@elizaos/shared 2.0.3-beta.2 → 2.0.3-beta.4

package/loopback-trust.js

@@ -0,0 +1,241 @@
+/**
+ * Same-machine ("loopback") request trust evaluation.
+ *
+ * This is a SECURITY BOUNDARY: it decides whether an unauthenticated HTTP
+ * request is allowed to act as the local dashboard owner. Previously the exact
+ * same logic was triplicated across `@elizaos/app-core` (`compat-route-shared`)
+ * and `@elizaos/agent` (`server-helpers-auth`), with subtly divergent env-policy
+ * gates and a non-equivalent `isLoopbackBindHost`. The divergence was a parity
+ * hazard, so the logic is unified here and parameterised so each consumer keeps
+ * its EXACT prior trust decisions.
+ *
+ * The two consumers differ ONLY in their policy gates, expressed via
+ * {@link LoopbackTrustOptions}:
+ *  - app-core: requireLocalAuthEnv + devAuthBypassEnv, cloudCheck "env"
+ *    (`ELIZA_CLOUD_PROVISIONED === "1"`).
+ *  - agent:    requireLocalAuthEnv (no dev bypass), cloudCheck "container"
+ *    (`isCloudProvisionedContainer()` — flag AND a provisioning token).
+ *
+ * The host/origin classification (`isLoopbackBindHost`) is the canonical strict
+ * implementation from `runtime-env.ts` for BOTH consumers. For app-core this is
+ * byte-identical (it already imported the shared helper). For the agent this is
+ * a strict tightening in the safe direction: the agent's hand-rolled copy
+ * accepted any `127.*`-prefixed host string (e.g. the DNS-rebinding host
+ * `127.0.0.1.evil.com`), which the strict parser correctly rejects. The change
+ * can only ever turn a previously-trusted request into an untrusted one, never
+ * the reverse.
+ */
+import { isIP } from "node:net";
+import { isCloudProvisionedContainer } from "./elizacloud/cloud-provisioning.js";
+import { isLoopbackBindHost } from "./runtime-env.js";
+function firstHeaderValue(value) {
+    if (typeof value === "string")
+        return value;
+    if (Array.isArray(value) && typeof value[0] === "string")
+        return value[0];
+    return null;
+}
+const CLIENT_IP_PROXY_HEADERS = new Set([
+    "forwarded",
+    "forwarded-for",
+    "x-forwarded",
+    "x-forwarded-for",
+    "x-original-forwarded-for",
+    "x-real-ip",
+    "x-client-ip",
+    "x-forwarded-client-ip",
+    "x-cluster-client-ip",
+    "cf-connecting-ip",
+    "true-client-ip",
+    "fastly-client-ip",
+    "x-appengine-user-ip",
+    "x-azure-clientip",
+]);
+function headerValues(value) {
+    if (typeof value === "string")
+        return [value];
+    if (Array.isArray(value)) {
+        return value.filter((item) => typeof item === "string");
+    }
+    return [];
+}
+function isClientIpProxyHeaderName(name) {
+    const normalized = name.toLowerCase();
+    return (CLIENT_IP_PROXY_HEADERS.has(normalized) ||
+        normalized.endsWith("-client-ip") ||
+        normalized.endsWith("-connecting-ip") ||
+        normalized.endsWith("-real-ip"));
+}
+function extractForwardedForCandidates(raw) {
+    const candidates = [];
+    const pattern = /(?:^|[;,])\s*for=(?:"([^"]*)"|([^;,]*))/gi;
+    for (const match of raw.matchAll(pattern)) {
+        candidates.push(match[1] ?? match[2] ?? "");
+    }
+    return candidates;
+}
+function extractProxyClientAddressCandidates(headerName, raw) {
+    if (headerName === "forwarded") {
+        return extractForwardedForCandidates(raw);
+    }
+    const forwardedCandidates = raw.toLowerCase().includes("for=")
+        ? extractForwardedForCandidates(raw)
+        : [];
+    if (forwardedCandidates.length > 0)
+        return forwardedCandidates;
+    return raw.split(",");
+}
+function stripMatchingQuotes(value) {
+    const trimmed = value.trim();
+    if ((trimmed.startsWith('"') && trimmed.endsWith('"')) ||
+        (trimmed.startsWith("'") && trimmed.endsWith("'"))) {
+        return trimmed.slice(1, -1);
+    }
+    return trimmed;
+}
+function isNeutralProxyClientAddress(raw) {
+    const normalized = stripMatchingQuotes(raw).trim().toLowerCase();
+    return (!normalized ||
+        normalized === "unknown" ||
+        normalized === "null" ||
+        normalized.startsWith("_"));
+}
+function normalizeProxyClientIp(raw) {
+    let normalized = stripMatchingQuotes(raw).trim();
+    if (!normalized)
+        return null;
+    if (normalized.startsWith("[")) {
+        const close = normalized.indexOf("]");
+        if (close > 0) {
+            normalized = normalized.slice(1, close);
+        }
+    }
+    else {
+        const ipv4HostPort = /^(\d{1,3}(?:\.\d{1,3}){3})(?::\d+)$/.exec(normalized);
+        if (ipv4HostPort?.[1]) {
+            normalized = ipv4HostPort[1];
+        }
+    }
+    const zoneIndex = normalized.indexOf("%");
+    if (zoneIndex >= 0) {
+        normalized = normalized.slice(0, zoneIndex);
+    }
+    normalized = normalized.trim().toLowerCase();
+    return isIP(normalized) ? normalized : null;
+}
+function isLoopbackProxyClientIp(ip) {
+    const normalized = ip.trim().toLowerCase();
+    return (normalized === "::1" ||
+        normalized === "0:0:0:0:0:0:0:1" ||
+        normalized.startsWith("127.") ||
+        normalized.startsWith("::ffff:127.") ||
+        normalized.startsWith("::ffff:0:127."));
+}
+/**
+ * True when any proxy-style client-IP header carries a non-loopback (or
+ * unparseable) address. A request that reaches a same-machine listener but
+ * advertises a remote client behind a proxy must NOT be granted local trust.
+ */
+export function proxyClientHeaderBlocksLocalTrust(headers) {
+    for (const [rawName, rawValue] of Object.entries(headers)) {
+        const headerName = rawName.toLowerCase();
+        if (!isClientIpProxyHeaderName(headerName))
+            continue;
+        for (const value of headerValues(rawValue)) {
+            for (const candidate of extractProxyClientAddressCandidates(headerName, value)) {
+                if (isNeutralProxyClientAddress(candidate))
+                    continue;
+                const ip = normalizeProxyClientIp(candidate);
+                if (!ip || !isLoopbackProxyClientIp(ip))
+                    return true;
+            }
+        }
+    }
+    return false;
+}
+/**
+ * True when the TCP peer address is a loopback address. Note this is stricter
+ * than {@link isLoopbackBindHost}: it matches only fully-normalised loopback
+ * addresses (no host:port or URL forms), since `socket.remoteAddress` is always
+ * a bare IP.
+ */
+export function isLoopbackRemoteAddress(remoteAddress) {
+    if (!remoteAddress)
+        return false;
+    const normalized = remoteAddress.trim().toLowerCase();
+    return (normalized === "127.0.0.1" ||
+        normalized === "::1" ||
+        normalized === "0:0:0:0:0:0:0:1" ||
+        normalized === "::ffff:127.0.0.1" ||
+        normalized === "::ffff:0:127.0.0.1");
+}
+const LOCAL_APP_PROTOCOLS = new Set([
+    "file:",
+    "app:",
+    "tauri:",
+    "capacitor:",
+    "capacitor-electron:",
+    "electrobun:",
+]);
+function isTrustedLocalOrigin(raw) {
+    const trimmed = raw.trim();
+    if (!trimmed || trimmed === "null")
+        return true;
+    try {
+        const parsed = new URL(trimmed);
+        if (LOCAL_APP_PROTOCOLS.has(parsed.protocol)) {
+            return true;
+        }
+        return isLoopbackBindHost(parsed.hostname);
+    }
+    catch {
+        return false;
+    }
+}
+function cloudBlocksLocalTrust(cloudCheck) {
+    if (cloudCheck === "container")
+        return isCloudProvisionedContainer();
+    return process.env.ELIZA_CLOUD_PROVISIONED === "1";
+}
+function localAuthRequired(options) {
+    if (!options.requireLocalAuthEnv)
+        return false;
+    if (options.devAuthBypassEnv &&
+        process.env.ELIZA_DEV_AUTH_BYPASS === "1" &&
+        (process.env.NODE_ENV === "development" || process.env.NODE_ENV === "dev")) {
+        return false;
+    }
+    return process.env.ELIZA_REQUIRE_LOCAL_AUTH === "1";
+}
+/**
+ * Same-machine dashboard access. Intentionally stricter than a bare
+ * `remoteAddress` check: the browser must also target a loopback Host and must
+ * not present cross-site browser metadata or proxy client-IP headers.
+ *
+ * Each consumer supplies {@link LoopbackTrustOptions} matching its historical
+ * policy gates; the host/origin/proxy classification is identical for all.
+ */
+export function isTrustedLocalRequest(req, options) {
+    if (localAuthRequired(options))
+        return false;
+    if (cloudBlocksLocalTrust(options.cloudCheck))
+        return false;
+    if (!isLoopbackRemoteAddress(req.socket.remoteAddress))
+        return false;
+    if (proxyClientHeaderBlocksLocalTrust(req.headers))
+        return false;
+    const host = firstHeaderValue(req.headers.host);
+    if (host && !isLoopbackBindHost(host))
+        return false;
+    const secFetchSite = firstHeaderValue(req.headers["sec-fetch-site"])?.toLowerCase();
+    if (secFetchSite === "cross-site")
+        return false;
+    const origin = firstHeaderValue(req.headers.origin);
+    if (origin && !isTrustedLocalOrigin(origin))
+        return false;
+    const referer = firstHeaderValue(req.headers.referer);
+    if (!origin && referer && !isTrustedLocalOrigin(referer))
+        return false;
+    return true;
+}
+//# sourceMappingURL=loopback-trust.js.map

package/loopback-trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loopback-trust.js","sourceRoot":"","sources":["../src/loopback-trust.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAyBtD,SAAS,gBAAgB,CAAC,KAAoC;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,WAAW;IACX,eAAe;IACf,aAAa;IACb,iBAAiB;IACjB,0BAA0B;IAC1B,WAAW;IACX,aAAa;IACb,uBAAuB;IACvB,qBAAqB;IACrB,kBAAkB;IAClB,gBAAgB;IAChB,kBAAkB;IAClB,qBAAqB;IACrB,kBAAkB;CACnB,CAAC,CAAC;AAEH,SAAS,YAAY,CAAC,KAAoC;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAY;IAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACtC,OAAO,CACL,uBAAuB,CAAC,GAAG,CAAC,UAAU,CAAC;QACvC,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;QACjC,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QACrC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAChC,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CAAC,GAAW;IAChD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,2CAA2C,CAAC;IAC5D,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,mCAAmC,CAC1C,UAAkB,EAClB,GAAW;IAEX,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;QAC/B,OAAO,6BAA6B,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,mBAAmB,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC5D,CAAC,CAAC,6BAA6B,CAAC,GAAG,CAAC;QACpC,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,mBAAmB,CAAC;IAE/D,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IACE,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAClD,CAAC;QACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,2BAA2B,CAAC,GAAW;IAC9C,MAAM,UAAU,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjE,OAAO,CACL,CAAC,UAAU;QACX,UAAU,KAAK,SAAS;QACxB,UAAU,KAAK,MAAM;QACrB,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAW;IACzC,IAAI,UAAU,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAE7B,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,YAAY,GAAG,qCAAqC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5E,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtB,UAAU,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACnB,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED,UAAU,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9C,CAAC;AAED,SAAS,uBAAuB,CAAC,EAAU;IACzC,MAAM,UAAU,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,OAAO,CACL,UAAU,KAAK,KAAK;QACpB,UAAU,KAAK,iBAAiB;QAChC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC;QAC7B,UAAU,CAAC,UAAU,CAAC,aAAa,CAAC;QACpC,UAAU,CAAC,UAAU,CAAC,eAAe,CAAC,CACvC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iCAAiC,CAC/C,OAAiC;IAEjC,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACzC,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC;YAAE,SAAS;QAErD,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3C,KAAK,MAAM,SAAS,IAAI,mCAAmC,CACzD,UAAU,EACV,KAAK,CACN,EAAE,CAAC;gBACF,IAAI,2BAA2B,CAAC,SAAS,CAAC;oBAAE,SAAS;gBACrD,MAAM,EAAE,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;gBAC7C,IAAI,CAAC,EAAE,IAAI,CAAC,uBAAuB,CAAC,EAAE,CAAC;oBAAE,OAAO,IAAI,CAAC;YACvD,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,aAAwC;IAExC,IAAI,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtD,OAAO,CACL,UAAU,KAAK,WAAW;QAC1B,UAAU,KAAK,KAAK;QACpB,UAAU,KAAK,iBAAiB;QAChC,UAAU,KAAK,kBAAkB;QACjC,UAAU,KAAK,oBAAoB,CACpC,CAAC;AACJ,CAAC;AAED,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,OAAO;IACP,MAAM;IACN,QAAQ;IACR,YAAY;IACZ,qBAAqB;IACrB,aAAa;CACd,CAAC,CAAC;AAEH,SAAS,oBAAoB,CAAC,GAAW;IACvC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,UAA+B;IAC5D,IAAI,UAAU,KAAK,WAAW;QAAE,OAAO,2BAA2B,EAAE,CAAC;IACrE,OAAO,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,GAAG,CAAC;AACrD,CAAC;AAED,SAAS,iBAAiB,CAAC,OAA6B;IACtD,IAAI,CAAC,OAAO,CAAC,mBAAmB;QAAE,OAAO,KAAK,CAAC;IAC/C,IACE,OAAO,CAAC,gBAAgB;QACxB,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,GAAG;QACzC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC,EAC1E,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,GAAG,CAAC;AACtD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAqD,EACrD,OAA6B;IAE7B,IAAI,iBAAiB,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,qBAAqB,CAAC,OAAO,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5D,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;QAAE,OAAO,KAAK,CAAC;IACrE,IAAI,iCAAiC,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAEjE,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,IAAI,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAEpD,MAAM,YAAY,GAAG,gBAAgB,CACnC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAC9B,EAAE,WAAW,EAAE,CAAC;IACjB,IAAI,YAAY,KAAK,YAAY;QAAE,OAAO,KAAK,CAAC;IAEhD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAE1D,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAEvE,OAAO,IAAI,CAAC;AACd,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elizaos/shared",
-  "version": "2.0.3-beta.2",
+  "version": "2.0.3-beta.4",
   "description": "Shared code for Eliza agent and app-core.",
   "type": "module",
   "sideEffects": false,
@@ -98,6 +98,16 @@
       "import": "./steward-session-client/index.js",
       "default": "./steward-session-client/index.js"
     },
+    "./events": {
+      "types": "./events/index.d.ts",
+      "eliza-source": {
+        "types": "./events/index.d.ts",
+        "import": "./events/index.js",
+        "default": "./events/index.js"
+      },
+      "import": "./events/index.js",
+      "default": "./events/index.js"
+    },
     "./utils/permission-deep-links": {
       "types": "./utils/permission-deep-links.d.ts",
       "eliza-source": {
@@ -108,6 +118,46 @@
       "import": "./utils/permission-deep-links.js",
       "default": "./utils/permission-deep-links.js"
     },
+    "./utils/format": {
+      "types": "./utils/format.d.ts",
+      "eliza-source": {
+        "types": "./utils/format.d.ts",
+        "import": "./utils/format.js",
+        "default": "./utils/format.js"
+      },
+      "import": "./utils/format.js",
+      "default": "./utils/format.js"
+    },
+    "./utils/number-parsing": {
+      "types": "./utils/number-parsing.d.ts",
+      "eliza-source": {
+        "types": "./utils/number-parsing.d.ts",
+        "import": "./utils/number-parsing.js",
+        "default": "./utils/number-parsing.js"
+      },
+      "import": "./utils/number-parsing.js",
+      "default": "./utils/number-parsing.js"
+    },
+    "./config/config-catalog": {
+      "types": "./config/config-catalog.d.ts",
+      "eliza-source": {
+        "types": "./config/config-catalog.d.ts",
+        "import": "./config/config-catalog.js",
+        "default": "./config/config-catalog.js"
+      },
+      "import": "./config/config-catalog.js",
+      "default": "./config/config-catalog.js"
+    },
+    "./contracts/apps": {
+      "types": "./contracts/apps.d.ts",
+      "eliza-source": {
+        "types": "./contracts/apps.d.ts",
+        "import": "./contracts/apps.js",
+        "default": "./contracts/apps.js"
+      },
+      "import": "./contracts/apps.js",
+      "default": "./contracts/apps.js"
+    },
     "./voice-wer": {
       "types": "./voice-wer.d.ts",
       "eliza-source": {
@@ -118,6 +168,36 @@
       "import": "./voice-wer.js",
       "default": "./voice-wer.js"
     },
+    "./voice-eot": {
+      "types": "./voice-eot.d.ts",
+      "eliza-source": {
+        "types": "./voice-eot.d.ts",
+        "import": "./voice-eot.js",
+        "default": "./voice-eot.js"
+      },
+      "import": "./voice-eot.js",
+      "default": "./voice-eot.js"
+    },
+    "./voice/respond-gate": {
+      "types": "./voice/respond-gate.d.ts",
+      "eliza-source": {
+        "types": "./voice/respond-gate.d.ts",
+        "import": "./voice/respond-gate.js",
+        "default": "./voice/respond-gate.js"
+      },
+      "import": "./voice/respond-gate.js",
+      "default": "./voice/respond-gate.js"
+    },
+    "./voice/owner-inference": {
+      "types": "./voice/owner-inference.d.ts",
+      "eliza-source": {
+        "types": "./voice/owner-inference.d.ts",
+        "import": "./voice/owner-inference.js",
+        "default": "./voice/owner-inference.js"
+      },
+      "import": "./voice/owner-inference.js",
+      "default": "./voice/owner-inference.js"
+    },
     "./transcripts": {
       "types": "./transcripts.d.ts",
       "eliza-source": {
@@ -147,8 +227,9 @@
     "directory": "dist"
   },
   "dependencies": {
-    "@elizaos/contracts": "2.0.3-beta.2",
-    "@elizaos/core": "2.0.3-beta.2",
+    "@elizaos/contracts": "2.0.3-beta.4",
+    "@elizaos/core": "2.0.3-beta.4",
+    "@elizaos/registry": "2.0.3-beta.4",
     "chalk": "^5.3.0",
     "drizzle-orm": "0.45.2",
     "phonemizer": "^1.2.1",
@@ -160,5 +241,5 @@
     "figlet": "^1.11.0"
   },
   "types": "./index.d.ts",
-  "gitHead": "82fe0f44215954c2417328203f5bd6510985c1fc"
+  "gitHead": "f76f55793a0fb8d6b869dd8ddce03970de061e34"
 }

package/settings-debug.d.ts

@@ -1,20 +1,9 @@
 /**
  * Opt-in verbose logging for settings load / change / save flows.
- * Enable with ELIZA_SETTINGS_DEBUG=1 (and Vite: same env at build time, or VITE_ELIZA_SETTINGS_DEBUG=1).
+ *
+ * The canonical implementation lives in `@elizaos/core`. This module re-exports
+ * it so existing `@elizaos/shared` (and `@elizaos/shared/settings-debug`)
+ * importers keep resolving without maintaining a duplicate copy.
  */
-/**
- * True when settings debug is enabled (Node: process.env; browser: import.meta.env from Vite define).
- */
-export declare function isElizaSettingsDebugEnabled(options?: {
-    /** Node / Bun process.env */
-    env?: Record<string, string | undefined> | null;
-    /** Vite `import.meta.env` (pass only in browser bundles). */
-    importMetaEnv?: Record<string, unknown> | null;
-}): boolean;
-/**
- * Deep-clone-ish snapshot safe to log (secrets masked). Not for security boundaries — debug only.
- */
-export declare function sanitizeForSettingsDebug(value: unknown, depth?: number, seen?: WeakSet<object>): unknown;
-/** Compact cloud slice for logs (no raw secrets). */
-export declare function settingsDebugCloudSummary(cloud: Record<string, unknown> | null | undefined): Record<string, unknown>;
+export { isElizaSettingsDebugEnabled, sanitizeForSettingsDebug, settingsDebugCloudSummary, } from "@elizaos/core";
 //# sourceMappingURL=settings-debug.d.ts.map

package/settings-debug.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"settings-debug.d.ts","sourceRoot":"","sources":["../src/settings-debug.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAYH;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,CAAC,EAAE;IACpD,6BAA6B;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC;IAChD,6DAA6D;IAC7D,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAChD,GAAG,OAAO,CAkBV;AAuDD;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,OAAO,EACd,KAAK,SAAI,EACT,IAAI,GAAE,OAAO,CAAC,MAAM,CAAiB,GACpC,OAAO,CAiBT;AAED,qDAAqD;AACrD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,GAChD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAWzB"}
+{"version":3,"file":"settings-debug.d.ts","sourceRoot":"","sources":["../src/settings-debug.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,eAAe,CAAC"}

package/settings-debug.js

@@ -1,122 +1,9 @@
 /**
  * Opt-in verbose logging for settings load / change / save flows.
- * Enable with ELIZA_SETTINGS_DEBUG=1 (and Vite: same env at build time, or VITE_ELIZA_SETTINGS_DEBUG=1).
+ *
+ * The canonical implementation lives in `@elizaos/core`. This module re-exports
+ * it so existing `@elizaos/shared` (and `@elizaos/shared/settings-debug`)
+ * importers keep resolving without maintaining a duplicate copy.
  */
-import { isTruthyEnvValue } from "./env-utils.js";
-/** Keys whose values are always redacted in debug dumps. */
-const SENSITIVE_KEY_RE = /(?:^|\.|_)(?:secret|password|token|apikey|api_key|privatekey|private_key|mnemonic|credential|authorization|bearer|cookie|sessionkey|session_id)(?:\.|_|$)|^apikey$|_api_key$|_key$/i;
-const MAX_DEPTH = 14;
-const MAX_ARRAY = 40;
-const MAX_STRING = 120;
-/**
- * True when settings debug is enabled (Node: process.env; browser: import.meta.env from Vite define).
- */
-export function isElizaSettingsDebugEnabled(options) {
-    const im = options?.importMetaEnv;
-    if (im) {
-        if (isTruthyEnvValue(String(im.ELIZA_SETTINGS_DEBUG ?? "").trim()))
-            return true;
-        if (isTruthyEnvValue(String(im.VITE_ELIZA_SETTINGS_DEBUG ?? "").trim()))
-            return true;
-    }
-    const e = options?.env;
-    if (e) {
-        if (isTruthyEnvValue(e.ELIZA_SETTINGS_DEBUG))
-            return true;
-        if (isTruthyEnvValue(e.VITE_ELIZA_SETTINGS_DEBUG))
-            return true;
-    }
-    if (typeof process !== "undefined" && process.env) {
-        if (isTruthyEnvValue(process.env.ELIZA_SETTINGS_DEBUG))
-            return true;
-        if (isTruthyEnvValue(process.env.VITE_ELIZA_SETTINGS_DEBUG))
-            return true;
-    }
-    return false;
-}
-function maskString(s) {
-    const t = s.trim();
-    if (t.length <= 8)
-        return "[redacted:short]";
-    return `${t.slice(0, 4)}…${t.slice(-2)} (${t.length} chars)`;
-}
-function sanitizeDebugString(value) {
-    const trimmed = value.trim();
-    if (trimmed.length === 0)
-        return "";
-    if (trimmed.toUpperCase() === "[REDACTED]")
-        return "[REDACTED]";
-    if (trimmed.length > 48 || /^(sk-|pk_|Bearer\s)/i.test(trimmed)) {
-        return maskString(trimmed);
-    }
-    if (trimmed.length > MAX_STRING)
-        return `${trimmed.slice(0, MAX_STRING)}…`;
-    return trimmed;
-}
-function sanitizeDebugArray(value, depth, seen) {
-    const out = [];
-    const cap = Math.min(value.length, MAX_ARRAY);
-    for (let i = 0; i < cap; i++) {
-        out.push(sanitizeForSettingsDebug(value[i], depth + 1, seen));
-    }
-    if (value.length > cap) {
-        out.push(`… +${value.length - cap} more`);
-    }
-    return out;
-}
-function sanitizeSensitiveDebugValue(value) {
-    if (typeof value === "string" && value.trim())
-        return maskString(value);
-    if (value == null || value === "")
-        return value;
-    return "[redacted]";
-}
-function sanitizeDebugObject(value, depth, seen) {
-    const out = {};
-    for (const [key, item] of Object.entries(value)) {
-        out[key] = SENSITIVE_KEY_RE.test(key)
-            ? sanitizeSensitiveDebugValue(item)
-            : sanitizeForSettingsDebug(item, depth + 1, seen);
-    }
-    return out;
-}
-/**
- * Deep-clone-ish snapshot safe to log (secrets masked). Not for security boundaries — debug only.
- */
-export function sanitizeForSettingsDebug(value, depth = 0, seen = new WeakSet()) {
-    if (depth > MAX_DEPTH)
-        return "[max-depth]";
-    if (value === null || value === undefined)
-        return value;
-    if (typeof value === "boolean" || typeof value === "number")
-        return value;
-    if (typeof value === "string")
-        return sanitizeDebugString(value);
-    if (typeof value === "bigint")
-        return String(value);
-    if (typeof value === "function")
-        return `[fn ${value.name || "anonymous"}]`;
-    if (typeof value !== "object")
-        return String(value);
-    if (seen.has(value))
-        return "[circular]";
-    seen.add(value);
-    if (Array.isArray(value)) {
-        return sanitizeDebugArray(value, depth, seen);
-    }
-    return sanitizeDebugObject(value, depth, seen);
-}
-/** Compact cloud slice for logs (no raw secrets). */
-export function settingsDebugCloudSummary(cloud) {
-    if (!cloud || typeof cloud !== "object")
-        return { cloud: null };
-    const apiKey = cloud.apiKey;
-    return {
-        enabled: cloud.enabled,
-        inferenceMode: cloud.inferenceMode,
-        services: cloud.services,
-        baseUrl: cloud.baseUrl,
-        hasApiKey: typeof apiKey === "string" ? apiKey.trim().length > 0 : Boolean(apiKey),
-    };
-}
+export { isElizaSettingsDebugEnabled, sanitizeForSettingsDebug, settingsDebugCloudSummary, } from "@elizaos/core";
 //# sourceMappingURL=settings-debug.js.map

package/settings-debug.js.map

@@ -1 +1 @@
-{"version":3,"file":"settings-debug.js","sourceRoot":"","sources":["../src/settings-debug.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,4DAA4D;AAC5D,MAAM,gBAAgB,GACpB,qLAAqL,CAAC;AAExL,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,UAAU,GAAG,GAAG,CAAC;AAEvB;;GAEG;AACH,MAAM,UAAU,2BAA2B,CAAC,OAK3C;IACC,MAAM,EAAE,GAAG,OAAO,EAAE,aAAa,CAAC;IAClC,IAAI,EAAE,EAAE,CAAC;QACP,IAAI,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAChE,OAAO,IAAI,CAAC;QACd,IAAI,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACrE,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,CAAC,GAAG,OAAO,EAAE,GAAG,CAAC;IACvB,IAAI,CAAC,EAAE,CAAC;QACN,IAAI,gBAAgB,CAAC,CAAC,CAAC,oBAAoB,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1D,IAAI,gBAAgB,CAAC,CAAC,CAAC,yBAAyB,CAAC;YAAE,OAAO,IAAI,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAClD,IAAI,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;YAAE,OAAO,IAAI,CAAC;QACpE,IAAI,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;YAAE,OAAO,IAAI,CAAC;IAC3E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACnB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,kBAAkB,CAAC;IAC7C,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,SAAS,CAAC;AAC/D,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,IAAI,OAAO,CAAC,WAAW,EAAE,KAAK,YAAY;QAAE,OAAO,YAAY,CAAC;IAChE,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,IAAI,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,UAAU;QAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC;IAC3E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAgB,EAChB,KAAa,EACb,IAAqB;IAErB,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,GAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAc;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;IACxE,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAA8B,EAC9B,KAAa,EACb,IAAqB;IAErB,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;YACnC,CAAC,CAAC,2BAA2B,CAAC,IAAI,CAAC;YACnC,CAAC,CAAC,wBAAwB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAc,EACd,KAAK,GAAG,CAAC,EACT,OAAwB,IAAI,OAAO,EAAE;IAErC,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO,aAAa,CAAC;IAC5C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACjE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,OAAO,KAAK,KAAK,UAAU;QAAE,OAAO,OAAO,KAAK,CAAC,IAAI,IAAI,WAAW,GAAG,CAAC;IAC5E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAEpD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC;QAAE,OAAO,YAAY,CAAC;IACnD,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC,CAAC;IAE1B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,mBAAmB,CAAC,KAAgC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAC5E,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,yBAAyB,CACvC,KAAiD;IAEjD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAChE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EACP,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;KAC1E,CAAC;AACJ,CAAC"}
+{"version":3,"file":"settings-debug.js","sourceRoot":"","sources":["../src/settings-debug.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,eAAe,CAAC"}

package/steward-session-client/index.d.ts

@@ -16,13 +16,11 @@ export declare const STEWARD_TOKEN_KEY = "steward_session_token";
 /**
  * localStorage key for the Steward refresh token.
  *
- * @deprecated Refresh tokens are now persisted only as the HttpOnly
- * `steward-refresh-token` cookie (set by `/api/auth/steward-session` and
- * `/api/auth/steward-nonce-exchange`). The localStorage copy was XSS-
- * reachable and is being removed; only the key constant and the
- * read/write/clear helpers below remain so legacy tabs left over from
- * before the rollout can still drain their stale value via
- * `clearStoredStewardToken()`. Do NOT add new readers/writers.
+ * Refresh tokens are persisted only as the HttpOnly `steward-refresh-token`
+ * cookie (set by `/api/auth/steward-session` and
+ * `/api/auth/steward-nonce-exchange`). This key is retained solely so
+ * `clearStoredStewardToken()` can drain the stale localStorage value left in
+ * tabs opened before the cookie-only rollout. Do NOT read or write it.
  */
 export declare const STEWARD_REFRESH_TOKEN_KEY = "steward_refresh_token";
 /** Non-HttpOnly cookie set to "1" while the server-side session is live. */
@@ -85,26 +83,6 @@ export interface ClearOpts {
 }
 export declare function readStoredStewardToken(): string | null;
 export declare function writeStoredStewardToken(token: string): void;
-/**
- * @deprecated The refresh token is now persisted only as the HttpOnly
- * `steward-refresh-token` cookie. Reading it from localStorage is XSS-
- * reachable and contradicts the cookie-only model. Callers should POST to
- * `STEWARD_REFRESH_ENDPOINT` with `credentials: "include"` instead — the
- * server reads the cookie and mints fresh tokens with no body payload.
- * This helper is retained for one release window so legacy tabs can still
- * be cleaned up via `clearStoredStewardToken()`; it will be removed once
- * `os-homepage` and `cloud-frontend` have shipped the cookie-only flow.
- */
-export declare function readStoredStewardRefreshToken(): string | null;
-/**
- * @deprecated Writing the refresh token to localStorage defeats the
- * HttpOnly-cookie protection the server already provides. The cookie is
- * set by `/api/auth/steward-session` and `/api/auth/steward-nonce-exchange`
- * — there is no longer any reason for the browser to hold a copy. This
- * helper intentionally does not write and is kept only for one release
- * window; after that it will be deleted.
- */
-export declare function writeStoredStewardRefreshToken(_token: string): void;
 export declare function clearStoredStewardToken(): void;
 /**
  * Returns true when the non-HttpOnly `steward-authed=1` marker cookie is

package/steward-session-client/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/steward-session-client/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,2DAA2D;AAC3D,eAAO,MAAM,iBAAiB,0BAA0B,CAAC;AAEzD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,yBAAyB,0BAA0B,CAAC;AAEjE,4EAA4E;AAC5E,eAAO,MAAM,qBAAqB,mBAAmB,CAAC;AAEtD,uDAAuD;AACvD,eAAO,MAAM,iBAAiB,eAAe,CAAC;AAE9C,wEAAwE;AACxE,eAAO,MAAM,wBAAwB,8BAA8B,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B,qCACR,CAAC;AAErC;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,8BAA8B,CAAC;AAMpE,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAC/B,eAAe,GACf,eAAe,GACf,uBAAuB,GACvB,0BAA0B,GAC1B,gBAAgB,GAGhB,cAAc,GACd,cAAc,GACd,cAAc,GACd,wBAAwB,GACxB,sBAAsB,GACtB,8BAA8B,GAC9B,kBAAkB,CAAC;AAEvB,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,uBAAuB,GAAG,MAAM,GAAG,IAAI,CAAC;gBAGrD,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,uBAAuB,GAAG,MAAM,GAAG,IAAI;CAOhD;AAED,MAAM,WAAW,QAAQ;IACvB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,MAAM,WAAW,SAAS;IACxB,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAMD,wBAAgB,sBAAsB,IAAI,MAAM,GAAG,IAAI,CAOtD;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAQ3D;AAKD;;;;;;;;;GASG;AACH,wBAAgB,6BAA6B,IAAI,MAAM,GAAG,IAAI,CAiB7D;AAED;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAcnE;AAED,wBAAgB,uBAAuB,IAAI,IAAI,CAQ9C;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,OAAO,CAKhD;AAgBD;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,MAAM,EACb,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,EAC5B,IAAI,GAAE,QAAa,GAClB,OAAO,CAAC,sBAAsB,CAAC,CA2BjC;AAMD,MAAM,WAAW,2BAA2B;IAC1C,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,4BAA6B,SAAQ,sBAAsB;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,uBAAwB,SAAQ,QAAQ;IACvD,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yBAAyB;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,uBAA4B,GACjC,OAAO,CAAC,4BAA4B,CAAC,CAwBvC;AAED;;;;GAIG;AACH,OAAO,EACL,6BAA6B,EAC7B,0BAA0B,EAC1B,0BAA0B,EAC1B,qBAAqB,EACrB,2BAA2B,EAC3B,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AAEjC,wBAAgB,mBAAmB,CAAC,IAAI,GAAE,SAAc,GAAG,IAAI,CAS9D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/steward-session-client/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,2DAA2D;AAC3D,eAAO,MAAM,iBAAiB,0BAA0B,CAAC;AAEzD;;;;;;;;GAQG;AACH,eAAO,MAAM,yBAAyB,0BAA0B,CAAC;AAEjE,4EAA4E;AAC5E,eAAO,MAAM,qBAAqB,mBAAmB,CAAC;AAEtD,uDAAuD;AACvD,eAAO,MAAM,iBAAiB,eAAe,CAAC;AAE9C,wEAAwE;AACxE,eAAO,MAAM,wBAAwB,8BAA8B,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B,qCACR,CAAC;AAErC;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,8BAA8B,CAAC;AAMpE,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAC/B,eAAe,GACf,eAAe,GACf,uBAAuB,GACvB,0BAA0B,GAC1B,gBAAgB,GAGhB,cAAc,GACd,cAAc,GACd,cAAc,GACd,wBAAwB,GACxB,sBAAsB,GACtB,8BAA8B,GAC9B,kBAAkB,CAAC;AAEvB,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,uBAAuB,GAAG,MAAM,GAAG,IAAI,CAAC;gBAGrD,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,uBAAuB,GAAG,MAAM,GAAG,IAAI;CAOhD;AAED,MAAM,WAAW,QAAQ;IACvB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,MAAM,WAAW,SAAS;IACxB,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAMD,wBAAgB,sBAAsB,IAAI,MAAM,GAAG,IAAI,CAOtD;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAQ3D;AAED,wBAAgB,uBAAuB,IAAI,IAAI,CAQ9C;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,OAAO,CAKhD;AAgBD;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,MAAM,EACb,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,EAC5B,IAAI,GAAE,QAAa,GAClB,OAAO,CAAC,sBAAsB,CAAC,CA2BjC;AAMD,MAAM,WAAW,2BAA2B;IAC1C,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,4BAA6B,SAAQ,sBAAsB;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,uBAAwB,SAAQ,QAAQ;IACvD,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yBAAyB;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,uBAA4B,GACjC,OAAO,CAAC,4BAA4B,CAAC,CAwBvC;AAED;;;;GAIG;AACH,OAAO,EACL,6BAA6B,EAC7B,0BAA0B,EAC1B,0BAA0B,EAC1B,qBAAqB,EACrB,2BAA2B,EAC3B,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AAEjC,wBAAgB,mBAAmB,CAAC,IAAI,GAAE,SAAc,GAAG,IAAI,CAS9D"}