@stage-labs/metro 0.1.0-beta.326 → 0.1.0-beta.327

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stage-labs/metro",
-  "version": "0.1.0-beta.326",
+  "version": "0.1.0-beta.327",
   "description": "The metro command line: run your agent on this machine, relaying its chat channels and connectors to Claude Code.",
   "license": "MIT",
   "repository": {
@@ -32,7 +32,7 @@
     "test": "tsc --noEmit && node scripts/stage-runtime.mjs && bun test test/"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/node_modules/@metro-labs/core/package.json

@@ -8,6 +8,8 @@
     "./log": "./src/log.ts",
     "./events": "./src/events.ts",
     "./is-record": "./src/is-record.ts",
+    "./favicon": "./src/favicon.ts",
+    "./brands": "./src/brands.ts",
     "./runner-activity": "./src/runner-activity.ts",
     "./automation-store": "./src/automation-store.ts",
     "./automation-types": "./src/automation-types.ts",
@@ -52,7 +54,7 @@
     "pino-pretty": "^13.1.3"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/node_modules/@metro-labs/core/src/brands.ts

@@ -0,0 +1,100 @@
+import { baseDomain } from './favicon.js';
+
+interface BrandLogo {
+  light: string;
+  dark?: string;
+}
+
+const BY_HOST: Record<string, string> = {
+  'gemini.google.com': 'gemini',
+  'aws.amazon.com': 'aws',
+  'mail.google.com': 'gmail-0a242131',
+  'gmailmcp.googleapis.com': 'gmail-0a242131',
+  'drive.google.com': 'googledrive',
+};
+
+const BY_DOMAIN: Record<string, string> = {
+  'xmtp.org': 'xmtp',
+  'whatsapp.com': 'whatsapp',
+  'whatsapp.net': 'whatsapp',
+  'telegram.org': 'telegram',
+  't.me': 'telegram',
+  'discord.com': 'discord',
+  'discord.gg': 'discord',
+  'threema.ch': 'threema',
+  'outlook.com': 'outlook',
+  'office.com': 'outlook',
+  'live.com': 'outlook',
+  'microsoft.com': 'microsoft',
+  'sharepoint.com': 'sharepoint',
+  'linear.app': 'linear',
+  'notion.so': 'notion',
+  'notion.com': 'notion',
+  'claude.ai': 'claude',
+  'anthropic.com': 'claude',
+  'slack.com': 'slack',
+  'github.com': 'github',
+  'openrouter.ai': 'openrouter',
+  'routeway.ai': 'routeway',
+  'openai.com': 'openai',
+  'mistral.ai': 'mistral',
+  'qwen.ai': 'qwen',
+  'qwenlm.ai': 'qwen',
+  'chatgpt.com': 'openai',
+  'x.ai': 'grok',
+  'grok.com': 'grok',
+  'atlassian.com': 'atlassian',
+  'atlassian.net': 'atlassian',
+  'hubspot.com': 'hubspot',
+  'stripe.com': 'stripe',
+  'sentry.io': 'sentry',
+  'asana.com': 'asana',
+  'intercom.com': 'intercom',
+  'intercom.io': 'intercom',
+  'cloudflare.com': 'cloudflare',
+  'figma.com': 'figma',
+  'box.com': 'box',
+  'zapier.com': 'zapier',
+};
+
+const WITH_DARK = new Set(['github', 'openrouter', 'aws', 'openai', 'grok']);
+const RASTER = new Set(['routeway']);
+
+function logoOf(slug: string): BrandLogo {
+  const light = `/brands/${slug}.${RASTER.has(slug) ? 'png' : 'svg'}`;
+  return WITH_DARK.has(slug) ? { light, dark: `/brands/${slug}-dark.svg` } : { light };
+}
+
+export function brandLogo(url: string): BrandLogo | null {
+  let host: string;
+  try {
+    host = new URL(url).hostname.toLowerCase();
+  } catch {
+    return null;
+  }
+  const slug = BY_HOST[host] ?? BY_DOMAIN[baseDomain(host)];
+  return slug === undefined ? null : logoOf(slug);
+}
+
+export function brandSrc(url: string, dark: boolean): string | null {
+  const logo = brandLogo(url);
+  if (logo === null) return null;
+  return dark ? (logo.dark ?? logo.light) : logo.light;
+}
+
+export interface ConnectorIcon {
+  src: string;
+  mimeType?: string;
+  sizes?: string[];
+  theme?: 'light' | 'dark';
+}
+
+const BRAND_ORIGIN = 'https://metro.box';
+
+const brandIcon = (path: string, theme?: 'light' | 'dark'): ConnectorIcon => ({ src: `${BRAND_ORIGIN}${path}`, mimeType: path.endsWith('.png') ? 'image/png' : 'image/svg+xml', ...(theme === undefined ? {} : { theme }) });
+
+export function brandIcons(url: string): ConnectorIcon[] {
+  const logo = brandLogo(url);
+  if (logo === null) return [];
+  return logo.dark === undefined ? [brandIcon(logo.light)] : [brandIcon(logo.light, 'light'), brandIcon(logo.dark, 'dark')];
+}

package/runtime/node_modules/@metro-labs/core/src/favicon.ts

@@ -0,0 +1,38 @@
+const CHECKED_BASE = 'https://t1.gstatic.com/faviconV2';
+
+const MULTI_LABEL_SUFFIXES = new Set([
+  'ac.uk', 'co.uk', 'gov.uk', 'me.uk', 'net.uk', 'org.uk',
+  'com.au', 'edu.au', 'net.au', 'org.au',
+  'co.nz', 'net.nz', 'org.nz',
+  'ac.jp', 'co.jp', 'ne.jp', 'or.jp',
+  'co.kr', 'co.za', 'co.il', 'co.in', 'net.in', 'org.in',
+  'com.ar', 'com.br', 'net.br', 'org.br',
+  'com.cn', 'net.cn', 'org.cn',
+  'com.hk', 'com.mx', 'com.pl', 'com.sg', 'com.tr', 'com.tw',
+]);
+
+export function baseDomain(host: string): string {
+  const labels = host
+    .toLowerCase()
+    .replace(/\.$/, '')
+    .split('.')
+    .filter((label) => label !== '');
+  if (labels.length <= 2) return labels.join('.');
+  const lastTwo = labels.slice(-2).join('.');
+  if (MULTI_LABEL_SUFFIXES.has(lastTwo)) return labels.slice(-3).join('.');
+  return lastTwo;
+}
+
+export function siteDomain(url: string): string {
+  try {
+    const domain = baseDomain(new URL(url).hostname);
+    return domain.includes('.') ? domain : '';
+  } catch {
+    return '';
+  }
+}
+
+export function checkedFaviconUrl(url: string, size: number): string {
+  const domain = siteDomain(url);
+  return domain === '' ? '' : `${CHECKED_BASE}?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=${encodeURIComponent(`https://${domain}`)}&size=${String(size)}`;
+}

package/runtime/node_modules/@metro-labs/core/src/skill-source.ts

@@ -4,10 +4,10 @@ import { isRecord } from './is-record.js';
 export const SKILL_NAME = /^[a-z0-9][a-z0-9-]{0,63}$/;
 export const SKILL_HASH = /^[a-f0-9]{64}$/;
 export const SKILL_COMMIT = /^[a-f0-9]{40}$/;
-export const SKILL_FILE_MAX = 256 * 1024;
-export const SKILL_TOTAL_MAX = 8 * 1024 * 1024;
-export const SKILL_FILES_MAX = 256;
-export const SKILL_MANIFEST_MAX = 128 * 1024;
+export const SKILL_FILE_MAX = 512 * 1024;
+export const SKILL_TOTAL_MAX = 32 * 1024 * 1024;
+export const SKILL_FILES_MAX = 512;
+export const SKILL_MANIFEST_MAX = 256 * 1024;
 
 export interface SkillSource {
   repository: string;
@@ -48,7 +48,7 @@ export const skillRelease = (root: string, id: string): string => {
 export function skillPath(path: string): boolean {
   const parts = path.split('/');
   return path.length <= 240 && parts.length >= 2 && parts.length <= 8 && SKILL_NAME.test(parts[0] ?? '') &&
-    parts.every((part) => /^[A-Za-z0-9][A-Za-z0-9._-]{0,79}$/.test(part)) &&
+    parts.every((part) => /^[A-Za-z0-9_](?:[A-Za-z0-9 ._()-]{0,126}[A-Za-z0-9_.()-])?$/.test(part)) &&
     !parts.slice(1, -1).includes('SKILL.md') && !(parts.length > 2 && parts.at(-1) === 'SKILL.md');
 }
 

package/runtime/node_modules/@metro-labs/daemon/package.json

@@ -42,7 +42,7 @@
     "zod": "^3.23.8"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "@types/ws": "^8.18.0",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",

package/runtime/node_modules/@metro-labs/daemon/src/claude/github-fetch.ts

@@ -142,7 +142,7 @@ function immutableCommit(data: unknown): { sha: string; tree: string } {
 
 function regularFile(entry: Entry): void {
   if (entry.type !== 'blob' || !['100644', '100755'].includes(entry.mode)) throw new GitHubFailure('Symlinks, submodules and special files are not supported in skills.');
-  if (!skillPath(entry.path) || entry.size < 0 || entry.size > SKILL_FILE_MAX || !Number.isInteger(entry.size)) throw new GitHubFailure('A skills path or file size is not supported. Use skill-name/SKILL.md and regular resources, up to 256 KiB each.');
+  if (!skillPath(entry.path) || entry.size < 0 || entry.size > SKILL_FILE_MAX || !Number.isInteger(entry.size)) throw new GitHubFailure(`A skills path or file size is not supported. Use skill-name/SKILL.md and regular resources, up to ${SKILL_FILE_MAX / 1024} KiB each.`);
 }
 
 function checkedEntries(entries: Entry[]): Entry[] {
@@ -154,7 +154,7 @@ function checkedEntries(entries: Entry[]): Entry[] {
     total += entry.size;
     files.push(entry);
   }
-  if (files.length > SKILL_FILES_MAX || total > SKILL_TOTAL_MAX) throw new GitHubFailure('Skills exceed 256 files or 8 MiB.');
+  if (files.length > SKILL_FILES_MAX || total > SKILL_TOTAL_MAX) throw new GitHubFailure(`Skills exceed ${SKILL_FILES_MAX} files or ${SKILL_TOTAL_MAX / 1024 / 1024} MiB.`);
   if (new Set(files.map((entry) => entry.path.toLowerCase())).size !== files.length) throw new GitHubFailure('Skills contain duplicate file paths.');
   return files;
 }

package/runtime/node_modules/@metro-labs/daemon/src/claude/github-skills.ts

@@ -4,7 +4,7 @@ import { Readable } from 'node:stream';
 import { log } from '@metro-labs/core/log';
 import { isRecord } from '@metro-labs/core/is-record';
 import { writeSecure } from '@metro-labs/core/secure-fs';
-import { SKILL_HASH, SKILL_MANIFEST_MAX, skillGeneration, skillRelease, skillSourceRoot, type SkillGeneration } from '@metro-labs/core/skill-source';
+import { SKILL_FILE_MAX, SKILL_HASH, SKILL_MANIFEST_MAX, skillGeneration, skillRelease, skillSourceRoot, type SkillGeneration } from '@metro-labs/core/skill-source';
 import { ApiError } from '@metro-labs/http/api-error';
 import { readFileSync, statSync } from '../agent-user/agent-fs.js';
 import { receiveHomeFile, writeHomeText } from '../agent-user/home-fs.js';
@@ -135,7 +135,7 @@ export class GitHubSkills {
   read(id: string): ClaudeSkill & { text: string } {
     const row = this.rows().find((skill) => skill.id === id);
     if (row === undefined) throw new ApiError('no such skill', 404);
-    if (statSync(row.path).size > 256 * 1024) throw new ApiError('The managed skill changed on disk. Sync it again.', 409);
+    if (statSync(row.path).size > SKILL_FILE_MAX) throw new ApiError('The managed skill changed on disk. Sync it again.', 409);
     return { ...row, text: readFileSync(row.path, 'utf8') };
   }
 

package/runtime/node_modules/@metro-labs/discord-bot/package.json

@@ -17,7 +17,7 @@
     "discord.js": "^14.26.4"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/node_modules/@metro-labs/gmail/package.json

@@ -18,7 +18,7 @@
     "@metro-labs/core": "workspace:*"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/node_modules/@metro-labs/http/package.json

@@ -35,7 +35,7 @@
     "@metro-labs/core": "workspace:*"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/node_modules/@metro-labs/http/src/connector-oauth.ts

@@ -16,6 +16,7 @@ const SIGN_IN_AGAIN = new Set(['invalid_grant', 'invalid_client', 'unauthorized_
 export interface OAuthClient {
   clientId: string;
   clientSecret?: string;
+  redirectUri?: string;
 }
 
 export function newVerifier(): string {

package/runtime/node_modules/@metro-labs/http/src/connector-tools.ts

@@ -1,3 +1,4 @@
+import type { ConnectorIcon } from '@metro-labs/core/brands';
 import { isRecord } from '@metro-labs/core/is-record';
 import { errMsg, log } from '@metro-labs/core/log';
 import type { FetchLike } from '@metro-labs/core/stations/oauth';
@@ -14,7 +15,16 @@ export interface RemoteTool {
   inputSchema?: Record<string, unknown>;
 }
 
+export interface RemoteServer {
+  tools: RemoteTool[];
+  icons: ConnectorIcon[];
+}
+
 const TIMEOUT_MS = 15_000;
+const ICONS_MAX = 4;
+const ICON_URL_MAX = 2048;
+const MIME_RE = /^image\/[a-z0-9.+-]{1,64}$/i;
+const SIZE_RE = /^(any|\d{1,4}x\d{1,4})$/;
 const MAX_PAGES = 100;
 const MAX_TOOLS = 2000;
 
@@ -86,14 +96,44 @@ async function walkTools(url: URL, auth: ConnectorAuth, session: Map<string, str
   throw refused('The provider did not return a complete tool list.');
 }
 
-export async function listRemoteTools(url: URL, auth: ConnectorAuth, fetchImpl?: FetchLike): Promise<RemoteTool[]> {
+function iconSrc(raw: unknown): string | null {
+  if (typeof raw !== 'string' || raw.length > ICON_URL_MAX) return null;
+  try {
+    const src = new URL(raw);
+    return src.protocol === 'https:' && src.username === '' && src.password === '' ? src.toString() : null;
+  } catch {
+    return null;
+  }
+}
+
+function iconOf(raw: unknown): ConnectorIcon | null {
+  const src = isRecord(raw) ? iconSrc(raw.src) : null;
+  if (!isRecord(raw) || src === null) return null;
+  const sizes = Array.isArray(raw.sizes) ? raw.sizes.filter((size): size is string => typeof size === 'string' && SIZE_RE.test(size)).slice(0, ICONS_MAX) : [];
+  return {
+    src,
+    ...(typeof raw.mimeType === 'string' && MIME_RE.test(raw.mimeType) ? { mimeType: raw.mimeType } : {}),
+    ...(sizes.length > 0 ? { sizes } : {}),
+    ...(raw.theme === 'light' || raw.theme === 'dark' ? { theme: raw.theme } : {}),
+  };
+}
+
+function serverIconsOf(init: Record<string, unknown>): ConnectorIcon[] {
+  const info = isRecord(init.serverInfo) ? init.serverInfo : {};
+  if (!Array.isArray(info.icons)) return [];
+  return info.icons.map(iconOf).filter((icon): icon is ConnectorIcon => icon !== null).slice(0, ICONS_MAX);
+}
+
+export const listRemoteTools = async (url: URL, auth: ConnectorAuth, fetchImpl?: FetchLike): Promise<RemoteTool[]> => (await listRemoteServer(url, auth, fetchImpl)).tools;
+
+export async function listRemoteServer(url: URL, auth: ConnectorAuth, fetchImpl?: FetchLike): Promise<RemoteServer> {
   const session = new Map<string, string>();
   try {
     const init = await rpc(url, auth, session, INITIALIZE, fetchImpl);
     if (init === null || typeof init.protocolVersion !== 'string') throw refused(`${url.hostname} answered, but it does not speak MCP.`);
     session.set('mcp-protocol-version', init.protocolVersion);
     await rpc(url, auth, session, { jsonrpc: '2.0', method: 'notifications/initialized' }, fetchImpl);
-    return await walkTools(url, auth, session, fetchImpl);
+    return { tools: await walkTools(url, auth, session, fetchImpl), icons: serverIconsOf(init) };
   } finally {
     await endSession(url, auth, session, fetchImpl);
   }

package/runtime/node_modules/@metro-labs/inference/package.json

@@ -33,7 +33,7 @@
     "@metro-labs/http": "workspace:*"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/node_modules/@metro-labs/outlook/package.json

@@ -16,7 +16,7 @@
     "@metro-labs/core": "workspace:*"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/node_modules/@metro-labs/telegram/package.json

@@ -17,7 +17,7 @@
     "@mtcute/bun": "0.30.1"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/node_modules/@metro-labs/telegram-bot/package.json

@@ -16,7 +16,7 @@
     "@metro-labs/core": "workspace:*"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/node_modules/@metro-labs/threema/package.json

@@ -17,7 +17,7 @@
     "tweetnacl": "^1.0.3"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/node_modules/@metro-labs/webhook/package.json

@@ -14,7 +14,7 @@
     "@metro-labs/core": "workspace:*"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/node_modules/@metro-labs/whatsapp/package.json

@@ -17,7 +17,7 @@
     "baileys": "7.0.0-rc14"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/node_modules/@metro-labs/xmtp/package.json

@@ -25,7 +25,7 @@
     "viem": "^2.52.2"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/runtime.json

@@ -1,3 +1,3 @@
 {
-  "version": "0.1.0-beta.326"
+  "version": "0.1.0-beta.327"
 }

package/runtime/sdk-runner/node_modules/@metro-labs/core/package.json

@@ -8,6 +8,8 @@
     "./log": "./src/log.ts",
     "./events": "./src/events.ts",
     "./is-record": "./src/is-record.ts",
+    "./favicon": "./src/favicon.ts",
+    "./brands": "./src/brands.ts",
     "./runner-activity": "./src/runner-activity.ts",
     "./automation-store": "./src/automation-store.ts",
     "./automation-types": "./src/automation-types.ts",
@@ -52,7 +54,7 @@
     "pino-pretty": "^13.1.3"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/sdk-runner/node_modules/@metro-labs/core/src/brands.ts

@@ -0,0 +1,100 @@
+import { baseDomain } from './favicon.js';
+
+interface BrandLogo {
+  light: string;
+  dark?: string;
+}
+
+const BY_HOST: Record<string, string> = {
+  'gemini.google.com': 'gemini',
+  'aws.amazon.com': 'aws',
+  'mail.google.com': 'gmail-0a242131',
+  'gmailmcp.googleapis.com': 'gmail-0a242131',
+  'drive.google.com': 'googledrive',
+};
+
+const BY_DOMAIN: Record<string, string> = {
+  'xmtp.org': 'xmtp',
+  'whatsapp.com': 'whatsapp',
+  'whatsapp.net': 'whatsapp',
+  'telegram.org': 'telegram',
+  't.me': 'telegram',
+  'discord.com': 'discord',
+  'discord.gg': 'discord',
+  'threema.ch': 'threema',
+  'outlook.com': 'outlook',
+  'office.com': 'outlook',
+  'live.com': 'outlook',
+  'microsoft.com': 'microsoft',
+  'sharepoint.com': 'sharepoint',
+  'linear.app': 'linear',
+  'notion.so': 'notion',
+  'notion.com': 'notion',
+  'claude.ai': 'claude',
+  'anthropic.com': 'claude',
+  'slack.com': 'slack',
+  'github.com': 'github',
+  'openrouter.ai': 'openrouter',
+  'routeway.ai': 'routeway',
+  'openai.com': 'openai',
+  'mistral.ai': 'mistral',
+  'qwen.ai': 'qwen',
+  'qwenlm.ai': 'qwen',
+  'chatgpt.com': 'openai',
+  'x.ai': 'grok',
+  'grok.com': 'grok',
+  'atlassian.com': 'atlassian',
+  'atlassian.net': 'atlassian',
+  'hubspot.com': 'hubspot',
+  'stripe.com': 'stripe',
+  'sentry.io': 'sentry',
+  'asana.com': 'asana',
+  'intercom.com': 'intercom',
+  'intercom.io': 'intercom',
+  'cloudflare.com': 'cloudflare',
+  'figma.com': 'figma',
+  'box.com': 'box',
+  'zapier.com': 'zapier',
+};
+
+const WITH_DARK = new Set(['github', 'openrouter', 'aws', 'openai', 'grok']);
+const RASTER = new Set(['routeway']);
+
+function logoOf(slug: string): BrandLogo {
+  const light = `/brands/${slug}.${RASTER.has(slug) ? 'png' : 'svg'}`;
+  return WITH_DARK.has(slug) ? { light, dark: `/brands/${slug}-dark.svg` } : { light };
+}
+
+export function brandLogo(url: string): BrandLogo | null {
+  let host: string;
+  try {
+    host = new URL(url).hostname.toLowerCase();
+  } catch {
+    return null;
+  }
+  const slug = BY_HOST[host] ?? BY_DOMAIN[baseDomain(host)];
+  return slug === undefined ? null : logoOf(slug);
+}
+
+export function brandSrc(url: string, dark: boolean): string | null {
+  const logo = brandLogo(url);
+  if (logo === null) return null;
+  return dark ? (logo.dark ?? logo.light) : logo.light;
+}
+
+export interface ConnectorIcon {
+  src: string;
+  mimeType?: string;
+  sizes?: string[];
+  theme?: 'light' | 'dark';
+}
+
+const BRAND_ORIGIN = 'https://metro.box';
+
+const brandIcon = (path: string, theme?: 'light' | 'dark'): ConnectorIcon => ({ src: `${BRAND_ORIGIN}${path}`, mimeType: path.endsWith('.png') ? 'image/png' : 'image/svg+xml', ...(theme === undefined ? {} : { theme }) });
+
+export function brandIcons(url: string): ConnectorIcon[] {
+  const logo = brandLogo(url);
+  if (logo === null) return [];
+  return logo.dark === undefined ? [brandIcon(logo.light)] : [brandIcon(logo.light, 'light'), brandIcon(logo.dark, 'dark')];
+}

package/runtime/sdk-runner/node_modules/@metro-labs/core/src/favicon.ts

@@ -0,0 +1,38 @@
+const CHECKED_BASE = 'https://t1.gstatic.com/faviconV2';
+
+const MULTI_LABEL_SUFFIXES = new Set([
+  'ac.uk', 'co.uk', 'gov.uk', 'me.uk', 'net.uk', 'org.uk',
+  'com.au', 'edu.au', 'net.au', 'org.au',
+  'co.nz', 'net.nz', 'org.nz',
+  'ac.jp', 'co.jp', 'ne.jp', 'or.jp',
+  'co.kr', 'co.za', 'co.il', 'co.in', 'net.in', 'org.in',
+  'com.ar', 'com.br', 'net.br', 'org.br',
+  'com.cn', 'net.cn', 'org.cn',
+  'com.hk', 'com.mx', 'com.pl', 'com.sg', 'com.tr', 'com.tw',
+]);
+
+export function baseDomain(host: string): string {
+  const labels = host
+    .toLowerCase()
+    .replace(/\.$/, '')
+    .split('.')
+    .filter((label) => label !== '');
+  if (labels.length <= 2) return labels.join('.');
+  const lastTwo = labels.slice(-2).join('.');
+  if (MULTI_LABEL_SUFFIXES.has(lastTwo)) return labels.slice(-3).join('.');
+  return lastTwo;
+}
+
+export function siteDomain(url: string): string {
+  try {
+    const domain = baseDomain(new URL(url).hostname);
+    return domain.includes('.') ? domain : '';
+  } catch {
+    return '';
+  }
+}
+
+export function checkedFaviconUrl(url: string, size: number): string {
+  const domain = siteDomain(url);
+  return domain === '' ? '' : `${CHECKED_BASE}?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=${encodeURIComponent(`https://${domain}`)}&size=${String(size)}`;
+}

package/runtime/sdk-runner/node_modules/@metro-labs/core/src/skill-source.ts

@@ -4,10 +4,10 @@ import { isRecord } from './is-record.js';
 export const SKILL_NAME = /^[a-z0-9][a-z0-9-]{0,63}$/;
 export const SKILL_HASH = /^[a-f0-9]{64}$/;
 export const SKILL_COMMIT = /^[a-f0-9]{40}$/;
-export const SKILL_FILE_MAX = 256 * 1024;
-export const SKILL_TOTAL_MAX = 8 * 1024 * 1024;
-export const SKILL_FILES_MAX = 256;
-export const SKILL_MANIFEST_MAX = 128 * 1024;
+export const SKILL_FILE_MAX = 512 * 1024;
+export const SKILL_TOTAL_MAX = 32 * 1024 * 1024;
+export const SKILL_FILES_MAX = 512;
+export const SKILL_MANIFEST_MAX = 256 * 1024;
 
 export interface SkillSource {
   repository: string;
@@ -48,7 +48,7 @@ export const skillRelease = (root: string, id: string): string => {
 export function skillPath(path: string): boolean {
   const parts = path.split('/');
   return path.length <= 240 && parts.length >= 2 && parts.length <= 8 && SKILL_NAME.test(parts[0] ?? '') &&
-    parts.every((part) => /^[A-Za-z0-9][A-Za-z0-9._-]{0,79}$/.test(part)) &&
+    parts.every((part) => /^[A-Za-z0-9_](?:[A-Za-z0-9 ._()-]{0,126}[A-Za-z0-9_.()-])?$/.test(part)) &&
     !parts.slice(1, -1).includes('SKILL.md') && !(parts.length > 2 && parts.at(-1) === 'SKILL.md');
 }
 

package/runtime/sdk-runner/runner.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.0-beta.326",
+  "version": "0.1.0-beta.327",
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "0.3.287",
     "@modelcontextprotocol/sdk": "^1.29.0",