@agentstep/agent-sdk 0.4.14 → 0.4.16

package/dist/{chunk-374KGHBM.js → chunk-HWWCVD2R.js}

@@ -4,16 +4,16 @@ import {
 import {
   buildGeminiAuthEnv,
   validateGeminiRuntime
-} from "./chunk-TJA3RHWR.js";
+} from "./chunk-RZXRMPF4.js";
 import {
   prepareGeminiOnSandbox
 } from "./chunk-XG4UIGDH.js";
-import {
-  createGeminiTranslator
-} from "./chunk-S3JRZFF5.js";
 import {
   GEMINI_WRAPPER_PATH
 } from "./chunk-3W6KEDQE.js";
+import {
+  createGeminiTranslator
+} from "./chunk-S3JRZFF5.js";
 import {
   wrapPromptWithSystem
 } from "./chunk-DAT55TX2.js";

package/dist/{chunk-MEEY7BYC.js → chunk-IHMQQ43E.js}

@@ -8,7 +8,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-PFLR7INE.js";
+} from "./chunk-LJL3DM2L.js";
 import {
   badRequest
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-42O6EBUN.js → chunk-JNQLE5D7.js}

@@ -1,10 +1,10 @@
 import {
   getModels
-} from "./chunk-M5QX5E5Z.js";
+} from "./chunk-R45W644X.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-PFLR7INE.js";
+} from "./chunk-LJL3DM2L.js";
 
 // src/handlers/models.ts
 function handleListModels(request) {

package/dist/{chunk-UF25F3MH.js → chunk-JOAEFGXZ.js}

@@ -6,7 +6,16 @@ import {
 } from "./chunk-RMZRSYIJ.js";
 import {
   appendEvent
-} from "./chunk-EOFJ2MWJ.js";
+} from "./chunk-BMPB7XJH.js";
+import {
+  getSession,
+  getSessionRow,
+  setSessionSandbox
+} from "./chunk-I5ZA45YL.js";
+import {
+  deleteSprite,
+  listSprites
+} from "./chunk-XPKY3Z54.js";
 import {
   allSessionSandboxes,
   countInEnv,
@@ -15,12 +24,7 @@ import {
 } from "./chunk-EFOIR7R3.js";
 import {
   resolveContainerProvider
-} from "./chunk-N2RHTKW7.js";
-import {
-  getSession,
-  getSessionRow,
-  setSessionSandbox
-} from "./chunk-I5ZA45YL.js";
+} from "./chunk-JSLEB2ED.js";
 import {
   getEnvironment,
   getEnvironmentRow
@@ -30,14 +34,10 @@ import {
 } from "./chunk-JEI7I3EH.js";
 import {
   resolveBackend
-} from "./chunk-SHKBQQ7W.js";
-import {
-  deleteSprite,
-  listSprites
-} from "./chunk-IEG5LIX7.js";
+} from "./chunk-QFUJDBET.js";
 import {
   getConfig
-} from "./chunk-YEUALILD.js";
+} from "./chunk-QH57EOKP.js";
 import {
   init_clock,
   nowMs

package/dist/{chunk-F7DOI3B5.js → chunk-K62YRMVY.js}

@@ -12,16 +12,16 @@ import {
 import {
   interruptSession
 } from "./chunk-DC2UMEQH.js";
-import {
-  forwardToAnthropic
-} from "./chunk-YIYEPKVQ.js";
 import {
   kickoffEnvironmentSetup
-} from "./chunk-MOLWE2ZY.js";
+} from "./chunk-SDLNBA53.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-PFLR7INE.js";
+} from "./chunk-LJL3DM2L.js";
+import {
+  forwardToAnthropic
+} from "./chunk-QLWA4MJ5.js";
 import {
   errors_exports,
   init_errors
@@ -38,11 +38,11 @@ import {
 } from "./chunk-LAWTTG2E.js";
 import {
   releaseSession
-} from "./chunk-UF25F3MH.js";
+} from "./chunk-JOAEFGXZ.js";
 import {
   appendEvent,
   dropEmitter
-} from "./chunk-EOFJ2MWJ.js";
+} from "./chunk-BMPB7XJH.js";
 import {
   archiveSession,
   createSession,

package/dist/{chunk-NCUIEBQY.js → chunk-L4T7KCQ2.js}

@@ -5,7 +5,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-PFLR7INE.js";
+} from "./chunk-LJL3DM2L.js";
 import {
   getSession,
   listSessions

package/dist/{chunk-EDRLRJNT.js → chunk-LJF4GWPJ.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-YEUALILD.js";
+} from "./chunk-QH57EOKP.js";
 import {
   ApiError
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-PFLR7INE.js → chunk-LJL3DM2L.js}

@@ -3,14 +3,14 @@ import {
   recordApiRequest
 } from "./chunk-D2XITRN6.js";
 import {
-  authenticate
-} from "./chunk-GCMYVWZ6.js";
+  authenticateAndIntercept
+} from "./chunk-PWWRWR75.js";
 import {
   checkAndBump
 } from "./chunk-HVUWXUUI.js";
 import {
   ensureInitialized
-} from "./chunk-K2ITIAVJ.js";
+} from "./chunk-C4IHTLG2.js";
 import {
   captureException
 } from "./chunk-3MQ2FWXS.js";
@@ -26,7 +26,12 @@ async function routeWrap(request, handler) {
   let status = 500;
   try {
     await ensureInitialized();
-    const auth = await authenticate(request);
+    const result = await authenticateAndIntercept(request);
+    if (result.kind === "response") {
+      status = result.response.status;
+      return result.response;
+    }
+    const auth = result.auth;
     const retryAfter = await checkAndBump(auth.keyId, auth.rateLimitRpm);
     if (retryAfter != null) {
       const err = tooManyRequests(

package/dist/{chunk-24NL6GPL.js → chunk-LRPU2HS5.js}

@@ -4,7 +4,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-PFLR7INE.js";
+} from "./chunk-LJL3DM2L.js";
 import {
   getProxiedTenantId
 } from "./chunk-NIOWKTIF.js";

package/dist/{chunk-7OAMTB47.js → chunk-M4CTE7EH.js}

@@ -1,6 +1,6 @@
 import {
   listCredentialsWithTokens
-} from "./chunk-J4TYHQQG.js";
+} from "./chunk-ZQGJKPPY.js";
 import {
   listEntries
 } from "./chunk-VIGJQU6V.js";

package/dist/{chunk-V7WEALLX.js → chunk-MA7IO6RU.js}

@@ -15,7 +15,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-PFLR7INE.js";
+} from "./chunk-LJL3DM2L.js";
 import {
   createApiKey,
   getApiKeyById,

package/dist/{chunk-6NZPNYHA.js → chunk-MD4BZGMS.js}

@@ -1,11 +1,11 @@
 import {
   jsonOk,
   routeWrap
-} from "./chunk-PFLR7INE.js";
+} from "./chunk-LJL3DM2L.js";
 import {
   readSetting,
   writeSetting
-} from "./chunk-YEUALILD.js";
+} from "./chunk-QH57EOKP.js";
 import {
   badRequest
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-G37JVAOI.js → chunk-NK2RCTFI.js}

@@ -1,3 +1,7 @@
+import {
+  buildCodexAuthEnv,
+  validateCodexRuntime
+} from "./chunk-5XF65N7J.js";
 import {
   prepareCodexOnSandbox
 } from "./chunk-7LQN7NVU.js";
@@ -13,10 +17,6 @@ import {
 import {
   buildCodexArgs
 } from "./chunk-NQX7WBA4.js";
-import {
-  buildCodexAuthEnv,
-  validateCodexRuntime
-} from "./chunk-UVUSSZ74.js";
 import {
   ApiError
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-SNZ4PDVT.js → chunk-OFLYKESG.js}

@@ -3,14 +3,14 @@ import {
   resolveCreateTenant,
   tenantFilter
 } from "./chunk-23UKWXJH.js";
-import {
-  forwardToAnthropic,
-  validateAnthropicProxy
-} from "./chunk-YIYEPKVQ.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-PFLR7INE.js";
+} from "./chunk-LJL3DM2L.js";
+import {
+  forwardToAnthropic,
+  validateAnthropicProxy
+} from "./chunk-QLWA4MJ5.js";
 import {
   getProxiedTenantId,
   isProxied,
@@ -26,7 +26,7 @@ import {
 } from "./chunk-JEI7I3EH.js";
 import {
   resolveBackend
-} from "./chunk-SHKBQQ7W.js";
+} from "./chunk-QFUJDBET.js";
 import {
   getDb,
   init_client
@@ -190,7 +190,7 @@ function handleCreateAgent(request) {
       name: parsed.data.name,
       model: parsed.data.model,
       system: parsed.data.system ?? null,
-      tools: parsed.data.tools ?? [],
+      tools: parsed.data.tools ?? [{ type: "agent_toolset_20260401" }],
       mcp_servers: parsed.data.mcp_servers ?? {},
       backend: backendName,
       webhook_url: parsed.data.webhook_url ?? null,

package/dist/{chunk-HIDFQDFP.js → chunk-PNYCULIF.js}

@@ -6,11 +6,11 @@ import {
   reconcileDockerOrphanSandboxes,
   reconcileOrphanSandboxes,
   releaseSession
-} from "./chunk-UF25F3MH.js";
+} from "./chunk-JOAEFGXZ.js";
 import {
   appendEvent,
   dropEmitter
-} from "./chunk-EOFJ2MWJ.js";
+} from "./chunk-BMPB7XJH.js";
 import {
   archiveSession,
   getSessionRow,
@@ -19,7 +19,7 @@ import {
 } from "./chunk-I5ZA45YL.js";
 import {
   getConfig
-} from "./chunk-YEUALILD.js";
+} from "./chunk-QH57EOKP.js";
 import {
   init_clock,
   nowMs

package/dist/{chunk-GCMYVWZ6.js → chunk-PWWRWR75.js}

@@ -1,7 +1,17 @@
+import {
+  forwardToAnthropic
+} from "./chunk-QLWA4MJ5.js";
+import {
+  isAnthropicApiKey,
+  isPassthroughAllowedPath
+} from "./chunk-W6WKXFHN.js";
 import {
   findByRawKey,
   hydratePermissions
 } from "./chunk-ADK2TYO4.js";
+import {
+  getConfig
+} from "./chunk-QH57EOKP.js";
 import {
   unauthorized
 } from "./chunk-EZYKRG4W.js";
@@ -19,6 +29,21 @@ async function authenticate(request) {
   const key = extractKey(request);
   if (!key) throw unauthorized();
   const row = findByRawKey(key);
+  if (isAnthropicApiKey(key)) {
+    if (!getConfig().anthropicPassthroughEnabled) throw unauthorized();
+    return {
+      keyId: "passthrough",
+      name: "anthropic-passthrough",
+      permissions: { admin: false, scope: null },
+      tenantId: null,
+      isGlobalAdmin: false,
+      budgetUsd: null,
+      rateLimitRpm: null,
+      spentUsd: 0,
+      mode: "passthrough",
+      passthroughKey: key
+    };
+  }
   if (!row) throw unauthorized();
   const permissions = hydratePermissions(row.permissions_json);
   return {
@@ -34,11 +59,25 @@ async function authenticate(request) {
     isGlobalAdmin: row.tenant_id === null && permissions.admin,
     budgetUsd: row.budget_usd ?? null,
     rateLimitRpm: row.rate_limit_rpm ?? null,
-    spentUsd: row.spent_usd ?? 0
+    spentUsd: row.spent_usd ?? 0,
+    mode: "gateway"
   };
 }
+async function authenticateAndIntercept(request) {
+  const auth = await authenticate(request);
+  if (auth.mode !== "passthrough") return { kind: "auth", auth };
+  const url = new URL(request.url);
+  if (!isPassthroughAllowedPath(url.pathname)) {
+    throw unauthorized();
+  }
+  const response = await forwardToAnthropic(request, url.pathname, {
+    apiKey: auth.passthroughKey
+  });
+  return { kind: "response", response };
+}
 
 export {
   extractKey,
-  authenticate
+  authenticate,
+  authenticateAndIntercept
 };

package/dist/{chunk-TBSWWUJS.js → chunk-PZWVTEL2.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-XBHDQK4Z.js";
 import {
   getConfig
-} from "./chunk-YEUALILD.js";
+} from "./chunk-QH57EOKP.js";
 
 // src/backends/claude/args.ts
 function buildClaudeArgs(input) {

package/dist/{chunk-MRJMXGCG.js → chunk-QDOCVDWJ.js}

@@ -1,6 +1,6 @@
 import {
   SUPPORTED_PROVIDERS
-} from "./chunk-GSODOHNB.js";
+} from "./chunk-3LG7DRJL.js";
 import {
   addUpstreamKey,
   deleteUpstreamKey,
@@ -21,7 +21,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-PFLR7INE.js";
+} from "./chunk-LJL3DM2L.js";
 import {
   badRequest,
   notFound

package/dist/{chunk-SHKBQQ7W.js → chunk-QFUJDBET.js}

@@ -1,21 +1,21 @@
 import {
   piBackend
-} from "./chunk-GR4QPRB7.js";
+} from "./chunk-VS7AMAMU.js";
 import {
   opencodeBackend
-} from "./chunk-HE7EOIPA.js";
+} from "./chunk-GJBKDPQD.js";
 import {
   geminiBackend
-} from "./chunk-374KGHBM.js";
+} from "./chunk-HWWCVD2R.js";
 import {
   codexBackend
-} from "./chunk-G37JVAOI.js";
+} from "./chunk-NK2RCTFI.js";
 import {
   factoryBackend
-} from "./chunk-HR5YA24J.js";
+} from "./chunk-UJDAT42X.js";
 import {
   claudeBackend
-} from "./chunk-A7MX6RSQ.js";
+} from "./chunk-SIKTYKVO.js";
 
 // src/backends/registry.ts
 var BACKENDS = {

package/dist/{chunk-YEUALILD.js → chunk-QH57EOKP.js}

@@ -50,9 +50,17 @@ function loadConfig() {
     otlpEndpoint: process.env.OTEL_EXPORTER_OTLP_ENDPOINT || process.env.OTLP_ENDPOINT || readSetting("otlp_endpoint") || void 0,
     otlpAuthorization: process.env.OTEL_EXPORTER_OTLP_HEADERS_AUTHORIZATION || process.env.OTLP_AUTHORIZATION || readSetting("otlp_authorization") || void 0,
     redactEnvKeys: (process.env.OBS_REDACT_KEYS || readSetting("obs_redact_keys") || "").split(",").map((s) => s.trim()).filter(Boolean),
-    ollamaUrl: process.env.OLLAMA_URL || readSetting("ollama_url") || "http://localhost:11434"
+    ollamaUrl: process.env.OLLAMA_URL || readSetting("ollama_url") || "http://localhost:11434",
+    anthropicPassthroughEnabled: parseBool(
+      process.env.ANTHROPIC_PASSTHROUGH_ENABLED ?? readSetting("anthropic_passthrough_enabled")
+    )
   };
 }
+function parseBool(v) {
+  if (!v) return false;
+  const s = v.toLowerCase();
+  return s === "1" || s === "true" || s === "yes";
+}
 function getConfig() {
   const now = nowMs();
   if (g.__caConfigCache && now - g.__caConfigCache.at < CACHE_MS) {

package/dist/{chunk-YIYEPKVQ.js → chunk-QLWA4MJ5.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-YEUALILD.js";
+} from "./chunk-QH57EOKP.js";
 import {
   ApiError
 } from "./chunk-EZYKRG4W.js";
@@ -34,16 +34,27 @@ async function forwardToAnthropic(request, path, opts) {
   if (idem) headers.set("idempotency-key", idem);
   const accept = request.headers.get("accept");
   if (accept) headers.set("accept", accept);
+  const isMultipart = (ct ?? "").toLowerCase().startsWith("multipart/");
   let body;
   if (request.method !== "GET" && request.method !== "HEAD") {
-    body = opts?.body ?? await request.text();
+    if (opts?.body !== void 0) {
+      body = opts.body;
+    } else if (isMultipart && request.body) {
+      body = request.body;
+    } else {
+      body = await request.text();
+    }
   }
-  const res = await fetch(url.toString(), {
+  const fetchInit = {
     method: request.method,
     headers,
     body,
     signal: request.signal
-  });
+  };
+  if (body && typeof body !== "string") {
+    fetchInit.duplex = "half";
+  }
+  const res = await fetch(url.toString(), fetchInit);
   const HOP_BY_HOP = /* @__PURE__ */ new Set([
     "connection",
     "keep-alive",

package/dist/{chunk-LUQP36Y3.js → chunk-QOJMXK4S.js}

@@ -1,6 +1,6 @@
 import {
   buildOpenApiDocument
-} from "./chunk-YJPQFLY3.js";
+} from "./chunk-DHSSHDIG.js";
 
 // src/handlers/openapi.ts
 function originFromRequest(request) {

package/dist/{chunk-M5QX5E5Z.js → chunk-R45W644X.js}

@@ -4,7 +4,7 @@ import {
 import {
   getConfig,
   readSetting
-} from "./chunk-YEUALILD.js";
+} from "./chunk-QH57EOKP.js";
 import {
   __commonJS
 } from "./chunk-2ESYSVXG.js";

package/dist/{chunk-4MHPOB7A.js → chunk-RZMR6H5Y.js}

@@ -16,7 +16,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-PFLR7INE.js";
+} from "./chunk-LJL3DM2L.js";
 import {
   getDb,
   init_client

package/dist/{chunk-TJA3RHWR.js → chunk-RZXRMPF4.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-YEUALILD.js";
+} from "./chunk-QH57EOKP.js";
 
 // src/backends/gemini/auth.ts
 function buildGeminiAuthEnv() {

package/dist/{chunk-R6X47I23.js → chunk-S6AM7WVH.js}

@@ -1,6 +1,6 @@
 import {
   markStopping
-} from "./chunk-HIDFQDFP.js";
+} from "./chunk-PNYCULIF.js";
 import {
   closeDb,
   init_client,

package/dist/{chunk-MOLWE2ZY.js → chunk-SDLNBA53.js}

@@ -1,6 +1,6 @@
 import {
   resolveContainerProvider
-} from "./chunk-N2RHTKW7.js";
+} from "./chunk-JSLEB2ED.js";
 import {
   getEnvironmentRow,
   updateEnvironmentState

package/dist/{chunk-A7MX6RSQ.js → chunk-SIKTYKVO.js}

@@ -1,7 +1,7 @@
 import {
   buildClaudeArgs,
   buildClaudeAuthEnv
-} from "./chunk-TBSWWUJS.js";
+} from "./chunk-PZWVTEL2.js";
 import {
   PERMISSION_BRIDGE_DIR,
   PERMISSION_HOOK_SCRIPT_PATH,
@@ -25,7 +25,7 @@ import {
 } from "./chunk-IU457W7Q.js";
 import {
   getConfig
-} from "./chunk-YEUALILD.js";
+} from "./chunk-QH57EOKP.js";
 
 // src/backends/claude/index.ts
 function buildTurn(input) {

package/dist/{chunk-GGYTAWW6.js → chunk-SMKHXHLP.js}

@@ -4,7 +4,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-PFLR7INE.js";
+} from "./chunk-LJL3DM2L.js";
 
 // src/handlers/license.ts
 function handleGetLicense(request) {

package/dist/{chunk-GAFFXICQ.js → chunk-TKV7CFAM.js}

@@ -10,7 +10,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-PFLR7INE.js";
+} from "./chunk-LJL3DM2L.js";
 import {
   archiveTenant,
   createTenant,

package/dist/{chunk-QSYXHYQU.js → chunk-TOKLTGSO.js}

@@ -1,7 +1,7 @@
 import {
   jsonOk,
   routeWrap
-} from "./chunk-PFLR7INE.js";
+} from "./chunk-LJL3DM2L.js";
 
 // src/handlers/whoami.ts
 function handleWhoami(request) {

package/dist/{chunk-CSNIN5YZ.js → chunk-TPAHUFSM.js}

@@ -5,7 +5,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-PFLR7INE.js";
+} from "./chunk-LJL3DM2L.js";
 import {
   badRequest
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-F6M4RLDQ.js → chunk-TWPTR2C2.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-VIGJQU6V.js";
 import {
   getConfig
-} from "./chunk-YEUALILD.js";
+} from "./chunk-QH57EOKP.js";
 
 // src/observability/redactor.ts
 var REDACTED = "[REDACTED]";

package/dist/{chunk-B6LPLXPB.js → chunk-U6GNZJGO.js}

@@ -5,21 +5,21 @@ import {
   assertResourceTenant
 } from "./chunk-23UKWXJH.js";
 import {
-  forwardToAnthropic
-} from "./chunk-YIYEPKVQ.js";
+  authenticateAndIntercept
+} from "./chunk-PWWRWR75.js";
 import {
-  authenticate
-} from "./chunk-GCMYVWZ6.js";
+  forwardToAnthropic
+} from "./chunk-QLWA4MJ5.js";
 import {
   ensureInitialized
-} from "./chunk-K2ITIAVJ.js";
+} from "./chunk-C4IHTLG2.js";
 import {
   getProxiedTenantId,
   isProxied
 } from "./chunk-NIOWKTIF.js";
 import {
   subscribe
-} from "./chunk-EOFJ2MWJ.js";
+} from "./chunk-BMPB7XJH.js";
 import {
   getSession
 } from "./chunk-I5ZA45YL.js";
@@ -37,7 +37,16 @@ init_client();
 async function prepareSessionStream(request, sessionId) {
   try {
     await ensureInitialized();
-    const auth = await authenticate(request);
+    const result = await authenticateAndIntercept(request);
+    if (result.kind === "response") {
+      const headers = new Headers(result.response.headers);
+      headers.set("X-Accel-Buffering", "no");
+      return new Response(result.response.body, {
+        status: result.response.status,
+        headers
+      });
+    }
+    const auth = result.auth;
     const tenantRow = getDb().prepare(`SELECT tenant_id FROM sessions WHERE id = ?`).get(sessionId);
     if (tenantRow) {
       assertResourceTenant(auth, tenantRow.tenant_id, `session ${sessionId} not found`);