@elizaos/agent 2.0.0-beta.2 → 2.0.11-beta.6

package/api/nfa-routes.js

@@ -0,0 +1,125 @@
+var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
+    if (typeof path === "string" && /^\.\.?\//.test(path)) {
+        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
+            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
+        });
+    }
+    return path;
+};
+import { createHash } from "node:crypto";
+import { readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { resolveStateDir } from "@elizaos/core";
+import { readJsonFile } from "../utils/atomic-json.js";
+function emptyMerkleRoot() {
+    return createHash("sha256").update("", "utf8").digest("hex");
+}
+let nfaPlugin;
+async function getNfaPlugin() {
+    if (nfaPlugin !== undefined)
+        return nfaPlugin;
+    try {
+        const pkgName = "@elizaos/plugin-bnb-identity";
+        const mod = await import(__rewriteRelativeImportExtension(/* @vite-ignore */ pkgName));
+        nfaPlugin =
+            typeof mod?.buildMerkleRoot === "function" &&
+                typeof mod?.parseLearnings === "function" &&
+                typeof mod?.sha256 === "function"
+                ? {
+                    buildMerkleRoot: mod.buildMerkleRoot,
+                    parseLearnings: mod.parseLearnings,
+                    sha256: mod.sha256,
+                }
+                : null;
+    }
+    catch {
+        nfaPlugin = null;
+    }
+    return nfaPlugin;
+}
+export async function handleNfaRoutes(ctx) {
+    const { res, method, pathname, json } = ctx;
+    if (method === "GET" && pathname === "/api/nfa/status") {
+        const elizaDir = resolveStateDir();
+        const [nfaRecord, identityRecord] = await Promise.all([
+            readJsonFile(join(elizaDir, "bap578-nfa.json")),
+            readJsonFile(join(elizaDir, "bnb-identity.json")),
+        ]);
+        const bscscanBase = (nfaRecord?.network ?? identityRecord?.network ?? "bsc-testnet") === "bsc"
+            ? "https://bscscan.com"
+            : "https://testnet.bscscan.com";
+        json(res, {
+            nfa: nfaRecord
+                ? {
+                    tokenId: nfaRecord.tokenId,
+                    contractAddress: nfaRecord.contractAddress,
+                    network: nfaRecord.network,
+                    ownerAddress: nfaRecord.ownerAddress,
+                    merkleRoot: nfaRecord.merkleRoot,
+                    mintTxHash: nfaRecord.mintTxHash,
+                    mintedAt: nfaRecord.mintedAt,
+                    lastUpdatedAt: nfaRecord.lastUpdatedAt,
+                    bscscanUrl: `${bscscanBase}/tx/${nfaRecord.mintTxHash}`,
+                }
+                : null,
+            identity: identityRecord
+                ? {
+                    agentId: identityRecord.agentId,
+                    network: identityRecord.network,
+                    ownerAddress: identityRecord.ownerAddress,
+                    agentURI: identityRecord.agentURI,
+                    registeredAt: identityRecord.registeredAt,
+                    scanUrl: `https://${identityRecord.network === "bsc" ? "www" : "testnet"}.8004scan.io/agent/${identityRecord.agentId}`,
+                }
+                : null,
+            configured: !!(nfaRecord || identityRecord),
+        });
+        return true;
+    }
+    if (method === "GET" && pathname === "/api/nfa/learnings") {
+        const learningsPaths = [
+            join(resolveStateDir(), "LEARNINGS.md"),
+            join(process.cwd(), "LEARNINGS.md"),
+        ];
+        let markdown = null;
+        let resolvedSource = null;
+        for (const path of learningsPaths) {
+            try {
+                markdown = await readFile(path, "utf8");
+                resolvedSource = path;
+                break;
+            }
+            catch { }
+        }
+        if (!markdown) {
+            json(res, {
+                entries: [],
+                merkleRoot: emptyMerkleRoot(),
+                totalEntries: 0,
+                source: null,
+            });
+            return true;
+        }
+        const plugin = await getNfaPlugin();
+        if (!plugin) {
+            json(res, {
+                entries: [],
+                merkleRoot: emptyMerkleRoot(),
+                totalEntries: 0,
+                source: null,
+            });
+            return true;
+        }
+        const entries = plugin.parseLearnings(markdown);
+        const leafHashes = entries.map((entry) => entry.hash);
+        const merkleRoot = plugin.buildMerkleRoot(leafHashes);
+        json(res, {
+            entries,
+            merkleRoot,
+            totalEntries: entries.length,
+            source: resolvedSource,
+        });
+        return true;
+    }
+    return false;
+}

package/api/notification-routes.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Notification routes.
+ *
+ * HTTP surface over the runtime `NotificationService` so clients can hydrate
+ * the notification center on load (WS only carries live events), mark items
+ * read, and — for triggers that don't run inside the agent process (external
+ * automations, tests) — create a notification.
+ *
+ * Routes:
+ *
+ *   GET    /api/notifications?unreadOnly=&category=&limit=
+ *     List notifications newest-first. Returns `{ notifications, unreadCount }`.
+ *
+ *   POST   /api/notifications
+ *     Create a notification. Body: { title, body?, category?, priority?,
+ *     deepLink?, groupKey?, source?, data? }. Returns `{ notification }`.
+ *
+ *   POST   /api/notifications/read-all
+ *     Mark every notification read. Returns `{ changed }`.
+ *
+ *   POST   /api/notifications/:id/read
+ *     Mark one notification read. Returns `{ ok }`.
+ *
+ *   DELETE /api/notifications/:id
+ *     Remove one notification. Returns `{ ok }`.
+ *
+ *   DELETE /api/notifications
+ *     Clear the inbox. Returns `{ ok }`.
+ */
+import type http from "node:http";
+import type { RouteHelpers } from "@elizaos/core";
+export interface NotificationRouteState {
+    runtime: {
+        getService: (type: string) => unknown;
+    } | null;
+}
+export declare function handleNotificationRoute(req: http.IncomingMessage, res: http.ServerResponse, pathname: string, method: string, state: NotificationRouteState, helpers: RouteHelpers): Promise<boolean>;
+//# sourceMappingURL=notification-routes.d.ts.map

package/api/notification-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-routes.d.ts","sourceRoot":"","sources":["../../src/api/notification-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAIV,YAAY,EACb,MAAM,eAAe,CAAC;AAGvB,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE;QAAE,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;CAC3D;AAgFD,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,sBAAsB,EAC7B,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,OAAO,CAAC,CA+ElB"}

package/api/notification-routes.js

@@ -0,0 +1,169 @@
+/**
+ * Notification routes.
+ *
+ * HTTP surface over the runtime `NotificationService` so clients can hydrate
+ * the notification center on load (WS only carries live events), mark items
+ * read, and — for triggers that don't run inside the agent process (external
+ * automations, tests) — create a notification.
+ *
+ * Routes:
+ *
+ *   GET    /api/notifications?unreadOnly=&category=&limit=
+ *     List notifications newest-first. Returns `{ notifications, unreadCount }`.
+ *
+ *   POST   /api/notifications
+ *     Create a notification. Body: { title, body?, category?, priority?,
+ *     deepLink?, groupKey?, source?, data? }. Returns `{ notification }`.
+ *
+ *   POST   /api/notifications/read-all
+ *     Mark every notification read. Returns `{ changed }`.
+ *
+ *   POST   /api/notifications/:id/read
+ *     Mark one notification read. Returns `{ ok }`.
+ *
+ *   DELETE /api/notifications/:id
+ *     Remove one notification. Returns `{ ok }`.
+ *
+ *   DELETE /api/notifications
+ *     Clear the inbox. Returns `{ ok }`.
+ */
+import { NotificationService, ServiceType } from "@elizaos/core";
+const CATEGORIES = [
+    "reminder",
+    "task",
+    "workflow",
+    "agent",
+    "approval",
+    "message",
+    "health",
+    "system",
+    "general",
+];
+const PRIORITIES = ["low", "normal", "high", "urgent"];
+function getService(state) {
+    const svc = state.runtime?.getService(ServiceType.NOTIFICATION);
+    return svc instanceof NotificationService ? svc : null;
+}
+function parseLimit(raw) {
+    if (!raw)
+        return undefined;
+    const parsed = Number.parseInt(raw, 10);
+    if (!Number.isFinite(parsed) || parsed < 0)
+        return undefined;
+    return Math.min(parsed, 500);
+}
+function parseCategory(raw) {
+    if (raw && CATEGORIES.includes(raw)) {
+        return raw;
+    }
+    return undefined;
+}
+/** Coerce an untrusted request body into a NotificationInput. */
+function parseNotificationInput(body) {
+    const title = typeof body.title === "string" ? body.title.trim() : "";
+    if (!title) {
+        return { ok: false, message: "title is required" };
+    }
+    const category = typeof body.category === "string" &&
+        CATEGORIES.includes(body.category)
+        ? body.category
+        : undefined;
+    const priority = typeof body.priority === "string" &&
+        PRIORITIES.includes(body.priority)
+        ? body.priority
+        : undefined;
+    const input = {
+        title,
+        body: typeof body.body === "string" ? body.body.trim() || undefined : undefined,
+        category,
+        priority,
+        source: typeof body.source === "string"
+            ? body.source.trim() || undefined
+            : undefined,
+        deepLink: typeof body.deepLink === "string"
+            ? body.deepLink.trim() || undefined
+            : undefined,
+        groupKey: typeof body.groupKey === "string"
+            ? body.groupKey.trim() || undefined
+            : undefined,
+        icon: typeof body.icon === "string" ? body.icon.trim() || undefined : undefined,
+        data: body.data && typeof body.data === "object" && !Array.isArray(body.data)
+            ? body.data
+            : undefined,
+    };
+    return { ok: true, input };
+}
+export async function handleNotificationRoute(req, res, pathname, method, state, helpers) {
+    if (!pathname.startsWith("/api/notifications"))
+        return false;
+    const service = getService(state);
+    if (!service) {
+        // The runtime is up but the notification service isn't registered yet
+        // (very early boot). Serve an empty inbox rather than 500 so the UI
+        // degrades gracefully and retries.
+        if (method === "GET" && pathname === "/api/notifications") {
+            helpers.json(res, { notifications: [], unreadCount: 0 });
+            return true;
+        }
+        helpers.error(res, "notification service not ready", 503);
+        return true;
+    }
+    // ── GET /api/notifications ────────────────────────────────────────
+    if (method === "GET" && pathname === "/api/notifications") {
+        const url = new URL(req.url ?? pathname, "http://localhost");
+        const notifications = service.list({
+            unreadOnly: url.searchParams.get("unreadOnly") === "true",
+            category: parseCategory(url.searchParams.get("category")),
+            limit: parseLimit(url.searchParams.get("limit")),
+        });
+        helpers.json(res, {
+            notifications,
+            unreadCount: service.getUnreadCount(),
+        });
+        return true;
+    }
+    // ── POST /api/notifications ───────────────────────────────────────
+    if (method === "POST" && pathname === "/api/notifications") {
+        const body = await helpers.readJsonBody(req, res, {
+            maxBytes: 32 * 1024,
+        });
+        if (body === null)
+            return true;
+        const parsed = parseNotificationInput(body);
+        if (!parsed.ok) {
+            helpers.error(res, parsed.message, 400);
+            return true;
+        }
+        const notification = await service.notify(parsed.input);
+        helpers.json(res, { notification }, 201);
+        return true;
+    }
+    // ── POST /api/notifications/read-all ──────────────────────────────
+    if (method === "POST" && pathname === "/api/notifications/read-all") {
+        const changed = await service.markAllRead();
+        helpers.json(res, { changed });
+        return true;
+    }
+    // ── POST /api/notifications/:id/read ──────────────────────────────
+    const readMatch = pathname.match(/^\/api\/notifications\/([^/]+)\/read$/);
+    if (method === "POST" && readMatch) {
+        const ok = await service.markRead(decodeURIComponent(readMatch[1]));
+        helpers.json(res, { ok });
+        return true;
+    }
+    // ── DELETE /api/notifications ─────────────────────────────────────
+    if (method === "DELETE" && pathname === "/api/notifications") {
+        await service.clear();
+        helpers.json(res, { ok: true });
+        return true;
+    }
+    // ── DELETE /api/notifications/:id ─────────────────────────────────
+    const idMatch = pathname.match(/^\/api\/notifications\/([^/]+)$/);
+    if (method === "DELETE" && idMatch) {
+        const ok = await service.remove(decodeURIComponent(idMatch[1]));
+        helpers.json(res, { ok });
+        return true;
+    }
+    helpers.error(res, "notification route not found", 404);
+    return true;
+}

package/api/owner-contact-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-contact-helpers.d.ts","sourceRoot":"","sources":["../../src/api/owner-contact-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,KAAK,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAC7C,MAAM,CAAC,EAAE;QACP,QAAQ,CAAC,EAAE;YACT,aAAa,CAAC,EAAE,MAAM,CACpB,MAAM,EACN;gBAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;gBAAC,SAAS,CAAC,EAAE,MAAM,CAAC;gBAAC,MAAM,CAAC,EAAE,MAAM,CAAA;aAAE,CAC3D,CAAC;YACF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;SACxB,CAAC;QACF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH,CAAC;AAEF,MAAM,WAAW,kBAAkB;IACjC,sGAAsG;IACtG,MAAM,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAoCT"}

package/api/parse-action-block.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Local compatibility type for CoordinationLLMResponse — removed from
+ * @elizaos/plugin-agent-orchestrator 2.x.
+ */
+export interface CoordinationLLMResponse {
+    action: string;
+    reasoning: string;
+    response?: string;
+    useKeys?: boolean;
+    keys?: string[];
+    /**
+     * Set when `action === "permission_request"`. The chat renderer consumes
+     * this payload to render an inline `<PermissionCard>` below the message.
+     */
+    permissionRequest?: ParsedPermissionRequest;
+}
+import { type PermissionId } from "@elizaos/shared";
+/**
+ * Parsed shape for the `permission_request` action. The agent emits this
+ * inline alongside its natural-language response; the chat surface renders
+ * a permission card and (after grant) the agent retries the original action.
+ */
+export interface ParsedPermissionRequest {
+    permission: PermissionId;
+    reason: string;
+    feature: string;
+    fallbackOffered: boolean;
+    fallbackLabel?: string;
+}
+/** Console bridge exposed by PTYService for terminal I/O. */
+export interface ConsoleBridge {
+    on(event: string, listener: (...args: unknown[]) => void): void;
+    off(event: string, listener: (...args: unknown[]) => void): void;
+    writeRaw(sessionId: string, data: string): void;
+    resize(sessionId: string, cols: number, rows: number): void;
+}
+/** PTY service interface (accessed via runtime.getService). */
+export interface PTYService {
+    consoleBridge?: ConsoleBridge;
+    stopSession?(sessionId: string): Promise<void>;
+}
+/**
+ * Strip JSON action blocks from text before displaying in chat.
+ * Handles both fenced (```json ... ```) and bare JSON formats.
+ */
+export declare function stripActionBlockFromDisplay(text: string): string;
+/**
+ * Parse a JSON action block from Eliza's natural language response.
+ * Looks for a fenced ```json block first, then bare JSON with "action" key.
+ * Returns null if no valid action block is found.
+ */
+export declare function parseActionBlock(text: string): CoordinationLLMResponse | null;
+//# sourceMappingURL=parse-action-block.d.ts.map

package/api/parse-action-block.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-action-block.d.ts","sourceRoot":"","sources":["../../src/api/parse-action-block.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,uBAAuB,CAAC;CAC7C;AAED,OAAO,EAAkB,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEpE;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,YAAY,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,6DAA6D;AAC7D,MAAM,WAAW,aAAa;IAC5B,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,IAAI,CAAC;IAChE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,IAAI,CAAC;IACjE,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAChD,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7D;AAED,+DAA+D;AAC/D,MAAM,WAAW,UAAU;IACzB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,WAAW,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD;AAyGD;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAmChE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,uBAAuB,GAAG,IAAI,CAgD7E"}

package/api/pending-request-map.d.ts

@@ -0,0 +1,30 @@
+/**
+ * PendingRequestMap — correlates async agent→view interact requests with their results.
+ *
+ * The server registers a pending request before broadcasting the WS message to
+ * the frontend.  When the frontend sends back a `view:interact:result` message
+ * the server calls `resolve()` which fulfils the waiting promise.  A timer
+ * fires automatically after `timeoutMs` ms to avoid hanging the HTTP handler.
+ */
+export interface ViewInteractResult {
+    requestId: string;
+    success: boolean;
+    result?: unknown;
+    error?: string;
+}
+export declare class PendingRequestMap {
+    private readonly map;
+    /**
+     * Register a pending request and return a Promise that resolves when the
+     * frontend sends the result back (or rejects on timeout).
+     */
+    waitFor(requestId: string, timeoutMs: number): Promise<ViewInteractResult>;
+    /**
+     * Resolve a pending request with the given result.
+     * Ignored when the requestId is unknown (e.g. already timed out).
+     */
+    resolve(requestId: string, result: ViewInteractResult): void;
+    /** Number of in-flight requests. Useful for diagnostics. */
+    get size(): number;
+}
+//# sourceMappingURL=pending-request-map.d.ts.map

package/api/pending-request-map.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-request-map.d.ts","sourceRoot":"","sources":["../../src/api/pending-request-map.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAOhB;IAEJ;;;OAGG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAe1E;;;OAGG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,GAAG,IAAI;IAQ5D,4DAA4D;IAC5D,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF"}

package/api/pending-request-map.js

@@ -0,0 +1,40 @@
+/**
+ * PendingRequestMap — correlates async agent→view interact requests with their results.
+ *
+ * The server registers a pending request before broadcasting the WS message to
+ * the frontend.  When the frontend sends back a `view:interact:result` message
+ * the server calls `resolve()` which fulfils the waiting promise.  A timer
+ * fires automatically after `timeoutMs` ms to avoid hanging the HTTP handler.
+ */
+export class PendingRequestMap {
+    map = new Map();
+    /**
+     * Register a pending request and return a Promise that resolves when the
+     * frontend sends the result back (or rejects on timeout).
+     */
+    waitFor(requestId, timeoutMs) {
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                this.map.delete(requestId);
+                reject(new Error(`View interact request "${requestId}" timed out after ${timeoutMs}ms`));
+            }, timeoutMs);
+            this.map.set(requestId, { resolve, reject, timer });
+        });
+    }
+    /**
+     * Resolve a pending request with the given result.
+     * Ignored when the requestId is unknown (e.g. already timed out).
+     */
+    resolve(requestId, result) {
+        const pending = this.map.get(requestId);
+        if (!pending)
+            return;
+        clearTimeout(pending.timer);
+        this.map.delete(requestId);
+        pending.resolve(result);
+    }
+    /** Number of in-flight requests. Useful for diagnostics. */
+    get size() {
+        return this.map.size;
+    }
+}

package/api/permission-request-prompt.d.ts

@@ -0,0 +1,19 @@
+/**
+ * System-prompt fragment documenting the `permission_request` action block.
+ *
+ * Lives next to the canonical action-block parser so emissions and
+ * documentation stay in sync. Imported into the swarm coordinator prompt and
+ * (optionally) the chat coordinator's character system block so the planner
+ * knows when — and crucially, when NOT — to emit a `permission_request`.
+ *
+ * Hard rules:
+ *   - Emit ONLY when the user just asked for something AND the latest
+ *     tool/action result returned `{ ok: false, reason: 'permission',
+ *     permission: <id> }`.
+ *   - NEVER preemptively. NEVER for permissions surfaced in `pending()` unless
+ *     the user just touched a feature that needs that permission.
+ *   - NEVER if the user already declined this permission in the last hour for
+ *     the same feature.
+ */
+export declare const PERMISSION_REQUEST_PROMPT_FRAGMENT = "permission_request \u2014 REQUEST a system-level permission inline in chat.\n\nUse ONLY when both of these are true:\n  1. The user just asked for something that requires a permission, AND\n  2. The most recent tool/action result returned a permission failure\n     (e.g. { ok: false, reason: \"permission\", permission: \"<id>\" }).\n\nDo NOT emit:\n  - preemptively, before the user touches a permission-gated feature\n  - for permissions you saw in PENDING PERMISSIONS unless the user just\n    asked for a feature that needs that exact permission\n  - if the user already declined this permission in the last hour for the\n    same feature\n\nRequired fields:\n  - permission: one of accessibility | screen-recording | reminders |\n    calendar | health | screentime | contacts | notes | microphone |\n    camera | location | shell | website-blocking | notifications |\n    full-disk | automation | speech-recognition | photos | phone |\n    messages | wifi | bluetooth | app-blocking | usage-access |\n    overlay | write-settings | local-network | battery-optimization\n  - reason: short, user-facing, names the actual thing they asked for\n    (e.g. \"Add 'pick up groceries' to your Apple Reminders.\")\n  - feature: dotted \"<app>.<area>.<action>\" identifier\n    (e.g. \"lifeops.reminders.create\")\n\nOptional:\n  - fallback_offered: true ONLY when a real fallback exists\n  - fallback_label: button label for the fallback (required when\n    fallback_offered === true)\n\nExample:\n  {\"action\":\"permission_request\",\"reasoning\":\"reminders denied for create\",\n   \"permission\":\"reminders\",\n   \"reason\":\"I'd like to add 'pick up groceries' to your Apple Reminders.\",\n   \"feature\":\"lifeops.reminders.create\",\n   \"fallback_offered\":true,\n   \"fallback_label\":\"Use internal reminders instead\"}";
+//# sourceMappingURL=permission-request-prompt.d.ts.map

package/api/permission-request-prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-request-prompt.d.ts","sourceRoot":"","sources":["../../src/api/permission-request-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,eAAO,MAAM,kCAAkC,0yDAqCO,CAAC"}

package/api/permission-request-prompt.js

@@ -0,0 +1,55 @@
+/**
+ * System-prompt fragment documenting the `permission_request` action block.
+ *
+ * Lives next to the canonical action-block parser so emissions and
+ * documentation stay in sync. Imported into the swarm coordinator prompt and
+ * (optionally) the chat coordinator's character system block so the planner
+ * knows when — and crucially, when NOT — to emit a `permission_request`.
+ *
+ * Hard rules:
+ *   - Emit ONLY when the user just asked for something AND the latest
+ *     tool/action result returned `{ ok: false, reason: 'permission',
+ *     permission: <id> }`.
+ *   - NEVER preemptively. NEVER for permissions surfaced in `pending()` unless
+ *     the user just touched a feature that needs that permission.
+ *   - NEVER if the user already declined this permission in the last hour for
+ *     the same feature.
+ */
+export const PERMISSION_REQUEST_PROMPT_FRAGMENT = `permission_request — REQUEST a system-level permission inline in chat.
+
+Use ONLY when both of these are true:
+  1. The user just asked for something that requires a permission, AND
+  2. The most recent tool/action result returned a permission failure
+     (e.g. { ok: false, reason: "permission", permission: "<id>" }).
+
+Do NOT emit:
+  - preemptively, before the user touches a permission-gated feature
+  - for permissions you saw in PENDING PERMISSIONS unless the user just
+    asked for a feature that needs that exact permission
+  - if the user already declined this permission in the last hour for the
+    same feature
+
+Required fields:
+  - permission: one of accessibility | screen-recording | reminders |
+    calendar | health | screentime | contacts | notes | microphone |
+    camera | location | shell | website-blocking | notifications |
+    full-disk | automation | speech-recognition | photos | phone |
+    messages | wifi | bluetooth | app-blocking | usage-access |
+    overlay | write-settings | local-network | battery-optimization
+  - reason: short, user-facing, names the actual thing they asked for
+    (e.g. "Add 'pick up groceries' to your Apple Reminders.")
+  - feature: dotted "<app>.<area>.<action>" identifier
+    (e.g. "lifeops.reminders.create")
+
+Optional:
+  - fallback_offered: true ONLY when a real fallback exists
+  - fallback_label: button label for the fallback (required when
+    fallback_offered === true)
+
+Example:
+  {"action":"permission_request","reasoning":"reminders denied for create",
+   "permission":"reminders",
+   "reason":"I'd like to add 'pick up groceries' to your Apple Reminders.",
+   "feature":"lifeops.reminders.create",
+   "fallback_offered":true,
+   "fallback_label":"Use internal reminders instead"}`;

package/api/permissions-routes-extra.d.ts

@@ -0,0 +1,28 @@
+import type http from "node:http";
+import type { AgentAutomationMode, ReadJsonBodyOptions } from "@elizaos/shared";
+import type { ElizaConfig } from "../config/config.ts";
+export interface PermissionsExtraRouteContext {
+    req: http.IncomingMessage;
+    res: http.ServerResponse;
+    method: string;
+    pathname: string;
+    state: {
+        config: ElizaConfig;
+        agentAutomationMode?: AgentAutomationMode;
+    };
+    json: (res: http.ServerResponse, data: unknown, status?: number) => void;
+    error: (res: http.ServerResponse, message: string, status?: number) => void;
+    readJsonBody: <T extends object>(req: http.IncomingMessage, res: http.ServerResponse, options?: ReadJsonBodyOptions) => Promise<T | null>;
+    saveElizaConfig: (config: ElizaConfig) => void;
+    resolveTradePermissionMode: (config: ElizaConfig) => string;
+    canUseLocalTradeExecution: (mode: string, isAgent: boolean, scope?: unknown, options?: {
+        consumeAgentQuota: boolean;
+    }) => boolean;
+    parseAgentAutomationMode: (value: unknown) => AgentAutomationMode | null;
+    persistAgentAutomationMode: (state: {
+        config: ElizaConfig;
+        agentAutomationMode?: AgentAutomationMode;
+    }, mode: AgentAutomationMode) => void;
+}
+export declare function handlePermissionsExtraRoutes(ctx: PermissionsExtraRouteContext): Promise<boolean>;
+//# sourceMappingURL=permissions-routes-extra.d.ts.map

package/api/permissions-routes-extra.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions-routes-extra.d.ts","sourceRoot":"","sources":["../../src/api/permissions-routes-extra.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAIvD,MAAM,WAAW,4BAA4B;IAC3C,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC;IAC1B,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE;QACL,MAAM,EAAE,WAAW,CAAC;QACpB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;KAC3C,CAAC;IACF,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACzE,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5E,YAAY,EAAE,CAAC,CAAC,SAAS,MAAM,EAC7B,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,OAAO,CAAC,EAAE,mBAAmB,KAC1B,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACvB,eAAe,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,IAAI,CAAC;IAC/C,0BAA0B,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,MAAM,CAAC;IAC5D,yBAAyB,EAAE,CACzB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,OAAO,EAChB,KAAK,CAAC,EAAE,OAAO,EACf,OAAO,CAAC,EAAE;QAAE,iBAAiB,EAAE,OAAO,CAAA;KAAE,KACrC,OAAO,CAAC;IACb,wBAAwB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,mBAAmB,GAAG,IAAI,CAAC;IACzE,0BAA0B,EAAE,CAC1B,KAAK,EAAE;QAAE,MAAM,EAAE,WAAW,CAAC;QAAC,mBAAmB,CAAC,EAAE,mBAAmB,CAAA;KAAE,EACzE,IAAI,EAAE,mBAAmB,KACtB,IAAI,CAAC;CACX;AAMD,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,4BAA4B,GAChC,OAAO,CAAC,OAAO,CAAC,CA8FlB"}

package/api/permissions-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions-routes.d.ts","sourceRoot":"","sources":["../../src/api/permissions-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,KAAK,EAIV,eAAe,EAGhB,MAAM,iBAAiB,CAAC;AASzB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAEpE,UAAU,8BAA+B,SAAQ,oBAAoB;IACnE,QAAQ,CAAC,EAAE;QACT,YAAY,CAAC,EAAE,OAAO,CAAC;KACxB,CAAC;IACF,OAAO,CAAC,EAAE;QACR,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,OAAO,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC,CAAC;KACjD,CAAC;CACH;AA+SD,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IAC7B,MAAM,EAAE,8BAA8B,CAAC;IACvC,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACnD,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,sBAAuB,SAAQ,mBAAmB;IACjE,KAAK,EAAE,oBAAoB,CAAC;IAC5B,UAAU,EAAE,CAAC,MAAM,EAAE,8BAA8B,KAAK,IAAI,CAAC;IAC7D,sBAAsB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CAClD;AAED,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,sBAAsB,GAC1B,OAAO,CAAC,OAAO,CAAC,CA8QlB"}