0agent 1.0.0

package/packages/subagent/dist/SkillInputResolver.d.ts

@@ -0,0 +1,30 @@
+import type { SkillDefinition } from '@0agent/core';
+export interface ResolverContext {
+    project_dir: string;
+    project_name?: string;
+    mentioned_entity_ids?: string[];
+    args?: Record<string, string>;
+    artifacts_dir?: string;
+}
+/**
+ * Resolves runtime template variables in skill definition fields.
+ *
+ * Supported variables:
+ *   $PROJECT_DIR            — current project directory
+ *   $CURRENT_PROJECT        — project name
+ *   $MENTIONED_ENTITIES     — JSON array of entity IDs
+ *   $ARG_<NAME>             — runtime argument by name (uppercased)
+ *   $LATEST_ARTIFACT:<type> — most recent artifact of given type (stub)
+ */
+export declare class SkillInputResolver {
+    /**
+     * Resolve all template variables in a single string.
+     */
+    resolve(template: string, ctx: ResolverContext): string;
+    /**
+     * Deep-clone a SkillDefinition and resolve all template variables in
+     * its string fields.
+     */
+    resolveSkill(skill: SkillDefinition, ctx: ResolverContext): SkillDefinition;
+}
+//# sourceMappingURL=SkillInputResolver.d.ts.map

package/packages/subagent/dist/SkillInputResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SkillInputResolver.d.ts","sourceRoot":"","sources":["../src/SkillInputResolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAIpD,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAID;;;;;;;;;GASG;AACH,qBAAa,kBAAkB;IAC7B;;OAEG;IACH,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,MAAM;IA+BvD;;;OAGG;IACH,YAAY,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,eAAe,GAAG,eAAe;CAgC5E"}

package/packages/subagent/dist/SkillInputResolver.js

@@ -0,0 +1,59 @@
+// ─── SkillInputResolver ─────────────────────────────────
+/**
+ * Resolves runtime template variables in skill definition fields.
+ *
+ * Supported variables:
+ *   $PROJECT_DIR            — current project directory
+ *   $CURRENT_PROJECT        — project name
+ *   $MENTIONED_ENTITIES     — JSON array of entity IDs
+ *   $ARG_<NAME>             — runtime argument by name (uppercased)
+ *   $LATEST_ARTIFACT:<type> — most recent artifact of given type (stub)
+ */
+export class SkillInputResolver {
+    /**
+     * Resolve all template variables in a single string.
+     */
+    resolve(template, ctx) {
+        let result = template;
+        result = result.replace(/\$PROJECT_DIR/g, ctx.project_dir);
+        result = result.replace(/\$CURRENT_PROJECT/g, ctx.project_name ?? '');
+        if (ctx.mentioned_entity_ids) {
+            result = result.replace(/\$MENTIONED_ENTITIES/g, JSON.stringify(ctx.mentioned_entity_ids));
+        }
+        // $ARG_<name> resolution
+        if (ctx.args) {
+            for (const [key, val] of Object.entries(ctx.args)) {
+                result = result.replace(new RegExp(`\\$ARG_${key.toUpperCase()}`, 'g'), val);
+            }
+        }
+        // $LATEST_ARTIFACT:<type> — stub: replace with empty string for now.
+        // Full implementation requires filesystem access to scan artifacts_dir.
+        const artifactPattern = /\$LATEST_ARTIFACT:(\w[\w-]*)/g;
+        result = result.replace(artifactPattern, '');
+        return result;
+    }
+    /**
+     * Deep-clone a SkillDefinition and resolve all template variables in
+     * its string fields.
+     */
+    resolveSkill(skill, ctx) {
+        const clone = JSON.parse(JSON.stringify(skill));
+        clone.role_prompt = this.resolve(clone.role_prompt, ctx);
+        if (clone.output?.saves_to) {
+            clone.output.saves_to = this.resolve(clone.output.saves_to, ctx);
+        }
+        if (clone.subagent?.sandbox?.filesystem_scope) {
+            clone.subagent.sandbox.filesystem_scope = this.resolve(clone.subagent.sandbox.filesystem_scope, ctx);
+        }
+        if (clone.subagent?.sandbox?.network_allowlist) {
+            clone.subagent.sandbox.network_allowlist =
+                clone.subagent.sandbox.network_allowlist.map((s) => this.resolve(s, ctx));
+        }
+        if (clone.subagent?.graph_scope?.entity_ids) {
+            clone.subagent.graph_scope.entity_ids =
+                clone.subagent.graph_scope.entity_ids.map((s) => this.resolve(s, ctx));
+        }
+        return clone;
+    }
+}
+//# sourceMappingURL=SkillInputResolver.js.map

package/packages/subagent/dist/SkillInputResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SkillInputResolver.js","sourceRoot":"","sources":["../src/SkillInputResolver.ts"],"names":[],"mappings":"AAYA,2DAA2D;AAE3D;;;;;;;;;GASG;AACH,MAAM,OAAO,kBAAkB;IAC7B;;OAEG;IACH,OAAO,CAAC,QAAgB,EAAE,GAAoB;QAC5C,IAAI,MAAM,GAAG,QAAQ,CAAC;QAEtB,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QAC3D,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,oBAAoB,EAAE,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QAEtE,IAAI,GAAG,CAAC,oBAAoB,EAAE,CAAC;YAC7B,MAAM,GAAG,MAAM,CAAC,OAAO,CACrB,uBAAuB,EACvB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,oBAAoB,CAAC,CACzC,CAAC;QACJ,CAAC;QAED,yBAAyB;QACzB,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACb,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClD,MAAM,GAAG,MAAM,CAAC,OAAO,CACrB,IAAI,MAAM,CAAC,UAAU,GAAG,CAAC,WAAW,EAAE,EAAE,EAAE,GAAG,CAAC,EAC9C,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,wEAAwE;QACxE,MAAM,eAAe,GAAG,+BAA+B,CAAC;QACxD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QAE7C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,YAAY,CAAC,KAAsB,EAAE,GAAoB;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAoB,CAAC;QAEnE,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAEzD,IAAI,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;YAC3B,KAAK,CAAC,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;YAC9C,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,OAAO,CACpD,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,EACvC,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;YAC/C,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB;gBACtC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CACzD,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CACrB,CAAC;QACN,CAAC;QAED,IAAI,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;YAC5C,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU;gBACnC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CACtD,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CACrB,CAAC;QACN,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/packages/subagent/dist/SkillInvoker.d.ts

@@ -0,0 +1,33 @@
+import type { SkillDefinition } from '@0agent/core';
+import type { SubagentOrchestrator } from './SubagentOrchestrator.js';
+export interface SkillInvocation {
+    skill: SkillDefinition;
+    args: Record<string, string>;
+    session_id: string;
+}
+export interface SkillOutput {
+    format: 'prose' | 'json' | 'markdown' | 'diff';
+    raw: string;
+    parsed: unknown;
+}
+export declare class SkillInvoker {
+    private readonly orchestrator;
+    constructor(orchestrator: SubagentOrchestrator);
+    /**
+     * Convert a SkillInvocation into a SpawnRequest and execute via the orchestrator.
+     */
+    invoke(invocation: SkillInvocation): Promise<SkillOutput>;
+    /**
+     * Infer the TaskType from a SkillDefinition's subagent profile.
+     */
+    private inferTaskType;
+    /**
+     * Build a task prompt string from a skill definition and runtime arguments.
+     */
+    private buildTaskPrompt;
+    /**
+     * Parse raw output string into a typed SkillOutput.
+     */
+    private parseOutput;
+}
+//# sourceMappingURL=SkillInvoker.d.ts.map

package/packages/subagent/dist/SkillInvoker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SkillInvoker.d.ts","sourceRoot":"","sources":["../src/SkillInvoker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,KAAK,EAAE,oBAAoB,EAAgB,MAAM,2BAA2B,CAAC;AAMpF,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,eAAe,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,OAAO,CAAC;CACjB;AAID,qBAAa,YAAY;IACX,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAAZ,YAAY,EAAE,oBAAoB;IAE/D;;OAEG;IACG,MAAM,CAAC,UAAU,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC;IAuB/D;;OAEG;IACH,OAAO,CAAC,aAAa;IAQrB;;OAEG;IACH,OAAO,CAAC,eAAe;IAevB;;OAEG;IACH,OAAO,CAAC,WAAW;CAUpB"}

package/packages/subagent/dist/SkillInvoker.js

@@ -0,0 +1,69 @@
+// ─── SkillInvoker ───────────────────────────────────────
+export class SkillInvoker {
+    orchestrator;
+    constructor(orchestrator) {
+        this.orchestrator = orchestrator;
+    }
+    /**
+     * Convert a SkillInvocation into a SpawnRequest and execute via the orchestrator.
+     */
+    async invoke(invocation) {
+        // 1. Map skill category to TaskType
+        const taskType = this.inferTaskType(invocation.skill);
+        // 2. Build SpawnRequest
+        const req = {
+            session_id: invocation.session_id,
+            task: this.buildTaskPrompt(invocation.skill, invocation.args),
+            task_type: taskType,
+            system_prompt: invocation.skill.role_prompt,
+            skill: invocation.skill,
+        };
+        // 3. Spawn subagent
+        const result = await this.orchestrator.spawn(req);
+        // 4. Parse output into SkillOutput
+        return this.parseOutput(result.output, invocation.skill.output?.format ?? 'prose');
+    }
+    /**
+     * Infer the TaskType from a SkillDefinition's subagent profile.
+     */
+    inferTaskType(skill) {
+        if (skill.subagent?.sandbox?.has_browser)
+            return 'browser_task';
+        if (skill.subagent?.tools?.includes('execute_command'))
+            return 'code_execution';
+        if (skill.subagent?.sandbox?.network_access === 'full')
+            return 'web_research';
+        if (skill.subagent?.tools?.some((t) => t.includes('write_file')))
+            return 'file_editing';
+        return 'code_execution'; // default
+    }
+    /**
+     * Build a task prompt string from a skill definition and runtime arguments.
+     */
+    buildTaskPrompt(skill, args) {
+        let prompt = `Execute the "${skill.name}" skill.`;
+        const entries = Object.entries(args);
+        if (entries.length > 0) {
+            prompt += '\n\nArguments:\n';
+            for (const [k, v] of entries) {
+                prompt += `- ${k}: ${v}\n`;
+            }
+        }
+        return prompt;
+    }
+    /**
+     * Parse raw output string into a typed SkillOutput.
+     */
+    parseOutput(raw, format) {
+        if (format === 'json') {
+            try {
+                return { format, raw, parsed: JSON.parse(raw) };
+            }
+            catch {
+                return { format: 'prose', raw, parsed: raw };
+            }
+        }
+        return { format, raw, parsed: raw };
+    }
+}
+//# sourceMappingURL=SkillInvoker.js.map

package/packages/subagent/dist/SkillInvoker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SkillInvoker.js","sourceRoot":"","sources":["../src/SkillInvoker.ts"],"names":[],"mappings":"AAmBA,2DAA2D;AAE3D,MAAM,OAAO,YAAY;IACM;IAA7B,YAA6B,YAAkC;QAAlC,iBAAY,GAAZ,YAAY,CAAsB;IAAG,CAAC;IAEnE;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,UAA2B;QACtC,oCAAoC;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAEtD,wBAAwB;QACxB,MAAM,GAAG,GAAiB;YACxB,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC;YAC7D,SAAS,EAAE,QAAQ;YACnB,aAAa,EAAE,UAAU,CAAC,KAAK,CAAC,WAAW;YAC3C,KAAK,EAAE,UAAU,CAAC,KAAK;SACxB,CAAC;QAEF,oBAAoB;QACpB,MAAM,MAAM,GAAmB,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAElE,mCAAmC;QACnC,OAAO,IAAI,CAAC,WAAW,CACrB,MAAM,CAAC,MAAM,EACb,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,OAAO,CAC3C,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,KAAsB;QAC1C,IAAI,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW;YAAE,OAAO,cAAc,CAAC;QAChE,IAAI,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,iBAAiB,CAAC;YAAE,OAAO,gBAAgB,CAAC;QAChF,IAAI,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,cAAc,KAAK,MAAM;YAAE,OAAO,cAAc,CAAC;QAC9E,IAAI,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YAAE,OAAO,cAAc,CAAC;QACxF,OAAO,gBAAgB,CAAC,CAAC,UAAU;IACrC,CAAC;IAED;;OAEG;IACK,eAAe,CACrB,KAAsB,EACtB,IAA4B;QAE5B,IAAI,MAAM,GAAG,gBAAgB,KAAK,CAAC,IAAI,UAAU,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,kBAAkB,CAAC;YAC7B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;YAC7B,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,GAAW,EAAE,MAA6B;QAC5D,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;YAC/C,CAAC;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACtC,CAAC;CACF"}

package/packages/subagent/dist/SubagentOrchestrator.d.ts

@@ -0,0 +1,52 @@
+import type { KnowledgeGraph, ObjectStore, SkillDefinition } from '@0agent/core';
+import type { MCPHub } from '@0agent/mcp-hub';
+import type { TaskType } from './CapabilityToken.js';
+import type { SubagentResult } from './SubagentResult.js';
+import type { SandboxManager } from './sandbox/SandboxManager.js';
+export interface OrchestratorConfig {
+    daemon_secret: string;
+    default_sandbox_type?: string;
+}
+export interface SpawnRequest {
+    session_id: string;
+    task: string;
+    task_type: TaskType;
+    system_prompt?: string;
+    context?: Record<string, unknown>;
+    skill?: SkillDefinition;
+}
+export interface IEventBus {
+    emit(event: Record<string, unknown>): void;
+}
+export declare class SubagentOrchestrator {
+    private readonly sandboxManager;
+    private readonly mcpHub;
+    private readonly graph;
+    private readonly objectStore;
+    private readonly eventBus;
+    private readonly config;
+    private readonly activeSubagents;
+    constructor(sandboxManager: SandboxManager, mcpHub: MCPHub, graph: KnowledgeGraph | undefined, objectStore: ObjectStore | undefined, eventBus: IEventBus | undefined, config: OrchestratorConfig);
+    /**
+     * Spawn a subagent through the full lifecycle:
+     * token issuance -> sandbox creation -> execution -> cleanup
+     */
+    spawn(req: SpawnRequest): Promise<SubagentResult>;
+    /**
+     * Returns the list of currently running subagent IDs.
+     */
+    getActiveSubagents(): string[];
+    /**
+     * Parse JSON output from a subagent sandbox, handling malformed output gracefully.
+     */
+    parseSubagentOutput(raw: string, subagentId: string, sessionId: string, task: string): SubagentResult;
+    /**
+     * Convert a capability token's sandbox settings into a SandboxCreateConfig.
+     */
+    private buildSandboxConfig;
+    /**
+     * Build a TokenIssueRequest from a SpawnRequest, applying skill overrides when present.
+     */
+    private buildTokenRequest;
+}
+//# sourceMappingURL=SubagentOrchestrator.d.ts.map

package/packages/subagent/dist/SubagentOrchestrator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SubagentOrchestrator.d.ts","sourceRoot":"","sources":["../src/SubagentOrchestrator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACjF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAmB,QAAQ,EAAqB,MAAM,sBAAsB,CAAC;AACzF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAsC,MAAM,6BAA6B,CAAC;AAQtG,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,QAAQ,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC5C;AAOD,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA6B;IACnD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA0B;IACtD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwB;IACjD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA0B;gBAGxD,cAAc,EAAE,cAAc,EAC9B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,cAAc,GAAG,SAAS,EACjC,WAAW,EAAE,WAAW,GAAG,SAAS,EACpC,QAAQ,EAAE,SAAS,GAAG,SAAS,EAC/B,MAAM,EAAE,kBAAkB;IAU5B;;;OAGG;IACG,KAAK,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC;IAsEvD;;OAEG;IACH,kBAAkB,IAAI,MAAM,EAAE;IAM9B;;OAEG;IACH,mBAAmB,CACjB,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GACX,cAAc;IAsDjB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAqB1B;;OAEG;IACH,OAAO,CAAC,iBAAiB;CAiC1B"}

package/packages/subagent/dist/SubagentOrchestrator.js

@@ -0,0 +1,198 @@
+import { randomUUID } from 'node:crypto';
+import { issueToken } from './CapabilityToken.js';
+import { errorResult } from './SubagentResult.js';
+import { Watchdog } from './Watchdog.js';
+import { RESOURCE_DEFAULTS } from './ResourceDefaults.js';
+// ─── Orchestrator ───────────────────────────────────────
+const INPUT_SENTINEL = '__PAYLOAD_END__';
+const OUTPUT_SENTINEL = '__OUTPUT_END__';
+export class SubagentOrchestrator {
+    sandboxManager;
+    mcpHub;
+    graph;
+    objectStore;
+    eventBus;
+    config;
+    activeSubagents = new Set();
+    constructor(sandboxManager, mcpHub, graph, objectStore, eventBus, config) {
+        this.sandboxManager = sandboxManager;
+        this.mcpHub = mcpHub;
+        this.graph = graph;
+        this.objectStore = objectStore;
+        this.eventBus = eventBus;
+        this.config = config;
+    }
+    /**
+     * Spawn a subagent through the full lifecycle:
+     * token issuance -> sandbox creation -> execution -> cleanup
+     */
+    async spawn(req) {
+        const subagentId = randomUUID();
+        const startedAt = Date.now();
+        let sandbox = null;
+        let watchdog = null;
+        try {
+            // 1. Issue capability token
+            const tokenReq = this.buildTokenRequest(subagentId, req);
+            const token = issueToken(tokenReq, this.config.daemon_secret);
+            // 2. Emit spawned event
+            this.eventBus?.emit({
+                type: 'subagent.spawned',
+                subagent_id: subagentId,
+                tools: token.allowed_tools,
+            });
+            // 3. Track active subagent
+            this.activeSubagents.add(subagentId);
+            // 4. Build sandbox config and create sandbox
+            const sandboxConfig = this.buildSandboxConfig(token, req);
+            sandbox = await this.sandboxManager.create(sandboxConfig, this.config.default_sandbox_type);
+            // 5. Start watchdog
+            watchdog = new Watchdog(subagentId, token.max_duration_ms, () => {
+                sandbox?.kill().catch(() => { });
+            });
+            watchdog.start();
+            // 6. Write payload to sandbox stdin
+            const payload = JSON.stringify({
+                token,
+                task: req.task,
+                system_prompt: req.system_prompt ?? '',
+                context: req.context ?? {},
+            });
+            await sandbox.write(payload + '\n' + INPUT_SENTINEL + '\n');
+            // 7. Read output from sandbox stdout
+            const raw = await sandbox.readOutput();
+            // 8. Parse output into SubagentResult
+            const result = this.parseSubagentOutput(raw, subagentId, req.session_id, req.task);
+            result.duration_ms = Date.now() - startedAt;
+            // 9. Emit completed event
+            this.eventBus?.emit({
+                type: 'subagent.completed',
+                subagent_id: subagentId,
+                duration_ms: result.duration_ms,
+            });
+            return result;
+        }
+        catch (err) {
+            return errorResult(subagentId, req.session_id, req.task, err, startedAt);
+        }
+        finally {
+            // ALWAYS clean up
+            watchdog?.cancel();
+            this.activeSubagents.delete(subagentId);
+            if (sandbox) {
+                await this.sandboxManager.destroy(sandbox).catch(() => { });
+            }
+        }
+    }
+    /**
+     * Returns the list of currently running subagent IDs.
+     */
+    getActiveSubagents() {
+        return [...this.activeSubagents];
+    }
+    // ─── Helpers ────────────────────────────────────────
+    /**
+     * Parse JSON output from a subagent sandbox, handling malformed output gracefully.
+     */
+    parseSubagentOutput(raw, subagentId, sessionId, task) {
+        // Strip output sentinel if present
+        const cleaned = raw.replace(OUTPUT_SENTINEL, '').trim();
+        if (!cleaned) {
+            return {
+                subagent_id: subagentId,
+                session_id: sessionId,
+                task,
+                output: '',
+                artifacts: [],
+                tool_calls: [],
+                llm_calls_used: 0,
+                tokens_used: 0,
+                tool_calls_count: 0,
+                exit_reason: 'completed',
+                duration_ms: 0,
+            };
+        }
+        try {
+            const parsed = JSON.parse(cleaned);
+            return {
+                subagent_id: subagentId,
+                session_id: sessionId,
+                task,
+                output: parsed.output ?? cleaned,
+                artifacts: parsed.artifacts ?? [],
+                tool_calls: parsed.tool_calls ?? [],
+                llm_calls_used: parsed.llm_calls_used ?? 0,
+                tokens_used: parsed.tokens_used ?? 0,
+                tool_calls_count: parsed.tool_calls_count ?? 0,
+                exit_reason: parsed.exit_reason ?? 'completed',
+                duration_ms: parsed.duration_ms ?? 0,
+                error: parsed.error,
+            };
+        }
+        catch {
+            // Malformed output — treat raw text as the output string
+            return {
+                subagent_id: subagentId,
+                session_id: sessionId,
+                task,
+                output: cleaned,
+                artifacts: [],
+                tool_calls: [],
+                llm_calls_used: 0,
+                tokens_used: 0,
+                tool_calls_count: 0,
+                exit_reason: 'completed',
+                duration_ms: 0,
+            };
+        }
+    }
+    /**
+     * Convert a capability token's sandbox settings into a SandboxCreateConfig.
+     */
+    buildSandboxConfig(token, req) {
+        const defaults = RESOURCE_DEFAULTS[req.task_type];
+        return {
+            memory_mb: defaults.memory_mb,
+            cpus: defaults.cpus,
+            network: token.sandbox.network_access,
+            network_allowlist: token.sandbox.network_allowlist,
+            has_browser: token.sandbox.has_browser,
+            has_display: token.sandbox.has_display,
+            env: {
+                SUBAGENT_ID: token.subagent_id,
+                SESSION_ID: token.parent_session_id,
+            },
+            inject_files: [],
+        };
+    }
+    /**
+     * Build a TokenIssueRequest from a SpawnRequest, applying skill overrides when present.
+     */
+    buildTokenRequest(subagentId, req) {
+        const tokenReq = {
+            subagent_id: subagentId,
+            parent_session_id: req.session_id,
+            task_type: req.task_type,
+        };
+        // Apply skill overrides if a skill definition is provided
+        if (req.skill) {
+            const sp = req.skill.subagent;
+            tokenReq.extra_tools = sp.tools;
+            tokenReq.override_duration_ms = sp.duration_ms > 0 ? sp.duration_ms : undefined;
+            tokenReq.graph_read_scope = {
+                mode: sp.graph_scope.mode,
+                entity_ids: sp.graph_scope.entity_ids,
+            };
+            tokenReq.sandbox_overrides = {
+                type: sp.sandbox.type === 'auto' ? undefined : sp.sandbox.type,
+                network_access: sp.sandbox.network_access,
+                network_allowlist: sp.sandbox.network_allowlist,
+                filesystem_access: sp.sandbox.filesystem_access,
+                filesystem_scope: sp.sandbox.filesystem_scope,
+                has_browser: sp.sandbox.has_browser,
+            };
+        }
+        return tokenReq;
+    }
+}
+//# sourceMappingURL=SubagentOrchestrator.js.map

package/packages/subagent/dist/SubagentOrchestrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SubagentOrchestrator.js","sourceRoot":"","sources":["../src/SubagentOrchestrator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAMzC,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAsB1D,2DAA2D;AAE3D,MAAM,cAAc,GAAG,iBAAiB,CAAC;AACzC,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAEzC,MAAM,OAAO,oBAAoB;IACd,cAAc,CAAiB;IAC/B,MAAM,CAAS;IACf,KAAK,CAA6B;IAClC,WAAW,CAA0B;IACrC,QAAQ,CAAwB;IAChC,MAAM,CAAqB;IAC3B,eAAe,GAAgB,IAAI,GAAG,EAAE,CAAC;IAE1D,YACE,cAA8B,EAC9B,MAAc,EACd,KAAiC,EACjC,WAAoC,EACpC,QAA+B,EAC/B,MAA0B;QAE1B,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAC,GAAiB;QAC3B,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,OAAO,GAAyB,IAAI,CAAC;QACzC,IAAI,QAAQ,GAAoB,IAAI,CAAC;QAErC,IAAI,CAAC;YACH,4BAA4B;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YACzD,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAE9D,wBAAwB;YACxB,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC;gBAClB,IAAI,EAAE,kBAAkB;gBACxB,WAAW,EAAE,UAAU;gBACvB,KAAK,EAAE,KAAK,CAAC,aAAa;aAC3B,CAAC,CAAC;YAEH,2BAA2B;YAC3B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAErC,6CAA6C;YAC7C,MAAM,aAAa,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC1D,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CACxC,aAAa,EACb,IAAI,CAAC,MAAM,CAAC,oBAAoB,CACjC,CAAC;YAEF,oBAAoB;YACpB,QAAQ,GAAG,IAAI,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,eAAe,EAAE,GAAG,EAAE;gBAC9D,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAClC,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,KAAK,EAAE,CAAC;YAEjB,oCAAoC;YACpC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC7B,KAAK;gBACL,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,EAAE;gBACtC,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;aAC3B,CAAC,CAAC;YACH,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,GAAG,cAAc,GAAG,IAAI,CAAC,CAAC;YAE5D,qCAAqC;YACrC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;YAEvC,sCAAsC;YACtC,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YACnF,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAE5C,0BAA0B;YAC1B,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC;gBAClB,IAAI,EAAE,oBAAoB;gBAC1B,WAAW,EAAE,UAAU;gBACvB,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAC,CAAC;YAEH,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,OAAO,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;QAC3E,CAAC;gBAAS,CAAC;YACT,kBAAkB;YAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;YACnB,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACxC,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IAED,uDAAuD;IAEvD;;OAEG;IACH,mBAAmB,CACjB,GAAW,EACX,UAAkB,EAClB,SAAiB,EACjB,IAAY;QAEZ,mCAAmC;QACnC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAExD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,WAAW,EAAE,UAAU;gBACvB,UAAU,EAAE,SAAS;gBACrB,IAAI;gBACJ,MAAM,EAAE,EAAE;gBACV,SAAS,EAAE,EAAE;gBACb,UAAU,EAAE,EAAE;gBACd,cAAc,EAAE,CAAC;gBACjB,WAAW,EAAE,CAAC;gBACd,gBAAgB,EAAE,CAAC;gBACnB,WAAW,EAAE,WAAW;gBACxB,WAAW,EAAE,CAAC;aACf,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;YAC9D,OAAO;gBACL,WAAW,EAAE,UAAU;gBACvB,UAAU,EAAE,SAAS;gBACrB,IAAI;gBACJ,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,OAAO;gBAChC,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;gBACjC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;gBACnC,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,CAAC;gBAC1C,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,CAAC;gBACpC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,CAAC;gBAC9C,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,WAAW;gBAC9C,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,CAAC;gBACpC,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,yDAAyD;YACzD,OAAO;gBACL,WAAW,EAAE,UAAU;gBACvB,UAAU,EAAE,SAAS;gBACrB,IAAI;gBACJ,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,EAAE;gBACb,UAAU,EAAE,EAAE;gBACd,cAAc,EAAE,CAAC;gBACjB,WAAW,EAAE,CAAC;gBACd,gBAAgB,EAAE,CAAC;gBACnB,WAAW,EAAE,WAAW;gBACxB,WAAW,EAAE,CAAC;aACf,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,kBAAkB,CACxB,KAAsB,EACtB,GAAiB;QAEjB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAElD,OAAO;YACL,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc;YACrC,iBAAiB,EAAE,KAAK,CAAC,OAAO,CAAC,iBAAiB;YAClD,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW;YACtC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW;YACtC,GAAG,EAAE;gBACH,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,UAAU,EAAE,KAAK,CAAC,iBAAiB;aACpC;YACD,YAAY,EAAE,EAAE;SACjB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,iBAAiB,CACvB,UAAkB,EAClB,GAAiB;QAEjB,MAAM,QAAQ,GAAsB;YAClC,WAAW,EAAE,UAAU;YACvB,iBAAiB,EAAE,GAAG,CAAC,UAAU;YACjC,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC;QAEF,0DAA0D;QAC1D,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YACd,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;YAC9B,QAAQ,CAAC,WAAW,GAAG,EAAE,CAAC,KAAK,CAAC;YAChC,QAAQ,CAAC,oBAAoB,GAAG,EAAE,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YAEhF,QAAQ,CAAC,gBAAgB,GAAG;gBAC1B,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI;gBACzB,UAAU,EAAE,EAAE,CAAC,WAAW,CAAC,UAAU;aACtC,CAAC;YAEF,QAAQ,CAAC,iBAAiB,GAAG;gBAC3B,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI;gBAC9D,cAAc,EAAE,EAAE,CAAC,OAAO,CAAC,cAAc;gBACzC,iBAAiB,EAAE,EAAE,CAAC,OAAO,CAAC,iBAAiB;gBAC/C,iBAAiB,EAAE,EAAE,CAAC,OAAO,CAAC,iBAAiB;gBAC/C,gBAAgB,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB;gBAC7C,WAAW,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW;aACpC,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/packages/subagent/dist/SubagentResult.d.ts

@@ -0,0 +1,34 @@
+export interface SubagentArtifact {
+    id: string;
+    type: 'screenshot' | 'file' | 'text' | 'structured';
+    content: string;
+    mime_type: string;
+    filename?: string;
+    created_at: number;
+}
+export interface ToolCallRecord {
+    tool_name: string;
+    input: Record<string, unknown>;
+    output_summary: string;
+    duration_ms: number;
+    timestamp: number;
+}
+export interface SubagentResult {
+    subagent_id: string;
+    session_id: string;
+    task: string;
+    output: string;
+    artifacts: SubagentArtifact[];
+    tool_calls: ToolCallRecord[];
+    llm_calls_used: number;
+    tokens_used: number;
+    tool_calls_count: number;
+    exit_reason: 'completed' | 'timeout' | 'resource_limit' | 'error' | 'killed';
+    duration_ms: number;
+    error?: string;
+}
+/**
+ * Create a SubagentResult representing an error outcome.
+ */
+export declare function errorResult(subagentId: string, sessionId: string, task: string, err: unknown, startedAt: number): SubagentResult;
+//# sourceMappingURL=SubagentResult.d.ts.map

package/packages/subagent/dist/SubagentResult.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SubagentResult.d.ts","sourceRoot":"","sources":["../src/SubagentResult.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,YAAY,CAAC;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,gBAAgB,EAAE,CAAC;IAC9B,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,WAAW,GAAG,SAAS,GAAG,gBAAgB,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC7E,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,wBAAgB,WAAW,CACzB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,OAAO,EACZ,SAAS,EAAE,MAAM,GAChB,cAAc,CAkBhB"}

package/packages/subagent/dist/SubagentResult.js

@@ -0,0 +1,21 @@
+/**
+ * Create a SubagentResult representing an error outcome.
+ */
+export function errorResult(subagentId, sessionId, task, err, startedAt) {
+    const message = err instanceof Error ? err.message : String(err);
+    return {
+        subagent_id: subagentId,
+        session_id: sessionId,
+        task,
+        output: '',
+        artifacts: [],
+        tool_calls: [],
+        llm_calls_used: 0,
+        tokens_used: 0,
+        tool_calls_count: 0,
+        exit_reason: 'error',
+        duration_ms: Date.now() - startedAt,
+        error: message,
+    };
+}
+//# sourceMappingURL=SubagentResult.js.map

package/packages/subagent/dist/SubagentResult.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SubagentResult.js","sourceRoot":"","sources":["../src/SubagentResult.ts"],"names":[],"mappings":"AAgCA;;GAEG;AACH,MAAM,UAAU,WAAW,CACzB,UAAkB,EAClB,SAAiB,EACjB,IAAY,EACZ,GAAY,EACZ,SAAiB;IAEjB,MAAM,OAAO,GACX,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAEnD,OAAO;QACL,WAAW,EAAE,UAAU;QACvB,UAAU,EAAE,SAAS;QACrB,IAAI;QACJ,MAAM,EAAE,EAAE;QACV,SAAS,EAAE,EAAE;QACb,UAAU,EAAE,EAAE;QACd,cAAc,EAAE,CAAC;QACjB,WAAW,EAAE,CAAC;QACd,gBAAgB,EAAE,CAAC;QACnB,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;QACnC,KAAK,EAAE,OAAO;KACf,CAAC;AACJ,CAAC"}

package/packages/subagent/dist/Watchdog.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Per-subagent timeout enforcer.
+ *
+ * Starts a timer that invokes a kill function when the deadline elapses.
+ * The timer is unref'd so it does not keep the process alive.
+ * cancel() is idempotent and safe to call multiple times.
+ */
+export declare class Watchdog {
+    private readonly subagentId;
+    private readonly timeoutMs;
+    private readonly killFn;
+    private timer;
+    constructor(subagentId: string, timeoutMs: number, killFn: () => void);
+    /**
+     * Start the watchdog timer. If already started, this is a no-op.
+     */
+    start(): void;
+    /**
+     * Cancel the watchdog timer. Idempotent — safe to call multiple times.
+     */
+    cancel(): void;
+}
+//# sourceMappingURL=Watchdog.d.ts.map

package/packages/subagent/dist/Watchdog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Watchdog.d.ts","sourceRoot":"","sources":["../src/Watchdog.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,KAAK,CAA8C;gBAE/C,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI;IAMrE;;OAEG;IACH,KAAK,IAAI,IAAI;IAgBb;;OAEG;IACH,MAAM,IAAI,IAAI;CAMf"}

package/packages/subagent/dist/Watchdog.js

@@ -0,0 +1,44 @@
+/**
+ * Per-subagent timeout enforcer.
+ *
+ * Starts a timer that invokes a kill function when the deadline elapses.
+ * The timer is unref'd so it does not keep the process alive.
+ * cancel() is idempotent and safe to call multiple times.
+ */
+export class Watchdog {
+    subagentId;
+    timeoutMs;
+    killFn;
+    timer = null;
+    constructor(subagentId, timeoutMs, killFn) {
+        this.subagentId = subagentId;
+        this.timeoutMs = timeoutMs;
+        this.killFn = killFn;
+    }
+    /**
+     * Start the watchdog timer. If already started, this is a no-op.
+     */
+    start() {
+        if (this.timer !== null) {
+            return;
+        }
+        this.timer = setTimeout(() => {
+            this.timer = null;
+            this.killFn();
+        }, this.timeoutMs);
+        // Allow the Node.js process to exit even if the timer is still pending.
+        if (typeof this.timer === 'object' && 'unref' in this.timer) {
+            this.timer.unref();
+        }
+    }
+    /**
+     * Cancel the watchdog timer. Idempotent — safe to call multiple times.
+     */
+    cancel() {
+        if (this.timer !== null) {
+            clearTimeout(this.timer);
+            this.timer = null;
+        }
+    }
+}
+//# sourceMappingURL=Watchdog.js.map

package/packages/subagent/dist/Watchdog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Watchdog.js","sourceRoot":"","sources":["../src/Watchdog.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,OAAO,QAAQ;IACF,UAAU,CAAS;IACnB,SAAS,CAAS;IAClB,MAAM,CAAa;IAC5B,KAAK,GAAyC,IAAI,CAAC;IAE3D,YAAY,UAAkB,EAAE,SAAiB,EAAE,MAAkB;QACnE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC3B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAEnB,wEAAwE;QACxE,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5D,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACxB,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;CACF"}

package/packages/subagent/dist/index.d.ts

@@ -0,0 +1,15 @@
+export { SubagentOrchestrator, type SpawnRequest, type OrchestratorConfig, type IEventBus, } from './SubagentOrchestrator.js';
+export { SkillInvoker, type SkillInvocation, type SkillOutput, } from './SkillInvoker.js';
+export { SkillInputResolver, type ResolverContext, } from './SkillInputResolver.js';
+export { issueToken, signToken, validateToken, type CapabilityToken, type GraphReadScope, type SandboxConfig, type TaskType, type TokenIssueRequest, type ValidationResult, } from './CapabilityToken.js';
+export { type SubagentResult, type SubagentArtifact, type ToolCallRecord, errorResult, } from './SubagentResult.js';
+export { Watchdog } from './Watchdog.js';
+export { RESOURCE_DEFAULTS, type ResourceConfig, } from './ResourceDefaults.js';
+export { SandboxManager, type ISandboxBackend, type SandboxHandle, type SandboxCreateConfig, } from './sandbox/SandboxManager.js';
+export { DockerBackend } from './sandbox/DockerBackend.js';
+export { ProcessBackend } from './sandbox/ProcessBackend.js';
+export { PodmanBackend } from './sandbox/PodmanBackend.js';
+export { BwrapBackend } from './sandbox/BwrapBackend.js';
+export { FirecrackerBackend } from './sandbox/FirecrackerBackend.js';
+export { CloudBackend } from './sandbox/CloudBackend.js';
+//# sourceMappingURL=index.d.ts.map

package/packages/subagent/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oBAAoB,EACpB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,SAAS,GACf,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EACL,YAAY,EACZ,KAAK,eAAe,EACpB,KAAK,WAAW,GACjB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,kBAAkB,EAClB,KAAK,eAAe,GACrB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EACL,UAAU,EACV,SAAS,EACT,aAAa,EACb,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,QAAQ,EACb,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,WAAW,GACZ,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAGzC,OAAO,EACL,iBAAiB,EACjB,KAAK,cAAc,GACpB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,cAAc,EACd,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,mBAAmB,GACzB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC"}