@agentstep/agent-sdk 0.5.2 → 0.5.4

package/dist/{chunk-LA6IFUVR.js → chunk-OACMO7AL.js}

@@ -9,36 +9,36 @@ import {
 } from "./chunk-72BKGVBE.js";
 import {
   loadSessionSecrets
-} from "./chunk-4A4F4L4H.js";
+} from "./chunk-TC7UW22R.js";
 import {
   childSpan,
   newTrace
 } from "./chunk-AU4NAQGA.js";
+import {
+  injectMcpAuthHeaders
+} from "./chunk-DBFPJSOY.js";
 import {
   buildErrorPayload,
   classifyError,
   init_errors
 } from "./chunk-H6TQGV4L.js";
-import {
-  injectMcpAuthHeaders
-} from "./chunk-DBFPJSOY.js";
 import {
   isProxied
-} from "./chunk-MTLM36QD.js";
+} from "./chunk-X7Y4TV6O.js";
 import {
   acquireForFirstTurn,
   installSkills,
   provisionResources,
   wrapProviderWithSecrets
-} from "./chunk-4B5H2MFO.js";
+} from "./chunk-P5DSHKKP.js";
 import {
   BLOCKED_ENV_KEYS,
   resolveVaultSecrets
-} from "./chunk-O2X4XBU7.js";
+} from "./chunk-W4FZ4HYD.js";
 import {
   appendEvent,
   appendEventsBatch
-} from "./chunk-NRX5WHHN.js";
+} from "./chunk-X65C4UZH.js";
 import {
   bumpSessionStats,
   getOutcomeCriteria,
@@ -49,26 +49,26 @@ import {
   setOutcomeCriteria,
   updateSessionMutable,
   updateSessionStatus
-} from "./chunk-TSR33JMZ.js";
+} from "./chunk-5TOLDBBJ.js";
 import {
   listEvents,
   markUserEventProcessed
-} from "./chunk-7JAUY5SG.js";
+} from "./chunk-K2UJFAGD.js";
 import {
   getBySession
 } from "./chunk-EFOIR7R3.js";
 import {
   resolveContainerProvider
-} from "./chunk-LT5PRO54.js";
+} from "./chunk-ZJERBDQE.js";
 import {
   getEnvironment
-} from "./chunk-7APAOJIZ.js";
+} from "./chunk-UKCRJFFC.js";
 import {
   getAgent
-} from "./chunk-M3752GFZ.js";
+} from "./chunk-P7TV5XP4.js";
 import {
   resolveBackend
-} from "./chunk-Q2JYAAJO.js";
+} from "./chunk-64AWIKIO.js";
 import {
   PERMISSION_BRIDGE_PENDING_PATH,
   PERMISSION_BRIDGE_REQUEST_PATH,
@@ -84,7 +84,7 @@ import {
 } from "./chunk-XBHDQK4Z.js";
 import {
   getConfig
-} from "./chunk-UGH5JDXX.js";
+} from "./chunk-P2NWS65Y.js";
 import {
   init_clock,
   nowMs

package/dist/{chunk-UGH5JDXX.js → chunk-P2NWS65Y.js}

@@ -5,10 +5,10 @@ import {
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-FILGQF2G.js";
+} from "./chunk-JWVVF66Q.js";
 import {
   schema_exports
-} from "./chunk-VC5DELR4.js";
+} from "./chunk-SZNZZB7J.js";
 
 // src/config/index.ts
 init_drizzle();

package/dist/{chunk-BCBDHUFY.js → chunk-P4B4V4SV.js}

@@ -9,10 +9,10 @@ import {
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-FILGQF2G.js";
+} from "./chunk-JWVVF66Q.js";
 import {
   schema_exports
-} from "./chunk-VC5DELR4.js";
+} from "./chunk-SZNZZB7J.js";
 
 // src/db/api_keys.ts
 init_drizzle();

package/dist/{chunk-4B5H2MFO.js → chunk-P5DSHKKP.js}

@@ -1,21 +1,21 @@
 import {
   resolveVaultSecrets
-} from "./chunk-O2X4XBU7.js";
+} from "./chunk-W4FZ4HYD.js";
 import {
   dockerProvider
 } from "./chunk-4XXQAVKE.js";
 import {
   appendEvent
-} from "./chunk-NRX5WHHN.js";
+} from "./chunk-X65C4UZH.js";
 import {
   getSession,
   getSessionRow,
   setSessionSandbox
-} from "./chunk-TSR33JMZ.js";
+} from "./chunk-5TOLDBBJ.js";
 import {
   deleteSprite,
   listSprites
-} from "./chunk-VMLXV2H6.js";
+} from "./chunk-PUH4LEJZ.js";
 import {
   allSessionSandboxes,
   countInEnv,
@@ -24,12 +24,12 @@ import {
 } from "./chunk-EFOIR7R3.js";
 import {
   resolveContainerProvider
-} from "./chunk-LT5PRO54.js";
+} from "./chunk-ZJERBDQE.js";
 import {
   getEnvironment,
   getEnvironmentRow,
   listEnvironments
-} from "./chunk-7APAOJIZ.js";
+} from "./chunk-UKCRJFFC.js";
 import {
   addWarm,
   claimWarm,
@@ -40,13 +40,13 @@ import {
 } from "./chunk-G7KUVNDY.js";
 import {
   getAgent
-} from "./chunk-M3752GFZ.js";
+} from "./chunk-P7TV5XP4.js";
 import {
   resolveBackend
-} from "./chunk-Q2JYAAJO.js";
+} from "./chunk-64AWIKIO.js";
 import {
   getConfig
-} from "./chunk-UGH5JDXX.js";
+} from "./chunk-P2NWS65Y.js";
 import {
   init_clock,
   nowMs
@@ -487,7 +487,13 @@ async function provisionResources(sandboxName, resources, provider) {
           console.warn(`[lifecycle] skipping file ${r.file_id}: too large`);
           continue;
         }
-        await writeTo(mountTarget, data.toString("utf8"));
+        const b64 = data.toString("base64");
+        await provider.exec(
+          sandboxName,
+          ["sh", "-c", 'base64 -d > "$1"', "sh", mountTarget],
+          { stdin: b64 }
+        );
+        await provider.exec(sandboxName, ["chmod", "a-w", mountTarget]);
       } catch (err) {
         console.warn(`[lifecycle] failed to provision file resource ${r.file_id}:`, err);
       }

package/dist/{chunk-WFRHLTKI.js → chunk-P5X2DSGQ.js}

@@ -1,6 +1,6 @@
 import {
   forwardToAnthropic
-} from "./chunk-Y4MI27HU.js";
+} from "./chunk-DL7IPOZF.js";
 import {
   isAnthropicApiKey,
   isPassthroughAllowedPath
@@ -8,10 +8,10 @@ import {
 import {
   findByRawKey,
   hydratePermissions
-} from "./chunk-BCBDHUFY.js";
+} from "./chunk-P4B4V4SV.js";
 import {
   getConfig
-} from "./chunk-UGH5JDXX.js";
+} from "./chunk-P2NWS65Y.js";
 import {
   unauthorized
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-M3752GFZ.js → chunk-P7TV5XP4.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULT_TENANT_ID
-} from "./chunk-UQZFFG7U.js";
+} from "./chunk-64M4Z6HW.js";
 import {
   init_ids,
   newId
@@ -13,10 +13,10 @@ import {
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-FILGQF2G.js";
+} from "./chunk-JWVVF66Q.js";
 import {
   schema_exports
-} from "./chunk-VC5DELR4.js";
+} from "./chunk-SZNZZB7J.js";
 
 // src/db/agents.ts
 init_drizzle();

package/dist/{chunk-A2W3USEZ.js → chunk-PEEKWYYE.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-UGH5JDXX.js";
+} from "./chunk-P2NWS65Y.js";
 import {
   ApiError
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-6WUYI3DJ.js → chunk-PKWN44LF.js}

@@ -1,17 +1,17 @@
 import {
   listTraces
-} from "./chunk-G4DTLYOD.js";
+} from "./chunk-DQW2QEK5.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-6URMGCAC.js";
+} from "./chunk-IYVGGJMH.js";
 import {
   exportTrace
-} from "./chunk-FSVDF57K.js";
+} from "./chunk-UKIOGRMN.js";
 import {
   listEventsByTrace,
   rowToManagedEvent
-} from "./chunk-7JAUY5SG.js";
+} from "./chunk-K2UJFAGD.js";
 import {
   badRequest,
   notFound

package/dist/{chunk-VMLXV2H6.js → chunk-PUH4LEJZ.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-UGH5JDXX.js";
+} from "./chunk-P2NWS65Y.js";
 import {
   ApiError
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-TWH4UH6G.js → chunk-PVVJCRII.js}

@@ -14,7 +14,7 @@ import {
 import {
   getDb,
   init_client
-} from "./chunk-KQTTKYZY.js";
+} from "./chunk-W3YXUIPS.js";
 
 // src/db/audit.ts
 init_client();

package/dist/{chunk-SQZPJFBF.js → chunk-R6M4V3IG.js}

@@ -1,10 +1,10 @@
 import {
   getModels
-} from "./chunk-MV42BTU3.js";
+} from "./chunk-7OM5LP3K.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-6URMGCAC.js";
+} from "./chunk-IYVGGJMH.js";
 
 // src/handlers/models.ts
 function handleListModels(request) {

package/dist/{chunk-P6LESAPO.js → chunk-RA25CUV4.js}

@@ -2,10 +2,10 @@ import {
   reportUpstreamFailure,
   reportUpstreamSuccess,
   resolveAnthropicKey
-} from "./chunk-YL6IQUJC.js";
+} from "./chunk-DMROEZYE.js";
 import {
   resolveRemoteSessionId
-} from "./chunk-AESA3ARX.js";
+} from "./chunk-3ST3YLED.js";
 import {
   assertResourceTenant
 } from "./chunk-23UKWXJH.js";
@@ -20,46 +20,46 @@ import {
   listMemoryStores,
   searchMemories,
   updateMemory
-} from "./chunk-GBLR2CPP.js";
+} from "./chunk-FSQ6I3C7.js";
 import {
   jsonOk,
   paginatedOk,
   routeWrap
-} from "./chunk-6URMGCAC.js";
+} from "./chunk-IYVGGJMH.js";
 import {
   forwardToAnthropic
-} from "./chunk-Y4MI27HU.js";
+} from "./chunk-DL7IPOZF.js";
 import {
   enqueueTurn
-} from "./chunk-AIAF5ZZA.js";
+} from "./chunk-KB7MV6VS.js";
 import {
   runTurn,
   writePermissionResponse
-} from "./chunk-LA6IFUVR.js";
+} from "./chunk-OACMO7AL.js";
 import {
   getProxiedTenantId,
   isProxied
-} from "./chunk-MTLM36QD.js";
+} from "./chunk-X7Y4TV6O.js";
 import {
   getActor
 } from "./chunk-LAWTTG2E.js";
 import {
   appendEvent
-} from "./chunk-NRX5WHHN.js";
+} from "./chunk-X65C4UZH.js";
 import {
   bumpSessionStats,
   getSession,
   getSessionRow,
   setOutcomeCriteria,
   updateSessionMutable
-} from "./chunk-TSR33JMZ.js";
+} from "./chunk-5TOLDBBJ.js";
 import {
   listEvents,
   rowToManagedEvent
-} from "./chunk-7JAUY5SG.js";
+} from "./chunk-K2UJFAGD.js";
 import {
   getAgent
-} from "./chunk-M3752GFZ.js";
+} from "./chunk-P7TV5XP4.js";
 import {
   init_clock,
   nowMs
@@ -67,7 +67,7 @@ import {
 import {
   getDb,
   init_client
-} from "./chunk-KQTTKYZY.js";
+} from "./chunk-W3YXUIPS.js";
 import {
   badRequest,
   notFound
@@ -425,7 +425,8 @@ var UserDefineOutcome = z.object({
   description: z.string().min(1),
   rubric: z.union([
     z.string(),
-    z.object({ type: z.literal("text"), content: z.string() })
+    z.object({ type: z.literal("text"), content: z.string() }),
+    z.object({ type: z.literal("file"), file_id: z.string() })
   ]).optional(),
   max_iterations: z.number().int().min(1).max(20).optional()
 });
@@ -594,7 +595,20 @@ function handlePostEvents(request, sessionId) {
         if (event.type === "user.define_outcome") {
           const { newId: genId } = await import("./util/ids.js");
           const outcomeId = genId("outc");
-          const rubricText = typeof event.rubric === "string" ? event.rubric : event.rubric?.content ?? "";
+          let rubricText;
+          if (typeof event.rubric === "string") {
+            rubricText = event.rubric;
+          } else if (event.rubric && event.rubric.type === "text") {
+            rubricText = event.rubric.content;
+          } else if (event.rubric && event.rubric.type === "file") {
+            const { getFile: getFileRow } = await import("./db/files.js");
+            const { readFile: readStoredFile } = await import("./files/storage.js");
+            const fileRow = getFileRow(event.rubric.file_id);
+            if (!fileRow) throw badRequest(`Rubric file not found: ${event.rubric.file_id}`);
+            rubricText = readStoredFile(fileRow.storage_path).toString("utf-8");
+          } else {
+            rubricText = "";
+          }
           const maxIterations = event.max_iterations ?? 3;
           const processedAt = nowMs();
           const outcomeData = {

package/dist/{chunk-6KJS42ZL.js → chunk-SMM7YOM2.js}

@@ -18,14 +18,14 @@ import {
 import {
   buildClaudeArgs,
   buildClaudeAuthEnv
-} from "./chunk-ANS2TQYT.js";
+} from "./chunk-HWVBBUL2.js";
 import {
   CLAUDE_WRAPPER_PATH,
   installClaudeWrapper
 } from "./chunk-QBJOYOVF.js";
 import {
   getConfig
-} from "./chunk-UGH5JDXX.js";
+} from "./chunk-P2NWS65Y.js";
 
 // src/backends/claude/index.ts
 function buildTurn(input) {

package/dist/{chunk-VC5DELR4.js → chunk-SZNZZB7J.js}

@@ -21,11 +21,13 @@ __export(schema_exports, {
   sessionThreads: () => sessionThreads,
   sessions: () => sessions,
   settings: () => settings,
+  skillVersions: () => skillVersions,
+  skills: () => skills,
   vaultEntries: () => vaultEntries,
   vaults: () => vaults
 });
 import { sqliteTable, text, integer, real, primaryKey } from "drizzle-orm/sqlite-core";
-var settings, proxyResources, apiKeys, agents, agentVersions, environments, sessions, events, sessionThreads, vaults, vaultEntries, memoryStores, memoryVersions, memories, files, sessionResources, anthropicSync;
+var settings, proxyResources, apiKeys, agents, agentVersions, environments, sessions, events, sessionThreads, vaults, vaultEntries, memoryStores, memoryVersions, memories, files, sessionResources, skills, skillVersions, anthropicSync;
 var init_schema = __esm({
   "src/db/schema.ts"() {
     settings = sqliteTable("settings", {
@@ -217,6 +219,7 @@ var init_schema = __esm({
       content: text("content"),
       content_sha256: text("content_sha256"),
       session_id: text("session_id"),
+      redacted_at: integer("redacted_at"),
       created_at: integer("created_at").notNull()
     });
     memories = sqliteTable("memories", {
@@ -254,6 +257,23 @@ var init_schema = __esm({
       created_at: integer("created_at").notNull(),
       updated_at: integer("updated_at").notNull()
     });
+    skills = sqliteTable("skills", {
+      id: text("id").primaryKey(),
+      name: text("name").notNull(),
+      description: text("description"),
+      current_version: text("current_version"),
+      tenant_id: text("tenant_id"),
+      created_at: integer("created_at").notNull(),
+      updated_at: integer("updated_at").notNull(),
+      archived_at: integer("archived_at")
+    });
+    skillVersions = sqliteTable("skill_versions", {
+      id: text("id").primaryKey(),
+      skill_id: text("skill_id").notNull(),
+      version: text("version").notNull(),
+      content: text("content").notNull(),
+      created_at: integer("created_at").notNull()
+    });
     anthropicSync = sqliteTable("anthropic_sync", {
       local_id: text("local_id").notNull(),
       resource_type: text("resource_type").notNull(),
@@ -283,6 +303,8 @@ export {
   memories,
   files,
   sessionResources,
+  skills,
+  skillVersions,
   anthropicSync,
   schema_exports,
   init_schema

package/dist/{chunk-YEWYRPN4.js → chunk-T7NQMCDT.js}

@@ -14,17 +14,19 @@ import {
   listMemories,
   listMemoryStores,
   listMemoryVersions,
-  updateMemory
-} from "./chunk-GBLR2CPP.js";
+  redactMemoryVersion,
+  updateMemory,
+  updateMemoryStore
+} from "./chunk-FSQ6I3C7.js";
 import {
   jsonOk,
   paginatedOk,
   routeWrap
-} from "./chunk-6URMGCAC.js";
+} from "./chunk-IYVGGJMH.js";
 import {
   getDb,
   init_client
-} from "./chunk-KQTTKYZY.js";
+} from "./chunk-W3YXUIPS.js";
 import {
   badRequest,
   conflict,
@@ -96,6 +98,22 @@ function handleDeleteMemoryStore(request, id) {
     return jsonOk({ id, type: "memory_store_deleted" });
   });
 }
+var UpdateStoreSchema = z.object({
+  name: z.string().min(1).optional(),
+  description: z.string().optional(),
+  metadata: z.record(z.string()).optional()
+});
+function handleUpdateMemoryStore(request, id) {
+  return routeWrap(request, async ({ auth }) => {
+    loadStoreForCaller(auth, id);
+    const body = await request.json();
+    const parsed = UpdateStoreSchema.safeParse(body);
+    if (!parsed.success) throw badRequest(parsed.error.message);
+    const store = updateMemoryStore(id, parsed.data);
+    if (!store) throw notFound(`memory store not found: ${id}`);
+    return jsonOk(store);
+  });
+}
 var CreateMemorySchema = z.object({
   path: z.string().min(1),
   content: z.string()
@@ -182,6 +200,17 @@ function handleGetMemoryVersion(request, storeId, versionId) {
     return jsonOk(version);
   });
 }
+function handleRedactMemoryVersion(request, storeId, versionId) {
+  return routeWrap(request, async ({ auth }) => {
+    loadStoreForCaller(auth, storeId);
+    const version = getMemoryVersion(storeId, versionId);
+    if (!version) throw notFound(`memory version not found: ${versionId}`);
+    const redacted = redactMemoryVersion(storeId, versionId);
+    if (!redacted) throw badRequest(`cannot redact this version: it is the current head of a live memory`);
+    const updated = getMemoryVersion(storeId, versionId);
+    return jsonOk(updated);
+  });
+}
 function handleArchiveMemoryStore(request, storeId) {
   return routeWrap(request, async ({ auth }) => {
     loadStoreForCaller(auth, storeId);
@@ -197,6 +226,7 @@ export {
   handleListMemoryStores,
   handleGetMemoryStore,
   handleDeleteMemoryStore,
+  handleUpdateMemoryStore,
   handleCreateMemory,
   handleListMemories,
   handleGetMemory,
@@ -204,5 +234,6 @@ export {
   handleDeleteMemory,
   handleListMemoryVersions,
   handleGetMemoryVersion,
+  handleRedactMemoryVersion,
   handleArchiveMemoryStore
 };

package/dist/{chunk-4A4F4L4H.js → chunk-TC7UW22R.js}

@@ -1,9 +1,9 @@
 import {
   listCredentialsWithTokens
-} from "./chunk-7EDLLXFQ.js";
+} from "./chunk-DXRTOMZP.js";
 import {
   listEntries
-} from "./chunk-BYIU4WAQ.js";
+} from "./chunk-TWX2D563.js";
 
 // src/sessions/secrets.ts
 function loadSessionSecrets(vaultIds) {

package/dist/{chunk-BYIU4WAQ.js → chunk-TWX2D563.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-AIBH32FN.js";
 import {
   DEFAULT_TENANT_ID
-} from "./chunk-UQZFFG7U.js";
+} from "./chunk-64M4Z6HW.js";
 import {
   init_ids,
   newId
@@ -17,10 +17,10 @@ import {
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-FILGQF2G.js";
+} from "./chunk-JWVVF66Q.js";
 import {
   schema_exports
-} from "./chunk-VC5DELR4.js";
+} from "./chunk-SZNZZB7J.js";
 
 // src/db/vaults.ts
 init_drizzle();

package/dist/{chunk-CA76BJWL.js → chunk-TXOB3PZH.js}

@@ -1,10 +1,10 @@
 import {
   syncAndCreateSession
-} from "./chunk-GEC3NFYO.js";
+} from "./chunk-MFSO7IGE.js";
 import {
   resolveRemoteSessionId,
   upsertSync
-} from "./chunk-AESA3ARX.js";
+} from "./chunk-3ST3YLED.js";
 import {
   assertResourceTenant,
   tenantFilter
@@ -14,19 +14,19 @@ import {
 } from "./chunk-DC2UMEQH.js";
 import {
   getMemoryStore
-} from "./chunk-GBLR2CPP.js";
+} from "./chunk-FSQ6I3C7.js";
 import {
   kickoffEnvironmentSetup
-} from "./chunk-6KQFP32G.js";
+} from "./chunk-YICDEIRE.js";
 import {
   decodeCursor,
   jsonOk,
   paginatedOk,
   routeWrap
-} from "./chunk-6URMGCAC.js";
+} from "./chunk-IYVGGJMH.js";
 import {
   forwardToAnthropic
-} from "./chunk-Y4MI27HU.js";
+} from "./chunk-DL7IPOZF.js";
 import {
   errors_exports,
   init_errors
@@ -36,18 +36,18 @@ import {
   isProxied,
   markProxied,
   unmarkProxied
-} from "./chunk-MTLM36QD.js";
+} from "./chunk-X7Y4TV6O.js";
 import {
   dropActor,
   getActor
 } from "./chunk-LAWTTG2E.js";
 import {
   releaseSession
-} from "./chunk-4B5H2MFO.js";
+} from "./chunk-P5DSHKKP.js";
 import {
   appendEvent,
   dropEmitter
-} from "./chunk-NRX5WHHN.js";
+} from "./chunk-X65C4UZH.js";
 import {
   archiveSession,
   createSession,
@@ -55,13 +55,13 @@ import {
   listSessions,
   updateSessionMutable,
   updateSessionStatus
-} from "./chunk-TSR33JMZ.js";
+} from "./chunk-5TOLDBBJ.js";
 import {
   getEnvironment
-} from "./chunk-7APAOJIZ.js";
+} from "./chunk-UKCRJFFC.js";
 import {
   getAgent
-} from "./chunk-M3752GFZ.js";
+} from "./chunk-P7TV5XP4.js";
 import {
   init_clock,
   nowMs
@@ -69,7 +69,7 @@ import {
 import {
   getDb,
   init_client
-} from "./chunk-KQTTKYZY.js";
+} from "./chunk-W3YXUIPS.js";
 import {
   badRequest,
   notFound