@agentstep/agent-sdk 0.4.28 → 0.4.30

package/dist/{chunk-WFIMX3HG.js → chunk-EIR2TG5I.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-XBHDQK4Z.js";
 import {
   getConfig
-} from "./chunk-EF5QCTEQ.js";
+} from "./chunk-EFDAVLKN.js";
 
 // src/backends/claude/args.ts
 function buildClaudeArgs(input) {

package/dist/{chunk-F3M4HKEJ.js → chunk-EN3ICYTL.js}

@@ -1,21 +1,21 @@
 import {
   resolveVaultSecrets
-} from "./chunk-DO4WVWW7.js";
+} from "./chunk-IFXD4DH5.js";
 import {
   dockerProvider
 } from "./chunk-RMZRSYIJ.js";
 import {
   appendEvent
-} from "./chunk-BMPB7XJH.js";
+} from "./chunk-TRQX5AIZ.js";
 import {
   getSession,
   getSessionRow,
   setSessionSandbox
-} from "./chunk-I5ZA45YL.js";
+} from "./chunk-QWGJS6V6.js";
 import {
   deleteSprite,
   listSprites
-} from "./chunk-YCXELHKG.js";
+} from "./chunk-REGPK5NG.js";
 import {
   allSessionSandboxes,
   countInEnv,
@@ -24,20 +24,20 @@ import {
 } from "./chunk-EFOIR7R3.js";
 import {
   resolveContainerProvider
-} from "./chunk-QUJNG4RA.js";
+} from "./chunk-C6JEPQ7T.js";
 import {
   getEnvironment,
   getEnvironmentRow
-} from "./chunk-NUO56TF7.js";
+} from "./chunk-S5HVHCAK.js";
 import {
   getAgent
-} from "./chunk-JEI7I3EH.js";
+} from "./chunk-TXUUUO5R.js";
 import {
   resolveBackend
-} from "./chunk-P525BPB2.js";
+} from "./chunk-4B7PQTTS.js";
 import {
   getConfig
-} from "./chunk-EF5QCTEQ.js";
+} from "./chunk-EFDAVLKN.js";
 import {
   init_clock,
   nowMs

package/dist/{chunk-Y2KDIPCT.js → chunk-F3BVYYRX.js}

@@ -1,18 +1,18 @@
 import {
   onAfterCommit
-} from "./chunk-BMPB7XJH.js";
+} from "./chunk-TRQX5AIZ.js";
 import {
   getSessionRow
-} from "./chunk-I5ZA45YL.js";
+} from "./chunk-QWGJS6V6.js";
 import {
   listEventsByTrace
-} from "./chunk-O45IQUWS.js";
+} from "./chunk-5NBZZZKH.js";
 import {
   getAgent
-} from "./chunk-JEI7I3EH.js";
+} from "./chunk-TXUUUO5R.js";
 import {
   getConfig
-} from "./chunk-EF5QCTEQ.js";
+} from "./chunk-EFDAVLKN.js";
 
 // src/observability/otlp.ts
 import { createHash } from "crypto";

package/dist/{chunk-ZMMDLKR3.js → chunk-FGQFNIRI.js}

@@ -1,6 +1,6 @@
 import {
   forwardToAnthropic
-} from "./chunk-T45NOW43.js";
+} from "./chunk-L43UD7PK.js";
 import {
   isAnthropicApiKey,
   isPassthroughAllowedPath
@@ -8,10 +8,10 @@ import {
 import {
   findByRawKey,
   hydratePermissions
-} from "./chunk-ADK2TYO4.js";
+} from "./chunk-WHV4YUQB.js";
 import {
   getConfig
-} from "./chunk-EF5QCTEQ.js";
+} from "./chunk-EFDAVLKN.js";
 import {
   unauthorized
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-DNGLD7VN.js → chunk-FIJTBRZ5.js}

@@ -4,7 +4,7 @@ import {
 import {
   buildOpencodeAuthEnv,
   validateOpencodeRuntime
-} from "./chunk-B2JLKTBJ.js";
+} from "./chunk-VC25NYHW.js";
 import {
   buildOpencodeConfigEnv
 } from "./chunk-Z25I7DRV.js";

package/dist/{chunk-AMWWPUSK.js → chunk-H3O7QBOQ.js}

@@ -1,6 +1,6 @@
 import {
   readSetting
-} from "./chunk-EF5QCTEQ.js";
+} from "./chunk-EFDAVLKN.js";
 
 // src/lib/skills-cache.ts
 var DEFAULT_FEED_URL = "https://www.agentstep.com/v1/skills/feed";

package/dist/{chunk-AYNYP3G3.js → chunk-H62LRJJP.js}

@@ -21,24 +21,24 @@ import {
 } from "./chunk-72BKGVBE.js";
 import {
   loadSessionSecrets
-} from "./chunk-M4CTE7EH.js";
+} from "./chunk-HF6HORZZ.js";
 import {
   isProxied
-} from "./chunk-NIOWKTIF.js";
+} from "./chunk-NT2AI5IE.js";
 import {
   acquireForFirstTurn,
   installSkills,
   provisionResources,
   wrapProviderWithSecrets
-} from "./chunk-F3M4HKEJ.js";
+} from "./chunk-EN3ICYTL.js";
 import {
   BLOCKED_ENV_KEYS,
   resolveVaultSecrets
-} from "./chunk-DO4WVWW7.js";
+} from "./chunk-IFXD4DH5.js";
 import {
   appendEvent,
   appendEventsBatch
-} from "./chunk-BMPB7XJH.js";
+} from "./chunk-TRQX5AIZ.js";
 import {
   bumpSessionStats,
   getOutcomeCriteria,
@@ -49,26 +49,26 @@ import {
   setOutcomeCriteria,
   updateSessionMutable,
   updateSessionStatus
-} from "./chunk-I5ZA45YL.js";
+} from "./chunk-QWGJS6V6.js";
 import {
   listEvents,
   markUserEventProcessed
-} from "./chunk-O45IQUWS.js";
+} from "./chunk-5NBZZZKH.js";
 import {
   getBySession
 } from "./chunk-EFOIR7R3.js";
 import {
   resolveContainerProvider
-} from "./chunk-QUJNG4RA.js";
+} from "./chunk-C6JEPQ7T.js";
 import {
   getEnvironment
-} from "./chunk-NUO56TF7.js";
+} from "./chunk-S5HVHCAK.js";
 import {
   getAgent
-} from "./chunk-JEI7I3EH.js";
+} from "./chunk-TXUUUO5R.js";
 import {
   resolveBackend
-} from "./chunk-P525BPB2.js";
+} from "./chunk-4B7PQTTS.js";
 import {
   PERMISSION_BRIDGE_PENDING_PATH,
   PERMISSION_BRIDGE_REQUEST_PATH,
@@ -78,13 +78,13 @@ import {
   TOOL_BRIDGE_PENDING_PATH,
   TOOL_BRIDGE_REQUEST_PATH,
   TOOL_BRIDGE_RESPONSE_PATH
-} from "./chunk-ALVC7G6R.js";
+} from "./chunk-4FDEJHH7.js";
 import {
   resolveToolset
 } from "./chunk-XBHDQK4Z.js";
 import {
   getConfig
-} from "./chunk-EF5QCTEQ.js";
+} from "./chunk-EFDAVLKN.js";
 import {
   init_clock,
   nowMs
@@ -101,11 +101,8 @@ import {
 init_errors();
 init_clock();
 function formatStopReason(reason, eventIds) {
-  if (reason === "custom_tool_call" && eventIds?.length) {
-    return { type: "requires_action", event_ids: eventIds };
-  }
   if (reason === "custom_tool_call") {
-    return { type: "requires_action" };
+    return { type: "requires_action", event_ids: eventIds ?? [] };
   }
   return { type: reason };
 }
@@ -277,6 +274,9 @@ async function runTurn(sessionId, inputs, _depth = 0, parentTrace) {
   if (freshSession?.resources && freshSession.resources.length > 0) {
     turnBuild.env.RESOURCES_DIR = "/tmp/resources";
   }
+  if (agent.engine === "claude" && !turnBuild.env.MCP_TIMEOUT) {
+    turnBuild.env.MCP_TIMEOUT = "30000";
+  }
   const MCP_KEY_RE = /^MCP_(AUTH|HEADER)_/i;
   for (const entry of vaultEntries) {
     if (!BLOCKED_ENV_KEYS.has(entry.key) && !MCP_KEY_RE.test(entry.key)) {
@@ -813,7 +813,8 @@ async function checkToolBridgeSentinel(sessionId, sandboxName, provider, secrets
       ["cat", TOOL_BRIDGE_REQUEST_PATH],
       { secrets }
     );
-    request = JSON.parse(result.stdout);
+    const clean = result.stdout.replace(/[\x00-\x08\x0B\x0C\x0E-\x1F]/g, "");
+    request = JSON.parse(clean);
   } catch (err) {
     console.warn(`[driver] failed to read tool bridge request for ${sessionId}:`, err);
     return;

package/dist/{chunk-FRDJNX6Z.js → chunk-H7Z4BWRI.js}

@@ -4,11 +4,11 @@ import {
   getSources,
   getStats,
   searchSkills
-} from "./chunk-AMWWPUSK.js";
+} from "./chunk-H3O7QBOQ.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-3QIIJADA.js";
+} from "./chunk-LOAFGJWC.js";
 
 // src/handlers/skills.ts
 async function handleGetSkillsCatalog(request) {

package/dist/{chunk-I44FSUBC.js → chunk-HA5FIXGQ.js}

@@ -4,7 +4,7 @@ import {
 import {
   buildPiAuthEnv,
   validatePiRuntime
-} from "./chunk-TY3HD5I5.js";
+} from "./chunk-2DRBKIGQ.js";
 import {
   preparePiOnSandbox
 } from "./chunk-QYSDP6V5.js";

package/dist/{chunk-NWW4246M.js → chunk-HEDK5J34.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-EF5QCTEQ.js";
+} from "./chunk-EFDAVLKN.js";
 
 // src/backends/codex/auth.ts
 function buildCodexAuthEnv() {

package/dist/{chunk-M4CTE7EH.js → chunk-HF6HORZZ.js}

@@ -1,9 +1,9 @@
 import {
   listCredentialsWithTokens
-} from "./chunk-ZQGJKPPY.js";
+} from "./chunk-JSKZXF5J.js";
 import {
   listEntries
-} from "./chunk-VIGJQU6V.js";
+} from "./chunk-7GNSB22P.js";
 
 // src/sessions/secrets.ts
 function loadSessionSecrets(vaultIds) {

package/dist/{chunk-34BN2SJC.js → chunk-HFBC2TOG.js}

@@ -8,14 +8,14 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-3QIIJADA.js";
+} from "./chunk-LOAFGJWC.js";
 import {
   snapshotApiMetrics
 } from "./chunk-D2XITRN6.js";
 import {
   getDb,
   init_client
-} from "./chunk-5GZEX4HV.js";
+} from "./chunk-4C7XJI2V.js";
 import {
   badRequest
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-DO4WVWW7.js → chunk-IFXD4DH5.js}

@@ -1,6 +1,6 @@
 import {
   listEntries
-} from "./chunk-VIGJQU6V.js";
+} from "./chunk-7GNSB22P.js";
 
 // src/providers/resolve-secrets.ts
 var BLOCKED_ENV_KEYS = /* @__PURE__ */ new Set([

package/dist/{chunk-ATTHVKNE.js → chunk-JN3G4Y4L.js}

@@ -1,16 +1,16 @@
 import {
   disableUpstreamKey,
   selectNextUpstreamKey
-} from "./chunk-BZ6HFTHU.js";
+} from "./chunk-YGTC5UP5.js";
 import {
   listEntries
-} from "./chunk-VIGJQU6V.js";
+} from "./chunk-7GNSB22P.js";
 import {
   getSession
-} from "./chunk-I5ZA45YL.js";
+} from "./chunk-QWGJS6V6.js";
 import {
   getConfig
-} from "./chunk-EF5QCTEQ.js";
+} from "./chunk-EFDAVLKN.js";
 
 // src/providers/upstream-keys.ts
 var CONSECUTIVE_FAIL_THRESHOLD = 3;

package/dist/{chunk-ZQGJKPPY.js → chunk-JSKZXF5J.js}

@@ -14,20 +14,36 @@ import {
 import {
   getDb,
   init_client
-} from "./chunk-5GZEX4HV.js";
+} from "./chunk-4C7XJI2V.js";
 
 // src/db/credentials.ts
 init_client();
 init_ids();
 init_clock();
 function hydrate(row) {
+  if (row.auth_type === "mcp_oauth") {
+    return {
+      type: "vault_credential",
+      id: row.id,
+      vault_id: row.vault_id,
+      display_name: row.display_name,
+      auth: {
+        type: "mcp_oauth",
+        mcp_server_url: row.mcp_server_url,
+        expires_at: row.expires_at
+      },
+      created_at: toIso(row.created_at),
+      updated_at: toIso(row.updated_at),
+      archived_at: null
+    };
+  }
   return {
     type: "vault_credential",
     id: row.id,
     vault_id: row.vault_id,
     display_name: row.display_name,
     auth: {
-      type: row.auth_type,
+      type: "static_bearer",
       mcp_server_url: row.mcp_server_url
     },
     created_at: toIso(row.created_at),
@@ -37,13 +53,14 @@ function hydrate(row) {
 }
 function createCredential(input) {
   const db = getDb();
-  const id = newId("vcrd");
+  const id = newId("cred");
   const now = nowMs();
   const encrypted = encryptValue(input.token);
+  const refreshEncrypted = input.refresh_config ? encryptValue(JSON.stringify(input.refresh_config)) : null;
   db.prepare(
-    `INSERT INTO vault_credentials (id, vault_id, display_name, auth_type, auth_token_encrypted, mcp_server_url, created_at, updated_at)
-     VALUES (?, ?, ?, ?, ?, ?, ?, ?)`
-  ).run(id, input.vault_id, input.display_name, input.auth_type, encrypted, input.mcp_server_url ?? null, now, now);
+    `INSERT INTO vault_credentials (id, vault_id, display_name, auth_type, auth_token_encrypted, mcp_server_url, expires_at, refresh_config_encrypted, created_at, updated_at)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`
+  ).run(id, input.vault_id, input.display_name, input.auth_type, encrypted, input.mcp_server_url ?? null, input.expires_at ?? null, refreshEncrypted, now, now);
   return getCredential(id);
 }
 function getCredential(id) {
@@ -93,6 +110,14 @@ function updateCredential(id, input) {
     parts.push("mcp_server_url = ?");
     args.push(input.mcp_server_url);
   }
+  if (input.expires_at !== void 0) {
+    parts.push("expires_at = ?");
+    args.push(input.expires_at);
+  }
+  if (input.refresh_config !== void 0) {
+    parts.push("refresh_config_encrypted = ?");
+    args.push(input.refresh_config ? encryptValue(JSON.stringify(input.refresh_config)) : null);
+  }
   db.prepare(`UPDATE vault_credentials SET ${parts.join(", ")} WHERE id = ?`).run(...args, id);
   return getCredential(id);
 }

package/dist/{chunk-Y2J7CAME.js → chunk-JYUJQHPR.js}

@@ -1,13 +1,13 @@
 import {
   jsonOk,
   routeWrap
-} from "./chunk-3QIIJADA.js";
+} from "./chunk-LOAFGJWC.js";
 import {
   resolveContainerProvider
-} from "./chunk-QUJNG4RA.js";
+} from "./chunk-C6JEPQ7T.js";
 import {
   getConfig
-} from "./chunk-EF5QCTEQ.js";
+} from "./chunk-EFDAVLKN.js";
 
 // src/handlers/providers.ts
 var LOCAL_PROVIDERS = ["docker", "apple-container", "podman"];

package/dist/{chunk-HLNTWWAZ.js → chunk-KA33M67F.js}

@@ -1,10 +1,10 @@
 import {
   resolveContainerProvider
-} from "./chunk-QUJNG4RA.js";
+} from "./chunk-C6JEPQ7T.js";
 import {
   getEnvironmentRow,
   updateEnvironmentState
-} from "./chunk-NUO56TF7.js";
+} from "./chunk-S5HVHCAK.js";
 import {
   installClaudeWrapper
 } from "./chunk-IU457W7Q.js";

package/dist/{chunk-T45NOW43.js → chunk-L43UD7PK.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-EF5QCTEQ.js";
+} from "./chunk-EFDAVLKN.js";
 import {
   ApiError
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-3QIIJADA.js → chunk-LOAFGJWC.js}

@@ -4,13 +4,13 @@ import {
 } from "./chunk-D2XITRN6.js";
 import {
   authenticateAndIntercept
-} from "./chunk-ZMMDLKR3.js";
+} from "./chunk-FGQFNIRI.js";
 import {
   checkAndBump
 } from "./chunk-HVUWXUUI.js";
 import {
   ensureInitialized
-} from "./chunk-DWAA3F5Y.js";
+} from "./chunk-LR4TA74O.js";
 import {
   captureException
 } from "./chunk-3MQ2FWXS.js";

package/dist/{chunk-DWAA3F5Y.js → chunk-LR4TA74O.js}

@@ -1,59 +1,59 @@
 import {
   enqueueTurn
-} from "./chunk-AQXCXWAZ.js";
+} from "./chunk-XQEMI2MI.js";
 import {
   runTurn
-} from "./chunk-AYNYP3G3.js";
+} from "./chunk-H62LRJJP.js";
 import {
   installOtlpExporter
-} from "./chunk-Y2KDIPCT.js";
+} from "./chunk-F3BVYYRX.js";
 import {
   redactAppendInput
-} from "./chunk-UXMCHRGA.js";
+} from "./chunk-ULQOJ3WO.js";
 import {
   createApiKey,
   listApiKeys
-} from "./chunk-ADK2TYO4.js";
+} from "./chunk-WHV4YUQB.js";
 import {
   initSentry
 } from "./chunk-3MQ2FWXS.js";
 import {
   installShutdownHandlers
-} from "./chunk-WJUWZKRP.js";
+} from "./chunk-AXISFTHX.js";
 import {
   runSweep
-} from "./chunk-NWFYV2VI.js";
+} from "./chunk-TRGHIMCR.js";
 import {
   reconcileDockerOrphanSandboxes,
   reconcileOrphanSandboxes
-} from "./chunk-F3M4HKEJ.js";
+} from "./chunk-EN3ICYTL.js";
 import {
   appendEvent,
   installPayloadRedactor
-} from "./chunk-BMPB7XJH.js";
+} from "./chunk-TRQX5AIZ.js";
 import {
   setSessionSandbox
-} from "./chunk-I5ZA45YL.js";
+} from "./chunk-QWGJS6V6.js";
 import {
   readEnvValue,
   upsertEnvLine
 } from "./chunk-YPXI7Q2M.js";
 import {
   getLastUnprocessedUserMessage
-} from "./chunk-O45IQUWS.js";
+} from "./chunk-5NBZZZKH.js";
 import {
   getBySession,
   register
 } from "./chunk-EFOIR7R3.js";
 import {
   resolveContainerProvider
-} from "./chunk-QUJNG4RA.js";
+} from "./chunk-C6JEPQ7T.js";
 import {
   getEnvironment
-} from "./chunk-NUO56TF7.js";
+} from "./chunk-S5HVHCAK.js";
 import {
   getConfig
-} from "./chunk-EF5QCTEQ.js";
+} from "./chunk-EFDAVLKN.js";
 import {
   init_clock,
   nowMs
@@ -61,7 +61,7 @@ import {
 import {
   getDb,
   init_client
-} from "./chunk-5GZEX4HV.js";
+} from "./chunk-4C7XJI2V.js";
 import {
   getRuntime
 } from "./chunk-UYTSKFGK.js";

package/dist/{chunk-MJ5J57UJ.js → chunk-M36DF445.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-EF5QCTEQ.js";
+} from "./chunk-EFDAVLKN.js";
 
 // src/backends/gemini/auth.ts
 function buildGeminiAuthEnv() {

package/dist/{chunk-MHQXDTJB.js → chunk-NC4FHDIP.js}

@@ -14,7 +14,7 @@ import {
 import {
   getDb,
   init_client
-} from "./chunk-5GZEX4HV.js";
+} from "./chunk-4C7XJI2V.js";
 
 // src/db/audit.ts
 init_client();

package/dist/{chunk-NIOWKTIF.js → chunk-NT2AI5IE.js}

@@ -1,7 +1,7 @@
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-SXE7H3VK.js";
+} from "./chunk-SLAOS6JN.js";
 import {
   schema_exports
 } from "./chunk-LHHBOQUR.js";

package/dist/{chunk-5D5P37FY.js → chunk-NZATVUV2.js}

@@ -13,7 +13,7 @@ import {
 import {
   buildFactoryAuthEnv,
   validateFactoryRuntime
-} from "./chunk-OWP537VU.js";
+} from "./chunk-XTTHH5MF.js";
 import {
   wrapPromptWithSystem
 } from "./chunk-FVBDEOTZ.js";

package/dist/{chunk-ES5VD2ML.js → chunk-PFWTQ43U.js}

@@ -1,6 +1,6 @@
 import {
   routeWrap
-} from "./chunk-3QIIJADA.js";
+} from "./chunk-LOAFGJWC.js";
 import {
   ApiError
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-SVYLMMBI.js → chunk-QV5WI73T.js}

@@ -12,15 +12,15 @@ import {
   listMemories,
   listMemoryStores,
   updateMemory
-} from "./chunk-NUINUAXO.js";
+} from "./chunk-7V277COF.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-3QIIJADA.js";
+} from "./chunk-LOAFGJWC.js";
 import {
   getDb,
   init_client
-} from "./chunk-5GZEX4HV.js";
+} from "./chunk-4C7XJI2V.js";
 import {
   badRequest,
   conflict,
@@ -70,11 +70,17 @@ function handleListMemoryStores(request) {
   return routeWrap(request, async ({ auth, request: req }) => {
     const url = new URL(req.url);
     const agentId = url.searchParams.get("agent_id") ?? void 0;
+    const requestedLimit = Number(url.searchParams.get("limit") || "100");
     const data = listMemoryStores({
       agent_id: agentId,
       tenantFilter: tenantFilter(auth)
     });
-    return jsonOk({ data });
+    return jsonOk({
+      data,
+      has_more: data.length === requestedLimit,
+      first_id: data.length > 0 ? data[0].id : null,
+      last_id: data.length > 0 ? data[data.length - 1].id : null
+    });
   });
 }
 function handleGetMemoryStore(request, id) {
@@ -110,10 +116,17 @@ function handleCreateMemory(request, storeId) {
   });
 }
 function handleListMemories(request, storeId) {
-  return routeWrap(request, async ({ auth }) => {
+  return routeWrap(request, async ({ auth, request: req }) => {
     loadStoreForCaller(auth, storeId);
+    const url = new URL(req.url);
+    const requestedLimit = Number(url.searchParams.get("limit") || "100");
     const data = listMemories(storeId);
-    return jsonOk({ data });
+    return jsonOk({
+      data,
+      has_more: data.length === requestedLimit,
+      first_id: data.length > 0 ? data[0].id : null,
+      last_id: data.length > 0 ? data[data.length - 1].id : null
+    });
   });
 }
 function handleGetMemory(request, storeId, memId) {