0agent 1.0.0

package/packages/subagent/dist/sandbox/PodmanBackend.js

@@ -0,0 +1,144 @@
+import { spawn, exec } from 'node:child_process';
+import { promisify } from 'node:util';
+const execAsync = promisify(exec);
+const INPUT_SENTINEL = '__PAYLOAD_END__';
+const OUTPUT_SENTINEL = '__OUTPUT_END__';
+/**
+ * Rootless Podman backend — same container interface as Docker
+ * but runs without a daemon and supports rootless operation out of the box.
+ */
+export class PodmanBackend {
+    type = 'podman';
+    async isAvailable() {
+        try {
+            await execAsync('podman info', { timeout: 5_000 });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    async create(config) {
+        const id = crypto.randomUUID();
+        const args = this.buildRunArgs(id, config);
+        const proc = spawn('podman', args, {
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        let outputBuffer = '';
+        let outputResolve = null;
+        let outputReject = null;
+        proc.stdout.on('data', (chunk) => {
+            outputBuffer += chunk.toString();
+            const idx = outputBuffer.indexOf(OUTPUT_SENTINEL);
+            if (idx !== -1 && outputResolve) {
+                const result = outputBuffer.slice(0, idx);
+                outputBuffer = outputBuffer.slice(idx + OUTPUT_SENTINEL.length + 1);
+                outputResolve(result);
+                outputResolve = null;
+                outputReject = null;
+            }
+        });
+        proc.stderr.on('data', (chunk) => {
+            process.stderr.write(`[sandbox:podman:${id.slice(0, 8)}] ${chunk.toString()}`);
+        });
+        proc.on('error', (err) => {
+            if (outputReject) {
+                outputReject(err);
+                outputResolve = null;
+                outputReject = null;
+            }
+        });
+        proc.on('close', (code) => {
+            if (outputReject) {
+                outputReject(new Error(`Podman container exited with code ${code}`));
+                outputResolve = null;
+                outputReject = null;
+            }
+        });
+        const handle = {
+            id,
+            backend_type: 'podman',
+            created_at: Date.now(),
+            async write(data) {
+                return new Promise((resolve, reject) => {
+                    if (!proc.stdin.writable) {
+                        reject(new Error('Podman stdin is not writable'));
+                        return;
+                    }
+                    proc.stdin.write(data + '\n' + INPUT_SENTINEL + '\n', (err) => {
+                        if (err)
+                            reject(err);
+                        else
+                            resolve();
+                    });
+                });
+            },
+            readOutput() {
+                const idx = outputBuffer.indexOf(OUTPUT_SENTINEL);
+                if (idx !== -1) {
+                    const result = outputBuffer.slice(0, idx);
+                    outputBuffer = outputBuffer.slice(idx + OUTPUT_SENTINEL.length + 1);
+                    return Promise.resolve(result);
+                }
+                return new Promise((resolve, reject) => {
+                    outputResolve = resolve;
+                    outputReject = reject;
+                });
+            },
+            async kill() {
+                try {
+                    proc.kill('SIGKILL');
+                }
+                catch {
+                    // already dead
+                }
+            },
+        };
+        return handle;
+    }
+    async destroy(handle) {
+        await handle.kill();
+        try {
+            await execAsync(`podman rm -f $(podman ps -aq --filter "label=0agent-sandbox=${handle.id}") 2>/dev/null`, { timeout: 5_000 });
+        }
+        catch {
+            // ignore — container may already be removed
+        }
+    }
+    buildRunArgs(id, config) {
+        const args = [
+            'run', '--rm', '--interactive',
+            `--memory=${config.memory_mb}m`,
+            `--cpus=${config.cpus}`,
+            '--read-only',
+            '--tmpfs', '/tmp:size=100m',
+            '--tmpfs', '/root/.bun:size=50m',
+            '--security-opt', 'no-new-privileges',
+            '--label', `0agent-sandbox=${id}`,
+            // Podman-specific: run fully rootless with user namespace
+            '--userns=auto',
+        ];
+        if (config.network === 'none') {
+            args.push('--network=none');
+        }
+        else if (config.network === 'allowlist') {
+            args.push('--network=bridge');
+            if (config.network_allowlist?.length) {
+                args.push('--env', `NETWORK_ALLOWLIST=${config.network_allowlist.join(',')}`);
+            }
+        }
+        if (config.has_display) {
+            args.push('--env', 'DISPLAY=:99');
+        }
+        for (const [k, v] of Object.entries(config.env)) {
+            args.push('--env', `${k}=${v}`);
+        }
+        const image = config.image
+            ?? (config.has_browser
+                ? '0agent/subagent-runtime:chrome'
+                : '0agent/subagent-runtime:latest');
+        args.push(image);
+        return args;
+    }
+}
+//# sourceMappingURL=PodmanBackend.js.map

package/packages/subagent/dist/sandbox/PodmanBackend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PodmanBackend.js","sourceRoot":"","sources":["../../src/sandbox/PodmanBackend.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAqB,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAElC,MAAM,cAAc,GAAG,iBAAiB,CAAC;AACzC,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAEzC;;;GAGG;AACH,MAAM,OAAO,aAAa;IACf,IAAI,GAAG,QAAQ,CAAC;IAEzB,KAAK,CAAC,WAAW;QACf,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,aAAa,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA2B;QACtC,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAE3C,MAAM,IAAI,GAAiB,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE;YAC/C,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;QAEH,IAAI,YAAY,GAAG,EAAE,CAAC;QACtB,IAAI,aAAa,GAAqC,IAAI,CAAC;QAC3D,IAAI,YAAY,GAAqC,IAAI,CAAC;QAE1D,IAAI,CAAC,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,YAAY,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YAClD,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,aAAa,EAAE,CAAC;gBAChC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC1C,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBACpE,aAAa,CAAC,MAAM,CAAC,CAAC;gBACtB,aAAa,GAAG,IAAI,CAAC;gBACrB,YAAY,GAAG,IAAI,CAAC;YACtB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACvB,IAAI,YAAY,EAAE,CAAC;gBACjB,YAAY,CAAC,GAAG,CAAC,CAAC;gBAClB,aAAa,GAAG,IAAI,CAAC;gBACrB,YAAY,GAAG,IAAI,CAAC;YACtB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IAAI,YAAY,EAAE,CAAC;gBACjB,YAAY,CAAC,IAAI,KAAK,CAAC,qCAAqC,IAAI,EAAE,CAAC,CAAC,CAAC;gBACrE,aAAa,GAAG,IAAI,CAAC;gBACrB,YAAY,GAAG,IAAI,CAAC;YACtB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAkB;YAC5B,EAAE;YACF,YAAY,EAAE,QAAQ;YACtB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;YAEtB,KAAK,CAAC,KAAK,CAAC,IAAY;gBACtB,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBAC3C,IAAI,CAAC,IAAI,CAAC,KAAM,CAAC,QAAQ,EAAE,CAAC;wBAC1B,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;wBAClD,OAAO;oBACT,CAAC;oBACD,IAAI,CAAC,KAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,GAAG,cAAc,GAAG,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE;wBAC7D,IAAI,GAAG;4BAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;4BAChB,OAAO,EAAE,CAAC;oBACjB,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC;YAED,UAAU;gBACR,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;gBAClD,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;oBACf,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;oBAC1C,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;oBACpE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACjC,CAAC;gBACD,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBAC7C,aAAa,GAAG,OAAO,CAAC;oBACxB,YAAY,GAAG,MAAM,CAAC;gBACxB,CAAC,CAAC,CAAC;YACL,CAAC;YAED,KAAK,CAAC,IAAI;gBACR,IAAI,CAAC;oBACH,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACvB,CAAC;gBAAC,MAAM,CAAC;oBACP,eAAe;gBACjB,CAAC;YACH,CAAC;SACF,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAqB;QACjC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,SAAS,CACb,+DAA+D,MAAM,CAAC,EAAE,gBAAgB,EACxF,EAAE,OAAO,EAAE,KAAK,EAAE,CACnB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,4CAA4C;QAC9C,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,EAAU,EAAE,MAA2B;QAC1D,MAAM,IAAI,GAAa;YACrB,KAAK,EAAE,MAAM,EAAE,eAAe;YAC9B,YAAY,MAAM,CAAC,SAAS,GAAG;YAC/B,UAAU,MAAM,CAAC,IAAI,EAAE;YACvB,aAAa;YACb,SAAS,EAAE,gBAAgB;YAC3B,SAAS,EAAE,qBAAqB;YAChC,gBAAgB,EAAE,mBAAmB;YACrC,SAAS,EAAE,kBAAkB,EAAE,EAAE;YACjC,0DAA0D;YAC1D,eAAe;SAChB,CAAC;QAEF,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC9B,CAAC;aAAM,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YAC1C,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAC9B,IAAI,MAAM,CAAC,iBAAiB,EAAE,MAAM,EAAE,CAAC;gBACrC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,qBAAqB,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACpC,CAAC;QAED,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClC,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK;eACrB,CAAC,MAAM,CAAC,WAAW;gBACpB,CAAC,CAAC,gCAAgC;gBAClC,CAAC,CAAC,gCAAgC,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEjB,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/packages/subagent/dist/sandbox/ProcessBackend.d.ts

@@ -0,0 +1,16 @@
+import type { ISandboxBackend, SandboxCreateConfig, SandboxHandle } from './types.js';
+/**
+ * Simplest sandbox backend — spawns a child process with minimal isolation.
+ * Always available as the last-resort fallback.
+ *
+ * Communication protocol:
+ *   stdin  → JSON payload + INPUT_SENTINEL newline
+ *   stdout ← JSON result  + OUTPUT_SENTINEL newline
+ */
+export declare class ProcessBackend implements ISandboxBackend {
+    readonly type = "process";
+    isAvailable(): Promise<boolean>;
+    create(config: SandboxCreateConfig): Promise<SandboxHandle>;
+    destroy(handle: SandboxHandle): Promise<void>;
+}
+//# sourceMappingURL=ProcessBackend.d.ts.map

package/packages/subagent/dist/sandbox/ProcessBackend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProcessBackend.d.ts","sourceRoot":"","sources":["../../src/sandbox/ProcessBackend.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAKtF;;;;;;;GAOG;AACH,qBAAa,cAAe,YAAW,eAAe;IACpD,QAAQ,CAAC,IAAI,aAAa;IAEpB,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAI/B,MAAM,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,CAAC;IAiG3D,OAAO,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;CAGpD"}

package/packages/subagent/dist/sandbox/ProcessBackend.js

@@ -0,0 +1,152 @@
+import { spawn } from 'node:child_process';
+const INPUT_SENTINEL = '__PAYLOAD_END__';
+const OUTPUT_SENTINEL = '__OUTPUT_END__';
+/**
+ * Simplest sandbox backend — spawns a child process with minimal isolation.
+ * Always available as the last-resort fallback.
+ *
+ * Communication protocol:
+ *   stdin  → JSON payload + INPUT_SENTINEL newline
+ *   stdout ← JSON result  + OUTPUT_SENTINEL newline
+ */
+export class ProcessBackend {
+    type = 'process';
+    async isAvailable() {
+        return true; // always available
+    }
+    async create(config) {
+        const id = crypto.randomUUID();
+        // Detect runtime: prefer bun if available, else node
+        const runtime = 'node'; // use node; Bun detection deferred to production
+        const child = spawn(runtime, ['--input-type=module', '-e', WORKER_SCRIPT], {
+            stdio: ['pipe', 'pipe', 'pipe'],
+            env: {
+                ...process.env,
+                ...config.env,
+                SANDBOX_TYPE: 'process',
+                SANDBOX_ID: id,
+            },
+        });
+        // Buffer stdout chunks until we see the sentinel
+        let outputBuffer = '';
+        let outputResolve = null;
+        let outputReject = null;
+        child.stdout.on('data', (chunk) => {
+            outputBuffer += chunk.toString();
+            const idx = outputBuffer.indexOf(OUTPUT_SENTINEL);
+            if (idx !== -1 && outputResolve) {
+                const result = outputBuffer.slice(0, idx);
+                outputBuffer = outputBuffer.slice(idx + OUTPUT_SENTINEL.length + 1);
+                outputResolve(result);
+                outputResolve = null;
+                outputReject = null;
+            }
+        });
+        child.stderr.on('data', (chunk) => {
+            process.stderr.write(`[sandbox:process:${id.slice(0, 8)}] ${chunk.toString()}`);
+        });
+        child.on('error', (err) => {
+            if (outputReject) {
+                outputReject(err);
+                outputResolve = null;
+                outputReject = null;
+            }
+        });
+        child.on('close', (code) => {
+            if (outputReject) {
+                outputReject(new Error(`Process exited with code ${code}`));
+                outputResolve = null;
+                outputReject = null;
+            }
+        });
+        const handle = {
+            id,
+            backend_type: 'process',
+            created_at: Date.now(),
+            async write(data) {
+                return new Promise((resolve, reject) => {
+                    if (!child.stdin.writable) {
+                        reject(new Error('Process stdin is not writable'));
+                        return;
+                    }
+                    child.stdin.write(data + '\n' + INPUT_SENTINEL + '\n', (err) => {
+                        if (err)
+                            reject(err);
+                        else
+                            resolve();
+                    });
+                });
+            },
+            readOutput() {
+                // Check if we already have a complete message buffered
+                const idx = outputBuffer.indexOf(OUTPUT_SENTINEL);
+                if (idx !== -1) {
+                    const result = outputBuffer.slice(0, idx);
+                    outputBuffer = outputBuffer.slice(idx + OUTPUT_SENTINEL.length + 1);
+                    return Promise.resolve(result);
+                }
+                return new Promise((resolve, reject) => {
+                    outputResolve = resolve;
+                    outputReject = reject;
+                });
+            },
+            async kill() {
+                try {
+                    child.kill('SIGKILL');
+                }
+                catch {
+                    // already dead
+                }
+            },
+        };
+        return handle;
+    }
+    async destroy(handle) {
+        await handle.kill();
+    }
+}
+/**
+ * Inline worker script executed inside the child process.
+ * Reads JSON payloads delimited by INPUT_SENTINEL from stdin,
+ * evaluates them, and writes results delimited by OUTPUT_SENTINEL to stdout.
+ */
+const WORKER_SCRIPT = `
+import { createInterface } from 'node:readline';
+
+const INPUT_SENTINEL = '${INPUT_SENTINEL}';
+const OUTPUT_SENTINEL = '${OUTPUT_SENTINEL}';
+
+let buffer = '';
+
+process.stdin.setEncoding('utf8');
+process.stdin.on('data', (chunk) => {
+  buffer += chunk;
+  const idx = buffer.indexOf(INPUT_SENTINEL);
+  if (idx !== -1) {
+    const payload = buffer.slice(0, idx).trim();
+    buffer = buffer.slice(idx + INPUT_SENTINEL.length + 1);
+    handlePayload(payload);
+  }
+});
+
+async function handlePayload(raw) {
+  let result;
+  try {
+    const payload = JSON.parse(raw);
+    if (payload.type === 'exec') {
+      const { code } = payload;
+      const fn = new Function('return (async () => {' + code + '})()');
+      const output = await fn();
+      result = { ok: true, output: output ?? null };
+    } else if (payload.type === 'ping') {
+      result = { ok: true, pong: true };
+    } else {
+      result = { ok: false, error: 'Unknown payload type: ' + payload.type };
+    }
+  } catch (err) {
+    result = { ok: false, error: String(err) };
+  }
+  process.stdout.write(JSON.stringify(result) + '\\n' + OUTPUT_SENTINEL + '\\n');
+}
+`;
+//# sourceMappingURL=ProcessBackend.js.map

package/packages/subagent/dist/sandbox/ProcessBackend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProcessBackend.js","sourceRoot":"","sources":["../../src/sandbox/ProcessBackend.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAG9D,MAAM,cAAc,GAAG,iBAAiB,CAAC;AACzC,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAEzC;;;;;;;GAOG;AACH,MAAM,OAAO,cAAc;IAChB,IAAI,GAAG,SAAS,CAAC;IAE1B,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC,CAAC,mBAAmB;IAClC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA2B;QACtC,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAE/B,qDAAqD;QACrD,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,iDAAiD;QAEzE,MAAM,KAAK,GAAiB,KAAK,CAAC,OAAO,EAAE,CAAC,qBAAqB,EAAE,IAAI,EAAE,aAAa,CAAC,EAAE;YACvF,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,GAAG,EAAE;gBACH,GAAG,OAAO,CAAC,GAAG;gBACd,GAAG,MAAM,CAAC,GAAG;gBACb,YAAY,EAAE,SAAS;gBACvB,UAAU,EAAE,EAAE;aACf;SACF,CAAC,CAAC;QAEH,iDAAiD;QACjD,IAAI,YAAY,GAAG,EAAE,CAAC;QACtB,IAAI,aAAa,GAAqC,IAAI,CAAC;QAC3D,IAAI,YAAY,GAAqC,IAAI,CAAC;QAE1D,KAAK,CAAC,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,YAAY,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YAClD,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,aAAa,EAAE,CAAC;gBAChC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC1C,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBACpE,aAAa,CAAC,MAAM,CAAC,CAAC;gBACtB,aAAa,GAAG,IAAI,CAAC;gBACrB,YAAY,GAAG,IAAI,CAAC;YACtB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAClF,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,IAAI,YAAY,EAAE,CAAC;gBACjB,YAAY,CAAC,GAAG,CAAC,CAAC;gBAClB,aAAa,GAAG,IAAI,CAAC;gBACrB,YAAY,GAAG,IAAI,CAAC;YACtB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,YAAY,EAAE,CAAC;gBACjB,YAAY,CAAC,IAAI,KAAK,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC5D,aAAa,GAAG,IAAI,CAAC;gBACrB,YAAY,GAAG,IAAI,CAAC;YACtB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAkB;YAC5B,EAAE;YACF,YAAY,EAAE,SAAS;YACvB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;YAEtB,KAAK,CAAC,KAAK,CAAC,IAAY;gBACtB,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBAC3C,IAAI,CAAC,KAAK,CAAC,KAAM,CAAC,QAAQ,EAAE,CAAC;wBAC3B,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC;wBACnD,OAAO;oBACT,CAAC;oBACD,KAAK,CAAC,KAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,GAAG,cAAc,GAAG,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE;wBAC9D,IAAI,GAAG;4BAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;4BAChB,OAAO,EAAE,CAAC;oBACjB,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC;YAED,UAAU;gBACR,uDAAuD;gBACvD,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;gBAClD,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;oBACf,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;oBAC1C,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;oBACpE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACjC,CAAC;gBACD,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBAC7C,aAAa,GAAG,OAAO,CAAC;oBACxB,YAAY,GAAG,MAAM,CAAC;gBACxB,CAAC,CAAC,CAAC;YACL,CAAC;YAED,KAAK,CAAC,IAAI;gBACR,IAAI,CAAC;oBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxB,CAAC;gBAAC,MAAM,CAAC;oBACP,eAAe;gBACjB,CAAC;YACH,CAAC;SACF,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAqB;QACjC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,aAAa,GAAG;;;0BAGI,cAAc;2BACb,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkCzC,CAAC"}

package/packages/subagent/dist/sandbox/SandboxManager.d.ts

@@ -0,0 +1,17 @@
+import type { ISandboxBackend, SandboxCreateConfig, SandboxHandle } from './types.js';
+export type { ISandboxBackend, SandboxCreateConfig, SandboxHandle, InjectedFile } from './types.js';
+export declare class SandboxManager {
+    private backends;
+    private detectedBackend;
+    registerBackend(backend: ISandboxBackend): void;
+    /**
+     * Auto-detect the best available backend.
+     * Priority: firecracker > docker > podman > bwrap > cloud > process
+     */
+    detectBackend(): Promise<string>;
+    create(config: SandboxCreateConfig, preferredBackend?: string): Promise<SandboxHandle>;
+    destroy(handle: SandboxHandle): Promise<void>;
+    getDetectedBackend(): string | null;
+    getBackend(type: string): ISandboxBackend | undefined;
+}
+//# sourceMappingURL=SandboxManager.d.ts.map

package/packages/subagent/dist/sandbox/SandboxManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SandboxManager.d.ts","sourceRoot":"","sources":["../../src/sandbox/SandboxManager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEtF,YAAY,EAAE,eAAe,EAAE,mBAAmB,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAEpG,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAA2C;IAC3D,OAAO,CAAC,eAAe,CAAuB;IAE9C,eAAe,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI;IAI/C;;;OAGG;IACG,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC;IAgBhC,MAAM,CACV,MAAM,EAAE,mBAAmB,EAC3B,gBAAgB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,aAAa,CAAC;IASnB,OAAO,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAOnD,kBAAkB,IAAI,MAAM,GAAG,IAAI;IAInC,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;CAGtD"}

package/packages/subagent/dist/sandbox/SandboxManager.js

@@ -0,0 +1,45 @@
+export class SandboxManager {
+    backends = new Map();
+    detectedBackend = null;
+    registerBackend(backend) {
+        this.backends.set(backend.type, backend);
+    }
+    /**
+     * Auto-detect the best available backend.
+     * Priority: firecracker > docker > podman > bwrap > cloud > process
+     */
+    async detectBackend() {
+        const priority = ['firecracker', 'docker', 'podman', 'bwrap', 'cloud', 'process'];
+        for (const type of priority) {
+            const backend = this.backends.get(type);
+            if (backend && await backend.isAvailable()) {
+                this.detectedBackend = type;
+                return type;
+            }
+        }
+        // process is always the fallback
+        this.detectedBackend = 'process';
+        return 'process';
+    }
+    async create(config, preferredBackend) {
+        const type = preferredBackend ?? this.detectedBackend ?? await this.detectBackend();
+        const backend = this.backends.get(type);
+        if (!backend) {
+            throw new Error(`Sandbox backend '${type}' not registered`);
+        }
+        return backend.create(config);
+    }
+    async destroy(handle) {
+        const backend = this.backends.get(handle.backend_type);
+        if (backend) {
+            await backend.destroy(handle);
+        }
+    }
+    getDetectedBackend() {
+        return this.detectedBackend;
+    }
+    getBackend(type) {
+        return this.backends.get(type);
+    }
+}
+//# sourceMappingURL=SandboxManager.js.map

package/packages/subagent/dist/sandbox/SandboxManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SandboxManager.js","sourceRoot":"","sources":["../../src/sandbox/SandboxManager.ts"],"names":[],"mappings":"AAIA,MAAM,OAAO,cAAc;IACjB,QAAQ,GAAiC,IAAI,GAAG,EAAE,CAAC;IACnD,eAAe,GAAkB,IAAI,CAAC;IAE9C,eAAe,CAAC,OAAwB;QACtC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa;QACjB,MAAM,QAAQ,GAAG,CAAC,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAElF,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,OAAO,IAAI,MAAM,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC3C,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;gBAC5B,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;QACjC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,MAAM,CACV,MAA2B,EAC3B,gBAAyB;QAEzB,MAAM,IAAI,GAAG,gBAAgB,IAAI,IAAI,CAAC,eAAe,IAAI,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QACpF,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,kBAAkB,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAqB;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED,UAAU,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;CACF"}

package/packages/subagent/dist/sandbox/types.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Shared types for sandbox backends.
+ */
+export interface InjectedFile {
+    path: string;
+    content: string;
+    mode?: number;
+}
+export interface SandboxCreateConfig {
+    image?: string;
+    memory_mb: number;
+    cpus: number;
+    network: 'none' | 'allowlist' | 'full';
+    network_allowlist?: string[];
+    has_browser: boolean;
+    has_display: boolean;
+    env: Record<string, string>;
+    inject_files: InjectedFile[];
+}
+export interface SandboxHandle {
+    id: string;
+    backend_type: string;
+    created_at: number;
+    vnc_port?: number;
+    write(data: string): Promise<void>;
+    readOutput(): Promise<string>;
+    kill(): Promise<void>;
+}
+export interface ISandboxBackend {
+    readonly type: string;
+    isAvailable(): Promise<boolean>;
+    create(config: SandboxCreateConfig): Promise<SandboxHandle>;
+    destroy(handle: SandboxHandle): Promise<void>;
+}
+//# sourceMappingURL=types.d.ts.map

package/packages/subagent/dist/sandbox/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/sandbox/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IACvC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,YAAY,EAAE,YAAY,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC5D,OAAO,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/C"}

package/packages/subagent/dist/sandbox/types.js

@@ -0,0 +1,5 @@
+/**
+ * Shared types for sandbox backends.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/packages/subagent/dist/sandbox/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/sandbox/types.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/packages/subagent-runtime/dist/AgentLoop.d.ts

@@ -0,0 +1,46 @@
+import type { MCPProxy } from './MCPProxy.js';
+import type { ResourceTracker, ToolCallRecord } from './ResourceTracker.js';
+export interface LLMMessage {
+    role: 'system' | 'user' | 'assistant' | 'tool';
+    content: string;
+    tool_call_id?: string;
+}
+export interface LLMResponse {
+    content: string;
+    finish_reason: 'stop' | 'tool_use';
+    tool_calls?: Array<{
+        id: string;
+        name: string;
+        input: Record<string, unknown>;
+    }>;
+    tokens_used: number;
+}
+export interface ILLMClient {
+    complete(messages: LLMMessage[]): Promise<LLMResponse>;
+}
+export interface AgentLoopResult {
+    output: string;
+    exit_reason: 'completed' | 'resource_limit' | 'error';
+    tool_calls: ToolCallRecord[];
+    llm_calls_used: number;
+    tokens_used: number;
+}
+/**
+ * Simple LLM + tool execution loop.
+ *
+ * Each iteration:
+ *  1. Check resource limits
+ *  2. Call LLM with current message history
+ *  3. If LLM returns tool_calls: execute each via MCPProxy, append results
+ *  4. If LLM returns stop: break and return final output
+ */
+export declare class AgentLoop {
+    private readonly systemPrompt;
+    private readonly llm;
+    private readonly proxy;
+    private readonly tracker;
+    constructor(systemPrompt: string, llm: ILLMClient, proxy: MCPProxy, tracker: ResourceTracker);
+    run(task: string): Promise<AgentLoopResult>;
+    private buildResult;
+}
+//# sourceMappingURL=AgentLoop.d.ts.map

package/packages/subagent-runtime/dist/AgentLoop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentLoop.d.ts","sourceRoot":"","sources":["../src/AgentLoop.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAI5E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,GAAG,UAAU,CAAC;IACnC,UAAU,CAAC,EAAE,KAAK,CAAC;QACjB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAChC,CAAC,CAAC;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CACxD;AAID,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,WAAW,GAAG,gBAAgB,GAAG,OAAO,CAAC;IACtD,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;CACrB;AAID;;;;;;;;GAQG;AACH,qBAAa,SAAS;IAElB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAHP,YAAY,EAAE,MAAM,EACpB,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,QAAQ,EACf,OAAO,EAAE,eAAe;IAGrC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAsEjD,OAAO,CAAC,WAAW;CAYpB"}

package/packages/subagent-runtime/dist/AgentLoop.js

@@ -0,0 +1,85 @@
+// ─── AgentLoop ──────────────────────────────────────
+/**
+ * Simple LLM + tool execution loop.
+ *
+ * Each iteration:
+ *  1. Check resource limits
+ *  2. Call LLM with current message history
+ *  3. If LLM returns tool_calls: execute each via MCPProxy, append results
+ *  4. If LLM returns stop: break and return final output
+ */
+export class AgentLoop {
+    systemPrompt;
+    llm;
+    proxy;
+    tracker;
+    constructor(systemPrompt, llm, proxy, tracker) {
+        this.systemPrompt = systemPrompt;
+        this.llm = llm;
+        this.proxy = proxy;
+        this.tracker = tracker;
+    }
+    async run(task) {
+        const messages = [
+            { role: 'system', content: this.systemPrompt },
+            { role: 'user', content: task },
+        ];
+        let lastOutput = '';
+        while (true) {
+            // Check if we can still make LLM calls
+            if (!this.tracker.canMakeLLMCall()) {
+                return this.buildResult(lastOutput || 'Resource limit reached: max LLM calls exceeded', 'resource_limit');
+            }
+            // Call LLM
+            let response;
+            try {
+                response = await this.llm.complete(messages);
+            }
+            catch (err) {
+                const msg = err instanceof Error ? err.message : String(err);
+                return this.buildResult(`LLM error: ${msg}`, 'error');
+            }
+            // Record usage
+            this.tracker.recordLLMCall(response.tokens_used);
+            lastOutput = response.content;
+            // Append assistant message
+            messages.push({ role: 'assistant', content: response.content });
+            // If stop, we are done
+            if (response.finish_reason === 'stop' || !response.tool_calls?.length) {
+                return this.buildResult(response.content, 'completed');
+            }
+            // Execute tool calls
+            for (const toolCall of response.tool_calls) {
+                if (!this.tracker.canMakeToolCall()) {
+                    return this.buildResult(lastOutput || 'Resource limit reached: max tool calls exceeded', 'resource_limit');
+                }
+                const callStart = Date.now();
+                let toolOutput;
+                try {
+                    toolOutput = await this.proxy.call(toolCall.name, toolCall.input);
+                }
+                catch (err) {
+                    toolOutput = { error: err instanceof Error ? err.message : String(err) };
+                }
+                const callDuration = Date.now() - callStart;
+                this.tracker.recordToolCall(toolCall.name, toolCall.input, toolOutput, callDuration);
+                // Append tool result message
+                messages.push({
+                    role: 'tool',
+                    content: typeof toolOutput === 'string' ? toolOutput : JSON.stringify(toolOutput),
+                    tool_call_id: toolCall.id,
+                });
+            }
+        }
+    }
+    buildResult(output, exitReason) {
+        return {
+            output,
+            exit_reason: exitReason,
+            tool_calls: this.tracker.getToolCallRecords(),
+            llm_calls_used: this.tracker.llm_calls,
+            tokens_used: this.tracker.tokens_used,
+        };
+    }
+}
+//# sourceMappingURL=AgentLoop.js.map

package/packages/subagent-runtime/dist/AgentLoop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentLoop.js","sourceRoot":"","sources":["../src/AgentLoop.ts"],"names":[],"mappings":"AAoCA,uDAAuD;AAEvD;;;;;;;;GAQG;AACH,MAAM,OAAO,SAAS;IAED;IACA;IACA;IACA;IAJnB,YACmB,YAAoB,EACpB,GAAe,EACf,KAAe,EACf,OAAwB;QAHxB,iBAAY,GAAZ,YAAY,CAAQ;QACpB,QAAG,GAAH,GAAG,CAAY;QACf,UAAK,GAAL,KAAK,CAAU;QACf,YAAO,GAAP,OAAO,CAAiB;IACxC,CAAC;IAEJ,KAAK,CAAC,GAAG,CAAC,IAAY;QACpB,MAAM,QAAQ,GAAiB;YAC7B,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE;YAC9C,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;SAChC,CAAC;QAEF,IAAI,UAAU,GAAG,EAAE,CAAC;QAEpB,OAAO,IAAI,EAAE,CAAC;YACZ,uCAAuC;YACvC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;gBACnC,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,IAAI,gDAAgD,EAAE,gBAAgB,CAAC,CAAC;YAC5G,CAAC;YAED,WAAW;YACX,IAAI,QAAqB,CAAC;YAC1B,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC/C,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,OAAO,IAAI,CAAC,WAAW,CAAC,cAAc,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;YACxD,CAAC;YAED,eAAe;YACf,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACjD,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC;YAE9B,2BAA2B;YAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;YAEhE,uBAAuB;YACvB,IAAI,QAAQ,CAAC,aAAa,KAAK,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;gBACtE,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YACzD,CAAC;YAED,qBAAqB;YACrB,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;gBAC3C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;oBACpC,OAAO,IAAI,CAAC,WAAW,CACrB,UAAU,IAAI,iDAAiD,EAC/D,gBAAgB,CACjB,CAAC;gBACJ,CAAC;gBAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC7B,IAAI,UAAmB,CAAC;gBACxB,IAAI,CAAC;oBACH,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACpE,CAAC;gBAAC,OAAO,GAAY,EAAE,CAAC;oBACtB,UAAU,GAAG,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3E,CAAC;gBACD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBAE5C,IAAI,CAAC,OAAO,CAAC,cAAc,CACzB,QAAQ,CAAC,IAAI,EACb,QAAQ,CAAC,KAAK,EACd,UAAU,EACV,YAAY,CACb,CAAC;gBAEF,6BAA6B;gBAC7B,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;oBACjF,YAAY,EAAE,QAAQ,CAAC,EAAE;iBAC1B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAEO,WAAW,CACjB,MAAc,EACd,UAA0C;QAE1C,OAAO;YACL,MAAM;YACN,WAAW,EAAE,UAAU;YACvB,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE;YAC7C,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YACtC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;SACtC,CAAC;IACJ,CAAC;CACF"}

package/packages/subagent-runtime/dist/MCPProxy.d.ts

@@ -0,0 +1,24 @@
+/**
+ * MCPProxy — connects to the parent daemon's filtered MCP proxy endpoint.
+ *
+ * In Phase 3 this is a stub that logs calls and returns mock results.
+ * The real implementation will issue HTTP requests to the daemon's
+ * per-subagent MCP proxy endpoint, which filters tool access based on
+ * the capability token's allowed_tools list.
+ */
+export declare class MCPProxy {
+    private readonly proxyUrl;
+    constructor(proxyUrl: string);
+    /**
+     * Call a tool through the MCP proxy.
+     */
+    call(toolName: string, args: Record<string, unknown>): Promise<unknown>;
+    /**
+     * List tools available through the proxy.
+     */
+    listTools(): Promise<Array<{
+        name: string;
+        description: string;
+    }>>;
+}
+//# sourceMappingURL=MCPProxy.d.ts.map

package/packages/subagent-runtime/dist/MCPProxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MCPProxy.d.ts","sourceRoot":"","sources":["../src/MCPProxy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,qBAAa,QAAQ;IACP,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,MAAM;IAE7C;;OAEG;IACG,IAAI,CACR,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,OAAO,CAAC;IAOnB;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAIzE"}