@elizaos/agent 2.0.0-beta.2 → 2.0.11-beta.5

package/packages/agent/src/runtime/vault-profile-resolver.d.ts

@@ -1,37 +0,0 @@
-/**
- * Per-agent vault profile resolver.
- *
- * Walks every vault entry that has profile metadata, asks the vault's
- * routing layer which profile applies for the current agent, and pumps
- * the resolved value into `process.env[KEY]`. Runtime hot paths read
- * env vars synchronously (`process.env.OPENROUTER_API_KEY`, etc.), so
- * we resolve once at agent boot rather than instrumenting every call
- * site.
- *
- * Scope: this is the minimum-viable wiring per the spec —
- *   - Only `agent` scope rules apply; the runtime knows agentId.
- *   - `app` and `skill` scope rules are persisted but not yet
- *     resolved here (no call site has the context).
- *
- * Idempotent: re-running for the same agent overwrites with the same
- * value. Opt-out via `ELIZA_DISABLE_VAULT_PROFILE_RESOLVER=1`.
- */
-import { type Vault } from "@elizaos/vault";
-export interface ResolveProfilesResult {
-    /** Number of keys whose env value was overridden. */
-    readonly overridden: number;
-    /** Keys that had profiles but every candidate profile was empty. */
-    readonly skipped: ReadonlyArray<string>;
-    /** Keys where resolution failed (vault read error). */
-    readonly failed: ReadonlyArray<string>;
-}
-/**
- * For each inventory entry that has `hasProfiles === true`, resolve
- * the active value for `agentId` and write it into `process.env[KEY]`.
- *
- * Keys without profiles are left alone — `process.env` already holds
- * whatever the legacy hydration path put there (config.env, eliza.json,
- * direct env). This resolver is purely additive.
- */
-export declare function applyVaultProfilesForAgent(vault: Vault, agentId: string): Promise<ResolveProfilesResult>;
-//# sourceMappingURL=vault-profile-resolver.d.ts.map

package/packages/agent/src/runtime/vault-profile-resolver.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"vault-profile-resolver.d.ts","sourceRoot":"","sources":["../../../../../src/runtime/vault-profile-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAGL,KAAK,KAAK,EAEX,MAAM,gBAAgB,CAAC;AAExB,MAAM,WAAW,qBAAqB;IACpC,qDAAqD;IACrD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,oEAAoE;IACpE,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACxC,uDAAuD;IACvD,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACxC;AAED;;;;;;;GAOG;AACH,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,qBAAqB,CAAC,CA0DhC"}

package/packages/agent/src/runtime/vault-profile-resolver.js

@@ -1,79 +0,0 @@
-/**
- * Per-agent vault profile resolver.
- *
- * Walks every vault entry that has profile metadata, asks the vault's
- * routing layer which profile applies for the current agent, and pumps
- * the resolved value into `process.env[KEY]`. Runtime hot paths read
- * env vars synchronously (`process.env.OPENROUTER_API_KEY`, etc.), so
- * we resolve once at agent boot rather than instrumenting every call
- * site.
- *
- * Scope: this is the minimum-viable wiring per the spec —
- *   - Only `agent` scope rules apply; the runtime knows agentId.
- *   - `app` and `skill` scope rules are persisted but not yet
- *     resolved here (no call site has the context).
- *
- * Idempotent: re-running for the same agent overwrites with the same
- * value. Opt-out via `ELIZA_DISABLE_VAULT_PROFILE_RESOLVER=1`.
- */
-import { logger } from "@elizaos/core";
-import { listVaultInventory, resolveActiveValue, } from "@elizaos/vault";
-/**
- * For each inventory entry that has `hasProfiles === true`, resolve
- * the active value for `agentId` and write it into `process.env[KEY]`.
- *
- * Keys without profiles are left alone — `process.env` already holds
- * whatever the legacy hydration path put there (config.env, eliza.json,
- * direct env). This resolver is purely additive.
- */
-export async function applyVaultProfilesForAgent(vault, agentId) {
-    if (process.env.ELIZA_DISABLE_VAULT_PROFILE_RESOLVER === "1") {
-        return { overridden: 0, skipped: [], failed: [] };
-    }
-    let entries;
-    try {
-        entries = await listVaultInventory(vault);
-    }
-    catch (err) {
-        logger.warn(`[vault-profile-resolver] inventory listing failed for agent="${agentId}": ${err instanceof Error ? err.message : String(err)}`);
-        return { overridden: 0, skipped: [], failed: [] };
-    }
-    let overridden = 0;
-    const skipped = [];
-    const failed = [];
-    for (const entry of entries) {
-        if (!entry.hasProfiles)
-            continue;
-        if (entry.kind === "reference") {
-            // Reference entries resolve through their backing password
-            // manager, not through profiles. Skip — but only after auditing
-            // we'd actually have a profile blob to read.
-            continue;
-        }
-        try {
-            const value = await resolveActiveValue(vault, entry.key, { agentId });
-            if (typeof value !== "string" || value.length === 0) {
-                skipped.push(entry.key);
-                continue;
-            }
-            process.env[entry.key] = value;
-            overridden += 1;
-        }
-        catch (err) {
-            // resolveActiveValue throws when no profile and no bare value
-            // resolves. Don't try to fall back to legacy env — the user
-            // explicitly declared profiles for this key, so an unresolvable
-            // active profile is a real failure they should see.
-            failed.push(entry.key);
-            logger.warn(`[vault-profile-resolver] failed to resolve agent="${agentId}" key="${entry.key}": ${err instanceof Error ? err.message : String(err)}`);
-        }
-    }
-    if (overridden > 0 || failed.length > 0) {
-        logger.info(`[vault-profile-resolver] agent="${agentId}" overridden=${overridden} skipped=${skipped.length} failed=${failed.length}`);
-    }
-    return {
-        overridden,
-        skipped: Object.freeze(skipped),
-        failed: Object.freeze(failed),
-    };
-}

package/packages/agent/src/runtime/version.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../../../../src/runtime/version.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,OAAO,QAAuC,CAAC"}

package/packages/agent/src/runtime/web-search-tools.d.ts

@@ -1,22 +0,0 @@
-/**
- * Web search tool injection for Anthropic models (Path A).
- *
- * Adds Anthropic's server-side `web_search` tool to all generateText and
- * streamText calls when the model is Anthropic. This is zero-cost (no
- * separate API key needed) -- Anthropic handles it server-side.
- *
- * Works by monkey-patching the Vercel AI SDK's generateText/streamText
- * functions to inject the web_search tool whenever the model provider
- * is Anthropic and no tools are already present.
- *
- * Controlled by:
- *   ELIZA_WEB_SEARCH=0|false|off  — disable (default: enabled)
- */
-import type { AgentRuntime } from "@elizaos/core";
-/**
- * Enable Anthropic server-side web search for the given runtime.
- *
- * Call after plugins are registered and prompt optimizations installed.
- */
-export declare function installAnthropicWebSearch(runtime: AgentRuntime): void;
-//# sourceMappingURL=web-search-tools.d.ts.map

package/packages/agent/src/runtime/web-search-tools.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"web-search-tools.d.ts","sourceRoot":"","sources":["../../../../../src/runtime/web-search-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AA+HlD;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CA8CrE"}

package/packages/agent/src/runtime/web-search-tools.js

@@ -1,151 +0,0 @@
-/**
- * Web search tool injection for Anthropic models (Path A).
- *
- * Adds Anthropic's server-side `web_search` tool to all generateText and
- * streamText calls when the model is Anthropic. This is zero-cost (no
- * separate API key needed) -- Anthropic handles it server-side.
- *
- * Works by monkey-patching the Vercel AI SDK's generateText/streamText
- * functions to inject the web_search tool whenever the model provider
- * is Anthropic and no tools are already present.
- *
- * Controlled by:
- *   ELIZA_WEB_SEARCH=0|false|off  — disable (default: enabled)
- */
-import { logger, ModelType } from "@elizaos/core";
-// ---------------------------------------------------------------------------
-// Env gate (opt-out, enabled by default)
-// ---------------------------------------------------------------------------
-const ELIZA_WEB_SEARCH_ENABLED = (() => {
-    const raw = process.env.ELIZA_WEB_SEARCH?.toLowerCase();
-    if (raw === "0" || raw === "false" || raw === "off")
-        return false;
-    return true;
-})();
-// Prevent double-patching
-let patched = false;
-const installedRuntimes = new WeakSet();
-// ---------------------------------------------------------------------------
-// Provider detection
-// ---------------------------------------------------------------------------
-function isAnthropicRuntime(runtime) {
-    const modelsMap = runtime.models;
-    if (modelsMap) {
-        for (const key of [ModelType.TEXT_LARGE, "TEXT_LARGE"]) {
-            const handlers = modelsMap.get(key);
-            if (handlers?.[0]?.provider?.toLowerCase().includes("anthropic")) {
-                return true;
-            }
-        }
-    }
-    // Fallback: env + character hints
-    if (process.env.ANTHROPIC_API_KEY) {
-        const char = runtime.character;
-        const mp = char?.modelProvider;
-        if (typeof mp === "string" && /anthropic/i.test(mp))
-            return true;
-        const m = char?.model;
-        if (typeof m === "string" && /claude|anthropic/i.test(m))
-            return true;
-    }
-    return false;
-}
-// ---------------------------------------------------------------------------
-// AI SDK patch
-// ---------------------------------------------------------------------------
-function patchAiSdk(webSearchTool) {
-    if (patched)
-        return;
-    patched = true;
-    let aiModule;
-    try {
-        aiModule = require("ai");
-    }
-    catch {
-        logger.warn("[web-search] Could not require('ai') — skipping patch");
-        return;
-    }
-    const wrapFn = (original, name) => {
-        const wrapped = function patchedAiFn(...args) {
-            if (args.length > 0 && args[0] && typeof args[0] === "object") {
-                const params = args[0];
-                const model = params.model;
-                const provider = model?.provider ?? "";
-                if (provider.toLowerCase().includes("anthropic") &&
-                    (!params.tools || Object.keys(params.tools).length === 0)) {
-                    args[0] = {
-                        ...params,
-                        tools: { web_search: webSearchTool },
-                    };
-                    logger.debug(`[web-search] Injected web_search tool into ${name} call`);
-                }
-            }
-            return original.apply(this, args);
-        };
-        // Preserve static properties
-        for (const key of Object.getOwnPropertyNames(original)) {
-            if (key !== "length" && key !== "name" && key !== "prototype") {
-                try {
-                    const wrappedWithStatics = wrapped;
-                    const originalWithStatics = original;
-                    wrappedWithStatics[key] = originalWithStatics[key];
-                }
-                catch {
-                    /* read-only */
-                }
-            }
-        }
-        return wrapped;
-    };
-    if (typeof aiModule.generateText === "function") {
-        aiModule.generateText = wrapFn(aiModule.generateText, "generateText");
-    }
-    if (typeof aiModule.streamText === "function") {
-        aiModule.streamText = wrapFn(aiModule.streamText, "streamText");
-    }
-    logger.info("[web-search] Patched ai.generateText/streamText for Anthropic web_search auto-injection");
-}
-// ---------------------------------------------------------------------------
-// Public API
-// ---------------------------------------------------------------------------
-/**
- * Enable Anthropic server-side web search for the given runtime.
- *
- * Call after plugins are registered and prompt optimizations installed.
- */
-export function installAnthropicWebSearch(runtime) {
-    if (!ELIZA_WEB_SEARCH_ENABLED) {
-        logger.info("[web-search] Disabled via ELIZA_WEB_SEARCH env var");
-        return;
-    }
-    if (installedRuntimes.has(runtime))
-        return;
-    installedRuntimes.add(runtime);
-    if (!isAnthropicRuntime(runtime)) {
-        logger.info("[web-search] Non-Anthropic runtime — server-side web search skipped");
-        return;
-    }
-    // Load the web search server tool from @ai-sdk/anthropic
-    let webSearchTool;
-    try {
-        // eslint-disable-next-line @typescript-eslint/no-require-imports
-        const sdk = require("@ai-sdk/anthropic");
-        const tools = sdk.anthropicTools ?? sdk.anthropic?.tools;
-        if (tools?.webSearch_20260209) {
-            webSearchTool = tools.webSearch_20260209();
-        }
-        else if (tools?.webSearch_20250305) {
-            webSearchTool = tools.webSearch_20250305();
-        }
-    }
-    catch (err) {
-        logger.warn(`[web-search] @ai-sdk/anthropic not available: ${err instanceof Error ? err.message : err}`);
-        return;
-    }
-    if (!webSearchTool) {
-        logger.warn("[web-search] @ai-sdk/anthropic has no webSearch tool factory — upgrade @ai-sdk/anthropic");
-        return;
-    }
-    patchAiSdk(webSearchTool);
-    logger.info("[web-search] Anthropic server-side web_search enabled (zero-cost, no key required)");
-}

package/packages/agent/src/security/access.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../../../../../src/security/access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAM3D,sDAAsD;AACtD,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;AA2BhE,wBAAgB,WAAW,CACzB,OAAO,EAAE,aAAa,GAAG,SAAS,EAClC,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,OAAO,CAMT;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,aAAa,GAAG,SAAS,EAClC,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,OAAO,CAAC,OAAO,CAAC,CAElB;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,aAAa,GAAG,SAAS,EAClC,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,OAAO,CAAC,OAAO,CAAC,CAElB;AAED,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,aAAa,GAAG,SAAS,EAClC,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,OAAO,CAAC,OAAO,CAAC,CAmBlB;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,aAAa,GAAG,SAAS,EAClC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,YAAY,EAAE,YAAY,GACzB,OAAO,CAAC,OAAO,CAAC,CAElB"}

package/packages/agent/src/security/access.js

@@ -1,54 +0,0 @@
-import { checkSenderPrivateAccess, hasRoleAccess as coreHasRoleAccess, } from "@elizaos/core";
-function getAccessContext(runtime, message) {
-    if (!runtime ||
-        typeof runtime.agentId !== "string" ||
-        !message ||
-        typeof message.entityId !== "string" ||
-        message.entityId.length === 0) {
-        return null;
-    }
-    return {
-        runtime,
-        message,
-    };
-}
-export function isAgentSelf(runtime, message) {
-    const context = getAccessContext(runtime, message);
-    if (!context) {
-        return false;
-    }
-    return context.message.entityId === context.runtime.agentId;
-}
-export async function hasOwnerAccess(runtime, message) {
-    return coreHasRoleAccess(runtime, message, "OWNER");
-}
-export async function hasAdminAccess(runtime, message) {
-    return coreHasRoleAccess(runtime, message, "ADMIN");
-}
-export async function hasPrivateAccess(runtime, message) {
-    if (await coreHasRoleAccess(runtime, message, "OWNER")) {
-        return true;
-    }
-    const context = getAccessContext(runtime, message);
-    if (!context) {
-        return true;
-    }
-    try {
-        const access = await checkSenderPrivateAccess(context.runtime, context.message);
-        return access?.hasPrivateAccess === true;
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * Check whether the sender has at least the given role in the elizaOS
- * role hierarchy (OWNER > ADMIN > USER > GUEST).
- *
- * Follows the same lenient pattern as plugin-role-gating: when there is
- * no world context (e.g. local API calls), the check falls through and
- * allows the action so local-only usage isn't blocked.
- */
-export async function hasRoleAccess(runtime, message, requiredRole) {
-    return coreHasRoleAccess(runtime, message, requiredRole);
-}

package/packages/agent/src/security/audit-log.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit-log.d.ts","sourceRoot":"","sources":["../../../../../src/security/audit-log.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,iBAAiB,mVAapB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAChE,eAAO,MAAM,gBAAgB,gDAAiD,CAAC;AAC/E,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAQ9D,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;IAC5D,QAAQ,EAAE,aAAa,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;AAoC9D,wBAAgB,cAAc,CAAC,KAAK,GAAE,cAAmB,GAAG,UAAU,EAAE,CAoBvE;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,mBAAmB,GAC9B,MAAM,IAAI,CAKZ;AAQD,qBAAa,eAAe;IAC1B,OAAO,CAAC,OAAO,CAAoB;IACnC,OAAO,CAAC,cAAc,CAAU;IAChC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,IAAI,CAAC,CAA8B;gBAE/B,MAAM,GAAE,cAAmB;IAMvC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,GAAG,IAAI;IAkBlD,sBAAsB,CACpB,SAAS,EAAE,UAAU,GAAG,SAAS,EACjC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAAE,GACjB,IAAI;IAiBP,0BAA0B,CACxB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,GACnD,IAAI;IASP,oBAAoB,CAClB,QAAQ,EAAE,OAAO,GAAG,MAAM,EAC1B,MAAM,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,GACnD,IAAI;IASP,SAAS,CAAC,KAAK,SAAM,GAAG,UAAU,EAAE;IAIpC,SAAS,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,SAAK,GAAG,UAAU,EAAE;IAIzD,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,KAAK,IAAI,IAAI;CAGd"}

package/packages/agent/src/security/audit-log.js

@@ -1,161 +0,0 @@
-/**
- * Append-only audit log for sandbox security events.
- * Never log real secret values — only token IDs and metadata.
- */
-export const AUDIT_EVENT_TYPES = [
-    "sandbox_mode_transition",
-    "secret_token_replacement_outbound",
-    "secret_sanitization_inbound",
-    "privileged_capability_invocation",
-    "policy_decision",
-    "signing_request_submitted",
-    "signing_request_rejected",
-    "signing_request_approved",
-    "plugin_fallback_attempt",
-    "security_kill_switch",
-    "sandbox_lifecycle",
-    "fetch_proxy_error",
-];
-export const AUDIT_SEVERITIES = ["info", "warn", "error", "critical"];
-const DEFAULT_MAX_ENTRIES = 5000;
-const PROCESS_FEED_MAX_ENTRIES = DEFAULT_MAX_ENTRIES;
-const processFeedEntries = [];
-const processFeedSubscribers = new Set();
-function trimEntries(entries, maxEntries) {
-    if (entries.length <= maxEntries)
-        return;
-    const keep = Math.floor(maxEntries / 2);
-    if (keep <= 0) {
-        entries.length = 0;
-        return;
-    }
-    entries.splice(0, entries.length - keep);
-}
-function publishToProcessFeed(entry) {
-    processFeedEntries.push(entry);
-    trimEntries(processFeedEntries, PROCESS_FEED_MAX_ENTRIES);
-    for (const subscriber of processFeedSubscribers) {
-        try {
-            subscriber(entry);
-        }
-        catch {
-            // Ignore subscriber failures so audit recording is never blocked.
-        }
-    }
-}
-function toSinceTimestamp(sinceMs) {
-    if (sinceMs === undefined)
-        return undefined;
-    if (!Number.isFinite(sinceMs))
-        return undefined;
-    return Math.trunc(sinceMs);
-}
-function toBoundedLimit(limit) {
-    if (limit === undefined)
-        return undefined;
-    if (!Number.isFinite(limit))
-        return undefined;
-    return Math.max(1, Math.trunc(limit));
-}
-export function queryAuditFeed(query = {}) {
-    const sinceTimestamp = toSinceTimestamp(query.sinceMs);
-    const boundedLimit = toBoundedLimit(query.limit);
-    let entries = processFeedEntries;
-    if (query.type) {
-        entries = entries.filter((entry) => entry.type === query.type);
-    }
-    if (query.severity) {
-        entries = entries.filter((entry) => entry.severity === query.severity);
-    }
-    if (sinceTimestamp !== undefined) {
-        entries = entries.filter((entry) => Date.parse(entry.timestamp) >= sinceTimestamp);
-    }
-    if (boundedLimit !== undefined) {
-        return entries.slice(-boundedLimit);
-    }
-    return [...entries];
-}
-export function getAuditFeedSize() {
-    return processFeedEntries.length;
-}
-export function subscribeAuditFeed(subscriber) {
-    processFeedSubscribers.add(subscriber);
-    return () => {
-        processFeedSubscribers.delete(subscriber);
-    };
-}
-/** @internal Test-only helper to isolate process-wide audit state between specs. */
-export function __resetAuditFeedForTests() {
-    processFeedEntries.length = 0;
-    processFeedSubscribers.clear();
-}
-export class SandboxAuditLog {
-    entries = [];
-    consoleEnabled;
-    maxEntries;
-    sink;
-    constructor(config = {}) {
-        this.consoleEnabled = config.console ?? true;
-        this.maxEntries = config.maxEntries ?? DEFAULT_MAX_ENTRIES;
-        this.sink = config.sink;
-    }
-    record(entry) {
-        const full = { ...entry, timestamp: new Date().toISOString() };
-        this.entries.push(full);
-        publishToProcessFeed(full);
-        trimEntries(this.entries, this.maxEntries);
-        if (this.consoleEnabled) {
-            const line = `[AUDIT:${full.severity.toUpperCase()}] ${full.type}: ${full.summary}`;
-            if (full.severity === "critical" || full.severity === "error")
-                console.error(line);
-            else if (full.severity === "warn")
-                console.warn(line);
-            else
-                console.log(line);
-        }
-        this.sink?.(full);
-    }
-    recordTokenReplacement(direction, url, tokenIds) {
-        this.record({
-            type: direction === "outbound"
-                ? "secret_token_replacement_outbound"
-                : "secret_sanitization_inbound",
-            summary: `${direction}: ${tokenIds.length} token(s) for ${url}`,
-            metadata: {
-                direction,
-                url,
-                tokenCount: tokenIds.length,
-                tokenIds: tokenIds.join(","),
-            },
-            severity: "info",
-        });
-    }
-    recordCapabilityInvocation(capability, detail, metadata) {
-        this.record({
-            type: "privileged_capability_invocation",
-            summary: `${capability}: ${detail}`,
-            metadata: { capability, ...metadata },
-            severity: "info",
-        });
-    }
-    recordPolicyDecision(decision, reason, metadata) {
-        this.record({
-            type: "policy_decision",
-            summary: `${decision}: ${reason}`,
-            metadata: { decision, reason, ...metadata },
-            severity: decision === "deny" ? "warn" : "info",
-        });
-    }
-    getRecent(count = 100) {
-        return this.entries.slice(-count);
-    }
-    getByType(type, count = 50) {
-        return this.entries.filter((e) => e.type === type).slice(-count);
-    }
-    get size() {
-        return this.entries.length;
-    }
-    clear() {
-        this.entries = [];
-    }
-}

package/packages/agent/src/security/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/security/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC"}

package/packages/agent/src/security/network-policy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"network-policy.d.ts","sourceRoot":"","sources":["../../../../../src/security/network-policy.ts"],"names":[],"mappings":"AAkBA,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKvD;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAajE;AAUD,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAmBvD;AAED,wBAAgB,6BAA6B,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAMjE;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAapD"}

package/packages/agent/src/services/agent-export.d.ts

@@ -1,100 +0,0 @@
-/**
- * Agent Export/Import Service
- *
- * Provides encrypted, portable agent archives for migrating agents between
- * machines. Captures all database state (character, memories, entities,
- * relationships, rooms, participants, worlds, tasks, and optionally logs)
- * into a single password-encrypted binary file (.eliza-agent).
- *
- * Encryption: PBKDF2-SHA256 key derivation + AES-256-GCM
- * Compression: gzip
- *
- * File format (binary):
- *   ELIZA_AGENT_V1\n   (15 bytes magic header)
- *   iterations           (4 bytes uint32 BE — PBKDF2 iteration count)
- *   salt                 (32 bytes — PBKDF2 salt)
- *   iv                   (12 bytes — AES-256-GCM nonce)
- *   tag                  (16 bytes — AES-GCM authentication tag)
- *   ciphertext           (variable — gzip-compressed JSON, encrypted)
- */
-import type { Agent, AgentRuntime, Component, Entity, Log, Memory, Relationship, Room, Task, World } from "@elizaos/core";
-export interface AgentExportOptions {
-    /** Include execution logs in the export. Can be large. Defaults to false. */
-    includeLogs?: boolean;
-}
-export interface AgentExportPayload {
-    version: number;
-    exportedAt: string;
-    sourceAgentId: string;
-    agent: Partial<Agent>;
-    /** Runtime character config (from buildCharacterFromConfig) — may contain
-     *  fields not persisted to the DB agent record (style, topics, adjectives,
-     *  messageExamples, postExamples, knowledge sources, etc.). On import, this
-     *  is merged with the agent record to reconstruct the full character. */
-    characterConfig?: Record<string, unknown>;
-    entities: Entity[];
-    memories: Memory[];
-    components: Component[];
-    rooms: Room[];
-    participants: Array<{
-        entityId: string;
-        roomId: string;
-        userState: string | null;
-    }>;
-    relationships: Relationship[];
-    worlds: World[];
-    tasks: Task[];
-    logs: Log[];
-}
-export interface ImportResult {
-    success: boolean;
-    agentId: string;
-    agentName: string;
-    counts: {
-        memories: number;
-        entities: number;
-        components: number;
-        rooms: number;
-        participants: number;
-        relationships: number;
-        worlds: number;
-        tasks: number;
-        logs: number;
-    };
-}
-export interface ExportSizeEstimate {
-    estimatedBytes: number;
-    memoriesCount: number;
-    entitiesCount: number;
-    roomsCount: number;
-    worldsCount: number;
-    tasksCount: number;
-}
-export declare class AgentExportError extends Error {
-    constructor(message: string);
-}
-/**
- * Export the current agent's full state as a password-encrypted binary file.
- *
- * @param runtime - The running AgentRuntime with an active database adapter
- * @param password - User-provided password for encryption
- * @param options - Export options (e.g., whether to include logs)
- * @returns A Buffer containing the encrypted .eliza-agent file
- */
-export declare function exportAgent(runtime: AgentRuntime, password: string, options?: AgentExportOptions): Promise<Buffer>;
-/**
- * Import an agent from a password-encrypted .eliza-agent file.
- *
- * @param runtime - An AgentRuntime with an active database adapter (the agent
- *                  will be created in this database, not overwriting the current agent)
- * @param fileBuffer - The raw bytes of the .eliza-agent file
- * @param password - The password used when the file was exported
- * @returns An ImportResult describing what was imported
- */
-export declare function importAgent(runtime: AgentRuntime, fileBuffer: Buffer, password: string): Promise<ImportResult>;
-/**
- * Estimate the size of an agent export without actually creating it.
- * Useful for showing the user how large the export will be.
- */
-export declare function estimateExportSize(runtime: AgentRuntime): Promise<ExportSizeEstimate>;
-//# sourceMappingURL=agent-export.d.ts.map

package/packages/agent/src/services/agent-export.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent-export.d.ts","sourceRoot":"","sources":["../../../../../src/services/agent-export.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH,OAAO,KAAK,EACV,KAAK,EACL,YAAY,EACZ,SAAS,EACT,MAAM,EACN,GAAG,EACH,MAAM,EACN,YAAY,EACZ,IAAI,EACJ,IAAI,EAEJ,KAAK,EACN,MAAM,eAAe,CAAC;AAsCvB,MAAM,WAAW,kBAAkB;IACjC,6EAA6E;IAC7E,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACtB;;;6EAGyE;IACzE,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,YAAY,EAAE,KAAK,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,CAAC,CAAC;IACH,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,IAAI,EAAE,GAAG,EAAE,CAAC;CACb;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC;QACd,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAkOD,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AA2eD;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,YAAY,EACrB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,MAAM,CAAC,CA4BjB;AAED;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,YAAY,EACrB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,YAAY,CAAC,CAgFvB;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,kBAAkB,CAAC,CAmD7B"}