@elizaos/plugin-elizacloud 2.0.0-alpha.8 → 2.0.11-beta.7

package/dist/cloud/null-observer.js

@@ -0,0 +1,45 @@
+import { createRequire } from "node:module";
+var __defProp = Object.defineProperty;
+var __returnValue = (v) => v;
+function __exportSetter(name, newValue) {
+  this[name] = __returnValue.bind(null, newValue);
+}
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, {
+      get: all[name],
+      enumerable: true,
+      configurable: true,
+      set: __exportSetter.bind(all, name)
+    });
+};
+var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+var __require = /* @__PURE__ */ createRequire(import.meta.url);
+
+// src/cloud/null-observer.ts
+class NullCloudSetupObserver {
+  onAvailabilityChecked(_result) {}
+  onAuthStart(_loginUrl) {}
+  onAuthBrowserOpenFailed(_loginUrl, _error) {}
+  onAuthPollStatus(_status) {}
+  onAuthSuccess() {}
+  onAuthFailure(_message) {}
+  onProvisionStart(_agentName) {}
+  onProvisionStatus(_status) {}
+  onProvisionTimeout(_agentId, _lastStatus) {}
+  onProvisionFailure(_reason) {}
+  onProvisionSuccess(_result) {}
+  onNotice(_message) {}
+  onFatalError(_error, _context) {}
+  async confirm(_prompt) {
+    return null;
+  }
+  async selectChoice(_prompt) {
+    return null;
+  }
+}
+export {
+  NullCloudSetupObserver
+};
+
+//# debugId=41A094308B5C165F64756E2164756E21

package/dist/cloud/null-observer.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/cloud/null-observer.ts"],
+  "sourcesContent": [
+    "/**\n * Silent `CloudSetupObserver` for tests and headless runs.\n *\n * - All event methods intentionally ignore their inputs.\n * - All prompt methods resolve to `null` (i.e. \"user cancelled\"), which\n *   lets the orchestrator exercise its cancel branches without surfacing\n *   any UI.\n *\n * Tests that want to assert observer calls should use a capturing\n * observer instead.\n *\n * @module cloud/null-observer\n */\nimport type {\n  CloudSetupObserver,\n  ConfirmPrompt,\n  ProvisionSuccessInfo,\n  SelectChoicePrompt,\n} from \"./setup-observer.js\";\n\nexport class NullCloudSetupObserver implements CloudSetupObserver {\n  onAvailabilityChecked(_result: { ok: boolean; reason?: string }): void {}\n  onAuthStart(_loginUrl: string): void {}\n  onAuthBrowserOpenFailed(_loginUrl: string, _error: Error): void {}\n  onAuthPollStatus(_status: string): void {}\n  onAuthSuccess(): void {}\n  onAuthFailure(_message: string): void {}\n  onProvisionStart(_agentName: string): void {}\n  onProvisionStatus(_status: string): void {}\n  onProvisionTimeout(_agentId: string, _lastStatus: string): void {}\n  onProvisionFailure(_reason: string): void {}\n  onProvisionSuccess(_result: ProvisionSuccessInfo): void {}\n  onNotice(_message: string): void {}\n  onFatalError(_error: Error, _context: string): void {}\n\n  async confirm(_prompt: ConfirmPrompt): Promise<boolean | null> {\n    return null;\n  }\n\n  async selectChoice<T extends string>(\n    _prompt: SelectChoicePrompt<T>,\n  ): Promise<T | null> {\n    return null;\n  }\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;;;;;AAoBO,MAAM,uBAAqD;AAAA,EAChE,qBAAqB,CAAC,SAAiD;AAAA,EACvE,WAAW,CAAC,WAAyB;AAAA,EACrC,uBAAuB,CAAC,WAAmB,QAAqB;AAAA,EAChE,gBAAgB,CAAC,SAAuB;AAAA,EACxC,aAAa,GAAS;AAAA,EACtB,aAAa,CAAC,UAAwB;AAAA,EACtC,gBAAgB,CAAC,YAA0B;AAAA,EAC3C,iBAAiB,CAAC,SAAuB;AAAA,EACzC,kBAAkB,CAAC,UAAkB,aAA2B;AAAA,EAChE,kBAAkB,CAAC,SAAuB;AAAA,EAC1C,kBAAkB,CAAC,SAAqC;AAAA,EACxD,QAAQ,CAAC,UAAwB;AAAA,EACjC,YAAY,CAAC,QAAe,UAAwB;AAAA,OAE9C,QAAO,CAAC,SAAiD;AAAA,IAC7D,OAAO;AAAA;AAAA,OAGH,aAA8B,CAClC,SACmB;AAAA,IACnB,OAAO;AAAA;AAEX;",
+  "debugId": "41A094308B5C165F64756E2164756E21",
+  "names": []
+}

package/dist/cloud/reconnect.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Heartbeat monitor with auto-reconnect via exponential backoff.
+ */
+import type { ElizaCloudClient } from "./bridge-client.js";
+export interface ConnectionMonitorCallbacks {
+    onDisconnect: () => void;
+    onReconnect: () => void;
+    onStatusChange?: (status: "connected" | "reconnecting" | "disconnected") => void;
+}
+export declare class ConnectionMonitor {
+    private client;
+    private agentId;
+    private callbacks;
+    private heartbeatIntervalMs;
+    private maxFailures;
+    private timer;
+    private consecutiveFailures;
+    private reconnecting;
+    constructor(client: ElizaCloudClient, agentId: string, callbacks: ConnectionMonitorCallbacks, heartbeatIntervalMs?: number, maxFailures?: number);
+    start(): void;
+    stop(): void;
+    isMonitoring(): boolean;
+    private tick;
+    private attemptReconnect;
+}
+//# sourceMappingURL=reconnect.d.ts.map

package/dist/cloud/reconnect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconnect.d.ts","sourceRoot":"","sources":["../../src/cloud/reconnect.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,MAAM,WAAW,0BAA0B;IACzC,YAAY,EAAE,MAAM,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,IAAI,CAAC;IACxB,cAAc,CAAC,EAAE,CACf,MAAM,EAAE,WAAW,GAAG,cAAc,GAAG,cAAc,KAClD,IAAI,CAAC;CACX;AAED,qBAAa,iBAAiB;IAM1B,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,mBAAmB;IAC3B,OAAO,CAAC,WAAW;IATrB,OAAO,CAAC,KAAK,CAA+C;IAC5D,OAAO,CAAC,mBAAmB,CAAK;IAChC,OAAO,CAAC,YAAY,CAAS;gBAGnB,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,0BAA0B,EACrC,mBAAmB,GAAE,MAAe,EACpC,WAAW,GAAE,MAAU;IAGjC,KAAK,IAAI,IAAI;IAWb,IAAI,IAAI,IAAI;IAUZ,YAAY,IAAI,OAAO;YAIT,IAAI;YA4BJ,gBAAgB;CA6B/B"}

package/dist/cloud/reconnect.js

@@ -0,0 +1,104 @@
+import { createRequire } from "node:module";
+var __defProp = Object.defineProperty;
+var __returnValue = (v) => v;
+function __exportSetter(name, newValue) {
+  this[name] = __returnValue.bind(null, newValue);
+}
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, {
+      get: all[name],
+      enumerable: true,
+      configurable: true,
+      set: __exportSetter.bind(all, name)
+    });
+};
+var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+var __require = /* @__PURE__ */ createRequire(import.meta.url);
+
+// src/cloud/reconnect.ts
+import { logger } from "@elizaos/core";
+
+class ConnectionMonitor {
+  client;
+  agentId;
+  callbacks;
+  heartbeatIntervalMs;
+  maxFailures;
+  timer = null;
+  consecutiveFailures = 0;
+  reconnecting = false;
+  constructor(client, agentId, callbacks, heartbeatIntervalMs = 30000, maxFailures = 3) {
+    this.client = client;
+    this.agentId = agentId;
+    this.callbacks = callbacks;
+    this.heartbeatIntervalMs = heartbeatIntervalMs;
+    this.maxFailures = maxFailures;
+  }
+  start() {
+    if (this.timer)
+      return;
+    logger.info(`[cloud-monitor] Starting connection monitor (interval: ${this.heartbeatIntervalMs}ms, maxFailures: ${this.maxFailures})`);
+    this.consecutiveFailures = 0;
+    this.timer = setInterval(() => {
+      this.tick();
+    }, this.heartbeatIntervalMs);
+  }
+  stop() {
+    if (this.timer) {
+      clearInterval(this.timer);
+      this.timer = null;
+    }
+    this.consecutiveFailures = 0;
+    this.reconnecting = false;
+    logger.info("[cloud-monitor] Connection monitor stopped");
+  }
+  isMonitoring() {
+    return this.timer !== null;
+  }
+  async tick() {
+    if (this.reconnecting)
+      return;
+    const alive = await this.client.heartbeat(this.agentId).catch(() => false);
+    if (alive) {
+      if (this.consecutiveFailures > 0) {
+        this.consecutiveFailures = 0;
+        this.callbacks.onStatusChange?.("connected");
+      }
+      return;
+    }
+    this.consecutiveFailures++;
+    logger.warn(`[cloud-monitor] Heartbeat failed (${this.consecutiveFailures}/${this.maxFailures})`);
+    if (this.consecutiveFailures >= this.maxFailures) {
+      this.callbacks.onDisconnect();
+      await this.attemptReconnect();
+    }
+  }
+  async attemptReconnect() {
+    this.reconnecting = true;
+    this.callbacks.onStatusChange?.("reconnecting");
+    let delay = 3000;
+    for (let attempt = 1;attempt <= 10; attempt++) {
+      logger.info(`[cloud-monitor] Reconnect attempt ${attempt}/10...`);
+      const ok = await this.client.provision(this.agentId).then(() => true).catch(() => false);
+      if (ok) {
+        logger.info("[cloud-monitor] Reconnection successful");
+        this.consecutiveFailures = 0;
+        this.reconnecting = false;
+        this.callbacks.onStatusChange?.("connected");
+        this.callbacks.onReconnect();
+        return;
+      }
+      await new Promise((r) => setTimeout(r, delay));
+      delay = Math.min(delay * 2, 60000);
+    }
+    logger.error("[cloud-monitor] Failed to reconnect after 10 attempts");
+    this.reconnecting = false;
+    this.callbacks.onStatusChange?.("disconnected");
+  }
+}
+export {
+  ConnectionMonitor
+};
+
+//# debugId=430B8E5B9401539164756E2164756E21

package/dist/cloud/reconnect.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/cloud/reconnect.ts"],
+  "sourcesContent": [
+    "/**\n * Heartbeat monitor with auto-reconnect via exponential backoff.\n */\n\nimport { logger } from \"@elizaos/core\";\nimport type { ElizaCloudClient } from \"./bridge-client.js\";\n\nexport interface ConnectionMonitorCallbacks {\n  onDisconnect: () => void;\n  onReconnect: () => void;\n  onStatusChange?: (\n    status: \"connected\" | \"reconnecting\" | \"disconnected\",\n  ) => void;\n}\n\nexport class ConnectionMonitor {\n  private timer: ReturnType<typeof setInterval> | null = null;\n  private consecutiveFailures = 0;\n  private reconnecting = false;\n\n  constructor(\n    private client: ElizaCloudClient,\n    private agentId: string,\n    private callbacks: ConnectionMonitorCallbacks,\n    private heartbeatIntervalMs: number = 30_000,\n    private maxFailures: number = 3,\n  ) {}\n\n  start(): void {\n    if (this.timer) return;\n    logger.info(\n      `[cloud-monitor] Starting connection monitor (interval: ${this.heartbeatIntervalMs}ms, maxFailures: ${this.maxFailures})`,\n    );\n    this.consecutiveFailures = 0;\n    this.timer = setInterval(() => {\n      this.tick();\n    }, this.heartbeatIntervalMs);\n  }\n\n  stop(): void {\n    if (this.timer) {\n      clearInterval(this.timer);\n      this.timer = null;\n    }\n    this.consecutiveFailures = 0;\n    this.reconnecting = false;\n    logger.info(\"[cloud-monitor] Connection monitor stopped\");\n  }\n\n  isMonitoring(): boolean {\n    return this.timer !== null;\n  }\n\n  private async tick(): Promise<void> {\n    if (this.reconnecting) return;\n\n    const alive = await this.client.heartbeat(this.agentId).catch(() => false);\n\n    if (alive) {\n      if (this.consecutiveFailures > 0) {\n        this.consecutiveFailures = 0;\n        this.callbacks.onStatusChange?.(\"connected\");\n      }\n      return;\n    }\n\n    this.consecutiveFailures++;\n    logger.warn(\n      `[cloud-monitor] Heartbeat failed (${this.consecutiveFailures}/${this.maxFailures})`,\n    );\n\n    if (this.consecutiveFailures >= this.maxFailures) {\n      // Don't emit \"disconnected\" here — attemptReconnect() will emit\n      // \"reconnecting\" first, and only emits \"disconnected\" if all\n      // retry attempts fail. This avoids a misleading disconnected→\n      // reconnecting flicker for callers.\n      this.callbacks.onDisconnect();\n      await this.attemptReconnect();\n    }\n  }\n\n  private async attemptReconnect(): Promise<void> {\n    this.reconnecting = true;\n    this.callbacks.onStatusChange?.(\"reconnecting\");\n\n    let delay = 3_000;\n    for (let attempt = 1; attempt <= 10; attempt++) {\n      logger.info(`[cloud-monitor] Reconnect attempt ${attempt}/10...`);\n      const ok = await this.client\n        .provision(this.agentId)\n        .then(() => true)\n        .catch(() => false);\n\n      if (ok) {\n        logger.info(\"[cloud-monitor] Reconnection successful\");\n        this.consecutiveFailures = 0;\n        this.reconnecting = false;\n        this.callbacks.onStatusChange?.(\"connected\");\n        this.callbacks.onReconnect();\n        return;\n      }\n\n      await new Promise((r) => setTimeout(r, delay));\n      delay = Math.min(delay * 2, 60_000);\n    }\n\n    logger.error(\"[cloud-monitor] Failed to reconnect after 10 attempts\");\n    this.reconnecting = false;\n    this.callbacks.onStatusChange?.(\"disconnected\");\n  }\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;;;;;AAIA;AAAA;AAWO,MAAM,kBAAkB;AAAA,EAMnB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EATF,QAA+C;AAAA,EAC/C,sBAAsB;AAAA,EACtB,eAAe;AAAA,EAEvB,WAAW,CACD,QACA,SACA,WACA,sBAA8B,OAC9B,cAAsB,GAC9B;AAAA,IALQ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA,EAGV,KAAK,GAAS;AAAA,IACZ,IAAI,KAAK;AAAA,MAAO;AAAA,IAChB,OAAO,KACL,0DAA0D,KAAK,uCAAuC,KAAK,cAC7G;AAAA,IACA,KAAK,sBAAsB;AAAA,IAC3B,KAAK,QAAQ,YAAY,MAAM;AAAA,MAC7B,KAAK,KAAK;AAAA,OACT,KAAK,mBAAmB;AAAA;AAAA,EAG7B,IAAI,GAAS;AAAA,IACX,IAAI,KAAK,OAAO;AAAA,MACd,cAAc,KAAK,KAAK;AAAA,MACxB,KAAK,QAAQ;AAAA,IACf;AAAA,IACA,KAAK,sBAAsB;AAAA,IAC3B,KAAK,eAAe;AAAA,IACpB,OAAO,KAAK,4CAA4C;AAAA;AAAA,EAG1D,YAAY,GAAY;AAAA,IACtB,OAAO,KAAK,UAAU;AAAA;AAAA,OAGV,KAAI,GAAkB;AAAA,IAClC,IAAI,KAAK;AAAA,MAAc;AAAA,IAEvB,MAAM,QAAQ,MAAM,KAAK,OAAO,UAAU,KAAK,OAAO,EAAE,MAAM,MAAM,KAAK;AAAA,IAEzE,IAAI,OAAO;AAAA,MACT,IAAI,KAAK,sBAAsB,GAAG;AAAA,QAChC,KAAK,sBAAsB;AAAA,QAC3B,KAAK,UAAU,iBAAiB,WAAW;AAAA,MAC7C;AAAA,MACA;AAAA,IACF;AAAA,IAEA,KAAK;AAAA,IACL,OAAO,KACL,qCAAqC,KAAK,uBAAuB,KAAK,cACxE;AAAA,IAEA,IAAI,KAAK,uBAAuB,KAAK,aAAa;AAAA,MAKhD,KAAK,UAAU,aAAa;AAAA,MAC5B,MAAM,KAAK,iBAAiB;AAAA,IAC9B;AAAA;AAAA,OAGY,iBAAgB,GAAkB;AAAA,IAC9C,KAAK,eAAe;AAAA,IACpB,KAAK,UAAU,iBAAiB,cAAc;AAAA,IAE9C,IAAI,QAAQ;AAAA,IACZ,SAAS,UAAU,EAAG,WAAW,IAAI,WAAW;AAAA,MAC9C,OAAO,KAAK,qCAAqC,eAAe;AAAA,MAChE,MAAM,KAAK,MAAM,KAAK,OACnB,UAAU,KAAK,OAAO,EACtB,KAAK,MAAM,IAAI,EACf,MAAM,MAAM,KAAK;AAAA,MAEpB,IAAI,IAAI;AAAA,QACN,OAAO,KAAK,yCAAyC;AAAA,QACrD,KAAK,sBAAsB;AAAA,QAC3B,KAAK,eAAe;AAAA,QACpB,KAAK,UAAU,iBAAiB,WAAW;AAAA,QAC3C,KAAK,UAAU,YAAY;AAAA,QAC3B;AAAA,MACF;AAAA,MAEA,MAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,KAAK,CAAC;AAAA,MAC7C,QAAQ,KAAK,IAAI,QAAQ,GAAG,KAAM;AAAA,IACpC;AAAA,IAEA,OAAO,MAAM,uDAAuD;AAAA,IACpE,KAAK,eAAe;AAAA,IACpB,KAAK,UAAU,iBAAiB,cAAc;AAAA;AAElD;",
+  "debugId": "430B8E5B9401539164756E2164756E21",
+  "names": []
+}

package/dist/cloud/setup-observer.d.ts

@@ -0,0 +1,98 @@
+/**
+ * Transport-agnostic observer for the cloud setup orchestrator.
+ *
+ * `runCloudSetup` calls into this interface for every user-visible
+ * event and every interactive prompt. CLI provides a `@clack/prompts`-
+ * backed implementation; web/desktop provides an event-bridge
+ * implementation; tests provide a capturing observer.
+ *
+ * The orchestrator MUST stay free of any presentation-layer concerns
+ * (spinners, terminal output, GUI events). It only knows about the
+ * methods defined here.
+ *
+ * @module cloud/setup-observer
+ */
+import type { ProvisionInfo } from "./bridge-client.js";
+export interface AvailabilityResult {
+    ok: boolean;
+    /** Human-readable reason when `ok` is false. */
+    reason?: string;
+}
+export interface ProvisionSuccessInfo {
+    agentId: string;
+    bridgeUrl?: string;
+}
+export interface ConfirmPrompt {
+    message: string;
+    /** Optional override for the default value when the user just presses enter. */
+    defaultValue?: boolean;
+    /** Optional label for the "true" branch. CLI surfaces use this on a toggle. */
+    activeLabel?: string;
+    /** Optional label for the "false" branch. CLI surfaces use this on a toggle. */
+    inactiveLabel?: string;
+}
+export interface SelectChoiceOption<T extends string> {
+    label: string;
+    value: T;
+    hint?: string;
+}
+export interface SelectChoicePrompt<T extends string> {
+    message: string;
+    options: SelectChoiceOption<T>[];
+}
+/**
+ * Sink for every event the cloud setup orchestrator surfaces, plus the
+ * interactive prompts it needs to resolve.
+ *
+ * Implementation contract:
+ *
+ *   - Event methods are fire-and-forget; they MUST NOT throw. Implementations
+ *     that fail to render an event are responsible for their own logging.
+ *   - Prompt methods are async. A `null` return from `selectChoice` or a
+ *     cancellation from `confirm` is interpreted by the orchestrator as
+ *     "user cancelled" — the orchestrator decides what that means for the
+ *     flow. The observer MUST NOT exit the process or throw on cancel.
+ */
+export interface CloudSetupObserver {
+    onAvailabilityChecked(result: AvailabilityResult): void;
+    onAuthStart(loginUrl: string): void;
+    /**
+     * The orchestrator could not spawn the OS browser (no `open` / `xdg-open`
+     * / `cmd.exe` on PATH, etc.). The login URL is unchanged — the observer
+     * can render an inline "visit this URL manually" affordance, retry, or
+     * surface the error however it wants. This was previously swallowed
+     * silently behind a debug log.
+     */
+    onAuthBrowserOpenFailed(loginUrl: string, error: Error): void;
+    onAuthPollStatus(status: string): void;
+    onAuthSuccess(): void;
+    onAuthFailure(message: string): void;
+    onProvisionStart(agentName: string): void;
+    onProvisionStatus(status: string, current?: ProvisionInfo): void;
+    onProvisionTimeout(agentId: string, lastStatus: string): void;
+    onProvisionFailure(reason: string): void;
+    onProvisionSuccess(result: ProvisionSuccessInfo): void;
+    /**
+     * A categorized user-facing message that doesn't map onto a specific
+     * lifecycle event — e.g. "Cloud login was not completed", "Cloud agent
+     * is still starting up. You can try `eliza cloud connect` once it's
+     * ready." The CLI implementation renders these as `log.warn`.
+     */
+    onNotice(message: string): void;
+    /**
+     * An unexpected, non-flow-control error. The orchestrator does not
+     * itself swallow errors — it surfaces them here and lets the observer
+     * decide whether to retry, fall back, or rethrow.
+     */
+    onFatalError(error: Error, context: string): void;
+    /**
+     * Resolve to `true` / `false` for a yes/no decision, or `null` when the
+     * user explicitly cancels (e.g. Ctrl-C on CLI, modal dismiss on GUI).
+     */
+    confirm(prompt: ConfirmPrompt): Promise<boolean | null>;
+    /**
+     * Resolve to the chosen value, or `null` on cancel.
+     */
+    selectChoice<T extends string>(prompt: SelectChoicePrompt<T>): Promise<T | null>;
+}
+//# sourceMappingURL=setup-observer.d.ts.map

package/dist/cloud/setup-observer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-observer.d.ts","sourceRoot":"","sources":["../../src/cloud/setup-observer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAMxD,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,gDAAgD;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAMD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,gFAAgF;IAChF,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB,CAAC,CAAC,SAAS,MAAM;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,CAAC,CAAC;IACT,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB,CAAC,CAAC,SAAS,MAAM;IAClD,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;CAClC;AAMD;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,kBAAkB;IAEjC,qBAAqB,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAExD,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC;;;;;;OAMG;IACH,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IAC9D,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,aAAa,IAAI,IAAI,CAAC;IACtB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAErC,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IACjE,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9D,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,kBAAkB,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAEvD;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAEhC;;;;OAIG;IACH,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAGlD;;;OAGG;IACH,OAAO,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAExD;;OAEG;IACH,YAAY,CAAC,CAAC,SAAS,MAAM,EAC3B,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC,GAC5B,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;CACtB"}

package/dist/cloud/setup-observer.js

@@ -0,0 +1,2 @@
+
+//# debugId=F6EBC316424461C464756E2164756E21

package/dist/cloud/setup-observer.js.map

@@ -0,0 +1,9 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [
+  ],
+  "mappings": "",
+  "debugId": "F6EBC316424461C464756E2164756E21",
+  "names": []
+}

package/dist/cloud/validate-url.d.ts

@@ -0,0 +1,2 @@
+export declare function validateCloudBaseUrl(rawUrl: string): Promise<string | null>;
+//# sourceMappingURL=validate-url.d.ts.map

package/dist/cloud/validate-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-url.d.ts","sourceRoot":"","sources":["../../src/cloud/validate-url.ts"],"names":[],"mappings":"AA4HA,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA4DxB"}

package/dist/cloud/validate-url.js

@@ -0,0 +1,175 @@
+import { createRequire } from "node:module";
+var __defProp = Object.defineProperty;
+var __returnValue = (v) => v;
+function __exportSetter(name, newValue) {
+  this[name] = __returnValue.bind(null, newValue);
+}
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, {
+      get: all[name],
+      enumerable: true,
+      configurable: true,
+      set: __exportSetter.bind(all, name)
+    });
+};
+var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+var __require = /* @__PURE__ */ createRequire(import.meta.url);
+
+// src/cloud/validate-url.ts
+import dns from "node:dns";
+import net from "node:net";
+import { promisify } from "node:util";
+function normalizeHostLike(value) {
+  return value.trim().toLowerCase().replace(/^\[|\]$/g, "");
+}
+function decodeIpv6MappedHex(mapped) {
+  const parts = mapped.split(":");
+  if (parts.length < 1 || parts.length > 2)
+    return null;
+  const parsed = parts.map((part) => {
+    if (!/^[0-9a-f]{1,4}$/i.test(part))
+      return Number.NaN;
+    return Number.parseInt(part, 16);
+  });
+  if (parsed.some((value) => !Number.isFinite(value)))
+    return null;
+  const [hi, lo] = parsed.length === 1 ? [0, parsed[0]] : parsed;
+  const octets = [hi >> 8, hi & 255, lo >> 8, lo & 255];
+  return octets.join(".");
+}
+function canonicalizeIpv6(ip) {
+  try {
+    return new URL(`http://[${ip}]/`).hostname.replace(/^\[|\]$/g, "");
+  } catch {
+    return null;
+  }
+}
+function normalizeIpForPolicy(ip) {
+  const base = normalizeHostLike(ip).split("%")[0];
+  if (!base)
+    return base;
+  let normalized = base;
+  if (net.isIP(normalized) === 6) {
+    normalized = canonicalizeIpv6(normalized) ?? normalized;
+  }
+  let mapped = null;
+  if (normalized.startsWith("::ffff:")) {
+    mapped = normalized.slice("::ffff:".length);
+  } else if (normalized.startsWith("0:0:0:0:0:ffff:")) {
+    mapped = normalized.slice("0:0:0:0:0:ffff:".length);
+  }
+  if (!mapped)
+    return normalized;
+  if (net.isIP(mapped) === 4)
+    return mapped;
+  return decodeIpv6MappedHex(mapped) ?? normalized;
+}
+function cidrV4(base, prefix) {
+  const parsed = parseIpv4ToInt(base);
+  if (parsed === null) {
+    throw new Error(`Invalid CIDR base IPv4 address: ${base}`);
+  }
+  const shift = 32 - prefix;
+  const mask = shift === 32 ? 0 : 4294967295 << shift >>> 0;
+  return { base: parsed & mask, mask };
+}
+function parseIpv4ToInt(ip) {
+  const parts = ip.split(".");
+  if (parts.length !== 4)
+    return null;
+  let value = 0;
+  for (const part of parts) {
+    if (!/^\d{1,3}$/.test(part))
+      return null;
+    const octet = Number.parseInt(part, 10);
+    if (!Number.isInteger(octet) || octet < 0 || octet > 255)
+      return null;
+    value = value << 8 | octet;
+  }
+  return value >>> 0;
+}
+function isBlockedIpv4(ip) {
+  const asInt = parseIpv4ToInt(ip);
+  if (asInt === null)
+    return true;
+  return BLOCKED_IPV4_CIDRS.some((cidr) => (asInt & cidr.mask) === cidr.base);
+}
+function isBlockedIpv6(ip) {
+  const normalized = ip.toLowerCase();
+  return normalized === "::" || normalized === "::1" || /^fe[89ab][0-9a-f]:/.test(normalized) || /^f[cd][0-9a-f]{2}:/i.test(normalized) || normalized.startsWith("ff");
+}
+function isBlockedIp(ip) {
+  const normalized = normalizeIpForPolicy(ip);
+  const family = net.isIP(normalized);
+  if (family === 4)
+    return isBlockedIpv4(normalized);
+  if (family === 6)
+    return isBlockedIpv6(normalized);
+  return false;
+}
+async function validateCloudBaseUrl(rawUrl) {
+  let parsed;
+  try {
+    parsed = new URL(rawUrl);
+  } catch {
+    return `Invalid cloud base URL: "${rawUrl}"`;
+  }
+  if (parsed.protocol !== "https:") {
+    return `Cloud base URL must use HTTPS, got "${parsed.protocol}" in "${rawUrl}"`;
+  }
+  const hostname = normalizeHostLike(parsed.hostname);
+  if (!hostname) {
+    return `Invalid cloud base URL: "${rawUrl}"`;
+  }
+  if (hostname === "localhost" || hostname.endsWith(".localhost") || hostname.endsWith(".local")) {
+    return `Cloud base URL "${rawUrl}" points to a blocked local hostname.`;
+  }
+  const elizaDev = process.env.ELIZA_DEV?.trim().toLowerCase();
+  if (true) {
+    return null;
+  }
+  if (isBlockedIp(hostname)) {
+    return `Cloud base URL "${rawUrl}" points to a blocked address.`;
+  }
+  try {
+    const results = await dnsLookupAll(hostname, { all: true });
+    const addresses = Array.isArray(results) ? results : [results];
+    for (const entry of addresses) {
+      const ip = typeof entry === "string" ? entry : entry.address;
+      if (isBlockedIp(ip)) {
+        return `Cloud base URL "${rawUrl}" resolves to ${ip}, ` + "which is a blocked internal/metadata address.";
+      }
+    }
+  } catch {
+    return `Cloud base URL "${rawUrl}" could not be resolved via DNS.`;
+  }
+  return null;
+}
+var dnsLookupAll, BLOCKED_IPV4_CIDRS;
+var init_validate_url = __esm(() => {
+  dnsLookupAll = promisify(dns.lookup);
+  BLOCKED_IPV4_CIDRS = [
+    cidrV4("0.0.0.0", 8),
+    cidrV4("10.0.0.0", 8),
+    cidrV4("172.16.0.0", 12),
+    cidrV4("192.168.0.0", 16),
+    cidrV4("100.64.0.0", 10),
+    cidrV4("127.0.0.0", 8),
+    cidrV4("169.254.0.0", 16),
+    cidrV4("192.0.0.0", 24),
+    cidrV4("198.18.0.0", 15),
+    cidrV4("192.0.2.0", 24),
+    cidrV4("198.51.100.0", 24),
+    cidrV4("203.0.113.0", 24),
+    cidrV4("224.0.0.0", 4),
+    cidrV4("240.0.0.0", 4)
+  ];
+});
+init_validate_url();
+
+export {
+  validateCloudBaseUrl
+};
+
+//# debugId=4ADEDB99210B0D5564756E2164756E21

package/dist/cloud/validate-url.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/cloud/validate-url.ts"],
+  "sourcesContent": [
+    "import dns from \"node:dns\";\nimport net from \"node:net\";\nimport { promisify } from \"node:util\";\n\nconst dnsLookupAll = promisify(dns.lookup);\n\nconst BLOCKED_IPV4_CIDRS: Array<{ base: number; mask: number }> = [\n  cidrV4(\"0.0.0.0\", 8),\n  cidrV4(\"10.0.0.0\", 8),\n  cidrV4(\"172.16.0.0\", 12),\n  cidrV4(\"192.168.0.0\", 16),\n  cidrV4(\"100.64.0.0\", 10),\n  cidrV4(\"127.0.0.0\", 8),\n  cidrV4(\"169.254.0.0\", 16),\n  cidrV4(\"192.0.0.0\", 24),\n  cidrV4(\"198.18.0.0\", 15),\n  cidrV4(\"192.0.2.0\", 24),\n  cidrV4(\"198.51.100.0\", 24),\n  cidrV4(\"203.0.113.0\", 24),\n  cidrV4(\"224.0.0.0\", 4),\n  cidrV4(\"240.0.0.0\", 4),\n];\n\nfunction normalizeHostLike(value: string): string {\n  return value\n    .trim()\n    .toLowerCase()\n    .replace(/^\\[|\\]$/g, \"\");\n}\n\nfunction decodeIpv6MappedHex(mapped: string): string | null {\n  const parts = mapped.split(\":\");\n  if (parts.length < 1 || parts.length > 2) return null;\n\n  const parsed = parts.map((part) => {\n    if (!/^[0-9a-f]{1,4}$/i.test(part)) return Number.NaN;\n    return Number.parseInt(part, 16);\n  });\n  if (parsed.some((value) => !Number.isFinite(value))) return null;\n\n  const [hi, lo] = parsed.length === 1 ? [0, parsed[0]] : parsed;\n  const octets = [hi >> 8, hi & 0xff, lo >> 8, lo & 0xff];\n  return octets.join(\".\");\n}\n\nfunction canonicalizeIpv6(ip: string): string | null {\n  try {\n    return new URL(`http://[${ip}]/`).hostname.replace(/^\\[|\\]$/g, \"\");\n  } catch {\n    return null;\n  }\n}\n\nfunction normalizeIpForPolicy(ip: string): string {\n  const base = normalizeHostLike(ip).split(\"%\")[0];\n  if (!base) return base;\n\n  let normalized = base;\n  if (net.isIP(normalized) === 6) {\n    normalized = canonicalizeIpv6(normalized) ?? normalized;\n  }\n\n  let mapped: string | null = null;\n  if (normalized.startsWith(\"::ffff:\")) {\n    mapped = normalized.slice(\"::ffff:\".length);\n  } else if (normalized.startsWith(\"0:0:0:0:0:ffff:\")) {\n    mapped = normalized.slice(\"0:0:0:0:0:ffff:\".length);\n  }\n  if (!mapped) return normalized;\n\n  if (net.isIP(mapped) === 4) return mapped;\n  return decodeIpv6MappedHex(mapped) ?? normalized;\n}\n\nfunction cidrV4(base: string, prefix: number): { base: number; mask: number } {\n  const parsed = parseIpv4ToInt(base);\n  if (parsed === null) {\n    throw new Error(`Invalid CIDR base IPv4 address: ${base}`);\n  }\n  const shift = 32 - prefix;\n  const mask = shift === 32 ? 0 : (0xffffffff << shift) >>> 0;\n  return { base: parsed & mask, mask };\n}\n\nfunction parseIpv4ToInt(ip: string): number | null {\n  const parts = ip.split(\".\");\n  if (parts.length !== 4) return null;\n\n  let value = 0;\n  for (const part of parts) {\n    if (!/^\\d{1,3}$/.test(part)) return null;\n    const octet = Number.parseInt(part, 10);\n    if (!Number.isInteger(octet) || octet < 0 || octet > 255) return null;\n    value = (value << 8) | octet;\n  }\n\n  return value >>> 0;\n}\n\nfunction isBlockedIpv4(ip: string): boolean {\n  const asInt = parseIpv4ToInt(ip);\n  if (asInt === null) return true;\n  return BLOCKED_IPV4_CIDRS.some((cidr) => (asInt & cidr.mask) === cidr.base);\n}\n\nfunction isBlockedIpv6(ip: string): boolean {\n  const normalized = ip.toLowerCase();\n  return (\n    normalized === \"::\" ||\n    normalized === \"::1\" ||\n    /^fe[89ab][0-9a-f]:/.test(normalized) ||\n    /^f[cd][0-9a-f]{2}:/i.test(normalized) ||\n    normalized.startsWith(\"ff\")\n  );\n}\n\nfunction isBlockedIp(ip: string): boolean {\n  const normalized = normalizeIpForPolicy(ip);\n  const family = net.isIP(normalized);\n  if (family === 4) return isBlockedIpv4(normalized);\n  if (family === 6) return isBlockedIpv6(normalized);\n  return false;\n}\n\nexport async function validateCloudBaseUrl(\n  rawUrl: string,\n): Promise<string | null> {\n  let parsed: URL;\n  try {\n    parsed = new URL(rawUrl);\n  } catch {\n    return `Invalid cloud base URL: \"${rawUrl}\"`;\n  }\n\n  if (parsed.protocol !== \"https:\") {\n    return `Cloud base URL must use HTTPS, got \"${parsed.protocol}\" in \"${rawUrl}\"`;\n  }\n\n  const hostname = normalizeHostLike(parsed.hostname);\n  if (!hostname) {\n    return `Invalid cloud base URL: \"${rawUrl}\"`;\n  }\n\n  if (\n    hostname === \"localhost\" ||\n    hostname.endsWith(\".localhost\") ||\n    hostname.endsWith(\".local\")\n  ) {\n    return `Cloud base URL \"${rawUrl}\" points to a blocked local hostname.`;\n  }\n\n  // Dev-mode bypass: skip IP-range blocking but keep URL format checks above.\n  const elizaDev = process.env.ELIZA_DEV?.trim().toLowerCase();\n  if (\n    process.env.NODE_ENV === \"development\" ||\n    elizaDev === \"1\" ||\n    elizaDev === \"true\" ||\n    elizaDev === \"yes\"\n  ) {\n    return null;\n  }\n\n  if (isBlockedIp(hostname)) {\n    return `Cloud base URL \"${rawUrl}\" points to a blocked address.`;\n  }\n\n  try {\n    const results = await dnsLookupAll(hostname, { all: true });\n    const addresses = Array.isArray(results) ? results : [results];\n    for (const entry of addresses) {\n      const ip =\n        typeof entry === \"string\"\n          ? entry\n          : (entry as { address: string }).address;\n      if (isBlockedIp(ip)) {\n        return (\n          `Cloud base URL \"${rawUrl}\" resolves to ${ip}, ` +\n          \"which is a blocked internal/metadata address.\"\n        );\n      }\n    }\n  } catch {\n    return `Cloud base URL \"${rawUrl}\" could not be resolved via DNS.`;\n  }\n\n  return null;\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;;;;;AAAA;AACA;AACA;AAqBA,SAAS,iBAAiB,CAAC,OAAuB;AAAA,EAChD,OAAO,MACJ,KAAK,EACL,YAAY,EACZ,QAAQ,YAAY,EAAE;AAAA;AAG3B,SAAS,mBAAmB,CAAC,QAA+B;AAAA,EAC1D,MAAM,QAAQ,OAAO,MAAM,GAAG;AAAA,EAC9B,IAAI,MAAM,SAAS,KAAK,MAAM,SAAS;AAAA,IAAG,OAAO;AAAA,EAEjD,MAAM,SAAS,MAAM,IAAI,CAAC,SAAS;AAAA,IACjC,IAAI,CAAC,mBAAmB,KAAK,IAAI;AAAA,MAAG,OAAO,OAAO;AAAA,IAClD,OAAO,OAAO,SAAS,MAAM,EAAE;AAAA,GAChC;AAAA,EACD,IAAI,OAAO,KAAK,CAAC,UAAU,CAAC,OAAO,SAAS,KAAK,CAAC;AAAA,IAAG,OAAO;AAAA,EAE5D,OAAO,IAAI,MAAM,OAAO,WAAW,IAAI,CAAC,GAAG,OAAO,EAAE,IAAI;AAAA,EACxD,MAAM,SAAS,CAAC,MAAM,GAAG,KAAK,KAAM,MAAM,GAAG,KAAK,GAAI;AAAA,EACtD,OAAO,OAAO,KAAK,GAAG;AAAA;AAGxB,SAAS,gBAAgB,CAAC,IAA2B;AAAA,EACnD,IAAI;AAAA,IACF,OAAO,IAAI,IAAI,WAAW,MAAM,EAAE,SAAS,QAAQ,YAAY,EAAE;AAAA,IACjE,MAAM;AAAA,IACN,OAAO;AAAA;AAAA;AAIX,SAAS,oBAAoB,CAAC,IAAoB;AAAA,EAChD,MAAM,OAAO,kBAAkB,EAAE,EAAE,MAAM,GAAG,EAAE;AAAA,EAC9C,IAAI,CAAC;AAAA,IAAM,OAAO;AAAA,EAElB,IAAI,aAAa;AAAA,EACjB,IAAI,IAAI,KAAK,UAAU,MAAM,GAAG;AAAA,IAC9B,aAAa,iBAAiB,UAAU,KAAK;AAAA,EAC/C;AAAA,EAEA,IAAI,SAAwB;AAAA,EAC5B,IAAI,WAAW,WAAW,SAAS,GAAG;AAAA,IACpC,SAAS,WAAW,MAAM,UAAU,MAAM;AAAA,EAC5C,EAAO,SAAI,WAAW,WAAW,iBAAiB,GAAG;AAAA,IACnD,SAAS,WAAW,MAAM,kBAAkB,MAAM;AAAA,EACpD;AAAA,EACA,IAAI,CAAC;AAAA,IAAQ,OAAO;AAAA,EAEpB,IAAI,IAAI,KAAK,MAAM,MAAM;AAAA,IAAG,OAAO;AAAA,EACnC,OAAO,oBAAoB,MAAM,KAAK;AAAA;AAGxC,SAAS,MAAM,CAAC,MAAc,QAAgD;AAAA,EAC5E,MAAM,SAAS,eAAe,IAAI;AAAA,EAClC,IAAI,WAAW,MAAM;AAAA,IACnB,MAAM,IAAI,MAAM,mCAAmC,MAAM;AAAA,EAC3D;AAAA,EACA,MAAM,QAAQ,KAAK;AAAA,EACnB,MAAM,OAAO,UAAU,KAAK,IAAK,cAAc,UAAW;AAAA,EAC1D,OAAO,EAAE,MAAM,SAAS,MAAM,KAAK;AAAA;AAGrC,SAAS,cAAc,CAAC,IAA2B;AAAA,EACjD,MAAM,QAAQ,GAAG,MAAM,GAAG;AAAA,EAC1B,IAAI,MAAM,WAAW;AAAA,IAAG,OAAO;AAAA,EAE/B,IAAI,QAAQ;AAAA,EACZ,WAAW,QAAQ,OAAO;AAAA,IACxB,IAAI,CAAC,YAAY,KAAK,IAAI;AAAA,MAAG,OAAO;AAAA,IACpC,MAAM,QAAQ,OAAO,SAAS,MAAM,EAAE;AAAA,IACtC,IAAI,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,KAAK,QAAQ;AAAA,MAAK,OAAO;AAAA,IACjE,QAAS,SAAS,IAAK;AAAA,EACzB;AAAA,EAEA,OAAO,UAAU;AAAA;AAGnB,SAAS,aAAa,CAAC,IAAqB;AAAA,EAC1C,MAAM,QAAQ,eAAe,EAAE;AAAA,EAC/B,IAAI,UAAU;AAAA,IAAM,OAAO;AAAA,EAC3B,OAAO,mBAAmB,KAAK,CAAC,UAAU,QAAQ,KAAK,UAAU,KAAK,IAAI;AAAA;AAG5E,SAAS,aAAa,CAAC,IAAqB;AAAA,EAC1C,MAAM,aAAa,GAAG,YAAY;AAAA,EAClC,OACE,eAAe,QACf,eAAe,SACf,qBAAqB,KAAK,UAAU,KACpC,sBAAsB,KAAK,UAAU,KACrC,WAAW,WAAW,IAAI;AAAA;AAI9B,SAAS,WAAW,CAAC,IAAqB;AAAA,EACxC,MAAM,aAAa,qBAAqB,EAAE;AAAA,EAC1C,MAAM,SAAS,IAAI,KAAK,UAAU;AAAA,EAClC,IAAI,WAAW;AAAA,IAAG,OAAO,cAAc,UAAU;AAAA,EACjD,IAAI,WAAW;AAAA,IAAG,OAAO,cAAc,UAAU;AAAA,EACjD,OAAO;AAAA;AAGT,eAAsB,oBAAoB,CACxC,QACwB;AAAA,EACxB,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,SAAS,IAAI,IAAI,MAAM;AAAA,IACvB,MAAM;AAAA,IACN,OAAO,4BAA4B;AAAA;AAAA,EAGrC,IAAI,OAAO,aAAa,UAAU;AAAA,IAChC,OAAO,uCAAuC,OAAO,iBAAiB;AAAA,EACxE;AAAA,EAEA,MAAM,WAAW,kBAAkB,OAAO,QAAQ;AAAA,EAClD,IAAI,CAAC,UAAU;AAAA,IACb,OAAO,4BAA4B;AAAA,EACrC;AAAA,EAEA,IACE,aAAa,eACb,SAAS,SAAS,YAAY,KAC9B,SAAS,SAAS,QAAQ,GAC1B;AAAA,IACA,OAAO,mBAAmB;AAAA,EAC5B;AAAA,EAGA,MAAM,WAAW,QAAQ,IAAI,WAAW,KAAK,EAAE,YAAY;AAAA,EAC3D,IACE,MAIA;AAAA,IACA,OAAO;AAAA,EACT;AAAA,EAEA,IAAI,YAAY,QAAQ,GAAG;AAAA,IACzB,OAAO,mBAAmB;AAAA,EAC5B;AAAA,EAEA,IAAI;AAAA,IACF,MAAM,UAAU,MAAM,aAAa,UAAU,EAAE,KAAK,KAAK,CAAC;AAAA,IAC1D,MAAM,YAAY,MAAM,QAAQ,OAAO,IAAI,UAAU,CAAC,OAAO;AAAA,IAC7D,WAAW,SAAS,WAAW;AAAA,MAC7B,MAAM,KACJ,OAAO,UAAU,WACb,QACC,MAA8B;AAAA,MACrC,IAAI,YAAY,EAAE,GAAG;AAAA,QACnB,OACE,mBAAmB,uBAAuB,SAC1C;AAAA,MAEJ;AAAA,IACF;AAAA,IACA,MAAM;AAAA,IACN,OAAO,mBAAmB;AAAA;AAAA,EAG5B,OAAO;AAAA;AAAA,IArLH,cAEA;AAAA;AAAA,EAFA,eAAe,UAAU,IAAI,MAAM;AAAA,EAEnC,qBAA4D;AAAA,IAChE,OAAO,WAAW,CAAC;AAAA,IACnB,OAAO,YAAY,CAAC;AAAA,IACpB,OAAO,cAAc,EAAE;AAAA,IACvB,OAAO,eAAe,EAAE;AAAA,IACxB,OAAO,cAAc,EAAE;AAAA,IACvB,OAAO,aAAa,CAAC;AAAA,IACrB,OAAO,eAAe,EAAE;AAAA,IACxB,OAAO,aAAa,EAAE;AAAA,IACtB,OAAO,cAAc,EAAE;AAAA,IACvB,OAAO,aAAa,EAAE;AAAA,IACtB,OAAO,gBAAgB,EAAE;AAAA,IACzB,OAAO,eAAe,EAAE;AAAA,IACxB,OAAO,aAAa,CAAC;AAAA,IACrB,OAAO,aAAa,CAAC;AAAA,EACvB;AAAA;",
+  "debugId": "4ADEDB99210B0D5564756E2164756E21",
+  "names": []
+}

package/dist/cloud/x402-payment-handler.d.ts

@@ -0,0 +1,85 @@
+/**
+ * x402 (HTTP 402 Payment Required) handler for Eliza Cloud relays.
+ *
+ * Spec reference: https://www.x402.org
+ *
+ * When the user's Cloud credit balance can't cover a metered call, the
+ * Cloud relay returns HTTP 402 with a `payment-requirements` envelope —
+ * either as a `WWW-Authenticate: x402 <json>` header or as a JSON body
+ * with a top-level `paymentRequirements` array. Each requirement
+ * describes one acceptable payment option (asset, network, recipient,
+ * amount).
+ *
+ * This module is intentionally thin:
+ *   - `parseX402Response` extracts requirements from a Response.
+ *   - `PaymentRequiredError` carries them up to the action layer.
+ *   - `requestPayment` is the agent-side bridge: today it surfaces the
+ *     requirement back to the owner via the runtime logger so the UI /
+ *     planner can route the user to the existing wallet top-up flow.
+ *     Auto-pay intentionally lives outside this bridge — the actual money
+ *     movement is Cloud-side and gated by the wallet UI (commandment 4).
+ *
+ * No silent failures: a malformed 402 throws so the action layer can
+ * surface a clear "payment-required" message rather than treating the
+ * upstream as a generic HTTP error.
+ */
+import { type IAgentRuntime } from "@elizaos/core";
+/**
+ * One acceptable payment option as advertised by the server.
+ *
+ * Fields mirror the x402 spec's `paymentRequirements` entry. We type
+ * everything as required so silent partial parses are impossible — the
+ * parser either yields a complete requirement or rejects it.
+ */
+export interface X402PaymentRequirement {
+    /** Decimal amount in the asset's smallest unit (e.g. "1500000" for
+     *  1.50 USDC). String, not number, to preserve precision. */
+    readonly amount: string;
+    /** Asset symbol or ERC-20 contract address (e.g. "USDC"). */
+    readonly asset: string;
+    /** Network identifier (e.g. "base", "ethereum", "solana"). */
+    readonly network: string;
+    /** Recipient address that should receive the payment. */
+    readonly payTo: string;
+    /** Payment scheme — currently x402 supports "exact" only. */
+    readonly scheme: string;
+    /** ISO-8601 deadline after which the requirement is no longer valid. */
+    readonly expiresAt: string | null;
+    /** Human-readable description of the resource being purchased. */
+    readonly description: string | null;
+}
+/**
+ * Pull payment requirements out of an x402 response. Tries the header
+ * form first (lowest-overhead per spec), then falls back to the JSON
+ * body. Returns `null` when the response carries no parseable
+ * requirements — callers should treat that as a generic 402 and
+ * surface the upstream status text.
+ */
+export declare function parseX402Response(response: Response): Promise<X402PaymentRequirement[] | null>;
+/**
+ * Thrown by adapters when an upstream metered call returns 402 with
+ * actionable payment requirements. Action handlers convert this into an
+ * approval-queue entry so the user sees both the cost and the
+ * top-up prompt together.
+ */
+export declare class PaymentRequiredError extends Error {
+    readonly code: "PAYMENT_REQUIRED";
+    readonly requirements: ReadonlyArray<X402PaymentRequirement>;
+    constructor(requirements: ReadonlyArray<X402PaymentRequirement>, message?: string);
+}
+export interface PaymentReceipt {
+    readonly status: "surfaced" | "paid";
+    readonly requirement: X402PaymentRequirement;
+    /** Transaction id when status === "paid", null when only surfaced. */
+    readonly txId: string | null;
+}
+/**
+ * Bridge from a raw payment requirement to user action. For now this
+ * does not auto-pay: the actual money movement happens in the existing
+ * wallet UI (Cloud-side). We log the requirement so the agent's
+ * messaging surface and the desktop dev console both pick it up, then
+ * return a "surfaced" receipt for the action layer to forward into the
+ * approval queue.
+ */
+export declare function requestPayment(runtime: IAgentRuntime, requirements: ReadonlyArray<X402PaymentRequirement>): Promise<PaymentReceipt>;
+//# sourceMappingURL=x402-payment-handler.d.ts.map

package/dist/cloud/x402-payment-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402-payment-handler.d.ts","sourceRoot":"","sources":["../../src/cloud/x402-payment-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,KAAK,aAAa,EAAU,MAAM,eAAe,CAAC;AAE3D;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACrC;iEAC6D;IAC7D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,yDAAyD;IACzD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,kEAAkE;IAClE,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAuED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,QAAQ,GACjB,OAAO,CAAC,sBAAsB,EAAE,GAAG,IAAI,CAAC,CAqB1C;AAED;;;;;GAKG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,EAAG,kBAAkB,CAAU;IAC5C,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC,sBAAsB,CAAC,CAAC;gBAG3D,YAAY,EAAE,aAAa,CAAC,sBAAsB,CAAC,EACnD,OAAO,CAAC,EAAE,MAAM;CASnB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,sBAAsB,CAAC;IAC7C,sEAAsE;IACtE,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,aAAa,EACtB,YAAY,EAAE,aAAa,CAAC,sBAAsB,CAAC,GAClD,OAAO,CAAC,cAAc,CAAC,CAmBzB"}