@stage-labs/metro 0.1.0-beta.326 → 0.1.0-beta.328

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stage-labs/metro",
-  "version": "0.1.0-beta.326",
+  "version": "0.1.0-beta.328",
   "description": "The metro command line: run your agent on this machine, relaying its chat channels and connectors to Claude Code.",
   "license": "MIT",
   "repository": {
@@ -32,7 +32,7 @@
     "test": "tsc --noEmit && node scripts/stage-runtime.mjs && bun test test/"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/node_modules/@metro-labs/core/package.json

@@ -8,6 +8,8 @@
     "./log": "./src/log.ts",
     "./events": "./src/events.ts",
     "./is-record": "./src/is-record.ts",
+    "./favicon": "./src/favicon.ts",
+    "./brands": "./src/brands.ts",
     "./runner-activity": "./src/runner-activity.ts",
     "./automation-store": "./src/automation-store.ts",
     "./automation-types": "./src/automation-types.ts",
@@ -52,7 +54,7 @@
     "pino-pretty": "^13.1.3"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/node_modules/@metro-labs/core/src/brands.ts

@@ -0,0 +1,100 @@
+import { baseDomain } from './favicon.js';
+
+interface BrandLogo {
+  light: string;
+  dark?: string;
+}
+
+const BY_HOST: Record<string, string> = {
+  'gemini.google.com': 'gemini',
+  'aws.amazon.com': 'aws',
+  'mail.google.com': 'gmail-0a242131',
+  'gmailmcp.googleapis.com': 'gmail-0a242131',
+  'drive.google.com': 'googledrive',
+};
+
+const BY_DOMAIN: Record<string, string> = {
+  'xmtp.org': 'xmtp',
+  'whatsapp.com': 'whatsapp',
+  'whatsapp.net': 'whatsapp',
+  'telegram.org': 'telegram',
+  't.me': 'telegram',
+  'discord.com': 'discord',
+  'discord.gg': 'discord',
+  'threema.ch': 'threema',
+  'outlook.com': 'outlook',
+  'office.com': 'outlook',
+  'live.com': 'outlook',
+  'microsoft.com': 'microsoft',
+  'sharepoint.com': 'sharepoint',
+  'linear.app': 'linear',
+  'notion.so': 'notion',
+  'notion.com': 'notion',
+  'claude.ai': 'claude',
+  'anthropic.com': 'claude',
+  'slack.com': 'slack',
+  'github.com': 'github',
+  'openrouter.ai': 'openrouter',
+  'routeway.ai': 'routeway',
+  'openai.com': 'openai',
+  'mistral.ai': 'mistral',
+  'qwen.ai': 'qwen',
+  'qwenlm.ai': 'qwen',
+  'chatgpt.com': 'openai',
+  'x.ai': 'grok',
+  'grok.com': 'grok',
+  'atlassian.com': 'atlassian',
+  'atlassian.net': 'atlassian',
+  'hubspot.com': 'hubspot',
+  'stripe.com': 'stripe',
+  'sentry.io': 'sentry',
+  'asana.com': 'asana',
+  'intercom.com': 'intercom',
+  'intercom.io': 'intercom',
+  'cloudflare.com': 'cloudflare',
+  'figma.com': 'figma',
+  'box.com': 'box',
+  'zapier.com': 'zapier',
+};
+
+const WITH_DARK = new Set(['github', 'openrouter', 'aws', 'openai', 'grok']);
+const RASTER = new Set(['routeway']);
+
+function logoOf(slug: string): BrandLogo {
+  const light = `/brands/${slug}.${RASTER.has(slug) ? 'png' : 'svg'}`;
+  return WITH_DARK.has(slug) ? { light, dark: `/brands/${slug}-dark.svg` } : { light };
+}
+
+export function brandLogo(url: string): BrandLogo | null {
+  let host: string;
+  try {
+    host = new URL(url).hostname.toLowerCase();
+  } catch {
+    return null;
+  }
+  const slug = BY_HOST[host] ?? BY_DOMAIN[baseDomain(host)];
+  return slug === undefined ? null : logoOf(slug);
+}
+
+export function brandSrc(url: string, dark: boolean): string | null {
+  const logo = brandLogo(url);
+  if (logo === null) return null;
+  return dark ? (logo.dark ?? logo.light) : logo.light;
+}
+
+export interface ConnectorIcon {
+  src: string;
+  mimeType?: string;
+  sizes?: string[];
+  theme?: 'light' | 'dark';
+}
+
+const BRAND_ORIGIN = 'https://metro.box';
+
+const brandIcon = (path: string, theme?: 'light' | 'dark'): ConnectorIcon => ({ src: `${BRAND_ORIGIN}${path}`, mimeType: path.endsWith('.png') ? 'image/png' : 'image/svg+xml', ...(theme === undefined ? {} : { theme }) });
+
+export function brandIcons(url: string): ConnectorIcon[] {
+  const logo = brandLogo(url);
+  if (logo === null) return [];
+  return logo.dark === undefined ? [brandIcon(logo.light)] : [brandIcon(logo.light, 'light'), brandIcon(logo.dark, 'dark')];
+}

package/runtime/node_modules/@metro-labs/core/src/favicon.ts

@@ -0,0 +1,38 @@
+const CHECKED_BASE = 'https://t1.gstatic.com/faviconV2';
+
+const MULTI_LABEL_SUFFIXES = new Set([
+  'ac.uk', 'co.uk', 'gov.uk', 'me.uk', 'net.uk', 'org.uk',
+  'com.au', 'edu.au', 'net.au', 'org.au',
+  'co.nz', 'net.nz', 'org.nz',
+  'ac.jp', 'co.jp', 'ne.jp', 'or.jp',
+  'co.kr', 'co.za', 'co.il', 'co.in', 'net.in', 'org.in',
+  'com.ar', 'com.br', 'net.br', 'org.br',
+  'com.cn', 'net.cn', 'org.cn',
+  'com.hk', 'com.mx', 'com.pl', 'com.sg', 'com.tr', 'com.tw',
+]);
+
+export function baseDomain(host: string): string {
+  const labels = host
+    .toLowerCase()
+    .replace(/\.$/, '')
+    .split('.')
+    .filter((label) => label !== '');
+  if (labels.length <= 2) return labels.join('.');
+  const lastTwo = labels.slice(-2).join('.');
+  if (MULTI_LABEL_SUFFIXES.has(lastTwo)) return labels.slice(-3).join('.');
+  return lastTwo;
+}
+
+export function siteDomain(url: string): string {
+  try {
+    const domain = baseDomain(new URL(url).hostname);
+    return domain.includes('.') ? domain : '';
+  } catch {
+    return '';
+  }
+}
+
+export function checkedFaviconUrl(url: string, size: number): string {
+  const domain = siteDomain(url);
+  return domain === '' ? '' : `${CHECKED_BASE}?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=${encodeURIComponent(`https://${domain}`)}&size=${String(size)}`;
+}

package/runtime/node_modules/@metro-labs/core/src/skill-source.ts

@@ -4,10 +4,10 @@ import { isRecord } from './is-record.js';
 export const SKILL_NAME = /^[a-z0-9][a-z0-9-]{0,63}$/;
 export const SKILL_HASH = /^[a-f0-9]{64}$/;
 export const SKILL_COMMIT = /^[a-f0-9]{40}$/;
-export const SKILL_FILE_MAX = 256 * 1024;
-export const SKILL_TOTAL_MAX = 8 * 1024 * 1024;
-export const SKILL_FILES_MAX = 256;
-export const SKILL_MANIFEST_MAX = 128 * 1024;
+export const SKILL_FILE_MAX = 512 * 1024;
+export const SKILL_TOTAL_MAX = 32 * 1024 * 1024;
+export const SKILL_FILES_MAX = 512;
+export const SKILL_MANIFEST_MAX = 256 * 1024;
 
 export interface SkillSource {
   repository: string;
@@ -48,7 +48,7 @@ export const skillRelease = (root: string, id: string): string => {
 export function skillPath(path: string): boolean {
   const parts = path.split('/');
   return path.length <= 240 && parts.length >= 2 && parts.length <= 8 && SKILL_NAME.test(parts[0] ?? '') &&
-    parts.every((part) => /^[A-Za-z0-9][A-Za-z0-9._-]{0,79}$/.test(part)) &&
+    parts.every((part) => /^[A-Za-z0-9_](?:[A-Za-z0-9 ._()-]{0,126}[A-Za-z0-9_.()-])?$/.test(part)) &&
     !parts.slice(1, -1).includes('SKILL.md') && !(parts.length > 2 && parts.at(-1) === 'SKILL.md');
 }
 

package/runtime/node_modules/@metro-labs/daemon/package.json

@@ -42,7 +42,7 @@
     "zod": "^3.23.8"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "@types/ws": "^8.18.0",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",

package/runtime/node_modules/@metro-labs/daemon/src/claude/github-fetch.ts

@@ -142,7 +142,7 @@ function immutableCommit(data: unknown): { sha: string; tree: string } {
 
 function regularFile(entry: Entry): void {
   if (entry.type !== 'blob' || !['100644', '100755'].includes(entry.mode)) throw new GitHubFailure('Symlinks, submodules and special files are not supported in skills.');
-  if (!skillPath(entry.path) || entry.size < 0 || entry.size > SKILL_FILE_MAX || !Number.isInteger(entry.size)) throw new GitHubFailure('A skills path or file size is not supported. Use skill-name/SKILL.md and regular resources, up to 256 KiB each.');
+  if (!skillPath(entry.path) || entry.size < 0 || entry.size > SKILL_FILE_MAX || !Number.isInteger(entry.size)) throw new GitHubFailure(`A skills path or file size is not supported. Use skill-name/SKILL.md and regular resources, up to ${SKILL_FILE_MAX / 1024} KiB each.`);
 }
 
 function checkedEntries(entries: Entry[]): Entry[] {
@@ -154,7 +154,7 @@ function checkedEntries(entries: Entry[]): Entry[] {
     total += entry.size;
     files.push(entry);
   }
-  if (files.length > SKILL_FILES_MAX || total > SKILL_TOTAL_MAX) throw new GitHubFailure('Skills exceed 256 files or 8 MiB.');
+  if (files.length > SKILL_FILES_MAX || total > SKILL_TOTAL_MAX) throw new GitHubFailure(`Skills exceed ${SKILL_FILES_MAX} files or ${SKILL_TOTAL_MAX / 1024 / 1024} MiB.`);
   if (new Set(files.map((entry) => entry.path.toLowerCase())).size !== files.length) throw new GitHubFailure('Skills contain duplicate file paths.');
   return files;
 }

package/runtime/node_modules/@metro-labs/daemon/src/claude/github-skills.ts

@@ -4,7 +4,7 @@ import { Readable } from 'node:stream';
 import { log } from '@metro-labs/core/log';
 import { isRecord } from '@metro-labs/core/is-record';
 import { writeSecure } from '@metro-labs/core/secure-fs';
-import { SKILL_HASH, SKILL_MANIFEST_MAX, skillGeneration, skillRelease, skillSourceRoot, type SkillGeneration } from '@metro-labs/core/skill-source';
+import { SKILL_FILE_MAX, SKILL_HASH, SKILL_MANIFEST_MAX, skillGeneration, skillRelease, skillSourceRoot, type SkillGeneration } from '@metro-labs/core/skill-source';
 import { ApiError } from '@metro-labs/http/api-error';
 import { readFileSync, statSync } from '../agent-user/agent-fs.js';
 import { receiveHomeFile, writeHomeText } from '../agent-user/home-fs.js';
@@ -135,7 +135,7 @@ export class GitHubSkills {
   read(id: string): ClaudeSkill & { text: string } {
     const row = this.rows().find((skill) => skill.id === id);
     if (row === undefined) throw new ApiError('no such skill', 404);
-    if (statSync(row.path).size > 256 * 1024) throw new ApiError('The managed skill changed on disk. Sync it again.', 409);
+    if (statSync(row.path).size > SKILL_FILE_MAX) throw new ApiError('The managed skill changed on disk. Sync it again.', 409);
     return { ...row, text: readFileSync(row.path, 'utf8') };
   }
 

package/runtime/node_modules/@metro-labs/daemon/src/claude/memory.ts

@@ -28,5 +28,5 @@ export function inSessionScope(command: [string, string[]], host: ScopeHost = re
   const asAgent = file === 'sudo' && args[0] === '-n' && args[1] === '-u' && args[3] === '--';
   if (!host.metro || !host.systemd || !asAgent) return command;
   const limit = sessionMemoryLimit(host.total);
-  return helperArgv(['as-agent-scope', String(limit), String(Math.floor(limit * 0.9)), ...args.slice(4)]);
+  return helperArgv(['as-agent-scope', String(limit), String(limit), ...args.slice(4)]);
 }

package/runtime/node_modules/@metro-labs/daemon/src/claude/setup.ts

@@ -41,7 +41,7 @@ Keep the change to what the task asks for. A pre-existing bug, a performance pro
 
 Never call AskUserQuestion or ExitPlanMode. They are blocked by policy, because nobody is watching the terminal around the clock and a blocking prompt stalls indefinitely. When you hit an ambiguity: do everything that does not depend on it, then choose the most reasonable interpretation, state the assumption explicitly in your report, and continue.
 
-Your final message is a report to the orchestrator, not a message to a human. It gets relayed onward, so make it self-contained and concise. Lead with the outcome. Include concrete evidence, command output, file paths with line numbers, test results, for anything you claim to have verified. Report failures faithfully: if a test failed, say so and show the output; if you skipped a step, say that too.
+Your final message is a report to the orchestrator, not a message to a human. It stays in the orchestrator's context for the rest of the conversation and makes every later answer slower, so keep it short: about 150 words at most, self-contained. Lead with the outcome, then the key evidence for what you claim to have verified, such as the test result or the file you changed. Put anything longer, such as full logs, tables or detailed findings, in a file under ~/work and give its path. Report failures faithfully: if a test failed, say so with its key line of output; if you skipped a step, say that too.
 `;
 
 export interface SetupDeps {
@@ -129,7 +129,10 @@ export function setSystemPrompt(text: string, agents = agentsDir()): void {
   writeAtomic(promptPath(agents), `${trimmed}\n`, 0o600);
 }
 
-const PRIOR_WORKER: ReadonlySet<string> = new Set(['08a0cd8710df285d6512245246bb8b658b7cfc7f3e89490514ee5376779eb2ef']);
+const PRIOR_WORKER: ReadonlySet<string> = new Set([
+  '08a0cd8710df285d6512245246bb8b658b7cfc7f3e89490514ee5376779eb2ef',
+  '9db999a7bb7cf1d6c12a679520e21c78d038999d5454d7abbc6b87a87c136c54',
+]);
 const PRIOR_METRO: ReadonlySet<string> = new Set([
   '0b3d122ed95beff09d579cf912cd4238e1db524c41fce4b314de57d6ff5908ad',
   '36f4fb57f231a119d717b5e3d6ccb654f94960fcca708683f376679aead8df25',
@@ -142,6 +145,7 @@ const PRIOR_METRO: ReadonlySet<string> = new Set([
   '256c711a6175266c216e32c88b7190d0f98f5e6b702abe03220b422aba426574',
   '9e164a956437d60d30ea1984115a17d303940d191f5efed04954f244fc89d48f',
   '8b6d7c5a9bc8d02d5e3ae5e5931b36aba9f3d0eb7fd38b371294c2abaa0c94ee',
+  '8b8f21cb1b7608540d8b5ed9557e1644b03ce4809a7f320ba134f28129f08ddb',
 ]);
 const PRIOR_STAGE: ReadonlySet<string> = new Set([
   'dd7d30474765de3865ddc87c1cf3220161ded09502027cdff18597e5df0aab43',

package/runtime/node_modules/@metro-labs/discord-bot/package.json

@@ -17,7 +17,7 @@
     "discord.js": "^14.26.4"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/node_modules/@metro-labs/gmail/package.json

@@ -18,7 +18,7 @@
     "@metro-labs/core": "workspace:*"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/node_modules/@metro-labs/http/package.json

@@ -35,7 +35,7 @@
     "@metro-labs/core": "workspace:*"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/node_modules/@metro-labs/http/src/connector-oauth.ts

@@ -16,6 +16,7 @@ const SIGN_IN_AGAIN = new Set(['invalid_grant', 'invalid_client', 'unauthorized_
 export interface OAuthClient {
   clientId: string;
   clientSecret?: string;
+  redirectUri?: string;
 }
 
 export function newVerifier(): string {

package/runtime/node_modules/@metro-labs/http/src/connector-tools.ts

@@ -1,3 +1,4 @@
+import type { ConnectorIcon } from '@metro-labs/core/brands';
 import { isRecord } from '@metro-labs/core/is-record';
 import { errMsg, log } from '@metro-labs/core/log';
 import type { FetchLike } from '@metro-labs/core/stations/oauth';
@@ -14,7 +15,16 @@ export interface RemoteTool {
   inputSchema?: Record<string, unknown>;
 }
 
+export interface RemoteServer {
+  tools: RemoteTool[];
+  icons: ConnectorIcon[];
+}
+
 const TIMEOUT_MS = 15_000;
+const ICONS_MAX = 4;
+const ICON_URL_MAX = 2048;
+const MIME_RE = /^image\/[a-z0-9.+-]{1,64}$/i;
+const SIZE_RE = /^(any|\d{1,4}x\d{1,4})$/;
 const MAX_PAGES = 100;
 const MAX_TOOLS = 2000;
 
@@ -86,14 +96,44 @@ async function walkTools(url: URL, auth: ConnectorAuth, session: Map<string, str
   throw refused('The provider did not return a complete tool list.');
 }
 
-export async function listRemoteTools(url: URL, auth: ConnectorAuth, fetchImpl?: FetchLike): Promise<RemoteTool[]> {
+function iconSrc(raw: unknown): string | null {
+  if (typeof raw !== 'string' || raw.length > ICON_URL_MAX) return null;
+  try {
+    const src = new URL(raw);
+    return src.protocol === 'https:' && src.username === '' && src.password === '' ? src.toString() : null;
+  } catch {
+    return null;
+  }
+}
+
+function iconOf(raw: unknown): ConnectorIcon | null {
+  const src = isRecord(raw) ? iconSrc(raw.src) : null;
+  if (!isRecord(raw) || src === null) return null;
+  const sizes = Array.isArray(raw.sizes) ? raw.sizes.filter((size): size is string => typeof size === 'string' && SIZE_RE.test(size)).slice(0, ICONS_MAX) : [];
+  return {
+    src,
+    ...(typeof raw.mimeType === 'string' && MIME_RE.test(raw.mimeType) ? { mimeType: raw.mimeType } : {}),
+    ...(sizes.length > 0 ? { sizes } : {}),
+    ...(raw.theme === 'light' || raw.theme === 'dark' ? { theme: raw.theme } : {}),
+  };
+}
+
+function serverIconsOf(init: Record<string, unknown>): ConnectorIcon[] {
+  const info = isRecord(init.serverInfo) ? init.serverInfo : {};
+  if (!Array.isArray(info.icons)) return [];
+  return info.icons.map(iconOf).filter((icon): icon is ConnectorIcon => icon !== null).slice(0, ICONS_MAX);
+}
+
+export const listRemoteTools = async (url: URL, auth: ConnectorAuth, fetchImpl?: FetchLike): Promise<RemoteTool[]> => (await listRemoteServer(url, auth, fetchImpl)).tools;
+
+export async function listRemoteServer(url: URL, auth: ConnectorAuth, fetchImpl?: FetchLike): Promise<RemoteServer> {
   const session = new Map<string, string>();
   try {
     const init = await rpc(url, auth, session, INITIALIZE, fetchImpl);
     if (init === null || typeof init.protocolVersion !== 'string') throw refused(`${url.hostname} answered, but it does not speak MCP.`);
     session.set('mcp-protocol-version', init.protocolVersion);
     await rpc(url, auth, session, { jsonrpc: '2.0', method: 'notifications/initialized' }, fetchImpl);
-    return await walkTools(url, auth, session, fetchImpl);
+    return { tools: await walkTools(url, auth, session, fetchImpl), icons: serverIconsOf(init) };
   } finally {
     await endSession(url, auth, session, fetchImpl);
   }

package/runtime/node_modules/@metro-labs/inference/package.json

@@ -33,7 +33,7 @@
     "@metro-labs/http": "workspace:*"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/node_modules/@metro-labs/outlook/package.json

@@ -16,7 +16,7 @@
     "@metro-labs/core": "workspace:*"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/node_modules/@metro-labs/telegram/package.json

@@ -17,7 +17,7 @@
     "@mtcute/bun": "0.30.1"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/node_modules/@metro-labs/telegram-bot/package.json

@@ -16,7 +16,7 @@
     "@metro-labs/core": "workspace:*"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/node_modules/@metro-labs/threema/package.json

@@ -17,7 +17,7 @@
     "tweetnacl": "^1.0.3"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/node_modules/@metro-labs/webhook/package.json

@@ -14,7 +14,7 @@
     "@metro-labs/core": "workspace:*"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/node_modules/@metro-labs/whatsapp/package.json

@@ -17,7 +17,7 @@
     "baileys": "7.0.0-rc14"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/node_modules/@metro-labs/xmtp/package.json

@@ -25,7 +25,7 @@
     "viem": "^2.52.2"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/runtime.json

@@ -1,3 +1,3 @@
 {
-  "version": "0.1.0-beta.326"
+  "version": "0.1.0-beta.328"
 }

package/runtime/sdk-runner/node_modules/@metro-labs/core/package.json

@@ -8,6 +8,8 @@
     "./log": "./src/log.ts",
     "./events": "./src/events.ts",
     "./is-record": "./src/is-record.ts",
+    "./favicon": "./src/favicon.ts",
+    "./brands": "./src/brands.ts",
     "./runner-activity": "./src/runner-activity.ts",
     "./automation-store": "./src/automation-store.ts",
     "./automation-types": "./src/automation-types.ts",
@@ -52,7 +54,7 @@
     "pino-pretty": "^13.1.3"
   },
   "devDependencies": {
-    "@stage-labs/config": "0.1.0-beta.3",
+    "@stage-labs/config": "0.1.0-beta.5",
     "eslint": "^10.3.0",
     "knip": "^6.15.0",
     "madge": "^8.0.0",

package/runtime/sdk-runner/node_modules/@metro-labs/core/src/brands.ts

@@ -0,0 +1,100 @@
+import { baseDomain } from './favicon.js';
+
+interface BrandLogo {
+  light: string;
+  dark?: string;
+}
+
+const BY_HOST: Record<string, string> = {
+  'gemini.google.com': 'gemini',
+  'aws.amazon.com': 'aws',
+  'mail.google.com': 'gmail-0a242131',
+  'gmailmcp.googleapis.com': 'gmail-0a242131',
+  'drive.google.com': 'googledrive',
+};
+
+const BY_DOMAIN: Record<string, string> = {
+  'xmtp.org': 'xmtp',
+  'whatsapp.com': 'whatsapp',
+  'whatsapp.net': 'whatsapp',
+  'telegram.org': 'telegram',
+  't.me': 'telegram',
+  'discord.com': 'discord',
+  'discord.gg': 'discord',
+  'threema.ch': 'threema',
+  'outlook.com': 'outlook',
+  'office.com': 'outlook',
+  'live.com': 'outlook',
+  'microsoft.com': 'microsoft',
+  'sharepoint.com': 'sharepoint',
+  'linear.app': 'linear',
+  'notion.so': 'notion',
+  'notion.com': 'notion',
+  'claude.ai': 'claude',
+  'anthropic.com': 'claude',
+  'slack.com': 'slack',
+  'github.com': 'github',
+  'openrouter.ai': 'openrouter',
+  'routeway.ai': 'routeway',
+  'openai.com': 'openai',
+  'mistral.ai': 'mistral',
+  'qwen.ai': 'qwen',
+  'qwenlm.ai': 'qwen',
+  'chatgpt.com': 'openai',
+  'x.ai': 'grok',
+  'grok.com': 'grok',
+  'atlassian.com': 'atlassian',
+  'atlassian.net': 'atlassian',
+  'hubspot.com': 'hubspot',
+  'stripe.com': 'stripe',
+  'sentry.io': 'sentry',
+  'asana.com': 'asana',
+  'intercom.com': 'intercom',
+  'intercom.io': 'intercom',
+  'cloudflare.com': 'cloudflare',
+  'figma.com': 'figma',
+  'box.com': 'box',
+  'zapier.com': 'zapier',
+};
+
+const WITH_DARK = new Set(['github', 'openrouter', 'aws', 'openai', 'grok']);
+const RASTER = new Set(['routeway']);
+
+function logoOf(slug: string): BrandLogo {
+  const light = `/brands/${slug}.${RASTER.has(slug) ? 'png' : 'svg'}`;
+  return WITH_DARK.has(slug) ? { light, dark: `/brands/${slug}-dark.svg` } : { light };
+}
+
+export function brandLogo(url: string): BrandLogo | null {
+  let host: string;
+  try {
+    host = new URL(url).hostname.toLowerCase();
+  } catch {
+    return null;
+  }
+  const slug = BY_HOST[host] ?? BY_DOMAIN[baseDomain(host)];
+  return slug === undefined ? null : logoOf(slug);
+}
+
+export function brandSrc(url: string, dark: boolean): string | null {
+  const logo = brandLogo(url);
+  if (logo === null) return null;
+  return dark ? (logo.dark ?? logo.light) : logo.light;
+}
+
+export interface ConnectorIcon {
+  src: string;
+  mimeType?: string;
+  sizes?: string[];
+  theme?: 'light' | 'dark';
+}
+
+const BRAND_ORIGIN = 'https://metro.box';
+
+const brandIcon = (path: string, theme?: 'light' | 'dark'): ConnectorIcon => ({ src: `${BRAND_ORIGIN}${path}`, mimeType: path.endsWith('.png') ? 'image/png' : 'image/svg+xml', ...(theme === undefined ? {} : { theme }) });
+
+export function brandIcons(url: string): ConnectorIcon[] {
+  const logo = brandLogo(url);
+  if (logo === null) return [];
+  return logo.dark === undefined ? [brandIcon(logo.light)] : [brandIcon(logo.light, 'light'), brandIcon(logo.dark, 'dark')];
+}

package/runtime/sdk-runner/node_modules/@metro-labs/core/src/favicon.ts

@@ -0,0 +1,38 @@
+const CHECKED_BASE = 'https://t1.gstatic.com/faviconV2';
+
+const MULTI_LABEL_SUFFIXES = new Set([
+  'ac.uk', 'co.uk', 'gov.uk', 'me.uk', 'net.uk', 'org.uk',
+  'com.au', 'edu.au', 'net.au', 'org.au',
+  'co.nz', 'net.nz', 'org.nz',
+  'ac.jp', 'co.jp', 'ne.jp', 'or.jp',
+  'co.kr', 'co.za', 'co.il', 'co.in', 'net.in', 'org.in',
+  'com.ar', 'com.br', 'net.br', 'org.br',
+  'com.cn', 'net.cn', 'org.cn',
+  'com.hk', 'com.mx', 'com.pl', 'com.sg', 'com.tr', 'com.tw',
+]);
+
+export function baseDomain(host: string): string {
+  const labels = host
+    .toLowerCase()
+    .replace(/\.$/, '')
+    .split('.')
+    .filter((label) => label !== '');
+  if (labels.length <= 2) return labels.join('.');
+  const lastTwo = labels.slice(-2).join('.');
+  if (MULTI_LABEL_SUFFIXES.has(lastTwo)) return labels.slice(-3).join('.');
+  return lastTwo;
+}
+
+export function siteDomain(url: string): string {
+  try {
+    const domain = baseDomain(new URL(url).hostname);
+    return domain.includes('.') ? domain : '';
+  } catch {
+    return '';
+  }
+}
+
+export function checkedFaviconUrl(url: string, size: number): string {
+  const domain = siteDomain(url);
+  return domain === '' ? '' : `${CHECKED_BASE}?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=${encodeURIComponent(`https://${domain}`)}&size=${String(size)}`;
+}

package/runtime/sdk-runner/node_modules/@metro-labs/core/src/skill-source.ts

@@ -4,10 +4,10 @@ import { isRecord } from './is-record.js';
 export const SKILL_NAME = /^[a-z0-9][a-z0-9-]{0,63}$/;
 export const SKILL_HASH = /^[a-f0-9]{64}$/;
 export const SKILL_COMMIT = /^[a-f0-9]{40}$/;
-export const SKILL_FILE_MAX = 256 * 1024;
-export const SKILL_TOTAL_MAX = 8 * 1024 * 1024;
-export const SKILL_FILES_MAX = 256;
-export const SKILL_MANIFEST_MAX = 128 * 1024;
+export const SKILL_FILE_MAX = 512 * 1024;
+export const SKILL_TOTAL_MAX = 32 * 1024 * 1024;
+export const SKILL_FILES_MAX = 512;
+export const SKILL_MANIFEST_MAX = 256 * 1024;
 
 export interface SkillSource {
   repository: string;
@@ -48,7 +48,7 @@ export const skillRelease = (root: string, id: string): string => {
 export function skillPath(path: string): boolean {
   const parts = path.split('/');
   return path.length <= 240 && parts.length >= 2 && parts.length <= 8 && SKILL_NAME.test(parts[0] ?? '') &&
-    parts.every((part) => /^[A-Za-z0-9][A-Za-z0-9._-]{0,79}$/.test(part)) &&
+    parts.every((part) => /^[A-Za-z0-9_](?:[A-Za-z0-9 ._()-]{0,126}[A-Za-z0-9_.()-])?$/.test(part)) &&
     !parts.slice(1, -1).includes('SKILL.md') && !(parts.length > 2 && parts.at(-1) === 'SKILL.md');
 }
 

package/runtime/sdk-runner/runner.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.0-beta.326",
+  "version": "0.1.0-beta.328",
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "0.3.287",
     "@modelcontextprotocol/sdk": "^1.29.0",

package/runtime/sdk-runner/src/app.ts

@@ -63,7 +63,7 @@ async function connected(cfg: RunnerConfig, hooks: AppHooks, release: () => Prom
     tools = metroTools(link);
     const resume = store.resumable();
     log.info({ resume, model: cfg.model, mode: cfg.permissionMode }, 'sdk-runner: starting the Agent SDK session');
-    const approvals = approvalsThrough(link, (id, ask) => { hooks.activity?.approval(id, ask); }, (tool, input) => runner.calls.approval(tool, input));
+    const approvals = approvalsThrough(link, (id, ask) => { hooks.activity?.approval(id, ask); runner.approval(id, ask); }, (tool, input) => runner.calls.approval(tool, input));
     runner.start(runnerOptions(cfg, tools, approvals, resume, hooks.env));
     return { runner, link, done: runner.run(hooks.observe), stop };
   } catch (err) {

package/runtime/sdk-runner/src/runner.ts

@@ -7,7 +7,6 @@ import { isRecord } from '@metro-labs/core/is-record';
 import type { AutomationStore } from '@metro-labs/core/automation-store';
 import type { Activity } from './activity.js';
 import { Automation } from './automation.js';
-import { ActivityTasks } from './activity-tasks.js';
 import { RunnerCalls } from './calls.js';
 import { channelText, type ChannelEvent } from './channel-text.js';
 import type { RunnerConfig } from './config.js';
@@ -21,7 +20,8 @@ import { METRO_SERVER, type MetroTools } from './tool-proxy.js';
 import { debugFailure, failureSummary, SessionError, StartupDiagnostics } from './errors.js';
 
 const STARTUP_WAIT = 'CLAUDE_CODE_MCP_STARTUP_WAIT_MS';
-export const COMPACT_AT = 120_000;
+export const COMPACT_AT = 80_000;
+const URGENT_FACTOR = 1.5;
 export const COMPACT_IDLE_MS = 60_000;
 
 const MODEL_PINS: ReadonlySet<string> = new Set(['ANTHROPIC_MODEL', 'CLAUDE_CODE_SUBAGENT_MODEL']);
@@ -97,7 +97,6 @@ export class Runner {
   private readonly recovery: TaskRecovery;
   private readonly watch: SessionWatch;
   private readonly diagnostics = new StartupDiagnostics();
-  private readonly tasks = new ActivityTasks(() => undefined);
   private readonly skillWork = new SkillWork();
   private compactTimer: ReturnType<typeof setTimeout> | null = null;
   private session: Query | null = null;
@@ -108,11 +107,12 @@ export class Runner {
   private model: string | null = null;
   private switching: Promise<void> = Promise.resolve();
   private ended = false;
+  private readonly mainAsks = new Set<string>();
   private readonly interrupted: number;
   private interruptionReported = false;
 
   constructor(private readonly parts: RunnerParts) {
-    this.watch = new SessionWatch(parts.readOnly);
+    this.watch = new SessionWatch(parts.readOnly, () => this.mainAsks.size > 0);
     this.inbox = new Inbox((unanswered) => { this.keep(unanswered); }, {
       ready: () => { parts.skills?.check(); return this.watch.admitting && parts.skills?.busy !== true; },
       dispatch: (message) => { this.automation?.dispatched(message.uuid); this.watch.dispatched(message.uuid); },
@@ -167,6 +167,12 @@ export class Runner {
     return this.session;
   }
 
+  approval(id: string, ask: { worker: string | null } | null): void {
+    if (ask === null) this.mainAsks.delete(id);
+    else if (ask.worker === null) this.mainAsks.add(id);
+    this.inbox.notify();
+  }
+
   switchModel(model: string | null): Promise<void> {
     this.queueModel(model);
     return this.switching;
@@ -178,7 +184,6 @@ export class Runner {
       for await (const message of this.session) {
         if (this.ended) break;
         this.cancelCompact();
-        if (message.type === 'system') this.tasks.observe(message);
         const m: Record<string, unknown> = { ...message };
         this.recovery.observe(m);
         this.automation?.observe(m);
@@ -186,8 +191,8 @@ export class Runner {
         this.observeWork(m);
         this.note(m);
         this.parts.activity?.observe(message);
-        this.inbox.notify();
         this.maybeCompact();
+        this.inbox.notify();
         observe?.(message);
       }
     } catch (err) {
@@ -318,14 +323,19 @@ export class Runner {
     return this.ended || this.parts.skills?.busy === true || this.compactAsked !== null || !this.watch.safe || !this.watch.admitting;
   }
 
+  private get compactUrgent(): boolean {
+    return this.watch.context >= (this.parts.compactAt ?? COMPACT_AT) * URGENT_FACTOR;
+  }
+
   private compactReady(resuming = false): boolean {
-    const busy = this.maintenanceBusy || (!resuming && (this.calls.live || this.inbox.pending > 0 || this.tasks.running > 0));
+    const waiting = this.inbox.pending > 0 && !this.compactUrgent;
+    const busy = this.maintenanceBusy || (!resuming && (this.calls.live || waiting));
     return compactDue({ context: this.watch.context, floor: this.compactFloor, limit: this.parts.compactAt ?? COMPACT_AT, busy });
   }
 
   private maybeCompact(resuming = false): void {
     if (!this.compactReady(resuming)) return;
-    if (resuming) { this.askCompact(true); return; }
+    if (resuming || this.compactUrgent) { this.askCompact(resuming); return; }
     this.compactTimer = setTimeout(() => {
       this.compactTimer = null;
       if (this.compactReady()) this.askCompact(false);
@@ -335,7 +345,7 @@ export class Runner {
 
   private askCompact(resuming: boolean): void {
     this.compactAsked = this.inbox.compact();
-    log.info({ context: this.watch.context, resuming }, 'sdk-runner: compacting at a safe idle boundary');
+    log.info({ context: this.watch.context, resuming, urgent: this.compactUrgent, waiting: this.inbox.pending }, 'sdk-runner: compacting at a safe boundary');
   }
 
   private cancelCompact(): void {

package/runtime/sdk-runner/src/session-watch.ts

@@ -35,7 +35,7 @@ export class SessionWatch {
   private lastContext = 0;
   private streamUsage: Record<string, unknown> = {};
 
-  constructor(private readonly readOnly: (tool: string) => boolean) {}
+  constructor(private readonly readOnly: (tool: string) => boolean, private readonly mainAsking: () => boolean = () => true) {}
 
   get compacting(): boolean {
     return this.compactingNow;
@@ -52,7 +52,7 @@ export class SessionWatch {
   get safe(): boolean { return !this.busy && !this.writing && !this.compacting; }
 
   get admitting(): boolean {
-    return this.awaitingInput === null && !this.requiresAction && !this.compacting;
+    return this.awaitingInput === null && !(this.requiresAction && this.mainAsking()) && !this.compacting;
   }
 
   dispatched(uuid?: string): void {

package/skills/METRO.md

@@ -22,7 +22,7 @@ You are the main thread of a Claude Code session that is connected to chat throu
 1. `tool_search` finds a tool and returns its full definition: `select:notion.search` for an exact name, words (`notion create page`) to rank, or `+linear issue` to require `linear` in the name. Each name is `<connector>.<tool>`.
 2. `tool_call` runs it, with the name exactly as found and arguments that match its schema. After `tool_search` with `select:notion.search` returned `notion.search`: `{"calls": [{"tool": "notion.search", "arguments": {"query": "roadmap"}}]}`.
 
-Put up to 10 independent calls in one `tool_call`; they run in parallel and come back in order, each under `[n] <tool>`. `tool_search` may run on this thread, but never call `tool_call` here: delegate it to a worker, as all other work. When a call answers `needs_approval`, the owner is asked in chat and on the page: tell the person what is waiting, then wait for the channel message `Approved: <tool> (<id>)` or `Denied: <tool> (<id>)`. After an approval, have a worker repeat the same call with `"approval": "<id>"` added to it.
+Put up to 10 independent calls in one `tool_call`; they run in parallel and come back in order, each under `[n] <tool>`. Both steps run in a worker, never on this thread: `tool_search` answers carry full tool definitions, and anything on this thread stays in its context and slows every later answer. When a call answers `needs_approval`, the owner is asked in chat and on the page: tell the person what is waiting, then wait for the channel message `Approved: <tool> (<id>)` or `Denied: <tool> (<id>)`. After an approval, have a worker repeat the same call with `"approval": "<id>"` added to it.
 
 **Finish what was asked.** You work on your own. Nobody is watching a screen, and a question sent to chat may go unanswered for hours, so asking "Shall I?" about work already requested simply stops it. Anything reversible that follows from the request, do. Stop only for a destructive action or a genuine change of scope. Before you end a turn, read your own last paragraph: if it is a plan, a question, a list of next steps or a promise ("I'll…", "Next…"), then the work is not done, so do it now, retries and missing information included. End the turn when the task is finished, or when you are truly blocked on something only the person can give you.
 
@@ -30,6 +30,6 @@ The exception is a person describing a problem, asking a question or thinking ou
 
 **The whole request is the deliverable.** Do not quietly make it smaller, larger or different. Read an ambiguity the way a careful colleague would, make the ordinary judgement calls yourself, and name the assumption in your reply. If one part turns out to be blocked, finish every other part and say plainly what you left out and why: scaling the work down is the person's call, not yours. Something else you notice on the way is a suggestion at the end of the reply, not extra work to do now.
 
-**Report like a relay.** A worker's report is the only evidence you have, so pass on what it verified and say plainly what it did not. Short messages on chat: lead with the outcome, one idea per sentence, no tool names, no file paths unless the person needs them. Send a file out with `create_upload` (the curl line it hands back runs in a worker) and then `send` with the upload id.
+**Report like a relay.** A worker's report is the only evidence you have, so pass on what it verified and say plainly what it did not. Keep this thread small: ask workers for short reports, and give them file paths and details rather than pasting long text into their prompts. Short messages on chat: lead with the outcome, one idea per sentence, no tool names, no file paths unless the person needs them. Send a file out with `create_upload` (the curl line it hands back runs in a worker) and then `send` with the upload id.
 
 **Keep going.** Long tasks run as background agents and loops; check in over chat when something lands rather than going quiet. The session is restarted by the daemon if it exits, so an interrupted task is resumed from chat, not from memory.