@elizaos/agent 2.0.3-beta.2 → 2.0.3-beta.3

package/runtime/actions/web-search.d.ts

@@ -0,0 +1,32 @@
+/**
+ * WEB_SEARCH — keyless inline general web search.
+ *
+ * Queries the keyless Parallel.ai search MCP (with an Exa fallback) — the same
+ * backends the bundled opencode `websearch` tool uses — but INLINE this turn,
+ * with no coding sub-agent spawn. Gives every runtime a fast, general web
+ * search ("find me X", "latest on Y", "best Z", "who/what/where is …") that
+ * needs no API key and no backing service, returning ranked results
+ * (title / url / snippet) the model answers from.
+ *
+ * Sibling of {@link module:runtime/actions/web-fetch}: WEB_FETCH reads a value
+ * from a URL you can name; WEB_SEARCH finds the pages when you can't. Routing
+ * an open-ended lookup through a coding sub-agent is slow, re-spawns, and risks
+ * leaking the weak model's tool-call markup — this answers it in one hop.
+ *
+ * Inline search is independently controlled by `ELIZA_INLINE_WEB_SEARCH`.
+ * `ELIZA_WEB_SEARCH=0|false|off` remains a legacy master kill switch for all
+ * web-search surfaces.
+ *
+ * @module runtime/actions/web-search
+ */
+import { type Action } from "@elizaos/core";
+/**
+ * Capability gate for the INLINE keyless web-search action. Inline WEB_SEARCH
+ * is the default surface because it goes through Eliza action routing/audit.
+ * Provider-native server-side search is an explicit opt-in with
+ * `ELIZA_SERVER_WEB_SEARCH=1`; when that native surface is enabled, inline stays
+ * off unless `ELIZA_INLINE_WEB_SEARCH` explicitly overrides it.
+ */
+export declare function isWebSearchEnabled(): boolean;
+export declare const webSearch: Action & Record<string, unknown>;
+//# sourceMappingURL=web-search.d.ts.map

package/runtime/actions/web-search.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-search.d.ts","sourceRoot":"","sources":["../../../src/runtime/actions/web-search.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EACL,KAAK,MAAM,EAQZ,MAAM,eAAe,CAAC;AA8BvB;;;;;;GAMG;AACH,wBAAgB,kBAAkB,IAAI,OAAO,CAQ5C;AA4ED,eAAO,MAAM,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAgItD,CAAC"}

package/runtime/actions/web-search.js

@@ -0,0 +1,245 @@
+/**
+ * WEB_SEARCH — keyless inline general web search.
+ *
+ * Queries the keyless Parallel.ai search MCP (with an Exa fallback) — the same
+ * backends the bundled opencode `websearch` tool uses — but INLINE this turn,
+ * with no coding sub-agent spawn. Gives every runtime a fast, general web
+ * search ("find me X", "latest on Y", "best Z", "who/what/where is …") that
+ * needs no API key and no backing service, returning ranked results
+ * (title / url / snippet) the model answers from.
+ *
+ * Sibling of {@link module:runtime/actions/web-fetch}: WEB_FETCH reads a value
+ * from a URL you can name; WEB_SEARCH finds the pages when you can't. Routing
+ * an open-ended lookup through a coding sub-agent is slow, re-spawns, and risks
+ * leaking the weak model's tool-call markup — this answers it in one hop.
+ *
+ * Inline search is independently controlled by `ELIZA_INLINE_WEB_SEARCH`.
+ * `ELIZA_WEB_SEARCH=0|false|off` remains a legacy master kill switch for all
+ * web-search surfaces.
+ *
+ * @module runtime/actions/web-search
+ */
+import { logger, } from "@elizaos/core";
+import { performGuardedHttpPost } from "../custom-actions.js";
+/** Keyless MCP search endpoints (no PARALLEL_API_KEY / EXA_API_KEY required). */
+const PARALLEL_MCP_URL = "https://search.parallel.ai/mcp";
+const EXA_MCP_URL = "https://mcp.exa.ai/mcp";
+/**
+ * Body read cap. Must comfortably exceed a full MCP search payload — 6-10
+ * results with livecrawled excerpts can run tens of KB — so the JSON-RPC / SSE
+ * envelope is never truncated mid-object (a truncated body fails to parse and
+ * would look like "no results"). The model only ever sees the first
+ * WEB_SEARCH_RESULT_CHARS of the extracted text.
+ */
+const WEB_SEARCH_READ_CHARS = 262_144;
+/** Cap of result text handed back to the model. */
+const WEB_SEARCH_RESULT_CHARS = 4_000;
+const DEFAULT_NUM_RESULTS = 6;
+function readBooleanEnv(name) {
+    const raw = process.env[name]?.trim().toLowerCase();
+    if (raw === undefined || raw.length === 0)
+        return undefined;
+    if (raw === "0" || raw === "false" || raw === "off" || raw === "no") {
+        return false;
+    }
+    if (raw === "1" || raw === "true" || raw === "on" || raw === "yes") {
+        return true;
+    }
+    return undefined;
+}
+/**
+ * Capability gate for the INLINE keyless web-search action. Inline WEB_SEARCH
+ * is the default surface because it goes through Eliza action routing/audit.
+ * Provider-native server-side search is an explicit opt-in with
+ * `ELIZA_SERVER_WEB_SEARCH=1`; when that native surface is enabled, inline stays
+ * off unless `ELIZA_INLINE_WEB_SEARCH` explicitly overrides it.
+ */
+export function isWebSearchEnabled() {
+    const master = readBooleanEnv("ELIZA_WEB_SEARCH");
+    if (master === false)
+        return false;
+    const inline = readBooleanEnv("ELIZA_INLINE_WEB_SEARCH");
+    if (inline !== undefined)
+        return inline;
+    return readBooleanEnv("ELIZA_SERVER_WEB_SEARCH") !== true;
+}
+function readParams(options) {
+    const params = options
+        ?.parameters;
+    if (!params || typeof params !== "object")
+        return {};
+    const query = params.query ?? params.q ?? params.objective;
+    const rawNum = params.numResults ?? params.num_results;
+    const n = typeof rawNum === "number"
+        ? rawNum
+        : Number.parseInt(String(rawNum ?? ""), 10);
+    return {
+        query: typeof query === "string" ? query.trim() : undefined,
+        numResults: Number.isFinite(n) && n > 0 ? Math.min(n, 10) : undefined,
+    };
+}
+/**
+ * Extract the human-readable result text from an MCP `tools/call` response. The
+ * body is either a JSON-RPC object or an SSE stream of `data:` lines; both wrap
+ * the payload at `result.content[].text`. A JSON-RPC `error` envelope or a
+ * tool-level `result.isError` is treated as a failure (returns undefined) — NOT
+ * mistaken for a search result — so the caller falls back to the other provider
+ * instead of handing the model an error string as if it were results.
+ */
+function parseMcpResultText(body) {
+    const fromPayload = (payload) => {
+        const trimmed = payload.trim();
+        if (!trimmed.startsWith("{"))
+            return undefined;
+        try {
+            const data = JSON.parse(trimmed);
+            if (data.error || data.result?.isError)
+                return undefined;
+            return data.result?.content?.find((item) => item.text)?.text;
+        }
+        catch {
+            return undefined;
+        }
+    };
+    const direct = fromPayload(body);
+    if (direct)
+        return direct;
+    for (const line of body.split("\n")) {
+        if (!line.startsWith("data: "))
+            continue;
+        const parsed = fromPayload(line.slice(6));
+        if (parsed)
+            return parsed;
+    }
+    return undefined;
+}
+async function callSearchMcp(url, toolName, args) {
+    const body = JSON.stringify({
+        jsonrpc: "2.0",
+        id: 1,
+        method: "tools/call",
+        params: { name: toolName, arguments: args },
+    });
+    const result = await performGuardedHttpPost(url, {
+        body,
+        headers: { Accept: "application/json, text/event-stream" },
+        maxChars: WEB_SEARCH_READ_CHARS,
+    });
+    if (!result.ok || result.blocked)
+        return undefined;
+    return parseMcpResultText(result.text);
+}
+export const webSearch = {
+    name: "WEB_SEARCH",
+    similes: [
+        "SEARCH_WEB",
+        "WEB_QUERY",
+        "FIND_ONLINE",
+        "SEARCH_INTERNET",
+        "LOOKUP_ONLINE",
+    ],
+    // No context gate. An empty anyOf always passes the context-gate
+    // (context-gates.ts), so this one general web tool is a candidate on EVERY
+    // turn and is selected purely by semantic retrieval over its name / similes /
+    // description. That makes it surface for any information-seeking query —
+    // recommendations, facts, prices, news, current events — regardless of
+    // whether Stage-1 labeled the turn "web" or "simple", with no keyword list.
+    contexts: [],
+    suppressInitialMessage: true,
+    description: "Search the open web and answer from the results. " +
+        "Use this for any question that needs current, real-world, or external information — prices, exchange rates, weather, sports scores, stock/crypto values, news, current events, recommendations ('best X', 'top Y'), facts about people, places, products, or companies, 'what/who/where/when is …', 'latest on …', 'how to …'. " +
+        "Returns ranked results (title, url, snippet) inline THIS turn. The snippets contain the answer — read them and answer the user directly and completely right now, citing a source; do not promise to look further. " +
+        "Keyless and fast; no API key and no coding sub-agent required.",
+    parameters: [
+        {
+            name: "query",
+            description: "The search query in natural language (e.g. 'highest rated ramen shop in Tokyo').",
+            required: true,
+            schema: { type: "string" },
+        },
+        {
+            name: "numResults",
+            description: "Optional number of results to return (default 6, max 10).",
+            required: false,
+            schema: { type: "number" },
+        },
+    ],
+    validate: async () => isWebSearchEnabled(),
+    handler: async (_runtime, _message, _state, options, callback) => {
+        const { query, numResults } = readParams(options);
+        if (!query) {
+            const text = "Missing required parameter 'query'.";
+            callback?.({ text });
+            return { text, success: false, data: { actionName: "WEB_SEARCH" } };
+        }
+        const n = numResults ?? DEFAULT_NUM_RESULTS;
+        try {
+            // Parallel.ai primary, Exa fallback — both keyless, both general.
+            let results = await callSearchMcp(PARALLEL_MCP_URL, "web_search", {
+                objective: query,
+                search_queries: [query],
+            });
+            let provider = "parallel";
+            if (!results) {
+                results = await callSearchMcp(EXA_MCP_URL, "web_search_exa", {
+                    query,
+                    type: "auto",
+                    numResults: n,
+                    livecrawl: "fallback",
+                });
+                provider = "exa";
+            }
+            if (!results) {
+                const text = `No web search results for "${query}".`;
+                callback?.({ text });
+                return {
+                    text,
+                    success: false,
+                    data: { actionName: "WEB_SEARCH", query },
+                };
+            }
+            const value = results.slice(0, WEB_SEARCH_RESULT_CHARS);
+            const content = {
+                text: value,
+                actions: ["WEB_SEARCH"],
+                data: { actionName: "WEB_SEARCH", query, provider, value },
+            };
+            callback?.(content);
+            return {
+                text: value,
+                success: true,
+                data: { actionName: "WEB_SEARCH", query, provider, value },
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            logger.warn(`[web-search] error for "${query}": ${message}`);
+            const text = `Web search failed for "${query}": ${message}`;
+            callback?.({ text });
+            return {
+                text,
+                success: false,
+                data: { actionName: "WEB_SEARCH", query },
+                error: message,
+            };
+        }
+    },
+    examples: [
+        [
+            {
+                name: "{{user}}",
+                content: {
+                    text: "what's the highest rated ramen shop in tokyo right now?",
+                },
+            },
+            {
+                name: "{{agent}}",
+                content: {
+                    text: "",
+                    action: "WEB_SEARCH",
+                    actionParams: { query: "highest rated ramen shop in Tokyo" },
+                },
+            },
+        ],
+    ],
+};

package/runtime/advanced-capabilities-config.d.ts

@@ -1,4 +1,4 @@
-import type { ElizaConfig } from "../config/config.ts";
+import type { ElizaConfig } from "../config/config.js";
 export declare const ADVANCED_CAPABILITY_PLUGIN_IDS: readonly ["experience", "todos", "personality"];
 export type AdvancedCapabilityPluginId = (typeof ADVANCED_CAPABILITY_PLUGIN_IDS)[number];
 export declare function isAdvancedCapabilityPluginId(pluginId: string): pluginId is AdvancedCapabilityPluginId;

package/runtime/boot-telemetry.d.ts

@@ -1,4 +1,4 @@
-import type { BootSummary } from "./boot-timer.ts";
+import type { BootSummary } from "./boot-timer.js";
 /**
  * Persist a boot run: enrich the boot summary with process memory + uptime and
  * write a timestamped record plus `latest.json` under

package/runtime/conversation-compactor-runtime.d.ts

@@ -25,7 +25,7 @@
  * direct prompt calls that do not pass through message-state composition.
  */
 import type { AgentRuntime, JsonValue, Memory, MessageHistoryCompactionHookResult, State } from "@elizaos/core";
-import { type CompactionStats, type CompactorMessage, type CompactorModelCall, type CompactorTranscript } from "./conversation-compactor.types.ts";
+import { type CompactionStats, type CompactorMessage, type CompactorModelCall, type CompactorTranscript } from "./conversation-compactor.types.js";
 export declare const STRATEGY_NAMES: readonly ["naive-summary", "structured-state", "hierarchical-summary", "hybrid-ledger"];
 export type StrategyName = (typeof STRATEGY_NAMES)[number];
 export declare const DEFAULT_CONVERSATION_COMPACTOR_STRATEGY: StrategyName;

package/runtime/conversation-compactor-runtime.js

@@ -792,7 +792,7 @@ function syntheticCompactionMemory(args) {
             tags: ["compaction", "conversation-summary"],
             strategy: args.strategy,
             hookSource: args.source,
-            telemetry: args.telemetry,
+            telemetry: JSON.parse(JSON.stringify(args.telemetry)),
         },
     };
 }

package/runtime/conversation-compactor.d.ts

@@ -13,7 +13,7 @@
  *   - the trailing N messages (default 6) verbatim
  *   - tool_call / tool_result pairing across the boundary
  */
-import { type Compactor, type CompactorMessage } from "./conversation-compactor.types.ts";
+import { type Compactor, type CompactorMessage } from "./conversation-compactor.types.js";
 /**
  * Identify the index that splits compacted-region (indices < boundary) from
  * preserved-tail (indices >= boundary), shifting the boundary outward (toward

package/runtime/core-plugins.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core-plugins.d.ts","sourceRoot":"","sources":["../../src/runtime/core-plugins.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAGjD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAIhD,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAahD,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,4BAA4B,EAAE,SAAS,MAAM,EAIzD,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,gCAAgC,EAAE,SAAS,MAAM,EAI7D,CAAC;AAEF,iGAAiG;AACjG,eAAO,MAAM,YAAY,EAAE,SAAS,MAAM,EAqBzC,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAQ9C,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,EAAE,SAAS,MAAM,EA4BvD,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAGlD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAElD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EA4BlD,CAAC"}
+{"version":3,"file":"core-plugins.d.ts","sourceRoot":"","sources":["../../src/runtime/core-plugins.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAGjD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAahD,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAahD,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,4BAA4B,EAAE,SAAS,MAAM,EAIzD,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,gCAAgC,EAAE,SAAS,MAAM,EAI7D,CAAC;AAEF,iGAAiG;AACjG,eAAO,MAAM,YAAY,EAAE,SAAS,MAAM,EAqBzC,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAQ9C,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,EAAE,SAAS,MAAM,EA4BvD,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAGlD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAElD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EA4BlD,CAAC"}

package/runtime/core-plugins.js

@@ -38,6 +38,15 @@ export const MOBILE_CORE_PLUGINS = [
     "@elizaos/plugin-sql",
     "@elizaos/plugin-background-runner",
     "@elizaos/plugin-device-filesystem",
+    // Screen understanding on mobile (EPIC #9105): the GET_SCREEN op + the
+    // renderer-pulled screen-capture bridge + the IMAGE_DESCRIPTION describe
+    // path. plugin-vision is now mobile-safe — `sharp` is lazy-loaded with a
+    // pure-JS fallback and the native YOLO/face detectors are dynamic-imported,
+    // so module-eval no longer pulls a native addon. VisionService degrades
+    // gracefully on a phone (camera mode finds no capture tool → warns, never
+    // starts a processing loop), and its computeruse OCR/set-of-marks bridges
+    // are best-effort dynamic imports that no-op without plugin-computeruse.
+    "@elizaos/plugin-vision",
 ];
 /**
  * View-providing plugins that must register their `/api/views` entries on EVERY

package/runtime/custom-actions.d.ts

@@ -7,7 +7,7 @@
  * @module runtime/custom-actions
  */
 import { type Action, type IAgentRuntime } from "@elizaos/core";
-import type { CustomActionDef } from "../config/types.eliza.ts";
+import type { CustomActionDef } from "../config/types.eliza.js";
 /**
  * Store the runtime reference so we can hot-register actions later.
  * Called once from plugin.init().
@@ -33,7 +33,14 @@ type PinnedFetchInput = {
     timeoutMs: number;
 };
 type PinnedFetchImpl = (input: PinnedFetchInput) => Promise<Response>;
+type DnsLookupRecord = {
+    address?: unknown;
+} | string;
+type DnsLookupAllFn = (hostname: string, options: {
+    all: true;
+}) => Promise<DnsLookupRecord[] | DnsLookupRecord>;
 export declare function __setPinnedFetchImplForTests(impl: PinnedFetchImpl | null): void;
+export declare function __setDnsLookupImplForTests(impl: DnsLookupAllFn | null): void;
 export interface GuardedHttpGetOptions {
     /** Request timeout in milliseconds. Defaults to the custom-action cap. */
     timeoutMs?: number;
@@ -52,16 +59,18 @@ export interface GuardedHttpGetResult {
     /** True when the URL was rejected by the SSRF / scheme guard. */
     blocked: boolean;
 }
+export interface GuardedHttpPostOptions extends GuardedHttpGetOptions {
+    /** Request body. Sent as `application/json` unless `Content-Type` is set. */
+    body: string;
+}
+/** SSRF-guarded https-only GET (custom actions + the built-in WEB_FETCH action). */
+export declare function performGuardedHttpGet(url: string, opts?: GuardedHttpGetOptions): Promise<GuardedHttpGetResult>;
 /**
- * SSRF-guarded, https-only, GET-only HTTP fetch shared by custom actions and
- * the built-in WEB_FETCH action.
- *
- * Reuses {@link resolveUrlSafety} (DNS-pinned private/link-local IP blocking via
- * the security network policy) and {@link fetchWithPinnedTarget}. Enforces an
- * https scheme, rejects redirects, and caps both the timeout and the number of
- * body bytes read.
+ * SSRF-guarded HTTPS POST with a body (default `application/json`) — used by
+ * inline actions that call a public JSON/MCP endpoint (e.g. the keyless
+ * web-search MCP). Same guard as {@link performGuardedHttpGet}.
  */
-export declare function performGuardedHttpGet(url: string, opts?: GuardedHttpGetOptions): Promise<GuardedHttpGetResult>;
+export declare function performGuardedHttpPost(url: string, opts: GuardedHttpPostOptions): Promise<GuardedHttpGetResult>;
 export declare function loadCustomActions(): Action[];
 export declare function buildTestHandler(def: CustomActionDef): (params: Record<string, string>) => Promise<{
     ok: boolean;

package/runtime/custom-actions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"custom-actions.d.ts","sourceRoot":"","sources":["../../src/runtime/custom-actions.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAUH,OAAO,EACL,KAAK,MAAM,EAEX,KAAK,aAAa,EAEnB,MAAM,eAAe,CAAC;AAIvB,OAAO,KAAK,EACV,eAAe,EAEhB,MAAM,0BAA0B,CAAC;AASlC;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAEpE;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,GAAG,IAAI,CAK5E;AA2BD,qBAAa,wBAAyB,SAAQ,KAAK;gBACrC,OAAO,EAAE,MAAM;CAI5B;AAED,KAAK,iBAAiB,GAAG;IACvB,MAAM,EAAE,GAAG,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,GAAG,EAAE,GAAG,CAAC;IACT,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,KAAK,eAAe,GAAG,CAAC,KAAK,EAAE,gBAAgB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAoRtE,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,eAAe,GAAG,IAAI,GAC3B,IAAI,CAEN;AA8JD,MAAM,WAAW,qBAAqB;IACpC,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4FAA4F;IAC5F,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,oBAAoB;IACnC,0EAA0E;IAC1E,EAAE,EAAE,OAAO,CAAC;IACZ,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,qBAA0B,GAC/B,OAAO,CAAC,oBAAoB,CAAC,CAwC/B;AAkMD,wBAAgB,iBAAiB,IAAI,MAAM,EAAE,CAa5C;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,eAAe,GACnB,CACD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAE5C"}
+{"version":3,"file":"custom-actions.d.ts","sourceRoot":"","sources":["../../src/runtime/custom-actions.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAUH,OAAO,EACL,KAAK,MAAM,EAEX,KAAK,aAAa,EAEnB,MAAM,eAAe,CAAC;AAIvB,OAAO,KAAK,EACV,eAAe,EAEhB,MAAM,0BAA0B,CAAC;AASlC;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAEpE;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,GAAG,IAAI,CAK5E;AA2BD,qBAAa,wBAAyB,SAAQ,KAAK;gBACrC,OAAO,EAAE,MAAM;CAI5B;AAED,KAAK,iBAAiB,GAAG;IACvB,MAAM,EAAE,GAAG,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,GAAG,EAAE,GAAG,CAAC;IACT,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,KAAK,eAAe,GAAG,CAAC,KAAK,EAAE,gBAAgB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AACtE,KAAK,eAAe,GAAG;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,CAAC;AACtD,KAAK,cAAc,GAAG,CACpB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE;IAAE,GAAG,EAAE,IAAI,CAAA;CAAE,KACnB,OAAO,CAAC,eAAe,EAAE,GAAG,eAAe,CAAC,CAAC;AAgTlD,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,eAAe,GAAG,IAAI,GAC3B,IAAI,CAEN;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,GAAG,IAAI,CAE5E;AAmKD,MAAM,WAAW,qBAAqB;IACpC,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4FAA4F;IAC5F,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,oBAAoB;IACnC,0EAA0E;IAC1E,EAAE,EAAE,OAAO,CAAC;IACZ,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,OAAO,EAAE,OAAO,CAAC;CAClB;AAgBD,MAAM,WAAW,sBAAuB,SAAQ,qBAAqB;IACnE,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAC;CACd;AAmED,oFAAoF;AACpF,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,qBAA0B,GAC/B,OAAO,CAAC,oBAAoB,CAAC,CAE/B;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,sBAAsB,GAC3B,OAAO,CAAC,oBAAoB,CAAC,CAE/B;AAkMD,wBAAgB,iBAAiB,IAAI,MAAM,EAAE,CAa5C;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,eAAe,GACnB,CACD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAE5C"}

package/runtime/custom-actions.js

@@ -52,6 +52,7 @@ export class CustomActionTimeoutError extends Error {
         this.name = "CustomActionTimeoutError";
     }
 }
+let dnsLookupImpl = dnsLookup;
 function getApiPort() {
     return String(resolveServerOnlyPort(process.env));
 }
@@ -143,6 +144,17 @@ function shellEscape(value) {
 function isBlockedIp(ip) {
     return isBlockedPrivateOrLinkLocalIp(ip);
 }
+function normalizeDnsAddress(record) {
+    const raw = typeof record === "string"
+        ? record
+        : record && typeof record === "object"
+            ? record.address
+            : undefined;
+    if (typeof raw !== "string")
+        return null;
+    const trimmed = raw.trim();
+    return trimmed.length > 0 ? trimmed : null;
+}
 function toRequestHeaders(headers) {
     const normalized = {};
     headers.forEach((value, key) => {
@@ -236,7 +248,20 @@ async function requestWithPinnedAddress(input) {
             method,
             path: `${url.pathname}${url.search}`,
             headers: toRequestHeaders(headers),
-            lookup: (_hostname, _options, callback) => {
+            // Honor the `all` option: Node 20+ defaults autoSelectFamily=true and, for
+            // dual-stack hosts, calls lookup with `{ all: true }` expecting an ARRAY
+            // of `{ address, family }`. Returning the single-arg form there makes Node
+            // read the address string as an array (`addr[0].address` -> undefined) and
+            // throw "Invalid IP address: undefined", failing every pinned fetch to a
+            // dual-stack host (e.g. coingecko). Branch on the option to satisfy both.
+            lookup: (_hostname, options, callback) => {
+                const wantsAll = typeof options === "object" &&
+                    options !== null &&
+                    options.all === true;
+                if (wantsAll) {
+                    callback(null, [{ address: target.pinnedAddress, family }]);
+                    return;
+                }
                 callback(null, target.pinnedAddress, family);
             },
             ...(url.protocol === "https:"
@@ -270,6 +295,9 @@ let pinnedFetchImpl = requestWithPinnedAddress;
 export function __setPinnedFetchImplForTests(impl) {
     pinnedFetchImpl = impl ?? requestWithPinnedAddress;
 }
+export function __setDnsLookupImplForTests(impl) {
+    dnsLookupImpl = impl ?? dnsLookup;
+}
 async function resolveUrlSafety(url) {
     try {
         const parsed = new URL(url);
@@ -304,10 +332,15 @@ async function resolveUrlSafety(url) {
                 },
             };
         }
-        const records = await dnsLookup(hostname, { all: true });
-        const addresses = Array.isArray(records) ? records : [records];
-        for (const entry of addresses) {
-            if (isBlockedIp(entry.address)) {
+        const records = await dnsLookupImpl(hostname, { all: true });
+        const addresses = (Array.isArray(records) ? records : [records])
+            .map(normalizeDnsAddress)
+            .filter((address) => Boolean(address));
+        if (addresses.length === 0) {
+            return { blocked: true, target: null };
+        }
+        for (const address of addresses) {
+            if (isBlockedIp(address)) {
                 return { blocked: true, target: null };
             }
         }
@@ -316,7 +349,7 @@ async function resolveUrlSafety(url) {
             target: {
                 parsed,
                 hostname,
-                pinnedAddress: addresses[0]?.address ?? "",
+                pinnedAddress: addresses[0] ?? "",
             },
         };
     }
@@ -355,7 +388,7 @@ async function buildPinnedFetchInit(input, init) {
     };
 }
 async function fetchWithPinnedTarget(target, init, timeoutMs) {
-    if (!target.pinnedAddress) {
+    if (!target.pinnedAddress || net.isIP(target.pinnedAddress) === 0) {
         throw new Error("Blocked: cannot make requests to internal network addresses");
     }
     return pinnedFetchImpl({
@@ -398,16 +431,27 @@ async function readBodyTextCapped(response, maxChars) {
     }
     return text;
 }
+// Default User-Agent for guarded GETs. Many public REST/JSON APIs (crypto
+// price, weather, news endpoints) reject undici's default `node` User-Agent - or
+// a missing one - with HTTP 403, which silently broke every WEB_FETCH live-info
+// lookup. A browser-like string is what these WAF-fronted endpoints accept; it
+// is overridable via ELIZA_WEB_FETCH_USER_AGENT so operators can refresh it
+// without a code change, and any caller-supplied User-Agent header still wins.
+const GUARDED_GET_DEFAULT_USER_AGENT = process.env.ELIZA_WEB_FETCH_USER_AGENT?.trim() ||
+    [
+        "Mozilla/5.0 (X11; Linux x86_64)",
+        "AppleWebKit/537.36 (KHTML, like Gecko)",
+        "Chrome/124.0.0.0 Safari/537.36",
+    ].join(" ");
 /**
- * SSRF-guarded, https-only, GET-only HTTP fetch shared by custom actions and
- * the built-in WEB_FETCH action.
- *
- * Reuses {@link resolveUrlSafety} (DNS-pinned private/link-local IP blocking via
- * the security network policy) and {@link fetchWithPinnedTarget}. Enforces an
- * https scheme, rejects redirects, and caps both the timeout and the number of
- * body bytes read.
+ * Single SSRF-guarded, https-only HTTP request used by both the GET and POST
+ * wrappers below — keeping the guard (DNS-pinned private/link-local blocking via
+ * {@link resolveUrlSafety} + {@link fetchWithPinnedTarget}, https-only scheme,
+ * redirect rejection, timeout + body cap) in ONE place so a future safety fix
+ * never has to be made twice. Public callers use {@link performGuardedHttpGet} /
+ * {@link performGuardedHttpPost}.
  */
-export async function performGuardedHttpGet(url, opts = {}) {
+async function performGuardedHttpRequest(url, opts) {
     const timeoutMs = opts.timeoutMs ?? CUSTOM_ACTION_FETCH_TIMEOUT_MS;
     const maxChars = opts.maxChars ?? GUARDED_GET_MAX_BYTES;
     let parsed;
@@ -424,10 +468,21 @@ export async function performGuardedHttpGet(url, opts = {}) {
     if (safety.blocked) {
         return { ok: false, status: 0, text: "", blocked: true };
     }
+    // Build headers via the Headers API so a caller-supplied header (in any
+    // casing) cleanly overrides the default rather than being comma-joined onto it.
+    const headers = new Headers({ "User-Agent": GUARDED_GET_DEFAULT_USER_AGENT });
+    if (opts.body !== undefined)
+        headers.set("Content-Type", "application/json");
+    if (opts.headers) {
+        for (const [key, value] of Object.entries(opts.headers)) {
+            headers.set(key, value);
+        }
+    }
     const fetchOpts = {
-        method: "GET",
-        headers: opts.headers,
+        method: opts.method,
+        headers,
         redirect: "manual",
+        ...(opts.body !== undefined ? { body: opts.body } : {}),
     };
     const response = safety.target
         ? await fetchWithPinnedTarget(safety.target, fetchOpts, timeoutMs)
@@ -436,12 +491,19 @@ export async function performGuardedHttpGet(url, opts = {}) {
         return { ok: false, status: response.status, text: "", blocked: true };
     }
     const text = await readBodyTextCapped(response, maxChars);
-    return {
-        ok: response.ok,
-        status: response.status,
-        text,
-        blocked: false,
-    };
+    return { ok: response.ok, status: response.status, text, blocked: false };
+}
+/** SSRF-guarded https-only GET (custom actions + the built-in WEB_FETCH action). */
+export async function performGuardedHttpGet(url, opts = {}) {
+    return performGuardedHttpRequest(url, { ...opts, method: "GET" });
+}
+/**
+ * SSRF-guarded HTTPS POST with a body (default `application/json`) — used by
+ * inline actions that call a public JSON/MCP endpoint (e.g. the keyless
+ * web-search MCP). Same guard as {@link performGuardedHttpGet}.
+ */
+export async function performGuardedHttpPost(url, opts) {
+    return performGuardedHttpRequest(url, { ...opts, method: "POST" });
 }
 function buildHandler(handler, paramDefs) {
     if (!VALID_HANDLER_TYPES.has(handler.type)) {

package/runtime/eliza-plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"eliza-plugin.d.ts","sourceRoot":"","sources":["../../src/runtime/eliza-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAiB,MAAM,EAAgB,MAAM,eAAe,CAAC;AA0DzE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAmBF,wBAAgB,iBAAiB,CAAC,MAAM,CAAC,EAAE,iBAAiB,GAAG,MAAM,CA+KpE"}
+{"version":3,"file":"eliza-plugin.d.ts","sourceRoot":"","sources":["../../src/runtime/eliza-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAiB,MAAM,EAAgB,MAAM,eAAe,CAAC;AAkEzE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAmBF,wBAAgB,iBAAiB,CAAC,MAAM,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAqLpE"}