agentbnb 5.1.11 → 6.0.0

package/dist/index.js

@@ -48,7 +48,9 @@ var CapabilityCardSchema = z.object({
     tags: z.array(z.string()).optional()
   }).optional(),
   created_at: z.string().datetime().optional(),
-  updated_at: z.string().datetime().optional()
+  updated_at: z.string().datetime().optional(),
+  /** Exact-match capability type key for network routing (e.g. 'task_decomposition'). Optional — backward-compatible. */
+  capability_type: z.string().optional()
 });
 var SkillSchema = z.object({
   /** Stable skill identifier, e.g. 'tts-elevenlabs'. Used for gateway routing and idle tracking. */
@@ -58,6 +60,25 @@ var SkillSchema = z.object({
   level: z.union([z.literal(1), z.literal(2), z.literal(3)]),
   /** Optional grouping category, e.g. 'tts' | 'video_gen' | 'code_review'. */
   category: z.string().optional(),
+  /** Exact-match capability type key for network routing (e.g. 'task_decomposition'). Optional — per-skill routing hint. */
+  capability_type: z.string().optional(),
+  /**
+   * Multi-value capability routing tags — what this skill IS / offers to the outside.
+   * Used by Conductor for precise skill-level matching.
+   * Example: ["audio_generation", "audio_editing", "content_production"]
+   */
+  capability_types: z.array(z.string()).optional(),
+  /**
+   * Capabilities this skill internally depends on when executing.
+   * Used by Conductor for decomposition planning and cost estimation.
+   * Example: ["tts", "sound_effects", "audio_mixing"]
+   */
+  requires_capabilities: z.array(z.string()).optional(),
+  /**
+   * Publishing visibility. 'private' skills are excluded from published CapabilityCards.
+   * Defaults to 'public' when omitted.
+   */
+  visibility: z.enum(["public", "private"]).optional(),
   inputs: z.array(IOSchemaSchema),
   outputs: z.array(IOSchemaSchema),
   pricing: z.object({
@@ -144,6 +165,8 @@ var CapabilityCardV2Schema = z.object({
   _internal: z.record(z.unknown()).optional(),
   /** Public gateway URL where this agent accepts requests. Populated on remote publish. */
   gateway_url: z.string().url().optional(),
+  /** Exact-match capability type key for network routing (e.g. 'task_decomposition'). Optional — backward-compatible. */
+  capability_type: z.string().optional(),
   created_at: z.string().datetime().optional(),
   updated_at: z.string().datetime().optional()
 });
@@ -191,11 +214,27 @@ function createRequestLogTable(db) {
     db.exec("ALTER TABLE request_log ADD COLUMN tier_invoked INTEGER");
   } catch {
   }
+  try {
+    db.exec("ALTER TABLE request_log ADD COLUMN failure_reason TEXT");
+  } catch {
+  }
+  try {
+    db.exec("ALTER TABLE request_log ADD COLUMN team_id TEXT");
+  } catch {
+  }
+  try {
+    db.exec("ALTER TABLE request_log ADD COLUMN role TEXT");
+  } catch {
+  }
+  try {
+    db.exec("ALTER TABLE request_log ADD COLUMN capability_type TEXT");
+  } catch {
+  }
 }
 function insertRequestLog(db, entry) {
   const stmt = db.prepare(`
-    INSERT INTO request_log (id, card_id, card_name, requester, status, latency_ms, credits_charged, created_at, skill_id, action_type, tier_invoked)
-    VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+    INSERT INTO request_log (id, card_id, card_name, requester, status, latency_ms, credits_charged, created_at, skill_id, action_type, tier_invoked, failure_reason, team_id, role, capability_type)
+    VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
   `);
   stmt.run(
     entry.id,
@@ -208,7 +247,11 @@ function insertRequestLog(db, entry) {
     entry.created_at,
     entry.skill_id ?? null,
     entry.action_type ?? null,
-    entry.tier_invoked ?? null
+    entry.tier_invoked ?? null,
+    entry.failure_reason ?? null,
+    entry.team_id ?? null,
+    entry.role ?? null,
+    entry.capability_type ?? null
   );
 }
 
@@ -322,6 +365,17 @@ var V2_FTS_TRIGGERS = `
          FROM json_each(json_extract(new.data, '$.metadata.tags'))),
         ''
       )
+      || ' ' || COALESCE(
+        (SELECT group_concat(json_extract(skill.value, '$.capability_type'), ' ')
+         FROM json_each(json_extract(new.data, '$.skills')) AS skill),
+        ''
+      )
+      || ' ' || COALESCE(
+        (SELECT group_concat(cap_type.value, ' ')
+         FROM json_each(json_extract(new.data, '$.skills')) AS skill,
+              json_each(json_extract(skill.value, '$.capability_types')) AS cap_type),
+        ''
+      )
     );
   END;
 
@@ -351,6 +405,17 @@ var V2_FTS_TRIGGERS = `
          FROM json_each(json_extract(old.data, '$.metadata.tags'))),
         ''
       )
+      || ' ' || COALESCE(
+        (SELECT group_concat(json_extract(skill.value, '$.capability_type'), ' ')
+         FROM json_each(json_extract(old.data, '$.skills')) AS skill),
+        ''
+      )
+      || ' ' || COALESCE(
+        (SELECT group_concat(cap_type.value, ' ')
+         FROM json_each(json_extract(old.data, '$.skills')) AS skill,
+              json_each(json_extract(skill.value, '$.capability_types')) AS cap_type),
+        ''
+      )
     );
     INSERT INTO cards_fts(rowid, id, owner, name, description, tags)
     VALUES (
@@ -376,6 +441,17 @@ var V2_FTS_TRIGGERS = `
          FROM json_each(json_extract(new.data, '$.metadata.tags'))),
         ''
       )
+      || ' ' || COALESCE(
+        (SELECT group_concat(json_extract(skill.value, '$.capability_type'), ' ')
+         FROM json_each(json_extract(new.data, '$.skills')) AS skill),
+        ''
+      )
+      || ' ' || COALESCE(
+        (SELECT group_concat(cap_type.value, ' ')
+         FROM json_each(json_extract(new.data, '$.skills')) AS skill,
+              json_each(json_extract(skill.value, '$.capability_types')) AS cap_type),
+        ''
+      )
     );
   END;
 
@@ -405,6 +481,17 @@ var V2_FTS_TRIGGERS = `
          FROM json_each(json_extract(old.data, '$.metadata.tags'))),
         ''
       )
+      || ' ' || COALESCE(
+        (SELECT group_concat(json_extract(skill.value, '$.capability_type'), ' ')
+         FROM json_each(json_extract(old.data, '$.skills')) AS skill),
+        ''
+      )
+      || ' ' || COALESCE(
+        (SELECT group_concat(cap_type.value, ' ')
+         FROM json_each(json_extract(old.data, '$.skills')) AS skill,
+              json_each(json_extract(skill.value, '$.capability_types')) AS cap_type),
+        ''
+      )
     );
   END;
 `;
@@ -509,10 +596,17 @@ function migrateV1toV2(db) {
       if (skills.length > 0) {
         name = skills.map((s) => String(s["name"] ?? "")).join(" ");
         description = skills.map((s) => String(s["description"] ?? "")).join(" ");
-        tags = skills.flatMap((s) => {
-          const meta = s["metadata"];
-          return meta?.["tags"] ?? [];
-        }).join(" ");
+        tags = [
+          // tags from metadata.tags[]
+          ...skills.flatMap((s) => {
+            const meta = s["metadata"];
+            return meta?.["tags"] ?? [];
+          }),
+          // capability_type (singular)
+          ...skills.map((s) => s["capability_type"]).filter((v) => typeof v === "string" && v.length > 0),
+          // capability_types[] (plural)
+          ...skills.flatMap((s) => s["capability_types"] ?? [])
+        ].join(" ");
       } else {
         name = String(data["name"] ?? "");
         description = String(data["description"] ?? "");
@@ -589,6 +683,24 @@ function listCards(db, owner) {
   }
   return rows.map((row) => JSON.parse(row.data));
 }
+function getCardsByCapabilityType(db, capabilityType) {
+  const rows = db.prepare(
+    "SELECT data FROM capability_cards WHERE json_extract(data, '$.capability_type') = ?"
+  ).all(capabilityType);
+  return rows.map((row) => JSON.parse(row.data));
+}
+function getCardsBySkillCapability(db, capabilityType) {
+  const rows = db.prepare("SELECT data FROM capability_cards").all();
+  return rows.map((row) => JSON.parse(row.data)).filter((card) => {
+    const skills = card["skills"];
+    if (!skills) return false;
+    return skills.some((skill) => {
+      if (skill["capability_type"] === capabilityType) return true;
+      const types = skill["capability_types"];
+      return Array.isArray(types) && types.includes(capabilityType);
+    });
+  });
+}
 
 // src/feedback/reputation.ts
 var QUALITY_SCORES = {
@@ -753,6 +865,7 @@ function recordEarning(db, owner, amount, _cardId, receiptNonce) {
 
 // src/gateway/server.ts
 import Fastify from "fastify";
+import { randomUUID as randomUUID6 } from "crypto";
 
 // src/gateway/execute.ts
 import { randomUUID as randomUUID5 } from "crypto";
@@ -926,7 +1039,50 @@ function releaseRequesterEscrow(requesterDb, escrowId) {
   releaseEscrow(requesterDb, escrowId);
 }
 
+// src/cli/config.ts
+import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, mkdirSync, existsSync as existsSync2 } from "fs";
+import { homedir } from "os";
+import { join as join2 } from "path";
+function getConfigDir() {
+  return process.env["AGENTBNB_DIR"] ?? join2(homedir(), ".agentbnb");
+}
+function getConfigPath() {
+  return join2(getConfigDir(), "config.json");
+}
+function loadConfig() {
+  const configPath = getConfigPath();
+  if (!existsSync2(configPath)) return null;
+  try {
+    const raw = readFileSync2(configPath, "utf-8");
+    return JSON.parse(raw);
+  } catch {
+    return null;
+  }
+}
+
 // src/gateway/execute.ts
+async function notifyTelegramSkillExecuted(opts) {
+  const cfg = loadConfig();
+  if (!cfg?.telegram_notifications) return;
+  const token = cfg.telegram_bot_token ?? process.env["TELEGRAM_BOT_TOKEN"];
+  const chatId = cfg.telegram_chat_id ?? process.env["TELEGRAM_CHAT_ID"];
+  if (!token || !chatId) return;
+  const balance = getBalance(opts.creditDb, opts.owner);
+  const skillLabel = opts.skillId ? `${opts.skillName} (${opts.skillId})` : opts.skillName;
+  const text = [
+    "[AgentBnB] Skill executed",
+    `Skill: ${skillLabel}`,
+    `Requester: ${opts.requester}`,
+    `Earned: +${opts.creditsEarned} credits`,
+    `Balance: ${balance} credits`,
+    `Latency: ${opts.latencyMs}ms`
+  ].join("\n");
+  await fetch(`https://api.telegram.org/bot${token}/sendMessage`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ chat_id: chatId, text })
+  });
+}
 async function executeCapabilityRequest(opts) {
   const {
     registryDb,
@@ -958,7 +1114,8 @@ async function executeCapabilityRequest(opts) {
         status: "failure",
         latency_ms: 0,
         credits_charged: 0,
-        created_at: (/* @__PURE__ */ new Date()).toISOString()
+        created_at: (/* @__PURE__ */ new Date()).toISOString(),
+        failure_reason: "auth_error"
       });
     } catch {
     }
@@ -1013,7 +1170,7 @@ async function executeCapabilityRequest(opts) {
   }
   const startMs = Date.now();
   const receiptData = isRemoteEscrow ? { receipt_released: true } : void 0;
-  const handleFailure = (status, latencyMs, message) => {
+  const handleFailure = (status, latencyMs, message, failureReason = "bad_execution") => {
     if (!isRemoteEscrow && escrowId) releaseEscrow(creditDb, escrowId);
     updateReputation(registryDb, cardId, false, latencyMs);
     try {
@@ -1026,7 +1183,8 @@ async function executeCapabilityRequest(opts) {
         status,
         latency_ms: latencyMs,
         credits_charged: 0,
-        created_at: (/* @__PURE__ */ new Date()).toISOString()
+        created_at: (/* @__PURE__ */ new Date()).toISOString(),
+        failure_reason: failureReason
       });
     } catch {
     }
@@ -1056,6 +1214,16 @@ async function executeCapabilityRequest(opts) {
       });
     } catch {
     }
+    notifyTelegramSkillExecuted({
+      creditDb,
+      owner: card.owner,
+      skillName: cardName,
+      skillId: resolvedSkillId ?? null,
+      requester,
+      creditsEarned: creditsNeeded,
+      latencyMs
+    }).catch(() => {
+    });
     const successResult = isRemoteEscrow ? {
       ...typeof result === "object" && result !== null ? result : { data: result },
       receipt_settled: true,
@@ -1073,23 +1241,24 @@ async function executeCapabilityRequest(opts) {
         return handleFailure(
           "failure",
           Date.now() - startMs,
-          "No skill_id specified and no skills registered on this provider."
+          "No skill_id specified and no skills registered on this provider.",
+          "not_found"
         );
       }
     }
     try {
       const execResult = await skillExecutor.execute(targetSkillId, params, onProgress);
       if (!execResult.success) {
-        return handleFailure("failure", execResult.latency_ms, execResult.error ?? "Execution failed");
+        return handleFailure("failure", execResult.latency_ms, execResult.error ?? "Execution failed", "bad_execution");
       }
       return handleSuccess(execResult.result, execResult.latency_ms);
     } catch (err) {
       const message = err instanceof Error ? err.message : "Execution error";
-      return handleFailure("failure", Date.now() - startMs, message);
+      return handleFailure("failure", Date.now() - startMs, message, "bad_execution");
     }
   }
   if (!handlerUrl) {
-    return handleFailure("failure", Date.now() - startMs, "No skill executor or handler URL configured");
+    return handleFailure("failure", Date.now() - startMs, "No skill executor or handler URL configured", "bad_execution");
   }
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), timeoutMs);
@@ -1102,7 +1271,7 @@ async function executeCapabilityRequest(opts) {
     });
     clearTimeout(timer);
     if (!response.ok) {
-      return handleFailure("failure", Date.now() - startMs, `Handler returned ${response.status}`);
+      return handleFailure("failure", Date.now() - startMs, `Handler returned ${response.status}`, "bad_execution");
     }
     const result = await response.json();
     return handleSuccess(result, Date.now() - startMs);
@@ -1112,7 +1281,8 @@ async function executeCapabilityRequest(opts) {
     return handleFailure(
       isTimeout ? "timeout" : "failure",
       Date.now() - startMs,
-      isTimeout ? "Execution timeout" : "Handler error"
+      isTimeout ? "Execution timeout" : "Handler error",
+      isTimeout ? "timeout" : "bad_execution"
     );
   }
 }
@@ -1131,6 +1301,8 @@ function createGatewayServer(opts) {
   } = opts;
   const fastify = Fastify({ logger: !silent });
   const tokenSet = new Set(tokens);
+  const inFlight = /* @__PURE__ */ new Map();
+  const OVERLOAD_RETRY_MS = 5e3;
   fastify.addHook("onRequest", async (request) => {
     if (request.method === "GET" && request.url === "/health") return;
     const auth = request.headers.authorization;
@@ -1196,18 +1368,63 @@ function createGatewayServer(opts) {
     }
     const requester = params.requester ?? "unknown";
     const receipt = params.escrow_receipt;
-    const result = await executeCapabilityRequest({
-      registryDb,
-      creditDb,
-      cardId,
-      skillId,
-      params,
-      requester,
-      escrowReceipt: receipt,
-      skillExecutor,
-      handlerUrl,
-      timeoutMs
-    });
+    if (skillExecutor && skillId && typeof skillExecutor.getSkillConfig === "function") {
+      const skillConfig = skillExecutor.getSkillConfig(skillId);
+      const maxConcurrent = skillConfig?.capacity?.max_concurrent;
+      if (maxConcurrent !== void 0) {
+        const current = inFlight.get(skillId) ?? 0;
+        if (current >= maxConcurrent) {
+          try {
+            insertRequestLog(registryDb, {
+              id: randomUUID6(),
+              card_id: cardId,
+              card_name: "<overload>",
+              requester,
+              status: "failure",
+              latency_ms: 0,
+              credits_charged: 0,
+              created_at: (/* @__PURE__ */ new Date()).toISOString(),
+              skill_id: skillId,
+              failure_reason: "overload"
+            });
+          } catch {
+          }
+          return reply.status(200).send({
+            jsonrpc: "2.0",
+            id,
+            error: {
+              code: -32e3,
+              message: "overload",
+              data: { error: "overload", retry_after_ms: OVERLOAD_RETRY_MS }
+            }
+          });
+        }
+      }
+    }
+    const trackKey = skillId ?? cardId;
+    inFlight.set(trackKey, (inFlight.get(trackKey) ?? 0) + 1);
+    let result;
+    try {
+      result = await executeCapabilityRequest({
+        registryDb,
+        creditDb,
+        cardId,
+        skillId,
+        params,
+        requester,
+        escrowReceipt: receipt,
+        skillExecutor,
+        handlerUrl,
+        timeoutMs
+      });
+    } finally {
+      const next = (inFlight.get(trackKey) ?? 1) - 1;
+      if (next <= 0) {
+        inFlight.delete(trackKey);
+      } else {
+        inFlight.set(trackKey, next);
+      }
+    }
     if (result.success) {
       return reply.send({ jsonrpc: "2.0", id, result: result.result });
     } else {
@@ -1300,6 +1517,9 @@ function createSkillExecutor(configs, modes) {
 // src/skills/skill-config.ts
 import { z as z2 } from "zod";
 import yaml from "js-yaml";
+var CapacitySchema = z2.object({
+  max_concurrent: z2.number().positive().int().optional()
+}).optional();
 var PricingSchema = z2.object({
   credits_per_call: z2.number().nonnegative(),
   credits_per_minute: z2.number().nonnegative().optional(),
@@ -1321,6 +1541,12 @@ var ApiAuthSchema = z2.discriminatedUnion("type", [
     password: z2.string()
   })
 ]);
+var CapabilityDeclarationSchema = {
+  description: z2.string().optional(),
+  capability_types: z2.array(z2.string()).optional(),
+  requires_capabilities: z2.array(z2.string()).optional(),
+  visibility: z2.enum(["public", "private"]).optional()
+};
 var ApiSkillConfigSchema = z2.object({
   id: z2.string().min(1),
   type: z2.literal("api"),
@@ -1333,7 +1559,9 @@ var ApiSkillConfigSchema = z2.object({
   pricing: PricingSchema,
   timeout_ms: z2.number().positive().default(3e4),
   retries: z2.number().nonnegative().int().default(0),
-  provider: z2.string().optional()
+  provider: z2.string().optional(),
+  capacity: CapacitySchema,
+  ...CapabilityDeclarationSchema
 });
 var PipelineStepSchema = z2.union([
   z2.object({
@@ -1351,7 +1579,9 @@ var PipelineSkillConfigSchema = z2.object({
   name: z2.string().min(1),
   steps: z2.array(PipelineStepSchema).min(1),
   pricing: PricingSchema,
-  timeout_ms: z2.number().positive().optional()
+  timeout_ms: z2.number().positive().optional(),
+  capacity: CapacitySchema,
+  ...CapabilityDeclarationSchema
 });
 var OpenClawSkillConfigSchema = z2.object({
   id: z2.string().min(1),
@@ -1360,7 +1590,9 @@ var OpenClawSkillConfigSchema = z2.object({
   agent_name: z2.string().min(1),
   channel: z2.enum(["telegram", "webhook", "process"]),
   pricing: PricingSchema,
-  timeout_ms: z2.number().positive().optional()
+  timeout_ms: z2.number().positive().optional(),
+  capacity: CapacitySchema,
+  ...CapabilityDeclarationSchema
 });
 var CommandSkillConfigSchema = z2.object({
   id: z2.string().min(1),
@@ -1371,7 +1603,9 @@ var CommandSkillConfigSchema = z2.object({
   allowed_commands: z2.array(z2.string()).optional(),
   working_dir: z2.string().optional(),
   timeout_ms: z2.number().positive().default(3e4),
-  pricing: PricingSchema
+  pricing: PricingSchema,
+  capacity: CapacitySchema,
+  ...CapabilityDeclarationSchema
 });
 var ConductorSkillConfigSchema = z2.object({
   id: z2.string().min(1),
@@ -1379,7 +1613,9 @@ var ConductorSkillConfigSchema = z2.object({
   name: z2.string().min(1),
   conductor_skill: z2.enum(["orchestrate", "plan"]),
   pricing: PricingSchema,
-  timeout_ms: z2.number().positive().optional()
+  timeout_ms: z2.number().positive().optional(),
+  capacity: CapacitySchema,
+  ...CapabilityDeclarationSchema
 });
 var SkillConfigSchema = z2.discriminatedUnion("type", [
   ApiSkillConfigSchema,
@@ -2017,7 +2253,143 @@ var CommandExecutor = class {
 };
 
 // src/conductor/task-decomposer.ts
-import { randomUUID as randomUUID6 } from "crypto";
+import { randomUUID as randomUUID7 } from "crypto";
+
+// src/conductor/decomposition-validator.ts
+function validateAndNormalizeSubtasks(raw, context) {
+  try {
+    return _validate(raw, context);
+  } catch {
+    return { valid: [], errors: ["internal validation error"] };
+  }
+}
+function _validate(raw, context) {
+  if (!Array.isArray(raw)) {
+    return { valid: [], errors: ["decomposition output must be an array"] };
+  }
+  if (raw.length === 0) {
+    return { valid: [], errors: [] };
+  }
+  const errors = [];
+  const validItems = [];
+  const validIds = [];
+  for (let i = 0; i < raw.length; i++) {
+    const item = raw[i];
+    if (typeof item !== "object" || item === null || Array.isArray(item)) {
+      errors.push(`subtask[${i}]: must be an object`);
+      continue;
+    }
+    const obj = item;
+    let itemValid = true;
+    const id = obj["id"];
+    if (typeof id !== "string" || id.length === 0) {
+      errors.push(`subtask[${i}]: id must be a non-empty string`);
+      itemValid = false;
+    }
+    const description = obj["description"];
+    if (typeof description !== "string" || description.length === 0) {
+      errors.push(`subtask[${i}]: description must be a non-empty string`);
+      itemValid = false;
+    }
+    const required_capability = obj["required_capability"];
+    if (typeof required_capability !== "string" || required_capability.length === 0) {
+      errors.push(`subtask[${i}]: required_capability must be a non-empty string`);
+      itemValid = false;
+    }
+    const estimated_credits = obj["estimated_credits"];
+    if (estimated_credits !== void 0) {
+      if (typeof estimated_credits !== "number" || estimated_credits <= 0) {
+        errors.push(`subtask[${i}]: estimated_credits must be a positive number`);
+        itemValid = false;
+      } else if (estimated_credits > context.max_credits) {
+        errors.push(
+          `subtask[${i}]: estimated_credits ${estimated_credits} exceeds max_credits ${context.max_credits}`
+        );
+        itemValid = false;
+      }
+    }
+    if (itemValid) {
+      validItems.push(obj);
+      validIds.push(id);
+    }
+  }
+  const idSet = /* @__PURE__ */ new Set();
+  for (const id of validIds) {
+    if (idSet.has(id)) {
+      errors.push(`duplicate subtask id: ${id}`);
+    } else {
+      idSet.add(id);
+    }
+  }
+  for (let i = 0; i < validItems.length; i++) {
+    const item = validItems[i];
+    const depends_on = item["depends_on"];
+    if (!Array.isArray(depends_on)) continue;
+    for (const dep of depends_on) {
+      if (typeof dep === "string" && !idSet.has(dep)) {
+        errors.push(`subtask[${i}]: depends_on references unknown id '${dep}'`);
+      }
+    }
+  }
+  if (errors.length === 0 && validItems.length > 0) {
+    const inDegree = /* @__PURE__ */ new Map();
+    const adjList = /* @__PURE__ */ new Map();
+    for (const id of validIds) {
+      inDegree.set(id, 0);
+      adjList.set(id, []);
+    }
+    for (const item of validItems) {
+      const depends_on = item["depends_on"];
+      if (!Array.isArray(depends_on)) continue;
+      for (const dep of depends_on) {
+        if (typeof dep !== "string" || !idSet.has(dep)) continue;
+        adjList.get(dep)?.push(item["id"]);
+        inDegree.set(item["id"], (inDegree.get(item["id"]) ?? 0) + 1);
+      }
+    }
+    const queue = [];
+    for (const [id, deg] of inDegree) {
+      if (deg === 0) queue.push(id);
+    }
+    let processed = 0;
+    while (queue.length > 0) {
+      const current = queue.shift();
+      processed++;
+      for (const neighbor of adjList.get(current) ?? []) {
+        const newDeg = (inDegree.get(neighbor) ?? 0) - 1;
+        inDegree.set(neighbor, newDeg);
+        if (newDeg === 0) queue.push(neighbor);
+      }
+    }
+    if (processed < validItems.length) {
+      for (const [id, deg] of inDegree) {
+        if (deg > 0) {
+          errors.push(`circular dependency detected involving subtask id: ${id}`);
+          break;
+        }
+      }
+    }
+  }
+  if (errors.length > 0) {
+    return { valid: [], errors };
+  }
+  const normalized = validItems.map((item) => {
+    const depends_on = Array.isArray(item["depends_on"]) ? item["depends_on"].filter((x) => typeof x === "string") : [];
+    const params = typeof item["params"] === "object" && item["params"] !== null && !Array.isArray(item["params"]) ? item["params"] : {};
+    const estimated_credits = typeof item["estimated_credits"] === "number" ? item["estimated_credits"] : 0;
+    return {
+      id: item["id"],
+      description: item["description"],
+      required_capability: item["required_capability"],
+      params,
+      depends_on,
+      estimated_credits
+    };
+  });
+  return { valid: normalized, errors: [] };
+}
+
+// src/conductor/task-decomposer.ts
 var TEMPLATES = {
   "video-production": {
     keywords: ["video", "demo", "clip", "animation"],
@@ -2112,7 +2484,7 @@ function decompose(task, _availableCapabilities) {
   for (const template of Object.values(TEMPLATES)) {
     const matched = template.keywords.some((kw) => lower.includes(kw));
     if (!matched) continue;
-    const ids = template.steps.map(() => randomUUID6());
+    const ids = template.steps.map(() => randomUUID7());
     return template.steps.map((step, i) => ({
       id: ids[i],
       description: step.description,
@@ -2126,10 +2498,10 @@ function decompose(task, _availableCapabilities) {
 }
 
 // src/gateway/client.ts
-import { randomUUID as randomUUID7 } from "crypto";
+import { randomUUID as randomUUID8 } from "crypto";
 async function requestCapability(opts) {
   const { gatewayUrl, token, cardId, params = {}, timeoutMs = 3e5, escrowReceipt, identity } = opts;
-  const id = randomUUID7();
+  const id = randomUUID8();
   const payload = {
     jsonrpc: "2.0",
     id,
@@ -2199,36 +2571,15 @@ async function requestViaRelay(relay, opts) {
 }
 
 // src/autonomy/tiers.ts
-import { randomUUID as randomUUID8 } from "crypto";
+import { randomUUID as randomUUID9 } from "crypto";
 
 // src/autonomy/pending-requests.ts
-import { randomUUID as randomUUID9 } from "crypto";
+import { randomUUID as randomUUID10 } from "crypto";
 
 // src/cli/peers.ts
 import { readFileSync as readFileSync3, writeFileSync as writeFileSync3, existsSync as existsSync3, mkdirSync as mkdirSync2 } from "fs";
 import { join as join3 } from "path";
 
-// src/cli/config.ts
-import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, mkdirSync, existsSync as existsSync2 } from "fs";
-import { homedir } from "os";
-import { join as join2 } from "path";
-function getConfigDir() {
-  return process.env["AGENTBNB_DIR"] ?? join2(homedir(), ".agentbnb");
-}
-function getConfigPath() {
-  return join2(getConfigDir(), "config.json");
-}
-function loadConfig() {
-  const configPath = getConfigPath();
-  if (!existsSync2(configPath)) return null;
-  try {
-    const raw = readFileSync2(configPath, "utf-8");
-    return JSON.parse(raw);
-  } catch {
-    return null;
-  }
-}
-
 // src/cli/remote-registry.ts
 var RegistryTimeoutError = class extends AgentBnBError {
   constructor(url) {
@@ -2573,6 +2924,12 @@ function computeWaves(subtasks) {
 async function orchestrate(opts) {
   const { subtasks, matches, gatewayToken, resolveAgentUrl, timeoutMs = 3e5, maxBudget, relayClient, requesterOwner } = opts;
   const startTime = Date.now();
+  const teamMemberMap = /* @__PURE__ */ new Map();
+  if (opts.team) {
+    for (const member of opts.team.matched) {
+      teamMemberMap.set(member.subtask.id, member);
+    }
+  }
   if (subtasks.length === 0) {
     return {
       success: true,
@@ -2584,6 +2941,7 @@ async function orchestrate(opts) {
   const results = /* @__PURE__ */ new Map();
   const errors = [];
   let totalCredits = 0;
+  const traceContext = /* @__PURE__ */ new Map();
   const waves = computeWaves(subtasks);
   const subtaskMap = new Map(subtasks.map((s) => [s.id, s]));
   for (const wave of waves) {
@@ -2620,7 +2978,11 @@ async function orchestrate(opts) {
           subtask.params,
           interpContext
         );
-        const primary = resolveAgentUrl(m.selected_agent);
+        const teamMember = teamMemberMap.get(taskId);
+        const teamId = opts.team?.team_id ?? null;
+        const taskCapabilityType = teamMember?.capability_type ?? null;
+        const agentOwner = teamMember?.agent ?? m.selected_agent;
+        const primary = resolveAgentUrl(agentOwner);
         try {
           let res;
           if (primary.url.startsWith("relay://") && relayClient) {
@@ -2641,7 +3003,7 @@ async function orchestrate(opts) {
               timeoutMs
             });
           }
-          return { taskId, result: res, credits: m.credits };
+          return { taskId, result: res, credits: m.credits, team_id: teamId, capability_type: taskCapabilityType };
         } catch (primaryErr) {
           if (m.alternatives.length > 0) {
             const alt = m.alternatives[0];
@@ -2666,7 +3028,7 @@ async function orchestrate(opts) {
                   timeoutMs
                 });
               }
-              return { taskId, result: altRes, credits: alt.credits };
+              return { taskId, result: altRes, credits: alt.credits, team_id: teamId, capability_type: taskCapabilityType };
             } catch (altErr) {
               throw new Error(
                 `Task ${taskId}: primary (${m.selected_agent}) failed: ${primaryErr instanceof Error ? primaryErr.message : String(primaryErr)}; alternative (${alt.agent}) failed: ${altErr instanceof Error ? altErr.message : String(altErr)}`
@@ -2681,9 +3043,10 @@ async function orchestrate(opts) {
     );
     for (const settlement of waveResults) {
       if (settlement.status === "fulfilled") {
-        const { taskId, result, credits } = settlement.value;
+        const { taskId, result, credits, team_id, capability_type } = settlement.value;
         results.set(taskId, result);
         totalCredits += credits;
+        traceContext.set(taskId, { team_id: team_id ?? null, capability_type: capability_type ?? null });
       } else {
         errors.push(settlement.reason instanceof Error ? settlement.reason.message : String(settlement.reason));
       }
@@ -2694,7 +3057,8 @@ async function orchestrate(opts) {
     results,
     total_credits: totalCredits,
     latency_ms: Date.now() - startTime,
-    errors: errors.length > 0 ? errors : void 0
+    errors: errors.length > 0 ? errors : void 0,
+    trace: traceContext.size > 0 ? traceContext : void 0
   };
 }
 
@@ -2743,6 +3107,96 @@ var BudgetManager = class {
   }
 };
 
+// src/conductor/team-formation.ts
+import { randomUUID as randomUUID11 } from "crypto";
+function selectByStrategy(matches, strategy) {
+  if (matches.length === 0) return void 0;
+  if (strategy === "balanced") {
+    return matches[0];
+  }
+  if (strategy === "quality_optimized") {
+    return matches.reduce((best, m) => m.score > best.score ? m : best, matches[0]);
+  }
+  return matches.reduce((best, m) => {
+    if (m.credits < best.credits) return m;
+    if (m.credits === best.credits && m.score > best.score) return m;
+    return best;
+  }, matches[0]);
+}
+async function formTeam(opts) {
+  const { subtasks, strategy, db, conductorOwner, registryUrl } = opts;
+  const team_id = randomUUID11();
+  if (subtasks.length === 0) {
+    return { team_id, strategy, matched: [], unrouted: [] };
+  }
+  const matched = [];
+  const unrouted = [];
+  for (const subtask of subtasks) {
+    const skillCards = getCardsBySkillCapability(db, subtask.required_capability).filter((c) => c.owner !== conductorOwner);
+    if (skillCards.length > 0) {
+      const candidates = skillCards.map((card) => {
+        const skills = card.skills ?? [];
+        const matchingSkill = skills.find(
+          (s) => s.capability_type === subtask.required_capability || (s.capability_types ?? []).includes(subtask.required_capability)
+        );
+        return {
+          subtask_id: subtask.id,
+          selected_agent: card.owner,
+          selected_skill: matchingSkill?.id ?? "",
+          selected_card_id: card.id,
+          score: 1,
+          credits: matchingSkill?.pricing.credits_per_call ?? 0,
+          alternatives: []
+        };
+      });
+      const selected2 = selectByStrategy(candidates, strategy);
+      matched.push({
+        subtask,
+        capability_type: subtask.required_capability,
+        agent: selected2.selected_agent,
+        skill: selected2.selected_skill,
+        card_id: selected2.selected_card_id,
+        credits: selected2.credits,
+        score: selected2.score
+      });
+      continue;
+    }
+    const matchResults = await matchSubTasks({
+      db,
+      subtasks: [subtask],
+      conductorOwner,
+      registryUrl
+    });
+    const m = matchResults[0];
+    if (!m || m.selected_agent === "") {
+      unrouted.push(subtask);
+      continue;
+    }
+    const allCandidates = [
+      m,
+      ...m.alternatives.map((alt) => ({
+        subtask_id: m.subtask_id,
+        selected_agent: alt.agent,
+        selected_skill: alt.skill,
+        score: alt.score,
+        credits: alt.credits,
+        alternatives: []
+      }))
+    ];
+    const selected = selectByStrategy(allCandidates, strategy);
+    matched.push({
+      subtask,
+      capability_type: subtask.required_capability,
+      agent: selected.selected_agent,
+      skill: selected.selected_skill,
+      card_id: selected === m ? m.selected_card_id : void 0,
+      credits: selected.credits,
+      score: selected.score
+    });
+  }
+  return { team_id, strategy, matched, unrouted };
+}
+
 // src/conductor/conductor-mode.ts
 var ConductorMode = class {
   db;
@@ -2781,7 +3235,48 @@ var ConductorMode = class {
         error: 'Missing or empty "task" parameter'
       };
     }
-    const subtasks = decompose(task);
+    const orchestrationDepth = typeof params.orchestration_depth === "number" ? params.orchestration_depth : 0;
+    const decompositionDepth = typeof params.decomposition_depth === "number" ? params.decomposition_depth : 0;
+    if (orchestrationDepth >= 2) {
+      return {
+        success: false,
+        error: "orchestration_depth limit exceeded: max 1 nested orchestration"
+      };
+    }
+    let subtasks = [];
+    if (decompositionDepth === 0) {
+      const allDecomposers = getCardsByCapabilityType(this.db, "task_decomposition");
+      const externalDecomposers = allDecomposers.filter((c) => c.owner !== this.conductorOwner);
+      if (externalDecomposers.length > 0) {
+        const provider = externalDecomposers[0];
+        try {
+          const providerUrl = this.resolveAgentUrl(provider.owner);
+          const response = await requestCapability({
+            gatewayUrl: providerUrl.url,
+            token: this.gatewayToken,
+            cardId: provider.id,
+            params: {
+              task,
+              decomposition_depth: decompositionDepth + 1,
+              orchestration_depth: orchestrationDepth + 1
+            },
+            timeoutMs: 3e4
+          });
+          if (Array.isArray(response)) {
+            const validation = validateAndNormalizeSubtasks(response, {
+              max_credits: this.maxBudget
+            });
+            if (validation.errors.length === 0) {
+              subtasks = validation.valid;
+            }
+          }
+        } catch {
+        }
+      }
+    }
+    if (subtasks.length === 0) {
+      subtasks = decompose(task);
+    }
     if (subtasks.length === 0) {
       return {
         success: false,
@@ -2795,6 +3290,17 @@ var ConductorMode = class {
       conductorOwner: this.conductorOwner
     });
     onProgress?.({ step: 2, total: 5, message: `Matched ${matchResults.length} sub-tasks to agents` });
+    let team;
+    if (conductorSkill === "orchestrate") {
+      const strategy = typeof params.formation_strategy === "string" && ["cost_optimized", "quality_optimized", "balanced"].includes(params.formation_strategy) ? params.formation_strategy : "balanced";
+      team = await formTeam({
+        subtasks,
+        strategy,
+        db: this.db,
+        conductorOwner: this.conductorOwner
+      });
+      onProgress?.({ step: 2, total: 5, message: `Formed team: ${team.matched.length} members, ${team.unrouted.length} unrouted` });
+    }
     const budgetManager = new BudgetManager(this.creditDb, this.conductorOwner);
     const budgetController = new BudgetController(budgetManager, this.maxBudget);
     const executionBudget = budgetController.calculateBudget(matchResults);
@@ -2811,7 +3317,9 @@ var ConductorMode = class {
         result: {
           subtasks,
           matches: matchResults,
-          budget: executionBudget
+          budget: executionBudget,
+          team
+          // undefined when no role hints
         }
       };
     }
@@ -2823,7 +3331,8 @@ var ConductorMode = class {
       matches: matchMap,
       gatewayToken: this.gatewayToken,
       resolveAgentUrl: this.resolveAgentUrl,
-      maxBudget: this.maxBudget
+      maxBudget: this.maxBudget,
+      team
     });
     onProgress?.({ step: 4, total: 5, message: "Pipeline execution complete" });
     const resultObj = {};
@@ -2846,7 +3355,7 @@ var ConductorMode = class {
 
 // src/credit/escrow-receipt.ts
 import { z as z3 } from "zod";
-import { randomUUID as randomUUID10 } from "crypto";
+import { randomUUID as randomUUID12 } from "crypto";
 var EscrowReceiptSchema = z3.object({
   requester_owner: z3.string().min(1),
   requester_public_key: z3.string().min(1),
@@ -2866,7 +3375,7 @@ function createSignedEscrowReceipt(db, privateKey, publicKey, opts) {
     card_id: opts.cardId,
     ...opts.skillId ? { skill_id: opts.skillId } : {},
     timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-    nonce: randomUUID10()
+    nonce: randomUUID12()
   };
   const signature = signEscrowReceipt(receiptData, privateKey);
   const receipt = {
@@ -3237,7 +3746,7 @@ var AgentBnBProvider = class {
 
 // src/identity/guarantor.ts
 import { z as z5 } from "zod";
-import { randomUUID as randomUUID11 } from "crypto";
+import { randomUUID as randomUUID13 } from "crypto";
 var MAX_AGENTS_PER_GUARANTOR = 10;
 var GUARANTOR_CREDIT_POOL = 50;
 var GuarantorRecordSchema = z5.object({
@@ -3276,7 +3785,7 @@ function registerGuarantor(db, githubLogin) {
     );
   }
   const record = {
-    id: randomUUID11(),
+    id: randomUUID13(),
     github_login: githubLogin,
     agent_count: 0,
     credit_pool: GUARANTOR_CREDIT_POOL,
@@ -3350,7 +3859,7 @@ function getAgentGuarantor(db, agentId) {
 function initiateGithubAuth() {
   return {
     auth_url: "https://github.com/login/oauth/authorize?client_id=PLACEHOLDER&scope=read:user",
-    state: randomUUID11()
+    state: randomUUID13()
   };
 }
 
@@ -3434,7 +3943,7 @@ var RelayMessageSchema = z6.discriminatedUnion("type", [
 ]);
 
 // src/relay/websocket-relay.ts
-import { randomUUID as randomUUID14 } from "crypto";
+import { randomUUID as randomUUID16 } from "crypto";
 
 // src/relay/relay-credit.ts
 function lookupCardPrice(registryDb, cardId, skillId) {
@@ -3492,10 +4001,10 @@ function releaseForRelay(creditDb, escrowId) {
 }
 
 // src/hub-agent/relay-bridge.ts
-import { randomUUID as randomUUID13 } from "crypto";
+import { randomUUID as randomUUID15 } from "crypto";
 
 // src/hub-agent/job-queue.ts
-import { randomUUID as randomUUID12 } from "crypto";
+import { randomUUID as randomUUID14 } from "crypto";
 function updateJobStatus(db, jobId, status, result) {
   const now = (/* @__PURE__ */ new Date()).toISOString();
   if (result !== void 0) {
@@ -3616,7 +4125,7 @@ function registerWebSocketRelay(server, db, creditDb) {
   function logAgentJoined(owner, cardName, cardId) {
     try {
       insertRequestLog(db, {
-        id: randomUUID14(),
+        id: randomUUID16(),
         card_id: cardId,
         card_name: cardName,
         requester: owner,
@@ -3964,7 +4473,7 @@ function registerWebSocketRelay(server, db, creditDb) {
 
 // src/relay/websocket-client.ts
 import WebSocket from "ws";
-import { randomUUID as randomUUID15 } from "crypto";
+import { randomUUID as randomUUID17 } from "crypto";
 var RelayClient = class {
   ws = null;
   opts;
@@ -4061,7 +4570,7 @@ var RelayClient = class {
     if (!this.ws || this.ws.readyState !== WebSocket.OPEN || !this.registered) {
       throw new Error("Not connected to registry relay");
     }
-    const id = randomUUID15();
+    const id = randomUUID17();
     const timeoutMs = opts.timeoutMs ?? 3e5;
     return new Promise((resolve, reject) => {
       const timeout = setTimeout(() => {
@@ -4265,12 +4774,12 @@ var RelayClient = class {
 };
 
 // src/onboarding/index.ts
-import { randomUUID as randomUUID17 } from "crypto";
+import { randomUUID as randomUUID19 } from "crypto";
 import { existsSync as existsSync5, readFileSync as readFileSync5 } from "fs";
 import { join as join5 } from "path";
 
 // src/cli/onboarding.ts
-import { randomUUID as randomUUID16 } from "crypto";
+import { randomUUID as randomUUID18 } from "crypto";
 import { createConnection } from "net";
 var KNOWN_API_KEYS = [
   "OPENAI_API_KEY",
@@ -4412,7 +4921,7 @@ function capabilitiesToV2Card(capabilities, owner, agentName) {
   }));
   const card = {
     spec_version: "2.0",
-    id: randomUUID17(),
+    id: randomUUID19(),
     owner,
     agent_name: agentName ?? owner,
     skills,