@awcp/sdk 0.0.0-dev-202601300724

package/dist/executor/config.d.ts

@@ -0,0 +1,126 @@
+/**
+ * AWCP Executor Configuration
+ *
+ * Configuration for enabling AWCP support in an A2A agent.
+ */
+import type { InviteMessage, SandboxProfile, AccessMode } from '@awcp/core';
+/**
+ * Mount configuration
+ */
+export interface MountConfig {
+    /** Root directory for mount points, e.g., '/tmp/awcp/mounts' */
+    root: string;
+}
+/**
+ * Policy constraints for accepting delegations
+ */
+export interface PolicyConstraints {
+    /** Max concurrent delegations (default: 5) */
+    maxConcurrentDelegations?: number;
+    /** Max TTL in seconds to accept (default: 3600) */
+    maxTtlSeconds?: number;
+    /** Allowed access modes (default: ['ro', 'rw']) */
+    allowedAccessModes?: AccessMode[];
+    /** Auto-accept INVITEs without confirmation (default: true) */
+    autoAccept?: boolean;
+}
+/**
+ * Lifecycle hooks for AWCP events
+ */
+export interface ExecutorHooks {
+    /** Called when INVITE received. Return false to decline. */
+    onInvite?: (invite: InviteMessage) => Promise<boolean>;
+    /** Called when task execution starts */
+    onTaskStart?: (delegationId: string, mountPoint: string) => void;
+    /** Called when task completes successfully */
+    onTaskComplete?: (delegationId: string, summary: string) => void;
+    /** Called on error */
+    onError?: (delegationId: string, error: Error) => void;
+}
+/**
+ * AWCP Executor Configuration
+ *
+ * @example
+ * ```typescript
+ * const awcpConfig: ExecutorConfig = {
+ *   mount: {
+ *     root: '/tmp/awcp/mounts',
+ *   },
+ *   sandbox: {
+ *     cwdOnly: true,
+ *     allowNetwork: true,
+ *     allowExec: true,
+ *   },
+ *   policy: {
+ *     maxConcurrentDelegations: 3,
+ *     autoAccept: true,
+ *   },
+ * };
+ * ```
+ */
+export interface ExecutorConfig {
+    /**
+     * Mount configuration (required)
+     *
+     * Specifies where delegator workspaces will be mounted.
+     */
+    mount: MountConfig;
+    /**
+     * Sandbox profile (optional)
+     *
+     * Capability declaration sent in ACCEPT message to inform Delegator
+     * about this agent's execution constraints.
+     */
+    sandbox?: SandboxProfile;
+    /**
+     * Policy constraints (optional)
+     *
+     * Rules for accepting or rejecting delegation requests.
+     */
+    policy?: PolicyConstraints;
+    /**
+     * Lifecycle hooks (optional)
+     *
+     * Callbacks for various AWCP lifecycle events.
+     */
+    hooks?: ExecutorHooks;
+}
+/**
+ * Default configuration values
+ */
+export declare const DEFAULT_EXECUTOR_CONFIG: {
+    readonly policy: {
+        readonly maxConcurrentDelegations: 5;
+        readonly maxTtlSeconds: 3600;
+        readonly allowedAccessModes: AccessMode[];
+        readonly autoAccept: true;
+    };
+    readonly sandbox: {
+        readonly cwdOnly: true;
+        readonly allowNetwork: true;
+        readonly allowExec: true;
+    };
+};
+/**
+ * Resolved policy with all fields required
+ */
+export interface ResolvedPolicyConstraints {
+    maxConcurrentDelegations: number;
+    maxTtlSeconds: number;
+    allowedAccessModes: AccessMode[];
+    autoAccept: boolean;
+}
+/**
+ * Resolved configuration with all defaults applied
+ */
+export interface ResolvedExecutorConfig {
+    mount: MountConfig;
+    sandbox: SandboxProfile;
+    policy: ResolvedPolicyConstraints;
+    hooks: ExecutorHooks;
+}
+/**
+ * Merge user config with defaults
+ */
+export declare function resolveExecutorConfig(config: ExecutorConfig): ResolvedExecutorConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/executor/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/executor/config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE5E;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,8CAA8C;IAC9C,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,mDAAmD;IACnD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mDAAmD;IACnD,kBAAkB,CAAC,EAAE,UAAU,EAAE,CAAC;IAClC,+DAA+D;IAC/D,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvD,wCAAwC;IACxC,WAAW,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;IACjE,8CAA8C;IAC9C,cAAc,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACjE,sBAAsB;IACtB,OAAO,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CACxD;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,KAAK,EAAE,WAAW,CAAC;IAEnB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,cAAc,CAAC;IAEzB;;;;OAIG;IACH,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAE3B;;;;OAIG;IACH,KAAK,CAAC,EAAE,aAAa,CAAC;CACvB;AAED;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;qCAII,UAAU,EAAE;;;;;;;;CAQ1C,CAAC;AAEX;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,wBAAwB,EAAE,MAAM,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,UAAU,EAAE,CAAC;IACjC,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,cAAc,CAAC;IACxB,MAAM,EAAE,yBAAyB,CAAC;IAClC,KAAK,EAAE,aAAa,CAAC;CACtB;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,cAAc,GAAG,sBAAsB,CAYpF"}

package/dist/executor/config.js

@@ -0,0 +1,38 @@
+/**
+ * AWCP Executor Configuration
+ *
+ * Configuration for enabling AWCP support in an A2A agent.
+ */
+/**
+ * Default configuration values
+ */
+export const DEFAULT_EXECUTOR_CONFIG = {
+    policy: {
+        maxConcurrentDelegations: 5,
+        maxTtlSeconds: 3600,
+        allowedAccessModes: ['ro', 'rw'],
+        autoAccept: true,
+    },
+    sandbox: {
+        cwdOnly: true,
+        allowNetwork: true,
+        allowExec: true,
+    },
+};
+/**
+ * Merge user config with defaults
+ */
+export function resolveExecutorConfig(config) {
+    return {
+        mount: config.mount,
+        sandbox: config.sandbox ?? { ...DEFAULT_EXECUTOR_CONFIG.sandbox },
+        policy: {
+            maxConcurrentDelegations: config.policy?.maxConcurrentDelegations ?? DEFAULT_EXECUTOR_CONFIG.policy.maxConcurrentDelegations,
+            maxTtlSeconds: config.policy?.maxTtlSeconds ?? DEFAULT_EXECUTOR_CONFIG.policy.maxTtlSeconds,
+            allowedAccessModes: config.policy?.allowedAccessModes ?? [...DEFAULT_EXECUTOR_CONFIG.policy.allowedAccessModes],
+            autoAccept: config.policy?.autoAccept ?? DEFAULT_EXECUTOR_CONFIG.policy.autoAccept,
+        },
+        hooks: config.hooks ?? {},
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/executor/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/executor/config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA4FH;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,MAAM,EAAE;QACN,wBAAwB,EAAE,CAAC;QAC3B,aAAa,EAAE,IAAI;QACnB,kBAAkB,EAAE,CAAC,IAAI,EAAE,IAAI,CAAiB;QAChD,UAAU,EAAE,IAAI;KACjB;IACD,OAAO,EAAE;QACP,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,IAAI;KAChB;CACO,CAAC;AAsBX;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAsB;IAC1D,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE,GAAG,uBAAuB,CAAC,OAAO,EAAE;QACjE,MAAM,EAAE;YACN,wBAAwB,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,IAAI,uBAAuB,CAAC,MAAM,CAAC,wBAAwB;YAC5H,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,IAAI,uBAAuB,CAAC,MAAM,CAAC,aAAa;YAC3F,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,IAAI,CAAC,GAAG,uBAAuB,CAAC,MAAM,CAAC,kBAAkB,CAAC;YAC/G,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,IAAI,uBAAuB,CAAC,MAAM,CAAC,UAAU;SACnF;QACD,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;KAC1B,CAAC;AACJ,CAAC"}

package/dist/executor/delegator-client.d.ts

@@ -0,0 +1,18 @@
+/**
+ * HTTP Client for sending AWCP messages to Delegator
+ */
+import type { AwcpMessage } from '@awcp/core';
+/**
+ * Client for sending AWCP messages back to the Delegator daemon
+ */
+export declare class DelegatorClient {
+    private timeout;
+    constructor(options?: {
+        timeout?: number;
+    });
+    /**
+     * Send an AWCP message to the Delegator
+     */
+    send(delegatorUrl: string, message: AwcpMessage): Promise<void>;
+}
+//# sourceMappingURL=delegator-client.d.ts.map

package/dist/executor/delegator-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegator-client.d.ts","sourceRoot":"","sources":["../../src/executor/delegator-client.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;GAEG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,OAAO,CAAS;gBAEZ,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE;IAI1C;;OAEG;IACG,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CAwBtE"}

package/dist/executor/delegator-client.js

@@ -0,0 +1,37 @@
+/**
+ * HTTP Client for sending AWCP messages to Delegator
+ */
+/**
+ * Client for sending AWCP messages back to the Delegator daemon
+ */
+export class DelegatorClient {
+    timeout;
+    constructor(options) {
+        this.timeout = options?.timeout ?? 30000;
+    }
+    /**
+     * Send an AWCP message to the Delegator
+     */
+    async send(delegatorUrl, message) {
+        const controller = new AbortController();
+        const timeoutId = setTimeout(() => controller.abort(), this.timeout);
+        try {
+            const response = await fetch(delegatorUrl, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                },
+                body: JSON.stringify(message),
+                signal: controller.signal,
+            });
+            if (!response.ok) {
+                const text = await response.text().catch(() => '');
+                throw new Error(`Failed to send ${message.type} to delegator: ${response.status} ${response.statusText}${text ? ` - ${text}` : ''}`);
+            }
+        }
+        finally {
+            clearTimeout(timeoutId);
+        }
+    }
+}
+//# sourceMappingURL=delegator-client.js.map

package/dist/executor/delegator-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegator-client.js","sourceRoot":"","sources":["../../src/executor/delegator-client.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH;;GAEG;AACH,MAAM,OAAO,eAAe;IAClB,OAAO,CAAS;IAExB,YAAY,OAA8B;QACxC,IAAI,CAAC,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,KAAK,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,YAAoB,EAAE,OAAoB;QACnD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAErE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE;gBACzC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBACnD,MAAM,IAAI,KAAK,CACb,kBAAkB,OAAO,CAAC,IAAI,kBAAkB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACpH,CAAC;YACJ,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;CACF"}

package/dist/executor/index.d.ts

@@ -0,0 +1,5 @@
+export { ExecutorService, type ExecutorServiceOptions, type ExecutorServiceStatus } from './service.js';
+export { type ExecutorConfig, type MountConfig, type PolicyConstraints, type ExecutorHooks, type ResolvedExecutorConfig, DEFAULT_EXECUTOR_CONFIG, resolveExecutorConfig, } from './config.js';
+export { LocalPolicy, type PolicyConfig, type MountPointValidation } from './policy.js';
+export { DelegatorClient } from './delegator-client.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/executor/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/executor/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,KAAK,sBAAsB,EAAE,KAAK,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACxG,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,sBAAsB,EAC3B,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,WAAW,EAAE,KAAK,YAAY,EAAE,KAAK,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/executor/index.js

@@ -0,0 +1,7 @@
+// High-level API
+export { ExecutorService } from './service.js';
+export { DEFAULT_EXECUTOR_CONFIG, resolveExecutorConfig, } from './config.js';
+// Utilities (can be used independently)
+export { LocalPolicy } from './policy.js';
+export { DelegatorClient } from './delegator-client.js';
+//# sourceMappingURL=index.js.map

package/dist/executor/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/executor/index.ts"],"names":[],"mappings":"AAAA,iBAAiB;AACjB,OAAO,EAAE,eAAe,EAA2D,MAAM,cAAc,CAAC;AACxG,OAAO,EAML,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,aAAa,CAAC;AAErB,wCAAwC;AACxC,OAAO,EAAE,WAAW,EAAgD,MAAM,aAAa,CAAC;AACxF,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/executor/policy.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Local policy configuration
+ */
+export interface PolicyConfig {
+    /** Base directory for mount points (default: /tmp/awcp/mounts) */
+    mountRoot?: string;
+    /** Maximum concurrent delegations */
+    maxConcurrent?: number;
+}
+/**
+ * Mount point validation result
+ */
+export interface MountPointValidation {
+    valid: boolean;
+    reason?: string;
+}
+/**
+ * Local Policy - Enforces security constraints on the Executor side.
+ *
+ * Security: startsWith(root) check prevents path traversal attacks.
+ */
+export declare class LocalPolicy {
+    private config;
+    private allocatedMounts;
+    constructor(config?: PolicyConfig);
+    /**
+     * Allocate a mount point for a delegation
+     */
+    allocateMountPoint(delegationId: string): string;
+    /**
+     * Validate that a mount point is safe to use
+     */
+    validateMountPoint(mountPoint: string): Promise<MountPointValidation>;
+    /**
+     * Prepare a mount point (create directory, ensure empty)
+     */
+    prepareMountPoint(mountPoint: string): Promise<void>;
+    /**
+     * Release a mount point and remove the directory
+     */
+    releaseMountPoint(mountPoint: string): Promise<void>;
+    /**
+     * Cleanup stale mount directories from previous runs
+     */
+    cleanupStaleMounts(): Promise<number>;
+    /**
+     * Check if concurrent limit is reached
+     */
+    canAcceptMore(): boolean;
+    /**
+     * Get currently allocated mount points
+     */
+    getAllocatedMounts(): string[];
+}
+//# sourceMappingURL=policy.d.ts.map

package/dist/executor/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/executor/policy.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAID;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAOD;;;;GAIG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,eAAe,CAAqB;gBAEhC,MAAM,CAAC,EAAE,YAAY;IAIjC;;OAEG;IACH,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM;IAOhD;;OAEG;IACG,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAa3E;;OAEG;IACG,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS1D;;OAEG;IACG,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS1D;;OAEG;IACG,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC;IAuB3C;;OAEG;IACH,aAAa,IAAI,OAAO;IAKxB;;OAEG;IACH,kBAAkB,IAAI,MAAM,EAAE;CAG/B"}

package/dist/executor/policy.js

@@ -0,0 +1,100 @@
+import { mkdir, readdir, rm } from 'node:fs/promises';
+import { join } from 'node:path';
+/**
+ * Default mount root directory
+ */
+const DEFAULT_MOUNT_ROOT = '/tmp/awcp/mounts';
+/**
+ * Local Policy - Enforces security constraints on the Executor side.
+ *
+ * Security: startsWith(root) check prevents path traversal attacks.
+ */
+export class LocalPolicy {
+    config;
+    allocatedMounts = new Set();
+    constructor(config) {
+        this.config = config ?? {};
+    }
+    /**
+     * Allocate a mount point for a delegation
+     */
+    allocateMountPoint(delegationId) {
+        const root = this.config.mountRoot ?? DEFAULT_MOUNT_ROOT;
+        const mountPoint = join(root, delegationId);
+        this.allocatedMounts.add(mountPoint);
+        return mountPoint;
+    }
+    /**
+     * Validate that a mount point is safe to use
+     */
+    async validateMountPoint(mountPoint) {
+        const root = this.config.mountRoot ?? DEFAULT_MOUNT_ROOT;
+        if (!mountPoint.startsWith(root)) {
+            return {
+                valid: false,
+                reason: `Mount point must be under ${root}`,
+            };
+        }
+        return { valid: true };
+    }
+    /**
+     * Prepare a mount point (create directory, ensure empty)
+     */
+    async prepareMountPoint(mountPoint) {
+        await mkdir(mountPoint, { recursive: true });
+        const entries = await readdir(mountPoint);
+        if (entries.length > 0) {
+            throw new Error(`Mount point ${mountPoint} is not empty`);
+        }
+    }
+    /**
+     * Release a mount point and remove the directory
+     */
+    async releaseMountPoint(mountPoint) {
+        this.allocatedMounts.delete(mountPoint);
+        try {
+            await rm(mountPoint, { recursive: true, force: true });
+        }
+        catch {
+            // Ignore errors - directory may already be gone
+        }
+    }
+    /**
+     * Cleanup stale mount directories from previous runs
+     */
+    async cleanupStaleMounts() {
+        const root = this.config.mountRoot ?? DEFAULT_MOUNT_ROOT;
+        let cleaned = 0;
+        try {
+            const entries = await readdir(root, { withFileTypes: true });
+            for (const entry of entries) {
+                if (entry.isDirectory()) {
+                    const mountPath = join(root, entry.name);
+                    // Only clean directories not currently allocated
+                    if (!this.allocatedMounts.has(mountPath)) {
+                        await rm(mountPath, { recursive: true, force: true });
+                        cleaned++;
+                    }
+                }
+            }
+        }
+        catch {
+            // Root directory may not exist yet
+        }
+        return cleaned;
+    }
+    /**
+     * Check if concurrent limit is reached
+     */
+    canAcceptMore() {
+        const max = this.config.maxConcurrent ?? Infinity;
+        return this.allocatedMounts.size < max;
+    }
+    /**
+     * Get currently allocated mount points
+     */
+    getAllocatedMounts() {
+        return Array.from(this.allocatedMounts);
+    }
+}
+//# sourceMappingURL=policy.js.map

package/dist/executor/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/executor/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAsBjC;;GAEG;AACH,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAE9C;;;;GAIG;AACH,MAAM,OAAO,WAAW;IACd,MAAM,CAAe;IACrB,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAE5C,YAAY,MAAqB;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,YAAoB;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACzD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAC5C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACrC,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CAAC,UAAkB;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,kBAAkB,CAAC;QAEzD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,6BAA6B,IAAI,EAAE;aAC5C,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,UAAkB;QACxC,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE7C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,eAAe,UAAU,eAAe,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,UAAkB;QACxC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;QAClD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACzD,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;oBACxB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;oBACzC,iDAAiD;oBACjD,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;wBACzC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;wBACtD,OAAO,EAAE,CAAC;oBACZ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,aAAa;QACX,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,QAAQ,CAAC;QAClD,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,GAAG,GAAG,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC1C,CAAC;CACF"}

package/dist/executor/service.d.ts

@@ -0,0 +1,84 @@
+/**
+ * AWCP Executor Service
+ *
+ * Handles the AWCP delegation protocol on the Executor (Collaborator) side.
+ * Integrates with A2A SDK executor for task execution.
+ */
+import { type AgentExecutor } from '@a2a-js/sdk/server';
+import { type AwcpMessage } from '@awcp/core';
+import { type ExecutorConfig } from './config.js';
+/**
+ * Executor service status
+ */
+export interface ExecutorServiceStatus {
+    pendingInvitations: number;
+    activeDelegations: number;
+    delegations: Array<{
+        id: string;
+        mountPoint: string;
+        startedAt: string;
+    }>;
+}
+/**
+ * Options for creating the service
+ */
+export interface ExecutorServiceOptions {
+    /** A2A agent executor */
+    executor: AgentExecutor;
+    /** AWCP configuration */
+    config: ExecutorConfig;
+}
+/**
+ * AWCP Executor Service
+ *
+ * Manages the AWCP delegation lifecycle:
+ * 1. Receives INVITE from Delegator
+ * 2. Sends ACCEPT back
+ * 3. Receives START with credentials
+ * 4. Mounts workspace via SSHFS
+ * 5. Executes task via A2A executor
+ * 6. Unmounts and sends DONE/ERROR
+ */
+export declare class ExecutorService {
+    private executor;
+    private config;
+    private policy;
+    private sshfsClient;
+    private delegatorClient;
+    private pendingInvitations;
+    private activeDelegations;
+    constructor(options: ExecutorServiceOptions);
+    /**
+     * Handle incoming AWCP message from Delegator
+     */
+    handleMessage(message: AwcpMessage, delegatorUrl: string): Promise<AwcpMessage | null>;
+    /**
+     * Handle INVITE message
+     */
+    private handleInvite;
+    /**
+     * Handle START message
+     */
+    private handleStart;
+    /**
+     * Handle ERROR message from Delegator
+     */
+    private handleError;
+    /**
+     * Cancel a delegation (called by Delegator via /cancel endpoint)
+     */
+    cancelDelegation(delegationId: string): Promise<void>;
+    /**
+     * Execute task via A2A executor
+     */
+    private executeViaA2A;
+    /**
+     * Get service status
+     */
+    getStatus(): ExecutorServiceStatus;
+    /**
+     * Create an error message
+     */
+    private createErrorMessage;
+}
+//# sourceMappingURL=service.d.ts.map

package/dist/executor/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/executor/service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAEL,KAAK,aAAa,EAEnB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAML,KAAK,WAAW,EAMjB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,KAAK,cAAc,EAAsD,MAAM,aAAa,CAAC;AAwBtG;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,KAAK,CAAC;QACjB,EAAE,EAAE,MAAM,CAAC;QACX,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;CACJ;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,yBAAyB;IACzB,QAAQ,EAAE,aAAa,CAAC;IACxB,yBAAyB;IACzB,MAAM,EAAE,cAAc,CAAC;CACxB;AAED;;;;;;;;;;GAUG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAgB;IAChC,OAAO,CAAC,MAAM,CAAyB;IACvC,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,WAAW,CAAmB;IACtC,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,kBAAkB,CAAwC;IAClE,OAAO,CAAC,iBAAiB,CAAuC;gBAEpD,OAAO,EAAE,sBAAsB;IAW3C;;OAEG;IACG,aAAa,CACjB,OAAO,EAAE,WAAW,EACpB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAe9B;;OAEG;YACW,YAAY;IAqH1B;;OAEG;YACW,WAAW;IAsFzB;;OAEG;YACW,WAAW;IAqBzB;;OAEG;IACG,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAqB3D;;OAEG;YACW,aAAa;IAgD3B;;OAEG;IACH,SAAS,IAAI,qBAAqB;IAYlC;;OAEG;IACH,OAAO,CAAC,kBAAkB;CAe3B"}