@elizaos/agent 2.0.0-alpha.98 → 2.0.0-beta.2

package/packages/agent/src/services/permissions-registry.js

@@ -0,0 +1,213 @@
+/**
+ * Central registry for system-permission state. Holds an in-memory map of
+ * `PermissionState` keyed by `PermissionId`, hydrates from disk on boot,
+ * persists changes (debounced), and exposes a pub/sub channel for the UI.
+ *
+ * Probers are pluggable — each `PermissionId` is wired to a `Prober` that
+ * knows how to `check()` the OS state and `request()` user consent. The
+ * registry is the single source of truth; native bridges register probers,
+ * features call `recordBlock()` to surface why a permission is needed.
+ */
+import * as fs from "node:fs";
+import * as os from "node:os";
+import path from "node:path";
+import { logger, Service } from "@elizaos/core";
+export const PERMISSIONS_REGISTRY_SERVICE = "eliza_permissions_registry";
+const PENDING_BLOCK_WINDOW_MS = 24 * 60 * 60 * 1000;
+const PERSIST_DEBOUNCE_MS = 500;
+function currentPlatform() {
+    const p = process.platform;
+    return p === "darwin" || p === "win32" || p === "linux" ? p : "linux";
+}
+function defaultStateFor(id) {
+    return {
+        id,
+        status: "not-determined",
+        canRequest: true,
+        lastChecked: Date.now(),
+        platform: currentPlatform(),
+    };
+}
+function resolveStateDir() {
+    const explicit = process.env.MILADY_STATE_DIR ?? process.env.ELIZA_STATE_DIR;
+    if (explicit && explicit.trim())
+        return explicit;
+    return path.join(os.homedir(), ".milady");
+}
+function resolvePersistencePath() {
+    return path.join(resolveStateDir(), "permissions.json");
+}
+class FilePersistenceAdapter {
+    filePath;
+    constructor(filePath) {
+        this.filePath = filePath;
+    }
+    read() {
+        if (!fs.existsSync(this.filePath))
+            return null;
+        const raw = fs.readFileSync(this.filePath, "utf8");
+        if (!raw.trim())
+            return null;
+        const parsed = JSON.parse(raw);
+        if (!Array.isArray(parsed))
+            return null;
+        return parsed.filter((entry) => !!entry &&
+            typeof entry === "object" &&
+            typeof entry.id === "string");
+    }
+    write(states) {
+        const dir = path.dirname(this.filePath);
+        fs.mkdirSync(dir, { recursive: true });
+        const tmp = `${this.filePath}.tmp`;
+        fs.writeFileSync(tmp, JSON.stringify(states, null, 2), "utf8");
+        fs.renameSync(tmp, this.filePath);
+    }
+}
+export class PermissionRegistry extends Service {
+    static serviceType = PERMISSIONS_REGISTRY_SERVICE;
+    static async start(runtime) {
+        const instance = new PermissionRegistry(runtime);
+        instance.hydrate();
+        const { registerAllProbers } = await import("./permissions/register-probers.js");
+        registerAllProbers(instance);
+        return instance;
+    }
+    capabilityDescription = "Central registry for system permission state, probers, and pub/sub";
+    states = new Map();
+    probers = new Map();
+    subscribers = new Set();
+    persistTimer = null;
+    persistence;
+    persistDebounceMs;
+    constructor(runtime, options = {}) {
+        super(runtime);
+        this.persistence =
+            options.persistence ??
+                new FilePersistenceAdapter(resolvePersistencePath());
+        this.persistDebounceMs = options.persistDebounceMs ?? PERSIST_DEBOUNCE_MS;
+    }
+    hydrate() {
+        const loaded = this.persistence.read();
+        if (!loaded)
+            return;
+        for (const state of loaded) {
+            this.states.set(state.id, state);
+        }
+    }
+    registerProber(prober) {
+        this.probers.set(prober.id, prober);
+    }
+    get(id) {
+        const existing = this.states.get(id);
+        if (existing)
+            return existing;
+        const fresh = defaultStateFor(id);
+        return fresh;
+    }
+    async check(id) {
+        const prober = this.probers.get(id);
+        if (!prober) {
+            throw new Error(`[PermissionRegistry] no prober registered for ${id}`);
+        }
+        const next = await prober.check();
+        this.commit(id, next);
+        return next;
+    }
+    async request(id, opts) {
+        const prober = this.probers.get(id);
+        if (!prober) {
+            throw new Error(`[PermissionRegistry] no prober registered for ${id}`);
+        }
+        const next = await prober.request({ reason: opts.reason });
+        const withRequest = {
+            ...next,
+            lastRequested: Date.now(),
+            lastBlockedFeature: {
+                app: opts.feature.app,
+                action: opts.feature.action,
+                at: Date.now(),
+            },
+        };
+        this.commit(id, withRequest);
+        return withRequest;
+    }
+    recordBlock(id, feature) {
+        const current = this.states.get(id) ?? defaultStateFor(id);
+        const next = {
+            ...current,
+            lastBlockedFeature: {
+                app: feature.app,
+                action: feature.action,
+                at: Date.now(),
+            },
+        };
+        this.commit(id, next);
+    }
+    list() {
+        return Array.from(this.states.values());
+    }
+    pending() {
+        const cutoff = Date.now() - PENDING_BLOCK_WINDOW_MS;
+        return this.list().filter((s) => {
+            if (s.status === "not-determined")
+                return true;
+            if (s.lastBlockedFeature && s.lastBlockedFeature.at >= cutoff)
+                return true;
+            return false;
+        });
+    }
+    subscribe(cb) {
+        this.subscribers.add(cb);
+        return () => {
+            this.subscribers.delete(cb);
+        };
+    }
+    async stop() {
+        if (this.persistTimer) {
+            clearTimeout(this.persistTimer);
+            this.persistTimer = null;
+            this.flushPersist();
+        }
+    }
+    commit(id, next) {
+        this.states.set(id, next);
+        this.notify();
+        this.schedulePersist();
+    }
+    notify() {
+        if (this.subscribers.size === 0)
+            return;
+        const snapshot = this.list();
+        for (const sub of this.subscribers) {
+            try {
+                sub(snapshot);
+            }
+            catch (err) {
+                logger.warn({ err: err instanceof Error ? err.message : String(err) }, "[PermissionRegistry] subscriber threw");
+            }
+        }
+    }
+    schedulePersist() {
+        if (this.persistDebounceMs <= 0) {
+            this.flushPersist();
+            return;
+        }
+        if (this.persistTimer)
+            clearTimeout(this.persistTimer);
+        this.persistTimer = setTimeout(() => {
+            this.persistTimer = null;
+            this.flushPersist();
+        }, this.persistDebounceMs);
+        if (typeof this.persistTimer.unref === "function") {
+            this.persistTimer.unref();
+        }
+    }
+    flushPersist() {
+        try {
+            this.persistence.write(this.list());
+        }
+        catch (err) {
+            logger.error({ err: err instanceof Error ? err.message : String(err) }, "[PermissionRegistry] failed to persist state");
+        }
+    }
+}

package/packages/agent/src/services/plugin-compiler.d.ts

@@ -0,0 +1,51 @@
+import * as esbuild from "esbuild";
+import type { VirtualFilesystemService } from "./virtual-filesystem.ts";
+export type PluginCompilerFormat = "esm" | "cjs";
+export interface PluginCompilerOptions {
+    vfs: VirtualFilesystemService;
+    /**
+     * Project id is informational; the VFS instance already binds to a project,
+     * but callers commonly carry the id alongside and we record it for logging.
+     */
+    projectId?: string;
+    /** Virtual entry path inside the VFS, e.g. `src/plugin.ts`. */
+    entry: string;
+    /** Virtual output path inside the VFS. Defaults to `dist/<entry-stem>.js`. */
+    outFile?: string;
+    format?: PluginCompilerFormat;
+    target?: string;
+    /**
+     * Patterns excluded from bundling. Defaults to ["@elizaos/*"] so the
+     * compiled plugin resolves elizaOS peers from the host runtime rather than
+     * inlining them.
+     */
+    external?: string[];
+    /** When true (default), inline a sourcemap into the output. */
+    sourcemap?: boolean;
+    /** When true (default), bundle dependencies. */
+    bundle?: boolean;
+    /** When false, suppress esbuild's default minification. Default false. */
+    minify?: boolean;
+}
+export interface PluginCompilerResult {
+    outFile: string;
+    format: PluginCompilerFormat;
+    target: string;
+    warnings: esbuild.Message[];
+    durationMs: number;
+}
+/**
+ * Compiles TypeScript plugin source from a project's VFS into JS, also written
+ * to the same VFS. The output is a real on-disk file that can be loaded via
+ * dynamic `import(pathToFileURL(...))`.
+ *
+ * Path-traversal protection is delegated to the VFS: every path that enters
+ * this compiler goes through `vfs.readFile` / `vfs.writeFile` /
+ * `vfs.resolveDiskPath`, which reject any path that would escape the project
+ * root.
+ */
+export declare class PluginCompiler {
+    compile(options: PluginCompilerOptions): Promise<PluginCompilerResult>;
+}
+export declare function createPluginCompiler(): PluginCompiler;
+//# sourceMappingURL=plugin-compiler.d.ts.map

package/packages/agent/src/services/plugin-compiler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-compiler.d.ts","sourceRoot":"","sources":["../../../../../src/services/plugin-compiler.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,OAAO,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAExE,MAAM,MAAM,oBAAoB,GAAG,KAAK,GAAG,KAAK,CAAC;AAEjD,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,wBAAwB,CAAC;IAC9B;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,KAAK,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,+DAA+D;IAC/D,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,gDAAgD;IAChD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,oBAAoB,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;CACpB;AAKD;;;;;;;;;GASG;AACH,qBAAa,cAAc;IACnB,OAAO,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;CAoE7E;AAED,wBAAgB,oBAAoB,IAAI,cAAc,CAErD"}

package/packages/agent/src/services/plugin-compiler.js

@@ -0,0 +1,90 @@
+import path from "node:path";
+import * as esbuild from "esbuild";
+const DEFAULT_TARGET = "node20";
+const DEFAULT_EXTERNAL = ["@elizaos/*"];
+/**
+ * Compiles TypeScript plugin source from a project's VFS into JS, also written
+ * to the same VFS. The output is a real on-disk file that can be loaded via
+ * dynamic `import(pathToFileURL(...))`.
+ *
+ * Path-traversal protection is delegated to the VFS: every path that enters
+ * this compiler goes through `vfs.readFile` / `vfs.writeFile` /
+ * `vfs.resolveDiskPath`, which reject any path that would escape the project
+ * root.
+ */
+export class PluginCompiler {
+    async compile(options) {
+        const { vfs, entry, outFile, format = "esm", target = DEFAULT_TARGET, external = DEFAULT_EXTERNAL, sourcemap = true, bundle = true, minify = false, } = options;
+        if (typeof entry !== "string" || entry.trim() === "") {
+            throw new Error("PluginCompiler.compile: `entry` is required");
+        }
+        const resolvedOut = outFile ?? defaultOutFile(entry);
+        const entrySource = await vfs.readFile(entry);
+        const entryDiskPath = vfs.resolveDiskPath(entry);
+        const outDiskPath = vfs.resolveDiskPath(resolvedOut);
+        const loader = inferLoader(entry);
+        const start = Date.now();
+        const result = await esbuild.build({
+            stdin: {
+                contents: entrySource,
+                resolveDir: path.dirname(entryDiskPath),
+                sourcefile: path.basename(entryDiskPath),
+                loader,
+            },
+            bundle,
+            write: false,
+            format,
+            target,
+            platform: "node",
+            external: [...external],
+            sourcemap: sourcemap ? "inline" : false,
+            minify,
+            logLevel: "silent",
+        });
+        const durationMs = Date.now() - start;
+        if (!result.outputFiles || result.outputFiles.length === 0) {
+            throw new Error("PluginCompiler.compile: esbuild produced no output files");
+        }
+        const primary = result.outputFiles[0];
+        if (!primary) {
+            throw new Error("PluginCompiler.compile: esbuild produced no output");
+        }
+        await vfs.writeFile(resolvedOut, primary.contents);
+        void outDiskPath;
+        return {
+            outFile: vfs.resolveVirtualPath(resolvedOut),
+            format,
+            target,
+            warnings: result.warnings,
+            durationMs,
+        };
+    }
+}
+export function createPluginCompiler() {
+    return new PluginCompiler();
+}
+function inferLoader(entry) {
+    const ext = path.extname(entry).toLowerCase();
+    switch (ext) {
+        case ".ts":
+            return "ts";
+        case ".tsx":
+            return "tsx";
+        case ".jsx":
+            return "jsx";
+        case ".mjs":
+        case ".cjs":
+        case ".js":
+            return "js";
+        default:
+            return "ts";
+    }
+}
+function defaultOutFile(entry) {
+    const normalized = entry.replace(/\\/g, "/").replace(/^\/+/, "");
+    const stem = normalized
+        .split("/")
+        .pop()
+        .replace(/\.(tsx?|jsx?|mjs|cjs)$/i, "");
+    return `dist/${stem}.js`;
+}

package/packages/agent/src/services/plugin-installer.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Plugin Installer for Eliza.
+ *
+ * Cross-platform plugin installation and lifecycle management.
+ *
+ * Install targets:
+ *   ~/.eliza/plugins/installed/<sanitised-name>/
+ *
+ * Works identically whether eliza is:
+ *   - Running from source (dev)
+ *   - Running as a CLI install (npm global)
+ *   - Running inside a packaged desktop app bundle
+ *   - Running on macOS, Linux, or Windows
+ *
+ * Strategy:
+ *   1. npm/bun install to an isolated prefix directory
+ *   2. Fallback: git clone from the plugin's GitHub repo
+ *   3. Track the installation in eliza.json config
+ *   4. Trigger agent restart to load the new plugin
+ *
+ * @module services/plugin-installer
+ */
+import { type RegistryPluginInfo } from "./registry-client.js";
+/** npm package names: @scope/name or name. No shell metacharacters. */
+export declare const VALID_PACKAGE_NAME: RegExp;
+/** Git branch names: alphanumeric, hyphens, slashes, dots. No shell metacharacters. */
+export declare const VALID_BRANCH: RegExp;
+/** Git URLs: https:// only, no shell metacharacters. */
+export declare const VALID_GIT_URL: RegExp;
+export declare function assertValidPackageName(name: string): void;
+export declare function assertValidGitUrl(url: string): void;
+export type InstallPhase = "resolving" | "downloading" | "installing-deps" | "validating" | "configuring" | "restarting" | "complete" | "error";
+export interface InstallProgress {
+    phase: InstallPhase;
+    pluginName: string;
+    message: string;
+}
+export type ProgressCallback = (progress: InstallProgress) => void;
+export interface InstallResult {
+    success: boolean;
+    pluginName: string;
+    version: string;
+    installPath: string;
+    requiresRestart: boolean;
+    error?: string;
+}
+export interface UninstallResult {
+    success: boolean;
+    pluginName: string;
+    requiresRestart: boolean;
+    error?: string;
+}
+export declare function sanitisePackageName(name: string): string;
+export declare function detectPackageManager(): Promise<"bun" | "npm">;
+/**
+ * Install a plugin from the registry.
+ *
+ * 1. Resolves the plugin name in the registry.
+ * 2. Installs via npm/bun to ~/.eliza/plugins/installed/<name>/.
+ * 3. Falls back to git clone if npm is not available for this package.
+ * 4. Writes an install record to eliza.json.
+ * 5. Returns metadata about the installation for the caller to
+ *    decide whether to trigger a restart.
+ *
+ * @param pluginName - The plugin name (e.g., "@elizaos/plugin-discord")
+ * @param onProgress - Optional progress callback
+ * @param requestedVersion - Optional specific version to install (e.g., "2.0.0-beta.0")
+ */
+export declare function installPlugin(pluginName: string, onProgress?: ProgressCallback, requestedVersion?: string): Promise<InstallResult>;
+/**
+ * Install a plugin and automatically restart the agent to pick it up.
+ */
+export declare function installAndRestart(pluginName: string, onProgress?: ProgressCallback, requestedVersion?: string): Promise<InstallResult>;
+/**
+ * Uninstall a user-installed plugin.
+ *
+ * Removes the install directory and the config record.
+ * Core / built-in plugins cannot be uninstalled.
+ */
+export declare function uninstallPlugin(pluginName: string): Promise<UninstallResult>;
+/**
+ * Uninstall a plugin and restart the agent.
+ */
+export declare function uninstallAndRestart(pluginName: string): Promise<UninstallResult>;
+export declare function resolveGitBranch(info: RegistryPluginInfo): Promise<string>;
+/** List all user-installed plugins from the config. */
+export declare function listInstalledPlugins(): Array<{
+    name: string;
+    version: string;
+    installPath: string;
+    installedAt: string;
+}>;
+//# sourceMappingURL=plugin-installer.d.ts.map

package/packages/agent/src/services/plugin-installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-installer.d.ts","sourceRoot":"","sources":["../../../../../src/services/plugin-installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAWH,OAAO,EAAiB,KAAK,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAU9E,uEAAuE;AACvE,eAAO,MAAM,kBAAkB,QACiB,CAAC;AAKjD,uFAAuF;AACvF,eAAO,MAAM,YAAY,QAA0B,CAAC;AAEpD,wDAAwD;AACxD,eAAO,MAAM,aAAa,QAAyC,CAAC;AAEpE,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAIzD;AAQD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAInD;AAYD,MAAM,MAAM,YAAY,GACpB,WAAW,GACX,aAAa,GACb,iBAAiB,GACjB,YAAY,GACZ,aAAa,GACb,YAAY,GACZ,UAAU,GACV,OAAO,CAAC;AAEZ,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,YAAY,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,eAAe,KAAK,IAAI,CAAC;AAEnE,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,OAAO,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,OAAO,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAiBD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAExD;AAoED,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,CAYnE;AAMD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAC3B,UAAU,EAAE,MAAM,EAClB,UAAU,CAAC,EAAE,gBAAgB,EAC7B,gBAAgB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,aAAa,CAAC,CAIxB;AAmKD;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,MAAM,EAClB,UAAU,CAAC,EAAE,gBAAgB,EAC7B,gBAAgB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,aAAa,CAAC,CAcxB;AAMD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAE5E;AA6DD;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,CAAC,CAQ1B;AAgKD,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,MAAM,CAAC,CA2BjB;AAgJD,uDAAuD;AACvD,wBAAgB,oBAAoB,IAAI,KAAK,CAAC;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC,CAUD"}