@elizaos/plugin-elizacloud 2.0.0-alpha.7 → 2.0.0-beta.1

package/dist/services/cloud-container.js

@@ -0,0 +1,241 @@
+import { createRequire } from "node:module";
+var __defProp = Object.defineProperty;
+var __returnValue = (v) => v;
+function __exportSetter(name, newValue) {
+  this[name] = __returnValue.bind(null, newValue);
+}
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, {
+      get: all[name],
+      enumerable: true,
+      configurable: true,
+      set: __exportSetter.bind(all, name)
+    });
+};
+var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+var __require = /* @__PURE__ */ createRequire(import.meta.url);
+
+// src/types/cloud.ts
+import {
+  CloudApiError,
+  InsufficientCreditsError
+} from "@elizaos/cloud-sdk";
+var DEFAULT_CLOUD_CONFIG = {
+  enabled: false,
+  baseUrl: "https://www.elizacloud.ai/api/v1",
+  inferenceMode: "cloud",
+  autoProvision: false,
+  bridge: {
+    reconnectIntervalMs: 3000,
+    maxReconnectAttempts: 20,
+    heartbeatIntervalMs: 30000
+  },
+  backup: {
+    autoBackupIntervalMs: 3600000,
+    maxSnapshots: 10
+  },
+  container: {
+    defaultImage: "elizaos/agent:latest",
+    defaultArchitecture: "arm64",
+    defaultCpu: 1792,
+    defaultMemory: 1792,
+    defaultPort: 3000
+  }
+};
+
+// src/services/cloud-container.ts
+import { logger, Service } from "@elizaos/core";
+class CloudContainerService extends Service {
+  static serviceType = "CLOUD_CONTAINER";
+  capabilityDescription = "ElizaCloud container provisioning and lifecycle management";
+  authService;
+  containerDefaults = DEFAULT_CLOUD_CONFIG.container;
+  tracked = new Map;
+  static async start(runtime) {
+    const service = new CloudContainerService(runtime);
+    await service.initialize();
+    return service;
+  }
+  async stop() {
+    for (const [, tracked] of this.tracked) {
+      if (tracked.pollingTimer)
+        clearTimeout(tracked.pollingTimer);
+      if (tracked.healthTimer)
+        clearInterval(tracked.healthTimer);
+    }
+    this.tracked.clear();
+  }
+  async initialize() {
+    const auth = this.runtime.getService("CLOUD_AUTH");
+    if (!auth) {
+      logger.debug("[CloudContainer] CloudAuthService not available, container operations will fail");
+      return;
+    }
+    this.authService = auth;
+    if (this.authService.isAuthenticated()) {
+      const containers = await this.listContainers();
+      for (const container of containers) {
+        this.tracked.set(container.id, {
+          container,
+          pollingTimer: null,
+          healthTimer: null
+        });
+        if (container.status === "pending" || container.status === "building" || container.status === "deploying") {
+          this.startPolling(container.id);
+        }
+        if (container.status === "running") {
+          this.startHealthMonitoring(container.id);
+        }
+      }
+      logger.info(`[CloudContainer] Loaded ${containers.length} existing container(s)`);
+    }
+  }
+  getClient() {
+    return this.authService.getClient();
+  }
+  async createContainer(request) {
+    const client = this.getClient();
+    const defaults = this.containerDefaults;
+    const payload = {
+      name: request.name,
+      project_name: request.project_name,
+      description: request.description,
+      port: request.port ?? defaults.defaultPort,
+      desired_count: request.desired_count ?? 1,
+      cpu: request.cpu ?? defaults.defaultCpu,
+      memory: request.memory ?? defaults.defaultMemory,
+      environment_vars: request.environment_vars ?? {},
+      health_check_path: request.health_check_path ?? "/health",
+      ecr_image_uri: request.ecr_image_uri,
+      ecr_repository_uri: request.ecr_repository_uri,
+      image_tag: request.image_tag,
+      architecture: request.architecture ?? defaults.defaultArchitecture
+    };
+    const response = await client.post("/containers", payload);
+    this.tracked.set(response.data.id, {
+      container: response.data,
+      pollingTimer: null,
+      healthTimer: null
+    });
+    this.startPolling(response.data.id);
+    logger.info(`[CloudContainer] Created container "${request.name}" (id=${response.data.id}, stack=${response.stackName})`);
+    return response;
+  }
+  async listContainers() {
+    const client = this.getClient();
+    const response = await client.get("/containers");
+    return response.data;
+  }
+  async getContainer(containerId) {
+    const client = this.getClient();
+    const response = await client.get(`/containers/${containerId}`);
+    const existing = this.tracked.get(containerId);
+    if (existing) {
+      existing.container = response.data;
+    }
+    return response.data;
+  }
+  async deleteContainer(containerId) {
+    const client = this.getClient();
+    await client.delete(`/containers/${containerId}`);
+    const tracked = this.tracked.get(containerId);
+    if (tracked) {
+      if (tracked.pollingTimer)
+        clearTimeout(tracked.pollingTimer);
+      if (tracked.healthTimer)
+        clearInterval(tracked.healthTimer);
+      this.tracked.delete(containerId);
+    }
+    logger.info(`[CloudContainer] Deleted container ${containerId}`);
+  }
+  startPolling(containerId) {
+    const tracked = this.tracked.get(containerId);
+    if (!tracked)
+      return;
+    let attempt = 0;
+    const maxAttempts = 120;
+    const baseInterval = 5000;
+    const maxInterval = 30000;
+    const poll = async () => {
+      attempt++;
+      if (attempt > maxAttempts) {
+        logger.error(`[CloudContainer] Polling timed out for container ${containerId} after ${maxAttempts} attempts`);
+        return;
+      }
+      const container = await this.getContainer(containerId);
+      const status = container.status;
+      logger.debug(`[CloudContainer] Poll #${attempt} for ${containerId}: status=${status}`);
+      if (status === "running") {
+        logger.info(`[CloudContainer] Container ${containerId} is now running at ${container.load_balancer_url}`);
+        this.startHealthMonitoring(containerId);
+        return;
+      }
+      if (status === "failed" || status === "stopped" || status === "suspended") {
+        logger.warn(`[CloudContainer] Container ${containerId} reached terminal state: ${status}`);
+        if (container.error_message) {
+          logger.error(`[CloudContainer] Error: ${container.error_message}`);
+        }
+        return;
+      }
+      const delay = Math.min(baseInterval * 2 ** Math.min(attempt - 1, 3), maxInterval);
+      tracked.pollingTimer = setTimeout(poll, delay);
+    };
+    tracked.pollingTimer = setTimeout(poll, baseInterval);
+  }
+  async waitForDeployment(containerId, timeoutMs = 900000) {
+    const deadline = Date.now() + timeoutMs;
+    let interval = 5000;
+    const maxInterval = 30000;
+    while (Date.now() < deadline) {
+      const container = await this.getContainer(containerId);
+      if (container.status === "running")
+        return container;
+      if (container.status === "failed") {
+        throw new Error(`Container deployment failed: ${container.error_message ?? "unknown error"}`);
+      }
+      if (container.status === "stopped" || container.status === "suspended") {
+        throw new Error(`Container reached terminal state: ${container.status}`);
+      }
+      await new Promise((resolve) => setTimeout(resolve, interval));
+      interval = Math.min(interval * 1.5, maxInterval);
+    }
+    throw new Error(`Container deployment timed out after ${Math.round(timeoutMs / 1000)}s`);
+  }
+  startHealthMonitoring(containerId) {
+    const tracked = this.tracked.get(containerId);
+    if (!tracked || tracked.healthTimer)
+      return;
+    const interval = 60000;
+    tracked.healthTimer = setInterval(() => {
+      this.getContainerHealth(containerId).then((health) => {
+        if (!health.data.healthy) {
+          logger.warn(`[CloudContainer] Container ${containerId} unhealthy: ${health.data.status}`);
+        }
+      }).catch((err) => {
+        logger.error(`[CloudContainer] Health check failed for ${containerId}: ${err.message}`);
+      });
+    }, interval);
+  }
+  async getContainerHealth(containerId) {
+    const client = this.getClient();
+    return client.get(`/containers/${containerId}/health`);
+  }
+  getTrackedContainers() {
+    return Array.from(this.tracked.values()).map((t) => t.container);
+  }
+  getTrackedContainer(containerId) {
+    return this.tracked.get(containerId)?.container;
+  }
+  isContainerRunning(containerId) {
+    return this.tracked.get(containerId)?.container.status === "running";
+  }
+  getContainerUrl(containerId) {
+    return this.tracked.get(containerId)?.container.load_balancer_url ?? null;
+  }
+}
+export {
+  CloudContainerService
+};
+
+//# debugId=AB03C756166CD3A464756E2164756E21

package/dist/services/cloud-container.js.map

@@ -0,0 +1,11 @@
+{
+  "version": 3,
+  "sources": ["../src/types/cloud.ts", "../src/services/cloud-container.ts"],
+  "sourcesContent": [
+    "/**\n * Cloud-specific types for ElizaCloud integration.\n *\n * These types mirror the eliza-cloud-v2 database schemas and API contracts\n * for containers, auth, credits, bridge messaging, and agent state snapshots.\n */\n\n// ─── Container Types ────────────────────────────────────────────────────────\n\nexport type ContainerStatus =\n  | \"pending\"\n  | \"building\"\n  | \"deploying\"\n  | \"running\"\n  | \"stopped\"\n  | \"failed\"\n  | \"suspended\";\n\nexport type ContainerBillingStatus =\n  | \"active\"\n  | \"warning\"\n  | \"suspended\"\n  | \"shutdown_pending\"\n  | \"archived\";\n\nexport type ContainerArchitecture = \"arm64\" | \"x86_64\";\n\nexport interface CloudContainer {\n  id: string;\n  name: string;\n  project_name: string;\n  description: string | null;\n  organization_id: string;\n  user_id: string;\n  status: ContainerStatus;\n  image_tag: string | null;\n  port: number;\n  desired_count: number;\n  cpu: number;\n  memory: number;\n  architecture: ContainerArchitecture;\n  environment_vars: Record<string, string>;\n  health_check_path: string;\n  load_balancer_url: string | null;\n  ecr_repository_uri: string | null;\n  ecr_image_tag: string | null;\n  cloudformation_stack_name: string | null;\n  billing_status: ContainerBillingStatus;\n  total_billed: string;\n  last_deployed_at: string | null;\n  last_health_check: string | null;\n  deployment_log: string | null;\n  error_message: string | null;\n  metadata: Record<string, unknown>;\n  created_at: string;\n  updated_at: string;\n}\n\nexport interface CreateContainerRequest {\n  name: string;\n  project_name: string;\n  description?: string;\n  port?: number;\n  desired_count?: number;\n  cpu?: number;\n  memory?: number;\n  environment_vars?: Record<string, string>;\n  health_check_path?: string;\n  ecr_image_uri: string;\n  ecr_repository_uri?: string;\n  image_tag?: string;\n  architecture?: ContainerArchitecture;\n}\n\nexport interface CreateContainerResponse {\n  success: boolean;\n  data: CloudContainer;\n  message: string;\n  creditsDeducted: number;\n  creditsRemaining: number;\n  stackName: string;\n  polling: {\n    endpoint: string;\n    intervalMs: number;\n    expectedDurationMs: number;\n  };\n}\n\nexport interface ContainerListResponse {\n  success: boolean;\n  data: CloudContainer[];\n}\n\nexport interface ContainerGetResponse {\n  success: boolean;\n  data: CloudContainer;\n}\n\nexport interface ContainerDeleteResponse {\n  success: boolean;\n  message?: string;\n}\n\nexport interface ContainerHealthResponse {\n  success: boolean;\n  data: {\n    status: string;\n    healthy: boolean;\n    lastCheck: string | null;\n    uptime: number | null;\n  };\n}\n\n// ─── Auth Types ─────────────────────────────────────────────────────────────\n\nexport type DevicePlatform = \"ios\" | \"android\" | \"macos\" | \"windows\" | \"linux\" | \"web\";\n\nexport interface DeviceAuthRequest {\n  deviceId: string;\n  platform: DevicePlatform;\n  appVersion: string;\n  deviceName?: string;\n}\n\nexport interface DeviceAuthResponse {\n  success: boolean;\n  data: {\n    apiKey: string;\n    userId: string;\n    organizationId: string;\n    credits: number;\n    isNew: boolean;\n  };\n}\n\nexport interface CloudCredentials {\n  apiKey: string;\n  userId: string;\n  organizationId: string;\n  authenticatedAt: number;\n}\n\n// ─── Credits Types ──────────────────────────────────────────────────────────\n\nexport interface CreditBalanceResponse {\n  success: boolean;\n  data: {\n    balance: number;\n    currency: string;\n  };\n}\n\nexport interface CreditSummaryResponse {\n  success: boolean;\n  data: {\n    balance: number;\n    totalSpent: number;\n    totalAdded: number;\n    recentTransactions: CreditTransaction[];\n  };\n}\n\nexport interface CreditTransaction {\n  id: string;\n  amount: number;\n  description: string;\n  type: \"credit\" | \"debit\";\n  created_at: string;\n}\n\n// ─── Bridge Types ───────────────────────────────────────────────────────────\n\nexport type BridgeConnectionState = \"disconnected\" | \"connecting\" | \"connected\" | \"reconnecting\";\n\nexport interface BridgeMessage {\n  jsonrpc: \"2.0\";\n  id?: string | number;\n  method?: string;\n  params?: Record<string, unknown>;\n  result?: unknown;\n  error?: BridgeError;\n}\n\nexport interface BridgeError {\n  code: number;\n  message: string;\n  data?: unknown;\n}\n\nexport type BridgeMessageHandler = (message: BridgeMessage) => void;\n\nexport interface BridgeConnection {\n  containerId: string;\n  state: BridgeConnectionState;\n  connectedAt: number | null;\n  lastHeartbeat: number | null;\n  reconnectAttempts: number;\n}\n\n// ─── Managed Gateway Relay Types ───────────────────────────────────────────\n\nexport interface GatewayRelaySession {\n  id: string;\n  organizationId: string;\n  userId: string;\n  runtimeAgentId: string;\n  agentName: string | null;\n  platform: \"local-runtime\";\n  createdAt: string;\n  lastSeenAt: string;\n}\n\nexport interface GatewayRelayRequest {\n  jsonrpc: \"2.0\";\n  id?: string | number;\n  method: string;\n  params?: Record<string, unknown>;\n}\n\nexport interface GatewayRelayResponse {\n  jsonrpc: \"2.0\";\n  id?: string | number;\n  result?: Record<string, unknown>;\n  error?: BridgeError;\n}\n\nexport interface GatewayRelayRequestEnvelope {\n  requestId: string;\n  rpc: GatewayRelayRequest;\n  queuedAt: string;\n}\n\nexport interface RegisterGatewayRelaySessionResponse {\n  success: boolean;\n  data: {\n    session: GatewayRelaySession;\n  };\n}\n\nexport interface PollGatewayRelayResponse {\n  success: boolean;\n  data: {\n    request: GatewayRelayRequestEnvelope | null;\n  };\n}\n\n// ─── Snapshot / Backup Types ────────────────────────────────────────────────\n\nexport type SnapshotType = \"manual\" | \"auto\" | \"pre-eviction\";\n\nexport interface AgentSnapshot {\n  id: string;\n  containerId: string;\n  organizationId: string;\n  snapshotType: SnapshotType;\n  storageUrl: string;\n  sizeBytes: number;\n  agentConfig: Record<string, unknown>;\n  metadata: Record<string, unknown>;\n  created_at: string;\n}\n\nexport interface CreateSnapshotRequest {\n  snapshotType?: SnapshotType;\n  metadata?: Record<string, unknown>;\n}\n\nexport interface CreateSnapshotResponse {\n  success: boolean;\n  data: AgentSnapshot;\n}\n\nexport interface SnapshotListResponse {\n  success: boolean;\n  data: AgentSnapshot[];\n}\n\nexport interface RestoreSnapshotRequest {\n  snapshotId: string;\n}\n\nexport interface RestoreSnapshotResponse {\n  success: boolean;\n  message: string;\n}\n\n// ─── Cloud Config Types ─────────────────────────────────────────────────────\n\nexport type InferenceMode = \"cloud\" | \"byok\" | \"local\";\n\nexport interface CloudPluginConfig {\n  /** Enable ElizaCloud integration. */\n  enabled: boolean;\n  /** ElizaCloud API base URL. */\n  baseUrl: string;\n  /** Stored API key for authenticated requests. */\n  apiKey?: string;\n  /** Device ID used for auto-signup authentication. */\n  deviceId?: string;\n  /** Platform identifier. */\n  platform?: DevicePlatform;\n  /** Inference mode: cloud (ElizaCloud proxied), byok (user keys), local (no cloud). */\n  inferenceMode: InferenceMode;\n  /** Auto-deploy agents to cloud on creation. */\n  autoProvision: boolean;\n  /** Bridge reconnection settings. */\n  bridge: {\n    reconnectIntervalMs: number;\n    maxReconnectAttempts: number;\n    heartbeatIntervalMs: number;\n  };\n  /** Auto-backup settings. */\n  backup: {\n    autoBackupIntervalMs: number;\n    maxSnapshots: number;\n  };\n  /** Default container settings for new deployments. */\n  container: {\n    defaultImage: string;\n    defaultArchitecture: ContainerArchitecture;\n    defaultCpu: number;\n    defaultMemory: number;\n    defaultPort: number;\n  };\n}\n\nexport const DEFAULT_CLOUD_CONFIG: CloudPluginConfig = {\n  enabled: false,\n  baseUrl: \"https://www.elizacloud.ai/api/v1\",\n  inferenceMode: \"cloud\",\n  autoProvision: false,\n  bridge: {\n    reconnectIntervalMs: 3000,\n    maxReconnectAttempts: 20,\n    heartbeatIntervalMs: 30_000,\n  },\n  backup: {\n    autoBackupIntervalMs: 3_600_000, // 1 hour\n    maxSnapshots: 10,\n  },\n  container: {\n    defaultImage: \"elizaos/agent:latest\",\n    defaultArchitecture: \"arm64\",\n    defaultCpu: 1792,\n    defaultMemory: 1792,\n    defaultPort: 3000,\n  },\n};\n\n// ─── API Error Types ────────────────────────────────────────────────────────\n\nexport type { CloudApiErrorBody } from \"@elizaos/cloud-sdk\";\nexport {\n  CloudApiError,\n  InsufficientCreditsError,\n} from \"@elizaos/cloud-sdk\";\n",
+    "/**\n * CloudContainerService — Manages container lifecycle through ElizaCloud API.\n *\n * Handles creation, listing, status polling, health monitoring, and deletion\n * of ECS-backed containers. Deployments are async (CloudFormation takes 8-12\n * minutes), so `waitForDeployment` polls with exponential backoff.\n */\n\nimport { type IAgentRuntime, logger, Service } from \"@elizaos/core\";\nimport type {\n  CloudContainer,\n  ContainerDeleteResponse,\n  ContainerGetResponse,\n  ContainerHealthResponse,\n  ContainerListResponse,\n  CreateContainerRequest,\n  CreateContainerResponse,\n} from \"../types/cloud\";\nimport { DEFAULT_CLOUD_CONFIG } from \"../types/cloud\";\nimport type { CloudApiClient } from \"../utils/cloud-api\";\nimport type { CloudAuthService } from \"./cloud-auth\";\n\n/** Active containers tracked locally for quick access. */\ninterface TrackedContainer {\n  container: CloudContainer;\n  pollingTimer: ReturnType<typeof setTimeout> | null;\n  healthTimer: ReturnType<typeof setInterval> | null;\n}\n\nexport class CloudContainerService extends Service {\n  static serviceType = \"CLOUD_CONTAINER\";\n  capabilityDescription = \"ElizaCloud container provisioning and lifecycle management\";\n\n  private authService!: CloudAuthService;\n  private readonly containerDefaults = DEFAULT_CLOUD_CONFIG.container;\n  private tracked: Map<string, TrackedContainer> = new Map();\n\n  static async start(runtime: IAgentRuntime): Promise<Service> {\n    const service = new CloudContainerService(runtime);\n    await service.initialize();\n    return service;\n  }\n\n  async stop(): Promise<void> {\n    for (const [, tracked] of this.tracked) {\n      if (tracked.pollingTimer) clearTimeout(tracked.pollingTimer);\n      if (tracked.healthTimer) clearInterval(tracked.healthTimer);\n    }\n    this.tracked.clear();\n  }\n\n  private async initialize(): Promise<void> {\n    // Get auth service reference\n    const auth = this.runtime.getService(\"CLOUD_AUTH\");\n    if (!auth) {\n      logger.debug(\n        \"[CloudContainer] CloudAuthService not available, container operations will fail\"\n      );\n      return;\n    }\n    this.authService = auth as CloudAuthService;\n\n    // Load existing containers\n    if (this.authService.isAuthenticated()) {\n      const containers = await this.listContainers();\n      for (const container of containers) {\n        this.tracked.set(container.id, {\n          container,\n          pollingTimer: null,\n          healthTimer: null,\n        });\n\n        // Resume polling for containers that are still deploying\n        if (\n          container.status === \"pending\" ||\n          container.status === \"building\" ||\n          container.status === \"deploying\"\n        ) {\n          this.startPolling(container.id);\n        }\n\n        // Start health monitoring for running containers\n        if (container.status === \"running\") {\n          this.startHealthMonitoring(container.id);\n        }\n      }\n      logger.info(`[CloudContainer] Loaded ${containers.length} existing container(s)`);\n    }\n  }\n\n  private getClient(): CloudApiClient {\n    return this.authService.getClient();\n  }\n\n  // ─── CRUD ───────────────────────────────────────────────────────────────\n\n  async createContainer(request: CreateContainerRequest): Promise<CreateContainerResponse> {\n    const client = this.getClient();\n    const defaults = this.containerDefaults;\n\n    const payload: Record<string, unknown> = {\n      name: request.name,\n      project_name: request.project_name,\n      description: request.description,\n      port: request.port ?? defaults.defaultPort,\n      desired_count: request.desired_count ?? 1,\n      cpu: request.cpu ?? defaults.defaultCpu,\n      memory: request.memory ?? defaults.defaultMemory,\n      environment_vars: request.environment_vars ?? {},\n      health_check_path: request.health_check_path ?? \"/health\",\n      ecr_image_uri: request.ecr_image_uri,\n      ecr_repository_uri: request.ecr_repository_uri,\n      image_tag: request.image_tag,\n      architecture: request.architecture ?? defaults.defaultArchitecture,\n    };\n\n    const response = await client.post<CreateContainerResponse>(\"/containers\", payload);\n\n    // Track the new container\n    this.tracked.set(response.data.id, {\n      container: response.data,\n      pollingTimer: null,\n      healthTimer: null,\n    });\n\n    // Start polling for deployment completion\n    this.startPolling(response.data.id);\n\n    logger.info(\n      `[CloudContainer] Created container \"${request.name}\" (id=${response.data.id}, stack=${response.stackName})`\n    );\n\n    return response;\n  }\n\n  async listContainers(): Promise<CloudContainer[]> {\n    const client = this.getClient();\n    const response = await client.get<ContainerListResponse>(\"/containers\");\n    return response.data;\n  }\n\n  async getContainer(containerId: string): Promise<CloudContainer> {\n    const client = this.getClient();\n    const response = await client.get<ContainerGetResponse>(`/containers/${containerId}`);\n\n    // Update local tracking\n    const existing = this.tracked.get(containerId);\n    if (existing) {\n      existing.container = response.data;\n    }\n\n    return response.data;\n  }\n\n  async deleteContainer(containerId: string): Promise<void> {\n    const client = this.getClient();\n    await client.delete<ContainerDeleteResponse>(`/containers/${containerId}`);\n\n    // Stop tracking\n    const tracked = this.tracked.get(containerId);\n    if (tracked) {\n      if (tracked.pollingTimer) clearTimeout(tracked.pollingTimer);\n      if (tracked.healthTimer) clearInterval(tracked.healthTimer);\n      this.tracked.delete(containerId);\n    }\n\n    logger.info(`[CloudContainer] Deleted container ${containerId}`);\n  }\n\n  // ─── Deployment Polling ────────────────────────────────────────────────\n\n  /**\n   * Poll container status until it reaches a terminal state (running, failed, stopped).\n   * Uses exponential backoff: 5s, 10s, 20s, 30s, 30s, ...\n   */\n  private startPolling(containerId: string): void {\n    const tracked = this.tracked.get(containerId);\n    if (!tracked) return;\n\n    let attempt = 0;\n    const maxAttempts = 120; // ~1 hour with backoff\n    const baseInterval = 5_000;\n    const maxInterval = 30_000;\n\n    const poll = async () => {\n      attempt++;\n      if (attempt > maxAttempts) {\n        logger.error(\n          `[CloudContainer] Polling timed out for container ${containerId} after ${maxAttempts} attempts`\n        );\n        return;\n      }\n\n      const container = await this.getContainer(containerId);\n      const status = container.status;\n\n      logger.debug(`[CloudContainer] Poll #${attempt} for ${containerId}: status=${status}`);\n\n      if (status === \"running\") {\n        logger.info(\n          `[CloudContainer] Container ${containerId} is now running at ${container.load_balancer_url}`\n        );\n        this.startHealthMonitoring(containerId);\n        return;\n      }\n\n      if (status === \"failed\" || status === \"stopped\" || status === \"suspended\") {\n        logger.warn(`[CloudContainer] Container ${containerId} reached terminal state: ${status}`);\n        if (container.error_message) {\n          logger.error(`[CloudContainer] Error: ${container.error_message}`);\n        }\n        return;\n      }\n\n      // Schedule next poll with exponential backoff\n      const delay = Math.min(baseInterval * 2 ** Math.min(attempt - 1, 3), maxInterval);\n      tracked.pollingTimer = setTimeout(poll, delay);\n    };\n\n    tracked.pollingTimer = setTimeout(poll, baseInterval);\n  }\n\n  /**\n   * Wait for a container to reach \"running\" status. Returns the updated container.\n   * This is the synchronous API for actions that need to block.\n   */\n  async waitForDeployment(containerId: string, timeoutMs = 900_000): Promise<CloudContainer> {\n    const deadline = Date.now() + timeoutMs;\n    let interval = 5_000;\n    const maxInterval = 30_000;\n\n    while (Date.now() < deadline) {\n      const container = await this.getContainer(containerId);\n\n      if (container.status === \"running\") return container;\n      if (container.status === \"failed\") {\n        throw new Error(\n          `Container deployment failed: ${container.error_message ?? \"unknown error\"}`\n        );\n      }\n      if (container.status === \"stopped\" || container.status === \"suspended\") {\n        throw new Error(`Container reached terminal state: ${container.status}`);\n      }\n\n      await new Promise((resolve) => setTimeout(resolve, interval));\n      interval = Math.min(interval * 1.5, maxInterval);\n    }\n\n    throw new Error(`Container deployment timed out after ${Math.round(timeoutMs / 1000)}s`);\n  }\n\n  // ─── Health Monitoring ─────────────────────────────────────────────────\n\n  private startHealthMonitoring(containerId: string): void {\n    const tracked = this.tracked.get(containerId);\n    if (!tracked || tracked.healthTimer) return;\n\n    const interval = 60_000; // Check every 60 seconds\n\n    tracked.healthTimer = setInterval(() => {\n      this.getContainerHealth(containerId)\n        .then((health) => {\n          if (!health.data.healthy) {\n            logger.warn(\n              `[CloudContainer] Container ${containerId} unhealthy: ${health.data.status}`\n            );\n          }\n        })\n        .catch((err: Error) => {\n          logger.error(`[CloudContainer] Health check failed for ${containerId}: ${err.message}`);\n        });\n    }, interval);\n  }\n\n  async getContainerHealth(containerId: string): Promise<ContainerHealthResponse> {\n    const client = this.getClient();\n    return client.get<ContainerHealthResponse>(`/containers/${containerId}/health`);\n  }\n\n  // ─── Accessors ─────────────────────────────────────────────────────────\n\n  getTrackedContainers(): CloudContainer[] {\n    return Array.from(this.tracked.values()).map((t) => t.container);\n  }\n\n  getTrackedContainer(containerId: string): CloudContainer | undefined {\n    return this.tracked.get(containerId)?.container;\n  }\n\n  isContainerRunning(containerId: string): boolean {\n    return this.tracked.get(containerId)?.container.status === \"running\";\n  }\n\n  getContainerUrl(containerId: string): string | null {\n    return this.tracked.get(containerId)?.container.load_balancer_url ?? null;\n  }\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;;;;;AAgWA;AAAA;AAAA;AAAA;AA1BO,IAAM,uBAA0C;AAAA,EACrD,SAAS;AAAA,EACT,SAAS;AAAA,EACT,eAAe;AAAA,EACf,eAAe;AAAA,EACf,QAAQ;AAAA,IACN,qBAAqB;AAAA,IACrB,sBAAsB;AAAA,IACtB,qBAAqB;AAAA,EACvB;AAAA,EACA,QAAQ;AAAA,IACN,sBAAsB;AAAA,IACtB,cAAc;AAAA,EAChB;AAAA,EACA,WAAW;AAAA,IACT,cAAc;AAAA,IACd,qBAAqB;AAAA,IACrB,YAAY;AAAA,IACZ,eAAe;AAAA,IACf,aAAa;AAAA,EACf;AACF;;;ACnVA;AAqBO,MAAM,8BAA8B,QAAQ;AAAA,SAC1C,cAAc;AAAA,EACrB,wBAAwB;AAAA,EAEhB;AAAA,EACS,oBAAoB,qBAAqB;AAAA,EAClD,UAAyC,IAAI;AAAA,cAExC,MAAK,CAAC,SAA0C;AAAA,IAC3D,MAAM,UAAU,IAAI,sBAAsB,OAAO;AAAA,IACjD,MAAM,QAAQ,WAAW;AAAA,IACzB,OAAO;AAAA;AAAA,OAGH,KAAI,GAAkB;AAAA,IAC1B,cAAc,YAAY,KAAK,SAAS;AAAA,MACtC,IAAI,QAAQ;AAAA,QAAc,aAAa,QAAQ,YAAY;AAAA,MAC3D,IAAI,QAAQ;AAAA,QAAa,cAAc,QAAQ,WAAW;AAAA,IAC5D;AAAA,IACA,KAAK,QAAQ,MAAM;AAAA;AAAA,OAGP,WAAU,GAAkB;AAAA,IAExC,MAAM,OAAO,KAAK,QAAQ,WAAW,YAAY;AAAA,IACjD,IAAI,CAAC,MAAM;AAAA,MACT,OAAO,MACL,iFACF;AAAA,MACA;AAAA,IACF;AAAA,IACA,KAAK,cAAc;AAAA,IAGnB,IAAI,KAAK,YAAY,gBAAgB,GAAG;AAAA,MACtC,MAAM,aAAa,MAAM,KAAK,eAAe;AAAA,MAC7C,WAAW,aAAa,YAAY;AAAA,QAClC,KAAK,QAAQ,IAAI,UAAU,IAAI;AAAA,UAC7B;AAAA,UACA,cAAc;AAAA,UACd,aAAa;AAAA,QACf,CAAC;AAAA,QAGD,IACE,UAAU,WAAW,aACrB,UAAU,WAAW,cACrB,UAAU,WAAW,aACrB;AAAA,UACA,KAAK,aAAa,UAAU,EAAE;AAAA,QAChC;AAAA,QAGA,IAAI,UAAU,WAAW,WAAW;AAAA,UAClC,KAAK,sBAAsB,UAAU,EAAE;AAAA,QACzC;AAAA,MACF;AAAA,MACA,OAAO,KAAK,2BAA2B,WAAW,8BAA8B;AAAA,IAClF;AAAA;AAAA,EAGM,SAAS,GAAmB;AAAA,IAClC,OAAO,KAAK,YAAY,UAAU;AAAA;AAAA,OAK9B,gBAAe,CAAC,SAAmE;AAAA,IACvF,MAAM,SAAS,KAAK,UAAU;AAAA,IAC9B,MAAM,WAAW,KAAK;AAAA,IAEtB,MAAM,UAAmC;AAAA,MACvC,MAAM,QAAQ;AAAA,MACd,cAAc,QAAQ;AAAA,MACtB,aAAa,QAAQ;AAAA,MACrB,MAAM,QAAQ,QAAQ,SAAS;AAAA,MAC/B,eAAe,QAAQ,iBAAiB;AAAA,MACxC,KAAK,QAAQ,OAAO,SAAS;AAAA,MAC7B,QAAQ,QAAQ,UAAU,SAAS;AAAA,MACnC,kBAAkB,QAAQ,oBAAoB,CAAC;AAAA,MAC/C,mBAAmB,QAAQ,qBAAqB;AAAA,MAChD,eAAe,QAAQ;AAAA,MACvB,oBAAoB,QAAQ;AAAA,MAC5B,WAAW,QAAQ;AAAA,MACnB,cAAc,QAAQ,gBAAgB,SAAS;AAAA,IACjD;AAAA,IAEA,MAAM,WAAW,MAAM,OAAO,KAA8B,eAAe,OAAO;AAAA,IAGlF,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI;AAAA,MACjC,WAAW,SAAS;AAAA,MACpB,cAAc;AAAA,MACd,aAAa;AAAA,IACf,CAAC;AAAA,IAGD,KAAK,aAAa,SAAS,KAAK,EAAE;AAAA,IAElC,OAAO,KACL,uCAAuC,QAAQ,aAAa,SAAS,KAAK,aAAa,SAAS,YAClG;AAAA,IAEA,OAAO;AAAA;AAAA,OAGH,eAAc,GAA8B;AAAA,IAChD,MAAM,SAAS,KAAK,UAAU;AAAA,IAC9B,MAAM,WAAW,MAAM,OAAO,IAA2B,aAAa;AAAA,IACtE,OAAO,SAAS;AAAA;AAAA,OAGZ,aAAY,CAAC,aAA8C;AAAA,IAC/D,MAAM,SAAS,KAAK,UAAU;AAAA,IAC9B,MAAM,WAAW,MAAM,OAAO,IAA0B,eAAe,aAAa;AAAA,IAGpF,MAAM,WAAW,KAAK,QAAQ,IAAI,WAAW;AAAA,IAC7C,IAAI,UAAU;AAAA,MACZ,SAAS,YAAY,SAAS;AAAA,IAChC;AAAA,IAEA,OAAO,SAAS;AAAA;AAAA,OAGZ,gBAAe,CAAC,aAAoC;AAAA,IACxD,MAAM,SAAS,KAAK,UAAU;AAAA,IAC9B,MAAM,OAAO,OAAgC,eAAe,aAAa;AAAA,IAGzE,MAAM,UAAU,KAAK,QAAQ,IAAI,WAAW;AAAA,IAC5C,IAAI,SAAS;AAAA,MACX,IAAI,QAAQ;AAAA,QAAc,aAAa,QAAQ,YAAY;AAAA,MAC3D,IAAI,QAAQ;AAAA,QAAa,cAAc,QAAQ,WAAW;AAAA,MAC1D,KAAK,QAAQ,OAAO,WAAW;AAAA,IACjC;AAAA,IAEA,OAAO,KAAK,sCAAsC,aAAa;AAAA;AAAA,EASzD,YAAY,CAAC,aAA2B;AAAA,IAC9C,MAAM,UAAU,KAAK,QAAQ,IAAI,WAAW;AAAA,IAC5C,IAAI,CAAC;AAAA,MAAS;AAAA,IAEd,IAAI,UAAU;AAAA,IACd,MAAM,cAAc;AAAA,IACpB,MAAM,eAAe;AAAA,IACrB,MAAM,cAAc;AAAA,IAEpB,MAAM,OAAO,YAAY;AAAA,MACvB;AAAA,MACA,IAAI,UAAU,aAAa;AAAA,QACzB,OAAO,MACL,oDAAoD,qBAAqB,sBAC3E;AAAA,QACA;AAAA,MACF;AAAA,MAEA,MAAM,YAAY,MAAM,KAAK,aAAa,WAAW;AAAA,MACrD,MAAM,SAAS,UAAU;AAAA,MAEzB,OAAO,MAAM,0BAA0B,eAAe,uBAAuB,QAAQ;AAAA,MAErF,IAAI,WAAW,WAAW;AAAA,QACxB,OAAO,KACL,8BAA8B,iCAAiC,UAAU,mBAC3E;AAAA,QACA,KAAK,sBAAsB,WAAW;AAAA,QACtC;AAAA,MACF;AAAA,MAEA,IAAI,WAAW,YAAY,WAAW,aAAa,WAAW,aAAa;AAAA,QACzE,OAAO,KAAK,8BAA8B,uCAAuC,QAAQ;AAAA,QACzF,IAAI,UAAU,eAAe;AAAA,UAC3B,OAAO,MAAM,2BAA2B,UAAU,eAAe;AAAA,QACnE;AAAA,QACA;AAAA,MACF;AAAA,MAGA,MAAM,QAAQ,KAAK,IAAI,eAAe,KAAK,KAAK,IAAI,UAAU,GAAG,CAAC,GAAG,WAAW;AAAA,MAChF,QAAQ,eAAe,WAAW,MAAM,KAAK;AAAA;AAAA,IAG/C,QAAQ,eAAe,WAAW,MAAM,YAAY;AAAA;AAAA,OAOhD,kBAAiB,CAAC,aAAqB,YAAY,QAAkC;AAAA,IACzF,MAAM,WAAW,KAAK,IAAI,IAAI;AAAA,IAC9B,IAAI,WAAW;AAAA,IACf,MAAM,cAAc;AAAA,IAEpB,OAAO,KAAK,IAAI,IAAI,UAAU;AAAA,MAC5B,MAAM,YAAY,MAAM,KAAK,aAAa,WAAW;AAAA,MAErD,IAAI,UAAU,WAAW;AAAA,QAAW,OAAO;AAAA,MAC3C,IAAI,UAAU,WAAW,UAAU;AAAA,QACjC,MAAM,IAAI,MACR,gCAAgC,UAAU,iBAAiB,iBAC7D;AAAA,MACF;AAAA,MACA,IAAI,UAAU,WAAW,aAAa,UAAU,WAAW,aAAa;AAAA,QACtE,MAAM,IAAI,MAAM,qCAAqC,UAAU,QAAQ;AAAA,MACzE;AAAA,MAEA,MAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,QAAQ,CAAC;AAAA,MAC5D,WAAW,KAAK,IAAI,WAAW,KAAK,WAAW;AAAA,IACjD;AAAA,IAEA,MAAM,IAAI,MAAM,wCAAwC,KAAK,MAAM,YAAY,IAAI,IAAI;AAAA;AAAA,EAKjF,qBAAqB,CAAC,aAA2B;AAAA,IACvD,MAAM,UAAU,KAAK,QAAQ,IAAI,WAAW;AAAA,IAC5C,IAAI,CAAC,WAAW,QAAQ;AAAA,MAAa;AAAA,IAErC,MAAM,WAAW;AAAA,IAEjB,QAAQ,cAAc,YAAY,MAAM;AAAA,MACtC,KAAK,mBAAmB,WAAW,EAChC,KAAK,CAAC,WAAW;AAAA,QAChB,IAAI,CAAC,OAAO,KAAK,SAAS;AAAA,UACxB,OAAO,KACL,8BAA8B,0BAA0B,OAAO,KAAK,QACtE;AAAA,QACF;AAAA,OACD,EACA,MAAM,CAAC,QAAe;AAAA,QACrB,OAAO,MAAM,4CAA4C,gBAAgB,IAAI,SAAS;AAAA,OACvF;AAAA,OACF,QAAQ;AAAA;AAAA,OAGP,mBAAkB,CAAC,aAAuD;AAAA,IAC9E,MAAM,SAAS,KAAK,UAAU;AAAA,IAC9B,OAAO,OAAO,IAA6B,eAAe,oBAAoB;AAAA;AAAA,EAKhF,oBAAoB,GAAqB;AAAA,IACvC,OAAO,MAAM,KAAK,KAAK,QAAQ,OAAO,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS;AAAA;AAAA,EAGjE,mBAAmB,CAAC,aAAiD;AAAA,IACnE,OAAO,KAAK,QAAQ,IAAI,WAAW,GAAG;AAAA;AAAA,EAGxC,kBAAkB,CAAC,aAA8B;AAAA,IAC/C,OAAO,KAAK,QAAQ,IAAI,WAAW,GAAG,UAAU,WAAW;AAAA;AAAA,EAG7D,eAAe,CAAC,aAAoC;AAAA,IAClD,OAAO,KAAK,QAAQ,IAAI,WAAW,GAAG,UAAU,qBAAqB;AAAA;AAEzE;",
+  "debugId": "AB03C756166CD3A464756E2164756E21",
+  "names": []
+}

package/dist/services/cloud-credential-provider.d.ts

@@ -0,0 +1,55 @@
+/**
+ * CloudCredentialProvider — bridges plugin-workflow's `CredentialProvider`
+ * service slot to Eliza Cloud's per-connector OAuth surface.
+ *
+ * Resolution path on `resolve(userId, credType)`:
+ *   1. Look up `credType` in `credTypeToConnector` — return `null` for unmapped.
+ *   2. GET `/eliza/<connector>/status` via the authenticated cloud client to
+ *      check whether the user already has an active connection.
+ *   3. When connected → see `RAW_TOKEN_GAP` below; we currently return
+ *      `needs_auth` because the cloud does not expose raw OAuth tokens.
+ *   4. When not connected → POST `/eliza/<connector>/connect/initiate` with
+ *      the mapped `capabilities`; return `needs_auth` with the authUrl the
+ *      cloud issued. The workflow plugin surfaces this to the user.
+ *
+ * RAW_TOKEN_GAP
+ * -------------
+ * Plugin-workflow's `credential_data` shape requires the actual access token
+ * (so the workflow engine can inject it into a node's HTTP calls). The cloud
+ * connector endpoints (Google / GitHub / Discord) intentionally do **not**
+ * vend raw tokens to the local plugin — they hold the token server-side and
+ * proxy connector calls under `/eliza/<connector>/<action>` (e.g.
+ * `/eliza/google/gmail/send`). Bridging that proxy model into the workflow
+ * engine is a separate piece of work (either: extend the workflow engine to
+ * dispatch through cloud proxies, or add a token-vending endpoint cloud-side
+ * for clients with a verified pairing). Until then this provider is honest:
+ * it confirms the connection exists and either reports it cannot inject
+ * (`null` / `needs_auth`) or — once the cloud exposes a vending endpoint —
+ * fetches and returns the credential payload.
+ *
+ * No fallbacks. No fake tokens. The provider fails closed.
+ */
+import { type IAgentRuntime, Service } from "@elizaos/core";
+export type CredentialProviderResult = {
+    status: "credential_data";
+    data: Record<string, unknown>;
+} | {
+    status: "needs_auth";
+    authUrl: string;
+} | null;
+export interface CheckCredentialTypesResult {
+    supported: string[];
+    unsupported: string[];
+}
+export declare class CloudCredentialProvider extends Service {
+    static readonly serviceType = "workflow_credential_provider";
+    capabilityDescription: string;
+    static start(runtime: IAgentRuntime): Promise<CloudCredentialProvider>;
+    stop(): Promise<void>;
+    resolve(_userId: string, credType: string): Promise<CredentialProviderResult>;
+    checkCredentialTypes(credTypes: string[]): CheckCredentialTypesResult;
+    private getCloudClient;
+    private fetchConnectorStatus;
+    private initiateConnectorAuth;
+}
+//# sourceMappingURL=cloud-credential-provider.d.ts.map

package/dist/services/cloud-credential-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-credential-provider.d.ts","sourceRoot":"","sources":["../../src/services/cloud-credential-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,KAAK,aAAa,EAAU,OAAO,EAAE,MAAM,eAAe,CAAC;AAQpE,MAAM,MAAM,wBAAwB,GAChC;IAAE,MAAM,EAAE,iBAAiB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAC5D;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACzC,IAAI,CAAC;AAET,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAoCD,qBAAa,uBAAwB,SAAQ,OAAO;IAClD,gBAAyB,WAAW,kCAAqC;IAEhE,qBAAqB,SACoD;WAErE,KAAK,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAI7D,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAI9B,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC;IA2CnF,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,0BAA0B;IAerE,OAAO,CAAC,cAAc;YAYR,oBAAoB;YAWpB,qBAAqB;CAmBpC"}

package/dist/services/cloud-credential-provider.js

@@ -0,0 +1,190 @@
+import { createRequire } from "node:module";
+var __defProp = Object.defineProperty;
+var __returnValue = (v) => v;
+function __exportSetter(name, newValue) {
+  this[name] = __returnValue.bind(null, newValue);
+}
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, {
+      get: all[name],
+      enumerable: true,
+      configurable: true,
+      set: __exportSetter.bind(all, name)
+    });
+};
+var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+var __require = /* @__PURE__ */ createRequire(import.meta.url);
+
+// src/lib/credential-type-map.ts
+var credTypeToConnector = new Map([
+  [
+    "gmailOAuth2",
+    {
+      connector: "google",
+      capabilities: ["google.gmail.triage", "google.gmail.send", "google.gmail.manage"],
+      friendlyName: "Gmail"
+    }
+  ],
+  [
+    "gmailOAuth2Api",
+    {
+      connector: "google",
+      capabilities: ["google.gmail.triage", "google.gmail.send", "google.gmail.manage"],
+      friendlyName: "Gmail"
+    }
+  ],
+  [
+    "googleCalendarOAuth2Api",
+    {
+      connector: "google",
+      capabilities: ["google.calendar.read", "google.calendar.write"],
+      friendlyName: "Google Calendar"
+    }
+  ],
+  [
+    "googleSheetsOAuth2Api",
+    {
+      connector: "google",
+      capabilities: ["google.basic_identity"],
+      friendlyName: "Google Sheets"
+    }
+  ],
+  [
+    "githubOAuth2Api",
+    {
+      connector: "github",
+      friendlyName: "GitHub"
+    }
+  ],
+  [
+    "githubApi",
+    {
+      connector: "github",
+      friendlyName: "GitHub"
+    }
+  ],
+  [
+    "discordApi",
+    {
+      connector: "discord",
+      friendlyName: "Discord"
+    }
+  ],
+  [
+    "discordBotApi",
+    {
+      connector: "discord",
+      friendlyName: "Discord (Bot)"
+    }
+  ]
+]);
+var supportedCredTypes = new Set(credTypeToConnector.keys());
+
+// src/services/cloud-credential-provider.ts
+import { logger, Service } from "@elizaos/core";
+var WORKFLOW_CREDENTIAL_PROVIDER_TYPE = "workflow_credential_provider";
+function isCloudAuthLike(value) {
+  if (!value || typeof value !== "object") {
+    return false;
+  }
+  return typeof Reflect.get(value, "getClient") === "function";
+}
+function isCloudClientLike(value) {
+  if (!value || typeof value !== "object") {
+    return false;
+  }
+  const get = Reflect.get(value, "get");
+  const post = Reflect.get(value, "post");
+  return (get === undefined || typeof get === "function") && (post === undefined || typeof post === "function");
+}
+
+class CloudCredentialProvider extends Service {
+  static serviceType = WORKFLOW_CREDENTIAL_PROVIDER_TYPE;
+  capabilityDescription = "Resolves workflow node credentials via the user's paired Eliza Cloud account.";
+  static async start(runtime) {
+    return new CloudCredentialProvider(runtime);
+  }
+  async stop() {}
+  async resolve(_userId, credType) {
+    const mapping = credTypeToConnector.get(credType);
+    if (!mapping) {
+      return null;
+    }
+    const client = this.getCloudClient();
+    if (!client) {
+      logger.debug({ src: "plugin:elizacloud:credential-provider", credType }, "CLOUD_AUTH unavailable — cannot resolve workflow credentials");
+      return null;
+    }
+    const status = await this.fetchConnectorStatus(client, mapping.connector);
+    if (!status.connected) {
+      const authUrl = status.authUrl ?? await this.initiateConnectorAuth(client, mapping.connector, mapping.capabilities);
+      if (!authUrl) {
+        return null;
+      }
+      return { status: "needs_auth", authUrl };
+    }
+    const reauthUrl = await this.initiateConnectorAuth(client, mapping.connector, mapping.capabilities);
+    if (reauthUrl) {
+      return { status: "needs_auth", authUrl: reauthUrl };
+    }
+    return null;
+  }
+  checkCredentialTypes(credTypes) {
+    const supported = [];
+    const unsupported = [];
+    for (const t of credTypes) {
+      if (supportedCredTypes.has(t)) {
+        supported.push(t);
+      } else {
+        unsupported.push(t);
+      }
+    }
+    return { supported, unsupported };
+  }
+  getCloudClient() {
+    const cloudAuth = this.runtime.getService("CLOUD_AUTH");
+    if (!isCloudAuthLike(cloudAuth)) {
+      return null;
+    }
+    const client = cloudAuth.getClient?.();
+    if (!isCloudClientLike(client)) {
+      return null;
+    }
+    return client;
+  }
+  async fetchConnectorStatus(client, connector) {
+    if (typeof client.get !== "function") {
+      return { connected: false };
+    }
+    const raw = await client.get(`/eliza/${connector}/status`);
+    return shapeConnectorStatus(raw);
+  }
+  async initiateConnectorAuth(client, connector, capabilities) {
+    if (typeof client.post !== "function") {
+      return null;
+    }
+    const body = {};
+    if (capabilities && capabilities.length > 0) {
+      body.capabilities = [...capabilities];
+    }
+    const raw = await client.post(`/eliza/${connector}/connect/initiate`, body);
+    const authUrl = raw?.authUrl;
+    return typeof authUrl === "string" && authUrl.length > 0 ? authUrl : null;
+  }
+}
+function shapeConnectorStatus(raw) {
+  if (!raw || typeof raw !== "object") {
+    return { connected: false };
+  }
+  const obj = raw;
+  const connected = obj.connected === true;
+  const reason = typeof obj.reason === "string" ? obj.reason : undefined;
+  const authUrl = typeof obj.authUrl === "string" ? obj.authUrl : undefined;
+  return { connected, reason, authUrl };
+}
+export {
+  CloudCredentialProvider
+};
+
+//# debugId=652A321E521EC52464756E2164756E21

package/dist/services/cloud-credential-provider.js.map

@@ -0,0 +1,11 @@
+{
+  "version": 3,
+  "sources": ["../src/lib/credential-type-map.ts", "../src/services/cloud-credential-provider.ts"],
+  "sourcesContent": [
+    "/**\n * Mapping from workflow-plugin credential type names → Eliza Cloud connector slugs.\n *\n * The workflow plugin's LLM emits credential type strings (e.g. `gmailOAuth2`,\n * `slackOAuth2Api`) on each node that needs an external account. The cloud\n * exposes per-connector OAuth flows under `/api/v1/eliza/<connector>/...`.\n *\n * This map is the single source of truth for which workflow credential type\n * resolves through which cloud connector + with which OAuth scopes. Add new\n * entries when the cloud gains support for additional connectors; do not\n * scatter cred-type → connector logic elsewhere.\n *\n * Cloud-side endpoint convention (see cloud/apps/api/v1/eliza/<connector>/):\n *   POST /api/v1/eliza/<connector>/connect/initiate     → { authUrl }\n *   GET  /api/v1/eliza/<connector>/status               → { connected, ... }\n *\n * Not every connector below has a fully-implemented cloud endpoint yet — the\n * provider returns `null` for unmapped types and `needs_auth` (with the\n * cloud-issued OAuth URL) for mapped-but-not-connected accounts. See\n * `cloud-credential-provider.ts` for the resolution logic.\n */\n\nexport interface CredentialTypeMapping {\n  /**\n   * Cloud connector slug used in the URL path\n   * (`/api/v1/eliza/<connector>/connect/initiate`).\n   */\n  connector: string;\n  /**\n   * Optional capability tokens passed to the cloud's `connect/initiate`\n   * endpoint. The cloud translates these to provider-specific OAuth scopes\n   * (e.g. Google's `google.gmail.send` → `https://www.googleapis.com/auth/gmail.send`).\n   */\n  capabilities?: string[];\n  /**\n   * Friendly description used in `needs_auth` UI prompts. The runtime may\n   * surface this verbatim to the end-user.\n   */\n  friendlyName: string;\n}\n\n/**\n * Workflow credential type → cloud connector mapping.\n *\n * Names mirror the n8n / workflows-plugin convention used by the LLM in\n * `plugins/plugin-workflow/src/utils/workflow-prompts/workflowGeneration.ts`.\n * Both `gmailOAuth2` and `gmailOAuth2Api` map to the same connector — the\n * workflow resolver does fuzzy `Api`-suffix matching upstream, but we keep\n * both keys here so `checkCredentialTypes` answers truthfully without the\n * caller having to know about that fuzziness.\n */\nexport const credTypeToConnector: ReadonlyMap<string, CredentialTypeMapping> = new Map([\n  // ─── Google ──────────────────────────────────────────────────────────\n  // Cloud endpoint: /api/v1/eliza/google/{connect/initiate,status,disconnect}\n  // The cloud's capability tokens are documented in\n  // cloud/apps/api/v1/eliza/google/connect/initiate/route.ts.\n  [\n    \"gmailOAuth2\",\n    {\n      connector: \"google\",\n      capabilities: [\"google.gmail.triage\", \"google.gmail.send\", \"google.gmail.manage\"],\n      friendlyName: \"Gmail\",\n    },\n  ],\n  [\n    \"gmailOAuth2Api\",\n    {\n      connector: \"google\",\n      capabilities: [\"google.gmail.triage\", \"google.gmail.send\", \"google.gmail.manage\"],\n      friendlyName: \"Gmail\",\n    },\n  ],\n  [\n    \"googleCalendarOAuth2Api\",\n    {\n      connector: \"google\",\n      capabilities: [\"google.calendar.read\", \"google.calendar.write\"],\n      friendlyName: \"Google Calendar\",\n    },\n  ],\n  [\n    \"googleSheetsOAuth2Api\",\n    {\n      connector: \"google\",\n      capabilities: [\"google.basic_identity\"],\n      friendlyName: \"Google Sheets\",\n    },\n  ],\n\n  // ─── GitHub ──────────────────────────────────────────────────────────\n  // Cloud endpoint: /api/v1/eliza/github-oauth-complete/ (callback only).\n  // The initiate flow is host-driven; the provider returns `needs_auth`\n  // pointing at the cloud's GitHub install URL when not connected.\n  [\n    \"githubOAuth2Api\",\n    {\n      connector: \"github\",\n      friendlyName: \"GitHub\",\n    },\n  ],\n  [\n    \"githubApi\",\n    {\n      connector: \"github\",\n      friendlyName: \"GitHub\",\n    },\n  ],\n\n  // ─── Discord ─────────────────────────────────────────────────────────\n  // Cloud endpoint: /api/v1/eliza/discord/gateway-agent/ (gateway pairing).\n  // No OAuth-token-issuance flow yet — provider returns `null` so the\n  // workflow resolver falls back to its default missing-connection report.\n  [\n    \"discordApi\",\n    {\n      connector: \"discord\",\n      friendlyName: \"Discord\",\n    },\n  ],\n  [\n    \"discordBotApi\",\n    {\n      connector: \"discord\",\n      friendlyName: \"Discord (Bot)\",\n    },\n  ],\n]);\n\n/** Set used by `checkCredentialTypes` for O(1) supported-set membership. */\nexport const supportedCredTypes: ReadonlySet<string> = new Set(credTypeToConnector.keys());\n",
+    "/**\n * CloudCredentialProvider — bridges plugin-workflow's `CredentialProvider`\n * service slot to Eliza Cloud's per-connector OAuth surface.\n *\n * Resolution path on `resolve(userId, credType)`:\n *   1. Look up `credType` in `credTypeToConnector` — return `null` for unmapped.\n *   2. GET `/eliza/<connector>/status` via the authenticated cloud client to\n *      check whether the user already has an active connection.\n *   3. When connected → see `RAW_TOKEN_GAP` below; we currently return\n *      `needs_auth` because the cloud does not expose raw OAuth tokens.\n *   4. When not connected → POST `/eliza/<connector>/connect/initiate` with\n *      the mapped `capabilities`; return `needs_auth` with the authUrl the\n *      cloud issued. The workflow plugin surfaces this to the user.\n *\n * RAW_TOKEN_GAP\n * -------------\n * Plugin-workflow's `credential_data` shape requires the actual access token\n * (so the workflow engine can inject it into a node's HTTP calls). The cloud\n * connector endpoints (Google / GitHub / Discord) intentionally do **not**\n * vend raw tokens to the local plugin — they hold the token server-side and\n * proxy connector calls under `/eliza/<connector>/<action>` (e.g.\n * `/eliza/google/gmail/send`). Bridging that proxy model into the workflow\n * engine is a separate piece of work (either: extend the workflow engine to\n * dispatch through cloud proxies, or add a token-vending endpoint cloud-side\n * for clients with a verified pairing). Until then this provider is honest:\n * it confirms the connection exists and either reports it cannot inject\n * (`null` / `needs_auth`) or — once the cloud exposes a vending endpoint —\n * fetches and returns the credential payload.\n *\n * No fallbacks. No fake tokens. The provider fails closed.\n */\n\nimport { type IAgentRuntime, logger, Service } from \"@elizaos/core\";\nimport { credTypeToConnector, supportedCredTypes } from \"../lib/credential-type-map\";\nimport type { CloudAuthLike } from \"../lib/cloud-connection\";\n\n// Inlined to avoid a hard compile-time dep on @elizaos/plugin-workflow.\n// The runtime duck-types the service via the shared service-type string.\nconst WORKFLOW_CREDENTIAL_PROVIDER_TYPE = \"workflow_credential_provider\";\n\nexport type CredentialProviderResult =\n  | { status: \"credential_data\"; data: Record<string, unknown> }\n  | { status: \"needs_auth\"; authUrl: string }\n  | null;\n\nexport interface CheckCredentialTypesResult {\n  supported: string[];\n  unsupported: string[];\n}\n\ninterface CloudConnectorStatus {\n  connected: boolean;\n  reason?: string;\n  authUrl?: string;\n}\n\ninterface CloudConnectInitiateResponse {\n  authUrl?: string;\n}\n\ninterface CloudClientLike {\n  get?: (path: string) => Promise<unknown>;\n  post?: (path: string, body?: unknown) => Promise<unknown>;\n}\n\nfunction isCloudAuthLike(value: unknown): value is CloudAuthLike {\n  if (!value || typeof value !== \"object\") {\n    return false;\n  }\n  return typeof Reflect.get(value, \"getClient\") === \"function\";\n}\n\nfunction isCloudClientLike(value: unknown): value is CloudClientLike {\n  if (!value || typeof value !== \"object\") {\n    return false;\n  }\n  const get = Reflect.get(value, \"get\");\n  const post = Reflect.get(value, \"post\");\n  return (\n    (get === undefined || typeof get === \"function\") &&\n    (post === undefined || typeof post === \"function\")\n  );\n}\n\nexport class CloudCredentialProvider extends Service {\n  static override readonly serviceType = WORKFLOW_CREDENTIAL_PROVIDER_TYPE;\n\n  override capabilityDescription =\n    \"Resolves workflow node credentials via the user's paired Eliza Cloud account.\";\n\n  static async start(runtime: IAgentRuntime): Promise<CloudCredentialProvider> {\n    return new CloudCredentialProvider(runtime);\n  }\n\n  override async stop(): Promise<void> {\n    // No-op: holds no per-instance state.\n  }\n\n  async resolve(_userId: string, credType: string): Promise<CredentialProviderResult> {\n    const mapping = credTypeToConnector.get(credType);\n    if (!mapping) {\n      return null;\n    }\n\n    const client = this.getCloudClient();\n    if (!client) {\n      logger.debug(\n        { src: \"plugin:elizacloud:credential-provider\", credType },\n        \"CLOUD_AUTH unavailable — cannot resolve workflow credentials\",\n      );\n      return null;\n    }\n\n    const status = await this.fetchConnectorStatus(client, mapping.connector);\n\n    if (!status.connected) {\n      const authUrl =\n        status.authUrl ??\n        (await this.initiateConnectorAuth(client, mapping.connector, mapping.capabilities));\n      if (!authUrl) {\n        return null;\n      }\n      return { status: \"needs_auth\", authUrl };\n    }\n\n    // Connected, but the cloud does not expose raw tokens — see RAW_TOKEN_GAP\n    // in the file header. We re-prompt for explicit user-side auth so the\n    // workflow plugin reports \"missing connection\" instead of silently\n    // injecting a stale or empty credential. When the cloud adds a token\n    // vending endpoint, fetch + return `credential_data` here.\n    const reauthUrl = await this.initiateConnectorAuth(\n      client,\n      mapping.connector,\n      mapping.capabilities,\n    );\n    if (reauthUrl) {\n      return { status: \"needs_auth\", authUrl: reauthUrl };\n    }\n    return null;\n  }\n\n  checkCredentialTypes(credTypes: string[]): CheckCredentialTypesResult {\n    const supported: string[] = [];\n    const unsupported: string[] = [];\n    for (const t of credTypes) {\n      if (supportedCredTypes.has(t)) {\n        supported.push(t);\n      } else {\n        unsupported.push(t);\n      }\n    }\n    return { supported, unsupported };\n  }\n\n  // ─── internals ───────────────────────────────────────────────────────\n\n  private getCloudClient(): CloudClientLike | null {\n    const cloudAuth = this.runtime.getService(\"CLOUD_AUTH\");\n    if (!isCloudAuthLike(cloudAuth)) {\n      return null;\n    }\n    const client = cloudAuth.getClient?.();\n    if (!isCloudClientLike(client)) {\n      return null;\n    }\n    return client;\n  }\n\n  private async fetchConnectorStatus(\n    client: CloudClientLike,\n    connector: string,\n  ): Promise<CloudConnectorStatus> {\n    if (typeof client.get !== \"function\") {\n      return { connected: false };\n    }\n    const raw = await client.get(`/eliza/${connector}/status`);\n    return shapeConnectorStatus(raw);\n  }\n\n  private async initiateConnectorAuth(\n    client: CloudClientLike,\n    connector: string,\n    capabilities: readonly string[] | undefined,\n  ): Promise<string | null> {\n    if (typeof client.post !== \"function\") {\n      return null;\n    }\n    const body: Record<string, unknown> = {};\n    if (capabilities && capabilities.length > 0) {\n      body.capabilities = [...capabilities];\n    }\n    const raw = (await client.post(\n      `/eliza/${connector}/connect/initiate`,\n      body,\n    )) as CloudConnectInitiateResponse | null;\n    const authUrl = raw?.authUrl;\n    return typeof authUrl === \"string\" && authUrl.length > 0 ? authUrl : null;\n  }\n}\n\nfunction shapeConnectorStatus(raw: unknown): CloudConnectorStatus {\n  if (!raw || typeof raw !== \"object\") {\n    return { connected: false };\n  }\n  const obj = raw as Record<string, unknown>;\n  const connected = obj.connected === true;\n  const reason = typeof obj.reason === \"string\" ? obj.reason : undefined;\n  const authUrl = typeof obj.authUrl === \"string\" ? obj.authUrl : undefined;\n  return { connected, reason, authUrl };\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;;;;;AAmDO,IAAM,sBAAkE,IAAI,IAAI;AAAA,EAKrF;AAAA,IACE;AAAA,IACA;AAAA,MACE,WAAW;AAAA,MACX,cAAc,CAAC,uBAAuB,qBAAqB,qBAAqB;AAAA,MAChF,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EACA;AAAA,IACE;AAAA,IACA;AAAA,MACE,WAAW;AAAA,MACX,cAAc,CAAC,uBAAuB,qBAAqB,qBAAqB;AAAA,MAChF,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EACA;AAAA,IACE;AAAA,IACA;AAAA,MACE,WAAW;AAAA,MACX,cAAc,CAAC,wBAAwB,uBAAuB;AAAA,MAC9D,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EACA;AAAA,IACE;AAAA,IACA;AAAA,MACE,WAAW;AAAA,MACX,cAAc,CAAC,uBAAuB;AAAA,MACtC,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EAMA;AAAA,IACE;AAAA,IACA;AAAA,MACE,WAAW;AAAA,MACX,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EACA;AAAA,IACE;AAAA,IACA;AAAA,MACE,WAAW;AAAA,MACX,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EAMA;AAAA,IACE;AAAA,IACA;AAAA,MACE,WAAW;AAAA,MACX,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EACA;AAAA,IACE;AAAA,IACA;AAAA,MACE,WAAW;AAAA,MACX,cAAc;AAAA,IAChB;AAAA,EACF;AACF,CAAC;AAGM,IAAM,qBAA0C,IAAI,IAAI,oBAAoB,KAAK,CAAC;;;ACjGzF;AAMA,IAAM,oCAAoC;AA2B1C,SAAS,eAAe,CAAC,OAAwC;AAAA,EAC/D,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AAAA,IACvC,OAAO;AAAA,EACT;AAAA,EACA,OAAO,OAAO,QAAQ,IAAI,OAAO,WAAW,MAAM;AAAA;AAGpD,SAAS,iBAAiB,CAAC,OAA0C;AAAA,EACnE,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AAAA,IACvC,OAAO;AAAA,EACT;AAAA,EACA,MAAM,MAAM,QAAQ,IAAI,OAAO,KAAK;AAAA,EACpC,MAAM,OAAO,QAAQ,IAAI,OAAO,MAAM;AAAA,EACtC,QACG,QAAQ,aAAa,OAAO,QAAQ,gBACpC,SAAS,aAAa,OAAO,SAAS;AAAA;AAAA;AAIpC,MAAM,gCAAgC,QAAQ;AAAA,SAC1B,cAAc;AAAA,EAE9B,wBACP;AAAA,cAEW,MAAK,CAAC,SAA0D;AAAA,IAC3E,OAAO,IAAI,wBAAwB,OAAO;AAAA;AAAA,OAG7B,KAAI,GAAkB;AAAA,OAI/B,QAAO,CAAC,SAAiB,UAAqD;AAAA,IAClF,MAAM,UAAU,oBAAoB,IAAI,QAAQ;AAAA,IAChD,IAAI,CAAC,SAAS;AAAA,MACZ,OAAO;AAAA,IACT;AAAA,IAEA,MAAM,SAAS,KAAK,eAAe;AAAA,IACnC,IAAI,CAAC,QAAQ;AAAA,MACX,OAAO,MACL,EAAE,KAAK,yCAAyC,SAAS,GACzD,8DACF;AAAA,MACA,OAAO;AAAA,IACT;AAAA,IAEA,MAAM,SAAS,MAAM,KAAK,qBAAqB,QAAQ,QAAQ,SAAS;AAAA,IAExE,IAAI,CAAC,OAAO,WAAW;AAAA,MACrB,MAAM,UACJ,OAAO,WACN,MAAM,KAAK,sBAAsB,QAAQ,QAAQ,WAAW,QAAQ,YAAY;AAAA,MACnF,IAAI,CAAC,SAAS;AAAA,QACZ,OAAO;AAAA,MACT;AAAA,MACA,OAAO,EAAE,QAAQ,cAAc,QAAQ;AAAA,IACzC;AAAA,IAOA,MAAM,YAAY,MAAM,KAAK,sBAC3B,QACA,QAAQ,WACR,QAAQ,YACV;AAAA,IACA,IAAI,WAAW;AAAA,MACb,OAAO,EAAE,QAAQ,cAAc,SAAS,UAAU;AAAA,IACpD;AAAA,IACA,OAAO;AAAA;AAAA,EAGT,oBAAoB,CAAC,WAAiD;AAAA,IACpE,MAAM,YAAsB,CAAC;AAAA,IAC7B,MAAM,cAAwB,CAAC;AAAA,IAC/B,WAAW,KAAK,WAAW;AAAA,MACzB,IAAI,mBAAmB,IAAI,CAAC,GAAG;AAAA,QAC7B,UAAU,KAAK,CAAC;AAAA,MAClB,EAAO;AAAA,QACL,YAAY,KAAK,CAAC;AAAA;AAAA,IAEtB;AAAA,IACA,OAAO,EAAE,WAAW,YAAY;AAAA;AAAA,EAK1B,cAAc,GAA2B;AAAA,IAC/C,MAAM,YAAY,KAAK,QAAQ,WAAW,YAAY;AAAA,IACtD,IAAI,CAAC,gBAAgB,SAAS,GAAG;AAAA,MAC/B,OAAO;AAAA,IACT;AAAA,IACA,MAAM,SAAS,UAAU,YAAY;AAAA,IACrC,IAAI,CAAC,kBAAkB,MAAM,GAAG;AAAA,MAC9B,OAAO;AAAA,IACT;AAAA,IACA,OAAO;AAAA;AAAA,OAGK,qBAAoB,CAChC,QACA,WAC+B;AAAA,IAC/B,IAAI,OAAO,OAAO,QAAQ,YAAY;AAAA,MACpC,OAAO,EAAE,WAAW,MAAM;AAAA,IAC5B;AAAA,IACA,MAAM,MAAM,MAAM,OAAO,IAAI,UAAU,kBAAkB;AAAA,IACzD,OAAO,qBAAqB,GAAG;AAAA;AAAA,OAGnB,sBAAqB,CACjC,QACA,WACA,cACwB;AAAA,IACxB,IAAI,OAAO,OAAO,SAAS,YAAY;AAAA,MACrC,OAAO;AAAA,IACT;AAAA,IACA,MAAM,OAAgC,CAAC;AAAA,IACvC,IAAI,gBAAgB,aAAa,SAAS,GAAG;AAAA,MAC3C,KAAK,eAAe,CAAC,GAAG,YAAY;AAAA,IACtC;AAAA,IACA,MAAM,MAAO,MAAM,OAAO,KACxB,UAAU,8BACV,IACF;AAAA,IACA,MAAM,UAAU,KAAK;AAAA,IACrB,OAAO,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU;AAAA;AAEzE;AAEA,SAAS,oBAAoB,CAAC,KAAoC;AAAA,EAChE,IAAI,CAAC,OAAO,OAAO,QAAQ,UAAU;AAAA,IACnC,OAAO,EAAE,WAAW,MAAM;AAAA,EAC5B;AAAA,EACA,MAAM,MAAM;AAAA,EACZ,MAAM,YAAY,IAAI,cAAc;AAAA,EACpC,MAAM,SAAS,OAAO,IAAI,WAAW,WAAW,IAAI,SAAS;AAAA,EAC7D,MAAM,UAAU,OAAO,IAAI,YAAY,WAAW,IAAI,UAAU;AAAA,EAChE,OAAO,EAAE,WAAW,QAAQ,QAAQ;AAAA;",
+  "debugId": "652A321E521EC52464756E2164756E21",
+  "names": []
+}

package/dist/services/cloud-managed-gateway-relay.d.ts

@@ -0,0 +1,38 @@
+import { type IAgentRuntime, Service } from "@elizaos/core";
+type RelayRuntimeStatus = "idle" | "registered" | "polling" | "error" | "stopped";
+export declare class CloudManagedGatewayRelayService extends Service {
+    static serviceType: string;
+    capabilityDescription: string;
+    private authService;
+    private loopPromise;
+    private currentSessionId;
+    private stopping;
+    private activeAbortController;
+    private relayStatus;
+    private lastSeenAt;
+    static start(runtime: IAgentRuntime): Promise<Service>;
+    stop(): Promise<void>;
+    private initialize;
+    getSessionInfo(): {
+        sessionId: string | null;
+        organizationId: string | null;
+        userId: string | null;
+        agentName: string | null;
+        platform: string | null;
+        lastSeenAt: string | null;
+        status: RelayRuntimeStatus;
+    };
+    startRelayLoopIfReady(): boolean;
+    private runLoop;
+    private getAgentName;
+    private getClient;
+    private requestJson;
+    private registerSession;
+    private disconnectSession;
+    private pollNextRequest;
+    private submitResponse;
+    private handleRequest;
+    private handleMessageSend;
+}
+export {};
+//# sourceMappingURL=cloud-managed-gateway-relay.d.ts.map

package/dist/services/cloud-managed-gateway-relay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-managed-gateway-relay.d.ts","sourceRoot":"","sources":["../../src/services/cloud-managed-gateway-relay.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,KAAK,aAAa,EAIlB,OAAO,EAER,MAAM,eAAe,CAAC;AAgBvB,KAAK,kBAAkB,GAAG,MAAM,GAAG,YAAY,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;AA0KlF,qBAAa,+BAAgC,SAAQ,OAAO;IAC1D,MAAM,CAAC,WAAW,SAAiC;IACnD,qBAAqB,SACgF;IAErG,OAAO,CAAC,WAAW,CAAiC;IACpD,OAAO,CAAC,WAAW,CAA8B;IACjD,OAAO,CAAC,gBAAgB,CAAuB;IAC/C,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,qBAAqB,CAAgC;IAC7D,OAAO,CAAC,WAAW,CAA8B;IACjD,OAAO,CAAC,UAAU,CAAuB;WAE5B,KAAK,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC;IAMtD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YAsBb,UAAU;IAwCxB,cAAc,IAAI;QAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,MAAM,EAAE,kBAAkB,CAAC;KAC5B;IAoBD,qBAAqB,IAAI,OAAO;YAoBlB,OAAO;IA6CrB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,SAAS;YAQH,WAAW;YA6BX,eAAe;YAsBf,iBAAiB;YAkBjB,eAAe;YAqBf,cAAc;YAsBd,aAAa;YAgCb,iBAAiB;CAqIhC"}