@agentstep/agent-sdk 0.5.28 → 0.5.34

package/dist/{chunk-IWI74DWW.js → chunk-BSAF4YJB.js}

@@ -1,10 +1,10 @@
 import {
   syncAndCreateSession
-} from "./chunk-NKOGWVP3.js";
+} from "./chunk-AUEKXYNE.js";
 import {
   resolveRemoteSessionId,
   upsertSync
-} from "./chunk-MQSTE4WH.js";
+} from "./chunk-ZBWKJ42J.js";
 import {
   assertResourceTenant,
   tenantFilter
@@ -14,19 +14,19 @@ import {
 } from "./chunk-DC2UMEQH.js";
 import {
   getMemoryStore
-} from "./chunk-GNXIA5WC.js";
+} from "./chunk-TVV7AE3G.js";
 import {
   kickoffEnvironmentSetup
-} from "./chunk-7DPZMROX.js";
+} from "./chunk-K5J4IN2S.js";
 import {
   decodeCursor,
   jsonOk,
   paginatedOk,
   routeWrap
-} from "./chunk-DI5WC2SQ.js";
+} from "./chunk-4EKHW6VS.js";
 import {
   forwardToAnthropic
-} from "./chunk-IDQKHWWN.js";
+} from "./chunk-JFHYXFAL.js";
 import {
   errors_exports,
   init_errors
@@ -36,32 +36,33 @@ import {
   isProxied,
   markProxied,
   unmarkProxied
-} from "./chunk-GKNBECPD.js";
+} from "./chunk-DZKBUOYU.js";
 import {
   dropActor,
   getActor
 } from "./chunk-LAWTTG2E.js";
 import {
   releaseSession
-} from "./chunk-2REGK4VO.js";
+} from "./chunk-ZCCHLDLC.js";
 import {
   appendEvent,
   dropEmitter
-} from "./chunk-2K3UO6TC.js";
+} from "./chunk-RES4BCTF.js";
 import {
   archiveSession,
   createSession,
   getSession,
   listSessions,
+  setOutcomeCriteria,
   updateSessionMutable,
   updateSessionStatus
-} from "./chunk-GBJ3OT4D.js";
+} from "./chunk-ZC7OR65K.js";
 import {
   getEnvironment
-} from "./chunk-BRULBMRN.js";
+} from "./chunk-NSUVDKNC.js";
 import {
   getAgent
-} from "./chunk-ENFWZ2QM.js";
+} from "./chunk-6U6HEVSN.js";
 import {
   init_clock,
   nowMs
@@ -69,7 +70,7 @@ import {
 import {
   getDb,
   init_client
-} from "./chunk-Q62QJXGO.js";
+} from "./chunk-AGIXZFHQ.js";
 import {
   badRequest,
   notFound
@@ -149,7 +150,17 @@ var CreateSchema = z.object({
   max_tokens: z.number().int().positive().optional(),
   max_wall_duration_ms: z.number().int().positive().optional(),
   resources: z.array(ResourceSchema).optional(),
-  vault_ids: z.array(z.string()).optional()
+  vault_ids: z.array(z.string()).optional(),
+  user_profile_id: z.string().optional(),
+  outcomes: z.object({
+    description: z.string().min(1),
+    rubric: z.array(z.object({
+      name: z.string(),
+      description: z.string(),
+      weight: z.number().optional()
+    })).optional(),
+    max_iterations: z.number().int().min(1).max(10).optional()
+  }).optional()
 });
 var UpdateSchema = z.object({
   title: z.string().nullish(),
@@ -250,6 +261,14 @@ function handleCreateSession(request) {
           }
         }
       }
+      if (data.user_profile_id) {
+        const { getUserProfile } = await import("./db/user-profiles.js");
+        const profile = getUserProfile(data.user_profile_id);
+        if (!profile) throw badRequest(`user profile not found: ${data.user_profile_id}`);
+        if (profile.tenant_id && profile.tenant_id !== agentTenantId) {
+          throw badRequest(`user profile does not belong to this tenant`);
+        }
+      }
       if (data.resources?.length) {
         const memStoreResources = data.resources.filter((r) => r.type === "memory_store");
         if (memStoreResources.length > 8) {
@@ -296,6 +315,7 @@ function handleCreateSession(request) {
           max_wall_duration_ms: data.max_wall_duration_ms ?? null,
           resources: data.resources?.length ? data.resources : null,
           vault_ids: data.vault_ids?.length ? data.vault_ids : null,
+          user_profile_id: data.user_profile_id ?? null,
           api_key_id: auth.keyId,
           tenant_id: agentTenantId
         });
@@ -335,6 +355,14 @@ function handleCreateSession(request) {
         });
         upsertSync(session2.id, "session", remoteSessionId);
         markProxied(session2.id, "session", agentTenantId);
+        if (data.outcomes) {
+          setOutcomeCriteria(session2.id, {
+            description: data.outcomes.description,
+            rubric: data.outcomes.rubric ?? [],
+            max_iterations: data.outcomes.max_iterations ?? 3,
+            status: "running"
+          });
+        }
         getActor(session2.id);
         return jsonOk(session2, 201);
       }
@@ -357,6 +385,7 @@ function handleCreateSession(request) {
         max_wall_duration_ms: data.max_wall_duration_ms ?? null,
         resources: data.resources?.length ? data.resources : null,
         vault_ids: data.vault_ids?.length ? data.vault_ids : null,
+        user_profile_id: data.user_profile_id ?? null,
         api_key_id: auth.keyId,
         tenant_id: agentTenantId
       });
@@ -391,6 +420,14 @@ function handleCreateSession(request) {
           });
         }
       }
+      if (data.outcomes) {
+        setOutcomeCriteria(session.id, {
+          description: data.outcomes.description,
+          rubric: data.outcomes.rubric ?? [],
+          max_iterations: data.outcomes.max_iterations ?? 3,
+          status: "running"
+        });
+      }
       getActor(session.id);
       return jsonOk(session, 201);
     }

package/dist/{chunk-CVYNMYIE.js → chunk-CWB2DQN5.js}

@@ -1,6 +1,6 @@
 import {
   forwardToAnthropic
-} from "./chunk-IDQKHWWN.js";
+} from "./chunk-JFHYXFAL.js";
 import {
   isAnthropicApiKey,
   isPassthroughAllowedPath
@@ -8,10 +8,10 @@ import {
 import {
   findByRawKey,
   hydratePermissions
-} from "./chunk-LJNLU5PQ.js";
+} from "./chunk-3NUTTKE5.js";
 import {
   getConfig
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 import {
   unauthorized
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-4ENK7S24.js → chunk-CXYMVLYK.js}

@@ -91,6 +91,8 @@ var init_schema = __esm({
       webhook_secret: text("webhook_secret"),
       // Multi-agent orchestration config:
       multiagent_json: text("multiagent_json"),
+      // Per-agent tool permission overrides:
+      permission_policy_json: text("permission_policy_json"),
       created_at: integer("created_at").notNull()
     }, (table) => [
       primaryKey({ columns: [table.agent_id, table.version] })
@@ -147,6 +149,8 @@ var init_schema = __esm({
       api_key_id: text("api_key_id"),
       // v0.5 ALTER TABLE addition:
       tenant_id: text("tenant_id"),
+      // User profile scoping:
+      user_profile_id: text("user_profile_id"),
       created_at: integer("created_at").notNull(),
       updated_at: integer("updated_at").notNull(),
       archived_at: integer("archived_at")

package/dist/{chunk-MNZB2OWP.js → chunk-CZ4N5FJW.js}

@@ -8,14 +8,14 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-DI5WC2SQ.js";
+} from "./chunk-4EKHW6VS.js";
 import {
   snapshotApiMetrics
 } from "./chunk-D2XITRN6.js";
 import {
   getDb,
   init_client
-} from "./chunk-Q62QJXGO.js";
+} from "./chunk-AGIXZFHQ.js";
 import {
   badRequest
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-R37QM2U4.js → chunk-DF34ESOO.js}

@@ -1,6 +1,6 @@
 import {
   readSetting
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 
 // src/lib/skills-cache.ts
 var DEFAULT_FEED_URL = "https://www.agentstep.com/v1/skills/feed";

package/dist/{chunk-GKNBECPD.js → chunk-DZKBUOYU.js}

@@ -5,10 +5,10 @@ import {
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-7U62OZSD.js";
+} from "./chunk-ZDDMPGN4.js";
 import {
   schema_exports
-} from "./chunk-4ENK7S24.js";
+} from "./chunk-CXYMVLYK.js";
 
 // src/db/proxy.ts
 init_drizzle();

package/dist/{chunk-CACVB5PH.js → chunk-FCPZF7KJ.js}

@@ -4,7 +4,7 @@ import {
 import {
   jsonOk,
   routeWrap
-} from "./chunk-DI5WC2SQ.js";
+} from "./chunk-4EKHW6VS.js";
 
 // src/handlers/license.ts
 function handleGetLicense(request) {

package/dist/{chunk-FC3UAHXM.js → chunk-FDLQ3IUB.js}

@@ -14,7 +14,7 @@ import {
 import {
   getDb,
   init_client
-} from "./chunk-Q62QJXGO.js";
+} from "./chunk-AGIXZFHQ.js";
 
 // src/db/audit.ts
 init_client();

package/dist/{chunk-HVCY7DET.js → chunk-FHOJOLXU.js}

@@ -4,11 +4,11 @@ import {
   getSources,
   getStats,
   searchSkills
-} from "./chunk-R37QM2U4.js";
+} from "./chunk-DF34ESOO.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-DI5WC2SQ.js";
+} from "./chunk-4EKHW6VS.js";
 
 // src/handlers/skills.ts
 async function handleGetSkillsCatalog(request) {

package/dist/{chunk-5AV732JY.js → chunk-GABMXDZZ.js}

@@ -4,10 +4,10 @@ import {
   getWorkItemInputs,
   heartbeatWorkItem,
   pollWorkItem
-} from "./chunk-A4GJADRQ.js";
+} from "./chunk-JF777FWD.js";
 import {
   runTurn
-} from "./chunk-BYUIOMPX.js";
+} from "./chunk-KYKVHH7I.js";
 
 // src/workers/runner.ts
 async function startWorker(opts) {

package/dist/{chunk-LSMTQBMW.js → chunk-GBBQD6VY.js}

@@ -4,11 +4,11 @@ import {
 } from "./chunk-23UKWXJH.js";
 import {
   listAudit
-} from "./chunk-FC3UAHXM.js";
+} from "./chunk-FDLQ3IUB.js";
 import {
   paginatedOk,
   routeWrap
-} from "./chunk-DI5WC2SQ.js";
+} from "./chunk-4EKHW6VS.js";
 import {
   badRequest
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-FDL2JHXO.js → chunk-GCT7A5KR.js}

@@ -10,10 +10,10 @@ import {
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-7U62OZSD.js";
+} from "./chunk-ZDDMPGN4.js";
 import {
   schema_exports
-} from "./chunk-4ENK7S24.js";
+} from "./chunk-CXYMVLYK.js";
 import {
   __esm,
   __export

package/dist/{chunk-QBZMVYDV.js → chunk-GFZ2WIVH.js}

@@ -7,7 +7,7 @@ import {
   jsonOk,
   paginatedOk,
   routeWrap
-} from "./chunk-DI5WC2SQ.js";
+} from "./chunk-4EKHW6VS.js";
 import {
   archiveVault,
   createVault,
@@ -19,14 +19,14 @@ import {
   listVaults,
   setEntry,
   updateVault
-} from "./chunk-IC5ZTBAW.js";
+} from "./chunk-MUARVVXF.js";
 import {
   getAgent
-} from "./chunk-ENFWZ2QM.js";
+} from "./chunk-6U6HEVSN.js";
 import {
   getDb,
   init_client
-} from "./chunk-Q62QJXGO.js";
+} from "./chunk-AGIXZFHQ.js";
 import {
   badRequest,
   conflict,

package/dist/{chunk-ANTKOI3K.js → chunk-HHLVVJGT.js}

@@ -1,11 +1,11 @@
 import {
   BatchError,
   executeBatch
-} from "./chunk-KWG7NGYF.js";
+} from "./chunk-I2RVN7CP.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-DI5WC2SQ.js";
+} from "./chunk-4EKHW6VS.js";
 import {
   badRequest
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-Z5XQQN7H.js → chunk-HWWFRSAX.js}

@@ -1,16 +1,16 @@
 import {
   disableUpstreamKey,
   selectNextUpstreamKey
-} from "./chunk-ZP5QO5BR.js";
+} from "./chunk-ABUNDZCE.js";
 import {
   listEntries
-} from "./chunk-IC5ZTBAW.js";
+} from "./chunk-MUARVVXF.js";
 import {
   getSession
-} from "./chunk-GBJ3OT4D.js";
+} from "./chunk-ZC7OR65K.js";
 import {
   getConfig
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 
 // src/providers/upstream-keys.ts
 var CONSECUTIVE_FAIL_THRESHOLD = 3;

package/dist/{chunk-KWG7NGYF.js → chunk-I2RVN7CP.js}

@@ -1,20 +1,20 @@
 import {
   createSession
-} from "./chunk-GBJ3OT4D.js";
+} from "./chunk-ZC7OR65K.js";
 import {
   createEnvironment,
   deleteEnvironment,
   getEnvironment
-} from "./chunk-BRULBMRN.js";
+} from "./chunk-NSUVDKNC.js";
 import {
   archiveAgent,
   createAgent,
   getAgent
-} from "./chunk-ENFWZ2QM.js";
+} from "./chunk-6U6HEVSN.js";
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-7U62OZSD.js";
+} from "./chunk-ZDDMPGN4.js";
 
 // src/db/batch.ts
 init_drizzle();

package/dist/{chunk-JCIAIJFF.js → chunk-IC2ETYU5.js}

@@ -8,13 +8,13 @@ import {
   getMemoryByPath,
   getMemoryStore,
   listMemories
-} from "./chunk-GNXIA5WC.js";
+} from "./chunk-TVV7AE3G.js";
 import {
   listSessions
-} from "./chunk-GBJ3OT4D.js";
+} from "./chunk-ZC7OR65K.js";
 import {
   listEvents
-} from "./chunk-IS6CQPAQ.js";
+} from "./chunk-OEFJPZYH.js";
 import {
   init_clock,
   nowMs

package/dist/{chunk-3FLQ7KZP.js → chunk-IMJTHYN3.js}

@@ -1,6 +1,6 @@
 import {
   buildOpenApiDocument
-} from "./chunk-I2WVMCYN.js";
+} from "./chunk-PWLWDWRL.js";
 
 // src/handlers/openapi.ts
 function originFromRequest(request) {

package/dist/{chunk-ISGA4AOC.js → chunk-J6ESQUW6.js}

@@ -1,9 +1,9 @@
 import {
   listEntries
-} from "./chunk-IC5ZTBAW.js";
+} from "./chunk-MUARVVXF.js";
 import {
   getConfig
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 
 // src/observability/redactor.ts
 var REDACTED = "[REDACTED]";

package/dist/{chunk-Y3V4COP7.js → chunk-J7F2OFWQ.js}

@@ -1,16 +1,16 @@
+import {
+  createPiTranslator
+} from "./chunk-B6E6BVNK.js";
 import {
   buildPiArgs
-} from "./chunk-6KWJASEO.js";
+} from "./chunk-6SD6MC2B.js";
 import {
   buildPiAuthEnv,
   validatePiRuntime
-} from "./chunk-IITCQTBZ.js";
+} from "./chunk-T2PXAQND.js";
 import {
   preparePiOnSandbox
 } from "./chunk-CMOU2OFW.js";
-import {
-  createPiTranslator
-} from "./chunk-B6E6BVNK.js";
 import {
   PI_WRAPPER_PATH
 } from "./chunk-OGA7KDQZ.js";

package/dist/{chunk-3V4BPIBU.js → chunk-JDAOTVWV.js}

@@ -1,10 +1,10 @@
 import {
   getModels
-} from "./chunk-WHTGWLGJ.js";
+} from "./chunk-UTGP4X74.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-DI5WC2SQ.js";
+} from "./chunk-4EKHW6VS.js";
 
 // src/handlers/models.ts
 function handleListModels(request) {

package/dist/{chunk-A4GJADRQ.js → chunk-JF777FWD.js}

@@ -10,10 +10,10 @@ import {
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-7U62OZSD.js";
+} from "./chunk-ZDDMPGN4.js";
 import {
   schema_exports
-} from "./chunk-4ENK7S24.js";
+} from "./chunk-CXYMVLYK.js";
 
 // src/db/work.ts
 init_drizzle();

package/dist/{chunk-IDQKHWWN.js → chunk-JFHYXFAL.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 import {
   ApiError
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-WLCI57J6.js → chunk-JIXRTWYL.js}

@@ -1,6 +1,6 @@
 import {
   SUPPORTED_PROVIDERS
-} from "./chunk-Z5XQQN7H.js";
+} from "./chunk-HWWFRSAX.js";
 import {
   addUpstreamKey,
   deleteUpstreamKey,
@@ -8,20 +8,20 @@ import {
   enableUpstreamKey,
   getUpstreamKey,
   listUpstreamKeys
-} from "./chunk-ZP5QO5BR.js";
+} from "./chunk-ABUNDZCE.js";
 import {
   requireGlobalAdmin
 } from "./chunk-23UKWXJH.js";
 import {
   recordAudit
-} from "./chunk-FC3UAHXM.js";
+} from "./chunk-FDLQ3IUB.js";
 import {
   requireFeature
 } from "./chunk-2N2KL4KM.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-DI5WC2SQ.js";
+} from "./chunk-4EKHW6VS.js";
 import {
   badRequest,
   notFound

package/dist/{chunk-WG3N6VUA.js → chunk-JN3DHH7Z.js}

@@ -1,13 +1,3 @@
-import {
-  buildClaudeArgs,
-  buildClaudeAuthEnv
-} from "./chunk-GSDVHR43.js";
-import {
-  PERMISSION_BRIDGE_DIR,
-  PERMISSION_HOOK_SCRIPT_PATH,
-  buildPermissionHooksConfig,
-  generatePermissionHookScript
-} from "./chunk-CY6AWCC6.js";
 import {
   TOOL_BRIDGE_DIR,
   TOOL_BRIDGE_SCRIPT_PATH,
@@ -19,13 +9,23 @@ import {
 import {
   createClaudeTranslator
 } from "./chunk-D6RQPBRG.js";
+import {
+  buildClaudeArgs,
+  buildClaudeAuthEnv
+} from "./chunk-YJCH35J4.js";
+import {
+  PERMISSION_BRIDGE_DIR,
+  PERMISSION_HOOK_SCRIPT_PATH,
+  buildPermissionHooksConfig,
+  generatePermissionHookScript
+} from "./chunk-CY6AWCC6.js";
 import {
   CLAUDE_WRAPPER_PATH,
   installClaudeWrapper
 } from "./chunk-J6T3W6RY.js";
 import {
   getConfig
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 
 // src/backends/claude/index.ts
 function buildTurn(input) {

package/dist/{chunk-FQQ2R6FA.js → chunk-JNSJKHYX.js}

@@ -1,6 +1,6 @@
 import {
   listEntries
-} from "./chunk-IC5ZTBAW.js";
+} from "./chunk-MUARVVXF.js";
 
 // src/providers/resolve-secrets.ts
 var BLOCKED_ENV_KEYS = /* @__PURE__ */ new Set([

package/dist/{chunk-HPL2MQGY.js → chunk-K3LM6O44.js}

@@ -6,29 +6,29 @@ import {
   reconcileDockerOrphanSandboxes,
   reconcileOrphanSandboxes,
   releaseSession
-} from "./chunk-2REGK4VO.js";
+} from "./chunk-ZCCHLDLC.js";
 import {
   appendEvent,
   dropEmitter
-} from "./chunk-2K3UO6TC.js";
+} from "./chunk-RES4BCTF.js";
 import {
   archiveSession,
   getSessionRow,
   listIdleSessions,
   updateSessionStatus
-} from "./chunk-GBJ3OT4D.js";
+} from "./chunk-ZC7OR65K.js";
 import {
   tryResolveProvider
-} from "./chunk-QQGXM2OQ.js";
+} from "./chunk-XLMNSDUJ.js";
 import {
   getEnvironment
-} from "./chunk-BRULBMRN.js";
+} from "./chunk-NSUVDKNC.js";
 import {
   expireWarm
 } from "./chunk-G7KUVNDY.js";
 import {
   getConfig
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 import {
   init_clock,
   nowMs

package/dist/{chunk-7DPZMROX.js → chunk-K5J4IN2S.js}

@@ -1,11 +1,11 @@
 import {
   resolveContainerProvider,
   resolveProvider
-} from "./chunk-QQGXM2OQ.js";
+} from "./chunk-XLMNSDUJ.js";
 import {
   getEnvironmentRow,
   updateEnvironmentState
-} from "./chunk-BRULBMRN.js";
+} from "./chunk-NSUVDKNC.js";
 import {
   installClaudeWrapper
 } from "./chunk-J6T3W6RY.js";

package/dist/{chunk-TJORQTH6.js → chunk-KGOOCFQY.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 
 // src/backends/gemini/auth.ts
 function buildGeminiAuthEnv() {