@agentstep/agent-sdk 0.4.20 → 0.4.22

package/dist/backends/codex/args.js

@@ -1,6 +1,6 @@
 import {
   buildCodexArgs
-} from "../../chunk-NQX7WBA4.js";
+} from "../../chunk-YOIYOTQD.js";
 import "../../chunk-2ESYSVXG.js";
 export {
   buildCodexArgs

package/dist/backends/codex/index.js

@@ -1,22 +1,22 @@
 import {
   codexBackend
-} from "../../chunk-B3VXZTKR.js";
+} from "../../chunk-73ATUGSN.js";
 import {
   buildCodexAuthEnv
 } from "../../chunk-5XF65N7J.js";
 import {
   prepareCodexOnSandbox
-} from "../../chunk-LFTZZ2JC.js";
+} from "../../chunk-M2LUXIXU.js";
 import {
   createCodexTranslator
 } from "../../chunk-CULYZ3VA.js";
 import {
   CODEX_WRAPPER_PATH
-} from "../../chunk-NOARWLML.js";
+} from "../../chunk-E4FQRMHV.js";
 import "../../chunk-DAT55TX2.js";
 import {
   buildCodexArgs
-} from "../../chunk-NQX7WBA4.js";
+} from "../../chunk-YOIYOTQD.js";
 import "../../chunk-QH57EOKP.js";
 import "../../chunk-SXE7H3VK.js";
 import "../../chunk-LHHBOQUR.js";

package/dist/backends/codex/setup.js

@@ -1,7 +1,7 @@
 import {
   prepareCodexOnSandbox
-} from "../../chunk-LFTZZ2JC.js";
-import "../../chunk-NOARWLML.js";
+} from "../../chunk-M2LUXIXU.js";
+import "../../chunk-E4FQRMHV.js";
 import "../../chunk-2ESYSVXG.js";
 export {
   prepareCodexOnSandbox

package/dist/backends/codex/wrapper-script.js

@@ -1,7 +1,7 @@
 import {
   CODEX_WRAPPER_PATH,
   installCodexWrapper
-} from "../../chunk-NOARWLML.js";
+} from "../../chunk-E4FQRMHV.js";
 import "../../chunk-2ESYSVXG.js";
 export {
   CODEX_WRAPPER_PATH,

package/dist/backends/registry.js

@@ -1,7 +1,7 @@
 import {
   listBackends,
   resolveBackend
-} from "../chunk-ZWVYGHM7.js";
+} from "../chunk-K65QMNW2.js";
 import "../chunk-VS7AMAMU.js";
 import "../chunk-T5VRE77P.js";
 import "../chunk-66CJ6LMV.js";
@@ -21,11 +21,11 @@ import "../chunk-RZXRMPF4.js";
 import "../chunk-XG4UIGDH.js";
 import "../chunk-3W6KEDQE.js";
 import "../chunk-S3JRZFF5.js";
-import "../chunk-B3VXZTKR.js";
+import "../chunk-73ATUGSN.js";
 import "../chunk-5XF65N7J.js";
-import "../chunk-LFTZZ2JC.js";
+import "../chunk-M2LUXIXU.js";
 import "../chunk-CULYZ3VA.js";
-import "../chunk-NOARWLML.js";
+import "../chunk-E4FQRMHV.js";
 import "../chunk-UJDAT42X.js";
 import "../chunk-YSUPRYX2.js";
 import "../chunk-7TSTCMII.js";
@@ -38,7 +38,7 @@ import "../chunk-PZWVTEL2.js";
 import "../chunk-CY6AWCC6.js";
 import "../chunk-ALVC7G6R.js";
 import "../chunk-JFYE5BFI.js";
-import "../chunk-NQX7WBA4.js";
+import "../chunk-YOIYOTQD.js";
 import "../chunk-XBHDQK4Z.js";
 import "../chunk-IU457W7Q.js";
 import "../chunk-F4WUVOLE.js";

package/dist/{chunk-2XWOQ3BY.js → chunk-3CUY4W6O.js}

@@ -4,7 +4,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QOXHG4Y6.js";
+} from "./chunk-IHI46BFD.js";
 
 // src/handlers/license.ts
 function handleGetLicense(request) {

package/dist/{chunk-TDSJP5AV.js → chunk-3DKY26SM.js}

@@ -30,7 +30,7 @@ import {
   installSkills,
   provisionResources,
   wrapProviderWithSecrets
-} from "./chunk-V2C4E2MN.js";
+} from "./chunk-DPRQO6PY.js";
 import {
   BLOCKED_ENV_KEYS,
   resolveVaultSecrets
@@ -68,7 +68,7 @@ import {
 } from "./chunk-JEI7I3EH.js";
 import {
   resolveBackend
-} from "./chunk-ZWVYGHM7.js";
+} from "./chunk-K65QMNW2.js";
 import {
   PERMISSION_BRIDGE_PENDING_PATH,
   PERMISSION_BRIDGE_REQUEST_PATH,

package/dist/{chunk-JCW24KHR.js → chunk-3KYYNMM3.js}

@@ -10,7 +10,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QOXHG4Y6.js";
+} from "./chunk-IHI46BFD.js";
 import {
   archiveTenant,
   createTenant,

package/dist/{chunk-TNQ2H344.js → chunk-4N25TV7W.js}

@@ -5,7 +5,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QOXHG4Y6.js";
+} from "./chunk-IHI46BFD.js";
 import {
   getSession,
   listSessions

package/dist/{chunk-3TU24KRF.js → chunk-6DGM6BWP.js}

@@ -4,7 +4,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QOXHG4Y6.js";
+} from "./chunk-IHI46BFD.js";
 
 // src/handlers/models.ts
 function handleListModels(request) {

package/dist/{chunk-B3VXZTKR.js → chunk-73ATUGSN.js}

@@ -4,19 +4,19 @@ import {
 } from "./chunk-5XF65N7J.js";
 import {
   prepareCodexOnSandbox
-} from "./chunk-LFTZZ2JC.js";
+} from "./chunk-M2LUXIXU.js";
 import {
   createCodexTranslator
 } from "./chunk-CULYZ3VA.js";
 import {
   CODEX_WRAPPER_PATH
-} from "./chunk-NOARWLML.js";
+} from "./chunk-E4FQRMHV.js";
 import {
   wrapPromptWithSystem
 } from "./chunk-DAT55TX2.js";
 import {
   buildCodexArgs
-} from "./chunk-NQX7WBA4.js";
+} from "./chunk-YOIYOTQD.js";
 import {
   ApiError
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-EDVS5OMU.js → chunk-CO7CJH7A.js}

@@ -18,7 +18,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QOXHG4Y6.js";
+} from "./chunk-IHI46BFD.js";
 import {
   forwardToAnthropic
 } from "./chunk-QLWA4MJ5.js";
@@ -38,7 +38,7 @@ import {
 } from "./chunk-LAWTTG2E.js";
 import {
   releaseSession
-} from "./chunk-V2C4E2MN.js";
+} from "./chunk-DPRQO6PY.js";
 import {
   appendEvent,
   dropEmitter
@@ -118,9 +118,18 @@ var ResourceSchema = z.object({
   content: z.string().optional(),
   file_id: z.string().optional(),
   mount_path: z.string().optional(),
+  // Accept both internal (repository_url, branch, commit) and
+  // Anthropic API (url, checkout, authorization_token) field names.
+  url: z.string().optional(),
   repository_url: z.string().optional(),
   branch: z.string().optional(),
-  commit: z.string().optional()
+  commit: z.string().optional(),
+  checkout: z.object({
+    type: z.string(),
+    name: z.string().optional(),
+    sha: z.string().optional()
+  }).optional(),
+  authorization_token: z.string().optional()
 });
 var CreateSchema = z.object({
   agent: AgentRef,
@@ -266,12 +275,22 @@ function handleCreateSession(request) {
         if (data.resources?.length) {
           const { createResource } = await import("./db/session-resources.js");
           for (const r of data.resources) {
+            let repoUrl = r.type === "github_repository" ? r.repository_url ?? r.url : r.uri;
+            if (r.type === "github_repository" && r.authorization_token && repoUrl) {
+              try {
+                const u = new URL(repoUrl);
+                u.username = "x-access-token";
+                u.password = r.authorization_token;
+                repoUrl = u.toString();
+              } catch {
+              }
+            }
             createResource(session2.id, {
               type: r.type,
               file_id: r.file_id,
               mount_path: r.mount_path,
-              url: r.type === "github_repository" ? r.repository_url : r.uri,
-              checkout: r.branch ? { type: "branch", name: r.branch } : r.commit ? { type: "commit", name: r.commit } : void 0
+              url: repoUrl,
+              checkout: r.checkout ? { type: r.checkout.type, name: r.checkout.name ?? r.checkout.sha ?? "" } : r.branch ? { type: "branch", name: r.branch } : r.commit ? { type: "commit", name: r.commit } : void 0
             });
           }
         }
@@ -315,12 +334,22 @@ function handleCreateSession(request) {
       if (data.resources?.length) {
         const { createResource } = await import("./db/session-resources.js");
         for (const r of data.resources) {
+          let repoUrl = r.type === "github_repository" ? r.repository_url ?? r.url : r.uri;
+          if (r.type === "github_repository" && r.authorization_token && repoUrl) {
+            try {
+              const u = new URL(repoUrl);
+              u.username = "x-access-token";
+              u.password = r.authorization_token;
+              repoUrl = u.toString();
+            } catch {
+            }
+          }
           createResource(session.id, {
             type: r.type,
             file_id: r.file_id,
             mount_path: r.mount_path,
-            url: r.type === "github_repository" ? r.repository_url : r.uri,
-            checkout: r.branch ? { type: "branch", name: r.branch } : r.commit ? { type: "commit", name: r.commit } : void 0
+            url: repoUrl,
+            checkout: r.checkout ? { type: r.checkout.type, name: r.checkout.name ?? r.checkout.sha ?? "" } : r.branch ? { type: "branch", name: r.branch } : r.commit ? { type: "commit", name: r.commit } : void 0
           });
         }
       }

package/dist/{chunk-MROQIA7C.js → chunk-DNM5ZHXB.js}

@@ -1,6 +1,6 @@
 import {
   markStopping
-} from "./chunk-CQ7SDFTO.js";
+} from "./chunk-FYHZ6JI7.js";
 import {
   closeDb,
   init_client,

package/dist/{chunk-V2C4E2MN.js → chunk-DPRQO6PY.js}

@@ -34,7 +34,7 @@ import {
 } from "./chunk-JEI7I3EH.js";
 import {
   resolveBackend
-} from "./chunk-ZWVYGHM7.js";
+} from "./chunk-K65QMNW2.js";
 import {
   getConfig
 } from "./chunk-QH57EOKP.js";
@@ -313,7 +313,9 @@ async function provisionResources(sandboxName, resources, provider) {
       } catch (err) {
         console.warn(`[lifecycle] failed to provision file resource ${r.file_id}:`, err);
       }
-    } else if (r.type === "github_repository" && r.repository_url) {
+    } else if (r.type === "github_repository") {
+      const cloneUrl = r.repository_url ?? r.url;
+      if (!cloneUrl) continue;
       try {
         const repoDir = safeMountPath ? safeMountPath.startsWith("/") ? safeMountPath : `/mnt/session/uploads/${safeMountPath}` : `/mnt/session/resources/repo_${i}`;
         const SAFE_REF_RE = /^[a-zA-Z0-9_./\-]+$/;
@@ -325,16 +327,16 @@ async function provisionResources(sandboxName, resources, provider) {
         if (safeBranch) {
           gitArgs.push("--branch", safeBranch);
         }
-        gitArgs.push("--", r.repository_url, repoDir);
+        gitArgs.push("--", cloneUrl, repoDir);
         const result = await provider.exec(sandboxName, gitArgs, { timeoutMs: 12e4 });
         if (safeCommit && result.exit_code === 0) {
           await provider.exec(sandboxName, ["git", "-C", repoDir, "checkout", safeCommit], { timeoutMs: 3e4 });
         }
         if (result.exit_code !== 0) {
-          console.warn(`[lifecycle] git clone failed for ${r.repository_url}: ${result.stderr.slice(0, 200)}`);
+          console.warn(`[lifecycle] git clone failed for ${cloneUrl}: ${result.stderr.slice(0, 200)}`);
         }
       } catch (err) {
-        console.warn(`[lifecycle] failed to clone repo ${r.repository_url}:`, err);
+        console.warn(`[lifecycle] failed to clone repo ${cloneUrl}:`, err);
       }
     }
   }

package/dist/{chunk-NNFXHHPL.js → chunk-DQI6N2QS.js}

@@ -1,10 +1,10 @@
 import {
   loadVaultForCaller
-} from "./chunk-IYM2AYJX.js";
+} from "./chunk-G6DY26SA.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QOXHG4Y6.js";
+} from "./chunk-IHI46BFD.js";
 import {
   createCredential,
   deleteCredential,

package/dist/{chunk-D2FQAAM2.js → chunk-DV2RMXD6.js}

@@ -4,7 +4,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QOXHG4Y6.js";
+} from "./chunk-IHI46BFD.js";
 import {
   exportTrace
 } from "./chunk-ACKMNK3C.js";

package/dist/{chunk-NXUSIOLM.js → chunk-DZ7V6L66.js}

@@ -8,7 +8,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QOXHG4Y6.js";
+} from "./chunk-IHI46BFD.js";
 
 // src/handlers/skills.ts
 async function handleGetSkillsCatalog(request) {

package/dist/{chunk-NOARWLML.js → chunk-E4FQRMHV.js}

@@ -8,10 +8,14 @@ var SANDBOX_WRAPPER_SCRIPT = [
   // issues when exec replaces the process, matching the claude wrapper pattern.
   "PROMPT_FILE=$(mktemp)",
   'cat > "$PROMPT_FILE"',
-  // Ensure codex runs in a writable workspace. Without bwrap (--sandbox none),
-  // codex inherits the container exec CWD which may be / or /root with no
-  // project context, causing it to immediately exit with end_turn.
-  "cd /home/user 2>/dev/null || cd /tmp",
+  // Set CWD to the first cloned repo if available, otherwise the user's home.
+  // Without bwrap (--sandbox none), codex inherits the container exec CWD
+  // which may be / or /root with no project context.
+  'REPO_DIR=$(find /mnt/session/resources -maxdepth 1 -name "repo_*" -type d 2>/dev/null | head -1)',
+  'if [ -n "$REPO_DIR" ]; then cd "$REPO_DIR"',
+  "elif [ -d /home/sprite ]; then cd /home/sprite",
+  "elif [ -d /home/user ]; then cd /home/user",
+  "else cd /tmp; fi",
   'codex "$@" < "$PROMPT_FILE"',
   "EXIT_CODE=$?",
   'rm -f "$PROMPT_FILE"',

package/dist/{chunk-QTBXZSVW.js → chunk-ES7QCBTU.js}

@@ -1,7 +1,7 @@
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QOXHG4Y6.js";
+} from "./chunk-IHI46BFD.js";
 
 // src/handlers/whoami.ts
 function handleWhoami(request) {

package/dist/{chunk-BEGJBTM2.js → chunk-FFUQOTXY.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-HECQRMDR.js";
 import {
   runTurn
-} from "./chunk-TDSJP5AV.js";
+} from "./chunk-3DKY26SM.js";
 import {
   installOtlpExporter
 } from "./chunk-ACKMNK3C.js";
@@ -19,14 +19,14 @@ import {
 } from "./chunk-3MQ2FWXS.js";
 import {
   installShutdownHandlers
-} from "./chunk-MROQIA7C.js";
+} from "./chunk-DNM5ZHXB.js";
 import {
   runSweep
-} from "./chunk-CQ7SDFTO.js";
+} from "./chunk-FYHZ6JI7.js";
 import {
   reconcileDockerOrphanSandboxes,
   reconcileOrphanSandboxes
-} from "./chunk-V2C4E2MN.js";
+} from "./chunk-DPRQO6PY.js";
 import {
   appendEvent,
   installPayloadRedactor

package/dist/{chunk-CQ7SDFTO.js → chunk-FYHZ6JI7.js}

@@ -6,7 +6,7 @@ import {
   reconcileDockerOrphanSandboxes,
   reconcileOrphanSandboxes,
   releaseSession
-} from "./chunk-V2C4E2MN.js";
+} from "./chunk-DPRQO6PY.js";
 import {
   appendEvent,
   dropEmitter

package/dist/{chunk-IYM2AYJX.js → chunk-G6DY26SA.js}

@@ -6,7 +6,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QOXHG4Y6.js";
+} from "./chunk-IHI46BFD.js";
 import {
   createVault,
   deleteEntry,

package/dist/{chunk-QREI2B7N.js → chunk-GAVZTBYX.js}

@@ -1,7 +1,7 @@
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QOXHG4Y6.js";
+} from "./chunk-IHI46BFD.js";
 import {
   resolveContainerProvider
 } from "./chunk-JSLEB2ED.js";

package/dist/{chunk-AQCZFV3Q.js → chunk-HRXT7OWW.js}

@@ -24,7 +24,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QOXHG4Y6.js";
+} from "./chunk-IHI46BFD.js";
 import {
   forwardToAnthropic
 } from "./chunk-QLWA4MJ5.js";
@@ -34,7 +34,7 @@ import {
 import {
   runTurn,
   writePermissionResponse
-} from "./chunk-TDSJP5AV.js";
+} from "./chunk-3DKY26SM.js";
 import {
   getProxiedTenantId,
   isProxied

package/dist/{chunk-QOXHG4Y6.js → chunk-IHI46BFD.js}

@@ -10,7 +10,7 @@ import {
 } from "./chunk-HVUWXUUI.js";
 import {
   ensureInitialized
-} from "./chunk-BEGJBTM2.js";
+} from "./chunk-FFUQOTXY.js";
 import {
   captureException
 } from "./chunk-3MQ2FWXS.js";

package/dist/{chunk-4TUARBXU.js → chunk-JP4O3Z2M.js}

@@ -5,7 +5,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QOXHG4Y6.js";
+} from "./chunk-IHI46BFD.js";
 import {
   badRequest
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-ZWVYGHM7.js → chunk-K65QMNW2.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-HWWCVD2R.js";
 import {
   codexBackend
-} from "./chunk-B3VXZTKR.js";
+} from "./chunk-73ATUGSN.js";
 import {
   factoryBackend
 } from "./chunk-UJDAT42X.js";

package/dist/{chunk-WDOPDZAQ.js → chunk-KITFIRK6.js}

@@ -1,6 +1,6 @@
 import {
   routeWrap
-} from "./chunk-QOXHG4Y6.js";
+} from "./chunk-IHI46BFD.js";
 import {
   ApiError
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-LFTZZ2JC.js → chunk-M2LUXIXU.js}

@@ -1,6 +1,6 @@
 import {
   installCodexWrapper
-} from "./chunk-NOARWLML.js";
+} from "./chunk-E4FQRMHV.js";
 
 // src/backends/codex/setup.ts
 var SENTINEL_NAME = ".claude-agents-codex-installed";

package/dist/{chunk-LA3LXLFL.js → chunk-MR722H4O.js}

@@ -21,7 +21,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QOXHG4Y6.js";
+} from "./chunk-IHI46BFD.js";
 import {
   badRequest,
   notFound

package/dist/{chunk-ORAB6DT4.js → chunk-NUZFYU2K.js}

@@ -15,7 +15,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QOXHG4Y6.js";
+} from "./chunk-IHI46BFD.js";
 import {
   createApiKey,
   getApiKeyById,

package/dist/{chunk-4HBGBRU3.js → chunk-PYYZPQH2.js}

@@ -1,7 +1,7 @@
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QOXHG4Y6.js";
+} from "./chunk-IHI46BFD.js";
 import {
   readSetting,
   writeSetting

package/dist/{chunk-74TKPNGH.js → chunk-Q6HHQ2CK.js}

@@ -16,7 +16,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QOXHG4Y6.js";
+} from "./chunk-IHI46BFD.js";
 import {
   getDb,
   init_client

package/dist/{chunk-YI74CMQH.js → chunk-SAZPAHEA.js}

@@ -8,7 +8,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QOXHG4Y6.js";
+} from "./chunk-IHI46BFD.js";
 import {
   badRequest
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-SXYRLCQ7.js → chunk-TW5GJAM7.js}

@@ -4,7 +4,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QOXHG4Y6.js";
+} from "./chunk-IHI46BFD.js";
 import {
   getProxiedTenantId
 } from "./chunk-NIOWKTIF.js";

package/dist/{chunk-26MLN4YD.js → chunk-XGMBNULN.js}

@@ -9,7 +9,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QOXHG4Y6.js";
+} from "./chunk-IHI46BFD.js";
 import {
   forwardToAnthropic
 } from "./chunk-QLWA4MJ5.js";

package/dist/{chunk-J5DICKEN.js → chunk-XU3OPKWI.js}

@@ -12,7 +12,7 @@ import {
 } from "./chunk-QLWA4MJ5.js";
 import {
   ensureInitialized
-} from "./chunk-BEGJBTM2.js";
+} from "./chunk-FFUQOTXY.js";
 import {
   getProxiedTenantId,
   isProxied

package/dist/{chunk-VCM3ZLSO.js → chunk-YA75H2HM.js}

@@ -6,7 +6,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QOXHG4Y6.js";
+} from "./chunk-IHI46BFD.js";
 import {
   forwardToAnthropic,
   validateAnthropicProxy
@@ -26,7 +26,7 @@ import {
 } from "./chunk-JEI7I3EH.js";
 import {
   resolveBackend
-} from "./chunk-ZWVYGHM7.js";
+} from "./chunk-K65QMNW2.js";
 import {
   getDb,
   init_client

package/dist/{chunk-NQX7WBA4.js → chunk-YOIYOTQD.js}

@@ -4,6 +4,7 @@ function buildCodexArgs(input) {
     "exec",
     "--json",
     "--full-auto",
+    "--auto-edit",
     "--skip-git-repo-check"
   ];
   if (input.agent.model) {

package/dist/{chunk-EAPJXYAX.js → chunk-ZV4QSTB7.js}

@@ -8,7 +8,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QOXHG4Y6.js";
+} from "./chunk-IHI46BFD.js";
 import {
   snapshotApiMetrics
 } from "./chunk-D2XITRN6.js";

package/dist/{chunk-QCRRP2YS.js → chunk-ZZLOHUAJ.js}

@@ -18,7 +18,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QOXHG4Y6.js";
+} from "./chunk-IHI46BFD.js";
 import {
   getDb,
   init_client