@agentstep/agent-sdk 0.4.29 → 0.4.31

package/dist/{chunk-4DTL7OKD.js → chunk-A7CS7RTM.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-23UKWXJH.js";
 import {
   recordAudit
-} from "./chunk-MHQXDTJB.js";
+} from "./chunk-KLN6HPYM.js";
 import {
   COMMUNITY_LIMITS,
   hasFeature,
@@ -15,7 +15,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-ESXH27JB.js";
+} from "./chunk-4MDF5N2L.js";
 import {
   createApiKey,
   getApiKeyById,
@@ -23,14 +23,14 @@ import {
   listApiKeys,
   revokeApiKey,
   updateApiKeyPermissions
-} from "./chunk-ADK2TYO4.js";
+} from "./chunk-XTZWBXAO.js";
 import {
   listSessionsByApiKey
-} from "./chunk-I5ZA45YL.js";
+} from "./chunk-KFORPY7J.js";
 import {
   getDb,
   init_client
-} from "./chunk-5GZEX4HV.js";
+} from "./chunk-6POQAFEC.js";
 import {
   badRequest,
   forbidden,

package/dist/{chunk-DO4WVWW7.js → chunk-AJPZY6EJ.js}

@@ -1,6 +1,6 @@
 import {
   listEntries
-} from "./chunk-VIGJQU6V.js";
+} from "./chunk-J37F7PXJ.js";
 
 // src/providers/resolve-secrets.ts
 var BLOCKED_ENV_KEYS = /* @__PURE__ */ new Set([

package/dist/{chunk-JDELTTHV.js → chunk-AR2TM7CR.js}

@@ -10,7 +10,7 @@ import {
 import {
   getDb,
   init_client
-} from "./chunk-5GZEX4HV.js";
+} from "./chunk-6POQAFEC.js";
 
 // src/db/tenants.ts
 init_client();

package/dist/{chunk-YGAHGTVZ.js → chunk-BCUBVYE3.js}

@@ -1,10 +1,10 @@
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-SXE7H3VK.js";
+} from "./chunk-R5T4LJSK.js";
 import {
   schema_exports
-} from "./chunk-LHHBOQUR.js";
+} from "./chunk-ZMJ4EP4C.js";
 import {
   init_clock,
   nowMs
@@ -12,7 +12,7 @@ import {
 import {
   getDb,
   init_client
-} from "./chunk-5GZEX4HV.js";
+} from "./chunk-6POQAFEC.js";
 
 // src/db/sync.ts
 init_drizzle();

package/dist/{chunk-LLYP77OL.js → chunk-BNXUV6NZ.js}

@@ -6,7 +6,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-ESXH27JB.js";
+} from "./chunk-4MDF5N2L.js";
 import {
   createVault,
   deleteEntry,
@@ -16,14 +16,14 @@ import {
   listEntries,
   listVaults,
   setEntry
-} from "./chunk-VIGJQU6V.js";
+} from "./chunk-J37F7PXJ.js";
 import {
   getAgent
-} from "./chunk-JEI7I3EH.js";
+} from "./chunk-P2IGNOJI.js";
 import {
   getDb,
   init_client
-} from "./chunk-5GZEX4HV.js";
+} from "./chunk-6POQAFEC.js";
 import {
   badRequest,
   conflict,
@@ -101,8 +101,14 @@ function handleListVaults(request) {
   return routeWrap(request, async ({ auth, request: req }) => {
     const url = new URL(req.url);
     const agentId = url.searchParams.get("agent_id") ?? void 0;
+    const requestedLimit = Number(url.searchParams.get("limit") || "100");
     const data = listVaults({ agent_id: agentId, tenantFilter: tenantFilter(auth) });
-    return jsonOk({ data });
+    return jsonOk({
+      data,
+      has_more: data.length === requestedLimit,
+      first_id: data.length > 0 ? data[0].id : null,
+      last_id: data.length > 0 ? data[data.length - 1].id : null
+    });
   });
 }
 function handleGetVault(request, id) {

package/dist/{chunk-NX6SIEN6.js → chunk-BQRKJAOP.js}

@@ -1,11 +1,11 @@
 import {
   markStopping
-} from "./chunk-FJAWIVSD.js";
+} from "./chunk-WORPHTCS.js";
 import {
   closeDb,
   init_client,
   syncDb
-} from "./chunk-5GZEX4HV.js";
+} from "./chunk-6POQAFEC.js";
 import {
   getRuntime
 } from "./chunk-UYTSKFGK.js";

package/dist/{chunk-4GC7D5GD.js → chunk-CGKRD37R.js}

@@ -1,11 +1,11 @@
 import {
   BatchError,
   executeBatch
-} from "./chunk-S3SKODVV.js";
+} from "./chunk-Y2VQ65PM.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-ESXH27JB.js";
+} from "./chunk-4MDF5N2L.js";
 import {
   badRequest
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-ZMMDLKR3.js → chunk-CIUFOD65.js}

@@ -1,6 +1,6 @@
 import {
   forwardToAnthropic
-} from "./chunk-T45NOW43.js";
+} from "./chunk-MHL3EXDR.js";
 import {
   isAnthropicApiKey,
   isPassthroughAllowedPath
@@ -8,10 +8,10 @@ import {
 import {
   findByRawKey,
   hydratePermissions
-} from "./chunk-ADK2TYO4.js";
+} from "./chunk-XTZWBXAO.js";
 import {
   getConfig
-} from "./chunk-EF5QCTEQ.js";
+} from "./chunk-6YZ5WTLB.js";
 import {
   unauthorized
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-HMBJOI5F.js → chunk-DKBNLGZO.js}

@@ -1,10 +1,10 @@
 import {
   syncAndCreateSession
-} from "./chunk-ZP5VMV5O.js";
+} from "./chunk-FEXR57M4.js";
 import {
   resolveRemoteSessionId,
   upsertSync
-} from "./chunk-YGAHGTVZ.js";
+} from "./chunk-BCUBVYE3.js";
 import {
   assertResourceTenant,
   tenantFilter
@@ -14,14 +14,14 @@ import {
 } from "./chunk-DC2UMEQH.js";
 import {
   kickoffEnvironmentSetup
-} from "./chunk-HLNTWWAZ.js";
+} from "./chunk-I2SLDKCN.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-ESXH27JB.js";
+} from "./chunk-4MDF5N2L.js";
 import {
   forwardToAnthropic
-} from "./chunk-T45NOW43.js";
+} from "./chunk-MHL3EXDR.js";
 import {
   errors_exports,
   init_errors
@@ -31,18 +31,18 @@ import {
   isProxied,
   markProxied,
   unmarkProxied
-} from "./chunk-NIOWKTIF.js";
+} from "./chunk-VND46TDY.js";
 import {
   dropActor,
   getActor
 } from "./chunk-LAWTTG2E.js";
 import {
   releaseSession
-} from "./chunk-XGUSWFDD.js";
+} from "./chunk-W63RBT7H.js";
 import {
   appendEvent,
   dropEmitter
-} from "./chunk-BMPB7XJH.js";
+} from "./chunk-MVC2FD32.js";
 import {
   archiveSession,
   createSession,
@@ -50,13 +50,13 @@ import {
   listSessions,
   updateSessionMutable,
   updateSessionStatus
-} from "./chunk-I5ZA45YL.js";
+} from "./chunk-KFORPY7J.js";
 import {
   getEnvironment
-} from "./chunk-NUO56TF7.js";
+} from "./chunk-QVFRPABA.js";
 import {
   getAgent
-} from "./chunk-JEI7I3EH.js";
+} from "./chunk-P2IGNOJI.js";
 import {
   init_clock,
   nowMs
@@ -64,7 +64,7 @@ import {
 import {
   getDb,
   init_client
-} from "./chunk-5GZEX4HV.js";
+} from "./chunk-6POQAFEC.js";
 import {
   badRequest,
   notFound
@@ -137,6 +137,8 @@ var CreateSchema = z.object({
   title: z.string().nullish(),
   metadata: z.record(z.unknown()).optional(),
   max_budget_usd: z.number().positive().optional(),
+  max_tokens: z.number().int().positive().optional(),
+  max_wall_duration_ms: z.number().int().positive().optional(),
   resources: z.array(ResourceSchema).optional(),
   vault_ids: z.array(z.string()).optional()
 });
@@ -267,6 +269,8 @@ function handleCreateSession(request) {
           title: data.title ?? null,
           metadata: data.metadata ?? {},
           max_budget_usd: data.max_budget_usd ?? null,
+          max_tokens: data.max_tokens ?? null,
+          max_wall_duration_ms: data.max_wall_duration_ms ?? null,
           resources: data.resources?.length ? data.resources : null,
           vault_ids: data.vault_ids?.length ? data.vault_ids : null,
           api_key_id: auth.keyId,
@@ -326,6 +330,8 @@ function handleCreateSession(request) {
         title: data.title ?? null,
         metadata: data.metadata ?? {},
         max_budget_usd: data.max_budget_usd ?? null,
+        max_tokens: data.max_tokens ?? null,
+        max_wall_duration_ms: data.max_wall_duration_ms ?? null,
         resources: data.resources?.length ? data.resources : null,
         vault_ids: data.vault_ids?.length ? data.vault_ids : null,
         api_key_id: auth.keyId,
@@ -453,12 +459,13 @@ function handleListSessions(request) {
       }
       status = statusRaw;
     }
+    const requestedLimit = limit ? Number(limit) : 50;
     const data = listSessions({
       agent_id: agentId,
       agent_version: agentVersion ? Number(agentVersion) : void 0,
       environmentId,
       status,
-      limit: limit ? Number(limit) : void 0,
+      limit: requestedLimit,
       order: order ?? void 0,
       includeArchived,
       cursor,
@@ -470,7 +477,9 @@ function handleListSessions(request) {
     });
     return jsonOk({
       data,
-      next_page: data.length > 0 ? data[data.length - 1].id : null
+      has_more: data.length === requestedLimit,
+      first_id: data.length > 0 ? data[0].id : null,
+      last_id: data.length > 0 ? data[data.length - 1].id : null
     });
   });
 }

package/dist/{chunk-ZP5VMV5O.js → chunk-FEXR57M4.js}

@@ -2,19 +2,19 @@ import {
   getSyncRow,
   getSyncedRemoteId,
   upsertSync
-} from "./chunk-YGAHGTVZ.js";
+} from "./chunk-BCUBVYE3.js";
 import {
   injectMcpAuthHeaders
 } from "./chunk-SV2B3P6B.js";
 import {
   listEntries
-} from "./chunk-VIGJQU6V.js";
+} from "./chunk-J37F7PXJ.js";
 import {
   getEnvironment
-} from "./chunk-NUO56TF7.js";
+} from "./chunk-QVFRPABA.js";
 import {
   getAgent
-} from "./chunk-JEI7I3EH.js";
+} from "./chunk-P2IGNOJI.js";
 
 // src/sync/anthropic.ts
 import { createHash } from "crypto";

package/dist/{chunk-OONL25NZ.js → chunk-FOOPNRHA.js}

@@ -1,10 +1,10 @@
 import {
   getModels
-} from "./chunk-4WMYJM36.js";
+} from "./chunk-XVK7YFZP.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-ESXH27JB.js";
+} from "./chunk-4MDF5N2L.js";
 
 // src/handlers/models.ts
 function handleListModels(request) {

package/dist/{chunk-EGCAA6KI.js → chunk-G6JKWW2S.js}

@@ -8,14 +8,14 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-ESXH27JB.js";
+} from "./chunk-4MDF5N2L.js";
 import {
   snapshotApiMetrics
 } from "./chunk-D2XITRN6.js";
 import {
   getDb,
   init_client
-} from "./chunk-5GZEX4HV.js";
+} from "./chunk-6POQAFEC.js";
 import {
   badRequest
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-UXMCHRGA.js → chunk-GNHRAWOX.js}

@@ -1,9 +1,9 @@
 import {
   listEntries
-} from "./chunk-VIGJQU6V.js";
+} from "./chunk-J37F7PXJ.js";
 import {
   getConfig
-} from "./chunk-EF5QCTEQ.js";
+} from "./chunk-6YZ5WTLB.js";
 
 // src/observability/redactor.ts
 var REDACTED = "[REDACTED]";

package/dist/{chunk-BZ6HFTHU.js → chunk-H7UKW666.js}

@@ -13,7 +13,7 @@ import {
 import {
   getDb,
   init_client
-} from "./chunk-5GZEX4HV.js";
+} from "./chunk-6POQAFEC.js";
 
 // src/db/upstream_keys.ts
 init_client();

package/dist/{chunk-HLNTWWAZ.js → chunk-I2SLDKCN.js}

@@ -1,10 +1,10 @@
 import {
   resolveContainerProvider
-} from "./chunk-QUJNG4RA.js";
+} from "./chunk-C4II4GGZ.js";
 import {
   getEnvironmentRow,
   updateEnvironmentState
-} from "./chunk-NUO56TF7.js";
+} from "./chunk-QVFRPABA.js";
 import {
   installClaudeWrapper
 } from "./chunk-IU457W7Q.js";

package/dist/{chunk-NWW4246M.js → chunk-IN5KO2L2.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-EF5QCTEQ.js";
+} from "./chunk-6YZ5WTLB.js";
 
 // src/backends/codex/auth.ts
 function buildCodexAuthEnv() {

package/dist/{chunk-VIGJQU6V.js → chunk-J37F7PXJ.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-AIBH32FN.js";
 import {
   DEFAULT_TENANT_ID
-} from "./chunk-JDELTTHV.js";
+} from "./chunk-AR2TM7CR.js";
 import {
   init_ids,
   newId
@@ -12,10 +12,10 @@ import {
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-SXE7H3VK.js";
+} from "./chunk-R5T4LJSK.js";
 import {
   schema_exports
-} from "./chunk-LHHBOQUR.js";
+} from "./chunk-ZMJ4EP4C.js";
 import {
   init_clock,
   nowMs,
@@ -39,7 +39,7 @@ function hydrateVault(row) {
 }
 function createVault(input) {
   const db = getDrizzle();
-  const id = newId("vault");
+  const id = newId("vlt");
   const now = nowMs();
   db.insert(schema_exports.vaults).values({
     id,

package/dist/{chunk-X2CAT5MN.js → chunk-JIURGVRG.js}

@@ -1,7 +1,7 @@
 import {
   buildCodexAuthEnv,
   validateCodexRuntime
-} from "./chunk-NWW4246M.js";
+} from "./chunk-IN5KO2L2.js";
 import {
   prepareCodexOnSandbox
 } from "./chunk-M2LUXIXU.js";

package/dist/{chunk-WFIMX3HG.js → chunk-JJGAQMPS.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-XBHDQK4Z.js";
 import {
   getConfig
-} from "./chunk-EF5QCTEQ.js";
+} from "./chunk-6YZ5WTLB.js";
 
 // src/backends/claude/args.ts
 function buildClaudeArgs(input) {

package/dist/{chunk-B2JLKTBJ.js → chunk-JWSR5TZ3.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-EF5QCTEQ.js";
+} from "./chunk-6YZ5WTLB.js";
 
 // src/backends/opencode/auth.ts
 function buildOpencodeAuthEnv() {

package/dist/{chunk-I5ZA45YL.js → chunk-KFORPY7J.js}

@@ -1,10 +1,10 @@
 import {
   init_session_resources,
   session_resources_exports
-} from "./chunk-R5OZHLAD.js";
+} from "./chunk-2COVNKOK.js";
 import {
   DEFAULT_TENANT_ID
-} from "./chunk-JDELTTHV.js";
+} from "./chunk-AR2TM7CR.js";
 import {
   init_ids,
   newId
@@ -12,10 +12,10 @@ import {
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-SXE7H3VK.js";
+} from "./chunk-R5T4LJSK.js";
 import {
   schema_exports
-} from "./chunk-LHHBOQUR.js";
+} from "./chunk-ZMJ4EP4C.js";
 import {
   init_clock,
   nowMs,
@@ -70,6 +70,8 @@ function hydrateSession(row) {
     title: row.title,
     metadata: JSON.parse(row.metadata_json),
     max_budget_usd: row.max_budget_usd ?? null,
+    max_tokens: row.max_tokens ?? null,
+    max_wall_duration_ms: row.max_wall_duration_ms ?? null,
     outcome: row.outcome_criteria_json ? JSON.parse(row.outcome_criteria_json) : null,
     resources,
     vault_ids: row.vault_ids_json ? JSON.parse(row.vault_ids_json) : [],
@@ -95,7 +97,7 @@ function hydrateSession(row) {
 }
 function createSession(input) {
   const db = getDrizzle();
-  const id = newId("sess");
+  const id = newId("sesn");
   const now = nowMs();
   db.insert(schema_exports.sessions).values({
     id,
@@ -106,6 +108,8 @@ function createSession(input) {
     title: input.title ?? null,
     metadata_json: JSON.stringify(input.metadata ?? {}),
     max_budget_usd: input.max_budget_usd ?? null,
+    max_tokens: input.max_tokens ?? null,
+    max_wall_duration_ms: input.max_wall_duration_ms ?? null,
     resources_json: input.resources ? JSON.stringify(input.resources) : null,
     vault_ids_json: input.vault_ids ? JSON.stringify(input.vault_ids) : null,
     parent_session_id: input.parent_session_id ?? null,

package/dist/{chunk-4RNCKCDV.js → chunk-KLFJTFDB.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-EF5QCTEQ.js";
+} from "./chunk-6YZ5WTLB.js";
 import {
   ApiError
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-MHQXDTJB.js → chunk-KLN6HPYM.js}

@@ -14,7 +14,7 @@ import {
 import {
   getDb,
   init_client
-} from "./chunk-5GZEX4HV.js";
+} from "./chunk-6POQAFEC.js";
 
 // src/db/audit.ts
 init_client();

package/dist/{chunk-RK3QBYXO.js → chunk-KRLVSKID.js}

@@ -4,14 +4,14 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-ESXH27JB.js";
+} from "./chunk-4MDF5N2L.js";
 import {
   getProxiedTenantId
-} from "./chunk-NIOWKTIF.js";
+} from "./chunk-VND46TDY.js";
 import {
   getSession,
   updateSessionResources
-} from "./chunk-I5ZA45YL.js";
+} from "./chunk-KFORPY7J.js";
 import {
   countResources,
   createResource,
@@ -19,11 +19,11 @@ import {
   getResource,
   init_session_resources,
   listResources
-} from "./chunk-R5OZHLAD.js";
+} from "./chunk-2COVNKOK.js";
 import {
   getDb,
   init_client
-} from "./chunk-5GZEX4HV.js";
+} from "./chunk-6POQAFEC.js";
 import {
   badRequest,
   notFound

package/dist/{chunk-ZQGJKPPY.js → chunk-L5RW66H5.js}

@@ -14,20 +14,36 @@ import {
 import {
   getDb,
   init_client
-} from "./chunk-5GZEX4HV.js";
+} from "./chunk-6POQAFEC.js";
 
 // src/db/credentials.ts
 init_client();
 init_ids();
 init_clock();
 function hydrate(row) {
+  if (row.auth_type === "mcp_oauth") {
+    return {
+      type: "vault_credential",
+      id: row.id,
+      vault_id: row.vault_id,
+      display_name: row.display_name,
+      auth: {
+        type: "mcp_oauth",
+        mcp_server_url: row.mcp_server_url,
+        expires_at: row.expires_at
+      },
+      created_at: toIso(row.created_at),
+      updated_at: toIso(row.updated_at),
+      archived_at: null
+    };
+  }
   return {
     type: "vault_credential",
     id: row.id,
     vault_id: row.vault_id,
     display_name: row.display_name,
     auth: {
-      type: row.auth_type,
+      type: "static_bearer",
       mcp_server_url: row.mcp_server_url
     },
     created_at: toIso(row.created_at),
@@ -37,13 +53,14 @@ function hydrate(row) {
 }
 function createCredential(input) {
   const db = getDb();
-  const id = newId("vcrd");
+  const id = newId("cred");
   const now = nowMs();
   const encrypted = encryptValue(input.token);
+  const refreshEncrypted = input.refresh_config ? encryptValue(JSON.stringify(input.refresh_config)) : null;
   db.prepare(
-    `INSERT INTO vault_credentials (id, vault_id, display_name, auth_type, auth_token_encrypted, mcp_server_url, created_at, updated_at)
-     VALUES (?, ?, ?, ?, ?, ?, ?, ?)`
-  ).run(id, input.vault_id, input.display_name, input.auth_type, encrypted, input.mcp_server_url ?? null, now, now);
+    `INSERT INTO vault_credentials (id, vault_id, display_name, auth_type, auth_token_encrypted, mcp_server_url, expires_at, refresh_config_encrypted, created_at, updated_at)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`
+  ).run(id, input.vault_id, input.display_name, input.auth_type, encrypted, input.mcp_server_url ?? null, input.expires_at ?? null, refreshEncrypted, now, now);
   return getCredential(id);
 }
 function getCredential(id) {
@@ -93,6 +110,14 @@ function updateCredential(id, input) {
     parts.push("mcp_server_url = ?");
     args.push(input.mcp_server_url);
   }
+  if (input.expires_at !== void 0) {
+    parts.push("expires_at = ?");
+    args.push(input.expires_at);
+  }
+  if (input.refresh_config !== void 0) {
+    parts.push("refresh_config_encrypted = ?");
+    args.push(input.refresh_config ? encryptValue(JSON.stringify(input.refresh_config)) : null);
+  }
   db.prepare(`UPDATE vault_credentials SET ${parts.join(", ")} WHERE id = ?`).run(...args, id);
   return getCredential(id);
 }

package/dist/{chunk-NUINUAXO.js → chunk-LASUEMN6.js}

@@ -5,10 +5,10 @@ import {
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-SXE7H3VK.js";
+} from "./chunk-R5T4LJSK.js";
 import {
   schema_exports
-} from "./chunk-LHHBOQUR.js";
+} from "./chunk-ZMJ4EP4C.js";
 import {
   init_clock,
   nowMs,
@@ -47,7 +47,7 @@ function sha256(content) {
 }
 function createMemoryStore(input) {
   const db = getDrizzle();
-  const id = newId("ms");
+  const id = newId("memstore");
   const now = nowMs();
   db.insert(schema_exports.memoryStores).values({
     id,

package/dist/{chunk-AMWWPUSK.js → chunk-LHQD4KLV.js}

@@ -1,6 +1,6 @@
 import {
   readSetting
-} from "./chunk-EF5QCTEQ.js";
+} from "./chunk-6YZ5WTLB.js";
 
 // src/lib/skills-cache.ts
 var DEFAULT_FEED_URL = "https://www.agentstep.com/v1/skills/feed";