@elizaos/agent 2.0.0-alpha.98 → 2.0.0-beta.2

package/packages/agent/src/api/coordinator-wiring.d.ts

@@ -5,7 +5,7 @@ import type { AgentRuntime } from "@elizaos/core";
  */
 export interface WirableState {
     runtime: AgentRuntime | null;
-    broadcastWs?: ((data: Record<string, unknown>) => void) | null;
+    broadcastWs?: ((data: object) => void) | null;
 }
 export interface WireCoordinatorOpts<S extends WirableState = WirableState> {
     /** Wire the chat bridge. Returns true on success. */
@@ -34,9 +34,9 @@ export interface WireResult {
  * Wire coordinator bridges using polling-based service discovery.
  *
  * 1. Attempts immediate wiring (coordinator may already be available).
- * 2. If any bridge fails, polls for the SWARM_COORDINATOR service via
- *    `runtime.getService()` (the orchestrator plugin registers it via
- *    direct map insertion, so `getServiceLoadPromise` never resolves).
+ * 2. If any bridge fails, polls for the coordinator via `runtime.getService()`.
+ *    Depending on the installed coding-agent plugin, this may be exposed as a
+ *    `SWARM_COORDINATOR` service or as `PTY_SERVICE.coordinator`.
  * 3. Once the service appears, retries failed bridges up to MAX_RETRIES.
  * 4. On timeout or exhaustion, broadcasts a system-warning WS event.
  *

package/packages/agent/src/api/coordinator-wiring.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coordinator-wiring.d.ts","sourceRoot":"","sources":["../../../../../src/api/coordinator-wiring.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IAC7B,WAAW,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;CAChE;AAED,MAAM,WAAW,mBAAmB,CAAC,CAAC,SAAS,YAAY,GAAG,YAAY;IACxE,qDAAqD;IACrD,cAAc,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,0DAA0D;IAC1D,YAAY,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvD,8DAA8D;IAC9D,gBAAgB,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,2EAA2E;IAC3E,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9D,uDAAuD;IACvD,OAAO,EAAE,MAAM,CAAC;IAChB,sCAAsC;IACtC,MAAM,EAAE;QAAE,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;KAAE,CAAC;CACxE;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,OAAO,CAAC;IACd,EAAE,EAAE,OAAO,CAAC;IACZ,YAAY,EAAE,OAAO,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;CACzB;AAOD;;;;;;;;;;;GAWG;AACH,wBAAsB,+BAA+B,CAAC,CAAC,SAAS,YAAY,EAC1E,KAAK,EAAE,CAAC,EACR,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC,GAC3B,OAAO,CAAC,UAAU,CAAC,CAyGrB"}
+{"version":3,"file":"coordinator-wiring.d.ts","sourceRoot":"","sources":["../../../../../src/api/coordinator-wiring.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IAC7B,WAAW,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;CAC/C;AAED,MAAM,WAAW,mBAAmB,CAAC,CAAC,SAAS,YAAY,GAAG,YAAY;IACxE,qDAAqD;IACrD,cAAc,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,0DAA0D;IAC1D,YAAY,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvD,8DAA8D;IAC9D,gBAAgB,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,2EAA2E;IAC3E,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9D,uDAAuD;IACvD,OAAO,EAAE,MAAM,CAAC;IAChB,sCAAsC;IACtC,MAAM,EAAE;QAAE,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;KAAE,CAAC;CACxE;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,OAAO,CAAC;IACd,EAAE,EAAE,OAAO,CAAC;IACZ,YAAY,EAAE,OAAO,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;CACzB;AAiBD;;;;;;;;;;;GAWG;AACH,wBAAsB,+BAA+B,CAAC,CAAC,SAAS,YAAY,EAC1E,KAAK,EAAE,CAAC,EACR,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC,GAC3B,OAAO,CAAC,UAAU,CAAC,CAuGrB"}

package/packages/agent/src/api/coordinator-wiring.js

@@ -2,13 +2,20 @@ const POLL_INTERVAL_MS = 2_000;
 const POLL_TIMEOUT_MS = 90_000;
 const RETRY_DELAY_MS = 500;
 const MAX_RETRIES = 5;
+function discoverCoordinator(runtime) {
+    const coordinator = runtime.getService("SWARM_COORDINATOR");
+    if (coordinator)
+        return coordinator;
+    const ptyService = runtime.getService("PTY_SERVICE");
+    return ptyService?.coordinator ?? null;
+}
 /**
  * Wire coordinator bridges using polling-based service discovery.
  *
  * 1. Attempts immediate wiring (coordinator may already be available).
- * 2. If any bridge fails, polls for the SWARM_COORDINATOR service via
- *    `runtime.getService()` (the orchestrator plugin registers it via
- *    direct map insertion, so `getServiceLoadPromise` never resolves).
+ * 2. If any bridge fails, polls for the coordinator via `runtime.getService()`.
+ *    Depending on the installed coding-agent plugin, this may be exposed as a
+ *    `SWARM_COORDINATOR` service or as `PTY_SERVICE.coordinator`.
  * 3. Once the service appears, retries failed bridges up to MAX_RETRIES.
  * 4. On timeout or exhaustion, broadcasts a system-warning WS event.
  *
@@ -44,17 +51,17 @@ export async function wireCoordinatorBridgesWhenReady(state, opts) {
         let serviceFound = false;
         while (Date.now() < deadline) {
             await new Promise((r) => setTimeout(r, POLL_INTERVAL_MS));
-            const svc = runtime.getService("SWARM_COORDINATOR");
+            const svc = discoverCoordinator(runtime);
             if (svc) {
                 serviceFound = true;
-                logger.debug?.(`[eliza-api] SWARM_COORDINATOR service detected (${context})`);
+                logger.debug?.(`[eliza-api] coordinator service detected (${context})`);
                 break;
             }
         }
         if (!serviceFound) {
             // Service never appeared — log at debug level only. This is normal
             // if the orchestrator plugin is disabled or not configured.
-            logger.debug?.(`[eliza-api] SWARM_COORDINATOR not available after ${POLL_TIMEOUT_MS / 1000}s (${context}) — coding agent features disabled`);
+            logger.debug?.(`[eliza-api] coordinator not available after ${POLL_TIMEOUT_MS / 1000}s (${context}) — coding agent features disabled`);
             return result;
         }
         // 3. Service loaded — retry failed bridges

package/packages/agent/src/api/credit-detection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credit-detection.d.ts","sourceRoot":"","sources":["../../../../../src/api/credit-detection.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAErE;AAED,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAuBhE"}
+{"version":3,"file":"credit-detection.d.ts","sourceRoot":"","sources":["../../../../../src/api/credit-detection.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAGrE;AAED,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CA2BhE"}

package/packages/agent/src/api/credit-detection.js

@@ -4,10 +4,11 @@
  * Matches error messages, HTTP status codes (402, 429 with billing context),
  * and structured error bodies from various AI providers.
  */
-const INSUFFICIENT_CREDITS_RE = /\b(?:insufficient(?:[_\s]+(?:credits?|quota))|insufficient_quota|out of credits|max usage reached|quota(?:\s+exceeded)?|rate_limit_exceeded|billing.*disabled|payment.*required|account.*suspended|spending.*limit|budget.*exceeded|no.*api.*credits|credit.*balance.*zero)\b/i;
+const INSUFFICIENT_CREDITS_RE = /\b(?:insufficient(?:[_\s]+(?:credits?|quota|funds))|insufficient_quota|out of credits|max usage reached|quota(?:\s+exceeded)?|rate_limit_exceeded|billing.*disabled|payment.*required|account.*suspended|spending.*limit|budget.*exceeded|no.*api.*credits|credit.*balance.*zero)\b/i;
 const BILLING_KEYWORDS_RE = /\b(?:billing|quota|credits?|budget|spending|payment|subscription|plan limit)\b/i;
 export function isInsufficientCreditsMessage(message) {
-    return INSUFFICIENT_CREDITS_RE.test(message);
+    const safe = message.length > 10_000 ? message.slice(0, 10_000) : message;
+    return INSUFFICIENT_CREDITS_RE.test(safe);
 }
 export function isInsufficientCreditsError(err) {
     if (err == null || typeof err !== "object") {
@@ -21,14 +22,19 @@ export function isInsufficientCreditsError(err) {
     const status = err.status;
     if (status === 402)
         return true;
-    if (status === 429 && BILLING_KEYWORDS_RE.test(msg))
+    const safeMsg = msg.length > 10_000 ? msg.slice(0, 10_000) : msg;
+    if (status === 429 && BILLING_KEYWORDS_RE.test(safeMsg))
         return true;
     const errorBody = err.error;
     if (errorBody?.type === "insufficient_quota")
         return true;
-    if (typeof errorBody?.code === "string" &&
-        INSUFFICIENT_CREDITS_RE.test(errorBody.code)) {
-        return true;
+    if (typeof errorBody?.code === "string") {
+        const safeCode = errorBody.code.length > 10_000
+            ? errorBody.code.slice(0, 10_000)
+            : errorBody.code;
+        if (INSUFFICIENT_CREDITS_RE.test(safeCode)) {
+            return true;
+        }
     }
     return false;
 }

package/packages/agent/src/api/curated-skills-routes.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Routes for the curated learning loop ("Learned Skills" surface).
+ *
+ * The closed learning loop writes derived/refined skills under
+ * ~/.eliza/skills/curated/{active,proposed}. These routes power the
+ * Settings → Learned Skills panel so the user can review proposals, promote
+ * them to active, disable, edit, or delete.
+ *
+ * Routes are mounted under /api/skills/curated/* to avoid collision with the
+ * pre-existing /api/skills/* routes in skills-routes.ts (which manage the
+ * separate marketplace/workspace-skills surface).
+ */
+import type { RouteRequestContext } from "@elizaos/shared";
+interface CuratedSkillsRouteContext extends RouteRequestContext {
+    url: URL;
+}
+/**
+ * Returns true if the request was handled (and a response written).
+ */
+export declare function handleCuratedSkillsRoutes(ctx: CuratedSkillsRouteContext): Promise<boolean>;
+export {};
+//# sourceMappingURL=curated-skills-routes.d.ts.map

package/packages/agent/src/api/curated-skills-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"curated-skills-routes.d.ts","sourceRoot":"","sources":["../../../../../src/api/curated-skills-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAeH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAwL3D,UAAU,yBAA0B,SAAQ,mBAAmB;IAC7D,GAAG,EAAE,GAAG,CAAC;CACV;AAED;;GAEG;AACH,wBAAsB,yBAAyB,CAC7C,GAAG,EAAE,yBAAyB,GAC7B,OAAO,CAAC,OAAO,CAAC,CA6IlB"}

package/packages/agent/src/api/curated-skills-routes.js

@@ -0,0 +1,295 @@
+/**
+ * Routes for the curated learning loop ("Learned Skills" surface).
+ *
+ * The closed learning loop writes derived/refined skills under
+ * ~/.eliza/skills/curated/{active,proposed}. These routes power the
+ * Settings → Learned Skills panel so the user can review proposals, promote
+ * them to active, disable, edit, or delete.
+ *
+ * Routes are mounted under /api/skills/curated/* to avoid collision with the
+ * pre-existing /api/skills/* routes in skills-routes.ts (which manage the
+ * separate marketplace/workspace-skills surface).
+ */
+import { cpSync, existsSync, mkdirSync, readdirSync, readFileSync, renameSync, rmSync, statSync, writeFileSync, } from "node:fs";
+import { join } from "node:path";
+import { logger } from "@elizaos/core";
+import { resolveStateDir } from "../config/paths.js";
+const CURATED_SKILL_NAME_RE = /^[a-z0-9-]+$/;
+function curatedActiveDir() {
+    return join(resolveStateDir(), "skills", "curated", "active");
+}
+function curatedProposedDir() {
+    return join(resolveStateDir(), "skills", "curated", "proposed");
+}
+function curatedDisabledDir() {
+    return join(resolveStateDir(), "skills", "curated", "disabled");
+}
+function isValidName(name) {
+    return (CURATED_SKILL_NAME_RE.test(name) &&
+        !name.startsWith("-") &&
+        !name.endsWith("-") &&
+        !name.includes("--") &&
+        name.length <= 64);
+}
+function listSkillEntries(dir, status) {
+    if (!existsSync(dir))
+        return [];
+    const entries = readdirSync(dir, { withFileTypes: true });
+    const out = [];
+    for (const entry of entries) {
+        if (!entry.isDirectory())
+            continue;
+        if (entry.name.startsWith("."))
+            continue;
+        const skillDir = join(dir, entry.name);
+        const skillFile = join(skillDir, "SKILL.md");
+        if (!existsSync(skillFile))
+            continue;
+        const parsed = parseSkillFile(readFileSync(skillFile, "utf-8"));
+        if (!parsed)
+            continue;
+        const provenance = parsed.provenance ?? {
+            source: "human",
+            createdAt: new Date().toISOString(),
+            refinedCount: 0,
+        };
+        out.push({
+            name: entry.name,
+            description: parsed.description ?? "",
+            source: provenance.source,
+            derivedFromTrajectory: provenance.derivedFromTrajectory,
+            createdAt: provenance.createdAt,
+            refinedCount: provenance.refinedCount,
+            lastEvalScore: provenance.lastEvalScore,
+            status,
+            filePath: skillFile,
+        });
+    }
+    return out.sort((a, b) => a.createdAt < b.createdAt ? 1 : a.createdAt > b.createdAt ? -1 : 0);
+}
+function parseSkillFile(content) {
+    const normalized = content.replace(/\r\n/g, "\n");
+    if (!normalized.startsWith("---")) {
+        return { body: normalized };
+    }
+    const endIdx = normalized.indexOf("\n---", 3);
+    if (endIdx === -1) {
+        return { body: normalized };
+    }
+    const yamlBlock = normalized.slice(4, endIdx);
+    const body = normalized.slice(endIdx + 4).replace(/^\n+/, "");
+    const parsed = { body };
+    const provenance = {};
+    let inProvenance = false;
+    for (const rawLine of yamlBlock.split("\n")) {
+        const line = rawLine.replace(/\s+$/, "");
+        if (!line) {
+            inProvenance = false;
+            continue;
+        }
+        if (/^[a-zA-Z]/.test(line)) {
+            inProvenance = false;
+            const [keyRaw, ...rest] = line.split(":");
+            const key = keyRaw?.trim();
+            const value = rest.join(":").trim();
+            if (key === "name")
+                parsed.name = stripQuotes(value);
+            else if (key === "description")
+                parsed.description = stripQuotes(value);
+            else if (key === "provenance")
+                inProvenance = true;
+        }
+        else if (inProvenance && /^\s+\S/.test(rawLine)) {
+            const trimmed = rawLine.trim();
+            const [keyRaw, ...rest] = trimmed.split(":");
+            const key = keyRaw?.trim();
+            const value = rest.join(":").trim();
+            if (!key)
+                continue;
+            if (key === "source") {
+                const v = stripQuotes(value);
+                if (v === "human" || v === "agent-generated" || v === "agent-refined") {
+                    provenance.source = v;
+                }
+            }
+            else if (key === "createdAt")
+                provenance.createdAt = stripQuotes(value);
+            else if (key === "derivedFromTrajectory")
+                provenance.derivedFromTrajectory = stripQuotes(value);
+            else if (key === "refinedCount") {
+                const n = Number(value);
+                provenance.refinedCount = Number.isFinite(n) ? n : 0;
+            }
+            else if (key === "lastEvalScore") {
+                const n = Number(value);
+                if (Number.isFinite(n))
+                    provenance.lastEvalScore = n;
+            }
+        }
+        else {
+            inProvenance = false;
+        }
+    }
+    if (provenance.source &&
+        typeof provenance.createdAt === "string" &&
+        typeof provenance.refinedCount === "number") {
+        parsed.provenance = provenance;
+    }
+    return parsed;
+}
+function stripQuotes(value) {
+    if ((value.startsWith('"') && value.endsWith('"')) ||
+        (value.startsWith("'") && value.endsWith("'"))) {
+        return value.slice(1, -1);
+    }
+    return value;
+}
+function moveSkillDirectory(src, dest) {
+    const parent = join(dest, "..");
+    if (!existsSync(parent)) {
+        mkdirSync(parent, { recursive: true });
+    }
+    if (existsSync(dest)) {
+        throw new Error(`destination already exists: ${dest}`);
+    }
+    // Try a same-volume rename first; fall back to recursive copy + remove for
+    // cross-volume moves (e.g. tmpdir → home on some CI runners).
+    try {
+        renameSync(src, dest);
+    }
+    catch {
+        cpSync(src, dest, { recursive: true });
+        rmSync(src, { recursive: true, force: true });
+    }
+}
+/**
+ * Returns true if the request was handled (and a response written).
+ */
+export async function handleCuratedSkillsRoutes(ctx) {
+    const { req, res, method, pathname, json, error, readJsonBody } = ctx;
+    if (!pathname.startsWith("/api/skills/curated")) {
+        return false;
+    }
+    // GET /api/skills/curated — list curated skills (active + proposed + disabled)
+    if (method === "GET" && pathname === "/api/skills/curated") {
+        const active = listSkillEntries(curatedActiveDir(), "active");
+        const proposed = listSkillEntries(curatedProposedDir(), "proposed");
+        const disabled = listSkillEntries(curatedDisabledDir(), "disabled");
+        json(res, {
+            ok: true,
+            skills: [...active, ...proposed, ...disabled],
+            counts: {
+                active: active.length,
+                proposed: proposed.length,
+                disabled: disabled.length,
+            },
+        });
+        return true;
+    }
+    // POST /api/skills/curated/:name/promote — proposed → active
+    const promoteMatch = pathname.match(/^\/api\/skills\/curated\/([a-z0-9-]+)\/promote$/);
+    if (method === "POST" && promoteMatch) {
+        const name = promoteMatch[1];
+        if (!name || !isValidName(name)) {
+            error(res, "Invalid skill name", 400);
+            return true;
+        }
+        const proposedSkillDir = join(curatedProposedDir(), name);
+        const activeSkillDir = join(curatedActiveDir(), name);
+        if (!existsSync(proposedSkillDir) ||
+            !statSync(proposedSkillDir).isDirectory()) {
+            error(res, `Proposed skill "${name}" not found`, 404);
+            return true;
+        }
+        if (existsSync(activeSkillDir)) {
+            error(res, `Active skill "${name}" already exists`, 409);
+            return true;
+        }
+        moveSkillDirectory(proposedSkillDir, activeSkillDir);
+        logger.info(`[curated-skills] promoted "${name}" to active`);
+        json(res, { ok: true, name, path: activeSkillDir });
+        return true;
+    }
+    // POST /api/skills/curated/:name/disable — active → disabled
+    const disableMatch = pathname.match(/^\/api\/skills\/curated\/([a-z0-9-]+)\/disable$/);
+    if (method === "POST" && disableMatch) {
+        const name = disableMatch[1];
+        if (!name || !isValidName(name)) {
+            error(res, "Invalid skill name", 400);
+            return true;
+        }
+        const activeSkillDir = join(curatedActiveDir(), name);
+        const disabledSkillDir = join(curatedDisabledDir(), name);
+        if (!existsSync(activeSkillDir)) {
+            error(res, `Active curated skill "${name}" not found`, 404);
+            return true;
+        }
+        if (existsSync(disabledSkillDir)) {
+            error(res, `Disabled skill "${name}" already exists`, 409);
+            return true;
+        }
+        moveSkillDirectory(activeSkillDir, disabledSkillDir);
+        logger.info(`[curated-skills] disabled "${name}"`);
+        json(res, { ok: true, name, path: disabledSkillDir });
+        return true;
+    }
+    // DELETE /api/skills/curated/:name — remove from any of the three buckets
+    const deleteMatch = pathname.match(/^\/api\/skills\/curated\/([a-z0-9-]+)$/);
+    if (method === "DELETE" && deleteMatch) {
+        const name = deleteMatch[1];
+        if (!name || !isValidName(name)) {
+            error(res, "Invalid skill name", 400);
+            return true;
+        }
+        const candidates = [
+            join(curatedActiveDir(), name),
+            join(curatedProposedDir(), name),
+            join(curatedDisabledDir(), name),
+        ];
+        let removedFrom = null;
+        for (const candidate of candidates) {
+            if (existsSync(candidate)) {
+                rmSync(candidate, { recursive: true, force: true });
+                removedFrom = candidate;
+                break;
+            }
+        }
+        if (!removedFrom) {
+            error(res, `Curated skill "${name}" not found`, 404);
+            return true;
+        }
+        logger.info(`[curated-skills] deleted "${name}" from ${removedFrom}`);
+        json(res, { ok: true, name, path: removedFrom });
+        return true;
+    }
+    // PUT /api/skills/curated/:name/source — overwrite SKILL.md body for an
+    // active or proposed skill (used by the Learned Skills "edit" affordance).
+    const sourceMatch = pathname.match(/^\/api\/skills\/curated\/([a-z0-9-]+)\/source$/);
+    if (method === "PUT" && sourceMatch) {
+        const name = sourceMatch[1];
+        if (!name || !isValidName(name)) {
+            error(res, "Invalid skill name", 400);
+            return true;
+        }
+        const body = await readJsonBody(req, res);
+        if (!body)
+            return true;
+        if (typeof body.content !== "string") {
+            error(res, "Missing 'content' field", 400);
+            return true;
+        }
+        const candidates = [
+            join(curatedActiveDir(), name, "SKILL.md"),
+            join(curatedProposedDir(), name, "SKILL.md"),
+        ];
+        const target = candidates.find((path) => existsSync(path));
+        if (!target) {
+            error(res, `Curated skill "${name}" not found`, 404);
+            return true;
+        }
+        writeFileSync(target, body.content, "utf-8");
+        json(res, { ok: true, name, path: target });
+        return true;
+    }
+    return false;
+}

package/packages/agent/src/api/database.d.ts

@@ -28,6 +28,8 @@ import { type AgentRuntime } from "@elizaos/core";
  *   PUT    /api/database/tables/:table/rows
  *   DELETE /api/database/tables/:table/rows
  *   POST   /api/database/query
+ *   GET    /api/database/vectors/search
+ *   POST   /api/database/vectors/search
  */
 export declare function handleDatabaseRoute(req: http.IncomingMessage, res: http.ServerResponse, runtime: AgentRuntime | null, pathname: string): Promise<boolean>;
 //# sourceMappingURL=database.d.ts.map

package/packages/agent/src/api/database.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../../../../../src/api/database.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,EAAE,KAAK,YAAY,EAAU,MAAM,eAAe,CAAC;AA4tC1D;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,OAAO,EAAE,YAAY,GAAG,IAAI,EAC5B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,CAAC,CAyElB"}
+{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../../../../../src/api/database.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,EACL,KAAK,YAAY,EAMlB,MAAM,eAAe,CAAC;AA02CvB;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,OAAO,EAAE,YAAY,GAAG,IAAI,EAC5B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,CAAC,CAkFlB"}

package/packages/agent/src/api/database.js

@@ -15,10 +15,10 @@
 import dns from "node:dns";
 import net from "node:net";
 import { promisify } from "node:util";
-import { logger } from "@elizaos/core";
-import { loadElizaConfig, saveElizaConfig } from "../config/config";
-import { isLoopbackHost, normalizeHostLike, normalizeIpForPolicy, } from "../security/network-policy";
-import { readJsonBody as parseJsonBody, sendJson, sendJsonError, } from "./http-helpers";
+import { logger, ModelType, sendJson, sendJsonError, } from "@elizaos/core";
+import { readJsonBody as parseJsonBody, resolveApiBindHost, } from "@elizaos/shared";
+import { loadElizaConfig, saveElizaConfig } from "../config/config.js";
+import { isLoopbackHost, normalizeHostLike, normalizeIpForPolicy, } from "../security/network-policy.js";
 // ---------------------------------------------------------------------------
 // Helpers
 // ---------------------------------------------------------------------------
@@ -108,7 +108,7 @@ const PRIVATE_IP_PATTERNS = [
  * since only local processes can reach the API.
  */
 function isApiLoopbackOnly() {
-    let bind = (process.env.ELIZA_API_BIND ?? "127.0.0.1").trim().toLowerCase();
+    let bind = resolveApiBindHost(process.env).trim().toLowerCase();
     if (!bind)
         bind = "127.0.0.1";
     // Accept accidental URL-shaped bind values.
@@ -303,6 +303,15 @@ async function getDrizzleSql() {
     }
     return _sqlHelper;
 }
+function isQueryRow(value) {
+    return typeof value === "object" && value !== null;
+}
+function normalizeQueryRows(value) {
+    if (!Array.isArray(value)) {
+        return [];
+    }
+    return value.filter(isQueryRow);
+}
 /** Execute raw SQL via the runtime's Drizzle adapter. */
 async function executeRawSql(runtime, sqlText) {
     const drizzleSql = await getDrizzleSql();
@@ -311,9 +320,7 @@ async function executeRawSql(runtime, sqlText) {
     if (!rawQuery)
         throw new Error("SQL module not available");
     const result = await db.execute(rawQuery);
-    const rows = Array.isArray(result.rows)
-        ? result.rows
-        : result;
+    const rows = normalizeQueryRows(result.rows);
     let columns = [];
     if (result.fields && Array.isArray(result.fields)) {
         columns = result.fields.map((f) => f.name);
@@ -940,6 +947,112 @@ async function handleQuery(req, res, runtime) {
     sendJson(res, queryResult);
 }
 // ---------------------------------------------------------------------------
+// Vector similarity search
+// ---------------------------------------------------------------------------
+const VECTOR_SEARCH_DEFAULT_LIMIT = 10;
+const VECTOR_SEARCH_MAX_LIMIT = 100;
+const VECTOR_SEARCH_DEFAULT_TABLE = "messages";
+// Mirrors the table allowlist we expose for CRUD via the memory routes —
+// only memory-bearing tables hold embeddings worth searching.
+const VECTOR_SEARCH_ALLOWED_TABLES = new Set([
+    "messages",
+    "memories",
+    "facts",
+    "documents",
+    "document_fragments",
+]);
+/**
+ * GET  /api/database/vectors/search?query=...&limit=...&table=...&threshold=...
+ * POST /api/database/vectors/search   { query, limit?, table?, threshold? }
+ *
+ * Embeds the query via the runtime's TEXT_EMBEDDING model and runs a vector
+ * similarity search via runtime.searchMemories(). Returns top-k matches with
+ * similarity scores. Owner-only by virtue of running on the agent's own API
+ * port (gated by the existing API token / loopback policy in server.ts).
+ */
+async function handleVectorSearch(req, res, runtime, method) {
+    let query;
+    let rawLimit;
+    let table;
+    let threshold;
+    if (method === "POST") {
+        const body = await readJsonBody(req, res);
+        if (!body)
+            return;
+        query = typeof body.query === "string" ? body.query.trim() : "";
+        rawLimit = typeof body.limit === "number" ? body.limit : undefined;
+        table =
+            typeof body.table === "string" && body.table.trim()
+                ? body.table.trim()
+                : VECTOR_SEARCH_DEFAULT_TABLE;
+        threshold = typeof body.threshold === "number" ? body.threshold : undefined;
+    }
+    else {
+        const url = new URL(req.url ?? "/", `http://${req.headers.host ?? "localhost"}`);
+        query = url.searchParams.get("query")?.trim() ?? "";
+        const limitParam = url.searchParams.get("limit");
+        rawLimit = limitParam ? Number(limitParam) : undefined;
+        const tableParam = url.searchParams.get("table")?.trim();
+        table = tableParam || VECTOR_SEARCH_DEFAULT_TABLE;
+        const thresholdParam = url.searchParams.get("threshold");
+        threshold = thresholdParam ? Number(thresholdParam) : undefined;
+    }
+    if (!query) {
+        sendJsonError(res, "query is required", 400);
+        return;
+    }
+    if (!VECTOR_SEARCH_ALLOWED_TABLES.has(table)) {
+        sendJsonError(res, `table "${table}" is not searchable. Allowed: ${[...VECTOR_SEARCH_ALLOWED_TABLES].join(", ")}`, 400);
+        return;
+    }
+    const limit = Math.min(Math.max(1, Math.floor(rawLimit ?? VECTOR_SEARCH_DEFAULT_LIMIT)), VECTOR_SEARCH_MAX_LIMIT);
+    let embeddingResult;
+    try {
+        embeddingResult = await runtime.useModel(ModelType.TEXT_EMBEDDING, {
+            text: query,
+        });
+    }
+    catch (err) {
+        const detail = err instanceof Error ? err.message : String(err);
+        sendJsonError(res, `Embedding model failed: ${detail}`, 500);
+        return;
+    }
+    const embedding = Array.isArray(embeddingResult)
+        ? embeddingResult
+        : (embeddingResult?.embedding ?? null);
+    if (!embedding || embedding.length === 0) {
+        sendJsonError(res, "Embedding model returned no vector.", 500);
+        return;
+    }
+    const searchParams = {
+        embedding,
+        query,
+        tableName: table,
+        limit,
+        ...(typeof threshold === "number" ? { match_threshold: threshold } : {}),
+    };
+    const matches = await runtime.searchMemories(searchParams);
+    const results = matches.map((m) => {
+        const content = m.content;
+        return {
+            id: m.id ?? null,
+            text: content?.text ?? "",
+            similarity: m.similarity ?? null,
+            roomId: m.roomId ?? null,
+            entityId: m.entityId ?? null,
+            createdAt: m.createdAt ?? null,
+            tableName: table,
+        };
+    });
+    sendJson(res, {
+        query,
+        table,
+        limit,
+        count: results.length,
+        results,
+    });
+}
+// ---------------------------------------------------------------------------
 // Router
 // ---------------------------------------------------------------------------
 /**
@@ -956,6 +1069,8 @@ async function handleQuery(req, res, runtime) {
  *   PUT    /api/database/tables/:table/rows
  *   DELETE /api/database/tables/:table/rows
  *   POST   /api/database/query
+ *   GET    /api/database/vectors/search
+ *   POST   /api/database/vectors/search
  */
 export async function handleDatabaseRoute(req, res, runtime, pathname) {
     const method = req.method ?? "GET";
@@ -994,6 +1109,12 @@ export async function handleDatabaseRoute(req, res, runtime, pathname) {
         await handleQuery(req, res, runtime);
         return true;
     }
+    // ── GET|POST /api/database/vectors/search ─────────────────────────────
+    if ((method === "GET" || method === "POST") &&
+        pathname === "/api/database/vectors/search") {
+        await handleVectorSearch(req, res, runtime, method);
+        return true;
+    }
     // ── Table row operations: /api/database/tables/:table/rows ────────────
     const rowsMatch = pathname.match(/^\/api\/database\/tables\/([^/]+)\/rows$/);
     if (rowsMatch) {