@elizaos/server 1.5.12-alpha.2 → 1.5.13-alpha.1

package/dist/index.js

@@ -21934,7 +21934,7 @@ var require_src32 = __commonJS((exports) => {
 
 // src/index.ts
 import {
-  logger as logger31,
+  logger as logger32,
   parseBooleanFromText,
   getDatabaseDir,
   getGeneratedDir as getGeneratedDir2,
@@ -27454,7 +27454,7 @@ import express30 from "express";
 // package.json
 var package_default = {
   name: "@elizaos/server",
-  version: "1.5.12-alpha.2",
+  version: "1.5.13-alpha.1",
   description: "ElizaOS Server - Core server infrastructure for ElizaOS agents",
   publishConfig: {
     access: "public",
@@ -44051,8 +44051,72 @@ function _init2(options = {}, getDefaultIntegrationsImpl) {
 import sqlPlugin, { createDatabaseAdapter, DatabaseMigrationService } from "@elizaos/plugin-sql";
 
 // src/managers/PluginLoader.ts
+import { logger as logger31 } from "@elizaos/core";
+
+// src/managers/PluginInstaller.ts
 import { logger as logger30 } from "@elizaos/core";
 
+class PluginInstaller {
+  attempted = new Set;
+  async tryInstall(pluginName) {
+    try {
+      if (!this.isAllowed()) {
+        logger30.debug(`Auto-install disabled or not allowed in this environment. Skipping install for ${pluginName}.`);
+        return false;
+      }
+      if (this.attempted.has(pluginName)) {
+        logger30.debug(`Auto-install already attempted for ${pluginName}. Skipping.`);
+        return false;
+      }
+      this.attempted.add(pluginName);
+      try {
+        const check = Bun.spawn(["bun", "--version"], { stdout: "pipe", stderr: "pipe" });
+        const code = await check.exited;
+        if (code !== 0) {
+          logger30.warn(`Bun not available on PATH. Cannot auto-install ${pluginName}. Please run: bun add ${pluginName}`);
+          return false;
+        }
+      } catch {
+        logger30.warn(`Bun not available on PATH. Cannot auto-install ${pluginName}. Please run: bun add ${pluginName}`);
+        return false;
+      }
+      logger30.info(`Attempting to auto-install missing plugin: ${pluginName}`);
+      const install = Bun.spawn(["bun", "add", pluginName], {
+        cwd: process.cwd(),
+        env: process.env,
+        stdout: "inherit",
+        stderr: "inherit"
+      });
+      const exit = await install.exited;
+      if (exit === 0) {
+        logger30.info(`Successfully installed ${pluginName}. Retrying import...`);
+        return true;
+      }
+      logger30.error(`bun add ${pluginName} failed with exit code ${exit}. Please install manually.`);
+      return false;
+    } catch (e) {
+      const message = e instanceof Error ? e.message : String(e);
+      logger30.error(`Unexpected error during auto-install of ${pluginName}: ${message}`);
+      return false;
+    }
+  }
+  isAllowed() {
+    if (process.env.ELIZA_NO_AUTO_INSTALL === "true")
+      return false;
+    if (process.env.ELIZA_NO_PLUGIN_AUTO_INSTALL === "true")
+      return false;
+    if (process.env.CI === "true")
+      return false;
+    if (process.env.ELIZA_TEST_MODE === "true")
+      return false;
+    if (false)
+      ;
+    return true;
+  }
+}
+var pluginInstaller = new PluginInstaller;
+
+// src/managers/PluginLoader.ts
 class PluginLoader {
   isValidPluginShape(obj) {
     if (!obj || typeof obj !== "object" || !obj.name) {
@@ -44106,11 +44170,20 @@ class PluginLoader {
       try {
         pluginModule = await import(pluginName);
       } catch (error2) {
-        logger30.error(`Failed to load plugin ${pluginName}: ${error2}`);
-        return null;
+        logger31.error(`Failed to load plugin ${pluginName}: ${error2}`);
+        const attempted = await pluginInstaller.tryInstall(pluginName);
+        if (!attempted) {
+          return null;
+        }
+        try {
+          pluginModule = await import(pluginName);
+        } catch (secondError) {
+          logger31.error(`Auto-install attempted for ${pluginName} but import still failed: ${secondError}`);
+          return null;
+        }
       }
       if (!pluginModule) {
-        logger30.error(`Failed to load module for plugin ${pluginName}.`);
+        logger31.error(`Failed to load module for plugin ${pluginName}.`);
         return null;
       }
       const expectedFunctionName = `${pluginName.replace(/^@elizaos\/plugin-/, "").replace(/^@elizaos\//, "").replace(/-./g, (match3) => match3[1].toUpperCase())}Plugin`;
@@ -44130,14 +44203,14 @@ class PluginLoader {
               return produced;
             }
           } catch (err) {
-            logger30.debug(`Factory export threw for ${pluginName}: ${err}`);
+            logger31.debug(`Factory export threw for ${pluginName}: ${err}`);
           }
         }
       }
-      logger30.warn(`Could not find a valid plugin export in ${pluginName}.`);
+      logger31.warn(`Could not find a valid plugin export in ${pluginName}.`);
       return null;
     } catch (error2) {
-      logger30.error(`Error loading plugin ${pluginName}: ${error2}`);
+      logger31.error(`Error loading plugin ${pluginName}: ${error2}`);
       return null;
     }
   }
@@ -44147,13 +44220,13 @@ class PluginLoader {
     const visiting = new Set;
     function visit2(pluginName) {
       if (!availablePlugins.has(pluginName)) {
-        logger30.warn(`Plugin dependency "${pluginName}" not found and will be skipped.`);
+        logger31.warn(`Plugin dependency "${pluginName}" not found and will be skipped.`);
         return;
       }
       if (visited.has(pluginName))
         return;
       if (visiting.has(pluginName)) {
-        logger30.error(`Circular dependency detected involving plugin: ${pluginName}`);
+        logger31.error(`Circular dependency detected involving plugin: ${pluginName}`);
         return;
       }
       visiting.add(pluginName);
@@ -44177,7 +44250,7 @@ class PluginLoader {
       }
     }
     const finalPlugins = resolutionOrder.map((name) => availablePlugins.get(name)).filter((p) => p);
-    logger30.info({ plugins: finalPlugins.map((p) => p.name) }, `Final plugins being loaded:`);
+    logger31.info({ plugins: finalPlugins.map((p) => p.name) }, `Final plugins being loaded:`);
     return finalPlugins;
   }
 }
@@ -44376,10 +44449,10 @@ class AgentServer {
                 ...runtime.character,
                 id: runtime.agentId
               });
-              logger31.info(`Persisted agent ${runtime.character.name} (${runtime.agentId}) to database`);
+              logger32.info(`Persisted agent ${runtime.character.name} (${runtime.agentId}) to database`);
             }
           } catch (error2) {
-            logger31.error({ error: error2 }, `Failed to persist agent ${runtime.agentId} to database`);
+            logger32.error({ error: error2 }, `Failed to persist agent ${runtime.agentId} to database`);
           }
         }
         runtimes.push(runtime);
@@ -44407,28 +44480,28 @@ class AgentServer {
   }
   constructor() {
     try {
-      logger31.debug("Initializing AgentServer (constructor)...");
+      logger32.debug("Initializing AgentServer (constructor)...");
       this.loadCharacterTryPath = loadCharacterTryPath;
       this.jsonToCharacter = jsonToCharacter;
       this.registerSignalHandlers();
     } catch (error2) {
-      logger31.error({ error: error2 }, "Failed to initialize AgentServer (constructor):");
+      logger32.error({ error: error2 }, "Failed to initialize AgentServer (constructor):");
       throw error2;
     }
   }
   async initialize(options) {
     if (this.isInitialized) {
-      logger31.warn("AgentServer is already initialized, skipping initialization");
+      logger32.warn("AgentServer is already initialized, skipping initialization");
       return;
     }
     try {
-      logger31.debug("Initializing AgentServer (async operations)...");
+      logger32.debug("Initializing AgentServer (async operations)...");
       const agentDataDir = resolvePgliteDir(options?.dataDir);
-      logger31.info(`[INIT] Database Dir for SQL plugin: ${agentDataDir}`);
+      logger32.info(`[INIT] Database Dir for SQL plugin: ${agentDataDir}`);
       const dbDir = path9.dirname(agentDataDir);
       if (!fs7.existsSync(dbDir)) {
         fs7.mkdirSync(dbDir, { recursive: true });
-        logger31.info(`[INIT] Created database directory: ${dbDir}`);
+        logger32.info(`[INIT] Created database directory: ${dbDir}`);
       }
       const tempServerAgentId = "00000000-0000-0000-0000-000000000000";
       this.database = createDatabaseAdapter({
@@ -44436,90 +44509,90 @@ class AgentServer {
         postgresUrl: options?.postgresUrl
       }, tempServerAgentId);
       await this.database.init();
-      logger31.success("Database initialized for server operations");
-      logger31.info("[INIT] Running database migrations for messaging tables...");
+      logger32.success("Database initialized for server operations");
+      logger32.info("[INIT] Running database migrations for messaging tables...");
       try {
         const migrationService = new DatabaseMigrationService;
         const db = this.database.getDatabase();
         await migrationService.initializeWithDatabase(db);
         migrationService.discoverAndRegisterPluginSchemas([sqlPlugin]);
         await migrationService.runAllPluginMigrations();
-        logger31.success("[INIT] Database migrations completed successfully");
+        logger32.success("[INIT] Database migrations completed successfully");
       } catch (migrationError) {
-        logger31.error({ error: migrationError }, "[INIT] Failed to run database migrations:");
+        logger32.error({ error: migrationError }, "[INIT] Failed to run database migrations:");
         throw new Error(`Database migration failed: ${migrationError instanceof Error ? migrationError.message : String(migrationError)}`);
       }
       await new Promise((resolve2) => setTimeout(resolve2, 500));
-      logger31.info("[INIT] Ensuring default server exists...");
+      logger32.info("[INIT] Ensuring default server exists...");
       await this.ensureDefaultServer();
-      logger31.success("[INIT] Default server setup complete");
-      logger31.info("[INIT] Server uses temporary adapter for migrations only");
-      logger31.info("[INIT] Initializing ElizaOS...");
-      logger31.debug("[INIT] ElizaOS will use agent-specific database adapters from SQL plugin");
+      logger32.success("[INIT] Default server setup complete");
+      logger32.info("[INIT] Server uses temporary adapter for migrations only");
+      logger32.info("[INIT] Initializing ElizaOS...");
+      logger32.debug("[INIT] ElizaOS will use agent-specific database adapters from SQL plugin");
       this.elizaOS = new ElizaOS2;
       this.elizaOS.enableEditableMode();
       this.pluginLoader = new PluginLoader;
       this.configManager = new ConfigManager;
-      logger31.success("[INIT] ElizaOS initialized");
+      logger32.success("[INIT] ElizaOS initialized");
       await this.initializeServer(options);
       await new Promise((resolve2) => setTimeout(resolve2, 250));
       this.isInitialized = true;
     } catch (error2) {
-      logger31.error({ error: error2 }, "Failed to initialize AgentServer (async operations):");
+      logger32.error({ error: error2 }, "Failed to initialize AgentServer (async operations):");
       console.trace(error2);
       throw error2;
     }
   }
   async ensureDefaultServer() {
     try {
-      logger31.info("[AgentServer] Checking for default server...");
+      logger32.info("[AgentServer] Checking for default server...");
       const servers = await this.database.getMessageServers();
-      logger31.debug(`[AgentServer] Found ${servers.length} existing servers`);
+      logger32.debug(`[AgentServer] Found ${servers.length} existing servers`);
       servers.forEach((s) => {
-        logger31.debug(`[AgentServer] Existing server: ID=${s.id}, Name=${s.name}`);
+        logger32.debug(`[AgentServer] Existing server: ID=${s.id}, Name=${s.name}`);
       });
       const defaultServer = servers.find((s) => s.id === "00000000-0000-0000-0000-000000000000");
       if (!defaultServer) {
-        logger31.info("[AgentServer] Creating default server with UUID 00000000-0000-0000-0000-000000000000...");
+        logger32.info("[AgentServer] Creating default server with UUID 00000000-0000-0000-0000-000000000000...");
         try {
           await this.database.db.execute(`
             INSERT INTO message_servers (id, name, source_type, created_at, updated_at)
             VALUES ('00000000-0000-0000-0000-000000000000', 'Default Server', 'eliza_default', NOW(), NOW())
             ON CONFLICT (id) DO NOTHING
           `);
-          logger31.success("[AgentServer] Default server created via raw SQL");
+          logger32.success("[AgentServer] Default server created via raw SQL");
           const checkResult = await this.database.db.execute("SELECT id, name FROM message_servers WHERE id = '00000000-0000-0000-0000-000000000000'");
-          logger31.debug("[AgentServer] Raw SQL check result:", checkResult);
+          logger32.debug("[AgentServer] Raw SQL check result:", checkResult);
         } catch (sqlError) {
-          logger31.error("[AgentServer] Raw SQL insert failed:", sqlError);
+          logger32.error("[AgentServer] Raw SQL insert failed:", sqlError);
           try {
             const server = await this.database.createMessageServer({
               id: "00000000-0000-0000-0000-000000000000",
               name: "Default Server",
               sourceType: "eliza_default"
             });
-            logger31.success("[AgentServer] Default server created via ORM with ID:", server.id);
+            logger32.success("[AgentServer] Default server created via ORM with ID:", server.id);
           } catch (ormError) {
-            logger31.error("[AgentServer] Both SQL and ORM creation failed:", ormError);
+            logger32.error("[AgentServer] Both SQL and ORM creation failed:", ormError);
             throw new Error(`Failed to create default server: ${ormError.message}`);
           }
         }
         const verifyServers = await this.database.getMessageServers();
-        logger31.debug(`[AgentServer] After creation attempt, found ${verifyServers.length} servers`);
+        logger32.debug(`[AgentServer] After creation attempt, found ${verifyServers.length} servers`);
         verifyServers.forEach((s) => {
-          logger31.debug(`[AgentServer] Server after creation: ID=${s.id}, Name=${s.name}`);
+          logger32.debug(`[AgentServer] Server after creation: ID=${s.id}, Name=${s.name}`);
         });
         const verifyDefault = verifyServers.find((s) => s.id === "00000000-0000-0000-0000-000000000000");
         if (!verifyDefault) {
           throw new Error(`Failed to create or verify default server with ID ${DEFAULT_SERVER_ID6}`);
         } else {
-          logger31.success("[AgentServer] Default server creation verified successfully");
+          logger32.success("[AgentServer] Default server creation verified successfully");
         }
       } else {
-        logger31.info("[AgentServer] Default server already exists with ID:", defaultServer.id);
+        logger32.info("[AgentServer] Default server already exists with ID:", defaultServer.id);
       }
     } catch (error2) {
-      logger31.error({ error: error2 }, "[AgentServer] Error ensuring default server:");
+      logger32.error({ error: error2 }, "[AgentServer] Error ensuring default server:");
       throw error2;
     }
   }
@@ -44540,16 +44613,16 @@ class AgentServer {
             integrations: [vercelAIIntegration({ force: sentryEnabled })],
             tracesSampleRate: Number(process.env.SENTRY_TRACES_SAMPLE_RATE || 0)
           });
-          logger31.info("[Sentry] Initialized Sentry for @elizaos/server");
+          logger32.info("[Sentry] Initialized Sentry for @elizaos/server");
         } catch (sentryInitError) {
-          logger31.error({ error: sentryInitError }, "[Sentry] Failed to initialize Sentry");
+          logger32.error({ error: sentryInitError }, "[Sentry] Failed to initialize Sentry");
         }
       }
       const isProd = false;
-      logger31.debug("Setting up security headers...");
+      logger32.debug("Setting up security headers...");
       if (!isProd) {
-        logger31.debug(`NODE_ENV: ${"development"}`);
-        logger31.debug(`CSP will be: ${isProd ? "ENABLED" : "MINIMAL_DEV"}`);
+        logger32.debug(`NODE_ENV: ${"development"}`);
+        logger32.debug(`CSP will be: ${isProd ? "ENABLED" : "MINIMAL_DEV"}`);
       }
       this.app.use(helmet({
         contentSecurityPolicy: isProd ? {
@@ -44597,12 +44670,12 @@ class AgentServer {
         xssFilter: true
       }));
       if (options?.middlewares) {
-        logger31.debug("Applying custom middlewares...");
+        logger32.debug("Applying custom middlewares...");
         for (const middleware2 of options.middlewares) {
           this.app.use(middleware2);
         }
       }
-      logger31.debug("Setting up standard middlewares...");
+      logger32.debug("Setting up standard middlewares...");
       this.app.use(cors2({
         origin: process.env.CORS_ORIGIN || true,
         credentials: true,
@@ -44614,22 +44687,22 @@ class AgentServer {
       }));
       const serverAuthToken = process.env.ELIZA_SERVER_AUTH_TOKEN;
       if (serverAuthToken) {
-        logger31.info("Server authentication enabled. Requires X-API-KEY header for /api routes.");
+        logger32.info("Server authentication enabled. Requires X-API-KEY header for /api routes.");
         this.app.use("/api", (req, res, next) => {
           apiKeyAuthMiddleware(req, res, next);
         });
       } else {
-        logger31.warn("Server authentication is disabled. Set ELIZA_SERVER_AUTH_TOKEN environment variable to enable.");
+        logger32.warn("Server authentication is disabled. Set ELIZA_SERVER_AUTH_TOKEN environment variable to enable.");
       }
       this.isWebUIEnabled = isWebUIEnabled();
       if (this.isWebUIEnabled) {
-        logger31.info("Web UI enabled");
+        logger32.info("Web UI enabled");
       } else {
         const uiEnabledEnv = process.env.ELIZA_UI_ENABLE;
         if (uiEnabledEnv !== undefined && uiEnabledEnv.trim() !== "") {
-          logger31.info(`Web UI disabled by environment variable (ELIZA_UI_ENABLE=${uiEnabledEnv})`);
+          logger32.info(`Web UI disabled by environment variable (ELIZA_UI_ENABLE=${uiEnabledEnv})`);
         } else {
-          logger31.info("Web UI disabled for security (production mode)");
+          logger32.info("Web UI disabled for security (production mode)");
         }
       }
       const uploadsBasePath = getUploadsAgentsDir4();
@@ -44658,13 +44731,13 @@ class AgentServer {
         res.sendFile(sanitizedFilename, { root: agentUploadsPath }, (err) => {
           if (err) {
             if (err.message === "Request aborted") {
-              logger31.warn(`[MEDIA] Download aborted: ${req.originalUrl}`);
+              logger32.warn(`[MEDIA] Download aborted: ${req.originalUrl}`);
             } else if (!res.headersSent) {
-              logger31.warn(`[MEDIA] File not found: ${agentUploadsPath}/${sanitizedFilename}`);
+              logger32.warn(`[MEDIA] File not found: ${agentUploadsPath}/${sanitizedFilename}`);
               res.status(404).json({ error: "File not found" });
             }
           } else {
-            logger31.debug(`[MEDIA] Successfully served: ${sanitizedFilename}`);
+            logger32.debug(`[MEDIA] Successfully served: ${sanitizedFilename}`);
           }
         });
       });
@@ -44719,12 +44792,12 @@ class AgentServer {
         }
         res.sendFile(filePath, (err) => {
           if (err) {
-            logger31.warn({ err, filePath }, `[STATIC] Channel media file not found: ${filePath}`);
+            logger32.warn({ err, filePath }, `[STATIC] Channel media file not found: ${filePath}`);
             if (!res.headersSent) {
               res.status(404).json({ error: "File not found" });
             }
           } else {
-            logger31.debug(`[STATIC] Served channel media file: ${filePath}`);
+            logger32.debug(`[STATIC] Served channel media file: ${filePath}`);
           }
         });
       });
@@ -44835,29 +44908,29 @@ class AgentServer {
             })()
           ].filter(Boolean)
         ].filter(Boolean);
-        logger31.debug(`[STATIC] process.argv[0]: ${process.argv[0]}`);
-        logger31.debug(`[STATIC] process.argv[1]: ${process.argv[1]}`);
-        logger31.debug(`[STATIC] __dirname: ${__dirname3}`);
+        logger32.debug(`[STATIC] process.argv[0]: ${process.argv[0]}`);
+        logger32.debug(`[STATIC] process.argv[1]: ${process.argv[1]}`);
+        logger32.debug(`[STATIC] __dirname: ${__dirname3}`);
         for (const possiblePath of possiblePaths) {
           if (possiblePath && existsSync5(path9.join(possiblePath, "index.html"))) {
             clientPath = possiblePath;
-            logger31.info(`[STATIC] Found client files at: ${clientPath}`);
+            logger32.info(`[STATIC] Found client files at: ${clientPath}`);
             break;
           }
         }
         if (clientPath) {
           this.clientPath = clientPath;
           this.app.use(express33.static(clientPath, staticOptions));
-          logger31.info(`[STATIC] Serving static files from: ${clientPath}`);
+          logger32.info(`[STATIC] Serving static files from: ${clientPath}`);
         } else {
-          logger31.warn("[STATIC] Client dist path not found. Searched locations:");
+          logger32.warn("[STATIC] Client dist path not found. Searched locations:");
           possiblePaths.forEach((p) => {
             if (p)
-              logger31.warn(`[STATIC]   - ${p}`);
+              logger32.warn(`[STATIC]   - ${p}`);
           });
-          logger31.warn("[STATIC] The web UI will not be available.");
-          logger31.warn("[STATIC] To fix this, ensure the client is built: cd packages/client && bun run build");
-          logger31.warn("[STATIC] Then rebuild the server: cd packages/server && bun run build");
+          logger32.warn("[STATIC] The web UI will not be available.");
+          logger32.warn("[STATIC] To fix this, ensure the client is built: cd packages/client && bun run build");
+          logger32.warn("[STATIC] Then rebuild the server: cd packages/server && bun run build");
         }
       }
       const pluginRouteHandler = createPluginRouteHandler(this.elizaOS);
@@ -44865,7 +44938,7 @@ class AgentServer {
       const apiRouter = createApiRouter(this.elizaOS, this);
       this.app.use("/api", (req, _res, next) => {
         if (req.path !== "/ping") {
-          logger31.debug(`API request: ${req.method} ${req.path}`);
+          logger32.debug(`API request: ${req.method} ${req.path}`);
         }
         next();
       }, apiRouter, (err, req, res, _next) => {
@@ -44880,7 +44953,7 @@ class AgentServer {
             return scope;
           });
         }
-        logger31.error({ err }, `API error: ${req.method} ${req.path}`);
+        logger32.error({ err }, `API error: ${req.method} ${req.path}`);
         res.status(500).json({
           success: false,
           error: {
@@ -44930,27 +45003,27 @@ class AgentServer {
           if (resolvedClientPath) {
             const indexFilePath = path9.join(resolvedClientPath, "index.html");
             if (!existsSync5(indexFilePath)) {
-              logger31.error(`[STATIC] index.html not found at expected path: ${indexFilePath}`);
-              logger31.error(`[STATIC] Client path was: ${resolvedClientPath}`);
+              logger32.error(`[STATIC] index.html not found at expected path: ${indexFilePath}`);
+              logger32.error(`[STATIC] Client path was: ${resolvedClientPath}`);
               res.status(404).send("Client application not found");
               return;
             }
             res.sendFile("index.html", { root: resolvedClientPath }, (err) => {
               if (err) {
-                logger31.warn(`[STATIC] Failed to serve index.html: ${err.message}`);
-                logger31.warn(`[STATIC] Attempted root: ${resolvedClientPath}`);
-                logger31.warn(`[STATIC] Full path was: ${indexFilePath}`);
-                logger31.warn(`[STATIC] Error code: ${err.code || "unknown"}`);
+                logger32.warn(`[STATIC] Failed to serve index.html: ${err.message}`);
+                logger32.warn(`[STATIC] Attempted root: ${resolvedClientPath}`);
+                logger32.warn(`[STATIC] Full path was: ${indexFilePath}`);
+                logger32.warn(`[STATIC] Error code: ${err.code || "unknown"}`);
                 if (!res.headersSent) {
                   res.status(404).send("Client application not found");
                 }
               } else {
-                logger31.debug(`[STATIC] Successfully served index.html for route: ${req.path}`);
+                logger32.debug(`[STATIC] Successfully served index.html for route: ${req.path}`);
               }
             });
           } else {
-            logger31.warn("[STATIC] Client dist path not found in SPA fallback");
-            logger31.warn("[STATIC] Neither local nor instance clientPath variables are set");
+            logger32.warn("[STATIC] Client dist path not found in SPA fallback");
+            logger32.warn("[STATIC] Neither local nor instance clientPath variables are set");
             res.status(404).send("Client application not found");
           }
         });
@@ -44961,9 +45034,9 @@ class AgentServer {
       }
       this.server = http4.createServer(this.app);
       this.socketIO = setupSocketIO(this.server, this.elizaOS, this);
-      logger31.success("AgentServer HTTP server and Socket.IO initialized");
+      logger32.success("AgentServer HTTP server and Socket.IO initialized");
     } catch (error2) {
-      logger31.error({ error: error2 }, "Failed to complete server initialization:");
+      logger32.error({ error: error2 }, "Failed to complete server initialization:");
       throw error2;
     }
   }
@@ -44978,44 +45051,44 @@ class AgentServer {
       if (!runtime.character) {
         throw new Error("Runtime missing character configuration");
       }
-      logger31.debug(`Agent ${runtime.character.name} (${runtime.agentId}) registered`);
+      logger32.debug(`Agent ${runtime.character.name} (${runtime.agentId}) registered`);
       try {
         if (messageBusConnectorPlugin) {
           await runtime.registerPlugin(messageBusConnectorPlugin);
-          logger31.info(`[AgentServer] Automatically registered MessageBusConnector for agent ${runtime.character.name}`);
+          logger32.info(`[AgentServer] Automatically registered MessageBusConnector for agent ${runtime.character.name}`);
         } else {
-          logger31.error(`[AgentServer] CRITICAL: MessageBusConnector plugin definition not found.`);
+          logger32.error(`[AgentServer] CRITICAL: MessageBusConnector plugin definition not found.`);
         }
       } catch (e) {
-        logger31.error({ error: e }, `[AgentServer] CRITICAL: Failed to register MessageBusConnector for agent ${runtime.character.name}`);
+        logger32.error({ error: e }, `[AgentServer] CRITICAL: Failed to register MessageBusConnector for agent ${runtime.character.name}`);
       }
       const teePlugin = runtime.plugins.find((p) => p.name === "phala-tee-plugin");
       if (teePlugin) {
-        logger31.debug(`Found TEE plugin for agent ${runtime.agentId}`);
+        logger32.debug(`Found TEE plugin for agent ${runtime.agentId}`);
         if (teePlugin.providers) {
           for (const provider of teePlugin.providers) {
             runtime.registerProvider(provider);
-            logger31.debug(`Registered TEE provider: ${provider.name}`);
+            logger32.debug(`Registered TEE provider: ${provider.name}`);
           }
         }
         if (teePlugin.actions) {
           for (const action of teePlugin.actions) {
             runtime.registerAction(action);
-            logger31.debug(`Registered TEE action: ${action.name}`);
+            logger32.debug(`Registered TEE action: ${action.name}`);
           }
         }
       }
-      logger31.success(`Successfully registered agent ${runtime.character.name} (${runtime.agentId}) with core services.`);
+      logger32.success(`Successfully registered agent ${runtime.character.name} (${runtime.agentId}) with core services.`);
       await this.addAgentToServer(DEFAULT_SERVER_ID6, runtime.agentId);
-      logger31.info(`[AgentServer] Auto-associated agent ${runtime.character.name} with server ID: ${DEFAULT_SERVER_ID6}`);
+      logger32.info(`[AgentServer] Auto-associated agent ${runtime.character.name} with server ID: ${DEFAULT_SERVER_ID6}`);
     } catch (error2) {
-      logger31.error({ error: error2 }, "Failed to register agent:");
+      logger32.error({ error: error2 }, "Failed to register agent:");
       throw error2;
     }
   }
   async unregisterAgent(agentId) {
     if (!agentId) {
-      logger31.warn("[AGENT UNREGISTER] Attempted to unregister undefined or invalid agent runtime");
+      logger32.warn("[AGENT UNREGISTER] Attempted to unregister undefined or invalid agent runtime");
       return;
     }
     try {
@@ -45023,19 +45096,19 @@ class AgentServer {
       if (agent) {
         try {
           agent.stop().catch((stopError) => {
-            logger31.error({ error: stopError, agentId }, `[AGENT UNREGISTER] Error stopping agent services for ${agentId}:`);
+            logger32.error({ error: stopError, agentId }, `[AGENT UNREGISTER] Error stopping agent services for ${agentId}:`);
           });
-          logger31.debug(`[AGENT UNREGISTER] Stopping services for agent ${agentId}`);
+          logger32.debug(`[AGENT UNREGISTER] Stopping services for agent ${agentId}`);
         } catch (stopError) {
-          logger31.error({ error: stopError, agentId }, `[AGENT UNREGISTER] Error initiating stop for agent ${agentId}:`);
+          logger32.error({ error: stopError, agentId }, `[AGENT UNREGISTER] Error initiating stop for agent ${agentId}:`);
         }
       }
       if (this.elizaOS) {
         await this.elizaOS.deleteAgents([agentId]);
       }
-      logger31.debug(`Agent ${agentId} unregistered`);
+      logger32.debug(`Agent ${agentId} unregistered`);
     } catch (error2) {
-      logger31.error({ error: error2, agentId }, `Error removing agent ${agentId}:`);
+      logger32.error({ error: error2, agentId }, `Error removing agent ${agentId}:`);
     }
   }
   registerMiddleware(middleware2) {
@@ -45047,9 +45120,9 @@ class AgentServer {
         if (!port || typeof port !== "number") {
           throw new Error(`Invalid port number: ${port}`);
         }
-        logger31.debug(`Starting server on port ${port}...`);
-        logger31.debug(`Current agents count: ${this.elizaOS?.getAgents().length || 0}`);
-        logger31.debug(`Environment: ${"development"}`);
+        logger32.debug(`Starting server on port ${port}...`);
+        logger32.debug(`Current agents count: ${this.elizaOS?.getAgents().length || 0}`);
+        logger32.debug(`Environment: ${"development"}`);
         const host = process.env.SERVER_HOST || "0.0.0.0";
         this.server.listen(port, host, () => {
           if (this.isWebUIEnabled && false) {} else if (!this.isWebUIEnabled) {
@@ -45062,26 +45135,26 @@ class AgentServer {
 ` + `  \x1B[1m${baseUrl}/api/messaging\x1B[22m\x1B[0m`);
           }
           console.log(`AgentServer is listening on port ${port}`);
-          logger31.success(`REST API bound to ${host}:${port}. If running locally, access it at http://localhost:${port}.`);
+          logger32.success(`REST API bound to ${host}:${port}. If running locally, access it at http://localhost:${port}.`);
           const agents = this.elizaOS?.getAgents() || [];
-          logger31.debug(`Active agents: ${agents.length}`);
+          logger32.debug(`Active agents: ${agents.length}`);
           agents.forEach((agent) => {
-            logger31.debug(`- Agent ${agent.agentId}: ${agent.character.name}`);
+            logger32.debug(`- Agent ${agent.agentId}: ${agent.character.name}`);
           });
           resolve2();
         }).on("error", (error2) => {
-          logger31.error({ error: error2, host, port }, `Failed to bind server to ${host}:${port}:`);
+          logger32.error({ error: error2, host, port }, `Failed to bind server to ${host}:${port}:`);
           if (error2.code === "EADDRINUSE") {
-            logger31.error(`Port ${port} is already in use. Please try a different port or stop the process using that port.`);
+            logger32.error(`Port ${port} is already in use. Please try a different port or stop the process using that port.`);
           } else if (error2.code === "EACCES") {
-            logger31.error(`Permission denied to bind to port ${port}. Try using a port above 1024 or running with appropriate permissions.`);
+            logger32.error(`Permission denied to bind to port ${port}. Try using a port above 1024 or running with appropriate permissions.`);
           } else if (error2.code === "EADDRNOTAVAIL") {
-            logger31.error(`Cannot bind to ${host}:${port} - address not available. Check if the host address is correct.`);
+            logger32.error(`Cannot bind to ${host}:${port} - address not available. Check if the host address is correct.`);
           }
           reject(error2);
         });
       } catch (error2) {
-        logger31.error({ error: error2 }, "Failed to start server:");
+        logger32.error({ error: error2 }, "Failed to start server:");
         reject(error2);
       }
     });
@@ -45089,7 +45162,7 @@ class AgentServer {
   async stop() {
     if (this.server) {
       this.server.close(() => {
-        logger31.success("Server stopped");
+        logger32.success("Server stopped");
       });
     }
   }
@@ -45136,7 +45209,7 @@ class AgentServer {
     for (const message of messages) {
       await this.database.deleteMessage(message.id);
     }
-    logger31.info(`[AgentServer] Cleared all messages for central channel: ${channelId}`);
+    logger32.info(`[AgentServer] Cleared all messages for central channel: ${channelId}`);
   }
   async findOrCreateCentralDmChannel(user1Id, user2Id, messageServerId) {
     return this.database.findOrCreateDmChannel(user1Id, user2Id, messageServerId);
@@ -45159,7 +45232,7 @@ class AgentServer {
         metadata: createdMessage.metadata
       };
       bus_default.emit("new_message", messageForBus);
-      logger31.info(`[AgentServer] Published message ${createdMessage.id} to internal message bus`);
+      logger32.info(`[AgentServer] Published message ${createdMessage.id} to internal message bus`);
     }
     return createdMessage;
   }
@@ -45170,7 +45243,7 @@ class AgentServer {
     return this.database.updateMessage(messageId, patch);
   }
   async removeParticipantFromChannel() {
-    logger31.warn(`[AgentServer] Remove participant operation not directly supported in database adapter`);
+    logger32.warn(`[AgentServer] Remove participant operation not directly supported in database adapter`);
   }
   async addAgentToServer(serverId, agentId) {
     const server = await this.getServerById(serverId);
@@ -45198,32 +45271,32 @@ class AgentServer {
   }
   registerSignalHandlers() {
     const gracefulShutdown = async () => {
-      logger31.info("Received shutdown signal, initiating graceful shutdown...");
-      logger31.debug("Stopping all agents...");
+      logger32.info("Received shutdown signal, initiating graceful shutdown...");
+      logger32.debug("Stopping all agents...");
       const agents = this.elizaOS?.getAgents() || [];
       for (const agent of agents) {
         try {
           await agent.stop();
-          logger31.debug(`Stopped agent ${agent.agentId}`);
+          logger32.debug(`Stopped agent ${agent.agentId}`);
         } catch (error2) {
-          logger31.error({ error: error2, agentId: agent.agentId }, `Error stopping agent ${agent.agentId}:`);
+          logger32.error({ error: error2, agentId: agent.agentId }, `Error stopping agent ${agent.agentId}:`);
         }
       }
       if (this.database) {
         try {
           await this.database.close();
-          logger31.info("Database closed.");
+          logger32.info("Database closed.");
         } catch (error2) {
-          logger31.error({ error: error2 }, "Error closing database:");
+          logger32.error({ error: error2 }, "Error closing database:");
         }
       }
       if (this.server) {
         this.server.close(() => {
-          logger31.success("Server closed successfully");
+          logger32.success("Server closed successfully");
           process.exit(0);
         });
         setTimeout(() => {
-          logger31.error("Could not close connections in time, forcing shutdown");
+          logger32.error("Could not close connections in time, forcing shutdown");
           process.exit(1);
         }, 5000);
       } else {
@@ -45232,7 +45305,7 @@ class AgentServer {
     };
     process.on("SIGTERM", gracefulShutdown);
     process.on("SIGINT", gracefulShutdown);
-    logger31.debug("Shutdown handlers registered");
+    logger32.debug("Shutdown handlers registered");
   }
 }
 export {

package/dist/managers/PluginInstaller.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Handles on-demand plugin installation using Bun.
+ * Provides environment guards and single-attempt tracking per process.
+ */
+export declare class PluginInstaller {
+    private attempted;
+    tryInstall(pluginName: string): Promise<boolean>;
+    private isAllowed;
+}
+export declare const pluginInstaller: PluginInstaller;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elizaos/server",
-  "version": "1.5.12-alpha.2",
+  "version": "1.5.13-alpha.1",
   "description": "ElizaOS Server - Core server infrastructure for ElizaOS agents",
   "publishConfig": {
     "access": "public",
@@ -44,7 +44,7 @@
     "dev": "bun run build.ts --watch"
   },
   "devDependencies": {
-    "@elizaos/client": "1.5.12-alpha.2",
+    "@elizaos/client": "1.5.13-alpha.1",
     "@types/node": "^24.0.1",
     "prettier": "3.5.3",
     "tsx": "4.19.4",
@@ -52,10 +52,10 @@
     "which": "^4.0.0",
     "ws": "^8.18.0"
   },
-  "gitHead": "11f562364db28d0454ac87ca22fa1a695ea2fc25",
+  "gitHead": "680c57c7696fa53f783083c5fd2f2ffdafc6a3d6",
   "dependencies": {
-    "@elizaos/core": "1.5.12-alpha.2",
-    "@elizaos/plugin-sql": "1.5.12-alpha.2",
+    "@elizaos/core": "1.5.13-alpha.1",
+    "@elizaos/plugin-sql": "1.5.13-alpha.1",
     "@sentry/node": "^10.11.0",
     "@types/express": "^5.0.2",
     "@types/helmet": "^4.0.0",