@elizaos/app-core 2.0.0-beta.3 → 2.0.3-beta.3

package/api/compat-route-shared.js

@@ -1,7 +1,6 @@
-import { isIP } from "node:net";
-import { loadElizaConfig } from "@elizaos/agent";
-import { isLoopbackBindHost, normalizeOnboardingProviderId, resolveDeploymentTargetInConfig, resolveServiceRoutingInConfig, } from "@elizaos/shared";
-import { sendJsonError as sendJsonErrorResponse } from "./response";
+import { loadElizaConfig } from "@elizaos/agent/config/config";
+import { isLoopbackRemoteAddress, isTrustedLocalRequest as isTrustedLocalRequestShared, normalizeFirstRunProviderId, resolveDeploymentTargetInConfig, resolveServiceRoutingInConfig, } from "@elizaos/shared";
+import { sendJsonError as sendJsonErrorResponse } from "./response.js";
 const MAX_BODY_BYTES = 1_048_576;
 export function clearCompatRuntimeRestart(state) {
     state.pendingRestartReasons = [];
@@ -16,189 +15,29 @@ export function scheduleCompatRuntimeRestart(state, reason) {
     state.pendingRestartReasons.push(reason);
 }
 export const DATABASE_UNAVAILABLE_MESSAGE = "Database not available. The agent may not be running or the database adapter is not initialized.";
-export function isLoopbackRemoteAddress(remoteAddress) {
-    if (!remoteAddress)
-        return false;
-    const normalized = remoteAddress.trim().toLowerCase();
-    return (normalized === "127.0.0.1" ||
-        normalized === "::1" ||
-        normalized === "0:0:0:0:0:0:0:1" ||
-        normalized === "::ffff:127.0.0.1" ||
-        normalized === "::ffff:0:127.0.0.1");
-}
-function firstHeaderValue(value) {
-    if (typeof value === "string")
-        return value;
-    if (Array.isArray(value) && typeof value[0] === "string")
-        return value[0];
-    return null;
-}
-const CLIENT_IP_PROXY_HEADERS = new Set([
-    "forwarded",
-    "forwarded-for",
-    "x-forwarded",
-    "x-forwarded-for",
-    "x-original-forwarded-for",
-    "x-real-ip",
-    "x-client-ip",
-    "x-forwarded-client-ip",
-    "x-cluster-client-ip",
-    "cf-connecting-ip",
-    "true-client-ip",
-    "fastly-client-ip",
-    "x-appengine-user-ip",
-    "x-azure-clientip",
-]);
-function headerValues(value) {
-    if (typeof value === "string")
-        return [value];
-    if (Array.isArray(value)) {
-        return value.filter((item) => typeof item === "string");
-    }
-    return [];
-}
-function isClientIpProxyHeaderName(name) {
-    const normalized = name.toLowerCase();
-    return (CLIENT_IP_PROXY_HEADERS.has(normalized) ||
-        normalized.endsWith("-client-ip") ||
-        normalized.endsWith("-connecting-ip") ||
-        normalized.endsWith("-real-ip"));
-}
-function extractForwardedForCandidates(raw) {
-    const candidates = [];
-    const pattern = /(?:^|[;,])\s*for=(?:"([^"]*)"|([^;,]*))/gi;
-    for (const match of raw.matchAll(pattern)) {
-        candidates.push(match[1] ?? match[2] ?? "");
-    }
-    return candidates;
-}
-function extractProxyClientAddressCandidates(headerName, raw) {
-    if (headerName === "forwarded") {
-        return extractForwardedForCandidates(raw);
-    }
-    const forwardedCandidates = raw.toLowerCase().includes("for=")
-        ? extractForwardedForCandidates(raw)
-        : [];
-    if (forwardedCandidates.length > 0)
-        return forwardedCandidates;
-    return raw.split(",");
-}
-function stripMatchingQuotes(value) {
-    const trimmed = value.trim();
-    if ((trimmed.startsWith('"') && trimmed.endsWith('"')) ||
-        (trimmed.startsWith("'") && trimmed.endsWith("'"))) {
-        return trimmed.slice(1, -1);
-    }
-    return trimmed;
-}
-function isNeutralProxyClientAddress(raw) {
-    const normalized = stripMatchingQuotes(raw).trim().toLowerCase();
-    return (!normalized ||
-        normalized === "unknown" ||
-        normalized === "null" ||
-        normalized.startsWith("_"));
-}
-function normalizeProxyClientIp(raw) {
-    let normalized = stripMatchingQuotes(raw).trim();
-    if (!normalized)
-        return null;
-    if (normalized.startsWith("[")) {
-        const close = normalized.indexOf("]");
-        if (close > 0) {
-            normalized = normalized.slice(1, close);
-        }
-    }
-    else {
-        const ipv4HostPort = /^(\d{1,3}(?:\.\d{1,3}){3})(?::\d+)$/.exec(normalized);
-        if (ipv4HostPort?.[1]) {
-            normalized = ipv4HostPort[1];
-        }
-    }
-    const zoneIndex = normalized.indexOf("%");
-    if (zoneIndex >= 0) {
-        normalized = normalized.slice(0, zoneIndex);
-    }
-    normalized = normalized.trim().toLowerCase();
-    return isIP(normalized) ? normalized : null;
-}
-function isLoopbackProxyClientIp(ip) {
-    const normalized = ip.trim().toLowerCase();
-    return (normalized === "::1" ||
-        normalized === "0:0:0:0:0:0:0:1" ||
-        normalized.startsWith("127.") ||
-        normalized.startsWith("::ffff:127.") ||
-        normalized.startsWith("::ffff:0:127."));
-}
-function proxyClientHeaderBlocksLocalTrust(headers) {
-    for (const [rawName, rawValue] of Object.entries(headers)) {
-        const headerName = rawName.toLowerCase();
-        if (!isClientIpProxyHeaderName(headerName))
-            continue;
-        for (const value of headerValues(rawValue)) {
-            for (const candidate of extractProxyClientAddressCandidates(headerName, value)) {
-                if (isNeutralProxyClientAddress(candidate))
-                    continue;
-                const ip = normalizeProxyClientIp(candidate);
-                if (!ip || !isLoopbackProxyClientIp(ip))
-                    return true;
-            }
-        }
-    }
-    return false;
-}
-function isCloudProvisionedByEnv() {
-    return process.env.ELIZA_CLOUD_PROVISIONED === "1";
-}
-function isLocalAuthRequiredByEnv() {
-    return process.env.ELIZA_REQUIRE_LOCAL_AUTH === "1";
-}
-function isTrustedLocalOrigin(raw) {
-    const trimmed = raw.trim();
-    if (!trimmed || trimmed === "null")
-        return true;
-    try {
-        const parsed = new URL(trimmed);
-        if (parsed.protocol === "file:" ||
-            parsed.protocol === "app:" ||
-            parsed.protocol === "tauri:" ||
-            parsed.protocol === "capacitor:" ||
-            parsed.protocol === "capacitor-electron:" ||
-            parsed.protocol === "electrobun:") {
-            return true;
-        }
-        return isLoopbackBindHost(parsed.hostname);
-    }
-    catch {
-        return false;
-    }
-}
+// `isLoopbackRemoteAddress` is re-exported from the canonical
+// `@elizaos/shared` trust module (this used to be a local duplicate). Other
+// app-core modules import it from here (e.g. `dev-compat-routes.ts`,
+// `server.ts`), so the name stays available on this subpath.
+export { isLoopbackRemoteAddress };
 /**
- * Same-machine dashboard access. This is intentionally stricter than just
- * checking `remoteAddress`: the browser must also be targeting a loopback Host
- * and must not present cross-site browser metadata.
+ * Same-machine dashboard access for the app-core compat API. Delegates to the
+ * canonical `@elizaos/shared` parser with app-core's exact policy gates:
+ *  - cloudCheck "env": the raw `ELIZA_CLOUD_PROVISIONED === "1"` flag (NOT the
+ *    agent's stricter `isCloudProvisionedContainer()`).
+ *  - requireLocalAuthEnv: honour `ELIZA_REQUIRE_LOCAL_AUTH=1`.
+ *  - devAuthBypassEnv: `ELIZA_DEV_AUTH_BYPASS=1` in a dev `NODE_ENV` restores
+ *    local trust (dev-ui sets this for the local dashboard).
+ *
+ * Intentionally stricter than a bare `remoteAddress` check: the browser must
+ * also target a loopback Host and must not present cross-site browser metadata.
  */
 export function isTrustedLocalRequest(req) {
-    if (isLocalAuthRequiredByEnv())
-        return false;
-    if (isCloudProvisionedByEnv())
-        return false;
-    if (!isLoopbackRemoteAddress(req.socket?.remoteAddress))
-        return false;
-    if (proxyClientHeaderBlocksLocalTrust(req.headers))
-        return false;
-    const host = firstHeaderValue(req.headers.host);
-    if (host && !isLoopbackBindHost(host))
-        return false;
-    const secFetchSite = firstHeaderValue(req.headers["sec-fetch-site"])?.toLowerCase();
-    if (secFetchSite === "cross-site")
-        return false;
-    const origin = firstHeaderValue(req.headers.origin);
-    if (origin && !isTrustedLocalOrigin(origin))
-        return false;
-    const referer = firstHeaderValue(req.headers.referer);
-    if (!origin && referer && !isTrustedLocalOrigin(referer))
-        return false;
-    return true;
+    return isTrustedLocalRequestShared(req, {
+        requireLocalAuthEnv: true,
+        devAuthBypassEnv: true,
+        cloudCheck: "env",
+    });
 }
 export async function readCompatJsonBody(req, res) {
     // When this handler is invoked through the runtime's plugin-route adapter
@@ -244,13 +83,13 @@ export async function readCompatJsonBody(req, res) {
         return null;
     }
 }
-export function hasCompatPersistedOnboardingState(config) {
-    if (config.meta?.onboardingComplete === true) {
+export function hasCompatPersistedFirstRunState(config) {
+    if (config.meta?.firstRunComplete === true) {
         return true;
     }
     const deploymentTarget = resolveDeploymentTargetInConfig(config);
     const llmText = resolveServiceRoutingInConfig(config)?.llmText;
-    const backend = normalizeOnboardingProviderId(llmText?.backend);
+    const backend = normalizeFirstRunProviderId(llmText?.backend);
     const remoteApiBase = llmText?.remoteApiBase?.trim() ?? deploymentTarget.remoteApiBase?.trim();
     const hasCompleteCanonicalRouting = (llmText?.transport === "direct" &&
         Boolean(backend && backend !== "elizacloud")) ||
@@ -283,7 +122,7 @@ export function getConfiguredCompatAgentName() {
 }
 /**
  * Best-effort grab of the Drizzle DB handle off the live runtime adapter.
- * Returns null when the runtime is not yet up or the adapter has not
+ * Returns null when the runtime is unavailable or the adapter has not
  * exposed a `db` field. Callers MUST treat null as "service unavailable"
  * — it is never authentication.
  */

package/api/credential-resolver.d.ts

@@ -12,8 +12,8 @@ export declare function resolveProviderCredential(providerId: string): ResolvedC
  * Multi-account credential resolution. When the install has any
  * `LinkedAccountConfig` records for the requested provider, the pool
  * picks one (priority by default, with health-aware skipping) and we
- * return its access token via WS1's `getAccessToken`. When no accounts
- * are configured, falls back to the legacy single-source resolver.
+ * return its access token via `getAccessToken` from `@elizaos/agent`. When
+ * no accounts are configured, falls back to the env-based single-source resolver.
  *
  * `sessionKey` (optional) keeps repeated calls in the same logical
  * session glued to the same account so token refreshes and rate-limit

package/api/credential-resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credential-resolver.d.ts","sourceRoot":"","sources":["../../../../../src/api/credential-resolver.ts"],"names":[],"mappings":"AAoIA,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,SAAS,GAAG,cAAc,CAAC;CACtC;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,MAAM,GACjB,kBAAkB,GAAG,IAAI,CAiB3B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,8BAA8B,CAClD,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GACjD,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CA0CpC;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,kBAAkB,EAAE,CAiBzD"}
+{"version":3,"file":"credential-resolver.d.ts","sourceRoot":"","sources":["../../../../../src/api/credential-resolver.ts"],"names":[],"mappings":"AA0IA,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,SAAS,GAAG,cAAc,CAAC;CACtC;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,MAAM,GACjB,kBAAkB,GAAG,IAAI,CAiB3B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,8BAA8B,CAClD,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GACjD,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CA0CpC;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,kBAAkB,EAAE,CAiBzD"}

package/api/credential-resolver.js

@@ -81,6 +81,12 @@ const CREDENTIAL_SOURCES = [
             process.env.Z_AI_API_KEY?.trim() ||
             null,
     },
+    {
+        providerId: "nearai",
+        envVar: "NEARAI_API_KEY",
+        authType: "api-key",
+        resolve: () => process.env.NEARAI_API_KEY?.trim() || null,
+    },
     {
         providerId: "moonshot",
         envVar: "MOONSHOT_API_KEY",
@@ -129,8 +135,8 @@ export function resolveProviderCredential(providerId) {
  * Multi-account credential resolution. When the install has any
  * `LinkedAccountConfig` records for the requested provider, the pool
  * picks one (priority by default, with health-aware skipping) and we
- * return its access token via WS1's `getAccessToken`. When no accounts
- * are configured, falls back to the legacy single-source resolver.
+ * return its access token via `getAccessToken` from `@elizaos/agent`. When
+ * no accounts are configured, falls back to the env-based single-source resolver.
  *
  * `sessionKey` (optional) keeps repeated calls in the same logical
  * session glued to the same account so token refreshes and rate-limit

package/api/database-rows-compat-routes.d.ts

@@ -1,4 +1,4 @@
 import type http from "node:http";
-import { type CompatRuntimeState } from "./compat-route-shared";
+import { type CompatRuntimeState } from "./compat-route-shared.js";
 export declare function handleDatabaseRowsCompatRoute(req: http.IncomingMessage, res: http.ServerResponse, state: CompatRuntimeState): Promise<boolean>;
 //# sourceMappingURL=database-rows-compat-routes.d.ts.map

package/api/database-rows-compat-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"database-rows-compat-routes.d.ts","sourceRoot":"","sources":["../../../../../src/api/database-rows-compat-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAQlC,OAAO,EACL,KAAK,kBAAkB,EAExB,MAAM,uBAAuB,CAAC;AAM/B,wBAAsB,6BAA6B,CACjD,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,KAAK,EAAE,kBAAkB,GACxB,OAAO,CAAC,OAAO,CAAC,CAwJlB"}
+{"version":3,"file":"database-rows-compat-routes.d.ts","sourceRoot":"","sources":["../../../../../src/api/database-rows-compat-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAQlC,OAAO,EACL,KAAK,kBAAkB,EAExB,MAAM,uBAAuB,CAAC;AAwC/B,wBAAsB,6BAA6B,CACjD,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,KAAK,EAAE,kBAAkB,GACxB,OAAO,CAAC,OAAO,CAAC,CAgLlB"}

package/api/database-rows-compat-routes.js

@@ -1,7 +1,28 @@
 import { executeRawSql, quoteIdent, sanitizeIdentifier, sqlLiteral, } from "@elizaos/shared";
 import { ensureRouteAuthorized } from "./auth.js";
-import { DATABASE_UNAVAILABLE_MESSAGE, } from "./compat-route-shared";
-import { sendJsonError as sendJsonErrorResponse, sendJson as sendJsonResponse, } from "./response";
+import { DATABASE_UNAVAILABLE_MESSAGE, } from "./compat-route-shared.js";
+import { recordCacheHit, recordCacheMiss } from "./perf-instrument.js";
+import { sendJsonError as sendJsonErrorResponse, sendJson as sendJsonResponse, } from "./response.js";
+// Resolved schema + column list for a (schema, table) — stable unless a
+// migration alters the table. Caching it skips the two information_schema
+// lookups on every table-browser request (the count + rows queries still run).
+// Short TTL bounds staleness if a table changes at runtime; bounded size.
+const tableIntrospectionCache = new Map();
+const TABLE_INTROSPECTION_TTL_MS = 30_000;
+const TABLE_INTROSPECTION_CACHE_LIMIT = 256;
+function rememberTableIntrospection(key, resolvedSchema, columns, nowMs) {
+    tableIntrospectionCache.set(key, {
+        resolvedSchema,
+        columns,
+        expiresAt: nowMs + TABLE_INTROSPECTION_TTL_MS,
+    });
+    if (tableIntrospectionCache.size > TABLE_INTROSPECTION_CACHE_LIMIT) {
+        const oldest = tableIntrospectionCache.keys().next().value;
+        if (typeof oldest === "string") {
+            tableIntrospectionCache.delete(oldest);
+        }
+    }
+}
 export async function handleDatabaseRowsCompatRoute(req, res, state) {
     const pathname = new URL(req.url ?? "/", "http://localhost").pathname;
     const match = /^\/api\/database\/tables\/([^/]+)\/rows$/.exec(pathname);
@@ -23,39 +44,56 @@ export async function handleDatabaseRowsCompatRoute(req, res, state) {
         sendJsonErrorResponse(res, 400, "Invalid table name");
         return true;
     }
-    let resolvedSchema = schemaName;
-    if (!resolvedSchema) {
-        const { rows } = await executeRawSql(runtime, `SELECT table_schema AS schema
-         FROM information_schema.tables
+    const schemaParam = schemaName ?? "";
+    const introspectionKey = `${schemaParam}:${tableName}`;
+    const nowMs = Date.now();
+    const cachedIntrospection = tableIntrospectionCache.get(introspectionKey);
+    let resolvedSchema;
+    let columns;
+    if (cachedIntrospection && cachedIntrospection.expiresAt > nowMs) {
+        recordCacheHit("db-rows-introspection");
+        resolvedSchema = cachedIntrospection.resolvedSchema;
+        columns = cachedIntrospection.columns;
+    }
+    else {
+        recordCacheMiss("db-rows-introspection");
+        resolvedSchema = schemaParam;
+        if (!resolvedSchema) {
+            const { rows } = await executeRawSql(runtime, `SELECT table_schema AS schema
+           FROM information_schema.tables
+          WHERE table_name = ${sqlLiteral(tableName)}
+            AND table_schema NOT IN ('pg_catalog', 'information_schema')
+            AND table_type = 'BASE TABLE'
+          ORDER BY CASE WHEN table_schema = 'public' THEN 0 ELSE 1 END,
+                   table_schema`);
+            const schemas = rows
+                .map((row) => row.schema)
+                .filter((value) => typeof value === "string");
+            if (schemas.length === 0) {
+                sendJsonErrorResponse(res, 404, `Unknown table "${tableName}"`);
+                return true;
+            }
+            if (schemas.length > 1 && !schemas.includes("public")) {
+                sendJsonErrorResponse(res, 409, `Table "${tableName}" exists in multiple schemas; specify ?schema=<name>.`);
+                return true;
+            }
+            resolvedSchema = schemas.includes("public") ? "public" : schemas[0];
+        }
+        const columnResult = await executeRawSql(runtime, `SELECT column_name
+         FROM information_schema.columns
         WHERE table_name = ${sqlLiteral(tableName)}
-          AND table_schema NOT IN ('pg_catalog', 'information_schema')
-          AND table_type = 'BASE TABLE'
-        ORDER BY CASE WHEN table_schema = 'public' THEN 0 ELSE 1 END,
-                 table_schema`);
-        const schemas = rows
-            .map((row) => row.schema)
+          AND table_schema = ${sqlLiteral(resolvedSchema)}
+        ORDER BY ordinal_position`);
+        columns = columnResult.rows
+            .map((row) => row.column_name)
             .filter((value) => typeof value === "string");
-        if (schemas.length === 0) {
-            sendJsonErrorResponse(res, 404, `Unknown table "${tableName}"`);
-            return true;
-        }
-        if (schemas.length > 1 && !schemas.includes("public")) {
-            sendJsonErrorResponse(res, 409, `Table "${tableName}" exists in multiple schemas; specify ?schema=<name>.`);
+        if (columns.length === 0) {
+            sendJsonErrorResponse(res, 404, `No readable columns found for ${resolvedSchema}.${tableName}`);
             return true;
         }
-        resolvedSchema = schemas.includes("public") ? "public" : schemas[0];
-    }
-    const columnResult = await executeRawSql(runtime, `SELECT column_name
-       FROM information_schema.columns
-      WHERE table_name = ${sqlLiteral(tableName)}
-        AND table_schema = ${sqlLiteral(resolvedSchema)}
-      ORDER BY ordinal_position`);
-    const columns = columnResult.rows
-        .map((row) => row.column_name)
-        .filter((value) => typeof value === "string");
-    if (columns.length === 0) {
-        sendJsonErrorResponse(res, 404, `No readable columns found for ${resolvedSchema}.${tableName}`);
-        return true;
+        // Only successful introspection is cached (never 404/409) — a table that
+        // appears later must not be shadowed by a negative entry.
+        rememberTableIntrospection(introspectionKey, resolvedSchema, columns, nowMs);
     }
     const limit = Math.max(1, Math.min(500, Number.parseInt(requestUrl.searchParams.get("limit") ?? "", 10) || 50));
     const offset = Math.max(0, Number.parseInt(requestUrl.searchParams.get("offset") ?? "", 10) || 0);

package/api/dev-boot-history.d.ts

@@ -0,0 +1,26 @@
+export declare const ELIZA_DEV_BOOT_HISTORY_SCHEMA = "elizaos.dev.boot-history/v1";
+/** {name,error} for plugins that failed to load on the last resolve pass. */
+interface FailedPluginDetail {
+    name: string;
+    error: string;
+}
+export interface BootHistoryPayload {
+    schema: typeof ELIZA_DEV_BOOT_HISTORY_SCHEMA;
+    generatedAtEpochMs: number;
+    /** Spawn timestamp of the current API child — restart-correlation key. */
+    currentSpawnAtMs: number | null;
+    /** True when the API runs under `node --watch` (ELIZA_DEV_NO_WATCH=0). */
+    watch: boolean;
+    /** Latest completed boot record, or null if no boot has completed. */
+    latestBoot: unknown;
+    /** Latest memory-sampler record, or null. */
+    memory: unknown;
+    /** Supervisor restart events, or null until the events file exists. */
+    restarts: unknown;
+    /** Plugins that failed to load, with their error messages. */
+    failedPlugins: FailedPluginDetail[];
+    hints: string[];
+}
+export declare function buildBootHistoryPayload(env?: NodeJS.ProcessEnv): Promise<BootHistoryPayload>;
+export {};
+//# sourceMappingURL=dev-boot-history.d.ts.map

package/api/dev-boot-history.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-boot-history.d.ts","sourceRoot":"","sources":["../../../../../src/api/dev-boot-history.ts"],"names":[],"mappings":"AAkBA,eAAO,MAAM,6BAA6B,gCAAgC,CAAC;AAE3E,6EAA6E;AAC7E,UAAU,kBAAkB;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,OAAO,6BAA6B,CAAC;IAC7C,kBAAkB,EAAE,MAAM,CAAC;IAC3B,0EAA0E;IAC1E,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,0EAA0E;IAC1E,KAAK,EAAE,OAAO,CAAC;IACf,sEAAsE;IACtE,UAAU,EAAE,OAAO,CAAC;IACpB,6CAA6C;IAC7C,MAAM,EAAE,OAAO,CAAC;IAChB,uEAAuE;IACvE,QAAQ,EAAE,OAAO,CAAC;IAClB,8DAA8D;IAC9D,aAAa,EAAE,kBAAkB,EAAE,CAAC;IACpC,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAqCD,wBAAsB,uBAAuB,CAC3C,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,kBAAkB,CAAC,CA0B7B"}

package/api/dev-boot-history.js

@@ -0,0 +1,69 @@
+/**
+ * GET /api/dev/boot-history payload builder.
+ *
+ * Reads back the boot + memory telemetry the runtime already writes under
+ * `<stateDir>/telemetry/` (see `@elizaos/agent` runtime/boot-telemetry.ts) plus
+ * the in-memory plugin-load failures, so an operator or agent can see boot phase
+ * timings, memory growth, restart count/cause, and the exact error for any
+ * plugin that failed to load — without shell access to the state dir or log
+ * scraping. Loopback dev route. Absent telemetry surfaces as `null`; this never
+ * fabricates zeros (AGENTS.md §8).
+ *
+ * @module dev-boot-history
+ */
+import fs from "node:fs/promises";
+import path from "node:path";
+import { resolveStateDir } from "@elizaos/core";
+export const ELIZA_DEV_BOOT_HISTORY_SCHEMA = "elizaos.dev.boot-history/v1";
+/** ENOENT and parse errors collapse to null — the caller reads the null. */
+async function readJson(filePath) {
+    const raw = await fs.readFile(filePath, "utf8").catch(() => null);
+    if (raw === null) {
+        return null;
+    }
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Read the plugin-load failures the resolver stashes on a global Symbol
+ * (`@elizaos/agent` exposes the same data via `getLastFailedPluginDetails()`).
+ * Reading the global directly keeps this dev route decoupled from the agent
+ * barrel and robust to whichever `@elizaos/*` copy is loaded.
+ */
+function readFailedPluginDetails() {
+    const raw = globalThis[Symbol.for("@elizaos/plugin-resolver/last-failed-plugin-details")];
+    if (!Array.isArray(raw)) {
+        return [];
+    }
+    return raw.filter((entry) => typeof entry === "object" &&
+        entry !== null &&
+        typeof entry.name === "string" &&
+        typeof entry.error === "string");
+}
+export async function buildBootHistoryPayload(env = process.env) {
+    const tel = (...segments) => path.join(resolveStateDir(), "telemetry", ...segments);
+    const [latestBoot, memory, restarts] = await Promise.all([
+        readJson(tel("boot", "latest.json")),
+        readJson(tel("memory", "latest.json")),
+        readJson(tel("restart", "events.json")),
+    ]);
+    const spawnAt = Number(env.ELIZA_API_PROCESS_SPAWNED_AT_MS);
+    return {
+        schema: ELIZA_DEV_BOOT_HISTORY_SCHEMA,
+        generatedAtEpochMs: Date.now(),
+        currentSpawnAtMs: Number.isFinite(spawnAt) && spawnAt > 0 ? spawnAt : null,
+        watch: env.ELIZA_DEV_NO_WATCH === "0",
+        latestBoot,
+        memory,
+        restarts,
+        failedPlugins: readFailedPluginDetails(),
+        hints: [
+            "latestBoot===null means the runtime has not completed a boot since this process started (restart storm or hard crash) — check restarts and /api/dev/console-log.",
+            "watch===true means the API runs under node --watch; a concurrent workspace build (tsc/vite) can rewrite watched files and trigger a restart loop.",
+        ],
+    };
+}

package/api/dev-compat-routes.d.ts

@@ -1,11 +1,16 @@
 import type http from "node:http";
-import { type CompatRuntimeState } from "./compat-route-shared";
+import { type CompatRuntimeState } from "./compat-route-shared.js";
 /**
  * Dev observability routes (loopback where noted).
  *
  * - `GET /api/dev/stack`
+ * - `GET /api/dev/route-catalog`
  * - `GET /api/dev/cursor-screenshot`
  * - `GET /api/dev/console-log`
+ * - `GET /api/dev/voice-latency`
+ * - `GET /api/dev/inference-timing`
+ * - `GET /api/dev/boot-history` (alias `GET /api/dev/health`)
+ * - `GET /api/dev/route-timings` (perf instrumentation; ELIZA_PERF_INSTRUMENT=1)
  */
 export declare function handleDevCompatRoutes(req: http.IncomingMessage, res: http.ServerResponse, state: CompatRuntimeState): Promise<boolean>;
 //# sourceMappingURL=dev-compat-routes.d.ts.map

package/api/dev-compat-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dev-compat-routes.d.ts","sourceRoot":"","sources":["../../../../../src/api/dev-compat-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EACL,KAAK,kBAAkB,EAExB,MAAM,uBAAuB,CAAC;AAW/B;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,KAAK,EAAE,kBAAkB,GACxB,OAAO,CAAC,OAAO,CAAC,CA6IlB"}
+{"version":3,"file":"dev-compat-routes.d.ts","sourceRoot":"","sources":["../../../../../src/api/dev-compat-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EACL,KAAK,kBAAkB,EAExB,MAAM,uBAAuB,CAAC;AAa/B;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,KAAK,EAAE,kBAAkB,GACxB,OAAO,CAAC,OAAO,CAAC,CAqRlB"}