@elizaos/interop 2.0.0-alpha.2 → 2.0.0-alpha.201

package/README.md

@@ -116,7 +116,7 @@ await runtime.register_plugin(plugin)
 
 ## Plugin Manifest
 
-Every cross-language plugin must include a `plugin.json` manifest:
+Cross-language plugins are described by a manifest-like metadata object (format may vary by transport and host).
 
 ```json
 {

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../typescript/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,YAAY,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAE3D,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACV,mBAAmB,EACnB,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EAEf,UAAU,EACV,UAAU,EACV,WAAW,EACX,mBAAmB,EACnB,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,qBAAqB,EACrB,sBAAsB,EACtB,aAAa,EACb,eAAe,EAEf,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,SAAS,CAAC;AACjB,YAAY,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEvD,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnE;;GAEG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,KAAK,EAAuB,cAAc,EAAE,MAAM,SAAS,CAAC;AAGnE,MAAM,WAAW,sBAAsB;IACrC,4CAA4C;IAC5C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6BAA6B;IAC7B,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6BAA6B;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yBAAyB;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,wBAAsB,UAAU,CAC9B,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,MAAM,CAAC,CA4CjB"}

package/dist/{typescript/python-bridge.d.ts → python-bridge.d.ts}

@@ -19,10 +19,25 @@ export interface PythonBridgeOptions {
     cwd?: string;
     /** Additional environment variables */
     env?: Record<string, string>;
+    /**
+     * Whether to inherit the parent process environment variables.
+     *
+     * Defaults to true for compatibility. For tighter isolation, set to false and pass only
+     * explicit `env` entries.
+     */
+    inheritEnv?: boolean;
+    /** Environment variable names to remove when inheriting. */
+    envDenylist?: string[];
     /** Path to the bridge script */
     bridgeScriptPath?: string;
     /** Connection timeout in milliseconds */
     timeout?: number;
+    /** Maximum number of in-flight IPC requests (prevents unbounded memory growth). */
+    maxPendingRequests?: number;
+    /** Maximum size (bytes) of a single newline-delimited IPC message. */
+    maxMessageBytes?: number;
+    /** Maximum size (bytes) of the internal stdout buffer. */
+    maxBufferBytes?: number;
 }
 /**
  * Python plugin bridge that communicates via subprocess
@@ -36,6 +51,7 @@ export declare class PythonPluginBridge extends EventEmitter {
     private initialized;
     private requestCounter;
     constructor(options: PythonBridgeOptions);
+    private buildChildEnv;
     /**
      * Start the Python subprocess
      */

package/dist/python-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"python-bridge.d.ts","sourceRoot":"","sources":["../typescript/python-bridge.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EASV,MAAM,EAKP,MAAM,eAAe,CAAC;AAEvB,OAAO,KAAK,EAGV,UAAU,EACV,WAAW,EACX,cAAc,EAGf,MAAM,SAAS,CAAC;AAEjB;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2CAA2C;IAC3C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,uCAAuC;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,gCAAgC;IAChC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yCAAyC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mFAAmF;IACnF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,sEAAsE;IACtE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAWD;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,YAAY;IAStC,OAAO,CAAC,OAAO;IAR3B,OAAO,CAAC,OAAO,CACR;IACP,OAAO,CAAC,eAAe,CAA0C;IACjE,OAAO,CAAC,aAAa,CAAc;IACnC,OAAO,CAAC,QAAQ,CAA+B;IAC/C,OAAO,CAAC,WAAW,CAAkB;IACrC,OAAO,CAAC,cAAc,CAAa;gBAEf,OAAO,EAAE,mBAAmB;IAIhD,OAAO,CAAC,aAAa;IA0BrB;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAuD5B;;OAEG;YACW,YAAY;IAsB1B;;OAEG;IACH,OAAO,CAAC,UAAU;IAuDlB;;OAEG;IACH,OAAO,CAAC,aAAa;IAkBrB;;OAEG;IACG,WAAW,CAAC,CAAC,SAAS,WAAW,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC;IAkCzE;;OAEG;IACH,WAAW,IAAI,cAAc,GAAG,IAAI;IAIpC;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA0B3B;;OAEG;IACH,OAAO,CAAC,OAAO;CAWhB;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,MAAM,CAAC,CAUjB;AA8KD;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOpE"}

package/dist/{typescript/python-bridge.js → python-bridge.js}

@@ -5,6 +5,7 @@
  * to the TypeScript Plugin interface.
  */
 import { EventEmitter } from "node:events";
+import { logger } from "@elizaos/core";
 /**
  * Python plugin bridge that communicates via subprocess
  */
@@ -20,6 +21,27 @@ export class PythonPluginBridge extends EventEmitter {
         super();
         this.options = options;
     }
+    buildChildEnv() {
+        const inherit = this.options.inheritEnv !== false;
+        const base = {};
+        if (inherit) {
+            for (const [k, v] of Object.entries(process.env)) {
+                if (typeof v === "string") {
+                    base[k] = v;
+                }
+            }
+        }
+        const deny = new Set(this.options.envDenylist ?? []);
+        for (const key of deny) {
+            delete base[key];
+        }
+        if (this.options.env) {
+            for (const [k, v] of Object.entries(this.options.env)) {
+                base[k] = v;
+            }
+        }
+        return base;
+    }
     /**
      * Start the Python subprocess
      */
@@ -30,7 +52,7 @@ export class PythonPluginBridge extends EventEmitter {
             new URL("../python/bridge_server.py", import.meta.url).pathname;
         this.process = spawn(pythonPath, ["-u", bridgeScript, "--module", this.options.moduleName], {
             cwd: this.options.cwd,
-            env: { ...process.env, ...this.options.env },
+            env: this.buildChildEnv(),
             stdio: ["pipe", "pipe", "pipe"],
         });
         // Handle stdout (JSON-RPC messages)
@@ -42,7 +64,12 @@ export class PythonPluginBridge extends EventEmitter {
         // Handle stderr (logging)
         if (this.process.stderr) {
             this.process.stderr.on("data", (data) => {
-                console.error(`[Python Plugin ${this.options.moduleName}]`, data.toString());
+                logger.error({
+                    src: "interop:python-bridge",
+                    event: "interop.ipc.stderr",
+                    moduleName: this.options.moduleName,
+                    stream: "stderr",
+                }, data.toString());
             });
         }
         // Handle process exit
@@ -80,18 +107,44 @@ export class PythonPluginBridge extends EventEmitter {
      * Handle incoming data from subprocess
      */
     handleData(data) {
+        const maxBufferBytes = this.options.maxBufferBytes ?? 2_000_000;
+        const maxMessageBytes = this.options.maxMessageBytes ?? 1_000_000;
         this.messageBuffer += data;
+        if (Buffer.byteLength(this.messageBuffer, "utf8") > maxBufferBytes) {
+            logger.error({
+                src: "interop:python-bridge",
+                event: "interop.ipc.stdout_buffer_exceeded",
+                moduleName: this.options.moduleName,
+            }, `IPC stdout buffer exceeded limit (${maxBufferBytes} bytes); terminating bridge`);
+            this.process?.kill("SIGKILL");
+            this.cleanup();
+            return;
+        }
         // Process complete JSON messages (newline-delimited)
         const lines = this.messageBuffer.split("\n");
         this.messageBuffer = lines.pop() ?? "";
         for (const line of lines) {
             if (line.trim()) {
+                if (Buffer.byteLength(line, "utf8") > maxMessageBytes) {
+                    logger.error({
+                        src: "interop:python-bridge",
+                        event: "interop.ipc.message_exceeded",
+                        moduleName: this.options.moduleName,
+                    }, `IPC message exceeded limit (${maxMessageBytes} bytes); terminating bridge`);
+                    this.process?.kill("SIGKILL");
+                    this.cleanup();
+                    return;
+                }
                 try {
                     const message = JSON.parse(line);
                     this.handleMessage(message);
                 }
-                catch (error) {
-                    console.error("Failed to parse IPC message:", line, error);
+                catch (_error) {
+                    logger.error({
+                        src: "interop:python-bridge",
+                        event: "interop.ipc.parse_failed",
+                        moduleName: this.options.moduleName,
+                    }, `Failed to parse IPC message: ${line}`);
                 }
             }
         }
@@ -123,6 +176,10 @@ export class PythonPluginBridge extends EventEmitter {
         if (!this.process || !this.initialized) {
             throw new Error("Python bridge not started");
         }
+        const maxPendingRequests = this.options.maxPendingRequests ?? 1000;
+        if (this.pendingRequests.size >= maxPendingRequests) {
+            throw new Error(`Too many pending IPC requests (max=${maxPendingRequests})`);
+        }
         const id = `req_${++this.requestCounter}`;
         const requestWithId = { ...request, id };
         return new Promise((resolve, reject) => {

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../typescript/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAE5D;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,GAAG,QAAQ,CAAC;AAEhE;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE9D;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,6BAA6B;IAC7B,QAAQ,EAAE,eAAe,CAAC;IAC1B,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gDAAgD;IAChD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sCAAsC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qCAAqC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uCAAuC;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,cAAc,CAAC;IACzB,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;IAC1D,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;IAC3B,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC/B,UAAU,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACjC,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAC;IAC7B,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,aAAa,EAAE,EAAE,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAMD;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ;AAED;;GAEG;AACH,MAAM,WAAW,mBAAoB,SAAQ,UAAU;IACrD,IAAI,EAAE,eAAe,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,oBAAqB,SAAQ,UAAU;IACtD,IAAI,EAAE,eAAe,CAAC;IACtB,MAAM,EAAE,mBAAmB,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,qBAAsB,SAAQ,UAAU;IACvD,IAAI,EAAE,iBAAiB,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAmB,SAAQ,UAAU;IACpD,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAmB,SAAQ,UAAU;IACpD,IAAI,EAAE,cAAc,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,KAAK,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,sBAAuB,SAAQ,UAAU;IACxD,IAAI,EAAE,iBAAiB,CAAC;IACxB,MAAM,EAAE,qBAAqB,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAuB,SAAQ,UAAU;IACxD,IAAI,EAAE,kBAAkB,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAoB,SAAQ,UAAU;IACrD,IAAI,EAAE,eAAe,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAmB,SAAQ,UAAU;IACpD,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,eAAgB,SAAQ,UAAU;IACjD,IAAI,EAAE,kBAAkB,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAoB,SAAQ,UAAU;IACrD,IAAI,EAAE,cAAc,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,oBAAqB,SAAQ,UAAU;IACtD,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAkB,SAAQ,UAAU;IACnD,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAmB,SAAQ,UAAU;IACpD,IAAI,EAAE,oBAAoB,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,aAAc,SAAQ,UAAU;IAC/C,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,MAAM,UAAU,GAClB,mBAAmB,GACnB,qBAAqB,GACrB,kBAAkB,GAClB,sBAAsB,GACtB,mBAAmB,GACnB,kBAAkB,GAClB,mBAAmB,GACnB,iBAAiB,CAAC;AAEtB;;GAEG;AACH,MAAM,MAAM,WAAW,GACnB,oBAAoB,GACpB,kBAAkB,GAClB,sBAAsB,GACtB,eAAe,GACf,oBAAoB,GACpB,kBAAkB,GAClB,aAAa,CAAC;AAMlB;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,yCAAyC;IACzC,YAAY,IAAI,MAAM,CAAC;IAEvB,6CAA6C;IAC7C,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAEhC,2CAA2C;IAC3C,eAAe,CACb,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;IAEX,6CAA6C;IAC7C,aAAa,CACX,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,GACnB,MAAM,CAAC;IAEV,8CAA8C;IAC9C,YAAY,CACV,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,MAAM,CAAC;IAEV,4BAA4B;IAC5B,kBAAkB,CAChB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;IAEX,gDAAgD;IAChD,gBAAgB,CACd,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,MAAM,CAAC;IAEV,6CAA6C;IAC7C,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;IAEzE,4CAA4C;IAC5C,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAE5B,0BAA0B;IAC1B,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1C;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,WAAW,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,MAAM,EAAE,UAAU,CAAC;CACpB"}

package/dist/{typescript/wasm-loader.d.ts → wasm-loader.d.ts}

@@ -16,6 +16,10 @@ export interface WasmLoaderOptions {
     manifestPath?: string;
     /** Import object for WASM instantiation */
     imports?: WebAssembly.Imports;
+    /** Maximum allowed WASM binary size in bytes. */
+    maxWasmBytes?: number;
+    /** Maximum allowed initial memory size in bytes (post-instantiation). */
+    maxMemoryBytes?: number;
 }
 /**
  * Load a WASM plugin and return an elizaOS Plugin interface

package/dist/wasm-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasm-loader.d.ts","sourceRoot":"","sources":["../typescript/wasm-loader.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EASV,MAAM,EAKP,MAAM,eAAe,CAAC;AAGvB,OAAO,KAAK,EAEV,cAAc,EAIf,MAAM,SAAS,CAAC;AAEjB;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,mCAAmC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2CAA2C;IAC3C,OAAO,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC;IAC9B,iDAAiD;IACjD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAQD;;GAEG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,MAAM,CAAC,CAkBjB;AAmZD;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAClE,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC,CAkBD"}

package/dist/{typescript/wasm-loader.js → wasm-loader.js}

@@ -4,6 +4,7 @@
  * Loads Rust (or other) plugins compiled to WebAssembly and adapts them
  * to the TypeScript Plugin interface.
  */
+import { logger } from "@elizaos/core";
 /**
  * Text encoder/decoder for string passing
  */
@@ -15,7 +16,7 @@ const decoder = new TextDecoder();
 export async function loadWasmPlugin(options) {
     const { wasmPath, manifestPath } = options;
     // Load the WASM module
-    const wasmInstance = await loadWasmModule(wasmPath, options.imports);
+    const wasmInstance = await loadWasmModule(wasmPath, options);
     // Get the manifest from the WASM module or external file
     let manifest;
     if (manifestPath) {
@@ -32,7 +33,7 @@ export async function loadWasmPlugin(options) {
 /**
  * Load a WASM module and instantiate it
  */
-async function loadWasmModule(wasmPath, customImports) {
+async function loadWasmModule(wasmPath, options) {
     // Default imports for WASM
     const defaultImports = {
         env: {
@@ -66,7 +67,7 @@ async function loadWasmModule(wasmPath, customImports) {
             },
         },
     };
-    const imports = { ...defaultImports, ...customImports };
+    const imports = { ...defaultImports, ...options.imports };
     // Determine if we're in Node.js or browser
     const isNode = typeof globalThis.process !== "undefined" &&
         globalThis.process.versions &&
@@ -75,32 +76,76 @@ async function loadWasmModule(wasmPath, customImports) {
     if (isNode) {
         // Node.js: read file
         const fs = await import("node:fs/promises");
+        if (typeof options.maxWasmBytes === "number") {
+            const st = await fs.stat(wasmPath);
+            if (st.size > options.maxWasmBytes) {
+                throw new Error(`WASM binary too large (${st.size} bytes > ${options.maxWasmBytes} bytes)`);
+            }
+        }
         const wasmBuffer = await fs.readFile(wasmPath);
+        if (typeof options.maxWasmBytes === "number" &&
+            wasmBuffer.byteLength > options.maxWasmBytes) {
+            throw new Error(`WASM binary too large (${wasmBuffer.byteLength} bytes > ${options.maxWasmBytes} bytes)`);
+        }
         wasmModule = await WebAssembly.compile(wasmBuffer);
     }
     else {
         // Browser: fetch
         const response = await fetch(wasmPath);
         const wasmBuffer = await response.arrayBuffer();
+        if (typeof options.maxWasmBytes === "number" &&
+            wasmBuffer.byteLength > options.maxWasmBytes) {
+            throw new Error(`WASM binary too large (${wasmBuffer.byteLength} bytes > ${options.maxWasmBytes} bytes)`);
+        }
         wasmModule = await WebAssembly.compile(wasmBuffer);
     }
-    let instance = await WebAssembly.instantiate(wasmModule, defaultImports);
-    instance = await WebAssembly.instantiate(wasmModule, imports);
+    const instance = await WebAssembly.instantiate(wasmModule, imports);
     // Set up console logging now that we have memory
     const memory = instance.exports.memory;
+    if (typeof options.maxMemoryBytes === "number" &&
+        memory.buffer.byteLength > options.maxMemoryBytes) {
+        throw new Error(`WASM memory too large (${memory.buffer.byteLength} bytes > ${options.maxMemoryBytes} bytes)`);
+    }
     if (imports.env) {
         const env = imports.env;
         env.console_log = (ptr, len) => {
             const bytes = new Uint8Array(memory.buffer, ptr, len);
-            console.log(decoder.decode(bytes));
+            logger.info({ src: "interop:wasm", event: "interop.wasm.stdout", stream: "stdout" }, decoder.decode(bytes));
         };
         env.console_error = (ptr, len) => {
             const bytes = new Uint8Array(memory.buffer, ptr, len);
-            console.error(decoder.decode(bytes));
+            logger.error({ src: "interop:wasm", event: "interop.wasm.stderr", stream: "stderr" }, decoder.decode(bytes));
         };
     }
+    // Provide secure randomness for WASI random_get if present
+    if (imports.wasi_snapshot_preview1) {
+        const wasi = imports.wasi_snapshot_preview1;
+        wasi.random_get = (buf, len) => {
+            const view = new Uint8Array(memory.buffer, buf, len);
+            const cryptoObj = globalThis.crypto;
+            if (!cryptoObj || typeof cryptoObj.getRandomValues !== "function") {
+                throw new Error("No secure random source available for WASI random_get");
+            }
+            cryptoObj.getRandomValues(view);
+            return 0;
+        };
+    }
+    // Type guard to validate exports match WasmPluginExports interface
+    const exports = instance.exports;
+    const typedExports = {
+        get_manifest: exports.get_manifest,
+        init: exports.init,
+        validate_action: exports.validate_action,
+        invoke_action: exports.invoke_action,
+        get_provider: exports.get_provider,
+        validate_evaluator: exports.validate_evaluator,
+        invoke_evaluator: exports.invoke_evaluator,
+        handle_route: exports.handle_route,
+        alloc: exports.alloc,
+        dealloc: exports.dealloc,
+    };
     return {
-        exports: instance.exports,
+        exports: typedExports,
         memory: { buffer: memory.buffer },
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elizaos/interop",
-  "version": "2.0.0-alpha.2",
+  "version": "2.0.0-alpha.201",
   "description": "Cross-language plugin interoperability for elizaOS",
   "type": "module",
   "main": "dist/index.js",
@@ -22,22 +22,22 @@
     "build": "tsc",
     "test": "vitest run --pool=threads",
     "test:watch": "vitest --pool=threads",
-    "test:python": "cd python && pytest tests/ -v -p no:anchorpy --asyncio-mode=auto || echo 'Python tests skipped'",
-    "lint": "bunx @biomejs/biome check --write --unsafe .",
+    "test:python": "cd python && tmpdir=$(mktemp -d) && python3 -m venv \"$tmpdir\" && \"$tmpdir/bin/python\" -m pip install -e ../python -e '.[dev]' -q && \"$tmpdir/bin/python\" -m pytest tests/ -v -p no:anchorpy --asyncio-mode=auto; status=$?; rm -rf \"$tmpdir\"; exit $status",
+    "lint": "bunx @biomejs/biome check --write .",
     "lint:check": "bunx @biomejs/biome check .",
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@elizaos/core": "2.0.0-alpha.2"
+    "@elizaos/core": "2.0.0-alpha.201"
   },
   "devDependencies": {
     "@types/node": "^25.0.3",
-    "typescript": "^5.9.3"
+    "typescript": "^6.0.0"
   },
   "author": "elizaOS",
   "license": "MIT",
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "bc6cac8d36845d7cbde51a64307c6a57c16378ad"
+  "gitHead": "8be84790e151372fc31f4f2ed5640613511bbe6b"
 }

package/python/tests/test_rust_ffi_loader.py

@@ -51,7 +51,7 @@ async def test_load_rust_plugin_produces_awaitable_handlers(monkeypatch: pytest.
     provider = plugin.providers[0]
     evaluator = plugin.evaluators[0]
 
-    valid = await action.validate_fn(None, {"content": {}}, None)  # type: ignore[arg-type]
+    valid = await action.validate(None, {"content": {}}, None)  # type: ignore[arg-type]
     assert valid is True
 
     result = await action.handler(None, {"content": {}}, None, None, None, None)  # type: ignore[arg-type]
@@ -62,7 +62,7 @@ async def test_load_rust_plugin_produces_awaitable_handlers(monkeypatch: pytest.
     prov_result = await provider.get(None, {"content": {}}, {"values": {}, "data": {}, "text": ""})  # type: ignore[arg-type]
     assert prov_result.text == "prov:PROV"
 
-    eval_valid = await evaluator.validate_fn(None, {"content": {}}, None)  # type: ignore[arg-type]
+    eval_valid = await evaluator.validate(None, {"content": {}}, None)  # type: ignore[arg-type]
     assert eval_valid is True
 
     eval_result = await evaluator.handler(None, {"content": {}}, None, None, None, None)  # type: ignore[arg-type]