@elizaos/plugin-personal-assistant 2.0.3-beta.5 → 2.0.3-beta.7

package/dist/lifeops/escalation-ladders.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Default escalation ladders. The runner injects one of these ladders when a
+ * `ScheduledTask` lacks an explicit `escalation` block, keyed off the task's
+ * `priority`:
+ * - `priority_low_default`    — single attempt, no ladder.
+ * - `priority_medium_default` — 1 retry after 30 min.
+ * - `priority_high_default`   — 3 steps across channels (in_app → push → imessage).
+ *
+ * Channel keys (`in_app`, `push`, `imessage`) reference
+ * {@link import("./channels/contract.js").ChannelContribution.kind}; the
+ * channel registry is responsible for resolving them at dispatch time.
+ */
+export type EscalationIntensity = "soft" | "normal" | "urgent";
+export interface EscalationStep {
+    delayMinutes: number;
+    channelKey: string;
+    intensity?: EscalationIntensity;
+}
+export interface EscalationLadder {
+    steps: EscalationStep[];
+}
+export declare const DEFAULT_ESCALATION_LADDERS: Readonly<{
+    priority_low_default: EscalationLadder;
+    priority_medium_default: EscalationLadder;
+    priority_high_default: EscalationLadder;
+}>;
+export type DefaultEscalationLadderKey = keyof typeof DEFAULT_ESCALATION_LADDERS;
+//# sourceMappingURL=escalation-ladders.d.ts.map

package/dist/lifeops/escalation-ladders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"escalation-ladders.d.ts","sourceRoot":"","sources":["../../src/lifeops/escalation-ladders.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE/D,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,mBAAmB,CAAC;CACjC;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,cAAc,EAAE,CAAC;CACzB;AAED,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC;IAChD,oBAAoB,EAAE,gBAAgB,CAAC;IACvC,uBAAuB,EAAE,gBAAgB,CAAC;IAC1C,qBAAqB,EAAE,gBAAgB,CAAC;CACzC,CAYS,CAAC;AAEX,MAAM,MAAM,0BAA0B,GACpC,MAAM,OAAO,0BAA0B,CAAC"}

package/dist/lifeops/escalation-ladders.js

@@ -0,0 +1,17 @@
+const DEFAULT_ESCALATION_LADDERS = {
+  priority_low_default: { steps: [] },
+  priority_medium_default: {
+    steps: [{ delayMinutes: 30, channelKey: "in_app", intensity: "normal" }]
+  },
+  priority_high_default: {
+    steps: [
+      { delayMinutes: 0, channelKey: "in_app", intensity: "soft" },
+      { delayMinutes: 15, channelKey: "push", intensity: "normal" },
+      { delayMinutes: 45, channelKey: "imessage", intensity: "urgent" }
+    ]
+  }
+};
+export {
+  DEFAULT_ESCALATION_LADDERS
+};
+//# sourceMappingURL=escalation-ladders.js.map

package/dist/lifeops/escalation-ladders.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/lifeops/escalation-ladders.ts"],"sourcesContent":["/**\n * Default escalation ladders. The runner injects one of these ladders when a\n * `ScheduledTask` lacks an explicit `escalation` block, keyed off the task's\n * `priority`:\n * - `priority_low_default`    — single attempt, no ladder.\n * - `priority_medium_default` — 1 retry after 30 min.\n * - `priority_high_default`   — 3 steps across channels (in_app → push → imessage).\n *\n * Channel keys (`in_app`, `push`, `imessage`) reference\n * {@link import(\"./channels/contract.js\").ChannelContribution.kind}; the\n * channel registry is responsible for resolving them at dispatch time.\n */\n\nexport type EscalationIntensity = \"soft\" | \"normal\" | \"urgent\";\n\nexport interface EscalationStep {\n  delayMinutes: number;\n  channelKey: string;\n  intensity?: EscalationIntensity;\n}\n\nexport interface EscalationLadder {\n  steps: EscalationStep[];\n}\n\nexport const DEFAULT_ESCALATION_LADDERS: Readonly<{\n  priority_low_default: EscalationLadder;\n  priority_medium_default: EscalationLadder;\n  priority_high_default: EscalationLadder;\n}> = {\n  priority_low_default: { steps: [] },\n  priority_medium_default: {\n    steps: [{ delayMinutes: 30, channelKey: \"in_app\", intensity: \"normal\" }],\n  },\n  priority_high_default: {\n    steps: [\n      { delayMinutes: 0, channelKey: \"in_app\", intensity: \"soft\" },\n      { delayMinutes: 15, channelKey: \"push\", intensity: \"normal\" },\n      { delayMinutes: 45, channelKey: \"imessage\", intensity: \"urgent\" },\n    ],\n  },\n} as const;\n\nexport type DefaultEscalationLadderKey =\n  keyof typeof DEFAULT_ESCALATION_LADDERS;\n"],"mappings":"AAyBO,MAAM,6BAIR;AAAA,EACH,sBAAsB,EAAE,OAAO,CAAC,EAAE;AAAA,EAClC,yBAAyB;AAAA,IACvB,OAAO,CAAC,EAAE,cAAc,IAAI,YAAY,UAAU,WAAW,SAAS,CAAC;AAAA,EACzE;AAAA,EACA,uBAAuB;AAAA,IACrB,OAAO;AAAA,MACL,EAAE,cAAc,GAAG,YAAY,UAAU,WAAW,OAAO;AAAA,MAC3D,EAAE,cAAc,IAAI,YAAY,QAAQ,WAAW,SAAS;AAAA,MAC5D,EAAE,cAAc,IAAI,YAAY,YAAY,WAAW,SAAS;AAAA,IAClE;AAAA,EACF;AACF;","names":[]}

package/dist/lifeops/fda-probe.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Probe macOS Full Disk Access (FDA) availability by attempting to open the
+ * user's `chat.db`. Used by the permissions panel to show whether the
+ * iMessage outbound probe is actually running or silently disabled.
+ *
+ * Status semantics:
+ *   - "granted": the chat.db file opened successfully.
+ *   - "revoked": file exists but OS denied read (EPERM / EACCES).
+ *   - "not_applicable": not darwin, or chat.db is missing (user never used
+ *     iMessage on this mac).
+ *   - "unknown": probe threw an unclassified error.
+ */
+export type FullDiskAccessStatus = "granted" | "revoked" | "not_applicable" | "unknown";
+export interface FullDiskAccessProbeResult {
+    status: FullDiskAccessStatus;
+    checkedAt: string;
+    chatDbPath: string;
+    reason: string | null;
+}
+export declare function probeFullDiskAccess(overrides?: {
+    chatDbPath?: string | null;
+}): Promise<FullDiskAccessProbeResult>;
+//# sourceMappingURL=fda-probe.d.ts.map

package/dist/lifeops/fda-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fda-probe.d.ts","sourceRoot":"","sources":["../../src/lifeops/fda-probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,MAAM,MAAM,oBAAoB,GAC5B,SAAS,GACT,SAAS,GACT,gBAAgB,GAChB,SAAS,CAAC;AAEd,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,oBAAoB,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAcD,wBAAsB,mBAAmB,CAAC,SAAS,CAAC,EAAE;IACpD,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAmDrC"}

package/dist/lifeops/fda-probe.js

@@ -0,0 +1,59 @@
+import { promises as fs } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+const DEFAULT_CHAT_DB_PATH = join(homedir(), "Library", "Messages", "chat.db");
+function isNodeErrno(value) {
+  return value instanceof Error && typeof value.code === "string";
+}
+async function probeFullDiskAccess(overrides) {
+  const checkedAt = (/* @__PURE__ */ new Date()).toISOString();
+  if (process.platform !== "darwin") {
+    return {
+      status: "not_applicable",
+      checkedAt,
+      chatDbPath: "",
+      reason: "FDA is only meaningful on macOS"
+    };
+  }
+  const chatDbPath = (overrides?.chatDbPath?.trim() || null) ?? process.env.IMESSAGE_DB_PATH?.trim() ?? DEFAULT_CHAT_DB_PATH;
+  try {
+    const handle = await fs.open(chatDbPath, "r");
+    await handle.close();
+    return { status: "granted", checkedAt, chatDbPath, reason: null };
+  } catch (error) {
+    if (isNodeErrno(error)) {
+      if (error.code === "ENOENT") {
+        return {
+          status: "not_applicable",
+          checkedAt,
+          chatDbPath,
+          reason: "chat.db not present (user may never have used iMessage)"
+        };
+      }
+      if (error.code === "EPERM" || error.code === "EACCES") {
+        return {
+          status: "revoked",
+          checkedAt,
+          chatDbPath,
+          reason: "Full Disk Access is required to read chat.db. Grant it to the app running Eliza, such as Eliza.app, Terminal, iTerm, or Cursor, then relaunch."
+        };
+      }
+      return {
+        status: "unknown",
+        checkedAt,
+        chatDbPath,
+        reason: `${error.code}: ${error.message}`
+      };
+    }
+    return {
+      status: "unknown",
+      checkedAt,
+      chatDbPath,
+      reason: error instanceof Error ? error.message : String(error)
+    };
+  }
+}
+export {
+  probeFullDiskAccess
+};
+//# sourceMappingURL=fda-probe.js.map

package/dist/lifeops/fda-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/lifeops/fda-probe.ts"],"sourcesContent":["/**\n * Probe macOS Full Disk Access (FDA) availability by attempting to open the\n * user's `chat.db`. Used by the permissions panel to show whether the\n * iMessage outbound probe is actually running or silently disabled.\n *\n * Status semantics:\n *   - \"granted\": the chat.db file opened successfully.\n *   - \"revoked\": file exists but OS denied read (EPERM / EACCES).\n *   - \"not_applicable\": not darwin, or chat.db is missing (user never used\n *     iMessage on this mac).\n *   - \"unknown\": probe threw an unclassified error.\n */\n\nimport { promises as fs } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\n\nexport type FullDiskAccessStatus =\n  | \"granted\"\n  | \"revoked\"\n  | \"not_applicable\"\n  | \"unknown\";\n\nexport interface FullDiskAccessProbeResult {\n  status: FullDiskAccessStatus;\n  checkedAt: string;\n  chatDbPath: string;\n  reason: string | null;\n}\n\nconst DEFAULT_CHAT_DB_PATH = join(homedir(), \"Library\", \"Messages\", \"chat.db\");\n\ninterface NodeErrno extends Error {\n  code?: string;\n}\n\nfunction isNodeErrno(value: unknown): value is NodeErrno {\n  return (\n    value instanceof Error && typeof (value as NodeErrno).code === \"string\"\n  );\n}\n\nexport async function probeFullDiskAccess(overrides?: {\n  chatDbPath?: string | null;\n}): Promise<FullDiskAccessProbeResult> {\n  const checkedAt = new Date().toISOString();\n  if (process.platform !== \"darwin\") {\n    return {\n      status: \"not_applicable\",\n      checkedAt,\n      chatDbPath: \"\",\n      reason: \"FDA is only meaningful on macOS\",\n    };\n  }\n  const chatDbPath =\n    (overrides?.chatDbPath?.trim() || null) ??\n    process.env.IMESSAGE_DB_PATH?.trim() ??\n    DEFAULT_CHAT_DB_PATH;\n  try {\n    const handle = await fs.open(chatDbPath, \"r\");\n    await handle.close();\n    return { status: \"granted\", checkedAt, chatDbPath, reason: null };\n  } catch (error) {\n    if (isNodeErrno(error)) {\n      if (error.code === \"ENOENT\") {\n        return {\n          status: \"not_applicable\",\n          checkedAt,\n          chatDbPath,\n          reason: \"chat.db not present (user may never have used iMessage)\",\n        };\n      }\n      if (error.code === \"EPERM\" || error.code === \"EACCES\") {\n        return {\n          status: \"revoked\",\n          checkedAt,\n          chatDbPath,\n          reason:\n            \"Full Disk Access is required to read chat.db. Grant it to the app running Eliza, such as Eliza.app, Terminal, iTerm, or Cursor, then relaunch.\",\n        };\n      }\n      return {\n        status: \"unknown\",\n        checkedAt,\n        chatDbPath,\n        reason: `${error.code}: ${error.message}`,\n      };\n    }\n    return {\n      status: \"unknown\",\n      checkedAt,\n      chatDbPath,\n      reason: error instanceof Error ? error.message : String(error),\n    };\n  }\n}\n"],"mappings":"AAaA,SAAS,YAAY,UAAU;AAC/B,SAAS,eAAe;AACxB,SAAS,YAAY;AAerB,MAAM,uBAAuB,KAAK,QAAQ,GAAG,WAAW,YAAY,SAAS;AAM7E,SAAS,YAAY,OAAoC;AACvD,SACE,iBAAiB,SAAS,OAAQ,MAAoB,SAAS;AAEnE;AAEA,eAAsB,oBAAoB,WAEH;AACrC,QAAM,aAAY,oBAAI,KAAK,GAAE,YAAY;AACzC,MAAI,QAAQ,aAAa,UAAU;AACjC,WAAO;AAAA,MACL,QAAQ;AAAA,MACR;AAAA,MACA,YAAY;AAAA,MACZ,QAAQ;AAAA,IACV;AAAA,EACF;AACA,QAAM,cACH,WAAW,YAAY,KAAK,KAAK,SAClC,QAAQ,IAAI,kBAAkB,KAAK,KACnC;AACF,MAAI;AACF,UAAM,SAAS,MAAM,GAAG,KAAK,YAAY,GAAG;AAC5C,UAAM,OAAO,MAAM;AACnB,WAAO,EAAE,QAAQ,WAAW,WAAW,YAAY,QAAQ,KAAK;AAAA,EAClE,SAAS,OAAO;AACd,QAAI,YAAY,KAAK,GAAG;AACtB,UAAI,MAAM,SAAS,UAAU;AAC3B,eAAO;AAAA,UACL,QAAQ;AAAA,UACR;AAAA,UACA;AAAA,UACA,QAAQ;AAAA,QACV;AAAA,MACF;AACA,UAAI,MAAM,SAAS,WAAW,MAAM,SAAS,UAAU;AACrD,eAAO;AAAA,UACL,QAAQ;AAAA,UACR;AAAA,UACA;AAAA,UACA,QACE;AAAA,QACJ;AAAA,MACF;AACA,aAAO;AAAA,QACL,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA,QAAQ,GAAG,MAAM,IAAI,KAAK,MAAM,OAAO;AAAA,MACzC;AAAA,IACF;AACA,WAAO;AAAA,MACL,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,MACA,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,IAC/D;AAAA,EACF;AACF;","names":[]}

package/dist/lifeops/feature-flags.d.ts

@@ -0,0 +1,24 @@
+import { type IAgentRuntime } from "@elizaos/core";
+import { type FeatureFlagService, type LifeOpsFeatureFlagKey } from "./feature-flags.types.js";
+/**
+ * Cached factory — returns the same service instance per runtime so
+ * `subscribeChanges` listeners stay attached across action invocations.
+ */
+export declare function createFeatureFlagService(runtime: IAgentRuntime): FeatureFlagService;
+/**
+ * Convenience guard for action handlers. Throws `FeatureNotEnabledError`
+ * when the feature is off, with Cloud-aware messaging so the planner can
+ * suggest signing in to Eliza Cloud as the easiest path.
+ *
+ * Accepts both built-in `LifeOpsFeatureKey` values (compile-time safety
+ * preserved for first-party callers like `requireFeatureEnabled(runtime,
+ * "travel.book_flight")`) and any registered 3rd-party `LifeOpsFeatureFlagKey`.
+ */
+export declare function requireFeatureEnabled(runtime: IAgentRuntime, key: LifeOpsFeatureFlagKey): Promise<void>;
+/**
+ * Re-export of the baseline. Most callers should use
+ * `resolveFeatureDefaults({cloudLinked})` instead — this constant exists
+ * for descriptions/labels that do not vary with Cloud-link state.
+ */
+export { BASE_FEATURE_DEFAULTS } from "./feature-flags.types.js";
+//# sourceMappingURL=feature-flags.d.ts.map

package/dist/lifeops/feature-flags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-flags.d.ts","sourceRoot":"","sources":["../../src/lifeops/feature-flags.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,aAAa,EAAwB,MAAM,eAAe,CAAC;AACzE,OAAO,EAGL,KAAK,kBAAkB,EAIvB,KAAK,qBAAqB,EAE3B,MAAM,0BAA0B,CAAC;AAyUlC;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,aAAa,GACrB,kBAAkB,CAMpB;AAED;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,aAAa,EACtB,GAAG,EAAE,qBAAqB,GACzB,OAAO,CAAC,IAAI,CAAC,CAaf;AAED;;;;GAIG;AACH,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/lifeops/feature-flags.js

@@ -0,0 +1,261 @@
+import { logger } from "@elizaos/core";
+import {
+  ALL_FEATURE_KEYS,
+  isLifeOpsFeatureKey,
+  resolveFeatureDefaults
+} from "./feature-flags.types.js";
+import {
+  getFeatureFlagRegistry,
+  UnknownFeatureFlagError
+} from "./registries/feature-flag-registry.js";
+import {
+  executeRawSql,
+  parseJsonRecord,
+  sqlBoolean,
+  sqlJson,
+  sqlText,
+  toBoolean,
+  toText
+} from "./sql.js";
+const SELECT_COLUMNS = "feature_key, enabled, source, enabled_at, enabled_by, metadata, created_at, updated_at";
+const ALLOWED_SOURCES = /* @__PURE__ */ new Set([
+  "local",
+  "cloud"
+]);
+function isCloudAuthService(service) {
+  return service !== null && typeof service.isAuthenticated === "function";
+}
+function readCloudLinked(runtime) {
+  const getService = runtime.getService;
+  const service = typeof getService === "function" ? getService.call(runtime, "CLOUD_AUTH") : null;
+  if (!isCloudAuthService(service)) {
+    return false;
+  }
+  return service.isAuthenticated() === true;
+}
+function resolveDescriptor(runtime, key, cloudLinked) {
+  if (isLifeOpsFeatureKey(key)) {
+    const def = resolveFeatureDefaults({ cloudLinked })[key];
+    return {
+      enabled: def.enabled,
+      label: def.label,
+      description: def.description,
+      costsMoney: def.costsMoney
+    };
+  }
+  const registry = getFeatureFlagRegistry(runtime);
+  const contribution = registry?.get(key) ?? null;
+  if (!contribution) {
+    const known = registry?.list().map((c) => c.key) ?? [];
+    throw new UnknownFeatureFlagError(key, known);
+  }
+  const costsMoney = contribution.metadata?.costsMoney === "true";
+  return {
+    enabled: contribution.defaultEnabled,
+    label: contribution.label,
+    description: contribution.description,
+    costsMoney
+  };
+}
+function rowToState(runtime, row, fallback, cloudLinked) {
+  const featureKey = toText(row.feature_key);
+  const descriptor = resolveDescriptor(runtime, featureKey, cloudLinked);
+  const sourceText = toText(row.source);
+  if (!ALLOWED_SOURCES.has(sourceText)) {
+    throw new Error(`[FeatureFlags] unknown source from db: ${sourceText}`);
+  }
+  const enabledAtRaw = row.enabled_at;
+  let enabledAt = null;
+  if (enabledAtRaw instanceof Date) {
+    enabledAt = enabledAtRaw;
+  } else if (typeof enabledAtRaw === "string" && enabledAtRaw.length > 0) {
+    const parsed = new Date(enabledAtRaw);
+    if (Number.isNaN(parsed.getTime())) {
+      throw new Error(
+        `[FeatureFlags] invalid enabled_at for ${fallback}: ${enabledAtRaw}`
+      );
+    }
+    enabledAt = parsed;
+  }
+  const enabledByText = toText(row.enabled_by);
+  return {
+    featureKey,
+    enabled: toBoolean(row.enabled),
+    source: sourceText,
+    enabledAt,
+    enabledBy: enabledByText.length > 0 ? enabledByText : null,
+    label: descriptor.label,
+    description: descriptor.description,
+    costsMoney: descriptor.costsMoney,
+    metadata: parseJsonRecord(row.metadata)
+  };
+}
+function defaultState(runtime, key, cloudLinked) {
+  const descriptor = resolveDescriptor(runtime, key, cloudLinked);
+  return {
+    featureKey: key,
+    enabled: descriptor.enabled,
+    source: "default",
+    enabledAt: null,
+    enabledBy: null,
+    label: descriptor.label,
+    description: descriptor.description,
+    costsMoney: descriptor.costsMoney,
+    metadata: {}
+  };
+}
+class PgFeatureFlagService {
+  runtime;
+  listeners = /* @__PURE__ */ new Set();
+  /**
+   * Per-request cache of the Cloud-link state. Service instances live for
+   * the runtime's lifetime; we re-resolve on every entrypoint call so that
+   * sign-in/sign-out flips are picked up without restarting the runtime.
+   * The cache exists only to dedupe within a single high-level call (e.g.
+   * `list()` resolves once even though it composes many rows).
+   */
+  cloudLinkedSnapshot = null;
+  constructor(runtime) {
+    this.runtime = runtime;
+  }
+  snapshotCloudLinked() {
+    if (this.cloudLinkedSnapshot !== null) {
+      return this.cloudLinkedSnapshot;
+    }
+    const linked = readCloudLinked(this.runtime);
+    this.cloudLinkedSnapshot = linked;
+    return linked;
+  }
+  clearCloudSnapshot() {
+    this.cloudLinkedSnapshot = null;
+  }
+  async isEnabled(key) {
+    const state = await this.get(key);
+    return state.enabled;
+  }
+  async get(key) {
+    const cloudLinked = this.snapshotCloudLinked();
+    try {
+      const sql = `SELECT ${SELECT_COLUMNS} FROM app_lifeops.lifeops_features
+        WHERE feature_key = ${sqlText(key)}
+        LIMIT 1`;
+      const rows = await executeRawSql(this.runtime, sql);
+      if (rows.length === 0) {
+        return defaultState(this.runtime, key, cloudLinked);
+      }
+      return rowToState(this.runtime, rows[0], key, cloudLinked);
+    } finally {
+      this.clearCloudSnapshot();
+    }
+  }
+  async list() {
+    const cloudLinked = this.snapshotCloudLinked();
+    try {
+      const sql = `SELECT ${SELECT_COLUMNS} FROM app_lifeops.lifeops_features`;
+      const rows = await executeRawSql(this.runtime, sql);
+      const byKey = /* @__PURE__ */ new Map();
+      for (const row of rows) {
+        const text = toText(row.feature_key);
+        byKey.set(text, rowToState(this.runtime, row, text, cloudLinked));
+      }
+      const registry = getFeatureFlagRegistry(this.runtime);
+      const known = new Set(ALL_FEATURE_KEYS);
+      if (registry) {
+        for (const contribution of registry.list()) {
+          known.add(contribution.key);
+        }
+      }
+      return Array.from(known).map(
+        (key) => byKey.get(key) ?? defaultState(this.runtime, key, cloudLinked)
+      );
+    } finally {
+      this.clearCloudSnapshot();
+    }
+  }
+  enable(key, source, enabledBy, metadata) {
+    return this.upsert(key, true, source, enabledBy, metadata);
+  }
+  disable(key, source, enabledBy) {
+    return this.upsert(key, false, source, enabledBy, void 0);
+  }
+  subscribeChanges(handler) {
+    this.listeners.add(handler);
+    return () => {
+      this.listeners.delete(handler);
+    };
+  }
+  async upsert(key, enabled, source, enabledBy, metadata) {
+    if (source === "default") {
+      throw new Error(
+        "[FeatureFlags] refusing to write a row with source='default'"
+      );
+    }
+    const cloudLinked = this.snapshotCloudLinked();
+    try {
+      const enabledAtSql = enabled ? `(${sqlText((/* @__PURE__ */ new Date()).toISOString())}::timestamptz)` : "NULL";
+      const enabledBySql = enabledBy ? sqlText(enabledBy) : "NULL";
+      const metadataSql = sqlJson(metadata ?? {});
+      const sql = `INSERT INTO app_lifeops.lifeops_features (
+          feature_key, enabled, source, enabled_at, enabled_by, metadata, created_at, updated_at
+        ) VALUES (
+          ${sqlText(key)},
+          ${sqlBoolean(enabled)},
+          ${sqlText(source)},
+          ${enabledAtSql},
+          ${enabledBySql},
+          ${metadataSql},
+          now(),
+          now()
+        )
+        ON CONFLICT (feature_key) DO UPDATE SET
+          enabled = EXCLUDED.enabled,
+          source = EXCLUDED.source,
+          enabled_at = EXCLUDED.enabled_at,
+          enabled_by = EXCLUDED.enabled_by,
+          metadata = EXCLUDED.metadata,
+          updated_at = now()
+        RETURNING ${SELECT_COLUMNS}`;
+      const rows = await executeRawSql(this.runtime, sql);
+      if (rows.length === 0) {
+        throw new Error(`[FeatureFlags] upsert returned no rows for ${key}`);
+      }
+      const state = rowToState(this.runtime, rows[0], key, cloudLinked);
+      logger.info(
+        `[FeatureFlags] ${key} ${enabled ? "enabled" : "disabled"} via ${source}` + (enabledBy ? ` by ${enabledBy}` : "")
+      );
+      for (const listener of this.listeners) {
+        listener(state);
+      }
+      return state;
+    } finally {
+      this.clearCloudSnapshot();
+    }
+  }
+}
+const RUNTIME_CACHE = /* @__PURE__ */ new WeakMap();
+function createFeatureFlagService(runtime) {
+  const existing = RUNTIME_CACHE.get(runtime);
+  if (existing) return existing;
+  const service = new PgFeatureFlagService(runtime);
+  RUNTIME_CACHE.set(runtime, service);
+  return service;
+}
+async function requireFeatureEnabled(runtime, key) {
+  const service = createFeatureFlagService(runtime);
+  if (await service.isEnabled(key)) return;
+  const { FeatureNotEnabledError } = await import("./feature-flags.types.js");
+  const registry = getFeatureFlagRegistry(runtime);
+  const contribution = registry?.get(key) ?? null;
+  const costsMoney = contribution?.metadata?.costsMoney === "true";
+  throw new FeatureNotEnabledError(key, {
+    cloudLinked: readCloudLinked(runtime),
+    costsMoney
+  });
+}
+import { BASE_FEATURE_DEFAULTS } from "./feature-flags.types.js";
+export {
+  BASE_FEATURE_DEFAULTS,
+  createFeatureFlagService,
+  requireFeatureEnabled
+};
+//# sourceMappingURL=feature-flags.js.map

package/dist/lifeops/feature-flags.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/lifeops/feature-flags.ts"],"sourcesContent":["import { type IAgentRuntime, logger, type Service } from \"@elizaos/core\";\nimport {\n  ALL_FEATURE_KEYS,\n  type FeatureFlagChangeListener,\n  type FeatureFlagService,\n  type FeatureFlagSource,\n  type FeatureFlagState,\n  isLifeOpsFeatureKey,\n  type LifeOpsFeatureFlagKey,\n  resolveFeatureDefaults,\n} from \"./feature-flags.types.js\";\nimport {\n  getFeatureFlagRegistry,\n  UnknownFeatureFlagError,\n} from \"./registries/feature-flag-registry.js\";\nimport {\n  executeRawSql,\n  parseJsonRecord,\n  sqlBoolean,\n  sqlJson,\n  sqlText,\n  toBoolean,\n  toText,\n} from \"./sql.js\";\n\n/**\n * SQL-backed FeatureFlagService.\n *\n * Reads & writes the `app_lifeops.lifeops_features` table owned by `app-lifeops` and\n * migrated via the plugin's `schema` export.\n * Compile-time defaults (`FEATURE_DEFAULTS`) are the authority when no row\n * exists. The runtime never writes a row with `source = 'default'` —\n * absence is the canonical representation of an unmodified default\n * (Commandment 7).\n */\n\nconst SELECT_COLUMNS =\n  \"feature_key, enabled, source, enabled_at, enabled_by, metadata, created_at, updated_at\";\n\nconst ALLOWED_SOURCES: ReadonlySet<FeatureFlagSource> = new Set([\n  \"local\",\n  \"cloud\",\n]);\n\ninterface CloudAuthService extends Service {\n  isAuthenticated(): boolean;\n}\n\nfunction isCloudAuthService(\n  service: Service | null,\n): service is Service & CloudAuthService {\n  return (\n    service !== null &&\n    typeof (service as Partial<CloudAuthService>).isAuthenticated === \"function\"\n  );\n}\n\nfunction readCloudLinked(runtime: IAgentRuntime): boolean {\n  const getService = (\n    runtime as IAgentRuntime & {\n      getService?: (serviceType: string) => Service | null;\n    }\n  ).getService;\n  const service =\n    typeof getService === \"function\"\n      ? getService.call(runtime, \"CLOUD_AUTH\")\n      : null;\n  if (!isCloudAuthService(service)) {\n    return false;\n  }\n  return service.isAuthenticated() === true;\n}\n\ninterface FeatureFlagDescriptor {\n  readonly enabled: boolean;\n  readonly label: string;\n  readonly description: string;\n  readonly costsMoney: boolean;\n}\n\n/**\n * Resolve label/description/baseline-enabled/costsMoney for a feature key.\n *\n * Built-in keys (`isLifeOpsFeatureKey`) read from the Cloud-aware\n * `resolveFeatureDefaults`. Registered 3rd-party keys read from the\n * `FeatureFlagRegistry` contribution. Unknown keys throw\n * `UnknownFeatureFlagError`.\n */\nfunction resolveDescriptor(\n  runtime: IAgentRuntime,\n  key: LifeOpsFeatureFlagKey,\n  cloudLinked: boolean,\n): FeatureFlagDescriptor {\n  if (isLifeOpsFeatureKey(key)) {\n    const def = resolveFeatureDefaults({ cloudLinked })[key];\n    return {\n      enabled: def.enabled,\n      label: def.label,\n      description: def.description,\n      costsMoney: def.costsMoney,\n    };\n  }\n  const registry = getFeatureFlagRegistry(runtime);\n  const contribution = registry?.get(key) ?? null;\n  if (!contribution) {\n    const known = registry?.list().map((c) => c.key) ?? [];\n    throw new UnknownFeatureFlagError(key, known);\n  }\n  const costsMoney = contribution.metadata?.costsMoney === \"true\";\n  return {\n    enabled: contribution.defaultEnabled,\n    label: contribution.label,\n    description: contribution.description,\n    costsMoney,\n  };\n}\n\nfunction rowToState(\n  runtime: IAgentRuntime,\n  row: Record<string, unknown>,\n  fallback: LifeOpsFeatureFlagKey,\n  cloudLinked: boolean,\n): FeatureFlagState {\n  const featureKey = toText(row.feature_key);\n  const descriptor = resolveDescriptor(runtime, featureKey, cloudLinked);\n  const sourceText = toText(row.source);\n  if (!ALLOWED_SOURCES.has(sourceText as FeatureFlagSource)) {\n    throw new Error(`[FeatureFlags] unknown source from db: ${sourceText}`);\n  }\n  const enabledAtRaw = row.enabled_at;\n  let enabledAt: Date | null = null;\n  if (enabledAtRaw instanceof Date) {\n    enabledAt = enabledAtRaw;\n  } else if (typeof enabledAtRaw === \"string\" && enabledAtRaw.length > 0) {\n    const parsed = new Date(enabledAtRaw);\n    if (Number.isNaN(parsed.getTime())) {\n      throw new Error(\n        `[FeatureFlags] invalid enabled_at for ${fallback}: ${enabledAtRaw}`,\n      );\n    }\n    enabledAt = parsed;\n  }\n  const enabledByText = toText(row.enabled_by);\n  return {\n    featureKey,\n    enabled: toBoolean(row.enabled),\n    source: sourceText as FeatureFlagSource,\n    enabledAt,\n    enabledBy: enabledByText.length > 0 ? enabledByText : null,\n    label: descriptor.label,\n    description: descriptor.description,\n    costsMoney: descriptor.costsMoney,\n    metadata: parseJsonRecord(row.metadata),\n  };\n}\n\nfunction defaultState(\n  runtime: IAgentRuntime,\n  key: LifeOpsFeatureFlagKey,\n  cloudLinked: boolean,\n): FeatureFlagState {\n  const descriptor = resolveDescriptor(runtime, key, cloudLinked);\n  return {\n    featureKey: key,\n    enabled: descriptor.enabled,\n    source: \"default\",\n    enabledAt: null,\n    enabledBy: null,\n    label: descriptor.label,\n    description: descriptor.description,\n    costsMoney: descriptor.costsMoney,\n    metadata: {},\n  };\n}\n\nclass PgFeatureFlagService implements FeatureFlagService {\n  private readonly runtime: IAgentRuntime;\n  private readonly listeners = new Set<FeatureFlagChangeListener>();\n  /**\n   * Per-request cache of the Cloud-link state. Service instances live for\n   * the runtime's lifetime; we re-resolve on every entrypoint call so that\n   * sign-in/sign-out flips are picked up without restarting the runtime.\n   * The cache exists only to dedupe within a single high-level call (e.g.\n   * `list()` resolves once even though it composes many rows).\n   */\n  private cloudLinkedSnapshot: boolean | null = null;\n\n  constructor(runtime: IAgentRuntime) {\n    this.runtime = runtime;\n  }\n\n  private snapshotCloudLinked(): boolean {\n    if (this.cloudLinkedSnapshot !== null) {\n      return this.cloudLinkedSnapshot;\n    }\n    const linked = readCloudLinked(this.runtime);\n    this.cloudLinkedSnapshot = linked;\n    return linked;\n  }\n\n  private clearCloudSnapshot(): void {\n    this.cloudLinkedSnapshot = null;\n  }\n\n  async isEnabled(key: LifeOpsFeatureFlagKey): Promise<boolean> {\n    const state = await this.get(key);\n    return state.enabled;\n  }\n\n  async get(key: LifeOpsFeatureFlagKey): Promise<FeatureFlagState> {\n    const cloudLinked = this.snapshotCloudLinked();\n    try {\n      const sql = `SELECT ${SELECT_COLUMNS} FROM app_lifeops.lifeops_features\n        WHERE feature_key = ${sqlText(key)}\n        LIMIT 1`;\n      const rows = await executeRawSql(this.runtime, sql);\n      if (rows.length === 0) {\n        return defaultState(this.runtime, key, cloudLinked);\n      }\n      return rowToState(this.runtime, rows[0], key, cloudLinked);\n    } finally {\n      this.clearCloudSnapshot();\n    }\n  }\n\n  async list(): Promise<ReadonlyArray<FeatureFlagState>> {\n    const cloudLinked = this.snapshotCloudLinked();\n    try {\n      const sql = `SELECT ${SELECT_COLUMNS} FROM app_lifeops.lifeops_features`;\n      const rows = await executeRawSql(this.runtime, sql);\n      const byKey = new Map<LifeOpsFeatureFlagKey, FeatureFlagState>();\n      for (const row of rows) {\n        const text = toText(row.feature_key);\n        byKey.set(text, rowToState(this.runtime, row, text, cloudLinked));\n      }\n      // The registry is the source of truth for \"which flags exist\". Built-in\n      // keys are always included (for back-compat with `ALL_FEATURE_KEYS`\n      // callers); 3rd-party registered keys are surfaced too. DB-only rows\n      // for keys the registry doesn't know about are dropped (caller likely\n      // un-registered them).\n      const registry = getFeatureFlagRegistry(this.runtime);\n      const known = new Set<LifeOpsFeatureFlagKey>(ALL_FEATURE_KEYS);\n      if (registry) {\n        for (const contribution of registry.list()) {\n          known.add(contribution.key);\n        }\n      }\n      return Array.from(known).map(\n        (key) => byKey.get(key) ?? defaultState(this.runtime, key, cloudLinked),\n      );\n    } finally {\n      this.clearCloudSnapshot();\n    }\n  }\n\n  enable(\n    key: LifeOpsFeatureFlagKey,\n    source: FeatureFlagSource,\n    enabledBy: string | null,\n    metadata?: Readonly<Record<string, unknown>>,\n  ): Promise<FeatureFlagState> {\n    return this.upsert(key, true, source, enabledBy, metadata);\n  }\n\n  disable(\n    key: LifeOpsFeatureFlagKey,\n    source: FeatureFlagSource,\n    enabledBy: string | null,\n  ): Promise<FeatureFlagState> {\n    return this.upsert(key, false, source, enabledBy, undefined);\n  }\n\n  subscribeChanges(handler: FeatureFlagChangeListener): () => void {\n    this.listeners.add(handler);\n    return () => {\n      this.listeners.delete(handler);\n    };\n  }\n\n  private async upsert(\n    key: LifeOpsFeatureFlagKey,\n    enabled: boolean,\n    source: FeatureFlagSource,\n    enabledBy: string | null,\n    metadata: Readonly<Record<string, unknown>> | undefined,\n  ): Promise<FeatureFlagState> {\n    if (source === \"default\") {\n      throw new Error(\n        \"[FeatureFlags] refusing to write a row with source='default'\",\n      );\n    }\n    const cloudLinked = this.snapshotCloudLinked();\n    try {\n      const enabledAtSql = enabled\n        ? `(${sqlText(new Date().toISOString())}::timestamptz)`\n        : \"NULL\";\n      const enabledBySql = enabledBy ? sqlText(enabledBy) : \"NULL\";\n      const metadataSql = sqlJson(metadata ?? {});\n      const sql = `INSERT INTO app_lifeops.lifeops_features (\n          feature_key, enabled, source, enabled_at, enabled_by, metadata, created_at, updated_at\n        ) VALUES (\n          ${sqlText(key)},\n          ${sqlBoolean(enabled)},\n          ${sqlText(source)},\n          ${enabledAtSql},\n          ${enabledBySql},\n          ${metadataSql},\n          now(),\n          now()\n        )\n        ON CONFLICT (feature_key) DO UPDATE SET\n          enabled = EXCLUDED.enabled,\n          source = EXCLUDED.source,\n          enabled_at = EXCLUDED.enabled_at,\n          enabled_by = EXCLUDED.enabled_by,\n          metadata = EXCLUDED.metadata,\n          updated_at = now()\n        RETURNING ${SELECT_COLUMNS}`;\n      const rows = await executeRawSql(this.runtime, sql);\n      if (rows.length === 0) {\n        throw new Error(`[FeatureFlags] upsert returned no rows for ${key}`);\n      }\n      const state = rowToState(this.runtime, rows[0], key, cloudLinked);\n      logger.info(\n        `[FeatureFlags] ${key} ${enabled ? \"enabled\" : \"disabled\"} via ${source}` +\n          (enabledBy ? ` by ${enabledBy}` : \"\"),\n      );\n      for (const listener of this.listeners) {\n        listener(state);\n      }\n      return state;\n    } finally {\n      this.clearCloudSnapshot();\n    }\n  }\n}\n\nconst RUNTIME_CACHE = new WeakMap<IAgentRuntime, FeatureFlagService>();\n\n/**\n * Cached factory — returns the same service instance per runtime so\n * `subscribeChanges` listeners stay attached across action invocations.\n */\nexport function createFeatureFlagService(\n  runtime: IAgentRuntime,\n): FeatureFlagService {\n  const existing = RUNTIME_CACHE.get(runtime);\n  if (existing) return existing;\n  const service = new PgFeatureFlagService(runtime);\n  RUNTIME_CACHE.set(runtime, service);\n  return service;\n}\n\n/**\n * Convenience guard for action handlers. Throws `FeatureNotEnabledError`\n * when the feature is off, with Cloud-aware messaging so the planner can\n * suggest signing in to Eliza Cloud as the easiest path.\n *\n * Accepts both built-in `LifeOpsFeatureKey` values (compile-time safety\n * preserved for first-party callers like `requireFeatureEnabled(runtime,\n * \"travel.book_flight\")`) and any registered 3rd-party `LifeOpsFeatureFlagKey`.\n */\nexport async function requireFeatureEnabled(\n  runtime: IAgentRuntime,\n  key: LifeOpsFeatureFlagKey,\n): Promise<void> {\n  const service = createFeatureFlagService(runtime);\n  if (await service.isEnabled(key)) return;\n  const { FeatureNotEnabledError } = await import(\"./feature-flags.types.js\");\n  // Carry costsMoney from the registry contribution so 3rd-party flags get\n  // the same Cloud opt-in suggestion treatment as built-ins.\n  const registry = getFeatureFlagRegistry(runtime);\n  const contribution = registry?.get(key) ?? null;\n  const costsMoney = contribution?.metadata?.costsMoney === \"true\";\n  throw new FeatureNotEnabledError(key, {\n    cloudLinked: readCloudLinked(runtime),\n    costsMoney,\n  });\n}\n\n/**\n * Re-export of the baseline. Most callers should use\n * `resolveFeatureDefaults({cloudLinked})` instead — this constant exists\n * for descriptions/labels that do not vary with Cloud-link state.\n */\nexport { BASE_FEATURE_DEFAULTS } from \"./feature-flags.types.js\";\n"],"mappings":"AAAA,SAA6B,cAA4B;AACzD;AAAA,EACE;AAAA,EAKA;AAAA,EAEA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAaP,MAAM,iBACJ;AAEF,MAAM,kBAAkD,oBAAI,IAAI;AAAA,EAC9D;AAAA,EACA;AACF,CAAC;AAMD,SAAS,mBACP,SACuC;AACvC,SACE,YAAY,QACZ,OAAQ,QAAsC,oBAAoB;AAEtE;AAEA,SAAS,gBAAgB,SAAiC;AACxD,QAAM,aACJ,QAGA;AACF,QAAM,UACJ,OAAO,eAAe,aAClB,WAAW,KAAK,SAAS,YAAY,IACrC;AACN,MAAI,CAAC,mBAAmB,OAAO,GAAG;AAChC,WAAO;AAAA,EACT;AACA,SAAO,QAAQ,gBAAgB,MAAM;AACvC;AAiBA,SAAS,kBACP,SACA,KACA,aACuB;AACvB,MAAI,oBAAoB,GAAG,GAAG;AAC5B,UAAM,MAAM,uBAAuB,EAAE,YAAY,CAAC,EAAE,GAAG;AACvD,WAAO;AAAA,MACL,SAAS,IAAI;AAAA,MACb,OAAO,IAAI;AAAA,MACX,aAAa,IAAI;AAAA,MACjB,YAAY,IAAI;AAAA,IAClB;AAAA,EACF;AACA,QAAM,WAAW,uBAAuB,OAAO;AAC/C,QAAM,eAAe,UAAU,IAAI,GAAG,KAAK;AAC3C,MAAI,CAAC,cAAc;AACjB,UAAM,QAAQ,UAAU,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC;AACrD,UAAM,IAAI,wBAAwB,KAAK,KAAK;AAAA,EAC9C;AACA,QAAM,aAAa,aAAa,UAAU,eAAe;AACzD,SAAO;AAAA,IACL,SAAS,aAAa;AAAA,IACtB,OAAO,aAAa;AAAA,IACpB,aAAa,aAAa;AAAA,IAC1B;AAAA,EACF;AACF;AAEA,SAAS,WACP,SACA,KACA,UACA,aACkB;AAClB,QAAM,aAAa,OAAO,IAAI,WAAW;AACzC,QAAM,aAAa,kBAAkB,SAAS,YAAY,WAAW;AACrE,QAAM,aAAa,OAAO,IAAI,MAAM;AACpC,MAAI,CAAC,gBAAgB,IAAI,UAA+B,GAAG;AACzD,UAAM,IAAI,MAAM,0CAA0C,UAAU,EAAE;AAAA,EACxE;AACA,QAAM,eAAe,IAAI;AACzB,MAAI,YAAyB;AAC7B,MAAI,wBAAwB,MAAM;AAChC,gBAAY;AAAA,EACd,WAAW,OAAO,iBAAiB,YAAY,aAAa,SAAS,GAAG;AACtE,UAAM,SAAS,IAAI,KAAK,YAAY;AACpC,QAAI,OAAO,MAAM,OAAO,QAAQ,CAAC,GAAG;AAClC,YAAM,IAAI;AAAA,QACR,yCAAyC,QAAQ,KAAK,YAAY;AAAA,MACpE;AAAA,IACF;AACA,gBAAY;AAAA,EACd;AACA,QAAM,gBAAgB,OAAO,IAAI,UAAU;AAC3C,SAAO;AAAA,IACL;AAAA,IACA,SAAS,UAAU,IAAI,OAAO;AAAA,IAC9B,QAAQ;AAAA,IACR;AAAA,IACA,WAAW,cAAc,SAAS,IAAI,gBAAgB;AAAA,IACtD,OAAO,WAAW;AAAA,IAClB,aAAa,WAAW;AAAA,IACxB,YAAY,WAAW;AAAA,IACvB,UAAU,gBAAgB,IAAI,QAAQ;AAAA,EACxC;AACF;AAEA,SAAS,aACP,SACA,KACA,aACkB;AAClB,QAAM,aAAa,kBAAkB,SAAS,KAAK,WAAW;AAC9D,SAAO;AAAA,IACL,YAAY;AAAA,IACZ,SAAS,WAAW;AAAA,IACpB,QAAQ;AAAA,IACR,WAAW;AAAA,IACX,WAAW;AAAA,IACX,OAAO,WAAW;AAAA,IAClB,aAAa,WAAW;AAAA,IACxB,YAAY,WAAW;AAAA,IACvB,UAAU,CAAC;AAAA,EACb;AACF;AAEA,MAAM,qBAAmD;AAAA,EACtC;AAAA,EACA,YAAY,oBAAI,IAA+B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQxD,sBAAsC;AAAA,EAE9C,YAAY,SAAwB;AAClC,SAAK,UAAU;AAAA,EACjB;AAAA,EAEQ,sBAA+B;AACrC,QAAI,KAAK,wBAAwB,MAAM;AACrC,aAAO,KAAK;AAAA,IACd;AACA,UAAM,SAAS,gBAAgB,KAAK,OAAO;AAC3C,SAAK,sBAAsB;AAC3B,WAAO;AAAA,EACT;AAAA,EAEQ,qBAA2B;AACjC,SAAK,sBAAsB;AAAA,EAC7B;AAAA,EAEA,MAAM,UAAU,KAA8C;AAC5D,UAAM,QAAQ,MAAM,KAAK,IAAI,GAAG;AAChC,WAAO,MAAM;AAAA,EACf;AAAA,EAEA,MAAM,IAAI,KAAuD;AAC/D,UAAM,cAAc,KAAK,oBAAoB;AAC7C,QAAI;AACF,YAAM,MAAM,UAAU,cAAc;AAAA,8BACZ,QAAQ,GAAG,CAAC;AAAA;AAEpC,YAAM,OAAO,MAAM,cAAc,KAAK,SAAS,GAAG;AAClD,UAAI,KAAK,WAAW,GAAG;AACrB,eAAO,aAAa,KAAK,SAAS,KAAK,WAAW;AAAA,MACpD;AACA,aAAO,WAAW,KAAK,SAAS,KAAK,CAAC,GAAG,KAAK,WAAW;AAAA,IAC3D,UAAE;AACA,WAAK,mBAAmB;AAAA,IAC1B;AAAA,EACF;AAAA,EAEA,MAAM,OAAiD;AACrD,UAAM,cAAc,KAAK,oBAAoB;AAC7C,QAAI;AACF,YAAM,MAAM,UAAU,cAAc;AACpC,YAAM,OAAO,MAAM,cAAc,KAAK,SAAS,GAAG;AAClD,YAAM,QAAQ,oBAAI,IAA6C;AAC/D,iBAAW,OAAO,MAAM;AACtB,cAAM,OAAO,OAAO,IAAI,WAAW;AACnC,cAAM,IAAI,MAAM,WAAW,KAAK,SAAS,KAAK,MAAM,WAAW,CAAC;AAAA,MAClE;AAMA,YAAM,WAAW,uBAAuB,KAAK,OAAO;AACpD,YAAM,QAAQ,IAAI,IAA2B,gBAAgB;AAC7D,UAAI,UAAU;AACZ,mBAAW,gBAAgB,SAAS,KAAK,GAAG;AAC1C,gBAAM,IAAI,aAAa,GAAG;AAAA,QAC5B;AAAA,MACF;AACA,aAAO,MAAM,KAAK,KAAK,EAAE;AAAA,QACvB,CAAC,QAAQ,MAAM,IAAI,GAAG,KAAK,aAAa,KAAK,SAAS,KAAK,WAAW;AAAA,MACxE;AAAA,IACF,UAAE;AACA,WAAK,mBAAmB;AAAA,IAC1B;AAAA,EACF;AAAA,EAEA,OACE,KACA,QACA,WACA,UAC2B;AAC3B,WAAO,KAAK,OAAO,KAAK,MAAM,QAAQ,WAAW,QAAQ;AAAA,EAC3D;AAAA,EAEA,QACE,KACA,QACA,WAC2B;AAC3B,WAAO,KAAK,OAAO,KAAK,OAAO,QAAQ,WAAW,MAAS;AAAA,EAC7D;AAAA,EAEA,iBAAiB,SAAgD;AAC/D,SAAK,UAAU,IAAI,OAAO;AAC1B,WAAO,MAAM;AACX,WAAK,UAAU,OAAO,OAAO;AAAA,IAC/B;AAAA,EACF;AAAA,EAEA,MAAc,OACZ,KACA,SACA,QACA,WACA,UAC2B;AAC3B,QAAI,WAAW,WAAW;AACxB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,UAAM,cAAc,KAAK,oBAAoB;AAC7C,QAAI;AACF,YAAM,eAAe,UACjB,IAAI,SAAQ,oBAAI,KAAK,GAAE,YAAY,CAAC,CAAC,mBACrC;AACJ,YAAM,eAAe,YAAY,QAAQ,SAAS,IAAI;AACtD,YAAM,cAAc,QAAQ,YAAY,CAAC,CAAC;AAC1C,YAAM,MAAM;AAAA;AAAA;AAAA,YAGN,QAAQ,GAAG,CAAC;AAAA,YACZ,WAAW,OAAO,CAAC;AAAA,YACnB,QAAQ,MAAM,CAAC;AAAA,YACf,YAAY;AAAA,YACZ,YAAY;AAAA,YACZ,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,oBAWH,cAAc;AAC5B,YAAM,OAAO,MAAM,cAAc,KAAK,SAAS,GAAG;AAClD,UAAI,KAAK,WAAW,GAAG;AACrB,cAAM,IAAI,MAAM,8CAA8C,GAAG,EAAE;AAAA,MACrE;AACA,YAAM,QAAQ,WAAW,KAAK,SAAS,KAAK,CAAC,GAAG,KAAK,WAAW;AAChE,aAAO;AAAA,QACL,kBAAkB,GAAG,IAAI,UAAU,YAAY,UAAU,QAAQ,MAAM,MACpE,YAAY,OAAO,SAAS,KAAK;AAAA,MACtC;AACA,iBAAW,YAAY,KAAK,WAAW;AACrC,iBAAS,KAAK;AAAA,MAChB;AACA,aAAO;AAAA,IACT,UAAE;AACA,WAAK,mBAAmB;AAAA,IAC1B;AAAA,EACF;AACF;AAEA,MAAM,gBAAgB,oBAAI,QAA2C;AAM9D,SAAS,yBACd,SACoB;AACpB,QAAM,WAAW,cAAc,IAAI,OAAO;AAC1C,MAAI,SAAU,QAAO;AACrB,QAAM,UAAU,IAAI,qBAAqB,OAAO;AAChD,gBAAc,IAAI,SAAS,OAAO;AAClC,SAAO;AACT;AAWA,eAAsB,sBACpB,SACA,KACe;AACf,QAAM,UAAU,yBAAyB,OAAO;AAChD,MAAI,MAAM,QAAQ,UAAU,GAAG,EAAG;AAClC,QAAM,EAAE,uBAAuB,IAAI,MAAM,OAAO,0BAA0B;AAG1E,QAAM,WAAW,uBAAuB,OAAO;AAC/C,QAAM,eAAe,UAAU,IAAI,GAAG,KAAK;AAC3C,QAAM,aAAa,cAAc,UAAU,eAAe;AAC1D,QAAM,IAAI,uBAAuB,KAAK;AAAA,IACpC,aAAa,gBAAgB,OAAO;AAAA,IACpC;AAAA,EACF,CAAC;AACH;AAOA,SAAS,6BAA6B;","names":[]}

package/dist/lifeops/feature-flags.types.d.ts

@@ -0,0 +1,156 @@
+/**
+ * LifeOps feature opt-in framework — closed enums + typed envelope.
+ *
+ * Source of truth (Commandment 7):
+ *  - The literal union `LifeOpsFeatureKey` enumerates every gateable
+ *    capability.
+ *  - `BASE_FEATURE_DEFAULTS` declares the compile-time baseline. The DB
+ *    table only stores *overrides* — never used to discover new keys.
+ *  - The actions/services that gate on these keys must throw
+ *    `FeatureNotEnabledError` before they touch the network or spend
+ *    money. Silent fallbacks are not allowed (Commandment 8).
+ *
+ * Source rules:
+ *  - `default` — the row is absent in the DB; `enabled` reflects the
+ *    resolved compile-time default for the current Cloud-link context.
+ *    The runtime never *writes* a `default` row.
+ *  - `local`   — toggled from the desktop UI / chat command.
+ *  - `cloud`   — auto-provisioned by an Eliza Cloud package sync.
+ *
+ * Cloud rows are read-only from the local UI: a Cloud-managed enable
+ * cannot be revoked locally, only by removing the Cloud package.
+ *
+ * Cloud-default policy:
+ *  - When the user is signed into Eliza Cloud, travel features and the
+ *    cloud-managed travel-billing flag flip ON by default. Cost is
+ *    metered Cloud-side; the local code never recomputes that markup
+ *    (Commandment 2).
+ *  - Without Cloud, paid features stay OFF until the user opts in
+ *    locally (which then requires them to bring their own travel-provider
+ *    API credentials via `ELIZA_DUFFEL_DIRECT=1` + `DUFFEL_API_KEY`).
+ */
+export type LifeOpsFeatureKey = "travel.search_flight" | "travel.search_hotel" | "travel.book_flight" | "travel.book_hotel" | "notifications.push" | "cross_channel.escalate" | "browser.automation" | "email.draft" | "email.send" | "cloud.duffel";
+/**
+ * Open-key sibling of `LifeOpsFeatureKey`. The closed union remains the
+ * compile-time authority for the built-in 10 flags (Cloud-default policy,
+ * `BASE_FEATURE_DEFAULTS`, typed gate calls). The runtime
+ * `FeatureFlagRegistry` is the source of truth for what flags exist —
+ * including 3rd-party plugin contributions — so anywhere that ingests a
+ * key from outside (chat input, REST routes, dev-registries view) uses
+ * `LifeOpsFeatureFlagKey`. Parallel to
+ * `LifeOpsBusFamily = LifeOpsTelemetryFamily | string`.
+ */
+export type LifeOpsFeatureFlagKey = LifeOpsFeatureKey | string;
+export type FeatureFlagSource = "default" | "local" | "cloud";
+export interface FeatureFlagDefault {
+    /** Compile-time baseline — applies until a row overrides it. May be
+     *  flipped by `resolveFeatureDefaults` based on Cloud-link state. */
+    readonly enabled: boolean;
+    /** Short user-facing label shown in settings and confirmations. */
+    readonly label: string;
+    /** One-line user-facing description shown in the settings UI. */
+    readonly description: string;
+    /**
+     * True when toggling the feature on commits the user to recurring spend
+     * or external billing (e.g. live flight booking, paid SMS). Surfaced in
+     * the UI so the user understands the implication.
+     */
+    readonly costsMoney: boolean;
+}
+/**
+ * Compile-time baseline. Conservative — assumes no Cloud account.
+ *
+ * `resolveFeatureDefaults({cloudLinked})` is the only function callers
+ * should use to read effective defaults. Direct reads of this constant
+ * skip the Cloud-aware policy and will under-report enablement for
+ * Cloud-linked users.
+ */
+export declare const BASE_FEATURE_DEFAULTS: Readonly<Record<LifeOpsFeatureKey, FeatureFlagDefault>>;
+/**
+ * Feature keys that default to ON when the user is signed into Eliza
+ * Cloud. Service fees are applied Cloud-side (Commandment 2/4 — no client
+ * math), so flipping these on locally is purely a default-policy decision:
+ * it does not change billing.
+ */
+export declare const CLOUD_LINKED_DEFAULT_ON: ReadonlySet<LifeOpsFeatureKey>;
+export declare function isCloudLinkedDefaultOnFeatureKey(key: LifeOpsFeatureKey): boolean;
+export interface ResolveFeatureDefaultsArgs {
+    readonly cloudLinked: boolean;
+}
+/**
+ * Resolve effective compile-time defaults for the given Cloud-link state.
+ *
+ *  - `cloudLinked: true`  → travel + `cloud.duffel` ON, billed via
+ *    Eliza Cloud's managed travel-provider billing.
+ *  - `cloudLinked: false` → baseline (paid features OFF) until the user
+ *    opts in locally and supplies their own travel-provider credentials.
+ */
+export declare function resolveFeatureDefaults(args: ResolveFeatureDefaultsArgs): Readonly<Record<LifeOpsFeatureKey, FeatureFlagDefault>>;
+export declare const ALL_FEATURE_KEYS: ReadonlyArray<LifeOpsFeatureKey>;
+export declare function isLifeOpsFeatureKey(value: unknown): value is LifeOpsFeatureKey;
+export interface FeatureFlagState {
+    readonly featureKey: LifeOpsFeatureFlagKey;
+    readonly enabled: boolean;
+    readonly source: FeatureFlagSource;
+    readonly enabledAt: Date | null;
+    readonly enabledBy: string | null;
+    readonly label: string;
+    readonly description: string;
+    readonly costsMoney: boolean;
+    readonly metadata: Readonly<Record<string, unknown>>;
+}
+export interface LifeOpsFeatureFlagRowDto {
+    readonly featureKey: LifeOpsFeatureFlagKey;
+    readonly enabled: boolean;
+    readonly source: FeatureFlagSource;
+    readonly label: string;
+    readonly description: string;
+    readonly costsMoney: boolean;
+    readonly enabledAt: string | null;
+    readonly enabledBy: string | null;
+    readonly packageId: string | null;
+    readonly cloudDefaultOn: boolean;
+}
+export interface LifeOpsFeatureFlagsResponse {
+    readonly features: ReadonlyArray<LifeOpsFeatureFlagRowDto>;
+}
+export interface LifeOpsFeatureFlagsSyncResponse extends LifeOpsFeatureFlagsResponse {
+    readonly synced: number;
+}
+export interface LifeOpsFeatureToggleResponse {
+    readonly feature: LifeOpsFeatureFlagRowDto;
+}
+export interface FeatureToggleRequest {
+    readonly featureKey: LifeOpsFeatureFlagKey;
+    readonly enabled: boolean;
+    readonly source: FeatureFlagSource;
+    readonly enabledBy: string | null;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export type FeatureFlagChangeListener = (state: FeatureFlagState) => void;
+export interface FeatureFlagService {
+    isEnabled(key: LifeOpsFeatureFlagKey): Promise<boolean>;
+    get(key: LifeOpsFeatureFlagKey): Promise<FeatureFlagState>;
+    list(): Promise<ReadonlyArray<FeatureFlagState>>;
+    enable(key: LifeOpsFeatureFlagKey, source: FeatureFlagSource, enabledBy: string | null, metadata?: Readonly<Record<string, unknown>>): Promise<FeatureFlagState>;
+    disable(key: LifeOpsFeatureFlagKey, source: FeatureFlagSource, enabledBy: string | null): Promise<FeatureFlagState>;
+    subscribeChanges(handler: FeatureFlagChangeListener): () => void;
+}
+/**
+ * Thrown by gated actions before they perform any side effect when the
+ * required feature key is disabled. Carries enough context for the LLM
+ * planner to surface a useful "enable this" message back to the owner —
+ * including a Cloud-aware suggestion when the user is not signed in.
+ */
+export declare class FeatureNotEnabledError extends Error {
+    readonly code: "FEATURE_NOT_ENABLED";
+    readonly featureKey: LifeOpsFeatureFlagKey;
+    readonly cloudOptIn: boolean;
+    readonly cloudLinked: boolean;
+    constructor(featureKey: LifeOpsFeatureFlagKey, args?: {
+        cloudLinked?: boolean;
+        message?: string;
+        costsMoney?: boolean;
+    });
+}
+//# sourceMappingURL=feature-flags.types.d.ts.map

package/dist/lifeops/feature-flags.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-flags.types.d.ts","sourceRoot":"","sources":["../../src/lifeops/feature-flags.types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,MAAM,MAAM,iBAAiB,GACzB,sBAAsB,GACtB,qBAAqB,GACrB,oBAAoB,GACpB,mBAAmB,GACnB,oBAAoB,GACpB,wBAAwB,GACxB,oBAAoB,GACpB,aAAa,GACb,YAAY,GACZ,cAAc,CAAC;AAEnB;;;;;;;;;GASG;AACH,MAAM,MAAM,qBAAqB,GAAG,iBAAiB,GAAG,MAAM,CAAC;AAE/D,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;AAE9D,MAAM,WAAW,kBAAkB;IACjC;yEACqE;IACrE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,mEAAmE;IACnE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,iEAAiE;IACjE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAC1C,MAAM,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CAuE9C,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,iBAAiB,CAMjE,CAAC;AAEH,wBAAgB,gCAAgC,CAC9C,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAET;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,0BAA0B,GAC/B,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CAAC,CAazD;AAED,eAAO,MAAM,gBAAgB,EAAE,aAAa,CAAC,iBAAiB,CAEtC,CAAC;AAEzB,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,iBAAiB,CAE5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,wBAAwB,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,+BACf,SAAQ,2BAA2B;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;CAC5C;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,MAAM,yBAAyB,GAAG,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,CAAC;AAE1E,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACxD,GAAG,CAAC,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC3D,IAAI,IAAI,OAAO,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACjD,MAAM,CACJ,GAAG,EAAE,qBAAqB,EAC1B,MAAM,EAAE,iBAAiB,EACzB,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAC3C,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7B,OAAO,CACL,GAAG,EAAE,qBAAqB,EAC1B,MAAM,EAAE,iBAAiB,EACzB,SAAS,EAAE,MAAM,GAAG,IAAI,GACvB,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7B,gBAAgB,CAAC,OAAO,EAAE,yBAAyB,GAAG,MAAM,IAAI,CAAC;CAClE;AAED;;;;;GAKG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,IAAI,EAAG,qBAAqB,CAAU;IAC/C,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;gBAG5B,UAAU,EAAE,qBAAqB,EACjC,IAAI,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE;CAmB3E"}