@elizaos/shared 2.0.0-alpha.538 → 2.0.0-beta.1

package/dist/config/app-config.d.ts

@@ -0,0 +1,273 @@
+/**
+ * White-label application configuration.
+ *
+ * This is the top-level config that a white-label app provides to customize
+ * the entire elizaOS experience — branding, defaults, deployment, and cloud
+ * integration. Apps provide this via `app.config.ts` in their project root.
+ *
+ * Usage:
+ *   import { AppConfig } from "@elizaos/app-core";
+ *
+ *   export default {
+ *     appName: "MyAgent",
+ *     appId: "com.example.myagent",
+ *     orgName: "example-org",
+ *     // ...
+ *   } satisfies AppConfig;
+ */
+import { type BrandingConfig } from "./branding.ts";
+export interface AppDesktopConfig {
+    /** Reverse-domain bundle identifier (e.g. "com.elizaai.eliza") */
+    bundleId: string;
+    /** Custom URL scheme for deep links (e.g. "eliza", "myagent") */
+    urlScheme: string;
+    /** Release notes URL */
+    releaseNotesUrl?: string;
+    /** macOS app category */
+    category?: string;
+}
+export interface AppPackagingConfig {
+    debian?: {
+        packageName: string;
+        maintainer: string;
+        homepage: string;
+        description: string;
+    };
+    flatpak?: {
+        appId: string;
+        command: string;
+    };
+    msix?: {
+        identityName: string;
+        publisher: string;
+        publisherDisplayName: string;
+        description: string;
+    };
+    snap?: {
+        name: string;
+        summary: string;
+        description: string;
+    };
+    homebrew?: {
+        tapRepo: string;
+        formulaName: string;
+    };
+    pypi?: {
+        packageName: string;
+        description: string;
+    };
+}
+export interface AppWebConfig {
+    /** Short display name for install surfaces like the PWA manifest */
+    shortName?: string;
+    /** Browser/PWA theme color */
+    themeColor?: string;
+    /** Browser/PWA background color */
+    backgroundColor?: string;
+    /** Social share image path, relative to the app origin */
+    shareImagePath?: string;
+}
+/**
+ * One brand-specific User-Agent marker that the Android `MainActivity`
+ * should append to the WebView UA when the named system property is
+ * set. Used by white-label forks that ship their own AOSP product
+ * image (set by `vendor/<brand>/<brand>_common.mk`'s
+ * `PRODUCT_PRODUCT_PROPERTIES`) and want their renderer to detect the
+ * branded image at runtime via a stable UA suffix.
+ *
+ * The default `ElizaOS/<tag>` marker (driven by `ro.elizaos.product`)
+ * is always emitted by the framework — these are *additional*
+ * brand-specific markers, not replacements.
+ *
+ * Example (for a fork named "AcmeOS"):
+ *
+ *   android: {
+ *     userAgentMarkers: [
+ *       { systemProp: "ro.acmeos.product", uaPrefix: "AcmeOS/" },
+ *     ],
+ *   }
+ *
+ * Produces a UA like `... ElizaOS/<tag> AcmeOS/<tag>` on an AcmeOS
+ * image, and an unmodified UA on stock Android.
+ */
+export interface AndroidUserAgentMarker {
+    /**
+     * Android system property to read via reflection. Empty string =
+     * marker disabled (skipped silently).
+     */
+    systemProp: string;
+    /**
+     * Prefix for the UA token. The marker emits `<uaPrefix><value>`
+     * where `<value>` is the system-property value. Conventionally ends
+     * with `/` (e.g. `"AcmeOS/"`).
+     */
+    uaPrefix: string;
+}
+export interface AppAndroidConfig {
+    /**
+     * Brand-specific UA markers appended after the framework's
+     * `ElizaOS/<tag>` marker. Only applied when the corresponding
+     * system property is non-empty (i.e. the AOSP brand image is
+     * actually running).
+     *
+     * Consumed by `run-mobile-build.mjs:overlayAndroid()`, which
+     * generates additional Java methods + call sites in the templated
+     * `MainActivity.java`. Stock Android APK installs see neither the
+     * `ElizaOS/` marker nor any brand-specific marker.
+     */
+    userAgentMarkers?: AndroidUserAgentMarker[];
+}
+/**
+ * Per-fork configuration for the AOSP system-app build toolkit
+ * shipped under `eliza/packages/app-core/scripts/aosp/`.
+ *
+ * White-label forks that want their own AOSP product image declare
+ * one `aosp:` block on their `AppConfig`; the build/validate/test
+ * scripts read it once at startup and parameterize every hardcoded
+ * brand value (vendor dir, lunch target, package name, etc.) off it.
+ *
+ * Forks without an AOSP image leave this `undefined`; the toolkit
+ * is inert in that case.
+ *
+ * Example (for a fork named "AcmeOS"):
+ *
+ *   aosp: {
+ *     productLunch:
+ *       "acme_cf_x86_64_phone-trunk_staging-userdebug",
+ *     vendorDir: "acme",
+ *     variantName: "AcmeOS",
+ *     productName: "acme",
+ *     packageName: "com.acmecorp.acme",
+ *     appName: "Acme",
+ *     commonMk: "vendor/acme/acme_common.mk",
+ *     modelSourceLabel: "acme-download",
+ *     bootanimationAssetDir:
+ *       "os/android/vendor/acme/bootanimation",
+ *   }
+ */
+export interface AospVariantConfig {
+    /**
+     * Full AOSP product lunch target string, e.g.
+     * `"acme_cf_x86_64_phone-trunk_staging-userdebug"`. Passed to
+     * `lunch` inside the AOSP envsetup shell.
+     */
+    productLunch: string;
+    /**
+     * Vendor directory name relative to the AOSP root. The toolkit
+     * reads/writes `<aospRoot>/vendor/<vendorDir>/`. Examples:
+     * `"acme"`, `"acmecorp"`.
+     */
+    vendorDir: string;
+    /**
+     * Display name used in log lines and status messages, e.g.
+     * `"AcmeOS"`. Cosmetic only — affects no on-device behavior.
+     */
+    variantName: string;
+    /**
+     * Brand short name used for `make` invocations and product
+     * makefile names, e.g. `"acme"`. Conventionally lowercase ASCII
+     * matching `vendorDir`.
+     */
+    productName: string;
+    /**
+     * Reverse-DNS package name of the system app, e.g.
+     * `"com.acmecorp.acme"`. Used to locate manifest entries,
+     * default-permissions XMLs, and `/data/data/<pkg>/` paths in
+     * sepolicy file_contexts.
+     */
+    packageName: string;
+    /**
+     * Display name of the staged APK (and its Soong module name in
+     * `vendor/<vendorDir>/apps/<appName>/Android.bp`), e.g.
+     * `"Acme"`. The validator pins `apk: "<appName>.apk"` and
+     * `name: "<appName>"`.
+     */
+    appName: string;
+    /**
+     * Path to the common product makefile, relative to AOSP root,
+     * e.g. `"vendor/acme/acme_common.mk"`. The validator checks
+     * that the per-product makefile inherits this file.
+     */
+    commonMk: string;
+    /**
+     * Source-label string written into the bundled-models manifest
+     * so the on-device runtime registers the staged GGUFs in the
+     * local-inference registry as fork-owned, e.g.
+     * `"acme-download"`.
+     */
+    modelSourceLabel: string;
+    /**
+     * Optional path to bootanimation source assets (`desc.txt` +
+     * `partN/` PNG dirs), relative to the host repo root, e.g.
+     * `"os/android/vendor/acme/bootanimation"`. When unset the
+     * `build-bootanimation.mjs` script must be passed `--frames`.
+     */
+    bootanimationAssetDir?: string;
+    /**
+     * Optional Cuttlefish device dir name used in
+     * `out/target/product/<deviceDir>/`. Defaults to
+     * `"vsoc_x86_64_only"` (matches Google's stock cuttlefish).
+     * Override only when shipping a custom device profile.
+     */
+    cuttlefishDeviceDir?: string;
+}
+export interface AppConfig {
+    /** Display name shown in UI, desktop title bars, etc. */
+    appName: string;
+    /** Reverse-domain app identifier */
+    appId: string;
+    /** Organization name (GitHub org, npm scope source) */
+    orgName: string;
+    /** Repository name */
+    repoName: string;
+    /** CLI command name (e.g. "eliza", "myagent") */
+    cliName: string;
+    /** Short tagline / description */
+    description: string;
+    /**
+     * Eliza Cloud app ID for rev sharing.
+     * When set, the app earns revenue through inference markups and
+     * purchase-share settings on Eliza Cloud.
+     */
+    cloudAppId?: string;
+    /** Full branding overrides (colors, URLs, etc.) */
+    branding: Partial<BrandingConfig>;
+    /**
+     * Env var prefix for this app.
+     * When set, the app's brand-env layer aliases `{PREFIX}_PORT` → `ELIZA_PORT`, etc.
+     * Example: "ELIZA" generates ELIZA_PORT → ELIZA_PORT.
+     */
+    envPrefix?: string;
+    /** Path to default character JSON (relative to project root) */
+    defaultCharacter?: string;
+    /** Plugins to auto-enable by default */
+    defaultPlugins?: string[];
+    /** Apps starred and pinned by default on a fresh client profile. */
+    defaultApps?: string[];
+    /** Desktop-specific configuration */
+    desktop?: AppDesktopConfig;
+    /** Web app manifest and share metadata overrides. */
+    web?: AppWebConfig;
+    /** Android-specific build-time configuration. */
+    android?: AppAndroidConfig;
+    /**
+     * AOSP system-app build variant. Only set on forks that ship
+     * their own AOSP product image; consumed by the toolkit under
+     * `eliza/packages/app-core/scripts/aosp/`.
+     */
+    aosp?: AospVariantConfig;
+    /** Package manager configurations */
+    packaging?: AppPackagingConfig;
+    /**
+     * Default ELIZA_NAMESPACE value.
+     * Determines the state directory name (~/.{namespace}/) and config filename.
+     * Defaults to the cliName if not set.
+     */
+    namespace?: string;
+}
+/**
+ * Resolve a full BrandingConfig from an AppConfig.
+ * Merges app-specific overrides with the framework defaults.
+ */
+export declare function resolveAppBranding(appConfig: AppConfig): BrandingConfig;
+//# sourceMappingURL=app-config.d.ts.map

package/dist/config/app-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-config.d.ts","sourceRoot":"","sources":["../../src/config/app-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,KAAK,cAAc,EAAoB,MAAM,eAAe,CAAC;AAEtE,MAAM,WAAW,gBAAgB;IAC/B,kEAAkE;IAClE,QAAQ,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAC;IAClB,wBAAwB;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,yBAAyB;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE;QACP,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,OAAO,CAAC,EAAE;QACR,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,IAAI,CAAC,EAAE;QACL,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,oBAAoB,EAAE,MAAM,CAAC;QAC7B,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,IAAI,CAAC,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,QAAQ,CAAC,EAAE;QACT,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,IAAI,CAAC,EAAE;QACL,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,YAAY;IAC3B,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8BAA8B;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mCAAmC;IACnC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,EAAE,sBAAsB,EAAE,CAAC;CAC7C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,SAAS;IACxB,yDAAyD;IACzD,OAAO,EAAE,MAAM,CAAC;IAEhB,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAC;IAEd,uDAAuD;IACvD,OAAO,EAAE,MAAM,CAAC;IAEhB,sBAAsB;IACtB,QAAQ,EAAE,MAAM,CAAC;IAEjB,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAC;IAEhB,kCAAkC;IAClC,WAAW,EAAE,MAAM,CAAC;IAEpB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,mDAAmD;IACnD,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAElC;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,gEAAgE;IAChE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,wCAAwC;IACxC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAE1B,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IAEvB,qCAAqC;IACrC,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAE3B,qDAAqD;IACrD,GAAG,CAAC,EAAE,YAAY,CAAC;IAEnB,iDAAiD;IACjD,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAE3B;;;;OAIG;IACH,IAAI,CAAC,EAAE,iBAAiB,CAAC;IAEzB,qCAAqC;IACrC,SAAS,CAAC,EAAE,kBAAkB,CAAC;IAE/B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,SAAS,GAAG,cAAc,CAQvE"}

package/dist/config/app-config.js

@@ -0,0 +1,32 @@
+/**
+ * White-label application configuration.
+ *
+ * This is the top-level config that a white-label app provides to customize
+ * the entire elizaOS experience — branding, defaults, deployment, and cloud
+ * integration. Apps provide this via `app.config.ts` in their project root.
+ *
+ * Usage:
+ *   import { AppConfig } from "@elizaos/app-core";
+ *
+ *   export default {
+ *     appName: "MyAgent",
+ *     appId: "com.example.myagent",
+ *     orgName: "example-org",
+ *     // ...
+ *   } satisfies AppConfig;
+ */
+import { DEFAULT_BRANDING } from "./branding.js";
+/**
+ * Resolve a full BrandingConfig from an AppConfig.
+ * Merges app-specific overrides with the framework defaults.
+ */
+export function resolveAppBranding(appConfig) {
+    return {
+        ...DEFAULT_BRANDING,
+        appName: appConfig.appName,
+        orgName: appConfig.orgName,
+        repoName: appConfig.repoName,
+        ...appConfig.branding,
+    };
+}
+//# sourceMappingURL=app-config.js.map

package/dist/config/app-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-config.js","sourceRoot":"","sources":["../../src/config/app-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAuB,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAmRtE;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAoB;IACrD,OAAO;QACL,GAAG,gBAAgB;QACnB,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,GAAG,SAAS,CAAC,QAAQ;KACtB,CAAC;AACJ,CAAC"}

package/dist/config/app-manifest.d.ts

@@ -0,0 +1,75 @@
+import type { PluginManifestCandidate } from "./plugin-manifest.js";
+/** Default to apply for a plugin entry. */
+export interface PluginAppDefault {
+    /** When false, the plugin is disabled by default unless the user enables it. */
+    enabled?: boolean;
+}
+/** Capability requirement level declared by the app. */
+export type AppCapabilityRequirement = "required" | "optional";
+export interface AppManifestBlock {
+    /**
+     * If set, the plugin candidate list is restricted to this set. Plugins
+     * outside this list are ignored even if they declare auto-enable in their
+     * own package.json.
+     *
+     * Match by either npm package name (`@elizaos/plugin-X`) or the short id
+     * (`X`). Both forms accepted.
+     */
+    candidates?: string[];
+    /**
+     * Per-plugin defaults. Keyed by short id OR full package name. Applied to
+     * `config.plugins.entries` before the manifest evaluator runs — so the
+     * user's saved config still wins, but plugin-specific app defaults take
+     * effect on first boot.
+     */
+    defaults?: Record<string, PluginAppDefault>;
+    /**
+     * Capability declarations the app expects to be available. Currently
+     * informational — surfaced by `readAppManifest` so UIs can warn when a
+     * required capability isn't satisfied by any enabled plugin.
+     */
+    capabilities?: Record<string, AppCapabilityRequirement>;
+}
+export interface AppPackageManifest {
+    name: string;
+    version?: string;
+    elizaos?: {
+        app?: AppManifestBlock;
+    };
+}
+/**
+ * Read the host app's package.json and extract the `elizaos.app` block.
+ * Returns null when no package.json is found at `appRoot` or when the file
+ * has no `elizaos.app` block.
+ *
+ * Caller decides where the host app lives — typically `process.cwd()` or
+ * `ELIZA_WORKSPACE_ROOT`. Walking up the tree to find an enclosing
+ * `package.json` is *not* done here on purpose: the host app is an explicit
+ * concept and we want exactly the package.json the user named, not whatever
+ * happens to be one or two levels up.
+ */
+export declare function readAppManifest(appRoot: string): Promise<AppManifestBlock | null>;
+/**
+ * Restrict a candidate list to the ones declared in the app manifest.
+ * When `manifest.candidates` is undefined or empty, returns the input
+ * unchanged (no app-level restriction).
+ *
+ * Match is by package name OR short id — apps can list either form.
+ */
+export declare function filterCandidatesByAppManifest(candidates: PluginManifestCandidate[], manifest: AppManifestBlock | null): PluginManifestCandidate[];
+/**
+ * Pre-populate `config.plugins.entries` from the app manifest defaults.
+ * User-set entries (already present in `config.plugins.entries`) win — the
+ * defaults only fill in keys the user hasn't explicitly set.
+ *
+ * Mutates `config` in place. Returns the list of entries that were defaulted
+ * (for log surfacing).
+ */
+export declare function applyAppManifestDefaults(config: {
+    plugins?: {
+        entries?: Record<string, {
+            enabled?: boolean;
+        }>;
+    };
+}, manifest: AppManifestBlock | null): string[];
+//# sourceMappingURL=app-manifest.d.ts.map

package/dist/config/app-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-manifest.d.ts","sourceRoot":"","sources":["../../src/config/app-manifest.ts"],"names":[],"mappings":"AA0CA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAEpE,2CAA2C;AAC3C,MAAM,WAAW,gBAAgB;IAC/B,gFAAgF;IAChF,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,wDAAwD;AACxD,MAAM,MAAM,wBAAwB,GAAG,UAAU,GAAG,UAAU,CAAC;AAE/D,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC5C;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;CACzD;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE;QACR,GAAG,CAAC,EAAE,gBAAgB,CAAC;KACxB,CAAC;CACH;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAUlC;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAC3C,UAAU,EAAE,uBAAuB,EAAE,EACrC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,GAChC,uBAAuB,EAAE,CAc3B;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE;IAAE,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,OAAO,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC,CAAA;KAAE,CAAA;CAAE,EACzE,QAAQ,EAAE,gBAAgB,GAAG,IAAI,GAChC,MAAM,EAAE,CAYV"}

package/dist/config/app-manifest.js

@@ -0,0 +1,109 @@
+// App-level plugin manifest.
+//
+// Each host app (eliza, milady, custom downstream apps) declares which
+// plugins it considers candidates and how they default in its own
+// `package.json` under `elizaos.app`:
+//
+//   {
+//     "elizaos": {
+//       "app": {
+//         "candidates": [
+//           "@elizaos/plugin-anthropic",
+//           "@elizaos/plugin-openai",
+//           "@elizaos/plugin-wallet"
+//         ],
+//         "defaults": {
+//           "@elizaos/plugin-cua": { "enabled": false },
+//           "wallet": { "enabled": true }
+//         },
+//         "capabilities": {
+//           "browser": "required",
+//           "wallet": "optional"
+//         }
+//       }
+//     }
+//   }
+//
+// The plugin auto-enable engine reads the host app's manifest at boot:
+//   - If `candidates` is set, restrict the discovered plugin list to that
+//     allow-list (apps that haven't explicitly listed a plugin won't
+//     load it even if its own auto-enable matches).
+//   - If `defaults` is set, prepopulate `config.plugins.entries` with the
+//     declared `{ enabled }` flags BEFORE the manifest evaluator runs, so
+//     the user's own config still overrides app defaults.
+//   - `capabilities` is informational today — surfaced via the verdict so
+//     UIs can show "this app requires X" / "this app needs you to wire up Y".
+//
+// Apps that don't declare `elizaos.app` are unrestricted (every discovered
+// plugin is a candidate, no defaults applied).
+import { promises as fs } from "node:fs";
+import path from "node:path";
+/**
+ * Read the host app's package.json and extract the `elizaos.app` block.
+ * Returns null when no package.json is found at `appRoot` or when the file
+ * has no `elizaos.app` block.
+ *
+ * Caller decides where the host app lives — typically `process.cwd()` or
+ * `ELIZA_WORKSPACE_ROOT`. Walking up the tree to find an enclosing
+ * `package.json` is *not* done here on purpose: the host app is an explicit
+ * concept and we want exactly the package.json the user named, not whatever
+ * happens to be one or two levels up.
+ */
+export async function readAppManifest(appRoot) {
+    let raw;
+    try {
+        raw = await fs.readFile(path.join(appRoot, "package.json"), "utf8");
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return null;
+        throw err;
+    }
+    const parsed = JSON.parse(raw);
+    return parsed?.elizaos?.app ?? null;
+}
+/**
+ * Restrict a candidate list to the ones declared in the app manifest.
+ * When `manifest.candidates` is undefined or empty, returns the input
+ * unchanged (no app-level restriction).
+ *
+ * Match is by package name OR short id — apps can list either form.
+ */
+export function filterCandidatesByAppManifest(candidates, manifest) {
+    if (!manifest?.candidates || manifest.candidates.length === 0) {
+        return candidates;
+    }
+    const allow = new Set(manifest.candidates);
+    return candidates.filter((c) => {
+        if (allow.has(c.packageName))
+            return true;
+        const shortId = c.packageName.includes("/plugin-")
+            ? c.packageName.slice(c.packageName.lastIndexOf("/plugin-") + "/plugin-".length)
+            : c.packageName;
+        return allow.has(shortId);
+    });
+}
+/**
+ * Pre-populate `config.plugins.entries` from the app manifest defaults.
+ * User-set entries (already present in `config.plugins.entries`) win — the
+ * defaults only fill in keys the user hasn't explicitly set.
+ *
+ * Mutates `config` in place. Returns the list of entries that were defaulted
+ * (for log surfacing).
+ */
+export function applyAppManifestDefaults(config, manifest) {
+    if (!manifest?.defaults)
+        return [];
+    config.plugins = config.plugins ?? {};
+    config.plugins.entries = config.plugins.entries ?? {};
+    const entries = config.plugins.entries;
+    const applied = [];
+    for (const [id, defaultsForPlugin] of Object.entries(manifest.defaults)) {
+        if (entries[id] !== undefined)
+            continue; // user wins
+        entries[id] = { ...defaultsForPlugin };
+        applied.push(id);
+    }
+    return applied;
+}
+//# sourceMappingURL=app-manifest.js.map

package/dist/config/app-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-manifest.js","sourceRoot":"","sources":["../../src/config/app-manifest.ts"],"names":[],"mappings":"AAAA,6BAA6B;AAC7B,EAAE;AACF,uEAAuE;AACvE,kEAAkE;AAClE,sCAAsC;AACtC,EAAE;AACF,MAAM;AACN,mBAAmB;AACnB,iBAAiB;AACjB,0BAA0B;AAC1B,yCAAyC;AACzC,sCAAsC;AACtC,qCAAqC;AACrC,aAAa;AACb,wBAAwB;AACxB,yDAAyD;AACzD,0CAA0C;AAC1C,aAAa;AACb,4BAA4B;AAC5B,mCAAmC;AACnC,iCAAiC;AACjC,YAAY;AACZ,UAAU;AACV,QAAQ;AACR,MAAM;AACN,EAAE;AACF,uEAAuE;AACvE,0EAA0E;AAC1E,qEAAqE;AACrE,oDAAoD;AACpD,0EAA0E;AAC1E,0EAA0E;AAC1E,0DAA0D;AAC1D,0EAA0E;AAC1E,8EAA8E;AAC9E,EAAE;AACF,2EAA2E;AAC3E,+CAA+C;AAE/C,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AA8C7B;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAe;IAEf,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;IACrD,OAAO,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC;AACtC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAC3C,UAAqC,EACrC,QAAiC;IAEjC,IAAI,CAAC,QAAQ,EAAE,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC3C,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC7B,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,OAAO,GAAG,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC;YAChD,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CACjB,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,UAAU,CAAC,MAAM,CAC1D;YACH,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QAClB,OAAO,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAAyE,EACzE,QAAiC;IAEjC,IAAI,CAAC,QAAQ,EAAE,QAAQ;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;IACtC,MAAM,CAAC,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;IACtD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;IACvC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,EAAE,EAAE,iBAAiB,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxE,IAAI,OAAO,CAAC,EAAE,CAAC,KAAK,SAAS;YAAE,SAAS,CAAC,YAAY;QACrD,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,iBAAiB,EAAE,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/config/boot-config-react.d.ts

@@ -0,0 +1,5 @@
+import { type AppBootConfig } from "./boot-config-store.js";
+export declare const AppBootContext: import("react").Context<AppBootConfig>;
+/** Read the boot config from a React component. */
+export declare function useBootConfig(): AppBootConfig;
+//# sourceMappingURL=boot-config-react.d.ts.map

package/dist/config/boot-config-react.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"boot-config-react.d.ts","sourceRoot":"","sources":["../../src/config/boot-config-react.tsx"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,aAAa,EAEnB,MAAM,wBAAwB,CAAC;AAEhC,eAAO,MAAM,cAAc,wCAAoD,CAAC;AAEhF,mDAAmD;AACnD,wBAAgB,aAAa,IAAI,aAAa,CAE7C"}

package/dist/config/boot-config-react.js

@@ -0,0 +1,8 @@
+import { createContext, useContext } from "react";
+import { DEFAULT_BOOT_CONFIG, } from "./boot-config-store.js";
+export const AppBootContext = createContext(DEFAULT_BOOT_CONFIG);
+/** Read the boot config from a React component. */
+export function useBootConfig() {
+    return useContext(AppBootContext);
+}
+//# sourceMappingURL=boot-config-react.js.map

package/dist/config/boot-config-react.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"boot-config-react.js","sourceRoot":"","sources":["../../src/config/boot-config-react.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAClD,OAAO,EAEL,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,CAAC,MAAM,cAAc,GAAG,aAAa,CAAgB,mBAAmB,CAAC,CAAC;AAEhF,mDAAmD;AACnD,MAAM,UAAU,aAAa;IAC3B,OAAO,UAAU,CAAC,cAAc,CAAC,CAAC;AACpC,CAAC"}

package/dist/config/boot-config-store.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Store-only boot config entry, safe for Bun/Node API paths.
+ *
+ * UI packages may augment the shape with component implementations, but the
+ * shared runtime only needs a process-global config object and a few common
+ * fields used by API clients and asset helpers.
+ */
+import type { BrandingConfig } from "./branding.js";
+export interface BundledVrmAsset {
+    title: string;
+    slug: string;
+}
+export interface CharacterCatalogData {
+    assets: CharacterAssetEntry[];
+    injectedCharacters: InjectedCharacterEntry[];
+}
+export interface CharacterAssetEntry {
+    id: number;
+    slug: string;
+    title: string;
+    sourceName: string;
+}
+export interface InjectedCharacterEntry {
+    catchphrase: string;
+    name: string;
+    avatarAssetId: number;
+    voicePresetId?: string;
+}
+export interface ResolvedCharacterAsset extends CharacterAssetEntry {
+    compressedVrmPath: string;
+    rawVrmPath: string;
+    previewPath: string;
+    backgroundPath: string;
+    sourceVrmFilename: string;
+}
+export interface ResolvedInjectedCharacter extends InjectedCharacterEntry {
+    avatarAsset: ResolvedCharacterAsset;
+}
+export interface ClientMiddleware {
+    forceFreshOnboarding?: boolean;
+    preferLocalProvider?: boolean;
+    desktopPermissions?: boolean;
+}
+export interface AppBootConfig {
+    branding: Partial<BrandingConfig>;
+    assetBaseUrl?: string;
+    defaultApps?: readonly string[];
+    apiBase?: string;
+    apiToken?: string;
+    cloudApiBase?: string;
+    vrmAssets?: BundledVrmAsset[];
+    onboardingStyles?: unknown[];
+    characterCatalog?: CharacterCatalogData;
+    envAliases?: readonly (readonly [string, string])[];
+    clientMiddleware?: ClientMiddleware;
+    [key: string]: unknown;
+}
+export declare const DEFAULT_BOOT_CONFIG: AppBootConfig;
+export declare function setBootConfig(config: AppBootConfig): void;
+export declare function getBootConfig(): AppBootConfig;
+/** Sync brand env vars → Eliza equivalents. Server-side only. */
+export declare function syncBrandEnvToEliza(aliases: readonly (readonly [string, string])[]): void;
+/** Sync Eliza env vars → brand equivalents. Server-side only. */
+export declare function syncElizaEnvToBrand(aliases: readonly (readonly [string, string])[]): void;
+export declare function resolveCharacterCatalog(catalog: CharacterCatalogData): {
+    assets: ResolvedCharacterAsset[];
+    assetCount: number;
+    defaultAsset: ResolvedCharacterAsset | null;
+    injectedCharacters: ResolvedInjectedCharacter[];
+    injectedCharacterCount: number;
+    getAsset: (id: number) => ResolvedCharacterAsset | null;
+    getInjectedCharacter: (catchphrase: string) => ResolvedInjectedCharacter | null;
+};
+//# sourceMappingURL=boot-config-store.d.ts.map

package/dist/config/boot-config-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"boot-config-store.d.ts","sourceRoot":"","sources":["../../src/config/boot-config-store.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9B,kBAAkB,EAAE,sBAAsB,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,sBAAuB,SAAQ,mBAAmB;IACjE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,yBAA0B,SAAQ,sBAAsB;IACvE,WAAW,EAAE,sBAAsB,CAAC;CACrC;AAED,MAAM,WAAW,gBAAgB;IAC/B,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,eAAe,EAAE,CAAC;IAC9B,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC;IAC7B,gBAAgB,CAAC,EAAE,oBAAoB,CAAC;IACxC,UAAU,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;IACpD,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,eAAO,MAAM,mBAAmB,EAAE,aAGjC,CAAC;AAyCF,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAIzD;AAED,wBAAgB,aAAa,IAAI,aAAa,CAE7C;AAgBD,iEAAiE;AACjE,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,GAC9C,IAAI,CAaN;AAED,iEAAiE;AACjE,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,GAC9C,IAAI,CAaN;AAeD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,oBAAoB,GAAG;IACtE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC5C,kBAAkB,EAAE,yBAAyB,EAAE,CAAC;IAChD,sBAAsB,EAAE,MAAM,CAAC;IAC/B,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,sBAAsB,GAAG,IAAI,CAAC;IACxD,oBAAoB,EAAE,CACpB,WAAW,EAAE,MAAM,KAChB,yBAAyB,GAAG,IAAI,CAAC;CACvC,CA6BA"}