@agentstep/agent-sdk 0.5.28 → 0.5.34

package/dist/{chunk-4BJTLMHV.js → chunk-OEYLPPID.js}

@@ -2,10 +2,10 @@ import {
   reportUpstreamFailure,
   reportUpstreamSuccess,
   resolveAnthropicKey
-} from "./chunk-Z5XQQN7H.js";
+} from "./chunk-HWWFRSAX.js";
 import {
   resolveRemoteSessionId
-} from "./chunk-MQSTE4WH.js";
+} from "./chunk-ZBWKJ42J.js";
 import {
   assertResourceTenant
 } from "./chunk-23UKWXJH.js";
@@ -20,53 +20,53 @@ import {
   listMemoryStores,
   searchMemories,
   updateMemory
-} from "./chunk-GNXIA5WC.js";
+} from "./chunk-TVV7AE3G.js";
 import {
   jsonOk,
   paginatedOk,
   routeWrap
-} from "./chunk-DI5WC2SQ.js";
+} from "./chunk-4EKHW6VS.js";
 import {
   forwardToAnthropic
-} from "./chunk-IDQKHWWN.js";
-import {
-  enqueueTurn
-} from "./chunk-SKVAM5H2.js";
+} from "./chunk-JFHYXFAL.js";
 import {
   runTurn,
   writePermissionResponse
-} from "./chunk-BYUIOMPX.js";
+} from "./chunk-KYKVHH7I.js";
+import {
+  enqueueTurn
+} from "./chunk-B3W3E5CS.js";
 import {
   getProxiedTenantId,
   isProxied
-} from "./chunk-GKNBECPD.js";
+} from "./chunk-DZKBUOYU.js";
 import {
   getActor
 } from "./chunk-LAWTTG2E.js";
 import {
   appendEvent
-} from "./chunk-2K3UO6TC.js";
+} from "./chunk-RES4BCTF.js";
 import {
   bumpSessionStats,
   getSession,
   getSessionRow,
   setOutcomeCriteria,
   updateSessionMutable
-} from "./chunk-GBJ3OT4D.js";
+} from "./chunk-ZC7OR65K.js";
 import {
   listEvents,
   rowToManagedEvent
-} from "./chunk-IS6CQPAQ.js";
+} from "./chunk-OEFJPZYH.js";
 import {
   getEnvironment,
   getEnvironmentRow
-} from "./chunk-BRULBMRN.js";
+} from "./chunk-NSUVDKNC.js";
 import {
   getAgent
-} from "./chunk-ENFWZ2QM.js";
+} from "./chunk-6U6HEVSN.js";
 import {
   getConfig
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 import {
   init_clock,
   nowMs
@@ -74,7 +74,7 @@ import {
 import {
   getDb,
   init_client
-} from "./chunk-Q62QJXGO.js";
+} from "./chunk-AGIXZFHQ.js";
 import {
   badRequest,
   notFound

package/dist/{chunk-G6XFFNCQ.js → chunk-P7V3S2T3.js}

@@ -1,60 +1,60 @@
-import {
-  enqueueTurn
-} from "./chunk-SKVAM5H2.js";
 import {
   runTurn
-} from "./chunk-BYUIOMPX.js";
+} from "./chunk-KYKVHH7I.js";
 import {
-  installOtlpExporter
-} from "./chunk-PZKWZKRP.js";
+  enqueueTurn
+} from "./chunk-B3W3E5CS.js";
 import {
   redactAppendInput
-} from "./chunk-ISGA4AOC.js";
+} from "./chunk-J6ESQUW6.js";
+import {
+  installOtlpExporter
+} from "./chunk-2KF2TIEY.js";
 import {
   createApiKey,
   listApiKeys
-} from "./chunk-LJNLU5PQ.js";
+} from "./chunk-3NUTTKE5.js";
 import {
   initSentry
 } from "./chunk-3MQ2FWXS.js";
 import {
   installShutdownHandlers
-} from "./chunk-KD5Y4XSU.js";
+} from "./chunk-ZACPJA3G.js";
 import {
   runSweep
-} from "./chunk-HPL2MQGY.js";
+} from "./chunk-K3LM6O44.js";
 import {
   fillWarmPools,
   reconcileDockerOrphanSandboxes,
   reconcileOrphanSandboxes
-} from "./chunk-2REGK4VO.js";
+} from "./chunk-ZCCHLDLC.js";
 import {
   appendEvent,
   installPayloadRedactor
-} from "./chunk-2K3UO6TC.js";
+} from "./chunk-RES4BCTF.js";
 import {
   setSessionSandbox
-} from "./chunk-GBJ3OT4D.js";
+} from "./chunk-ZC7OR65K.js";
 import {
   readEnvValue,
   upsertEnvLine
 } from "./chunk-YPXI7Q2M.js";
 import {
   getLastUnprocessedUserMessage
-} from "./chunk-IS6CQPAQ.js";
+} from "./chunk-OEFJPZYH.js";
 import {
   getBySession,
   register
 } from "./chunk-EFOIR7R3.js";
 import {
   tryResolveProvider
-} from "./chunk-QQGXM2OQ.js";
+} from "./chunk-XLMNSDUJ.js";
 import {
   getEnvironment
-} from "./chunk-BRULBMRN.js";
+} from "./chunk-NSUVDKNC.js";
 import {
   getConfig
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 import {
   init_clock,
   nowMs
@@ -62,7 +62,7 @@ import {
 import {
   getDb,
   init_client
-} from "./chunk-Q62QJXGO.js";
+} from "./chunk-AGIXZFHQ.js";
 import {
   getRuntime
 } from "./chunk-UYTSKFGK.js";

package/dist/{chunk-P56WU3UT.js → chunk-PDWLVL34.js}

@@ -1,15 +1,18 @@
 // src/backends/opencode/args.ts
+function normalizeOpencodeModel(model) {
+  if (model.includes("/")) return model;
+  if (model.startsWith("claude-")) return `anthropic/${model}`;
+  if (model.startsWith("gemini-")) return `google/${model}`;
+  if (model.startsWith("gpt-") || model.startsWith("o1-") || model.startsWith("o3-") || model.startsWith("o4-") || model.startsWith("chatgpt-")) return `openai/${model}`;
+  return `ollama/${model}`;
+}
 function buildOpencodeArgs(input) {
   const args = ["run", "--format", "json", "--dangerously-skip-permissions"];
   if (input.backendSessionId) {
     args.push("--session", input.backendSessionId);
   }
   if (input.agent.model) {
-    const modelId = input.agent.model.id;
-    const cloudPrefixes = ["claude-", "gpt-", "o1-", "o3-", "o4-", "codex-", "chatgpt-", "gemini-"];
-    const isOllama = !modelId.includes("/") && !cloudPrefixes.some((p) => modelId.startsWith(p));
-    const modelArg = isOllama ? `ollama/${modelId}` : modelId;
-    args.push("--model", modelArg);
+    args.push("--model", normalizeOpencodeModel(input.agent.model.id));
   }
   return args;
 }

package/dist/{chunk-I2WVMCYN.js → chunk-PWLWDWRL.js}

@@ -84,7 +84,7 @@ import {
   VaultListResponseSchema,
   VaultSchema,
   WhoamiResponseSchema
-} from "./chunk-CBPO2P4I.js";
+} from "./chunk-SAI6LBXW.js";
 import {
   registry
 } from "./chunk-7346CKTF.js";

package/dist/{chunk-JTGISCYV.js → chunk-QCGIYXN4.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 
 // src/backends/opencode/auth.ts
 function buildOpencodeAuthEnv() {

package/dist/{chunk-YS3W5AQA.js → chunk-REHIJQUD.js}

@@ -1,22 +1,22 @@
-import {
-  buildOpencodeArgs
-} from "./chunk-P56WU3UT.js";
-import {
-  buildOpencodeAuthEnv,
-  validateOpencodeRuntime
-} from "./chunk-JTGISCYV.js";
 import {
   buildOpencodeConfigEnv
 } from "./chunk-V5DH3OAC.js";
 import {
   prepareOpencodeOnSandbox
 } from "./chunk-URNG7ZX2.js";
+import {
+  createOpencodeTranslator
+} from "./chunk-ETWGCBIQ.js";
 import {
   OPENCODE_WRAPPER_PATH
 } from "./chunk-UY3VT3HQ.js";
 import {
-  createOpencodeTranslator
-} from "./chunk-ETWGCBIQ.js";
+  buildOpencodeArgs
+} from "./chunk-PDWLVL34.js";
+import {
+  buildOpencodeAuthEnv,
+  validateOpencodeRuntime
+} from "./chunk-QCGIYXN4.js";
 import {
   wrapPromptWithSystem
 } from "./chunk-YE2RMJY7.js";

package/dist/{chunk-2K3UO6TC.js → chunk-RES4BCTF.js}

@@ -1,19 +1,19 @@
 import {
   getSession
-} from "./chunk-GBJ3OT4D.js";
+} from "./chunk-ZC7OR65K.js";
 import {
   appendEvent,
   appendEventsBatch,
   listEvents,
   rowToManagedEvent
-} from "./chunk-IS6CQPAQ.js";
+} from "./chunk-OEFJPZYH.js";
 import {
   getAgent
-} from "./chunk-ENFWZ2QM.js";
+} from "./chunk-6U6HEVSN.js";
 import {
   getDb,
   init_client
-} from "./chunk-Q62QJXGO.js";
+} from "./chunk-AGIXZFHQ.js";
 
 // src/sessions/bus.ts
 import { EventEmitter } from "events";

package/dist/{chunk-HDLPEXWS.js → chunk-S5CMAWEC.js}

@@ -636,6 +636,26 @@ function runMigrations(db) {
       db.exec(`CREATE INDEX IF NOT EXISTS idx_vaults_tenant ON vaults(tenant_id)`);
     }
   }
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS user_profiles (
+      id TEXT PRIMARY KEY,
+      external_id TEXT,
+      display_name TEXT,
+      trust_grants_json TEXT NOT NULL DEFAULT '[]',
+      tenant_id TEXT,
+      created_at INTEGER NOT NULL,
+      updated_at INTEGER NOT NULL,
+      UNIQUE(tenant_id, external_id)
+    )
+  `);
+  try {
+    db.exec(`ALTER TABLE sessions ADD COLUMN user_profile_id TEXT`);
+  } catch {
+  }
+  try {
+    db.exec(`ALTER TABLE agent_versions ADD COLUMN permission_policy_json TEXT`);
+  } catch {
+  }
 }
 var init_migrations = __esm({
   "src/db/migrations.ts"() {

package/dist/{chunk-CBPO2P4I.js → chunk-SAI6LBXW.js}

@@ -139,7 +139,7 @@ var CreateAgentRequestSchema = registry.register(
   "CreateAgentRequest",
   z.object({
     name: z.string().min(1).openapi({ example: "my-agent" }),
-    model: z.object({ id: z.string().min(1), speed: z.enum(["standard", "fast"]).optional() }).openapi({ description: "Model configuration. `id` is the canonical model identifier.", example: { id: "claude-sonnet-4-6" } }),
+    model: z.object({ id: z.string().min(1), speed: z.enum(["standard", "fast"]).optional() }).openapi({ description: "Model configuration. `id` is the bare model identifier (e.g. `gemini-2.5-flash`, `claude-sonnet-4-6`, `gpt-5.4`). Do not include provider prefixes.", example: { id: "claude-sonnet-4-6" } }),
     description: z.string().max(2048).optional().openapi({
       description: "Human-readable description of the agent."
     }),
@@ -156,7 +156,7 @@ var CreateAgentRequestSchema = registry.register(
       description: "MCP servers as an array of objects with name, type, and optional url."
     }),
     engine: z.enum(["claude", "opencode", "codex", "anthropic", "gemini", "factory", "pi"]).optional().openapi({
-      description: "Agent harness. Defaults to `claude`. Opencode agents must set `model` to a `provider/model` string (e.g. `anthropic/claude-sonnet-4-6`) and must NOT declare `tools` \u2014 opencode manages its tool surface internally. Gemini agents require GEMINI_API_KEY. Factory agents require FACTORY_API_KEY. Pi agents (pi.dev) require at least one of ANTHROPIC_API_KEY, OPENAI_API_KEY, or GEMINI_API_KEY.",
+      description: "Agent harness. Auto-inferred from model prefix if omitted: `gemini-*` \u2192 gemini, `gpt-*`/`o1-*` \u2192 codex, `claude-*` \u2192 claude. Always use bare model IDs (`gemini-2.5-flash`, not `google/gemini-2.5-flash`) \u2014 provider prefixes are added internally where needed. Non-claude engines must NOT declare `tools` (they manage tool permissions internally). Required vault keys: claude \u2192 ANTHROPIC_API_KEY, gemini \u2192 GEMINI_API_KEY, codex \u2192 OPENAI_API_KEY, pi \u2192 any of the three.",
       example: "claude"
     }),
     webhook_url: z.string().url().optional().openapi({

package/dist/{chunk-YMKQJY5F.js → chunk-SIO4LO2M.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 
 // src/backends/codex/auth.ts
 function buildCodexAuthEnv() {

package/dist/{chunk-QSRH4XUG.js → chunk-SUEPFZN2.js}

@@ -1,7 +1,7 @@
 import {
   jsonOk,
   routeWrap
-} from "./chunk-DI5WC2SQ.js";
+} from "./chunk-4EKHW6VS.js";
 
 // src/handlers/whoami.ts
 function handleWhoami(request) {

package/dist/{chunk-IITCQTBZ.js → chunk-T2PXAQND.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 
 // src/backends/pi/auth.ts
 function buildPiAuthEnv() {

package/dist/{chunk-D3LKWVPA.js → chunk-TTDMQ54U.js}

@@ -10,10 +10,10 @@ import {
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-7U62OZSD.js";
+} from "./chunk-ZDDMPGN4.js";
 import {
   schema_exports
-} from "./chunk-4ENK7S24.js";
+} from "./chunk-CXYMVLYK.js";
 
 // src/db/skills.ts
 init_drizzle();

package/dist/{chunk-GNXIA5WC.js → chunk-TVV7AE3G.js}

@@ -10,10 +10,10 @@ import {
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-7U62OZSD.js";
+} from "./chunk-ZDDMPGN4.js";
 import {
   schema_exports
-} from "./chunk-4ENK7S24.js";
+} from "./chunk-CXYMVLYK.js";
 
 // src/db/memory.ts
 init_drizzle();

package/dist/{chunk-5BA36MSQ.js → chunk-UMXXZ6OX.js}

@@ -1,7 +1,7 @@
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-7U62OZSD.js";
+} from "./chunk-ZDDMPGN4.js";
 
 // src/db/traces.ts
 init_drizzle();

package/dist/{chunk-WHTGWLGJ.js → chunk-UTGP4X74.js}

@@ -4,7 +4,7 @@ import {
 import {
   getConfig,
   readSetting
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 import {
   __commonJS
 } from "./chunk-2ESYSVXG.js";

package/dist/{chunk-XMZQW5G5.js → chunk-V5RHOS43.js}

@@ -1,21 +1,21 @@
 import {
   piBackend
-} from "./chunk-Y3V4COP7.js";
+} from "./chunk-J7F2OFWQ.js";
+import {
+  geminiBackend
+} from "./chunk-A3FQHVUG.js";
 import {
   opencodeBackend
-} from "./chunk-YS3W5AQA.js";
+} from "./chunk-REHIJQUD.js";
 import {
   factoryBackend
-} from "./chunk-MZ6HBYGV.js";
-import {
-  geminiBackend
-} from "./chunk-UB7GS7XT.js";
+} from "./chunk-65XY7HRS.js";
 import {
   codexBackend
-} from "./chunk-VVCRJ46V.js";
+} from "./chunk-WEUPM3IN.js";
 import {
   claudeBackend
-} from "./chunk-WG3N6VUA.js";
+} from "./chunk-JN3DHH7Z.js";
 
 // src/backends/registry.ts
 var BACKENDS = {

package/dist/{chunk-Z2AVP3QL.js → chunk-VB6GGRIA.js}

@@ -1,18 +1,31 @@
+import {
+  getUserProfile
+} from "./chunk-YOZ6WDP3.js";
 import {
   listCredentialsWithTokens
-} from "./chunk-RZHIYTI3.js";
+} from "./chunk-WK33IBKY.js";
 import {
   listEntries
-} from "./chunk-IC5ZTBAW.js";
+} from "./chunk-MUARVVXF.js";
 
 // src/sessions/secrets.ts
-function loadSessionSecrets(vaultIds) {
+function loadSessionSecrets(vaultIds, userProfileId) {
+  let credentialAllowlist = null;
+  if (userProfileId) {
+    const profile = getUserProfile(userProfileId);
+    if (profile && profile.trust_grants.length > 0) {
+      credentialAllowlist = new Set(
+        profile.trust_grants.map((g) => `${g.vault_id}:${g.credential_id}`)
+      );
+    }
+  }
   const secrets = [];
   for (const vid of vaultIds) {
     for (const entry of listEntries(vid)) {
       secrets.push({ key: entry.key, value: entry.value });
     }
     for (const cred of listCredentialsWithTokens(vid)) {
+      if (credentialAllowlist && !credentialAllowlist.has(`${vid}:${cred.id}`)) continue;
       if (cred.auth.mcp_server_url) {
         const serverName = deriveServerName(cred.auth.mcp_server_url);
         if (serverName) {

package/dist/{chunk-TV6QMCDS.js → chunk-VQM2MCQR.js}

@@ -11,18 +11,18 @@ import {
   getFileRecord,
   listFiles,
   updateFileStoragePath
-} from "./chunk-T77N7C3M.js";
+} from "./chunk-YKPRNV6J.js";
 import {
   assertResourceTenant
 } from "./chunk-23UKWXJH.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-DI5WC2SQ.js";
+} from "./chunk-4EKHW6VS.js";
 import {
   getDb,
   init_client
-} from "./chunk-Q62QJXGO.js";
+} from "./chunk-AGIXZFHQ.js";
 import {
   badRequest,
   notFound

package/dist/{chunk-RSXTLOY3.js → chunk-VY5XWTW7.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 import {
   ApiError
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-VVCRJ46V.js → chunk-WEUPM3IN.js}

@@ -4,16 +4,16 @@ import {
 import {
   buildCodexAuthEnv,
   validateCodexRuntime
-} from "./chunk-YMKQJY5F.js";
+} from "./chunk-SIO4LO2M.js";
 import {
   prepareCodexOnSandbox
 } from "./chunk-NMZMRH3E.js";
-import {
-  createCodexTranslator
-} from "./chunk-CULYZ3VA.js";
 import {
   CODEX_WRAPPER_PATH
 } from "./chunk-XJYR5HE3.js";
+import {
+  createCodexTranslator
+} from "./chunk-CULYZ3VA.js";
 import {
   wrapPromptWithSystem
 } from "./chunk-YE2RMJY7.js";

package/dist/{chunk-RZHIYTI3.js → chunk-WK33IBKY.js}

@@ -14,7 +14,7 @@ import {
 import {
   getDb,
   init_client
-} from "./chunk-Q62QJXGO.js";
+} from "./chunk-AGIXZFHQ.js";
 
 // src/db/credentials.ts
 init_client();
@@ -130,6 +130,14 @@ function archiveCredential(vaultId, credentialId) {
   db.prepare(`UPDATE vault_credentials SET archived_at = ?, updated_at = ? WHERE id = ?`).run(now, now, credentialId);
   return getCredential(credentialId);
 }
+function getRefreshConfig(id) {
+  const db = getDb();
+  const row = db.prepare(
+    `SELECT refresh_config_encrypted, auth_type FROM vault_credentials WHERE id = ?`
+  ).get(id);
+  if (!row || row.auth_type !== "mcp_oauth" || !row.refresh_config_encrypted) return null;
+  return JSON.parse(decryptValue(row.refresh_config_encrypted));
+}
 function deleteCredential(id) {
   const db = getDb();
   const res = db.prepare(`DELETE FROM vault_credentials WHERE id = ?`).run(id);
@@ -144,5 +152,6 @@ export {
   listCredentialsWithTokens,
   updateCredential,
   archiveCredential,
+  getRefreshConfig,
   deleteCredential
 };

package/dist/{chunk-QQGXM2OQ.js → chunk-XLMNSDUJ.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 
 // src/providers/registry.ts
 var PROVIDERS = {

package/dist/{chunk-MAN6OCOP.js → chunk-XXAO5YYL.js}

@@ -3,21 +3,21 @@ import {
 } from "./chunk-23UKWXJH.js";
 import {
   recordAudit
-} from "./chunk-FC3UAHXM.js";
+} from "./chunk-FDLQ3IUB.js";
 import {
   requireFeature
 } from "./chunk-2N2KL4KM.js";
 import {
   jsonOk,
   routeWrap
-} from "./chunk-DI5WC2SQ.js";
+} from "./chunk-4EKHW6VS.js";
 import {
   archiveTenant,
   createTenant,
   getTenant,
   listTenants,
   renameTenant
-} from "./chunk-F5SHFZUA.js";
+} from "./chunk-YTBVILAH.js";
 import {
   badRequest,
   notFound

package/dist/{chunk-AZLZOG5N.js → chunk-XYNEAJDF.js}

@@ -1,6 +1,6 @@
 import {
   getConfig
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 import {
   ApiError
 } from "./chunk-EZYKRG4W.js";

package/dist/{chunk-GSDVHR43.js → chunk-YJCH35J4.js}

@@ -6,12 +6,13 @@ import {
 } from "./chunk-FX2AEKOV.js";
 import {
   getConfig
-} from "./chunk-US26CY2Y.js";
+} from "./chunk-6EIONZ7F.js";
 
 // src/backends/claude/args.ts
 function buildClaudeArgs(input) {
   const cfg = getConfig();
-  const permissionMode = input.confirmationMode ? "default" : "bypassPermissions";
+  const policy = input.agent.permission_policy;
+  const permissionMode = input.confirmationMode ? "default" : policy ? "default" : "bypassPermissions";
   const argv = [
     "-p",
     "--output-format",
@@ -42,7 +43,8 @@ Your custom tools are: ${toolList}. Call them by these exact names \u2014 do not
   const mcpToolNames = Array.from(tools.customToolNames).map(
     (name) => `mcp__tool-bridge__${name}`
   );
-  const allAllowed = [...tools.allowedTools, ...mcpToolNames];
+  const policyAllowed = policy?.always_allow ?? [];
+  const allAllowed = [...tools.allowedTools, ...mcpToolNames, ...policyAllowed];
   if (allAllowed.length) {
     argv.push("--allowed-tools", allAllowed.join(","));
   }

package/dist/{chunk-T77N7C3M.js → chunk-YKPRNV6J.js}

@@ -10,10 +10,10 @@ import {
 import {
   getDrizzle,
   init_drizzle
-} from "./chunk-7U62OZSD.js";
+} from "./chunk-ZDDMPGN4.js";
 import {
   schema_exports
-} from "./chunk-4ENK7S24.js";
+} from "./chunk-CXYMVLYK.js";
 
 // src/db/files.ts
 init_drizzle();