@elizaos/app-core 2.0.0-alpha.85 → 2.0.0-beta.2

package/services/local-inference/voice/voice-preset-format.js

@@ -0,0 +1,184 @@
+/**
+ * Binary format for `cache/voice-preset-default.bin`.
+ *
+ * Layout (little-endian throughout):
+ *
+ *   +0   4 bytes  magic 'ELZ1' (0x315A4C45)
+ *   +4   4 bytes  format version (uint32)               — v1
+ *   +8   4 bytes  speaker embedding offset (uint32)
+ *   +12  4 bytes  speaker embedding byte length (uint32)
+ *   +16  4 bytes  phrase cache seed offset (uint32)
+ *   +20  4 bytes  phrase cache seed byte length (uint32)
+ *   +24  ...      speaker embedding (Float32 LE vector)
+ *   +... ...      phrase cache seed:
+ *                   uint32 LE  N (phrase count)
+ *                   for each phrase:
+ *                     uint16 LE  text_byte_len
+ *                     uint8[]    canonicalized text (UTF-8)
+ *                     uint32 LE  sample_rate
+ *                     uint32 LE  pcm_byte_len
+ *                     uint8[]    PCM (Float32 LE samples)
+ *
+ * Both sections are mandatory in v1. An empty phrase cache seed is encoded
+ * as N=0 (4 bytes); zero-byte sections are not permitted (use N=0 instead).
+ */
+export const VOICE_PRESET_MAGIC = 0x315a4c45; // 'ELZ1'
+export const VOICE_PRESET_VERSION = 1;
+export const VOICE_PRESET_HEADER_BYTES = 24;
+export class VoicePresetFormatError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.code = code;
+        this.name = "VoicePresetFormatError";
+    }
+}
+function readHeader(view) {
+    if (view.byteLength < VOICE_PRESET_HEADER_BYTES) {
+        throw new VoicePresetFormatError(`voice preset file truncated: header needs ${VOICE_PRESET_HEADER_BYTES} bytes, got ${view.byteLength}`, "truncated-header");
+    }
+    const magic = view.getUint32(0, true);
+    if (magic !== VOICE_PRESET_MAGIC) {
+        throw new VoicePresetFormatError(`voice preset bad magic: expected 0x${VOICE_PRESET_MAGIC.toString(16)}, got 0x${magic.toString(16)}`, "bad-magic");
+    }
+    const version = view.getUint32(4, true);
+    if (version !== VOICE_PRESET_VERSION) {
+        throw new VoicePresetFormatError(`voice preset unsupported version: ${version} (this build supports ${VOICE_PRESET_VERSION})`, "bad-version");
+    }
+    const embOff = view.getUint32(8, true);
+    const embLen = view.getUint32(12, true);
+    const phrOff = view.getUint32(16, true);
+    const phrLen = view.getUint32(20, true);
+    const fileLen = view.byteLength;
+    if (embOff + embLen > fileLen || phrOff + phrLen > fileLen) {
+        throw new VoicePresetFormatError("voice preset section bounds exceed file length", "bad-section-bounds");
+    }
+    if (embOff < VOICE_PRESET_HEADER_BYTES || phrOff < VOICE_PRESET_HEADER_BYTES) {
+        throw new VoicePresetFormatError("voice preset section overlaps header", "bad-section-bounds");
+    }
+    return {
+        version,
+        embedding: { offset: embOff, length: embLen },
+        phrases: { offset: phrOff, length: phrLen },
+    };
+}
+function copyFloat32(bytes, 
+/** Offset relative to `bytes` (i.e. relative to bytes.byteOffset). */
+relativeOffset, byteLength) {
+    // The source byte offset is not guaranteed to be 4-aligned in the file
+    // buffer, so we copy raw bytes into a fresh ArrayBuffer first.
+    const aligned = new Uint8Array(byteLength);
+    aligned.set(bytes.subarray(relativeOffset, relativeOffset + byteLength));
+    return new Float32Array(aligned.buffer, 0, byteLength / 4);
+}
+function readEmbedding(bytes, sec) {
+    if (sec.length % 4 !== 0) {
+        throw new VoicePresetFormatError(`voice preset embedding length ${sec.length} is not a multiple of 4`, "bad-embedding-length");
+    }
+    return copyFloat32(bytes, sec.offset, sec.length);
+}
+function readPhrases(bytes, sec) {
+    if (sec.length === 0)
+        return [];
+    const view = new DataView(bytes.buffer, bytes.byteOffset + sec.offset, sec.length);
+    const decoder = new TextDecoder("utf-8", { fatal: true });
+    let pos = 0;
+    if (sec.length < 4) {
+        throw new VoicePresetFormatError("voice preset phrase section truncated before count", "truncated-section");
+    }
+    const count = view.getUint32(pos, true);
+    pos += 4;
+    const out = [];
+    for (let i = 0; i < count; i++) {
+        if (pos + 2 > sec.length) {
+            throw new VoicePresetFormatError(`voice preset phrase #${i}: truncated before text length`, "bad-phrase-record");
+        }
+        const textLen = view.getUint16(pos, true);
+        pos += 2;
+        if (pos + textLen > sec.length) {
+            throw new VoicePresetFormatError(`voice preset phrase #${i}: text overruns section`, "bad-phrase-record");
+        }
+        const textBytes = new Uint8Array(bytes.buffer, bytes.byteOffset + sec.offset + pos, textLen);
+        const text = decoder.decode(textBytes);
+        pos += textLen;
+        if (pos + 8 > sec.length) {
+            throw new VoicePresetFormatError(`voice preset phrase #${i}: truncated before sample_rate/pcm_len`, "bad-phrase-record");
+        }
+        const sampleRate = view.getUint32(pos, true);
+        pos += 4;
+        const pcmByteLen = view.getUint32(pos, true);
+        pos += 4;
+        if (pcmByteLen % 4 !== 0) {
+            throw new VoicePresetFormatError(`voice preset phrase #${i}: pcm byte length ${pcmByteLen} is not a multiple of 4`, "bad-phrase-record");
+        }
+        if (pos + pcmByteLen > sec.length) {
+            throw new VoicePresetFormatError(`voice preset phrase #${i}: pcm overruns section`, "bad-phrase-record");
+        }
+        const pcm = copyFloat32(bytes, sec.offset + pos, pcmByteLen);
+        pos += pcmByteLen;
+        out.push({ text, sampleRate, pcm });
+    }
+    return out;
+}
+/**
+ * Parse a voice-preset binary blob. Throws `VoicePresetFormatError` on any
+ * malformed input — this is the single defensive boundary for the format.
+ */
+export function readVoicePresetFile(bytes) {
+    const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+    const header = readHeader(view);
+    return {
+        version: header.version,
+        embedding: readEmbedding(bytes, header.embedding),
+        phrases: readPhrases(bytes, header.phrases),
+    };
+}
+/**
+ * Serialize a voice preset to the v1 binary format. The output is a fresh
+ * `Uint8Array` ready to be written to disk.
+ */
+export function writeVoicePresetFile(file) {
+    const encoder = new TextEncoder();
+    const encodedTexts = file.phrases.map((p) => encoder.encode(p.text));
+    const embBytes = file.embedding.byteLength;
+    let phrBytes = 4; // count
+    for (let i = 0; i < file.phrases.length; i++) {
+        const t = encodedTexts[i];
+        if (t.byteLength > 0xffff) {
+            throw new VoicePresetFormatError(`phrase #${i} text too long (${t.byteLength} bytes, max 65535)`, "bad-phrase-record");
+        }
+        phrBytes += 2 + t.byteLength + 4 + 4 + file.phrases[i].pcm.byteLength;
+    }
+    const embOff = VOICE_PRESET_HEADER_BYTES;
+    const phrOff = embOff + embBytes;
+    const total = phrOff + phrBytes;
+    const out = new Uint8Array(total);
+    const view = new DataView(out.buffer);
+    view.setUint32(0, VOICE_PRESET_MAGIC, true);
+    view.setUint32(4, VOICE_PRESET_VERSION, true);
+    view.setUint32(8, embOff, true);
+    view.setUint32(12, embBytes, true);
+    view.setUint32(16, phrOff, true);
+    view.setUint32(20, phrBytes, true);
+    // Embedding
+    out.set(new Uint8Array(file.embedding.buffer, file.embedding.byteOffset, file.embedding.byteLength), embOff);
+    // Phrases
+    let pos = phrOff;
+    view.setUint32(pos, file.phrases.length, true);
+    pos += 4;
+    for (let i = 0; i < file.phrases.length; i++) {
+        const t = encodedTexts[i];
+        const phrase = file.phrases[i];
+        view.setUint16(pos, t.byteLength, true);
+        pos += 2;
+        out.set(t, pos);
+        pos += t.byteLength;
+        view.setUint32(pos, phrase.sampleRate, true);
+        pos += 4;
+        view.setUint32(pos, phrase.pcm.byteLength, true);
+        pos += 4;
+        out.set(new Uint8Array(phrase.pcm.buffer, phrase.pcm.byteOffset, phrase.pcm.byteLength), pos);
+        pos += phrase.pcm.byteLength;
+    }
+    return out;
+}

package/services/persistence.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Mobile persistence adapter chain.
+ *
+ * Today the iOS shell persists state through `@capacitor/preferences` (which
+ * is fine for tiny key-value blobs but pulls Apple's CFPreferences cache and
+ * is not appropriate for non-trivial agent state — no transactions, awkward
+ * for binary, capped at small payloads). This module introduces a real
+ * `PersistenceAdapter` interface so the runtime can prefer SQLite when the
+ * `@capacitor-community/sqlite` plugin is registered, and fall back to
+ * Preferences when it isn't (e.g. older mobile shells that haven't shipped
+ * the SQLite plugin yet, or web preview).
+ *
+ * Token storage MUST go through Keychain on iOS — handled by a separate
+ * follow-up identified in the prior security review and intentionally NOT
+ * touched here.
+ */
+export interface PersistenceAdapter {
+    readonly kind: "ios-preferences" | "ios-sqlite" | "web-localstorage";
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string): Promise<void>;
+    remove(key: string): Promise<void>;
+    /** Best-effort iteration; only required for migration. */
+    keys(): Promise<string[]>;
+}
+/**
+ * Test/dependency-injection seam. Production code calls
+ * {@link resolveIosPersistenceAdapter}. Tests inject a mock to exercise the
+ * decision logic without booting Capacitor.
+ */
+export interface IosAdapterDeps {
+    isSqliteAvailable: () => Promise<boolean>;
+    openSqliteAdapter: () => Promise<PersistenceAdapter>;
+    resolvePreferencesAdapter: () => Promise<PersistenceAdapter>;
+}
+/**
+ * Pick the best available iOS persistence adapter. Prefer SQLite when the
+ * `@capacitor-community/sqlite` plugin is registered; fall back to Capacitor
+ * Preferences when it isn't.
+ */
+export declare function resolveIosPersistenceAdapter(deps?: IosAdapterDeps): Promise<PersistenceAdapter>;
+/**
+ * Migration helper: copy every key from the Preferences adapter into the
+ * SQLite adapter. Used once on first boot after a shell update that ships
+ * the SQLite plugin. Idempotent — re-running it just overwrites identical
+ * values. Returns the count of keys migrated.
+ */
+export declare function migratePreferencesToSqlite(preferences: PersistenceAdapter, sqlite: PersistenceAdapter): Promise<number>;
+//# sourceMappingURL=persistence.d.ts.map

package/services/persistence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistence.d.ts","sourceRoot":"","sources":["../../../../../src/services/persistence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAQH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,GAAG,YAAY,GAAG,kBAAkB,CAAC;IACrE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,0DAA0D;IAC1D,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CAC3B;AAmFD;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,iBAAiB,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1C,iBAAiB,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACrD,yBAAyB,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAC9D;AAeD;;;;GAIG;AACH,wBAAsB,4BAA4B,CAChD,IAAI,GAAE,cAA+B,GACpC,OAAO,CAAC,kBAAkB,CAAC,CAK7B;AAED;;;;;GAKG;AACH,wBAAsB,0BAA0B,CAC9C,WAAW,EAAE,kBAAkB,EAC/B,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,MAAM,CAAC,CAoBjB"}

package/services/persistence.js

@@ -0,0 +1,128 @@
+/**
+ * Mobile persistence adapter chain.
+ *
+ * Today the iOS shell persists state through `@capacitor/preferences` (which
+ * is fine for tiny key-value blobs but pulls Apple's CFPreferences cache and
+ * is not appropriate for non-trivial agent state — no transactions, awkward
+ * for binary, capped at small payloads). This module introduces a real
+ * `PersistenceAdapter` interface so the runtime can prefer SQLite when the
+ * `@capacitor-community/sqlite` plugin is registered, and fall back to
+ * Preferences when it isn't (e.g. older mobile shells that haven't shipped
+ * the SQLite plugin yet, or web preview).
+ *
+ * Token storage MUST go through Keychain on iOS — handled by a separate
+ * follow-up identified in the prior security review and intentionally NOT
+ * touched here.
+ */
+import { isSqliteAvailable, openDatabase, } from "../connectors/capacitor-sqlite.js";
+class IosPreferencesAdapter {
+    preferences;
+    kind = "ios-preferences";
+    constructor(preferences) {
+        this.preferences = preferences;
+    }
+    async get(key) {
+        const result = await this.preferences.get({ key });
+        return result.value;
+    }
+    async set(key, value) {
+        await this.preferences.set({ key, value });
+    }
+    async remove(key) {
+        await this.preferences.remove({ key });
+    }
+    async keys() {
+        const result = await this.preferences.keys();
+        return result.keys;
+    }
+}
+/* ── iOS SQLite adapter ─────────────────────────────────────────────────── */
+const KV_TABLE_NAME = "eliza_kv";
+const KV_TABLE_DDL = `CREATE TABLE IF NOT EXISTS ${KV_TABLE_NAME} (
+  key TEXT PRIMARY KEY NOT NULL,
+  value TEXT NOT NULL,
+  updated_at INTEGER NOT NULL DEFAULT (strftime('%s','now'))
+)`;
+class IosSqliteAdapter {
+    db;
+    kind = "ios-sqlite";
+    constructor(db) {
+        this.db = db;
+    }
+    async get(key) {
+        const result = await this.db.query({
+            sql: `SELECT value FROM ${KV_TABLE_NAME} WHERE key = ? LIMIT 1`,
+            values: [key],
+        });
+        const first = result.rows[0];
+        return first ? first.value : null;
+    }
+    async set(key, value) {
+        await this.db.execute({
+            sql: `INSERT INTO ${KV_TABLE_NAME} (key, value) VALUES (?, ?)
+            ON CONFLICT(key) DO UPDATE SET value=excluded.value, updated_at=strftime('%s','now')`,
+            values: [key, value],
+        });
+    }
+    async remove(key) {
+        await this.db.execute({
+            sql: `DELETE FROM ${KV_TABLE_NAME} WHERE key = ?`,
+            values: [key],
+        });
+    }
+    async keys() {
+        const result = await this.db.query({
+            sql: `SELECT key FROM ${KV_TABLE_NAME}`,
+        });
+        return result.rows.map((row) => row.key);
+    }
+}
+async function openSqliteAdapter() {
+    const db = await openDatabase({ name: "eliza-state" });
+    await db.execute({ sql: KV_TABLE_DDL });
+    return new IosSqliteAdapter(db);
+}
+async function resolvePreferencesAdapter() {
+    const mod = (await import("@capacitor/preferences"));
+    return new IosPreferencesAdapter(mod.Preferences);
+}
+const productionDeps = {
+    isSqliteAvailable,
+    openSqliteAdapter,
+    resolvePreferencesAdapter,
+};
+/**
+ * Pick the best available iOS persistence adapter. Prefer SQLite when the
+ * `@capacitor-community/sqlite` plugin is registered; fall back to Capacitor
+ * Preferences when it isn't.
+ */
+export async function resolveIosPersistenceAdapter(deps = productionDeps) {
+    if (await deps.isSqliteAvailable()) {
+        return deps.openSqliteAdapter();
+    }
+    return deps.resolvePreferencesAdapter();
+}
+/**
+ * Migration helper: copy every key from the Preferences adapter into the
+ * SQLite adapter. Used once on first boot after a shell update that ships
+ * the SQLite plugin. Idempotent — re-running it just overwrites identical
+ * values. Returns the count of keys migrated.
+ */
+export async function migratePreferencesToSqlite(preferences, sqlite) {
+    if (preferences.kind !== "ios-preferences") {
+        throw new Error(`[persistence] migratePreferencesToSqlite: source adapter must be ios-preferences (got ${preferences.kind})`);
+    }
+    if (sqlite.kind !== "ios-sqlite") {
+        throw new Error(`[persistence] migratePreferencesToSqlite: target adapter must be ios-sqlite (got ${sqlite.kind})`);
+    }
+    const keys = await preferences.keys();
+    let migrated = 0;
+    for (const key of keys) {
+        const value = await preferences.get(key);
+        if (value === null)
+            continue;
+        await sqlite.set(key, value);
+        migrated++;
+    }
+    return migrated;
+}

package/services/plugin-installer.d.ts

@@ -0,0 +1,22 @@
+/**
+ * `@elizaos/app-core/services/plugin-installer` — thin forwarder to the
+ * runtime implementation in `@elizaos/agent/services/plugin-installer`.
+ *
+ * Why the forwarder + lazy load: `@elizaos/agent` already depends on
+ * `@elizaos/app-core`. Re-exporting the agent module statically here would
+ * create a hard module-graph cycle (`app-core ↔ agent`) that breaks the
+ * moment `app-core` is consumed in a context where `@elizaos/agent` is
+ * not installed (e.g. a downstream package that only adds `app-core`).
+ * Types re-export statically because TypeScript erases them at compile
+ * time and never participates in the runtime cycle. The implementations
+ * forward through `import()` so the cycle only resolves on first call,
+ * when the consumer's bundler has finished walking the static graph.
+ */
+import type { InstallPhase, InstallProgress, InstallResult, ProgressCallback, UninstallResult } from "@elizaos/agent";
+export type { InstallPhase, InstallProgress, InstallResult, ProgressCallback, UninstallResult, };
+export declare function installPlugin(...args: Parameters<typeof import("@elizaos/agent").installPlugin>): ReturnType<typeof import("@elizaos/agent").installPlugin>;
+export declare function installAndRestart(...args: Parameters<typeof import("@elizaos/agent").installAndRestart>): ReturnType<typeof import("@elizaos/agent").installAndRestart>;
+export declare function uninstallPlugin(...args: Parameters<typeof import("@elizaos/agent").uninstallPlugin>): ReturnType<typeof import("@elizaos/agent").uninstallPlugin>;
+export declare function uninstallAndRestart(...args: Parameters<typeof import("@elizaos/agent").uninstallAndRestart>): ReturnType<typeof import("@elizaos/agent").uninstallAndRestart>;
+export declare function listInstalledPlugins(...args: Parameters<typeof import("@elizaos/agent").listInstalledPlugins>): Promise<ReturnType<typeof import("@elizaos/agent").listInstalledPlugins>>;
+//# sourceMappingURL=plugin-installer.d.ts.map

package/services/plugin-installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-installer.d.ts","sourceRoot":"","sources":["../../../../../src/services/plugin-installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EACV,YAAY,EACZ,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,eAAe,EAChB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EACV,YAAY,EACZ,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,eAAe,GAChB,CAAC;AAUF,wBAAsB,aAAa,CACjC,GAAG,IAAI,EAAE,UAAU,CAAC,cAAc,gBAAgB,EAAE,aAAa,CAAC,GACjE,UAAU,CAAC,cAAc,gBAAgB,EAAE,aAAa,CAAC,CAG3D;AAED,wBAAsB,iBAAiB,CACrC,GAAG,IAAI,EAAE,UAAU,CAAC,cAAc,gBAAgB,EAAE,iBAAiB,CAAC,GACrE,UAAU,CAAC,cAAc,gBAAgB,EAAE,iBAAiB,CAAC,CAG/D;AAED,wBAAsB,eAAe,CACnC,GAAG,IAAI,EAAE,UAAU,CAAC,cAAc,gBAAgB,EAAE,eAAe,CAAC,GACnE,UAAU,CAAC,cAAc,gBAAgB,EAAE,eAAe,CAAC,CAG7D;AAED,wBAAsB,mBAAmB,CACvC,GAAG,IAAI,EAAE,UAAU,CAAC,cAAc,gBAAgB,EAAE,mBAAmB,CAAC,GACvE,UAAU,CAAC,cAAc,gBAAgB,EAAE,mBAAmB,CAAC,CAGjE;AAED,wBAAsB,oBAAoB,CACxC,GAAG,IAAI,EAAE,UAAU,CAAC,cAAc,gBAAgB,EAAE,oBAAoB,CAAC,GACxE,OAAO,CAAC,UAAU,CAAC,cAAc,gBAAgB,EAAE,oBAAoB,CAAC,CAAC,CAG3E"}

package/services/plugin-installer.js

@@ -0,0 +1,41 @@
+/**
+ * `@elizaos/app-core/services/plugin-installer` — thin forwarder to the
+ * runtime implementation in `@elizaos/agent/services/plugin-installer`.
+ *
+ * Why the forwarder + lazy load: `@elizaos/agent` already depends on
+ * `@elizaos/app-core`. Re-exporting the agent module statically here would
+ * create a hard module-graph cycle (`app-core ↔ agent`) that breaks the
+ * moment `app-core` is consumed in a context where `@elizaos/agent` is
+ * not installed (e.g. a downstream package that only adds `app-core`).
+ * Types re-export statically because TypeScript erases them at compile
+ * time and never participates in the runtime cycle. The implementations
+ * forward through `import()` so the cycle only resolves on first call,
+ * when the consumer's bundler has finished walking the static graph.
+ */
+let cached = null;
+async function load() {
+    if (cached)
+        return cached;
+    cached = await import("@elizaos/agent");
+    return cached;
+}
+export async function installPlugin(...args) {
+    const mod = await load();
+    return mod.installPlugin(...args);
+}
+export async function installAndRestart(...args) {
+    const mod = await load();
+    return mod.installAndRestart(...args);
+}
+export async function uninstallPlugin(...args) {
+    const mod = await load();
+    return mod.uninstallPlugin(...args);
+}
+export async function uninstallAndRestart(...args) {
+    const mod = await load();
+    return mod.uninstallAndRestart(...args);
+}
+export async function listInstalledPlugins(...args) {
+    const mod = await load();
+    return mod.listInstalledPlugins(...args);
+}

package/services/secrets-manager-installer.d.ts

@@ -0,0 +1,140 @@
+/**
+ * Secrets-manager installer + signin orchestration.
+ *
+ * Drives the lifecycle the UI cares about for the three external secrets-manager
+ * backends (1Password, Bitwarden, Proton Pass):
+ *
+ *   1. **Install**       — spawn the chosen package manager (brew or npm) with
+ *                          a clean argv. Streams stdout/stderr lines back to
+ *                          subscribers, emits a final `done` / `error` event
+ *                          when the child exits.
+ *   2. **Sign in**       — runs the vendor's non-interactive signin flow with
+ *                          credentials supplied once via the API. Captures the
+ *                          session token from stdout and persists it in the
+ *                          in-house vault as `pm.<backend>.session`.
+ *   3. **Sign out**      — clears the persisted session token.
+ *
+ * Master passwords / API secrets enter the process exactly once per request
+ * via `child.stdin`; they are never written to disk. The session tokens that
+ * come back are integration metadata (not user secrets), but we still mark
+ * them `sensitive: true` so they're encrypted at rest under the OS keychain.
+ *
+ * Singleton: one installer per process, owns a Map<jobId, InstallJob>. The
+ * stream of events is also persisted in-memory on the job so a UI that
+ * subscribes after spawn (race) can replay history.
+ */
+import { type ChildProcess } from "node:child_process";
+import { type BackendId, type InstallMethod, type SecretsManager } from "@elizaos/vault";
+export type InstallableBackendId = Exclude<BackendId, "in-house">;
+export type InstallJobStatus = "pending" | "running" | "succeeded" | "failed" | "cancelled";
+export type InstallJobEvent = {
+    readonly type: "log";
+    readonly stream: "stdout" | "stderr";
+    readonly line: string;
+} | {
+    readonly type: "status";
+    readonly status: InstallJobStatus;
+} | {
+    readonly type: "done";
+    readonly exitCode: number;
+} | {
+    readonly type: "error";
+    readonly message: string;
+};
+export interface InstallJobSnapshot {
+    readonly id: string;
+    readonly backendId: InstallableBackendId;
+    readonly method: InstallMethod;
+    readonly status: InstallJobStatus;
+    readonly startedAt: number;
+    readonly endedAt: number | null;
+    readonly exitCode: number | null;
+    readonly errorMessage: string | null;
+    readonly history: readonly InstallJobEvent[];
+}
+/**
+ * Injectable spawn for tests. Production callers omit this and get the real
+ * `node:child_process` `spawn`. Tests pass a stub that returns a synthetic
+ * `ChildProcess`-like object so we don't actually fork brew/npm.
+ */
+export type SpawnFn = (command: string, args: readonly string[], options: {
+    stdio: ["ignore" | "pipe", "pipe", "pipe"];
+    shell: false;
+    env?: NodeJS.ProcessEnv;
+}) => ChildProcess;
+export interface InstallerDependencies {
+    readonly manager: SecretsManager;
+    readonly spawn?: SpawnFn;
+}
+export interface SigninRequest {
+    readonly backendId: InstallableBackendId;
+    /** 1Password: required. Bitwarden: required (`bw login` email + master pwd). */
+    readonly email?: string;
+    /** Master password (the user's main vault password). Used only in this request. */
+    readonly masterPassword: string;
+    /** 1Password: required. The 34-char "Secret Key". */
+    readonly secretKey?: string;
+    /** 1Password: optional sign-in URL (defaults to `my.1password.com`). */
+    readonly signInAddress?: string;
+    /** Bitwarden: API client_id (BW_CLIENTID). Enables the non-interactive login flow. */
+    readonly bitwardenClientId?: string;
+    /** Bitwarden: API client_secret (BW_CLIENTSECRET). */
+    readonly bitwardenClientSecret?: string;
+}
+export interface SigninResult {
+    readonly backendId: InstallableBackendId;
+    readonly sessionStored: boolean;
+    /** Truncated, human-readable detail surfaced from the CLI. Never the secret itself. */
+    readonly message: string;
+}
+export declare class SecretsManagerInstaller {
+    private readonly jobs;
+    private readonly manager;
+    private readonly spawn;
+    constructor(deps: InstallerDependencies);
+    /** Snapshot of the install methods runnable on this host for a backend. */
+    getInstallMethods(id: InstallableBackendId): Promise<readonly InstallMethod[]>;
+    /**
+     * Spawn the install command for `method` on backend `id`. Returns a job id
+     * the UI can subscribe to. The caller is expected to call `subscribeJob`
+     * (or read `getJob` to poll) before the child finishes; events that fire
+     * before the first subscriber are kept on `job.history` so SSE clients
+     * that connect after spawn still see the full log.
+     */
+    startInstall(id: InstallableBackendId, method: InstallMethod): InstallJobSnapshot;
+    /** Subscribe to events for a running job. Returns an unsubscribe function. */
+    subscribeJob(jobId: string, listener: (event: InstallJobEvent) => void): () => void;
+    getJob(jobId: string): InstallJobSnapshot | null;
+    /**
+     * Run the vendor's non-interactive signin flow and persist the session token.
+     * Throws on validation or CLI failure with a message safe to surface to UI.
+     */
+    signIn(request: SigninRequest): Promise<SigninResult>;
+    signOut(backendId: InstallableBackendId): Promise<void>;
+    /** Read the cached session token (or null if not signed in). */
+    getSession(backendId: InstallableBackendId): Promise<string | null>;
+    private runInstallJob;
+    private emit;
+    private transition;
+    private terminate;
+    /**
+     * Adds a 1Password account (idempotent — if the account already exists `op`
+     * succeeds without re-prompting), then performs `op signin --raw` piping
+     * the master password on stdin. Captures the session token returned on
+     * stdout and persists it under `pm.1password.session`.
+     */
+    private signInOnePassword;
+    /**
+     * Bitwarden non-interactive flow:
+     *   1. `bw login --apikey` with BW_CLIENTID / BW_CLIENTSECRET in env
+     *   2. `bw unlock --raw` piping the master password on stdin
+     * Captures the session token from `bw unlock --raw` and persists it.
+     */
+    private signInBitwarden;
+}
+export declare function getSecretsManagerInstaller(manager?: SecretsManager): SecretsManagerInstaller;
+/** Test hook. Replace the singleton entirely (e.g. with a fake spawn). */
+export declare function _setSecretsManagerInstallerForTesting(next: SecretsManagerInstaller | null): void;
+/** Test hook. */
+export declare function _resetSecretsManagerInstallerForTesting(): void;
+//# sourceMappingURL=secrets-manager-installer.d.ts.map

package/services/secrets-manager-installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-manager-installer.d.ts","sourceRoot":"","sources":["../../../../../src/services/secrets-manager-installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,KAAK,YAAY,EAAsB,MAAM,oBAAoB,CAAC;AAG3E,OAAO,EACL,KAAK,SAAS,EAGd,KAAK,aAAa,EAElB,KAAK,cAAc,EACpB,MAAM,gBAAgB,CAAC;AAExB,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AAElE,MAAM,MAAM,gBAAgB,GACxB,SAAS,GACT,SAAS,GACT,WAAW,GACX,QAAQ,GACR,WAAW,CAAC;AAEhB,MAAM,MAAM,eAAe,GACvB;IACE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,GAC9D;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,CAAC;CAC9C;AAgBD;;;;GAIG;AACH,MAAM,MAAM,OAAO,GAAG,CACpB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE;IACP,KAAK,EAAE,CAAC,QAAQ,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,KAAK,EAAE,KAAK,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,KACE,YAAY,CAAC;AAElB,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,gFAAgF;IAChF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,mFAAmF;IACnF,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,qDAAqD;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,wEAAwE;IACxE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,sFAAsF;IACtF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,sDAAsD;IACtD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;CACzC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,uFAAuF;IACvF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAYD,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAiC;IACtD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAU;gBAEpB,IAAI,EAAE,qBAAqB;IAKvC,2EAA2E;IACrE,iBAAiB,CACrB,EAAE,EAAE,oBAAoB,GACvB,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC;IAIpC;;;;;;OAMG;IACH,YAAY,CACV,EAAE,EAAE,oBAAoB,EACxB,MAAM,EAAE,aAAa,GACpB,kBAAkB;IAgCrB,8EAA8E;IAC9E,YAAY,CACV,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,GACzC,MAAM,IAAI;IAab,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI;IAKhD;;;OAGG;IACG,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;IAYrD,OAAO,CAAC,SAAS,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAM7D,gEAAgE;IAC1D,UAAU,CAAC,SAAS,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAOzE,OAAO,CAAC,aAAa;IAoDrB,OAAO,CAAC,IAAI;IAQZ,OAAO,CAAC,UAAU;IAKlB,OAAO,CAAC,SAAS;IAcjB;;;;;OAKG;YACW,iBAAiB;IAwE/B;;;;;OAKG;YACW,eAAe;CAmE9B;AAuGD,wBAAgB,0BAA0B,CACxC,OAAO,CAAC,EAAE,cAAc,GACvB,uBAAuB,CAOzB;AAED,0EAA0E;AAC1E,wBAAgB,qCAAqC,CACnD,IAAI,EAAE,uBAAuB,GAAG,IAAI,GACnC,IAAI,CAEN;AAED,iBAAiB;AACjB,wBAAgB,uCAAuC,IAAI,IAAI,CAE9D"}