@agentstep/agent-sdk 0.4.31 → 0.4.33

package/dist/{chunk-W63RBT7H.js → chunk-3SZ42O5O.js}

@@ -1,21 +1,21 @@
-import {
-  resolveVaultSecrets
-} from "./chunk-AJPZY6EJ.js";
 import {
   dockerProvider
-} from "./chunk-RMZRSYIJ.js";
+} from "./chunk-4XXQAVKE.js";
+import {
+  resolveVaultSecrets
+} from "./chunk-5IGBMS2U.js";
 import {
   appendEvent
-} from "./chunk-MVC2FD32.js";
+} from "./chunk-MHBLVGRF.js";
 import {
   getSession,
   getSessionRow,
   setSessionSandbox
-} from "./chunk-KFORPY7J.js";
+} from "./chunk-3NK6YTA5.js";
 import {
   deleteSprite,
   listSprites
-} from "./chunk-Q3DOTREK.js";
+} from "./chunk-FXLUSECC.js";
 import {
   allSessionSandboxes,
   countInEnv,
@@ -24,20 +24,29 @@ import {
 } from "./chunk-EFOIR7R3.js";
 import {
   resolveContainerProvider
-} from "./chunk-C4II4GGZ.js";
+} from "./chunk-WPK4ZPMG.js";
 import {
   getEnvironment,
-  getEnvironmentRow
-} from "./chunk-QVFRPABA.js";
+  getEnvironmentRow,
+  listEnvironments
+} from "./chunk-X6IQ57SC.js";
+import {
+  addWarm,
+  claimWarm,
+  countInflight,
+  countWarm,
+  decrementInflight,
+  incrementInflight
+} from "./chunk-G7KUVNDY.js";
 import {
   getAgent
-} from "./chunk-P2IGNOJI.js";
+} from "./chunk-ZTH5JRZG.js";
 import {
   resolveBackend
-} from "./chunk-YS5UPMTH.js";
+} from "./chunk-EUIR2ADY.js";
 import {
   getConfig
-} from "./chunk-6YZ5WTLB.js";
+} from "./chunk-V7MTIMPB.js";
 import {
   init_clock,
   nowMs
@@ -48,6 +57,7 @@ import {
 
 // src/containers/lifecycle.ts
 init_clock();
+import { ulid } from "ulid";
 var lcLog = (...args) => {
   if (process.env.DEBUG_LIFECYCLE === "1") console.log(...args);
 };
@@ -94,7 +104,8 @@ async function installSkills(sandboxName, provider, skills, engine) {
   }
 }
 function deriveSandboxName(sessionId) {
-  return `${SANDBOX_NAME_PREFIX}${sessionId.replace(/^sess_/, "").toLowerCase()}`;
+  const tail = sessionId.replace(/^[a-z]+_/, "").toLowerCase();
+  return `${SANDBOX_NAME_PREFIX}${tail}`;
 }
 async function acquireForFirstTurn(sessionId) {
   const row = getSessionRow(sessionId);
@@ -109,7 +120,8 @@ async function acquireForFirstTurn(sessionId) {
       `environment is not ready (state=${env.state})`
     );
   }
-  if (countInEnv(env.id) >= getConfig().maxSandboxesPerEnv) {
+  const config = getConfig();
+  if (countInEnv(env.id) + countWarm(env.id) >= config.maxSandboxesPerEnv) {
     throw new ApiError(503, "server_busy", "env sandbox pool exhausted");
   }
   const agent = getAgent(row.agent_id, row.agent_version);
@@ -128,6 +140,84 @@ async function acquireForFirstTurn(sessionId) {
     }
   }
   const sp = wrapProviderWithSecrets(provider, secrets);
+  const warm = claimWarm(env.id, backend.name, provider.name);
+  if (warm) {
+    lcLog(`[lifecycle] ${sessionId} claimed warm container: ${warm.sandboxName}`);
+    const name2 = warm.sandboxName;
+    try {
+      if (agent.engine === "claude") {
+        const customTools = agent.tools.filter(
+          (t) => t.type === "custom"
+        );
+        const allBridgeTools = [...customTools];
+        if (agent.threads_enabled) {
+          allBridgeTools.push({
+            type: "custom",
+            name: "spawn_agent",
+            description: "Spawn a sub-agent to handle a task. Returns the sub-agent's response.",
+            input_schema: {
+              type: "object",
+              properties: {
+                agent_id: { type: "string", description: "ID of the agent to spawn" },
+                prompt: { type: "string", description: "Task for the sub-agent" }
+              },
+              required: ["agent_id", "prompt"]
+            }
+          });
+        }
+        if (allBridgeTools.length > 0) {
+          const { installToolBridge } = await import("./backends/claude/index.js");
+          await installToolBridge(name2, allBridgeTools, sp);
+        }
+        if (agent.confirmation_mode) {
+          const { installPermissionHook } = await import("./backends/claude/index.js");
+          await installPermissionHook(name2, sp);
+        }
+      }
+      if (agent.skills && agent.skills.length > 0) {
+        lcLog(`[lifecycle] ${sessionId} installing ${agent.skills.length} skill(s) on warm container...`);
+        await installSkills(name2, sp, agent.skills, agent.engine);
+      }
+    } catch (err) {
+      await sp.delete(name2).catch(() => {
+      });
+      throw err;
+    }
+    const { listResources: listSessionResources2 } = await import("./db/session-resources.js");
+    const tableResources2 = listSessionResources2(sessionId);
+    if (tableResources2.length > 0) {
+      const mapped = tableResources2.map((r) => {
+        if (r.type === "file") return { type: "file", file_id: r.file_id, mount_path: r.mount_path };
+        if (r.type === "github_repository") {
+          const checkout = r.checkout;
+          return {
+            type: "github_repository",
+            repository_url: r.url,
+            mount_path: r.mount_path,
+            branch: checkout?.type === "branch" ? checkout.name : void 0,
+            commit: checkout?.type === "commit" ? checkout.name : void 0
+          };
+        }
+        return { type: "uri", uri: r.url, mount_path: r.mount_path };
+      });
+      await provisionResources(name2, mapped, sp);
+    } else {
+      const session = getSession(sessionId);
+      if (session?.resources && session.resources.length > 0) {
+        await provisionResources(name2, session.resources, sp);
+      }
+    }
+    register({
+      sandboxName: name2,
+      envId: env.id,
+      sessionId,
+      createdAt: nowMs(),
+      vaultSecrets: Object.keys(secrets).length > 0 ? secrets : void 0
+    });
+    setSessionSandbox(sessionId, name2);
+    void replenishWarmPool(env.id, backend.name, provider, secrets);
+    return name2;
+  }
   const name = deriveSandboxName(sessionId);
   lcLog(`[lifecycle] ${sessionId} creating container via ${sp.name}...`);
   try {
@@ -234,6 +324,80 @@ async function acquireForFirstTurn(sessionId) {
   setSessionSandbox(sessionId, name);
   return name;
 }
+function effectiveWarmPoolSize(envId) {
+  const cfg = getConfig();
+  const envObj = getEnvironment(envId);
+  return envObj?.config?.warm_pool_size ?? cfg.warmPoolSize;
+}
+async function replenishWarmPool(envId, engine, provider, secrets) {
+  if (!provider.supportsWarmPool) return;
+  const target = effectiveWarmPoolSize(envId);
+  if (target <= 0) return;
+  if (countWarm(envId) + countInflight(envId) >= target) return;
+  const cfg = getConfig();
+  if (countInEnv(envId) + countWarm(envId) + countInflight(envId) >= cfg.maxSandboxesPerEnv) return;
+  incrementInflight(envId);
+  try {
+    const sp = wrapProviderWithSecrets(provider, secrets);
+    const name = `ca-warm-${ulid().toLowerCase()}`;
+    lcLog(`[warm-pool] creating warm container for env=${envId} engine=${engine}: ${name}`);
+    await sp.create({ name });
+    const backend = resolveBackend(engine);
+    await backend.prepareOnSandbox(name, sp);
+    const cfg2 = getConfig();
+    addWarm({
+      sandboxName: name,
+      envId,
+      engine,
+      provider: provider.name,
+      createdAt: nowMs(),
+      expiresAt: nowMs() + cfg2.warmPoolTtlMs,
+      vaultSecrets: Object.keys(secrets).length > 0 ? secrets : void 0
+    });
+    lcLog(`[warm-pool] warm container ready: ${name} (env=${envId})`);
+  } catch (err) {
+    console.warn(`[warm-pool] replenish failed for env=${envId} engine=${engine}:`, err);
+  } finally {
+    decrementInflight(envId);
+  }
+}
+async function fillWarmPools() {
+  const cfg = getConfig();
+  if (cfg.warmPoolSize <= 0) return;
+  const envs = listEnvironments({ includeArchived: false, limit: 100 });
+  const readyEnvs = envs.filter((e) => e.state === "ready");
+  if (readyEnvs.length === 0) return;
+  const CONCURRENCY = 3;
+  let active = 0;
+  let idx = 0;
+  async function processNext() {
+    while (idx < readyEnvs.length) {
+      if (active >= CONCURRENCY) {
+        await new Promise((r) => setTimeout(r, 0));
+        continue;
+      }
+      const env = readyEnvs[idx++];
+      active++;
+      void fillOneEnv(env).finally(() => active--);
+    }
+  }
+  void processNext();
+}
+async function fillOneEnv(env) {
+  const target = effectiveWarmPoolSize(env.id);
+  if (target <= 0) return;
+  try {
+    const provider = await resolveContainerProvider(env.config?.provider);
+    if (!provider.supportsWarmPool) return;
+    const backend = resolveBackend("claude");
+    const needed = target - countWarm(env.id) - countInflight(env.id);
+    for (let i = 0; i < needed; i++) {
+      void replenishWarmPool(env.id, backend.name, provider, {});
+    }
+  } catch (err) {
+    console.warn(`[warm-pool] fillOneEnv failed for env=${env.id}:`, err);
+  }
+}
 async function provisionResources(sandboxName, resources, provider) {
   await provider.exec(sandboxName, ["mkdir", "-p", "/mnt/session/resources", "/mnt/session/uploads", "/mnt/session/outputs"]);
   const MAX_RESOURCE_BYTES = 50 * 1024 * 1024;
@@ -405,6 +569,8 @@ export {
   wrapProviderWithSecrets,
   installSkills,
   acquireForFirstTurn,
+  replenishWarmPool,
+  fillWarmPools,
   provisionResources,
   releaseSession,
   reconcileOrphanSandboxes,

package/dist/chunk-4XXQAVKE.js

@@ -0,0 +1,34 @@
+import {
+  createCliProvider
+} from "./chunk-5ZFOKZGR.js";
+
+// src/providers/docker.ts
+var DEFAULT_IMAGE = process.env.DOCKER_IMAGE ?? "node:22";
+var dockerProvider = Object.assign(
+  createCliProvider({
+    name: "docker",
+    binary: "docker",
+    createSteps: (name) => [
+      ["create", "--name", name, DEFAULT_IMAGE, "sleep", "infinity"],
+      ["start", name]
+    ],
+    deleteArgs: (name) => ["rm", "-f", name],
+    execArgs: (name, argv) => ["exec", "-i", name, ...argv],
+    listArgs: (prefix) => [
+      "ps",
+      "-a",
+      "--filter",
+      `name=${prefix}`,
+      "--format",
+      "{{.Names}}"
+    ],
+    parseList: (stdout) => stdout.trim().split("\n").filter(Boolean),
+    checkCmd: ["version", "--format", "{{.Server.Version}}"],
+    checkFailMsg: (msg) => msg.includes("ENOENT") ? "Docker not installed. Run: brew install --cask docker" : "Docker not running \u2014 launch Docker Desktop"
+  }),
+  { supportsWarmPool: true }
+);
+
+export {
+  dockerProvider
+};

package/dist/{chunk-O5B7GRUK.js → chunk-5EQJOUWM.js}

@@ -4,7 +4,7 @@ import {
 import {
   buildPiAuthEnv,
   validatePiRuntime
-} from "./chunk-S4AYCMMB.js";
+} from "./chunk-RVR6C22M.js";
 import {
   preparePiOnSandbox
 } from "./chunk-QYSDP6V5.js";

package/dist/{chunk-PTYMGYNJ.js → chunk-5F5SHXHX.js}

@@ -1,6 +1,6 @@
 import {
   routeWrap
-} from "./chunk-4MDF5N2L.js";
+} from "./chunk-T4YKZUL6.js";
 import {
   ApiError
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-AJPZY6EJ.js → chunk-5IGBMS2U.js}

@@ -1,6 +1,6 @@
 import {
   listEntries
-} from "./chunk-J37F7PXJ.js";
+} from "./chunk-ZVXIZ2JD.js";
 
 // src/providers/resolve-secrets.ts
 var BLOCKED_ENV_KEYS = /* @__PURE__ */ new Set([

package/dist/{chunk-A7CS7RTM.js → chunk-5YBJAYIH.js}

@@ -15,7 +15,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-4MDF5N2L.js";
+} from "./chunk-T4YKZUL6.js";
 import {
   createApiKey,
   getApiKeyById,
@@ -23,10 +23,10 @@ import {
   listApiKeys,
   revokeApiKey,
   updateApiKeyPermissions
-} from "./chunk-XTZWBXAO.js";
+} from "./chunk-USYY3L7G.js";
 import {
   listSessionsByApiKey
-} from "./chunk-KFORPY7J.js";
+} from "./chunk-3NK6YTA5.js";
 import {
   getDb,
   init_client

package/dist/{chunk-IN5KO2L2.js → chunk-6IYCBW4J.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-6YZ5WTLB.js";
+} from "./chunk-V7MTIMPB.js";
 
 // src/backends/codex/auth.ts
 function buildCodexAuthEnv() {

package/dist/{chunk-BQRKJAOP.js → chunk-6RH4KQJJ.js}

@@ -1,6 +1,6 @@
 import {
   markStopping
-} from "./chunk-WORPHTCS.js";
+} from "./chunk-S6FREUL2.js";
 import {
   closeDb,
   init_client,

package/dist/{chunk-UW4T4TG3.js → chunk-76DKCO5N.js}

@@ -10,7 +10,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-4MDF5N2L.js";
+} from "./chunk-T4YKZUL6.js";
 import {
   archiveTenant,
   createTenant,

package/dist/{chunk-TLH4JLC7.js → chunk-7CD4QT5R.js}

@@ -1,7 +1,7 @@
 import {
   buildClaudeArgs,
   buildClaudeAuthEnv
-} from "./chunk-JJGAQMPS.js";
+} from "./chunk-S7W3KJYH.js";
 import {
   PERMISSION_BRIDGE_DIR,
   PERMISSION_HOOK_SCRIPT_PATH,
@@ -25,7 +25,7 @@ import {
 } from "./chunk-IU457W7Q.js";
 import {
   getConfig
-} from "./chunk-6YZ5WTLB.js";
+} from "./chunk-V7MTIMPB.js";
 
 // src/backends/claude/index.ts
 function buildTurn(input) {

package/dist/{chunk-Y2VQ65PM.js → chunk-7GG3FEK2.js}

@@ -1,16 +1,16 @@
 import {
   createSession
-} from "./chunk-KFORPY7J.js";
+} from "./chunk-3NK6YTA5.js";
 import {
   createEnvironment,
   deleteEnvironment,
   getEnvironment
-} from "./chunk-QVFRPABA.js";
+} from "./chunk-X6IQ57SC.js";
 import {
   archiveAgent,
   createAgent,
   getAgent
-} from "./chunk-P2IGNOJI.js";
+} from "./chunk-ZTH5JRZG.js";
 import {
   getDrizzle,
   init_drizzle

package/dist/{chunk-UZQLLGX4.js → chunk-A75T7PVY.js}

@@ -21,24 +21,24 @@ import {
 } from "./chunk-72BKGVBE.js";
 import {
   loadSessionSecrets
-} from "./chunk-ZKHUJB7A.js";
+} from "./chunk-TPPLYCJF.js";
 import {
   isProxied
-} from "./chunk-VND46TDY.js";
+} from "./chunk-E7DD7F7J.js";
 import {
   acquireForFirstTurn,
   installSkills,
   provisionResources,
   wrapProviderWithSecrets
-} from "./chunk-W63RBT7H.js";
+} from "./chunk-3SZ42O5O.js";
 import {
   BLOCKED_ENV_KEYS,
   resolveVaultSecrets
-} from "./chunk-AJPZY6EJ.js";
+} from "./chunk-5IGBMS2U.js";
 import {
   appendEvent,
   appendEventsBatch
-} from "./chunk-MVC2FD32.js";
+} from "./chunk-MHBLVGRF.js";
 import {
   bumpSessionStats,
   getOutcomeCriteria,
@@ -49,26 +49,26 @@ import {
   setOutcomeCriteria,
   updateSessionMutable,
   updateSessionStatus
-} from "./chunk-KFORPY7J.js";
+} from "./chunk-3NK6YTA5.js";
 import {
   listEvents,
   markUserEventProcessed
-} from "./chunk-NDVC4J3H.js";
+} from "./chunk-TH7WJLZC.js";
 import {
   getBySession
 } from "./chunk-EFOIR7R3.js";
 import {
   resolveContainerProvider
-} from "./chunk-C4II4GGZ.js";
+} from "./chunk-WPK4ZPMG.js";
 import {
   getEnvironment
-} from "./chunk-QVFRPABA.js";
+} from "./chunk-X6IQ57SC.js";
 import {
   getAgent
-} from "./chunk-P2IGNOJI.js";
+} from "./chunk-ZTH5JRZG.js";
 import {
   resolveBackend
-} from "./chunk-YS5UPMTH.js";
+} from "./chunk-EUIR2ADY.js";
 import {
   PERMISSION_BRIDGE_PENDING_PATH,
   PERMISSION_BRIDGE_REQUEST_PATH,
@@ -84,7 +84,7 @@ import {
 } from "./chunk-XBHDQK4Z.js";
 import {
   getConfig
-} from "./chunk-6YZ5WTLB.js";
+} from "./chunk-V7MTIMPB.js";
 import {
   init_clock,
   nowMs

package/dist/{chunk-33OBMYKV.js → chunk-B3I4ELID.js}

@@ -1,7 +1,7 @@
 import {
   jsonOk,
   routeWrap
-} from "./chunk-4MDF5N2L.js";
+} from "./chunk-T4YKZUL6.js";
 
 // src/handlers/whoami.ts
 function handleWhoami(request) {

package/dist/{chunk-XVK7YFZP.js → chunk-C46UG6GQ.js}

@@ -4,7 +4,7 @@ import {
 import {
   getConfig,
   readSetting
-} from "./chunk-6YZ5WTLB.js";
+} from "./chunk-V7MTIMPB.js";
 import {
   __commonJS
 } from "./chunk-2ESYSVXG.js";

package/dist/{chunk-I2SLDKCN.js → chunk-C6AXM3M7.js}

@@ -1,10 +1,10 @@
 import {
   resolveContainerProvider
-} from "./chunk-C4II4GGZ.js";
+} from "./chunk-WPK4ZPMG.js";
 import {
   getEnvironmentRow,
   updateEnvironmentState
-} from "./chunk-QVFRPABA.js";
+} from "./chunk-X6IQ57SC.js";
 import {
   installClaudeWrapper
 } from "./chunk-IU457W7Q.js";

package/dist/{chunk-OLF7H564.js → chunk-CDD7O43R.js}

@@ -6,27 +6,27 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-4MDF5N2L.js";
+} from "./chunk-T4YKZUL6.js";
 import {
   forwardToAnthropic,
   validateAnthropicProxy
-} from "./chunk-MHL3EXDR.js";
+} from "./chunk-JCW3ZRES.js";
 import {
   getProxiedTenantId,
   isProxied,
   markProxied,
   unmarkProxied
-} from "./chunk-VND46TDY.js";
+} from "./chunk-E7DD7F7J.js";
 import {
   archiveAgent,
   createAgent,
   getAgent,
   listAgents,
   updateAgent
-} from "./chunk-P2IGNOJI.js";
+} from "./chunk-ZTH5JRZG.js";
 import {
   resolveBackend
-} from "./chunk-YS5UPMTH.js";
+} from "./chunk-EUIR2ADY.js";
 import {
   getDb,
   init_client

package/dist/{chunk-NJ4JTJJM.js → chunk-CREPPDHX.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-6YZ5WTLB.js";
+} from "./chunk-V7MTIMPB.js";
 
 // src/backends/factory/auth.ts
 function buildFactoryAuthEnv() {

package/dist/{chunk-55SVTKOM.js → chunk-EOCBMN5V.js}

@@ -5,11 +5,11 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-4MDF5N2L.js";
+} from "./chunk-T4YKZUL6.js";
 import {
   getSession,
   listSessions
-} from "./chunk-KFORPY7J.js";
+} from "./chunk-3NK6YTA5.js";
 import {
   getDb,
   init_client

package/dist/{chunk-YS5UPMTH.js → chunk-EUIR2ADY.js}

@@ -1,21 +1,21 @@
 import {
   piBackend
-} from "./chunk-O5B7GRUK.js";
+} from "./chunk-5EQJOUWM.js";
 import {
   opencodeBackend
-} from "./chunk-ZOWT6X6Y.js";
+} from "./chunk-MQQ44IGX.js";
+import {
+  factoryBackend
+} from "./chunk-2GIX4HAT.js";
 import {
   geminiBackend
-} from "./chunk-RKL2NK3V.js";
+} from "./chunk-JZL4L54R.js";
 import {
   codexBackend
-} from "./chunk-JIURGVRG.js";
-import {
-  factoryBackend
-} from "./chunk-TGEDOUUD.js";
+} from "./chunk-2I35VGHX.js";
 import {
   claudeBackend
-} from "./chunk-TLH4JLC7.js";
+} from "./chunk-7CD4QT5R.js";
 
 // src/backends/registry.ts
 var BACKENDS = {

package/dist/{chunk-G6JKWW2S.js → chunk-FESFSQMR.js}

@@ -8,7 +8,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-4MDF5N2L.js";
+} from "./chunk-T4YKZUL6.js";
 import {
   snapshotApiMetrics
 } from "./chunk-D2XITRN6.js";