@agentstep/agent-sdk 0.4.29 → 0.4.31

package/dist/{chunk-UIVEK3MD.js → chunk-M7W3PCFS.js}

@@ -4,7 +4,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-ESXH27JB.js";
+} from "./chunk-4MDF5N2L.js";
 
 // src/handlers/license.ts
 function handleGetLicense(request) {

package/dist/{chunk-T45NOW43.js → chunk-MHL3EXDR.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-EF5QCTEQ.js";
+} from "./chunk-6YZ5WTLB.js";
 import {
   ApiError
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-BMPB7XJH.js → chunk-MVC2FD32.js}

@@ -1,19 +1,19 @@
 import {
   getSession
-} from "./chunk-I5ZA45YL.js";
+} from "./chunk-KFORPY7J.js";
 import {
   appendEvent,
   appendEventsBatch,
   listEvents,
   rowToManagedEvent
-} from "./chunk-O45IQUWS.js";
+} from "./chunk-NDVC4J3H.js";
 import {
   getAgent
-} from "./chunk-JEI7I3EH.js";
+} from "./chunk-P2IGNOJI.js";
 import {
   getDb,
   init_client
-} from "./chunk-5GZEX4HV.js";
+} from "./chunk-6POQAFEC.js";
 
 // src/sessions/bus.ts
 import { EventEmitter } from "events";

package/dist/{chunk-O45IQUWS.js → chunk-NDVC4J3H.js}

@@ -5,10 +5,10 @@ import {
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-SXE7H3VK.js";
+} from "./chunk-R5T4LJSK.js";
 import {
   schema_exports
-} from "./chunk-LHHBOQUR.js";
+} from "./chunk-ZMJ4EP4C.js";
 import {
   init_clock,
   nowMs,
@@ -17,7 +17,7 @@ import {
 import {
   getDb,
   init_client
-} from "./chunk-5GZEX4HV.js";
+} from "./chunk-6POQAFEC.js";
 
 // src/db/events.ts
 init_client();

package/dist/{chunk-Y2KDIPCT.js → chunk-NIW3B4V2.js}

@@ -1,18 +1,18 @@
 import {
   onAfterCommit
-} from "./chunk-BMPB7XJH.js";
+} from "./chunk-MVC2FD32.js";
 import {
   getSessionRow
-} from "./chunk-I5ZA45YL.js";
+} from "./chunk-KFORPY7J.js";
 import {
   listEventsByTrace
-} from "./chunk-O45IQUWS.js";
+} from "./chunk-NDVC4J3H.js";
 import {
   getAgent
-} from "./chunk-JEI7I3EH.js";
+} from "./chunk-P2IGNOJI.js";
 import {
   getConfig
-} from "./chunk-EF5QCTEQ.js";
+} from "./chunk-6YZ5WTLB.js";
 
 // src/observability/otlp.ts
 import { createHash } from "crypto";

package/dist/{chunk-OWP537VU.js → chunk-NJ4JTJJM.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-EF5QCTEQ.js";
+} from "./chunk-6YZ5WTLB.js";
 
 // src/backends/factory/auth.ts
 function buildFactoryAuthEnv() {

package/dist/{chunk-ZNQD65DN.js → chunk-O3XR457F.js}

@@ -1,6 +1,6 @@
 import {
   SUPPORTED_PROVIDERS
-} from "./chunk-ATTHVKNE.js";
+} from "./chunk-UZHSDRAK.js";
 import {
   addUpstreamKey,
   deleteUpstreamKey,
@@ -8,20 +8,20 @@ import {
   enableUpstreamKey,
   getUpstreamKey,
   listUpstreamKeys
-} from "./chunk-BZ6HFTHU.js";
+} from "./chunk-H7UKW666.js";
 import {
   requireGlobalAdmin
 } from "./chunk-23UKWXJH.js";
 import {
   recordAudit
-} from "./chunk-MHQXDTJB.js";
+} from "./chunk-KLN6HPYM.js";
 import {
   requireFeature
 } from "./chunk-2N2KL4KM.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-ESXH27JB.js";
+} from "./chunk-4MDF5N2L.js";
 import {
   badRequest,
   notFound

package/dist/{chunk-I44FSUBC.js → chunk-O5B7GRUK.js}

@@ -4,7 +4,7 @@ import {
 import {
   buildPiAuthEnv,
   validatePiRuntime
-} from "./chunk-TY3HD5I5.js";
+} from "./chunk-S4AYCMMB.js";
 import {
   preparePiOnSandbox
 } from "./chunk-QYSDP6V5.js";

package/dist/{chunk-OC2RYYTW.js → chunk-OLF7H564.js}

@@ -6,31 +6,31 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-ESXH27JB.js";
+} from "./chunk-4MDF5N2L.js";
 import {
   forwardToAnthropic,
   validateAnthropicProxy
-} from "./chunk-T45NOW43.js";
+} from "./chunk-MHL3EXDR.js";
 import {
   getProxiedTenantId,
   isProxied,
   markProxied,
   unmarkProxied
-} from "./chunk-NIOWKTIF.js";
+} from "./chunk-VND46TDY.js";
 import {
   archiveAgent,
   createAgent,
   getAgent,
   listAgents,
   updateAgent
-} from "./chunk-JEI7I3EH.js";
+} from "./chunk-P2IGNOJI.js";
 import {
   resolveBackend
-} from "./chunk-KOGG7CSN.js";
+} from "./chunk-YS5UPMTH.js";
 import {
   getDb,
   init_client
-} from "./chunk-5GZEX4HV.js";
+} from "./chunk-6POQAFEC.js";
 import {
   badRequest,
   conflict,
@@ -216,8 +216,9 @@ function handleListAgents(request) {
     const order = url.searchParams.get("order");
     const includeArchived = url.searchParams.get("include_archived") === "true";
     const cursor = url.searchParams.get("page") ?? void 0;
+    const requestedLimit = limit ? Number(limit) : 20;
     const data = listAgents({
-      limit: limit ? Number(limit) : void 0,
+      limit: requestedLimit,
       order: order ?? void 0,
       includeArchived,
       cursor,
@@ -225,7 +226,9 @@ function handleListAgents(request) {
     });
     return jsonOk({
       data,
-      next_page: data.length > 0 ? data[data.length - 1].id : null
+      has_more: data.length === requestedLimit,
+      first_id: data.length > 0 ? data[0].id : null,
+      last_id: data.length > 0 ? data[data.length - 1].id : null
     });
   });
 }

package/dist/{chunk-OTLXV4RO.js → chunk-OZJG5G7V.js}

@@ -1,17 +1,17 @@
 import {
   listTraces
-} from "./chunk-JK5TPJHH.js";
+} from "./chunk-6GP5IKXE.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-ESXH27JB.js";
+} from "./chunk-4MDF5N2L.js";
 import {
   exportTrace
-} from "./chunk-Y2KDIPCT.js";
+} from "./chunk-NIW3B4V2.js";
 import {
   listEventsByTrace,
   rowToManagedEvent
-} from "./chunk-O45IQUWS.js";
+} from "./chunk-NDVC4J3H.js";
 import {
   badRequest,
   notFound

package/dist/{chunk-JEI7I3EH.js → chunk-P2IGNOJI.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULT_TENANT_ID
-} from "./chunk-JDELTTHV.js";
+} from "./chunk-AR2TM7CR.js";
 import {
   init_ids,
   newId
@@ -8,10 +8,10 @@ import {
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-SXE7H3VK.js";
+} from "./chunk-R5T4LJSK.js";
 import {
   schema_exports
-} from "./chunk-LHHBOQUR.js";
+} from "./chunk-ZMJ4EP4C.js";
 import {
   init_clock,
   nowMs,

package/dist/{chunk-LYTHR3HC.js → chunk-PTYMGYNJ.js}

@@ -1,6 +1,6 @@
 import {
   routeWrap
-} from "./chunk-ESXH27JB.js";
+} from "./chunk-4MDF5N2L.js";
 import {
   ApiError
 } from "./chunk-EZYKRG4W.js";

package/dist/chunk-PVITAFPJ.js

@@ -0,0 +1,212 @@
+import {
+  loadVaultForCaller
+} from "./chunk-BNXUV6NZ.js";
+import {
+  jsonOk,
+  routeWrap
+} from "./chunk-4MDF5N2L.js";
+import {
+  createCredential,
+  deleteCredential,
+  getCredential,
+  listCredentials,
+  updateCredential
+} from "./chunk-L5RW66H5.js";
+import {
+  badRequest,
+  conflict,
+  notFound
+} from "./chunk-EZYKRG4W.js";
+
+// src/handlers/credentials.ts
+import { z } from "zod";
+var TokenEndpointAuthSchema = z.object({
+  type: z.string().min(1),
+  client_secret: z.string().min(1)
+});
+var OAuthRefreshSchema = z.object({
+  token_endpoint: z.string().url(),
+  client_id: z.string().min(1),
+  scope: z.string().optional(),
+  refresh_token: z.string().min(1),
+  token_endpoint_auth: TokenEndpointAuthSchema.optional()
+});
+var StaticBearerAuthSchema = z.object({
+  type: z.literal("static_bearer"),
+  mcp_server_url: z.string().url().optional(),
+  token: z.string().min(1)
+});
+var McpOauthAuthSchema = z.object({
+  type: z.literal("mcp_oauth"),
+  mcp_server_url: z.string().url().optional(),
+  access_token: z.string().min(1),
+  expires_at: z.string().optional(),
+  refresh: OAuthRefreshSchema.optional()
+});
+var CreateCredentialSchema = z.object({
+  display_name: z.string().min(1).max(200),
+  auth: z.discriminatedUnion("type", [StaticBearerAuthSchema, McpOauthAuthSchema]),
+  metadata: z.record(z.string()).optional()
+});
+var UpdateStaticBearerAuthSchema = z.object({
+  type: z.literal("static_bearer").optional(),
+  token: z.string().min(1).optional(),
+  mcp_server_url: z.string().url().nullish()
+});
+var UpdateMcpOauthAuthSchema = z.object({
+  type: z.literal("mcp_oauth").optional(),
+  access_token: z.string().min(1).optional(),
+  expires_at: z.string().nullish(),
+  refresh: OAuthRefreshSchema.optional()
+});
+var UpdateAuthSchema = z.object({
+  type: z.enum(["static_bearer", "mcp_oauth"]).optional(),
+  token: z.string().min(1).optional(),
+  mcp_server_url: z.string().url().nullish(),
+  access_token: z.string().min(1).optional(),
+  expires_at: z.string().nullish(),
+  refresh: OAuthRefreshSchema.optional()
+}).optional();
+var UpdateCredentialSchema = z.object({
+  display_name: z.string().min(1).max(200).optional(),
+  auth: UpdateAuthSchema
+});
+function handleCreateCredential(request, vaultId) {
+  return routeWrap(request, async ({ auth }) => {
+    loadVaultForCaller(auth, vaultId);
+    const body = await request.json();
+    const parsed = CreateCredentialSchema.safeParse(body);
+    if (!parsed.success) throw badRequest(parsed.error.message);
+    const { auth: authData } = parsed.data;
+    try {
+      if (authData.type === "mcp_oauth") {
+        const refreshConfig = authData.refresh ? {
+          token_endpoint: authData.refresh.token_endpoint,
+          client_id: authData.refresh.client_id,
+          scope: authData.refresh.scope,
+          refresh_token: authData.refresh.refresh_token,
+          token_endpoint_auth: authData.refresh.token_endpoint_auth
+        } : null;
+        const cred2 = createCredential({
+          vault_id: vaultId,
+          display_name: parsed.data.display_name,
+          auth_type: "mcp_oauth",
+          token: authData.access_token,
+          mcp_server_url: authData.mcp_server_url ?? null,
+          expires_at: authData.expires_at ?? null,
+          refresh_config: refreshConfig
+        });
+        return jsonOk(cred2, 201);
+      }
+      const cred = createCredential({
+        vault_id: vaultId,
+        display_name: parsed.data.display_name,
+        auth_type: "static_bearer",
+        token: authData.token,
+        mcp_server_url: authData.mcp_server_url ?? null
+      });
+      return jsonOk(cred, 201);
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      if (msg.includes("UNIQUE constraint failed") || msg.includes("SQLITE_CONSTRAINT")) {
+        throw conflict(
+          `Credential "${parsed.data.display_name}" already exists in this vault`
+        );
+      }
+      throw err;
+    }
+  });
+}
+function handleListCredentials(request, vaultId) {
+  return routeWrap(request, async ({ auth, request: req }) => {
+    loadVaultForCaller(auth, vaultId);
+    const url = new URL(req.url);
+    const requestedLimit = Number(url.searchParams.get("limit") || "100");
+    const data = listCredentials(vaultId);
+    return jsonOk({
+      data,
+      has_more: data.length === requestedLimit,
+      first_id: data.length > 0 ? data[0].id : null,
+      last_id: data.length > 0 ? data[data.length - 1].id : null
+    });
+  });
+}
+function handleGetCredential(request, vaultId, credentialId) {
+  return routeWrap(request, async ({ auth }) => {
+    loadVaultForCaller(auth, vaultId);
+    const cred = getCredential(credentialId);
+    if (!cred || cred.vault_id !== vaultId) {
+      throw notFound(`credential not found: ${credentialId}`);
+    }
+    return jsonOk(cred);
+  });
+}
+function handleUpdateCredential(request, vaultId, credentialId) {
+  return routeWrap(request, async ({ auth }) => {
+    loadVaultForCaller(auth, vaultId);
+    const existing = getCredential(credentialId);
+    if (!existing || existing.vault_id !== vaultId) {
+      throw notFound(`credential not found: ${credentialId}`);
+    }
+    const body = await request.json();
+    const parsed = UpdateCredentialSchema.safeParse(body);
+    if (!parsed.success) throw badRequest(parsed.error.message);
+    try {
+      const authData = parsed.data.auth;
+      const isMcpOauth = existing.auth.type === "mcp_oauth" || authData?.type === "mcp_oauth";
+      if (isMcpOauth && authData) {
+        const refreshConfig = authData.refresh ? {
+          token_endpoint: authData.refresh.token_endpoint,
+          client_id: authData.refresh.client_id,
+          scope: authData.refresh.scope,
+          refresh_token: authData.refresh.refresh_token,
+          token_endpoint_auth: authData.refresh.token_endpoint_auth
+        } : void 0;
+        const updated2 = updateCredential(credentialId, {
+          display_name: parsed.data.display_name,
+          auth_type: authData.type,
+          token: authData.access_token,
+          expires_at: authData.expires_at,
+          refresh_config: refreshConfig
+        });
+        if (!updated2) throw notFound(`credential not found: ${credentialId}`);
+        return jsonOk(updated2);
+      }
+      const updated = updateCredential(credentialId, {
+        display_name: parsed.data.display_name,
+        auth_type: authData?.type,
+        token: authData?.token,
+        mcp_server_url: authData?.mcp_server_url
+      });
+      if (!updated) throw notFound(`credential not found: ${credentialId}`);
+      return jsonOk(updated);
+    } catch (err) {
+      if (err instanceof Error && (err.message.includes("UNIQUE constraint failed") || err.message.includes("SQLITE_CONSTRAINT"))) {
+        throw conflict(
+          `Credential "${parsed.data.display_name}" already exists in this vault`
+        );
+      }
+      throw err;
+    }
+  });
+}
+function handleDeleteCredential(request, vaultId, credentialId) {
+  return routeWrap(request, async ({ auth }) => {
+    loadVaultForCaller(auth, vaultId);
+    const existing = getCredential(credentialId);
+    if (!existing || existing.vault_id !== vaultId) {
+      throw notFound(`credential not found: ${credentialId}`);
+    }
+    const deleted = deleteCredential(credentialId);
+    if (!deleted) throw notFound(`credential not found: ${credentialId}`);
+    return jsonOk({ id: credentialId, type: "vault_credential_deleted" });
+  });
+}
+
+export {
+  handleCreateCredential,
+  handleListCredentials,
+  handleGetCredential,
+  handleUpdateCredential,
+  handleDeleteCredential
+};

package/dist/{chunk-YCXELHKG.js → chunk-Q3DOTREK.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-EF5QCTEQ.js";
+} from "./chunk-6YZ5WTLB.js";
 import {
   ApiError
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-NUO56TF7.js → chunk-QVFRPABA.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULT_TENANT_ID
-} from "./chunk-JDELTTHV.js";
+} from "./chunk-AR2TM7CR.js";
 import {
   init_ids,
   newId
@@ -8,10 +8,10 @@ import {
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-SXE7H3VK.js";
+} from "./chunk-R5T4LJSK.js";
 import {
   schema_exports
-} from "./chunk-LHHBOQUR.js";
+} from "./chunk-ZMJ4EP4C.js";
 import {
   init_clock,
   nowMs,

package/dist/{chunk-HGZ6R6ST.js → chunk-R3Q62FVO.js}

@@ -12,15 +12,15 @@ import {
   listMemories,
   listMemoryStores,
   updateMemory
-} from "./chunk-NUINUAXO.js";
+} from "./chunk-LASUEMN6.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-ESXH27JB.js";
+} from "./chunk-4MDF5N2L.js";
 import {
   getDb,
   init_client
-} from "./chunk-5GZEX4HV.js";
+} from "./chunk-6POQAFEC.js";
 import {
   badRequest,
   conflict,
@@ -70,11 +70,17 @@ function handleListMemoryStores(request) {
   return routeWrap(request, async ({ auth, request: req }) => {
     const url = new URL(req.url);
     const agentId = url.searchParams.get("agent_id") ?? void 0;
+    const requestedLimit = Number(url.searchParams.get("limit") || "100");
     const data = listMemoryStores({
       agent_id: agentId,
       tenantFilter: tenantFilter(auth)
     });
-    return jsonOk({ data });
+    return jsonOk({
+      data,
+      has_more: data.length === requestedLimit,
+      first_id: data.length > 0 ? data[0].id : null,
+      last_id: data.length > 0 ? data[data.length - 1].id : null
+    });
   });
 }
 function handleGetMemoryStore(request, id) {
@@ -110,10 +116,17 @@ function handleCreateMemory(request, storeId) {
   });
 }
 function handleListMemories(request, storeId) {
-  return routeWrap(request, async ({ auth }) => {
+  return routeWrap(request, async ({ auth, request: req }) => {
     loadStoreForCaller(auth, storeId);
+    const url = new URL(req.url);
+    const requestedLimit = Number(url.searchParams.get("limit") || "100");
     const data = listMemories(storeId);
-    return jsonOk({ data });
+    return jsonOk({
+      data,
+      has_more: data.length === requestedLimit,
+      first_id: data.length > 0 ? data[0].id : null,
+      last_id: data.length > 0 ? data[data.length - 1].id : null
+    });
   });
 }
 function handleGetMemory(request, storeId, memId) {

package/dist/{chunk-SXE7H3VK.js → chunk-R5T4LJSK.js}

@@ -1,11 +1,11 @@
 import {
   init_schema,
   schema_exports
-} from "./chunk-LHHBOQUR.js";
+} from "./chunk-ZMJ4EP4C.js";
 import {
   getDb,
   init_client
-} from "./chunk-5GZEX4HV.js";
+} from "./chunk-6POQAFEC.js";
 import {
   __esm
 } from "./chunk-2ESYSVXG.js";

package/dist/{chunk-DT57EZQB.js → chunk-RCF2SVUO.js}

@@ -1,59 +1,59 @@
 import {
   enqueueTurn
-} from "./chunk-AQXCXWAZ.js";
+} from "./chunk-ULS4X3UQ.js";
 import {
   runTurn
-} from "./chunk-KZ4AECAK.js";
+} from "./chunk-UZQLLGX4.js";
 import {
   installOtlpExporter
-} from "./chunk-Y2KDIPCT.js";
+} from "./chunk-NIW3B4V2.js";
 import {
   redactAppendInput
-} from "./chunk-UXMCHRGA.js";
+} from "./chunk-GNHRAWOX.js";
 import {
   createApiKey,
   listApiKeys
-} from "./chunk-ADK2TYO4.js";
+} from "./chunk-XTZWBXAO.js";
 import {
   initSentry
 } from "./chunk-3MQ2FWXS.js";
 import {
   installShutdownHandlers
-} from "./chunk-NX6SIEN6.js";
+} from "./chunk-BQRKJAOP.js";
 import {
   runSweep
-} from "./chunk-FJAWIVSD.js";
+} from "./chunk-WORPHTCS.js";
 import {
   reconcileDockerOrphanSandboxes,
   reconcileOrphanSandboxes
-} from "./chunk-XGUSWFDD.js";
+} from "./chunk-W63RBT7H.js";
 import {
   appendEvent,
   installPayloadRedactor
-} from "./chunk-BMPB7XJH.js";
+} from "./chunk-MVC2FD32.js";
 import {
   setSessionSandbox
-} from "./chunk-I5ZA45YL.js";
+} from "./chunk-KFORPY7J.js";
 import {
   readEnvValue,
   upsertEnvLine
 } from "./chunk-YPXI7Q2M.js";
 import {
   getLastUnprocessedUserMessage
-} from "./chunk-O45IQUWS.js";
+} from "./chunk-NDVC4J3H.js";
 import {
   getBySession,
   register
 } from "./chunk-EFOIR7R3.js";
 import {
   resolveContainerProvider
-} from "./chunk-QUJNG4RA.js";
+} from "./chunk-C4II4GGZ.js";
 import {
   getEnvironment
-} from "./chunk-NUO56TF7.js";
+} from "./chunk-QVFRPABA.js";
 import {
   getConfig
-} from "./chunk-EF5QCTEQ.js";
+} from "./chunk-6YZ5WTLB.js";
 import {
   init_clock,
   nowMs
@@ -61,7 +61,7 @@ import {
 import {
   getDb,
   init_client
-} from "./chunk-5GZEX4HV.js";
+} from "./chunk-6POQAFEC.js";
 import {
   getRuntime
 } from "./chunk-UYTSKFGK.js";

package/dist/{chunk-EHCGLMPC.js → chunk-RKL2NK3V.js}

@@ -4,7 +4,7 @@ import {
 import {
   buildGeminiAuthEnv,
   validateGeminiRuntime
-} from "./chunk-MJ5J57UJ.js";
+} from "./chunk-4LKSYF4M.js";
 import {
   prepareGeminiOnSandbox
 } from "./chunk-XG4UIGDH.js";

package/dist/{chunk-TY3HD5I5.js → chunk-S4AYCMMB.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-EF5QCTEQ.js";
+} from "./chunk-6YZ5WTLB.js";
 
 // src/backends/pi/auth.ts
 function buildPiAuthEnv() {

package/dist/{chunk-5D5P37FY.js → chunk-TGEDOUUD.js}

@@ -13,7 +13,7 @@ import {
 import {
   buildFactoryAuthEnv,
   validateFactoryRuntime
-} from "./chunk-OWP537VU.js";
+} from "./chunk-NJ4JTJJM.js";
 import {
   wrapPromptWithSystem
 } from "./chunk-FVBDEOTZ.js";