@elizaos/ui 2.0.0-alpha.528 → 2.0.0-alpha.529

package/packages/agent/src/runtime/agent-wallets.js

@@ -0,0 +1,244 @@
+/**
+ * Per-agent wallet keys, stored in the Eliza vault.
+ *
+ * This module is the bridge between agent identity and the vault. Each
+ * agent gets its own EVM and Solana keypair, stored under
+ * `agent.<agentId>.wallet.<chain>` as a JSON record. Private keys are
+ * sensitive and AES-GCM encrypted at rest by the vault; the vault's
+ * master key lives in the OS keychain.
+ *
+ * The runtime-wide single wallet (process.env.EVM_PRIVATE_KEY etc.) is
+ * the *user* wallet, hydrated from the OS secure store via
+ * `hydrateWalletKeysFromNodePlatformSecureStore`. Per-agent wallets are
+ * stored *inside* the vault (encrypted file), enumerable and easy to
+ * surface in the UI alongside saved logins.
+ *
+ * This module does not generate or store keys on its own; callers
+ * supply a `Vault` instance. Agent-creation lifecycle code wires this
+ * up — see `runtime/eliza.ts`.
+ */
+import { removeEntryMeta, setEntryMeta } from "@elizaos/vault";
+import { deriveEvmAddress, generateWalletForChain } from "../api/wallet.js";
+const PREFIX = "agent";
+const SEGMENT = "wallet";
+function encodeAgentSegment(agentId) {
+    if (typeof agentId !== "string" || agentId.trim().length === 0) {
+        throw new TypeError("agent-wallets: agentId must be a non-empty string");
+    }
+    // encodeURIComponent leaves `.` alone, but our vault keys split on `.`
+    // — escape it explicitly so an agent ID like "alice.bob" doesn't bleed
+    // into the layout (`agent.alice.bob.wallet.evm` has five parts, not four).
+    return encodeURIComponent(agentId.trim()).replace(/\./g, "%2E");
+}
+function decodeAgentSegment(segment) {
+    return decodeURIComponent(segment);
+}
+function walletKey(agentId, chain) {
+    return `${PREFIX}.${encodeAgentSegment(agentId)}.${SEGMENT}.${chain}`;
+}
+function agentPrefix(agentId) {
+    return `${PREFIX}.${encodeAgentSegment(agentId)}.${SEGMENT}`;
+}
+function parseAgentWalletKey(key) {
+    // Layout: agent.<encodedId>.wallet.<chain>
+    const parts = key.split(".");
+    if (parts.length !== 4)
+        return null;
+    if (parts[0] !== PREFIX || parts[2] !== SEGMENT)
+        return null;
+    const chain = parts[3];
+    if (chain !== "evm" && chain !== "solana")
+        return null;
+    return { agentId: decodeAgentSegment(parts[1]), chain };
+}
+function parseStored(raw) {
+    const parsed = JSON.parse(raw);
+    if ((parsed.chain !== "evm" && parsed.chain !== "solana") ||
+        typeof parsed.address !== "string" ||
+        typeof parsed.privateKey !== "string" ||
+        typeof parsed.lastModified !== "number") {
+        throw new Error("agent-wallets: stored entry malformed (expected chain/address/privateKey/lastModified)");
+    }
+    return {
+        chain: parsed.chain,
+        address: parsed.address,
+        privateKey: parsed.privateKey,
+        lastModified: parsed.lastModified,
+    };
+}
+/**
+ * Derive the public address from a stored private key. EVM uses the
+ * existing helper; Solana stores the public key alongside the secret in
+ * `generateWalletForChain`, so the stored `address` is authoritative
+ * and we trust it for the read path.
+ */
+function deriveAddressFor(chain, privateKey) {
+    if (chain === "evm")
+        return deriveEvmAddress(privateKey);
+    // For Solana the keypair format already includes the public key; the
+    // caller is expected to have stored the public key as `address` at
+    // write time. Re-derivation would require @solana/web3.js, which we
+    // avoid pulling in here.
+    throw new Error("agent-wallets: deriveAddressFor only supports EVM; Solana addresses must be supplied at write time");
+}
+/**
+ * Read the public descriptor for an agent's wallet. Returns null when
+ * the agent has no wallet for that chain. Does NOT reveal the private
+ * key.
+ */
+export async function getAgentWalletDescriptor(vault, agentId, chain) {
+    const key = walletKey(agentId, chain);
+    if (!(await vault.has(key)))
+        return null;
+    const raw = await vault.get(key);
+    const stored = parseStored(raw);
+    return {
+        agentId,
+        chain,
+        address: stored.address,
+        lastModified: stored.lastModified,
+    };
+}
+/**
+ * Reveal the private key. Audit-logged via the vault. Use only for
+ * signing flows.
+ */
+export async function revealAgentWalletPrivateKey(vault, agentId, chain, caller) {
+    const key = walletKey(agentId, chain);
+    const raw = await vault.reveal(key, caller);
+    return parseStored(raw).privateKey;
+}
+/**
+ * Existence check. Does not reveal the key.
+ */
+export async function hasAgentWallet(vault, agentId, chain) {
+    return vault.has(walletKey(agentId, chain));
+}
+/**
+ * List every wallet descriptor for an agent (typically [evm, solana]).
+ */
+export async function listAgentWallets(vault, agentId) {
+    const keys = await vault.list(agentPrefix(agentId));
+    const out = [];
+    for (const key of keys) {
+        const parsed = parseAgentWalletKey(key);
+        if (!parsed)
+            continue;
+        const raw = await vault.get(key);
+        const stored = parseStored(raw);
+        out.push({
+            agentId: parsed.agentId,
+            chain: parsed.chain,
+            address: stored.address,
+            lastModified: stored.lastModified,
+        });
+    }
+    return out;
+}
+/**
+ * List every agent that has at least one wallet stored. Returns the
+ * agent IDs (decoded). Use for UI surfaces enumerating agent wallets.
+ */
+export async function listAgentsWithWallets(vault) {
+    const keys = await vault.list(PREFIX);
+    const agents = new Set();
+    for (const key of keys) {
+        const parsed = parseAgentWalletKey(key);
+        if (!parsed)
+            continue;
+        agents.add(parsed.agentId);
+    }
+    return [...agents];
+}
+/**
+ * Persist a wallet for an agent. Replaces any existing entry for that
+ * (agentId, chain). Stamps `lastModified`.
+ *
+ * Caller is responsible for supplying the matching address — for EVM
+ * this can be derived from the private key, for Solana the keypair
+ * generator returns it directly.
+ */
+export async function setAgentWallet(vault, agentId, chain, privateKey, address, caller) {
+    if (typeof privateKey !== "string" || privateKey.trim().length === 0) {
+        throw new TypeError("agent-wallets: privateKey required");
+    }
+    if (typeof address !== "string" || address.trim().length === 0) {
+        throw new TypeError("agent-wallets: address required");
+    }
+    const stored = {
+        chain,
+        address,
+        privateKey,
+        lastModified: Date.now(),
+    };
+    const key = walletKey(agentId, chain);
+    await vault.set(key, JSON.stringify(stored), {
+        sensitive: true,
+        ...(caller ? { caller } : {}),
+    });
+    // Surface per-agent wallets in Settings → Vault → Secrets under the
+    // "Wallet" group. Without explicit meta, the inventory categorizer
+    // falls back to "plugin" for the `agent.<id>.wallet.<chain>` shape.
+    await setEntryMeta(vault, key, {
+        category: "wallet",
+        label: `agent ${agentId} (${chain})`,
+    });
+    return {
+        agentId,
+        chain,
+        address: stored.address,
+        lastModified: stored.lastModified,
+    };
+}
+/**
+ * Generate a fresh wallet for an agent and persist it. Returns the
+ * public descriptor. Idempotent: callers should check `hasAgentWallet`
+ * first if they want to avoid replacing an existing wallet.
+ */
+export async function generateAgentWallet(vault, agentId, chain, caller) {
+    const generated = generateWalletForChain(chain);
+    return setAgentWallet(vault, agentId, chain, generated.privateKey, generated.address, caller);
+}
+/**
+ * Generate any missing wallets (EVM + Solana) for an agent. Existing
+ * wallets are left alone. Returns descriptors for every chain that now
+ * has a wallet (whether it was generated this call or was already
+ * present).
+ */
+export async function ensureAgentWallets(vault, agentId, caller) {
+    const chains = ["evm", "solana"];
+    const out = [];
+    for (const chain of chains) {
+        const existing = await getAgentWalletDescriptor(vault, agentId, chain);
+        if (existing) {
+            out.push(existing);
+            continue;
+        }
+        out.push(await generateAgentWallet(vault, agentId, chain, caller));
+    }
+    return out;
+}
+/**
+ * Remove an agent's wallet for one chain. Idempotent.
+ */
+export async function removeAgentWallet(vault, agentId, chain) {
+    const key = walletKey(agentId, chain);
+    await vault.remove(key);
+    await removeEntryMeta(vault, key);
+}
+/**
+ * Remove every wallet for an agent. Use during agent deletion.
+ */
+export async function removeAllAgentWallets(vault, agentId) {
+    const wallets = await listAgentWallets(vault, agentId);
+    for (const w of wallets) {
+        await removeAgentWallet(vault, agentId, w.chain);
+    }
+}
+// Internal helpers — exported for tests only.
+export const __test__ = {
+    walletKey,
+    agentPrefix,
+    parseAgentWalletKey,
+    deriveAddressFor,
+};

package/packages/agent/src/runtime/eliza-plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"eliza-plugin.d.ts","sourceRoot":"","sources":["../../../../../../agent/src/runtime/eliza-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAiB,MAAM,EAAgB,MAAM,eAAe,CAAC;AAkHzE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,MAAM,CAAC,EAAE,iBAAiB,GAAG,MAAM,CA0MpE"}
+{"version":3,"file":"eliza-plugin.d.ts","sourceRoot":"","sources":["../../../../../../agent/src/runtime/eliza-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAiB,MAAM,EAAgB,MAAM,eAAe,CAAC;AAmHzE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,MAAM,CAAC,EAAE,iBAAiB,GAAG,MAAM,CA2MpE"}

package/packages/agent/src/runtime/eliza-plugin.js

@@ -6,6 +6,7 @@
  * Memory search/get actions are superseded by plugin-clipboard.
  */
 import { AgentEventService } from "@elizaos/core";
+import { browserAutofillLoginAction } from "../actions/browser-autofill-login.js";
 import { browserSessionAction } from "../actions/browser-session.js";
 import { disconnectConnectorAction, listConnectorsAction, saveConnectorConfigAction, toggleConnectorAction, } from "../actions/connector-control.js";
 import { executeDatabaseQueryAction, getTableDataAction, listDatabaseTablesAction, searchVectorsAction, } from "../actions/database.js";
@@ -186,6 +187,7 @@ export function createElizaPlugin(config) {
             webSearchAction,
             extractPageAction,
             browserSessionAction,
+            browserAutofillLoginAction,
             launchpadLaunchAction,
             readChannelAction,
             searchConversationsAction,

package/packages/agent/src/runtime/eliza.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"eliza.d.ts","sourceRoot":"","sources":["../../../../../../agent/src/runtime/eliza.ts"],"names":[],"mappings":"AA8BA,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAO/B,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,EACvB,6BAA6B,EAC7B,uBAAuB,EACvB,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,yBAAyB,EACzB,iCAAiC,EACjC,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,+BAA+B,GAChC,MAAM,mBAAmB,CAAC;AAiB3B,OAAO,EACL,YAAY,EASZ,KAAK,QAAQ,EAIb,KAAK,MAAM,EAKZ,MAAM,eAAe,CAAC;AA2BvB,OAAO,EAEL,KAAK,WAAW,EAEjB,MAAM,qBAAqB,CAAC;AAuB7B,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAqQxE,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,WAAW,GACnB,IAAI,CA2IN;AAgPD;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,YAAY,GAAG,IAAI,GAAG,SAAS,EACxC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAgBhE;AAgMD,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAC;AA4B/C;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CA+BjE;AAunBD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAMzD;AA8KD,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAO/D;AA8MD,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CA6NxE;AA0YD;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,WAAW,EACnB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,GAAG,SAAS,CAKpB;AA0DD,8CAA8C;AAC9C,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;OAGG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,GAAE,uBAA4B,GACjC,OAAO,CAAC,YAAY,CAAC,CAYvB;AAcD,eAAO,MAAM,iBAAiB,GAAI,OAAO,QAAQ,SAiChD,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,IAAI,CAAC,EAAE,iBAAiB,GACvB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAq8CnC;AASD;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,iBAAiB,GACvB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CA8FnC"}
+{"version":3,"file":"eliza.d.ts","sourceRoot":"","sources":["../../../../../../agent/src/runtime/eliza.ts"],"names":[],"mappings":"AA+BA,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAO/B,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,EACvB,6BAA6B,EAC7B,uBAAuB,EACvB,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,yBAAyB,EACzB,iCAAiC,EACjC,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,+BAA+B,GAChC,MAAM,mBAAmB,CAAC;AAiB3B,OAAO,EACL,YAAY,EASZ,KAAK,QAAQ,EAIb,KAAK,MAAM,EAKZ,MAAM,eAAe,CAAC;AA2BvB,OAAO,EAEL,KAAK,WAAW,EAEjB,MAAM,qBAAqB,CAAC;AAuB7B,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAqQxE,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,WAAW,GACnB,IAAI,CA2IN;AAgPD;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,YAAY,GAAG,IAAI,GAAG,SAAS,EACxC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAgBhE;AAgMD,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAC;AA4B/C;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CA+BjE;AAunBD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAMzD;AA8KD,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAO/D;AA8MD,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CA6NxE;AA0YD;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,WAAW,EACnB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,GAAG,SAAS,CAKpB;AA0DD,8CAA8C;AAC9C,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;OAGG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,GAAE,uBAA4B,GACjC,OAAO,CAAC,YAAY,CAAC,CAYvB;AAcD,eAAO,MAAM,iBAAiB,GAAI,OAAO,QAAQ,SAiChD,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,IAAI,CAAC,EAAE,iBAAiB,GACvB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAwiDnC;AASD;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,iBAAiB,GACvB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CA8FnC"}

package/packages/agent/src/runtime/eliza.js

@@ -20,6 +20,7 @@ import { fileURLToPath, pathToFileURL } from "node:url";
 // Extracted modules — re-exported for backward compatibility
 // ---------------------------------------------------------------------------
 import { runFirstTimeSetup } from "./first-time-setup.js";
+import { resolveConfigEnvForProcess } from "./operations/vault-bridge.js";
 import { resolvePlugins } from "./plugin-resolver.js";
 import { CUSTOM_PLUGINS_DIRNAME as CUSTOM_RUNTIME_PLUGINS_DIRNAME, STATIC_ELIZA_PLUGINS, } from "./plugin-types.js";
 export { CHANNEL_PLUGIN_MAP, collectPluginNames, OPTIONAL_PLUGIN_MAP, PROVIDER_PLUGIN_MAP, } from "./plugin-collector.js";
@@ -2217,7 +2218,35 @@ export async function startEliza(opts) {
     applyX402ConfigToEnv(config);
     // 2d. Propagate database config into process.env for plugin-sql
     applyDatabaseConfigToEnv(config);
-    // 2e. Propagate arbitrary env vars from config.env into process.env.
+    // 2e. Boot-time vault hydration. Migrate plaintext sensitive values from
+    // milady.json + config.env + sensitive process.env keys into the OS-keychain
+    // vault, then resolve any vault://KEY sentinels in `config.env` so the
+    // legacy hydration loop below sees real values.
+    {
+        const { runVaultBootstrap } = await import("@elizaos/app-core/services/vault-bootstrap");
+        const { sharedVault } = await import("@elizaos/app-core/services/vault-mirror");
+        const bootResult = await runVaultBootstrap();
+        logger.info(`[vault-bootstrap] migrated=${bootResult.migrated} already-hydrated=${bootResult.alreadyHydrated} failed=${bootResult.failed.length}`);
+        const { resolved, missing } = await resolveConfigEnvForProcess(config.env, sharedVault());
+        if (missing.length > 0) {
+            logger.warn(`[vault-bootstrap] sentinel(s) without vault entry: ${missing.join(", ")}`);
+        }
+        if (config.env &&
+            typeof config.env === "object" &&
+            !Array.isArray(config.env)) {
+            for (const [key, value] of Object.entries(resolved)) {
+                config.env[key] = value;
+            }
+        }
+        const varsBag = config.env?.vars;
+        if (varsBag && typeof varsBag === "object" && !Array.isArray(varsBag)) {
+            const varsResult = await resolveConfigEnvForProcess(varsBag, sharedVault());
+            for (const [key, value] of Object.entries(varsResult.resolved)) {
+                varsBag[key] = value;
+            }
+        }
+    }
+    // 2f. Propagate arbitrary env vars from config.env into process.env.
     // Eliza stores user-defined env vars (plugin settings, API URLs, etc.)
     // in config.env; elizaOS plugins read them via process.env / getSetting.
     // Skip ELIZAOS_CLOUD_* — applyCloudConfigToEnv() owns those; otherwise a
@@ -2338,6 +2367,43 @@ export async function startEliza(opts) {
     });
     // 5. Create the Eliza bridge plugin (workspace context + session keys + compaction)
     const agentId = character.name?.toLowerCase().replace(/\s+/g, "-") ?? "main";
+    // 5-pre0. Apply per-agent vault profile overrides to process.env.
+    //
+    // Vault keys with multiple named profiles (work / personal / throwaway)
+    // resolve the active profile for THIS agent through the vault's
+    // routing layer, then write the resolved value into process.env so
+    // the synchronous runtime.getSetting fast path picks it up. Idempotent;
+    // safe to run multiple times. Opt-out via
+    // MILADY_DISABLE_VAULT_PROFILE_RESOLVER=1.
+    if (process.env.MILADY_DISABLE_VAULT_PROFILE_RESOLVER !== "1") {
+        try {
+            const { sharedVault } = await import("@elizaos/app-core/services/vault-mirror");
+            const { applyVaultProfilesForAgent } = await import("./vault-profile-resolver.js");
+            await applyVaultProfilesForAgent(sharedVault(), agentId);
+        }
+        catch (err) {
+            logger.warn(`[vault-profile-resolver] boot-time apply failed agent="${agentId}": ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    // 5-pre. Ensure each agent has its own EVM + Solana keypair in the vault.
+    // The runtime-wide EVM_PRIVATE_KEY / SOLANA_PRIVATE_KEY (process.env) is
+    // the *user* wallet; per-agent wallets live inside the encrypted vault and
+    // are surfaced separately in the in-app browser. Idempotent — existing
+    // wallets are preserved. Opt-out via MILADY_DISABLE_AGENT_WALLET_BOOTSTRAP=1.
+    if (process.env.MILADY_DISABLE_AGENT_WALLET_BOOTSTRAP !== "1") {
+        try {
+            const { sharedVault } = await import("@elizaos/app-core/services/vault-mirror");
+            const { ensureAgentWallets } = await import("./agent-wallets.js");
+            const descriptors = await ensureAgentWallets(sharedVault(), agentId, "agent-bootstrap");
+            const summary = descriptors
+                .map((d) => `${d.chain}:${d.address}`)
+                .join(" ");
+            logger.info(`[agent-wallets] agent="${agentId}" wallets ready (${summary})`);
+        }
+        catch (err) {
+            logger.warn(`[agent-wallets] failed to ensure wallets for agent="${agentId}": ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
     // 5a. If cloud is configured and no local GitHub token, try fetching from cloud
     await autoFetchCloudGithubToken(config.cloud?.agentId?.trim() || agentId);
     // 5b. Pump N8N_HOST + N8N_API_KEY into process.env for

package/packages/agent/src/runtime/operations/index.d.ts

@@ -13,5 +13,5 @@ export { DefaultRuntimeOperationManager, type DefaultRuntimeOperationManagerOpti
 export { createHotStrategy, type HotStrategyDeps } from "./reload-hot.js";
 export { FilesystemRuntimeOperationRepository, getDefaultRepository, } from "./repository.js";
 export * from "./types.js";
-export { _resetDefaultSecretsManagerForTesting, defaultSecretsManager, persistProviderApiKey, resolveProviderApiKey, vaultKeyForProviderApiKey, } from "./vault-bridge.js";
+export { _resetDefaultSecretsManagerForTesting, defaultSecretsManager, formatVaultRef, isVaultRef, parseVaultRef, persistProviderApiKey, resolveConfigEnvForProcess, resolveProviderApiKey, type VaultLike, vaultKeyForProviderApiKey, } from "./vault-bridge.js";
 //# sourceMappingURL=index.d.ts.map

package/packages/agent/src/runtime/operations/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../agent/src/runtime/operations/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,KAAK,eAAe,EACpB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,8BAA8B,EAC9B,KAAK,qCAAqC,EAC1C,KAAK,gBAAgB,GACtB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,iBAAiB,EAAE,KAAK,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EACL,oCAAoC,EACpC,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,OAAO,EACL,qCAAqC,EACrC,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../agent/src/runtime/operations/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,KAAK,eAAe,EACpB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,8BAA8B,EAC9B,KAAK,qCAAqC,EAC1C,KAAK,gBAAgB,GACtB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,iBAAiB,EAAE,KAAK,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EACL,oCAAoC,EACpC,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,OAAO,EACL,qCAAqC,EACrC,qBAAqB,EACrB,cAAc,EACd,UAAU,EACV,aAAa,EACb,qBAAqB,EACrB,0BAA0B,EAC1B,qBAAqB,EACrB,KAAK,SAAS,EACd,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC"}

package/packages/agent/src/runtime/operations/index.js

@@ -12,4 +12,4 @@ export { DefaultRuntimeOperationManager, } from "./manager.js";
 export { createHotStrategy } from "./reload-hot.js";
 export { FilesystemRuntimeOperationRepository, getDefaultRepository, } from "./repository.js";
 export * from "./types.js";
-export { _resetDefaultSecretsManagerForTesting, defaultSecretsManager, persistProviderApiKey, resolveProviderApiKey, vaultKeyForProviderApiKey, } from "./vault-bridge.js";
+export { _resetDefaultSecretsManagerForTesting, defaultSecretsManager, formatVaultRef, isVaultRef, parseVaultRef, persistProviderApiKey, resolveConfigEnvForProcess, resolveProviderApiKey, vaultKeyForProviderApiKey, } from "./vault-bridge.js";

package/packages/agent/src/runtime/operations/vault-bridge.d.ts

@@ -13,12 +13,33 @@
  * SecretsManager (tests), or call `defaultSecretsManager()` (production)
  * which constructs a fresh manager backed by the OS-keychain vault.
  */
-import { type SecretsManager } from "@elizaos/vault";
+import { type SecretsManager, type Vault } from "@elizaos/vault";
 import type { OperationErrorCode } from "./types.js";
 export declare class VaultResolveError extends Error {
     readonly code: OperationErrorCode;
     constructor(apiKeyRef: string, cause: unknown);
 }
+/** Format a stable vault key into the `vault://<key>` sentinel form. */
+export declare function formatVaultRef(key: string): string;
+/** Type guard: true when `value` is a `vault://<key>` sentinel string. */
+export declare function isVaultRef(value: unknown): value is string;
+/** Extract the underlying vault key from a sentinel; null if malformed. */
+export declare function parseVaultRef(value: string): string | null;
+/** Narrow surface of `Vault` used by the boot resolver — easier to stub. */
+export type VaultLike = Pick<Vault, "get" | "has">;
+/**
+ * Walk an env-shaped record and replace `vault://<key>` sentinels with the
+ * resolved vault values. Non-sentinel strings are passed through unchanged;
+ * non-string values are dropped (process.env only accepts strings).
+ *
+ * Returns `missing` for sentinel keys the vault does not contain — callers
+ * should warn but continue (the legacy hydrate-from-config-env path will run
+ * next and may still backfill from non-sentinel sources).
+ */
+export declare function resolveConfigEnvForProcess(envBag: Record<string, unknown> | undefined, vault: VaultLike): Promise<{
+    resolved: Record<string, string>;
+    missing: string[];
+}>;
 /** Stable vault key for a provider API key. */
 export declare function vaultKeyForProviderApiKey(normalizedProvider: string): string;
 /**

package/packages/agent/src/runtime/operations/vault-bridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vault-bridge.d.ts","sourceRoot":"","sources":["../../../../../../../agent/src/runtime/operations/vault-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAiB,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAA0B;gBAE/C,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO;CAQ9C;AAED,+CAA+C;AAC/C,wBAAgB,yBAAyB,CAAC,kBAAkB,EAAE,MAAM,GAAG,MAAM,CAO5E;AAED;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,OAAO,EAAE,cAAc,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,MAAM,CAAC,CAOlB;AAED;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,OAAO,EAAE,cAAc,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAO9B;AAID;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,cAAc,CAGtD;AAED,0CAA0C;AAC1C,wBAAgB,qCAAqC,IAAI,IAAI,CAE5D"}
+{"version":3,"file":"vault-bridge.d.ts","sourceRoot":"","sources":["../../../../../../../agent/src/runtime/operations/vault-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAiB,KAAK,cAAc,EAAE,KAAK,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAChF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAA0B;gBAE/C,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO;CAQ9C;AAKD,wEAAwE;AACxE,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAOlD;AAED,0EAA0E;AAC1E,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAM1D;AAED,2EAA2E;AAC3E,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG1D;AAED,4EAA4E;AAC5E,MAAM,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC;AAEnD;;;;;;;;GAQG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC3C,KAAK,EAAE,SAAS,GACf,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAqBlE;AAED,+CAA+C;AAC/C,wBAAgB,yBAAyB,CAAC,kBAAkB,EAAE,MAAM,GAAG,MAAM,CAO5E;AAED;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,OAAO,EAAE,cAAc,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,MAAM,CAAC,CAOlB;AAED;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,OAAO,EAAE,cAAc,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAO9B;AAID;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,cAAc,CAGtD;AAED,0CAA0C;AAC1C,wBAAgB,qCAAqC,IAAI,IAAI,CAE5D"}

package/packages/agent/src/runtime/operations/vault-bridge.js

@@ -21,6 +21,59 @@ export class VaultResolveError extends Error {
         this.name = "VaultResolveError";
     }
 }
+/** Sentinel prefix marking a config value that resolves through the vault. */
+const VAULT_REF_PREFIX = "vault://";
+/** Format a stable vault key into the `vault://<key>` sentinel form. */
+export function formatVaultRef(key) {
+    if (typeof key !== "string" || key.length === 0) {
+        throw new TypeError(`[runtime-ops:vault] formatVaultRef requires a non-empty key`);
+    }
+    return `${VAULT_REF_PREFIX}${key}`;
+}
+/** Type guard: true when `value` is a `vault://<key>` sentinel string. */
+export function isVaultRef(value) {
+    return (typeof value === "string" &&
+        value.startsWith(VAULT_REF_PREFIX) &&
+        value.length > VAULT_REF_PREFIX.length);
+}
+/** Extract the underlying vault key from a sentinel; null if malformed. */
+export function parseVaultRef(value) {
+    if (!isVaultRef(value))
+        return null;
+    return value.slice(VAULT_REF_PREFIX.length);
+}
+/**
+ * Walk an env-shaped record and replace `vault://<key>` sentinels with the
+ * resolved vault values. Non-sentinel strings are passed through unchanged;
+ * non-string values are dropped (process.env only accepts strings).
+ *
+ * Returns `missing` for sentinel keys the vault does not contain — callers
+ * should warn but continue (the legacy hydrate-from-config-env path will run
+ * next and may still backfill from non-sentinel sources).
+ */
+export async function resolveConfigEnvForProcess(envBag, vault) {
+    const resolved = {};
+    const missing = [];
+    if (!envBag)
+        return { resolved, missing };
+    for (const [envKey, value] of Object.entries(envBag)) {
+        if (typeof value !== "string")
+            continue;
+        if (!isVaultRef(value)) {
+            resolved[envKey] = value;
+            continue;
+        }
+        const vaultKey = parseVaultRef(value);
+        if (!vaultKey)
+            continue;
+        if (!(await vault.has(vaultKey))) {
+            missing.push(vaultKey);
+            continue;
+        }
+        resolved[envKey] = await vault.get(vaultKey);
+    }
+    return { resolved, missing };
+}
 /** Stable vault key for a provider API key. */
 export function vaultKeyForProviderApiKey(normalizedProvider) {
     if (!normalizedProvider || normalizedProvider.includes(".")) {

package/packages/agent/src/runtime/plugin-lifecycle.js

@@ -1,5 +1,5 @@
 import { AsyncLocalStorage } from "node:async_hooks";
-import { resolveActionContexts, resolveProviderContexts, } from "../../../typescript/src/utils/context-catalog.js";
+import { resolveActionContexts, resolveProviderContexts, } from "@elizaos/core";
 const pluginRegistrationContext = new AsyncLocalStorage();
 const pluginServiceStartContext = new AsyncLocalStorage();
 const serviceClassOwners = new WeakMap();

package/packages/agent/src/runtime/vault-profile-resolver.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Per-agent vault profile resolver.
+ *
+ * Walks every vault entry that has profile metadata, asks the vault's
+ * routing layer which profile applies for the current agent, and pumps
+ * the resolved value into `process.env[KEY]`. Runtime hot paths read
+ * env vars synchronously (`process.env.OPENROUTER_API_KEY`, etc.), so
+ * we resolve once at agent boot rather than instrumenting every call
+ * site.
+ *
+ * Scope: this is the minimum-viable wiring per the spec —
+ *   - Only `agent` scope rules apply; the runtime knows agentId.
+ *   - `app` and `skill` scope rules are persisted but not yet
+ *     resolved here (no call site has the context).
+ *
+ * Idempotent: re-running for the same agent overwrites with the same
+ * value. Opt-out via `MILADY_DISABLE_VAULT_PROFILE_RESOLVER=1`.
+ */
+import { type Vault } from "@elizaos/vault";
+export interface ResolveProfilesResult {
+    /** Number of keys whose env value was overridden. */
+    readonly overridden: number;
+    /** Keys that had profiles but every candidate profile was empty. */
+    readonly skipped: ReadonlyArray<string>;
+    /** Keys where resolution failed (vault read error). */
+    readonly failed: ReadonlyArray<string>;
+}
+/**
+ * For each inventory entry that has `hasProfiles === true`, resolve
+ * the active value for `agentId` and write it into `process.env[KEY]`.
+ *
+ * Keys without profiles are left alone — `process.env` already holds
+ * whatever the legacy hydration path put there (config.env, milady.json,
+ * direct env). This resolver is purely additive.
+ */
+export declare function applyVaultProfilesForAgent(vault: Vault, agentId: string): Promise<ResolveProfilesResult>;
+//# sourceMappingURL=vault-profile-resolver.d.ts.map

package/packages/agent/src/runtime/vault-profile-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-profile-resolver.d.ts","sourceRoot":"","sources":["../../../../../../agent/src/runtime/vault-profile-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAGL,KAAK,KAAK,EAEX,MAAM,gBAAgB,CAAC;AAExB,MAAM,WAAW,qBAAqB;IACpC,qDAAqD;IACrD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,oEAAoE;IACpE,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACxC,uDAAuD;IACvD,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACxC;AAED;;;;;;;GAOG;AACH,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,qBAAqB,CAAC,CAsDhC"}

package/packages/agent/src/runtime/vault-profile-resolver.js

@@ -0,0 +1,75 @@
+/**
+ * Per-agent vault profile resolver.
+ *
+ * Walks every vault entry that has profile metadata, asks the vault's
+ * routing layer which profile applies for the current agent, and pumps
+ * the resolved value into `process.env[KEY]`. Runtime hot paths read
+ * env vars synchronously (`process.env.OPENROUTER_API_KEY`, etc.), so
+ * we resolve once at agent boot rather than instrumenting every call
+ * site.
+ *
+ * Scope: this is the minimum-viable wiring per the spec —
+ *   - Only `agent` scope rules apply; the runtime knows agentId.
+ *   - `app` and `skill` scope rules are persisted but not yet
+ *     resolved here (no call site has the context).
+ *
+ * Idempotent: re-running for the same agent overwrites with the same
+ * value. Opt-out via `MILADY_DISABLE_VAULT_PROFILE_RESOLVER=1`.
+ */
+import { logger } from "@elizaos/core";
+import { listVaultInventory, resolveActiveValue, } from "@elizaos/vault";
+/**
+ * For each inventory entry that has `hasProfiles === true`, resolve
+ * the active value for `agentId` and write it into `process.env[KEY]`.
+ *
+ * Keys without profiles are left alone — `process.env` already holds
+ * whatever the legacy hydration path put there (config.env, milady.json,
+ * direct env). This resolver is purely additive.
+ */
+export async function applyVaultProfilesForAgent(vault, agentId) {
+    if (process.env.MILADY_DISABLE_VAULT_PROFILE_RESOLVER === "1") {
+        return { overridden: 0, skipped: [], failed: [] };
+    }
+    let entries;
+    try {
+        entries = await listVaultInventory(vault);
+    }
+    catch (err) {
+        logger.warn(`[vault-profile-resolver] inventory listing failed for agent="${agentId}": ${err instanceof Error ? err.message : String(err)}`);
+        return { overridden: 0, skipped: [], failed: [] };
+    }
+    let overridden = 0;
+    const skipped = [];
+    const failed = [];
+    for (const entry of entries) {
+        if (!entry.hasProfiles)
+            continue;
+        if (entry.kind === "reference") {
+            // Reference entries resolve through their backing password
+            // manager, not through profiles. Skip — but only after auditing
+            // we'd actually have a profile blob to read.
+            continue;
+        }
+        try {
+            const value = await resolveActiveValue(vault, entry.key, { agentId });
+            if (typeof value !== "string" || value.length === 0) {
+                skipped.push(entry.key);
+                continue;
+            }
+            process.env[entry.key] = value;
+            overridden += 1;
+        }
+        catch (err) {
+            // resolveActiveValue throws when no profile and no bare value
+            // resolves. Don't try to fall back to legacy env — the user
+            // explicitly declared profiles for this key, so an unresolvable
+            // active profile is a real failure they should see.
+            failed.push(entry.key);
+            logger.warn(`[vault-profile-resolver] failed to resolve agent="${agentId}" key="${entry.key}": ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    if (overridden > 0 || failed.length > 0) {
+        logger.info(`[vault-profile-resolver] agent="${agentId}" overridden=${overridden} skipped=${skipped.length} failed=${failed.length}`);
+    }
+    return { overridden, skipped: Object.freeze(skipped), failed: Object.freeze(failed) };
+}

package/packages/app-core/src/api/client-agent.d.ts

@@ -94,6 +94,7 @@ declare module "./client-base" {
         }>;
         getAuthStatus(): Promise<{
             required: boolean;
+            authenticated?: boolean;
             loginRequired?: boolean;
             bootstrapRequired?: boolean;
             localAccess?: boolean;