@elizaos/agent 2.0.3-beta.2 → 2.0.3-beta.4

package/runtime/conversation-compactor.d.ts

@@ -13,7 +13,7 @@
  *   - the trailing N messages (default 6) verbatim
  *   - tool_call / tool_result pairing across the boundary
  */
-import { type Compactor, type CompactorMessage } from "./conversation-compactor.types.ts";
+import { type Compactor, type CompactorMessage } from "./conversation-compactor.types.js";
 /**
  * Identify the index that splits compacted-region (indices < boundary) from
  * preserved-tail (indices >= boundary), shifting the boundary outward (toward

package/runtime/core-plugins.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core-plugins.d.ts","sourceRoot":"","sources":["../../src/runtime/core-plugins.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAGjD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAIhD,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAahD,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,4BAA4B,EAAE,SAAS,MAAM,EAIzD,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,gCAAgC,EAAE,SAAS,MAAM,EAI7D,CAAC;AAEF,iGAAiG;AACjG,eAAO,MAAM,YAAY,EAAE,SAAS,MAAM,EAqBzC,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAQ9C,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,EAAE,SAAS,MAAM,EA4BvD,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAGlD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAElD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EA4BlD,CAAC"}
+{"version":3,"file":"core-plugins.d.ts","sourceRoot":"","sources":["../../src/runtime/core-plugins.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAGjD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAahD,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAahD,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,4BAA4B,EAAE,SAAS,MAAM,EAIzD,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,gCAAgC,EAAE,SAAS,MAAM,EAI7D,CAAC;AAEF,iGAAiG;AACjG,eAAO,MAAM,YAAY,EAAE,SAAS,MAAM,EAqBzC,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAQ9C,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,EAAE,SAAS,MAAM,EA4BvD,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAGlD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAElD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EA4BlD,CAAC"}

package/runtime/core-plugins.js

@@ -38,6 +38,15 @@ export const MOBILE_CORE_PLUGINS = [
     "@elizaos/plugin-sql",
     "@elizaos/plugin-background-runner",
     "@elizaos/plugin-device-filesystem",
+    // Screen understanding on mobile (EPIC #9105): the GET_SCREEN op + the
+    // renderer-pulled screen-capture bridge + the IMAGE_DESCRIPTION describe
+    // path. plugin-vision is now mobile-safe — `sharp` is lazy-loaded with a
+    // pure-JS fallback and the native YOLO/face detectors are dynamic-imported,
+    // so module-eval no longer pulls a native addon. VisionService degrades
+    // gracefully on a phone (camera mode finds no capture tool → warns, never
+    // starts a processing loop), and its computeruse OCR/set-of-marks bridges
+    // are best-effort dynamic imports that no-op without plugin-computeruse.
+    "@elizaos/plugin-vision",
 ];
 /**
  * View-providing plugins that must register their `/api/views` entries on EVERY

package/runtime/custom-actions.d.ts

@@ -7,7 +7,7 @@
  * @module runtime/custom-actions
  */
 import { type Action, type IAgentRuntime } from "@elizaos/core";
-import type { CustomActionDef } from "../config/types.eliza.ts";
+import type { CustomActionDef } from "../config/types.eliza.js";
 /**
  * Store the runtime reference so we can hot-register actions later.
  * Called once from plugin.init().
@@ -33,7 +33,14 @@ type PinnedFetchInput = {
     timeoutMs: number;
 };
 type PinnedFetchImpl = (input: PinnedFetchInput) => Promise<Response>;
+type DnsLookupRecord = {
+    address?: unknown;
+} | string;
+type DnsLookupAllFn = (hostname: string, options: {
+    all: true;
+}) => Promise<DnsLookupRecord[] | DnsLookupRecord>;
 export declare function __setPinnedFetchImplForTests(impl: PinnedFetchImpl | null): void;
+export declare function __setDnsLookupImplForTests(impl: DnsLookupAllFn | null): void;
 export interface GuardedHttpGetOptions {
     /** Request timeout in milliseconds. Defaults to the custom-action cap. */
     timeoutMs?: number;
@@ -52,16 +59,18 @@ export interface GuardedHttpGetResult {
     /** True when the URL was rejected by the SSRF / scheme guard. */
     blocked: boolean;
 }
+export interface GuardedHttpPostOptions extends GuardedHttpGetOptions {
+    /** Request body. Sent as `application/json` unless `Content-Type` is set. */
+    body: string;
+}
+/** SSRF-guarded https-only GET (custom actions + the built-in WEB_FETCH action). */
+export declare function performGuardedHttpGet(url: string, opts?: GuardedHttpGetOptions): Promise<GuardedHttpGetResult>;
 /**
- * SSRF-guarded, https-only, GET-only HTTP fetch shared by custom actions and
- * the built-in WEB_FETCH action.
- *
- * Reuses {@link resolveUrlSafety} (DNS-pinned private/link-local IP blocking via
- * the security network policy) and {@link fetchWithPinnedTarget}. Enforces an
- * https scheme, rejects redirects, and caps both the timeout and the number of
- * body bytes read.
+ * SSRF-guarded HTTPS POST with a body (default `application/json`) — used by
+ * inline actions that call a public JSON/MCP endpoint (e.g. the keyless
+ * web-search MCP). Same guard as {@link performGuardedHttpGet}.
  */
-export declare function performGuardedHttpGet(url: string, opts?: GuardedHttpGetOptions): Promise<GuardedHttpGetResult>;
+export declare function performGuardedHttpPost(url: string, opts: GuardedHttpPostOptions): Promise<GuardedHttpGetResult>;
 export declare function loadCustomActions(): Action[];
 export declare function buildTestHandler(def: CustomActionDef): (params: Record<string, string>) => Promise<{
     ok: boolean;

package/runtime/custom-actions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"custom-actions.d.ts","sourceRoot":"","sources":["../../src/runtime/custom-actions.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAUH,OAAO,EACL,KAAK,MAAM,EAEX,KAAK,aAAa,EAEnB,MAAM,eAAe,CAAC;AAIvB,OAAO,KAAK,EACV,eAAe,EAEhB,MAAM,0BAA0B,CAAC;AASlC;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAEpE;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,GAAG,IAAI,CAK5E;AA2BD,qBAAa,wBAAyB,SAAQ,KAAK;gBACrC,OAAO,EAAE,MAAM;CAI5B;AAED,KAAK,iBAAiB,GAAG;IACvB,MAAM,EAAE,GAAG,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,GAAG,EAAE,GAAG,CAAC;IACT,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,KAAK,eAAe,GAAG,CAAC,KAAK,EAAE,gBAAgB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAoRtE,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,eAAe,GAAG,IAAI,GAC3B,IAAI,CAEN;AA8JD,MAAM,WAAW,qBAAqB;IACpC,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4FAA4F;IAC5F,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,oBAAoB;IACnC,0EAA0E;IAC1E,EAAE,EAAE,OAAO,CAAC;IACZ,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,qBAA0B,GAC/B,OAAO,CAAC,oBAAoB,CAAC,CAwC/B;AAkMD,wBAAgB,iBAAiB,IAAI,MAAM,EAAE,CAa5C;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,eAAe,GACnB,CACD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAE5C"}
+{"version":3,"file":"custom-actions.d.ts","sourceRoot":"","sources":["../../src/runtime/custom-actions.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAUH,OAAO,EACL,KAAK,MAAM,EAEX,KAAK,aAAa,EAEnB,MAAM,eAAe,CAAC;AAIvB,OAAO,KAAK,EACV,eAAe,EAEhB,MAAM,0BAA0B,CAAC;AASlC;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAEpE;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,GAAG,IAAI,CAK5E;AA2BD,qBAAa,wBAAyB,SAAQ,KAAK;gBACrC,OAAO,EAAE,MAAM;CAI5B;AAED,KAAK,iBAAiB,GAAG;IACvB,MAAM,EAAE,GAAG,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,GAAG,EAAE,GAAG,CAAC;IACT,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,KAAK,eAAe,GAAG,CAAC,KAAK,EAAE,gBAAgB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AACtE,KAAK,eAAe,GAAG;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,CAAC;AACtD,KAAK,cAAc,GAAG,CACpB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE;IAAE,GAAG,EAAE,IAAI,CAAA;CAAE,KACnB,OAAO,CAAC,eAAe,EAAE,GAAG,eAAe,CAAC,CAAC;AAgTlD,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,eAAe,GAAG,IAAI,GAC3B,IAAI,CAEN;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,GAAG,IAAI,CAE5E;AAmKD,MAAM,WAAW,qBAAqB;IACpC,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4FAA4F;IAC5F,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,oBAAoB;IACnC,0EAA0E;IAC1E,EAAE,EAAE,OAAO,CAAC;IACZ,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,OAAO,EAAE,OAAO,CAAC;CAClB;AAgBD,MAAM,WAAW,sBAAuB,SAAQ,qBAAqB;IACnE,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAC;CACd;AAmED,oFAAoF;AACpF,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,qBAA0B,GAC/B,OAAO,CAAC,oBAAoB,CAAC,CAE/B;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,sBAAsB,GAC3B,OAAO,CAAC,oBAAoB,CAAC,CAE/B;AAkMD,wBAAgB,iBAAiB,IAAI,MAAM,EAAE,CAa5C;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,eAAe,GACnB,CACD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAE5C"}

package/runtime/custom-actions.js

@@ -52,6 +52,7 @@ export class CustomActionTimeoutError extends Error {
         this.name = "CustomActionTimeoutError";
     }
 }
+let dnsLookupImpl = dnsLookup;
 function getApiPort() {
     return String(resolveServerOnlyPort(process.env));
 }
@@ -143,6 +144,17 @@ function shellEscape(value) {
 function isBlockedIp(ip) {
     return isBlockedPrivateOrLinkLocalIp(ip);
 }
+function normalizeDnsAddress(record) {
+    const raw = typeof record === "string"
+        ? record
+        : record && typeof record === "object"
+            ? record.address
+            : undefined;
+    if (typeof raw !== "string")
+        return null;
+    const trimmed = raw.trim();
+    return trimmed.length > 0 ? trimmed : null;
+}
 function toRequestHeaders(headers) {
     const normalized = {};
     headers.forEach((value, key) => {
@@ -236,7 +248,20 @@ async function requestWithPinnedAddress(input) {
             method,
             path: `${url.pathname}${url.search}`,
             headers: toRequestHeaders(headers),
-            lookup: (_hostname, _options, callback) => {
+            // Honor the `all` option: Node 20+ defaults autoSelectFamily=true and, for
+            // dual-stack hosts, calls lookup with `{ all: true }` expecting an ARRAY
+            // of `{ address, family }`. Returning the single-arg form there makes Node
+            // read the address string as an array (`addr[0].address` -> undefined) and
+            // throw "Invalid IP address: undefined", failing every pinned fetch to a
+            // dual-stack host (e.g. coingecko). Branch on the option to satisfy both.
+            lookup: (_hostname, options, callback) => {
+                const wantsAll = typeof options === "object" &&
+                    options !== null &&
+                    options.all === true;
+                if (wantsAll) {
+                    callback(null, [{ address: target.pinnedAddress, family }]);
+                    return;
+                }
                 callback(null, target.pinnedAddress, family);
             },
             ...(url.protocol === "https:"
@@ -270,6 +295,9 @@ let pinnedFetchImpl = requestWithPinnedAddress;
 export function __setPinnedFetchImplForTests(impl) {
     pinnedFetchImpl = impl ?? requestWithPinnedAddress;
 }
+export function __setDnsLookupImplForTests(impl) {
+    dnsLookupImpl = impl ?? dnsLookup;
+}
 async function resolveUrlSafety(url) {
     try {
         const parsed = new URL(url);
@@ -304,10 +332,15 @@ async function resolveUrlSafety(url) {
                 },
             };
         }
-        const records = await dnsLookup(hostname, { all: true });
-        const addresses = Array.isArray(records) ? records : [records];
-        for (const entry of addresses) {
-            if (isBlockedIp(entry.address)) {
+        const records = await dnsLookupImpl(hostname, { all: true });
+        const addresses = (Array.isArray(records) ? records : [records])
+            .map(normalizeDnsAddress)
+            .filter((address) => Boolean(address));
+        if (addresses.length === 0) {
+            return { blocked: true, target: null };
+        }
+        for (const address of addresses) {
+            if (isBlockedIp(address)) {
                 return { blocked: true, target: null };
             }
         }
@@ -316,7 +349,7 @@ async function resolveUrlSafety(url) {
             target: {
                 parsed,
                 hostname,
-                pinnedAddress: addresses[0]?.address ?? "",
+                pinnedAddress: addresses[0] ?? "",
             },
         };
     }
@@ -355,7 +388,7 @@ async function buildPinnedFetchInit(input, init) {
     };
 }
 async function fetchWithPinnedTarget(target, init, timeoutMs) {
-    if (!target.pinnedAddress) {
+    if (!target.pinnedAddress || net.isIP(target.pinnedAddress) === 0) {
         throw new Error("Blocked: cannot make requests to internal network addresses");
     }
     return pinnedFetchImpl({
@@ -398,16 +431,27 @@ async function readBodyTextCapped(response, maxChars) {
     }
     return text;
 }
+// Default User-Agent for guarded GETs. Many public REST/JSON APIs (crypto
+// price, weather, news endpoints) reject undici's default `node` User-Agent - or
+// a missing one - with HTTP 403, which silently broke every WEB_FETCH live-info
+// lookup. A browser-like string is what these WAF-fronted endpoints accept; it
+// is overridable via ELIZA_WEB_FETCH_USER_AGENT so operators can refresh it
+// without a code change, and any caller-supplied User-Agent header still wins.
+const GUARDED_GET_DEFAULT_USER_AGENT = process.env.ELIZA_WEB_FETCH_USER_AGENT?.trim() ||
+    [
+        "Mozilla/5.0 (X11; Linux x86_64)",
+        "AppleWebKit/537.36 (KHTML, like Gecko)",
+        "Chrome/124.0.0.0 Safari/537.36",
+    ].join(" ");
 /**
- * SSRF-guarded, https-only, GET-only HTTP fetch shared by custom actions and
- * the built-in WEB_FETCH action.
- *
- * Reuses {@link resolveUrlSafety} (DNS-pinned private/link-local IP blocking via
- * the security network policy) and {@link fetchWithPinnedTarget}. Enforces an
- * https scheme, rejects redirects, and caps both the timeout and the number of
- * body bytes read.
+ * Single SSRF-guarded, https-only HTTP request used by both the GET and POST
+ * wrappers below — keeping the guard (DNS-pinned private/link-local blocking via
+ * {@link resolveUrlSafety} + {@link fetchWithPinnedTarget}, https-only scheme,
+ * redirect rejection, timeout + body cap) in ONE place so a future safety fix
+ * never has to be made twice. Public callers use {@link performGuardedHttpGet} /
+ * {@link performGuardedHttpPost}.
  */
-export async function performGuardedHttpGet(url, opts = {}) {
+async function performGuardedHttpRequest(url, opts) {
     const timeoutMs = opts.timeoutMs ?? CUSTOM_ACTION_FETCH_TIMEOUT_MS;
     const maxChars = opts.maxChars ?? GUARDED_GET_MAX_BYTES;
     let parsed;
@@ -424,10 +468,21 @@ export async function performGuardedHttpGet(url, opts = {}) {
     if (safety.blocked) {
         return { ok: false, status: 0, text: "", blocked: true };
     }
+    // Build headers via the Headers API so a caller-supplied header (in any
+    // casing) cleanly overrides the default rather than being comma-joined onto it.
+    const headers = new Headers({ "User-Agent": GUARDED_GET_DEFAULT_USER_AGENT });
+    if (opts.body !== undefined)
+        headers.set("Content-Type", "application/json");
+    if (opts.headers) {
+        for (const [key, value] of Object.entries(opts.headers)) {
+            headers.set(key, value);
+        }
+    }
     const fetchOpts = {
-        method: "GET",
-        headers: opts.headers,
+        method: opts.method,
+        headers,
         redirect: "manual",
+        ...(opts.body !== undefined ? { body: opts.body } : {}),
     };
     const response = safety.target
         ? await fetchWithPinnedTarget(safety.target, fetchOpts, timeoutMs)
@@ -436,12 +491,19 @@ export async function performGuardedHttpGet(url, opts = {}) {
         return { ok: false, status: response.status, text: "", blocked: true };
     }
     const text = await readBodyTextCapped(response, maxChars);
-    return {
-        ok: response.ok,
-        status: response.status,
-        text,
-        blocked: false,
-    };
+    return { ok: response.ok, status: response.status, text, blocked: false };
+}
+/** SSRF-guarded https-only GET (custom actions + the built-in WEB_FETCH action). */
+export async function performGuardedHttpGet(url, opts = {}) {
+    return performGuardedHttpRequest(url, { ...opts, method: "GET" });
+}
+/**
+ * SSRF-guarded HTTPS POST with a body (default `application/json`) — used by
+ * inline actions that call a public JSON/MCP endpoint (e.g. the keyless
+ * web-search MCP). Same guard as {@link performGuardedHttpGet}.
+ */
+export async function performGuardedHttpPost(url, opts) {
+    return performGuardedHttpRequest(url, { ...opts, method: "POST" });
 }
 function buildHandler(handler, paramDefs) {
     if (!VALID_HANDLER_TYPES.has(handler.type)) {

package/runtime/eliza-plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"eliza-plugin.d.ts","sourceRoot":"","sources":["../../src/runtime/eliza-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAiB,MAAM,EAAgB,MAAM,eAAe,CAAC;AA0DzE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAmBF,wBAAgB,iBAAiB,CAAC,MAAM,CAAC,EAAE,iBAAiB,GAAG,MAAM,CA+KpE"}
+{"version":3,"file":"eliza-plugin.d.ts","sourceRoot":"","sources":["../../src/runtime/eliza-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAiB,MAAM,EAAgB,MAAM,eAAe,CAAC;AAkEzE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAmBF,wBAAgB,iBAAiB,CAAC,MAAM,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAqLpE"}

package/runtime/eliza-plugin.js

@@ -9,6 +9,7 @@ import { AgentEventService, logger, NotificationService, promoteSubactionsToActi
 import { compactConversationAction } from "../actions/compact-conversation.js";
 import { contactAction } from "../actions/contact.js";
 import { databaseAction } from "../actions/database.js";
+import { filesAction } from "../actions/files.js";
 import { logsAction } from "../actions/logs.js";
 import { memoryAction } from "../actions/memories.js";
 import { notifyAction } from "../actions/notify.js";
@@ -18,6 +19,8 @@ import { runtimeAction } from "../actions/runtime.js";
 import { settingsAction } from "../actions/settings-actions.js";
 import { terminalAction } from "../actions/terminal.js";
 import { triggerAction } from "../actions/trigger.js";
+import { backgroundGenerateImageRoute } from "../api/background-routes.js";
+import { filesRoutes } from "../api/files-routes.js";
 import { mediaFileRoute, registerMediaGcTask, registerMediaPipelineHook, } from "../api/media-runtime.js";
 import { adminPanelProvider } from "../providers/admin-panel.js";
 import { adminTrustProvider } from "../providers/admin-trust.js";
@@ -36,9 +39,14 @@ import { createOngoingTasksProvider } from "../providers/tasks.js";
 import { uiCatalogProvider } from "../providers/ui-catalog.js";
 import { createUserNameProvider } from "../providers/user-name.js";
 import { createWorkspaceProvider } from "../providers/workspace-provider.js";
+import { ApprovalService } from "../services/approval/index.js";
 import { ElizaCharacterPersistenceService } from "../services/character-persistence.js";
+import { LocalFileStorageService } from "../services/file-storage.js";
+import { GlobalPauseService } from "../services/global-pause/index.js";
+import { HandoffService } from "../services/handoff/index.js";
 import { KnowledgeGraphService, knowledgeGraphSchema, } from "../services/knowledge-graph/index.js";
 import { AgentMediaGenerationService } from "../services/media-generation.js";
+import { PendingPromptsService } from "../services/pending-prompts/index.js";
 import { PermissionRegistry } from "../services/permissions-registry.js";
 import { NotificationPushService } from "../services/push/notification-push-service.js";
 import { resolveDefaultAgentWorkspaceDir } from "../shared/workspace-resolution.js";
@@ -82,8 +90,13 @@ export function createElizaPlugin(config) {
             NotificationPushService,
             ElizaCharacterPersistenceService,
             AgentMediaGenerationService,
+            LocalFileStorageService,
             PermissionRegistry,
             KnowledgeGraphService,
+            PendingPromptsService,
+            GlobalPauseService,
+            HandoffService,
+            ApprovalService,
         ],
         init: async (_pluginConfig, runtime) => {
             registerTriggerTaskWorker(runtime);
@@ -165,7 +178,7 @@ export function createElizaPlugin(config) {
         ],
         // Public media route — only reached on iOS (in-process dispatch, no HTTP
         // server). HTTP platforms serve media via the pre-auth handler in server.ts.
-        routes: [mediaFileRoute],
+        routes: [mediaFileRoute, backgroundGenerateImageRoute, ...filesRoutes],
         actions: [
             terminalAction,
             ...promoteSubactionsToActions(triggerAction),
@@ -180,6 +193,7 @@ export function createElizaPlugin(config) {
             compactConversationAction,
             notifyAction,
             ...promoteSubactionsToActions(memoryAction),
+            filesAction,
             // SCHEDULE_FOLLOW_UP is now the `followup` op on contactAction.
             // ARCHIVE_CODING_TASK / REOPEN_CODING_TASK live as ops on the TASKS
             // parent in @elizaos/plugin-agent-orchestrator (also surfaced via the

package/runtime/eliza.d.ts

@@ -1,10 +1,10 @@
-export { CHANNEL_PLUGIN_MAP, collectPluginNames, OPTIONAL_PLUGIN_MAP, PROVIDER_PLUGIN_MAP, } from "./plugin-collector.ts";
-export { CUSTOM_PLUGINS_DIRNAME, EJECTED_PLUGINS_DIRNAME, ensureBrowserServerLink, findPluginBrowserStagehandDir, findRuntimePluginExport, mergeDropInPlugins, type PluginModuleShape, type ResolvedPlugin, repairBrokenInstallRecord, resolveElizaPluginImportSpecifier, resolvePackageEntry, STATIC_ELIZA_PLUGINS, scanDropInPlugins, } from "./plugin-types.ts";
+export { CHANNEL_PLUGIN_MAP, collectPluginNames, OPTIONAL_PLUGIN_MAP, PROVIDER_PLUGIN_MAP, } from "./plugin-collector.js";
+export { CUSTOM_PLUGINS_DIRNAME, EJECTED_PLUGINS_DIRNAME, ensureBrowserServerLink, findPluginBrowserStagehandDir, findRuntimePluginExport, mergeDropInPlugins, type PluginModuleShape, type ResolvedPlugin, repairBrokenInstallRecord, resolveElizaPluginImportSpecifier, resolvePackageEntry, STATIC_ELIZA_PLUGINS, scanDropInPlugins, } from "./plugin-types.js";
 import { AgentRuntime, type LogEntry, type Plugin } from "@elizaos/core";
-import { buildCharacterFromConfig } from "./build-character-config.ts";
-import { resolvePreferredProviderId, resolvePreferredProviderPluginName, resolvePrimaryModel } from "./model-resolution.ts";
-import { type ElizaConfig } from "../config/config.ts";
-import { BLOCKING_CORE_PLUGINS, CORE_PLUGINS, DEFERRED_CORE_PLUGINS, LEAN_CHAT_PLUGINS, OPTIONAL_CORE_PLUGINS } from "./core-plugins.ts";
+import { buildCharacterFromConfig } from "./build-character-config.js";
+import { resolvePreferredProviderId, resolvePreferredProviderPluginName, resolvePrimaryModel } from "./model-resolution.js";
+import { type ElizaConfig } from "../config/config.js";
+import { BLOCKING_CORE_PLUGINS, CORE_PLUGINS, DEFERRED_CORE_PLUGINS, LEAN_CHAT_PLUGINS, OPTIONAL_CORE_PLUGINS } from "./core-plugins.js";
 export declare function ensureDeferredCoreStaticPluginsRegistered(): Promise<void>;
 /**
  * Static-plugin registration for the CLOUD-HOSTED topology only (the agent runs
@@ -54,7 +54,9 @@ export declare function configureLocalEmbeddingPlugin(_plugin: Plugin, config?:
  * PGlite manager, so restarts must close the adapter or the next runtime can
  * silently reuse the same broken manager instance.
  */
-export declare function shutdownRuntime(runtime: AgentRuntime | null | undefined, context: string): Promise<void>;
+export declare function shutdownRuntime(runtime: AgentRuntime | null | undefined, context: string, options?: {
+    fast?: boolean;
+}): Promise<void>;
 /**
  * Remove duplicate actions across an ordered list of plugins.
  *

package/runtime/eliza.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"eliza.d.ts","sourceRoot":"","sources":["../../src/runtime/eliza.ts"],"names":[],"mappings":"AA6CA,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,EACvB,6BAA6B,EAC7B,uBAAuB,EACvB,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,yBAAyB,EACzB,iCAAiC,EACjC,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAiB3B,OAAO,EACL,YAAY,EAQZ,KAAK,QAAQ,EAEb,KAAK,MAAM,EAKZ,MAAM,eAAe,CAAC;AAiEvB,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EACL,0BAA0B,EAC1B,kCAAkC,EAClC,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AA0C/B,OAAO,EAEL,KAAK,WAAW,EAEjB,MAAM,qBAAqB,CAAC;AAiC7B,OAAO,EACL,qBAAqB,EACrB,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,qBAAqB,EACtB,MAAM,mBAAmB,CAAC;AA2b3B,wBAAsB,yCAAyC,IAAI,OAAO,CAAC,IAAI,CAAC,CAO/E;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,sCAAsC,IAAI,OAAO,CAAC,IAAI,CAAC,CAE5E;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,iCAAiC,IAAI,OAAO,CAAC,IAAI,CAAC,CAUvE;AAwID,wBAAsB,6BAA6B,CACjD,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CAkKf;AAgPD;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,YAAY,GAAG,IAAI,GAAG,SAAS,EACxC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAgBhE;AAgMD,OAAO,EACL,qBAAqB,EACrB,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,qBAAqB,GACtB,CAAC;AASF;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CA+BjE;AA8OD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,CAyL/D;AAsLD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAMzD;AA8KD,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAO/D;AA0SD,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CAqLxE;AAyLD,OAAO,EACL,wBAAwB,EACxB,0BAA0B,EAC1B,kCAAkC,EAClC,mBAAmB,GACpB,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,WAAW,EACnB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,GAAG,SAAS,CAKpB;AA0DD,8CAA8C;AAC9C,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;OAGG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,GAAE,uBAA4B,GACjC,OAAO,CAAC,YAAY,CAAC,CAYvB;AAqBD,eAAO,MAAM,iBAAiB,GAAI,OAAO,QAAQ,SAgChD,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,IAAI,CAAC,EAAE,iBAAiB,GACvB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAyyEnC;AAmBD,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,iBAAiB,GACvB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAuGnC"}
+{"version":3,"file":"eliza.d.ts","sourceRoot":"","sources":["../../src/runtime/eliza.ts"],"names":[],"mappings":"AA8CA,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,EACvB,6BAA6B,EAC7B,uBAAuB,EACvB,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,yBAAyB,EACzB,iCAAiC,EACjC,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAiB3B,OAAO,EACL,YAAY,EAQZ,KAAK,QAAQ,EAEb,KAAK,MAAM,EAKZ,MAAM,eAAe,CAAC;AAiEvB,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EACL,0BAA0B,EAC1B,kCAAkC,EAClC,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AA2C/B,OAAO,EAEL,KAAK,WAAW,EAEjB,MAAM,qBAAqB,CAAC;AAiC7B,OAAO,EACL,qBAAqB,EACrB,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,qBAAqB,EACtB,MAAM,mBAAmB,CAAC;AAwc3B,wBAAsB,yCAAyC,IAAI,OAAO,CAAC,IAAI,CAAC,CAO/E;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,sCAAsC,IAAI,OAAO,CAAC,IAAI,CAAC,CAE5E;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,iCAAiC,IAAI,OAAO,CAAC,IAAI,CAAC,CAUvE;AA2ID,wBAAsB,6BAA6B,CACjD,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CAkKf;AAgPD;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,YAAY,GAAG,IAAI,GAAG,SAAS,EACxC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,GAC/B,OAAO,CAAC,IAAI,CAAC,CA+Bf;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAgBhE;AA6MD,OAAO,EACL,qBAAqB,EACrB,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,qBAAqB,GACtB,CAAC;AASF;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CA+BjE;AA8OD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,CAyL/D;AAsLD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAMzD;AA8KD,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAO/D;AA0SD,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CAqLxE;AAyLD,OAAO,EACL,wBAAwB,EACxB,0BAA0B,EAC1B,kCAAkC,EAClC,mBAAmB,GACpB,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,WAAW,EACnB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,GAAG,SAAS,CAKpB;AA0DD,8CAA8C;AAC9C,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;OAGG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,GAAE,uBAA4B,GACjC,OAAO,CAAC,YAAY,CAAC,CAYvB;AAqBD,eAAO,MAAM,iBAAiB,GAAI,OAAO,QAAQ,SAgChD,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,IAAI,CAAC,EAAE,iBAAiB,GACvB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CA61EnC;AAmBD,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,iBAAiB,GACvB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAuGnC"}

package/runtime/eliza.js

@@ -32,6 +32,7 @@ import { runFirstTimeSetup } from "./first-time-setup.js";
 import { resolveConfigEnvForProcess } from "./operations/vault-bridge.js";
 import { resolvePlugins, } from "./plugin-resolver.js";
 import { CUSTOM_PLUGINS_DIRNAME as CUSTOM_RUNTIME_PLUGINS_DIRNAME, STATIC_ELIZA_PLUGINS, } from "./plugin-types.js";
+import { shouldLoadRemoteCodingRunnerForBoot } from "./remote-coding-runner-gate.js";
 export { CHANNEL_PLUGIN_MAP, collectPluginNames, OPTIONAL_PLUGIN_MAP, PROVIDER_PLUGIN_MAP, } from "./plugin-collector.js";
 export { CUSTOM_PLUGINS_DIRNAME, EJECTED_PLUGINS_DIRNAME, ensureBrowserServerLink, findPluginBrowserStagehandDir, findRuntimePluginExport, mergeDropInPlugins, repairBrokenInstallRecord, resolveElizaPluginImportSpecifier, resolvePackageEntry, STATIC_ELIZA_PLUGINS, scanDropInPlugins, } from "./plugin-types.js";
 // resolvePlugins is re-exported via index.ts from ./plugin-resolver
@@ -90,6 +91,7 @@ async function loadE2BCapabilityRouterModule() {
     /* @vite-ignore */ moduleId)));
 }
 import { debugLogResolvedContext, validateRuntimeContext, } from "../api/plugin-validation.js";
+import { listViews } from "../api/views-registry.js";
 import { getWalletAddresses, syncSolanaPublicKeyEnv } from "../api/wallet.js";
 import { configFileExists, loadElizaConfig, } from "../config/config.js";
 import { CONNECTOR_ENV_MAP, collectConfigEnvVars, collectConnectorEnvVars, } from "../config/env-vars.js";
@@ -111,7 +113,8 @@ import { createPgliteInitError, getPgliteErrorCode, PGLITE_ERROR_CODES, } from "
 import { installRuntimePluginLifecycle } from "./plugin-lifecycle.js";
 import { validateIntentActionMap } from "./prompt-compaction.js";
 import rolesPlugin from "./roles.js";
-import { shouldEnableTrajectoryLoggingByDefault } from "./trajectory-persistence.js";
+import { installDatabaseTrajectoryLogger, shouldEnableTrajectoryLoggingByDefault, } from "./trajectory-persistence.js";
+import { validateViewActionMap, validateViewCoverage, } from "./view-action-affinity.js";
 function isPluginSqlResolutionError(err) {
     const message = err instanceof Error ? err.message : String(err);
     return (message.includes("Cannot find module '@elizaos/plugin-sql'") ||
@@ -343,7 +346,12 @@ const CORE_STATIC_PLUGIN_REGISTRATIONS = [
         packageName: "@elizaos/plugin-gitpathologist",
         phase: "deferred",
         required: false,
-        load: () => getOptionalPlugin("@elizaos/plugin-gitpathologist"),
+        // Not in the mobile bundle — attempting the import there hangs the full
+        // 30s deferred-plugin timeout before being skipped. Skip it up front on
+        // android/ios (it's a desktop dev tool, already gated in plugin-collector).
+        load: () => isMobilePlatform()
+            ? Promise.resolve(null)
+            : getOptionalPlugin("@elizaos/plugin-gitpathologist"),
     },
 ];
 let _blockingStaticPluginsRegistered = false;
@@ -560,7 +568,10 @@ function registerSignalShutdownHandlers(context) {
             try {
                 const runtime = current?.getRuntime();
                 if (runtime) {
-                    await shutdownRuntime(runtime, "signal shutdown");
+                    // SIGINT/SIGTERM is an interactive/dev teardown — use the capped fast
+                    // path so the process exits promptly instead of waiting on in-flight
+                    // deferred service starts or an embedding-queue flush (#9605).
+                    await shutdownRuntime(runtime, "signal shutdown", { fast: true });
                 }
             }
             catch (err) {
@@ -622,7 +633,7 @@ export async function configureLocalEmbeddingPlugin(_plugin, config) {
     const { detectEmbeddingPreset } = await import("@elizaos/plugin-local-inference/runtime/embedding-presets");
     const detectedPreset = detectEmbeddingPreset();
     const SQL_COMPATIBLE_EMBEDDING_DIMENSIONS = new Set([
-        384, 512, 768, 1024, 1536, 3072,
+        384, 512, 768, 1024, 1536, 2048, 3072,
     ]);
     const normalizeEmbeddingDimensions = (rawValue) => {
         if (!rawValue)
@@ -911,13 +922,15 @@ function _redactUserSegments(filepath) {
  * PGlite manager, so restarts must close the adapter or the next runtime can
  * silently reuse the same broken manager instance.
  */
-export async function shutdownRuntime(runtime, context) {
+export async function shutdownRuntime(runtime, context, options = {}) {
     if (!runtime)
         return;
     const adapter = runtime.adapter;
     let firstError = null;
     try {
-        await runtime.stop();
+        // Interactive/signal teardown asks for the capped fast path so Ctrl-C does
+        // not block on a slow deferred service start or a long embedding drain.
+        await runtime.stop(options.fast ? { fast: true } : undefined);
     }
     catch (err) {
         firstError = err;
@@ -1055,6 +1068,18 @@ async function installPromptOptimizationLayer(runtime, context, config) {
 async function prepareRuntimeForTrajectoryCapture(runtime, context, config) {
     await waitForTrajectoriesService(runtime, context);
     ensureTrajectoryLoggerEnabled(runtime, context);
+    // Bridge the in-memory "trajectories" service to the SQL trajectory_steps
+    // tables that the viewer + collection read. Without this the core service
+    // captures LLM calls only into its own trajectory_step_index store, so every
+    // platform without the plugin-training log-backfill (mobile, cloud) shows a
+    // trajectory with zero recorded LLM calls. Patching here makes capture land
+    // in trajectory_steps universally (local + cloud + mobile).
+    try {
+        await installDatabaseTrajectoryLogger(runtime);
+    }
+    catch (err) {
+        logger.warn(`[eliza] Failed to install database trajectory logger (${context}): ${err instanceof Error ? err.message : err}`);
+    }
     await installPromptOptimizationLayer(runtime, context, config);
 }
 // ---------------------------------------------------------------------------
@@ -3068,7 +3093,7 @@ export async function startEliza(opts) {
     }
     else if (process.env.ELIZA_DEVICE_BRIDGE_ENABLED?.trim() === "1") {
         try {
-            const { ensureMobileDeviceBridgeInferenceHandlers } = await import("@elizaos/plugin-capacitor-bridge");
+            const { ensureMobileDeviceBridgeInferenceHandlers } = await import("@elizaos/plugin-capacitor-bridge/mobile-device-bridge-bootstrap");
             await ensureMobileDeviceBridgeInferenceHandlers(runtime);
         }
         catch (err) {
@@ -3106,6 +3131,7 @@ export async function startEliza(opts) {
     catch (err) {
         logger.warn(`[eliza] Roles capability pre-registration failed: ${formatError(err)}`);
     }
+    bootTimer.lap("svc:roles-register");
     const warmAgentSkillsService = async () => {
         // Let runtime startup complete first; this warm-up runs asynchronously
         // so API + agent come online immediately.
@@ -3174,6 +3200,8 @@ export async function startEliza(opts) {
     const registerRemoteCodingRunner = async () => {
         if (isBundledMobileRuntime())
             return;
+        if (!shouldLoadRemoteCodingRunnerForBoot(runtime))
+            return;
         try {
             const { registerE2BRemoteCapabilityRouterIfEnabled } = await loadE2BCapabilityRouterModule();
             const result = await registerE2BRemoteCapabilityRouterIfEnabled(runtime);
@@ -3355,6 +3383,20 @@ export async function startEliza(opts) {
             logger.debug(`[eliza] WEB_FETCH action registration skipped: ${formatError(err)}`);
         }
     };
+    const registerWebSearchActionIfEnabled = async () => {
+        try {
+            const { webSearch, isWebSearchEnabled } = await import("./actions/web-search.js");
+            if (!isWebSearchEnabled()) {
+                logger.info("[eliza] WEB_SEARCH action disabled; set ELIZA_INLINE_WEB_SEARCH=1 to force inline search, or unset ELIZA_SERVER_WEB_SEARCH when using the default inline surface");
+                return;
+            }
+            runtime.registerAction(webSearch);
+            logger.info("[eliza] Registered keyless WEB_SEARCH action");
+        }
+        catch (err) {
+            logger.debug(`[eliza] WEB_SEARCH action registration skipped: ${formatError(err)}`);
+        }
+    };
     const isAutonomyEnabled = () => ["true", "1"].includes((process.env.ENABLE_AUTONOMY ?? "").toLowerCase());
     const startAutonomyServiceIfEnabled = async (autonomyEnabled) => {
         if (autonomyEnabled && !runtime.getService("AUTONOMY")) {
@@ -3497,7 +3539,9 @@ export async function startEliza(opts) {
     // requested). The runtime is reported ready as soon as this resolves.
     const initializeRuntimeServices = async () => {
         await runStewardEvmPreBoot();
+        bootTimer.lap("svc:steward-evm");
         await registerConnectorSetupService();
+        bootTimer.lap("svc:connector-setup");
         await registerRemoteCodingRunner();
         bootTimer.lap("svc:pre-init");
         if (blockDeferredPluginImports) {
@@ -3632,31 +3676,36 @@ export async function startEliza(opts) {
         await syncRemoteCapabilityPluginsIfAvailable();
         await applyPluginRoleGatingIfAvailable();
         await registerConversationProximityProvider();
+        // Probe the embedding dimension BEFORE seeding bundled documents (#8769).
+        // The deferred plugin waves above register the cloud TEXT_EMBEDDING handler
+        // (plugin-elizacloud, 1536-dim); the probe in runtime.initialize() ran ~38s
+        // earlier, before that handler existed, so the SQL adapter kept its
+        // hardcoded dim384 default. seedBundledDocumentsIfEnabled() embeds its docs
+        // at 1536 via the cloud handler, so if the column is still dim384 every
+        // bundled-doc vector is dropped on a "dimension mismatch with configured
+        // column (dim384)" and the agent boots with no recall memory. Snapping the
+        // column to dim1536 here — after the handler is registered, before the seed
+        // writes — lets those embeddings (and all later memory) persist.
+        // ensureEmbeddingDimension() is public, idempotent, and self-guarding (it
+        // no-ops when no TEXT_EMBEDDING handler is registered, e.g. cloud-proxied
+        // agents), so this is safe on every boot path.
+        try {
+            await runtime.ensureEmbeddingDimension();
+        }
+        catch (err) {
+            logger.warn(`[eliza] deferred embedding-dimension re-probe failed: ${err instanceof Error ? err.message : String(err)}`);
+        }
         await seedBundledDocumentsIfEnabled();
         await runStewardEvmPostBoot();
         await installServerSideWebSearchIfAvailable();
         await registerWebFetchActionIfEnabled();
+        await registerWebSearchActionIfEnabled();
         bootTimer.lap("deferred:post-init");
         const autonomyLoopEnabled = isAutonomyEnabled();
         await startAutonomyServiceIfEnabled(true);
         await enableAutonomyLoopIfAvailable(autonomyLoopEnabled);
         startAgentSkillsWarmup();
         startEmbeddingWarmup();
-        // Re-probe the embedding dimension now that the deferred plugin waves have
-        // registered the cloud TEXT_EMBEDDING handler (plugin-elizacloud). The probe
-        // in runtime.initialize() runs ~38s earlier — before that deferred handler
-        // exists — so on a cloud agent it finds no TEXT_EMBEDDING model and the SQL
-        // adapter keeps its hardcoded dim384 default; every 1536-dim cloud vector is
-        // then dropped on a "dimension mismatch with configured column (dim384)".
-        // ensureEmbeddingDimension() is public, idempotent, and self-guarding (it
-        // no-ops when no handler is registered, e.g. cloud-proxied agents), so this
-        // safely snaps the column to dim1536 and lets memory embeddings persist.
-        try {
-            await runtime.ensureEmbeddingDimension();
-        }
-        catch (err) {
-            logger.warn(`[eliza] deferred embedding-dimension re-probe failed: ${err instanceof Error ? err.message : String(err)}`);
-        }
         // Trigger the lazy wallet singleton fire-and-forget. This is a safety net
         // — if no wallet route or signing flow triggers it earlier, wallets are
         // still generated here. The singleton keeps this harmless if already
@@ -3672,9 +3721,22 @@ export async function startEliza(opts) {
         // actions like TASKS (agent-orchestrator) and PLAY_EMOTE (companion) that
         // simply hadn't loaded yet.
         validateIntentActionMap(runtime.actions.map((a) => a.name), runtime.logger);
+        // Same timing: turn the (previously dead-but-tested) view-coverage validators
+        // into a live drift guard now that all plugins/views are registered (#8798).
+        // Warns when a VIEW_ACTION_MAP entry names an unregistered action, or a
+        // registered view has neither an affinity entry nor a declared ViewCapability.
+        const developerViews = listViews({ developerMode: true });
+        validateViewActionMap(runtime.actions.map((a) => a.name), runtime.logger);
+        validateViewCoverage(developerViews.map((v) => v.id), developerViews.filter((v) => v.capabilities?.length).map((v) => v.id), runtime.logger);
         bootTimer.lap("deferred:complete");
     };
     try {
+        // Time from the register-sql lap up to entering service init (roles
+        // capability registration + any blocking pre-init work). Split out so a
+        // device boot can attribute the dominant cost instead of lumping it into
+        // svc:pre-init (issue #9565): on a bundled mobile runtime the three hooks
+        // below are each fast/no-op, yet svc:pre-init was ~15s of a 16s cold boot.
+        bootTimer.lap("svc:boot-prep");
         await initializeRuntimeServices();
     }
     catch (err) {
@@ -3941,7 +4003,8 @@ export async function startEliza(opts) {
                     catch {
                         // non-fatal
                     }
-                    if (!isBundledMobileRuntime()) {
+                    if (!isBundledMobileRuntime() &&
+                        shouldLoadRemoteCodingRunnerForBoot(newRuntime)) {
                         try {
                             const { registerE2BRemoteCapabilityRouterIfEnabled } = await loadE2BCapabilityRouterModule();
                             await registerE2BRemoteCapabilityRouterIfEnabled(newRuntime);

package/runtime/first-time-setup.d.ts

@@ -14,11 +14,9 @@
  *   7. GitHub access (local runtime only)
  *   8. Persist agent + style + provider + embedding config
  *
- * Extracted from eliza.ts to reduce file size.
- *
  * @module first-time-setup
  */
-import { type ElizaConfig } from "../config/config.ts";
+import { type ElizaConfig } from "../config/config.js";
 type FirstTimeSetupCloudResult = CloudFirstRunResult;
 interface CloudFirstRunResult {
     apiKey: string;