@agentstep/agent-sdk 0.5.27 → 0.5.33

package/dist/{chunk-CG2VA2YP.js → chunk-SHUFUWAB.js}

@@ -1,19 +1,20 @@
 import {
   loadVaultForCaller
-} from "./chunk-JC2XJBV2.js";
+} from "./chunk-CWVYFBZF.js";
 import {
   jsonOk,
   paginatedOk,
   routeWrap
-} from "./chunk-I2GML5Z7.js";
+} from "./chunk-XOWRUT4X.js";
 import {
   archiveCredential,
   createCredential,
   deleteCredential,
   getCredential,
+  getRefreshConfig,
   listCredentials,
   updateCredential
-} from "./chunk-RZHIYTI3.js";
+} from "./chunk-WK33IBKY.js";
 import {
   badRequest,
   conflict,
@@ -207,6 +208,61 @@ function handleDeleteCredential(request, vaultId, credentialId) {
     return jsonOk({ id: credentialId, type: "vault_credential_deleted" });
   });
 }
+function handleMcpOauthValidate(request, vaultId, credentialId) {
+  return routeWrap(request, async ({ auth }) => {
+    loadVaultForCaller(auth, vaultId);
+    const cred = getCredential(credentialId);
+    if (!cred || cred.vault_id !== vaultId) throw notFound(`credential not found: ${credentialId}`);
+    if (cred.auth.type !== "mcp_oauth") {
+      throw badRequest("credential is not mcp_oauth type");
+    }
+    const config = getRefreshConfig(credentialId);
+    if (!config) throw badRequest("credential has no refresh configuration");
+    const body = new URLSearchParams({
+      grant_type: "refresh_token",
+      client_id: config.client_id,
+      refresh_token: config.refresh_token,
+      ...config.scope ? { scope: config.scope } : {}
+    });
+    const headers = {
+      "Content-Type": "application/x-www-form-urlencoded"
+    };
+    if (config.token_endpoint_auth?.type === "client_secret_basic") {
+      headers.Authorization = `Basic ${btoa(`${config.client_id}:${config.token_endpoint_auth.client_secret}`)}`;
+    } else if (config.token_endpoint_auth?.client_secret) {
+      body.set("client_secret", config.token_endpoint_auth.client_secret);
+    }
+    try {
+      const res = await fetch(config.token_endpoint, {
+        method: "POST",
+        headers,
+        body: body.toString(),
+        signal: AbortSignal.timeout(15e3)
+      });
+      if (res.ok) {
+        return jsonOk({
+          type: "mcp_oauth_validation_result",
+          credential_id: credentialId,
+          valid: true
+        });
+      }
+      const errText = await res.text().catch(() => "");
+      return jsonOk({
+        type: "mcp_oauth_validation_result",
+        credential_id: credentialId,
+        valid: false,
+        error: `token endpoint returned ${res.status}: ${errText.slice(0, 200)}`
+      });
+    } catch (err) {
+      return jsonOk({
+        type: "mcp_oauth_validation_result",
+        credential_id: credentialId,
+        valid: false,
+        error: err instanceof Error ? err.message : "token endpoint unreachable"
+      });
+    }
+  });
+}
 
 export {
   handleCreateCredential,
@@ -214,5 +270,6 @@ export {
   handleGetCredential,
   handleUpdateCredential,
   handleArchiveCredential,
-  handleDeleteCredential
+  handleDeleteCredential,
+  handleMcpOauthValidate
 };

package/dist/{chunk-YMKQJY5F.js → chunk-SIO4LO2M.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 
 // src/backends/codex/auth.ts
 function buildCodexAuthEnv() {

package/dist/{chunk-IITCQTBZ.js → chunk-T2PXAQND.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 
 // src/backends/pi/auth.ts
 function buildPiAuthEnv() {

package/dist/{chunk-HPL2MQGY.js → chunk-T3TNJHED.js}

@@ -6,29 +6,29 @@ import {
   reconcileDockerOrphanSandboxes,
   reconcileOrphanSandboxes,
   releaseSession
-} from "./chunk-2REGK4VO.js";
+} from "./chunk-U4SVWPLC.js";
 import {
   appendEvent,
   dropEmitter
-} from "./chunk-2K3UO6TC.js";
+} from "./chunk-RES4BCTF.js";
 import {
   archiveSession,
   getSessionRow,
   listIdleSessions,
   updateSessionStatus
-} from "./chunk-GBJ3OT4D.js";
+} from "./chunk-ZC7OR65K.js";
 import {
   tryResolveProvider
-} from "./chunk-QQGXM2OQ.js";
+} from "./chunk-C7P2TYOG.js";
 import {
   getEnvironment
-} from "./chunk-BRULBMRN.js";
+} from "./chunk-NSUVDKNC.js";
 import {
   expireWarm
 } from "./chunk-G7KUVNDY.js";
 import {
   getConfig
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 import {
   init_clock,
   nowMs

package/dist/{chunk-SBYBNAOU.js → chunk-TKFAWQD7.js}

@@ -8,14 +8,14 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-I2GML5Z7.js";
+} from "./chunk-XOWRUT4X.js";
 import {
   snapshotApiMetrics
 } from "./chunk-D2XITRN6.js";
 import {
   getDb,
   init_client
-} from "./chunk-Q62QJXGO.js";
+} from "./chunk-AGIXZFHQ.js";
 import {
   badRequest
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-D3LKWVPA.js → chunk-TTDMQ54U.js}

@@ -10,10 +10,10 @@ import {
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-7U62OZSD.js";
+} from "./chunk-ZDDMPGN4.js";
 import {
   schema_exports
-} from "./chunk-4ENK7S24.js";
+} from "./chunk-CXYMVLYK.js";
 
 // src/db/skills.ts
 init_drizzle();

package/dist/{chunk-CPCGFE75.js → chunk-TTZGQIQS.js}

@@ -4,7 +4,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-I2GML5Z7.js";
+} from "./chunk-XOWRUT4X.js";
 
 // src/handlers/license.ts
 function handleGetLicense(request) {

package/dist/{chunk-GNXIA5WC.js → chunk-TVV7AE3G.js}

@@ -10,10 +10,10 @@ import {
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-7U62OZSD.js";
+} from "./chunk-ZDDMPGN4.js";
 import {
   schema_exports
-} from "./chunk-4ENK7S24.js";
+} from "./chunk-CXYMVLYK.js";
 
 // src/db/memory.ts
 init_drizzle();

package/dist/{chunk-2REGK4VO.js → chunk-U4SVWPLC.js}

@@ -1,21 +1,21 @@
-import {
-  resolveVaultSecrets
-} from "./chunk-FQQ2R6FA.js";
 import {
   dockerProvider
 } from "./chunk-4XXQAVKE.js";
+import {
+  resolveVaultSecrets
+} from "./chunk-JNSJKHYX.js";
 import {
   appendEvent
-} from "./chunk-2K3UO6TC.js";
+} from "./chunk-RES4BCTF.js";
 import {
   getSession,
   getSessionRow,
   setSessionSandbox
-} from "./chunk-GBJ3OT4D.js";
+} from "./chunk-ZC7OR65K.js";
 import {
   deleteSprite,
   listSprites
-} from "./chunk-AZLZOG5N.js";
+} from "./chunk-XYNEAJDF.js";
 import {
   allSessionSandboxes,
   countInEnv,
@@ -25,12 +25,12 @@ import {
 import {
   resolveProvider,
   tryResolveProvider
-} from "./chunk-QQGXM2OQ.js";
+} from "./chunk-C7P2TYOG.js";
 import {
   getEnvironment,
   getEnvironmentRow,
   listEnvironments
-} from "./chunk-BRULBMRN.js";
+} from "./chunk-NSUVDKNC.js";
 import {
   addWarm,
   claimWarm,
@@ -41,13 +41,13 @@ import {
 } from "./chunk-G7KUVNDY.js";
 import {
   getAgent
-} from "./chunk-ENFWZ2QM.js";
+} from "./chunk-6U6HEVSN.js";
 import {
   resolveBackend
-} from "./chunk-XMZQW5G5.js";
+} from "./chunk-V5RHOS43.js";
 import {
   getConfig
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 import {
   init_clock,
   nowMs

package/dist/{chunk-5BA36MSQ.js → chunk-UMXXZ6OX.js}

@@ -1,7 +1,7 @@
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-7U62OZSD.js";
+} from "./chunk-ZDDMPGN4.js";
 
 // src/db/traces.ts
 init_drizzle();

package/dist/{chunk-HQQWAVL6.js → chunk-UNO3TSAT.js}

@@ -1,7 +1,7 @@
 import {
   jsonOk,
   routeWrap
-} from "./chunk-I2GML5Z7.js";
+} from "./chunk-XOWRUT4X.js";
 
 // src/handlers/whoami.ts
 function handleWhoami(request) {

package/dist/{chunk-MGSVPAVF.js → chunk-USSUE7J2.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-23UKWXJH.js";
 import {
   recordAudit
-} from "./chunk-FC3UAHXM.js";
+} from "./chunk-FDLQ3IUB.js";
 import {
   COMMUNITY_LIMITS,
   hasFeature,
@@ -15,7 +15,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-I2GML5Z7.js";
+} from "./chunk-XOWRUT4X.js";
 import {
   createApiKey,
   getApiKeyById,
@@ -23,14 +23,14 @@ import {
   listApiKeys,
   revokeApiKey,
   updateApiKeyPermissions
-} from "./chunk-LJNLU5PQ.js";
+} from "./chunk-3NUTTKE5.js";
 import {
   listSessionsByApiKey
-} from "./chunk-GBJ3OT4D.js";
+} from "./chunk-ZC7OR65K.js";
 import {
   getDb,
   init_client
-} from "./chunk-Q62QJXGO.js";
+} from "./chunk-AGIXZFHQ.js";
 import {
   badRequest,
   forbidden,

package/dist/{chunk-WHTGWLGJ.js → chunk-UTGP4X74.js}

@@ -4,7 +4,7 @@ import {
 import {
   getConfig,
   readSetting
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 import {
   __commonJS
 } from "./chunk-2ESYSVXG.js";

package/dist/{chunk-XMZQW5G5.js → chunk-V5RHOS43.js}

@@ -1,21 +1,21 @@
 import {
   piBackend
-} from "./chunk-Y3V4COP7.js";
+} from "./chunk-J7F2OFWQ.js";
+import {
+  geminiBackend
+} from "./chunk-A3FQHVUG.js";
 import {
   opencodeBackend
-} from "./chunk-YS3W5AQA.js";
+} from "./chunk-REHIJQUD.js";
 import {
   factoryBackend
-} from "./chunk-MZ6HBYGV.js";
-import {
-  geminiBackend
-} from "./chunk-UB7GS7XT.js";
+} from "./chunk-65XY7HRS.js";
 import {
   codexBackend
-} from "./chunk-VVCRJ46V.js";
+} from "./chunk-WEUPM3IN.js";
 import {
   claudeBackend
-} from "./chunk-WG3N6VUA.js";
+} from "./chunk-JN3DHH7Z.js";
 
 // src/backends/registry.ts
 var BACKENDS = {

package/dist/{chunk-Z2AVP3QL.js → chunk-VB6GGRIA.js}

@@ -1,18 +1,31 @@
+import {
+  getUserProfile
+} from "./chunk-YOZ6WDP3.js";
 import {
   listCredentialsWithTokens
-} from "./chunk-RZHIYTI3.js";
+} from "./chunk-WK33IBKY.js";
 import {
   listEntries
-} from "./chunk-IC5ZTBAW.js";
+} from "./chunk-MUARVVXF.js";
 
 // src/sessions/secrets.ts
-function loadSessionSecrets(vaultIds) {
+function loadSessionSecrets(vaultIds, userProfileId) {
+  let credentialAllowlist = null;
+  if (userProfileId) {
+    const profile = getUserProfile(userProfileId);
+    if (profile && profile.trust_grants.length > 0) {
+      credentialAllowlist = new Set(
+        profile.trust_grants.map((g) => `${g.vault_id}:${g.credential_id}`)
+      );
+    }
+  }
   const secrets = [];
   for (const vid of vaultIds) {
     for (const entry of listEntries(vid)) {
       secrets.push({ key: entry.key, value: entry.value });
     }
     for (const cred of listCredentialsWithTokens(vid)) {
+      if (credentialAllowlist && !credentialAllowlist.has(`${vid}:${cred.id}`)) continue;
       if (cred.auth.mcp_server_url) {
         const serverName = deriveServerName(cred.auth.mcp_server_url);
         if (serverName) {

package/dist/{chunk-RSXTLOY3.js → chunk-VY5XWTW7.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 import {
   ApiError
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-VVCRJ46V.js → chunk-WEUPM3IN.js}

@@ -4,16 +4,16 @@ import {
 import {
   buildCodexAuthEnv,
   validateCodexRuntime
-} from "./chunk-YMKQJY5F.js";
+} from "./chunk-SIO4LO2M.js";
 import {
   prepareCodexOnSandbox
 } from "./chunk-NMZMRH3E.js";
-import {
-  createCodexTranslator
-} from "./chunk-CULYZ3VA.js";
 import {
   CODEX_WRAPPER_PATH
 } from "./chunk-XJYR5HE3.js";
+import {
+  createCodexTranslator
+} from "./chunk-CULYZ3VA.js";
 import {
   wrapPromptWithSystem
 } from "./chunk-YE2RMJY7.js";

package/dist/{chunk-RZHIYTI3.js → chunk-WK33IBKY.js}

@@ -14,7 +14,7 @@ import {
 import {
   getDb,
   init_client
-} from "./chunk-Q62QJXGO.js";
+} from "./chunk-AGIXZFHQ.js";
 
 // src/db/credentials.ts
 init_client();
@@ -130,6 +130,14 @@ function archiveCredential(vaultId, credentialId) {
   db.prepare(`UPDATE vault_credentials SET archived_at = ?, updated_at = ? WHERE id = ?`).run(now, now, credentialId);
   return getCredential(credentialId);
 }
+function getRefreshConfig(id) {
+  const db = getDb();
+  const row = db.prepare(
+    `SELECT refresh_config_encrypted, auth_type FROM vault_credentials WHERE id = ?`
+  ).get(id);
+  if (!row || row.auth_type !== "mcp_oauth" || !row.refresh_config_encrypted) return null;
+  return JSON.parse(decryptValue(row.refresh_config_encrypted));
+}
 function deleteCredential(id) {
   const db = getDb();
   const res = db.prepare(`DELETE FROM vault_credentials WHERE id = ?`).run(id);
@@ -144,5 +152,6 @@ export {
   listCredentialsWithTokens,
   updateCredential,
   archiveCredential,
+  getRefreshConfig,
   deleteCredential
 };

package/dist/{chunk-I2GML5Z7.js → chunk-XOWRUT4X.js}

@@ -4,13 +4,13 @@ import {
 } from "./chunk-D2XITRN6.js";
 import {
   authenticateAndIntercept
-} from "./chunk-BW6OSLW7.js";
+} from "./chunk-CWB2DQN5.js";
 import {
   checkAndBump
 } from "./chunk-HVUWXUUI.js";
 import {
   ensureInitialized
-} from "./chunk-G6XFFNCQ.js";
+} from "./chunk-N7XSXI5O.js";
 import {
   captureException
 } from "./chunk-3MQ2FWXS.js";

package/dist/{chunk-AZLZOG5N.js → chunk-XYNEAJDF.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 import {
   ApiError
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-K7Y3EAGL.js → chunk-Y5RNFM44.js}

@@ -1,11 +1,11 @@
 import {
   jsonOk,
   routeWrap
-} from "./chunk-I2GML5Z7.js";
+} from "./chunk-XOWRUT4X.js";
 import {
   readSetting,
   writeSetting
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 import {
   badRequest
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-GSDVHR43.js → chunk-YJCH35J4.js}

@@ -6,12 +6,13 @@ import {
 } from "./chunk-FX2AEKOV.js";
 import {
   getConfig
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 
 // src/backends/claude/args.ts
 function buildClaudeArgs(input) {
   const cfg = getConfig();
-  const permissionMode = input.confirmationMode ? "default" : "bypassPermissions";
+  const policy = input.agent.permission_policy;
+  const permissionMode = input.confirmationMode ? "default" : policy ? "default" : "bypassPermissions";
   const argv = [
     "-p",
     "--output-format",
@@ -42,7 +43,8 @@ Your custom tools are: ${toolList}. Call them by these exact names \u2014 do not
   const mcpToolNames = Array.from(tools.customToolNames).map(
     (name) => `mcp__tool-bridge__${name}`
   );
-  const allAllowed = [...tools.allowedTools, ...mcpToolNames];
+  const policyAllowed = policy?.always_allow ?? [];
+  const allAllowed = [...tools.allowedTools, ...mcpToolNames, ...policyAllowed];
   if (allAllowed.length) {
     argv.push("--allowed-tools", allAllowed.join(","));
   }

package/dist/{chunk-T77N7C3M.js → chunk-YKPRNV6J.js}

@@ -10,10 +10,10 @@ import {
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-7U62OZSD.js";
+} from "./chunk-ZDDMPGN4.js";
 import {
   schema_exports
-} from "./chunk-4ENK7S24.js";
+} from "./chunk-CXYMVLYK.js";
 
 // src/db/files.ts
 init_drizzle();

package/dist/chunk-YOZ6WDP3.js

@@ -0,0 +1,103 @@
+import {
+  init_ids,
+  newId
+} from "./chunk-F4WUVOLE.js";
+import {
+  init_clock,
+  nowMs,
+  toIso
+} from "./chunk-HFDLUBWN.js";
+import {
+  getDb,
+  init_client
+} from "./chunk-AGIXZFHQ.js";
+
+// src/db/user-profiles.ts
+init_client();
+init_ids();
+init_clock();
+function hydrate(row) {
+  return {
+    type: "user_profile",
+    id: row.id,
+    external_id: row.external_id,
+    display_name: row.display_name,
+    trust_grants: JSON.parse(row.trust_grants_json),
+    tenant_id: row.tenant_id,
+    created_at: toIso(row.created_at),
+    updated_at: toIso(row.updated_at)
+  };
+}
+function createUserProfile(input) {
+  const db = getDb();
+  const id = newId("uprof");
+  const now = nowMs();
+  db.prepare(
+    `INSERT INTO user_profiles (id, external_id, display_name, trust_grants_json, tenant_id, created_at, updated_at)
+     VALUES (?, ?, ?, ?, ?, ?, ?)`
+  ).run(
+    id,
+    input.external_id ?? null,
+    input.display_name ?? null,
+    JSON.stringify(input.trust_grants ?? []),
+    input.tenant_id ?? null,
+    now,
+    now
+  );
+  return getUserProfile(id);
+}
+function getUserProfile(id) {
+  const db = getDb();
+  const row = db.prepare(`SELECT * FROM user_profiles WHERE id = ?`).get(id);
+  return row ? hydrate(row) : null;
+}
+function listUserProfiles(opts) {
+  const db = getDb();
+  const limit = Math.min(opts.limit ?? 50, 100);
+  const parts = [];
+  const args = [];
+  if (opts.tenant_id) {
+    parts.push("tenant_id = ?");
+    args.push(opts.tenant_id);
+  }
+  if (opts.after_id) {
+    parts.push("id > ?");
+    args.push(opts.after_id);
+  }
+  const where = parts.length > 0 ? `WHERE ${parts.join(" AND ")}` : "";
+  const rows = db.prepare(
+    `SELECT * FROM user_profiles ${where} ORDER BY id ASC LIMIT ?`
+  ).all(...args, limit + 1);
+  const hasMore = rows.length > limit;
+  if (hasMore) rows.pop();
+  return { data: rows.map(hydrate), has_more: hasMore };
+}
+function updateUserProfile(id, input) {
+  const db = getDb();
+  const existing = db.prepare(`SELECT * FROM user_profiles WHERE id = ?`).get(id);
+  if (!existing) return null;
+  const now = nowMs();
+  const parts = ["updated_at = ?"];
+  const args = [now];
+  if (input.external_id !== void 0) {
+    parts.push("external_id = ?");
+    args.push(input.external_id);
+  }
+  if (input.display_name !== void 0) {
+    parts.push("display_name = ?");
+    args.push(input.display_name);
+  }
+  if (input.trust_grants !== void 0) {
+    parts.push("trust_grants_json = ?");
+    args.push(JSON.stringify(input.trust_grants));
+  }
+  db.prepare(`UPDATE user_profiles SET ${parts.join(", ")} WHERE id = ?`).run(...args, id);
+  return getUserProfile(id);
+}
+
+export {
+  createUserProfile,
+  getUserProfile,
+  listUserProfiles,
+  updateUserProfile
+};

package/dist/{chunk-7DPZMROX.js → chunk-YRFWPBGX.js}

@@ -1,11 +1,11 @@
 import {
   resolveContainerProvider,
   resolveProvider
-} from "./chunk-QQGXM2OQ.js";
+} from "./chunk-C7P2TYOG.js";
 import {
   getEnvironmentRow,
   updateEnvironmentState
-} from "./chunk-BRULBMRN.js";
+} from "./chunk-NSUVDKNC.js";
 import {
   installClaudeWrapper
 } from "./chunk-J6T3W6RY.js";

package/dist/{chunk-F5SHFZUA.js → chunk-YTBVILAH.js}

@@ -10,7 +10,7 @@ import {
 import {
   getDb,
   init_client
-} from "./chunk-Q62QJXGO.js";
+} from "./chunk-AGIXZFHQ.js";
 
 // src/db/tenants.ts
 init_client();