0agent 1.0.0

package/packages/mcp-hub/dist/builtin/MemoryMCP.js

@@ -0,0 +1,185 @@
+import { NodeType, ContentType, createNode, } from "@0agent/core";
+export class MemoryMCP {
+    graph;
+    constructor(graph) {
+        this.graph = graph;
+    }
+    get tools() {
+        return [
+            {
+                name: "query_graph",
+                description: "Run a structural query against the knowledge graph",
+                inputSchema: {
+                    type: "object",
+                    properties: {
+                        node_type: { type: "string", description: "Filter by node type" },
+                        graph_id: { type: "string", description: "Filter by graph ID" },
+                        limit: { type: "number", description: "Max results to return" },
+                    },
+                },
+                server_name: "memory",
+            },
+            {
+                name: "get_entity",
+                description: "Get a node and its surrounding subgraph",
+                inputSchema: {
+                    type: "object",
+                    properties: {
+                        id: { type: "string", description: "Node ID" },
+                        depth: {
+                            type: "number",
+                            description: "Subgraph traversal depth (default 2)",
+                        },
+                    },
+                    required: ["id"],
+                },
+                server_name: "memory",
+            },
+            {
+                name: "search_nodes",
+                description: "Semantic search across graph nodes",
+                inputSchema: {
+                    type: "object",
+                    properties: {
+                        query: {
+                            type: "string",
+                            description: "Natural language search query",
+                        },
+                        limit: { type: "number", description: "Max results" },
+                    },
+                    required: ["query"],
+                },
+                server_name: "memory",
+            },
+            {
+                name: "add_observation",
+                description: "Add a new observation node to the graph",
+                inputSchema: {
+                    type: "object",
+                    properties: {
+                        label: { type: "string", description: "Node label" },
+                        content: {
+                            type: "string",
+                            description: "Text content / observation body",
+                        },
+                        graph_id: { type: "string", description: "Graph ID to add to" },
+                    },
+                    required: ["label", "content"],
+                },
+                server_name: "memory",
+            },
+        ];
+    }
+    async call(toolName, args) {
+        try {
+            switch (toolName) {
+                case "query_graph": {
+                    const results = this.graph.queryStructural({
+                        node_type: args.node_type,
+                        graph_id: args.graph_id,
+                        limit: args.limit ?? 20,
+                    });
+                    const simplified = results.map((r) => ({
+                        id: r.node.id,
+                        label: r.node.label,
+                        type: r.node.type,
+                        score: r.score,
+                    }));
+                    return {
+                        content: [
+                            { type: "text", text: JSON.stringify(simplified, null, 2) },
+                        ],
+                    };
+                }
+                case "get_entity": {
+                    const id = args.id;
+                    const depth = args.depth ?? 2;
+                    const node = this.graph.getNode(id);
+                    if (!node) {
+                        return {
+                            content: [{ type: "text", text: `Node '${id}' not found` }],
+                            isError: true,
+                        };
+                    }
+                    const subgraph = this.graph.getSubGraph(id, depth);
+                    const snapshot = subgraph.toSnapshot();
+                    return {
+                        content: [
+                            {
+                                type: "text",
+                                text: JSON.stringify({
+                                    node: {
+                                        id: node.id,
+                                        label: node.label,
+                                        type: node.type,
+                                    },
+                                    subgraph: {
+                                        nodeCount: snapshot.nodes.length,
+                                        edgeCount: snapshot.edges.length,
+                                    },
+                                }, null, 2),
+                            },
+                        ],
+                    };
+                }
+                case "search_nodes": {
+                    // Semantic search requires an embedding — stub returns empty
+                    // Full implementation requires MultimodalEmbedder (Phase 4)
+                    return {
+                        content: [
+                            {
+                                type: "text",
+                                text: "Semantic search requires embedding model — configure in settings",
+                            },
+                        ],
+                        isError: true,
+                    };
+                }
+                case "add_observation": {
+                    const label = args.label;
+                    const content = args.content;
+                    const graphId = args.graph_id ?? "root";
+                    const node = createNode({
+                        id: crypto.randomUUID(),
+                        graph_id: graphId,
+                        label,
+                        type: NodeType.SIGNAL,
+                        content: [
+                            {
+                                id: crypto.randomUUID(),
+                                node_id: "",
+                                type: ContentType.TEXT,
+                                data: content,
+                                metadata: {},
+                            },
+                        ],
+                    });
+                    node.content[0].node_id = node.id;
+                    this.graph.addNode(node);
+                    return {
+                        content: [
+                            { type: "text", text: `Added observation: ${node.id}` },
+                        ],
+                    };
+                }
+                default:
+                    return {
+                        content: [{ type: "text", text: `Unknown tool: ${toolName}` }],
+                        isError: true,
+                    };
+            }
+        }
+        catch (err) {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `Error: ${err instanceof Error ? err.message : String(err)}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+    }
+}
+//# sourceMappingURL=MemoryMCP.js.map

package/packages/mcp-hub/dist/builtin/MemoryMCP.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MemoryMCP.js","sourceRoot":"","sources":["../../src/builtin/MemoryMCP.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,QAAQ,EACR,WAAW,EACX,UAAU,GACX,MAAM,cAAc,CAAC;AAGtB,MAAM,OAAO,SAAS;IACA;IAApB,YAAoB,KAAqB;QAArB,UAAK,GAAL,KAAK,CAAgB;IAAG,CAAC;IAE7C,IAAI,KAAK;QACP,OAAO;YACL;gBACE,IAAI,EAAE,aAAa;gBACnB,WAAW,EAAE,oDAAoD;gBACjE,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qBAAqB,EAAE;wBACjE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE;wBAC/D,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE;qBAChE;iBACF;gBACD,WAAW,EAAE,QAAQ;aACtB;YACD;gBACE,IAAI,EAAE,YAAY;gBAClB,WAAW,EAAE,yCAAyC;gBACtD,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE;wBAC9C,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,sCAAsC;yBACpD;qBACF;oBACD,QAAQ,EAAE,CAAC,IAAI,CAAC;iBACjB;gBACD,WAAW,EAAE,QAAQ;aACtB;YACD;gBACE,IAAI,EAAE,cAAc;gBACpB,WAAW,EAAE,oCAAoC;gBACjD,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,+BAA+B;yBAC7C;wBACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE;qBACtD;oBACD,QAAQ,EAAE,CAAC,OAAO,CAAC;iBACpB;gBACD,WAAW,EAAE,QAAQ;aACtB;YACD;gBACE,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EAAE,yCAAyC;gBACtD,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE;wBACpD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,iCAAiC;yBAC/C;wBACD,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE;qBAChE;oBACD,QAAQ,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;iBAC/B;gBACD,WAAW,EAAE,QAAQ;aACtB;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CACR,QAAgB,EAChB,IAA6B;QAE7B,IAAI,CAAC;YACH,QAAQ,QAAQ,EAAE,CAAC;gBACjB,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;wBACzC,SAAS,EAAE,IAAI,CAAC,SAAiC;wBACjD,QAAQ,EAAE,IAAI,CAAC,QAA8B;wBAC7C,KAAK,EAAG,IAAI,CAAC,KAAgB,IAAI,EAAE;qBACpC,CAAC,CAAC;oBACH,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBACrC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE;wBACb,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK;wBACnB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI;wBACjB,KAAK,EAAE,CAAC,CAAC,KAAK;qBACf,CAAC,CAAC,CAAC;oBACJ,OAAO;wBACL,OAAO,EAAE;4BACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;yBAC5D;qBACF,CAAC;gBACJ,CAAC;gBAED,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,MAAM,EAAE,GAAG,IAAI,CAAC,EAAY,CAAC;oBAC7B,MAAM,KAAK,GAAI,IAAI,CAAC,KAAgB,IAAI,CAAC,CAAC;oBAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBACpC,IAAI,CAAC,IAAI,EAAE,CAAC;wBACV,OAAO;4BACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;4BAC3D,OAAO,EAAE,IAAI;yBACd,CAAC;oBACJ,CAAC;oBACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;oBACnD,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC;oBACvC,OAAO;wBACL,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAM;gCACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;oCACE,IAAI,EAAE;wCACJ,EAAE,EAAE,IAAI,CAAC,EAAE;wCACX,KAAK,EAAE,IAAI,CAAC,KAAK;wCACjB,IAAI,EAAE,IAAI,CAAC,IAAI;qCAChB;oCACD,QAAQ,EAAE;wCACR,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;wCAChC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;qCACjC;iCACF,EACD,IAAI,EACJ,CAAC,CACF;6BACF;yBACF;qBACF,CAAC;gBACJ,CAAC;gBAED,KAAK,cAAc,CAAC,CAAC,CAAC;oBACpB,6DAA6D;oBAC7D,4DAA4D;oBAC5D,OAAO;wBACL,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAM;gCACZ,IAAI,EAAE,kEAAkE;6BACzE;yBACF;wBACD,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBAED,KAAK,iBAAiB,CAAC,CAAC,CAAC;oBACvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAe,CAAC;oBACnC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAiB,CAAC;oBACvC,MAAM,OAAO,GAAI,IAAI,CAAC,QAAmB,IAAI,MAAM,CAAC;oBACpD,MAAM,IAAI,GAAG,UAAU,CAAC;wBACtB,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;wBACvB,QAAQ,EAAE,OAAO;wBACjB,KAAK;wBACL,IAAI,EAAE,QAAQ,CAAC,MAAM;wBACrB,OAAO,EAAE;4BACP;gCACE,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;gCACvB,OAAO,EAAE,EAAE;gCACX,IAAI,EAAE,WAAW,CAAC,IAAI;gCACtB,IAAI,EAAE,OAAO;gCACb,QAAQ,EAAE,EAAE;6BACb;yBACF;qBACF,CAAC,CAAC;oBACH,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC;oBAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBACzB,OAAO;wBACL,OAAO,EAAE;4BACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,IAAI,CAAC,EAAE,EAAE,EAAE;yBACxD;qBACF,CAAC;gBACJ,CAAC;gBAED;oBACE,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,QAAQ,EAAE,EAAE,CAAC;wBAC9D,OAAO,EAAE,IAAI;qBACd,CAAC;YACN,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;qBACnE;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/packages/mcp-hub/dist/builtin/ShellMCP.d.ts

@@ -0,0 +1,8 @@
+import type { MCPTool, MCPCallResult } from '../types.js';
+export declare class ShellMCP {
+    private scopePath;
+    constructor(scope: string);
+    get tools(): MCPTool[];
+    call(toolName: string, args: Record<string, unknown>): Promise<MCPCallResult>;
+}
+//# sourceMappingURL=ShellMCP.d.ts.map

package/packages/mcp-hub/dist/builtin/ShellMCP.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ShellMCP.d.ts","sourceRoot":"","sources":["../../src/builtin/ShellMCP.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAc1D,qBAAa,QAAQ;IACnB,OAAO,CAAC,SAAS,CAAS;gBAEd,KAAK,EAAE,MAAM;IAIzB,IAAI,KAAK,IAAI,OAAO,EAAE,CAgBrB;IAEK,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC;CAwCpF"}

package/packages/mcp-hub/dist/builtin/ShellMCP.js

@@ -0,0 +1,74 @@
+import { execSync } from 'node:child_process';
+import { resolve } from 'node:path';
+const DANGEROUS_PATTERNS = [
+    /rm\s+(-\w+\s+)*-rf\s+\//,
+    /rm\s+(-\w+\s+)*\/\s/,
+    /mkfs\./,
+    /dd\s+if=/,
+    /:\(\)\s*\{\s*:\|:\s*&\s*\}/, // fork bomb
+    />\s*\/dev\/sd/,
+    /chmod\s+(-\w+\s+)*777\s+\//,
+    /curl\s+.*\|\s*(ba)?sh/,
+    /wget\s+.*\|\s*(ba)?sh/,
+];
+export class ShellMCP {
+    scopePath;
+    constructor(scope) {
+        this.scopePath = resolve(scope);
+    }
+    get tools() {
+        return [
+            {
+                name: 'execute_command',
+                description: 'Execute a shell command within the scoped directory',
+                inputSchema: {
+                    type: 'object',
+                    properties: {
+                        command: { type: 'string', description: 'The shell command to execute' },
+                        timeout: { type: 'number', description: 'Timeout in milliseconds (default 30000)' },
+                    },
+                    required: ['command'],
+                },
+                server_name: 'shell',
+            },
+        ];
+    }
+    async call(toolName, args) {
+        if (toolName !== 'execute_command') {
+            return { content: [{ type: 'text', text: `Unknown tool: ${toolName}` }], isError: true };
+        }
+        const command = args.command;
+        if (!command || typeof command !== 'string') {
+            return { content: [{ type: 'text', text: 'Missing or invalid command' }], isError: true };
+        }
+        // Reject dangerous commands
+        for (const pattern of DANGEROUS_PATTERNS) {
+            if (pattern.test(command)) {
+                return {
+                    content: [{ type: 'text', text: `Command rejected: matches dangerous pattern` }],
+                    isError: true,
+                };
+            }
+        }
+        const timeout = typeof args.timeout === 'number' ? args.timeout : 30_000;
+        try {
+            const stdout = execSync(command, {
+                cwd: this.scopePath,
+                timeout,
+                maxBuffer: 1024 * 1024, // 1 MB
+                encoding: 'utf8',
+                stdio: ['pipe', 'pipe', 'pipe'],
+            });
+            return { content: [{ type: 'text', text: stdout }] };
+        }
+        catch (err) {
+            const error = err;
+            const stderr = error.stderr ?? error.message ?? 'Command failed';
+            return {
+                content: [{ type: 'text', text: `Exit code ${error.status ?? 1}\n${stderr}` }],
+                isError: true,
+            };
+        }
+    }
+}
+//# sourceMappingURL=ShellMCP.js.map

package/packages/mcp-hub/dist/builtin/ShellMCP.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ShellMCP.js","sourceRoot":"","sources":["../../src/builtin/ShellMCP.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,MAAM,kBAAkB,GAAG;IACzB,yBAAyB;IACzB,qBAAqB;IACrB,QAAQ;IACR,UAAU;IACV,4BAA4B,EAAG,YAAY;IAC3C,eAAe;IACf,4BAA4B;IAC5B,uBAAuB;IACvB,uBAAuB;CACxB,CAAC;AAEF,MAAM,OAAO,QAAQ;IACX,SAAS,CAAS;IAE1B,YAAY,KAAa;QACvB,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,KAAK;QACP,OAAO;YACL;gBACE,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EAAE,qDAAqD;gBAClE,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,8BAA8B,EAAE;wBACxE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,yCAAyC,EAAE;qBACpF;oBACD,QAAQ,EAAE,CAAC,SAAS,CAAC;iBACtB;gBACD,WAAW,EAAE,OAAO;aACrB;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAgB,EAAE,IAA6B;QACxD,IAAI,QAAQ,KAAK,iBAAiB,EAAE,CAAC;YACnC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,QAAQ,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3F,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAiB,CAAC;QACvC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC5F,CAAC;QAED,4BAA4B;QAC5B,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;YACzC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,6CAA6C,EAAE,CAAC;oBAChF,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QAEzE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE;gBAC/B,GAAG,EAAE,IAAI,CAAC,SAAS;gBACnB,OAAO;gBACP,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,OAAO;gBAC/B,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;aAChC,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACvD,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,GAA6D,CAAC;YAC5E,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,gBAAgB,CAAC;YACjE,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,MAAM,EAAE,EAAE,CAAC;gBAC9E,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/packages/mcp-hub/dist/index.d.ts

@@ -0,0 +1,9 @@
+export { MCPHub } from './MCPHub.js';
+export { MCPDiscovery, type DiscoveryResult } from './MCPDiscovery.js';
+export { FilteredProxy } from './FilteredProxy.js';
+export { FilesystemMCP } from './builtin/FilesystemMCP.js';
+export { ShellMCP } from './builtin/ShellMCP.js';
+export { MemoryMCP } from './builtin/MemoryMCP.js';
+export { BrowserMCP } from './builtin/BrowserMCP.js';
+export type { MCPServerConfig, MCPTool, MCPCallResult, MCPConnection } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/packages/mcp-hub/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,YAAY,EAAE,eAAe,EAAE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC"}

package/packages/mcp-hub/dist/index.js

@@ -0,0 +1,8 @@
+export { MCPHub } from './MCPHub.js';
+export { MCPDiscovery } from './MCPDiscovery.js';
+export { FilteredProxy } from './FilteredProxy.js';
+export { FilesystemMCP } from './builtin/FilesystemMCP.js';
+export { ShellMCP } from './builtin/ShellMCP.js';
+export { MemoryMCP } from './builtin/MemoryMCP.js';
+export { BrowserMCP } from './builtin/BrowserMCP.js';
+//# sourceMappingURL=index.js.map

package/packages/mcp-hub/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,YAAY,EAAwB,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC"}

package/packages/mcp-hub/dist/types.d.ts

@@ -0,0 +1,30 @@
+export interface MCPServerConfig {
+    name: string;
+    command?: string;
+    args?: string[];
+    url?: string;
+    env?: Record<string, string>;
+    enabled: boolean;
+}
+export interface MCPTool {
+    name: string;
+    description: string;
+    inputSchema: Record<string, unknown>;
+    server_name: string;
+}
+export interface MCPCallResult {
+    content: Array<{
+        type: 'text' | 'image';
+        text?: string;
+        data?: string;
+        mimeType?: string;
+    }>;
+    isError?: boolean;
+}
+export interface MCPConnection {
+    config: MCPServerConfig;
+    tools: MCPTool[];
+    connected: boolean;
+    error?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/packages/mcp-hub/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,KAAK,CAAC;QACb,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,eAAe,CAAC;IACxB,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}

package/packages/mcp-hub/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/packages/mcp-hub/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/packages/subagent/dist/CapabilityToken.d.ts

@@ -0,0 +1,66 @@
+export interface GraphReadScope {
+    mode: 'none' | 'entities' | 'context' | 'full_readonly';
+    entity_ids: string[];
+    context_types: string[];
+    max_depth: number;
+}
+export interface SandboxConfig {
+    type: 'firecracker' | 'docker' | 'podman' | 'bwrap' | 'cloud' | 'process';
+    network_access: 'none' | 'allowlist' | 'full';
+    network_allowlist?: string[];
+    filesystem_access: 'none' | 'readonly' | 'scoped';
+    filesystem_scope?: string;
+    has_browser: boolean;
+    has_display: boolean;
+}
+export interface CapabilityToken {
+    id: string;
+    subagent_id: string;
+    parent_session_id: string;
+    issued_at: number;
+    expires_at: number;
+    trust_level: 1 | 2;
+    allowed_tools: string[];
+    blocked_tools: string[];
+    graph_read: GraphReadScope;
+    graph_write: false;
+    allowed_credentials: string[];
+    max_duration_ms: number;
+    max_llm_calls: number;
+    max_llm_tokens: number;
+    max_tool_calls: number;
+    sandbox: SandboxConfig;
+    signature: string;
+}
+export type TaskType = 'web_research' | 'code_execution' | 'browser_task' | 'file_editing' | 'send_message';
+export interface TokenIssueRequest {
+    subagent_id: string;
+    parent_session_id: string;
+    task_type: TaskType;
+    graph_read_scope?: Partial<GraphReadScope>;
+    extra_tools?: string[];
+    override_duration_ms?: number;
+    sandbox_overrides?: Partial<SandboxConfig>;
+}
+export interface ValidationResult {
+    valid: boolean;
+    reason?: string;
+}
+/**
+ * Sign a token by computing HMAC-SHA256 over the canonical JSON.
+ * Returns the hex-encoded signature string.
+ */
+export declare function signToken(token: CapabilityToken, secret: string): string;
+/**
+ * Validate a capability token:
+ *  1. Check expiry
+ *  2. Verify HMAC signature with timing-safe comparison
+ *  3. Assert graph_write === false
+ */
+export declare function validateToken(token: CapabilityToken, secret: string): ValidationResult;
+/**
+ * Build a capability token from a TokenIssueRequest, applying resource defaults
+ * for the given task type, then sign it.
+ */
+export declare function issueToken(req: TokenIssueRequest, secret: string): CapabilityToken;
+//# sourceMappingURL=CapabilityToken.d.ts.map

package/packages/subagent/dist/CapabilityToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CapabilityToken.d.ts","sourceRoot":"","sources":["../src/CapabilityToken.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,GAAG,eAAe,CAAC;IACxD,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,aAAa,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;IAC1E,cAAc,EAAE,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IAC9C,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,iBAAiB,EAAE,MAAM,GAAG,UAAU,GAAG,QAAQ,CAAC;IAClD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC;IACnB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,UAAU,EAAE,cAAc,CAAC;IAC3B,WAAW,EAAE,KAAK,CAAC;IACnB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,aAAa,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,QAAQ,GAAG,cAAc,GAAG,gBAAgB,GAAG,cAAc,GAAG,cAAc,GAAG,cAAc,CAAC;AAE5G,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,QAAQ,CAAC;IACpB,gBAAgB,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3C,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,iBAAiB,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAqCD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAGxE;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAqBtF;AAID;;;GAGG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,GAAG,eAAe,CAqDlF"}

package/packages/subagent/dist/CapabilityToken.js

@@ -0,0 +1,120 @@
+import { createHmac, randomUUID, timingSafeEqual } from 'node:crypto';
+import { RESOURCE_DEFAULTS } from './ResourceDefaults.js';
+// ─── Fixed-order canonical field keys ──────────────────
+const CANONICAL_FIELDS = [
+    'id',
+    'subagent_id',
+    'parent_session_id',
+    'issued_at',
+    'expires_at',
+    'trust_level',
+    'allowed_tools',
+    'blocked_tools',
+    'graph_read',
+    'graph_write',
+    'allowed_credentials',
+    'max_duration_ms',
+    'max_llm_calls',
+    'max_llm_tokens',
+    'max_tool_calls',
+    'sandbox',
+];
+// ─── Signing helpers ───────────────────────────────────
+/**
+ * Produce a deterministic JSON serialization of all token fields except `signature`,
+ * in the fixed order defined by CANONICAL_FIELDS.
+ */
+function canonicalize(token) {
+    const ordered = {};
+    for (const key of CANONICAL_FIELDS) {
+        ordered[key] = token[key];
+    }
+    return JSON.stringify(ordered);
+}
+/**
+ * Sign a token by computing HMAC-SHA256 over the canonical JSON.
+ * Returns the hex-encoded signature string.
+ */
+export function signToken(token, secret) {
+    const canonical = canonicalize(token);
+    return createHmac('sha256', secret).update(canonical).digest('hex');
+}
+/**
+ * Validate a capability token:
+ *  1. Check expiry
+ *  2. Verify HMAC signature with timing-safe comparison
+ *  3. Assert graph_write === false
+ */
+export function validateToken(token, secret) {
+    // 1. Expiry check
+    if (Date.now() > token.expires_at) {
+        return { valid: false, reason: 'Token has expired' };
+    }
+    // 2. HMAC verification (timing-safe)
+    const expected = signToken(token, secret);
+    const expectedBuf = Buffer.from(expected, 'hex');
+    const actualBuf = Buffer.from(token.signature, 'hex');
+    if (expectedBuf.length !== actualBuf.length || !timingSafeEqual(expectedBuf, actualBuf)) {
+        return { valid: false, reason: 'Invalid signature' };
+    }
+    // 3. graph_write must be false
+    if (token.graph_write !== false) {
+        return { valid: false, reason: 'graph_write must be false' };
+    }
+    return { valid: true };
+}
+// ─── Token issuance ────────────────────────────────────
+/**
+ * Build a capability token from a TokenIssueRequest, applying resource defaults
+ * for the given task type, then sign it.
+ */
+export function issueToken(req, secret) {
+    const defaults = RESOURCE_DEFAULTS[req.task_type];
+    const now = Date.now();
+    const durationMs = req.override_duration_ms ?? defaults.max_duration_ms;
+    const graphRead = {
+        mode: req.graph_read_scope?.mode ?? 'none',
+        entity_ids: req.graph_read_scope?.entity_ids ?? [],
+        context_types: req.graph_read_scope?.context_types ?? [],
+        max_depth: req.graph_read_scope?.max_depth ?? 1,
+    };
+    const sandbox = {
+        type: req.sandbox_overrides?.type ?? 'docker',
+        network_access: req.sandbox_overrides?.network_access ?? defaults.network_access,
+        filesystem_access: req.sandbox_overrides?.filesystem_access ?? defaults.filesystem_access,
+        has_browser: req.sandbox_overrides?.has_browser ?? (defaults.has_browser ?? false),
+        has_display: req.sandbox_overrides?.has_display ?? (defaults.has_display ?? false),
+        ...(req.sandbox_overrides?.network_allowlist != null
+            ? { network_allowlist: req.sandbox_overrides.network_allowlist }
+            : {}),
+        ...(req.sandbox_overrides?.filesystem_scope != null
+            ? { filesystem_scope: req.sandbox_overrides.filesystem_scope }
+            : {}),
+    };
+    const allowedTools = [
+        ...defaults.allowed_tools,
+        ...(req.extra_tools ?? []),
+    ];
+    const token = {
+        id: randomUUID(),
+        subagent_id: req.subagent_id,
+        parent_session_id: req.parent_session_id,
+        issued_at: now,
+        expires_at: now + durationMs,
+        trust_level: 1,
+        allowed_tools: allowedTools,
+        blocked_tools: [],
+        graph_read: graphRead,
+        graph_write: false,
+        allowed_credentials: [],
+        max_duration_ms: durationMs,
+        max_llm_calls: defaults.max_llm_calls,
+        max_llm_tokens: defaults.max_llm_tokens,
+        max_tool_calls: defaults.max_tool_calls,
+        sandbox,
+        signature: '',
+    };
+    token.signature = signToken(token, secret);
+    return token;
+}
+//# sourceMappingURL=CapabilityToken.js.map

package/packages/subagent/dist/CapabilityToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CapabilityToken.js","sourceRoot":"","sources":["../src/CapabilityToken.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AA0D1D,0DAA0D;AAE1D,MAAM,gBAAgB,GAA4D;IAChF,IAAI;IACJ,aAAa;IACb,mBAAmB;IACnB,WAAW;IACX,YAAY;IACZ,aAAa;IACb,eAAe;IACf,eAAe;IACf,YAAY;IACZ,aAAa;IACb,qBAAqB;IACrB,iBAAiB;IACjB,eAAe;IACf,gBAAgB;IAChB,gBAAgB;IAChB,SAAS;CACV,CAAC;AAEF,0DAA0D;AAE1D;;;GAGG;AACH,SAAS,YAAY,CAAC,KAAsB;IAC1C,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,KAAsB,EAAE,MAAc;IAC9D,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACtC,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,KAAsB,EAAE,MAAc;IAClE,kBAAkB;IAClB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;QAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACvD,CAAC;IAED,qCAAqC;IACrC,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAEtD,IAAI,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC;QACxF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACvD,CAAC;IAED,+BAA+B;IAC/B,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;QAChC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IAC/D,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,0DAA0D;AAE1D;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,GAAsB,EAAE,MAAc;IAC/D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,UAAU,GAAG,GAAG,CAAC,oBAAoB,IAAI,QAAQ,CAAC,eAAe,CAAC;IAExE,MAAM,SAAS,GAAmB;QAChC,IAAI,EAAE,GAAG,CAAC,gBAAgB,EAAE,IAAI,IAAI,MAAM;QAC1C,UAAU,EAAE,GAAG,CAAC,gBAAgB,EAAE,UAAU,IAAI,EAAE;QAClD,aAAa,EAAE,GAAG,CAAC,gBAAgB,EAAE,aAAa,IAAI,EAAE;QACxD,SAAS,EAAE,GAAG,CAAC,gBAAgB,EAAE,SAAS,IAAI,CAAC;KAChD,CAAC;IAEF,MAAM,OAAO,GAAkB;QAC7B,IAAI,EAAE,GAAG,CAAC,iBAAiB,EAAE,IAAI,IAAI,QAAQ;QAC7C,cAAc,EAAE,GAAG,CAAC,iBAAiB,EAAE,cAAc,IAAI,QAAQ,CAAC,cAAc;QAChF,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,EAAE,iBAAiB,IAAI,QAAQ,CAAC,iBAAiB;QACzF,WAAW,EAAE,GAAG,CAAC,iBAAiB,EAAE,WAAW,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,KAAK,CAAC;QAClF,WAAW,EAAE,GAAG,CAAC,iBAAiB,EAAE,WAAW,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,KAAK,CAAC;QAClF,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,iBAAiB,IAAI,IAAI;YAClD,CAAC,CAAC,EAAE,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,CAAC,iBAAiB,EAAE;YAChE,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,gBAAgB,IAAI,IAAI;YACjD,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,iBAAiB,CAAC,gBAAgB,EAAE;YAC9D,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IAEF,MAAM,YAAY,GAAG;QACnB,GAAG,QAAQ,CAAC,aAAa;QACzB,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;KAC3B,CAAC;IAEF,MAAM,KAAK,GAAoB;QAC7B,EAAE,EAAE,UAAU,EAAE;QAChB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,SAAS,EAAE,GAAG;QACd,UAAU,EAAE,GAAG,GAAG,UAAU;QAC5B,WAAW,EAAE,CAAC;QACd,aAAa,EAAE,YAAY;QAC3B,aAAa,EAAE,EAAE;QACjB,UAAU,EAAE,SAAS;QACrB,WAAW,EAAE,KAAK;QAClB,mBAAmB,EAAE,EAAE;QACvB,eAAe,EAAE,UAAU;QAC3B,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,OAAO;QACP,SAAS,EAAE,EAAE;KACd,CAAC;IAEF,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3C,OAAO,KAAK,CAAC;AACf,CAAC"}

package/packages/subagent/dist/ResourceDefaults.d.ts

@@ -0,0 +1,16 @@
+import type { TaskType } from './CapabilityToken.js';
+export interface ResourceConfig {
+    max_duration_ms: number;
+    max_llm_calls: number;
+    max_llm_tokens: number;
+    max_tool_calls: number;
+    allowed_tools: string[];
+    network_access: 'none' | 'allowlist' | 'full';
+    filesystem_access: 'none' | 'readonly' | 'scoped';
+    has_browser?: boolean;
+    has_display?: boolean;
+    memory_mb: number;
+    cpus: number;
+}
+export declare const RESOURCE_DEFAULTS: Record<TaskType, ResourceConfig>;
+//# sourceMappingURL=ResourceDefaults.d.ts.map

package/packages/subagent/dist/ResourceDefaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResourceDefaults.d.ts","sourceRoot":"","sources":["../src/ResourceDefaults.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAErD,MAAM,WAAW,cAAc;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,EAAE,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IAC9C,iBAAiB,EAAE,MAAM,GAAG,UAAU,GAAG,QAAQ,CAAC;IAClD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,QAAQ,EAAE,cAAc,CAkE9D,CAAC"}

package/packages/subagent/dist/ResourceDefaults.js

@@ -0,0 +1,68 @@
+export const RESOURCE_DEFAULTS = {
+    web_research: {
+        max_duration_ms: 5 * 60 * 1000,
+        max_llm_calls: 20,
+        max_llm_tokens: 50_000,
+        max_tool_calls: 50,
+        allowed_tools: ['web_search', 'web_fetch', 'read_url', 'summarize'],
+        network_access: 'full',
+        filesystem_access: 'none',
+        has_browser: false,
+        has_display: false,
+        memory_mb: 512,
+        cpus: 1,
+    },
+    code_execution: {
+        max_duration_ms: 2 * 60 * 1000,
+        max_llm_calls: 10,
+        max_llm_tokens: 20_000,
+        max_tool_calls: 20,
+        allowed_tools: ['run_code', 'read_file', 'write_file', 'list_files'],
+        network_access: 'none',
+        filesystem_access: 'scoped',
+        has_browser: false,
+        has_display: false,
+        memory_mb: 512,
+        cpus: 1,
+    },
+    browser_task: {
+        max_duration_ms: 10 * 60 * 1000,
+        max_llm_calls: 30,
+        max_llm_tokens: 80_000,
+        max_tool_calls: 100,
+        allowed_tools: ['browser_navigate', 'browser_click', 'browser_type', 'browser_screenshot', 'browser_eval'],
+        network_access: 'full',
+        filesystem_access: 'none',
+        has_browser: true,
+        has_display: true,
+        memory_mb: 1024,
+        cpus: 2,
+    },
+    file_editing: {
+        max_duration_ms: 3 * 60 * 1000,
+        max_llm_calls: 15,
+        max_llm_tokens: 30_000,
+        max_tool_calls: 40,
+        allowed_tools: ['read_file', 'write_file', 'edit_file', 'list_files', 'search_files'],
+        network_access: 'none',
+        filesystem_access: 'scoped',
+        has_browser: false,
+        has_display: false,
+        memory_mb: 256,
+        cpus: 1,
+    },
+    send_message: {
+        max_duration_ms: 1 * 60 * 1000,
+        max_llm_calls: 5,
+        max_llm_tokens: 5_000,
+        max_tool_calls: 5,
+        allowed_tools: ['send_email', 'send_slack', 'send_sms'],
+        network_access: 'allowlist',
+        filesystem_access: 'none',
+        has_browser: false,
+        has_display: false,
+        memory_mb: 128,
+        cpus: 1,
+    },
+};
+//# sourceMappingURL=ResourceDefaults.js.map

package/packages/subagent/dist/ResourceDefaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResourceDefaults.js","sourceRoot":"","sources":["../src/ResourceDefaults.ts"],"names":[],"mappings":"AAgBA,MAAM,CAAC,MAAM,iBAAiB,GAAqC;IACjE,YAAY,EAAE;QACZ,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI;QAC9B,aAAa,EAAE,EAAE;QACjB,cAAc,EAAE,MAAM;QACtB,cAAc,EAAE,EAAE;QAClB,aAAa,EAAE,CAAC,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,CAAC;QACnE,cAAc,EAAE,MAAM;QACtB,iBAAiB,EAAE,MAAM;QACzB,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,KAAK;QAClB,SAAS,EAAE,GAAG;QACd,IAAI,EAAE,CAAC;KACR;IACD,cAAc,EAAE;QACd,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI;QAC9B,aAAa,EAAE,EAAE;QACjB,cAAc,EAAE,MAAM;QACtB,cAAc,EAAE,EAAE;QAClB,aAAa,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,CAAC;QACpE,cAAc,EAAE,MAAM;QACtB,iBAAiB,EAAE,QAAQ;QAC3B,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,KAAK;QAClB,SAAS,EAAE,GAAG;QACd,IAAI,EAAE,CAAC;KACR;IACD,YAAY,EAAE;QACZ,eAAe,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;QAC/B,aAAa,EAAE,EAAE;QACjB,cAAc,EAAE,MAAM;QACtB,cAAc,EAAE,GAAG;QACnB,aAAa,EAAE,CAAC,kBAAkB,EAAE,eAAe,EAAE,cAAc,EAAE,oBAAoB,EAAE,cAAc,CAAC;QAC1G,cAAc,EAAE,MAAM;QACtB,iBAAiB,EAAE,MAAM;QACzB,WAAW,EAAE,IAAI;QACjB,WAAW,EAAE,IAAI;QACjB,SAAS,EAAE,IAAI;QACf,IAAI,EAAE,CAAC;KACR;IACD,YAAY,EAAE;QACZ,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI;QAC9B,aAAa,EAAE,EAAE;QACjB,cAAc,EAAE,MAAM;QACtB,cAAc,EAAE,EAAE;QAClB,aAAa,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,CAAC;QACrF,cAAc,EAAE,MAAM;QACtB,iBAAiB,EAAE,QAAQ;QAC3B,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,KAAK;QAClB,SAAS,EAAE,GAAG;QACd,IAAI,EAAE,CAAC;KACR;IACD,YAAY,EAAE;QACZ,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI;QAC9B,aAAa,EAAE,CAAC;QAChB,cAAc,EAAE,KAAK;QACrB,cAAc,EAAE,CAAC;QACjB,aAAa,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,UAAU,CAAC;QACvD,cAAc,EAAE,WAAW;QAC3B,iBAAiB,EAAE,MAAM;QACzB,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,KAAK;QAClB,SAAS,EAAE,GAAG;QACd,IAAI,EAAE,CAAC;KACR;CACF,CAAC"}