@elizaos/agent 2.0.3-beta.2 → 2.0.3-beta.4

package/api/permissions-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permissions-routes.d.ts","sourceRoot":"","sources":["../../src/api/permissions-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,KAAK,EAIV,eAAe,EAGhB,MAAM,iBAAiB,CAAC;AASzB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAEpE,UAAU,8BAA+B,SAAQ,oBAAoB;IACnE,QAAQ,CAAC,EAAE;QACT,YAAY,CAAC,EAAE,OAAO,CAAC;KACxB,CAAC;IACF,OAAO,CAAC,EAAE;QACR,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,OAAO,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC,CAAC;KACjD,CAAC;CACH;AA+SD,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IAC7B,MAAM,EAAE,8BAA8B,CAAC;IACvC,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACnD,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,sBAAuB,SAAQ,mBAAmB;IACjE,KAAK,EAAE,oBAAoB,CAAC;IAC5B,UAAU,EAAE,CAAC,MAAM,EAAE,8BAA8B,KAAK,IAAI,CAAC;IAC7D,sBAAsB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CAClD;AAED,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,sBAAsB,GAC1B,OAAO,CAAC,OAAO,CAAC,CA8QlB"}
+{"version":3,"file":"permissions-routes.d.ts","sourceRoot":"","sources":["../../src/api/permissions-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,KAAK,EAIV,eAAe,EAGhB,MAAM,iBAAiB,CAAC;AASzB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAEpE,UAAU,8BAA+B,SAAQ,oBAAoB;IACnE,QAAQ,CAAC,EAAE;QACT,YAAY,CAAC,EAAE,OAAO,CAAC;KACxB,CAAC;IACF,OAAO,CAAC,EAAE;QACR,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,OAAO,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC,CAAC;KACjD,CAAC;CACH;AAqTD,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IAC7B,MAAM,EAAE,8BAA8B,CAAC;IACvC,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACnD,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,sBAAuB,SAAQ,mBAAmB;IACjE,KAAK,EAAE,oBAAoB,CAAC;IAC5B,UAAU,EAAE,CAAC,MAAM,EAAE,8BAA8B,KAAK,IAAI,CAAC;IAC7D,sBAAsB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CAClD;AAED,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,sBAAsB,GAC1B,OAAO,CAAC,OAAO,CAAC,CA8QlB"}

package/api/permissions-routes.js

@@ -29,15 +29,16 @@ function currentPlatform() {
     const p = process.platform;
     return p === "darwin" || p === "win32" || p === "linux" ? p : "linux";
 }
-function getPermissionRegistry(runtime) {
-    const service = runtime?.getService(PERMISSIONS_REGISTRY_SERVICE);
-    return service &&
-        typeof service === "object" &&
+function isPermissionsRegistry(service) {
+    return (typeof service === "object" &&
+        service !== null &&
         "get" in service &&
         "check" in service &&
-        "request" in service
-        ? service
-        : null;
+        "request" in service);
+}
+function getPermissionRegistry(runtime) {
+    const service = runtime?.getService(PERMISSIONS_REGISTRY_SERVICE);
+    return isPermissionsRegistry(service) ? service : null;
 }
 function unavailableWebsiteBlockingPermission() {
     return {

package/api/plugin-discovery-helpers.d.ts

@@ -1,14 +1,13 @@
 /**
  * Plugin discovery and categorization helpers.
  *
- * Extracted from server.ts. Handles reading the plugins.json manifest,
- * categorizing plugins, building parameter definitions, and aggregating
- * secrets for the plugin management UI.
+ * Handles reading the plugins.json manifest, categorizing plugins, building
+ * parameter definitions, and aggregating secrets for the plugin management UI.
  */
-import type { ElizaConfig } from "../config/config.ts";
+import type { ElizaConfig } from "../config/config.js";
 export type { LogEntry, SkillEntry, StreamEventEnvelope, StreamEventType, } from "@elizaos/shared";
-export type { PluginEntry, PluginParamDef } from "./server-types.ts";
-import type { PluginEntry, PluginParamDef } from "./server-types.ts";
+export type { PluginEntry, PluginParamDef } from "./server-types.js";
+import type { PluginEntry, PluginParamDef } from "./server-types.js";
 export declare function getReleaseBundledPluginIds(): Set<string>;
 export interface PluginIndexEntry {
     id: string;

package/api/plugin-discovery-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-discovery-helpers.d.ts","sourceRoot":"","sources":["../../src/api/plugin-discovery-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAqGvD,YAAY,EACV,QAAQ,EACR,UAAU,EACV,mBAAmB,EACnB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAErE,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAErE,wBAAgB,0BAA0B,IAAI,GAAG,CAAC,MAAM,CAAC,CAiBxD;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EACJ,aAAa,GACb,WAAW,GACX,WAAW,GACX,UAAU,GACV,KAAK,GACL,SAAS,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,gBAAgB,EAAE,CAAC;CAC7B;AA4BD,KAAK,yBAAyB,GAAG;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB,CAAC;AAYF,KAAK,qBAAqB,GAAG;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IAC7D,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACzD,CAAC;AAiCF,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAQrE;AAuQD,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAG/C;AAED,wBAAgB,cAAc,CAC5B,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACpD,cAAc,EAAE,CA+BlB;AAED,4EAA4E;AAC5E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAkDpD;AAED,qFAAqF;AACrF,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAO/D;AAMD,eAAO,MAAM,gBAAgB,aA2C3B,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,aAyCxC,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,2BAA2B,aActC,CAAC;AAMH,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC3E;AAoBD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CA+CvD;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,WAAW,EAAE,CAwCtE;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,WAAW,EACnB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,GACtB,WAAW,EAAE,CAqJf;AAID;;;GAGG;AACH,wBAAgB,2BAA2B,IAAI,WAAW,EAAE,CAmI3D;AAED,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,MAAM,GACT,aAAa,GAAG,WAAW,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,CAqDpE;AA8GD,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAOzE;AAED,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,GACtE,MAAM,GAAG,SAAS,CAiBpB;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,MAAM,GAAG,SAAS,CAIpB;AAED,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAWrE;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,EAAE,CAYrE;AAED,wBAAgB,uBAAuB,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,CAWvE;AAED,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,CAEjD;AAED,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,CAQ1D;AAED,wBAAgB,wBAAwB,CACtC,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,WAAW,CAAC,UAAU,CAAC,EACjC,WAAW,EAAE,MAAM,GAAG,SAAS,GAC9B,MAAM,CA2BR;AAED,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,WAAW,CAAC,UAAU,CAAC,EACjC,GAAG,OAAO,EAAE,OAAO,EAAE,GACpB,MAAM,EAAE,CAOV;AAED,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAKnD;AAED,wBAAgB,gCAAgC,CAC9C,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,CAAC,EAAE,MAAM,GACf,qBAAqB,CAiFvB"}
+{"version":3,"file":"plugin-discovery-helpers.d.ts","sourceRoot":"","sources":["../../src/api/plugin-discovery-helpers.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAqGvD,YAAY,EACV,QAAQ,EACR,UAAU,EACV,mBAAmB,EACnB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAErE,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAErE,wBAAgB,0BAA0B,IAAI,GAAG,CAAC,MAAM,CAAC,CAiBxD;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EACJ,aAAa,GACb,WAAW,GACX,WAAW,GACX,UAAU,GACV,KAAK,GACL,SAAS,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,gBAAgB,EAAE,CAAC;CAC7B;AA4BD,KAAK,yBAAyB,GAAG;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB,CAAC;AAYF,KAAK,qBAAqB,GAAG;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IAC7D,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACzD,CAAC;AAiCF,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAQrE;AAuQD,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAG/C;AAED,wBAAgB,cAAc,CAC5B,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACpD,cAAc,EAAE,CA+BlB;AAED,4EAA4E;AAC5E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAkDpD;AAED,qFAAqF;AACrF,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAO/D;AAMD,eAAO,MAAM,gBAAgB,aA0C3B,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,aAyCxC,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,2BAA2B,aAetC,CAAC;AAMH,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC3E;AAoBD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CA+CvD;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,WAAW,EAAE,CAwCtE;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,WAAW,EACnB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,GACtB,WAAW,EAAE,CAqJf;AAID;;;GAGG;AACH,wBAAgB,2BAA2B,IAAI,WAAW,EAAE,CAmI3D;AAED,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,MAAM,GACT,aAAa,GAAG,WAAW,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,CAqDpE;AA8GD,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAOzE;AAED,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,GACtE,MAAM,GAAG,SAAS,CAiBpB;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,MAAM,GAAG,SAAS,CAIpB;AAED,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAWrE;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,EAAE,CAYrE;AAED,wBAAgB,uBAAuB,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,CAWvE;AAED,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,CAEjD;AAED,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,CAQ1D;AAED,wBAAgB,wBAAwB,CACtC,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,WAAW,CAAC,UAAU,CAAC,EACjC,WAAW,EAAE,MAAM,GAAG,SAAS,GAC9B,MAAM,CA2BR;AAED,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,WAAW,CAAC,UAAU,CAAC,EACjC,GAAG,OAAO,EAAE,OAAO,EAAE,GACpB,MAAM,EAAE,CAOV;AAED,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAKnD;AAED,wBAAgB,gCAAgC,CAC9C,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,CAAC,EAAE,MAAM,GACf,qBAAqB,CAiFvB"}

package/api/plugin-discovery-helpers.js

@@ -1,9 +1,8 @@
 /**
  * Plugin discovery and categorization helpers.
  *
- * Extracted from server.ts. Handles reading the plugins.json manifest,
- * categorizing plugins, building parameter definitions, and aggregating
- * secrets for the plugin management UI.
+ * Handles reading the plugins.json manifest, categorizing plugins, building
+ * parameter definitions, and aggregating secrets for the plugin management UI.
  */
 import fs from "node:fs";
 import { createRequire } from "node:module";
@@ -421,7 +420,6 @@ export const BLOCKED_ENV_KEYS = new Set([
     "ELIZA_API_TOKEN",
     "ELIZA_WALLET_EXPORT_TOKEN",
     "ELIZA_TERMINAL_RUN_TOKEN",
-    "HYPERSCAPE_AUTH_TOKEN",
     // Wallet private keys — writable via API would enable key theft / replacement
     "EVM_PRIVATE_KEY",
     "SOLANA_PRIVATE_KEY",
@@ -497,6 +495,7 @@ export const AGENT_EVENT_ALLOWED_STREAMS = new Set([
     "assistant",
     "thought",
     "action",
+    "notification",
     "viewer_stats",
 ]);
 const AI_PROVIDERS = new Set([

package/api/plugin-runtime-apply.d.ts

@@ -1,6 +1,6 @@
 import { type AgentRuntime } from "@elizaos/core";
-import type { ElizaConfig } from "../config/config.ts";
-import type { ResolvedPlugin } from "../runtime/plugin-types.ts";
+import type { ElizaConfig } from "../config/config.js";
+import type { ResolvedPlugin } from "../runtime/plugin-types.js";
 export type PluginRuntimeApplyMode = "none" | "config_apply" | "plugin_reload" | "runtime_reload" | "restart_required";
 export interface PluginRuntimeApplyResult {
     mode: PluginRuntimeApplyMode;

package/api/plugin-runtime-apply.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-runtime-apply.d.ts","sourceRoot":"","sources":["../../src/api/plugin-runtime-apply.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAAU,MAAM,eAAe,CAAC;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEjE,MAAM,MAAM,sBAAsB,GAC9B,MAAM,GACN,cAAc,GACd,eAAe,GACf,gBAAgB,GAChB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,iCAAiC;IACzC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,WAAW,CAAC;IAC5B,UAAU,EAAE,WAAW,CAAC;IACxB,uBAAuB,CAAC,EAAE,cAAc,EAAE,CAAC;IAC3C,mBAAmB,CAAC,EAAE,cAAc,EAAE,CAAC;IACvC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACvD;AAqFD,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,iCAAiC,GACzC,OAAO,CAAC,wBAAwB,CAAC,CAmNnC"}
+{"version":3,"file":"plugin-runtime-apply.d.ts","sourceRoot":"","sources":["../../src/api/plugin-runtime-apply.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAAU,MAAM,eAAe,CAAC;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEjE,MAAM,MAAM,sBAAsB,GAC9B,MAAM,GACN,cAAc,GACd,eAAe,GACf,gBAAgB,GAChB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,iCAAiC;IACzC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,WAAW,CAAC;IAC5B,UAAU,EAAE,WAAW,CAAC;IACxB,uBAAuB,CAAC,EAAE,cAAc,EAAE,CAAC;IAC3C,mBAAmB,CAAC,EAAE,cAAc,EAAE,CAAC;IACvC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACvD;AAkJD,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,iCAAiC,GACzC,OAAO,CAAC,wBAAwB,CAAC,CAuPnC"}

package/api/plugin-runtime-apply.js

@@ -57,6 +57,49 @@ function packageRequiresRuntimeReload(packageName, previousResolvedMap, nextReso
     const nextPlugin = nextResolvedMap.get(packageName)?.plugin;
     return Boolean(previousPlugin?.adapter || nextPlugin?.adapter);
 }
+/**
+ * Two-phase reload rollback. A `plugin_reload` that throws partway leaves the
+ * in-memory plugin graph half-torn-down (plugins unloaded, replacements not
+ * registered) — a broken runtime. This undoes the partial mutation: it
+ * unregisters anything we newly registered, then re-registers (from their
+ * PREVIOUS resolved definitions) anything we unloaded, restoring the runtime to
+ * its pre-reload state. Returns true only when every step succeeded; a false
+ * means the graph may still be inconsistent and a full restart is the last
+ * resort. Best-effort and exception-safe — it never throws.
+ */
+async function rollbackPartialReload(opts) {
+    const { runtime, previousResolvedMap, nextResolvedMap, unloadedPackages, registeredPackages, } = opts;
+    let ok = true;
+    // 1. Unregister anything we newly registered (its NEXT plugin name).
+    for (const packageName of registeredPackages) {
+        const name = nextResolvedMap.get(packageName)?.plugin.name;
+        if (!name)
+            continue;
+        try {
+            await runtime.unloadPlugin(name);
+        }
+        catch (error) {
+            ok = false;
+            logger.warn(`[plugin-runtime-apply] rollback: failed to unregister newly-loaded ${packageName}: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    // 2. Re-register the plugins we unloaded, from their PREVIOUS definitions.
+    for (const packageName of unloadedPackages) {
+        const previousPlugin = previousResolvedMap.get(packageName)?.plugin;
+        if (!previousPlugin) {
+            ok = false;
+            continue;
+        }
+        try {
+            await runtime.registerPlugin(previousPlugin);
+        }
+        catch (error) {
+            ok = false;
+            logger.warn(`[plugin-runtime-apply] rollback: failed to re-register ${packageName} from previous definition: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    return ok;
+}
 export async function applyPluginRuntimeMutation(options) {
     const { runtime, previousConfig, nextConfig, changedPluginId, changedPluginPackage, config, forceReloadPackages = [], expectRuntimeGraphChange = false, reason, restartRuntime, } = options;
     if (!runtime) {
@@ -211,6 +254,37 @@ export async function applyPluginRuntimeMutation(options) {
     }
     catch (error) {
         logger.warn(`[plugin-runtime-apply] Plugin reload failed for "${reason}": ${error instanceof Error ? error.message : String(error)}`);
+        // If we already mutated the graph, roll it back BEFORE any restart fallback
+        // so the runtime is never observed half-torn-down. A clean rollback restores
+        // the previous plugin graph; we then surface restart_required so the caller
+        // schedules a restart to actually apply the (failed) change — the old plugin
+        // keeps working in the interim instead of vanishing.
+        const mutated = unloadedPackages.length > 0 ||
+            reloadedPackages.length > 0 ||
+            loadedPackages.length > 0;
+        if (mutated) {
+            const rolledBack = await rollbackPartialReload({
+                runtime,
+                previousResolvedMap,
+                nextResolvedMap,
+                unloadedPackages,
+                registeredPackages: [...reloadedPackages, ...loadedPackages],
+            });
+            if (rolledBack) {
+                logger.info(`[plugin-runtime-apply] Rolled back partial reload for "${reason}"; runtime restored to previous plugin graph.`);
+                return {
+                    mode: "restart_required",
+                    requiresRestart: true,
+                    restartedRuntime: false,
+                    loadedPackages: [],
+                    unloadedPackages: [],
+                    reloadedPackages: [],
+                    appliedConfigPackage,
+                    reason: `${reason} (reload failed; rolled back to previous plugin graph)`,
+                };
+            }
+            logger.warn(`[plugin-runtime-apply] Rollback after failed reload for "${reason}" was incomplete; falling back to runtime restart.`);
+        }
         const restartResult = await tryRuntimeRestart();
         return { ...restartResult, appliedConfigPackage };
     }

package/api/provider-switch-config.d.ts

@@ -1,6 +1,6 @@
 import type { DeploymentTargetConfig, LinkedAccountFlagsConfig, ServiceCapability, ServiceRoutingConfig } from "@elizaos/shared";
 import { type FirstRunConnection, type FirstRunCredentialInputs } from "@elizaos/shared";
-import type { ElizaConfig } from "../config/types.eliza.ts";
+import type { ElizaConfig } from "../config/types.eliza.js";
 type MutableElizaConfig = Partial<ElizaConfig> & {
     cloud?: Record<string, unknown>;
     models?: Record<string, unknown>;

package/api/provider-switch-routes.d.ts

@@ -1,8 +1,8 @@
 import type http from "node:http";
 import type { ReadJsonBodyOptions } from "@elizaos/shared";
 import type { SecretsManager } from "@elizaos/vault";
-import type { ElizaConfig } from "../config/config.ts";
-import { type RuntimeOperationManager } from "../runtime/operations/index.ts";
+import type { ElizaConfig } from "../config/config.js";
+import { type RuntimeOperationManager } from "../runtime/operations/index.js";
 export interface ProviderSwitchRouteContext {
     req: http.IncomingMessage;
     res: http.ServerResponse;

package/api/registry-routes.d.ts

@@ -1,5 +1,5 @@
 import type { RouteHelpers, RouteRequestMeta } from "@elizaos/core";
-import type { RegistryPluginInfo, RegistrySearchResult } from "../services/plugin-manager-types.ts";
+import type { RegistryPluginInfo, RegistrySearchResult } from "../services/plugin-manager-types.js";
 interface InstalledRegistryPluginLike {
     name: string;
     version?: string | null;

package/api/registry-service.d.ts

@@ -7,7 +7,7 @@
  * - Metadata (tokenURI) management
  * - Status queries
  */
-import type { TxService } from "./tx-service.ts";
+import type { TxService } from "./tx-service.js";
 export interface RegistryStatus {
     registered: boolean;
     tokenId: number;

package/api/remote-capability-routes.d.ts

@@ -1,7 +1,7 @@
 import type http from "node:http";
 import { type IAgentRuntime, type RouteHelpers, type RouteRequestMeta } from "@elizaos/core";
-import { type ConnectCloudCapabilitySandboxOptions, type ConnectCloudCapabilitySandboxResult } from "../services/remote-capability-cloud-sandbox.ts";
-import { type ConnectRemoteCapabilityEndpointProviderOptions, type ConnectRemoteCapabilityEndpointProviderResult } from "../services/remote-capability-endpoint-provider.ts";
+import { type ConnectCloudCapabilitySandboxOptions, type ConnectCloudCapabilitySandboxResult } from "../services/remote-capability-cloud-sandbox.js";
+import { type ConnectRemoteCapabilityEndpointProviderOptions, type ConnectRemoteCapabilityEndpointProviderResult } from "../services/remote-capability-endpoint-provider.js";
 type JsonBodyReader = <T = Record<string, unknown>>(req: http.IncomingMessage, res: http.ServerResponse, options?: {
     requireObject?: boolean;
 }) => Promise<T | null>;

package/api/remote-capability-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remote-capability-routes.d.ts","sourceRoot":"","sources":["../../src/api/remote-capability-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAIL,KAAK,aAAa,EAElB,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,KAAK,oCAAoC,EACzC,KAAK,mCAAmC,EAEzC,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,KAAK,8CAA8C,EACnD,KAAK,6CAA6C,EAMnD,MAAM,oDAAoD,CAAC;AAkB5D,KAAK,cAAc,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChD,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,OAAO,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,KAClC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAEvB,MAAM,WAAW,4BACf,SAAQ,gBAAgB,EACtB,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;IACtC,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,MAAM,CAAC,EAAE,6BAA6B,CAAC;IACvC,YAAY,EAAE,cAAc,CAAC;IAC7B,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,6BAA6B,KAAK,IAAI,CAAC;IAC7D,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,uBAAuB,CAAC,EAAE,CAAC,QAAQ,EACjC,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,8CAA8C,CAAC,QAAQ,CAAC,KAC9D,OAAO,CAAC,6CAA6C,CAAC,CAAC;IAC5D,mBAAmB,CAAC,EAAE,CACpB,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,oCAAoC,KAC1C,OAAO,CAAC,mCAAmC,CAAC,CAAC;CACnD;AAiDD,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,4BAA4B,GAChC,OAAO,CAAC,OAAO,CAAC,CA2MlB;AAqFD,KAAK,6BAA6B,GAAG;IACnC,GAAG,CAAC,EAAE;QACJ,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CAAC"}
+{"version":3,"file":"remote-capability-routes.d.ts","sourceRoot":"","sources":["../../src/api/remote-capability-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAIL,KAAK,aAAa,EAElB,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACtB,MAAM,eAAe,CAAC;AAMvB,OAAO,EACL,KAAK,oCAAoC,EACzC,KAAK,mCAAmC,EAEzC,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,KAAK,8CAA8C,EACnD,KAAK,6CAA6C,EAMnD,MAAM,oDAAoD,CAAC;AAkB5D,KAAK,cAAc,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChD,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,OAAO,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,KAClC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAEvB,MAAM,WAAW,4BACf,SAAQ,gBAAgB,EACtB,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;IACtC,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,MAAM,CAAC,EAAE,6BAA6B,CAAC;IACvC,YAAY,EAAE,cAAc,CAAC;IAC7B,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,6BAA6B,KAAK,IAAI,CAAC;IAC7D,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,uBAAuB,CAAC,EAAE,CAAC,QAAQ,EACjC,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,8CAA8C,CAAC,QAAQ,CAAC,KAC9D,OAAO,CAAC,6CAA6C,CAAC,CAAC;IAC5D,mBAAmB,CAAC,EAAE,CACpB,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,oCAAoC,KAC1C,OAAO,CAAC,mCAAmC,CAAC,CAAC;CACnD;AAiDD,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,4BAA4B,GAChC,OAAO,CAAC,OAAO,CAAC,CA2MlB;AAqFD,KAAK,6BAA6B,GAAG;IACnC,GAAG,CAAC,EAAE;QACJ,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CAAC"}

package/api/remote-capability-routes.js

@@ -1,4 +1,6 @@
+import net from "node:net";
 import { CAPABILITY_ROUTER_SERVICE_TYPE, CapabilityError, } from "@elizaos/core";
+import { isBlockedPrivateOrLinkLocalIp, isLoopbackHost, normalizeHostLike, } from "../security/network-policy.js";
 import { connectCloudCapabilitySandbox, } from "../services/remote-capability-cloud-sandbox.js";
 import { connectRemoteCapabilityEndpointProvider, directRemoteCapabilityEndpointProvider, normalizeEndpointTrustPolicyOptions, } from "../services/remote-capability-endpoint-provider.js";
 import { desktopCompanionCapabilityEndpointProvider, e2bCapabilityEndpointProvider, homeMachineCapabilityEndpointProvider, mobileCompanionCapabilityEndpointProvider, } from "../services/remote-capability-url-endpoint-providers.js";
@@ -537,6 +539,23 @@ function requireHttpUrl(value, field) {
     if (parsed.username || parsed.password) {
         throw new Error(`${field} must not include embedded credentials.`);
     }
+    // SSRF guard: a remote-capability endpoint baseUrl is attacker-controlled by
+    // any authenticated caller (dedicated agents are reachable from the internet
+    // via the cloud proxy), and the router fetches it directly. Block literal
+    // private/loopback/link-local IPs and internal hostnames so it can't be aimed
+    // at cloud metadata (169.254.169.254) or internal services. Mirrors the host
+    // blocklist in runtime/custom-actions.ts. (Does not resolve DNS, so a public
+    // name pointing at a private address is not covered here.)
+    const host = normalizeHostLike(parsed.hostname);
+    if (!host ||
+        host === "0.0.0.0" ||
+        host === "metadata.google.internal" ||
+        host.endsWith(".local") ||
+        host.endsWith(".internal") ||
+        isLoopbackHost(host) ||
+        (net.isIP(host) !== 0 && isBlockedPrivateOrLinkLocalIp(host))) {
+        throw new Error(`${field} must not target a private, loopback, link-local, or internal address.`);
+    }
     parsed.hash = "";
     parsed.search = "";
     return parsed.toString().replace(/\/+$/, "");

package/api/server-autonomy-helpers.d.ts

@@ -1,5 +1,5 @@
-import type { AgentEventPayloadLike } from "../runtime/agent-event-service.ts";
-import type { ServerState } from "./server-types.ts";
+import type { AgentEventPayloadLike } from "../runtime/agent-event-service.js";
+import type { ServerState } from "./server-types.js";
 export declare function isLifeOpsCloudPluginRoute(pathname: string): boolean;
 export declare function maybeRouteAutonomyEventToConversation(state: ServerState, event: AgentEventPayloadLike): Promise<void>;
 //# sourceMappingURL=server-autonomy-helpers.d.ts.map

package/api/server-helpers-auth.d.ts

@@ -22,6 +22,16 @@ export interface WaifuChatAccess {
 export declare function resolveWaifuChatAccessToken(token: string | null | undefined, nowSeconds?: number): WaifuChatAccess | null;
 export declare function resolveWaifuChatAccess(req: http.IncomingMessage): WaifuChatAccess | null;
 export declare function isWaifuChatAuthorized(req: http.IncomingMessage, method: string, pathname: string): boolean;
+/**
+ * Same-machine dashboard trust for the agent server. Delegates to the canonical
+ * `@elizaos/shared` parser with the agent's exact policy gates:
+ *  - cloudCheck "container": `isCloudProvisionedContainer()` (the flag AND a
+ *    provisioning token), NOT the raw `ELIZA_CLOUD_PROVISIONED` flag.
+ *  - requireLocalAuthEnv: on-device local agents (Android) set
+ *    `ELIZA_REQUIRE_LOCAL_AUTH=1` alongside a per-boot `ELIZA_API_TOKEN`, so
+ *    loopback alone is not a trust signal there.
+ *  - NO dev-auth bypass: the agent never honours `ELIZA_DEV_AUTH_BYPASS`.
+ */
 export declare function isTrustedLocalRequest(req: http.IncomingMessage): boolean;
 /**
  * True when the request carries a valid `X-Server-Token` matching the

package/api/server-helpers-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server-helpers-auth.d.ts","sourceRoot":"","sources":["../../src/api/server-helpers-auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAyBlC,eAAO,MAAM,oBAAoB,QAoBrB,CAAC;AAcb,wBAAgB,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,GAAG,OAAO,CA0ChE;AAED,wBAAgB,iBAAiB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA+BhE;AAqCD,wBAAgB,SAAS,CACvB,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,QAAQ,EAAE,MAAM,GACf,OAAO,CAsCT;AAaD,wBAAgB,qBAAqB,IAAI,MAAM,GAAG,SAAS,CAE1D;AAkCD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,GAAG,MAAM,GAAG,IAAI,CA8BzE;AAED,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;AACvD,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;AAE5D,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,aAAa,GAClB,kBAAkB,CAIpB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,aAAa,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AA0CD,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAChC,UAAU,SAAgC,GACzC,eAAe,GAAG,IAAI,CAiFxB;AAED,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,IAAI,CAAC,eAAe,GACxB,eAAe,GAAG,IAAI,CAExB;AAsBD,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAKT;AAsLD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,GAAG,OAAO,CA0BxE;AA6BD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,GAAG,OAAO,CAM1E;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,GAAG,OAAO,CAY/D;AA2CD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAiC5D;AAeD,wBAAgB,cAAc,IAAI,OAAO,CAKxC;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzD;AAUD,wBAAgB,iBAAiB,IAAI,MAAM,GAAG,IAAI,CAWjD;AAED,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAe3D;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED,wBAAgB,YAAY,IAAI,IAAI,CAGnC;AAQD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAMjE;AAED,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,EAC1C,IAAI,EAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,GAC9C,MAAM,GAAG,IAAI,CAMf;AAOD,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAElE;AAMD,UAAU,sBAAsB;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,GAAG,GAAG,GAAG,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,IAAI,EAAE,sBAAsB,GAC3B,oBAAoB,GAAG,IAAI,CA0C7B;AA0BD,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,IAAI,CAAC,eAAe,EAC7B,GAAG,EAAE,GAAG,GACP,OAAO,CAOT;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,gCAAgC,CAC9C,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,KAAK,EAAE,GAAG,GACT,yBAAyB,GAAG,IAAI,CAuClC;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,OAAO,aAAa,EAAE,MAAM,EACpC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd,IAAI,CAmBN"}
+{"version":3,"file":"server-helpers-auth.d.ts","sourceRoot":"","sources":["../../src/api/server-helpers-auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AA0BlC,eAAO,MAAM,oBAAoB,QAoBrB,CAAC;AAcb,wBAAgB,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,GAAG,OAAO,CA0ChE;AAED,wBAAgB,iBAAiB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA+BhE;AAqCD,wBAAgB,SAAS,CACvB,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,QAAQ,EAAE,MAAM,GACf,OAAO,CAsCT;AAaD,wBAAgB,qBAAqB,IAAI,MAAM,GAAG,SAAS,CAE1D;AAkCD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,GAAG,MAAM,GAAG,IAAI,CA8BzE;AAED,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;AACvD,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;AAE5D,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,aAAa,GAClB,kBAAkB,CAIpB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,aAAa,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AA0CD,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAChC,UAAU,SAAgC,GACzC,eAAe,GAAG,IAAI,CAiFxB;AAED,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,IAAI,CAAC,eAAe,GACxB,eAAe,GAAG,IAAI,CAExB;AAsBD,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAKT;AAQD;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,GAAG,OAAO,CAMxE;AA6BD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,GAAG,OAAO,CAM1E;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,GAAG,OAAO,CAY/D;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAiC5D;AAeD,wBAAgB,cAAc,IAAI,OAAO,CAKxC;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzD;AAUD,wBAAgB,iBAAiB,IAAI,MAAM,GAAG,IAAI,CAWjD;AAED,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAe3D;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED,wBAAgB,YAAY,IAAI,IAAI,CAGnC;AAQD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAMjE;AAED,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,EAC1C,IAAI,EAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,GAC9C,MAAM,GAAG,IAAI,CAMf;AAOD,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAElE;AAMD,UAAU,sBAAsB;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,GAAG,GAAG,GAAG,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,IAAI,EAAE,sBAAsB,GAC3B,oBAAoB,GAAG,IAAI,CA0C7B;AA0BD,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,IAAI,CAAC,eAAe,EAC7B,GAAG,EAAE,GAAG,GACP,OAAO,CAOT;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,gCAAgC,CAC9C,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,KAAK,EAAE,GAAG,GACT,yBAAyB,GAAG,IAAI,CAuClC;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,OAAO,aAAa,EAAE,MAAM,EACpC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd,IAAI,CAmBN"}

package/api/server-helpers-auth.js

@@ -2,9 +2,8 @@
  * Auth, CORS, pairing, terminal, and WebSocket auth helpers extracted from server.ts.
  */
 import crypto from "node:crypto";
-import { isIP } from "node:net";
 import { logger } from "@elizaos/core";
-import { isCloudProvisionedContainer, isNullOriginAllowed, resolveAllowedHosts, resolveAllowedOrigins, resolveApiBindHost, resolveApiSecurityConfig, resolveApiToken, setApiToken, stripOptionalHostPort, } from "@elizaos/shared";
+import { isCloudProvisionedContainer, isLoopbackBindHost, isNullOriginAllowed, isTrustedLocalRequest as isTrustedLocalRequestShared, resolveAllowedHosts, resolveAllowedOrigins, resolveApiBindHost, resolveApiSecurityConfig, resolveApiToken, setApiToken, stripOptionalHostPort, } from "@elizaos/shared";
 import { sweepExpiredEntries } from "./memory-bounds.js";
 // ---------------------------------------------------------------------------
 // CORS
@@ -403,176 +402,22 @@ function firstHeaderValue(value) {
         return value[0];
     return null;
 }
-const CLIENT_IP_PROXY_HEADERS = new Set([
-    "forwarded",
-    "forwarded-for",
-    "x-forwarded",
-    "x-forwarded-for",
-    "x-original-forwarded-for",
-    "x-real-ip",
-    "x-client-ip",
-    "x-forwarded-client-ip",
-    "x-cluster-client-ip",
-    "cf-connecting-ip",
-    "true-client-ip",
-    "fastly-client-ip",
-    "x-appengine-user-ip",
-    "x-azure-clientip",
-]);
-function headerValues(value) {
-    if (typeof value === "string")
-        return [value];
-    if (Array.isArray(value)) {
-        return value.filter((item) => typeof item === "string");
-    }
-    return [];
-}
-function isClientIpProxyHeaderName(name) {
-    const normalized = name.toLowerCase();
-    return (CLIENT_IP_PROXY_HEADERS.has(normalized) ||
-        normalized.endsWith("-client-ip") ||
-        normalized.endsWith("-connecting-ip") ||
-        normalized.endsWith("-real-ip"));
-}
-function extractForwardedForCandidates(raw) {
-    const candidates = [];
-    const pattern = /(?:^|[;,])\s*for=(?:"([^"]*)"|([^;,]*))/gi;
-    for (const match of raw.matchAll(pattern)) {
-        candidates.push(match[1] ?? match[2] ?? "");
-    }
-    return candidates;
-}
-function extractProxyClientAddressCandidates(headerName, raw) {
-    if (headerName === "forwarded") {
-        return extractForwardedForCandidates(raw);
-    }
-    const forwardedCandidates = raw.toLowerCase().includes("for=")
-        ? extractForwardedForCandidates(raw)
-        : [];
-    if (forwardedCandidates.length > 0)
-        return forwardedCandidates;
-    return raw.split(",");
-}
-function stripMatchingQuotes(value) {
-    const trimmed = value.trim();
-    if ((trimmed.startsWith('"') && trimmed.endsWith('"')) ||
-        (trimmed.startsWith("'") && trimmed.endsWith("'"))) {
-        return trimmed.slice(1, -1);
-    }
-    return trimmed;
-}
-function isNeutralProxyClientAddress(raw) {
-    const normalized = stripMatchingQuotes(raw).trim().toLowerCase();
-    return (!normalized ||
-        normalized === "unknown" ||
-        normalized === "null" ||
-        normalized.startsWith("_"));
-}
-function normalizeProxyClientIp(raw) {
-    let normalized = stripMatchingQuotes(raw).trim();
-    if (!normalized)
-        return null;
-    if (normalized.startsWith("[")) {
-        const close = normalized.indexOf("]");
-        if (close > 0) {
-            normalized = normalized.slice(1, close);
-        }
-    }
-    else {
-        const ipv4HostPort = /^(\d{1,3}(?:\.\d{1,3}){3})(?::\d+)$/.exec(normalized);
-        if (ipv4HostPort?.[1]) {
-            normalized = ipv4HostPort[1];
-        }
-    }
-    const zoneIndex = normalized.indexOf("%");
-    if (zoneIndex >= 0) {
-        normalized = normalized.slice(0, zoneIndex);
-    }
-    normalized = normalized.trim().toLowerCase();
-    return isIP(normalized) ? normalized : null;
-}
-function isLoopbackProxyClientIp(ip) {
-    const normalized = ip.trim().toLowerCase();
-    return (normalized === "::1" ||
-        normalized === "0:0:0:0:0:0:0:1" ||
-        normalized.startsWith("127.") ||
-        normalized.startsWith("::ffff:127.") ||
-        normalized.startsWith("::ffff:0:127."));
-}
-function proxyClientHeaderBlocksLocalTrust(headers) {
-    for (const [rawName, rawValue] of Object.entries(headers)) {
-        const headerName = rawName.toLowerCase();
-        if (!isClientIpProxyHeaderName(headerName))
-            continue;
-        for (const value of headerValues(rawValue)) {
-            for (const candidate of extractProxyClientAddressCandidates(headerName, value)) {
-                if (isNeutralProxyClientAddress(candidate))
-                    continue;
-                const ip = normalizeProxyClientIp(candidate);
-                if (!ip || !isLoopbackProxyClientIp(ip))
-                    return true;
-            }
-        }
-    }
-    return false;
-}
-function isLoopbackRemoteAddress(remoteAddress) {
-    if (!remoteAddress)
-        return false;
-    const normalized = remoteAddress.trim().toLowerCase();
-    return (normalized === "127.0.0.1" ||
-        normalized === "::1" ||
-        normalized === "0:0:0:0:0:0:0:1" ||
-        normalized === "::ffff:127.0.0.1" ||
-        normalized === "::ffff:0:127.0.0.1");
-}
-function isTrustedLocalOrigin(raw) {
-    const trimmed = raw.trim();
-    if (!trimmed || trimmed === "null")
-        return true;
-    try {
-        const parsed = new URL(trimmed);
-        if (parsed.protocol === "file:" ||
-            parsed.protocol === "app:" ||
-            parsed.protocol === "tauri:" ||
-            parsed.protocol === "capacitor:" ||
-            parsed.protocol === "capacitor-electron:" ||
-            parsed.protocol === "electrobun:") {
-            return true;
-        }
-        return isLoopbackBindHost(parsed.hostname);
-    }
-    catch {
-        return false;
-    }
-}
+/**
+ * Same-machine dashboard trust for the agent server. Delegates to the canonical
+ * `@elizaos/shared` parser with the agent's exact policy gates:
+ *  - cloudCheck "container": `isCloudProvisionedContainer()` (the flag AND a
+ *    provisioning token), NOT the raw `ELIZA_CLOUD_PROVISIONED` flag.
+ *  - requireLocalAuthEnv: on-device local agents (Android) set
+ *    `ELIZA_REQUIRE_LOCAL_AUTH=1` alongside a per-boot `ELIZA_API_TOKEN`, so
+ *    loopback alone is not a trust signal there.
+ *  - NO dev-auth bypass: the agent never honours `ELIZA_DEV_AUTH_BYPASS`.
+ */
 export function isTrustedLocalRequest(req) {
-    if (isCloudProvisionedContainer())
-        return false;
-    // On-device local agent (Android): the loopback interface is shared with
-    // every other app on the device, so loopback alone is NOT a trust signal.
-    // The ElizaAgentService sets ELIZA_REQUIRE_LOCAL_AUTH=1 alongside a
-    // per-boot ELIZA_API_TOKEN; with this flag the server requires bearer
-    // auth on every route except /api/health (which is read-only liveness).
-    if (process.env.ELIZA_REQUIRE_LOCAL_AUTH === "1")
-        return false;
-    if (!isLoopbackRemoteAddress(req.socket.remoteAddress))
-        return false;
-    if (proxyClientHeaderBlocksLocalTrust(req.headers))
-        return false;
-    const host = firstHeaderValue(req.headers.host);
-    if (host && !isLoopbackBindHost(host))
-        return false;
-    const secFetchSite = firstHeaderValue(req.headers["sec-fetch-site"])?.toLowerCase();
-    if (secFetchSite === "cross-site")
-        return false;
-    const origin = firstHeaderValue(req.headers.origin);
-    if (origin && !isTrustedLocalOrigin(origin))
-        return false;
-    const referer = firstHeaderValue(req.headers.referer);
-    if (!origin && referer && !isTrustedLocalOrigin(referer))
-        return false;
-    return true;
+    return isTrustedLocalRequestShared(req, {
+        requireLocalAuthEnv: true,
+        devAuthBypassEnv: false,
+        cloudCheck: "container",
+    });
 }
 /**
  * Resolve the shared service-to-service secret used by the cloud gateways to
@@ -629,45 +474,6 @@ export function isAuthorized(req) {
         return false;
     return tokenMatches(expected, provided);
 }
-function isLoopbackBindHost(host) {
-    let normalized = host.trim().toLowerCase();
-    if (!normalized)
-        return true;
-    // Allow users to provide full URLs by mistake (e.g. http://localhost:2138)
-    if (normalized.startsWith("http://") || normalized.startsWith("https://")) {
-        try {
-            const parsed = new URL(normalized);
-            normalized = parsed.hostname.toLowerCase();
-        }
-        catch {
-            // Fall through and parse as raw host value.
-        }
-    }
-    // [::1]:2138 -> ::1
-    const bracketedIpv6 = /^\[([^\]]+)\](?::\d+)?$/.exec(normalized);
-    if (bracketedIpv6?.[1]) {
-        normalized = bracketedIpv6[1];
-    }
-    else {
-        // localhost:2138 -> localhost, 127.0.0.1:2138 -> 127.0.0.1
-        const singleColonHostPort = /^([^:]+):(\d+)$/.exec(normalized);
-        if (singleColonHostPort?.[1]) {
-            normalized = singleColonHostPort[1];
-        }
-    }
-    normalized = normalized.replace(/^\[|\]$/g, "");
-    if (!normalized)
-        return true;
-    if (normalized === "localhost" ||
-        normalized === "::1" ||
-        normalized === "0:0:0:0:0:0:0:1" ||
-        normalized === "::ffff:127.0.0.1") {
-        return true;
-    }
-    if (normalized.startsWith("127."))
-        return true;
-    return false;
-}
 export function ensureApiTokenForBindHost(host) {
     const { disableAutoApiToken } = resolveApiSecurityConfig(process.env);
     const token = getConfiguredApiToken();

package/api/server-helpers-config.d.ts

@@ -2,7 +2,7 @@
  * Config redaction, first-run, and skill validation helpers extracted from server.ts.
  */
 import type http from "node:http";
-import type { ElizaConfig } from "../config/config.ts";
+import type { ElizaConfig } from "../config/config.js";
 /**
  * Key patterns that indicate a value is sensitive and must be redacted.
  */

package/api/server-helpers-mcp.d.ts

@@ -2,8 +2,8 @@
  * MCP server configuration validation helpers extracted from server.ts.
  */
 import type http from "node:http";
-import type { TerminalRunRejection } from "./server-helpers-auth.ts";
-export { validateMcpServerConfig } from "../security/mcp-server-config.ts";
+import type { TerminalRunRejection } from "./server-helpers-auth.js";
+export { validateMcpServerConfig } from "../security/mcp-server-config.js";
 export declare function resolveMcpServersRejection(servers: Record<string, unknown>): Promise<string | null>;
 export declare function mcpServersIncludeStdio(servers: Record<string, unknown>): boolean;
 /**

package/api/server-helpers-plugin.d.ts

@@ -1,7 +1,7 @@
 /**
  * Plugin config/form helpers extracted from server.ts.
  */
-import type { ServerState } from "./server-types.ts";
+import type { ServerState } from "./server-types.js";
 export declare function resolvePluginConfigReply(prompt: string, _state: Pick<ServerState, "config" | "runtime">): Promise<string | null>;
 export interface PluginConfigMutationRejection {
     field: string;