@matthias-hausberger/beige 0.0.1

package/dist/install.js

@@ -0,0 +1,144 @@
+/**
+ * Beige first-time setup.
+ *
+ * Copies bundled tool packages into ~/.beige/tools/ and writes a default
+ * config.json5 when none exists.  All operations are safe to re-run: existing
+ * files/directories are never overwritten.
+ *
+ * Source-install detection
+ * ────────────────────────
+ * When beige is run from a git clone (i.e. the developer installed deps with
+ * `npm install` / `pnpm install` but did not publish to npm) there is a `.git`
+ * directory sitting next to `package.json`.  In that case we skip automatic
+ * first-run setup entirely — the developer works directly from the repo.
+ *
+ * npm-global-install detection
+ * ────────────────────────────
+ * When installed via `npm install -g beige` there is no `.git` directory in the
+ * package root, so `isSourceInstall()` returns false and setup can proceed.
+ */
+import { existsSync, mkdirSync, writeFileSync, readdirSync, cpSync, statSync, } from "fs";
+import { resolve, join } from "path";
+import { homedir } from "os";
+import { fileURLToPath } from "url";
+// ── Resolve package root ─────────────────────────────────────────────────────
+/** Absolute path to the beige package root (where package.json lives). */
+function packageRoot() {
+    // In compiled output this file is at <root>/dist/install.js
+    const distDir = fileURLToPath(new URL(".", import.meta.url));
+    return resolve(distDir, "..");
+}
+// ── Source-install guard ─────────────────────────────────────────────────────
+/**
+ * Returns true when beige is being run directly from a git checkout.
+ * A `.git` entry at the package root is the canonical signal.
+ */
+export function isSourceInstall() {
+    return existsSync(resolve(packageRoot(), ".git"));
+}
+// ── Default config template ──────────────────────────────────────────────────
+function defaultConfig(kvToolPath) {
+    return `{
+  // Beige default configuration — generated by 'beige setup'.
+  // Edit freely. This file will never be overwritten by beige.
+
+  llm: {
+    providers: {
+      anthropic: {
+        // Set your API key here or via the ANTHROPIC_API_KEY environment variable.
+        apiKey: "\${ANTHROPIC_API_KEY}",
+      },
+    },
+  },
+
+  tools: {
+    kv: {
+      // Persists key-value data across sessions on the gateway host.
+      path: "${kvToolPath}",
+      target: "gateway",
+    },
+  },
+
+  agents: {
+    beige: {
+      model: {
+        provider: "anthropic",
+        model: "claude-sonnet-4-20250514",
+        thinkingLevel: "off",
+      },
+      tools: ["kv"],
+      sandbox: {
+        image: "beige-sandbox:latest",
+      },
+    },
+  },
+}
+`;
+}
+// ── Helpers ──────────────────────────────────────────────────────────────────
+function ensureDir(p) {
+    mkdirSync(p, { recursive: true });
+}
+/**
+ * Copy src → dst only if dst does not already exist.
+ * Works for both files and directories (recursive).
+ * Returns true when the copy was performed.
+ */
+function safeCopy(src, dst) {
+    if (existsSync(dst))
+        return false;
+    const stat = statSync(src);
+    if (stat.isDirectory()) {
+        cpSync(src, dst, { recursive: true });
+    }
+    else {
+        writeFileSync(dst, ""); // create placeholder so cpSync isn't needed for files
+        cpSync(src, dst);
+    }
+    return true;
+}
+/**
+ * Run beige first-time setup.
+ *
+ * @param force  When true, run even on a source install (used by `beige setup`).
+ */
+export async function runSetup(options = {}) {
+    const created = [];
+    const skipped = [];
+    if (!options.force && isSourceInstall()) {
+        // Never auto-setup when running from source.
+        return { created, skipped };
+    }
+    const beigeDir = resolve(homedir(), ".beige");
+    const toolsDst = resolve(beigeDir, "tools");
+    const configDst = resolve(beigeDir, "config.json5");
+    ensureDir(beigeDir);
+    // ── Copy bundled tools ─────────────────────────────────────────────────────
+    const toolsSrc = resolve(packageRoot(), "tools");
+    if (existsSync(toolsSrc)) {
+        ensureDir(toolsDst);
+        const toolEntries = readdirSync(toolsSrc);
+        for (const entry of toolEntries) {
+            const src = join(toolsSrc, entry);
+            const dst = join(toolsDst, entry);
+            const copied = safeCopy(src, dst);
+            if (copied) {
+                created.push(dst);
+            }
+            else {
+                skipped.push(dst);
+            }
+        }
+    }
+    // ── Write default config ───────────────────────────────────────────────────
+    if (existsSync(configDst)) {
+        skipped.push(configDst);
+    }
+    else {
+        const kvToolPath = resolve(toolsDst, "kv");
+        writeFileSync(configDst, defaultConfig(kvToolPath), "utf-8");
+        created.push(configDst);
+    }
+    return { created, skipped };
+}
+//# sourceMappingURL=install.js.map

package/dist/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EACL,UAAU,EACV,SAAS,EACT,aAAa,EACb,WAAW,EACX,MAAM,EACN,QAAQ,GACT,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAEpC,gFAAgF;AAEhF,0EAA0E;AAC1E,SAAS,WAAW;IAClB,4DAA4D;IAC5D,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7D,OAAO,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,gFAAgF;AAEhF,SAAS,aAAa,CAAC,UAAkB;IACvC,OAAO;;;;;;;;;;;;;;;;eAgBM,UAAU;;;;;;;;;;;;;;;;;;;CAmBxB,CAAC;AACF,CAAC;AAED,gFAAgF;AAEhF,SAAS,SAAS,CAAC,CAAS;IAC1B,SAAS,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,GAAW,EAAE,GAAW;IACxC,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAElC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,sDAAsD;QAC9E,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAWD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,UAA+B,EAAE;IAC9D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,eAAe,EAAE,EAAE,CAAC;QACxC,6CAA6C;QAC7C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAEpD,SAAS,CAAC,QAAQ,CAAC,CAAC;IAEpB,8EAA8E;IAE9E,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,CAAC;IAEjD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,SAAS,CAAC,QAAQ,CAAC,CAAC;QAEpB,MAAM,WAAW,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC1C,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAClC,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IAED,8EAA8E;IAE9E,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;SAAM,CAAC;QACN,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC3C,aAAa,CAAC,SAAS,EAAE,aAAa,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC"}

package/dist/sandbox/manager.d.ts

@@ -0,0 +1,63 @@
+import type { BeigeConfig } from "../config/schema.js";
+import type { LoadedTool } from "../tools/registry.js";
+import type { LoadedSkill } from "../skills/registry.js";
+export interface ExecResult {
+    stdout: string;
+    stderr: string;
+    exitCode: number;
+}
+/**
+ * Manages Docker sandbox containers for agents.
+ */
+export declare class SandboxManager {
+    private config;
+    private loadedTools;
+    private loadedSkills;
+    private docker;
+    private containers;
+    private beigeDir;
+    constructor(config: BeigeConfig, loadedTools: Map<string, LoadedTool>, loadedSkills: Map<string, LoadedSkill>);
+    /**
+     * Create and start a sandbox container for an agent.
+     */
+    createSandbox(agentName: string): Promise<void>;
+    /**
+     * Execute a command inside an agent's sandbox container.
+     */
+    exec(agentName: string, cmd: string[], stdin?: string, timeout?: number, env?: Record<string, string>): Promise<ExecResult>;
+    /**
+     * Remove an agent's sandbox container.
+     */
+    removeSandbox(agentName: string): Promise<void>;
+    /**
+     * Stop all sandbox containers.
+     */
+    shutdown(): Promise<void>;
+    /**
+     * Check which agents use a beige-managed image and, if any do, ensure the
+     * image is built before containers are created.
+     *
+     * - Skipped entirely when no agent references a beige-sandbox image.
+     * - Skipped when the image already exists (unless `force` is true).
+     * - Builds one image per unique beige image tag referenced across all agents.
+     */
+    ensureSandboxImage(force?: boolean): Promise<void>;
+    /**
+     * Build the beige-sandbox Docker image from the bundled Dockerfile.
+     * Streams build output to stdout so the user can see progress.
+     */
+    private buildSandboxImage;
+    /**
+     * Returns true when `image` is a beige-managed image (i.e. one we build).
+     */
+    private isBeigeImage;
+    /**
+     * Returns true when the given Docker image tag already exists locally.
+     */
+    private imageExists;
+    /**
+     * Generate tool launcher scripts for an agent.
+     */
+    private generateLaunchers;
+}
+//# sourceMappingURL=manager.d.ts.map

package/dist/sandbox/manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/sandbox/manager.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,WAAW,EAAe,MAAM,qBAAqB,CAAC;AACpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAMzD,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,qBAAa,cAAc;IAMvB,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,YAAY;IAPtB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,UAAU,CAAuC;IACzD,OAAO,CAAC,QAAQ,CAAS;gBAGf,MAAM,EAAE,WAAW,EACnB,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,EACpC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC;IAOhD;;OAEG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA8ErD;;OAEG;IACG,IAAI,CACR,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EAAE,EACb,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,EAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC3B,OAAO,CAAC,UAAU,CAAC;IA2FtB;;OAEG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYrD;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAM/B;;;;;;;OAOG;IACG,kBAAkB,CAAC,KAAK,UAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAyBtD;;;OAGG;YACW,iBAAiB;IAmC/B;;OAEG;IACH,OAAO,CAAC,YAAY;IAKpB;;OAEG;YACW,WAAW;IASzB;;OAEG;IACH,OAAO,CAAC,iBAAiB;CAuB1B"}

package/dist/sandbox/manager.js

@@ -0,0 +1,294 @@
+import Docker from "dockerode";
+import { mkdirSync, writeFileSync, chmodSync } from "fs";
+import { resolve, join } from "path";
+import { homedir } from "os";
+import { PassThrough } from "stream";
+import { fileURLToPath } from "url";
+/** The image name prefix we build and manage. Any image starting with this is ours. */
+const BEIGE_IMAGE_PREFIX = "beige-sandbox";
+const BEIGE_IMAGE_DEFAULT = "beige-sandbox:latest";
+/**
+ * Manages Docker sandbox containers for agents.
+ */
+export class SandboxManager {
+    config;
+    loadedTools;
+    loadedSkills;
+    docker;
+    containers = new Map();
+    beigeDir;
+    constructor(config, loadedTools, loadedSkills) {
+        this.config = config;
+        this.loadedTools = loadedTools;
+        this.loadedSkills = loadedSkills;
+        this.docker = new Docker();
+        this.beigeDir = resolve(homedir(), ".beige");
+        mkdirSync(this.beigeDir, { recursive: true });
+    }
+    /**
+     * Create and start a sandbox container for an agent.
+     */
+    async createSandbox(agentName) {
+        const agentConfig = this.config.agents[agentName];
+        if (!agentConfig) {
+            throw new Error(`Unknown agent: ${agentName}`);
+        }
+        const image = agentConfig.sandbox?.image ?? "beige-sandbox:latest";
+        // Prepare host directories
+        const workspaceDir = resolve(this.beigeDir, "agents", agentName, "workspace");
+        const socketsDir = resolve(this.beigeDir, "sockets");
+        const socketPath = resolve(socketsDir, `${agentName}.sock`);
+        const launchersDir = resolve(this.beigeDir, "agents", agentName, "launchers");
+        mkdirSync(workspaceDir, { recursive: true });
+        mkdirSync(socketsDir, { recursive: true });
+        mkdirSync(launchersDir, { recursive: true });
+        // Generate tool launcher scripts
+        this.generateLaunchers(agentName, agentConfig, launchersDir);
+        // Build mount bindings
+        const binds = [
+            `${workspaceDir}:/workspace:rw`,
+            `${launchersDir}:/tools/bin:ro`,
+            `${socketPath}:/beige/gateway.sock`,
+        ];
+        // Mount tool packages (read-only)
+        for (const toolName of agentConfig.tools) {
+            const tool = this.loadedTools.get(toolName);
+            if (tool) {
+                binds.push(`${tool.path}:/tools/packages/${toolName}:ro`);
+            }
+        }
+        // Mount skill packages (read-only)
+        for (const skillName of agentConfig.skills ?? []) {
+            const skill = this.loadedSkills.get(skillName);
+            if (skill) {
+                binds.push(`${skill.path}:/skills/${skillName}:ro`);
+            }
+        }
+        // Extra mounts from config
+        if (agentConfig.sandbox?.extraMounts) {
+            for (const [host, container] of Object.entries(agentConfig.sandbox.extraMounts)) {
+                binds.push(`${host}:${container}`);
+            }
+        }
+        // Remove existing container if any
+        await this.removeSandbox(agentName);
+        console.log(`[SANDBOX] Creating container for agent '${agentName}' (image: ${image})`);
+        const container = await this.docker.createContainer({
+            Image: image,
+            name: `beige-${agentName}`,
+            Hostname: `beige-${agentName}`,
+            WorkingDir: "/workspace",
+            Cmd: ["sleep", "infinity"], // Keep container running
+            HostConfig: {
+                Binds: binds,
+                // No env vars from host — agent cannot access gateway secrets
+            },
+            // Only pass safe, non-secret env vars
+            Env: Object.entries(agentConfig.sandbox?.extraEnv ?? {}).map(([k, v]) => `${k}=${v}`),
+        });
+        await container.start();
+        this.containers.set(agentName, container);
+        console.log(`[SANDBOX] Container started for agent '${agentName}' (${container.id.slice(0, 12)})`);
+    }
+    /**
+     * Execute a command inside an agent's sandbox container.
+     */
+    async exec(agentName, cmd, stdin, timeout, env) {
+        const container = this.containers.get(agentName);
+        if (!container) {
+            throw new Error(`No sandbox running for agent: ${agentName}`);
+        }
+        const agentConfig = this.config.agents[agentName];
+        const baseEnv = Object.entries(agentConfig?.sandbox?.extraEnv ?? {}).map(([k, v]) => `${k}=${v}`);
+        const additionalEnv = env ? Object.entries(env).map(([k, v]) => `${k}=${v}`) : [];
+        const exec = await container.exec({
+            Cmd: cmd,
+            AttachStdout: true,
+            AttachStderr: true,
+            AttachStdin: !!stdin,
+            WorkingDir: "/workspace",
+            Env: [...baseEnv, ...additionalEnv],
+        });
+        return new Promise((resolveExec, reject) => {
+            const timeoutMs = timeout ?? 120_000;
+            let timer;
+            exec.start({ hijack: !!stdin, stdin: !!stdin }, (err, stream) => {
+                if (err)
+                    return reject(err);
+                let stdout = "";
+                let stderr = "";
+                if (stdin) {
+                    // In hijack mode, we get a raw stream
+                    stream.write(stdin);
+                    stream.end();
+                    // Demux the stream
+                    const stdoutStream = new PassThrough();
+                    const stderrStream = new PassThrough();
+                    container.modem.demuxStream(stream, stdoutStream, stderrStream);
+                    stdoutStream.on("data", (chunk) => {
+                        stdout += chunk.toString();
+                    });
+                    stderrStream.on("data", (chunk) => {
+                        stderr += chunk.toString();
+                    });
+                    stream.on("end", async () => {
+                        clearTimeout(timer);
+                        const inspect = await exec.inspect();
+                        resolveExec({
+                            stdout,
+                            stderr,
+                            exitCode: inspect.ExitCode ?? 1,
+                        });
+                    });
+                }
+                else {
+                    // Non-hijack mode: use demuxStream
+                    const stdoutStream = new PassThrough();
+                    const stderrStream = new PassThrough();
+                    container.modem.demuxStream(stream, stdoutStream, stderrStream);
+                    stdoutStream.on("data", (chunk) => {
+                        stdout += chunk.toString();
+                    });
+                    stderrStream.on("data", (chunk) => {
+                        stderr += chunk.toString();
+                    });
+                    stream.on("end", async () => {
+                        clearTimeout(timer);
+                        const inspect = await exec.inspect();
+                        resolveExec({
+                            stdout,
+                            stderr,
+                            exitCode: inspect.ExitCode ?? 1,
+                        });
+                    });
+                }
+                timer = setTimeout(() => {
+                    stream.destroy();
+                    reject(new Error(`Execution timed out after ${timeoutMs}ms`));
+                }, timeoutMs);
+            });
+        });
+    }
+    /**
+     * Remove an agent's sandbox container.
+     */
+    async removeSandbox(agentName) {
+        // Try to remove by name
+        try {
+            const existing = this.docker.getContainer(`beige-${agentName}`);
+            await existing.stop().catch(() => { });
+            await existing.remove({ force: true });
+        }
+        catch {
+            // Container doesn't exist, that's fine
+        }
+        this.containers.delete(agentName);
+    }
+    /**
+     * Stop all sandbox containers.
+     */
+    async shutdown() {
+        for (const [agentName] of this.containers) {
+            await this.removeSandbox(agentName);
+        }
+    }
+    /**
+     * Check which agents use a beige-managed image and, if any do, ensure the
+     * image is built before containers are created.
+     *
+     * - Skipped entirely when no agent references a beige-sandbox image.
+     * - Skipped when the image already exists (unless `force` is true).
+     * - Builds one image per unique beige image tag referenced across all agents.
+     */
+    async ensureSandboxImage(force = false) {
+        // Collect the set of beige-managed image tags that agents actually need.
+        const needed = new Set();
+        for (const agentConfig of Object.values(this.config.agents)) {
+            const image = agentConfig.sandbox?.image ?? BEIGE_IMAGE_DEFAULT;
+            if (this.isBeigeImage(image)) {
+                needed.add(image);
+            }
+        }
+        if (needed.size === 0) {
+            console.log("[SANDBOX] No agents use a beige-sandbox image — skipping image build");
+            return;
+        }
+        for (const image of needed) {
+            if (!force && (await this.imageExists(image))) {
+                console.log(`[SANDBOX] Image '${image}' already exists — skipping build`);
+                continue;
+            }
+            await this.buildSandboxImage(image);
+        }
+    }
+    /**
+     * Build the beige-sandbox Docker image from the bundled Dockerfile.
+     * Streams build output to stdout so the user can see progress.
+     */
+    async buildSandboxImage(tag) {
+        // sandbox/ lives two directories up from src/sandbox/manager.ts
+        // At runtime (dist/sandbox/manager.js) it's still two levels up from dist/.
+        // We resolve relative to this file using import.meta.url.
+        // src/sandbox/manager.ts → up to src/sandbox → up to project root
+        const projectRoot = resolve(fileURLToPath(new URL("../..", import.meta.url)));
+        const sandboxDir = resolve(projectRoot, "sandbox");
+        console.log(`[SANDBOX] Building image '${tag}' from ${sandboxDir} ...`);
+        const stream = await this.docker.buildImage({ context: sandboxDir, src: ["Dockerfile", "tool-client.ts"] }, { t: tag });
+        // Stream build output line-by-line
+        await new Promise((res, rej) => {
+            this.docker.modem.followProgress(stream, (err) => (err ? rej(err) : res()), (event) => {
+                if (event.error) {
+                    process.stderr.write(`[SANDBOX BUILD] ${event.error}`);
+                }
+                else if (event.stream) {
+                    process.stdout.write(`[SANDBOX BUILD] ${event.stream}`);
+                }
+                else if (event.status) {
+                    process.stdout.write(`[SANDBOX BUILD] ${event.status}\n`);
+                }
+            });
+        });
+        console.log(`[SANDBOX] Image '${tag}' built successfully ✓`);
+    }
+    /**
+     * Returns true when `image` is a beige-managed image (i.e. one we build).
+     */
+    isBeigeImage(image) {
+        // Match "beige-sandbox", "beige-sandbox:latest", "beige-sandbox:custom-tag", etc.
+        return image === BEIGE_IMAGE_PREFIX || image.startsWith(`${BEIGE_IMAGE_PREFIX}:`);
+    }
+    /**
+     * Returns true when the given Docker image tag already exists locally.
+     */
+    async imageExists(image) {
+        try {
+            await this.docker.getImage(image).inspect();
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Generate tool launcher scripts for an agent.
+     */
+    generateLaunchers(agentName, agentConfig, launchersDir) {
+        for (const toolName of agentConfig.tools) {
+            const tool = this.loadedTools.get(toolName);
+            if (!tool)
+                continue;
+            // Generate a launcher script that calls the tool-client
+            const launcher = [
+                "#!/bin/sh",
+                `# Auto-generated by beige gateway. DO NOT EDIT.`,
+                `# Tool: ${toolName} | Target: ${tool.manifest.target}`,
+                `exec /beige/tool-client "${toolName}" "$@"`,
+                "",
+            ].join("\n");
+            const launcherPath = join(launchersDir, toolName);
+            writeFileSync(launcherPath, launcher);
+            chmodSync(launcherPath, 0o755);
+        }
+    }
+}
+//# sourceMappingURL=manager.js.map

package/dist/sandbox/manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../src/sandbox/manager.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,WAAW,CAAC;AAC/B,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAKpC,uFAAuF;AACvF,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAC3C,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AAQnD;;GAEG;AACH,MAAM,OAAO,cAAc;IAMf;IACA;IACA;IAPF,MAAM,CAAS;IACf,UAAU,GAAG,IAAI,GAAG,EAA4B,CAAC;IACjD,QAAQ,CAAS;IAEzB,YACU,MAAmB,EACnB,WAAoC,EACpC,YAAsC;QAFtC,WAAM,GAAN,MAAM,CAAa;QACnB,gBAAW,GAAX,WAAW,CAAyB;QACpC,iBAAY,GAAZ,YAAY,CAA0B;QAE9C,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC7C,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,SAAiB;QACnC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,kBAAkB,SAAS,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,IAAI,sBAAsB,CAAC;QAEnE,2BAA2B;QAC3B,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QAC9E,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC;QAC5D,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QAE9E,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE7C,iCAAiC;QACjC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;QAE7D,uBAAuB;QACvB,MAAM,KAAK,GAAG;YACZ,GAAG,YAAY,gBAAgB;YAC/B,GAAG,YAAY,gBAAgB;YAC/B,GAAG,UAAU,sBAAsB;SACpC,CAAC;QAEF,kCAAkC;QAClC,KAAK,MAAM,QAAQ,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC5C,IAAI,IAAI,EAAE,CAAC;gBACT,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,oBAAoB,QAAQ,KAAK,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,mCAAmC;QACnC,KAAK,MAAM,SAAS,IAAI,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YACjD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC/C,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,YAAY,SAAS,KAAK,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QAED,2BAA2B;QAC3B,IAAI,WAAW,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;YACrC,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBAChF,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAED,mCAAmC;QACnC,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAEpC,OAAO,CAAC,GAAG,CAAC,2CAA2C,SAAS,aAAa,KAAK,GAAG,CAAC,CAAC;QAEvF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;YAClD,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,SAAS,SAAS,EAAE;YAC1B,QAAQ,EAAE,SAAS,SAAS,EAAE;YAC9B,UAAU,EAAE,YAAY;YACxB,GAAG,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,yBAAyB;YACrD,UAAU,EAAE;gBACV,KAAK,EAAE,KAAK;gBACZ,8DAA8D;aAC/D;YACD,sCAAsC;YACtC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAC1D,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CACxB;SACF,CAAC,CAAC;QAEH,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAE1C,OAAO,CAAC,GAAG,CAAC,0CAA0C,SAAS,MAAM,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;IACrG,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CACR,SAAiB,EACjB,GAAa,EACb,KAAc,EACd,OAAgB,EAChB,GAA4B;QAE5B,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,iCAAiC,SAAS,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CACtE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CACxB,CAAC;QACF,MAAM,aAAa,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAElF,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC;YAChC,GAAG,EAAE,GAAG;YACR,YAAY,EAAE,IAAI;YAClB,YAAY,EAAE,IAAI;YAClB,WAAW,EAAE,CAAC,CAAC,KAAK;YACpB,UAAU,EAAE,YAAY;YACxB,GAAG,EAAE,CAAC,GAAG,OAAO,EAAE,GAAG,aAAa,CAAC;SACpC,CAAC,CAAC;QAEH,OAAO,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE;YACzC,MAAM,SAAS,GAAG,OAAO,IAAI,OAAO,CAAC;YACrC,IAAI,KAAgD,CAAC;YAErD,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAiB,EAAE,MAAW,EAAE,EAAE;gBACjF,IAAI,GAAG;oBAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;gBAE5B,IAAI,MAAM,GAAG,EAAE,CAAC;gBAChB,IAAI,MAAM,GAAG,EAAE,CAAC;gBAEhB,IAAI,KAAK,EAAE,CAAC;oBACV,sCAAsC;oBACtC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACpB,MAAM,CAAC,GAAG,EAAE,CAAC;oBAEb,mBAAmB;oBACnB,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC;oBACvC,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC;oBAEvC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;oBAEhE,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;wBACxC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;oBAC7B,CAAC,CAAC,CAAC;oBACH,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;wBACxC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;oBAC7B,CAAC,CAAC,CAAC;oBAEH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;wBAC1B,YAAY,CAAC,KAAK,CAAC,CAAC;wBACpB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;wBACrC,WAAW,CAAC;4BACV,MAAM;4BACN,MAAM;4BACN,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,CAAC;yBAChC,CAAC,CAAC;oBACL,CAAC,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,mCAAmC;oBACnC,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC;oBACvC,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC;oBAEvC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;oBAEhE,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;wBACxC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;oBAC7B,CAAC,CAAC,CAAC;oBACH,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;wBACxC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;oBAC7B,CAAC,CAAC,CAAC;oBAEH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;wBAC1B,YAAY,CAAC,KAAK,CAAC,CAAC;wBACpB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;wBACrC,WAAW,CAAC;4BACV,MAAM;4BACN,MAAM;4BACN,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,CAAC;yBAChC,CAAC,CAAC;oBACL,CAAC,CAAC,CAAC;gBACL,CAAC;gBAED,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBACtB,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,SAAS,IAAI,CAAC,CAAC,CAAC;gBAChE,CAAC,EAAE,SAAS,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,SAAiB;QACnC,wBAAwB;QACxB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,SAAS,EAAE,CAAC,CAAC;YAChE,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACtC,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,uCAAuC;QACzC,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ;QACZ,KAAK,MAAM,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC1C,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,kBAAkB,CAAC,KAAK,GAAG,KAAK;QACpC,yEAAyE;QACzE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5D,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,IAAI,mBAAmB,CAAC;YAChE,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;YACpF,OAAO;QACT,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC9C,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,mCAAmC,CAAC,CAAC;gBAC1E,SAAS;YACX,CAAC;YAED,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,iBAAiB,CAAC,GAAW;QACzC,gEAAgE;QAChE,4EAA4E;QAC5E,0DAA0D;QAC1D,kEAAkE;QAClE,MAAM,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9E,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAEnD,OAAO,CAAC,GAAG,CAAC,6BAA6B,GAAG,UAAU,UAAU,MAAM,CAAC,CAAC;QAExE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CACzC,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,gBAAgB,CAAC,EAAE,EAC9D,EAAE,CAAC,EAAE,GAAG,EAAE,CACX,CAAC;QAEF,mCAAmC;QACnC,MAAM,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACnC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAC9B,MAAM,EACN,CAAC,GAAiB,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,EAC/C,CAAC,KAA2D,EAAE,EAAE;gBAC9D,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;oBAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;gBACzD,CAAC;qBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;oBACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC1D,CAAC;qBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;oBACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;gBAC5D,CAAC;YACH,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,wBAAwB,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,KAAa;QAChC,kFAAkF;QAClF,OAAO,KAAK,KAAK,kBAAkB,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,kBAAkB,GAAG,CAAC,CAAC;IACpF,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW,CAAC,KAAa;QACrC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACK,iBAAiB,CACvB,SAAiB,EACjB,WAAwB,EACxB,YAAoB;QAEpB,KAAK,MAAM,QAAQ,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC5C,IAAI,CAAC,IAAI;gBAAE,SAAS;YAEpB,wDAAwD;YACxD,MAAM,QAAQ,GAAG;gBACf,WAAW;gBACX,iDAAiD;gBACjD,WAAW,QAAQ,cAAc,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;gBACvD,4BAA4B,QAAQ,QAAQ;gBAC5C,EAAE;aACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEb,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YAClD,aAAa,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YACtC,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;CACF"}

package/dist/skills/index.d.ts

@@ -0,0 +1,2 @@
+export { loadSkillManifest, loadSkills, buildSkillContext, validateSkillDeps, type LoadedSkill, } from "./registry.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/skills/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/skills/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,UAAU,EACV,iBAAiB,EACjB,iBAAiB,EACjB,KAAK,WAAW,GACjB,MAAM,eAAe,CAAC"}

package/dist/skills/index.js

@@ -0,0 +1,2 @@
+export { loadSkillManifest, loadSkills, buildSkillContext, validateSkillDeps, } from "./registry.js";
+//# sourceMappingURL=index.js.map

package/dist/skills/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/skills/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,UAAU,EACV,iBAAiB,EACjB,iBAAiB,GAElB,MAAM,eAAe,CAAC"}

package/dist/skills/registry.d.ts

@@ -0,0 +1,11 @@
+import type { BeigeConfig, SkillManifest } from "../config/schema.js";
+export interface LoadedSkill {
+    name: string;
+    manifest: SkillManifest;
+    path: string;
+}
+export declare function loadSkillManifest(skillPath: string): SkillManifest;
+export declare function loadSkills(config: BeigeConfig): Promise<Map<string, LoadedSkill>>;
+export declare function buildSkillContext(agentSkills: string[], loadedSkills: Map<string, LoadedSkill>): string;
+export declare function validateSkillDeps(agentSkills: string[], agentTools: string[], loadedSkills: Map<string, LoadedSkill>): void;
+//# sourceMappingURL=registry.d.ts.map

package/dist/skills/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/skills/registry.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEtE,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,aAAa,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;CACd;AAID,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,CAsBlE;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAkBvF;AAED,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,MAAM,EAAE,EACrB,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,GACrC,MAAM,CAsBR;AAED,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,MAAM,EAAE,EACrB,UAAU,EAAE,MAAM,EAAE,EACpB,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,GACrC,IAAI,CA8BN"}

package/dist/skills/registry.js

@@ -0,0 +1,86 @@
+import { readFileSync, existsSync } from "fs";
+import { join } from "path";
+const DEFAULT_CONTEXT_FILE = "README.md";
+export function loadSkillManifest(skillPath) {
+    const manifestPath = join(skillPath, "skill.json");
+    if (!existsSync(manifestPath)) {
+        throw new Error(`Skill manifest not found: ${manifestPath}`);
+    }
+    try {
+        const content = readFileSync(manifestPath, "utf-8");
+        const manifest = JSON.parse(content);
+        if (!manifest.name || !manifest.description) {
+            throw new Error(`Skill manifest at ${manifestPath} requires 'name' and 'description'`);
+        }
+        return manifest;
+    }
+    catch (err) {
+        if (err instanceof SyntaxError) {
+            throw new Error(`Invalid JSON in skill manifest: ${manifestPath}`);
+        }
+        throw err;
+    }
+}
+export async function loadSkills(config) {
+    const skills = new Map();
+    if (!config.skills) {
+        return skills;
+    }
+    for (const [name, skillConfig] of Object.entries(config.skills)) {
+        const manifest = loadSkillManifest(skillConfig.path);
+        const loaded = {
+            name,
+            manifest,
+            path: skillConfig.path,
+        };
+        skills.set(name, loaded);
+    }
+    return skills;
+}
+export function buildSkillContext(agentSkills, loadedSkills) {
+    if (agentSkills.length === 0) {
+        return "";
+    }
+    const lines = [
+        "## Available Skills",
+        "",
+        "Skills provide specialized knowledge. Read their documentation in `/skills/<name>/`.",
+        "",
+    ];
+    for (const skillName of agentSkills) {
+        const skill = loadedSkills.get(skillName);
+        if (!skill)
+            continue;
+        lines.push(`### ${skillName}`);
+        lines.push(`${skill.manifest.description} — see /skills/${skillName}/`);
+        lines.push("");
+    }
+    return lines.join("\n");
+}
+export function validateSkillDeps(agentSkills, agentTools, loadedSkills) {
+    for (const skillName of agentSkills) {
+        const skill = loadedSkills.get(skillName);
+        if (!skill)
+            continue;
+        const requires = skill.manifest.requires;
+        if (!requires)
+            continue;
+        // Check tool dependencies
+        if (requires.tools) {
+            for (const requiredTool of requires.tools) {
+                if (!agentTools.includes(requiredTool)) {
+                    throw new Error(`Skill '${skillName}' requires tool '${requiredTool}' but it's not available to this agent`);
+                }
+            }
+        }
+        // Check skill dependencies
+        if (requires.skills) {
+            for (const requiredSkill of requires.skills) {
+                if (!agentSkills.includes(requiredSkill)) {
+                    throw new Error(`Skill '${skillName}' requires skill '${requiredSkill}' but it's not available to this agent`);
+                }
+            }
+        }
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/skills/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/skills/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAW,IAAI,EAAE,MAAM,MAAM,CAAC;AASrC,MAAM,oBAAoB,GAAG,WAAW,CAAC;AAEzC,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAEnD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,6BAA6B,YAAY,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAkB,CAAC;QAEtD,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,qBAAqB,YAAY,oCAAoC,CAAC,CAAC;QACzF,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,mCAAmC,YAAY,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAmB;IAClD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE9C,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAChE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,MAAM,GAAgB;YAC1B,IAAI;YACJ,QAAQ;YACR,IAAI,EAAE,WAAW,CAAC,IAAI;SACvB,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,WAAqB,EACrB,YAAsC;IAEtC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAa;QACtB,qBAAqB;QACrB,EAAE;QACF,sFAAsF;QACtF,EAAE;KACH,CAAC;IAEF,KAAK,MAAM,SAAS,IAAI,WAAW,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,KAAK,CAAC,IAAI,CAAC,OAAO,SAAS,EAAE,CAAC,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,kBAAkB,SAAS,GAAG,CAAC,CAAC;QACxE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,WAAqB,EACrB,UAAoB,EACpB,YAAsC;IAEtC,KAAK,MAAM,SAAS,IAAI,WAAW,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACzC,IAAI,CAAC,QAAQ;YAAE,SAAS;QAExB,0BAA0B;QAC1B,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACnB,KAAK,MAAM,YAAY,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;gBAC1C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;oBACvC,MAAM,IAAI,KAAK,CACb,UAAU,SAAS,oBAAoB,YAAY,wCAAwC,CAC5F,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,2BAA2B;QAC3B,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpB,KAAK,MAAM,aAAa,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAC5C,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;oBACzC,MAAM,IAAI,KAAK,CACb,UAAU,SAAS,qBAAqB,aAAa,wCAAwC,CAC9F,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/skills/registry.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=registry.spec.d.ts.map