@elizaos/agent 2.0.0-beta.1 → 2.0.11-beta.5

package/dist/packages/agent/src/api/config-routes.js

@@ -1,429 +0,0 @@
-import { logger } from "@elizaos/core";
-import { isElizaSettingsDebugEnabled, normalizeDeploymentTargetConfig, normalizeLinkedAccountFlagsConfig, normalizeServiceRoutingConfig, sanitizeForSettingsDebug, settingsDebugCloudSummary, } from "@elizaos/shared";
-import { loadElizaConfig, saveElizaConfig } from "../config/config.js";
-import { buildCharacterFromConfig } from "../runtime/build-character-config.js";
-import { applyCanonicalOnboardingConfig } from "./provider-switch-config.js";
-// ---------------------------------------------------------------------------
-// Route handler
-// ---------------------------------------------------------------------------
-/**
- * Hot-reloadable top-level config keys. Replacing these in `state.config`
- * is sufficient because downstream readers (TTS routes, feature-flag
- * checks, character-derived prompts) read `state.config` live on each
- * request. Anything not listed here either has no live consumer or
- * requires a full runtime rebuild.
- */
-const HOT_RELOADABLE_TOP_KEYS = new Set([
-    "agents",
-    "ui",
-    "messages", // TTS lives under messages.tts
-    "features",
-    "linkedAccounts",
-    "serviceRouting",
-    "deploymentTarget",
-    "cloud",
-    "permissions",
-]);
-/** Top-level keys whose change forces a full runtime restart. */
-const RESTART_REQUIRED_TOP_KEYS = new Set([
-    "plugins",
-    "providers",
-    "models",
-    "database",
-]);
-/** Env-var keys that hold provider API credentials we sync into process.env. */
-const PROVIDER_ENV_KEYS = [
-    "ANTHROPIC_API_KEY",
-    "OPENAI_API_KEY",
-    "GEMINI_API_KEY",
-    "GOOGLE_API_KEY",
-    "GOOGLE_GENERATIVE_AI_API_KEY",
-    "GROQ_API_KEY",
-    "XAI_API_KEY",
-    "OPENROUTER_API_KEY",
-    "AI_GATEWAY_API_KEY",
-    "AI_GATEWAY_BASE_URL",
-    "AI_GATEWAY_SMALL_MODEL",
-    "AI_GATEWAY_LARGE_MODEL",
-    "AI_GATEWAY_EMBEDDING_MODEL",
-    "AI_GATEWAY_EMBEDDING_DIMENSIONS",
-    "OLLAMA_BASE_URL",
-];
-function asConfigRecord(value) {
-    return value;
-}
-/**
- * Compute which top-level keys differ between the current in-memory config
- * and a freshly-loaded copy from disk, and bucket them into hot-reloadable
- * vs restart-required.
- */
-function computeReloadDiff(current, next) {
-    const applied = [];
-    const requiresRestart = [];
-    const allKeys = new Set([
-        ...Object.keys(current),
-        ...Object.keys(next),
-    ]);
-    for (const key of allKeys) {
-        const a = JSON.stringify(current[key] ?? null);
-        const b = JSON.stringify(next[key] ?? null);
-        if (a === b)
-            continue;
-        if (RESTART_REQUIRED_TOP_KEYS.has(key)) {
-            requiresRestart.push(key);
-        }
-        else if (HOT_RELOADABLE_TOP_KEYS.has(key)) {
-            applied.push(key);
-        }
-        else if (key === "env") {
-            // env changes are partly hot (provider API keys) — treat as applied.
-            applied.push(key);
-        }
-        else {
-            // Unknown / unmapped top keys: treat as applied (state.config is the
-            // single source of truth and is read live by most consumers).
-            applied.push(key);
-        }
-    }
-    return { applied, requiresRestart };
-}
-/**
- * Apply a freshly-loaded config to `state.config` in place, then re-build
- * the runtime character so name/system/bio/style updates land immediately.
- * Provider API keys are synced into process.env so the next model call
- * picks them up.
- */
-async function applyReloadedConfig(params) {
-    const { state, next, runtime, blockedEnvKeys } = params;
-    // Replace top-level keys in the live state.config with the loaded values.
-    const stateRecord = asConfigRecord(state);
-    const nextRecord = asConfigRecord(next);
-    for (const key of Object.keys(stateRecord)) {
-        if (!(key in nextRecord)) {
-            delete stateRecord[key];
-        }
-    }
-    for (const [key, value] of Object.entries(nextRecord)) {
-        if (key === "__proto__" || key === "constructor" || key === "prototype") {
-            continue;
-        }
-        stateRecord[key] = value;
-    }
-    // Sync provider API keys into process.env (the runtime reads them at
-    // request time via getSetting → process.env).
-    const envSection = nextRecord.env;
-    const envVars = envSection?.vars && typeof envSection.vars === "object"
-        ? envSection.vars
-        : undefined;
-    for (const key of PROVIDER_ENV_KEYS) {
-        if (blockedEnvKeys.has(key.toUpperCase()))
-            continue;
-        const value = typeof envVars?.[key] === "string"
-            ? envVars[key]
-            : typeof envSection?.[key] === "string"
-                ? envSection[key]
-                : undefined;
-        if (typeof value === "string" && value.trim()) {
-            process.env[key] = value.trim();
-        }
-    }
-    // Re-derive character fields from the freshly-loaded config and apply
-    // them to the live runtime. This propagates renames, system prompt
-    // edits, bio/style updates, and topic/adjective changes.
-    if (runtime) {
-        const rebuilt = buildCharacterFromConfig(next);
-        const character = asConfigRecord(runtime.character);
-        const HOT_CHARACTER_FIELDS = [
-            "name",
-            "username",
-            "system",
-            "bio",
-            "topics",
-            "adjectives",
-            "style",
-            "messageExamples",
-            "postExamples",
-            "settings",
-        ];
-        const rebuiltRecord = asConfigRecord(rebuilt);
-        for (const field of HOT_CHARACTER_FIELDS) {
-            const value = rebuiltRecord[field];
-            if (value !== undefined) {
-                character[field] = value;
-            }
-        }
-    }
-}
-/**
- * Handle configuration routes (GET/PUT /api/config, GET /api/config/schema,
- * POST /api/config/reload). Returns `true` if the request was handled.
- */
-export async function handleConfigRoutes(ctx) {
-    const { req, res, method, pathname, config, runtime, json, error, readJsonBody, redactConfigSecrets, isBlockedObjectKey, stripRedactedPlaceholderValuesDeep, patchTouchesProviderSelection: _patchTouchesProviderSelection, BLOCKED_ENV_KEYS, CONFIG_WRITE_ALLOWED_TOP_KEYS, resolveMcpServersRejection, resolveMcpTerminalAuthorizationRejection, } = ctx;
-    // ── GET /api/config/schema ───────────────────────────────────────────────
-    if (method === "GET" && pathname === "/api/config/schema") {
-        const { buildConfigSchema } = await import("../config/schema.js");
-        const result = buildConfigSchema();
-        json(res, result);
-        return true;
-    }
-    // ── POST /api/config/reload ──────────────────────────────────────────────
-    // Re-read eliza.json from disk and apply hot-reloadable fields to the
-    // running runtime. Returns the list of fields applied and any fields that
-    // still require a full restart (plugin list, provider/model registry,
-    // database adapter).
-    if (method === "POST" && pathname === "/api/config/reload") {
-        let next;
-        try {
-            next = loadElizaConfig();
-        }
-        catch (err) {
-            const detail = err instanceof Error ? err.message : String(err);
-            error(res, `Config reload failed: ${detail}`, 400);
-            return true;
-        }
-        const currentRecord = asConfigRecord(config);
-        const nextRecord = asConfigRecord(next);
-        const diff = computeReloadDiff(currentRecord, nextRecord);
-        await applyReloadedConfig({
-            state: config,
-            next,
-            runtime,
-            blockedEnvKeys: BLOCKED_ENV_KEYS,
-        });
-        if (isElizaSettingsDebugEnabled()) {
-            logger.debug(`[eliza][settings][api] POST /api/config/reload applied=[${diff.applied.join(",")}] requiresRestart=[${diff.requiresRestart.join(",")}]`);
-        }
-        json(res, {
-            reloaded: true,
-            applied: diff.applied,
-            requiresRestart: diff.requiresRestart,
-        });
-        return true;
-    }
-    // ── GET /api/config ──────────────────────────────────────────────────────
-    if (method === "GET" && pathname === "/api/config") {
-        if (isElizaSettingsDebugEnabled()) {
-            const cfg = config;
-            const cloud = cfg.cloud;
-            logger.debug(`[eliza][settings][api] GET /api/config → respond (redacted) topKeys=${Object.keys(cfg).sort().join(",")} cloud=${JSON.stringify(settingsDebugCloudSummary(cloud))}`);
-        }
-        json(res, redactConfigSecrets(asConfigRecord(config)));
-        return true;
-    }
-    // ── PUT /api/config ─────────────────────────────────────────────────────
-    if (method === "PUT" && pathname === "/api/config") {
-        const body = await readJsonBody(req, res);
-        if (!body)
-            return true;
-        if (isElizaSettingsDebugEnabled()) {
-            const b = body;
-            const cloudBefore = config.cloud;
-            logger.debug(`[eliza][settings][api] PUT /api/config ← body topKeys=${Object.keys(b).sort().join(",")} snapshot=${JSON.stringify(sanitizeForSettingsDebug(b))}`);
-            logger.debug(`[eliza][settings][api] PUT /api/config state.config.cloud(before)=${JSON.stringify(settingsDebugCloudSummary(cloudBefore))}`);
-        }
-        // --- Security: validate and safely merge config updates ----------------
-        /**
-         * Deep-merge `src` into `target`, only touching keys present in `src`.
-         * Prevents prototype pollution by rejecting dangerous key names at every
-         * level.  Performs a recursive merge for plain objects so that partial
-         * updates don't wipe sibling keys.
-         */
-        function safeMerge(target, src) {
-            for (const key of Object.keys(src)) {
-                if (isBlockedObjectKey(key))
-                    continue;
-                const srcVal = src[key];
-                const tgtVal = target[key];
-                if (srcVal !== null &&
-                    typeof srcVal === "object" &&
-                    !Array.isArray(srcVal) &&
-                    tgtVal !== null &&
-                    typeof tgtVal === "object" &&
-                    !Array.isArray(tgtVal)) {
-                    safeMerge(tgtVal, srcVal);
-                }
-                else {
-                    target[key] = srcVal;
-                }
-            }
-        }
-        // Filter to allowed top-level keys, then deep-merge.
-        const filtered = {};
-        for (const key of Object.keys(body)) {
-            if (CONFIG_WRITE_ALLOWED_TOP_KEYS.has(key) && !isBlockedObjectKey(key)) {
-                filtered[key] = body[key];
-            }
-        }
-        // Security: keep auth/step-up secrets out of API-driven config writes so
-        // secret rotation remains an out-of-band operation.
-        if (filtered.env &&
-            typeof filtered.env === "object" &&
-            !Array.isArray(filtered.env)) {
-            const envPatch = filtered.env;
-            // Defense-in-depth: strip step-up secrets from persisted config before
-            // merge, even though BLOCKED_ENV_KEYS also blocks them during process.env
-            // sync below. Keeping both guards prevents accidental persistence if one
-            // path changes in future refactors.
-            delete envPatch.ELIZA_API_TOKEN;
-            delete envPatch.ELIZA_WALLET_EXPORT_TOKEN;
-            delete envPatch.ELIZA_TERMINAL_RUN_TOKEN;
-            delete envPatch.HYPERSCAPE_AUTH_TOKEN;
-            delete envPatch.EVM_PRIVATE_KEY;
-            delete envPatch.SOLANA_PRIVATE_KEY;
-            delete envPatch.GITHUB_TOKEN;
-            if (envPatch.vars &&
-                typeof envPatch.vars === "object" &&
-                !Array.isArray(envPatch.vars)) {
-                const vars = envPatch.vars;
-                delete vars.ELIZA_API_TOKEN;
-                delete vars.ELIZA_WALLET_EXPORT_TOKEN;
-                delete vars.ELIZA_TERMINAL_RUN_TOKEN;
-                delete vars.HYPERSCAPE_AUTH_TOKEN;
-                delete vars.EVM_PRIVATE_KEY;
-                delete vars.SOLANA_PRIVATE_KEY;
-                delete vars.GITHUB_TOKEN;
-            }
-            // Defense-in-depth: strip ALL BLOCKED_ENV_KEYS from the env patch
-            // before safeMerge.  The explicit deletes above cover known step-up
-            // secrets; this loop catches process-level injection keys
-            // (NODE_OPTIONS, LD_PRELOAD, etc.) so they never reach
-            // saveElizaConfig() and the persistence→restart RCE chain is closed.
-            for (const key of Object.keys(envPatch)) {
-                if (key === "vars" || key === "shellEnv")
-                    continue;
-                if (BLOCKED_ENV_KEYS.has(key.toUpperCase())) {
-                    delete envPatch[key];
-                }
-            }
-            if (envPatch.vars &&
-                typeof envPatch.vars === "object" &&
-                !Array.isArray(envPatch.vars)) {
-                const innerVars = envPatch.vars;
-                for (const key of Object.keys(innerVars)) {
-                    if (BLOCKED_ENV_KEYS.has(key.toUpperCase())) {
-                        delete innerVars[key];
-                    }
-                }
-            }
-        }
-        if (filtered.mcp &&
-            typeof filtered.mcp === "object" &&
-            !Array.isArray(filtered.mcp)) {
-            const mcpPatch = filtered.mcp;
-            if (mcpPatch.servers !== undefined) {
-                if (!mcpPatch.servers ||
-                    typeof mcpPatch.servers !== "object" ||
-                    Array.isArray(mcpPatch.servers)) {
-                    error(res, "mcp.servers must be a JSON object", 400);
-                    return true;
-                }
-                const mcpRejection = await resolveMcpServersRejection(mcpPatch.servers);
-                if (mcpRejection) {
-                    error(res, mcpRejection, 400);
-                    return true;
-                }
-                const mcpTerminalRejection = resolveMcpTerminalAuthorizationRejection(req, mcpPatch.servers, body);
-                if (mcpTerminalRejection) {
-                    error(res, `Configuring stdio MCP servers via /api/config requires terminal authorization. ${mcpTerminalRejection.reason}`, mcpTerminalRejection.status);
-                    return true;
-                }
-            }
-        }
-        // Strip "[REDACTED]" from the whole patch (GET → PUT round-trips).
-        stripRedactedPlaceholderValuesDeep(filtered);
-        const explicitConnectionRequested = Object.hasOwn(body, "connection");
-        const canonicalDeploymentTargetRequested = Object.hasOwn(filtered, "deploymentTarget");
-        const canonicalLinkedAccountsRequested = Object.hasOwn(filtered, "linkedAccounts");
-        const canonicalServiceRoutingRequested = Object.hasOwn(filtered, "serviceRouting");
-        const normalizedDeploymentTarget = canonicalDeploymentTargetRequested
-            ? normalizeDeploymentTargetConfig(filtered.deploymentTarget)
-            : undefined;
-        const normalizedLinkedAccounts = canonicalLinkedAccountsRequested
-            ? normalizeLinkedAccountFlagsConfig(filtered.linkedAccounts)
-            : undefined;
-        const normalizedServiceRouting = canonicalServiceRoutingRequested
-            ? normalizeServiceRoutingConfig(filtered.serviceRouting)
-            : undefined;
-        if (explicitConnectionRequested) {
-            error(res, "connection patches are no longer supported; update deploymentTarget, linkedAccounts, and serviceRouting directly", 400);
-            return true;
-        }
-        if (isElizaSettingsDebugEnabled()) {
-            logger.debug(`[eliza][settings][api] PUT /api/config filtered topKeys=${Object.keys(filtered).sort().join(",")} snapshot=${JSON.stringify(sanitizeForSettingsDebug(filtered))}`);
-        }
-        safeMerge(config, filtered);
-        // If the client updated env vars, synchronise them into process.env so
-        // subsequent hot-restarts see the latest values (loadElizaConfig()
-        // only fills missing env vars and does not override existing ones).
-        if (filtered.env &&
-            typeof filtered.env === "object" &&
-            !Array.isArray(filtered.env)) {
-            const envPatch = filtered.env;
-            // 1) env.vars.* (preferred)
-            const vars = envPatch.vars;
-            if (vars && typeof vars === "object" && !Array.isArray(vars)) {
-                for (const [k, v] of Object.entries(vars)) {
-                    if (BLOCKED_ENV_KEYS.has(k.toUpperCase()))
-                        continue;
-                    const str = typeof v === "string" ? v : "";
-                    if (str.trim()) {
-                        process.env[k] = str;
-                    }
-                    else {
-                        delete process.env[k];
-                    }
-                }
-            }
-            // 2) Direct env.* string keys (legacy)
-            for (const [k, v] of Object.entries(envPatch)) {
-                if (k === "vars" || k === "shellEnv")
-                    continue;
-                if (BLOCKED_ENV_KEYS.has(k.toUpperCase()))
-                    continue;
-                if (typeof v !== "string")
-                    continue;
-                if (v.trim())
-                    process.env[k] = v;
-                else
-                    delete process.env[k];
-            }
-            // Keep config clean: drop empty env.vars entries so we don't persist
-            // null/empty-string tombstones forever.
-            const cfgEnv = config.env;
-            if (cfgEnv && typeof cfgEnv === "object" && !Array.isArray(cfgEnv)) {
-                const cfgVars = cfgEnv.vars;
-                if (cfgVars && typeof cfgVars === "object" && !Array.isArray(cfgVars)) {
-                    for (const [k, v] of Object.entries(cfgVars)) {
-                        if (typeof v !== "string" || !v.trim()) {
-                            delete cfgVars[k];
-                        }
-                    }
-                }
-            }
-        }
-        if (canonicalDeploymentTargetRequested ||
-            canonicalLinkedAccountsRequested ||
-            canonicalServiceRoutingRequested) {
-            applyCanonicalOnboardingConfig(config, {
-                deploymentTarget: normalizedDeploymentTarget,
-                linkedAccounts: normalizedLinkedAccounts,
-                serviceRouting: normalizedServiceRouting,
-            });
-        }
-        try {
-            saveElizaConfig(config);
-            if (isElizaSettingsDebugEnabled()) {
-                const cfg = config;
-                const cloud = cfg.cloud;
-                logger.debug(`[eliza][settings][api] PUT /api/config → saveElizaConfig OK cloud(after)=${JSON.stringify(settingsDebugCloudSummary(cloud))}`);
-            }
-        }
-        catch (err) {
-            logger.warn(`[api] Config save failed: ${err instanceof Error ? err.message : err}`);
-        }
-        json(res, redactConfigSecrets(asConfigRecord(config)));
-        return true;
-    }
-    return false;
-}

package/dist/packages/agent/src/api/connector-account-routes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"connector-account-routes.d.ts","sourceRoot":"","sources":["../../../../../src/api/connector-account-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAalC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAM3D,MAAM,WAAW,4BAA4B;IAC3C,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC;IAC1B,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE;QACL,OAAO,EAAE,OAAO,eAAe,EAAE,aAAa,GAAG,IAAI,CAAC;KACvD,CAAC;IACF,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACzE,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5E,YAAY,EAAE,CAAC,CAAC,SAAS,MAAM,EAC7B,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,OAAO,CAAC,EAAE,mBAAmB,KAC1B,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACvB,SAAS,CAAC,EAAE,CACV,OAAO,EAAE,yCAAyC,KAC/C,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,yCAAyC;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,UAAU,GAAG,OAAO,GAAG,OAAO,CAAC;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA2lBD,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,4BAA4B,GAChC,OAAO,CAAC,OAAO,CAAC,CAgVlB"}