@elizaos/agent 2.0.0-alpha.98 → 2.0.0-beta.2

package/packages/agent/src/runtime/vault-profile-resolver.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Per-agent vault profile resolver.
+ *
+ * Walks every vault entry that has profile metadata, asks the vault's
+ * routing layer which profile applies for the current agent, and pumps
+ * the resolved value into `process.env[KEY]`. Runtime hot paths read
+ * env vars synchronously (`process.env.OPENROUTER_API_KEY`, etc.), so
+ * we resolve once at agent boot rather than instrumenting every call
+ * site.
+ *
+ * Scope: this is the minimum-viable wiring per the spec —
+ *   - Only `agent` scope rules apply; the runtime knows agentId.
+ *   - `app` and `skill` scope rules are persisted but not yet
+ *     resolved here (no call site has the context).
+ *
+ * Idempotent: re-running for the same agent overwrites with the same
+ * value. Opt-out via `ELIZA_DISABLE_VAULT_PROFILE_RESOLVER=1`.
+ */
+import { type Vault } from "@elizaos/vault";
+export interface ResolveProfilesResult {
+    /** Number of keys whose env value was overridden. */
+    readonly overridden: number;
+    /** Keys that had profiles but every candidate profile was empty. */
+    readonly skipped: ReadonlyArray<string>;
+    /** Keys where resolution failed (vault read error). */
+    readonly failed: ReadonlyArray<string>;
+}
+/**
+ * For each inventory entry that has `hasProfiles === true`, resolve
+ * the active value for `agentId` and write it into `process.env[KEY]`.
+ *
+ * Keys without profiles are left alone — `process.env` already holds
+ * whatever the legacy hydration path put there (config.env, eliza.json,
+ * direct env). This resolver is purely additive.
+ */
+export declare function applyVaultProfilesForAgent(vault: Vault, agentId: string): Promise<ResolveProfilesResult>;
+//# sourceMappingURL=vault-profile-resolver.d.ts.map

package/packages/agent/src/runtime/vault-profile-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-profile-resolver.d.ts","sourceRoot":"","sources":["../../../../../src/runtime/vault-profile-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAGL,KAAK,KAAK,EAEX,MAAM,gBAAgB,CAAC;AAExB,MAAM,WAAW,qBAAqB;IACpC,qDAAqD;IACrD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,oEAAoE;IACpE,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACxC,uDAAuD;IACvD,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACxC;AAED;;;;;;;GAOG;AACH,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,qBAAqB,CAAC,CA0DhC"}

package/packages/agent/src/runtime/vault-profile-resolver.js

@@ -0,0 +1,79 @@
+/**
+ * Per-agent vault profile resolver.
+ *
+ * Walks every vault entry that has profile metadata, asks the vault's
+ * routing layer which profile applies for the current agent, and pumps
+ * the resolved value into `process.env[KEY]`. Runtime hot paths read
+ * env vars synchronously (`process.env.OPENROUTER_API_KEY`, etc.), so
+ * we resolve once at agent boot rather than instrumenting every call
+ * site.
+ *
+ * Scope: this is the minimum-viable wiring per the spec —
+ *   - Only `agent` scope rules apply; the runtime knows agentId.
+ *   - `app` and `skill` scope rules are persisted but not yet
+ *     resolved here (no call site has the context).
+ *
+ * Idempotent: re-running for the same agent overwrites with the same
+ * value. Opt-out via `ELIZA_DISABLE_VAULT_PROFILE_RESOLVER=1`.
+ */
+import { logger } from "@elizaos/core";
+import { listVaultInventory, resolveActiveValue, } from "@elizaos/vault";
+/**
+ * For each inventory entry that has `hasProfiles === true`, resolve
+ * the active value for `agentId` and write it into `process.env[KEY]`.
+ *
+ * Keys without profiles are left alone — `process.env` already holds
+ * whatever the legacy hydration path put there (config.env, eliza.json,
+ * direct env). This resolver is purely additive.
+ */
+export async function applyVaultProfilesForAgent(vault, agentId) {
+    if (process.env.ELIZA_DISABLE_VAULT_PROFILE_RESOLVER === "1") {
+        return { overridden: 0, skipped: [], failed: [] };
+    }
+    let entries;
+    try {
+        entries = await listVaultInventory(vault);
+    }
+    catch (err) {
+        logger.warn(`[vault-profile-resolver] inventory listing failed for agent="${agentId}": ${err instanceof Error ? err.message : String(err)}`);
+        return { overridden: 0, skipped: [], failed: [] };
+    }
+    let overridden = 0;
+    const skipped = [];
+    const failed = [];
+    for (const entry of entries) {
+        if (!entry.hasProfiles)
+            continue;
+        if (entry.kind === "reference") {
+            // Reference entries resolve through their backing password
+            // manager, not through profiles. Skip — but only after auditing
+            // we'd actually have a profile blob to read.
+            continue;
+        }
+        try {
+            const value = await resolveActiveValue(vault, entry.key, { agentId });
+            if (typeof value !== "string" || value.length === 0) {
+                skipped.push(entry.key);
+                continue;
+            }
+            process.env[entry.key] = value;
+            overridden += 1;
+        }
+        catch (err) {
+            // resolveActiveValue throws when no profile and no bare value
+            // resolves. Don't try to fall back to legacy env — the user
+            // explicitly declared profiles for this key, so an unresolvable
+            // active profile is a real failure they should see.
+            failed.push(entry.key);
+            logger.warn(`[vault-profile-resolver] failed to resolve agent="${agentId}" key="${entry.key}": ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    if (overridden > 0 || failed.length > 0) {
+        logger.info(`[vault-profile-resolver] agent="${agentId}" overridden=${overridden} skipped=${skipped.length} failed=${failed.length}`);
+    }
+    return {
+        overridden,
+        skipped: Object.freeze(skipped),
+        failed: Object.freeze(failed),
+    };
+}

package/packages/agent/src/runtime/version.js

@@ -1,4 +1,4 @@
-import { resolveElizaVersion } from "../version-resolver";
+import { resolveElizaVersion } from "../version-resolver.js";
 // Single source of truth for the current Eliza version.
 // - Embedded/bundled builds: injected define or env var.
 // - Dev/npm builds: package.json or build-info fallback.

package/packages/agent/src/runtime/web-search-tools.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Web search tool injection for Anthropic models (Path A).
+ *
+ * Adds Anthropic's server-side `web_search` tool to all generateText and
+ * streamText calls when the model is Anthropic. This is zero-cost (no
+ * separate API key needed) -- Anthropic handles it server-side.
+ *
+ * Works by monkey-patching the Vercel AI SDK's generateText/streamText
+ * functions to inject the web_search tool whenever the model provider
+ * is Anthropic and no tools are already present.
+ *
+ * Controlled by:
+ *   ELIZA_WEB_SEARCH=0|false|off  — disable (default: enabled)
+ */
+import type { AgentRuntime } from "@elizaos/core";
+/**
+ * Enable Anthropic server-side web search for the given runtime.
+ *
+ * Call after plugins are registered and prompt optimizations installed.
+ */
+export declare function installAnthropicWebSearch(runtime: AgentRuntime): void;
+//# sourceMappingURL=web-search-tools.d.ts.map

package/packages/agent/src/runtime/web-search-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-search-tools.d.ts","sourceRoot":"","sources":["../../../../../src/runtime/web-search-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AA+HlD;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CA8CrE"}

package/packages/agent/src/runtime/web-search-tools.js

@@ -0,0 +1,151 @@
+/**
+ * Web search tool injection for Anthropic models (Path A).
+ *
+ * Adds Anthropic's server-side `web_search` tool to all generateText and
+ * streamText calls when the model is Anthropic. This is zero-cost (no
+ * separate API key needed) -- Anthropic handles it server-side.
+ *
+ * Works by monkey-patching the Vercel AI SDK's generateText/streamText
+ * functions to inject the web_search tool whenever the model provider
+ * is Anthropic and no tools are already present.
+ *
+ * Controlled by:
+ *   ELIZA_WEB_SEARCH=0|false|off  — disable (default: enabled)
+ */
+import { logger, ModelType } from "@elizaos/core";
+// ---------------------------------------------------------------------------
+// Env gate (opt-out, enabled by default)
+// ---------------------------------------------------------------------------
+const ELIZA_WEB_SEARCH_ENABLED = (() => {
+    const raw = process.env.ELIZA_WEB_SEARCH?.toLowerCase();
+    if (raw === "0" || raw === "false" || raw === "off")
+        return false;
+    return true;
+})();
+// Prevent double-patching
+let patched = false;
+const installedRuntimes = new WeakSet();
+// ---------------------------------------------------------------------------
+// Provider detection
+// ---------------------------------------------------------------------------
+function isAnthropicRuntime(runtime) {
+    const modelsMap = runtime.models;
+    if (modelsMap) {
+        for (const key of [ModelType.TEXT_LARGE, "TEXT_LARGE"]) {
+            const handlers = modelsMap.get(key);
+            if (handlers?.[0]?.provider?.toLowerCase().includes("anthropic")) {
+                return true;
+            }
+        }
+    }
+    // Fallback: env + character hints
+    if (process.env.ANTHROPIC_API_KEY) {
+        const char = runtime.character;
+        const mp = char?.modelProvider;
+        if (typeof mp === "string" && /anthropic/i.test(mp))
+            return true;
+        const m = char?.model;
+        if (typeof m === "string" && /claude|anthropic/i.test(m))
+            return true;
+    }
+    return false;
+}
+// ---------------------------------------------------------------------------
+// AI SDK patch
+// ---------------------------------------------------------------------------
+function patchAiSdk(webSearchTool) {
+    if (patched)
+        return;
+    patched = true;
+    let aiModule;
+    try {
+        aiModule = require("ai");
+    }
+    catch {
+        logger.warn("[web-search] Could not require('ai') — skipping patch");
+        return;
+    }
+    const wrapFn = (original, name) => {
+        const wrapped = function patchedAiFn(...args) {
+            if (args.length > 0 && args[0] && typeof args[0] === "object") {
+                const params = args[0];
+                const model = params.model;
+                const provider = model?.provider ?? "";
+                if (provider.toLowerCase().includes("anthropic") &&
+                    (!params.tools || Object.keys(params.tools).length === 0)) {
+                    args[0] = {
+                        ...params,
+                        tools: { web_search: webSearchTool },
+                    };
+                    logger.debug(`[web-search] Injected web_search tool into ${name} call`);
+                }
+            }
+            return original.apply(this, args);
+        };
+        // Preserve static properties
+        for (const key of Object.getOwnPropertyNames(original)) {
+            if (key !== "length" && key !== "name" && key !== "prototype") {
+                try {
+                    const wrappedWithStatics = wrapped;
+                    const originalWithStatics = original;
+                    wrappedWithStatics[key] = originalWithStatics[key];
+                }
+                catch {
+                    /* read-only */
+                }
+            }
+        }
+        return wrapped;
+    };
+    if (typeof aiModule.generateText === "function") {
+        aiModule.generateText = wrapFn(aiModule.generateText, "generateText");
+    }
+    if (typeof aiModule.streamText === "function") {
+        aiModule.streamText = wrapFn(aiModule.streamText, "streamText");
+    }
+    logger.info("[web-search] Patched ai.generateText/streamText for Anthropic web_search auto-injection");
+}
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/**
+ * Enable Anthropic server-side web search for the given runtime.
+ *
+ * Call after plugins are registered and prompt optimizations installed.
+ */
+export function installAnthropicWebSearch(runtime) {
+    if (!ELIZA_WEB_SEARCH_ENABLED) {
+        logger.info("[web-search] Disabled via ELIZA_WEB_SEARCH env var");
+        return;
+    }
+    if (installedRuntimes.has(runtime))
+        return;
+    installedRuntimes.add(runtime);
+    if (!isAnthropicRuntime(runtime)) {
+        logger.info("[web-search] Non-Anthropic runtime — server-side web search skipped");
+        return;
+    }
+    // Load the web search server tool from @ai-sdk/anthropic
+    let webSearchTool;
+    try {
+        // eslint-disable-next-line @typescript-eslint/no-require-imports
+        const sdk = require("@ai-sdk/anthropic");
+        const tools = sdk.anthropicTools ?? sdk.anthropic?.tools;
+        if (tools?.webSearch_20260209) {
+            webSearchTool = tools.webSearch_20260209();
+        }
+        else if (tools?.webSearch_20250305) {
+            webSearchTool = tools.webSearch_20250305();
+        }
+    }
+    catch (err) {
+        logger.warn(`[web-search] @ai-sdk/anthropic not available: ${err instanceof Error ? err.message : err}`);
+        return;
+    }
+    if (!webSearchTool) {
+        logger.warn("[web-search] @ai-sdk/anthropic has no webSearch tool factory — upgrade @ai-sdk/anthropic");
+        return;
+    }
+    patchAiSdk(webSearchTool);
+    logger.info("[web-search] Anthropic server-side web_search enabled (zero-cost, no key required)");
+}

package/packages/agent/src/security/access.d.ts

@@ -0,0 +1,17 @@
+import type { IAgentRuntime, Memory } from "@elizaos/core";
+/** Role names matching the elizaOS role hierarchy. */
+export type RequiredRole = "OWNER" | "ADMIN" | "USER" | "GUEST";
+export declare function isAgentSelf(runtime: IAgentRuntime | undefined, message: Memory | undefined): boolean;
+export declare function hasOwnerAccess(runtime: IAgentRuntime | undefined, message: Memory | undefined): Promise<boolean>;
+export declare function hasAdminAccess(runtime: IAgentRuntime | undefined, message: Memory | undefined): Promise<boolean>;
+export declare function hasPrivateAccess(runtime: IAgentRuntime | undefined, message: Memory | undefined): Promise<boolean>;
+/**
+ * Check whether the sender has at least the given role in the elizaOS
+ * role hierarchy (OWNER > ADMIN > USER > GUEST).
+ *
+ * Follows the same lenient pattern as plugin-role-gating: when there is
+ * no world context (e.g. local API calls), the check falls through and
+ * allows the action so local-only usage isn't blocked.
+ */
+export declare function hasRoleAccess(runtime: IAgentRuntime | undefined, message: Memory | undefined, requiredRole: RequiredRole): Promise<boolean>;
+//# sourceMappingURL=access.d.ts.map

package/packages/agent/src/security/access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../../../../../src/security/access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAM3D,sDAAsD;AACtD,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;AA2BhE,wBAAgB,WAAW,CACzB,OAAO,EAAE,aAAa,GAAG,SAAS,EAClC,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,OAAO,CAMT;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,aAAa,GAAG,SAAS,EAClC,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,OAAO,CAAC,OAAO,CAAC,CAElB;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,aAAa,GAAG,SAAS,EAClC,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,OAAO,CAAC,OAAO,CAAC,CAElB;AAED,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,aAAa,GAAG,SAAS,EAClC,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,OAAO,CAAC,OAAO,CAAC,CAmBlB;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,aAAa,GAAG,SAAS,EAClC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,YAAY,EAAE,YAAY,GACzB,OAAO,CAAC,OAAO,CAAC,CAElB"}

package/packages/agent/src/security/access.js

@@ -0,0 +1,54 @@
+import { checkSenderPrivateAccess, hasRoleAccess as coreHasRoleAccess, } from "@elizaos/core";
+function getAccessContext(runtime, message) {
+    if (!runtime ||
+        typeof runtime.agentId !== "string" ||
+        !message ||
+        typeof message.entityId !== "string" ||
+        message.entityId.length === 0) {
+        return null;
+    }
+    return {
+        runtime,
+        message,
+    };
+}
+export function isAgentSelf(runtime, message) {
+    const context = getAccessContext(runtime, message);
+    if (!context) {
+        return false;
+    }
+    return context.message.entityId === context.runtime.agentId;
+}
+export async function hasOwnerAccess(runtime, message) {
+    return coreHasRoleAccess(runtime, message, "OWNER");
+}
+export async function hasAdminAccess(runtime, message) {
+    return coreHasRoleAccess(runtime, message, "ADMIN");
+}
+export async function hasPrivateAccess(runtime, message) {
+    if (await coreHasRoleAccess(runtime, message, "OWNER")) {
+        return true;
+    }
+    const context = getAccessContext(runtime, message);
+    if (!context) {
+        return true;
+    }
+    try {
+        const access = await checkSenderPrivateAccess(context.runtime, context.message);
+        return access?.hasPrivateAccess === true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Check whether the sender has at least the given role in the elizaOS
+ * role hierarchy (OWNER > ADMIN > USER > GUEST).
+ *
+ * Follows the same lenient pattern as plugin-role-gating: when there is
+ * no world context (e.g. local API calls), the check falls through and
+ * allows the action so local-only usage isn't blocked.
+ */
+export async function hasRoleAccess(runtime, message, requiredRole) {
+    return coreHasRoleAccess(runtime, message, requiredRole);
+}

package/packages/agent/src/security/audit-log.d.ts

@@ -29,8 +29,6 @@ export type AuditFeedSubscriber = (entry: AuditEntry) => void;
 export declare function queryAuditFeed(query?: AuditFeedQuery): AuditEntry[];
 export declare function getAuditFeedSize(): number;
 export declare function subscribeAuditFeed(subscriber: AuditFeedSubscriber): () => void;
-/** @internal Test-only helper to isolate process-wide audit state between specs. */
-export declare function __resetAuditFeedForTests(): void;
 export declare class SandboxAuditLog {
     private entries;
     private consoleEnabled;

package/packages/agent/src/security/audit-log.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-log.d.ts","sourceRoot":"","sources":["../../../../../src/security/audit-log.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,iBAAiB,mVAapB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAChE,eAAO,MAAM,gBAAgB,gDAAiD,CAAC;AAC/E,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAQ9D,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;IAC5D,QAAQ,EAAE,aAAa,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;AAoC9D,wBAAgB,cAAc,CAAC,KAAK,GAAE,cAAmB,GAAG,UAAU,EAAE,CAoBvE;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,mBAAmB,GAC9B,MAAM,IAAI,CAKZ;AAED,oFAAoF;AACpF,wBAAgB,wBAAwB,IAAI,IAAI,CAG/C;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,OAAO,CAAoB;IACnC,OAAO,CAAC,cAAc,CAAU;IAChC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,IAAI,CAAC,CAA8B;gBAE/B,MAAM,GAAE,cAAmB;IAMvC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,GAAG,IAAI;IAkBlD,sBAAsB,CACpB,SAAS,EAAE,UAAU,GAAG,SAAS,EACjC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAAE,GACjB,IAAI;IAiBP,0BAA0B,CACxB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,GACnD,IAAI;IASP,oBAAoB,CAClB,QAAQ,EAAE,OAAO,GAAG,MAAM,EAC1B,MAAM,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,GACnD,IAAI;IASP,SAAS,CAAC,KAAK,SAAM,GAAG,UAAU,EAAE;IAIpC,SAAS,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,SAAK,GAAG,UAAU,EAAE;IAIzD,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,KAAK,IAAI,IAAI;CAGd"}
+{"version":3,"file":"audit-log.d.ts","sourceRoot":"","sources":["../../../../../src/security/audit-log.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,iBAAiB,mVAapB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAChE,eAAO,MAAM,gBAAgB,gDAAiD,CAAC;AAC/E,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAQ9D,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;IAC5D,QAAQ,EAAE,aAAa,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;AAoC9D,wBAAgB,cAAc,CAAC,KAAK,GAAE,cAAmB,GAAG,UAAU,EAAE,CAoBvE;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,mBAAmB,GAC9B,MAAM,IAAI,CAKZ;AAQD,qBAAa,eAAe;IAC1B,OAAO,CAAC,OAAO,CAAoB;IACnC,OAAO,CAAC,cAAc,CAAU;IAChC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,IAAI,CAAC,CAA8B;gBAE/B,MAAM,GAAE,cAAmB;IAMvC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,GAAG,IAAI;IAkBlD,sBAAsB,CACpB,SAAS,EAAE,UAAU,GAAG,SAAS,EACjC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAAE,GACjB,IAAI;IAiBP,0BAA0B,CACxB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,GACnD,IAAI;IASP,oBAAoB,CAClB,QAAQ,EAAE,OAAO,GAAG,MAAM,EAC1B,MAAM,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,GACnD,IAAI;IASP,SAAS,CAAC,KAAK,SAAM,GAAG,UAAU,EAAE;IAIpC,SAAS,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,SAAK,GAAG,UAAU,EAAE;IAIzD,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,KAAK,IAAI,IAAI;CAGd"}

package/packages/agent/src/security/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./access.ts";
+export * from "./audit-log.ts";
+export * from "./network-policy.ts";
+//# sourceMappingURL=index.d.ts.map

package/packages/agent/src/security/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/security/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC"}

package/packages/agent/src/security/index.js

@@ -0,0 +1,3 @@
+export * from "./access.js";
+export * from "./audit-log.js";
+export * from "./network-policy.js";

package/packages/agent/src/services/agent-export.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-export.d.ts","sourceRoot":"","sources":["../../../../../src/services/agent-export.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH,OAAO,KAAK,EACV,KAAK,EACL,YAAY,EACZ,SAAS,EACT,MAAM,EACN,GAAG,EACH,MAAM,EACN,YAAY,EACZ,IAAI,EACJ,IAAI,EAEJ,KAAK,EACN,MAAM,eAAe,CAAC;AAsCvB,MAAM,WAAW,kBAAkB;IACjC,6EAA6E;IAC7E,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACtB;;;6EAGyE;IACzE,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,YAAY,EAAE,KAAK,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,CAAC,CAAC;IACH,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,IAAI,EAAE,GAAG,EAAE,CAAC;CACb;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC;QACd,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AA6KD,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AA2eD;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,YAAY,EACrB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,MAAM,CAAC,CA4BjB;AAED;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,YAAY,EACrB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,YAAY,CAAC,CAkFvB;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,kBAAkB,CAAC,CAmD7B"}
+{"version":3,"file":"agent-export.d.ts","sourceRoot":"","sources":["../../../../../src/services/agent-export.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH,OAAO,KAAK,EACV,KAAK,EACL,YAAY,EACZ,SAAS,EACT,MAAM,EACN,GAAG,EACH,MAAM,EACN,YAAY,EACZ,IAAI,EACJ,IAAI,EAEJ,KAAK,EACN,MAAM,eAAe,CAAC;AAsCvB,MAAM,WAAW,kBAAkB;IACjC,6EAA6E;IAC7E,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACtB;;;6EAGyE;IACzE,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,YAAY,EAAE,KAAK,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,CAAC,CAAC;IACH,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,IAAI,EAAE,GAAG,EAAE,CAAC;CACb;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC;QACd,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAkOD,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AA2eD;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,YAAY,EACrB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,MAAM,CAAC,CA4BjB;AAED;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,YAAY,EACrB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,YAAY,CAAC,CAgFvB;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,kBAAkB,CAAC,CAmD7B"}

package/packages/agent/src/services/agent-export.js

@@ -52,33 +52,68 @@ const MEMORY_TABLES = [
 // ---------------------------------------------------------------------------
 // Validation schema for the decrypted payload
 // ---------------------------------------------------------------------------
-// Records that must have an id field for import to work
-const IdRecord = z
-    .record(z.string(), z.unknown())
-    .and(z.object({ id: z.string() }));
-const IdRecordArray = z.array(IdRecord);
+function hasStringId(value) {
+    return (typeof value === "object" &&
+        value !== null &&
+        !Array.isArray(value) &&
+        typeof value.id === "string");
+}
+function typedIdRecordSchema() {
+    return z.custom((value) => hasStringId(value), {
+        message: "Expected object with string id",
+    });
+}
+const EntitySchema = typedIdRecordSchema();
+const MemorySchema = typedIdRecordSchema();
+const ComponentSchema = typedIdRecordSchema();
+const RoomSchema = typedIdRecordSchema();
+const RelationshipSchema = typedIdRecordSchema();
+const WorldSchema = typedIdRecordSchema();
+const TaskSchema = typedIdRecordSchema();
 // Logs don't need IDs (they're created fresh on import)
-const LooseRecordArray = z.array(z.record(z.string(), z.unknown()));
+const LogSchema = z.custom((value) => typeof value === "object" && value !== null && !Array.isArray(value), { message: "Expected log object" });
 const PayloadSchema = z.object({
     version: z.number().int().min(1),
     exportedAt: z.string(),
     sourceAgentId: z.string(),
-    agent: z.record(z.string(), z.unknown()),
+    agent: z.custom((value) => typeof value === "object" && value !== null && !Array.isArray(value), { message: "Expected agent object" }),
     characterConfig: z.record(z.string(), z.unknown()).optional(),
-    entities: IdRecordArray,
-    memories: IdRecordArray,
-    components: IdRecordArray,
-    rooms: IdRecordArray,
+    entities: z.array(EntitySchema),
+    memories: z.array(MemorySchema),
+    components: z.array(ComponentSchema),
+    rooms: z.array(RoomSchema),
     participants: z.array(z.object({
         entityId: z.string(),
         roomId: z.string(),
         userState: z.string().nullable(),
     })),
-    relationships: IdRecordArray,
-    worlds: IdRecordArray,
-    tasks: IdRecordArray,
-    logs: LooseRecordArray,
+    relationships: z.array(RelationshipSchema),
+    worlds: z.array(WorldSchema),
+    tasks: z.array(TaskSchema),
+    logs: z.array(LogSchema),
 });
+function toAgentExportPayload(payload) {
+    return {
+        version: payload.version,
+        exportedAt: payload.exportedAt,
+        sourceAgentId: payload.sourceAgentId,
+        agent: payload.agent,
+        characterConfig: payload.characterConfig,
+        entities: payload.entities,
+        memories: payload.memories,
+        components: payload.components,
+        rooms: payload.rooms,
+        participants: payload.participants.map((participant) => ({
+            entityId: participant.entityId,
+            roomId: participant.roomId,
+            userState: participant.userState ?? null,
+        })),
+        relationships: payload.relationships,
+        worlds: payload.worlds,
+        tasks: payload.tasks,
+        logs: payload.logs,
+    };
+}
 // ---------------------------------------------------------------------------
 // Crypto helpers
 // ---------------------------------------------------------------------------
@@ -283,7 +318,7 @@ async function extractAgentData(runtime, options) {
         const memories = await db.getMemories({
             agentId,
             tableName,
-            count: Number.MAX_SAFE_INTEGER,
+            limit: Number.MAX_SAFE_INTEGER,
         });
         for (const mem of memories) {
             if (mem.id && !memoryIdSet.has(mem.id)) {
@@ -300,7 +335,7 @@ async function extractAgentData(runtime, options) {
         for (const tableName of MEMORY_TABLES) {
             const worldMemories = await db.getMemoriesByWorldId({
                 worldIds: [world.id],
-                count: Number.MAX_SAFE_INTEGER,
+                limit: Number.MAX_SAFE_INTEGER,
                 tableName,
             });
             for (const mem of worldMemories) {
@@ -324,7 +359,7 @@ async function extractAgentData(runtime, options) {
     // 9. Logs (optional)
     let logs = [];
     if (options.includeLogs) {
-        logs = await db.getLogs({ count: Number.MAX_SAFE_INTEGER });
+        logs = await db.getLogs({ limit: Number.MAX_SAFE_INTEGER });
         logger.info(`[agent-export] Found ${logs.length} logs`);
     }
     // 10. Runtime character config — captures fields from buildCharacterFromConfig
@@ -642,7 +677,7 @@ export async function importAgent(runtime, fileBuffer, password) {
                 err.message.includes("auth"))) {
             throw new AgentExportError("Incorrect password — decryption failed. Please check your password and try again.");
         }
-        throw new AgentExportError(`Decryption failed: ${err instanceof Error ? err.message : String(err)}`);
+        throw new AgentExportError(`Decryption failed: ${String(err)}`);
     }
     // 3. Decompress
     let jsonString;
@@ -653,7 +688,7 @@ export async function importAgent(runtime, fileBuffer, password) {
     catch (err) {
         if (err instanceof AgentExportError)
             throw err;
-        throw new AgentExportError(`Decompression failed — the file may be corrupt: ${err instanceof Error ? err.message : String(err)}`);
+        throw new AgentExportError(`Decompression failed — the file may be corrupt: ${String(err)}`);
     }
     // 4. Parse JSON
     let rawPayload;
@@ -661,7 +696,7 @@ export async function importAgent(runtime, fileBuffer, password) {
         rawPayload = JSON.parse(jsonString);
     }
     catch (err) {
-        throw new AgentExportError(`JSON parse failed — the export data is malformed: ${err instanceof Error ? err.message : String(err)}`);
+        throw new AgentExportError(`JSON parse failed — the export data is malformed: ${String(err)}`);
     }
     // 5. Validate schema
     const parseResult = PayloadSchema.safeParse(rawPayload);
@@ -671,7 +706,7 @@ export async function importAgent(runtime, fileBuffer, password) {
             .join("; ");
         throw new AgentExportError(`Export file schema validation failed: ${issues}`);
     }
-    const payload = parseResult.data;
+    const payload = toAgentExportPayload(parseResult.data);
     if (payload.version > EXPORT_VERSION) {
         throw new AgentExportError(`Unsupported export version ${payload.version}. This build supports up to version ${EXPORT_VERSION}. ` +
             "Please update your software to import this file.");
@@ -692,7 +727,7 @@ export async function estimateExportSize(runtime) {
         const mems = await db.getMemories({
             agentId,
             tableName,
-            count: Number.MAX_SAFE_INTEGER,
+            limit: Number.MAX_SAFE_INTEGER,
         });
         memoriesCount += mems.length;
     }

package/packages/agent/src/services/app-manager-agents-list-guard.d.ts

@@ -0,0 +1,4 @@
+type AgentsListSnapshot = unknown[] | undefined;
+export declare function shouldRestoreAgentsListAfterAppLaunch(before: AgentsListSnapshot, after: unknown): boolean;
+export {};
+//# sourceMappingURL=app-manager-agents-list-guard.d.ts.map

package/packages/agent/src/services/app-manager-agents-list-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-manager-agents-list-guard.d.ts","sourceRoot":"","sources":["../../../../../src/services/app-manager-agents-list-guard.ts"],"names":[],"mappings":"AAAA,KAAK,kBAAkB,GAAG,OAAO,EAAE,GAAG,SAAS,CAAC;AAMhD,wBAAgB,qCAAqC,CACnD,MAAM,EAAE,kBAAkB,EAC1B,KAAK,EAAE,OAAO,GACb,OAAO,CAaT"}

package/packages/agent/src/services/app-manager-agents-list-guard.js

@@ -0,0 +1,15 @@
+function agentsListEntriesEqual(left, right) {
+    return JSON.stringify(left) === JSON.stringify(right);
+}
+export function shouldRestoreAgentsListAfterAppLaunch(before, after) {
+    if (!Array.isArray(after)) {
+        return false;
+    }
+    if (!before) {
+        return after.length > 0;
+    }
+    if (after.length < before.length) {
+        return true;
+    }
+    return before.some((entry, index) => !agentsListEntriesEqual(entry, after[index]));
+}