@elizaos/ui 2.0.0-alpha.43 → 2.0.0-alpha.430

package/packages/agent/src/version-resolver.js

@@ -0,0 +1,50 @@
+import { createRequire } from "node:module";
+import process from "node:process";
+const PACKAGE_JSON_CANDIDATE = "../../package.json";
+const BUILD_INFO_CANDIDATES = [
+    "../../build-info.json",
+    "../build-info.json",
+    "./build-info.json",
+];
+function isModuleNotFound(err) {
+    return (typeof err === "object" &&
+        err !== null &&
+        "code" in err &&
+        err.code === "MODULE_NOT_FOUND");
+}
+function readVersionFromPackageJson(requireFn) {
+    try {
+        const pkg = requireFn(PACKAGE_JSON_CANDIDATE);
+        return pkg.version ?? null;
+    }
+    catch (err) {
+        if (isModuleNotFound(err)) {
+            return null;
+        }
+        throw err;
+    }
+}
+function readVersionFromBuildInfo(requireFn) {
+    for (const candidate of BUILD_INFO_CANDIDATES) {
+        try {
+            const info = requireFn(candidate);
+            if (info.version) {
+                return info.version;
+            }
+        }
+        catch (err) {
+            if (!isModuleNotFound(err)) {
+                throw err;
+            }
+        }
+    }
+    return null;
+}
+export function resolveElizaVersion(moduleUrl) {
+    const requireFn = createRequire(moduleUrl);
+    return ((typeof __ELIZA_VERSION__ === "string" && __ELIZA_VERSION__) ||
+        process.env.ELIZA_BUNDLED_VERSION ||
+        readVersionFromPackageJson(requireFn) ||
+        readVersionFromBuildInfo(requireFn) ||
+        "0.0.0");
+}

package/packages/app-core/src/App.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Root App component — routing shell.
+ */
+import "./components/chat/chat-source-registration";
+export declare function App(): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=App.d.ts.map

package/packages/app-core/src/App.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"App.d.ts","sourceRoot":"","sources":["../../../../../app-core/src/App.tsx"],"names":[],"mappings":"AAAA;;GAEG;AAYH,OAAO,4CAA4C,CAAC;AAmhBpD,wBAAgB,GAAG,4CA+oBlB"}

package/packages/app-core/src/App.js

@@ -0,0 +1,518 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+/**
+ * Root App component — routing shell.
+ */
+import { Keyboard } from "@capacitor/keyboard";
+import { ArrowDownLeft, ArrowLeftRight, Layers3, ListTodo, MessagesSquare, PanelLeft, } from "lucide-react";
+import "./components/chat/chat-source-registration";
+import { Button, ErrorBoundary } from "@elizaos/ui";
+import { lazy, Suspense, useCallback, useEffect, useMemo, useState, } from "react";
+import { subscribeDesktopBridgeEvent } from "./bridge/electrobun-rpc";
+import { GameViewOverlay } from "./components/apps/GameViewOverlay";
+import { getOverlayApp } from "./components/apps/overlay-app-registry";
+import { LoginView } from "./components/auth/LoginView";
+import { SaveCommandModal } from "./components/chat/SaveCommandModal";
+import { TasksEventsPanel } from "./components/chat/TasksEventsPanel";
+import { DeferredSetupChecklist } from "./components/cloud/FlaminaGuide";
+import { ConversationsSidebar } from "./components/conversations/ConversationsSidebar";
+import { CustomActionEditor } from "./components/custom-actions/CustomActionEditor";
+import { CustomActionsPanel } from "./components/custom-actions/CustomActionsPanel";
+import { ChatView } from "./components/pages/ChatView";
+import { BugReportModal } from "./components/shell/BugReportModal";
+import { ConnectionFailedBanner } from "./components/shell/ConnectionFailedBanner";
+import { ConnectionLostOverlay } from "./components/shell/ConnectionLostOverlay";
+import { Header } from "./components/shell/Header";
+import { ShellOverlays } from "./components/shell/ShellOverlays";
+import { StartupShell } from "./components/shell/StartupShell";
+import { SystemWarningBanner } from "./components/shell/SystemWarningBanner";
+import { AppWorkspaceChrome, } from "./components/workspace/AppWorkspaceChrome";
+import { useBootConfig } from "./config/boot-config-react";
+import { BugReportProvider, useBugReportState, useContextMenu, useStreamPopoutNavigation, } from "./hooks";
+import { useActivityEvents } from "./hooks/useActivityEvents";
+import { useAuthStatus } from "./hooks/useAuthStatus";
+import { APPS_ENABLED, isAndroidPhoneSurfaceEnabled, isAppsToolTab, } from "./navigation";
+import { isIOS, isNative } from "./platform/init";
+import { useApp } from "./state";
+const CHAT_MOBILE_BREAKPOINT_PX = 820;
+const WALLET_CHAT_PREFILL_EVENT = "milady:chat:prefill";
+function lazyNamedView(load, exportName) {
+    return lazy(async () => {
+        const module = await load();
+        const component = module[exportName];
+        if (typeof component !== "function") {
+            throw new Error(`Missing component export: ${String(exportName)}`);
+        }
+        return {
+            default: component,
+        };
+    });
+}
+// Static imports for views that AppWindowRenderer (and DetachedShellRoot)
+// also import statically. WHY not lazy here: a `lazy()` for a module that
+// any other importer pulls eagerly is folded back into the main chunk by
+// Rollup with a warning, since the dynamic boundary can't actually defer
+// load. Going all-static makes the load path honest. If you want true
+// route-level splitting back, lift `lazy()` to a single owning call site.
+import { CharacterEditor } from "./components/character/CharacterEditor";
+import { DatabasePageView } from "./components/pages/DatabasePageView";
+import { InventoryView } from "./components/pages/InventoryView";
+import { LogsPageView } from "./components/pages/LogsPageView";
+import { MemoryViewerView } from "./components/pages/MemoryViewerView";
+import { PluginsPageView } from "./components/pages/PluginsPageView";
+import { RelationshipsView } from "./components/pages/RelationshipsView";
+import { RuntimeView } from "./components/pages/RuntimeView";
+import { SkillsView } from "./components/pages/SkillsView";
+import { TasksPageView } from "./components/pages/TasksPageView";
+import { TrajectoriesView } from "./components/pages/TrajectoriesView";
+import { FineTuningView } from "./components/training/injected";
+// True lazy boundaries: these views are only imported here, so Rollup can
+// honour the split into separate chunks.
+const AppsPageView = lazyNamedView(() => import("./components/pages/AppsPageView"), "AppsPageView");
+const AutomationsDesktopShell = lazyNamedView(() => import("./components/pages/AutomationsView"), "AutomationsDesktopShell");
+const BrowserWorkspaceView = lazyNamedView(() => import("./components/pages/BrowserWorkspaceView"), "BrowserWorkspaceView");
+const ConnectorsPageView = lazyNamedView(() => import("./components/pages/ConnectorsPageView"), "ConnectorsPageView");
+const ContactsPageView = lazyNamedView(() => import("./components/pages/MiladyOsAppsView"), "ContactsPageView");
+const DesktopWorkspaceSection = lazyNamedView(() => import("./components/settings/DesktopWorkspaceSection"), "DesktopWorkspaceSection");
+const MessagesPageView = lazyNamedView(() => import("./components/pages/MiladyOsAppsView"), "MessagesPageView");
+const PhonePageView = lazyNamedView(() => import("./components/pages/MiladyOsAppsView"), "PhonePageView");
+const SettingsView = lazyNamedView(() => import("./components/pages/SettingsView"), "SettingsView");
+const StreamView = lazyNamedView(() => import("./components/pages/StreamView"), "StreamView");
+function LazyViewBoundary({ children }) {
+    return (_jsx(Suspense, { fallback: _jsx("div", { className: "flex flex-1 min-h-0 min-w-0 items-center justify-center text-sm text-muted", children: "Loading\u2026" }), children: children }));
+}
+function prefillWalletChat(text) {
+    if (typeof window === "undefined")
+        return;
+    window.dispatchEvent(new CustomEvent(WALLET_CHAT_PREFILL_EVENT, {
+        detail: { text, select: true },
+    }));
+}
+function WalletChatGuideBody() {
+    const items = [
+        {
+            icon: ArrowLeftRight,
+            label: "Swap, bridge, send, or receive",
+        },
+        {
+            icon: Layers3,
+            label: "Inspect tokens, NFTs, LPs, and activity",
+        },
+        {
+            icon: MessagesSquare,
+            label: "Ask how the agent can use this wallet",
+        },
+    ];
+    return (_jsx("div", { className: "grid gap-2", children: items.map((item) => (_jsxs("div", { className: "flex items-center gap-2 text-xs-tight text-muted", children: [_jsx(item.icon, { className: "h-3.5 w-3.5 shrink-0 text-accent" }), _jsx("span", { children: item.label })] }, item.label))) }));
+}
+function WalletChatGuideActions() {
+    const actions = [
+        {
+            label: "Swap",
+            prompt: "Prepare a wallet swap. Ask me for source token, destination token, amount, slippage, and route before any transaction.",
+            icon: ArrowLeftRight,
+        },
+        {
+            label: "Bridge",
+            prompt: "Prepare a bridge. Ask me for token, amount, destination address, destination network requirements, and route before any transaction.",
+            icon: Layers3,
+        },
+        {
+            label: "Receive",
+            prompt: "Show the EVM and Solana receive addresses available in this wallet and ask which address I want to use.",
+            icon: ArrowDownLeft,
+        },
+    ];
+    return (_jsx(_Fragment, { children: actions.map((action) => (_jsxs(Button, { variant: "outline", size: "sm", className: "rounded-full", onClick: () => prefillWalletChat(action.prompt), children: [_jsx(action.icon, { className: "mr-1.5 h-3.5 w-3.5" }), action.label] }, action.label))) }));
+}
+function MobileChatSurfaceButton({ active, icon: Icon, label, onClick, surface, }) {
+    return (_jsx("button", { type: "button", "aria-label": label, "aria-current": active ? "page" : undefined, title: label, "data-testid": `chat-mobile-surface-${surface}`, onClick: onClick, className: `inline-flex h-9 w-9 items-center justify-center rounded-md border border-border/40 bg-card/55 text-muted shadow-sm transition-colors hover:text-txt ${active ? "border-accent/70 bg-accent text-accent-fg" : ""}`, children: _jsx(Icon, { className: "h-4 w-4", "aria-hidden": true }) }));
+}
+function buildWalletPageScopedChatPaneProps() {
+    return {
+        persistentIntro: true,
+        placeholderOverride: "Ask about how the agent can use a wallet",
+        introOverride: {
+            title: "Wallet agent",
+            body: _jsx(WalletChatGuideBody, {}),
+            actions: _jsx(WalletChatGuideActions, {}),
+        },
+    };
+}
+/** Check if we're in pop-out mode (StreamView only, no chrome). */
+function useIsPopout() {
+    const [popout] = useState(() => {
+        if (typeof window === "undefined")
+            return false;
+        const params = new URLSearchParams(window.location.search || window.location.hash.split("?")[1] || "");
+        return params.has("popout") && params.get("popout") !== "false";
+    });
+    return popout;
+}
+function TabScrollView({ children, className = "", chat, chatScope, pageScopedChatPaneProps, }) {
+    return (_jsx(AppWorkspaceChrome, { testId: "tab-scroll-view", chat: chat, chatScope: chat ? undefined : chatScope, pageScopedChatPaneProps: chat ? undefined : pageScopedChatPaneProps, main: _jsx("div", { "data-shell-scroll-region": "true", className: `flex-1 min-h-0 min-w-0 w-full overflow-y-auto ${className}`, children: children }) }));
+}
+function TabContentView({ children, chatScope, chatDisabled = false, }) {
+    const { activeGameRunId, appsSubTab } = useApp();
+    const gameOwnsChat = chatScope === "page-apps" &&
+        appsSubTab === "games" &&
+        activeGameRunId.trim().length > 0;
+    return (_jsx(AppWorkspaceChrome, { testId: "tab-content-view", chatScope: chatScope, chatDisabled: chatDisabled || gameOwnsChat, main: _jsx("div", { className: "flex flex-col flex-1 min-h-0 min-w-0 w-full overflow-hidden", children: children }) }));
+}
+function ViewRouter({ onCharacterHeaderActionsChange, }) {
+    const { tab } = useApp();
+    const { lifeOpsPageView: LifeOpsPageView } = useBootConfig();
+    const androidPhoneSurfaceEnabled = isAndroidPhoneSurfaceEnabled();
+    const view = (() => {
+        switch (tab) {
+            case "chat":
+                return _jsx(ChatView, {});
+            case "phone":
+                return androidPhoneSurfaceEnabled ? (_jsx(TabContentView, { chatScope: "page-phone", children: _jsx(PhonePageView, {}) })) : (_jsx(ChatView, {}));
+            case "messages":
+                return androidPhoneSurfaceEnabled ? (_jsx(TabContentView, { chatScope: "page-phone", children: _jsx(MessagesPageView, {}) })) : (_jsx(ChatView, {}));
+            case "contacts":
+                return androidPhoneSurfaceEnabled ? (_jsx(TabContentView, { chatScope: "page-phone", children: _jsx(ContactsPageView, {}) })) : (_jsx(ChatView, {}));
+            case "lifeops":
+                // LifeOpsPageView owns its own AppWorkspaceChrome (nav rail + main
+                // + right chat), so don't double-wrap.
+                return LifeOpsPageView ? _jsx(LifeOpsPageView, {}) : _jsx(ChatView, {});
+            case "browser":
+                // BrowserWorkspaceView owns its own AppWorkspaceChrome, so don't
+                // double-wrap.
+                return _jsx(BrowserWorkspaceView, {});
+            case "companion":
+                // Companion is now an app — redirect /companion URL to chat
+                return _jsx(ChatView, {});
+            case "stream":
+                return _jsx(StreamView, {});
+            case "apps":
+                // Apps disabled in production builds; fall through to chat
+                return APPS_ENABLED ? (_jsx(TabContentView, { chatScope: "page-apps", children: _jsx(AppsPageView, {}) })) : (_jsx(ChatView, {}));
+            case "tasks":
+                return (_jsx(TabContentView, { children: _jsx(TasksPageView, {}) }));
+            case "character":
+            case "character-select":
+            case "knowledge":
+                return (_jsx(TabContentView, { chatScope: "page-character", children: _jsx(CharacterEditor, { onHeaderActionsChange: onCharacterHeaderActionsChange }) }));
+            case "inventory":
+                return (_jsx(TabScrollView, { chatScope: "page-wallet", pageScopedChatPaneProps: buildWalletPageScopedChatPaneProps(), children: _jsx(InventoryView, {}) }));
+            case "connectors":
+                return (_jsx(TabContentView, { children: _jsx(ConnectorsPageView, { connectorDesktopPlacement: "right" }) }));
+            case "automations":
+            case "triggers":
+                return _jsx(AutomationsDesktopShell, {});
+            case "voice":
+                return (_jsx(TabContentView, { children: _jsx(SettingsView, { initialSection: "identity" }, "settings-identity") }));
+            case "settings":
+                return (_jsx(TabContentView, { chatDisabled: true, children: _jsx(SettingsView, {}, "settings-root") }));
+            case "plugins":
+                return (_jsx(TabContentView, { children: _jsx(PluginsPageView, {}) }));
+            case "skills":
+                return (_jsx(TabContentView, { children: _jsx(SkillsView, {}) }));
+            case "trajectories":
+                return (_jsx(TabContentView, { children: _jsx(TrajectoriesView, {}) }));
+            case "relationships":
+                return (_jsx(TabContentView, { children: _jsx(RelationshipsView, {}) }));
+            case "memories":
+                return (_jsx(TabContentView, { children: _jsx(MemoryViewerView, {}) }));
+            case "runtime":
+                return (_jsx(TabContentView, { children: _jsx(RuntimeView, {}) }));
+            case "database":
+                return (_jsx(TabContentView, { children: _jsx(DatabasePageView, {}) }));
+            case "logs":
+                return (_jsx(TabContentView, { children: _jsx(LogsPageView, {}) }));
+            case "fine-tuning":
+            case "advanced":
+                return (_jsx(TabContentView, { children: _jsx(FineTuningView, {}) }));
+            case "desktop":
+                return (_jsx(TabContentView, { children: _jsx(DesktopWorkspaceSection, {}) }));
+            default:
+                return _jsx(ChatView, {});
+        }
+    })();
+    return (_jsx(ErrorBoundary, { children: _jsx(LazyViewBoundary, { children: view }) }));
+}
+export function App() {
+    const { startupError, startupCoordinator, tab, setTab, setState, actionNotice, activeOverlayApp, uiTheme, backendConnection, activeGameViewerUrl, gameOverlayEnabled, uiShellMode, t, } = useApp();
+    const { companionShell: CompanionShell } = useBootConfig();
+    const isPopout = useIsPopout();
+    const companionShellVisible = activeOverlayApp !== null;
+    // Auth gate — only active after the coordinator reaches "ready".
+    // During onboarding / pairing / startup phases the StartupShell handles
+    // its own gate (bootstrap step), so we skip the check.
+    const isCoordinatorReady = startupCoordinator.phase === "ready";
+    const { state: authState, refetch: refetchAuth } = useAuthStatus({
+        skip: !isCoordinatorReady || isPopout,
+    });
+    // Don't initialize the 3D scene while the system is still booting — this
+    // prevents VrmEngine's Three.js setup from blocking the JS thread and
+    // delaying WebSocket agent-status updates (which would freeze the loader).
+    const overlayAppActive = startupCoordinator.phase === "ready" && activeOverlayApp !== null;
+    const resolvedOverlayApp = overlayAppActive && activeOverlayApp
+        ? getOverlayApp(activeOverlayApp)
+        : undefined;
+    const contextMenu = useContextMenu();
+    useStreamPopoutNavigation(setTab);
+    useEffect(() => {
+        if (startupCoordinator.phase !== "ready")
+            return;
+        if (backendConnection?.state !== "connected")
+            return;
+        const report = () => {
+            void fetch("/api/apps/overlay-presence", {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({ appName: activeOverlayApp }),
+            }).catch(() => {
+                /* ignore */
+            });
+        };
+        report();
+        const intervalId = window.setInterval(report, 25_000);
+        return () => {
+            window.clearInterval(intervalId);
+            void fetch("/api/apps/overlay-presence", {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({ appName: null }),
+            }).catch(() => {
+                /* ignore */
+            });
+        };
+    }, [activeOverlayApp, backendConnection?.state, startupCoordinator.phase]);
+    const [customActionsPanelOpen, setCustomActionsPanelOpen] = useState(false);
+    const [customActionsEditorOpen, setCustomActionsEditorOpen] = useState(false);
+    const [settingsInitialSection, setSettingsInitialSection] = useState(null);
+    const [widgetsPanelCollapsed, setWidgetsPanelCollapsed] = useState(() => {
+        if (typeof window === "undefined")
+            return false;
+        try {
+            return (window.localStorage.getItem("elizaos:chat:widgets-collapsed") === "true");
+        }
+        catch {
+            return false;
+        }
+    });
+    const handleToggleWidgetsCollapsed = useCallback((next) => {
+        setWidgetsPanelCollapsed(next);
+        try {
+            window.localStorage.setItem("elizaos:chat:widgets-collapsed", String(next));
+        }
+        catch {
+            // localStorage unavailable in sandboxed environments — non-fatal.
+        }
+    }, []);
+    const { events: activityEvents, clearEvents: clearActivityEvents } = useActivityEvents();
+    const [editingAction, setEditingAction] = useState(null);
+    const [isChatMobileLayout, setIsChatMobileLayout] = useState(() => typeof window !== "undefined"
+        ? window.innerWidth < CHAT_MOBILE_BREAKPOINT_PX
+        : false);
+    const [mobileChatSurface, setMobileChatSurface] = useState("center");
+    const [desktopShuttingDown, setDesktopShuttingDown] = useState(false);
+    const [characterHeaderActions, setCharacterHeaderActions] = useState(null);
+    const isConnectors = tab === "connectors";
+    const isCompanionTab = tab === "companion";
+    const isChat = tab === "chat";
+    const isChatWorkspace = isChat || isConnectors;
+    const isCharacterPage = tab === "character" || tab === "character-select" || tab === "knowledge";
+    const isWallets = tab === "inventory";
+    const isHeartbeats = tab === "triggers" || tab === "automations";
+    const isSettingsPage = tab === "settings" || tab === "voice";
+    const isAppsToolPage = isAppsToolTab(tab);
+    const isDesktopWorkspacePage = tab === "desktop";
+    const mobileChatControls = useMemo(() => {
+        if (!isChatMobileLayout)
+            return null;
+        return {
+            center: (_jsx(MobileChatSurfaceButton, { active: mobileChatSurface === "center", icon: MessagesSquare, label: t("nav.chat", { defaultValue: "Chat" }), onClick: () => setMobileChatSurface("center"), surface: "center" })),
+            left: (_jsx(MobileChatSurfaceButton, { active: mobileChatSurface === "left", icon: PanelLeft, label: t("conversations.chats", { defaultValue: "Chats" }), onClick: () => setMobileChatSurface("left"), surface: "left" })),
+            right: isChat ? (_jsx(MobileChatSurfaceButton, { active: mobileChatSurface === "right", icon: ListTodo, label: t("taskseventspanel.Title", {
+                    defaultValue: "Tasks & Events",
+                }), onClick: () => setMobileChatSurface("right"), surface: "right" })) : null,
+        };
+    }, [isChat, isChatMobileLayout, mobileChatSurface, t]);
+    // Keep hook order stable across onboarding/auth state transitions.
+    // Otherwise React can throw when onboarding completes and the main shell mounts.
+    useEffect(() => {
+        if (typeof window === "undefined")
+            return;
+        const handler = () => setCustomActionsPanelOpen((v) => !v);
+        window.addEventListener("toggle-custom-actions-panel", handler);
+        return () => window.removeEventListener("toggle-custom-actions-panel", handler);
+    }, []);
+    const handleEditorSave = useCallback(() => {
+        setCustomActionsEditorOpen(false);
+        setEditingAction(null);
+    }, []);
+    const handleDeferredTaskOpen = useCallback((task) => {
+        if (task === "voice") {
+            setTab("voice");
+            return;
+        }
+        if (task === "permissions") {
+            setSettingsInitialSection("permissions");
+        }
+        else if (task === "provider") {
+            setSettingsInitialSection("ai-model");
+        }
+        else {
+            setSettingsInitialSection(null);
+        }
+        setTab("settings");
+    }, [setTab]);
+    useEffect(() => {
+        if (typeof window === "undefined")
+            return;
+        const handleResize = () => {
+            setIsChatMobileLayout(window.innerWidth < CHAT_MOBILE_BREAKPOINT_PX);
+        };
+        handleResize();
+        window.addEventListener("resize", handleResize);
+        return () => window.removeEventListener("resize", handleResize);
+    }, []);
+    useEffect(() => {
+        if (!isChatMobileLayout) {
+            setMobileChatSurface("center");
+        }
+    }, [isChatMobileLayout]);
+    useEffect(() => {
+        if (!isChatWorkspace) {
+            setMobileChatSurface("center");
+        }
+        if (!isChat && mobileChatSurface === "right") {
+            setMobileChatSurface("center");
+        }
+    }, [isChat, isChatWorkspace, mobileChatSurface]);
+    useEffect(() => {
+        if (isSettingsPage || settingsInitialSection === null) {
+            return;
+        }
+        setSettingsInitialSection(null);
+    }, [isSettingsPage, settingsInitialSection]);
+    useEffect(() => {
+        if (!isNative || !isIOS) {
+            return;
+        }
+        // Disable the iOS WebView scroll only while the companion shell is active.
+        void Keyboard.setScroll({ isDisabled: companionShellVisible }).catch(() => {
+            // Ignore bridge failures so web and desktop shells keep working.
+        });
+    }, [companionShellVisible]);
+    useEffect(() => {
+        if (!isNative || !isIOS) {
+            return;
+        }
+        return () => {
+            void Keyboard.setScroll({ isDisabled: false }).catch(() => {
+                // Ignore cleanup failures when the native bridge is unavailable.
+            });
+        };
+    }, []);
+    useEffect(() => {
+        return subscribeDesktopBridgeEvent({
+            rpcMessage: "desktopShutdownStarted",
+            ipcChannel: "desktop:shutdownStarted",
+            listener: () => {
+                setDesktopShuttingDown(true);
+            },
+        });
+    }, []);
+    const bugReport = useBugReportState();
+    // Loading is handled entirely by StartupShell — no separate loader needed.
+    useEffect(() => {
+        // Safety-net watchdog: the coordinator has its own timeouts per phase, but
+        // this catches any edge case where the coordinator gets stuck in a loading
+        // phase. During "starting-runtime" the agent-wait loop has its own sliding
+        // deadline (up to 900s for embedding downloads), so we only watch the
+        // pre-runtime phases.
+        const STARTUP_TIMEOUT_MS = 300_000;
+        const coordinatorPolling = startupCoordinator.phase === "polling-backend" ||
+            startupCoordinator.phase === "restoring-session";
+        if (coordinatorPolling && !startupError) {
+            const timer = setTimeout(() => {
+                startupCoordinator.retry();
+            }, STARTUP_TIMEOUT_MS);
+            return () => clearTimeout(timer);
+        }
+    }, [startupCoordinator.phase, startupError, startupCoordinator.retry]);
+    // shellContent is memoized before early returns to satisfy the Rules of Hooks.
+    // Deps are local state/callbacks — not high-frequency AppContext fields like
+    // ptySessions/agentStatus — so CompanionSceneHost stays stable across polls.
+    const shellContent = useMemo(() => uiShellMode === "companion" &&
+        tab !== "character" &&
+        tab !== "character-select" &&
+        CompanionShell ? (_jsx(CompanionShell, { tab: "companion", actionNotice: actionNotice })) : isCompanionTab ? (_jsx("div", { className: "flex flex-col flex-1 min-h-0 w-full font-body text-txt bg-bg" }, "companion-shell")) : tab === "stream" ? (_jsxs("div", { className: "flex flex-col flex-1 min-h-0 w-full font-body text-txt bg-bg", children: [_jsx(Header, {}), _jsx("main", { className: "flex-1 min-h-0 overflow-hidden", children: _jsx(LazyViewBoundary, { children: _jsx(StreamView, {}) }) })] }, "stream-shell")) : isChatWorkspace ? (_jsxs("div", { className: "flex flex-col flex-1 min-h-0 w-full font-body text-txt bg-bg", children: [_jsx(Header, { mobileCenter: mobileChatControls?.center, mobileLeft: mobileChatControls?.left, pageRightExtras: mobileChatControls?.right, tasksEventsPanelOpen: isChat && !isChatMobileLayout }), _jsxs("div", { className: "flex flex-1 min-h-0 relative", children: [!isChatMobileLayout && isChat ? (_jsx("div", { className: "pointer-events-none absolute inset-x-0 bottom-0 h-[5.75rem]", "data-chat-shell-composer-underlay": true })) : null, isChatMobileLayout ? (_jsx("div", { className: `flex flex-col flex-1 min-h-0 min-w-0 overflow-hidden ${mobileChatSurface === "center" ? "px-2 pt-2" : ""}`, children: mobileChatSurface === "left" ? (_jsx(ConversationsSidebar, { mobile: true, onClose: () => setMobileChatSurface("center") }, "chat-sidebar-mobile")) : mobileChatSurface === "right" && isChat ? (_jsx(TasksEventsPanel, { open: true, events: activityEvents, clearEvents: clearActivityEvents, mobile: true })) : isChat ? (_jsxs(_Fragment, { children: [_jsx(DeferredSetupChecklist, { className: "mb-3", onOpenTask: handleDeferredTaskOpen }), _jsx(ChatView, {})] })) : (_jsx(LazyViewBoundary, { children: _jsx(ConnectorsPageView, {}) })) })) : (_jsxs(_Fragment, { children: [_jsx(ConversationsSidebar, {}, "chat-sidebar-desktop"), _jsx("div", { className: "flex flex-col flex-1 min-h-0 min-w-0 overflow-hidden", children: isChat ? (_jsxs(_Fragment, { children: [_jsx(DeferredSetupChecklist, { className: "mx-3 mb-3 mt-3 xl:mx-5", onOpenTask: handleDeferredTaskOpen }), _jsx(ChatView, {}, "chat-view-desktop")] })) : (_jsx(LazyViewBoundary, { children: _jsx(ConnectorsPageView, {}) })) }), isChat ? (_jsx(TasksEventsPanel, { open: true, events: activityEvents, clearEvents: clearActivityEvents, collapsed: widgetsPanelCollapsed, onToggleCollapsed: handleToggleWidgetsCollapsed })) : null] })), _jsx(CustomActionsPanel, { open: customActionsPanelOpen, onClose: () => setCustomActionsPanelOpen(false), onOpenEditor: (action) => {
+                            setEditingAction(action ?? null);
+                            setCustomActionsEditorOpen(true);
+                        } })] })] }, `chat-shell-${tab}`)) : isHeartbeats ? (_jsxs("div", { className: "flex flex-col flex-1 min-h-0 w-full font-body text-txt bg-bg", children: [_jsx(Header, {}), _jsx(LazyViewBoundary, { children: _jsx(AutomationsDesktopShell, {}, "automations-view-desktop") })] }, "heartbeats-shell")) : isSettingsPage ? (_jsxs("div", { className: "flex flex-col flex-1 min-h-0 w-full font-body text-txt bg-bg", children: [_jsx(Header, {}), _jsx(AppWorkspaceChrome, { testId: "settings-workspace", chatScope: "page-settings", chatDisabled: true, main: _jsx("div", { className: "flex flex-col flex-1 min-h-0 min-w-0 overflow-hidden", children: _jsx(LazyViewBoundary, { children: _jsx(SettingsView, { initialSection: tab === "voice"
+                                ? "identity"
+                                : tab === "connectors"
+                                    ? "connectors"
+                                    : (settingsInitialSection ?? undefined) }, tab === "voice"
+                            ? "settings-identity"
+                            : tab === "connectors"
+                                ? "settings-connectors"
+                                : "settings-root") }) }) })] }, `settings-shell-${tab}`)) : isWallets ? (_jsxs("div", { className: "flex flex-col flex-1 min-h-0 w-full font-body text-txt bg-bg", children: [_jsx(Header, {}), _jsx(AppWorkspaceChrome, { testId: "wallets-workspace", chatScope: "page-wallet", pageScopedChatPaneProps: buildWalletPageScopedChatPaneProps(), main: _jsx("div", { className: "flex flex-col flex-1 min-h-0 min-w-0 overflow-hidden", children: _jsx(LazyViewBoundary, { children: _jsx(InventoryView, {}) }) }) })] }, "wallets-shell")) : isCharacterPage ? (_jsxs("div", { className: "flex flex-col flex-1 min-h-0 w-full font-body text-txt bg-bg", children: [_jsx(Header, { pageRightExtras: characterHeaderActions }), _jsx("div", { className: "flex flex-1 min-h-0 min-w-0 overflow-hidden", children: _jsx(ViewRouter, { onCharacterHeaderActionsChange: setCharacterHeaderActions }) })] }, `character-shell-${tab}`)) : isAppsToolPage ? (_jsxs("div", { className: "flex flex-col flex-1 min-h-0 w-full font-body text-txt bg-bg", children: [_jsx(Header, {}), _jsx("div", { className: "flex flex-1 min-h-0 min-w-0 overflow-hidden", children: _jsx(ViewRouter, {}) })] }, `apps-tool-shell-${tab}`)) : isDesktopWorkspacePage ? (_jsxs("div", { className: "flex flex-col flex-1 min-h-0 w-full font-body text-txt bg-bg", children: [_jsx(Header, {}), _jsx("div", { className: "flex flex-1 min-h-0 min-w-0", children: _jsx(LazyViewBoundary, { children: _jsx(DesktopWorkspaceSection, {}) }) })] }, `desktop-shell-${tab}`)) : (_jsxs("div", { className: "flex flex-col flex-1 min-h-0 w-full font-body text-txt bg-bg", children: [_jsx(Header, { pageRightExtras: isCharacterPage ? characterHeaderActions : null }), _jsx("main", { className: `flex flex-1 min-h-0 min-w-0 overflow-hidden ${tab === "browser" || tab === "apps"
+                    ? ""
+                    : "px-3 xl:px-5 py-4 xl:py-6"}`, children: _jsx(ViewRouter, { onCharacterHeaderActionsChange: setCharacterHeaderActions }) })] }, `tab-shell-${tab}`)), [
+        CompanionShell,
+        tab,
+        uiShellMode,
+        isCompanionTab,
+        actionNotice,
+        isChat,
+        isChatWorkspace,
+        isCharacterPage,
+        isHeartbeats,
+        isSettingsPage,
+        isWallets,
+        isAppsToolPage,
+        isDesktopWorkspacePage,
+        isChatMobileLayout,
+        mobileChatSurface,
+        mobileChatControls,
+        characterHeaderActions,
+        handleDeferredTaskOpen,
+        activityEvents,
+        clearActivityEvents,
+        customActionsPanelOpen,
+        handleToggleWidgetsCollapsed,
+        settingsInitialSection,
+        widgetsPanelCollapsed,
+    ]);
+    // Pop-out mode — render only StreamView, skip startup gates.
+    // Platform init is skipped in main.tsx; AppProvider hydrates WS in background.
+    if (isPopout) {
+        return (_jsx("div", { className: "flex flex-col h-screen w-screen font-body text-txt bg-bg overflow-hidden", children: _jsx(LazyViewBoundary, { children: _jsx(StreamView, {}) }) }));
+    }
+    // StartupCoordinator gate — the coordinator is the sole startup authority.
+    // Non-ready phases are handled by StartupShell (which renders the appropriate
+    // view for each coordinator phase: loading, pairing, onboarding, or error).
+    if (startupCoordinator.phase !== "ready") {
+        return (_jsxs(BugReportProvider, { value: bugReport, children: [_jsx(StartupShell, {}), _jsx(BugReportModal, {})] }));
+    }
+    // Auth gate — when the coordinator is ready, check /api/auth/me.
+    // "loading" phase: wait (fall through to the coordinator's own "ready" render).
+    // "unauthenticated": render LoginView.
+    // "authenticated": proceed to the main shell.
+    // "server_unavailable": treat as unauthenticated (fail closed).
+    if (isCoordinatorReady && !isPopout) {
+        if (authState.phase === "unauthenticated" ||
+            authState.phase === "server_unavailable") {
+            return (_jsxs(BugReportProvider, { value: bugReport, children: [_jsx(LoginView, { onLoginSuccess: refetchAuth, reason: authState.phase === "unauthenticated"
+                            ? authState.reason
+                            : undefined }), _jsx(BugReportModal, {})] }));
+        }
+        // While loading the auth state we allow the main shell to continue
+        // rendering (avoids a flash of login screen on refresh when cookies are valid).
+    }
+    // Coordinator is at "ready" — the app shell renders. No legacy onboarding
+    // overlays — the coordinator handled all of that before reaching ready.
+    return (_jsxs(BugReportProvider, { value: bugReport, children: [_jsxs("div", { className: "flex flex-col h-screen w-screen overflow-hidden", children: [_jsx(ConnectionFailedBanner, {}), _jsx(SystemWarningBanner, {}), shellContent] }), resolvedOverlayApp && (_jsx(resolvedOverlayApp.Component, { exitToApps: () => {
+                    setState("activeOverlayApp", null);
+                    setTab("apps");
+                }, uiTheme: uiTheme === "dark" ? "dark" : "light", t: t })), activeGameViewerUrl && gameOverlayEnabled && tab !== "apps" && (_jsx(GameViewOverlay, {})), _jsx(ShellOverlays, { actionNotice: actionNotice }), _jsx(SaveCommandModal, { open: contextMenu.saveCommandModalOpen, text: contextMenu.saveCommandText, onSave: contextMenu.confirmSaveCommand, onClose: contextMenu.closeSaveCommandModal }), _jsx(CustomActionEditor, { open: customActionsEditorOpen, action: editingAction, onSave: handleEditorSave, onClose: () => {
+                    setCustomActionsEditorOpen(false);
+                    setEditingAction(null);
+                } }), _jsx(ConnectionLostOverlay, {}), desktopShuttingDown ? (_jsx("div", { className: "fixed inset-0 z-[1000] flex items-center justify-center bg-bg/80 backdrop-blur-sm", role: "status", "aria-live": "polite", children: _jsxs("div", { className: "rounded-2xl border border-border/60 bg-card/95 px-6 py-5 text-center shadow-2xl", children: [_jsx("div", { className: "text-base font-semibold text-txt", children: "Shutting down\u2026" }), _jsx("div", { className: "mt-1 text-sm text-muted", children: "Closing services and saving state." })] }) })) : null] }));
+}

package/packages/app-core/src/api/auth/audit.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Auth audit emitter.
+ *
+ * Every sensitive auth action ends up in two places:
+ *   1. `auth_audit_events` table via `AuthStore.appendAuditEvent`.
+ *   2. JSONL file at `<state>/auth/audit.log`, rotated at 10MB, so the
+ *      operator can read history even if pglite is wiped.
+ *
+ * Both writes happen synchronously from the caller's perspective. If the DB
+ * write throws the file write still happens (and vice versa) — the operator
+ * notices a divergence rather than losing the event entirely.
+ *
+ * Token-shaped values (20+ characters of `[A-Za-z0-9_-]`) are redacted in
+ * `metadata` before either write, so a misconfigured caller can't smuggle a
+ * bearer token into an audit row.
+ */
+import type { RuntimeEnvRecord } from "@elizaos/shared";
+import type { AuthStore } from "../../services/auth-store";
+export declare const AUDIT_LOG_FILENAME = "audit.log";
+export declare const AUDIT_LOG_ROTATE_FILENAME = "audit.log.1";
+export declare const AUDIT_LOG_MAX_BYTES: number;
+export declare const AUDIT_REDACTION_RE: RegExp;
+export interface AuditEventInput {
+    actorIdentityId: string | null;
+    ip: string | null;
+    userAgent: string | null;
+    action: string;
+    outcome: "success" | "failure";
+    metadata?: Record<string, string | number | boolean>;
+}
+export interface AuditEmitterOptions {
+    store: AuthStore;
+    env?: RuntimeEnvRecord;
+    now?: () => number;
+}
+/**
+ * Replace token-shaped runs in `metadata` with the literal `<redacted>` string.
+ *
+ * Only string values are scanned; numbers and booleans pass through unchanged.
+ */
+export declare function redactMetadata(metadata: Record<string, string | number | boolean>): Record<string, string | number | boolean>;
+export declare function resolveAuditLogPath(env?: RuntimeEnvRecord): string;
+export declare function resolveAuditLogRotatedPath(env?: RuntimeEnvRecord): string;
+/**
+ * Append an audit event to the database AND the JSONL log.
+ *
+ * Both writes are attempted. The first error is rethrown to the caller —
+ * an audit-write failure is a real problem and should surface, not be
+ * swallowed.
+ */
+export declare function appendAuditEvent(input: AuditEventInput, options: AuditEmitterOptions): Promise<void>;
+//# sourceMappingURL=audit.d.ts.map

package/packages/app-core/src/api/auth/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../../../../../../app-core/src/api/auth/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAG3D,eAAO,MAAM,kBAAkB,cAAc,CAAC;AAC9C,eAAO,MAAM,yBAAyB,gBAAgB,CAAC;AACvD,eAAO,MAAM,mBAAmB,QAAmB,CAAC;AACpD,eAAO,MAAM,kBAAkB,QAAuB,CAAC;AAEvD,MAAM,WAAW,eAAe;IAC9B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,SAAS,GAAG,SAAS,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,SAAS,CAAC;IACjB,GAAG,CAAC,EAAE,gBAAgB,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAOD;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,GAClD,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAU3C;AAED,wBAAgB,mBAAmB,CACjC,GAAG,GAAE,gBAA8B,GAClC,MAAM,CAER;AAED,wBAAgB,0BAA0B,CACxC,GAAG,GAAE,gBAA8B,GAClC,MAAM,CAMR;AAsCD;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,eAAe,EACtB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAwCf"}