@agentstep/gateway 0.4.16 → 0.4.18

package/dist/gateway.js

@@ -8413,7 +8413,7 @@ var init_zod = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-OWTXN2FU.js
+// ../agent-sdk/dist/chunk-OXWELRJL.js
 function listEnvelope(name, item) {
   const schema2 = external_exports.object({
     data: external_exports.array(item),
@@ -8422,8 +8422,8 @@ function listEnvelope(name, item) {
   return registry.register(name, schema2);
 }
 var import_zod_to_openapi2, UlidId, IsoTimestamp, ErrorEnvelopeSchema, AgentToolsetTool, CustomTool, ToolConfigSchema, McpServerConfigSchema, AgentSkillSchema, ModelConfigSchema, AgentSchema, CreateAgentRequestSchema, UpdateAgentRequestSchema, EnvironmentPackages, EnvironmentNetworking, EnvironmentConfigSchema, EnvironmentSchema, CreateEnvironmentRequestSchema, UpdateEnvironmentRequestSchema, SessionStatsSchema, SessionUsageSchema, SessionStatusSchema, SessionSchema, CreateSessionRequestSchema, UpdateSessionRequestSchema, TextBlock, UserMessageEvent, UserInterruptEvent, UserCustomToolResultEvent, UserToolConfirmationEvent, UserDefineOutcomeEvent, UserEventSchema, UserEventBatchRequestSchema, ManagedEventSchema, VaultSchema, VaultEntrySchema, CreateVaultRequestSchema, SetVaultEntryRequestSchema, VaultDeletedResponseSchema, VaultEntryDeletedResponseSchema, BatchOperationSchema, BatchRequestSchema, BatchResultSchema, BatchResponseSchema, AgentListResponseSchema, EnvironmentListResponseSchema, SessionListResponseSchema, EventListResponseSchema, VaultListResponseSchema, VaultEntryListResponseSchema, AgentDeletedResponseSchema, SessionDeletedResponseSchema, EnvironmentDeletedResponseSchema, UserEventAppendResponseSchema, FileScopeSchema, FileRecordSchema, FileListResponseSchema, FileDeletedResponseSchema, VaultCredentialSchema, CreateCredentialRequestSchema, UpdateCredentialRequestSchema, CredentialListResponseSchema, CredentialDeletedResponseSchema, MemoryStoreSchema, CreateMemoryStoreRequestSchema, MemoryStoreListResponseSchema, MemoryStoreDeletedResponseSchema, MemorySchema, CreateMemoryRequestSchema, UpdateMemoryRequestSchema, MemoryListResponseSchema, MemoryDeletedResponseSchema, SessionResourceSchema, AddResourceRequestSchema, ResourceListResponseSchema, ResourceDeletedResponseSchema, KeyScopeSchema, KeyPermissionsSchema, ApiKeySchema, ApiKeyCreatedSchema, CreateApiKeyRequestSchema, PatchApiKeyRequestSchema, ApiKeyListResponseSchema, ApiKeyRevokedResponseSchema, ApiKeyActivityResponseSchema, UpstreamKeySchema, AddUpstreamKeyRequestSchema, PatchUpstreamKeyRequestSchema, UpstreamKeyListResponseSchema, UpstreamKeyDeletedResponseSchema, TenantSchema, CreateTenantRequestSchema, PatchTenantRequestSchema, TenantListResponseSchema, TenantArchivedResponseSchema, AuditEntrySchema, AuditListResponseSchema, TraceListItemSchema, TraceListResponseSchema, SpanNodeSchema, TraceDetailSchema, TraceExportResponseSchema, SkillsCatalogResponseSchema, SkillsSearchResponseSchema, SkillsStatsResponseSchema, SkillsSourcesResponseSchema, MetricsTotalsSchema, MetricsResponseSchema, ApiMetricsResponseSchema, PutSettingRequestSchema, SettingResponseSchema, ProviderStatusResponseSchema, ModelEntrySchema, ModelListResponseSchema, WhoamiResponseSchema, LicenseResponseSchema;
-var init_chunk_OWTXN2FU = __esm({
-  "../agent-sdk/dist/chunk-OWTXN2FU.js"() {
+var init_chunk_OXWELRJL = __esm({
+  "../agent-sdk/dist/chunk-OXWELRJL.js"() {
     "use strict";
     init_chunk_7346CKTF();
     init_zod();
@@ -8983,26 +8983,30 @@ var init_chunk_OWTXN2FU = __esm({
     VaultCredentialSchema = registry.register(
       "VaultCredential",
       external_exports.object({
+        type: external_exports.literal("vault_credential"),
         id: UlidId,
         vault_id: UlidId,
         display_name: external_exports.string(),
         auth: external_exports.object({
-          type: external_exports.string().openapi({ description: "Auth type, e.g. 'static_bearer'." }),
-          mcp_server_url: external_exports.string().nullable().openapi({ description: "Associated MCP server URL, if any." })
+          type: external_exports.enum(["static_bearer"]).openapi({ description: "Auth type. Currently only `static_bearer` is supported." }),
+          mcp_server_url: external_exports.string().nullable().openapi({ description: "MCP server URL this credential authenticates with. Null for plain API keys." })
         }),
+        metadata: external_exports.record(external_exports.string()).optional().openapi({ description: "Arbitrary key-value metadata." }),
         created_at: IsoTimestamp,
-        updated_at: IsoTimestamp
-      }).openapi({ description: "Vault credential metadata. The secret token is NEVER returned in API responses." })
+        updated_at: IsoTimestamp,
+        archived_at: IsoTimestamp.nullable()
+      }).openapi({ description: "Vault credential. Secret fields (token) are write-only \u2014 never returned in responses." })
     );
     CreateCredentialRequestSchema = registry.register(
       "CreateCredentialRequest",
       external_exports.object({
-        display_name: external_exports.string().min(1).max(200),
+        display_name: external_exports.string().min(1).max(200).openapi({ description: "Human-readable name for this credential.", example: "Linear API key" }),
         auth: external_exports.object({
-          type: external_exports.enum(["static_bearer"]),
-          token: external_exports.string().min(1).openapi({ description: "Secret token value. Stored encrypted; never returned." }),
-          mcp_server_url: external_exports.string().url().optional()
-        })
+          type: external_exports.enum(["static_bearer"]).openapi({ description: "Auth type." }),
+          mcp_server_url: external_exports.string().url().optional().openapi({ description: "MCP server URL this credential authenticates with. Optional for plain API keys.", example: "https://mcp.linear.app/mcp" }),
+          token: external_exports.string().min(1).openapi({ description: "Secret token. Stored encrypted at rest; never returned in responses.", example: "lin_api_xxxxx" })
+        }),
+        metadata: external_exports.record(external_exports.string()).optional().openapi({ description: "Arbitrary key-value metadata." })
       })
     );
     UpdateCredentialRequestSchema = registry.register(
@@ -9011,9 +9015,10 @@ var init_chunk_OWTXN2FU = __esm({
         display_name: external_exports.string().min(1).max(200).optional(),
         auth: external_exports.object({
           type: external_exports.enum(["static_bearer"]).optional(),
-          token: external_exports.string().min(1).optional(),
+          token: external_exports.string().min(1).optional().openapi({ description: "New token value. Write-only." }),
           mcp_server_url: external_exports.string().url().nullish()
-        }).optional()
+        }).optional(),
+        metadata: external_exports.record(external_exports.string().nullable()).optional().openapi({ description: "Patch semantics: set key to string to upsert, null to delete, omit to preserve." })
       })
     );
     CredentialListResponseSchema = registry.register(
@@ -9022,7 +9027,7 @@ var init_chunk_OWTXN2FU = __esm({
     );
     CredentialDeletedResponseSchema = registry.register(
       "CredentialDeletedResponse",
-      external_exports.object({ id: UlidId, type: external_exports.literal("credential_deleted") })
+      external_exports.object({ id: UlidId, type: external_exports.literal("vault_credential_deleted") })
     );
     MemoryStoreSchema = registry.register(
       "MemoryStore",
@@ -9483,7 +9488,7 @@ var init_chunk_OWTXN2FU = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-DHSSHDIG.js
+// ../agent-sdk/dist/chunk-D2TRWKVQ.js
 function buildOpenApiDocument(opts) {
   const generator = new import_zod_to_openapi3.OpenApiGeneratorV31(registry.definitions);
   return generator.generateDocument({
@@ -9521,10 +9526,10 @@ function buildOpenApiDocument(opts) {
   });
 }
 var import_zod_to_openapi3, ErrorResponses;
-var init_chunk_DHSSHDIG = __esm({
-  "../agent-sdk/dist/chunk-DHSSHDIG.js"() {
+var init_chunk_D2TRWKVQ = __esm({
+  "../agent-sdk/dist/chunk-D2TRWKVQ.js"() {
     "use strict";
-    init_chunk_OWTXN2FU();
+    init_chunk_OXWELRJL();
     init_chunk_7346CKTF();
     init_zod();
     import_zod_to_openapi3 = __toESM(require_dist(), 1);
@@ -10211,7 +10216,7 @@ var init_chunk_DHSSHDIG = __esm({
       path: "/v1/vaults/{id}/credentials",
       tags: ["Credentials"],
       summary: "Create a vault credential",
-      description: "Creates a structured credential in the vault. The secret token is encrypted at rest and never returned in API responses.",
+      description: "Creates a credential in the vault for MCP server authentication or plain API key storage. The token is encrypted at rest and never returned in responses. When `mcp_server_url` is provided, the credential is automatically injected as MCP auth during sessions. Without `mcp_server_url`, the token is injected as an env var derived from `display_name`.",
       security: [{ ApiKey: [] }],
       request: {
         params: external_exports.object({ id: external_exports.string() }),
@@ -158859,7 +158864,17 @@ var init_storage = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-JOAEFGXZ.js
+// ../agent-sdk/dist/chunk-ZMCS7MYZ.js
+function wrapProviderWithSecrets(provider, secrets) {
+  if (!secrets || Object.keys(secrets).length === 0) return provider;
+  return {
+    ...provider,
+    exec: (n, argv, opts) => provider.exec(n, argv, { ...opts, secrets }),
+    startExec: (n, opts) => provider.startExec(n, { ...opts, secrets }),
+    create: (opts) => provider.create({ ...opts, secrets }),
+    delete: (n, s) => provider.delete(n, s ?? secrets)
+  };
+}
 async function installSkills(sandboxName, provider, skills, engine) {
   if (!skills || skills.length === 0) return;
   const SAFE_NAME_RE = /^[a-zA-Z0-9_.-]+$/;
@@ -158925,14 +158940,7 @@ async function acquireForFirstTurn(sessionId) {
       throw new Error(`provider ${provider.name} is not available: ${result.message}`);
     }
   }
-  const hasSecrets = Object.keys(secrets).length > 0;
-  const sp = hasSecrets ? {
-    ...provider,
-    exec: (n, argv, opts) => provider.exec(n, argv, { ...opts, secrets }),
-    startExec: (n, opts) => provider.startExec(n, { ...opts, secrets }),
-    create: (opts) => provider.create({ ...opts, secrets }),
-    delete: (n, s) => provider.delete(n, s ?? secrets)
-  } : provider;
+  const sp = wrapProviderWithSecrets(provider, secrets);
   const name = deriveSandboxName(sessionId);
   lcLog(`[lifecycle] ${sessionId} creating container via ${sp.name}...`);
   try {
@@ -159204,8 +159212,8 @@ async function reconcileDockerOrphanSandboxes() {
   return { deleted, kept };
 }
 var lcLog, SANDBOX_NAME_PREFIX;
-var init_chunk_JOAEFGXZ = __esm({
-  "../agent-sdk/dist/chunk-JOAEFGXZ.js"() {
+var init_chunk_ZMCS7MYZ = __esm({
+  "../agent-sdk/dist/chunk-ZMCS7MYZ.js"() {
     "use strict";
     init_chunk_DO4WVWW7();
     init_chunk_RMZRSYIJ();
@@ -159257,30 +159265,6 @@ var init_api_keys = __esm({
   }
 });
 
-// ../agent-sdk/dist/providers/resolve-secrets.js
-var resolve_secrets_exports = {};
-__export(resolve_secrets_exports, {
-  BLOCKED_ENV_KEYS: () => BLOCKED_ENV_KEYS,
-  resolveVaultSecrets: () => resolveVaultSecrets
-});
-var init_resolve_secrets = __esm({
-  "../agent-sdk/dist/providers/resolve-secrets.js"() {
-    "use strict";
-    init_chunk_DO4WVWW7();
-    init_chunk_VIGJQU6V();
-    init_chunk_AIBH32FN();
-    init_chunk_YPXI7Q2M();
-    init_chunk_JDELTTHV();
-    init_chunk_F4WUVOLE();
-    init_chunk_SXE7H3VK();
-    init_chunk_LHHBOQUR();
-    init_chunk_HFDLUBWN();
-    init_chunk_5GZEX4HV();
-    init_chunk_2BDD6OHG();
-    init_chunk_2ESYSVXG();
-  }
-});
-
 // ../agent-sdk/dist/backends/claude/tool-bridge.js
 var tool_bridge_exports = {};
 __export(tool_bridge_exports, {
@@ -159789,7 +159773,7 @@ var MAX_THREAD_DEPTH;
 var init_threads = __esm({
   "../agent-sdk/dist/sessions/threads.js"() {
     "use strict";
-    init_chunk_HJGUG7IH();
+    init_chunk_L3RYJ2HX();
     init_chunk_PJZ5TQYW();
     init_chunk_AU4NAQGA();
     init_chunk_H6TQGV4L();
@@ -159799,7 +159783,7 @@ var init_threads = __esm({
     init_chunk_NIOWKTIF();
     init_chunk_ZQGJKPPY();
     init_chunk_LAWTTG2E();
-    init_chunk_JOAEFGXZ();
+    init_chunk_ZMCS7MYZ();
     init_chunk_DO4WVWW7();
     init_chunk_RMZRSYIJ();
     init_chunk_5ZFOKZGR();
@@ -159872,7 +159856,7 @@ var init_threads = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-HJGUG7IH.js
+// ../agent-sdk/dist/chunk-L3RYJ2HX.js
 function formatStopReason(reason, eventIds) {
   if (reason === "custom_tool_call" && eventIds?.length) {
     return { type: "requires_action", event_ids: eventIds };
@@ -159972,6 +159956,7 @@ async function runTurn(sessionId, inputs, _depth = 0, parentTrace) {
   try {
     sandboxName = await acquireForFirstTurn(sessionId);
     console.log(`[driver] ${sessionId} container ready: ${sandboxName}`);
+    const postAcquireSecrets = getBySession(sessionId)?.vaultSecrets ?? (session.vault_ids?.length ? resolveVaultSecrets(session.vault_ids) : void 0);
     const latestAgent = getAgent(session.agent.id);
     if (latestAgent && latestAgent.skills && latestAgent.skills.length > 0) {
       const currentSkills = new Map((agent.skills ?? []).map((s) => [s.name, s.content.length]));
@@ -159981,7 +159966,8 @@ async function runTurn(sessionId, inputs, _depth = 0, parentTrace) {
       if (newSkills.length > 0) {
         console.log(`[driver] ${sessionId} injecting ${newSkills.length} new skill(s)...`);
         const envRow = getEnvironment(session.environment_id);
-        const sp = await resolveContainerProvider(envRow?.config?.provider);
+        const baseProvider = await resolveContainerProvider(envRow?.config?.provider);
+        const sp = wrapProviderWithSecrets(baseProvider, postAcquireSecrets);
         await installSkills(sandboxName, sp, newSkills, agent.engine);
         console.log(`[driver] ${sessionId} skills injected`);
       }
@@ -159989,7 +159975,8 @@ async function runTurn(sessionId, inputs, _depth = 0, parentTrace) {
     const freshSession2 = getSession(sessionId);
     if (freshSession2?.resources && freshSession2.resources.length > 0) {
       const envRow = getEnvironment(session.environment_id);
-      const sp = await resolveContainerProvider(envRow?.config?.provider);
+      const baseProvider = await resolveContainerProvider(envRow?.config?.provider);
+      const sp = wrapProviderWithSecrets(baseProvider, postAcquireSecrets);
       await provisionResources(sandboxName, freshSession2.resources, sp);
     }
   } catch (err) {
@@ -160089,6 +160076,14 @@ async function runTurn(sessionId, inputs, _depth = 0, parentTrace) {
       turnBuild.env.CODEX_API_KEY = "ollama";
     }
   }
+  if (agent.engine === "codex") {
+    const envRow = getEnvironment(session.environment_id);
+    const provName = envRow?.config?.provider ?? "docker";
+    const firecrackerProviders = /* @__PURE__ */ new Set(["sprites", "fly", "apple-firecracker"]);
+    if (firecrackerProviders.has(provName)) {
+      turnBuild.env.CODEX_SANDBOX_TYPE = "none";
+    }
+  }
   const envLines = Object.entries(turnBuild.env).map(([k2, v2]) => `${k2}=${v2}`).join("\n");
   const stdin = `${envLines}
 
@@ -160096,7 +160091,7 @@ ${turnBuild.stdin}`;
   const env3 = getEnvironment(session.environment_id);
   const provider = await resolveContainerProvider(env3?.config?.provider);
   const poolEntry = getBySession(sessionId);
-  const secrets = poolEntry?.vaultSecrets ?? (session.vault_ids?.length ? (await Promise.resolve().then(() => (init_resolve_secrets(), resolve_secrets_exports))).resolveVaultSecrets(session.vault_ids) : void 0);
+  const secrets = poolEntry?.vaultSecrets ?? (session.vault_ids?.length ? resolveVaultSecrets(session.vault_ids) : void 0);
   const tools = resolveToolset(agent.tools);
   if (agent.threads_enabled) {
     tools.customToolNames.add("spawn_agent");
@@ -160532,8 +160527,8 @@ async function writePermissionResponse(sessionId, result, denyMessage) {
   getPendingConfirmations().delete(sessionId);
 }
 var gd;
-var init_chunk_HJGUG7IH = __esm({
-  "../agent-sdk/dist/chunk-HJGUG7IH.js"() {
+var init_chunk_L3RYJ2HX = __esm({
+  "../agent-sdk/dist/chunk-L3RYJ2HX.js"() {
     "use strict";
     init_chunk_PJZ5TQYW();
     init_chunk_AU4NAQGA();
@@ -160542,7 +160537,7 @@ var init_chunk_HJGUG7IH = __esm({
     init_chunk_72BKGVBE();
     init_chunk_M4CTE7EH();
     init_chunk_NIOWKTIF();
-    init_chunk_JOAEFGXZ();
+    init_chunk_ZMCS7MYZ();
     init_chunk_DO4WVWW7();
     init_chunk_BMPB7XJH();
     init_chunk_I5ZA45YL();
@@ -212912,7 +212907,7 @@ var init_chunk_3MQ2FWXS = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-PNYCULIF.js
+// ../agent-sdk/dist/chunk-G5CIMVGV.js
 function markStopping() {
   stopping = true;
 }
@@ -212978,11 +212973,11 @@ async function evictIdleSessions() {
   }
 }
 var sweeping, stopping;
-var init_chunk_PNYCULIF = __esm({
-  "../agent-sdk/dist/chunk-PNYCULIF.js"() {
+var init_chunk_G5CIMVGV = __esm({
+  "../agent-sdk/dist/chunk-G5CIMVGV.js"() {
     "use strict";
     init_chunk_LAWTTG2E();
-    init_chunk_JOAEFGXZ();
+    init_chunk_ZMCS7MYZ();
     init_chunk_BMPB7XJH();
     init_chunk_I5ZA45YL();
     init_chunk_QH57EOKP();
@@ -212994,7 +212989,7 @@ var init_chunk_PNYCULIF = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-S6AM7WVH.js
+// ../agent-sdk/dist/chunk-U7GILP6F.js
 function installShutdownHandlers() {
   if (g12.__caShutdownInstalled) return;
   g12.__caShutdownInstalled = true;
@@ -213037,10 +213032,10 @@ async function shutdown(signal) {
   process.exit(0);
 }
 var g12, shuttingDown;
-var init_chunk_S6AM7WVH = __esm({
-  "../agent-sdk/dist/chunk-S6AM7WVH.js"() {
+var init_chunk_U7GILP6F = __esm({
+  "../agent-sdk/dist/chunk-U7GILP6F.js"() {
     "use strict";
-    init_chunk_PNYCULIF();
+    init_chunk_G5CIMVGV();
     init_chunk_5GZEX4HV();
     init_chunk_UYTSKFGK();
     init_client();
@@ -215141,7 +215136,7 @@ var init_rate_limit = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-C4IHTLG2.js
+// ../agent-sdk/dist/chunk-RMN5HYVC.js
 import path10 from "path";
 async function ensureInitialized() {
   if (g14.__caInitPromise) return g14.__caInitPromise;
@@ -215360,18 +215355,18 @@ async function rebuildContainerPool() {
   }
 }
 var g14;
-var init_chunk_C4IHTLG2 = __esm({
-  "../agent-sdk/dist/chunk-C4IHTLG2.js"() {
+var init_chunk_RMN5HYVC = __esm({
+  "../agent-sdk/dist/chunk-RMN5HYVC.js"() {
     "use strict";
     init_chunk_HECQRMDR();
-    init_chunk_HJGUG7IH();
+    init_chunk_L3RYJ2HX();
     init_chunk_ACKMNK3C();
     init_chunk_TWPTR2C2();
     init_chunk_ADK2TYO4();
     init_chunk_3MQ2FWXS();
-    init_chunk_S6AM7WVH();
-    init_chunk_PNYCULIF();
-    init_chunk_JOAEFGXZ();
+    init_chunk_U7GILP6F();
+    init_chunk_G5CIMVGV();
+    init_chunk_ZMCS7MYZ();
     init_chunk_BMPB7XJH();
     init_chunk_I5ZA45YL();
     init_chunk_YPXI7Q2M();
@@ -215389,7 +215384,7 @@ var init_chunk_C4IHTLG2 = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-LJL3DM2L.js
+// ../agent-sdk/dist/chunk-DNVTIB2H.js
 async function routeWrap(request2, handler) {
   const startedAt = Date.now();
   let status = 500;
@@ -215433,13 +215428,13 @@ async function routeWrap(request2, handler) {
 function jsonOk(body, status = 200) {
   return Response.json(body, { status });
 }
-var init_chunk_LJL3DM2L = __esm({
-  "../agent-sdk/dist/chunk-LJL3DM2L.js"() {
+var init_chunk_DNVTIB2H = __esm({
+  "../agent-sdk/dist/chunk-DNVTIB2H.js"() {
     "use strict";
     init_chunk_D2XITRN6();
     init_chunk_PWWRWR75();
     init_chunk_HVUWXUUI();
-    init_chunk_C4IHTLG2();
+    init_chunk_RMN5HYVC();
     init_chunk_3MQ2FWXS();
     init_chunk_EZYKRG4W();
   }
@@ -215560,8 +215555,8 @@ var init_dist2 = __esm({
   "../agent-sdk/dist/index.js"() {
     "use strict";
     init_chunk_VFSOYCGN();
-    init_chunk_DHSSHDIG();
-    init_chunk_OWTXN2FU();
+    init_chunk_D2TRWKVQ();
+    init_chunk_OXWELRJL();
     init_chunk_7346CKTF();
     init_chunk_DC2UMEQH();
     init_chunk_S3SKODVV();
@@ -215569,15 +215564,15 @@ var init_dist2 = __esm({
     init_chunk_SDLNBA53();
     init_chunk_MHQXDTJB();
     init_chunk_2N2KL4KM();
-    init_chunk_LJL3DM2L();
+    init_chunk_DNVTIB2H();
     init_chunk_D2XITRN6();
     init_chunk_PWWRWR75();
     init_chunk_QLWA4MJ5();
     init_chunk_W6WKXFHN();
     init_chunk_HVUWXUUI();
-    init_chunk_C4IHTLG2();
+    init_chunk_RMN5HYVC();
     init_chunk_HECQRMDR();
-    init_chunk_HJGUG7IH();
+    init_chunk_L3RYJ2HX();
     init_chunk_PJZ5TQYW();
     init_chunk_AU4NAQGA();
     init_chunk_H6TQGV4L();
@@ -215590,10 +215585,10 @@ var init_dist2 = __esm({
     init_chunk_ZQGJKPPY();
     init_chunk_ADK2TYO4();
     init_chunk_3MQ2FWXS();
-    init_chunk_S6AM7WVH();
-    init_chunk_PNYCULIF();
+    init_chunk_U7GILP6F();
+    init_chunk_G5CIMVGV();
     init_chunk_LAWTTG2E();
-    init_chunk_JOAEFGXZ();
+    init_chunk_ZMCS7MYZ();
     init_chunk_DO4WVWW7();
     init_chunk_RMZRSYIJ();
     init_chunk_5ZFOKZGR();
@@ -215667,7 +215662,7 @@ var init_dist2 = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-TOKLTGSO.js
+// ../agent-sdk/dist/chunk-5R7FFW3Q.js
 function handleWhoami(request2) {
   return routeWrap(request2, async ({ auth }) => {
     return jsonOk({
@@ -215678,10 +215673,10 @@ function handleWhoami(request2) {
     });
   });
 }
-var init_chunk_TOKLTGSO = __esm({
-  "../agent-sdk/dist/chunk-TOKLTGSO.js"() {
+var init_chunk_5R7FFW3Q = __esm({
+  "../agent-sdk/dist/chunk-5R7FFW3Q.js"() {
     "use strict";
-    init_chunk_LJL3DM2L();
+    init_chunk_DNVTIB2H();
   }
 });
 
@@ -215895,7 +215890,7 @@ var init_chunk_FB4OSWM2 = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-ECRLACEF.js
+// ../agent-sdk/dist/chunk-Q336Y6X2.js
 async function handleGetSkillsCatalog(request2) {
   return routeWrap(request2, async ({ request: req }) => {
     const url2 = new URL(req.url);
@@ -215951,11 +215946,11 @@ async function handleGetSkillsFeed(request2) {
     return jsonOk(feed);
   });
 }
-var init_chunk_ECRLACEF = __esm({
-  "../agent-sdk/dist/chunk-ECRLACEF.js"() {
+var init_chunk_Q336Y6X2 = __esm({
+  "../agent-sdk/dist/chunk-Q336Y6X2.js"() {
     "use strict";
     init_chunk_FB4OSWM2();
-    init_chunk_LJL3DM2L();
+    init_chunk_DNVTIB2H();
   }
 });
 
@@ -216015,7 +216010,7 @@ var init_chunk_23UKWXJH = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-U6GNZJGO.js
+// ../agent-sdk/dist/chunk-BOV4Y6OS.js
 async function prepareSessionStream(request2, sessionId) {
   try {
     await ensureInitialized();
@@ -216108,14 +216103,14 @@ data: ${JSON.stringify(evt)}
     }
   });
 }
-var init_chunk_U6GNZJGO = __esm({
-  "../agent-sdk/dist/chunk-U6GNZJGO.js"() {
+var init_chunk_BOV4Y6OS = __esm({
+  "../agent-sdk/dist/chunk-BOV4Y6OS.js"() {
     "use strict";
     init_chunk_YGAHGTVZ();
     init_chunk_23UKWXJH();
     init_chunk_PWWRWR75();
     init_chunk_QLWA4MJ5();
-    init_chunk_C4IHTLG2();
+    init_chunk_RMN5HYVC();
     init_chunk_NIOWKTIF();
     init_chunk_BMPB7XJH();
     init_chunk_I5ZA45YL();
@@ -216125,7 +216120,7 @@ var init_chunk_U6GNZJGO = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-TKV7CFAM.js
+// ../agent-sdk/dist/chunk-Z2C4OC6I.js
 function handleCreateTenant(request2) {
   return routeWrap(request2, async ({ auth, request: req }) => {
     requireFeature("tenancy", "multi-tenancy");
@@ -216224,13 +216219,13 @@ function handleArchiveTenant(request2, id) {
   });
 }
 var CreateBody, PatchBody;
-var init_chunk_TKV7CFAM = __esm({
-  "../agent-sdk/dist/chunk-TKV7CFAM.js"() {
+var init_chunk_Z2C4OC6I = __esm({
+  "../agent-sdk/dist/chunk-Z2C4OC6I.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_MHQXDTJB();
     init_chunk_2N2KL4KM();
-    init_chunk_LJL3DM2L();
+    init_chunk_DNVTIB2H();
     init_chunk_JDELTTHV();
     init_chunk_EZYKRG4W();
     init_zod();
@@ -216244,7 +216239,7 @@ var init_chunk_TKV7CFAM = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-L4T7KCQ2.js
+// ../agent-sdk/dist/chunk-RZQUEFR3.js
 function handleListThreads(request2, sessionId) {
   return routeWrap(request2, async ({ auth }) => {
     const row = getDb().prepare(`SELECT tenant_id FROM sessions WHERE id = ?`).get(sessionId);
@@ -216269,11 +216264,11 @@ function handleListThreads(request2, sessionId) {
     });
   });
 }
-var init_chunk_L4T7KCQ2 = __esm({
-  "../agent-sdk/dist/chunk-L4T7KCQ2.js"() {
+var init_chunk_RZQUEFR3 = __esm({
+  "../agent-sdk/dist/chunk-RZQUEFR3.js"() {
     "use strict";
     init_chunk_23UKWXJH();
-    init_chunk_LJL3DM2L();
+    init_chunk_DNVTIB2H();
     init_chunk_I5ZA45YL();
     init_chunk_5GZEX4HV();
     init_chunk_EZYKRG4W();
@@ -216323,7 +216318,7 @@ var init_chunk_JK5TPJHH = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-6RRYNQXP.js
+// ../agent-sdk/dist/chunk-J77TSQVL.js
 function buildSpanTree(events2) {
   const nodes = /* @__PURE__ */ new Map();
   const openStarts = /* @__PURE__ */ new Map();
@@ -216507,11 +216502,11 @@ function handleExportTrace(request2, traceId) {
     return jsonOk(result, result.ok ? 200 : 502);
   });
 }
-var init_chunk_6RRYNQXP = __esm({
-  "../agent-sdk/dist/chunk-6RRYNQXP.js"() {
+var init_chunk_J77TSQVL = __esm({
+  "../agent-sdk/dist/chunk-J77TSQVL.js"() {
     "use strict";
     init_chunk_JK5TPJHH();
-    init_chunk_LJL3DM2L();
+    init_chunk_DNVTIB2H();
     init_chunk_ACKMNK3C();
     init_chunk_O45IQUWS();
     init_chunk_EZYKRG4W();
@@ -217098,7 +217093,7 @@ agentstep skills install \${n}
   }
 });
 
-// ../agent-sdk/dist/chunk-QDOCVDWJ.js
+// ../agent-sdk/dist/chunk-HM2NHQ5J.js
 function handleAddUpstreamKey(request2) {
   return routeWrap(request2, async ({ auth, request: req }) => {
     requireFeature("upstream_pool", "upstream key pool");
@@ -217190,15 +217185,15 @@ function handleDeleteUpstreamKey(request2, id) {
   });
 }
 var AddBody, PatchBody2;
-var init_chunk_QDOCVDWJ = __esm({
-  "../agent-sdk/dist/chunk-QDOCVDWJ.js"() {
+var init_chunk_HM2NHQ5J = __esm({
+  "../agent-sdk/dist/chunk-HM2NHQ5J.js"() {
     "use strict";
     init_chunk_3LG7DRJL();
     init_chunk_BZ6HFTHU();
     init_chunk_23UKWXJH();
     init_chunk_MHQXDTJB();
     init_chunk_2N2KL4KM();
-    init_chunk_LJL3DM2L();
+    init_chunk_DNVTIB2H();
     init_chunk_EZYKRG4W();
     init_zod();
     AddBody = external_exports.object({
@@ -217212,7 +217207,7 @@ var init_chunk_QDOCVDWJ = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-FCCWKCGQ.js
+// ../agent-sdk/dist/chunk-LPLBLYVQ.js
 function zeroTotals() {
   return {
     session_count: 0,
@@ -217572,12 +217567,12 @@ function handleGetApiMetrics(request2) {
   });
 }
 var BUCKET_MS, TOP_N, MAX_POINTS_PER_SERIES, MAX_TOTAL_CELLS;
-var init_chunk_FCCWKCGQ = __esm({
-  "../agent-sdk/dist/chunk-FCCWKCGQ.js"() {
+var init_chunk_LPLBLYVQ = __esm({
+  "../agent-sdk/dist/chunk-LPLBLYVQ.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_2N2KL4KM();
-    init_chunk_LJL3DM2L();
+    init_chunk_DNVTIB2H();
     init_chunk_D2XITRN6();
     init_chunk_5GZEX4HV();
     init_chunk_EZYKRG4W();
@@ -217593,7 +217588,7 @@ var init_chunk_FCCWKCGQ = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-JNQLE5D7.js
+// ../agent-sdk/dist/chunk-FLSWLEC3.js
 function handleListModels(request2) {
   return routeWrap(request2, async ({ request: req }) => {
     const url2 = new URL(req.url);
@@ -217604,15 +217599,15 @@ function handleListModels(request2) {
     return jsonOk({ data: models });
   });
 }
-var init_chunk_JNQLE5D7 = __esm({
-  "../agent-sdk/dist/chunk-JNQLE5D7.js"() {
+var init_chunk_FLSWLEC3 = __esm({
+  "../agent-sdk/dist/chunk-FLSWLEC3.js"() {
     "use strict";
     init_chunk_R45W644X();
-    init_chunk_LJL3DM2L();
+    init_chunk_DNVTIB2H();
   }
 });
 
-// ../agent-sdk/dist/chunk-QOJMXK4S.js
+// ../agent-sdk/dist/chunk-RDGOGAQ5.js
 function originFromRequest(request2) {
   const headers3 = request2.headers;
   const proto3 = headers3.get("x-forwarded-proto") ?? new URL(request2.url).protocol.replace(":", "");
@@ -217624,14 +217619,14 @@ async function handleGetOpenApiSpec(request2) {
   const doc = buildOpenApiDocument({ serverUrl });
   return Response.json(doc);
 }
-var init_chunk_QOJMXK4S = __esm({
-  "../agent-sdk/dist/chunk-QOJMXK4S.js"() {
+var init_chunk_RDGOGAQ5 = __esm({
+  "../agent-sdk/dist/chunk-RDGOGAQ5.js"() {
     "use strict";
-    init_chunk_DHSSHDIG();
+    init_chunk_D2TRWKVQ();
   }
 });
 
-// ../agent-sdk/dist/chunk-WWYVMGRP.js
+// ../agent-sdk/dist/chunk-JQBZ2X6N.js
 async function checkLocalProvider(name) {
   try {
     const provider = await resolveContainerProvider(name);
@@ -217670,10 +217665,10 @@ async function handleGetProviderStatus(request2) {
   });
 }
 var LOCAL_PROVIDERS, CLOUD_PROVIDERS, CLOUD_KEY_MAP;
-var init_chunk_WWYVMGRP = __esm({
-  "../agent-sdk/dist/chunk-WWYVMGRP.js"() {
+var init_chunk_JQBZ2X6N = __esm({
+  "../agent-sdk/dist/chunk-JQBZ2X6N.js"() {
     "use strict";
-    init_chunk_LJL3DM2L();
+    init_chunk_DNVTIB2H();
     init_chunk_JSLEB2ED();
     init_chunk_QH57EOKP();
     LOCAL_PROVIDERS = ["docker", "apple-container", "podman"];
@@ -217689,7 +217684,7 @@ var init_chunk_WWYVMGRP = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-LRPU2HS5.js
+// ../agent-sdk/dist/chunk-NNJ3QFTU.js
 function assertSessionTenant(auth, sessionId) {
   const row = getDb().prepare(`SELECT tenant_id FROM sessions WHERE id = ?`).get(sessionId);
   if (row) {
@@ -217764,11 +217759,11 @@ function handleDeleteResource(request2, sessionId, resourceId) {
   });
 }
 var MAX_RESOURCES_PER_SESSION, AddResourceSchema;
-var init_chunk_LRPU2HS5 = __esm({
-  "../agent-sdk/dist/chunk-LRPU2HS5.js"() {
+var init_chunk_NNJ3QFTU = __esm({
+  "../agent-sdk/dist/chunk-NNJ3QFTU.js"() {
     "use strict";
     init_chunk_23UKWXJH();
-    init_chunk_LJL3DM2L();
+    init_chunk_DNVTIB2H();
     init_chunk_NIOWKTIF();
     init_chunk_I5ZA45YL();
     init_chunk_R5OZHLAD();
@@ -218089,7 +218084,7 @@ var init_vaults = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-K62YRMVY.js
+// ../agent-sdk/dist/chunk-M5YT2IM2.js
 function getAgentTenantId(id) {
   const row = getDb().prepare(`SELECT tenant_id FROM agents WHERE id = ?`).get(id);
   return row?.tenant_id;
@@ -218509,20 +218504,20 @@ function parseMs(v2) {
   return Number.isFinite(t2) ? t2 : void 0;
 }
 var ALLOWED_STATUSES, AgentRef, ResourceSchema, CreateSchema, UpdateSchema;
-var init_chunk_K62YRMVY = __esm({
-  "../agent-sdk/dist/chunk-K62YRMVY.js"() {
+var init_chunk_M5YT2IM2 = __esm({
+  "../agent-sdk/dist/chunk-M5YT2IM2.js"() {
     "use strict";
     init_chunk_ZP5VMV5O();
     init_chunk_YGAHGTVZ();
     init_chunk_23UKWXJH();
     init_chunk_DC2UMEQH();
     init_chunk_SDLNBA53();
-    init_chunk_LJL3DM2L();
+    init_chunk_DNVTIB2H();
     init_chunk_QLWA4MJ5();
     init_chunk_H6TQGV4L();
     init_chunk_NIOWKTIF();
     init_chunk_LAWTTG2E();
-    init_chunk_JOAEFGXZ();
+    init_chunk_ZMCS7MYZ();
     init_chunk_BMPB7XJH();
     init_chunk_I5ZA45YL();
     init_chunk_NUO56TF7();
@@ -218566,7 +218561,7 @@ var init_chunk_K62YRMVY = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-MD4BZGMS.js
+// ../agent-sdk/dist/chunk-RE6QJXWV.js
 function maskSecret(value) {
   if (!value) return "";
   if (value.length <= 12) return "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022";
@@ -218601,10 +218596,10 @@ function handleGetSetting(request2, key) {
   });
 }
 var NON_SECRET_KEYS, ALLOWED_KEYS, SECRET_KEYS;
-var init_chunk_MD4BZGMS = __esm({
-  "../agent-sdk/dist/chunk-MD4BZGMS.js"() {
+var init_chunk_RE6QJXWV = __esm({
+  "../agent-sdk/dist/chunk-RE6QJXWV.js"() {
     "use strict";
-    init_chunk_LJL3DM2L();
+    init_chunk_DNVTIB2H();
     init_chunk_QH57EOKP();
     init_chunk_EZYKRG4W();
     NON_SECRET_KEYS = /* @__PURE__ */ new Set([
@@ -218646,7 +218641,7 @@ var init_chunk_MD4BZGMS = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-XQA62XTJ.js
+// ../agent-sdk/dist/chunk-JKV2PP4K.js
 function handleCreateSkill(request2) {
   return routeWrap(request2, async () => {
     throw new ApiError(
@@ -218665,15 +218660,15 @@ function handleDeleteSkill(request2, _id) {
     );
   });
 }
-var init_chunk_XQA62XTJ = __esm({
-  "../agent-sdk/dist/chunk-XQA62XTJ.js"() {
+var init_chunk_JKV2PP4K = __esm({
+  "../agent-sdk/dist/chunk-JKV2PP4K.js"() {
     "use strict";
-    init_chunk_LJL3DM2L();
+    init_chunk_DNVTIB2H();
     init_chunk_EZYKRG4W();
   }
 });
 
-// ../agent-sdk/dist/chunk-UYNE3WPU.js
+// ../agent-sdk/dist/chunk-O7NQK4ZO.js
 function getVaultTenantId(id) {
   const row = getDb().prepare(`SELECT tenant_id FROM vaults WHERE id = ?`).get(id);
   return row?.tenant_id;
@@ -218781,11 +218776,11 @@ function handleDeleteEntry(request2, vaultId, key) {
   });
 }
 var CreateVaultSchema, PutEntrySchema;
-var init_chunk_UYNE3WPU = __esm({
-  "../agent-sdk/dist/chunk-UYNE3WPU.js"() {
+var init_chunk_O7NQK4ZO = __esm({
+  "../agent-sdk/dist/chunk-O7NQK4ZO.js"() {
     "use strict";
     init_chunk_23UKWXJH();
-    init_chunk_LJL3DM2L();
+    init_chunk_DNVTIB2H();
     init_chunk_VIGJQU6V();
     init_chunk_JEI7I3EH();
     init_chunk_5GZEX4HV();
@@ -218808,7 +218803,7 @@ var init_chunk_UYNE3WPU = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-7CADMELE.js
+// ../agent-sdk/dist/chunk-ZMV2QI3Q.js
 function handleCreateCredential(request2, vaultId) {
   return routeWrap(request2, async ({ auth }) => {
     loadVaultForCaller(auth, vaultId);
@@ -218894,11 +218889,11 @@ function handleDeleteCredential(request2, vaultId, credentialId) {
   });
 }
 var CreateCredentialSchema, UpdateCredentialSchema;
-var init_chunk_7CADMELE = __esm({
-  "../agent-sdk/dist/chunk-7CADMELE.js"() {
+var init_chunk_ZMV2QI3Q = __esm({
+  "../agent-sdk/dist/chunk-ZMV2QI3Q.js"() {
     "use strict";
-    init_chunk_UYNE3WPU();
-    init_chunk_LJL3DM2L();
+    init_chunk_O7NQK4ZO();
+    init_chunk_DNVTIB2H();
     init_chunk_ZQGJKPPY();
     init_chunk_EZYKRG4W();
     init_zod();
@@ -219014,7 +219009,7 @@ var init_chunk_F27XQZ2O = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-EUUDZGUE.js
+// ../agent-sdk/dist/chunk-GBLHY2GY.js
 function getEnvironmentTenantId2(id) {
   const row = getDb().prepare(`SELECT tenant_id FROM environments WHERE id = ?`).get(id);
   return row?.tenant_id;
@@ -219166,12 +219161,12 @@ function handleUpdateEnvironment(request2, id) {
   });
 }
 var PackagesSchema, NetworkingSchema, ConfigSchema, CreateSchema2, UpdateSchema2;
-var init_chunk_EUUDZGUE = __esm({
-  "../agent-sdk/dist/chunk-EUUDZGUE.js"() {
+var init_chunk_GBLHY2GY = __esm({
+  "../agent-sdk/dist/chunk-GBLHY2GY.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_SDLNBA53();
-    init_chunk_LJL3DM2L();
+    init_chunk_DNVTIB2H();
     init_chunk_QLWA4MJ5();
     init_chunk_NIOWKTIF();
     init_chunk_JSLEB2ED();
@@ -219221,7 +219216,7 @@ var init_chunk_EUUDZGUE = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-W5KXLYJH.js
+// ../agent-sdk/dist/chunk-4KBTQKWW.js
 function assertSessionTenant2(auth, sessionId) {
   const row = getDb().prepare(`SELECT tenant_id FROM sessions WHERE id = ?`).get(sessionId);
   if (row) {
@@ -219739,18 +219734,18 @@ function handleListEvents(request2, sessionId) {
   });
 }
 var teeLog, activeTees, MAX_TEE_REENTRIES, TextBlock2, UserMessage, UserInterrupt, UserToolConfirmation, UserCustomToolResult, UserDefineOutcome, UserEvent, BatchSchema;
-var init_chunk_W5KXLYJH = __esm({
-  "../agent-sdk/dist/chunk-W5KXLYJH.js"() {
+var init_chunk_4KBTQKWW = __esm({
+  "../agent-sdk/dist/chunk-4KBTQKWW.js"() {
     "use strict";
     init_chunk_3LG7DRJL();
     init_chunk_YGAHGTVZ();
     init_chunk_23UKWXJH();
     init_chunk_DC2UMEQH();
     init_chunk_NUINUAXO();
-    init_chunk_LJL3DM2L();
+    init_chunk_DNVTIB2H();
     init_chunk_QLWA4MJ5();
     init_chunk_HECQRMDR();
-    init_chunk_HJGUG7IH();
+    init_chunk_L3RYJ2HX();
     init_chunk_NIOWKTIF();
     init_chunk_LAWTTG2E();
     init_chunk_BMPB7XJH();
@@ -219805,7 +219800,7 @@ var init_chunk_W5KXLYJH = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-BYWW5GFO.js
+// ../agent-sdk/dist/chunk-4JFYFZEM.js
 function assertFileTenantByScope(auth, scopeType, scopeId) {
   if (!scopeId || scopeType !== "session") {
     if (!auth.isGlobalAdmin) throw notFound("file not found");
@@ -219940,34 +219935,34 @@ function handleDeleteFile(request2, fileId) {
     return jsonOk(result);
   });
 }
-var init_chunk_BYWW5GFO = __esm({
-  "../agent-sdk/dist/chunk-BYWW5GFO.js"() {
+var init_chunk_4JFYFZEM = __esm({
+  "../agent-sdk/dist/chunk-4JFYFZEM.js"() {
     "use strict";
     init_chunk_STPT3SWU();
     init_chunk_NXRJ7Z4G();
     init_chunk_23UKWXJH();
-    init_chunk_LJL3DM2L();
+    init_chunk_DNVTIB2H();
     init_chunk_5GZEX4HV();
     init_chunk_EZYKRG4W();
     init_client();
   }
 });
 
-// ../agent-sdk/dist/chunk-SMKHXHLP.js
+// ../agent-sdk/dist/chunk-BZ6V7COK.js
 function handleGetLicense(request2) {
   return routeWrap(request2, async () => {
     return jsonOk(getLicenseInfo());
   });
 }
-var init_chunk_SMKHXHLP = __esm({
-  "../agent-sdk/dist/chunk-SMKHXHLP.js"() {
+var init_chunk_BZ6V7COK = __esm({
+  "../agent-sdk/dist/chunk-BZ6V7COK.js"() {
     "use strict";
     init_chunk_2N2KL4KM();
-    init_chunk_LJL3DM2L();
+    init_chunk_DNVTIB2H();
   }
 });
 
-// ../agent-sdk/dist/chunk-RZMR6H5Y.js
+// ../agent-sdk/dist/chunk-IXJCHHQC.js
 function assertStoreTenant(auth, storeAgentId) {
   if (storeAgentId == null) {
     if (!auth.isGlobalAdmin) throw notFound("memory store not found");
@@ -220078,12 +220073,12 @@ function handleDeleteMemory(request2, storeId, memId) {
   });
 }
 var CreateStoreSchema, CreateMemorySchema, UpdateMemorySchema;
-var init_chunk_RZMR6H5Y = __esm({
-  "../agent-sdk/dist/chunk-RZMR6H5Y.js"() {
+var init_chunk_IXJCHHQC = __esm({
+  "../agent-sdk/dist/chunk-IXJCHHQC.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_NUINUAXO();
-    init_chunk_LJL3DM2L();
+    init_chunk_DNVTIB2H();
     init_chunk_5GZEX4HV();
     init_chunk_EZYKRG4W();
     init_zod();
@@ -220119,7 +220114,7 @@ var init_models = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-OFLYKESG.js
+// ../agent-sdk/dist/chunk-XK3VIZA2.js
 function getAgentTenantId3(id) {
   const row = getDb().prepare(`SELECT tenant_id FROM agents WHERE id = ?`).get(id);
   return row?.tenant_id;
@@ -220285,11 +220280,11 @@ function handleDeleteAgent(request2, id) {
   });
 }
 var SkillSchema, ToolSchema, McpServerSchema, ModelConfigSchema2, CreateSchema3, UpdateSchema3;
-var init_chunk_OFLYKESG = __esm({
-  "../agent-sdk/dist/chunk-OFLYKESG.js"() {
+var init_chunk_XK3VIZA2 = __esm({
+  "../agent-sdk/dist/chunk-XK3VIZA2.js"() {
     "use strict";
     init_chunk_23UKWXJH();
-    init_chunk_LJL3DM2L();
+    init_chunk_DNVTIB2H();
     init_chunk_QLWA4MJ5();
     init_chunk_NIOWKTIF();
     init_chunk_JEI7I3EH();
@@ -220388,7 +220383,7 @@ var init_chunk_OFLYKESG = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-MA7IO6RU.js
+// ../agent-sdk/dist/chunk-UZHUG6CQ.js
 function toView3(row) {
   return row;
 }
@@ -220559,13 +220554,13 @@ function handleGetApiKeyActivity(request2, id) {
   });
 }
 var ScopeSchema, PermissionsSchema, CreateBody2, PatchBody3;
-var init_chunk_MA7IO6RU = __esm({
-  "../agent-sdk/dist/chunk-MA7IO6RU.js"() {
+var init_chunk_UZHUG6CQ = __esm({
+  "../agent-sdk/dist/chunk-UZHUG6CQ.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_MHQXDTJB();
     init_chunk_2N2KL4KM();
-    init_chunk_LJL3DM2L();
+    init_chunk_DNVTIB2H();
     init_chunk_ADK2TYO4();
     init_chunk_I5ZA45YL();
     init_chunk_5GZEX4HV();
@@ -220592,7 +220587,7 @@ var init_chunk_MA7IO6RU = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-IHMQQ43E.js
+// ../agent-sdk/dist/chunk-LS3QPECW.js
 function parseMs2(v2) {
   if (!v2) return void 0;
   const n = Number(v2);
@@ -220641,18 +220636,18 @@ function handleListAudit(request2) {
   });
 }
 var VALID_OUTCOMES;
-var init_chunk_IHMQQ43E = __esm({
-  "../agent-sdk/dist/chunk-IHMQQ43E.js"() {
+var init_chunk_LS3QPECW = __esm({
+  "../agent-sdk/dist/chunk-LS3QPECW.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_MHQXDTJB();
-    init_chunk_LJL3DM2L();
+    init_chunk_DNVTIB2H();
     init_chunk_EZYKRG4W();
     VALID_OUTCOMES = /* @__PURE__ */ new Set(["success", "denied", "failure"]);
   }
 });
 
-// ../agent-sdk/dist/chunk-TPAHUFSM.js
+// ../agent-sdk/dist/chunk-N4JBNOB4.js
 function handleBatch(request2) {
   return routeWrap(request2, async () => {
     const body = await request2.json();
@@ -220679,11 +220674,11 @@ function handleBatch(request2) {
   });
 }
 var OperationSchema, BatchSchema2;
-var init_chunk_TPAHUFSM = __esm({
-  "../agent-sdk/dist/chunk-TPAHUFSM.js"() {
+var init_chunk_N4JBNOB4 = __esm({
+  "../agent-sdk/dist/chunk-N4JBNOB4.js"() {
     "use strict";
     init_chunk_S3SKODVV();
-    init_chunk_LJL3DM2L();
+    init_chunk_DNVTIB2H();
     init_chunk_EZYKRG4W();
     init_zod();
     OperationSchema = external_exports.object({
@@ -220797,47 +220792,47 @@ __export(handlers_exports, {
 var init_handlers3 = __esm({
   "../agent-sdk/dist/handlers/index.js"() {
     "use strict";
-    init_chunk_TOKLTGSO();
-    init_chunk_ECRLACEF();
+    init_chunk_5R7FFW3Q();
+    init_chunk_Q336Y6X2();
     init_chunk_FB4OSWM2();
-    init_chunk_U6GNZJGO();
-    init_chunk_TKV7CFAM();
-    init_chunk_L4T7KCQ2();
-    init_chunk_6RRYNQXP();
+    init_chunk_BOV4Y6OS();
+    init_chunk_Z2C4OC6I();
+    init_chunk_RZQUEFR3();
+    init_chunk_J77TSQVL();
     init_chunk_HKAW5ATE();
-    init_chunk_QDOCVDWJ();
-    init_chunk_FCCWKCGQ();
-    init_chunk_JNQLE5D7();
+    init_chunk_HM2NHQ5J();
+    init_chunk_LPLBLYVQ();
+    init_chunk_FLSWLEC3();
     init_chunk_R45W644X();
-    init_chunk_QOJMXK4S();
-    init_chunk_WWYVMGRP();
-    init_chunk_LRPU2HS5();
-    init_chunk_K62YRMVY();
+    init_chunk_RDGOGAQ5();
+    init_chunk_JQBZ2X6N();
+    init_chunk_NNJ3QFTU();
+    init_chunk_M5YT2IM2();
     init_chunk_ZP5VMV5O();
-    init_chunk_MD4BZGMS();
-    init_chunk_XQA62XTJ();
-    init_chunk_7CADMELE();
-    init_chunk_UYNE3WPU();
+    init_chunk_RE6QJXWV();
+    init_chunk_JKV2PP4K();
+    init_chunk_ZMV2QI3Q();
+    init_chunk_O7NQK4ZO();
     init_chunk_F27XQZ2O();
-    init_chunk_EUUDZGUE();
-    init_chunk_W5KXLYJH();
+    init_chunk_GBLHY2GY();
+    init_chunk_4KBTQKWW();
     init_chunk_3LG7DRJL();
-    init_chunk_BYWW5GFO();
-    init_chunk_SMKHXHLP();
-    init_chunk_RZMR6H5Y();
+    init_chunk_4JFYFZEM();
+    init_chunk_BZ6V7COK();
+    init_chunk_IXJCHHQC();
     init_chunk_BZ6HFTHU();
     init_chunk_STPT3SWU();
-    init_chunk_OFLYKESG();
-    init_chunk_MA7IO6RU();
-    init_chunk_IHMQQ43E();
-    init_chunk_TPAHUFSM();
+    init_chunk_XK3VIZA2();
+    init_chunk_UZHUG6CQ();
+    init_chunk_LS3QPECW();
+    init_chunk_N4JBNOB4();
     init_chunk_YGAHGTVZ();
     init_chunk_JK5TPJHH();
     init_chunk_NXRJ7Z4G();
     init_chunk_23UKWXJH();
     init_chunk_4TKOEF6X();
-    init_chunk_DHSSHDIG();
-    init_chunk_OWTXN2FU();
+    init_chunk_D2TRWKVQ();
+    init_chunk_OXWELRJL();
     init_chunk_7346CKTF();
     init_chunk_DC2UMEQH();
     init_chunk_S3SKODVV();
@@ -220845,15 +220840,15 @@ var init_handlers3 = __esm({
     init_chunk_SDLNBA53();
     init_chunk_MHQXDTJB();
     init_chunk_2N2KL4KM();
-    init_chunk_LJL3DM2L();
+    init_chunk_DNVTIB2H();
     init_chunk_D2XITRN6();
     init_chunk_PWWRWR75();
     init_chunk_QLWA4MJ5();
     init_chunk_W6WKXFHN();
     init_chunk_HVUWXUUI();
-    init_chunk_C4IHTLG2();
+    init_chunk_RMN5HYVC();
     init_chunk_HECQRMDR();
-    init_chunk_HJGUG7IH();
+    init_chunk_L3RYJ2HX();
     init_chunk_PJZ5TQYW();
     init_chunk_AU4NAQGA();
     init_chunk_H6TQGV4L();
@@ -220866,10 +220861,10 @@ var init_handlers3 = __esm({
     init_chunk_ZQGJKPPY();
     init_chunk_ADK2TYO4();
     init_chunk_3MQ2FWXS();
-    init_chunk_S6AM7WVH();
-    init_chunk_PNYCULIF();
+    init_chunk_U7GILP6F();
+    init_chunk_G5CIMVGV();
     init_chunk_LAWTTG2E();
-    init_chunk_JOAEFGXZ();
+    init_chunk_ZMCS7MYZ();
     init_chunk_DO4WVWW7();
     init_chunk_RMZRSYIJ();
     init_chunk_5ZFOKZGR();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentstep/gateway",
-  "version": "0.4.16",
+  "version": "0.4.18",
   "description": "Self-hosted, open-source, Anthropic Managed Agents-compatible. CLI + web UI for running AI agents in sandboxed environments.",
   "keywords": [
     "anthropic",
@@ -33,7 +33,7 @@
   "author": "AgentStep",
   "repository": {
     "type": "git",
-    "url": "https://github.com/paulmeller/gateway.git",
+    "url": "https://github.com/agentstep/gateway.git",
     "directory": "packages/gateway"
   },
   "license": "Apache-2.0",