@elizaos/app-core 2.0.0-beta.2 → 2.0.11-beta.5

package/api/server-onboarding-compat.d.ts

@@ -1,31 +0,0 @@
-/**
- * Onboarding compat helpers — API key persistence, onboarding defaults,
- * cloud-mode detection, and cloud-provisioned container detection.
- */
-export declare function hasLegacyOnboardingRequestFields(body: Record<string, unknown>): boolean;
-/**
- * Extract canonical onboarding credential inputs from an onboarding request body
- * and persist them to config + process.env. Returns the env key name if a local
- * provider API key was persisted, or null.
- */
-export declare function extractAndPersistOnboardingApiKey(body: Record<string, unknown>): Promise<string | null>;
-export declare function persistCompatOnboardingDefaults(body: Record<string, unknown>): string | null;
-export declare function deriveCompatOnboardingReplayBody(body: Record<string, unknown>): {
-    isCloudMode: boolean;
-    replayBody: Record<string, unknown>;
-};
-/**
- * Check if this is a cloud-provisioned container.
- *
- * METADATA-ONLY as of P0 of the remote-auth hardening. This function now
- * exists strictly so unrelated routes (e.g. `/api/cloud/status`) can branch
- * on cloud-provisioned shape. It does NOT authorise anything: callers must
- * still pass through `ensureCompatApiAuthorized` (bearer token) or — once
- * the dashboard mints sessions — `ensureAuthSessionOrBootstrap`. The
- * audited bypasses at `auth-pairing-compat-routes.ts:124,140` and the
- * onboarding-skip used to read this; both have been removed.
- *
- * See `docs/security/remote-auth-hardening-plan.md` §3.4.
- */
-export declare function isCloudProvisioned(): boolean;
-//# sourceMappingURL=server-onboarding-compat.d.ts.map

package/api/server-onboarding-compat.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"server-onboarding-compat.d.ts","sourceRoot":"","sources":["../../../../../src/api/server-onboarding-compat.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA6FH,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAET;AAED;;;;GAIG;AACH,wBAAsB,iCAAiC,CACrD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA0FxB;AAED,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,MAAM,GAAG,IAAI,CA6Gf;AAED,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B;IACD,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC,CAkCA;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,IAAI,OAAO,CAc5C"}

package/api/server-onboarding-compat.js

@@ -1,283 +0,0 @@
-/**
- * Onboarding compat helpers — API key persistence, onboarding defaults,
- * cloud-mode detection, and cloud-provisioned container detection.
- */
-import { applyOnboardingCredentialPersistence, loadElizaConfig, saveElizaConfig, } from "@elizaos/agent";
-import { logger, stringToUuid } from "@elizaos/core";
-import { deriveOnboardingCredentialPersistencePlan, getDefaultStylePreset, getStylePresets, migrateLegacyRuntimeConfig, normalizeCharacterLanguage, normalizeDeploymentTargetConfig, normalizeLinkedAccountFlagsConfig, normalizeOnboardingCredentialInputs, normalizeServiceRoutingConfig, PREMADE_VOICES, } from "@elizaos/shared";
-import { resolveProviderCredential } from "./credential-resolver";
-// ---------------------------------------------------------------------------
-// Internal helpers
-// ---------------------------------------------------------------------------
-/** Resolve the API token using app-first priority. */
-function getCompatApiToken() {
-    const token = process.env.ELIZA_API_TOKEN?.trim();
-    return token ? token : null;
-}
-// ---------------------------------------------------------------------------
-// Onboarding API key persistence
-// ---------------------------------------------------------------------------
-function trimToUndefined(value) {
-    if (typeof value !== "string") {
-        return undefined;
-    }
-    const trimmed = value.trim();
-    return trimmed.length > 0 ? trimmed : undefined;
-}
-const DEFAULT_ELEVENLABS_TTS_MODEL = "eleven_flash_v2_5";
-const ELEVENLABS_VOICE_ID_BY_PRESET = new Map(PREMADE_VOICES.map((voice) => [voice.id, voice.voiceId]));
-function resolveCompatOnboardingStyle(body, language) {
-    const presets = getStylePresets(language);
-    const requestedPresetId = trimToUndefined(body.presetId);
-    if (requestedPresetId) {
-        const byId = presets.find((preset) => preset.id === requestedPresetId);
-        if (byId)
-            return byId;
-    }
-    if (typeof body.avatarIndex === "number" &&
-        Number.isFinite(body.avatarIndex)) {
-        const byAvatar = presets.find((preset) => preset.avatarIndex === Number(body.avatarIndex));
-        if (byAvatar)
-            return byAvatar;
-    }
-    const requestedName = trimToUndefined(body.name);
-    if (requestedName) {
-        const byName = presets.find((preset) => preset.name === requestedName);
-        if (byName)
-            return byName;
-    }
-    return getDefaultStylePreset(language);
-}
-const LEGACY_ONBOARDING_REQUEST_KEYS = [
-    "connection",
-    "runMode",
-    "cloudProvider",
-    "provider",
-    "providerApiKey",
-    "primaryModel",
-    "smallModel",
-    "largeModel",
-];
-export function hasLegacyOnboardingRequestFields(body) {
-    return LEGACY_ONBOARDING_REQUEST_KEYS.some((key) => Object.hasOwn(body, key));
-}
-/**
- * Extract canonical onboarding credential inputs from an onboarding request body
- * and persist them to config + process.env. Returns the env key name if a local
- * provider API key was persisted, or null.
- */
-export async function extractAndPersistOnboardingApiKey(body) {
-    const credentialInputs = normalizeOnboardingCredentialInputs(body.credentialInputs);
-    const explicitDeploymentTarget = normalizeDeploymentTargetConfig(body.deploymentTarget);
-    const explicitServiceRouting = normalizeServiceRoutingConfig(body.serviceRouting);
-    logger.info(`[onboarding] extractAndPersistOnboardingApiKey: credentialInputs=${credentialInputs ? "present" : "missing"}, keys=${Object.keys(body).join(",")}`);
-    const initialPlan = deriveOnboardingCredentialPersistencePlan({
-        credentialInputs,
-        deploymentTarget: explicitDeploymentTarget,
-        serviceRouting: explicitServiceRouting,
-    });
-    let effectiveCredentialInputs = credentialInputs;
-    let effectiveServiceRouting = explicitServiceRouting;
-    let llmSelection = initialPlan.llmSelection;
-    if (!llmSelection && !initialPlan.cloudApiKey) {
-        logger.warn("[onboarding] No onboarding credentials resolved from request body");
-        return null;
-    }
-    logger.info(`[onboarding] Resolved selection: transport=${llmSelection?.transport ?? "none"}, provider=${llmSelection?.backend ?? "N/A"}, hasKey=${Boolean(llmSelection?.apiKey)}, hasCloudKey=${Boolean(initialPlan.cloudApiKey)}`);
-    // If the key is masked (from IPC) or missing, try to resolve the real
-    // key from local credential stores (files, keychain, env).
-    if (llmSelection?.transport === "direct" &&
-        llmSelection.backend !== "elizacloud" &&
-        !llmSelection.apiKey?.startsWith("****")) {
-        const resolved = resolveProviderCredential(llmSelection.backend);
-        if (resolved && resolved.authType === "subscription") {
-            effectiveCredentialInputs = {
-                ...(effectiveCredentialInputs ?? {}),
-                llmApiKey: resolved.apiKey,
-            };
-            effectiveServiceRouting = normalizeServiceRoutingConfig({
-                ...(effectiveServiceRouting ?? {}),
-                llmText: {
-                    ...(effectiveServiceRouting?.llmText ?? {}),
-                    backend: resolved.providerId,
-                    transport: "direct",
-                },
-            });
-            logger.info(`[onboarding] Using subscription auth for ${resolved.providerId}`);
-        }
-        else if (resolved) {
-            effectiveCredentialInputs = {
-                ...(effectiveCredentialInputs ?? {}),
-                llmApiKey: resolved.apiKey,
-            };
-            logger.info(`[onboarding] Resolved real key for ${llmSelection.backend} via credential-resolver`);
-        }
-        else if (!llmSelection.apiKey) {
-            logger.warn(`[onboarding] No key found for ${llmSelection.backend} — cannot persist`);
-            return null;
-        }
-        llmSelection = deriveOnboardingCredentialPersistencePlan({
-            credentialInputs: effectiveCredentialInputs,
-            deploymentTarget: explicitDeploymentTarget,
-            serviceRouting: effectiveServiceRouting,
-        }).llmSelection;
-    }
-    const config = loadElizaConfig();
-    const result = await applyOnboardingCredentialPersistence(config, {
-        credentialInputs: effectiveCredentialInputs,
-        deploymentTarget: explicitDeploymentTarget,
-        serviceRouting: effectiveServiceRouting,
-    });
-    saveElizaConfig(config);
-    if (result) {
-        logger.info(`[onboarding] Persisted ${result} from onboarding credentials`);
-    }
-    return result;
-}
-export function persistCompatOnboardingDefaults(body) {
-    const name = typeof body.name === "string" ? body.name.trim() : "";
-    if (!name) {
-        return null;
-    }
-    const config = loadElizaConfig();
-    const language = normalizeCharacterLanguage(body.language);
-    const stylePreset = resolveCompatOnboardingStyle(body, language);
-    if (!config.agents || typeof config.agents !== "object") {
-        config.agents = {};
-    }
-    const agents = config.agents;
-    if (!agents.defaults || typeof agents.defaults !== "object") {
-        agents.defaults = {};
-    }
-    const adminEntityId = stringToUuid(`${name}-admin-entity`);
-    agents.defaults.adminEntityId = adminEntityId;
-    if (!Array.isArray(agents.list) || agents.list.length === 0) {
-        agents.list = [{ id: "main", default: true }];
-    }
-    const agentEntry = agents.list[0];
-    agentEntry.name = name;
-    if (Array.isArray(body.bio)) {
-        agentEntry.bio = body.bio;
-    }
-    if (typeof body.systemPrompt === "string" && body.systemPrompt.trim()) {
-        agentEntry.system = body.systemPrompt.trim();
-    }
-    if (body.style && typeof body.style === "object") {
-        agentEntry.style = body.style;
-    }
-    if (Array.isArray(body.adjectives)) {
-        agentEntry.adjectives = body.adjectives;
-    }
-    if (Array.isArray(body.topics)) {
-        agentEntry.topics = body.topics;
-    }
-    if (Array.isArray(body.postExamples)) {
-        agentEntry.postExamples = body.postExamples;
-    }
-    if (Array.isArray(body.messageExamples)) {
-        agentEntry.messageExamples = body.messageExamples;
-    }
-    if (!config.ui || typeof config.ui !== "object") {
-        config.ui = {};
-    }
-    const ui = config.ui;
-    ui.assistant = {
-        ...(ui.assistant && typeof ui.assistant === "object"
-            ? ui.assistant
-            : {}),
-        name,
-    };
-    ui.language = language;
-    if (typeof body.avatarIndex === "number" &&
-        Number.isFinite(body.avatarIndex)) {
-        ui.avatarIndex = Number(body.avatarIndex);
-    }
-    else if (typeof stylePreset?.avatarIndex === "number") {
-        ui.avatarIndex = stylePreset.avatarIndex;
-    }
-    if (trimToUndefined(body.presetId)) {
-        ui.presetId = trimToUndefined(body.presetId);
-    }
-    else if (stylePreset?.id) {
-        ui.presetId = stylePreset.id;
-    }
-    const elevenLabsApiKey = process.env.ELEVENLABS_API_KEY?.trim();
-    const voicePresetId = stylePreset?.voicePresetId?.trim();
-    const voiceId = voicePresetId
-        ? ELEVENLABS_VOICE_ID_BY_PRESET.get(voicePresetId)
-        : undefined;
-    if (elevenLabsApiKey && voiceId) {
-        if (!config.messages || typeof config.messages !== "object") {
-            config.messages = {};
-        }
-        const messages = config.messages;
-        const existingTts = messages.tts && typeof messages.tts === "object"
-            ? messages.tts
-            : {};
-        const existingElevenlabs = existingTts.elevenlabs && typeof existingTts.elevenlabs === "object"
-            ? existingTts.elevenlabs
-            : {};
-        messages.tts = {
-            ...existingTts,
-            provider: "elevenlabs",
-            elevenlabs: {
-                ...existingElevenlabs,
-                voiceId,
-                modelId: typeof existingElevenlabs.modelId === "string" &&
-                    existingElevenlabs.modelId.trim()
-                    ? existingElevenlabs.modelId.trim()
-                    : DEFAULT_ELEVENLABS_TTS_MODEL,
-            },
-        };
-    }
-    migrateLegacyRuntimeConfig(config);
-    saveElizaConfig(config);
-    return adminEntityId;
-}
-export function deriveCompatOnboardingReplayBody(body) {
-    const explicitDeploymentTarget = normalizeDeploymentTargetConfig(body.deploymentTarget);
-    const explicitCredentialInputs = normalizeOnboardingCredentialInputs(body.credentialInputs);
-    const deploymentTarget = explicitDeploymentTarget ?? undefined;
-    const linkedAccounts = normalizeLinkedAccountFlagsConfig(body.linkedAccounts) ?? undefined;
-    const serviceRouting = normalizeServiceRoutingConfig(body.serviceRouting) ?? undefined;
-    const isCloudMode = deploymentTarget?.runtime === "cloud";
-    const replayBody = { ...body };
-    for (const key of LEGACY_ONBOARDING_REQUEST_KEYS) {
-        delete replayBody[key];
-    }
-    if (deploymentTarget) {
-        replayBody.deploymentTarget = deploymentTarget;
-    }
-    if (linkedAccounts) {
-        replayBody.linkedAccounts = linkedAccounts;
-    }
-    if (serviceRouting) {
-        replayBody.serviceRouting = serviceRouting;
-    }
-    if (explicitCredentialInputs) {
-        replayBody.credentialInputs = explicitCredentialInputs;
-    }
-    return { isCloudMode, replayBody };
-}
-/**
- * Check if this is a cloud-provisioned container.
- *
- * METADATA-ONLY as of P0 of the remote-auth hardening. This function now
- * exists strictly so unrelated routes (e.g. `/api/cloud/status`) can branch
- * on cloud-provisioned shape. It does NOT authorise anything: callers must
- * still pass through `ensureCompatApiAuthorized` (bearer token) or — once
- * the dashboard mints sessions — `ensureAuthSessionOrBootstrap`. The
- * audited bypasses at `auth-pairing-compat-routes.ts:124,140` and the
- * onboarding-skip used to read this; both have been removed.
- *
- * See `docs/security/remote-auth-hardening-plan.md` §3.4.
- */
-export function isCloudProvisioned() {
-    const hasCloudFlag = process.env.ELIZA_CLOUD_PROVISIONED === "1";
-    const hasCloudApiKeyProvisioning = process.env.ELIZAOS_CLOUD_ENABLED === "true" &&
-        Boolean(process.env.ELIZAOS_CLOUD_API_KEY?.trim());
-    const hasPlatformToken = Boolean(process.env.STEWARD_AGENT_TOKEN?.trim() ||
-        getCompatApiToken() ||
-        hasCloudApiKeyProvisioning);
-    return hasCloudFlag && hasPlatformToken;
-}

package/benchmark/cua-routes.d.ts

@@ -1,10 +0,0 @@
-import type http from "node:http";
-import { type BenchmarkSession, type CuaServiceLike } from "./server-utils";
-export declare function handleCuaRoute(params: {
-    pathname: string;
-    req: http.IncomingMessage;
-    res: http.ServerResponse;
-    getCuaService: () => CuaServiceLike | null;
-    activeSession: BenchmarkSession | null;
-}): Promise<boolean>;
-//# sourceMappingURL=cua-routes.d.ts.map

package/benchmark/cua-routes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cua-routes.d.ts","sourceRoot":"","sources":["../../../../../src/benchmark/cua-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,cAAc,EAIpB,MAAM,gBAAgB,CAAC;AAwBxB,wBAAsB,cAAc,CAAC,MAAM,EAAE;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC;IAC1B,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC;IACzB,aAAa,EAAE,MAAM,cAAc,GAAG,IAAI,CAAC;IAC3C,aAAa,EAAE,gBAAgB,GAAG,IAAI,CAAC;CACxC,GAAG,OAAO,CAAC,OAAO,CAAC,CAsMnB"}

package/benchmark/cua-routes.js

@@ -1,179 +0,0 @@
-import { stringToUuid } from "@elizaos/core";
-import { compactCuaResult, isRecord, parseBooleanValue, } from "./server-utils";
-const CUA_UNAVAILABLE_ERROR = "CUA service is unavailable. Set ELIZA_ENABLE_CUA=1 and configure CUA_HOST (or CUA_API_KEY + CUA_SANDBOX_NAME).";
-function readBody(req) {
-    return new Promise((resolve) => {
-        let body = "";
-        req.on("data", (chunk) => {
-            body += chunk;
-        });
-        req.on("end", () => resolve(body));
-    });
-}
-function writeJson(res, status, payload) {
-    res.writeHead(status, { "Content-Type": "application/json" });
-    res.end(JSON.stringify(payload));
-}
-export async function handleCuaRoute(params) {
-    const { pathname, req, res, getCuaService, activeSession } = params;
-    const resolveCuaRoomId = (candidate) => {
-        if (typeof candidate === "string" && candidate.trim()) {
-            return candidate.trim();
-        }
-        if (activeSession?.roomId) {
-            return activeSession.roomId;
-        }
-        return stringToUuid(`benchmark-cua-room:${Date.now()}:${Math.random()}`);
-    };
-    if (pathname === "/api/benchmark/cua/status" && req.method === "GET") {
-        const service = getCuaService();
-        if (!service) {
-            writeJson(res, 503, { ok: false, error: CUA_UNAVAILABLE_ERROR });
-            return true;
-        }
-        try {
-            const status = service.getStatus();
-            writeJson(res, 200, { ok: true, status });
-        }
-        catch (err) {
-            writeJson(res, 500, {
-                ok: false,
-                error: err instanceof Error ? err.message : String(err),
-            });
-        }
-        return true;
-    }
-    if (pathname === "/api/benchmark/cua/screenshot" && req.method === "GET") {
-        const service = getCuaService();
-        if (!service) {
-            writeJson(res, 503, { ok: false, error: CUA_UNAVAILABLE_ERROR });
-            return true;
-        }
-        try {
-            const screenshot = await service.screenshotBase64();
-            writeJson(res, 200, {
-                ok: true,
-                screenshot,
-                mimeType: "image/png",
-                timestamp: Date.now(),
-            });
-        }
-        catch (err) {
-            writeJson(res, 500, {
-                ok: false,
-                error: err instanceof Error ? err.message : String(err),
-            });
-        }
-        return true;
-    }
-    if (pathname === "/api/benchmark/cua/run" && req.method === "POST") {
-        const body = await readBody(req);
-        const service = getCuaService();
-        if (!service) {
-            writeJson(res, 503, { ok: false, error: CUA_UNAVAILABLE_ERROR });
-            return true;
-        }
-        try {
-            const parsed = body.trim()
-                ? JSON.parse(body)
-                : {};
-            const goal = typeof parsed.goal === "string" ? parsed.goal.trim() : "";
-            if (!goal) {
-                writeJson(res, 400, {
-                    ok: false,
-                    error: 'Missing non-empty "goal" in request body',
-                });
-                return true;
-            }
-            const roomId = resolveCuaRoomId(parsed.room_id ?? parsed.roomId);
-            const autoApprove = parseBooleanValue(parsed.auto_approve ?? parsed.autoApprove, false);
-            const includeScreenshots = parseBooleanValue(parsed.include_screenshots ?? parsed.includeScreenshots, false);
-            const maxApprovalsRaw = typeof parsed.max_approvals === "number"
-                ? parsed.max_approvals
-                : typeof parsed.maxApprovals === "number"
-                    ? parsed.maxApprovals
-                    : 5;
-            const maxApprovals = Number.isFinite(maxApprovalsRaw) && maxApprovalsRaw > 0
-                ? Math.floor(maxApprovalsRaw)
-                : 5;
-            let approvals = 0;
-            let result = await service.runTask(roomId, goal);
-            while (autoApprove &&
-                isRecord(result) &&
-                result.status === "paused_for_approval" &&
-                approvals < maxApprovals) {
-                approvals += 1;
-                result = await service.approveLatest(roomId);
-            }
-            writeJson(res, 200, {
-                ok: true,
-                room_id: roomId,
-                approvals,
-                auto_approve: autoApprove,
-                result: compactCuaResult(result, includeScreenshots),
-            });
-        }
-        catch (err) {
-            writeJson(res, 500, {
-                ok: false,
-                error: err instanceof Error ? err.message : String(err),
-            });
-        }
-        return true;
-    }
-    if (pathname === "/api/benchmark/cua/approve" && req.method === "POST") {
-        const body = await readBody(req);
-        const service = getCuaService();
-        if (!service) {
-            writeJson(res, 503, { ok: false, error: CUA_UNAVAILABLE_ERROR });
-            return true;
-        }
-        try {
-            const parsed = body.trim()
-                ? JSON.parse(body)
-                : {};
-            const roomId = resolveCuaRoomId(parsed.room_id ?? parsed.roomId);
-            const result = await service.approveLatest(roomId);
-            writeJson(res, 200, {
-                ok: true,
-                room_id: roomId,
-                result: compactCuaResult(result, false),
-            });
-        }
-        catch (err) {
-            writeJson(res, 500, {
-                ok: false,
-                error: err instanceof Error ? err.message : String(err),
-            });
-        }
-        return true;
-    }
-    if (pathname === "/api/benchmark/cua/cancel" && req.method === "POST") {
-        const body = await readBody(req);
-        const service = getCuaService();
-        if (!service) {
-            writeJson(res, 503, { ok: false, error: CUA_UNAVAILABLE_ERROR });
-            return true;
-        }
-        try {
-            const parsed = body.trim()
-                ? JSON.parse(body)
-                : {};
-            const roomId = resolveCuaRoomId(parsed.room_id ?? parsed.roomId);
-            await service.cancelLatest(roomId);
-            writeJson(res, 200, {
-                ok: true,
-                room_id: roomId,
-                status: "cancelled",
-            });
-        }
-        catch (err) {
-            writeJson(res, 500, {
-                ok: false,
-                error: err instanceof Error ? err.message : String(err),
-            });
-        }
-        return true;
-    }
-    return false;
-}

package/benchmark/mock-plugin-base.d.ts

@@ -1,9 +0,0 @@
-import { type Plugin } from "@elizaos/core";
-/**
- * Tracked fallback mock benchmark plugin.
- *
- * A local-only override can still live at src/benchmark/mock-plugin.ts (gitignored),
- * but this base implementation keeps CI and unit tests deterministic.
- */
-export declare const mockPlugin: Plugin;
-//# sourceMappingURL=mock-plugin-base.d.ts.map

package/benchmark/mock-plugin-base.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mock-plugin-base.d.ts","sourceRoot":"","sources":["../../../../../src/benchmark/mock-plugin-base.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,MAAM,EACZ,MAAM,eAAe,CAAC;AA4XvB;;;;;GAKG;AACH,eAAO,MAAM,UAAU,EAAE,MAyBxB,CAAC"}