@elizaos/ui 2.0.3-beta.2 → 2.0.3-beta.3

package/state/springboard-layout.js

@@ -0,0 +1,180 @@
+/**
+ * Springboard layout — persisted icon arrangement for the iOS-like launcher.
+ *
+ * The catalog renders as a paged home-screen ("springboard"): a fixed dock of
+ * favorites plus one or more swipeable pages of view icons. This module owns the
+ * pure, persisted layout model (which icon sits on which page, in what order,
+ * and which icons are favorited into the dock). The rendering/gesture layer
+ * consumes these helpers; all reconciliation logic lives here so it is unit
+ * testable without a DOM.
+ *
+ * Mirrors the persistence style of `view-recents.ts`.
+ */
+export const SPRINGBOARD_STORAGE_KEY = "elizaos.views.springboard";
+/**
+ * Icons per springboard page (4 columns × 5 rows, iOS-like). Now that the top
+ * double safe-area gap is gone and the page indicator clears the chat composer,
+ * a full 5-row page fits a normal phone; smaller phones scroll the grid. The
+ * grid is `overflow-y-auto`, so overflow scrolls rather than clipping.
+ */
+export const SPRINGBOARD_PAGE_SIZE = 20;
+/** Maximum icons pinned to the dock (favorites). */
+export const SPRINGBOARD_DOCK_LIMIT = 4;
+/**
+ * Default favorites dock for a fresh install (#9144). Capped at
+ * SPRINGBOARD_DOCK_LIMIT. These are stable built-in `system` view ids; any that
+ * are not actually available in the live catalog are dropped during
+ * `reconcileLayout` (favorites ∩ available), so an unknown id never leaves a
+ * hole. Order matches the dock left-to-right. Chat/Home and Springboard are one
+ * combined surface now, so the dock carries destinations from inside the
+ * launcher rather than self-links back to the launcher:
+ *   - settings — universal, stable system view
+ *   - activity — pairs with the default activity surface when present
+ *   - files    — durable user content
+ *   - tasks    — work queue / task surface
+ */
+export const DEFAULT_SPRINGBOARD_FAVORITES = [
+    "settings",
+    "activity",
+    "files",
+    "tasks",
+];
+export function emptyLayout() {
+    return { favorites: [], pages: [] };
+}
+/**
+ * First-run layout — seeds the default favorites dock (#9144) so the dock is
+ * never empty on a fresh install. Unknown default ids are dropped during
+ * `reconcileLayout`. Returns a fresh array so callers can't mutate the constant.
+ */
+export function defaultLayout() {
+    return { favorites: [...DEFAULT_SPRINGBOARD_FAVORITES], pages: [] };
+}
+function isStringArray(value) {
+    return (Array.isArray(value) && value.every((item) => typeof item === "string"));
+}
+export function readSpringboardLayout() {
+    if (typeof window === "undefined")
+        return emptyLayout();
+    try {
+        const raw = window.localStorage.getItem(SPRINGBOARD_STORAGE_KEY);
+        // Genuine first run (no stored key) seeds the default dock; a stored
+        // `favorites: []` (user cleared the dock) is respected below and NOT
+        // re-seeded.
+        if (!raw)
+            return defaultLayout();
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== "object")
+            return emptyLayout();
+        const record = parsed;
+        const favorites = isStringArray(record.favorites) ? record.favorites : [];
+        const pages = Array.isArray(record.pages) && record.pages.every(isStringArray)
+            ? record.pages
+            : [];
+        const manual = record.manual === true ? true : undefined;
+        return { favorites, pages, manual };
+    }
+    catch {
+        return emptyLayout();
+    }
+}
+export function writeSpringboardLayout(layout) {
+    if (typeof window === "undefined")
+        return;
+    try {
+        window.localStorage.setItem(SPRINGBOARD_STORAGE_KEY, JSON.stringify(layout));
+    }
+    catch {
+        /* localStorage unavailable */
+    }
+}
+/** All view ids currently placed somewhere in the layout (dock + pages). */
+export function placedIds(layout) {
+    const ids = new Set(layout.favorites);
+    for (const page of layout.pages) {
+        for (const id of page)
+            ids.add(id);
+    }
+    return ids;
+}
+function chunk(ids, size) {
+    if (ids.length === 0)
+        return [];
+    const pages = [];
+    for (let i = 0; i < ids.length; i += size) {
+        pages.push(ids.slice(i, i + size));
+    }
+    return pages;
+}
+/**
+ * Reconcile a stored layout against the live set of available view ids:
+ * - drop ids that no longer exist (uninstalled / hidden views),
+ * - append newly-available ids (preserving their catalog order) to the end,
+ * - keep dock favorites out of the page grid (the dock is a separate surface),
+ * - repack pages to SPRINGBOARD_PAGE_SIZE so removals never leave holes.
+ *
+ * Deterministic and pure — safe to run on every render.
+ */
+export function reconcileLayout(layout, availableIds, pageSize = SPRINGBOARD_PAGE_SIZE) {
+    const available = new Set(availableIds);
+    // Dedupe defensively: toggleFavorite never adds a duplicate, but a corrupted
+    // or hand-edited localStorage payload could, and a duplicated favorite would
+    // otherwise render twice in the dock.
+    const favorites = [...new Set(layout.favorites)]
+        .filter((id) => available.has(id))
+        .slice(0, SPRINGBOARD_DOCK_LIMIT);
+    const favoriteSet = new Set(favorites);
+    const seen = new Set(favorites);
+    const ordered = [];
+    // A manually-arranged layout preserves the user's page ordering first; an
+    // automatic one follows the incoming catalog order so sort/install reflows.
+    if (layout.manual) {
+        for (const page of layout.pages) {
+            for (const id of page) {
+                if (available.has(id) && !favoriteSet.has(id) && !seen.has(id)) {
+                    seen.add(id);
+                    ordered.push(id);
+                }
+            }
+        }
+    }
+    // Append remaining available ids in catalog order (all of them when auto).
+    for (const id of availableIds) {
+        if (!seen.has(id)) {
+            seen.add(id);
+            ordered.push(id);
+        }
+    }
+    return { favorites, pages: chunk(ordered, pageSize), manual: layout.manual };
+}
+/** Toggle an id in/out of the dock. Adding evicts the oldest when full. */
+export function toggleFavorite(layout, id) {
+    if (layout.favorites.includes(id)) {
+        return { ...layout, favorites: layout.favorites.filter((f) => f !== id) };
+    }
+    const favorites = [...layout.favorites, id].slice(-SPRINGBOARD_DOCK_LIMIT);
+    return { ...layout, favorites };
+}
+/**
+ * Move an icon to a target page at a target index, repacking the flattened
+ * page order so the move never leaves holes or duplicates. The id is removed
+ * from the dock if it was a favorite (an icon lives in exactly one surface).
+ *
+ * NOTE: cross-page moves (`targetPage > 0`) are fully supported by this model,
+ * but the Springboard's current drag gesture is `axis="y"` within the active
+ * page only — so cross-page reorder is exercised by tests and available to
+ * callers, not by a user gesture today. Do not build cross-page drag UI unless
+ * product asks; this capability exists so paging stays correct under repack.
+ */
+export function moveIcon(layout, id, targetPage, targetIndex, pageSize = SPRINGBOARD_PAGE_SIZE) {
+    const favorites = layout.favorites.filter((f) => f !== id);
+    const pages = layout.pages.map((page) => page.filter((p) => p !== id));
+    while (pages.length <= targetPage)
+        pages.push([]);
+    const page = pages[targetPage];
+    const index = Math.max(0, Math.min(targetIndex, page.length));
+    page.splice(index, 0, id);
+    const flat = pages.flat();
+    // A drag is an explicit manual arrangement — lock the order from now on.
+    return { favorites, pages: chunk(flat, pageSize), manual: true };
+}

package/state/startup-coordinator.d.ts

@@ -13,7 +13,7 @@
  * - Platform policy is injected, not hardcoded
  * - Same machine for desktop, web, and mobile — only policy differs
  */
-import type { StartupErrorReason } from "./types";
+import type { StartupErrorReason } from "./types.js";
 export type RuntimeTarget = "embedded-local" | "remote-backend" | "cloud-managed";
 export interface PlatformPolicy {
     /** Can this platform run a local embedded agent? */

package/state/startup-phase-hydrate.d.ts

@@ -4,11 +4,11 @@
  * Side-effect logic for the "hydrating" startup phase and the persistent
  * "ready" phase (WebSocket bindings, nav listener).
  */
-import type { AgentStatus, WalletAddresses } from "../api";
-import { type CodingAgentSession, type Conversation, type ConversationMessage, type StreamEventEnvelope } from "../api";
-import { type Tab } from "../navigation";
-import type { StartupEvent } from "./startup-coordinator";
-import type { FirstRunMode } from "./types";
+import type { AgentStatus, WalletAddresses } from "../api/index.js";
+import { type CodingAgentSession, type Conversation, type ConversationMessage, type StreamEventEnvelope } from "../api/index.js";
+import { type Tab } from "../navigation/index.js";
+import type { StartupEvent } from "./startup-coordinator.js";
+import type { FirstRunMode } from "./types.js";
 export interface HydratingDeps {
     setStartupError: (v: null) => void;
     setFirstRunLoading: (v: boolean) => void;

package/state/startup-phase-hydrate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"startup-phase-hydrate.d.ts","sourceRoot":"","sources":["../../../../../src/state/startup-phase-hydrate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAC3D,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,mBAAmB,EAExB,KAAK,mBAAmB,EACzB,MAAM,QAAQ,CAAC;AAQhB,OAAO,EAKL,KAAK,GAAG,EAET,MAAM,eAAe,CAAC;AAWvB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE5C,MAAM,WAAW,aAAa;IAC5B,eAAe,EAAE,CAAC,CAAC,EAAE,IAAI,KAAK,IAAI,CAAC;IACnC,kBAAkB,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IACzC,+BAA+B,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC9D,6BAA6B,EAAE,KAAK,CAAC,SAAS,CAC5C,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAClC,CAAC;IACF,aAAa,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,UAAU,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,aAAa,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,gBAAgB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,aAAa,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,gBAAgB,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,oBAAoB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,gBAAgB,EAAE,MAAM,IAAI,CAAC;IAC7B,mBAAmB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,mBAAmB,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,eAAe,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC,sBAAsB,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5C,kBAAkB,EAAE,CAAC,CAAC,EAAE,eAAe,KAAK,IAAI,CAAC;IACjD,MAAM,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC;IACzB,SAAS,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC;IAC5B,8BAA8B,EAAE,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAChE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAClD,YAAY,EAAE,YAAY,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,uBAAuB,EAAE,CAAC,CAAC,EAAE,WAAW,KAAK,IAAI,CAAC;IAClD,iBAAiB,EAAE,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,KAAK,IAAI,CAAC;IACvE,wBAAwB,EAAE,CACxB,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,MAAM,EAAE,CAAC,KACzC,IAAI,CAAC;IACV,iBAAiB,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,MAAM,EAAE,CAAC,KAAK,IAAI,CAAC;IAC1E,iBAAiB,EAAE,MAAM,IAAI,CAAC;IAC9B,cAAc,EAAE,CACd,CAAC,EACG,kBAAkB,EAAE,GACpB,CAAC,CAAC,IAAI,EAAE,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,CAAC,KACvD,IAAI,CAAC;IACV,qEAAqE;IACrE,iBAAiB,EAAE,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACnD,4EAA4E;IAC5E,eAAe,EAAE,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC;IAC5B,uBAAuB,EAAE,CACvB,CAAC,EACG,mBAAmB,EAAE,GACrB,CAAC,CAAC,IAAI,EAAE,mBAAmB,EAAE,KAAK,mBAAmB,EAAE,CAAC,KACzD,IAAI,CAAC;IACV,sBAAsB,EAAE,CACtB,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC,KAClD,IAAI,CAAC;IACV,gBAAgB,EAAE,CAChB,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,CAAC,KAC3D,IAAI,CAAC;IACV,qBAAqB,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,IAAI,CAAC;IAC5D,oBAAoB,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,IAAI,CAAC;IAC3D,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,gBAAgB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,gBAAgB,EAAE,MAAM,IAAI,CAAC;IAC7B,uBAAuB,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACxD,sBAAsB,EAAE,KAAK,CAAC,gBAAgB,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC9D,wBAAwB,EAAE,KAAK,CAAC,gBAAgB,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CACjE;AAyBD;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,aAAa,EACnB,QAAQ,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,EACvC,UAAU,EAAE;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,GAC/B,OAAO,CAAC,IAAI,CAAC,CAsJf;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,KAAK,CAAC,gBAAgB,CAAC,cAAc,GAAG,SAAS,CAAC,GAC1D,MAAM,IAAI,CA+dZ"}
+{"version":3,"file":"startup-phase-hydrate.d.ts","sourceRoot":"","sources":["../../../../../src/state/startup-phase-hydrate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAC3D,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,mBAAmB,EAExB,KAAK,mBAAmB,EACzB,MAAM,QAAQ,CAAC;AAQhB,OAAO,EAKL,KAAK,GAAG,EAET,MAAM,eAAe,CAAC;AAWvB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE5C,MAAM,WAAW,aAAa;IAC5B,eAAe,EAAE,CAAC,CAAC,EAAE,IAAI,KAAK,IAAI,CAAC;IACnC,kBAAkB,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IACzC,+BAA+B,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC9D,6BAA6B,EAAE,KAAK,CAAC,SAAS,CAC5C,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAClC,CAAC;IACF,aAAa,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,UAAU,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,aAAa,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,gBAAgB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,aAAa,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,gBAAgB,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,oBAAoB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,gBAAgB,EAAE,MAAM,IAAI,CAAC;IAC7B,mBAAmB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,mBAAmB,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,eAAe,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC,sBAAsB,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5C,kBAAkB,EAAE,CAAC,CAAC,EAAE,eAAe,KAAK,IAAI,CAAC;IACjD,MAAM,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC;IACzB,SAAS,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC;IAC5B,8BAA8B,EAAE,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAChE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAClD,YAAY,EAAE,YAAY,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,uBAAuB,EAAE,CAAC,CAAC,EAAE,WAAW,KAAK,IAAI,CAAC;IAClD,iBAAiB,EAAE,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,KAAK,IAAI,CAAC;IACvE,wBAAwB,EAAE,CACxB,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,MAAM,EAAE,CAAC,KACzC,IAAI,CAAC;IACV,iBAAiB,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,MAAM,EAAE,CAAC,KAAK,IAAI,CAAC;IAC1E,iBAAiB,EAAE,MAAM,IAAI,CAAC;IAC9B,cAAc,EAAE,CACd,CAAC,EACG,kBAAkB,EAAE,GACpB,CAAC,CAAC,IAAI,EAAE,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,CAAC,KACvD,IAAI,CAAC;IACV,qEAAqE;IACrE,iBAAiB,EAAE,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACnD,4EAA4E;IAC5E,eAAe,EAAE,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC;IAC5B,uBAAuB,EAAE,CACvB,CAAC,EACG,mBAAmB,EAAE,GACrB,CAAC,CAAC,IAAI,EAAE,mBAAmB,EAAE,KAAK,mBAAmB,EAAE,CAAC,KACzD,IAAI,CAAC;IACV,sBAAsB,EAAE,CACtB,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC,KAClD,IAAI,CAAC;IACV,gBAAgB,EAAE,CAChB,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,CAAC,KAC3D,IAAI,CAAC;IACV,qBAAqB,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,IAAI,CAAC;IAC5D,oBAAoB,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,IAAI,CAAC;IAC3D,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,gBAAgB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,gBAAgB,EAAE,MAAM,IAAI,CAAC;IAC7B,uBAAuB,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACxD,sBAAsB,EAAE,KAAK,CAAC,gBAAgB,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC9D,wBAAwB,EAAE,KAAK,CAAC,gBAAgB,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CACjE;AAyBD;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,aAAa,EACnB,QAAQ,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,EACvC,UAAU,EAAE;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,GAC/B,OAAO,CAAC,IAAI,CAAC,CAsJf;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,KAAK,CAAC,gBAAgB,CAAC,cAAc,GAAG,SAAS,CAAC,GAC1D,MAAM,IAAI,CAueZ"}

package/state/startup-phase-hydrate.js

@@ -226,6 +226,12 @@ export function bindReadyPhase(depsRef) {
     // the catch-all that hydrates once the agent is running if the live status
     // event was missed (e.g. status delivered via a non-WS source).
     ptyPollInterval = setInterval(() => {
+        // Skip the 5s network poll while the tab is hidden — the WS status events
+        // still hydrate on change; this interval is only the missed-event catch-all.
+        if (typeof document !== "undefined" &&
+            document.visibilityState !== "visible") {
+            return;
+        }
         const running = depsRef.current?.agentRunningRef.current ?? false;
         hydrateOnRunning(running);
         if (running && depsRef.current?.hasPtySessionsRef.current)

package/state/startup-phase-poll.d.ts

@@ -5,14 +5,14 @@
  * Polls the backend until it responds, then dispatches BACKEND_REACHED
  * or an appropriate error/auth event.
  */
-import type { FirstRunOptions } from "../api";
-import { scanProviderCredentials } from "../bridge";
-import type { FirstRunRuntimeTarget } from "../first-run/runtime-target";
-import type { UiLanguage } from "../i18n";
-import { type StartupErrorState } from "./internal";
-import type { PlatformPolicy, StartupEvent } from "./startup-coordinator";
-import type { RestoringSessionCtx } from "./startup-phase-restore";
-import type { SetupStep } from "./types";
+import type { FirstRunOptions } from "../api/index.js";
+import { scanProviderCredentials } from "../bridge/index.js";
+import type { FirstRunRuntimeTarget } from "../first-run/runtime-target.js";
+import type { UiLanguage } from "../i18n/index.js";
+import { type StartupErrorState } from "./internal.js";
+import type { PlatformPolicy, StartupEvent } from "./startup-coordinator.js";
+import type { RestoringSessionCtx } from "./startup-phase-restore.js";
+import type { SetupStep } from "./types.js";
 /**
  * Decide whether a connection-level startup failure against the persisted
  * active server should be abandoned in favour of the local same-origin backend

package/state/startup-phase-restore.d.ts

@@ -4,12 +4,12 @@
  * Side-effect logic for the "restoring-session" startup phase.
  * Probes for an existing install/connection and dispatches the result.
  */
-import { client, type FirstRunOptions } from "../api";
-import { scanProviderCredentials } from "../bridge";
-import { readPersistedMobileRuntimeMode } from "../first-run/mobile-runtime-mode";
-import type { UiLanguage } from "../i18n";
-import { loadPersistedActiveServer, type PersistedActiveServer } from "./persistence";
-import type { StartupEvent } from "./startup-coordinator";
+import { client, type FirstRunOptions } from "../api/index.js";
+import { scanProviderCredentials } from "../bridge/index.js";
+import { readPersistedMobileRuntimeMode } from "../first-run/mobile-runtime-mode.js";
+import type { UiLanguage } from "../i18n/index.js";
+import { loadPersistedActiveServer, type PersistedActiveServer } from "./persistence.js";
+import type { StartupEvent } from "./startup-coordinator.js";
 export interface RestoringSessionDeps {
     setStartupError: (v: null) => void;
     setAuthRequired: (v: boolean) => void;
@@ -29,6 +29,22 @@ export interface RestoringSessionCtx {
     shouldPreserveCompletedFirstRun: boolean;
     hadPriorFirstRun: boolean;
 }
+/**
+ * Whether a persisted `remote` apiBase is safe to dial at restore. The persisted
+ * active-server record lives in localStorage (mirrored to native Preferences),
+ * so an XSS or a malicious same-origin plugin view could have written it. Only
+ * dial — and attach the bearer token to — a trusted host; otherwise the record
+ * is dropped and the app falls back to first-run (fail closed) rather than
+ * silently connecting to an attacker-chosen server at boot.
+ *
+ * Trust mirrors the app's full policy (createUrlTrustPolicy in
+ * `packages/app/src/url-trust-policy.ts`, which `@elizaos/ui` cannot import):
+ * loopback, the current page origin, and private/LAN/CGNAT/link-local hosts —
+ * never an arbitrary public host. Keep the private-host set in sync with
+ * `isTrustedPrivateHttpHost` there. `local`/`cloud` records use their own
+ * validated branches in {@link applyRestoredConnection} and are not gated here.
+ */
+export declare function isTrustedRestoreApiBaseUrl(apiBase: string | undefined): boolean;
 type MobileNativePlatform = "android" | "ios";
 export declare function reconcileMobileRestoredActiveServer(args: {
     server: PersistedActiveServer;

package/state/startup-phase-restore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"startup-phase-restore.d.ts","sourceRoot":"","sources":["../../../../../src/state/startup-phase-restore.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,EAAE,MAAM,EAAE,KAAK,eAAe,EAAE,MAAM,QAAQ,CAAC;AACtD,OAAO,EAIL,uBAAuB,EACxB,MAAM,WAAW,CAAC;AACnB,OAAO,EAQL,8BAA8B,EAC/B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAU1C,OAAO,EAEL,yBAAyB,EAEzB,KAAK,qBAAqB,EAG3B,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AA+E1D,MAAM,WAAW,oBAAoB;IACnC,eAAe,EAAE,CAAC,CAAC,EAAE,IAAI,KAAK,IAAI,CAAC;IACnC,eAAe,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IACtC,YAAY,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IACnC,kCAAkC,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IACzD,kBAAkB,EAAE,CAAC,CAAC,EAAE,eAAe,KAAK,IAAI,CAAC;IACjD,mBAAmB,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IAC1C,kBAAkB,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IACzC,sBAAsB,EAAE,CACtB,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC,KAC1D,IAAI,CAAC;IACV,sBAAsB,EAAE,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACxD,8BAA8B,EAAE,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAChE,UAAU,EAAE,UAAU,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,qBAAqB,EAAE,UAAU,CAAC,OAAO,yBAAyB,CAAC,CAAC;IACpE,oBAAoB,EAAE,qBAAqB,CAAC;IAC5C,+BAA+B,EAAE,OAAO,CAAC;IACzC,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAqCD,KAAK,oBAAoB,GAAG,SAAS,GAAG,KAAK,CAAC;AAc9C,wBAAgB,mCAAmC,CAAC,IAAI,EAAE;IACxD,MAAM,EAAE,qBAAqB,CAAC;IAC9B,iBAAiB,EAAE,UAAU,CAAC,OAAO,8BAA8B,CAAC,CAAC;IACrE,QAAQ,EAAE,oBAAoB,CAAC;CAChC,GAAG,qBAAqB,GAAG,IAAI,GAAG,SAAS,CAuB3C;AAwCD,wBAAsB,uBAAuB,CAAC,IAAI,EAAE;IAClD,oBAAoB,EAAE,qBAAqB,CAAC;IAC5C,SAAS,EAAE,IAAI,CAAC,OAAO,MAAM,EAAE,YAAY,GAAG,UAAU,CAAC,CAAC;IAC1D,iBAAiB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACzC,iBAmCA;AAiBD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,MAAM,EAAE,qBAAqB,CAAC;IAC9B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;CACpB,GAAG,OAAO,CAUV;AAcD;;;;;;;;;GASG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,oBAAoB,EAC1B,QAAQ,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,EACvC,MAAM,EAAE,KAAK,CAAC,gBAAgB,CAAC,mBAAmB,GAAG,IAAI,CAAC,EAC1D,SAAS,EAAE;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,GAC9B,OAAO,CAAC,IAAI,CAAC,CAqLf"}
+{"version":3,"file":"startup-phase-restore.d.ts","sourceRoot":"","sources":["../../../../../src/state/startup-phase-restore.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,EAAE,MAAM,EAAE,KAAK,eAAe,EAAE,MAAM,QAAQ,CAAC;AACtD,OAAO,EAIL,uBAAuB,EACxB,MAAM,WAAW,CAAC;AACnB,OAAO,EAQL,8BAA8B,EAC/B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAe1C,OAAO,EAEL,yBAAyB,EAEzB,KAAK,qBAAqB,EAG3B,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AA+E1D,MAAM,WAAW,oBAAoB;IACnC,eAAe,EAAE,CAAC,CAAC,EAAE,IAAI,KAAK,IAAI,CAAC;IACnC,eAAe,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IACtC,YAAY,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IACnC,kCAAkC,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IACzD,kBAAkB,EAAE,CAAC,CAAC,EAAE,eAAe,KAAK,IAAI,CAAC;IACjD,mBAAmB,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IAC1C,kBAAkB,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IACzC,sBAAsB,EAAE,CACtB,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC,KAC1D,IAAI,CAAC;IACV,sBAAsB,EAAE,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACxD,8BAA8B,EAAE,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAChE,UAAU,EAAE,UAAU,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,qBAAqB,EAAE,UAAU,CAAC,OAAO,yBAAyB,CAAC,CAAC;IACpE,oBAAoB,EAAE,qBAAqB,CAAC;IAC5C,+BAA+B,EAAE,OAAO,CAAC;IACzC,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAeD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,OAAO,CA0CT;AAwBD,KAAK,oBAAoB,GAAG,SAAS,GAAG,KAAK,CAAC;AAc9C,wBAAgB,mCAAmC,CAAC,IAAI,EAAE;IACxD,MAAM,EAAE,qBAAqB,CAAC;IAC9B,iBAAiB,EAAE,UAAU,CAAC,OAAO,8BAA8B,CAAC,CAAC;IACrE,QAAQ,EAAE,oBAAoB,CAAC;CAChC,GAAG,qBAAqB,GAAG,IAAI,GAAG,SAAS,CAuB3C;AAwCD,wBAAsB,uBAAuB,CAAC,IAAI,EAAE;IAClD,oBAAoB,EAAE,qBAAqB,CAAC;IAC5C,SAAS,EAAE,IAAI,CAAC,OAAO,MAAM,EAAE,YAAY,GAAG,UAAU,CAAC,CAAC;IAC1D,iBAAiB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACzC,iBA6CA;AAiBD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,MAAM,EAAE,qBAAqB,CAAC;IAC9B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;CACpB,GAAG,OAAO,CA8BV;AAcD;;;;;;;;;GASG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,oBAAoB,EAC1B,QAAQ,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,EACvC,MAAM,EAAE,KAAK,CAAC,gBAAgB,CAAC,mBAAmB,GAAG,IAAI,CAAC,EAC1D,SAAS,EAAE;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,GAC9B,OAAO,CAAC,IAAI,CAAC,CA6Lf"}

package/state/startup-phase-restore.js

@@ -10,7 +10,7 @@ import { readStoredStewardToken } from "@elizaos/shared/steward-session-client";
 import { client } from "../api/index.js";
 import { getBackendStartupTimeoutMs, invokeDesktopBridgeRequestWithTimeout, isElectrobunRuntime, scanProviderCredentials, } from "../bridge/index.js";
 import { ANDROID_LOCAL_AGENT_IPC_BASE, ANDROID_LOCAL_AGENT_LABEL, ANDROID_LOCAL_AGENT_SERVER_ID, IOS_LOCAL_AGENT_IPC_BASE, isMobileLocalAgentUrl, MOBILE_LOCAL_AGENT_LABEL, MOBILE_LOCAL_AGENT_SERVER_ID, readPersistedMobileRuntimeMode, } from "../first-run/mobile-runtime-mode.js";
-import { isAndroid, isForceFreshFirstRunEnabled, isIOS } from "../platform/index.js";
+import { clearForceFreshFirstRun, isAndroid, isForceFreshFirstRunEnabled, isIOS, } from "../platform/index.js";
 import { buildCloudSharedAgentApiBase, isElizaCloudControlPlaneAgentlessBase, normalizeDirectCloudSharedAgentApiBase, } from "../utils/cloud-agent-base.js";
 import { getElizaApiBase } from "../utils/eliza-globals.js";
 import { detectExistingFirstRunConnection } from "./first-run-bootstrap.js";
@@ -97,6 +97,61 @@ function isLoopbackHostname(hostname) {
     const h = hostname.toLowerCase();
     return h === "127.0.0.1" || h === "localhost" || h === "::1";
 }
+/**
+ * Whether a persisted `remote` apiBase is safe to dial at restore. The persisted
+ * active-server record lives in localStorage (mirrored to native Preferences),
+ * so an XSS or a malicious same-origin plugin view could have written it. Only
+ * dial — and attach the bearer token to — a trusted host; otherwise the record
+ * is dropped and the app falls back to first-run (fail closed) rather than
+ * silently connecting to an attacker-chosen server at boot.
+ *
+ * Trust mirrors the app's full policy (createUrlTrustPolicy in
+ * `packages/app/src/url-trust-policy.ts`, which `@elizaos/ui` cannot import):
+ * loopback, the current page origin, and private/LAN/CGNAT/link-local hosts —
+ * never an arbitrary public host. Keep the private-host set in sync with
+ * `isTrustedPrivateHttpHost` there. `local`/`cloud` records use their own
+ * validated branches in {@link applyRestoredConnection} and are not gated here.
+ */
+export function isTrustedRestoreApiBaseUrl(apiBase) {
+    if (!apiBase)
+        return false;
+    let parsed;
+    try {
+        parsed = new URL(apiBase);
+    }
+    catch {
+        return false;
+    }
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+        return false;
+    }
+    const host = parsed.hostname.toLowerCase().replace(/^\[|\]$/g, "");
+    if (isLoopbackHostname(host) || host === "0.0.0.0")
+        return true;
+    if (typeof window !== "undefined" &&
+        host === window.location.hostname.toLowerCase()) {
+        return true;
+    }
+    // IPv6 ULA (fc00::/7) / link-local (fe80::/10).
+    if (host.includes(":") &&
+        (host.startsWith("fc") || host.startsWith("fd") || host.startsWith("fe80:"))) {
+        return true;
+    }
+    // RFC1918 / CGNAT (tailscale) / link-local IPv4 + private name suffixes.
+    return (/^10\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(host) ||
+        /^192\.168\.\d{1,3}\.\d{1,3}$/.test(host) ||
+        /^172\.(1[6-9]|2\d|3[0-1])\.\d{1,3}\.\d{1,3}$/.test(host) ||
+        /^100\.(6[4-9]|[7-9]\d|1[01]\d|12[0-7])\.\d{1,3}\.\d{1,3}$/.test(host) ||
+        /^169\.254\.\d{1,3}\.\d{1,3}$/.test(host) ||
+        host === "local" ||
+        host === "internal" ||
+        host === "lan" ||
+        host === "ts.net" ||
+        host.endsWith(".local") ||
+        host.endsWith(".lan") ||
+        host.endsWith(".internal") ||
+        host.endsWith(".ts.net"));
+}
 // Re-resolve a persisted loopback apiBase against whatever port the
 // dev orchestrator / Electrobun bridge actually bound this run. A
 // previous session may have captured a stale port (e.g. 31337) when
@@ -199,6 +254,14 @@ export async function applyRestoredConnection(args) {
         return;
     }
     const reconciled = reconcilePersistedApiBaseWithLive(restoredActiveServer.apiBase);
+    // SECURITY backstop (the primary gate is canRestoreActiveServer): never dial
+    // an untrusted persisted remote host or attach the bearer token to it — drop
+    // the record and fall back to first-run instead.
+    if (!isTrustedRestoreApiBaseUrl(reconciled)) {
+        logger.warn(`[startup-phase-restore] dropping persisted remote active-server with untrusted apiBase host: ${reconciled ?? "(none)"}`);
+        clearPersistedActiveServer();
+        return;
+    }
     if (reconciled && reconciled !== restoredActiveServer.apiBase) {
         savePersistedActiveServer({
             ...restoredActiveServer,
@@ -222,11 +285,30 @@ function activeServerToTarget(server) {
 }
 export function canRestoreActiveServer(args) {
     if (args.server.apiBase) {
+        // A "remote" record with an untrusted apiBase host must not be restored —
+        // restoring it would dial an attacker-chosen server with the persisted
+        // bearer token. Untrusted → not restorable → the caller clears it and falls
+        // back to first-run. local/cloud branches validate their own hosts.
+        if (args.server.kind === "remote") {
+            return isTrustedRestoreApiBaseUrl(args.server.apiBase);
+        }
         return true;
     }
     if (args.server.kind === "local") {
         return args.forceLocal || args.isDesktop || args.clientApiAvailable;
     }
+    if (args.server.kind === "cloud") {
+        // A persisted cloud agent without a concrete apiBase is still restorable
+        // when its id carries a real agent id: applyRestoredConnection →
+        // backfillCloudApiBase recovers the base from `cloud:<agentId>` (or the
+        // live Steward session). Only an id-less / URL-as-id session (which the
+        // backfill cannot recover) falls through to agent selection. Keep this in
+        // sync with backfillCloudApiBase's recoverability check.
+        const rawId = args.server.id?.startsWith("cloud:")
+            ? args.server.id.slice("cloud:".length).trim()
+            : "";
+        return Boolean(rawId && !rawId.includes("/"));
+    }
     return false;
 }
 function preserveCloudAuthTokenForFirstRun(server) {
@@ -261,6 +343,14 @@ export async function runRestoringSession(deps, dispatch, ctxRef, cancelled) {
     let hadPrior = loadPersistedFirstRunComplete();
     const forceFreshFirstRun = isForceFreshFirstRunEnabled();
     if (forceFreshFirstRun) {
+        // force-fresh is a ONE-SHOT directive: it forces exactly one fresh
+        // onboarding after an escape hatch (unreachable backend, pairing dead-end,
+        // ?reset). Clear it the moment restore consumes it so the *next* launch is
+        // back to normal server-authoritative behavior. Previously it was only
+        // cleared by the submitFirstRun client patch, so any completion path that
+        // doesn't POST first-run (cloud shared-agent's swallowed 404, pairing
+        // early-return) left the flag set — re-onboarding the user on every launch.
+        clearForceFreshFirstRun();
         clearPersistedActiveServer();
         savePersistedFirstRunComplete(false);
         persistedActiveServer = null;

package/state/startup-phase-runtime.d.ts

@@ -4,10 +4,10 @@
  * Side-effect logic for the "starting-runtime" startup phase.
  * Polls the agent status until running, then dispatches AGENT_RUNNING.
  */
-import { type StartupErrorState } from "./internal";
-import type { RuntimeTarget, StartupEvent } from "./startup-coordinator";
+import { type StartupErrorState } from "./internal.js";
+import type { RuntimeTarget, StartupEvent } from "./startup-coordinator.js";
 export interface StartingRuntimeDeps {
-    setAgentStatus: (v: import("../api").AgentStatus | null) => void;
+    setAgentStatus: (v: import("../api/index.js").AgentStatus | null) => void;
     setConnected: (v: boolean) => void;
     setStartupError: (v: StartupErrorState | null) => void;
     setFirstRunLoading: (v: boolean) => void;

package/state/startup-telemetry.d.ts

@@ -0,0 +1,73 @@
+/**
+ * Renderer startup telemetry (issue #9565).
+ *
+ * A tiny, dependency-free recorder for cold-start `performance.mark()`s on the
+ * renderer side of a device boot. It does NOT drive startup — the sole startup
+ * authority stays `useStartupCoordinator`; this only OBSERVES the boot so a
+ * single device launch can be reconstructed (a harness reads
+ * `window.__ELIZA_STARTUP_TRACE__`) and correlated with the native host trace
+ * (Electrobun `startup-trace.ts`) and backend boot telemetry
+ * (`<stateDir>/telemetry/boot/latest.json`) through one shared trace id.
+ *
+ * Each checkpoint is recorded once (first occurrence wins — boot phases are
+ * one-shot), emitted as a real `performance.mark()` (so it shows in the
+ * Performance panel and `performance.getEntriesByType("mark")`), and mirrored
+ * onto `window.__ELIZA_STARTUP_TRACE__` for out-of-band capture.
+ */
+export interface StartupMark {
+    /** Canonical checkpoint name (e.g. "module-eval", "coordinator:ready"). */
+    name: string;
+    /** Milliseconds since `performance.timeOrigin` (the renderer's t0). */
+    at: number;
+    /** Optional structured detail (phase, target, plugin counts, …). */
+    detail?: Record<string, unknown>;
+}
+export interface StartupTrace {
+    /** Shared id used to correlate renderer ↔ native host ↔ backend boot. */
+    traceId: string;
+    /** `performance.timeOrigin` (epoch ms of t0) for cross-process alignment. */
+    timeOrigin: number;
+    /** Recorded checkpoints, in arrival order. */
+    marks: StartupMark[];
+}
+/** `performance.mark()` name prefix so renderer marks are greppable. */
+export declare const STARTUP_MARK_PREFIX = "eliza.startup:";
+/** Window key the harness reads. */
+export declare const STARTUP_TRACE_WINDOW_KEY = "__ELIZA_STARTUP_TRACE__";
+/** Window key a native host (Electrobun/Capacitor) may inject to share its id. */
+export declare const STARTUP_TRACE_ID_WINDOW_KEY = "__ELIZA_STARTUP_TRACE_ID__";
+declare global {
+    interface Window {
+        /** Renderer startup trace mirrored for out-of-band harness capture. */
+        [STARTUP_TRACE_WINDOW_KEY]?: StartupTrace;
+        /** Native-host-injected trace id, shared across host ↔ renderer. */
+        [STARTUP_TRACE_ID_WINDOW_KEY]?: string;
+    }
+}
+/**
+ * Resolve the trace id once. A native-host-injected id wins (so a desktop or
+ * mobile launch shares ONE id across the native trace + this renderer trace);
+ * otherwise the caller's `preferredId` is used; otherwise a renderer-local id
+ * derived from `timeOrigin` (stable across a single boot, no RNG/clock so the
+ * UI determinism gate stays green). Idempotent.
+ */
+export declare function initStartupTrace(preferredId?: string): string;
+/**
+ * Record a startup checkpoint. First call for a given `name` wins; later calls
+ * are ignored so phase re-entry (poll retries, agent switching) does not skew
+ * the cold-start story. Cheap and safe to call from the boot critical path.
+ */
+export declare function markStartup(name: string, detail?: Record<string, unknown>): void;
+/**
+ * Emit a `performance.measure()` spanning two recorded checkpoints, so a span
+ * (e.g. how long `initializeAppModules` blocked first paint) is visible in the
+ * Performance panel. No-op if either mark is missing.
+ */
+export declare function measureStartup(name: string, fromName: string, toName?: string): void;
+/** Snapshot of the current trace (clones the marks array). */
+export declare function getStartupTrace(): StartupTrace;
+/** True once a given checkpoint has been recorded. */
+export declare function hasStartupMark(name: string): boolean;
+/** Test-only reset of module state. */
+export declare function __resetStartupTraceForTests(): void;
+//# sourceMappingURL=startup-telemetry.d.ts.map

package/state/startup-telemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"startup-telemetry.d.ts","sourceRoot":"","sources":["../../../../../src/state/startup-telemetry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,WAAW;IAC1B,2EAA2E;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,EAAE,EAAE,MAAM,CAAC;IACX,oEAAoE;IACpE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,yEAAyE;IACzE,OAAO,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,UAAU,EAAE,MAAM,CAAC;IACnB,8CAA8C;IAC9C,KAAK,EAAE,WAAW,EAAE,CAAC;CACtB;AAED,wEAAwE;AACxE,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AACpD,oCAAoC;AACpC,eAAO,MAAM,wBAAwB,4BAA4B,CAAC;AAClE,kFAAkF;AAClF,eAAO,MAAM,2BAA2B,+BAA+B,CAAC;AAExE,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,MAAM;QACd,uEAAuE;QACvE,CAAC,wBAAwB,CAAC,CAAC,EAAE,YAAY,CAAC;QAC1C,oEAAoE;QACpE,CAAC,2BAA2B,CAAC,CAAC,EAAE,MAAM,CAAC;KACxC;CACF;AAoCD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAQ7D;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,IAAI,CAwBN;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,MAAM,GACd,IAAI,CAgBN;AAED,8DAA8D;AAC9D,wBAAgB,eAAe,IAAI,YAAY,CAE9C;AAED,sDAAsD;AACtD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED,uCAAuC;AACvC,wBAAgB,2BAA2B,IAAI,IAAI,CAQlD"}