@agentstep/agent-sdk 0.4.41 → 0.5.1

package/dist/{chunk-W2NHS4IF.js → chunk-2YIMCZJK.js}

@@ -2,10 +2,10 @@ import {
   reportUpstreamFailure,
   reportUpstreamSuccess,
   resolveAnthropicKey
-} from "./chunk-PIJKJNGB.js";
+} from "./chunk-HZZ6ZLKP.js";
 import {
   resolveRemoteSessionId
-} from "./chunk-L2RX552S.js";
+} from "./chunk-22OUZJAV.js";
 import {
   assertResourceTenant
 } from "./chunk-23UKWXJH.js";
@@ -20,45 +20,46 @@ import {
   listMemoryStores,
   searchMemories,
   updateMemory
-} from "./chunk-SUGSHXND.js";
+} from "./chunk-IEZFRNLC.js";
 import {
   jsonOk,
+  paginatedOk,
   routeWrap
-} from "./chunk-RH4GKU52.js";
+} from "./chunk-T3IGOI6Z.js";
 import {
   forwardToAnthropic
-} from "./chunk-JCW3ZRES.js";
+} from "./chunk-A46RUKGA.js";
 import {
   runTurn,
   writePermissionResponse
-} from "./chunk-DAVYI5H4.js";
+} from "./chunk-T7BHW3CP.js";
 import {
   enqueueTurn
-} from "./chunk-2PPB644A.js";
+} from "./chunk-37C5BNVV.js";
 import {
   getProxiedTenantId,
   isProxied
-} from "./chunk-E7DD7F7J.js";
+} from "./chunk-5U5LRAFJ.js";
 import {
   getActor
 } from "./chunk-LAWTTG2E.js";
 import {
   appendEvent
-} from "./chunk-MHBLVGRF.js";
+} from "./chunk-5MERXOLJ.js";
 import {
   bumpSessionStats,
   getSession,
   getSessionRow,
   setOutcomeCriteria,
   updateSessionMutable
-} from "./chunk-3NK6YTA5.js";
+} from "./chunk-KUWJJD6O.js";
 import {
   listEvents,
   rowToManagedEvent
-} from "./chunk-TH7WJLZC.js";
+} from "./chunk-KGBKIJPF.js";
 import {
   getAgent
-} from "./chunk-ZTH5JRZG.js";
+} from "./chunk-BCIFFAGW.js";
 import {
   init_clock,
   nowMs
@@ -66,7 +67,7 @@ import {
 import {
   getDb,
   init_client
-} from "./chunk-6POQAFEC.js";
+} from "./chunk-W3JMIUHV.js";
 import {
   badRequest,
   notFound
@@ -634,12 +635,7 @@ function handleListEvents(request, sessionId) {
     const afterSeq = Number(url.searchParams.get("after_seq") ?? url.searchParams.get("page") ?? "0");
     const rows = listEvents(sessionId, { limit, order, afterSeq });
     const data = rows.map(rowToManagedEvent);
-    return jsonOk({
-      data,
-      has_more: rows.length === limit,
-      first_id: data.length > 0 ? data[0].id : null,
-      last_id: data.length > 0 ? data[data.length - 1].id : null
-    });
+    return paginatedOk(data, limit);
   });
 }
 

package/dist/{chunk-WCDWL6ED.js → chunk-2YZOIFVN.js}

@@ -54,6 +54,7 @@ function runMigrations(db) {
       template_sandbox TEXT,
       checkpoint_id TEXT,
       created_at INTEGER NOT NULL,
+      updated_at INTEGER NOT NULL DEFAULT 0,
       archived_at INTEGER
     );
 
@@ -459,6 +460,16 @@ function runMigrations(db) {
   if (envCols3.some((c) => c.name === "template_sprite")) {
     db.exec(`ALTER TABLE environments RENAME COLUMN template_sprite TO template_sandbox`);
   }
+  {
+    const cols = db.prepare("PRAGMA table_info(agents)").all();
+    const names = new Set(cols.map((c) => c.name));
+    if (!names.has("description")) {
+      db.exec("ALTER TABLE agents ADD COLUMN description TEXT");
+    }
+    if (!names.has("metadata_json")) {
+      db.exec("ALTER TABLE agents ADD COLUMN metadata_json TEXT NOT NULL DEFAULT '{}'");
+    }
+  }
   const sessColsQuota = db.prepare(`PRAGMA table_info(sessions)`).all();
   if (!sessColsQuota.some((c) => c.name === "max_tokens")) {
     db.exec(`ALTER TABLE sessions ADD COLUMN max_tokens INTEGER DEFAULT NULL`);
@@ -466,6 +477,44 @@ function runMigrations(db) {
   if (!sessColsQuota.some((c) => c.name === "max_wall_duration_ms")) {
     db.exec(`ALTER TABLE sessions ADD COLUMN max_wall_duration_ms INTEGER DEFAULT NULL`);
   }
+  {
+    const cols = db.prepare("PRAGMA table_info(environments)").all();
+    if (!cols.some((c) => c.name === "updated_at")) {
+      db.exec("ALTER TABLE environments ADD COLUMN updated_at INTEGER");
+      db.exec("UPDATE environments SET updated_at = created_at WHERE updated_at IS NULL");
+    }
+  }
+  {
+    const cols = db.prepare("PRAGMA table_info(vaults)").all();
+    const names = new Set(cols.map((c) => c.name));
+    if (!names.has("metadata_json")) {
+      db.exec("ALTER TABLE vaults ADD COLUMN metadata_json TEXT NOT NULL DEFAULT '{}'");
+    }
+    if (!names.has("archived_at")) {
+      db.exec("ALTER TABLE vaults ADD COLUMN archived_at INTEGER");
+    }
+    const agentIdCol = cols.find((c) => c.name === "agent_id");
+    if (agentIdCol && agentIdCol.notnull === 1) {
+      db.exec(`
+        CREATE TABLE vaults_new (
+          id TEXT PRIMARY KEY,
+          agent_id TEXT,
+          name TEXT NOT NULL,
+          metadata_json TEXT NOT NULL DEFAULT '{}',
+          tenant_id TEXT,
+          created_at INTEGER NOT NULL,
+          updated_at INTEGER NOT NULL,
+          archived_at INTEGER
+        );
+        INSERT INTO vaults_new SELECT id, agent_id, name,
+          COALESCE(metadata_json, '{}'), tenant_id, created_at, updated_at,
+          archived_at FROM vaults;
+        DROP TABLE vaults;
+        ALTER TABLE vaults_new RENAME TO vaults;
+      `);
+      db.exec(`CREATE INDEX IF NOT EXISTS idx_vaults_tenant ON vaults(tenant_id)`);
+    }
+  }
 }
 var init_migrations = __esm({
   "src/db/migrations.ts"() {

package/dist/{chunk-2PPB644A.js → chunk-37C5BNVV.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-V7MTIMPB.js";
+} from "./chunk-GQYSSSVA.js";
 import {
   serverBusy
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-RDGOGAQ5.js → chunk-3FLQ7KZP.js}

@@ -1,6 +1,6 @@
 import {
   buildOpenApiDocument
-} from "./chunk-D2TRWKVQ.js";
+} from "./chunk-I2WVMCYN.js";
 
 // src/handlers/openapi.ts
 function originFromRequest(request) {

package/dist/{chunk-2RSL5SO7.js → chunk-3NKK4M23.js}

@@ -1,10 +1,10 @@
 import {
   getModels
-} from "./chunk-C46UG6GQ.js";
+} from "./chunk-CKFJN5XK.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-RH4GKU52.js";
+} from "./chunk-T3IGOI6Z.js";
 
 // src/handlers/models.ts
 function handleListModels(request) {

package/dist/{chunk-CHDQ3HIR.js → chunk-3S4CGFKJ.js}

@@ -1,17 +1,18 @@
 import {
   loadVaultForCaller
-} from "./chunk-ZFJPOQSY.js";
+} from "./chunk-4MKBT3KA.js";
 import {
   jsonOk,
+  paginatedOk,
   routeWrap
-} from "./chunk-RH4GKU52.js";
+} from "./chunk-T3IGOI6Z.js";
 import {
   createCredential,
   deleteCredential,
   getCredential,
   listCredentials,
   updateCredential
-} from "./chunk-L5RW66H5.js";
+} from "./chunk-HVLYE4S5.js";
 import {
   badRequest,
   conflict,
@@ -123,12 +124,7 @@ function handleListCredentials(request, vaultId) {
     const url = new URL(req.url);
     const requestedLimit = Number(url.searchParams.get("limit") || "100");
     const data = listCredentials(vaultId);
-    return jsonOk({
-      data,
-      has_more: data.length === requestedLimit,
-      first_id: data.length > 0 ? data[0].id : null,
-      last_id: data.length > 0 ? data[data.length - 1].id : null
-    });
+    return paginatedOk(data, requestedLimit);
   });
 }
 function handleGetCredential(request, vaultId, credentialId) {

package/dist/{chunk-H7UKW666.js → chunk-445EL6J5.js}

@@ -13,7 +13,7 @@ import {
 import {
   getDb,
   init_client
-} from "./chunk-6POQAFEC.js";
+} from "./chunk-W3JMIUHV.js";
 
 // src/db/upstream_keys.ts
 init_client();

package/dist/{chunk-FP4E3QUS.js → chunk-4LHJJXH3.js}

@@ -8,14 +8,14 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-RH4GKU52.js";
+} from "./chunk-T3IGOI6Z.js";
 import {
   snapshotApiMetrics
 } from "./chunk-D2XITRN6.js";
 import {
   getDb,
   init_client
-} from "./chunk-6POQAFEC.js";
+} from "./chunk-W3JMIUHV.js";
 import {
   badRequest
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-ZFJPOQSY.js → chunk-4MKBT3KA.js}

@@ -5,9 +5,11 @@ import {
 } from "./chunk-23UKWXJH.js";
 import {
   jsonOk,
+  paginatedOk,
   routeWrap
-} from "./chunk-RH4GKU52.js";
+} from "./chunk-T3IGOI6Z.js";
 import {
+  archiveVault,
   createVault,
   deleteEntry,
   deleteVault,
@@ -15,15 +17,16 @@ import {
   getVault,
   listEntries,
   listVaults,
-  setEntry
-} from "./chunk-ZVXIZ2JD.js";
+  setEntry,
+  updateVault
+} from "./chunk-VP527YC5.js";
 import {
   getAgent
-} from "./chunk-ZTH5JRZG.js";
+} from "./chunk-BCIFFAGW.js";
 import {
   getDb,
   init_client
-} from "./chunk-6POQAFEC.js";
+} from "./chunk-W3JMIUHV.js";
 import {
   badRequest,
   conflict,
@@ -54,14 +57,17 @@ function maskValue(value) {
   return `${value.slice(0, 4)}****${value.slice(-2)}`;
 }
 var CreateVaultSchema = z.object({
-  agent_id: z.string().min(1),
+  agent_id: z.string().min(1).optional(),
   name: z.string().min(1).optional(),
   /** Anthropic-compatible alias for `name`. */
   display_name: z.string().min(1).optional(),
+  metadata: z.record(z.string().max(512)).optional(),
   /** v0.5: required for global admin, ignored for tenant users. */
   tenant_id: z.string().optional()
 }).refine((data) => data.name || data.display_name, {
   message: "Either name or display_name is required"
+}).refine((data) => !data.metadata || Object.keys(data.metadata).length <= 16, {
+  message: "metadata must have at most 16 key-value pairs"
 });
 var PutEntrySchema = z.object({
   value: z.string()
@@ -71,30 +77,37 @@ function handleCreateVault(request) {
     const body = await request.json();
     const parsed = CreateVaultSchema.safeParse(body);
     if (!parsed.success) throw badRequest(parsed.error.message);
-    const agentTenantId = getAgentTenantId(parsed.data.agent_id);
-    if (agentTenantId === void 0) {
-      throw notFound(`agent not found: ${parsed.data.agent_id}`);
-    }
-    assertResourceTenant(auth, agentTenantId, `agent not found: ${parsed.data.agent_id}`);
-    const agent = getAgent(parsed.data.agent_id);
-    if (!agent) throw notFound(`agent not found: ${parsed.data.agent_id}`);
-    const createTenantId = resolveCreateTenant(auth, parsed.data.tenant_id);
-    if (createTenantId !== agentTenantId) {
-      throw badRequest(
-        `vault tenant_id must match agent tenant_id (${agentTenantId})`
-      );
+    let createTenantId;
+    if (parsed.data.agent_id) {
+      const agentTenantId = getAgentTenantId(parsed.data.agent_id);
+      if (agentTenantId === void 0) {
+        throw notFound(`agent not found: ${parsed.data.agent_id}`);
+      }
+      assertResourceTenant(auth, agentTenantId, `agent not found: ${parsed.data.agent_id}`);
+      const agent = getAgent(parsed.data.agent_id);
+      if (!agent) throw notFound(`agent not found: ${parsed.data.agent_id}`);
+      createTenantId = resolveCreateTenant(auth, parsed.data.tenant_id);
+      if (createTenantId !== agentTenantId) {
+        throw badRequest(
+          `vault tenant_id must match agent tenant_id (${agentTenantId})`
+        );
+      }
+      const vaultName2 = parsed.data.name ?? parsed.data.display_name;
+      const existing = listVaults({ agent_id: parsed.data.agent_id, tenantFilter: tenantFilter(auth) });
+      if (existing.some((v) => v.name === vaultName2)) {
+        throw conflict(`Vault "${vaultName2}" already exists for this agent`);
+      }
+    } else {
+      createTenantId = resolveCreateTenant(auth, parsed.data.tenant_id);
     }
     const vaultName = parsed.data.name ?? parsed.data.display_name;
-    const existing = listVaults({ agent_id: parsed.data.agent_id, tenantFilter: tenantFilter(auth) });
-    if (existing.some((v) => v.name === vaultName)) {
-      throw conflict(`Vault "${vaultName}" already exists for this agent`);
-    }
     const vault = createVault({
-      agent_id: parsed.data.agent_id,
+      agent_id: parsed.data.agent_id ?? null,
       name: vaultName,
+      metadata: parsed.data.metadata,
       tenant_id: createTenantId
     });
-    return jsonOk({ ...vault, display_name: vault.name }, 201);
+    return jsonOk(vault, 201);
   });
 }
 function handleListVaults(request) {
@@ -103,12 +116,7 @@ function handleListVaults(request) {
     const agentId = url.searchParams.get("agent_id") ?? void 0;
     const requestedLimit = Number(url.searchParams.get("limit") || "100");
     const data = listVaults({ agent_id: agentId, tenantFilter: tenantFilter(auth) });
-    return jsonOk({
-      data,
-      has_more: data.length === requestedLimit,
-      first_id: data.length > 0 ? data[0].id : null,
-      last_id: data.length > 0 ? data[data.length - 1].id : null
-    });
+    return paginatedOk(data, requestedLimit);
   });
 }
 function handleGetVault(request, id) {
@@ -124,6 +132,35 @@ function handleDeleteVault(request, id) {
     return jsonOk({ id, type: "vault_deleted" });
   });
 }
+var UpdateVaultSchema = z.object({
+  display_name: z.string().min(1).max(255).optional(),
+  metadata: z.record(z.string().max(512)).optional()
+}).refine((data) => !data.metadata || Object.keys(data.metadata).length <= 16, {
+  message: "metadata must have at most 16 key-value pairs"
+});
+function handleUpdateVault(request, id) {
+  return routeWrap(request, async ({ auth }) => {
+    loadVaultForCaller(auth, id);
+    const body = await request.json();
+    const parsed = UpdateVaultSchema.safeParse(body);
+    if (!parsed.success) throw badRequest(parsed.error.message);
+    const vault = updateVault(id, {
+      display_name: parsed.data.display_name,
+      metadata: parsed.data.metadata
+    });
+    if (!vault) throw notFound(`vault not found: ${id}`);
+    return jsonOk(vault);
+  });
+}
+function handleArchiveVault(request, id) {
+  return routeWrap(request, async ({ auth }) => {
+    loadVaultForCaller(auth, id);
+    const ok = archiveVault(id);
+    if (!ok) throw notFound(`vault not found: ${id}`);
+    const vault = getVault(id);
+    return jsonOk(vault);
+  });
+}
 function handleListEntries(request, vaultId) {
   return routeWrap(request, async ({ auth }) => {
     loadVaultForCaller(auth, vaultId);
@@ -165,6 +202,8 @@ export {
   handleListVaults,
   handleGetVault,
   handleDeleteVault,
+  handleUpdateVault,
+  handleArchiveVault,
   handleListEntries,
   handleGetEntry,
   handlePutEntry,

package/dist/{chunk-ENGKR2JT.js → chunk-56XDLNEW.js}

@@ -1,6 +1,6 @@
 import {
   routeWrap
-} from "./chunk-RH4GKU52.js";
+} from "./chunk-T3IGOI6Z.js";
 import {
   ApiError
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-Y6SFUNGO.js → chunk-57LAR6EM.js}

@@ -1,6 +1,6 @@
 import {
   SUPPORTED_PROVIDERS
-} from "./chunk-PIJKJNGB.js";
+} from "./chunk-HZZ6ZLKP.js";
 import {
   addUpstreamKey,
   deleteUpstreamKey,
@@ -8,20 +8,20 @@ import {
   enableUpstreamKey,
   getUpstreamKey,
   listUpstreamKeys
-} from "./chunk-H7UKW666.js";
+} from "./chunk-445EL6J5.js";
 import {
   requireGlobalAdmin
 } from "./chunk-23UKWXJH.js";
 import {
   recordAudit
-} from "./chunk-KLN6HPYM.js";
+} from "./chunk-L3IACZ72.js";
 import {
   requireFeature
 } from "./chunk-2N2KL4KM.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-RH4GKU52.js";
+} from "./chunk-T3IGOI6Z.js";
 import {
   badRequest,
   notFound

package/dist/{chunk-JZL4L54R.js → chunk-5M47X54D.js}

@@ -3,11 +3,11 @@ import {
 } from "./chunk-S3JRZFF5.js";
 import {
   buildGeminiArgs
-} from "./chunk-JHGJG2Z2.js";
+} from "./chunk-IBYOMAZ3.js";
 import {
   buildGeminiAuthEnv,
   validateGeminiRuntime
-} from "./chunk-V2R7RWVY.js";
+} from "./chunk-WDACZSRU.js";
 import {
   prepareGeminiOnSandbox
 } from "./chunk-XG4UIGDH.js";

package/dist/{chunk-MHBLVGRF.js → chunk-5MERXOLJ.js}

@@ -1,19 +1,19 @@
 import {
   getSession
-} from "./chunk-3NK6YTA5.js";
+} from "./chunk-KUWJJD6O.js";
 import {
   appendEvent,
   appendEventsBatch,
   listEvents,
   rowToManagedEvent
-} from "./chunk-TH7WJLZC.js";
+} from "./chunk-KGBKIJPF.js";
 import {
   getAgent
-} from "./chunk-ZTH5JRZG.js";
+} from "./chunk-BCIFFAGW.js";
 import {
   getDb,
   init_client
-} from "./chunk-6POQAFEC.js";
+} from "./chunk-W3JMIUHV.js";
 
 // src/sessions/bus.ts
 import { EventEmitter } from "events";

package/dist/{chunk-E7DD7F7J.js → chunk-5U5LRAFJ.js}

@@ -5,10 +5,10 @@ import {
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-R5T4LJSK.js";
+} from "./chunk-PZNAQBHQ.js";
 import {
   schema_exports
-} from "./chunk-ZMJ4EP4C.js";
+} from "./chunk-ILHIHMO3.js";
 
 // src/db/proxy.ts
 init_drizzle();

package/dist/{chunk-MQQ44IGX.js → chunk-63AKPSCV.js}

@@ -1,13 +1,13 @@
 import {
   buildOpencodeArgs
-} from "./chunk-3IV56JJW.js";
+} from "./chunk-P56WU3UT.js";
 import {
   buildOpencodeAuthEnv,
   validateOpencodeRuntime
-} from "./chunk-OGJUSGF7.js";
+} from "./chunk-UMRDMOB6.js";
 import {
   buildOpencodeConfigEnv
-} from "./chunk-Z25I7DRV.js";
+} from "./chunk-V5DH3OAC.js";
 import {
   prepareOpencodeOnSandbox
 } from "./chunk-P7P2NWZD.js";

package/dist/{chunk-T5VRE77P.js → chunk-6KWJASEO.js}

@@ -10,7 +10,7 @@ function buildPiArgs(input) {
     args.push("--session", input.backendSessionId);
   }
   if (input.agent.model) {
-    args.push("--model", input.agent.model);
+    args.push("--model", input.agent.model.id);
   }
   args.push(input.prompt);
   return args;

package/dist/{chunk-EUINGLHA.js → chunk-6RFQCFL2.js}

@@ -1,10 +1,10 @@
 import {
   syncAndCreateSession
-} from "./chunk-DU7LSFQQ.js";
+} from "./chunk-7SY65LWY.js";
 import {
   resolveRemoteSessionId,
   upsertSync
-} from "./chunk-L2RX552S.js";
+} from "./chunk-22OUZJAV.js";
 import {
   assertResourceTenant,
   tenantFilter
@@ -14,14 +14,16 @@ import {
 } from "./chunk-DC2UMEQH.js";
 import {
   kickoffEnvironmentSetup
-} from "./chunk-C6AXM3M7.js";
+} from "./chunk-QJ6QQO6D.js";
 import {
+  decodeCursor,
   jsonOk,
+  paginatedOk,
   routeWrap
-} from "./chunk-RH4GKU52.js";
+} from "./chunk-T3IGOI6Z.js";
 import {
   forwardToAnthropic
-} from "./chunk-JCW3ZRES.js";
+} from "./chunk-A46RUKGA.js";
 import {
   errors_exports,
   init_errors
@@ -31,18 +33,18 @@ import {
   isProxied,
   markProxied,
   unmarkProxied
-} from "./chunk-E7DD7F7J.js";
+} from "./chunk-5U5LRAFJ.js";
 import {
   dropActor,
   getActor
 } from "./chunk-LAWTTG2E.js";
 import {
   releaseSession
-} from "./chunk-N76ZVITA.js";
+} from "./chunk-ZY2U24QP.js";
 import {
   appendEvent,
   dropEmitter
-} from "./chunk-MHBLVGRF.js";
+} from "./chunk-5MERXOLJ.js";
 import {
   archiveSession,
   createSession,
@@ -50,13 +52,13 @@ import {
   listSessions,
   updateSessionMutable,
   updateSessionStatus
-} from "./chunk-3NK6YTA5.js";
+} from "./chunk-KUWJJD6O.js";
 import {
   getEnvironment
-} from "./chunk-X6IQ57SC.js";
+} from "./chunk-H6OT5GUL.js";
 import {
   getAgent
-} from "./chunk-ZTH5JRZG.js";
+} from "./chunk-BCIFFAGW.js";
 import {
   init_clock,
   nowMs
@@ -64,7 +66,7 @@ import {
 import {
   getDb,
   init_client
-} from "./chunk-6POQAFEC.js";
+} from "./chunk-W3JMIUHV.js";
 import {
   badRequest,
   notFound
@@ -445,13 +447,25 @@ function handleListSessions(request) {
     const limit = url.searchParams.get("limit");
     const order = url.searchParams.get("order");
     const includeArchived = url.searchParams.get("include_archived") === "true";
-    const cursor = url.searchParams.get("page") ?? void 0;
+    const cursor = decodeCursor(url.searchParams.get("page"));
     const agentId = url.searchParams.get("agent_id") ?? void 0;
     const agentVersion = url.searchParams.get("agent_version");
     const environmentId = url.searchParams.get("environment_id") ?? void 0;
+    const statusesRaw = url.searchParams.getAll("statuses");
     const statusRaw = url.searchParams.get("status");
+    let statuses;
     let status;
-    if (statusRaw != null) {
+    if (statusesRaw.length > 0) {
+      const values = statusesRaw.flatMap((v) => v.split(","));
+      for (const v of values) {
+        if (!ALLOWED_STATUSES.includes(v)) {
+          throw badRequest(
+            `invalid statuses value: ${v} (allowed: ${ALLOWED_STATUSES.join(",")})`
+          );
+        }
+      }
+      statuses = values;
+    } else if (statusRaw != null) {
       if (!ALLOWED_STATUSES.includes(statusRaw)) {
         throw badRequest(
           `invalid status value: ${statusRaw} (allowed: ${ALLOWED_STATUSES.join(",")})`
@@ -465,6 +479,7 @@ function handleListSessions(request) {
       agent_version: agentVersion ? Number(agentVersion) : void 0,
       environmentId,
       status,
+      statuses,
       limit: requestedLimit,
       order: order ?? void 0,
       includeArchived,
@@ -475,12 +490,7 @@ function handleListSessions(request) {
       createdLte: parseMs(url.searchParams.get("created_at[lte]")),
       tenantFilter: tenantFilter(auth)
     });
-    return jsonOk({
-      data,
-      has_more: data.length === requestedLimit,
-      first_id: data.length > 0 ? data[0].id : null,
-      last_id: data.length > 0 ? data[data.length - 1].id : null
-    });
+    return paginatedOk(data, requestedLimit);
   });
 }
 function handleGetSession(request, id) {