@agentstep/agent-sdk 0.5.0 → 0.5.1

package/dist/{chunk-TVODT2UR.js → chunk-GD3WXIHX.js}

@@ -4,7 +4,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QTXAWC5J.js";
+} from "./chunk-T3IGOI6Z.js";
 
 // src/handlers/license.ts
 function handleGetLicense(request) {

package/dist/{chunk-WEC625LQ.js → chunk-GIUB2OPA.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-X6QIWZ33.js";
+} from "./chunk-GQYSSSVA.js";
 
 // src/backends/codex/auth.ts
 function buildCodexAuthEnv() {

package/dist/{chunk-X6QIWZ33.js → chunk-GQYSSSVA.js}

@@ -45,7 +45,7 @@ function loadConfig() {
     spriteTimeoutMs: num(process.env.SPRITE_TIMEOUT_MS, 3e4),
     concurrency: num(process.env.CONCURRENCY, 4),
     maxSandboxesPerEnv: num(process.env.MAX_SANDBOXES_PER_ENV, 8),
-    sessionMaxAgeMs: num(process.env.SESSION_MAX_AGE_MS, 7 * 24 * 3600 * 1e3),
+    sessionMaxAgeMs: num(process.env.SESSION_MAX_AGE_MS, 3600 * 1e3),
     sweeperIntervalMs: num(process.env.SWEEPER_INTERVAL_MS, 6e4),
     otlpEndpoint: process.env.OTEL_EXPORTER_OTLP_ENDPOINT || process.env.OTLP_ENDPOINT || readSetting("otlp_endpoint") || void 0,
     otlpAuthorization: process.env.OTEL_EXPORTER_OTLP_HEADERS_AUTHORIZATION || process.env.OTLP_AUTHORIZATION || readSetting("otlp_authorization") || void 0,

package/dist/{chunk-24IDJ7LY.js → chunk-HZZ6ZLKP.js}

@@ -10,7 +10,7 @@ import {
 } from "./chunk-KUWJJD6O.js";
 import {
   getConfig
-} from "./chunk-X6QIWZ33.js";
+} from "./chunk-GQYSSSVA.js";
 
 // src/providers/upstream-keys.ts
 var CONSECUTIVE_FAIL_THRESHOLD = 3;

package/dist/{chunk-GV6GUSCP.js → chunk-IMPLRDOV.js}

@@ -1,21 +1,21 @@
 import {
   piBackend
-} from "./chunk-NHAYKVXG.js";
+} from "./chunk-C35ZTCBP.js";
 import {
   opencodeBackend
-} from "./chunk-KKAJC3Z2.js";
+} from "./chunk-63AKPSCV.js";
 import {
   factoryBackend
-} from "./chunk-L26TVIB6.js";
+} from "./chunk-R6EXYBCT.js";
 import {
   geminiBackend
-} from "./chunk-DKLHYSPW.js";
+} from "./chunk-5M47X54D.js";
 import {
   codexBackend
-} from "./chunk-R3QHLKJG.js";
+} from "./chunk-L35CBI7F.js";
 import {
   claudeBackend
-} from "./chunk-PNZF7HIU.js";
+} from "./chunk-NBYCX6L4.js";
 
 // src/backends/registry.ts
 var BACKENDS = {

package/dist/{chunk-OKT2J4ZB.js → chunk-JWHSUEDE.js}

@@ -8,11 +8,11 @@ import {
   jsonOk,
   paginatedOk,
   routeWrap
-} from "./chunk-QTXAWC5J.js";
+} from "./chunk-T3IGOI6Z.js";
 import {
   forwardToAnthropic,
   validateAnthropicProxy
-} from "./chunk-MQBMXAPU.js";
+} from "./chunk-A46RUKGA.js";
 import {
   getProxiedTenantId,
   isProxied,
@@ -29,7 +29,7 @@ import {
 } from "./chunk-BCIFFAGW.js";
 import {
   resolveBackend
-} from "./chunk-GV6GUSCP.js";
+} from "./chunk-IMPLRDOV.js";
 import {
   getDb,
   init_client

package/dist/{chunk-R3QHLKJG.js → chunk-L35CBI7F.js}

@@ -4,7 +4,7 @@ import {
 import {
   buildCodexAuthEnv,
   validateCodexRuntime
-} from "./chunk-WEC625LQ.js";
+} from "./chunk-GIUB2OPA.js";
 import {
   prepareCodexOnSandbox
 } from "./chunk-M2LUXIXU.js";

package/dist/{chunk-GFSRNOPI.js → chunk-LIXSR7BG.js}

@@ -5,16 +5,16 @@ import {
 } from "./chunk-23UKWXJH.js";
 import {
   kickoffEnvironmentSetup
-} from "./chunk-LQP6XGFU.js";
+} from "./chunk-QJ6QQO6D.js";
 import {
   decodeCursor,
   jsonOk,
   paginatedOk,
   routeWrap
-} from "./chunk-QTXAWC5J.js";
+} from "./chunk-T3IGOI6Z.js";
 import {
   forwardToAnthropic
-} from "./chunk-MQBMXAPU.js";
+} from "./chunk-A46RUKGA.js";
 import {
   getProxiedTenantId,
   isProxied,
@@ -23,7 +23,7 @@ import {
 } from "./chunk-5U5LRAFJ.js";
 import {
   resolveContainerProvider
-} from "./chunk-UE6DNLSV.js";
+} from "./chunk-JRQB3SHR.js";
 import {
   archiveEnvironment,
   createEnvironment,

package/dist/{chunk-RYJXSXCV.js → chunk-MXMXJYN4.js}

@@ -4,7 +4,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QTXAWC5J.js";
+} from "./chunk-T3IGOI6Z.js";
 import {
   getProxiedTenantId
 } from "./chunk-5U5LRAFJ.js";

package/dist/{chunk-JP7Y3TKK.js → chunk-MZYJFU4K.js}

@@ -12,7 +12,7 @@ import {
 } from "./chunk-BCIFFAGW.js";
 import {
   getConfig
-} from "./chunk-X6QIWZ33.js";
+} from "./chunk-GQYSSSVA.js";
 
 // src/observability/otlp.ts
 import { createHash } from "crypto";

package/dist/{chunk-PNZF7HIU.js → chunk-NBYCX6L4.js}

@@ -1,7 +1,7 @@
 import {
   buildClaudeArgs,
   buildClaudeAuthEnv
-} from "./chunk-GIMDS46L.js";
+} from "./chunk-YYMUSVUI.js";
 import {
   PERMISSION_BRIDGE_DIR,
   PERMISSION_HOOK_SCRIPT_PATH,
@@ -22,10 +22,10 @@ import {
 import {
   CLAUDE_WRAPPER_PATH,
   installClaudeWrapper
-} from "./chunk-IU457W7Q.js";
+} from "./chunk-QBJOYOVF.js";
 import {
   getConfig
-} from "./chunk-X6QIWZ33.js";
+} from "./chunk-GQYSSSVA.js";
 
 // src/backends/claude/index.ts
 function buildTurn(input) {

package/dist/{chunk-3PA4NXRP.js → chunk-NL4UNA53.js}

@@ -1,11 +1,11 @@
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QTXAWC5J.js";
+} from "./chunk-T3IGOI6Z.js";
 import {
   readSetting,
   writeSetting
-} from "./chunk-X6QIWZ33.js";
+} from "./chunk-GQYSSSVA.js";
 import {
   badRequest
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-GCQDNUS2.js → chunk-NRXTWATQ.js}

@@ -1,6 +1,6 @@
 import {
   forwardToAnthropic
-} from "./chunk-MQBMXAPU.js";
+} from "./chunk-A46RUKGA.js";
 import {
   isAnthropicApiKey,
   isPassthroughAllowedPath
@@ -11,7 +11,7 @@ import {
 } from "./chunk-T3FQPTOA.js";
 import {
   getConfig
-} from "./chunk-X6QIWZ33.js";
+} from "./chunk-GQYSSSVA.js";
 import {
   unauthorized
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-NKQVOAWN.js → chunk-O56RNR7B.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-X6QIWZ33.js";
+} from "./chunk-GQYSSSVA.js";
 import {
   ApiError
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-CLSGNQ7J.js → chunk-Q4XF3OBK.js}

@@ -6,13 +6,13 @@ import {
 } from "./chunk-23UKWXJH.js";
 import {
   authenticateAndIntercept
-} from "./chunk-GCQDNUS2.js";
+} from "./chunk-NRXTWATQ.js";
 import {
   forwardToAnthropic
-} from "./chunk-MQBMXAPU.js";
+} from "./chunk-A46RUKGA.js";
 import {
   ensureInitialized
-} from "./chunk-PN3AWRMX.js";
+} from "./chunk-ZWC5V2DB.js";
 import {
   getProxiedTenantId,
   isProxied

package/dist/{chunk-IU457W7Q.js → chunk-QBJOYOVF.js}

@@ -7,7 +7,8 @@ export PATH="/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:$PATH"
 export NODE_COMPILE_CACHE=/tmp/v8-cache
 mkdir -p /tmp/v8-cache
 # Install claude CLI if not present
-if ! command -v claude >/dev/null 2>&1; then npm install -g @anthropic-ai/claude-code 2>/dev/null; fi
+if ! command -v claude >/dev/null 2>&1; then npm install -g @anthropic-ai/claude-code; fi
+claude --version >&2 2>/dev/null || true
 # Read env vars from stdin until blank line, save remaining stdin to temp file
 PROMPT_FILE=$(mktemp)
 while IFS= read -r line; do [ -z "$line" ] && break; export "$line"; done

package/dist/{chunk-LQP6XGFU.js → chunk-QJ6QQO6D.js}

@@ -1,13 +1,13 @@
 import {
   resolveContainerProvider
-} from "./chunk-UE6DNLSV.js";
+} from "./chunk-JRQB3SHR.js";
 import {
   getEnvironmentRow,
   updateEnvironmentState
 } from "./chunk-H6OT5GUL.js";
 import {
   installClaudeWrapper
-} from "./chunk-IU457W7Q.js";
+} from "./chunk-QBJOYOVF.js";
 import {
   init_ids,
   newId

package/dist/{chunk-L26TVIB6.js → chunk-R6EXYBCT.js}

@@ -13,7 +13,7 @@ import {
 import {
   buildFactoryAuthEnv,
   validateFactoryRuntime
-} from "./chunk-NDTIDWBE.js";
+} from "./chunk-YZZHDZ7B.js";
 import {
   wrapPromptWithSystem
 } from "./chunk-FVBDEOTZ.js";

package/dist/{chunk-HWR2HYQJ.js → chunk-RT5S5KRX.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-X6QIWZ33.js";
+} from "./chunk-GQYSSSVA.js";
 
 // src/backends/pi/auth.ts
 function buildPiAuthEnv() {

package/dist/{chunk-QTXAWC5J.js → chunk-T3IGOI6Z.js}

@@ -4,13 +4,13 @@ import {
 } from "./chunk-D2XITRN6.js";
 import {
   authenticateAndIntercept
-} from "./chunk-GCQDNUS2.js";
+} from "./chunk-NRXTWATQ.js";
 import {
   checkAndBump
 } from "./chunk-HVUWXUUI.js";
 import {
   ensureInitialized
-} from "./chunk-PN3AWRMX.js";
+} from "./chunk-ZWC5V2DB.js";
 import {
   captureException
 } from "./chunk-3MQ2FWXS.js";

package/dist/{chunk-JLUCJMAQ.js → chunk-T7BHW3CP.js}

@@ -30,7 +30,7 @@ import {
   installSkills,
   provisionResources,
   wrapProviderWithSecrets
-} from "./chunk-JFOHGHW5.js";
+} from "./chunk-ZY2U24QP.js";
 import {
   BLOCKED_ENV_KEYS,
   resolveVaultSecrets
@@ -59,7 +59,7 @@ import {
 } from "./chunk-EFOIR7R3.js";
 import {
   resolveContainerProvider
-} from "./chunk-UE6DNLSV.js";
+} from "./chunk-JRQB3SHR.js";
 import {
   getEnvironment
 } from "./chunk-H6OT5GUL.js";
@@ -68,7 +68,7 @@ import {
 } from "./chunk-BCIFFAGW.js";
 import {
   resolveBackend
-} from "./chunk-GV6GUSCP.js";
+} from "./chunk-IMPLRDOV.js";
 import {
   PERMISSION_BRIDGE_PENDING_PATH,
   PERMISSION_BRIDGE_REQUEST_PATH,
@@ -84,7 +84,7 @@ import {
 } from "./chunk-XBHDQK4Z.js";
 import {
   getConfig
-} from "./chunk-X6QIWZ33.js";
+} from "./chunk-GQYSSSVA.js";
 import {
   init_clock,
   nowMs

package/dist/{chunk-YMCS6AB7.js → chunk-TG3S4RVJ.js}

@@ -8,7 +8,7 @@ import {
 import {
   paginatedOk,
   routeWrap
-} from "./chunk-QTXAWC5J.js";
+} from "./chunk-T3IGOI6Z.js";
 import {
   badRequest
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-R6EEBWM3.js → chunk-UMRDMOB6.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-X6QIWZ33.js";
+} from "./chunk-GQYSSSVA.js";
 
 // src/backends/opencode/auth.ts
 function buildOpencodeAuthEnv() {

package/dist/{chunk-AXBM7HAR.js → chunk-UMVZZQKD.js}

@@ -1,7 +1,7 @@
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QTXAWC5J.js";
+} from "./chunk-T3IGOI6Z.js";
 
 // src/handlers/whoami.ts
 function handleWhoami(request) {

package/dist/{chunk-FSQ4HGHX.js → chunk-UQ3LKJPM.js}

@@ -18,7 +18,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QTXAWC5J.js";
+} from "./chunk-T3IGOI6Z.js";
 import {
   getDb,
   init_client

package/dist/{chunk-TUEBRYPZ.js → chunk-USIMPXUH.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-X6QIWZ33.js";
+} from "./chunk-GQYSSSVA.js";
 import {
   ApiError
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-Z6VZYRVN.js → chunk-VJWNFMMQ.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-VP527YC5.js";
 import {
   getConfig
-} from "./chunk-X6QIWZ33.js";
+} from "./chunk-GQYSSSVA.js";
 
 // src/observability/redactor.ts
 var REDACTED = "[REDACTED]";

package/dist/{chunk-STJNO6SL.js → chunk-WDACZSRU.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-X6QIWZ33.js";
+} from "./chunk-GQYSSSVA.js";
 
 // src/backends/gemini/auth.ts
 function buildGeminiAuthEnv() {

package/dist/{chunk-YXOCKQZU.js → chunk-WU74DV5R.js}

@@ -5,7 +5,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-QTXAWC5J.js";
+} from "./chunk-T3IGOI6Z.js";
 import {
   badRequest
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-GIMDS46L.js → chunk-YYMUSVUI.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-XBHDQK4Z.js";
 import {
   getConfig
-} from "./chunk-X6QIWZ33.js";
+} from "./chunk-GQYSSSVA.js";
 
 // src/backends/claude/args.ts
 function buildClaudeArgs(input) {

package/dist/{chunk-NDTIDWBE.js → chunk-YZZHDZ7B.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-X6QIWZ33.js";
+} from "./chunk-GQYSSSVA.js";
 
 // src/backends/factory/auth.ts
 function buildFactoryAuthEnv() {

package/dist/{chunk-PN3AWRMX.js → chunk-ZWC5V2DB.js}

@@ -1,15 +1,15 @@
 import {
   runTurn
-} from "./chunk-JLUCJMAQ.js";
+} from "./chunk-T7BHW3CP.js";
 import {
   enqueueTurn
-} from "./chunk-Z4LFLXRR.js";
+} from "./chunk-37C5BNVV.js";
 import {
   installOtlpExporter
-} from "./chunk-JP7Y3TKK.js";
+} from "./chunk-MZYJFU4K.js";
 import {
   redactAppendInput
-} from "./chunk-Z6VZYRVN.js";
+} from "./chunk-VJWNFMMQ.js";
 import {
   createApiKey,
   listApiKeys
@@ -19,15 +19,15 @@ import {
 } from "./chunk-3MQ2FWXS.js";
 import {
   installShutdownHandlers
-} from "./chunk-64IQEPSD.js";
+} from "./chunk-FYBHPBWY.js";
 import {
   runSweep
-} from "./chunk-AB7MPL3H.js";
+} from "./chunk-EDUTIJAU.js";
 import {
   fillWarmPools,
   reconcileDockerOrphanSandboxes,
   reconcileOrphanSandboxes
-} from "./chunk-JFOHGHW5.js";
+} from "./chunk-ZY2U24QP.js";
 import {
   appendEvent,
   installPayloadRedactor
@@ -48,13 +48,13 @@ import {
 } from "./chunk-EFOIR7R3.js";
 import {
   resolveContainerProvider
-} from "./chunk-UE6DNLSV.js";
+} from "./chunk-JRQB3SHR.js";
 import {
   getEnvironment
 } from "./chunk-H6OT5GUL.js";
 import {
   getConfig
-} from "./chunk-X6QIWZ33.js";
+} from "./chunk-GQYSSSVA.js";
 import {
   init_clock,
   nowMs

package/dist/{chunk-JFOHGHW5.js → chunk-ZY2U24QP.js}

@@ -15,7 +15,7 @@ import {
 import {
   deleteSprite,
   listSprites
-} from "./chunk-NKQVOAWN.js";
+} from "./chunk-O56RNR7B.js";
 import {
   allSessionSandboxes,
   countInEnv,
@@ -24,7 +24,7 @@ import {
 } from "./chunk-EFOIR7R3.js";
 import {
   resolveContainerProvider
-} from "./chunk-UE6DNLSV.js";
+} from "./chunk-JRQB3SHR.js";
 import {
   getEnvironment,
   getEnvironmentRow,
@@ -43,10 +43,10 @@ import {
 } from "./chunk-BCIFFAGW.js";
 import {
   resolveBackend
-} from "./chunk-GV6GUSCP.js";
+} from "./chunk-IMPLRDOV.js";
 import {
   getConfig
-} from "./chunk-X6QIWZ33.js";
+} from "./chunk-GQYSSSVA.js";
 import {
   init_clock,
   nowMs
@@ -123,15 +123,22 @@ async function acquireForFirstTurn(sessionId) {
     );
   }
   const config = getConfig();
-  if (countInEnv(env.id) + countWarm(env.id) >= config.maxSandboxesPerEnv) {
-    throw new ApiError(503, "server_busy", "env sandbox pool exhausted");
+  const envObj = getEnvironment(row.environment_id);
+  const maxSandboxes = envObj?.config?.max_sandboxes ?? config.maxSandboxesPerEnv;
+  const active = countInEnv(env.id);
+  const warmCount = countWarm(env.id);
+  if (active + warmCount >= maxSandboxes) {
+    throw new ApiError(
+      503,
+      "server_busy",
+      `environment ${env.id} sandbox pool exhausted (${active} active + ${warmCount} warm, limit ${maxSandboxes})`
+    );
   }
   const agent = getAgent(row.agent_id, row.agent_version);
   if (!agent) {
     throw new ApiError(404, "not_found_error", "agent not found for session");
   }
   const backend = resolveBackend(agent.engine);
-  const envObj = getEnvironment(row.environment_id);
   const provider = await resolveContainerProvider(envObj?.config?.provider);
   const sessionForSecrets = getSession(sessionId);
   const secrets = sessionForSecrets?.vault_ids?.length ? resolveVaultSecrets(sessionForSecrets.vault_ids) : {};
@@ -337,7 +344,9 @@ async function replenishWarmPool(envId, engine, provider, secrets) {
   if (target <= 0) return;
   if (countWarm(envId) + countInflight(envId) >= target) return;
   const cfg = getConfig();
-  if (countInEnv(envId) + countWarm(envId) + countInflight(envId) >= cfg.maxSandboxesPerEnv) return;
+  const envObj = getEnvironment(envId);
+  const maxSandboxes = envObj?.config?.max_sandboxes ?? cfg.maxSandboxesPerEnv;
+  if (countInEnv(envId) + countWarm(envId) + countInflight(envId) >= maxSandboxes) return;
   incrementInflight(envId);
   try {
     const sp = wrapProviderWithSecrets(provider, secrets);
@@ -391,7 +400,8 @@ async function fillOneEnv(env) {
   try {
     const provider = await resolveContainerProvider(env.config?.provider);
     if (!provider.supportsWarmPool) return;
-    const backend = resolveBackend("claude");
+    const engine = env.config?.default_engine ?? "claude";
+    const backend = resolveBackend(engine);
     const needed = target - countWarm(env.id) - countInflight(env.id);
     for (let i = 0; i < needed; i++) {
       void replenishWarmPool(env.id, backend.name, provider, {});

package/dist/config/index.js

@@ -5,7 +5,7 @@ import {
   readSetting,
   writeSetting,
   writeTokenSetting
-} from "../chunk-X6QIWZ33.js";
+} from "../chunk-GQYSSSVA.js";
 import "../chunk-HFDLUBWN.js";
 import "../chunk-PZNAQBHQ.js";
 import "../chunk-ILHIHMO3.js";

package/dist/containers/client.js

@@ -7,8 +7,8 @@ import {
   killExecSession,
   listSprites,
   restoreCheckpoint
-} from "../chunk-NKQVOAWN.js";
-import "../chunk-X6QIWZ33.js";
+} from "../chunk-O56RNR7B.js";
+import "../chunk-GQYSSSVA.js";
 import "../chunk-HFDLUBWN.js";
 import "../chunk-PZNAQBHQ.js";
 import "../chunk-ILHIHMO3.js";

package/dist/containers/exec.js

@@ -1,7 +1,7 @@
 import {
   startExec
-} from "../chunk-TUEBRYPZ.js";
-import "../chunk-X6QIWZ33.js";
+} from "../chunk-USIMPXUH.js";
+import "../chunk-GQYSSSVA.js";
 import "../chunk-HFDLUBWN.js";
 import "../chunk-PZNAQBHQ.js";
 import "../chunk-ILHIHMO3.js";