@elizaos/agent 2.0.0-alpha.98 → 2.0.0-beta.2

package/packages/agent/src/api/parse-action-block.d.ts

@@ -1,13 +1,31 @@
 /**
  * Local stub for CoordinationLLMResponse — removed from
- * @elizaos/plugin-agent-orchestrator 2.x.  Matches the shape this file needs.
+ * @elizaos/plugin-agent-orchestrator 2.x.
  */
-interface CoordinationLLMResponse {
+export interface CoordinationLLMResponse {
     action: string;
     reasoning: string;
     response?: string;
     useKeys?: boolean;
     keys?: string[];
+    /**
+     * Set when `action === "permission_request"`. The chat renderer consumes
+     * this payload to render an inline `<PermissionCard>` below the message.
+     */
+    permissionRequest?: ParsedPermissionRequest;
+}
+import { type PermissionId } from "@elizaos/shared";
+/**
+ * Parsed shape for the `permission_request` action. The agent emits this
+ * inline alongside its natural-language response; the chat surface renders
+ * a permission card and (after grant) the agent retries the original action.
+ */
+export interface ParsedPermissionRequest {
+    permission: PermissionId;
+    reason: string;
+    feature: string;
+    fallbackOffered: boolean;
+    fallbackLabel?: string;
 }
 /** Console bridge exposed by PTYService for terminal I/O. */
 export interface ConsoleBridge {
@@ -32,5 +50,4 @@ export declare function stripActionBlockFromDisplay(text: string): string;
  * Returns null if no valid action block is found.
  */
 export declare function parseActionBlock(text: string): CoordinationLLMResponse | null;
-export {};
 //# sourceMappingURL=parse-action-block.d.ts.map

package/packages/agent/src/api/parse-action-block.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parse-action-block.d.ts","sourceRoot":"","sources":["../../../../../src/api/parse-action-block.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,UAAU,uBAAuB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,6DAA6D;AAC7D,MAAM,WAAW,aAAa;IAC5B,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,IAAI,CAAC;IAChE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,IAAI,CAAC;IACjE,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAChD,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7D;AAED,+DAA+D;AAC/D,MAAM,WAAW,UAAU;IACzB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,WAAW,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD;AA+CD;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAkChE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,uBAAuB,GAAG,IAAI,CA0B7E"}
+{"version":3,"file":"parse-action-block.d.ts","sourceRoot":"","sources":["../../../../../src/api/parse-action-block.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,uBAAuB,CAAC;CAC7C;AAED,OAAO,EAAkB,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEpE;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,YAAY,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,6DAA6D;AAC7D,MAAM,WAAW,aAAa;IAC5B,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,IAAI,CAAC;IAChE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,IAAI,CAAC;IACjE,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAChD,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7D;AAED,+DAA+D;AAC/D,MAAM,WAAW,UAAU;IACzB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,WAAW,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD;AAyGD;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAmChE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,uBAAuB,GAAG,IAAI,CAgD7E"}

package/packages/agent/src/api/parse-action-block.js

@@ -1,10 +1,23 @@
-const VALID_ACTIONS = ["respond", "escalate", "ignore", "complete"];
+import { isPermissionId } from "@elizaos/shared";
+const VALID_ACTIONS = [
+    "respond",
+    "escalate",
+    "ignore",
+    "complete",
+    "permission_request",
+];
 const ACTION_KEYS = new Set([
     "action",
     "reasoning",
     "response",
     "useKeys",
     "keys",
+    // permission_request fields
+    "permission",
+    "reason",
+    "feature",
+    "fallback_offered",
+    "fallback_label",
 ]);
 function isValidActionEnvelope(parsed) {
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
@@ -20,16 +33,53 @@ function isValidActionEnvelope(parsed) {
     if ("reasoning" in record && typeof record.reasoning !== "string")
         return false;
     if (record.action === "respond") {
+        if ("permission" in record ||
+            "feature" in record ||
+            "fallback_offered" in record ||
+            "fallback_label" in record ||
+            "reason" in record) {
+            return false;
+        }
         const hasResponse = typeof record.response === "string" && record.response.length > 0;
         const hasKeys = record.useKeys === true &&
             Array.isArray(record.keys) &&
             record.keys.length > 0;
         return hasResponse || hasKeys;
     }
-    // Non-respond actions should not carry respond-only fields.
-    if ("response" in record || "useKeys" in record || "keys" in record) {
+    if (record.action === "permission_request") {
+        if (!isPermissionId(record.permission))
+            return false;
+        if (typeof record.reason !== "string" || record.reason.trim().length === 0)
+            return false;
+        if (typeof record.feature !== "string" ||
+            record.feature.trim().length === 0)
+            return false;
+        if ("fallback_offered" in record &&
+            typeof record.fallback_offered !== "boolean")
+            return false;
+        if ("fallback_label" in record &&
+            record.fallback_label !== undefined &&
+            typeof record.fallback_label !== "string")
+            return false;
+        if ("response" in record || "useKeys" in record || "keys" in record) {
+            return false;
+        }
+        return true;
+    }
+    // Non-respond, non-permission_request actions should not carry
+    // respond-only or permission_request fields.
+    if ("response" in record ||
+        "useKeys" in record ||
+        "keys" in record ||
+        "permission" in record ||
+        "feature" in record ||
+        "fallback_offered" in record ||
+        "fallback_label" in record) {
         return false;
     }
+    // `reason` is reserved for permission_request only.
+    if ("reason" in record)
+        return false;
     return true;
 }
 /**
@@ -37,9 +87,10 @@ function isValidActionEnvelope(parsed) {
  * Handles both fenced (```json ... ```) and bare JSON formats.
  */
 export function stripActionBlockFromDisplay(text) {
+    const safeText = text.length > 100_000 ? text.slice(0, 100_000) : text;
     // First: fenced ```json action blocks — only strip if the action value is
     // one of our known orchestrator actions to avoid false-positive stripping.
-    let cleaned = text.replace(/```(?:json)?\s*\n?(\{[\s\S]*?"action"[\s\S]*?\})\s*\n?```/g, (_match, json) => {
+    let cleaned = safeText.replace(/```(?:json)?\s{0,32}\n?(\{[\s\S]{0,50000}?"action"[\s\S]{0,50000}?\})\s{0,32}\n?```/g, (_match, json) => {
         try {
             const parsed = JSON.parse(json);
             if (isValidActionEnvelope(parsed))
@@ -77,10 +128,12 @@ export function stripActionBlockFromDisplay(text) {
 export function parseActionBlock(text) {
     if (!text)
         return null;
+    const safeText = text.length > 100_000 ? text.slice(0, 100_000) : text;
     // Try fenced ```json block first
-    const fenced = text.match(/```(?:json)?\s*\n?(\{[\s\S]*?\})\s*\n?```/);
+    const fenced = safeText.match(/```(?:json)?\s{0,32}\n?(\{[\s\S]{0,50000}?\})\s{0,32}\n?```/);
     // Bare JSON fallback: non-greedy match from first { containing "action" to next }
-    const jsonStr = fenced?.[1] ?? text.match(/\{[^}]*"action"[^}]*\}/)?.[0];
+    const jsonStr = fenced?.[1] ??
+        safeText.match(/\{[^}]{0,50000}"action"[^}]{0,50000}\}/)?.[0];
     if (!jsonStr)
         return null;
     try {
@@ -102,6 +155,24 @@ export function parseActionBlock(text) {
             else
                 return null;
         }
+        if (parsed.action === "permission_request") {
+            const permission = parsed.permission;
+            if (!isPermissionId(permission))
+                return null;
+            const reason = String(parsed.reason ?? "");
+            const feature = String(parsed.feature ?? "");
+            const fallbackOffered = parsed.fallback_offered === true;
+            const rawLabel = parsed.fallback_label;
+            result.permissionRequest = {
+                permission,
+                reason,
+                feature,
+                fallbackOffered,
+                ...(typeof rawLabel === "string" && rawLabel.length > 0
+                    ? { fallbackLabel: rawLabel }
+                    : {}),
+            };
+        }
         return result;
     }
     catch {

package/packages/agent/src/api/permission-request-prompt.d.ts

@@ -0,0 +1,19 @@
+/**
+ * System-prompt fragment documenting the `permission_request` action block.
+ *
+ * Lives next to the canonical action-block parser so emissions and
+ * documentation stay in sync. Imported into the swarm coordinator prompt and
+ * (optionally) the chat coordinator's character system block so the planner
+ * knows when — and crucially, when NOT — to emit a `permission_request`.
+ *
+ * Hard rules:
+ *   - Emit ONLY when the user just asked for something AND the latest
+ *     tool/action result returned `{ ok: false, reason: 'permission',
+ *     permission: <id> }`.
+ *   - NEVER preemptively. NEVER for permissions surfaced in `pending()` unless
+ *     the user just touched a feature that needs that permission.
+ *   - NEVER if the user already declined this permission in the last hour for
+ *     the same feature.
+ */
+export declare const PERMISSION_REQUEST_PROMPT_FRAGMENT = "permission_request \u2014 REQUEST a system-level permission inline in chat.\n\nUse ONLY when both of these are true:\n  1. The user just asked for something that requires a permission, AND\n  2. The most recent tool/action result returned a permission failure\n     (e.g. { ok: false, reason: \"permission\", permission: \"<id>\" }).\n\nDo NOT emit:\n  - preemptively, before the user touches a permission-gated feature\n  - for permissions you saw in PENDING PERMISSIONS unless the user just\n    asked for a feature that needs that exact permission\n  - if the user already declined this permission in the last hour for the\n    same feature\n\nRequired fields:\n  - permission: one of accessibility | screen-recording | reminders |\n    calendar | health | screentime | contacts | notes | microphone |\n    camera | location | shell | website-blocking | notifications |\n    full-disk | automation\n  - reason: short, user-facing, names the actual thing they asked for\n    (e.g. \"Add 'pick up groceries' to your Apple Reminders.\")\n  - feature: dotted \"<app>.<area>.<action>\" identifier\n    (e.g. \"lifeops.reminders.create\")\n\nOptional:\n  - fallback_offered: true ONLY when a real fallback exists\n  - fallback_label: button label for the fallback (required when\n    fallback_offered === true)\n\nExample:\n  {\"action\":\"permission_request\",\"reasoning\":\"reminders denied for create\",\n   \"permission\":\"reminders\",\n   \"reason\":\"I'd like to add 'pick up groceries' to your Apple Reminders.\",\n   \"feature\":\"lifeops.reminders.create\",\n   \"fallback_offered\":true,\n   \"fallback_label\":\"Use internal reminders instead\"}";
+//# sourceMappingURL=permission-request-prompt.d.ts.map

package/packages/agent/src/api/permission-request-prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-request-prompt.d.ts","sourceRoot":"","sources":["../../../../../src/api/permission-request-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,eAAO,MAAM,kCAAkC,4nDAmCO,CAAC"}

package/packages/agent/src/api/permission-request-prompt.js

@@ -0,0 +1,53 @@
+/**
+ * System-prompt fragment documenting the `permission_request` action block.
+ *
+ * Lives next to the canonical action-block parser so emissions and
+ * documentation stay in sync. Imported into the swarm coordinator prompt and
+ * (optionally) the chat coordinator's character system block so the planner
+ * knows when — and crucially, when NOT — to emit a `permission_request`.
+ *
+ * Hard rules:
+ *   - Emit ONLY when the user just asked for something AND the latest
+ *     tool/action result returned `{ ok: false, reason: 'permission',
+ *     permission: <id> }`.
+ *   - NEVER preemptively. NEVER for permissions surfaced in `pending()` unless
+ *     the user just touched a feature that needs that permission.
+ *   - NEVER if the user already declined this permission in the last hour for
+ *     the same feature.
+ */
+export const PERMISSION_REQUEST_PROMPT_FRAGMENT = `permission_request — REQUEST a system-level permission inline in chat.
+
+Use ONLY when both of these are true:
+  1. The user just asked for something that requires a permission, AND
+  2. The most recent tool/action result returned a permission failure
+     (e.g. { ok: false, reason: "permission", permission: "<id>" }).
+
+Do NOT emit:
+  - preemptively, before the user touches a permission-gated feature
+  - for permissions you saw in PENDING PERMISSIONS unless the user just
+    asked for a feature that needs that exact permission
+  - if the user already declined this permission in the last hour for the
+    same feature
+
+Required fields:
+  - permission: one of accessibility | screen-recording | reminders |
+    calendar | health | screentime | contacts | notes | microphone |
+    camera | location | shell | website-blocking | notifications |
+    full-disk | automation
+  - reason: short, user-facing, names the actual thing they asked for
+    (e.g. "Add 'pick up groceries' to your Apple Reminders.")
+  - feature: dotted "<app>.<area>.<action>" identifier
+    (e.g. "lifeops.reminders.create")
+
+Optional:
+  - fallback_offered: true ONLY when a real fallback exists
+  - fallback_label: button label for the fallback (required when
+    fallback_offered === true)
+
+Example:
+  {"action":"permission_request","reasoning":"reminders denied for create",
+   "permission":"reminders",
+   "reason":"I'd like to add 'pick up groceries' to your Apple Reminders.",
+   "feature":"lifeops.reminders.create",
+   "fallback_offered":true,
+   "fallback_label":"Use internal reminders instead"}`;

package/packages/agent/src/api/permissions-routes-extra.d.ts

@@ -0,0 +1,30 @@
+import type http from "node:http";
+import type { ReadJsonBodyOptions } from "@elizaos/shared";
+import type { ElizaConfig } from "../config/config.ts";
+type AgentAutomationMode = "connectors-only" | "full";
+export interface PermissionsExtraRouteContext {
+    req: http.IncomingMessage;
+    res: http.ServerResponse;
+    method: string;
+    pathname: string;
+    state: {
+        config: ElizaConfig;
+        agentAutomationMode?: AgentAutomationMode;
+    };
+    json: (res: http.ServerResponse, data: unknown, status?: number) => void;
+    error: (res: http.ServerResponse, message: string, status?: number) => void;
+    readJsonBody: <T extends object>(req: http.IncomingMessage, res: http.ServerResponse, options?: ReadJsonBodyOptions) => Promise<T | null>;
+    saveElizaConfig: (config: ElizaConfig) => void;
+    resolveTradePermissionMode: (config: ElizaConfig) => string;
+    canUseLocalTradeExecution: (mode: string, isAgent: boolean, scope?: unknown, options?: {
+        consumeAgentQuota: boolean;
+    }) => boolean;
+    parseAgentAutomationMode: (value: unknown) => AgentAutomationMode | null;
+    persistAgentAutomationMode: (state: {
+        config: ElizaConfig;
+        agentAutomationMode?: AgentAutomationMode;
+    }, mode: AgentAutomationMode) => void;
+}
+export declare function handlePermissionsExtraRoutes(ctx: PermissionsExtraRouteContext): Promise<boolean>;
+export {};
+//# sourceMappingURL=permissions-routes-extra.d.ts.map

package/packages/agent/src/api/permissions-routes-extra.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions-routes-extra.d.ts","sourceRoot":"","sources":["../../../../../src/api/permissions-routes-extra.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAMvD,KAAK,mBAAmB,GAAG,iBAAiB,GAAG,MAAM,CAAC;AAEtD,MAAM,WAAW,4BAA4B;IAC3C,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC;IAC1B,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE;QACL,MAAM,EAAE,WAAW,CAAC;QACpB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;KAC3C,CAAC;IACF,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACzE,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5E,YAAY,EAAE,CAAC,CAAC,SAAS,MAAM,EAC7B,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,OAAO,CAAC,EAAE,mBAAmB,KAC1B,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACvB,eAAe,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,IAAI,CAAC;IAC/C,0BAA0B,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,MAAM,CAAC;IAC5D,yBAAyB,EAAE,CACzB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,OAAO,EAChB,KAAK,CAAC,EAAE,OAAO,EACf,OAAO,CAAC,EAAE;QAAE,iBAAiB,EAAE,OAAO,CAAA;KAAE,KACrC,OAAO,CAAC;IACb,wBAAwB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,mBAAmB,GAAG,IAAI,CAAC;IACzE,0BAA0B,EAAE,CAC1B,KAAK,EAAE;QAAE,MAAM,EAAE,WAAW,CAAC;QAAC,mBAAmB,CAAC,EAAE,mBAAmB,CAAA;KAAE,EACzE,IAAI,EAAE,mBAAmB,KACtB,IAAI,CAAC;CACX;AAMD,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,4BAA4B,GAChC,OAAO,CAAC,OAAO,CAAC,CA8FlB"}

package/packages/agent/src/api/permissions-routes-extra.js

@@ -0,0 +1,78 @@
+import { logger } from "@elizaos/core";
+// ---------------------------------------------------------------------------
+// Route handler
+// ---------------------------------------------------------------------------
+export async function handlePermissionsExtraRoutes(ctx) {
+    const { res, method, pathname, state, json, error, readJsonBody } = ctx;
+    // ── GET /api/permissions/automation-mode ──────────────────────────────
+    if (method === "GET" && pathname === "/api/permissions/automation-mode") {
+        const mode = state.agentAutomationMode ?? "full";
+        json(res, {
+            mode,
+            options: ["connectors-only", "full"],
+        });
+        return true;
+    }
+    // ── PUT /api/permissions/automation-mode ──────────────────────────────
+    if (method === "PUT" && pathname === "/api/permissions/automation-mode") {
+        const body = await readJsonBody(ctx.req, res);
+        if (!body)
+            return true;
+        const parsed = ctx.parseAgentAutomationMode(body.mode);
+        if (!parsed) {
+            error(res, 'Invalid mode. Expected "connectors-only" or "full".', 400);
+            return true;
+        }
+        ctx.persistAgentAutomationMode(state, parsed);
+        ctx.saveElizaConfig(state.config);
+        json(res, {
+            mode: parsed,
+            options: ["connectors-only", "full"],
+        });
+        return true;
+    }
+    // ── GET /api/permissions/trade-mode ────────────────────────────────────
+    if (method === "GET" && pathname === "/api/permissions/trade-mode") {
+        const mode = ctx.resolveTradePermissionMode(state.config);
+        json(res, {
+            tradePermissionMode: mode,
+            canUserLocalExecute: ctx.canUseLocalTradeExecution(mode, false),
+            canAgentAutoTrade: ctx.canUseLocalTradeExecution(mode, true, undefined, {
+                consumeAgentQuota: false,
+            }),
+        });
+        return true;
+    }
+    // ── PUT /api/permissions/trade-mode ────────────────────────────────────
+    if (method === "PUT" && pathname === "/api/permissions/trade-mode") {
+        const body = await readJsonBody(ctx.req, res);
+        if (!body)
+            return true;
+        const newMode = body.mode;
+        if (newMode !== "user-sign-only" &&
+            newMode !== "manual-local-key" &&
+            newMode !== "agent-auto") {
+            error(res, 'mode must be "user-sign-only", "manual-local-key", or "agent-auto"', 400);
+            return true;
+        }
+        if (!state.config.features) {
+            state.config.features = {};
+        }
+        state.config.features.tradePermissionMode =
+            newMode;
+        try {
+            ctx.saveElizaConfig(state.config);
+        }
+        catch (err) {
+            logger.warn(`[api] Trade-mode config save failed: ${err instanceof Error ? err.message : err}`);
+        }
+        json(res, {
+            ok: true,
+            tradePermissionMode: newMode,
+            canUserLocalExecute: ctx.canUseLocalTradeExecution(newMode, false),
+            canAgentAutoTrade: ctx.canUseLocalTradeExecution(newMode, true, undefined, { consumeAgentQuota: false }),
+        });
+        return true;
+    }
+    return false;
+}

package/packages/agent/src/api/permissions-routes.d.ts

@@ -1,6 +1,7 @@
-import type { AgentRuntime } from "@elizaos/core";
-import type { RouteRequestContext } from "./route-helpers";
-interface AutonomousConfigLike {
+import type { AgentRuntime, RouteRequestContext } from "@elizaos/core";
+import type { PermissionState } from "@elizaos/shared";
+import type { AutonomousConfigLike } from "../types/config-like.ts";
+interface PermissionAutonomousConfigLike extends AutonomousConfigLike {
     features?: {
         shellEnabled?: boolean;
     };
@@ -10,21 +11,15 @@ interface AutonomousConfigLike {
         }>;
     };
 }
-interface PermissionState {
-    id: string;
-    status: string;
-    lastChecked: number;
-    canRequest: boolean;
-}
 export interface PermissionRouteState {
     runtime: AgentRuntime | null;
-    config: AutonomousConfigLike;
+    config: PermissionAutonomousConfigLike;
     permissionStates?: Record<string, PermissionState>;
     shellEnabled?: boolean;
 }
 export interface PermissionRouteContext extends RouteRequestContext {
     state: PermissionRouteState;
-    saveConfig: (config: AutonomousConfigLike) => void;
+    saveConfig: (config: PermissionAutonomousConfigLike) => void;
     scheduleRuntimeRestart: (reason: string) => void;
 }
 export declare function handlePermissionRoutes(ctx: PermissionRouteContext): Promise<boolean>;

package/packages/agent/src/api/permissions-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permissions-routes.d.ts","sourceRoot":"","sources":["../../../../../src/api/permissions-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAE3D,UAAU,oBAAoB;IAC5B,QAAQ,CAAC,EAAE;QACT,YAAY,CAAC,EAAE,OAAO,CAAC;KACxB,CAAC;IACF,OAAO,CAAC,EAAE;QACR,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,OAAO,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC,CAAC;KACjD,CAAC;CACH;AAED,UAAU,eAAe;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IAC7B,MAAM,EAAE,oBAAoB,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACnD,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,sBAAuB,SAAQ,mBAAmB;IACjE,KAAK,EAAE,oBAAoB,CAAC;IAC5B,UAAU,EAAE,CAAC,MAAM,EAAE,oBAAoB,KAAK,IAAI,CAAC;IACnD,sBAAsB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CAClD;AAED,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,sBAAsB,GAC1B,OAAO,CAAC,OAAO,CAAC,CA2LlB"}
+{"version":3,"file":"permissions-routes.d.ts","sourceRoot":"","sources":["../../../../../src/api/permissions-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,KAAK,EAGV,eAAe,EAChB,MAAM,iBAAiB,CAAC;AAOzB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAEpE,UAAU,8BAA+B,SAAQ,oBAAoB;IACnE,QAAQ,CAAC,EAAE;QACT,YAAY,CAAC,EAAE,OAAO,CAAC;KACxB,CAAC;IACF,OAAO,CAAC,EAAE;QACR,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,OAAO,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC,CAAC;KACjD,CAAC;CACH;AAoLD,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IAC7B,MAAM,EAAE,8BAA8B,CAAC;IACvC,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACnD,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,sBAAuB,SAAQ,mBAAmB;IACjE,KAAK,EAAE,oBAAoB,CAAC;IAC5B,UAAU,EAAE,CAAC,MAAM,EAAE,8BAA8B,KAAK,IAAI,CAAC;IAC7D,sBAAsB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CAClD;AAED,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,sBAAsB,GAC1B,OAAO,CAAC,OAAO,CAAC,CAwPlB"}