAAM,eAAe,CAAC;AAE3E,OAAO,KAAK,EACV,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAS/B;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAEpE;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,GAAG,IAAI,CAK5E;AAoBD,KAAK,iBAAiB,GAAG;IACvB,MAAM,EAAE,GAAG,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,GAAG,EAAE,GAAG,CAAC;IACT,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,KAAK,eAAe,GAAG,CAAC,KAAK,EAAE,gBAAgB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAqNtE,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,eAAe,GAAG,IAAI,GAC3B,IAAI,CAEN;AAiSD,wBAAgB,iBAAiB,IAAI,MAAM,EAAE,CAQ5C;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,eAAe,GACnB,CACD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAE5C"}
+{"version":3,"file":"custom-actions.d.ts","sourceRoot":"","sources":["../../../../../src/runtime/custom-actions.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAUH,OAAO,EACL,KAAK,MAAM,EAEX,KAAK,aAAa,EAEnB,MAAM,eAAe,CAAC;AAIvB,OAAO,KAAK,EACV,eAAe,EAEhB,MAAM,0BAA0B,CAAC;AASlC;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAEpE;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,GAAG,IAAI,CAK5E;AA2BD,qBAAa,wBAAyB,SAAQ,KAAK;gBACrC,OAAO,EAAE,MAAM;CAI5B;AAED,KAAK,iBAAiB,GAAG;IACvB,MAAM,EAAE,GAAG,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,GAAG,EAAE,GAAG,CAAC;IACT,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,KAAK,eAAe,GAAG,CAAC,KAAK,EAAE,gBAAgB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAoRtE,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,eAAe,GAAG,IAAI,GAC3B,IAAI,CAEN;AAuTD,wBAAgB,iBAAiB,IAAI,MAAM,EAAE,CAa5C;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,eAAe,GACnB,CACD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAE5C"}

package/packages/agent/src/runtime/custom-actions.js

@@ -10,9 +10,11 @@ import { lookup as dnsLookup } from "node:dns/promises";
 import { request as requestHttp, } from "node:http";
 import { request as requestHttps } from "node:https";
 import net from "node:net";
-import { Readable } from "node:stream";
-import { loadElizaConfig } from "../config/config";
-import { isBlockedPrivateOrLinkLocalIp, normalizeHostLike, } from "../security/network-policy";
+import { logger, } from "@elizaos/core";
+import { resolveApiToken, resolveServerOnlyPort } from "@elizaos/shared";
+import { hasSelectedContextOrSignalSync } from "../actions/context-signal.js";
+import { loadElizaConfig } from "../config/config.js";
+import { isBlockedPrivateOrLinkLocalIp, normalizeHostLike, } from "../security/network-policy.js";
 /** Cached runtime reference for hot-registration of new actions. */
 let _runtime = null;
 /**
@@ -33,12 +35,57 @@ export function registerCustomActionLive(def) {
     _runtime.registerAction(action);
     return action;
 }
-/** API port for shell handler requests. */
-const API_PORT = process.env.API_PORT || process.env.SERVER_PORT || "2138";
 /** Valid handler types that we actually support. */
 const VALID_HANDLER_TYPES = new Set(["http", "shell", "code"]);
 let vmRunner = null;
 const CUSTOM_ACTION_FETCH_TIMEOUT_MS = 15_000;
+const CUSTOM_ACTION_SHELL_TIMEOUT_MS = 30_000;
+const CUSTOM_ACTION_CONTEXTS = [
+    "general",
+    "automation",
+    "connectors",
+    "agent_internal",
+];
+export class CustomActionTimeoutError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "CustomActionTimeoutError";
+    }
+}
+function getApiPort() {
+    return String(resolveServerOnlyPort(process.env));
+}
+async function fetchWithTimeout(input, init, timeoutMs) {
+    const timeoutMessage = `Terminal request timed out after ${timeoutMs}ms`;
+    return await new Promise((resolve, reject) => {
+        const controller = new AbortController();
+        let settled = false;
+        const timeoutHandle = setTimeout(() => {
+            controller.abort();
+            if (settled)
+                return;
+            settled = true;
+            reject(new CustomActionTimeoutError(timeoutMessage));
+        }, timeoutMs);
+        const settle = (callback) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timeoutHandle);
+            callback();
+        };
+        fetch(input, {
+            ...init,
+            signal: controller.signal,
+        }).then((response) => settle(() => resolve(response)), (error) => {
+            if (controller.signal.aborted) {
+                settle(() => reject(new CustomActionTimeoutError(timeoutMessage)));
+                return;
+            }
+            settle(() => reject(error));
+        });
+    });
+}
 function resolveFetchInputUrl(input) {
     if (typeof input === "string")
         return input;
@@ -119,6 +166,22 @@ async function toRequestBodyBuffer(body) {
     }
     throw new Error("Unsupported request body type for custom action fetch");
 }
+function incomingMessageBody(response) {
+    return new ReadableStream({
+        start(controller) {
+            response.on("data", (chunk) => {
+                controller.enqueue(typeof chunk === "string"
+                    ? Buffer.from(chunk)
+                    : new Uint8Array(chunk));
+            });
+            response.on("end", () => controller.close());
+            response.on("error", (error) => controller.error(error));
+        },
+        cancel() {
+            response.destroy();
+        },
+    });
+}
 function responseFromIncomingMessage(response) {
     const headers = new Headers();
     for (const [key, value] of Object.entries(response.headers)) {
@@ -133,7 +196,7 @@ function responseFromIncomingMessage(response) {
     const status = response.statusCode ?? 500;
     const body = status === 204 || status === 205 || status === 304
         ? null
-        : Readable.toWeb(response);
+        : incomingMessageBody(response);
     return new Response(body, {
         status,
         statusText: response.statusMessage,
@@ -216,7 +279,7 @@ async function resolveUrlSafety(url) {
         if ((hostname === "localhost" ||
             hostname === "127.0.0.1" ||
             hostname === "::1") &&
-            parsed.port === String(API_PORT)) {
+            parsed.port === getApiPort()) {
             return { blocked: false, target: null };
         }
         if (hostname === "localhost" ||
@@ -357,13 +420,13 @@ function buildHandler(handler, paramDefs) {
                     const value = params[p.name] ?? "";
                     command = command.replaceAll(`{{${p.name}}}`, shellEscape(value));
                 }
-                const response = await fetch(`http://localhost:${API_PORT}/api/terminal/run`, {
+                const response = await fetchWithTimeout(`http://localhost:${getApiPort()}/api/terminal/run`, {
                     method: "POST",
                     headers: (() => {
                         const headers = {
                             "Content-Type": "application/json",
                         };
-                        const token = process.env.ELIZA_API_TOKEN?.trim();
+                        const token = resolveApiToken(process.env);
                         if (token) {
                             headers.Authorization = /^Bearer\s+/i.test(token)
                                 ? token
@@ -371,8 +434,11 @@ function buildHandler(handler, paramDefs) {
                         }
                         return headers;
                     })(),
-                    body: JSON.stringify({ command, clientId: "runtime-shell-action" }),
-                });
+                    body: JSON.stringify({
+                        command,
+                        clientId: "runtime-shell-action",
+                    }),
+                }, CUSTOM_ACTION_SHELL_TIMEOUT_MS);
                 if (!response.ok) {
                     return {
                         ok: false,
@@ -393,11 +459,23 @@ function buildHandler(handler, paramDefs) {
 }
 function defToAction(def) {
     const handler = buildHandler(def.handler, def.parameters);
+    const validationTerms = [
+        def.name,
+        ...(def.similes ?? []),
+        ...def.name.split(/[_\s-]+/),
+        ...(def.description ?? "").split(/[\s,.;:()[\]{}'"`/\\-]+/),
+    ].filter((term) => term.trim().length > 2);
     return {
         name: def.name,
+        contexts: [...CUSTOM_ACTION_CONTEXTS],
+        roleGate: def.requiredRole && def.requiredRole !== "GUEST"
+            ? { minRole: def.requiredRole }
+            : { minRole: "USER" },
         similes: def.similes ?? [],
         description: def.description,
-        validate: async () => true,
+        validate: async (_runtime, message, state) => {
+            return hasSelectedContextOrSignalSync(message, state, CUSTOM_ACTION_CONTEXTS, validationTerms);
+        },
         handler: async (_runtime, _message, _state, options) => {
             try {
                 const opts = options;
@@ -426,7 +504,7 @@ function defToAction(def) {
             }
             catch (err) {
                 return {
-                    text: `Action failed: ${err instanceof Error ? err.message : String(err)}`,
+                    text: `Action failed: ${String(err)}`,
                     success: false,
                 };
             }
@@ -445,7 +523,8 @@ export function loadCustomActions() {
         const defs = config.customActions ?? [];
         return defs.filter((d) => d.enabled).map(defToAction);
     }
-    catch {
+    catch (err) {
+        logger.warn(`[custom-actions] Failed to load custom actions from config: ${err instanceof Error ? err.message : String(err)}`);
         return [];
     }
 }

package/packages/agent/src/runtime/default-documents.d.ts

@@ -0,0 +1,21 @@
+import { type AgentRuntime } from "@elizaos/core";
+export interface DefaultDocumentFragmentDefinition {
+    text: string;
+    embedding?: number[];
+}
+export interface DefaultDocumentDefinition {
+    key: string;
+    version: number;
+    filename: string;
+    contentType: string;
+    text: string;
+    fragments: readonly DefaultDocumentFragmentDefinition[];
+    metadata?: Record<string, unknown>;
+}
+export declare const ELIZA_OVERVIEW_TEXT = "Eliza is an autonomous agent powered by elizaOS, the agent framework. Users can ask Eliza to write code, add new skills, and trigger recurring workflows with heartbeats that run at regular intervals. Eliza Cloud is an open source cloud backend that simplifies deploying and delivering Eliza.";
+export declare const ELIZA_HISTORY_TEXT = "ELIZA was created by Joseph Weizenbaum at MIT in the mid-1960s and is widely regarded as one of the earliest chatbots. Its best-known script, DOCTOR, used pattern matching to imitate a Rogerian psychotherapist and showed how simple language rules could feel surprisingly conversational. ELIZA helped define the history of chatbots and influenced later work on conversational agents.";
+export declare const ELIZA_CLOUD_BASICS_TEXT = "Eliza Cloud is the managed backend and app platform for Eliza and Milady when cloud mode is enabled. Builders can create and manage apps, keep an appId, use Cloud login and redirect flows so app users can authenticate against Cloud, route chat and media through Cloud, monetize app usage with inference markup and purchase-share settings, promote apps, connect payment requests, and deploy Docker containers when an app needs server-side execution.";
+export declare const ELIZA_CLOUD_MONETIZATION_TEXT = "Eliza and Milady can help builders make money with Cloud apps: create monetized apps, set inference markup and app-credit purchase share, send payment requests through Stripe/OxaPay app credits or x402 crypto payments, track whether requests were paid, route payment results back into the initiating conversation, earn from affiliate and creator revenue-share flows, and request admin-reviewed elizaOS token payouts on Base, BSC, Ethereum, or Solana. Paid actions require explicit user confirmation.";
+export declare const DEFAULT_DOCUMENTS: readonly DefaultDocumentDefinition[];
+export declare function seedBundledDocuments(runtime: AgentRuntime, documents?: readonly DefaultDocumentDefinition[]): Promise<void>;
+//# sourceMappingURL=default-documents.d.ts.map

package/packages/agent/src/runtime/default-documents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-documents.d.ts","sourceRoot":"","sources":["../../../../../src/runtime/default-documents.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,YAAY,EAMlB,MAAM,eAAe,CAAC;AASvB,MAAM,WAAW,iCAAiC;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,yBAAyB;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,SAAS,iCAAiC,EAAE,CAAC;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,eAAO,MAAM,mBAAmB,wSACuQ,CAAC;AAExS,eAAO,MAAM,kBAAkB,mYACmW,CAAC;AAEnY,eAAO,MAAM,uBAAuB,qcACga,CAAC;AAErc,eAAO,MAAM,6BAA6B,wfAC6c,CAAC;AAExf,eAAO,MAAM,iBAAiB,EAAE,SAAS,yBAAyB,EAiDjE,CAAC;AA6UF,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,YAAY,EACrB,SAAS,GAAE,SAAS,yBAAyB,EAAsB,GAClE,OAAO,CAAC,IAAI,CAAC,CAIf"}