@agentstep/agent-sdk 0.4.31 → 0.4.32

package/dist/{chunk-UW4T4TG3.js → chunk-QBMPITYC.js}

@@ -10,7 +10,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-4MDF5N2L.js";
+} from "./chunk-3K4KIYEZ.js";
 import {
   archiveTenant,
   createTenant,

package/dist/{chunk-33OBMYKV.js → chunk-QEIG7FXY.js}

@@ -1,7 +1,7 @@
 import {
   jsonOk,
   routeWrap
-} from "./chunk-4MDF5N2L.js";
+} from "./chunk-3K4KIYEZ.js";
 
 // src/handlers/whoami.ts
 function handleWhoami(request) {

package/dist/{chunk-MVC2FD32.js → chunk-QHBXWPSO.js}

@@ -1,15 +1,15 @@
 import {
   getSession
-} from "./chunk-KFORPY7J.js";
+} from "./chunk-2CPZFRJJ.js";
 import {
   appendEvent,
   appendEventsBatch,
   listEvents,
   rowToManagedEvent
-} from "./chunk-NDVC4J3H.js";
+} from "./chunk-TH7WJLZC.js";
 import {
   getAgent
-} from "./chunk-P2IGNOJI.js";
+} from "./chunk-ZTH5JRZG.js";
 import {
   getDb,
   init_client

package/dist/{chunk-TLEGXMX7.js → chunk-QO2C2PBW.js}

@@ -1,13 +1,13 @@
 import {
   jsonOk,
   routeWrap
-} from "./chunk-4MDF5N2L.js";
+} from "./chunk-3K4KIYEZ.js";
 import {
   resolveContainerProvider
-} from "./chunk-C4II4GGZ.js";
+} from "./chunk-WPK4ZPMG.js";
 import {
   getConfig
-} from "./chunk-6YZ5WTLB.js";
+} from "./chunk-V7MTIMPB.js";
 
 // src/handlers/providers.ts
 var LOCAL_PROVIDERS = ["docker", "apple-container", "podman"];

package/dist/{chunk-FEXR57M4.js → chunk-R6V363NP.js}

@@ -2,19 +2,19 @@ import {
   getSyncRow,
   getSyncedRemoteId,
   upsertSync
-} from "./chunk-BCUBVYE3.js";
+} from "./chunk-L2RX552S.js";
 import {
   injectMcpAuthHeaders
 } from "./chunk-SV2B3P6B.js";
 import {
   listEntries
-} from "./chunk-J37F7PXJ.js";
+} from "./chunk-ZVXIZ2JD.js";
 import {
   getEnvironment
-} from "./chunk-QVFRPABA.js";
+} from "./chunk-X6IQ57SC.js";
 import {
   getAgent
-} from "./chunk-P2IGNOJI.js";
+} from "./chunk-ZTH5JRZG.js";
 
 // src/sync/anthropic.ts
 import { createHash } from "crypto";

package/dist/{chunk-KRLVSKID.js → chunk-RRASSOJX.js}

@@ -4,14 +4,14 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-4MDF5N2L.js";
+} from "./chunk-3K4KIYEZ.js";
 import {
   getProxiedTenantId
-} from "./chunk-VND46TDY.js";
+} from "./chunk-E7DD7F7J.js";
 import {
   getSession,
   updateSessionResources
-} from "./chunk-KFORPY7J.js";
+} from "./chunk-2CPZFRJJ.js";
 import {
   countResources,
   createResource,
@@ -19,7 +19,7 @@ import {
   getResource,
   init_session_resources,
   listResources
-} from "./chunk-2COVNKOK.js";
+} from "./chunk-5EKQBD2H.js";
 import {
   getDb,
   init_client

package/dist/{chunk-S4AYCMMB.js → chunk-RVR6C22M.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-6YZ5WTLB.js";
+} from "./chunk-V7MTIMPB.js";
 
 // src/backends/pi/auth.ts
 function buildPiAuthEnv() {

package/dist/{chunk-WU52LOGJ.js → chunk-S7HHYBY3.js}

@@ -8,7 +8,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-4MDF5N2L.js";
+} from "./chunk-3K4KIYEZ.js";
 import {
   badRequest
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-JJGAQMPS.js → chunk-S7W3KJYH.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-XBHDQK4Z.js";
 import {
   getConfig
-} from "./chunk-6YZ5WTLB.js";
+} from "./chunk-V7MTIMPB.js";
 
 // src/backends/claude/args.ts
 function buildClaudeArgs(input) {

package/dist/{chunk-CGKRD37R.js → chunk-TIHUJDA6.js}

@@ -1,11 +1,11 @@
 import {
   BatchError,
   executeBatch
-} from "./chunk-Y2VQ65PM.js";
+} from "./chunk-7VVH435L.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-4MDF5N2L.js";
+} from "./chunk-3K4KIYEZ.js";
 import {
   badRequest
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-ZKHUJB7A.js → chunk-TPPLYCJF.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-L5RW66H5.js";
 import {
   listEntries
-} from "./chunk-J37F7PXJ.js";
+} from "./chunk-ZVXIZ2JD.js";
 
 // src/sessions/secrets.ts
 function loadSessionSecrets(vaultIds) {

package/dist/{chunk-PTYMGYNJ.js → chunk-TQYD3NYI.js}

@@ -1,6 +1,6 @@
 import {
   routeWrap
-} from "./chunk-4MDF5N2L.js";
+} from "./chunk-3K4KIYEZ.js";
 import {
   ApiError
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-PVITAFPJ.js → chunk-UJAD2NQ7.js}

@@ -1,10 +1,10 @@
 import {
   loadVaultForCaller
-} from "./chunk-BNXUV6NZ.js";
+} from "./chunk-3NQH2EUI.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-4MDF5N2L.js";
+} from "./chunk-3K4KIYEZ.js";
 import {
   createCredential,
   deleteCredential,

package/dist/{chunk-4LKSYF4M.js → chunk-V2R7RWVY.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-6YZ5WTLB.js";
+} from "./chunk-V7MTIMPB.js";
 
 // src/backends/gemini/auth.ts
 function buildGeminiAuthEnv() {

package/dist/{chunk-6YZ5WTLB.js → chunk-V7MTIMPB.js}

@@ -1,3 +1,7 @@
+import {
+  init_clock,
+  nowMs
+} from "./chunk-HFDLUBWN.js";
 import {
   getDrizzle,
   init_drizzle
@@ -5,10 +9,6 @@ import {
 import {
   schema_exports
 } from "./chunk-ZMJ4EP4C.js";
-import {
-  init_clock,
-  nowMs
-} from "./chunk-HFDLUBWN.js";
 
 // src/config/index.ts
 init_drizzle();
@@ -53,7 +53,9 @@ function loadConfig() {
     ollamaUrl: process.env.OLLAMA_URL || readSetting("ollama_url") || "http://localhost:11434",
     anthropicPassthroughEnabled: parseBool(
       process.env.ANTHROPIC_PASSTHROUGH_ENABLED ?? readSetting("anthropic_passthrough_enabled")
-    )
+    ),
+    warmPoolSize: num(process.env.WARM_POOL_SIZE, 0),
+    warmPoolTtlMs: num(process.env.WARM_POOL_TTL_MS, 3e5)
   };
 }
 function parseBool(v) {

package/dist/{chunk-R3Q62FVO.js → chunk-WCNGMBIE.js}

@@ -12,11 +12,11 @@ import {
   listMemories,
   listMemoryStores,
   updateMemory
-} from "./chunk-LASUEMN6.js";
+} from "./chunk-SUGSHXND.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-4MDF5N2L.js";
+} from "./chunk-3K4KIYEZ.js";
 import {
   getDb,
   init_client

package/dist/{chunk-CIUFOD65.js → chunk-WQARLGBG.js}

@@ -1,6 +1,6 @@
 import {
   forwardToAnthropic
-} from "./chunk-MHL3EXDR.js";
+} from "./chunk-JCW3ZRES.js";
 import {
   isAnthropicApiKey,
   isPassthroughAllowedPath
@@ -8,10 +8,10 @@ import {
 import {
   findByRawKey,
   hydratePermissions
-} from "./chunk-XTZWBXAO.js";
+} from "./chunk-USYY3L7G.js";
 import {
   getConfig
-} from "./chunk-6YZ5WTLB.js";
+} from "./chunk-V7MTIMPB.js";
 import {
   unauthorized
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-W63RBT7H.js → chunk-WQHRP3JL.js}

@@ -1,21 +1,21 @@
-import {
-  resolveVaultSecrets
-} from "./chunk-AJPZY6EJ.js";
 import {
   dockerProvider
-} from "./chunk-RMZRSYIJ.js";
+} from "./chunk-4XXQAVKE.js";
+import {
+  resolveVaultSecrets
+} from "./chunk-5IGBMS2U.js";
 import {
   appendEvent
-} from "./chunk-MVC2FD32.js";
+} from "./chunk-QHBXWPSO.js";
 import {
   getSession,
   getSessionRow,
   setSessionSandbox
-} from "./chunk-KFORPY7J.js";
+} from "./chunk-2CPZFRJJ.js";
 import {
   deleteSprite,
   listSprites
-} from "./chunk-Q3DOTREK.js";
+} from "./chunk-FXLUSECC.js";
 import {
   allSessionSandboxes,
   countInEnv,
@@ -24,20 +24,29 @@ import {
 } from "./chunk-EFOIR7R3.js";
 import {
   resolveContainerProvider
-} from "./chunk-C4II4GGZ.js";
+} from "./chunk-WPK4ZPMG.js";
 import {
   getEnvironment,
-  getEnvironmentRow
-} from "./chunk-QVFRPABA.js";
+  getEnvironmentRow,
+  listEnvironments
+} from "./chunk-X6IQ57SC.js";
+import {
+  addWarm,
+  claimWarm,
+  countInflight,
+  countWarm,
+  decrementInflight,
+  incrementInflight
+} from "./chunk-G7KUVNDY.js";
 import {
   getAgent
-} from "./chunk-P2IGNOJI.js";
+} from "./chunk-ZTH5JRZG.js";
 import {
   resolveBackend
-} from "./chunk-YS5UPMTH.js";
+} from "./chunk-EUIR2ADY.js";
 import {
   getConfig
-} from "./chunk-6YZ5WTLB.js";
+} from "./chunk-V7MTIMPB.js";
 import {
   init_clock,
   nowMs
@@ -48,6 +57,7 @@ import {
 
 // src/containers/lifecycle.ts
 init_clock();
+import { ulid } from "ulid";
 var lcLog = (...args) => {
   if (process.env.DEBUG_LIFECYCLE === "1") console.log(...args);
 };
@@ -94,7 +104,8 @@ async function installSkills(sandboxName, provider, skills, engine) {
   }
 }
 function deriveSandboxName(sessionId) {
-  return `${SANDBOX_NAME_PREFIX}${sessionId.replace(/^sess_/, "").toLowerCase()}`;
+  const tail = sessionId.replace(/^[a-z]+_/, "").toLowerCase();
+  return `${SANDBOX_NAME_PREFIX}${tail}`;
 }
 async function acquireForFirstTurn(sessionId) {
   const row = getSessionRow(sessionId);
@@ -109,7 +120,8 @@ async function acquireForFirstTurn(sessionId) {
       `environment is not ready (state=${env.state})`
     );
   }
-  if (countInEnv(env.id) >= getConfig().maxSandboxesPerEnv) {
+  const config = getConfig();
+  if (countInEnv(env.id) + countWarm(env.id) >= config.maxSandboxesPerEnv) {
     throw new ApiError(503, "server_busy", "env sandbox pool exhausted");
   }
   const agent = getAgent(row.agent_id, row.agent_version);
@@ -128,6 +140,84 @@ async function acquireForFirstTurn(sessionId) {
     }
   }
   const sp = wrapProviderWithSecrets(provider, secrets);
+  const warm = claimWarm(env.id, backend.name, provider.name);
+  if (warm) {
+    lcLog(`[lifecycle] ${sessionId} claimed warm container: ${warm.sandboxName}`);
+    const name2 = warm.sandboxName;
+    try {
+      if (agent.engine === "claude") {
+        const customTools = agent.tools.filter(
+          (t) => t.type === "custom"
+        );
+        const allBridgeTools = [...customTools];
+        if (agent.threads_enabled) {
+          allBridgeTools.push({
+            type: "custom",
+            name: "spawn_agent",
+            description: "Spawn a sub-agent to handle a task. Returns the sub-agent's response.",
+            input_schema: {
+              type: "object",
+              properties: {
+                agent_id: { type: "string", description: "ID of the agent to spawn" },
+                prompt: { type: "string", description: "Task for the sub-agent" }
+              },
+              required: ["agent_id", "prompt"]
+            }
+          });
+        }
+        if (allBridgeTools.length > 0) {
+          const { installToolBridge } = await import("./backends/claude/index.js");
+          await installToolBridge(name2, allBridgeTools, sp);
+        }
+        if (agent.confirmation_mode) {
+          const { installPermissionHook } = await import("./backends/claude/index.js");
+          await installPermissionHook(name2, sp);
+        }
+      }
+      if (agent.skills && agent.skills.length > 0) {
+        lcLog(`[lifecycle] ${sessionId} installing ${agent.skills.length} skill(s) on warm container...`);
+        await installSkills(name2, sp, agent.skills, agent.engine);
+      }
+    } catch (err) {
+      await sp.delete(name2).catch(() => {
+      });
+      throw err;
+    }
+    const { listResources: listSessionResources2 } = await import("./db/session-resources.js");
+    const tableResources2 = listSessionResources2(sessionId);
+    if (tableResources2.length > 0) {
+      const mapped = tableResources2.map((r) => {
+        if (r.type === "file") return { type: "file", file_id: r.file_id, mount_path: r.mount_path };
+        if (r.type === "github_repository") {
+          const checkout = r.checkout;
+          return {
+            type: "github_repository",
+            repository_url: r.url,
+            mount_path: r.mount_path,
+            branch: checkout?.type === "branch" ? checkout.name : void 0,
+            commit: checkout?.type === "commit" ? checkout.name : void 0
+          };
+        }
+        return { type: "uri", uri: r.url, mount_path: r.mount_path };
+      });
+      await provisionResources(name2, mapped, sp);
+    } else {
+      const session = getSession(sessionId);
+      if (session?.resources && session.resources.length > 0) {
+        await provisionResources(name2, session.resources, sp);
+      }
+    }
+    register({
+      sandboxName: name2,
+      envId: env.id,
+      sessionId,
+      createdAt: nowMs(),
+      vaultSecrets: Object.keys(secrets).length > 0 ? secrets : void 0
+    });
+    setSessionSandbox(sessionId, name2);
+    void replenishWarmPool(env.id, backend.name, provider, secrets);
+    return name2;
+  }
   const name = deriveSandboxName(sessionId);
   lcLog(`[lifecycle] ${sessionId} creating container via ${sp.name}...`);
   try {
@@ -234,6 +324,80 @@ async function acquireForFirstTurn(sessionId) {
   setSessionSandbox(sessionId, name);
   return name;
 }
+function effectiveWarmPoolSize(envId) {
+  const cfg = getConfig();
+  const envObj = getEnvironment(envId);
+  return envObj?.config?.warm_pool_size ?? cfg.warmPoolSize;
+}
+async function replenishWarmPool(envId, engine, provider, secrets) {
+  if (!provider.supportsWarmPool) return;
+  const target = effectiveWarmPoolSize(envId);
+  if (target <= 0) return;
+  if (countWarm(envId) + countInflight(envId) >= target) return;
+  const cfg = getConfig();
+  if (countInEnv(envId) + countWarm(envId) + countInflight(envId) >= cfg.maxSandboxesPerEnv) return;
+  incrementInflight(envId);
+  try {
+    const sp = wrapProviderWithSecrets(provider, secrets);
+    const name = `ca-warm-${ulid().toLowerCase()}`;
+    lcLog(`[warm-pool] creating warm container for env=${envId} engine=${engine}: ${name}`);
+    await sp.create({ name });
+    const backend = resolveBackend(engine);
+    await backend.prepareOnSandbox(name, sp);
+    const cfg2 = getConfig();
+    addWarm({
+      sandboxName: name,
+      envId,
+      engine,
+      provider: provider.name,
+      createdAt: nowMs(),
+      expiresAt: nowMs() + cfg2.warmPoolTtlMs,
+      vaultSecrets: Object.keys(secrets).length > 0 ? secrets : void 0
+    });
+    lcLog(`[warm-pool] warm container ready: ${name} (env=${envId})`);
+  } catch (err) {
+    console.warn(`[warm-pool] replenish failed for env=${envId} engine=${engine}:`, err);
+  } finally {
+    decrementInflight(envId);
+  }
+}
+async function fillWarmPools() {
+  const cfg = getConfig();
+  if (cfg.warmPoolSize <= 0) return;
+  const envs = listEnvironments({ includeArchived: false, limit: 100 });
+  const readyEnvs = envs.filter((e) => e.state === "ready");
+  if (readyEnvs.length === 0) return;
+  const CONCURRENCY = 3;
+  let active = 0;
+  let idx = 0;
+  async function processNext() {
+    while (idx < readyEnvs.length) {
+      if (active >= CONCURRENCY) {
+        await new Promise((r) => setTimeout(r, 0));
+        continue;
+      }
+      const env = readyEnvs[idx++];
+      active++;
+      void fillOneEnv(env).finally(() => active--);
+    }
+  }
+  void processNext();
+}
+async function fillOneEnv(env) {
+  const target = effectiveWarmPoolSize(env.id);
+  if (target <= 0) return;
+  try {
+    const provider = await resolveContainerProvider(env.config?.provider);
+    if (!provider.supportsWarmPool) return;
+    const backend = resolveBackend("claude");
+    const needed = target - countWarm(env.id) - countInflight(env.id);
+    for (let i = 0; i < needed; i++) {
+      void replenishWarmPool(env.id, backend.name, provider, {});
+    }
+  } catch (err) {
+    console.warn(`[warm-pool] fillOneEnv failed for env=${env.id}:`, err);
+  }
+}
 async function provisionResources(sandboxName, resources, provider) {
   await provider.exec(sandboxName, ["mkdir", "-p", "/mnt/session/resources", "/mnt/session/uploads", "/mnt/session/outputs"]);
   const MAX_RESOURCE_BYTES = 50 * 1024 * 1024;
@@ -405,6 +569,8 @@ export {
   wrapProviderWithSecrets,
   installSkills,
   acquireForFirstTurn,
+  replenishWarmPool,
+  fillWarmPools,
   provisionResources,
   releaseSession,
   reconcileOrphanSandboxes,

package/dist/{chunk-OZJG5G7V.js → chunk-X7VVDJ6T.js}

@@ -4,14 +4,14 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-4MDF5N2L.js";
+} from "./chunk-3K4KIYEZ.js";
 import {
   exportTrace
-} from "./chunk-NIW3B4V2.js";
+} from "./chunk-DYK2WTYW.js";
 import {
   listEventsByTrace,
   rowToManagedEvent
-} from "./chunk-NDVC4J3H.js";
+} from "./chunk-TH7WJLZC.js";
 import {
   badRequest,
   notFound

package/dist/{chunk-V5XH43NK.js → chunk-XMTKYR64.js}

@@ -1,28 +1,28 @@
 import {
   resolveRemoteSessionId
-} from "./chunk-BCUBVYE3.js";
+} from "./chunk-L2RX552S.js";
 import {
   assertResourceTenant
 } from "./chunk-23UKWXJH.js";
 import {
   authenticateAndIntercept
-} from "./chunk-CIUFOD65.js";
+} from "./chunk-WQARLGBG.js";
 import {
   forwardToAnthropic
-} from "./chunk-MHL3EXDR.js";
+} from "./chunk-JCW3ZRES.js";
 import {
   ensureInitialized
-} from "./chunk-RCF2SVUO.js";
+} from "./chunk-2VED3F37.js";
 import {
   getProxiedTenantId,
   isProxied
-} from "./chunk-VND46TDY.js";
+} from "./chunk-E7DD7F7J.js";
 import {
   subscribe
-} from "./chunk-MVC2FD32.js";
+} from "./chunk-QHBXWPSO.js";
 import {
   getSession
-} from "./chunk-KFORPY7J.js";
+} from "./chunk-2CPZFRJJ.js";
 import {
   getDb,
   init_client

package/dist/{chunk-ZG7FD2KD.js → chunk-YD3T4PBA.js}

@@ -1,11 +1,11 @@
 import {
   jsonOk,
   routeWrap
-} from "./chunk-4MDF5N2L.js";
+} from "./chunk-3K4KIYEZ.js";
 import {
   readSetting,
   writeSetting
-} from "./chunk-6YZ5WTLB.js";
+} from "./chunk-V7MTIMPB.js";
 import {
   badRequest
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-55SVTKOM.js → chunk-YDZ7PCQO.js}

@@ -5,11 +5,11 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-4MDF5N2L.js";
+} from "./chunk-3K4KIYEZ.js";
 import {
   getSession,
   listSessions
-} from "./chunk-KFORPY7J.js";
+} from "./chunk-2CPZFRJJ.js";
 import {
   getDb,
   init_client

package/dist/{chunk-UZHSDRAK.js → chunk-YNOONYPO.js}

@@ -4,13 +4,13 @@ import {
 } from "./chunk-H7UKW666.js";
 import {
   listEntries
-} from "./chunk-J37F7PXJ.js";
+} from "./chunk-ZVXIZ2JD.js";
 import {
   getSession
-} from "./chunk-KFORPY7J.js";
+} from "./chunk-2CPZFRJJ.js";
 import {
   getConfig
-} from "./chunk-6YZ5WTLB.js";
+} from "./chunk-V7MTIMPB.js";
 
 // src/providers/upstream-keys.ts
 var CONSECUTIVE_FAIL_THRESHOLD = 3;

package/dist/{chunk-5H2CQ6L4.js → chunk-YVHFSCAX.js}

@@ -4,11 +4,11 @@ import {
   getSources,
   getStats,
   searchSkills
-} from "./chunk-LHQD4KLV.js";
+} from "./chunk-P3PHXVMA.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-4MDF5N2L.js";
+} from "./chunk-3K4KIYEZ.js";
 
 // src/handlers/skills.ts
 async function handleGetSkillsCatalog(request) {