@elizaos/shared 2.0.0-beta.1 → 2.0.3-beta.2

package/connectors.d.ts

@@ -0,0 +1,5 @@
+export declare function registerConnectorSourceAliases(canonical: string, aliases: readonly string[]): void;
+export declare function normalizeConnectorSource(source: string | null | undefined): string;
+export declare function getConnectorSourceAliases(source: string | null | undefined): string[];
+export declare function expandConnectorSourceFilter(sources: Iterable<string> | null | undefined): Set<string>;
+//# sourceMappingURL=connectors.d.ts.map

package/connectors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connectors.d.ts","sourceRoot":"","sources":["../src/connectors.ts"],"names":[],"mappings":"AAgCA,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,SAAS,MAAM,EAAE,GACzB,IAAI,CAWN;AASD,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAChC,MAAM,CAWR;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAChC,MAAM,EAAE,CAQV;AAED,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,IAAI,GAAG,SAAS,GAC3C,GAAG,CAAC,MAAM,CAAC,CAUb"}

package/connectors.js

@@ -0,0 +1,73 @@
+const CONNECTOR_SOURCE_ALIASES = {
+    discord: ["discord", "discord-local"],
+    imessage: ["imessage", "bluebubbles"],
+    signal: ["signal"],
+    slack: ["slack"],
+    sms: ["sms"],
+    telegram: ["telegram", "telegram-account", "telegramaccount"],
+    wechat: ["wechat"],
+    whatsapp: ["whatsapp"],
+};
+const registeredAliases = {};
+const rawToCanonical = new Map();
+function rebuildRawToCanonical() {
+    rawToCanonical.clear();
+    for (const [canonical, aliases] of Object.entries(CONNECTOR_SOURCE_ALIASES)) {
+        for (const alias of aliases) {
+            rawToCanonical.set(alias, canonical);
+        }
+    }
+    for (const [canonical, aliases] of Object.entries(registeredAliases)) {
+        for (const alias of aliases) {
+            rawToCanonical.set(alias, canonical);
+        }
+    }
+}
+rebuildRawToCanonical();
+export function registerConnectorSourceAliases(canonical, aliases) {
+    const key = canonical.trim().toLowerCase();
+    if (!key)
+        return;
+    const existing = registeredAliases[key] ?? [];
+    const merged = new Set([
+        ...existing,
+        ...aliases.map((alias) => alias.trim().toLowerCase()),
+    ]);
+    registeredAliases[key] = Array.from(merged);
+    rebuildRawToCanonical();
+}
+function getMergedAliases(canonical) {
+    const hardcoded = CONNECTOR_SOURCE_ALIASES[canonical] ?? [];
+    const registered = registeredAliases[canonical] ?? [];
+    if (registered.length === 0)
+        return hardcoded;
+    return Array.from(new Set([...hardcoded, ...registered]));
+}
+export function normalizeConnectorSource(source) {
+    if (typeof source !== "string") {
+        return "";
+    }
+    const trimmed = source.trim().toLowerCase();
+    if (!trimmed) {
+        return "";
+    }
+    return rawToCanonical.get(trimmed) ?? trimmed;
+}
+export function getConnectorSourceAliases(source) {
+    const canonical = normalizeConnectorSource(source);
+    if (!canonical) {
+        return [];
+    }
+    const aliases = getMergedAliases(canonical);
+    return [...(aliases.length > 0 ? aliases : [canonical])];
+}
+export function expandConnectorSourceFilter(sources) {
+    const expanded = new Set();
+    for (const source of sources ?? []) {
+        for (const alias of getConnectorSourceAliases(source)) {
+            expanded.add(alias);
+        }
+    }
+    return expanded;
+}
+//# sourceMappingURL=connectors.js.map

package/connectors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connectors.js","sourceRoot":"","sources":["../src/connectors.ts"],"names":[],"mappings":"AAAA,MAAM,wBAAwB,GAAsC;IAClE,OAAO,EAAE,CAAC,SAAS,EAAE,eAAe,CAAC;IACrC,QAAQ,EAAE,CAAC,UAAU,EAAE,aAAa,CAAC;IACrC,MAAM,EAAE,CAAC,QAAQ,CAAC;IAClB,KAAK,EAAE,CAAC,OAAO,CAAC;IAChB,GAAG,EAAE,CAAC,KAAK,CAAC;IACZ,QAAQ,EAAE,CAAC,UAAU,EAAE,kBAAkB,EAAE,iBAAiB,CAAC;IAC7D,MAAM,EAAE,CAAC,QAAQ,CAAC;IAClB,QAAQ,EAAE,CAAC,UAAU,CAAC;CACvB,CAAC;AAEF,MAAM,iBAAiB,GAA6B,EAAE,CAAC;AACvD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEjD,SAAS,qBAAqB;IAC5B,cAAc,CAAC,KAAK,EAAE,CAAC;IAEvB,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,CAAC;QAC5E,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACrE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;AACH,CAAC;AAED,qBAAqB,EAAE,CAAC;AAExB,MAAM,UAAU,8BAA8B,CAC5C,SAAiB,EACjB,OAA0B;IAE1B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,CAAC,GAAG;QAAE,OAAO;IAEjB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC;QACrB,GAAG,QAAQ;QACX,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;KACtD,CAAC,CAAC;IACH,iBAAiB,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5C,qBAAqB,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB;IACzC,MAAM,SAAS,GAAG,wBAAwB,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAC5D,MAAM,UAAU,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IACtD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,MAAiC;IAEjC,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,MAAiC;IAEjC,MAAM,SAAS,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,OAA4C;IAE5C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,KAAK,MAAM,MAAM,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;QACnC,KAAK,MAAM,KAAK,IAAI,yBAAyB,CAAC,MAAM,CAAC,EAAE,CAAC;YACtD,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/contracts/agent-routes.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Zod schemas for the agent-lifecycle, agent-transfer, and registry
+ * write routes. agent-admin (restart / reset) takes no body and is
+ * not covered here.
+ *
+ * Routes covered:
+ *   POST /api/agent/autonomy       { enabled: boolean }
+ *   POST /api/agent/export         { password, includeLogs? }
+ *   POST /api/registry/register    { name?, endpoint?, tokenURI? }
+ *   POST /api/registry/update-uri  { tokenURI }
+ *   POST /api/registry/sync        { name?, endpoint?, tokenURI? }
+ *
+ * `POST /api/agent/import` reads a binary multipart-style body via
+ * `readRequestBodyBuffer` (not `readJsonBody`) so it's not migrated.
+ */
+import z from "zod";
+export declare const AGENT_TRANSFER_MIN_PASSWORD_LENGTH = 4;
+export declare const PostAgentAutonomyRequestSchema: z.ZodObject<{
+    enabled: z.ZodBoolean;
+}, z.core.$strict>;
+export declare const PostAgentExportRequestSchema: z.ZodObject<{
+    password: z.ZodString;
+    includeLogs: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+export declare const PostRegistryRegisterRequestSchema: z.ZodPipe<z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    endpoint: z.ZodOptional<z.ZodString>;
+    tokenURI: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>, z.ZodTransform<{
+    tokenURI?: string | undefined;
+    endpoint?: string | undefined;
+    name?: string | undefined;
+}, {
+    name?: string | undefined;
+    endpoint?: string | undefined;
+    tokenURI?: string | undefined;
+}>>;
+export declare const PostRegistryUpdateUriRequestSchema: z.ZodPipe<z.ZodObject<{
+    tokenURI: z.ZodString;
+}, z.core.$strict>, z.ZodTransform<{
+    tokenURI: string;
+}, {
+    tokenURI: string;
+}>>;
+export declare const PostRegistrySyncRequestSchema: z.ZodPipe<z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    endpoint: z.ZodOptional<z.ZodString>;
+    tokenURI: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>, z.ZodTransform<{
+    tokenURI?: string | undefined;
+    endpoint?: string | undefined;
+    name?: string | undefined;
+}, {
+    name?: string | undefined;
+    endpoint?: string | undefined;
+    tokenURI?: string | undefined;
+}>>;
+export type PostAgentAutonomyRequest = z.infer<typeof PostAgentAutonomyRequestSchema>;
+export type PostAgentExportRequest = z.infer<typeof PostAgentExportRequestSchema>;
+export type PostRegistryRegisterRequest = z.infer<typeof PostRegistryRegisterRequestSchema>;
+export type PostRegistryUpdateUriRequest = z.infer<typeof PostRegistryUpdateUriRequestSchema>;
+export type PostRegistrySyncRequest = z.infer<typeof PostRegistrySyncRequestSchema>;
+//# sourceMappingURL=agent-routes.d.ts.map

package/contracts/agent-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-routes.d.ts","sourceRoot":"","sources":["../../src/contracts/agent-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,CAAC,MAAM,KAAK,CAAC;AAEpB,eAAO,MAAM,kCAAkC,IAAI,CAAC;AAEpD,eAAO,MAAM,8BAA8B;;kBAIhC,CAAC;AAEZ,eAAO,MAAM,4BAA4B;;;kBAU9B,CAAC;AAEZ,eAAO,MAAM,iCAAiC;;;;;;;;;;;;GAgB1C,CAAC;AAEL,eAAO,MAAM,kCAAkC;;;;;;GAKe,CAAC;AAE/D,eAAO,MAAM,6BAA6B;;;;;;;;;;;;GAAoC,CAAC;AAE/E,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,8BAA8B,CACtC,CAAC;AACF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAC1C,OAAO,4BAA4B,CACpC,CAAC;AACF,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAC/C,OAAO,iCAAiC,CACzC,CAAC;AACF,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAChD,OAAO,kCAAkC,CAC1C,CAAC;AACF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,6BAA6B,CACrC,CAAC"}

package/contracts/agent-routes.js

@@ -0,0 +1,55 @@
+/**
+ * Zod schemas for the agent-lifecycle, agent-transfer, and registry
+ * write routes. agent-admin (restart / reset) takes no body and is
+ * not covered here.
+ *
+ * Routes covered:
+ *   POST /api/agent/autonomy       { enabled: boolean }
+ *   POST /api/agent/export         { password, includeLogs? }
+ *   POST /api/registry/register    { name?, endpoint?, tokenURI? }
+ *   POST /api/registry/update-uri  { tokenURI }
+ *   POST /api/registry/sync        { name?, endpoint?, tokenURI? }
+ *
+ * `POST /api/agent/import` reads a binary multipart-style body via
+ * `readRequestBodyBuffer` (not `readJsonBody`) so it's not migrated.
+ */
+import z from "zod";
+export const AGENT_TRANSFER_MIN_PASSWORD_LENGTH = 4;
+export const PostAgentAutonomyRequestSchema = z
+    .object({
+    enabled: z.boolean(),
+})
+    .strict();
+export const PostAgentExportRequestSchema = z
+    .object({
+    password: z
+        .string()
+        .min(AGENT_TRANSFER_MIN_PASSWORD_LENGTH, `A password of at least ${AGENT_TRANSFER_MIN_PASSWORD_LENGTH} characters is required.`),
+    includeLogs: z.boolean().optional(),
+})
+    .strict();
+export const PostRegistryRegisterRequestSchema = z
+    .object({
+    name: z.string().optional(),
+    endpoint: z.string().optional(),
+    tokenURI: z.string().optional(),
+})
+    .strict()
+    .transform((value) => {
+    const name = value.name?.trim();
+    const endpoint = value.endpoint?.trim();
+    const tokenURI = value.tokenURI?.trim();
+    return {
+        ...(name ? { name } : {}),
+        ...(endpoint ? { endpoint } : {}),
+        ...(tokenURI ? { tokenURI } : {}),
+    };
+});
+export const PostRegistryUpdateUriRequestSchema = z
+    .object({
+    tokenURI: z.string().regex(/\S/, "tokenURI is required"),
+})
+    .strict()
+    .transform((value) => ({ tokenURI: value.tokenURI.trim() }));
+export const PostRegistrySyncRequestSchema = PostRegistryRegisterRequestSchema;
+//# sourceMappingURL=agent-routes.js.map

package/contracts/agent-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-routes.js","sourceRoot":"","sources":["../../src/contracts/agent-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,CAAC,MAAM,KAAK,CAAC;AAEpB,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC;AAEpD,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC;KAC5C,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC;KAC1C,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CACF,kCAAkC,EAClC,0BAA0B,kCAAkC,0BAA0B,CACvF;IACH,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC;KAC/C,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC;KACD,MAAM,EAAE;KACR,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;IACnB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;IACxC,OAAO;QACL,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC;KAChD,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,sBAAsB,CAAC;CACzD,CAAC;KACD,MAAM,EAAE;KACR,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;AAE/D,MAAM,CAAC,MAAM,6BAA6B,GAAG,iCAAiC,CAAC"}

package/contracts/app-permissions-routes.d.ts

@@ -0,0 +1,148 @@
+/**
+ * Zod schemas for the App Permissions HTTP routes.
+ *
+ * **Pilot for the typed-routes initiative.** Replaces hand-rolled
+ * `if (typeof body.x !== 'string')` validation in
+ * `packages/agent/src/api/apps-routes.ts` and the parallel client-side
+ * type re-declarations in `packages/ui/src/api/client-skills.ts` with a
+ * single source of truth: zod schemas defined here, parsed on the
+ * server, and used to derive the client's request/response types.
+ *
+ * The pattern that lands here is the template for migrating other
+ * routes off the manual-validation pattern — keep schemas alongside
+ * their domain types, expose `.parse()` for the server, expose
+ * inferred TS types via `z.infer<typeof schema>` for the client.
+ *
+ * Routes covered (from PR #7554):
+ *   GET  /api/apps/permissions
+ *   GET  /api/apps/permissions/:slug
+ *   PUT  /api/apps/permissions/:slug   { namespaces: string[] }
+ *
+ * The `AppPermissionsView` shape itself is hand-typed in
+ * `./app-permissions.ts` (slice 1) and re-derived as a zod schema here.
+ * The two are kept in sync by a compile-time `satisfies` check at the
+ * bottom of this module — if either drifts, typecheck fails.
+ */
+import z from "zod";
+/**
+ * Wire shape for `AppPermissionsView`. Mirrors the hand-typed
+ * interface in `./app-permissions.ts`. Drift between the two is
+ * caught at the bottom of this module via a `satisfies` cross-check.
+ */
+export declare const AppPermissionsViewSchema: z.ZodObject<{
+    slug: z.ZodString;
+    trust: z.ZodEnum<{
+        external: "external";
+        "first-party": "first-party";
+    }>;
+    isolation: z.ZodEnum<{
+        none: "none";
+        worker: "worker";
+    }>;
+    requestedPermissions: z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodNull]>;
+    recognisedNamespaces: z.ZodArray<z.ZodEnum<{
+        fs: "fs";
+        net: "net";
+    }>>;
+    grantedNamespaces: z.ZodArray<z.ZodEnum<{
+        fs: "fs";
+        net: "net";
+    }>>;
+    grantedAt: z.ZodUnion<readonly [z.ZodString, z.ZodNull]>;
+}, z.core.$strict>;
+/** GET /api/apps/permissions response. */
+export declare const ListAppPermissionsResponseSchema: z.ZodArray<z.ZodObject<{
+    slug: z.ZodString;
+    trust: z.ZodEnum<{
+        external: "external";
+        "first-party": "first-party";
+    }>;
+    isolation: z.ZodEnum<{
+        none: "none";
+        worker: "worker";
+    }>;
+    requestedPermissions: z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodNull]>;
+    recognisedNamespaces: z.ZodArray<z.ZodEnum<{
+        fs: "fs";
+        net: "net";
+    }>>;
+    grantedNamespaces: z.ZodArray<z.ZodEnum<{
+        fs: "fs";
+        net: "net";
+    }>>;
+    grantedAt: z.ZodUnion<readonly [z.ZodString, z.ZodNull]>;
+}, z.core.$strict>>;
+/** GET /api/apps/permissions/:slug response (404 → no body). */
+export declare const GetAppPermissionsResponseSchema: z.ZodObject<{
+    slug: z.ZodString;
+    trust: z.ZodEnum<{
+        external: "external";
+        "first-party": "first-party";
+    }>;
+    isolation: z.ZodEnum<{
+        none: "none";
+        worker: "worker";
+    }>;
+    requestedPermissions: z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodNull]>;
+    recognisedNamespaces: z.ZodArray<z.ZodEnum<{
+        fs: "fs";
+        net: "net";
+    }>>;
+    grantedNamespaces: z.ZodArray<z.ZodEnum<{
+        fs: "fs";
+        net: "net";
+    }>>;
+    grantedAt: z.ZodUnion<readonly [z.ZodString, z.ZodNull]>;
+}, z.core.$strict>;
+/**
+ * PUT /api/apps/permissions/:slug request body.
+ *
+ * `namespaces` is validated as a string array at the schema layer;
+ * the further check that each namespace is recognised AND was
+ * declared in the app's manifest happens server-side in
+ * `setGrantedNamespaces` (which has access to the registry entry).
+ * Doing the recognised-namespace check here too would force every namespace
+ * addition to ship a zod-schema bump *and* a parser bump in lockstep, which
+ * is friction we don't need.
+ */
+export declare const PutAppPermissionsRequestSchema: z.ZodObject<{
+    namespaces: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+/** PUT /api/apps/permissions/:slug response (200 success body). */
+export declare const PutAppPermissionsResponseSchema: z.ZodObject<{
+    slug: z.ZodString;
+    trust: z.ZodEnum<{
+        external: "external";
+        "first-party": "first-party";
+    }>;
+    isolation: z.ZodEnum<{
+        none: "none";
+        worker: "worker";
+    }>;
+    requestedPermissions: z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodNull]>;
+    recognisedNamespaces: z.ZodArray<z.ZodEnum<{
+        fs: "fs";
+        net: "net";
+    }>>;
+    grantedNamespaces: z.ZodArray<z.ZodEnum<{
+        fs: "fs";
+        net: "net";
+    }>>;
+    grantedAt: z.ZodUnion<readonly [z.ZodString, z.ZodNull]>;
+}, z.core.$strict>;
+export type AppPermissionsViewWire = z.infer<typeof AppPermissionsViewSchema>;
+export type ListAppPermissionsResponse = z.infer<typeof ListAppPermissionsResponseSchema>;
+export type GetAppPermissionsResponse = z.infer<typeof GetAppPermissionsResponseSchema>;
+export type PutAppPermissionsRequest = z.infer<typeof PutAppPermissionsRequestSchema>;
+export type PutAppPermissionsResponse = z.infer<typeof PutAppPermissionsResponseSchema>;
+/**
+ * Tagged constants the client can send to surface where a malformed
+ * request originated. The agent's HTTP error path includes the path
+ * in the JSON error body so client-side surfaces can localise.
+ */
+export declare const APP_PERMISSIONS_ROUTE_PATHS: {
+    readonly list: "/api/apps/permissions";
+    readonly get: (slug: string) => string;
+    readonly put: (slug: string) => string;
+};
+//# sourceMappingURL=app-permissions-routes.d.ts.map

package/contracts/app-permissions-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-permissions-routes.d.ts","sourceRoot":"","sources":["../../src/contracts/app-permissions-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,CAAC,MAAM,KAAK,CAAC;AAQpB;;;;GAIG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;kBAkB1B,CAAC;AAEZ,0CAA0C;AAC1C,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;mBAE5C,CAAC;AAEF,gEAAgE;AAChE,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;kBAA2B,CAAC;AAExE;;;;;;;;;;GAUG;AACH,eAAO,MAAM,8BAA8B;;kBAIhC,CAAC;AAEZ,mEAAmE;AACnE,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;kBAA2B,CAAC;AAGxE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC9E,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,gCAAgC,CACxC,CAAC;AACF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,+BAA+B,CACvC,CAAC;AACF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,8BAA8B,CACtC,CAAC;AACF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,+BAA+B,CACvC,CAAC;AAaF;;;;GAIG;AACH,eAAO,MAAM,2BAA2B;;yBAE1B,MAAM;yBACN,MAAM;CACV,CAAC"}

package/contracts/app-permissions-routes.js

@@ -0,0 +1,96 @@
+/**
+ * Zod schemas for the App Permissions HTTP routes.
+ *
+ * **Pilot for the typed-routes initiative.** Replaces hand-rolled
+ * `if (typeof body.x !== 'string')` validation in
+ * `packages/agent/src/api/apps-routes.ts` and the parallel client-side
+ * type re-declarations in `packages/ui/src/api/client-skills.ts` with a
+ * single source of truth: zod schemas defined here, parsed on the
+ * server, and used to derive the client's request/response types.
+ *
+ * The pattern that lands here is the template for migrating other
+ * routes off the manual-validation pattern — keep schemas alongside
+ * their domain types, expose `.parse()` for the server, expose
+ * inferred TS types via `z.infer<typeof schema>` for the client.
+ *
+ * Routes covered (from PR #7554):
+ *   GET  /api/apps/permissions
+ *   GET  /api/apps/permissions/:slug
+ *   PUT  /api/apps/permissions/:slug   { namespaces: string[] }
+ *
+ * The `AppPermissionsView` shape itself is hand-typed in
+ * `./app-permissions.ts` (slice 1) and re-derived as a zod schema here.
+ * The two are kept in sync by a compile-time `satisfies` check at the
+ * bottom of this module — if either drifts, typecheck fails.
+ */
+import z from "zod";
+const AppTrustSchema = z.enum(["first-party", "external"]);
+const AppIsolationSchema = z.enum(["none", "worker"]);
+const RecognisedPermissionNamespaceSchema = z.enum(["fs", "net"]);
+/**
+ * Wire shape for `AppPermissionsView`. Mirrors the hand-typed
+ * interface in `./app-permissions.ts`. Drift between the two is
+ * caught at the bottom of this module via a `satisfies` cross-check.
+ */
+export const AppPermissionsViewSchema = z
+    .object({
+    slug: z.string().min(1),
+    trust: AppTrustSchema,
+    isolation: AppIsolationSchema,
+    // `z.union([..., z.null()])` is used in place of `.nullable()`
+    // because zod 4's `.nullable()` infers as `T | undefined` rather
+    // than `T | null` in strict-object mode, which mismatches the
+    // hand-typed `AppPermissionsView.requestedPermissions: ... | null`
+    // / `grantedAt: string | null` interface.
+    requestedPermissions: z.union([
+        z.record(z.string(), z.unknown()),
+        z.null(),
+    ]),
+    recognisedNamespaces: z.array(RecognisedPermissionNamespaceSchema),
+    grantedNamespaces: z.array(RecognisedPermissionNamespaceSchema),
+    grantedAt: z.union([z.string(), z.null()]),
+})
+    .strict();
+/** GET /api/apps/permissions response. */
+export const ListAppPermissionsResponseSchema = z.array(AppPermissionsViewSchema);
+/** GET /api/apps/permissions/:slug response (404 → no body). */
+export const GetAppPermissionsResponseSchema = AppPermissionsViewSchema;
+/**
+ * PUT /api/apps/permissions/:slug request body.
+ *
+ * `namespaces` is validated as a string array at the schema layer;
+ * the further check that each namespace is recognised AND was
+ * declared in the app's manifest happens server-side in
+ * `setGrantedNamespaces` (which has access to the registry entry).
+ * Doing the recognised-namespace check here too would force every namespace
+ * addition to ship a zod-schema bump *and* a parser bump in lockstep, which
+ * is friction we don't need.
+ */
+export const PutAppPermissionsRequestSchema = z
+    .object({
+    namespaces: z.array(z.string()),
+})
+    .strict();
+/** PUT /api/apps/permissions/:slug response (200 success body). */
+export const PutAppPermissionsResponseSchema = AppPermissionsViewSchema;
+// NOTE on drift between the hand-typed `AppPermissionsView` interface
+// (in `./app-permissions.ts`) and `AppPermissionsViewWire` (inferred
+// from the zod schema above): zod 4's nullable + strict-object
+// inference produces `T | undefined` for nullable fields rather than
+// `T | null`, which makes a strict bidirectional Equals-style check
+// fail despite the runtime shapes being identical. The schema tests
+// in `./app-permissions-routes.test.ts` exercise the actual shape on
+// real inputs; that is the load-bearing check. Treat the two
+// declarations as a co-located pair — if you change one, change the
+// other in the same commit and rerun the schema tests.
+/**
+ * Tagged constants the client can send to surface where a malformed
+ * request originated. The agent's HTTP error path includes the path
+ * in the JSON error body so client-side surfaces can localise.
+ */
+export const APP_PERMISSIONS_ROUTE_PATHS = {
+    list: "/api/apps/permissions",
+    get: (slug) => `/api/apps/permissions/${encodeURIComponent(slug)}`,
+    put: (slug) => `/api/apps/permissions/${encodeURIComponent(slug)}`,
+};
+//# sourceMappingURL=app-permissions-routes.js.map

package/contracts/app-permissions-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-permissions-routes.js","sourceRoot":"","sources":["../../src/contracts/app-permissions-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,CAAC,MAAM,KAAK,CAAC;AAEpB,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;AAE3D,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEtD,MAAM,mCAAmC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;AAElE;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,KAAK,EAAE,cAAc;IACrB,SAAS,EAAE,kBAAkB;IAC7B,+DAA+D;IAC/D,iEAAiE;IACjE,8DAA8D;IAC9D,mEAAmE;IACnE,0CAA0C;IAC1C,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC;QAC5B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACjC,CAAC,CAAC,IAAI,EAAE;KACT,CAAC;IACF,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,mCAAmC,CAAC;IAClE,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,mCAAmC,CAAC;IAC/D,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,0CAA0C;AAC1C,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CACrD,wBAAwB,CACzB,CAAC;AAEF,gEAAgE;AAChE,MAAM,CAAC,MAAM,+BAA+B,GAAG,wBAAwB,CAAC;AAExE;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC;KAC5C,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAChC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,mEAAmE;AACnE,MAAM,CAAC,MAAM,+BAA+B,GAAG,wBAAwB,CAAC;AAiBxE,sEAAsE;AACtE,qEAAqE;AACrE,+DAA+D;AAC/D,qEAAqE;AACrE,oEAAoE;AACpE,oEAAoE;AACpE,qEAAqE;AACrE,6DAA6D;AAC7D,oEAAoE;AACpE,uDAAuD;AAEvD;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,IAAI,EAAE,uBAAuB;IAC7B,GAAG,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,yBAAyB,kBAAkB,CAAC,IAAI,CAAC,EAAE;IAC1E,GAAG,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,yBAAyB,kBAAkB,CAAC,IAAI,CAAC,EAAE;CAClE,CAAC"}

package/contracts/app-permissions.d.ts

@@ -0,0 +1,122 @@
+/**
+ * Parser and types for the `elizaos.app.permissions` manifest block declared
+ * by third-party apps in their `package.json`. Spec lives at
+ * `eliza/packages/docs/architecture/app-permissions-manifest.md` and is the
+ * source of truth — this module implements the validation rules described
+ * there. The manifest is advisory in this slice (no enforcement).
+ *
+ * Forward compatibility: only the recognised namespaces (`fs`, `net`) are
+ * validated and surfaced as typed slices. Unrecognised keys inside the
+ * `permissions` object are preserved verbatim under `raw` so a later
+ * Eliza version that recognises them can read them out of the persisted
+ * registry without re-parsing the source manifest.
+ *
+ * NOTE: this module is distinct from `./permissions.ts`, which describes
+ * OS-level system permissions (camera, microphone, accessibility). App
+ * permissions are an in-runtime sandbox concept declared by an app's
+ * package.json; system permissions are an OS concept granted to the
+ * Eliza binary itself.
+ */
+export declare const MAX_PATTERN_LENGTH = 256;
+/**
+ * Namespaces this Eliza version recognises in `elizaos.app.permissions`.
+ * The parser surfaces only these as typed slices; other namespace keys
+ * declared by an app are preserved verbatim under `raw` for forward
+ * compatibility but cannot be granted (a later Eliza version that
+ * recognises them adds them here).
+ *
+ * Source of truth for the granted-permission store's namespace
+ * intersection — see
+ * `eliza/packages/docs/architecture/app-permissions-granted-store.md`.
+ */
+export declare const RECOGNISED_PERMISSION_NAMESPACES: readonly ["fs", "net"];
+export type RecognisedPermissionNamespace = (typeof RECOGNISED_PERMISSION_NAMESPACES)[number];
+/**
+ * Returns the recognised namespaces actually declared by a parsed
+ * manifest. This is what a consent UI should render as toggleable rows.
+ */
+export declare function recognisedNamespacesFor(manifest: AppPermissionsManifest): RecognisedPermissionNamespace[];
+/**
+ * Returns the recognised namespaces actually declared by a raw
+ * `requestedPermissions` object as persisted on `AppRegistryEntry`.
+ * Equivalent to `recognisedNamespacesFor(parseAppPermissions(raw))`
+ * when the raw shape is well-formed, but tolerant of malformed
+ * persisted state (returns `[]` rather than throwing).
+ */
+export declare function recognisedNamespacesForRaw(raw: Record<string, unknown> | null | undefined): RecognisedPermissionNamespace[];
+export interface FsPermissions {
+    read?: string[];
+    write?: string[];
+}
+export interface NetPermissions {
+    outbound?: string[];
+}
+/**
+ * Source classification computed by the loader at register time. NOT
+ * declared by the app — the loader assigns this based on where the
+ * directory came from (in-tree first-party dir vs. external load).
+ */
+export type AppTrust = "first-party" | "external";
+/**
+ * Execution-isolation mode an app can request in `elizaos.app.isolation`.
+ *
+ * - `"none"` (default): app runs in-process with the agent runtime, with
+ *   full access. Fast path; intended for first-party and trusted apps.
+ * - `"worker"`: app runs in an isolated Bun worker. FS and network calls
+ *   are gated against the app's declared + granted permissions at the
+ *   bridge boundary. Phase 2 enforcement.
+ *
+ * Apps can request *more* isolation than the loader's policy ("worker"
+ * is always honoured if declared) but never *less* — Phase 3 may force
+ * `"worker"` for `trust: "external"` apps regardless of what they
+ * declared.
+ */
+export type AppIsolation = "none" | "worker";
+/**
+ * Parses a raw `isolation` field from `elizaos.app.isolation` into the
+ * typed enum, defaulting to `"none"` when absent. Unknown values
+ * (including modes a later Eliza version might add) are
+ * coerced to `"none"` to keep the parser forward-compatible.
+ */
+export declare function parseAppIsolation(value: unknown): AppIsolation;
+/**
+ * Merged view of declared + recognised + granted permission state for one
+ * app. Returned by the registry service and the
+ * `GET/PUT /api/apps/permissions/:slug` HTTP routes.
+ */
+export interface AppPermissionsView {
+    slug: string;
+    trust: AppTrust;
+    /** Effective execution isolation mode after loader policy is applied. */
+    isolation: AppIsolation;
+    /** Raw `elizaos.app.permissions` block from the app's package.json. */
+    requestedPermissions: Record<string, unknown> | null;
+    /** Intersection of declared namespaces with what this Eliza recognises. */
+    recognisedNamespaces: RecognisedPermissionNamespace[];
+    /** Subset of `recognisedNamespaces` the user / loader has granted. */
+    grantedNamespaces: RecognisedPermissionNamespace[];
+    /** ISO timestamp of the first grant, or null if never granted. */
+    grantedAt: string | null;
+}
+export interface AppPermissionsManifest {
+    /**
+     * Raw declared object as it appears under `elizaos.app.permissions`,
+     * or `null` when no `permissions` block was declared. This is what
+     * persists into `app-registry.json` and the audit log so later
+     * Eliza versions can read namespaces this version did not validate.
+     */
+    raw: Record<string, unknown> | null;
+    fs?: FsPermissions;
+    net?: NetPermissions;
+}
+export interface ParseAppPermissionsError {
+    ok: false;
+    reason: string;
+    path: string;
+}
+export type ParseAppPermissionsResult = {
+    ok: true;
+    manifest: AppPermissionsManifest;
+} | ParseAppPermissionsError;
+export declare function parseAppPermissions(value: unknown): ParseAppPermissionsResult;
+//# sourceMappingURL=app-permissions.d.ts.map

package/contracts/app-permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-permissions.d.ts","sourceRoot":"","sources":["../../src/contracts/app-permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAEtC;;;;;;;;;;GAUG;AACH,eAAO,MAAM,gCAAgC,wBAAyB,CAAC;AACvE,MAAM,MAAM,6BAA6B,GACvC,CAAC,OAAO,gCAAgC,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpD;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,sBAAsB,GAC/B,6BAA6B,EAAE,CAKjC;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,GAC9C,6BAA6B,EAAE,CAKjC;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,MAAM,QAAQ,GAAG,aAAa,GAAG,UAAU,CAAC;AAElD;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE7C;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,CAG9D;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,QAAQ,CAAC;IAChB,yEAAyE;IACzE,SAAS,EAAE,YAAY,CAAC;IACxB,uEAAuE;IACvE,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACrD,2EAA2E;IAC3E,oBAAoB,EAAE,6BAA6B,EAAE,CAAC;IACtD,sEAAsE;IACtE,iBAAiB,EAAE,6BAA6B,EAAE,CAAC;IACnD,kEAAkE;IAClE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC;;;;;OAKG;IACH,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACpC,EAAE,CAAC,EAAE,aAAa,CAAC;IACnB,GAAG,CAAC,EAAE,cAAc,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,yBAAyB,GACjC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,sBAAsB,CAAA;CAAE,GAC9C,wBAAwB,CAAC;AAM7B,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,yBAAyB,CA2B7E"}