@elizaos/app-core 2.0.0-beta.2 → 2.0.11-beta.5

package/services/sandbox-registry.js

@@ -0,0 +1,323 @@
+/**
+ * SandboxRegistry — self-registers the sandbox container in the shared Redis
+ * so the multi-tenant gateways (`gateway-discord`, `gateway-webhook`) can
+ * resolve `agent_id -> server URL` and forward inbound platform messages here.
+ *
+ * This is a deliberate duplicate of `packages/agent/src/runtime/sandbox-registry.ts`:
+ * the published cloud image runs the agent runtime entrypoint, which cannot
+ * import `@elizaos/app-core` without an `agent -> app-core -> agent` cycle, so
+ * the agent copy is the one that executes in a provisioned container. Keep the
+ * two copies in lock-step.
+ *
+ * Two Redis keys are written with a short TTL; a periodic heartbeat refreshes
+ * the TTL while the sandbox is alive, and `unregister()` deletes them on
+ * graceful shutdown if they still point at this sandbox. If the container
+ * crashes, the keys expire naturally and the gateways stop routing to a dead
+ * address.
+ *
+ *   server:<serverName>:url = <serverUrl>   (resolver address)
+ *   agent:<agentId>:server  = <serverName>  (agent -> server pointer)
+ *
+ * Two transports are supported, selected by the URL scheme so the same
+ * registry works before and after the managed Redis is migrated off Upstash:
+ *   - `http(s)://` — Upstash REST API via `fetch` (the pipeline endpoint
+ *     applies both SET-with-EX commands atomically server-side).
+ *   - `redis(s)://` — native RESP over a TCP socket (e.g. a Railway Redis
+ *     public proxy). Auth is carried inline in the URL, so no separate token
+ *     is required.
+ */
+import net from "node:net";
+import { logger } from "@elizaos/core";
+/** Hard cap on a single TCP register/refresh round-trip. */
+const REGISTRY_TCP_TIMEOUT_MS = 10_000;
+function formatErr(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+function isTcpRedisUrl(url) {
+    return /^rediss?:\/\//i.test(url);
+}
+export class SandboxRegistry {
+    config;
+    heartbeatTimer = null;
+    tcp;
+    constructor(config) {
+        this.config = config;
+        this.tcp = isTcpRedisUrl(config.redisUrl);
+    }
+    async register() {
+        await this.writeKeys();
+        logger.info(`[sandbox-registry] Registered ${this.config.serverName} -> ${this.config.serverUrl} (agent ${this.config.agentId}, ttl ${this.config.ttlSeconds}s, transport ${this.tcp ? "tcp" : "rest"})`);
+    }
+    async refresh() {
+        await this.writeKeys();
+    }
+    async unregister() {
+        const { serverName, serverUrl, agentId } = this.config;
+        const serverUrlKey = `server:${serverName}:url`;
+        const agentServerKey = `agent:${agentId}:server`;
+        const [registeredUrl, registeredServer] = await Promise.all([
+            this.get(serverUrlKey),
+            this.get(agentServerKey),
+        ]);
+        const keysToDelete = [];
+        if (registeredUrl === serverUrl)
+            keysToDelete.push(serverUrlKey);
+        if (registeredServer === serverName)
+            keysToDelete.push(agentServerKey);
+        if (keysToDelete.length > 0) {
+            await this.command(["DEL", ...keysToDelete]);
+        }
+        logger.info(`[sandbox-registry] Unregistered ${serverName} (agent ${agentId})`);
+    }
+    startHeartbeat(intervalMs) {
+        if (this.heartbeatTimer)
+            return;
+        this.heartbeatTimer = setInterval(() => {
+            void this.refresh().catch((err) => {
+                logger.warn(`[sandbox-registry] Heartbeat refresh failed: ${formatErr(err)}`);
+            });
+        }, intervalMs);
+        if (typeof this.heartbeatTimer === "object" &&
+            "unref" in this.heartbeatTimer) {
+            this.heartbeatTimer.unref();
+        }
+    }
+    stopHeartbeat() {
+        if (this.heartbeatTimer) {
+            clearInterval(this.heartbeatTimer);
+            this.heartbeatTimer = null;
+        }
+    }
+    /**
+     * Atomic two-key write. Both keys must succeed together — partial state
+     * would let gateways resolve `agent:X:server` to a stale `server:Y:url`
+     * value or miss a routing entry whose other half was just renewed. REST uses
+     * the Upstash pipeline endpoint; TCP pipelines both commands on one socket.
+     */
+    async writeKeys() {
+        const { serverName, serverUrl, agentId, ttlSeconds } = this.config;
+        const ttl = String(ttlSeconds);
+        await this.pipeline([
+            ["SET", `server:${serverName}:url`, serverUrl, "EX", ttl],
+            ["SET", `agent:${agentId}:server`, serverName, "EX", ttl],
+        ]);
+    }
+    async get(key) {
+        const result = await this.command(["GET", key]);
+        return typeof result === "string" ? result : null;
+    }
+    async command(args) {
+        if (this.tcp) {
+            const [reply] = await this.tcpExec([args]);
+            return reply;
+        }
+        const res = await fetch(this.config.redisUrl, {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${this.config.redisToken}`,
+                "Content-Type": "application/json",
+            },
+            body: JSON.stringify(args),
+        });
+        if (!res.ok) {
+            throw new Error(`Upstash command failed: ${res.status} ${await res.text()}`);
+        }
+        const json = (await res.json());
+        if (json.error)
+            throw new Error(`Upstash error: ${json.error}`);
+        return json.result;
+    }
+    async pipeline(commands) {
+        if (this.tcp) {
+            await this.tcpExec(commands);
+            return;
+        }
+        const res = await fetch(`${this.config.redisUrl}/pipeline`, {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${this.config.redisToken}`,
+                "Content-Type": "application/json",
+            },
+            body: JSON.stringify(commands),
+        });
+        if (!res.ok) {
+            throw new Error(`Upstash pipeline failed: ${res.status} ${await res.text()}`);
+        }
+        const json = (await res.json());
+        if (Array.isArray(json)) {
+            for (const entry of json) {
+                if (entry?.error)
+                    throw new Error(`Upstash error: ${entry.error}`);
+            }
+        }
+    }
+    /**
+     * Execute one or more commands over a native RESP/TCP connection and return
+     * the per-command replies (AUTH/SELECT preamble replies are stripped). One
+     * short-lived connection per call keeps the lifecycle trivial — the registry
+     * only writes twice per heartbeat, so connection churn is negligible.
+     */
+    async tcpExec(commands) {
+        const url = new URL(this.config.redisUrl);
+        const secure = url.protocol === "rediss:";
+        const host = url.hostname;
+        const port = url.port ? Number(url.port) : 6379;
+        const username = decodeURIComponent(url.username || "");
+        const password = decodeURIComponent(url.password || "");
+        const db = url.pathname.length > 1 ? url.pathname.slice(1) : "";
+        const preamble = [];
+        if (password) {
+            preamble.push(username ? ["AUTH", username, password] : ["AUTH", password]);
+        }
+        if (db)
+            preamble.push(["SELECT", db]);
+        const all = [...preamble, ...commands];
+        // `node:tls` is imported lazily (only for `rediss://`) so the mobile
+        // bundle — which never reaches the TCP path — stays free of it.
+        const socket = secure
+            ? (await import("node:tls")).connect({ host, port, servername: host })
+            : net.connect({ host, port });
+        return new Promise((resolve, reject) => {
+            let settled = false;
+            let buffer = Buffer.alloc(0);
+            const finish = (err, replies) => {
+                if (settled)
+                    return;
+                settled = true;
+                socket.destroy();
+                if (err)
+                    reject(err);
+                else
+                    resolve(replies ?? []);
+            };
+            socket.setTimeout(REGISTRY_TCP_TIMEOUT_MS, () => finish(new Error("Redis TCP timeout")));
+            socket.on("error", (err) => finish(err));
+            const onConnect = () => {
+                socket.write(encodeRespCommands(all));
+            };
+            socket.once(secure ? "secureConnect" : "connect", onConnect);
+            socket.on("data", (chunk) => {
+                buffer = Buffer.concat([buffer, chunk]);
+                const parsed = parseRespReplies(buffer, all.length);
+                if (!parsed)
+                    return; // need more bytes
+                const firstErr = parsed.replies.find((r) => r instanceof RespError);
+                if (firstErr) {
+                    finish(new Error(`Redis error: ${firstErr.message}`));
+                    return;
+                }
+                // Strip the AUTH/SELECT preamble replies; return only command results.
+                finish(null, parsed.replies.slice(preamble.length));
+            });
+        });
+    }
+}
+/** A RESP `-ERR ...` reply, kept distinct so callers can detect failures. */
+class RespError {
+    message;
+    constructor(message) {
+        this.message = message;
+    }
+}
+/** Encode commands as a single RESP2 buffer (inline pipelining). */
+function encodeRespCommands(commands) {
+    const parts = [];
+    for (const args of commands) {
+        parts.push(Buffer.from(`*${args.length}\r\n`));
+        for (const arg of args) {
+            const bytes = Buffer.from(arg);
+            parts.push(Buffer.from(`$${bytes.length}\r\n`));
+            parts.push(bytes);
+            parts.push(Buffer.from("\r\n"));
+        }
+    }
+    return Buffer.concat(parts);
+}
+/**
+ * Parse exactly `expected` top-level RESP replies from `buffer`. Returns the
+ * replies (with `-ERR` mapped to {@link RespError}) once all are present, or
+ * `null` when more bytes are still needed.
+ */
+function parseRespReplies(buffer, expected) {
+    const replies = [];
+    let offset = 0;
+    const parseOne = () => {
+        if (offset >= buffer.length)
+            return null;
+        const type = buffer[offset];
+        const lineEnd = buffer.indexOf("\r\n", offset);
+        if (lineEnd === -1)
+            return null;
+        const line = buffer.toString("utf8", offset + 1, lineEnd);
+        const afterLine = lineEnd + 2;
+        switch (type) {
+            case 0x2b: // '+' simple string
+                return { value: line, next: afterLine };
+            case 0x2d: // '-' error
+                return { value: new RespError(line), next: afterLine };
+            case 0x3a: // ':' integer
+                return { value: Number(line), next: afterLine };
+            case 0x5f: // '_' RESP3 null
+                return { value: null, next: afterLine };
+            case 0x24: {
+                // '$' bulk string
+                const len = Number(line);
+                if (len === -1)
+                    return { value: null, next: afterLine };
+                const end = afterLine + len;
+                if (buffer.length < end + 2)
+                    return null; // bulk + trailing CRLF
+                return {
+                    value: buffer.toString("utf8", afterLine, end),
+                    next: end + 2,
+                };
+            }
+            default:
+                return {
+                    value: new RespError(`unsupported RESP type ${String.fromCharCode(type)}`),
+                    next: afterLine,
+                };
+        }
+    };
+    while (replies.length < expected) {
+        const savedOffset = offset;
+        const one = parseOne();
+        if (!one) {
+            offset = savedOffset;
+            return null;
+        }
+        replies.push(one.value);
+        offset = one.next;
+    }
+    return { replies };
+}
+/**
+ * Reads the SANDBOX_REGISTRY_* and SANDBOX_* env vars and returns a fully
+ * wired `SandboxRegistry`, or `null` if the sandbox context is not
+ * configured (e.g. local dev, non-Hetzner deployment). Caller must call
+ * `register()` and `startHeartbeat(...)` after a successful boot. A `redis://`
+ * URL needs no token (auth is inline); a `http(s)://` Upstash URL requires one.
+ */
+export function buildSandboxRegistryFromEnv(env = process.env, ttlSeconds = 90) {
+    const redisUrl = env.SANDBOX_REGISTRY_REDIS_URL?.trim();
+    const redisToken = env.SANDBOX_REGISTRY_REDIS_TOKEN?.trim();
+    const agentId = env.SANDBOX_AGENT_ID?.trim();
+    const serverName = env.SANDBOX_SERVER_NAME?.trim();
+    const serverUrl = env.SANDBOX_PUBLIC_URL?.trim();
+    const tcp = !!redisUrl && isTcpRedisUrl(redisUrl);
+    if (!redisUrl ||
+        (!tcp && !redisToken) ||
+        !agentId ||
+        !serverName ||
+        !serverUrl) {
+        return null;
+    }
+    return new SandboxRegistry({
+        redisUrl,
+        redisToken,
+        agentId,
+        serverName,
+        serverUrl,
+        ttlSeconds,
+    });
+}

package/services/secrets-manager-installer.d.ts

@@ -54,7 +54,7 @@ export interface InstallJobSnapshot {
 }
 /**
  * Injectable spawn for tests. Production callers omit this and get the real
- * `node:child_process` `spawn`. Tests pass a stub that returns a synthetic
+ * `node:child_process` `spawn`. Tests pass a fixture that returns a synthetic
  * `ChildProcess`-like object so we don't actually fork brew/npm.
  */
 export type SpawnFn = (command: string, args: readonly string[], options: {
@@ -102,6 +102,13 @@ export declare class SecretsManagerInstaller {
      * that connect after spawn still see the full log.
      */
     startInstall(id: InstallableBackendId, method: InstallMethod): InstallJobSnapshot;
+    /**
+     * Drop the oldest terminal (succeeded/failed) jobs once the retained-job cap
+     * is exceeded. Insertion order in the Map is oldest-first, so we walk it in
+     * order and remove terminal jobs until back under the cap. Active jobs
+     * (pending/running) are never removed.
+     */
+    private evictTerminalJobs;
     /** Subscribe to events for a running job. Returns an unsubscribe function. */
     subscribeJob(jobId: string, listener: (event: InstallJobEvent) => void): () => void;
     getJob(jobId: string): InstallJobSnapshot | null;

package/services/secrets-manager-installer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secrets-manager-installer.d.ts","sourceRoot":"","sources":["../../../../../src/services/secrets-manager-installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,KAAK,YAAY,EAAsB,MAAM,oBAAoB,CAAC;AAG3E,OAAO,EACL,KAAK,SAAS,EAGd,KAAK,aAAa,EAElB,KAAK,cAAc,EACpB,MAAM,gBAAgB,CAAC;AAExB,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AAElE,MAAM,MAAM,gBAAgB,GACxB,SAAS,GACT,SAAS,GACT,WAAW,GACX,QAAQ,GACR,WAAW,CAAC;AAEhB,MAAM,MAAM,eAAe,GACvB;IACE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,GAC9D;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,CAAC;CAC9C;AAgBD;;;;GAIG;AACH,MAAM,MAAM,OAAO,GAAG,CACpB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE;IACP,KAAK,EAAE,CAAC,QAAQ,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,KAAK,EAAE,KAAK,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,KACE,YAAY,CAAC;AAElB,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,gFAAgF;IAChF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,mFAAmF;IACnF,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,qDAAqD;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,wEAAwE;IACxE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,sFAAsF;IACtF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,sDAAsD;IACtD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;CACzC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,uFAAuF;IACvF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAYD,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAiC;IACtD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAU;gBAEpB,IAAI,EAAE,qBAAqB;IAKvC,2EAA2E;IACrE,iBAAiB,CACrB,EAAE,EAAE,oBAAoB,GACvB,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC;IAIpC;;;;;;OAMG;IACH,YAAY,CACV,EAAE,EAAE,oBAAoB,EACxB,MAAM,EAAE,aAAa,GACpB,kBAAkB;IAgCrB,8EAA8E;IAC9E,YAAY,CACV,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,GACzC,MAAM,IAAI;IAab,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI;IAKhD;;;OAGG;IACG,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;IAYrD,OAAO,CAAC,SAAS,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAM7D,gEAAgE;IAC1D,UAAU,CAAC,SAAS,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAOzE,OAAO,CAAC,aAAa;IAoDrB,OAAO,CAAC,IAAI;IAQZ,OAAO,CAAC,UAAU;IAKlB,OAAO,CAAC,SAAS;IAcjB;;;;;OAKG;YACW,iBAAiB;IAwE/B;;;;;OAKG;YACW,eAAe;CAmE9B;AAuGD,wBAAgB,0BAA0B,CACxC,OAAO,CAAC,EAAE,cAAc,GACvB,uBAAuB,CAOzB;AAED,0EAA0E;AAC1E,wBAAgB,qCAAqC,CACnD,IAAI,EAAE,uBAAuB,GAAG,IAAI,GACnC,IAAI,CAEN;AAED,iBAAiB;AACjB,wBAAgB,uCAAuC,IAAI,IAAI,CAE9D"}
+{"version":3,"file":"secrets-manager-installer.d.ts","sourceRoot":"","sources":["../../../../../src/services/secrets-manager-installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,KAAK,YAAY,EAAsB,MAAM,oBAAoB,CAAC;AAG3E,OAAO,EACL,KAAK,SAAS,EAGd,KAAK,aAAa,EAElB,KAAK,cAAc,EACpB,MAAM,gBAAgB,CAAC;AAExB,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AAElE,MAAM,MAAM,gBAAgB,GACxB,SAAS,GACT,SAAS,GACT,WAAW,GACX,QAAQ,GACR,WAAW,CAAC;AAEhB,MAAM,MAAM,eAAe,GACvB;IACE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,GAC9D;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,CAAC;CAC9C;AAgBD;;;;GAIG;AACH,MAAM,MAAM,OAAO,GAAG,CACpB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE;IACP,KAAK,EAAE,CAAC,QAAQ,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,KAAK,EAAE,KAAK,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,KACE,YAAY,CAAC;AAElB,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,gFAAgF;IAChF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,mFAAmF;IACnF,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,qDAAqD;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,wEAAwE;IACxE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,sFAAsF;IACtF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,sDAAsD;IACtD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;CACzC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,uFAAuF;IACvF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAkBD,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAiC;IACtD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAU;gBAEpB,IAAI,EAAE,qBAAqB;IAKvC,2EAA2E;IACrE,iBAAiB,CACrB,EAAE,EAAE,oBAAoB,GACvB,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC;IAIpC;;;;;;OAMG;IACH,YAAY,CACV,EAAE,EAAE,oBAAoB,EACxB,MAAM,EAAE,aAAa,GACpB,kBAAkB;IAiCrB;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAWzB,8EAA8E;IAC9E,YAAY,CACV,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,GACzC,MAAM,IAAI;IAab,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI;IAKhD;;;OAGG;IACG,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;IAYrD,OAAO,CAAC,SAAS,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAM7D,gEAAgE;IAC1D,UAAU,CAAC,SAAS,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAOzE,OAAO,CAAC,aAAa;IAoDrB,OAAO,CAAC,IAAI;IAQZ,OAAO,CAAC,UAAU;IAKlB,OAAO,CAAC,SAAS;IAcjB;;;;;OAKG;YACW,iBAAiB;IAwE/B;;;;;OAKG;YACW,eAAe;CAmE9B;AAuGD,wBAAgB,0BAA0B,CACxC,OAAO,CAAC,EAAE,cAAc,GACvB,uBAAuB,CAOzB;AAED,0EAA0E;AAC1E,wBAAgB,qCAAqC,CACnD,IAAI,EAAE,uBAAuB,GAAG,IAAI,GACnC,IAAI,CAEN;AAED,iBAAiB;AACjB,wBAAgB,uCAAuC,IAAI,IAAI,CAE9D"}

package/services/secrets-manager-installer.js

@@ -34,6 +34,12 @@ function sessionKey(backendId) {
 const MAX_LINE_LENGTH = 2_000;
 const MAX_HISTORY_EVENTS = 500;
 const DEFAULT_SIGNIN_TIMEOUT_MS = 60_000;
+/**
+ * Cap on retained install jobs. The installer is a process-lifetime singleton,
+ * so without this the `jobs` map grows one entry per install forever (each
+ * holding up to MAX_HISTORY_EVENTS log events). Active jobs are never evicted.
+ */
+const MAX_RETAINED_JOBS = 100;
 export class SecretsManagerInstaller {
     jobs = new Map();
     manager;
@@ -75,9 +81,28 @@ export class SecretsManagerInstaller {
             child: null,
         };
         this.jobs.set(job.id, job);
+        this.evictTerminalJobs();
         setImmediate(() => this.runInstallJob(job, built.command, built.args));
         return snapshotOf(job);
     }
+    /**
+     * Drop the oldest terminal (succeeded/failed) jobs once the retained-job cap
+     * is exceeded. Insertion order in the Map is oldest-first, so we walk it in
+     * order and remove terminal jobs until back under the cap. Active jobs
+     * (pending/running) are never removed.
+     */
+    evictTerminalJobs() {
+        if (this.jobs.size <= MAX_RETAINED_JOBS)
+            return;
+        for (const [id, job] of this.jobs) {
+            if (this.jobs.size <= MAX_RETAINED_JOBS)
+                break;
+            if (job.status === "succeeded" || job.status === "failed") {
+                job.emitter.removeAllListeners();
+                this.jobs.delete(id);
+            }
+        }
+    }
     /** Subscribe to events for a running job. Returns an unsubscribe function. */
     subscribeJob(jobId, listener) {
         const job = this.jobs.get(jobId);
@@ -108,7 +133,7 @@ export class SecretsManagerInstaller {
         if (request.backendId === "bitwarden") {
             return this.signInBitwarden(request);
         }
-        throw new Error(`Sign-in for "${request.backendId}" is not implemented. Vendor CLI is unstable.`);
+        throw new Error(`Sign-in for "${request.backendId}" is unsupported because the vendor CLI contract is unstable.`);
     }
     async signOut(backendId) {
         if (await this.manager.has(sessionKey(backendId))) {
@@ -301,7 +326,7 @@ function spawnCapture(spawnFn, command, args, stdin, env, timeoutMs = DEFAULT_SI
             child.kill("SIGKILL");
             reject(new Error(`${command} timed out after ${timeoutMs}ms`));
         }, timeoutMs);
-        timer.unref?.();
+        timer.unref();
         child.once("error", (err) => {
             clearTimeout(timer);
             reject(err);

package/services/sensitive-requests/cloud-link-adapter.d.ts

@@ -0,0 +1,15 @@
+import type { SensitiveRequestDeliveryAdapter } from "@elizaos/core";
+export interface CloudLinkAdapterDeps {
+    /**
+     * Resolves the cloud site base URL (e.g. `https://www.elizacloud.ai`) when
+     * the user has paired Eliza Cloud. Returns `null` when cloud is not
+     * configured. Defaults to a runtime-aware resolver that consults
+     * `runtime.getSetting("ELIZAOS_CLOUD_API_KEY")` /
+     * `runtime.getSetting("ELIZAOS_CLOUD_BASE_URL")` with `process.env`
+     * fallbacks.
+     */
+    resolveCloudBase?: (runtime: unknown) => string | null;
+}
+export declare function createCloudLinkSensitiveRequestAdapter(deps?: CloudLinkAdapterDeps): SensitiveRequestDeliveryAdapter;
+export declare const cloudLinkSensitiveRequestAdapter: SensitiveRequestDeliveryAdapter;
+//# sourceMappingURL=cloud-link-adapter.d.ts.map

package/services/sensitive-requests/cloud-link-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-link-adapter.d.ts","sourceRoot":"","sources":["../../../../../../src/services/sensitive-requests/cloud-link-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAGV,+BAA+B,EAChC,MAAM,eAAe,CAAC;AAGvB,MAAM,WAAW,oBAAoB;IACnC;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,MAAM,GAAG,IAAI,CAAC;CACxD;AA4DD,wBAAgB,sCAAsC,CACpD,IAAI,GAAE,oBAAyB,GAC9B,+BAA+B,CA8BjC;AAED,eAAO,MAAM,gCAAgC,EAAE,+BACL,CAAC"}

package/services/sensitive-requests/cloud-link-adapter.js

@@ -0,0 +1,73 @@
+import { normalizeCloudSiteUrl } from "@elizaos/shared";
+function readSetting(runtime, key) {
+    const candidate = runtime?.getSetting?.(key);
+    return typeof candidate === "string" && candidate.trim()
+        ? candidate.trim()
+        : undefined;
+}
+function defaultResolveCloudBase(runtime) {
+    const apiKey = readSetting(runtime, "ELIZAOS_CLOUD_API_KEY") ??
+        (process.env.ELIZAOS_CLOUD_API_KEY?.trim() || undefined);
+    if (!apiKey)
+        return null;
+    const rawBase = readSetting(runtime, "ELIZAOS_CLOUD_BASE_URL") ??
+        (process.env.ELIZAOS_CLOUD_BASE_URL?.trim() || undefined);
+    const normalized = normalizeCloudSiteUrl(rawBase);
+    return normalized || null;
+}
+function readPaymentAppId(request) {
+    const target = request.target;
+    const targetAppId = target.appId;
+    if (typeof targetAppId === "string" && targetAppId.trim()) {
+        return targetAppId.trim();
+    }
+    const callbackAppId = request.callback?.appId;
+    if (typeof callbackAppId === "string" && callbackAppId.trim()) {
+        return callbackAppId.trim();
+    }
+    return undefined;
+}
+function buildUrl(cloudBase, request) {
+    const id = encodeURIComponent(request.id);
+    if (request.kind === "payment") {
+        const appId = readPaymentAppId(request);
+        if (!appId) {
+            return { error: "payment request missing appId" };
+        }
+        return {
+            url: `${cloudBase}/payment/app-charge/${encodeURIComponent(appId)}/${id}`,
+        };
+    }
+    return { url: `${cloudBase}/sensitive-requests/${id}` };
+}
+export function createCloudLinkSensitiveRequestAdapter(deps = {}) {
+    const resolveCloudBase = deps.resolveCloudBase ?? defaultResolveCloudBase;
+    return {
+        target: "cloud_authenticated_link",
+        async deliver({ request, runtime }) {
+            const cloudBase = resolveCloudBase(runtime);
+            if (!cloudBase) {
+                return {
+                    delivered: false,
+                    target: "cloud_authenticated_link",
+                    error: "cloud not paired",
+                };
+            }
+            const built = buildUrl(cloudBase, request);
+            if ("error" in built) {
+                return {
+                    delivered: false,
+                    target: "cloud_authenticated_link",
+                    error: built.error,
+                };
+            }
+            return {
+                delivered: true,
+                target: "cloud_authenticated_link",
+                url: built.url,
+                expiresAt: request.expiresAt,
+            };
+        },
+    };
+}
+export const cloudLinkSensitiveRequestAdapter = createCloudLinkSensitiveRequestAdapter();

package/services/sensitive-requests/index.d.ts

@@ -0,0 +1,27 @@
+/**
+ * First-party sensitive-request channel adapters and their composed
+ * registration helper.
+ *
+ * Adapter coverage (Wave A):
+ * - `dm` — provided by `plugin-discord` and other connector plugins.
+ *   Not registered here.
+ * - `owner_app_inline` — Eliza app private chat inline form.
+ * - `cloud_authenticated_link` — cloud-hosted page (cloud paired).
+ * - `tunnel_authenticated_link` — local tunnel-served page.
+ * - `public_link` — unauthenticated payment URL for any-payer payments.
+ * - `instruct_dm_only` — text-only "no link / no form" fallback.
+ */
+export { cloudLinkSensitiveRequestAdapter, createCloudLinkSensitiveRequestAdapter, } from "./cloud-link-adapter";
+export { instructDmOnlySensitiveRequestAdapter } from "./instruct-dm-only-adapter";
+export { ownerAppInlineSensitiveRequestAdapter } from "./owner-app-inline-adapter";
+export { ownerAppOAuthSensitiveRequestAdapter } from "./owner-app-oauth-adapter";
+export { publicLinkSensitiveRequestAdapter } from "./public-link-adapter";
+export { createTunnelLinkSensitiveRequestAdapter, tunnelLinkSensitiveRequestAdapter, } from "./tunnel-link-adapter";
+/**
+ * Registers app-core's first-party sensitive-request delivery adapters with
+ * the runtime's `SensitiveRequestDispatchRegistry` service. No-op when the
+ * registry service is not present (e.g. in unit tests that don't boot the
+ * full runtime).
+ */
+export declare function registerCoreSensitiveRequestAdapters(runtime: unknown): void;
+//# sourceMappingURL=index.d.ts.map

package/services/sensitive-requests/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/services/sensitive-requests/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAUH,OAAO,EACL,gCAAgC,EAChC,sCAAsC,GACvC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,qCAAqC,EAAE,MAAM,4BAA4B,CAAC;AACnF,OAAO,EAAE,qCAAqC,EAAE,MAAM,4BAA4B,CAAC;AACnF,OAAO,EAAE,oCAAoC,EAAE,MAAM,2BAA2B,CAAC;AACjF,OAAO,EAAE,iCAAiC,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EACL,uCAAuC,EACvC,iCAAiC,GAClC,MAAM,uBAAuB,CAAC;AAc/B;;;;;GAKG;AACH,wBAAgB,oCAAoC,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAmB3E"}

package/services/sensitive-requests/index.js

@@ -0,0 +1,51 @@
+/**
+ * First-party sensitive-request channel adapters and their composed
+ * registration helper.
+ *
+ * Adapter coverage (Wave A):
+ * - `dm` — provided by `plugin-discord` and other connector plugins.
+ *   Not registered here.
+ * - `owner_app_inline` — Eliza app private chat inline form.
+ * - `cloud_authenticated_link` — cloud-hosted page (cloud paired).
+ * - `tunnel_authenticated_link` — local tunnel-served page.
+ * - `public_link` — unauthenticated payment URL for any-payer payments.
+ * - `instruct_dm_only` — text-only "no link / no form" fallback.
+ */
+import { logger } from "@elizaos/core";
+import { cloudLinkSensitiveRequestAdapter } from "./cloud-link-adapter.js";
+import { instructDmOnlySensitiveRequestAdapter } from "./instruct-dm-only-adapter.js";
+import { ownerAppInlineSensitiveRequestAdapter } from "./owner-app-inline-adapter.js";
+import { ownerAppOAuthSensitiveRequestAdapter } from "./owner-app-oauth-adapter.js";
+import { publicLinkSensitiveRequestAdapter } from "./public-link-adapter.js";
+import { tunnelLinkSensitiveRequestAdapter } from "./tunnel-link-adapter.js";
+export { cloudLinkSensitiveRequestAdapter, createCloudLinkSensitiveRequestAdapter, } from "./cloud-link-adapter.js";
+export { instructDmOnlySensitiveRequestAdapter } from "./instruct-dm-only-adapter.js";
+export { ownerAppInlineSensitiveRequestAdapter } from "./owner-app-inline-adapter.js";
+export { ownerAppOAuthSensitiveRequestAdapter } from "./owner-app-oauth-adapter.js";
+export { publicLinkSensitiveRequestAdapter } from "./public-link-adapter.js";
+export { createTunnelLinkSensitiveRequestAdapter, tunnelLinkSensitiveRequestAdapter, } from "./tunnel-link-adapter.js";
+function isRegistry(value) {
+    return (typeof value === "object" &&
+        value !== null &&
+        typeof value.register === "function");
+}
+/**
+ * Registers app-core's first-party sensitive-request delivery adapters with
+ * the runtime's `SensitiveRequestDispatchRegistry` service. No-op when the
+ * registry service is not present (e.g. in unit tests that don't boot the
+ * full runtime).
+ */
+export function registerCoreSensitiveRequestAdapters(runtime) {
+    const registry = runtime.getService?.("SensitiveRequestDispatchRegistry");
+    if (!isRegistry(registry)) {
+        logger.debug("[sensitive-requests] dispatch registry service not present; skipping adapter registration");
+        return;
+    }
+    registry.register(ownerAppInlineSensitiveRequestAdapter);
+    registry.register(ownerAppOAuthSensitiveRequestAdapter);
+    registry.register(cloudLinkSensitiveRequestAdapter);
+    registry.register(tunnelLinkSensitiveRequestAdapter);
+    registry.register(instructDmOnlySensitiveRequestAdapter);
+    registry.register(publicLinkSensitiveRequestAdapter);
+    logger.debug("[sensitive-requests] registered 6 first-party delivery adapters");
+}

package/services/sensitive-requests/instruct-dm-only-adapter.d.ts

@@ -0,0 +1,14 @@
+/**
+ * `instruct_dm_only` delivery adapter.
+ *
+ * Used when no eligible channel can collect the sensitive value safely in the
+ * current channel and no link delivery is permitted (public secrets request,
+ * no cloud, no tunnel, public source). The adapter does NOT itself surface
+ * text to the user — the calling action emits the instruction via its
+ * own callback path. This adapter only signals "instructed, no actionable
+ * link or form" so the dispatch pipeline can mark the request as delivered
+ * without producing a URL or rendering an inline form.
+ */
+import type { SensitiveRequestDeliveryAdapter } from "@elizaos/core";
+export declare const instructDmOnlySensitiveRequestAdapter: SensitiveRequestDeliveryAdapter;
+//# sourceMappingURL=instruct-dm-only-adapter.d.ts.map

package/services/sensitive-requests/instruct-dm-only-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instruct-dm-only-adapter.d.ts","sourceRoot":"","sources":["../../../../../../src/services/sensitive-requests/instruct-dm-only-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAEV,+BAA+B,EAChC,MAAM,eAAe,CAAC;AAEvB,eAAO,MAAM,qCAAqC,EAAE,+BAWjD,CAAC"}

package/services/sensitive-requests/instruct-dm-only-adapter.js

@@ -0,0 +1,22 @@
+/**
+ * `instruct_dm_only` delivery adapter.
+ *
+ * Used when no eligible channel can collect the sensitive value safely in the
+ * current channel and no link delivery is permitted (public secrets request,
+ * no cloud, no tunnel, public source). The adapter does NOT itself surface
+ * text to the user — the calling action emits the instruction via its
+ * own callback path. This adapter only signals "instructed, no actionable
+ * link or form" so the dispatch pipeline can mark the request as delivered
+ * without producing a URL or rendering an inline form.
+ */
+export const instructDmOnlySensitiveRequestAdapter = {
+    target: "instruct_dm_only",
+    async deliver({ request }) {
+        return {
+            delivered: true,
+            target: "instruct_dm_only",
+            expiresAt: request.expiresAt,
+            formRendered: false,
+        };
+    },
+};

package/services/sensitive-requests/owner-app-inline-adapter.d.ts

@@ -0,0 +1,3 @@
+import { type SensitiveRequestDeliveryAdapter } from "@elizaos/core";
+export declare const ownerAppInlineSensitiveRequestAdapter: SensitiveRequestDeliveryAdapter;
+//# sourceMappingURL=owner-app-inline-adapter.d.ts.map

package/services/sensitive-requests/owner-app-inline-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-app-inline-adapter.d.ts","sourceRoot":"","sources":["../../../../../../src/services/sensitive-requests/owner-app-inline-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,KAAK,+BAA+B,EAIrC,MAAM,eAAe,CAAC;AAmJvB,eAAO,MAAM,qCAAqC,EAAE,+BAuFjD,CAAC"}