@elizaos/autonomous 2.0.0-alpha.71 → 2.0.0-alpha.72

package/packages/autonomous/src/api/agent-admin-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-admin-routes.d.ts","sourceRoot":"","sources":["../../../../../src/api/agent-admin-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEtE,KAAK,gBAAgB,GACjB,aAAa,GACb,UAAU,GACV,SAAS,GACT,QAAQ,GACR,SAAS,GACT,YAAY,GACZ,OAAO,CAAC;AAEZ,UAAU,oBAAoB;IAC5B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IAC7B,MAAM,EAAE,oBAAoB,CAAC;IAC7B,UAAU,EAAE,gBAAgB,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,mBAAmB,EAAE;QAAE,MAAM,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,IAAI,CAAC;QAAC,OAAO,EAAE,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAC1E,qBAAqB,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC5C,qBAAqB,EAAE,MAAM,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,sBACf,SAAQ,gBAAgB,EACtB,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;IACtC,KAAK,EAAE,oBAAoB,CAAC;IAC5B,SAAS,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;IAC7D,gBAAgB,CAAC,EAAE,MAAM,IAAI,CAAC;IAC9B,eAAe,EAAE,MAAM,MAAM,CAAC;IAC9B,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IACvC,UAAU,EAAE,MAAM,MAAM,CAAC;IACzB,mBAAmB,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IACzE,cAAc,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC;IACnD,cAAc,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,IAAI,CAAC;IAChD,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACpC;AAED,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,sBAAsB,GAC1B,OAAO,CAAC,OAAO,CAAC,CAiIlB"}

package/packages/autonomous/src/api/agent-admin-routes.js

@@ -0,0 +1,93 @@
+import { detectRuntimeModel } from "./agent-model";
+export async function handleAgentAdminRoutes(ctx) {
+    const { res, method, pathname, state, onRestart, onRuntimeSwapped, json, error, resolveStateDir, resolvePath, getHomeDir, isSafeResetStateDir, stateDirExists, removeStateDir, logWarn, } = ctx;
+    if (method === "POST" && pathname === "/api/agent/restart") {
+        if (!onRestart) {
+            error(res, "Restart is not supported in this mode (no restart handler registered)", 501);
+            return true;
+        }
+        if (state.agentState === "restarting") {
+            error(res, "A restart is already in progress", 409);
+            return true;
+        }
+        const previousState = state.agentState;
+        state.agentState = "restarting";
+        try {
+            const newRuntime = await onRestart();
+            if (newRuntime) {
+                state.runtime = newRuntime;
+                state.chatConnectionReady = null;
+                state.chatConnectionPromise = null;
+                state.agentState = "running";
+                state.agentName = newRuntime.character.name ?? "Eliza";
+                state.model = detectRuntimeModel(newRuntime);
+                state.startedAt = Date.now();
+                state.pendingRestartReasons = [];
+                onRuntimeSwapped?.();
+                json(res, {
+                    ok: true,
+                    pendingRestart: false,
+                    status: {
+                        state: state.agentState,
+                        agentName: state.agentName,
+                        model: state.model,
+                        startedAt: state.startedAt,
+                    },
+                });
+            }
+            else {
+                state.agentState = previousState;
+                error(res, "Restart handler returned null — runtime failed to re-initialize", 500);
+            }
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            state.agentState = previousState;
+            error(res, `Restart failed: ${message}`, 500);
+        }
+        return true;
+    }
+    if (method === "POST" && pathname === "/api/agent/reset") {
+        try {
+            if (state.runtime) {
+                try {
+                    await state.runtime.stop();
+                }
+                catch (stopErr) {
+                    const message = stopErr instanceof Error ? stopErr.message : String(stopErr);
+                    logWarn(`[eliza-api] Error stopping runtime during reset: ${message}`);
+                }
+                state.runtime = null;
+            }
+            const stateDir = resolveStateDir();
+            const resolvedState = resolvePath(stateDir);
+            const home = getHomeDir();
+            const isSafe = isSafeResetStateDir(resolvedState, home);
+            if (!isSafe) {
+                logWarn(`[eliza-api] Refusing to delete unsafe state dir: "${resolvedState}"`);
+                error(res, `Reset aborted: state directory "${resolvedState}" does not appear safe to delete`, 400);
+                return true;
+            }
+            if (stateDirExists(resolvedState)) {
+                removeStateDir(resolvedState);
+            }
+            state.agentState = "stopped";
+            state.agentName = "Eliza";
+            state.model = undefined;
+            state.startedAt = undefined;
+            state.config = {};
+            state.chatRoomId = null;
+            state.chatUserId = null;
+            state.chatConnectionReady = null;
+            state.chatConnectionPromise = null;
+            state.pendingRestartReasons = [];
+            json(res, { ok: true });
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            error(res, `Reset failed: ${message}`, 500);
+        }
+        return true;
+    }
+    return false;
+}

package/packages/autonomous/src/api/agent-lifecycle-routes.d.ts

@@ -0,0 +1,16 @@
+import type { AgentRuntime } from "@elizaos/core";
+import type { RouteHelpers, RouteRequestMeta } from "./route-helpers";
+type AgentStateStatus = "not_started" | "starting" | "running" | "paused" | "stopped" | "restarting" | "error";
+export interface AgentLifecycleRouteState {
+    runtime: AgentRuntime | null;
+    agentState: AgentStateStatus;
+    agentName: string;
+    model: string | undefined;
+    startedAt: number | undefined;
+}
+export interface AgentLifecycleRouteContext extends RouteRequestMeta, Pick<RouteHelpers, "error" | "json" | "readJsonBody"> {
+    state: AgentLifecycleRouteState;
+}
+export declare function handleAgentLifecycleRoutes(ctx: AgentLifecycleRouteContext): Promise<boolean>;
+export {};
+//# sourceMappingURL=agent-lifecycle-routes.d.ts.map

package/packages/autonomous/src/api/agent-lifecycle-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-lifecycle-routes.d.ts","sourceRoot":"","sources":["../../../../../src/api/agent-lifecycle-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEtE,KAAK,gBAAgB,GACjB,aAAa,GACb,UAAU,GACV,SAAS,GACT,QAAQ,GACR,SAAS,GACT,YAAY,GACZ,OAAO,CAAC;AAEZ,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,gBAAgB,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B;AAED,MAAM,WAAW,0BACf,SAAQ,gBAAgB,EACtB,IAAI,CAAC,YAAY,EAAE,OAAO,GAAG,MAAM,GAAG,cAAc,CAAC;IACvD,KAAK,EAAE,wBAAwB,CAAC;CACjC;AAED,wBAAsB,0BAA0B,CAC9C,GAAG,EAAE,0BAA0B,GAC9B,OAAO,CAAC,OAAO,CAAC,CA0FlB"}

package/packages/autonomous/src/api/agent-lifecycle-routes.js

@@ -0,0 +1,80 @@
+import { detectRuntimeModel } from "./agent-model";
+export async function handleAgentLifecycleRoutes(ctx) {
+    const { req, res, method, pathname, state, error, json, readJsonBody } = ctx;
+    const runtime = state.runtime;
+    if (method === "POST" && pathname === "/api/agent/start") {
+        state.agentState = "paused";
+        state.startedAt = Date.now();
+        state.model = detectRuntimeModel(state.runtime);
+        json(res, {
+            ok: true,
+            status: {
+                state: state.agentState,
+                agentName: state.agentName,
+                model: state.model,
+                uptime: 0,
+                startedAt: state.startedAt,
+            },
+        });
+        return true;
+    }
+    if (method === "POST" && pathname === "/api/agent/stop") {
+        state.agentState = "stopped";
+        state.startedAt = undefined;
+        state.model = undefined;
+        json(res, {
+            ok: true,
+            status: { state: state.agentState, agentName: state.agentName },
+        });
+        return true;
+    }
+    if (method === "POST" && pathname === "/api/agent/pause") {
+        state.agentState = "paused";
+        json(res, {
+            ok: true,
+            status: {
+                state: state.agentState,
+                agentName: state.agentName,
+                model: state.model,
+                uptime: state.startedAt ? Date.now() - state.startedAt : undefined,
+                startedAt: state.startedAt,
+            },
+        });
+        return true;
+    }
+    if (method === "POST" && pathname === "/api/agent/resume") {
+        state.agentState = "running";
+        json(res, {
+            ok: true,
+            status: {
+                state: state.agentState,
+                agentName: state.agentName,
+                model: state.model,
+                uptime: state.startedAt ? Date.now() - state.startedAt : undefined,
+                startedAt: state.startedAt,
+            },
+        });
+        return true;
+    }
+    if (method === "GET" && pathname === "/api/agent/autonomy") {
+        json(res, { enabled: runtime?.enableAutonomy === true });
+        return true;
+    }
+    if (method === "POST" && pathname === "/api/agent/autonomy") {
+        const body = await readJsonBody(req, res);
+        if (!body)
+            return true;
+        if (typeof body.enabled !== "boolean") {
+            error(res, "enabled must be a boolean", 400);
+            return true;
+        }
+        if (!runtime) {
+            error(res, "Agent runtime is not available", 503);
+            return true;
+        }
+        runtime.enableAutonomy = body.enabled;
+        json(res, { enabled: runtime.enableAutonomy === true });
+        return true;
+    }
+    return false;
+}

package/packages/autonomous/src/api/agent-model.d.ts

@@ -0,0 +1,12 @@
+import type { AgentRuntime } from "@elizaos/core";
+export declare function detectRuntimeModel(runtime: AgentRuntime | null, config?: {
+    agents?: {
+        defaults?: {
+            model?: {
+                primary?: string;
+            };
+        };
+    };
+}): string | undefined;
+export declare function resolveProviderFromModel(model: string): string | null;
+//# sourceMappingURL=agent-model.d.ts.map

package/packages/autonomous/src/api/agent-model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-model.d.ts","sourceRoot":"","sources":["../../../../../src/api/agent-model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAwElD,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,YAAY,GAAG,IAAI,EAC5B,MAAM,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE;YAAE,KAAK,CAAC,EAAE;gBAAE,OAAO,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAA;KAAE,CAAA;CAAE,GACpE,MAAM,GAAG,SAAS,CAiCpB;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAgCrE"}

package/packages/autonomous/src/api/agent-model.js

@@ -0,0 +1,123 @@
+const MODEL_PLACEHOLDERS = new Set(["", "n/a", "na", "unknown", "provided"]);
+const PROVIDER_HINTS = [
+    "openai-codex",
+    "openai-subscription",
+    "anthropic-subscription",
+    "openrouter",
+    "moonshot",
+    "kimi",
+    "deepseek",
+    "anthropic",
+    "openai",
+    "groq",
+    "gemini",
+    "google",
+    "xai",
+    "ollama",
+    "pi-ai",
+];
+const ENV_PROVIDER_SIGNALS = [
+    { envVar: "ANTHROPIC_API_KEY", label: "anthropic" },
+    { envVar: "OPENAI_API_KEY", label: "openai" },
+    { envVar: "OPENROUTER_API_KEY", label: "openrouter" },
+    { envVar: "GROQ_API_KEY", label: "groq" },
+    { envVar: "GOOGLE_GENERATIVE_AI_API_KEY", label: "gemini" },
+    { envVar: "XAI_API_KEY", label: "xai" },
+    { envVar: "DEEPSEEK_API_KEY", label: "deepseek" },
+];
+function normalizeModelSpec(value) {
+    if (typeof value !== "string")
+        return undefined;
+    const trimmed = value.trim();
+    if (!trimmed)
+        return undefined;
+    if (MODEL_PLACEHOLDERS.has(trimmed.toLowerCase()))
+        return undefined;
+    return trimmed;
+}
+function readCharacterModel(runtime) {
+    const character = runtime.character;
+    if (!character || typeof character !== "object")
+        return undefined;
+    const modelValue = character.model;
+    const fromCharacterModel = normalizeModelSpec(modelValue);
+    if (fromCharacterModel)
+        return fromCharacterModel;
+    const settings = character.settings;
+    if (!settings || typeof settings !== "object")
+        return undefined;
+    const model = settings.model;
+    const fromSettingsModel = normalizeModelSpec(model);
+    if (fromSettingsModel)
+        return fromSettingsModel;
+    if (!model || typeof model !== "object")
+        return undefined;
+    const modelObj = model;
+    return (normalizeModelSpec(modelObj.primary) ??
+        normalizeModelSpec(modelObj.large) ??
+        normalizeModelSpec(modelObj.small));
+}
+export function detectRuntimeModel(runtime, config) {
+    if (!runtime)
+        return undefined;
+    const configured = readCharacterModel(runtime);
+    if (configured)
+        return configured;
+    const configModel = normalizeModelSpec(config?.agents?.defaults?.model?.primary);
+    if (configModel)
+        return configModel;
+    const pluginNames = Array.isArray(runtime.plugins)
+        ? runtime.plugins
+            .map((plugin) => typeof plugin?.name === "string" ? plugin.name.trim() : "")
+            .filter((name) => name.length > 0)
+        : [];
+    if (pluginNames.length > 0) {
+        const lowerPluginNames = pluginNames.map((name) => name.toLowerCase());
+        for (const hint of PROVIDER_HINTS) {
+            const index = lowerPluginNames.findIndex((name) => name.includes(hint));
+            if (index >= 0)
+                return pluginNames[index];
+        }
+    }
+    for (const { envVar, label } of ENV_PROVIDER_SIGNALS) {
+        const value = process.env[envVar]?.trim();
+        if (value && value.length > 0)
+            return label;
+    }
+    return undefined;
+}
+export function resolveProviderFromModel(model) {
+    const lower = model.trim().toLowerCase();
+    if (!lower)
+        return null;
+    const providers = [
+        { match: "elizacloud", label: "Eliza Cloud" },
+        { match: "openrouter", label: "OpenRouter" },
+        { match: "openai", label: "OpenAI" },
+        { match: "anthropic", label: "Anthropic" },
+        { match: "gemini", label: "Google" },
+        { match: "google", label: "Google" },
+        { match: "grok", label: "xAI" },
+        { match: "xai", label: "xAI" },
+        { match: "groq", label: "Groq" },
+        { match: "ollama", label: "Ollama" },
+        { match: "deepseek", label: "DeepSeek" },
+        { match: "mistral", label: "Mistral" },
+        { match: "together", label: "Together AI" },
+        { match: "cohere", label: "Cohere" },
+        { match: "pi-ai", label: "Pi AI" },
+        { match: "moonshot", label: "Moonshot" },
+        { match: "kimi", label: "Kimi" },
+    ];
+    for (const { match, label } of providers) {
+        if (lower.includes(match))
+            return label;
+    }
+    if (lower.startsWith("gpt"))
+        return "OpenAI";
+    if (lower.startsWith("claude"))
+        return "Anthropic";
+    if (lower.startsWith("gemini"))
+        return "Google";
+    return null;
+}

package/packages/autonomous/src/api/agent-transfer-routes.d.ts

@@ -0,0 +1,16 @@
+import type { AgentRuntime } from "@elizaos/core";
+import type { RouteRequestContext } from "./route-helpers";
+export interface AgentTransferRouteState {
+    runtime: AgentRuntime | null;
+}
+export interface AgentTransferRouteContext extends RouteRequestContext {
+    state: AgentTransferRouteState;
+    exportAgent: (runtime: AgentRuntime, password: string, options: {
+        includeLogs: boolean;
+    }) => Promise<Buffer>;
+    estimateExportSize: (runtime: AgentRuntime) => Promise<unknown>;
+    importAgent: (runtime: AgentRuntime, fileBuffer: Buffer, password: string) => Promise<unknown>;
+    isAgentExportError: (error: unknown) => boolean;
+}
+export declare function handleAgentTransferRoutes(ctx: AgentTransferRouteContext): Promise<boolean>;
+//# sourceMappingURL=agent-transfer-routes.d.ts.map

package/packages/autonomous/src/api/agent-transfer-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-transfer-routes.d.ts","sourceRoot":"","sources":["../../../../../src/api/agent-transfer-routes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAsB3D,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,yBAA0B,SAAQ,mBAAmB;IACpE,KAAK,EAAE,uBAAuB,CAAC;IAC/B,WAAW,EAAE,CACX,OAAO,EAAE,YAAY,EACrB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE;QAAE,WAAW,EAAE,OAAO,CAAA;KAAE,KAC9B,OAAO,CAAC,MAAM,CAAC,CAAC;IACrB,kBAAkB,EAAE,CAAC,OAAO,EAAE,YAAY,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAChE,WAAW,EAAE,CACX,OAAO,EAAE,YAAY,EACrB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,KACb,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,kBAAkB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;CACjD;AAED,wBAAsB,yBAAyB,CAC7C,GAAG,EAAE,yBAAyB,GAC7B,OAAO,CAAC,OAAO,CAAC,CAmKlB"}

package/packages/autonomous/src/api/agent-transfer-routes.js

@@ -0,0 +1,124 @@
+import { readRequestBodyBuffer } from "./http-helpers";
+const MAX_IMPORT_BYTES = 512 * 1_048_576;
+const AGENT_TRANSFER_MIN_PASSWORD_LENGTH = 4;
+const AGENT_TRANSFER_MAX_PASSWORD_LENGTH = 1024;
+function readRawBody(req, maxBytes) {
+    return readRequestBodyBuffer(req, { maxBytes }).then((body) => {
+        if (body === null) {
+            throw new Error(`Request body exceeds maximum size (${maxBytes} bytes)`);
+        }
+        return body;
+    });
+}
+export async function handleAgentTransferRoutes(ctx) {
+    const { req, res, method, pathname, state, readJsonBody, json, error, exportAgent, estimateExportSize, importAgent, isAgentExportError, } = ctx;
+    if (method === "POST" && pathname === "/api/agent/export") {
+        if (!state.runtime) {
+            error(res, "Agent is not running — start it before exporting.", 503);
+            return true;
+        }
+        const body = await readJsonBody(req, res);
+        if (!body)
+            return true;
+        if (!body.password || typeof body.password !== "string") {
+            error(res, `A password of at least ${AGENT_TRANSFER_MIN_PASSWORD_LENGTH} characters is required.`, 400);
+            return true;
+        }
+        if (body.password.length < AGENT_TRANSFER_MIN_PASSWORD_LENGTH) {
+            error(res, `A password of at least ${AGENT_TRANSFER_MIN_PASSWORD_LENGTH} characters is required.`, 400);
+            return true;
+        }
+        try {
+            const fileBuffer = await exportAgent(state.runtime, body.password, {
+                includeLogs: body.includeLogs === true,
+            });
+            const agentName = (state.runtime.character.name ?? "agent")
+                .replace(/[^a-zA-Z0-9_-]/g, "_")
+                .toLowerCase();
+            const timestamp = new Date()
+                .toISOString()
+                .replace(/[:.]/g, "-")
+                .slice(0, 19);
+            const filename = `${agentName}-${timestamp}.eliza-agent`;
+            res.statusCode = 200;
+            res.setHeader("Content-Type", "application/octet-stream");
+            res.setHeader("Content-Disposition", `attachment; filename="${filename}"`);
+            res.setHeader("Content-Length", fileBuffer.length);
+            res.end(fileBuffer);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            if (isAgentExportError(err)) {
+                error(res, message, 400);
+            }
+            else {
+                error(res, `Export failed: ${message}`, 500);
+            }
+        }
+        return true;
+    }
+    if (method === "GET" && pathname === "/api/agent/export/estimate") {
+        if (!state.runtime) {
+            error(res, "Agent is not running.", 503);
+            return true;
+        }
+        try {
+            const estimate = await estimateExportSize(state.runtime);
+            json(res, estimate);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            error(res, `Estimate failed: ${message}`, 500);
+        }
+        return true;
+    }
+    if (method === "POST" && pathname === "/api/agent/import") {
+        if (!state.runtime) {
+            error(res, "Agent is not running — start it before importing.", 503);
+            return true;
+        }
+        let rawBody;
+        try {
+            rawBody = await readRawBody(req, MAX_IMPORT_BYTES);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            error(res, message, 413);
+            return true;
+        }
+        if (rawBody.length < 5) {
+            error(res, "Request body is too small — expected password + file data.", 400);
+            return true;
+        }
+        const passwordLength = rawBody.readUInt32BE(0);
+        if (passwordLength < AGENT_TRANSFER_MIN_PASSWORD_LENGTH) {
+            error(res, `Password must be at least ${AGENT_TRANSFER_MIN_PASSWORD_LENGTH} characters.`, 400);
+            return true;
+        }
+        if (passwordLength > AGENT_TRANSFER_MAX_PASSWORD_LENGTH) {
+            error(res, `Password is too long (max ${AGENT_TRANSFER_MAX_PASSWORD_LENGTH} bytes).`, 400);
+            return true;
+        }
+        if (rawBody.length < 4 + passwordLength + 1) {
+            error(res, "Request body is incomplete — missing file data after password.", 400);
+            return true;
+        }
+        const password = rawBody.subarray(4, 4 + passwordLength).toString("utf-8");
+        const fileBuffer = rawBody.subarray(4 + passwordLength);
+        try {
+            const result = await importAgent(state.runtime, fileBuffer, password);
+            json(res, result);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            if (isAgentExportError(err)) {
+                error(res, message, 400);
+            }
+            else {
+                error(res, `Import failed: ${message}`, 500);
+            }
+        }
+        return true;
+    }
+    return false;
+}

package/packages/autonomous/src/api/apps-routes.d.ts

@@ -0,0 +1,19 @@
+import type { InstallProgressLike, PluginManagerLike } from "../services/plugin-manager-types";
+import type { RouteHelpers, RouteRequestMeta } from "./route-helpers";
+export interface AppManagerLike {
+    listAvailable: (pluginManager: PluginManagerLike) => Promise<unknown>;
+    search: (pluginManager: PluginManagerLike, query: string, limit?: number) => Promise<unknown>;
+    listInstalled: (pluginManager: PluginManagerLike) => Promise<unknown>;
+    launch: (pluginManager: PluginManagerLike, name: string, onProgress?: (progress: InstallProgressLike) => void, runtime?: unknown | null) => Promise<unknown>;
+    stop: (pluginManager: PluginManagerLike, name: string) => Promise<unknown>;
+    getInfo: (pluginManager: PluginManagerLike, name: string) => Promise<unknown>;
+}
+export interface AppsRouteContext extends RouteRequestMeta, Pick<RouteHelpers, "readJsonBody" | "json" | "error"> {
+    url: URL;
+    appManager: AppManagerLike;
+    getPluginManager: () => PluginManagerLike;
+    parseBoundedLimit: (rawLimit: string | null, fallback?: number) => number;
+    runtime: unknown | null;
+}
+export declare function handleAppsRoutes(ctx: AppsRouteContext): Promise<boolean>;
+//# sourceMappingURL=apps-routes.d.ts.map

package/packages/autonomous/src/api/apps-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apps-routes.d.ts","sourceRoot":"","sources":["../../../../../src/api/apps-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,iBAAiB,EAGlB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEtE,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,CAAC,aAAa,EAAE,iBAAiB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,MAAM,EAAE,CACN,aAAa,EAAE,iBAAiB,EAChC,KAAK,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,MAAM,KACX,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,aAAa,EAAE,CAAC,aAAa,EAAE,iBAAiB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,MAAM,EAAE,CACN,aAAa,EAAE,iBAAiB,EAChC,IAAI,EAAE,MAAM,EACZ,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,mBAAmB,KAAK,IAAI,EACpD,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,KACrB,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,IAAI,EAAE,CAAC,aAAa,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3E,OAAO,EAAE,CAAC,aAAa,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/E;AAED,MAAM,WAAW,gBACf,SAAQ,gBAAgB,EACtB,IAAI,CAAC,YAAY,EAAE,cAAc,GAAG,MAAM,GAAG,OAAO,CAAC;IACvD,GAAG,EAAE,GAAG,CAAC;IACT,UAAU,EAAE,cAAc,CAAC;IAC3B,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;IAC1C,iBAAiB,EAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IAC1E,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;CACzB;AAeD,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC,OAAO,CAAC,CA2JlB"}

package/packages/autonomous/src/api/apps-routes.js

@@ -0,0 +1,128 @@
+function isNonAppRegistryPlugin(plugin) {
+    if (plugin.kind === "app")
+        return false;
+    const name = plugin.name.toLowerCase();
+    const npmPackage = plugin.npm.package.toLowerCase();
+    return !name.includes("/app-") && !npmPackage.includes("/app-");
+}
+function isNonAppSearchResult(plugin) {
+    const name = plugin.name.toLowerCase();
+    const npmPackage = plugin.npmPackage.toLowerCase();
+    return !name.includes("/app-") && !npmPackage.includes("/app-");
+}
+export async function handleAppsRoutes(ctx) {
+    const { req, res, method, pathname, url, appManager, getPluginManager, parseBoundedLimit, readJsonBody, json, error, runtime, } = ctx;
+    if (method === "GET" && pathname === "/api/apps") {
+        const pluginManager = getPluginManager();
+        const apps = await appManager.listAvailable(pluginManager);
+        json(res, apps);
+        return true;
+    }
+    if (method === "GET" && pathname === "/api/apps/search") {
+        const query = url.searchParams.get("q") ?? "";
+        if (!query.trim()) {
+            json(res, []);
+            return true;
+        }
+        const limit = parseBoundedLimit(url.searchParams.get("limit"));
+        const pluginManager = getPluginManager();
+        const results = await appManager.search(pluginManager, query, limit);
+        json(res, results);
+        return true;
+    }
+    if (method === "GET" && pathname === "/api/apps/installed") {
+        const pluginManager = getPluginManager();
+        const installed = await appManager.listInstalled(pluginManager);
+        json(res, installed);
+        return true;
+    }
+    if (method === "POST" && pathname === "/api/apps/launch") {
+        try {
+            const body = await readJsonBody(req, res);
+            if (!body)
+                return true;
+            if (!body.name?.trim()) {
+                error(res, "name is required");
+                return true;
+            }
+            const pluginManager = getPluginManager();
+            const result = await appManager.launch(pluginManager, body.name.trim(), (_progress) => { }, runtime);
+            json(res, result);
+        }
+        catch (e) {
+            error(res, e instanceof Error ? e.message : "Failed to launch app", 500);
+        }
+        return true;
+    }
+    if (method === "POST" && pathname === "/api/apps/stop") {
+        const body = await readJsonBody(req, res);
+        if (!body)
+            return true;
+        if (!body.name?.trim()) {
+            error(res, "name is required");
+            return true;
+        }
+        const appName = body.name.trim();
+        const pluginManager = getPluginManager();
+        const result = await appManager.stop(pluginManager, appName);
+        json(res, result);
+        return true;
+    }
+    if (method === "GET" && pathname.startsWith("/api/apps/info/")) {
+        const appName = decodeURIComponent(pathname.slice("/api/apps/info/".length));
+        if (!appName) {
+            error(res, "app name is required");
+            return true;
+        }
+        const pluginManager = getPluginManager();
+        const info = await appManager.getInfo(pluginManager, appName);
+        if (!info) {
+            error(res, `App "${appName}" not found in registry`, 404);
+            return true;
+        }
+        json(res, info);
+        return true;
+    }
+    if (method === "GET" && pathname === "/api/apps/plugins") {
+        try {
+            const pluginManager = getPluginManager();
+            const registry = await pluginManager.refreshRegistry();
+            const plugins = Array.from(registry.values()).filter(isNonAppRegistryPlugin);
+            json(res, plugins);
+        }
+        catch (err) {
+            error(res, `Failed to list plugins: ${err instanceof Error ? err.message : String(err)}`, 502);
+        }
+        return true;
+    }
+    if (method === "GET" && pathname === "/api/apps/plugins/search") {
+        const query = url.searchParams.get("q") ?? "";
+        if (!query.trim()) {
+            json(res, []);
+            return true;
+        }
+        try {
+            const limit = parseBoundedLimit(url.searchParams.get("limit"));
+            const pluginManager = getPluginManager();
+            const results = await pluginManager.searchRegistry(query, limit);
+            json(res, results.filter(isNonAppSearchResult));
+        }
+        catch (err) {
+            error(res, `Plugin search failed: ${err instanceof Error ? err.message : String(err)}`, 502);
+        }
+        return true;
+    }
+    if (method === "POST" && pathname === "/api/apps/refresh") {
+        try {
+            const pluginManager = getPluginManager();
+            const registry = await pluginManager.refreshRegistry();
+            const count = Array.from(registry.values()).filter(isNonAppRegistryPlugin).length;
+            json(res, { ok: true, count });
+        }
+        catch (err) {
+            error(res, `Refresh failed: ${err instanceof Error ? err.message : String(err)}`, 502);
+        }
+        return true;
+    }
+    return false;
+}

package/packages/autonomous/src/api/auth-routes.d.ts

@@ -0,0 +1,11 @@
+import type { RouteRequestContext } from "./route-helpers";
+export interface AuthRouteContext extends RouteRequestContext {
+    pairingEnabled: () => boolean;
+    ensurePairingCode: () => string | null;
+    normalizePairingCode: (code: string) => string;
+    rateLimitPairing: (ip: string | null) => boolean;
+    getPairingExpiresAt: () => number;
+    clearPairing: () => void;
+}
+export declare function handleAuthRoutes(ctx: AuthRouteContext): Promise<boolean>;
+//# sourceMappingURL=auth-routes.d.ts.map

package/packages/autonomous/src/api/auth-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-routes.d.ts","sourceRoot":"","sources":["../../../../../src/api/auth-routes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAE3D,MAAM,WAAW,gBAAiB,SAAQ,mBAAmB;IAC3D,cAAc,EAAE,MAAM,OAAO,CAAC;IAC9B,iBAAiB,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACvC,oBAAoB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAC/C,gBAAgB,EAAE,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC;IACjD,mBAAmB,EAAE,MAAM,MAAM,CAAC;IAClC,YAAY,EAAE,MAAM,IAAI,CAAC;CAC1B;AAED,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC,OAAO,CAAC,CA2ElB"}