@elizaos/app-core 2.0.0-beta.1 → 2.0.0-beta.3

package/api/sensitive-request-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sensitive-request-routes.d.ts","sourceRoot":"","sources":["../../../../../src/api/sensitive-request-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAGL,KAAK,gBAAgB,EAKrB,KAAK,qBAAqB,EAO3B,MAAM,eAAe,CAAC;AAQvB,OAAO,EACL,KAAK,kBAAkB,EAGxB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAGhC,MAAM,2BAA2B,CAAC;AAcnC,MAAM,WAAW,4BAA4B;IAC3C,KAAK,CAAC,EAAE,0BAA0B,CAAC;IACnC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,qCAAqC,CAAC,EAAE,CACtC,KAAK,EAAE,kBAAkB,KACtB,OAAO,CAAC;IACb,aAAa,CAAC,EAAE,CACd,MAAM,EAAE,2BAA2B,EACnC,KAAK,EAAE,MAAM,KACV,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,kBAAkB,CAAC,EAAE,CACnB,MAAM,EAAE,2BAA2B,EACnC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,OAAO,CAAC,EAAE,CACR,KAAK,EAAE,qBAAqB,EAC5B,OAAO,EAAE,gBAAgB,KACtB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,eAAe,CAAC,EAAE,CAChB,KAAK,EAAE,kBAAkB,KACtB;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CACtD;AAuND,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,kBAAkB,GACxB,OAAO,CAIT;AA2KD,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,KAAK,EAAE,kBAAkB,EACzB,OAAO,GAAE,4BAAiC,GACzC,OAAO,CAAC,OAAO,CAAC,CA6MlB;AAED,wBAAgB,iCAAiC,IAAI,IAAI,CAExD"}
+{"version":3,"file":"sensitive-request-routes.d.ts","sourceRoot":"","sources":["../../../../../src/api/sensitive-request-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAGL,KAAK,gBAAgB,EAIrB,KAAK,qBAAqB,EAO3B,MAAM,eAAe,CAAC;AAQvB,OAAO,EACL,KAAK,kBAAkB,EAGxB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAIhC,MAAM,2BAA2B,CAAC;AAcnC,MAAM,WAAW,4BAA4B;IAC3C,KAAK,CAAC,EAAE,0BAA0B,CAAC;IACnC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,qCAAqC,CAAC,EAAE,CACtC,KAAK,EAAE,kBAAkB,KACtB,OAAO,CAAC;IACb,aAAa,CAAC,EAAE,CACd,MAAM,EAAE,2BAA2B,EACnC,KAAK,EAAE,MAAM,KACV,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,kBAAkB,CAAC,EAAE,CACnB,MAAM,EAAE,2BAA2B,EACnC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,OAAO,CAAC,EAAE,CACR,KAAK,EAAE,qBAAqB,EAC5B,OAAO,EAAE,gBAAgB,KACtB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,eAAe,CAAC,EAAE,CAChB,KAAK,EAAE,kBAAkB,KACtB;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CACtD;AAuND,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,kBAAkB,GACxB,OAAO,CAIT;AA2KD,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,KAAK,EAAE,kBAAkB,EACzB,OAAO,GAAE,4BAAiC,GACzC,OAAO,CAAC,OAAO,CAAC,CA6MlB;AAED,wBAAgB,iCAAiC,IAAI,IAAI,CAExD"}

package/api/sensitive-request-store.d.ts

@@ -1,11 +1,18 @@
-import { type SensitiveRequest, type SensitiveRequestAuditEvent, type SensitiveRequestEvent } from "@elizaos/core";
+import { type JsonObject, type SensitiveRequest, type SensitiveRequestEvent } from "@elizaos/core";
 export declare const DEFAULT_SENSITIVE_REQUEST_TTL_MS: number;
 export declare const MAX_SENSITIVE_REQUEST_TTL_MS: number;
 export interface LocalSensitiveRequestRecord extends SensitiveRequest {
     tokenHash: string;
     tokenUsedAt?: string;
+    audit?: SensitiveRequestAuditEvent[];
 }
-export interface CreateLocalSensitiveRequestInput extends Omit<SensitiveRequest, "id" | "status" | "createdAt" | "updatedAt" | "expiresAt" | "audit"> {
+export interface SensitiveRequestAuditEvent {
+    action: string;
+    outcome: string;
+    createdAt: string;
+    metadata?: JsonObject;
+}
+export interface CreateLocalSensitiveRequestInput extends Omit<SensitiveRequest, "id" | "status" | "createdAt" | "updatedAt" | "expiresAt"> {
     ttlMs?: number;
     now?: number;
 }
@@ -18,7 +25,9 @@ export type LocalSensitiveRequestSubmitTokenCheck = {
     reason: "not_found" | "expired" | "invalid_token" | "replayed" | "not_pending";
 };
 export declare function createSensitiveRequestSubmitToken(): string;
-export declare function redactLocalSensitiveRequest(record: LocalSensitiveRequestRecord): SensitiveRequest;
+export declare function redactLocalSensitiveRequest(record: LocalSensitiveRequestRecord): SensitiveRequest & {
+    audit?: SensitiveRequestAuditEvent[];
+};
 export declare class LocalSensitiveRequestStore {
     private readonly records;
     create(input: CreateLocalSensitiveRequestInput): {

package/api/sensitive-request-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sensitive-request-store.d.ts","sourceRoot":"","sources":["../../../../../src/api/sensitive-request-store.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,gBAAgB,EACrB,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC3B,MAAM,eAAe,CAAC;AAEvB,eAAO,MAAM,gCAAgC,QAAiB,CAAC;AAC/D,eAAO,MAAM,4BAA4B,QAAsB,CAAC;AAEhE,MAAM,WAAW,2BAA4B,SAAQ,gBAAgB;IACnE,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,gCACf,SAAQ,IAAI,CACV,gBAAgB,EAChB,IAAI,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,GAAG,OAAO,CACpE;IACD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,qCAAqC,GAC7C;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,2BAA2B,CAAA;CAAE,GACjD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAC9B,MAAM,EACF,WAAW,GACX,SAAS,GACT,eAAe,GACf,UAAU,GACV,aAAa,CAAC;CACnB,CAAC;AA8BN,wBAAgB,iCAAiC,IAAI,MAAM,CAE1D;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,2BAA2B,GAClC,gBAAgB,CAkBlB;AAED,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkD;IAE1E,MAAM,CAAC,KAAK,EAAE,gCAAgC,GAAG;QAC/C,MAAM,EAAE,2BAA2B,CAAC;QACpC,WAAW,EAAE,MAAM,CAAC;KACrB;IAyCD,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,2BAA2B,GAAG,IAAI;IAOrE,gBAAgB,CACd,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EACb,GAAG,SAAa,GACf,qCAAqC;IA0BxC,kBAAkB,CAChB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EACb,GAAG,SAAa,GACf,qCAAqC;IAaxC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,EAAE,GAAG,SAAa,GAAG,IAAI;IAezE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,IAAI;IAcxD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,2BAA2B,GAAG,IAAI;IAgBxE,WAAW,CACT,MAAM,EAAE,2BAA2B,EACnC,KAAK,EAAE,0BAA0B,GAChC,IAAI;IAUP,KAAK,IAAI,IAAI;IAIb,OAAO,CAAC,cAAc;CAevB;AAED,eAAO,MAAM,0BAA0B,4BAAmC,CAAC"}
+{"version":3,"file":"sensitive-request-store.d.ts","sourceRoot":"","sources":["../../../../../src/api/sensitive-request-store.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,UAAU,EAEf,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC3B,MAAM,eAAe,CAAC;AAEvB,eAAO,MAAM,gCAAgC,QAAiB,CAAC;AAC/D,eAAO,MAAM,4BAA4B,QAAsB,CAAC;AAEhE,MAAM,WAAW,2BAA4B,SAAQ,gBAAgB;IACnE,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,0BAA0B,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,UAAU,CAAC;CACvB;AAED,MAAM,WAAW,gCACf,SAAQ,IAAI,CACV,gBAAgB,EAChB,IAAI,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,CAC1D;IACD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,qCAAqC,GAC7C;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,2BAA2B,CAAA;CAAE,GACjD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAC9B,MAAM,EACF,WAAW,GACX,SAAS,GACT,eAAe,GACf,UAAU,GACV,aAAa,CAAC;CACnB,CAAC;AA8BN,wBAAgB,iCAAiC,IAAI,MAAM,CAE1D;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,2BAA2B,GAClC,gBAAgB,GAAG;IAAE,KAAK,CAAC,EAAE,0BAA0B,EAAE,CAAA;CAAE,CAkB7D;AAED,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkD;IAE1E,MAAM,CAAC,KAAK,EAAE,gCAAgC,GAAG;QAC/C,MAAM,EAAE,2BAA2B,CAAC;QACpC,WAAW,EAAE,MAAM,CAAC;KACrB;IAyCD,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,2BAA2B,GAAG,IAAI;IAOrE,gBAAgB,CACd,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EACb,GAAG,SAAa,GACf,qCAAqC;IA0BxC,kBAAkB,CAChB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EACb,GAAG,SAAa,GACf,qCAAqC;IAaxC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,EAAE,GAAG,SAAa,GAAG,IAAI;IAezE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,IAAI;IAcxD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,2BAA2B,GAAG,IAAI;IAgBxE,WAAW,CACT,MAAM,EAAE,2BAA2B,EACnC,KAAK,EAAE,0BAA0B,GAChC,IAAI;IAUP,KAAK,IAAI,IAAI;IAIb,OAAO,CAAC,cAAc;CAevB;AAED,eAAO,MAAM,0BAA0B,4BAAmC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elizaos/app-core",
-  "version": "2.0.0-beta.1",
+  "version": "2.0.0-beta.3",
   "description": "Shared application core for elizaOS white-label agent apps.",
   "type": "module",
   "license": "MIT",
@@ -50,7 +50,7 @@
     "@capacitor/preferences": "^8.0.1",
     "@capacitor/push-notifications": "^8.0.0",
     "@clack/prompts": "^1.0.0",
-    "@elizaos/agent": "2.0.0-beta.1",
+    "@elizaos/agent": "2.0.0-beta.2",
     "@elizaos/capacitor-llama": "2.0.0-beta.1",
     "@elizaos/core": "2.0.0-beta.1",
     "@elizaos/plugin-anthropic": "2.0.0-beta.1",
@@ -64,7 +64,7 @@
     "@elizaos/plugin-wechat": "2.0.0-beta.1",
     "@elizaos/plugin-workflow": "2.0.0-beta.1",
     "@elizaos/shared": "2.0.0-beta.1",
-    "@elizaos/ui": "2.0.0-beta.1",
+    "@elizaos/ui": "2.0.0-beta.2",
     "@elizaos/vault": "2.0.0-beta.1",
     "@node-rs/argon2": "^2.0.2",
     "@radix-ui/react-checkbox": "^1.3.3",

package/platforms/electrobun/native/macos/window-effects.mm

@@ -3,6 +3,8 @@
 #import <AVFoundation/AVFoundation.h>
 #import <Availability.h>
 #import <CoreGraphics/CoreGraphics.h>
+#include <stdlib.h>
+#include <string.h>
 
 static NSString *const kElectrobunVibrancyViewIdentifier =
 	@"ElectrobunVibrancyView";
@@ -17,6 +19,32 @@ static NSString *const kElectrobunNativeDragRightEdgeIdentifier =
 static NSString *const kElizaInactiveTrafficLightsOverlayIdentifier =
 	@"ElizaInactiveTrafficLightsOverlay";
 
+static NSMutableArray<NSURL *> *elizaSecurityScopedUrls(void) {
+	static NSMutableArray<NSURL *> *urls = nil;
+	static dispatch_once_t onceToken;
+	dispatch_once(&onceToken, ^{
+		urls = [[NSMutableArray alloc] init];
+	});
+	return urls;
+}
+
+static char *elizaCopyCString(NSString *value) {
+	if (value == nil) {
+		return nullptr;
+	}
+	const char *utf8 = [value UTF8String];
+	if (utf8 == nullptr) {
+		return nullptr;
+	}
+	size_t len = strlen(utf8);
+	char *out = (char *)malloc(len + 1);
+	if (out == nullptr) {
+		return nullptr;
+	}
+	memcpy(out, utf8, len + 1);
+	return out;
+}
+
 /** Transparent strip for moving the window. WKWebView does not honor
  *  -webkit-app-region reliably on system WebKit; this view is stacked
  *  NSWindowAbove the web view so safe empty/title zones hit AppKit first.
@@ -584,6 +612,81 @@ extern "C" void requestMicrophonePermission(void) {
 	}];
 }
 
+extern "C" void freeNativeCString(char *value) {
+	if (value != nullptr) {
+		free(value);
+	}
+}
+
+extern "C" char *createSecurityScopedBookmark(const char *path) {
+	@autoreleasepool {
+		if (path == nullptr || path[0] == '\0') {
+			return nullptr;
+		}
+		NSString *pathString = [NSString stringWithUTF8String:path];
+		if (pathString == nil) {
+			return nullptr;
+		}
+		NSURL *url = [NSURL fileURLWithPath:pathString isDirectory:YES];
+		if (url == nil) {
+			return nullptr;
+		}
+		NSError *error = nil;
+		NSData *bookmark = [url
+			bookmarkDataWithOptions:NSURLBookmarkCreationWithSecurityScope
+			includingResourceValuesForKeys:nil
+			relativeToURL:nil
+			error:&error];
+		if (bookmark == nil || error != nil) {
+			return nullptr;
+		}
+		return elizaCopyCString([bookmark base64EncodedStringWithOptions:0]);
+	}
+}
+
+extern "C" char *startAccessingSecurityScopedBookmark(const char *base64) {
+	@autoreleasepool {
+		if (base64 == nullptr || base64[0] == '\0') {
+			return nullptr;
+		}
+		NSString *base64String = [NSString stringWithUTF8String:base64];
+		if (base64String == nil) {
+			return nullptr;
+		}
+		NSData *bookmark = [[NSData alloc]
+			initWithBase64EncodedString:base64String
+			options:NSDataBase64DecodingIgnoreUnknownCharacters];
+		if (bookmark == nil) {
+			return nullptr;
+		}
+		BOOL stale = NO;
+		NSError *error = nil;
+		NSURL *url = [NSURL URLByResolvingBookmarkData:bookmark
+			options:NSURLBookmarkResolutionWithSecurityScope
+			relativeToURL:nil
+			bookmarkDataIsStale:&stale
+			error:&error];
+		if (url == nil || error != nil) {
+			return nullptr;
+		}
+		if (![url startAccessingSecurityScopedResource]) {
+			return nullptr;
+		}
+		[elizaSecurityScopedUrls() addObject:url];
+		return elizaCopyCString([url path]);
+	}
+}
+
+extern "C" void stopAccessingSecurityScopedBookmarks(void) {
+	@autoreleasepool {
+		NSMutableArray<NSURL *> *urls = elizaSecurityScopedUrls();
+		for (NSURL *url in urls) {
+			[url stopAccessingSecurityScopedResource];
+		}
+		[urls removeAllObjects];
+	}
+}
+
 extern "C" bool enableWindowVibrancy(void *windowPtr) {
 	if (windowPtr == nullptr) {
 		return false;

package/platforms/electrobun/package.json

@@ -2,6 +2,15 @@
   "name": "@elizaos/electrobun",
   "version": "2.0.0-beta.1",
   "type": "module",
+  "files": [
+    "assets",
+    "entitlements",
+    "scripts",
+    "src",
+    "electrobun.config.ts",
+    "README.md",
+    "tsconfig.json"
+  ],
   "scripts": {
     "dev": "bun run build:preload && PATH=\"$PWD/scripts/bin:$PATH\" bunx electrobun dev",
     "build": "bun run build:preload && ELECTROBUN_SKIP_CODESIGN=1 PATH=\"$PWD/scripts/bin:$PATH\" bunx electrobun build",

package/platforms/electrobun/src/__stubs__/bun-ffi.ts

@@ -10,10 +10,26 @@ export const FFIType = {
 	f64: 2,
 	i32: 3,
 	cstring: 4,
+	void: 5,
 } as const;
 
 export type Pointer = number;
 
+export class CString {
+	private readonly value: unknown;
+	constructor(ptr: unknown) {
+		this.value = ptr;
+	}
+	toString(): string {
+		void this.value;
+		return "";
+	}
+}
+
+export function ptr(_value: ArrayBufferView): Pointer {
+	return 0;
+}
+
 export function dlopen(
 	_path: string,
 	_symbols: Record<string, unknown>,

package/platforms/electrobun/src/native/agent.ts

@@ -28,13 +28,13 @@ import crypto from "node:crypto";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import { Utils } from "electrobun/bun";
 import {
 	resolveApiToken,
 	resolveDesktopApiPort,
 	resolveDisableAutoApiToken,
 	setApiToken,
 } from "@elizaos/shared";
+import { Utils } from "electrobun/bun";
 import { resolveDesktopRuntimeMode } from "../api-base";
 import { getBrandConfig } from "../brand-config";
 import { DEFAULT_API_PORT } from "../constants";
@@ -159,7 +159,8 @@ function normalizeEnvPath(value: string | undefined): string | null {
 }
 
 function isStoreBuildVariant(env: NodeJS.ProcessEnv = process.env): boolean {
-	const raw = env.MILADY_BUILD_VARIANT?.trim() || env.ELIZA_BUILD_VARIANT?.trim();
+	const raw =
+		env.MILADY_BUILD_VARIANT?.trim() || env.ELIZA_BUILD_VARIANT?.trim();
 	return raw?.toLowerCase() === "store";
 }
 
@@ -229,7 +230,10 @@ function buildExistingElizaInstallCandidates(opts?: {
 		normalizeEnvPath(env.MILADY_CONFIG_PATH) ??
 		normalizeEnvPath(env.ELIZA_CONFIG_PATH);
 	const stateDirFromEnv = resolveExplicitStateDir(env);
-	const defaultStateDir = joinPortable(homedir, `.${resolveStateNamespace(env)}`);
+	const defaultStateDir = joinPortable(
+		homedir,
+		`.${resolveStateNamespace(env)}`,
+	);
 
 	const candidates = [
 		configPathFromEnv
@@ -316,6 +320,69 @@ export function inspectExistingElizaInstall(opts?: {
 	};
 }
 
+export function migrateDesktopStateDirFromPath(
+	fromPath: string,
+	opts?: { env?: NodeJS.ProcessEnv },
+): StateDirMigrationResult {
+	const source = resolvePortablePath(fromPath);
+	const target = resolveDesktopChildStateDir({ env: opts?.env ?? process.env });
+
+	if (source === target) {
+		return {
+			ok: true,
+			migrated: false,
+			fromPath: source,
+			toPath: target,
+			skippedReason: "same-path",
+		};
+	}
+
+	try {
+		const stat = fs.statSync(source);
+		if (!stat.isDirectory()) {
+			return {
+				ok: true,
+				migrated: false,
+				fromPath: source,
+				toPath: target,
+				skippedReason: "source-not-directory",
+			};
+		}
+	} catch {
+		return {
+			ok: true,
+			migrated: false,
+			fromPath: source,
+			toPath: target,
+			skippedReason: "source-missing",
+		};
+	}
+
+	try {
+		fs.mkdirSync(target, { recursive: true });
+		fs.cpSync(source, target, {
+			recursive: true,
+			force: false,
+			errorOnExist: false,
+			dereference: false,
+		});
+		return {
+			ok: true,
+			migrated: true,
+			fromPath: source,
+			toPath: target,
+		};
+	} catch (err) {
+		return {
+			ok: false,
+			migrated: false,
+			fromPath: source,
+			toPath: target,
+			error: err instanceof Error ? err.message : String(err),
+		};
+	}
+}
+
 // ---------------------------------------------------------------------------
 // Diagnostic logging
 // ---------------------------------------------------------------------------
@@ -1630,6 +1697,10 @@ export class AgentManager {
 		return inspectExistingElizaInstall();
 	}
 
+	migrateStateDir(params: { fromPath: string }): StateDirMigrationResult {
+		return migrateDesktopStateDirFromPath(params.fromPath);
+	}
+
 	getPort(): number | null {
 		return this.status.port;
 	}

package/platforms/electrobun/src/native/desktop.ts

@@ -71,10 +71,13 @@ import {
 	getStartupDiagnosticsSnapshot,
 } from "./agent";
 import {
+	createSecurityScopedBookmark,
 	isAppActive,
 	isKeyWindow,
 	makeKeyAndOrderFront,
 	orderOut,
+	startAccessingSecurityScopedBookmark,
+	stopAccessingSecurityScopedBookmarks,
 } from "./mac-window-effects";
 import {
 	linuxSysfsOnBattery,
@@ -2018,11 +2021,8 @@ X-GNOME-Autostart-enabled=true
 	 *
 	 * The `bookmark` field is the OS-specific persistence handle: on macOS, a
 	 * base64 NSURLBookmarkCreationOptions.WithSecurityScope blob the caller
-	 * stores and re-resolves on next launch. Bookmark creation requires a
-	 * native bridge that this build does not yet ship, so we currently return
-	 * `bookmark: null` and rely on the picker re-prompt at next launch when
-	 * the path no longer resolves under the sandbox. TODO: wire into the
-	 * `native/` module's NSURL bookmark API to make grants persistent.
+	 * stores and re-resolves on next launch. Non-macOS platforms return null
+	 * because portals / AppContainer do not use NSURL bookmarks.
 	 */
 	async pickWorkspaceFolder(options: {
 		defaultPath?: string;
@@ -2038,7 +2038,40 @@ X-GNOME-Autostart-enabled=true
 		if (canceled) {
 			return { canceled: true, path: "", bookmark: null };
 		}
-		return { canceled: false, path: filePaths[0], bookmark: null };
+		const selectedPath = filePaths[0] ?? "";
+		if (!selectedPath) {
+			return { canceled: true, path: "", bookmark: null };
+		}
+		const bookmark =
+			process.platform === "darwin"
+				? createSecurityScopedBookmark(selectedPath)
+				: null;
+		return { canceled: false, path: selectedPath, bookmark };
+	}
+
+	resolveWorkspaceFolderBookmark(options: { bookmark: string }): {
+		ok: boolean;
+		path: string;
+		stale?: boolean;
+		error?: string;
+	} {
+		if (process.platform !== "darwin") {
+			return { ok: true, path: "" };
+		}
+		const path = startAccessingSecurityScopedBookmark(options.bookmark);
+		if (!path) {
+			return {
+				ok: false,
+				path: "",
+				error: "Unable to resolve security-scoped bookmark.",
+			};
+		}
+		return { ok: true, path };
+	}
+
+	releaseWorkspaceFolderBookmarks(): { ok: true } {
+		stopAccessingSecurityScopedBookmarks();
+		return { ok: true };
 	}
 
 	// MARK: - Helpers

package/platforms/electrobun/src/native/mac-window-effects.ts

@@ -1,4 +1,4 @@
-import { dlopen, FFIType, type Pointer } from "bun:ffi";
+import { CString, dlopen, FFIType, type Pointer, ptr } from "bun:ffi";
 import { existsSync } from "node:fs";
 import { join } from "node:path";
 
@@ -16,6 +16,10 @@ type MacEffectsSymbols = {
 	makeKeyAndOrderFrontWindow(ptr: Pointer): boolean;
 	isAppActive(): boolean;
 	isWindowKey(ptr: Pointer): boolean;
+	createSecurityScopedBookmark(path: Pointer): Pointer | null;
+	startAccessingSecurityScopedBookmark(bookmark: Pointer): Pointer | null;
+	stopAccessingSecurityScopedBookmarks(): void;
+	freeNativeCString(value: Pointer): void;
 };
 
 type LoadedMacEffectsLib = { symbols: MacEffectsSymbols; close(): void };
@@ -52,6 +56,19 @@ function loadLib(): MacEffectsLib {
 			},
 			isAppActive: { args: [], returns: FFIType.bool },
 			isWindowKey: { args: [FFIType.ptr], returns: FFIType.bool },
+			createSecurityScopedBookmark: {
+				args: [FFIType.ptr],
+				returns: FFIType.ptr,
+			},
+			startAccessingSecurityScopedBookmark: {
+				args: [FFIType.ptr],
+				returns: FFIType.ptr,
+			},
+			stopAccessingSecurityScopedBookmarks: {
+				args: [],
+				returns: FFIType.void,
+			},
+			freeNativeCString: { args: [FFIType.ptr], returns: FFIType.void },
 		}) as MacEffectsLib;
 	} catch (err) {
 		console.warn("[MacEffects] Failed to load dylib:", err);
@@ -59,6 +76,25 @@ function loadLib(): MacEffectsLib {
 	}
 }
 
+function cStringBuffer(value: string): Buffer {
+	const bytes = Buffer.from(value, "utf8");
+	const buffer = Buffer.alloc(bytes.byteLength + 1);
+	bytes.copy(buffer);
+	return buffer;
+}
+
+function takeNativeString(
+	lib: LoadedMacEffectsLib,
+	value: Pointer | null,
+): string | null {
+	if (!value) return null;
+	try {
+		return new CString(value).toString();
+	} finally {
+		lib.symbols.freeNativeCString(value);
+	}
+}
+
 function getLib(): LoadedMacEffectsLib | null {
 	if (process.platform !== "darwin") return null;
 	if (_lib === undefined) {
@@ -116,3 +152,27 @@ export function isAppActive(): boolean {
 export function isKeyWindow(ptr: Pointer): boolean {
 	return getLib()?.symbols.isWindowKey(ptr) ?? false;
 }
+
+export function createSecurityScopedBookmark(path: string): string | null {
+	const lib = getLib();
+	if (!lib || !path.trim()) return null;
+	const pathBuffer = cStringBuffer(path);
+	const result = lib.symbols.createSecurityScopedBookmark(ptr(pathBuffer));
+	return takeNativeString(lib, result);
+}
+
+export function startAccessingSecurityScopedBookmark(
+	bookmark: string,
+): string | null {
+	const lib = getLib();
+	if (!lib || !bookmark.trim()) return null;
+	const bookmarkBuffer = cStringBuffer(bookmark);
+	const result = lib.symbols.startAccessingSecurityScopedBookmark(
+		ptr(bookmarkBuffer),
+	);
+	return takeNativeString(lib, result);
+}
+
+export function stopAccessingSecurityScopedBookmarks(): void {
+	getLib()?.symbols.stopAccessingSecurityScopedBookmarks();
+}

package/platforms/electrobun/src/native/permissions-shared.ts

@@ -16,7 +16,7 @@ import type {
 
 export type SystemPermissionId = PermissionId;
 
-/** Local variant uses an index signature (the canonical contract uses explicit keys). */
+/** Local variant keeps a loose index signature for legacy Electrobun RPC code. */
 export interface AllPermissionsState {
 	[key: string]: PermissionState;
 }
@@ -133,7 +133,8 @@ export const SYSTEM_PERMISSIONS: SystemPermissionDefinition[] = [
 	{
 		id: "notifications",
 		name: "Notifications",
-		description: "Show system notifications for reminders and background results",
+		description:
+			"Show system notifications for reminders and background results",
 		icon: "bell",
 		platforms: ["darwin", "win32", "linux"],
 		requiredForFeatures: ["notifications", "lifeops"],

package/platforms/electrobun/src/native/permissions.ts

@@ -5,9 +5,9 @@
  * Shared implementation ported forward to Electrobun; no runtime-specific APIs required.
  */
 
-import type { SendToWebview } from "../types.js";
 import { ALL_PROBERS } from "@elizaos/agent/services/permissions/probers/index";
 import { getMacPermissionDeepLink } from "@elizaos/shared";
+import type { SendToWebview } from "../types.js";
 import type {
 	AllPermissionsState,
 	PermissionState,
@@ -82,7 +82,8 @@ async function openPermissionSettings(id: SystemPermissionId): Promise<void> {
 			notifications: "notifications",
 		};
 		const panel = settingsMap[id];
-		if (panel) await spawnDetached(["sh", "-lc", `gnome-control-center ${panel}`]);
+		if (panel)
+			await spawnDetached(["sh", "-lc", `gnome-control-center ${panel}`]);
 	}
 }
 
@@ -177,10 +178,14 @@ export class PermissionManager {
 		}
 
 		if (id === "shell") {
-			const state = buildPermissionState(id, this.shellEnabled ? "granted" : "denied", {
-				canRequest: false,
-				lastRequested: Date.now(),
-			});
+			const state = buildPermissionState(
+				id,
+				this.shellEnabled ? "granted" : "denied",
+				{
+					canRequest: false,
+					lastRequested: Date.now(),
+				},
+			);
 			this.cache.set(id, state);
 			return state;
 		}

package/platforms/electrobun/src/rpc-handlers.ts

@@ -244,6 +244,8 @@ export function buildBunRpcHandlers({
 		},
 		agentStatus: async () => agent.getStatus(),
 		agentInspectExistingInstall: async () => agent.inspectExistingInstall(),
+		agentMigrateStateDir: async (params: { fromPath: string }) =>
+			agent.migrateStateDir(params),
 		/** Renderer `fetch` after native dialogs can stall; main POST matches menu reset pattern. */
 		agentPostReset: async (
 			params?: { apiBase?: string; bearerToken?: string } | null,
@@ -640,6 +642,11 @@ export function buildBunRpcHandlers({
 		desktopPickWorkspaceFolder: async (
 			params: Parameters<typeof desktop.pickWorkspaceFolder>[0],
 		) => desktop.pickWorkspaceFolder(params),
+		desktopResolveWorkspaceFolderBookmark: async (
+			params: Parameters<typeof desktop.resolveWorkspaceFolderBookmark>[0],
+		) => desktop.resolveWorkspaceFolderBookmark(params),
+		desktopReleaseWorkspaceFolderBookmarks: async () =>
+			desktop.releaseWorkspaceFolderBookmarks(),
 
 		// ---- Gateway ----
 		gatewayStartDiscovery: async (