@agentstep/agent-sdk 0.4.27 → 0.4.29

package/dist/backends/claude/index.js

@@ -2,14 +2,14 @@ import {
   claudeBackend,
   installPermissionHook,
   installToolBridge
-} from "../../chunk-6VQXN6L3.js";
+} from "../../chunk-RZKUB4JQ.js";
 import {
   buildClaudeArgs,
   buildClaudeAuthEnv
 } from "../../chunk-WFIMX3HG.js";
 import "../../chunk-FVBDEOTZ.js";
 import "../../chunk-CY6AWCC6.js";
-import "../../chunk-ALVC7G6R.js";
+import "../../chunk-4FDEJHH7.js";
 import {
   createClaudeTranslator
 } from "../../chunk-JFYE5BFI.js";

package/dist/backends/claude/tool-bridge.js

@@ -1,5 +1,6 @@
 import {
   TOOL_BRIDGE_DIR,
+  TOOL_BRIDGE_MCP_CONFIG_PATH,
   TOOL_BRIDGE_PENDING_PATH,
   TOOL_BRIDGE_REQUEST_PATH,
   TOOL_BRIDGE_RESPONSE_PATH,
@@ -8,10 +9,11 @@ import {
   buildBridgeMcpConfig,
   generateBridgeScript,
   toolsToJson
-} from "../../chunk-ALVC7G6R.js";
+} from "../../chunk-4FDEJHH7.js";
 import "../../chunk-2ESYSVXG.js";
 export {
   TOOL_BRIDGE_DIR,
+  TOOL_BRIDGE_MCP_CONFIG_PATH,
   TOOL_BRIDGE_PENDING_PATH,
   TOOL_BRIDGE_REQUEST_PATH,
   TOOL_BRIDGE_RESPONSE_PATH,

package/dist/backends/registry.js

@@ -1,7 +1,7 @@
 import {
   listBackends,
   resolveBackend
-} from "../chunk-QAGHVCOK.js";
+} from "../chunk-KOGG7CSN.js";
 import "../chunk-I44FSUBC.js";
 import "../chunk-T5VRE77P.js";
 import "../chunk-TY3HD5I5.js";
@@ -32,11 +32,11 @@ import "../chunk-7TSTCMII.js";
 import "../chunk-QQDSHL27.js";
 import "../chunk-IAF6VMPO.js";
 import "../chunk-OWP537VU.js";
-import "../chunk-6VQXN6L3.js";
+import "../chunk-RZKUB4JQ.js";
 import "../chunk-WFIMX3HG.js";
 import "../chunk-FVBDEOTZ.js";
 import "../chunk-CY6AWCC6.js";
-import "../chunk-ALVC7G6R.js";
+import "../chunk-4FDEJHH7.js";
 import "../chunk-JFYE5BFI.js";
 import "../chunk-NQX7WBA4.js";
 import "../chunk-XBHDQK4Z.js";

package/dist/{chunk-HBERAFEH.js → chunk-2NAUMCWE.js}

@@ -1,7 +1,7 @@
 import {
   jsonOk,
   routeWrap
-} from "./chunk-R3NRSPRU.js";
+} from "./chunk-ESXH27JB.js";
 
 // src/handlers/whoami.ts
 function handleWhoami(request) {

package/dist/{chunk-WJ2BEGAZ.js → chunk-4DTL7OKD.js}

@@ -15,7 +15,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-R3NRSPRU.js";
+} from "./chunk-ESXH27JB.js";
 import {
   createApiKey,
   getApiKeyById,

package/dist/chunk-4FDEJHH7.js

@@ -0,0 +1,128 @@
+// src/backends/claude/tool-bridge.ts
+var TOOL_BRIDGE_DIR = "/tmp/tool-bridge";
+var TOOL_BRIDGE_SCRIPT_PATH = `${TOOL_BRIDGE_DIR}/bridge.sh`;
+var TOOL_BRIDGE_TOOLS_PATH = `${TOOL_BRIDGE_DIR}/tools.json`;
+var TOOL_BRIDGE_REQUEST_PATH = `${TOOL_BRIDGE_DIR}/request.json`;
+var TOOL_BRIDGE_RESPONSE_PATH = `${TOOL_BRIDGE_DIR}/response.json`;
+var TOOL_BRIDGE_MCP_CONFIG_PATH = `${TOOL_BRIDGE_DIR}/mcp.json`;
+var TOOL_BRIDGE_PENDING_PATH = `${TOOL_BRIDGE_DIR}/pending`;
+function generateBridgeScript() {
+  return `#!/bin/bash
+# Auto-generated MCP stdio server for custom tool bridge.
+# Pure bash \u2014 no Node.js dependency. Instant startup on Firecracker VMs.
+
+TOOLS_PATH="${TOOL_BRIDGE_TOOLS_PATH}"
+REQUEST_PATH="${TOOL_BRIDGE_REQUEST_PATH}"
+RESPONSE_PATH="${TOOL_BRIDGE_RESPONSE_PATH}"
+PENDING_PATH="${TOOL_BRIDGE_PENDING_PATH}"
+
+send_response() {
+  printf '%s\\n' "$1"
+}
+
+TOOLS_LIST_JSON=""
+if [ -f "$TOOLS_PATH" ]; then
+  TOOLS_LIST_JSON=$(sed 's/input_schema/inputSchema/g' "$TOOLS_PATH")
+fi
+
+handle_request() {
+  local body="$1"
+  local method id
+  method=$(echo "$body" | grep -o '"method":"[^"]*"' | head -1 | cut -d'"' -f4)
+  id=$(echo "$body" | grep -o '"id":[0-9]*' | head -1 | cut -d: -f2)
+
+  case "$method" in
+    initialize)
+      send_response '{"jsonrpc":"2.0","id":'"$id"',"result":{"protocolVersion":"2025-11-25","capabilities":{"tools":{"listChanged":false}},"serverInfo":{"name":"tool-bridge","version":"1.0.0"}}}'
+      ;;
+    notifications/initialized) ;;
+    tools/list)
+      send_response '{"jsonrpc":"2.0","id":'"$id"',"result":{"tools":'"$TOOLS_LIST_JSON"'}}'
+      ;;
+    tools/call)
+      local tool_name tool_args
+      tool_name=$(echo "$body" | grep -o '"name":"[^"]*"' | tail -1 | cut -d'"' -f4)
+      tool_args=$(echo "$body" | grep -o '"arguments":{[^}]*}' | head -1 | sed 's/^"arguments"://')
+      [ -z "$tool_args" ] && tool_args="{}"
+
+      # Replay case: response.json already exists (--resume re-entry)
+      if [ -f "$RESPONSE_PATH" ]; then
+        local rdata
+        rdata=$(cat "$RESPONSE_PATH" | tr -d '\\n' | sed 's/\\\\/\\\\\\\\/g; s/"/\\\\"/g')
+        rm -f "$RESPONSE_PATH"
+        send_response '{"jsonrpc":"2.0","id":'"$id"',"result":{"content":[{"type":"text","text":"'"$rdata"'"}],"isError":false}}'
+        return
+      fi
+
+      # Write request and create pending sentinel
+      printf '{"tool_use_id":%s,"name":"%s","input":%s}' "$id" "$tool_name" "$tool_args" > "$REQUEST_PATH"
+      touch "$PENDING_PATH"
+
+      # Poll for response.json (200ms interval, 5min timeout)
+      local elapsed=0
+      while [ $elapsed -lt 1500 ]; do
+        if [ -f "$RESPONSE_PATH" ]; then
+          local rdata
+          rdata=$(cat "$RESPONSE_PATH" | tr -d '\\n' | sed 's/\\\\/\\\\\\\\/g; s/"/\\\\"/g')
+          rm -f "$RESPONSE_PATH" "$PENDING_PATH"
+          send_response '{"jsonrpc":"2.0","id":'"$id"',"result":{"content":[{"type":"text","text":"'"$rdata"'"}],"isError":false}}'
+          return
+        fi
+        sleep 0.2
+        elapsed=$((elapsed + 1))
+      done
+      # Timeout
+      rm -f "$PENDING_PATH"
+      send_response '{"jsonrpc":"2.0","id":'"$id"',"error":{"code":-32603,"message":"Timeout waiting for tool response"}}'
+      ;;
+    *)
+      [ -n "$id" ] && send_response '{"jsonrpc":"2.0","id":'"$id"',"error":{"code":-32601,"message":"Method not found"}}'
+      ;;
+  esac
+}
+
+# Main loop: handle both raw JSON lines and Content-Length framed messages
+while IFS= read -r line; do
+  line=\${line%$'\\r'}
+  [ -z "$line" ] && continue
+  case "$line" in
+    Content-Length:*)
+      while IFS= read -r hdr; do hdr=\${hdr%$'\\r'}; [ -z "$hdr" ] && break; done
+      body=$(head -c "\${line#Content-Length: }")
+      handle_request "$body" ;;
+    "{"*) handle_request "$line" ;;
+  esac
+done
+`;
+}
+function buildBridgeMcpConfig(existingServers) {
+  return {
+    ...existingServers,
+    "tool-bridge": {
+      command: "bash",
+      args: [TOOL_BRIDGE_SCRIPT_PATH]
+    }
+  };
+}
+function toolsToJson(tools) {
+  return JSON.stringify(
+    tools.map((t) => ({
+      name: t.name,
+      description: t.description,
+      input_schema: t.input_schema
+    }))
+  );
+}
+
+export {
+  TOOL_BRIDGE_DIR,
+  TOOL_BRIDGE_SCRIPT_PATH,
+  TOOL_BRIDGE_TOOLS_PATH,
+  TOOL_BRIDGE_REQUEST_PATH,
+  TOOL_BRIDGE_RESPONSE_PATH,
+  TOOL_BRIDGE_MCP_CONFIG_PATH,
+  TOOL_BRIDGE_PENDING_PATH,
+  generateBridgeScript,
+  buildBridgeMcpConfig,
+  toolsToJson
+};

package/dist/{chunk-Q3NN46KE.js → chunk-4GC7D5GD.js}

@@ -5,7 +5,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-R3NRSPRU.js";
+} from "./chunk-ESXH27JB.js";
 import {
   badRequest
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-DLFZAPUD.js → chunk-AE5JQORN.js}

@@ -1,10 +1,10 @@
 import {
   loadVaultForCaller
-} from "./chunk-KD4GS64M.js";
+} from "./chunk-LLYP77OL.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-R3NRSPRU.js";
+} from "./chunk-ESXH27JB.js";
 import {
   createCredential,
   deleteCredential,

package/dist/{chunk-4ZUORWES.js → chunk-BFXQ3IOS.js}

@@ -24,7 +24,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-R3NRSPRU.js";
+} from "./chunk-ESXH27JB.js";
 import {
   forwardToAnthropic
 } from "./chunk-T45NOW43.js";
@@ -34,7 +34,7 @@ import {
 import {
   runTurn,
   writePermissionResponse
-} from "./chunk-BEXPMKTK.js";
+} from "./chunk-KZ4AECAK.js";
 import {
   getProxiedTenantId,
   isProxied
@@ -544,16 +544,22 @@ function handlePostEvents(request, sessionId) {
             processedAt: nowMs()
           });
           rows.push(row);
-          const inp = {
-            kind: "tool_result",
-            eventId: row.id,
-            custom_tool_use_id: event.custom_tool_use_id,
-            content: event.content
-          };
           const currentStatus = getSessionRow(sessionId)?.status ?? "idle";
-          if (currentStatus === "running" || sawInterrupt) {
-            pushPendingUserInput({ sessionId, input: inp });
+          if (currentStatus === "running") {
+            const { writeToolBridgeResponse } = await import("./sessions/driver.js");
+            void writeToolBridgeResponse(
+              sessionId,
+              event.content
+            ).catch((err) => {
+              console.warn(`[events] writeToolBridgeResponse failed:`, err);
+            });
           } else {
+            const inp = {
+              kind: "tool_result",
+              eventId: row.id,
+              custom_tool_use_id: event.custom_tool_use_id,
+              content: event.content
+            };
             pendingForTurn.push(inp);
           }
           continue;

package/dist/{chunk-VZQP2TG2.js → chunk-DT57EZQB.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-AQXCXWAZ.js";
 import {
   runTurn
-} from "./chunk-BEXPMKTK.js";
+} from "./chunk-KZ4AECAK.js";
 import {
   installOtlpExporter
 } from "./chunk-Y2KDIPCT.js";
@@ -19,14 +19,14 @@ import {
 } from "./chunk-3MQ2FWXS.js";
 import {
   installShutdownHandlers
-} from "./chunk-OLZ2KIXD.js";
+} from "./chunk-NX6SIEN6.js";
 import {
   runSweep
-} from "./chunk-KMBQ5U5W.js";
+} from "./chunk-FJAWIVSD.js";
 import {
   reconcileDockerOrphanSandboxes,
   reconcileOrphanSandboxes
-} from "./chunk-U7XXWFTQ.js";
+} from "./chunk-XGUSWFDD.js";
 import {
   appendEvent,
   installPayloadRedactor

package/dist/{chunk-XLAHZKY6.js → chunk-EGCAA6KI.js}

@@ -8,7 +8,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-R3NRSPRU.js";
+} from "./chunk-ESXH27JB.js";
 import {
   snapshotApiMetrics
 } from "./chunk-D2XITRN6.js";

package/dist/{chunk-R3NRSPRU.js → chunk-ESXH27JB.js}

@@ -10,7 +10,7 @@ import {
 } from "./chunk-HVUWXUUI.js";
 import {
   ensureInitialized
-} from "./chunk-VZQP2TG2.js";
+} from "./chunk-DT57EZQB.js";
 import {
   captureException
 } from "./chunk-3MQ2FWXS.js";

package/dist/{chunk-KMBQ5U5W.js → chunk-FJAWIVSD.js}

@@ -6,7 +6,7 @@ import {
   reconcileDockerOrphanSandboxes,
   reconcileOrphanSandboxes,
   releaseSession
-} from "./chunk-U7XXWFTQ.js";
+} from "./chunk-XGUSWFDD.js";
 import {
   appendEvent,
   dropEmitter

package/dist/{chunk-EZCC3VWX.js → chunk-GQFC44YI.js}

@@ -5,7 +5,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-R3NRSPRU.js";
+} from "./chunk-ESXH27JB.js";
 import {
   getSession,
   listSessions

package/dist/{chunk-R6L3HZP2.js → chunk-HGZ6R6ST.js}

@@ -16,7 +16,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-R3NRSPRU.js";
+} from "./chunk-ESXH27JB.js";
 import {
   getDb,
   init_client

package/dist/{chunk-QPI6MKAU.js → chunk-HMBJOI5F.js}

@@ -18,7 +18,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-R3NRSPRU.js";
+} from "./chunk-ESXH27JB.js";
 import {
   forwardToAnthropic
 } from "./chunk-T45NOW43.js";
@@ -38,7 +38,7 @@ import {
 } from "./chunk-LAWTTG2E.js";
 import {
   releaseSession
-} from "./chunk-U7XXWFTQ.js";
+} from "./chunk-XGUSWFDD.js";
 import {
   appendEvent,
   dropEmitter

package/dist/{chunk-QI2UYVUF.js → chunk-JURAGCGR.js}

@@ -12,7 +12,7 @@ import {
 } from "./chunk-T45NOW43.js";
 import {
   ensureInitialized
-} from "./chunk-VZQP2TG2.js";
+} from "./chunk-DT57EZQB.js";
 import {
   getProxiedTenantId,
   isProxied

package/dist/{chunk-QAGHVCOK.js → chunk-KOGG7CSN.js}

@@ -15,7 +15,7 @@ import {
 } from "./chunk-5D5P37FY.js";
 import {
   claudeBackend
-} from "./chunk-6VQXN6L3.js";
+} from "./chunk-RZKUB4JQ.js";
 
 // src/backends/registry.ts
 var BACKENDS = {

package/dist/{chunk-BEXPMKTK.js → chunk-KZ4AECAK.js}

@@ -30,7 +30,7 @@ import {
   installSkills,
   provisionResources,
   wrapProviderWithSecrets
-} from "./chunk-U7XXWFTQ.js";
+} from "./chunk-XGUSWFDD.js";
 import {
   BLOCKED_ENV_KEYS,
   resolveVaultSecrets
@@ -68,12 +68,17 @@ import {
 } from "./chunk-JEI7I3EH.js";
 import {
   resolveBackend
-} from "./chunk-QAGHVCOK.js";
+} from "./chunk-KOGG7CSN.js";
 import {
   PERMISSION_BRIDGE_PENDING_PATH,
   PERMISSION_BRIDGE_REQUEST_PATH,
   PERMISSION_BRIDGE_RESPONSE_PATH
 } from "./chunk-CY6AWCC6.js";
+import {
+  TOOL_BRIDGE_PENDING_PATH,
+  TOOL_BRIDGE_REQUEST_PATH,
+  TOOL_BRIDGE_RESPONSE_PATH
+} from "./chunk-4FDEJHH7.js";
 import {
   resolveToolset
 } from "./chunk-XBHDQK4Z.js";
@@ -272,6 +277,9 @@ async function runTurn(sessionId, inputs, _depth = 0, parentTrace) {
   if (freshSession?.resources && freshSession.resources.length > 0) {
     turnBuild.env.RESOURCES_DIR = "/tmp/resources";
   }
+  if (agent.engine === "claude" && !turnBuild.env.MCP_TIMEOUT) {
+    turnBuild.env.MCP_TIMEOUT = "30000";
+  }
   const MCP_KEY_RE = /^MCP_(AUTH|HEADER)_/i;
   for (const entry of vaultEntries) {
     if (!BLOCKED_ENV_KEYS.has(entry.key) && !MCP_KEY_RE.test(entry.key)) {
@@ -350,21 +358,21 @@ ${turnBuild.stdin}`;
     turnSpanId: trace.span_id
   });
   if (agent.engine === "claude" && toolResults.length > 0) {
-    const { TOOL_BRIDGE_RESPONSE_PATH, TOOL_BRIDGE_PENDING_PATH } = await import("./backends/claude/tool-bridge.js");
+    const { TOOL_BRIDGE_RESPONSE_PATH: TOOL_BRIDGE_RESPONSE_PATH2, TOOL_BRIDGE_PENDING_PATH: TOOL_BRIDGE_PENDING_PATH2 } = await import("./backends/claude/tool-bridge.js");
     const sandboxName2 = getSessionRow(sessionId)?.sandbox_name;
     if (sandboxName2) {
       for (const r of toolResults) {
         const responseJson = JSON.stringify({ content: r.content });
         await provider.exec(
           sandboxName2,
-          ["bash", "-c", `cat > ${TOOL_BRIDGE_RESPONSE_PATH}`],
+          ["bash", "-c", `cat > ${TOOL_BRIDGE_RESPONSE_PATH2}`],
           { stdin: responseJson, secrets }
         ).catch((err) => {
           console.warn(`[driver] failed to write tool bridge response:`, err);
         });
         await provider.exec(
           sandboxName2,
-          ["rm", "-f", TOOL_BRIDGE_PENDING_PATH],
+          ["rm", "-f", TOOL_BRIDGE_PENDING_PATH2],
           { secrets }
         ).catch(() => {
         });
@@ -409,6 +417,17 @@ ${turnBuild.stdin}`;
       );
     }, 2e3);
   }
+  const customToolNames = resolveToolset(agent.tools).customToolNames;
+  let toolBridgePollTimer = null;
+  if (agent.engine === "claude" && customToolNames.size > 0) {
+    toolBridgePollTimer = setInterval(() => {
+      void checkToolBridgeSentinel(sessionId, sandboxName, provider, secrets, trace).catch(
+        (err) => {
+          console.warn(`[driver] tool bridge sentinel check failed:`, err);
+        }
+      );
+    }, 1e3);
+  }
   try {
     const reader = exec.stdout.getReader();
     const decoder = new TextDecoder();
@@ -504,6 +523,8 @@ ${turnBuild.stdin}`;
     }
   } finally {
     if (permissionPollTimer) clearInterval(permissionPollTimer);
+    if (toolBridgePollTimer) clearInterval(toolBridgePollTimer);
+    getPendingToolBridgeCalls().delete(sessionId);
     runtime.inFlightRuns.delete(sessionId);
   }
   if (aborted) {
@@ -563,7 +584,7 @@ ${turnBuild.stdin}`;
       );
       emit("session.status_idle", { stop_reason: formatStopReason("custom_tool_call", customToolEventIds) }, { at: now });
       updateSessionStatus(sessionId, "idle", "custom_tool_call");
-      const { TOOL_BRIDGE_RESPONSE_PATH, TOOL_BRIDGE_PENDING_PATH } = await import("./backends/claude/tool-bridge.js");
+      const { TOOL_BRIDGE_RESPONSE_PATH: TOOL_BRIDGE_RESPONSE_PATH2, TOOL_BRIDGE_PENDING_PATH: TOOL_BRIDGE_PENDING_PATH2 } = await import("./backends/claude/tool-bridge.js");
       const sprName = getSessionRow(sessionId)?.sandbox_name;
       if (sprName) {
         const responseJson = JSON.stringify({ content: [{ type: "text", text: serverToolResult.text }] });
@@ -572,14 +593,14 @@ ${turnBuild.stdin}`;
         const reentrySecrets = getBySession(sessionId)?.vaultSecrets;
         await providerForReentry.exec(
           sprName,
-          ["bash", "-c", `cat > ${TOOL_BRIDGE_RESPONSE_PATH}`],
+          ["bash", "-c", `cat > ${TOOL_BRIDGE_RESPONSE_PATH2}`],
           { stdin: responseJson, secrets: reentrySecrets }
         ).catch((err) => {
           console.warn(`[driver] failed to write spawn_agent response:`, err);
         });
         await providerForReentry.exec(
           sprName,
-          ["rm", "-f", TOOL_BRIDGE_PENDING_PATH],
+          ["rm", "-f", TOOL_BRIDGE_PENDING_PATH2],
           { secrets: reentrySecrets }
         ).catch(() => {
         });
@@ -772,8 +793,82 @@ async function writePermissionResponse(sessionId, result, denyMessage) {
   }
   getPendingConfirmations().delete(sessionId);
 }
+var pendingToolBridgeCalls = /* @__PURE__ */ new Set();
+function getPendingToolBridgeCalls() {
+  return pendingToolBridgeCalls;
+}
+async function checkToolBridgeSentinel(sessionId, sandboxName, provider, secrets, trace) {
+  if (pendingToolBridgeCalls.has(sessionId)) return;
+  try {
+    const result = await provider.exec(
+      sandboxName,
+      ["test", "-f", TOOL_BRIDGE_PENDING_PATH],
+      { secrets }
+    );
+    if (result.exit_code !== 0) return;
+  } catch {
+    return;
+  }
+  let request;
+  try {
+    const result = await provider.exec(
+      sandboxName,
+      ["cat", TOOL_BRIDGE_REQUEST_PATH],
+      { secrets }
+    );
+    const clean = result.stdout.replace(/[\x00-\x08\x0B\x0C\x0E-\x1F]/g, "");
+    request = JSON.parse(clean);
+  } catch (err) {
+    console.warn(`[driver] failed to read tool bridge request for ${sessionId}:`, err);
+    return;
+  }
+  pendingToolBridgeCalls.add(sessionId);
+  console.log(`[driver] ${sessionId} custom tool call: ${request.name} (${request.tool_use_id})`);
+  appendEvent(sessionId, {
+    type: "agent.custom_tool_use",
+    payload: {
+      tool_use_id: request.tool_use_id ?? "",
+      name: request.name ?? "unknown",
+      input: request.input ?? {}
+    },
+    origin: "server",
+    processedAt: nowMs(),
+    traceId: trace.trace_id,
+    spanId: trace.span_id,
+    parentSpanId: trace.parent_span_id
+  });
+}
+async function writeToolBridgeResponse(sessionId, content) {
+  const row = getSessionRow(sessionId);
+  if (!row?.sandbox_name) {
+    console.warn(`[driver] no sandbox for session ${sessionId}, cannot write tool bridge response`);
+    return;
+  }
+  const env = getEnvironment(row.environment_id);
+  const provider = await resolveContainerProvider(env?.config?.provider);
+  const bridgeSecrets = getBySession(sessionId)?.vaultSecrets;
+  const response = JSON.stringify({ content });
+  try {
+    await provider.exec(
+      row.sandbox_name,
+      ["sh", "-c", `cat > ${TOOL_BRIDGE_RESPONSE_PATH}`],
+      { stdin: response, secrets: bridgeSecrets }
+    );
+    await provider.exec(
+      row.sandbox_name,
+      ["rm", "-f", TOOL_BRIDGE_PENDING_PATH],
+      { secrets: bridgeSecrets }
+    );
+    console.log(`[driver] ${sessionId} tool bridge response written`);
+  } catch (err) {
+    console.warn(`[driver] failed to write tool bridge response for ${sessionId}:`, err);
+  }
+  pendingToolBridgeCalls.delete(sessionId);
+}
 
 export {
   runTurn,
-  writePermissionResponse
+  writePermissionResponse,
+  getPendingToolBridgeCalls,
+  writeToolBridgeResponse
 };

package/dist/{chunk-KD4GS64M.js → chunk-LLYP77OL.js}

@@ -6,7 +6,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-R3NRSPRU.js";
+} from "./chunk-ESXH27JB.js";
 import {
   createVault,
   deleteEntry,

package/dist/{chunk-VGEBUTM5.js → chunk-LMHXLYUV.js}

@@ -1,7 +1,7 @@
 import {
   jsonOk,
   routeWrap
-} from "./chunk-R3NRSPRU.js";
+} from "./chunk-ESXH27JB.js";
 import {
   readSetting,
   writeSetting

package/dist/{chunk-OGARYKIG.js → chunk-LYTHR3HC.js}

@@ -1,6 +1,6 @@
 import {
   routeWrap
-} from "./chunk-R3NRSPRU.js";
+} from "./chunk-ESXH27JB.js";
 import {
   ApiError
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-OLZ2KIXD.js → chunk-NX6SIEN6.js}

@@ -1,6 +1,6 @@
 import {
   markStopping
-} from "./chunk-KMBQ5U5W.js";
+} from "./chunk-FJAWIVSD.js";
 import {
   closeDb,
   init_client,

package/dist/{chunk-DMFY65GN.js → chunk-O3Z7JWR7.js}

@@ -8,7 +8,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-R3NRSPRU.js";
+} from "./chunk-ESXH27JB.js";
 import {
   badRequest
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-SP2TOQZF.js → chunk-OA3CLTYY.js}

@@ -18,7 +18,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-R3NRSPRU.js";
+} from "./chunk-ESXH27JB.js";
 import {
   getDb,
   init_client

package/dist/{chunk-4EXGAKTK.js → chunk-OC2RYYTW.js}

@@ -6,7 +6,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-R3NRSPRU.js";
+} from "./chunk-ESXH27JB.js";
 import {
   forwardToAnthropic,
   validateAnthropicProxy
@@ -26,7 +26,7 @@ import {
 } from "./chunk-JEI7I3EH.js";
 import {
   resolveBackend
-} from "./chunk-QAGHVCOK.js";
+} from "./chunk-KOGG7CSN.js";
 import {
   getDb,
   init_client