agentbnb 5.1.11 → 7.0.0-beta.1

package/dist/skills/agentbnb/bootstrap.js

@@ -12,61 +12,67 @@ import {
   requestViaRelay,
   resolvePendingRequest,
   searchCards
-} from "../../chunk-B5FTAGFN.js";
-import {
-  getConfigDir,
-  loadConfig
-} from "../../chunk-IVOYM3WG.js";
+} from "../../chunk-ETGOKDFR.js";
 import {
   executeCapabilityBatch,
   executeCapabilityRequest,
-  getActivityFeed,
-  getCard,
-  getEvolutionHistory,
-  getLatestEvolution,
-  getRequestLog,
-  getSkillRequestCount,
-  insertCard,
-  insertEvolution,
-  insertRequestLog,
-  listCards,
-  openDatabase,
   releaseRequesterEscrow,
-  settleRequesterEscrow,
-  updateCard,
-  updateSkillAvailability,
-  updateSkillIdleRate
-} from "../../chunk-EPIWHNB2.js";
+  settleRequesterEscrow
+} from "../../chunk-EAD4A4KG.js";
 import {
   bootstrapAgent,
   generateKeyPair,
+  getActivityFeed,
   getBalance,
+  getCard,
+  getCardsBySkillCapability,
+  getEvolutionHistory,
   getFeedbackForProvider,
   getFeedbackForSkill,
+  getLatestEvolution,
+  getRequestLog,
+  getSkillRequestCount,
   getTransactions,
   holdEscrow,
+  insertCard,
+  insertEvolution,
   insertFeedback,
+  insertRequestLog,
+  listCards,
   loadKeyPair,
   migrateOwner,
   openCreditDb,
+  openDatabase,
   releaseEscrow,
   saveKeyPair,
   settleEscrow,
   signEscrowReceipt,
+  updateCard,
+  updateSkillAvailability,
+  updateSkillIdleRate,
   verifyEscrowReceipt
-} from "../../chunk-CRFCWD6V.js";
+} from "../../chunk-K5FO42YF.js";
+import "../../chunk-NWIQJ2CL.js";
+import {
+  getConfigDir,
+  loadConfig
+} from "../../chunk-IVOYM3WG.js";
 import {
   AgentBnBError,
   AnyCardSchema
-} from "../../chunk-WGZ5AGOX.js";
+} from "../../chunk-3CIMVISQ.js";
 import {
   RelayClient,
   RelayMessageSchema
-} from "../../chunk-C6KPAFCC.js";
+} from "../../chunk-PU7LXOQ3.js";
 
 // skills/agentbnb/bootstrap.ts
 import { join as join5 } from "path";
+import { dirname as dirname4, basename } from "path";
+import { existsSync as existsSync6 } from "fs";
+import { homedir as homedir2 } from "os";
 import { spawnSync } from "child_process";
+import { randomUUID as randomUUID10 } from "crypto";
 
 // src/runtime/process-guard.ts
 import { dirname, join } from "path";
@@ -245,13 +251,16 @@ import { readFileSync as readFileSync2, existsSync as existsSync2 } from "fs";
 var SkillExecutor = class {
   skillMap;
   modeMap;
+  concurrencyGuard;
   /**
    * @param configs - Parsed SkillConfig array (from parseSkillsFile).
    * @param modes - Map from skill type string to its executor implementation.
+   * @param concurrencyGuard - Optional ConcurrencyGuard to enforce max_concurrent limits.
    */
-  constructor(configs, modes) {
+  constructor(configs, modes, concurrencyGuard) {
     this.skillMap = new Map(configs.map((c) => [c.id, c]));
     this.modeMap = modes;
+    this.concurrencyGuard = concurrencyGuard;
   }
   /**
    * Execute a skill by ID with the given input parameters.
@@ -284,6 +293,18 @@ var SkillExecutor = class {
         latency_ms: Date.now() - startTime
       };
     }
+    const maxConcurrent = config.capacity?.max_concurrent ?? Infinity;
+    if (this.concurrencyGuard && maxConcurrent !== Infinity) {
+      if (!this.concurrencyGuard.canAccept(skillId, maxConcurrent)) {
+        return {
+          success: false,
+          error: `Skill ${skillId} at capacity (${maxConcurrent} concurrent max)`,
+          latency_ms: Date.now() - startTime,
+          failure_reason: "overload"
+        };
+      }
+      this.concurrencyGuard.acquire(skillId);
+    }
     try {
       const modeResult = await mode.execute(config, params, onProgress);
       return {
@@ -297,6 +318,10 @@ var SkillExecutor = class {
         error: message,
         latency_ms: Date.now() - startTime
       };
+    } finally {
+      if (this.concurrencyGuard && maxConcurrent !== Infinity) {
+        this.concurrencyGuard.release(skillId);
+      }
     }
   }
   /**
@@ -317,13 +342,16 @@ var SkillExecutor = class {
     return this.skillMap.get(skillId);
   }
 };
-function createSkillExecutor(configs, modes) {
-  return new SkillExecutor(configs, modes);
+function createSkillExecutor(configs, modes, concurrencyGuard) {
+  return new SkillExecutor(configs, modes, concurrencyGuard);
 }
 
 // src/skills/skill-config.ts
 import { z } from "zod";
 import yaml from "js-yaml";
+var CapacitySchema = z.object({
+  max_concurrent: z.number().positive().int().optional()
+}).optional();
 var PricingSchema = z.object({
   credits_per_call: z.number().nonnegative(),
   credits_per_minute: z.number().nonnegative().optional(),
@@ -345,6 +373,12 @@ var ApiAuthSchema = z.discriminatedUnion("type", [
     password: z.string()
   })
 ]);
+var CapabilityDeclarationSchema = {
+  description: z.string().optional(),
+  capability_types: z.array(z.string()).optional(),
+  requires_capabilities: z.array(z.string()).optional(),
+  visibility: z.enum(["public", "private"]).optional()
+};
 var ApiSkillConfigSchema = z.object({
   id: z.string().min(1),
   type: z.literal("api"),
@@ -357,7 +391,9 @@ var ApiSkillConfigSchema = z.object({
   pricing: PricingSchema,
   timeout_ms: z.number().positive().default(3e4),
   retries: z.number().nonnegative().int().default(0),
-  provider: z.string().optional()
+  provider: z.string().optional(),
+  capacity: CapacitySchema,
+  ...CapabilityDeclarationSchema
 });
 var PipelineStepSchema = z.union([
   z.object({
@@ -375,7 +411,9 @@ var PipelineSkillConfigSchema = z.object({
   name: z.string().min(1),
   steps: z.array(PipelineStepSchema).min(1),
   pricing: PricingSchema,
-  timeout_ms: z.number().positive().optional()
+  timeout_ms: z.number().positive().optional(),
+  capacity: CapacitySchema,
+  ...CapabilityDeclarationSchema
 });
 var OpenClawSkillConfigSchema = z.object({
   id: z.string().min(1),
@@ -384,7 +422,17 @@ var OpenClawSkillConfigSchema = z.object({
   agent_name: z.string().min(1),
   channel: z.enum(["telegram", "webhook", "process"]),
   pricing: PricingSchema,
-  timeout_ms: z.number().positive().optional()
+  timeout_ms: z.number().positive().optional(),
+  capacity: CapacitySchema,
+  ...CapabilityDeclarationSchema
+});
+var ClaudeCodeConfigSchema = z.object({
+  /** Optional system prompt passed via `-p` flag. */
+  system_prompt: z.string().optional(),
+  /** Model to use (e.g. 'claude-opus-4-6', 'claude-sonnet-4-6'). */
+  model: z.string().optional(),
+  /** When true, passes `--dangerously-skip-permissions` to claude CLI. */
+  auto_mode: z.boolean().default(false)
 });
 var CommandSkillConfigSchema = z.object({
   id: z.string().min(1),
@@ -394,8 +442,11 @@ var CommandSkillConfigSchema = z.object({
   output_type: z.enum(["json", "text", "file"]),
   allowed_commands: z.array(z.string()).optional(),
   working_dir: z.string().optional(),
+  claude_code: ClaudeCodeConfigSchema.optional(),
   timeout_ms: z.number().positive().default(3e4),
-  pricing: PricingSchema
+  pricing: PricingSchema,
+  capacity: CapacitySchema,
+  ...CapabilityDeclarationSchema
 });
 var ConductorSkillConfigSchema = z.object({
   id: z.string().min(1),
@@ -403,7 +454,9 @@ var ConductorSkillConfigSchema = z.object({
   name: z.string().min(1),
   conductor_skill: z.enum(["orchestrate", "plan"]),
   pricing: PricingSchema,
-  timeout_ms: z.number().positive().optional()
+  timeout_ms: z.number().positive().optional(),
+  capacity: CapacitySchema,
+  ...CapabilityDeclarationSchema
 });
 var SkillConfigSchema = z.discriminatedUnion("type", [
   ApiSkillConfigSchema,
@@ -923,14 +976,32 @@ var CommandExecutor = class {
     const cmdConfig = config;
     const baseCommand = cmdConfig.command.trim().split(/\s+/)[0] ?? "";
     if (cmdConfig.allowed_commands && cmdConfig.allowed_commands.length > 0) {
-      if (!cmdConfig.allowed_commands.includes(baseCommand)) {
+      const effectiveAllowed = cmdConfig.claude_code ? [.../* @__PURE__ */ new Set([...cmdConfig.allowed_commands, "claude"])] : cmdConfig.allowed_commands;
+      const commandToCheck = cmdConfig.claude_code ? "claude" : baseCommand;
+      if (!effectiveAllowed.includes(commandToCheck)) {
         return {
           success: false,
-          error: `Command not allowed: "${baseCommand}". Allowed: ${cmdConfig.allowed_commands.join(", ")}`
+          error: `Command not allowed: "${commandToCheck}". Allowed: ${effectiveAllowed.join(", ")}`
         };
       }
     }
-    const interpolatedCommand = safeInterpolateCommand2(cmdConfig.command, { params });
+    let interpolatedCommand;
+    if (cmdConfig.claude_code) {
+      const parts = ["claude", "--print"];
+      if (cmdConfig.claude_code.auto_mode) {
+        parts.push("--dangerously-skip-permissions");
+      }
+      if (cmdConfig.claude_code.model) {
+        parts.push("--model", cmdConfig.claude_code.model);
+      }
+      if (cmdConfig.claude_code.system_prompt) {
+        parts.push("-p", shellEscape2(cmdConfig.claude_code.system_prompt));
+      }
+      const interpolatedPrompt = safeInterpolateCommand2(cmdConfig.command, { params });
+      interpolatedCommand = parts.join(" ") + " " + interpolatedPrompt;
+    } else {
+      interpolatedCommand = safeInterpolateCommand2(cmdConfig.command, { params });
+    }
     const timeout = cmdConfig.timeout_ms ?? 3e4;
     const cwd = cmdConfig.working_dir ?? process.cwd();
     let stdout;
@@ -1071,8 +1142,8 @@ var AgentRuntime = class {
     }
     const modes = /* @__PURE__ */ new Map();
     if (this.conductorEnabled) {
-      const { ConductorMode } = await import("../../conductor-mode-ZMTFZGJP.js");
-      const { registerConductorCard, CONDUCTOR_OWNER } = await import("../../card-RSGDCHCV.js");
+      const { ConductorMode } = await import("../../conductor-mode-2VVFMKVE.js");
+      const { registerConductorCard, CONDUCTOR_OWNER } = await import("../../card-REW7BSWW.js");
       const { loadPeers } = await import("../../peers-CJ7T4RJO.js");
       registerConductorCard(this.registryDb);
       const resolveAgentUrl = (owner) => {
@@ -1178,6 +1249,7 @@ var AgentRuntime = class {
 
 // src/gateway/server.ts
 import Fastify from "fastify";
+import { randomUUID } from "crypto";
 var VERSION = "0.0.1";
 function createGatewayServer(opts) {
   const {
@@ -1191,6 +1263,8 @@ function createGatewayServer(opts) {
   } = opts;
   const fastify = Fastify({ logger: !silent });
   const tokenSet = new Set(tokens);
+  const inFlight = /* @__PURE__ */ new Map();
+  const OVERLOAD_RETRY_MS = 5e3;
   fastify.addHook("onRequest", async (request) => {
     if (request.method === "GET" && request.url === "/health") return;
     const auth = request.headers.authorization;
@@ -1256,18 +1330,63 @@ function createGatewayServer(opts) {
     }
     const requester = params.requester ?? "unknown";
     const receipt = params.escrow_receipt;
-    const result = await executeCapabilityRequest({
-      registryDb,
-      creditDb,
-      cardId,
-      skillId,
-      params,
-      requester,
-      escrowReceipt: receipt,
-      skillExecutor,
-      handlerUrl,
-      timeoutMs
-    });
+    if (skillExecutor && skillId && typeof skillExecutor.getSkillConfig === "function") {
+      const skillConfig = skillExecutor.getSkillConfig(skillId);
+      const maxConcurrent = skillConfig?.capacity?.max_concurrent;
+      if (maxConcurrent !== void 0) {
+        const current = inFlight.get(skillId) ?? 0;
+        if (current >= maxConcurrent) {
+          try {
+            insertRequestLog(registryDb, {
+              id: randomUUID(),
+              card_id: cardId,
+              card_name: "<overload>",
+              requester,
+              status: "failure",
+              latency_ms: 0,
+              credits_charged: 0,
+              created_at: (/* @__PURE__ */ new Date()).toISOString(),
+              skill_id: skillId,
+              failure_reason: "overload"
+            });
+          } catch {
+          }
+          return reply.status(200).send({
+            jsonrpc: "2.0",
+            id,
+            error: {
+              code: -32e3,
+              message: "overload",
+              data: { error: "overload", retry_after_ms: OVERLOAD_RETRY_MS }
+            }
+          });
+        }
+      }
+    }
+    const trackKey = skillId ?? cardId;
+    inFlight.set(trackKey, (inFlight.get(trackKey) ?? 0) + 1);
+    let result;
+    try {
+      result = await executeCapabilityRequest({
+        registryDb,
+        creditDb,
+        cardId,
+        skillId,
+        params,
+        requester,
+        escrowReceipt: receipt,
+        skillExecutor,
+        handlerUrl,
+        timeoutMs
+      });
+    } finally {
+      const next = (inFlight.get(trackKey) ?? 1) - 1;
+      if (next <= 0) {
+        inFlight.delete(trackKey);
+      } else {
+        inFlight.set(trackKey, next);
+      }
+    }
     if (result.success) {
       return reply.send({ jsonrpc: "2.0", id, result: result.result });
     } else {
@@ -1682,7 +1801,7 @@ function createLedger(opts) {
 }
 
 // src/cli/onboarding.ts
-import { randomUUID } from "crypto";
+import { randomUUID as randomUUID2 } from "crypto";
 import { createConnection } from "net";
 var KNOWN_API_KEYS = [
   "OPENAI_API_KEY",
@@ -1807,7 +1926,7 @@ function buildDraftCard(apiKey, owner) {
   const now = (/* @__PURE__ */ new Date()).toISOString();
   return {
     spec_version: "1.0",
-    id: randomUUID(),
+    id: randomUUID2(),
     owner,
     name: template.name,
     description: template.description,
@@ -1827,7 +1946,7 @@ function buildDraftCard(apiKey, owner) {
 }
 
 // src/relay/websocket-relay.ts
-import { randomUUID as randomUUID4 } from "crypto";
+import { randomUUID as randomUUID5 } from "crypto";
 
 // src/relay/relay-credit.ts
 function lookupCardPrice(registryDb, cardId, skillId) {
@@ -1885,10 +2004,10 @@ function releaseForRelay(creditDb, escrowId) {
 }
 
 // src/hub-agent/relay-bridge.ts
-import { randomUUID as randomUUID3 } from "crypto";
+import { randomUUID as randomUUID4 } from "crypto";
 
 // src/hub-agent/job-queue.ts
-import { randomUUID as randomUUID2 } from "crypto";
+import { randomUUID as randomUUID3 } from "crypto";
 function initJobQueue(db) {
   db.exec(`
     CREATE TABLE IF NOT EXISTS hub_agent_jobs (
@@ -1907,7 +2026,7 @@ function initJobQueue(db) {
   `);
 }
 function insertJob(db, input) {
-  const id = randomUUID2();
+  const id = randomUUID3();
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const paramsJson = JSON.stringify(input.params);
   db.prepare(`
@@ -2205,7 +2324,7 @@ function createRelayBridge(opts) {
       updateJobStatus(registryDb, job.id, "dispatched");
       const agent = getHubAgent(registryDb, job.hub_agent_id);
       const cardId = agent ? agent.agent_id.padEnd(32, "0").replace(/^(.{8})(.{4})(.{4})(.{4})(.{12}).*$/, "$1-$2-$3-$4-$5") : job.hub_agent_id;
-      const requestId = randomUUID3();
+      const requestId = randomUUID4();
       let params = {};
       try {
         params = JSON.parse(job.params);
@@ -2275,6 +2394,7 @@ function registerWebSocketRelay(server, db, creditDb) {
   const connections = /* @__PURE__ */ new Map();
   const pendingRequests = /* @__PURE__ */ new Map();
   const rateLimits = /* @__PURE__ */ new Map();
+  const agentCapacities = /* @__PURE__ */ new Map();
   let onAgentOnlineCallback;
   function checkRateLimit(owner) {
     const now = Date.now();
@@ -2351,7 +2471,7 @@ function registerWebSocketRelay(server, db, creditDb) {
   function logAgentJoined(owner, cardName, cardId) {
     try {
       insertRequestLog(db, {
-        id: randomUUID4(),
+        id: randomUUID5(),
         card_id: cardId,
         card_name: cardName,
         requester: owner,
@@ -2578,6 +2698,7 @@ function registerWebSocketRelay(server, db, creditDb) {
     if (!owner) return;
     connections.delete(owner);
     rateLimits.delete(owner);
+    agentCapacities.delete(owner);
     markOwnerOffline(owner);
     for (const [reqId, pending] of pendingRequests) {
       if (pending.targetOwner === owner) {
@@ -2611,6 +2732,9 @@ function registerWebSocketRelay(server, db, creditDb) {
       }
     }
   }
+  function handleHeartbeat(msg) {
+    agentCapacities.set(msg.owner, msg.capacity);
+  }
   void server.register(async (app) => {
     app.get("/ws", { websocket: true }, (rawSocket, _request) => {
       const socket = rawSocket;
@@ -2656,15 +2780,23 @@ function registerWebSocketRelay(server, db, creditDb) {
             case "relay_progress":
               handleRelayProgress(msg);
               break;
+            case "heartbeat":
+              handleHeartbeat(msg);
+              break;
             default:
               break;
           }
         })();
       });
+      const pingInterval = setInterval(() => {
+        if (socket.readyState === 1) socket.ping();
+      }, 3e4);
       socket.on("close", () => {
+        clearInterval(pingInterval);
         handleDisconnect(registeredOwner);
       });
       socket.on("error", () => {
+        clearInterval(pingInterval);
         handleDisconnect(registeredOwner);
       });
     });
@@ -2685,6 +2817,7 @@ function registerWebSocketRelay(server, db, creditDb) {
       }
       pendingRequests.clear();
       rateLimits.clear();
+      agentCapacities.clear();
     },
     setOnAgentOnline: (cb) => {
       onAgentOnlineCallback = cb;
@@ -2693,13 +2826,15 @@ function registerWebSocketRelay(server, db, creditDb) {
     getPendingRequests: () => pendingRequests,
     sendMessage: (ws, msg) => {
       sendMessage(ws, msg);
-    }
+    },
+    getAgentCapacity: (owner) => agentCapacities.get(owner),
+    getAllCapacities: () => new Map(agentCapacities)
   };
 }
 
 // src/identity/guarantor.ts
 import { z as z3 } from "zod";
-import { randomUUID as randomUUID5 } from "crypto";
+import { randomUUID as randomUUID6 } from "crypto";
 var MAX_AGENTS_PER_GUARANTOR = 10;
 var GUARANTOR_CREDIT_POOL = 50;
 var GuarantorRecordSchema = z3.object({
@@ -2738,7 +2873,7 @@ function registerGuarantor(db, githubLogin) {
     );
   }
   const record = {
-    id: randomUUID5(),
+    id: randomUUID6(),
     github_login: githubLogin,
     agent_count: 0,
     credit_pool: GUARANTOR_CREDIT_POOL,
@@ -2812,7 +2947,7 @@ function getAgentGuarantor(db, agentId) {
 function initiateGithubAuth() {
   return {
     auth_url: "https://github.com/login/oauth/authorize?client_id=PLACEHOLDER&scope=read:user",
-    state: randomUUID5()
+    state: randomUUID6()
   };
 }
 
@@ -3985,7 +4120,7 @@ function createRegistryServer(opts) {
       openapi: "3.0.3",
       info: {
         title: "AgentBnB Registry API",
-        description: "P2P Agent Capability Sharing Protocol \u2014 discover, publish, and exchange agent capabilities",
+        description: "Where AI agents hire AI agents \u2014 discover, publish, and coordinate agent capabilities",
         version: "3.1.6"
       },
       servers: [{ url: "/", description: "Registry server" }],
@@ -4017,7 +4152,7 @@ function createRegistryServer(opts) {
   });
   void server.register(cors, {
     origin: true,
-    methods: ["GET", "POST", "PATCH", "OPTIONS"],
+    methods: ["GET", "POST", "PATCH", "DELETE", "OPTIONS"],
     allowedHeaders: ["Content-Type", "Authorization", "X-Agent-PublicKey", "X-Agent-Signature", "X-Agent-Timestamp"]
   });
   void server.register(fastifyWebsocket);
@@ -4096,6 +4231,7 @@ function createRegistryServer(opts) {
             min_success_rate: { type: "number", description: "Minimum success rate (0-1)" },
             max_latency_ms: { type: "number", description: "Maximum average latency in ms" },
             min_reputation: { type: "number", description: "Minimum reputation score (0-1) based on peer feedback" },
+            capability_type: { type: "string", description: "Filter cards whose skills declare this capability_type (e.g. tts, code_gen)" },
             sort: { type: "string", enum: ["popular", "rated", "success_rate", "cheapest", "newest", "latency", "reputation_desc", "reputation_asc"], description: "Sort order" },
             limit: { type: "integer", default: 20, description: "Max items per page (max 100)" },
             offset: { type: "integer", default: 0, description: "Pagination offset" }
@@ -4122,6 +4258,7 @@ function createRegistryServer(opts) {
       const onlineRaw = query.online;
       const online = onlineRaw === "true" ? true : onlineRaw === "false" ? false : void 0;
       const tag = query.tag?.trim();
+      const capabilityType = query.capability_type?.trim() || void 0;
       const minSuccessRate = query.min_success_rate !== void 0 ? parseFloat(query.min_success_rate) : void 0;
       const maxLatencyMs = query.max_latency_ms !== void 0 ? parseFloat(query.max_latency_ms) : void 0;
       const minReputation = query.min_reputation !== void 0 ? parseFloat(query.min_reputation) : void 0;
@@ -4137,6 +4274,12 @@ function createRegistryServer(opts) {
         cards = filterCards(db, { level, online, min_reputation: minReputation });
       }
       cards = cards.filter((c) => !c.owner.includes(":req:"));
+      if (capabilityType !== void 0) {
+        const capTypeIds = new Set(
+          getCardsBySkillCapability(db, capabilityType).map((c) => c.id)
+        );
+        cards = cards.filter((c) => capTypeIds.has(c.id));
+      }
       if (tag !== void 0 && tag.length > 0) {
         cards = cards.filter((c) => {
           const rootTags = c.metadata?.tags ?? [];
@@ -4172,7 +4315,9 @@ function createRegistryServer(opts) {
         const trustStmt = db.prepare(`
         SELECT cc.owner,
           COUNT(rl.id) as total_exec,
-          SUM(CASE WHEN rl.status IN ('success','failure','timeout','refunded') THEN 1 ELSE 0 END) as terminal_exec,
+          SUM(CASE WHEN rl.status IN ('success','failure','timeout','refunded')
+              AND (rl.failure_reason IS NULL OR rl.failure_reason IN ('bad_execution','auth_error'))
+              THEN 1 ELSE 0 END) as terminal_exec,
           SUM(CASE WHEN rl.status = 'success' THEN 1 ELSE 0 END) as success_exec,
           AVG(CASE WHEN rl.status = 'success' THEN rl.latency_ms END) as avg_latency
         FROM capability_cards cc
@@ -4406,21 +4551,32 @@ function createRegistryServer(opts) {
     api.delete("/cards/:id", {
       schema: {
         tags: ["cards"],
-        summary: "Delete a capability card",
+        summary: "Delete a capability card (requires Bearer auth)",
+        security: [{ bearerAuth: [] }],
         params: { type: "object", properties: { id: { type: "string" } }, required: ["id"] },
         response: {
-          200: { type: "object", properties: { ok: { type: "boolean" }, id: { type: "string" } } },
+          204: { type: "null", description: "Card deleted successfully" },
+          401: { type: "object", properties: { error: { type: "string" } } },
+          403: { type: "object", properties: { error: { type: "string" } } },
           404: { type: "object", properties: { error: { type: "string" } } }
         }
       }
     }, async (request, reply) => {
+      const auth = request.headers.authorization;
+      const token = auth?.startsWith("Bearer ") ? auth.slice(7).trim() : null;
+      if (!token || !opts.ownerApiKey || token !== opts.ownerApiKey) {
+        return reply.code(401).send({ error: "Unauthorized" });
+      }
       const { id } = request.params;
       const card = getCard(db, id);
       if (!card) {
         return reply.code(404).send({ error: "Not found" });
       }
+      if (opts.ownerName && card.owner !== opts.ownerName) {
+        return reply.code(403).send({ error: "Forbidden" });
+      }
       db.prepare("DELETE FROM capability_cards WHERE id = ?").run(id);
-      return reply.send({ ok: true, id });
+      return reply.code(204).send();
     });
     api.get("/api/agents", {
       schema: {
@@ -4505,7 +4661,8 @@ function createRegistryServer(opts) {
       const lastActive = lastActiveRow?.last_req ?? memberRow?.latest ?? joinedAt;
       const metricsStmt = db.prepare(`
       SELECT
-        COUNT(*) as total,
+        SUM(CASE WHEN rl.failure_reason IS NULL OR rl.failure_reason IN ('bad_execution','auth_error')
+            THEN 1 ELSE 0 END) as total,
         SUM(CASE WHEN rl.status = 'success' THEN 1 ELSE 0 END) as successes,
         AVG(CASE WHEN rl.status = 'success' THEN rl.latency_ms END) as avg_latency,
         COUNT(DISTINCT rl.requester) as unique_requesters,
@@ -5098,6 +5255,110 @@ function createRegistryServer(opts) {
         });
       });
     }
+    api.get("/api/providers/:owner/reliability", {
+      schema: {
+        tags: ["agents"],
+        summary: "Get provider reliability metrics",
+        params: { type: "object", properties: { owner: { type: "string" } }, required: ["owner"] },
+        response: {
+          200: {
+            type: "object",
+            properties: {
+              current_streak: { type: "integer" },
+              longest_streak: { type: "integer" },
+              total_hires: { type: "integer" },
+              repeat_hires: { type: "integer" },
+              repeat_hire_rate: { type: "number" },
+              avg_feedback_score: { type: "number" },
+              availability_rate: { type: "number" }
+            }
+          },
+          404: { type: "object", properties: { error: { type: "string" } } }
+        }
+      }
+    }, async (request, reply) => {
+      const { owner } = request.params;
+      if (!opts.creditDb) {
+        return reply.code(404).send({ error: "Credit system not enabled" });
+      }
+      const { getReliabilityMetrics } = await import("../../reliability-metrics-QG7WC5QK.js");
+      const metrics = getReliabilityMetrics(opts.creditDb, owner);
+      if (!metrics) {
+        return reply.code(404).send({ error: "No reliability data for this provider" });
+      }
+      return reply.send(metrics);
+    });
+    api.get("/api/fleet/:owner", {
+      schema: {
+        tags: ["agents"],
+        summary: "Agent fleet overview for an owner",
+        params: { type: "object", properties: { owner: { type: "string" } }, required: ["owner"] },
+        response: {
+          200: { type: "object", properties: { agents: { type: "array" } } }
+        }
+      }
+    }, async (request, reply) => {
+      const { owner } = request.params;
+      const rows = db.prepare(
+        "SELECT id, data FROM capability_cards WHERE owner = ?"
+      ).all(owner);
+      const agents = [];
+      for (const row of rows) {
+        try {
+          const card = JSON.parse(row.data);
+          let earnings = 0;
+          let spend = 0;
+          if (opts.creditDb) {
+            const earningRow = opts.creditDb.prepare(
+              "SELECT COALESCE(SUM(amount), 0) as total FROM credit_transactions WHERE owner = ? AND reason = 'settlement' AND amount > 0"
+            ).get(owner);
+            earnings = earningRow.total;
+            const spendRow = opts.creditDb.prepare(
+              "SELECT COALESCE(SUM(ABS(amount)), 0) as total FROM credit_transactions WHERE owner = ? AND reason = 'escrow_hold'"
+            ).get(owner);
+            spend = spendRow.total;
+          }
+          const successCount = db.prepare(
+            "SELECT COUNT(*) as cnt FROM request_log WHERE card_id = ? AND status = 'success' AND (action_type IS NULL OR action_type = 'auto_share')"
+          ).get(row.id).cnt;
+          const failureCount = db.prepare(
+            "SELECT COUNT(*) as cnt FROM request_log WHERE card_id = ? AND status IN ('failure', 'timeout', 'refunded') AND (action_type IS NULL OR action_type = 'auto_share')"
+          ).get(row.id).cnt;
+          const totalExec = successCount + failureCount;
+          const successRate = totalExec > 0 ? successCount / totalExec : 0;
+          let failureBreakdown = {};
+          try {
+            const failureRows = db.prepare(
+              "SELECT failure_reason, COUNT(*) as cnt FROM request_log WHERE card_id = ? AND status IN ('failure', 'timeout', 'refunded') AND failure_reason IS NOT NULL GROUP BY failure_reason"
+            ).all(row.id);
+            for (const fr of failureRows) {
+              failureBreakdown[fr.failure_reason] = fr.cnt;
+            }
+          } catch {
+          }
+          let reliability = null;
+          if (opts.creditDb) {
+            const { getReliabilityMetrics } = await import("../../reliability-metrics-QG7WC5QK.js");
+            reliability = getReliabilityMetrics(opts.creditDb, owner);
+          }
+          agents.push({
+            id: row.id,
+            name: card.name ?? card.agent_name ?? owner,
+            online: card.availability?.online ?? false,
+            current_load: 0,
+            // Will be populated from relay heartbeat data in future
+            success_rate: successRate,
+            total_executions: totalExec,
+            earnings,
+            spend,
+            failure_breakdown: failureBreakdown,
+            reliability
+          });
+        } catch {
+        }
+      }
+      return reply.send({ agents });
+    });
   });
   return { server, relayState };
 }
@@ -5238,7 +5499,7 @@ import { createRequire } from "module";
 import { existsSync as existsSync5, readFileSync as readFileSync4 } from "fs";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { dirname as dirname3, join as join4, resolve } from "path";
-import { randomUUID as randomUUID6 } from "crypto";
+import { randomUUID as randomUUID7 } from "crypto";
 var ServiceCoordinator = class {
   config;
   guard;
@@ -5379,7 +5640,7 @@ var ServiceCoordinator = class {
       console.log("Conductor mode enabled \u2014 orchestrate/plan skills available via gateway");
     }
     if (opts.conductorEnabled && this.config.conductor?.public) {
-      const { buildConductorCard } = await import("../../card-RSGDCHCV.js");
+      const { buildConductorCard } = await import("../../card-REW7BSWW.js");
       const conductorCard = buildConductorCard(this.config.owner);
       const now = (/* @__PURE__ */ new Date()).toISOString();
       const existing = this.runtime.registryDb.prepare("SELECT id FROM capability_cards WHERE id = ?").get(conductorCard.id);
@@ -5436,11 +5697,11 @@ var ServiceCoordinator = class {
       }
     }
     if (opts.registryUrl && opts.relay) {
-      const { RelayClient: RelayClient2 } = await import("../../websocket-client-WRN3HO73.js");
-      const { executeCapabilityRequest: executeCapabilityRequest2 } = await import("../../execute-4D4ITQCL.js");
+      const { RelayClient: RelayClient2 } = await import("../../websocket-client-PFGVTXNE.js");
+      const { executeCapabilityRequest: executeCapabilityRequest2 } = await import("../../execute-I4PKSNJM.js");
       const cards = listCards(this.runtime.registryDb, this.config.owner);
       const card = cards[0] ?? {
-        id: randomUUID6(),
+        id: randomUUID7(),
         owner: this.config.owner,
         name: this.config.owner,
         description: "Agent registered via CLI",
@@ -5453,7 +5714,7 @@ var ServiceCoordinator = class {
       };
       const additionalCards = [];
       if (this.config.conductor?.public) {
-        const { buildConductorCard } = await import("../../card-RSGDCHCV.js");
+        const { buildConductorCard } = await import("../../card-REW7BSWW.js");
         additionalCards.push(
           buildConductorCard(this.config.owner)
         );
@@ -5703,7 +5964,6 @@ var ServiceCoordinator = class {
     })();
   };
 };
-var require2 = createRequire(import.meta.url);
 function loadPersistedRuntime(configDir) {
   const runtimePath = join4(configDir, "runtime.json");
   if (!existsSync5(runtimePath)) return null;
@@ -5731,6 +5991,12 @@ function resolveNodeExecutable(runtime) {
   return process.execPath;
 }
 function resolveCliLaunchArgs(serveArgs) {
+  const require2 = createRequire(import.meta.url);
+  try {
+    const distCli2 = require2.resolve("agentbnb/dist/cli/index.js");
+    return [distCli2, "serve", ...serveArgs];
+  } catch {
+  }
   const projectRoot = resolve(dirname3(fileURLToPath2(import.meta.url)), "..", "..");
   const distCli = join4(projectRoot, "dist", "cli", "index.js");
   if (existsSync5(distCli)) {
@@ -5761,11 +6027,11 @@ function sleep2(ms) {
 }
 
 // src/app/agentbnb-service.ts
-import { randomUUID as randomUUID8 } from "crypto";
+import { randomUUID as randomUUID9 } from "crypto";
 
 // src/credit/escrow-receipt.ts
 import { z as z8 } from "zod";
-import { randomUUID as randomUUID7 } from "crypto";
+import { randomUUID as randomUUID8 } from "crypto";
 var EscrowReceiptSchema = z8.object({
   requester_owner: z8.string().min(1),
   requester_public_key: z8.string().min(1),
@@ -5785,7 +6051,7 @@ function createSignedEscrowReceipt(db, privateKey, publicKey, opts) {
     card_id: opts.cardId,
     ...opts.skillId ? { skill_id: opts.skillId } : {},
     timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-    nonce: randomUUID7()
+    nonce: randomUUID8()
   };
   const signature = signEscrowReceipt(receiptData, privateKey);
   const receipt = {
@@ -6027,13 +6293,13 @@ var AgentBnBService = class {
     if (!this.config.registry) {
       throw new AgentBnBError("Registry is required for relay fallback.", "RELAY_NOT_AVAILABLE");
     }
-    const requesterId = `${this.config.owner}:req:${randomUUID8()}`;
+    const requesterId = `${this.config.owner}:req:${randomUUID9()}`;
     const tempRelay = new RelayClient({
       registryUrl: this.config.registry,
       owner: requesterId,
       token: this.config.token,
       card: {
-        id: randomUUID8(),
+        id: randomUUID9(),
         owner: requesterId,
         name: requesterId,
         description: "Requester",
@@ -6142,15 +6408,94 @@ function isNetworkError(err) {
 }
 
 // skills/agentbnb/bootstrap.ts
+function findSoulMd(startDir) {
+  let dir = startDir;
+  while (true) {
+    const candidate = join5(dir, "SOUL.md");
+    if (existsSync6(candidate)) return candidate;
+    const parent = dirname4(dir);
+    if (parent === dir) return null;
+    dir = parent;
+  }
+}
+function resolveWorkspaceDir() {
+  const soulPath = findSoulMd(process.cwd());
+  if (soulPath) {
+    const workspaceName = basename(dirname4(soulPath));
+    return join5(homedir2(), ".agentbnb", workspaceName);
+  }
+  return join5(homedir2(), ".agentbnb");
+}
+function registerDecomposerCard(configDir, owner) {
+  try {
+    const db = openDatabase(join5(configDir, "registry.db"));
+    const existing = db.prepare(
+      "SELECT id FROM capability_cards WHERE owner = ? AND json_extract(data, '$.capability_type') = ?"
+    ).get(owner, "task_decomposition");
+    if (existing) return;
+    const cardId = randomUUID10();
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    const card = {
+      spec_version: "2.0",
+      id: cardId,
+      owner,
+      agent_name: `${owner}-decomposer`,
+      capability_type: "task_decomposition",
+      skills: [
+        {
+          id: "task-decomposition",
+          name: "Task Decomposition",
+          description: "Decomposes natural-language tasks into executable sub-task DAGs using the AgentBnB Rule Engine.",
+          level: 1,
+          category: "task_decomposition",
+          inputs: [
+            {
+              name: "task",
+              type: "text",
+              description: "Natural language task description",
+              required: true
+            }
+          ],
+          outputs: [
+            {
+              name: "subtasks",
+              type: "json",
+              description: "Array of SubTask objects with id, role, description, dependencies",
+              required: true
+            }
+          ],
+          pricing: { credits_per_call: 1 }
+        }
+      ],
+      availability: { online: true },
+      created_at: now,
+      updated_at: now
+    };
+    db.prepare(
+      "INSERT INTO capability_cards (id, owner, data, created_at, updated_at) VALUES (?, ?, ?, ?, ?)"
+    ).run(cardId, owner, JSON.stringify(card), now, now);
+    process.stderr.write(
+      `[agentbnb] registered task_decomposition card: ${cardId} (owner=${owner})
+`
+    );
+  } catch (err) {
+    process.stderr.write(
+      `[agentbnb] WARNING: failed to register task_decomposition card: ${String(err)}
+`
+    );
+  }
+}
 async function activate(config = {}) {
-  const configDir = getConfigDir();
   if (!process.env["AGENTBNB_DIR"]) {
-    process.env["AGENTBNB_DIR"] = configDir;
+    const workspaceDir = resolveWorkspaceDir();
+    process.env["AGENTBNB_DIR"] = workspaceDir;
     process.stderr.write(
-      `[agentbnb] AGENTBNB_DIR not set \u2014 auto-configured to ${configDir} for child process isolation.
+      `[agentbnb] AGENTBNB_DIR auto-configured to ${workspaceDir} for workspace isolation.
 `
     );
-  } else if (process.env["AGENTBNB_DIR"] !== configDir) {
+  }
+  const configDir = getConfigDir();
+  if (process.env["AGENTBNB_DIR"] !== configDir) {
     process.stderr.write(
       `[agentbnb] WARNING: AGENTBNB_DIR (${process.env["AGENTBNB_DIR"]}) differs from resolved configDir (${configDir}).
 `
@@ -6185,6 +6530,7 @@ async function activate(config = {}) {
     relay: config.relay
   };
   const startDisposition = await service.ensureRunning(opts);
+  registerDecomposerCard(configDir, agentConfig.owner);
   const status = await service.getNodeStatus();
   const onSigterm = () => {
     if (startDisposition === "started") {