@elizaos/agent 2.0.0-beta.1 → 2.0.11-beta.5

package/api/server-helpers-config.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Config redaction, first-run, and skill validation helpers extracted from server.ts.
+ */
+import type http from "node:http";
+import type { ElizaConfig } from "../config/config.ts";
+/**
+ * Key patterns that indicate a value is sensitive and must be redacted.
+ */
+export declare const SENSITIVE_KEY_RE: RegExp;
+export declare function isBlockedObjectKey(key: string): boolean;
+export declare function redactDeep(val: unknown): unknown;
+export declare function redactConfigSecrets(config: Record<string, unknown>): Record<string, unknown>;
+export declare function isRedactedSecretValue(value: unknown): boolean;
+/** Remove UI round-trip placeholders so GET /api/config -> PUT never persists "[REDACTED]". */
+export declare function stripRedactedPlaceholderValuesDeep(value: unknown): void;
+export declare function validateSkillId(skillId: string, res: http.ServerResponse): string | null;
+export declare function readUiLanguageHeader(req: http.IncomingMessage | undefined): string | undefined;
+export declare function resolveConfiguredCharacterLanguage(config?: ElizaConfig, req?: http.IncomingMessage): "en" | "zh-CN" | "ko" | "es" | "pt" | "vi" | "tl";
+export declare function resolveFirstRunStylePreset(body: Record<string, unknown>, language: string): import("@elizaos/shared").StylePreset;
+export declare function applyFirstRunVoicePreset(config: ElizaConfig, body: Record<string, unknown>, language: string): void;
+export declare function resolveDefaultAgentName(config?: ElizaConfig, req?: http.IncomingMessage): string;
+export declare function getProviderOptions(): Array<{
+    id: string;
+    name: string;
+    envKey: string | null;
+    pluginName: string;
+    keyPrefix: string | null;
+    description: string;
+}>;
+export declare function getCloudProviderOptions(): Array<{
+    id: string;
+    name: string;
+    description: string;
+}>;
+export declare function ensureWalletKeysInEnvAndConfig(config: ElizaConfig): boolean;
+export declare function isSafeResetStateDir(resolvedState: string, homeDir: string): boolean;
+//# sourceMappingURL=server-helpers-config.d.ts.map

package/api/server-helpers-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-helpers-config.d.ts","sourceRoot":"","sources":["../../src/api/server-helpers-config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAYlC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAOvD;;GAEG;AACH,eAAO,MAAM,gBAAgB,QACuF,CAAC;AAErH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOvD;AAiBD,wBAAgB,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAehD;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzB;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAI7D;AAED,+FAA+F;AAC/F,wBAAgB,kCAAkC,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAiBvE;AAQD,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,IAAI,CAAC,cAAc,GACvB,MAAM,GAAG,IAAI,CAYf;AAiCD,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,IAAI,CAAC,eAAe,GAAG,SAAS,GACpC,MAAM,GAAG,SAAS,CAYpB;AAED,wBAAgB,kCAAkC,CAChD,MAAM,CAAC,EAAE,WAAW,EACpB,GAAG,CAAC,EAAE,IAAI,CAAC,eAAe,qDAQ3B;AAED,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,QAAQ,EAAE,MAAM,yCA2BjB;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,WAAW,EACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,QAAQ,EAAE,MAAM,QA6CjB;AAED,wBAAgB,uBAAuB,CACrC,MAAM,CAAC,EAAE,WAAW,EACpB,GAAG,CAAC,EAAE,IAAI,CAAC,eAAe,GACzB,MAAM,CAUR;AAED,wBAAgB,kBAAkB,IAAI,KAAK,CAAC;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC,CASD;AAED,wBAAgB,uBAAuB,IAAI,KAAK,CAAC;IAC/C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC,CAMD;AAED,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CA4C3E;AAgBD,wBAAgB,mBAAmB,CACjC,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM,GACd,OAAO,CAgBT"}

package/api/server-helpers-config.js

@@ -0,0 +1,289 @@
+/**
+ * Config redaction, first-run, and skill validation helpers extracted from server.ts.
+ */
+import path from "node:path";
+import { logger, sendJsonError } from "@elizaos/core";
+import { getDefaultStylePreset, getStylePresets, normalizeCharacterLanguage, } from "@elizaos/shared/character-presets";
+import { FIRST_RUN_CLOUD_PROVIDER_OPTIONS, FIRST_RUN_PROVIDER_CATALOG, } from "@elizaos/shared/contracts/first-run-options";
+import { generateWalletKeys, setSolanaWalletEnv } from "./wallet-keygen.js";
+// ---------------------------------------------------------------------------
+// Config redaction
+// ---------------------------------------------------------------------------
+/**
+ * Key patterns that indicate a value is sensitive and must be redacted.
+ */
+export const SENSITIVE_KEY_RE = /password|secret|api.?key|private.?key|seed.?phrase|authorization|connection.?string|credential|(?<!max)tokens?$/i;
+export function isBlockedObjectKey(key) {
+    return (key === "__proto__" ||
+        key === "constructor" ||
+        key === "prototype" ||
+        key === "$include");
+}
+function redactValue(val) {
+    if (val === null || val === undefined)
+        return val;
+    if (typeof val === "string")
+        return val.length > 0 ? "[REDACTED]" : "";
+    if (typeof val === "number" || typeof val === "boolean")
+        return "[REDACTED]";
+    if (Array.isArray(val))
+        return val.map(redactValue);
+    if (typeof val === "object") {
+        const out = {};
+        for (const [k, v] of Object.entries(val)) {
+            out[k] = redactValue(v);
+        }
+        return out;
+    }
+    return "[REDACTED]";
+}
+export function redactDeep(val) {
+    if (val === null || val === undefined)
+        return val;
+    if (Array.isArray(val))
+        return val.map(redactDeep);
+    if (typeof val === "object") {
+        const out = {};
+        for (const [key, child] of Object.entries(val)) {
+            if (SENSITIVE_KEY_RE.test(key)) {
+                out[key] = redactValue(child);
+            }
+            else {
+                out[key] = redactDeep(child);
+            }
+        }
+        return out;
+    }
+    return val;
+}
+export function redactConfigSecrets(config) {
+    return redactDeep(config);
+}
+export function isRedactedSecretValue(value) {
+    return (typeof value === "string" && value.trim().toUpperCase() === "[REDACTED]");
+}
+/** Remove UI round-trip placeholders so GET /api/config -> PUT never persists "[REDACTED]". */
+export function stripRedactedPlaceholderValuesDeep(value) {
+    if (value === null || typeof value !== "object")
+        return;
+    if (Array.isArray(value)) {
+        for (const item of value) {
+            stripRedactedPlaceholderValuesDeep(item);
+        }
+        return;
+    }
+    const obj = value;
+    for (const key of Object.keys(obj)) {
+        const v = obj[key];
+        if (isRedactedSecretValue(v)) {
+            delete obj[key];
+        }
+        else if (v !== null && typeof v === "object") {
+            stripRedactedPlaceholderValuesDeep(v);
+        }
+    }
+}
+// ---------------------------------------------------------------------------
+// Skill-ID path-traversal guard
+// ---------------------------------------------------------------------------
+const SAFE_SKILL_ID_RE = /^[a-zA-Z0-9._-]+$/;
+export function validateSkillId(skillId, res) {
+    if (!skillId ||
+        !SAFE_SKILL_ID_RE.test(skillId) ||
+        skillId === "." ||
+        skillId.includes("..")) {
+        const safeDisplay = skillId.slice(0, 80).replace(/[^\x20-\x7e]/g, "?");
+        sendJsonError(res, `Invalid skill ID: "${safeDisplay}"`, 400);
+        return null;
+    }
+    return skillId;
+}
+// ---------------------------------------------------------------------------
+// First-run helpers
+// ---------------------------------------------------------------------------
+const DEFAULT_ELEVENLABS_TTS_MODEL = "eleven_flash_v2_5";
+const ELEVENLABS_VOICE_ID_BY_PRESET = {
+    rachel: "21m00Tcm4TlvDq8ikWAM",
+    sarah: "EXAVITQu4vr4xnSDxMaL",
+    matilda: "XrExE9yKIg1WjnnlVkGX",
+    lily: "pFZP5JQG7iQjIQuC4Bku",
+    alice: "Xb7hH8MSUJpSbSDYk0k2",
+    brian: "nPczCjzI2devNBz1zQrb",
+    adam: "pNInz6obpgDQGcFmaJgB",
+    josh: "TxGEqnHWrfWFTfGW9XjX",
+    daniel: "onwK4e9ZLuTAKqWW03F9",
+    liam: "TX3LPaxmHKxFdv7VOQHJ",
+    gigi: "jBpfuIE2acCO8z3wKNLl",
+    mimi: "zrHiDhphv9ZnVXBqCLjz",
+    dorothy: "ThT5KcBeYPX3keUQqHPh",
+    glinda: "z9fAnlkpzviPz146aGWa",
+    charlotte: "XB0fDUnXU5powFXDhCwa",
+    callum: "N2lVS1w4EtoT3dr4eOWO",
+    momo: "n7Wi4g1bhpw4Bs8HK5ph",
+    yuki: "4tRn1lSkEn13EVTuqb0g",
+    rin: "cNYrMw9glwJZXR8RwbuR",
+    kei: "eadgjmk4R4uojdsheG9t",
+    jin: "6IwYbsNENZgAB1dtBZDp",
+    satoshi: "7cOBG34AiHrAzs842Rdi",
+    ryu: "QzTKubutNn9TjrB7Xb2Q",
+};
+export function readUiLanguageHeader(req) {
+    if (!req) {
+        return undefined;
+    }
+    const header = req.headers["x-eliza-ui-language"] ?? req.headers["x-eliza-ui-language"];
+    if (Array.isArray(header)) {
+        return header.find((value) => value.trim())?.trim();
+    }
+    return typeof header === "string" && header.trim()
+        ? header.trim()
+        : undefined;
+}
+export function resolveConfiguredCharacterLanguage(config, req) {
+    const uiLanguage = readUiLanguageHeader(req) ??
+        config?.ui?.language;
+    return normalizeCharacterLanguage(uiLanguage);
+}
+export function resolveFirstRunStylePreset(body, language) {
+    const presets = getStylePresets(language);
+    const requestedPresetId = typeof body.presetId === "string" ? body.presetId.trim() : "";
+    if (requestedPresetId) {
+        const byId = presets.find((preset) => preset.id === requestedPresetId);
+        if (byId)
+            return byId;
+    }
+    if (typeof body.avatarIndex === "number" &&
+        Number.isFinite(body.avatarIndex)) {
+        const byAvatar = presets.find((preset) => preset.avatarIndex === Number(body.avatarIndex));
+        if (byAvatar)
+            return byAvatar;
+    }
+    const requestedName = typeof body.name === "string" ? body.name.trim() : "";
+    if (requestedName) {
+        const byName = presets.find((preset) => preset.name === requestedName);
+        if (byName)
+            return byName;
+    }
+    return getDefaultStylePreset(language);
+}
+export function applyFirstRunVoicePreset(config, body, language) {
+    const elevenLabsApiKey = process.env.ELEVENLABS_API_KEY?.trim();
+    if (!elevenLabsApiKey) {
+        return;
+    }
+    const stylePreset = resolveFirstRunStylePreset(body, language);
+    const voicePresetId = stylePreset.voicePresetId.trim();
+    if (!voicePresetId) {
+        return;
+    }
+    const voiceId = ELEVENLABS_VOICE_ID_BY_PRESET[voicePresetId];
+    if (!voiceId) {
+        return;
+    }
+    if (!config.messages || typeof config.messages !== "object") {
+        config.messages = {};
+    }
+    const messages = config.messages;
+    const existingTts = messages.tts && typeof messages.tts === "object"
+        ? messages.tts
+        : {};
+    const existingElevenlabs = existingTts.elevenlabs && typeof existingTts.elevenlabs === "object"
+        ? existingTts.elevenlabs
+        : {};
+    messages.tts = {
+        ...existingTts,
+        provider: "elevenlabs",
+        elevenlabs: {
+            ...existingElevenlabs,
+            voiceId,
+            modelId: typeof existingElevenlabs.modelId === "string" &&
+                existingElevenlabs.modelId.trim()
+                ? existingElevenlabs.modelId.trim()
+                : DEFAULT_ELEVENLABS_TTS_MODEL,
+        },
+    };
+}
+export function resolveDefaultAgentName(config, req) {
+    const configuredName = config?.ui?.assistant?.name?.trim() ??
+        config?.agents?.list?.[0]?.name?.trim();
+    if (configuredName) {
+        return configuredName;
+    }
+    return getDefaultStylePreset(resolveConfiguredCharacterLanguage(config, req))
+        .name;
+}
+export function getProviderOptions() {
+    return FIRST_RUN_PROVIDER_CATALOG.map((provider) => ({
+        id: provider.id,
+        name: provider.name,
+        envKey: provider.envKey,
+        pluginName: provider.pluginName,
+        keyPrefix: provider.keyPrefix,
+        description: provider.description,
+    }));
+}
+export function getCloudProviderOptions() {
+    return FIRST_RUN_CLOUD_PROVIDER_OPTIONS.map((provider) => ({
+        id: provider.id,
+        name: provider.name,
+        description: provider.description,
+    }));
+}
+export function ensureWalletKeysInEnvAndConfig(config) {
+    const missingEvm = typeof process.env.EVM_PRIVATE_KEY !== "string" ||
+        !process.env.EVM_PRIVATE_KEY.trim();
+    const missingSolana = typeof process.env.SOLANA_PRIVATE_KEY !== "string" ||
+        !process.env.SOLANA_PRIVATE_KEY.trim();
+    if (!missingEvm && !missingSolana) {
+        return false;
+    }
+    try {
+        const walletKeys = generateWalletKeys();
+        if (!config.env ||
+            typeof config.env !== "object" ||
+            Array.isArray(config.env)) {
+            config.env = {};
+        }
+        const envConfig = config.env;
+        if (missingEvm) {
+            envConfig.EVM_PRIVATE_KEY = walletKeys.evmPrivateKey;
+            process.env.EVM_PRIVATE_KEY = walletKeys.evmPrivateKey;
+            logger.info(`[eliza-api] Generated EVM wallet: ${walletKeys.evmAddress}`);
+        }
+        if (missingSolana) {
+            envConfig.SOLANA_PRIVATE_KEY = walletKeys.solanaPrivateKey;
+            setSolanaWalletEnv(walletKeys.solanaPrivateKey);
+            logger.info(`[eliza-api] Generated Solana wallet: ${walletKeys.solanaAddress}`);
+        }
+        return true;
+    }
+    catch (err) {
+        logger.warn(`[eliza-api] Failed to generate wallet keys: ${err instanceof Error ? err.message : String(err)}`);
+        return false;
+    }
+}
+// ---------------------------------------------------------------------------
+// State dir safety
+// ---------------------------------------------------------------------------
+const RESET_STATE_ALLOWED_SEGMENTS = new Set(["eliza"]);
+function hasAllowedResetSegment(resolvedState) {
+    return resolvedState
+        .split(path.sep)
+        .some((segment) => RESET_STATE_ALLOWED_SEGMENTS.has(segment.trim().toLowerCase()));
+}
+export function isSafeResetStateDir(resolvedState, homeDir) {
+    const normalizedState = path.resolve(resolvedState);
+    const normalizedHome = path.resolve(homeDir);
+    const parsedRoot = path.parse(normalizedState).root;
+    if (normalizedState === parsedRoot)
+        return false;
+    if (normalizedState === normalizedHome)
+        return false;
+    const relativeToHome = path.relative(normalizedHome, normalizedState);
+    const isUnderHome = relativeToHome.length > 0 &&
+        !relativeToHome.startsWith("..") &&
+        !path.isAbsolute(relativeToHome);
+    if (!isUnderHome)
+        return false;
+    return hasAllowedResetSegment(normalizedState);
+}

package/api/server-helpers-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-helpers-fetch.d.ts","sourceRoot":"","sources":["../../src/api/server-helpers-fetch.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,KAAK,wBAAwB,GAAG,IAAI,CAClC,IAAI,CAAC,cAAc,EACnB,OAAO,GAAG,MAAM,GAAG,KAAK,GAAG,gBAAgB,GAAG,eAAe,GAAG,WAAW,CAC5E,CAAC;AAgBF,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,GAC5B,MAAM,GAAG,IAAI,CAMf;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAKpD;AAQD,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,MAAM,GAAG,GAAG,EACnB,IAAI,EAAE,WAAW,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,QAAQ,CAAC,CAwCnB;AA8BD;;;GAGG;AACH,wBAAsB,+BAA+B,CACnD,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,wBAAwB,EAC7B,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,CAmEjB"}

package/api/server-helpers-mcp.d.ts

@@ -0,0 +1,17 @@
+/**
+ * MCP server configuration validation helpers extracted from server.ts.
+ */
+import type http from "node:http";
+import type { TerminalRunRejection } from "./server-helpers-auth.ts";
+export { validateMcpServerConfig } from "../security/mcp-server-config.ts";
+export declare function resolveMcpServersRejection(servers: Record<string, unknown>): Promise<string | null>;
+export declare function mcpServersIncludeStdio(servers: Record<string, unknown>): boolean;
+/**
+ * Stdio MCP config writes can reach child_process.spawn. By default require
+ * ELIZA_TERMINAL_RUN_TOKEN; set ELIZA_ALLOW_UNAUTHENTICATED_STDIO_MCP=1 only
+ * for intentional local dev (legacy compat passthrough).
+ */
+export declare function resolveMcpTerminalAuthorizationRejection(req: Pick<http.IncomingMessage, "headers">, servers: Record<string, unknown>, body: {
+    terminalToken?: string;
+}): TerminalRunRejection | null;
+//# sourceMappingURL=server-helpers-mcp.d.ts.map

package/api/server-helpers-mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-helpers-mcp.d.ts","sourceRoot":"","sources":["../../src/api/server-helpers-mcp.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAIrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAE3E,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAuBxB;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAWT;AAED;;;;GAIG;AACH,wBAAgB,wCAAwC,CACtD,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,EAC1C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,IAAI,EAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/B,oBAAoB,GAAG,IAAI,CAoB7B"}

package/api/server-helpers-mcp.js

@@ -0,0 +1,60 @@
+/**
+ * MCP server configuration validation helpers extracted from server.ts.
+ */
+import { validateMcpServerConfig } from "../security/mcp-server-config.js";
+import { hasBlockedObjectKeyDeep } from "./server-helpers.js";
+import { resolveTerminalRunRejection } from "./server-helpers-auth.js";
+import { isBlockedObjectKey } from "./server-helpers-config.js";
+export { validateMcpServerConfig } from "../security/mcp-server-config.js";
+export async function resolveMcpServersRejection(servers) {
+    for (const [serverName, serverConfig] of Object.entries(servers)) {
+        if (isBlockedObjectKey(serverName)) {
+            return `Invalid server name: "${serverName}"`;
+        }
+        if (!serverConfig ||
+            typeof serverConfig !== "object" ||
+            Array.isArray(serverConfig)) {
+            return `Server "${serverName}" config must be a JSON object`;
+        }
+        if (hasBlockedObjectKeyDeep(serverConfig)) {
+            return `Server "${serverName}" contains blocked object keys`;
+        }
+        const configError = await validateMcpServerConfig(serverConfig);
+        if (configError) {
+            return `Server "${serverName}": ${configError}`;
+        }
+    }
+    return null;
+}
+export function mcpServersIncludeStdio(servers) {
+    return Object.values(servers).some((serverConfig) => {
+        if (!serverConfig ||
+            typeof serverConfig !== "object" ||
+            Array.isArray(serverConfig)) {
+            return false;
+        }
+        return serverConfig.type === "stdio";
+    });
+}
+/**
+ * Stdio MCP config writes can reach child_process.spawn. By default require
+ * ELIZA_TERMINAL_RUN_TOKEN; set ELIZA_ALLOW_UNAUTHENTICATED_STDIO_MCP=1 only
+ * for intentional local dev (legacy compat passthrough).
+ */
+export function resolveMcpTerminalAuthorizationRejection(req, servers, body) {
+    if (!mcpServersIncludeStdio(servers)) {
+        return null;
+    }
+    if (process.env.ELIZA_ALLOW_UNAUTHENTICATED_STDIO_MCP === "1") {
+        return resolveTerminalRunRejection(req, body);
+    }
+    const expected = process.env.ELIZA_TERMINAL_RUN_TOKEN?.trim();
+    if (!expected) {
+        return {
+            status: 403,
+            reason: "Stdio MCP server configuration requires ELIZA_TERMINAL_RUN_TOKEN. " +
+                "Set ELIZA_ALLOW_UNAUTHENTICATED_STDIO_MCP=1 only for intentional local development.",
+        };
+    }
+    return resolveTerminalRunRejection(req, body);
+}

package/api/server-helpers-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-helpers-plugin.d.ts","sourceRoot":"","sources":["../../src/api/server-helpers-plugin.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAsFrD,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,SAAS,CAAC,GAC9C,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA4DxB;AAMD,MAAM,WAAW,6BAA6B;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,qCAAqC,CACnD,YAAY,EAAE,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,EACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,6BAA6B,EAAE,CA0BjC"}

package/api/server-helpers-swarm.d.ts

@@ -0,0 +1,101 @@
+/**
+ * Swarm/autonomy/coding-agent helpers extracted from server.ts.
+ */
+import { type AgentRuntime } from "@elizaos/core";
+import type { CoordinationLLMResponse } from "./parse-action-block.ts";
+import type { ServerState } from "./server-types.ts";
+interface TaskContext {
+    threadId: string;
+    taskNodeId?: string;
+    sessionId: string;
+    agentType: string;
+    label: string;
+    originalTask: string;
+    workdir: string;
+    repo?: string;
+    originRoomId?: string;
+    originMetadata?: Record<string, unknown>;
+    status: string;
+    decisions: unknown[];
+    autoResolvedCount: number;
+    registeredAt: number;
+    lastActivityAt: number;
+    idleCheckCount: number;
+    taskDelivered: boolean;
+    completionSummary?: string;
+    validationSummary?: string;
+    lastSeenDecisionIndex: number;
+    lastInputSentAt?: number;
+    stoppedAt?: number;
+}
+interface SwarmEvent {
+    type: string;
+    sessionId: string;
+    timestamp: number;
+    data: unknown;
+}
+interface TaskCompletionSummary {
+    sessionId: string;
+    label: string;
+    agentType: string;
+    originalTask: string;
+    status: string;
+    completionSummary: string;
+    validationSummary?: string;
+    [key: string]: unknown;
+}
+export declare function routeAutonomyTextToUser(state: ServerState, responseText: string, source?: string): Promise<void>;
+/**
+ * Get the SwarmCoordinator from the runtime services (if available).
+ */
+export declare function getCoordinatorFromRuntime(runtime: AgentRuntime): {
+    setChatCallback?: (cb: (text: string, source?: string, routing?: {
+        sessionId?: string;
+        threadId?: string;
+        roomId?: string | null;
+    }) => Promise<void>) => void;
+    setWsBroadcast?: (cb: (event: SwarmEvent) => void) => void;
+    setAgentDecisionCallback?: (cb: (eventDescription: string, sessionId: string, taskContext: TaskContext) => Promise<CoordinationLLMResponse | null>) => void;
+    setSwarmCompleteCallback?: (cb: (payload: {
+        tasks: TaskCompletionSummary[];
+        total: number;
+        completed: number;
+        stopped: number;
+        errored: number;
+    }) => Promise<void>) => void;
+    getTaskThread?: (threadId: string) => Promise<{
+        roomId?: string | null;
+    } | null>;
+    sourceRoomId?: string | null;
+} | null;
+export declare function wireCodingAgentBridgesNow(st: ServerState): void;
+export declare function wireCodingAgentChatBridge(st: ServerState): boolean;
+export declare function wireCodingAgentWsBridge(st: ServerState): boolean;
+export declare function wireCodingAgentSwarmSynthesis(st: ServerState): boolean;
+/**
+ * Handle swarm completion by routing the captured task result to the user.
+ */
+export declare function handleSwarmSynthesis(st: {
+    runtime: AgentRuntime | null;
+}, payload: {
+    tasks: Array<{
+        sessionId: string;
+        label: string;
+        agentType: string;
+        originalTask: string;
+        status: string;
+        completionSummary: string;
+        validationSummary?: string;
+        roomId?: string | null;
+        workdir?: string;
+        replyToExternalMessageId?: string | null;
+    }>;
+    total: number;
+    completed: number;
+    stopped: number;
+    errored: number;
+}, routeMessage?: (text: string, source: string) => Promise<void>): Promise<void>;
+export declare function wireCoordinatorEventRouting(st: ServerState): boolean;
+export declare function getPtyConsoleBridge(st: ServerState): import("./parse-action-block.ts").ConsoleBridge | null;
+export {};
+//# sourceMappingURL=server-helpers-swarm.d.ts.map

package/api/server-helpers-swarm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-helpers-swarm.d.ts","sourceRoot":"","sources":["../../src/api/server-helpers-swarm.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,OAAO,EACL,KAAK,YAAY,EAQlB,MAAM,eAAe,CAAC;AAGvB,OAAO,KAAK,EACV,uBAAuB,EAExB,MAAM,yBAAyB,CAAC;AAMjC,OAAO,KAAK,EAAoB,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGvE,UAAU,WAAW;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,OAAO,EAAE,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,UAAU,UAAU;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,OAAO,CAAC;CACf;AAED,UAAU,qBAAqB;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AA+CD,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,WAAW,EAClB,YAAY,EAAE,MAAM,EACpB,MAAM,SAAa,GAClB,OAAO,CAAC,IAAI,CAAC,CAgEf;AAMD;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,YAAY,GAAG;IAChE,eAAe,CAAC,EAAE,CAChB,EAAE,EAAE,CACF,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QACR,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACxB,KACE,OAAO,CAAC,IAAI,CAAC,KACf,IAAI,CAAC;IACV,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,KAAK,IAAI,CAAC;IAC3D,wBAAwB,CAAC,EAAE,CACzB,EAAE,EAAE,CACF,gBAAgB,EAAE,MAAM,EACxB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,WAAW,KACrB,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,KACzC,IAAI,CAAC;IACV,wBAAwB,CAAC,EAAE,CACzB,EAAE,EAAE,CAAC,OAAO,EAAE;QACZ,KAAK,EAAE,qBAAqB,EAAE,CAAC;QAC/B,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;KACjB,KAAK,OAAO,CAAC,IAAI,CAAC,KAChB,IAAI,CAAC;IACV,aAAa,CAAC,EAAE,CACd,QAAQ,EAAE,MAAM,KACb,OAAO,CAAC;QAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IAChD,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,GAAG,IAAI,CAcP;AAED,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,WAAW,GAAG,IAAI,CAK/D;AAED,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,WAAW,GAAG,OAAO,CAwBlE;AAED,wBAAgB,uBAAuB,CAAC,EAAE,EAAE,WAAW,GAAG,OAAO,CAShE;AAED,wBAAgB,6BAA6B,CAAC,EAAE,EAAE,WAAW,GAAG,OAAO,CAQtE;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,EAAE,EAAE;IAAE,OAAO,EAAE,YAAY,GAAG,IAAI,CAAA;CAAE,EACpC,OAAO,EAAE;IACP,KAAK,EAAE,KAAK,CAAC;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,EAAE,MAAM,CAAC;QACf,iBAAiB,EAAE,MAAM,CAAC;QAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1C,CAAC,CAAC;IACH,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB,EACD,YAAY,GAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAGC,GAC5D,OAAO,CAAC,IAAI,CAAC,CAkCf;AA2aD,wBAAgB,2BAA2B,CAAC,EAAE,EAAE,WAAW,GAAG,OAAO,CAmIpE;AAMD,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,WAAW,0DAIlD"}