@agentstep/gateway 0.4.20 → 0.4.21

package/dist/gateway.js

@@ -158876,7 +158876,7 @@ var init_storage = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-V2C4E2MN.js
+// ../agent-sdk/dist/chunk-KMYX7DZG.js
 function wrapProviderWithSecrets(provider, secrets) {
   if (!secrets || Object.keys(secrets).length === 0) return provider;
   return {
@@ -159138,7 +159138,9 @@ async function provisionResources(sandboxName, resources, provider) {
       } catch (err) {
         console.warn(`[lifecycle] failed to provision file resource ${r.file_id}:`, err);
       }
-    } else if (r.type === "github_repository" && r.repository_url) {
+    } else if (r.type === "github_repository") {
+      const cloneUrl = r.repository_url ?? r.url;
+      if (!cloneUrl) continue;
       try {
         const repoDir = safeMountPath ? safeMountPath.startsWith("/") ? safeMountPath : `/mnt/session/uploads/${safeMountPath}` : `/mnt/session/resources/repo_${i}`;
         const SAFE_REF_RE = /^[a-zA-Z0-9_./\-]+$/;
@@ -159150,16 +159152,16 @@ async function provisionResources(sandboxName, resources, provider) {
         if (safeBranch) {
           gitArgs.push("--branch", safeBranch);
         }
-        gitArgs.push("--", r.repository_url, repoDir);
+        gitArgs.push("--", cloneUrl, repoDir);
         const result = await provider.exec(sandboxName, gitArgs, { timeoutMs: 12e4 });
         if (safeCommit && result.exit_code === 0) {
           await provider.exec(sandboxName, ["git", "-C", repoDir, "checkout", safeCommit], { timeoutMs: 3e4 });
         }
         if (result.exit_code !== 0) {
-          console.warn(`[lifecycle] git clone failed for ${r.repository_url}: ${result.stderr.slice(0, 200)}`);
+          console.warn(`[lifecycle] git clone failed for ${cloneUrl}: ${result.stderr.slice(0, 200)}`);
         }
       } catch (err) {
-        console.warn(`[lifecycle] failed to clone repo ${r.repository_url}:`, err);
+        console.warn(`[lifecycle] failed to clone repo ${cloneUrl}:`, err);
       }
     }
   }
@@ -159224,8 +159226,8 @@ async function reconcileDockerOrphanSandboxes() {
   return { deleted, kept };
 }
 var lcLog, SANDBOX_NAME_PREFIX;
-var init_chunk_V2C4E2MN = __esm({
-  "../agent-sdk/dist/chunk-V2C4E2MN.js"() {
+var init_chunk_KMYX7DZG = __esm({
+  "../agent-sdk/dist/chunk-KMYX7DZG.js"() {
     "use strict";
     init_chunk_DO4WVWW7();
     init_chunk_RMZRSYIJ();
@@ -159785,7 +159787,7 @@ var MAX_THREAD_DEPTH;
 var init_threads = __esm({
   "../agent-sdk/dist/sessions/threads.js"() {
     "use strict";
-    init_chunk_TDSJP5AV();
+    init_chunk_XZZ3E7KS();
     init_chunk_PJZ5TQYW();
     init_chunk_AU4NAQGA();
     init_chunk_H6TQGV4L();
@@ -159795,7 +159797,7 @@ var init_threads = __esm({
     init_chunk_NIOWKTIF();
     init_chunk_ZQGJKPPY();
     init_chunk_LAWTTG2E();
-    init_chunk_V2C4E2MN();
+    init_chunk_KMYX7DZG();
     init_chunk_DO4WVWW7();
     init_chunk_RMZRSYIJ();
     init_chunk_5ZFOKZGR();
@@ -159868,7 +159870,7 @@ var init_threads = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-TDSJP5AV.js
+// ../agent-sdk/dist/chunk-XZZ3E7KS.js
 function formatStopReason(reason, eventIds) {
   if (reason === "custom_tool_call" && eventIds?.length) {
     return { type: "requires_action", event_ids: eventIds };
@@ -160544,8 +160546,8 @@ async function writePermissionResponse(sessionId, result, denyMessage) {
   getPendingConfirmations().delete(sessionId);
 }
 var gd;
-var init_chunk_TDSJP5AV = __esm({
-  "../agent-sdk/dist/chunk-TDSJP5AV.js"() {
+var init_chunk_XZZ3E7KS = __esm({
+  "../agent-sdk/dist/chunk-XZZ3E7KS.js"() {
     "use strict";
     init_chunk_PJZ5TQYW();
     init_chunk_AU4NAQGA();
@@ -160554,7 +160556,7 @@ var init_chunk_TDSJP5AV = __esm({
     init_chunk_72BKGVBE();
     init_chunk_M4CTE7EH();
     init_chunk_NIOWKTIF();
-    init_chunk_V2C4E2MN();
+    init_chunk_KMYX7DZG();
     init_chunk_DO4WVWW7();
     init_chunk_BMPB7XJH();
     init_chunk_I5ZA45YL();
@@ -212924,7 +212926,7 @@ var init_chunk_3MQ2FWXS = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-CQ7SDFTO.js
+// ../agent-sdk/dist/chunk-WCE2QP2C.js
 function markStopping() {
   stopping = true;
 }
@@ -212990,11 +212992,11 @@ async function evictIdleSessions() {
   }
 }
 var sweeping, stopping;
-var init_chunk_CQ7SDFTO = __esm({
-  "../agent-sdk/dist/chunk-CQ7SDFTO.js"() {
+var init_chunk_WCE2QP2C = __esm({
+  "../agent-sdk/dist/chunk-WCE2QP2C.js"() {
     "use strict";
     init_chunk_LAWTTG2E();
-    init_chunk_V2C4E2MN();
+    init_chunk_KMYX7DZG();
     init_chunk_BMPB7XJH();
     init_chunk_I5ZA45YL();
     init_chunk_QH57EOKP();
@@ -213006,7 +213008,7 @@ var init_chunk_CQ7SDFTO = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-MROQIA7C.js
+// ../agent-sdk/dist/chunk-XHSOHO7G.js
 function installShutdownHandlers() {
   if (g12.__caShutdownInstalled) return;
   g12.__caShutdownInstalled = true;
@@ -213049,10 +213051,10 @@ async function shutdown(signal) {
   process.exit(0);
 }
 var g12, shuttingDown;
-var init_chunk_MROQIA7C = __esm({
-  "../agent-sdk/dist/chunk-MROQIA7C.js"() {
+var init_chunk_XHSOHO7G = __esm({
+  "../agent-sdk/dist/chunk-XHSOHO7G.js"() {
     "use strict";
-    init_chunk_CQ7SDFTO();
+    init_chunk_WCE2QP2C();
     init_chunk_5GZEX4HV();
     init_chunk_UYTSKFGK();
     init_client();
@@ -215153,7 +215155,7 @@ var init_rate_limit = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-BEGJBTM2.js
+// ../agent-sdk/dist/chunk-YGGORPEQ.js
 import path10 from "path";
 async function ensureInitialized() {
   if (g14.__caInitPromise) return g14.__caInitPromise;
@@ -215372,18 +215374,18 @@ async function rebuildContainerPool() {
   }
 }
 var g14;
-var init_chunk_BEGJBTM2 = __esm({
-  "../agent-sdk/dist/chunk-BEGJBTM2.js"() {
+var init_chunk_YGGORPEQ = __esm({
+  "../agent-sdk/dist/chunk-YGGORPEQ.js"() {
     "use strict";
     init_chunk_HECQRMDR();
-    init_chunk_TDSJP5AV();
+    init_chunk_XZZ3E7KS();
     init_chunk_ACKMNK3C();
     init_chunk_TWPTR2C2();
     init_chunk_ADK2TYO4();
     init_chunk_3MQ2FWXS();
-    init_chunk_MROQIA7C();
-    init_chunk_CQ7SDFTO();
-    init_chunk_V2C4E2MN();
+    init_chunk_XHSOHO7G();
+    init_chunk_WCE2QP2C();
+    init_chunk_KMYX7DZG();
     init_chunk_BMPB7XJH();
     init_chunk_I5ZA45YL();
     init_chunk_YPXI7Q2M();
@@ -215401,7 +215403,7 @@ var init_chunk_BEGJBTM2 = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-QOXHG4Y6.js
+// ../agent-sdk/dist/chunk-X7NFCRRZ.js
 async function routeWrap(request2, handler) {
   const startedAt = Date.now();
   let status = 500;
@@ -215445,13 +215447,13 @@ async function routeWrap(request2, handler) {
 function jsonOk(body, status = 200) {
   return Response.json(body, { status });
 }
-var init_chunk_QOXHG4Y6 = __esm({
-  "../agent-sdk/dist/chunk-QOXHG4Y6.js"() {
+var init_chunk_X7NFCRRZ = __esm({
+  "../agent-sdk/dist/chunk-X7NFCRRZ.js"() {
     "use strict";
     init_chunk_D2XITRN6();
     init_chunk_PWWRWR75();
     init_chunk_HVUWXUUI();
-    init_chunk_BEGJBTM2();
+    init_chunk_YGGORPEQ();
     init_chunk_3MQ2FWXS();
     init_chunk_EZYKRG4W();
   }
@@ -215581,15 +215583,15 @@ var init_dist2 = __esm({
     init_chunk_SDLNBA53();
     init_chunk_MHQXDTJB();
     init_chunk_2N2KL4KM();
-    init_chunk_QOXHG4Y6();
+    init_chunk_X7NFCRRZ();
     init_chunk_D2XITRN6();
     init_chunk_PWWRWR75();
     init_chunk_QLWA4MJ5();
     init_chunk_W6WKXFHN();
     init_chunk_HVUWXUUI();
-    init_chunk_BEGJBTM2();
+    init_chunk_YGGORPEQ();
     init_chunk_HECQRMDR();
-    init_chunk_TDSJP5AV();
+    init_chunk_XZZ3E7KS();
     init_chunk_PJZ5TQYW();
     init_chunk_AU4NAQGA();
     init_chunk_H6TQGV4L();
@@ -215602,10 +215604,10 @@ var init_dist2 = __esm({
     init_chunk_ZQGJKPPY();
     init_chunk_ADK2TYO4();
     init_chunk_3MQ2FWXS();
-    init_chunk_MROQIA7C();
-    init_chunk_CQ7SDFTO();
+    init_chunk_XHSOHO7G();
+    init_chunk_WCE2QP2C();
     init_chunk_LAWTTG2E();
-    init_chunk_V2C4E2MN();
+    init_chunk_KMYX7DZG();
     init_chunk_DO4WVWW7();
     init_chunk_RMZRSYIJ();
     init_chunk_5ZFOKZGR();
@@ -215679,7 +215681,7 @@ var init_dist2 = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-QTBXZSVW.js
+// ../agent-sdk/dist/chunk-X56NSB2J.js
 function handleWhoami(request2) {
   return routeWrap(request2, async ({ auth }) => {
     return jsonOk({
@@ -215690,10 +215692,10 @@ function handleWhoami(request2) {
     });
   });
 }
-var init_chunk_QTBXZSVW = __esm({
-  "../agent-sdk/dist/chunk-QTBXZSVW.js"() {
+var init_chunk_X56NSB2J = __esm({
+  "../agent-sdk/dist/chunk-X56NSB2J.js"() {
     "use strict";
-    init_chunk_QOXHG4Y6();
+    init_chunk_X7NFCRRZ();
   }
 });
 
@@ -215907,7 +215909,7 @@ var init_chunk_FB4OSWM2 = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-NXUSIOLM.js
+// ../agent-sdk/dist/chunk-L6YBWSJU.js
 async function handleGetSkillsCatalog(request2) {
   return routeWrap(request2, async ({ request: req }) => {
     const url2 = new URL(req.url);
@@ -215963,11 +215965,11 @@ async function handleGetSkillsFeed(request2) {
     return jsonOk(feed);
   });
 }
-var init_chunk_NXUSIOLM = __esm({
-  "../agent-sdk/dist/chunk-NXUSIOLM.js"() {
+var init_chunk_L6YBWSJU = __esm({
+  "../agent-sdk/dist/chunk-L6YBWSJU.js"() {
     "use strict";
     init_chunk_FB4OSWM2();
-    init_chunk_QOXHG4Y6();
+    init_chunk_X7NFCRRZ();
   }
 });
 
@@ -216027,7 +216029,7 @@ var init_chunk_23UKWXJH = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-J5DICKEN.js
+// ../agent-sdk/dist/chunk-TC5CGHRE.js
 async function prepareSessionStream(request2, sessionId) {
   try {
     await ensureInitialized();
@@ -216120,14 +216122,14 @@ data: ${JSON.stringify(evt)}
     }
   });
 }
-var init_chunk_J5DICKEN = __esm({
-  "../agent-sdk/dist/chunk-J5DICKEN.js"() {
+var init_chunk_TC5CGHRE = __esm({
+  "../agent-sdk/dist/chunk-TC5CGHRE.js"() {
     "use strict";
     init_chunk_YGAHGTVZ();
     init_chunk_23UKWXJH();
     init_chunk_PWWRWR75();
     init_chunk_QLWA4MJ5();
-    init_chunk_BEGJBTM2();
+    init_chunk_YGGORPEQ();
     init_chunk_NIOWKTIF();
     init_chunk_BMPB7XJH();
     init_chunk_I5ZA45YL();
@@ -216137,7 +216139,7 @@ var init_chunk_J5DICKEN = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-JCW24KHR.js
+// ../agent-sdk/dist/chunk-OIHCQ3K6.js
 function handleCreateTenant(request2) {
   return routeWrap(request2, async ({ auth, request: req }) => {
     requireFeature("tenancy", "multi-tenancy");
@@ -216236,13 +216238,13 @@ function handleArchiveTenant(request2, id) {
   });
 }
 var CreateBody, PatchBody;
-var init_chunk_JCW24KHR = __esm({
-  "../agent-sdk/dist/chunk-JCW24KHR.js"() {
+var init_chunk_OIHCQ3K6 = __esm({
+  "../agent-sdk/dist/chunk-OIHCQ3K6.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_MHQXDTJB();
     init_chunk_2N2KL4KM();
-    init_chunk_QOXHG4Y6();
+    init_chunk_X7NFCRRZ();
     init_chunk_JDELTTHV();
     init_chunk_EZYKRG4W();
     init_zod();
@@ -216256,7 +216258,7 @@ var init_chunk_JCW24KHR = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-TNQ2H344.js
+// ../agent-sdk/dist/chunk-567H2QO2.js
 function handleListThreads(request2, sessionId) {
   return routeWrap(request2, async ({ auth }) => {
     const row = getDb().prepare(`SELECT tenant_id FROM sessions WHERE id = ?`).get(sessionId);
@@ -216281,11 +216283,11 @@ function handleListThreads(request2, sessionId) {
     });
   });
 }
-var init_chunk_TNQ2H344 = __esm({
-  "../agent-sdk/dist/chunk-TNQ2H344.js"() {
+var init_chunk_567H2QO2 = __esm({
+  "../agent-sdk/dist/chunk-567H2QO2.js"() {
     "use strict";
     init_chunk_23UKWXJH();
-    init_chunk_QOXHG4Y6();
+    init_chunk_X7NFCRRZ();
     init_chunk_I5ZA45YL();
     init_chunk_5GZEX4HV();
     init_chunk_EZYKRG4W();
@@ -216335,7 +216337,7 @@ var init_chunk_JK5TPJHH = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-D2FQAAM2.js
+// ../agent-sdk/dist/chunk-WJ2ED73J.js
 function buildSpanTree(events2) {
   const nodes = /* @__PURE__ */ new Map();
   const openStarts = /* @__PURE__ */ new Map();
@@ -216519,11 +216521,11 @@ function handleExportTrace(request2, traceId) {
     return jsonOk(result, result.ok ? 200 : 502);
   });
 }
-var init_chunk_D2FQAAM2 = __esm({
-  "../agent-sdk/dist/chunk-D2FQAAM2.js"() {
+var init_chunk_WJ2ED73J = __esm({
+  "../agent-sdk/dist/chunk-WJ2ED73J.js"() {
     "use strict";
     init_chunk_JK5TPJHH();
-    init_chunk_QOXHG4Y6();
+    init_chunk_X7NFCRRZ();
     init_chunk_ACKMNK3C();
     init_chunk_O45IQUWS();
     init_chunk_EZYKRG4W();
@@ -217110,7 +217112,7 @@ agentstep skills install \${n}
   }
 });
 
-// ../agent-sdk/dist/chunk-LA3LXLFL.js
+// ../agent-sdk/dist/chunk-HBHWYYHS.js
 function handleAddUpstreamKey(request2) {
   return routeWrap(request2, async ({ auth, request: req }) => {
     requireFeature("upstream_pool", "upstream key pool");
@@ -217202,15 +217204,15 @@ function handleDeleteUpstreamKey(request2, id) {
   });
 }
 var AddBody, PatchBody2;
-var init_chunk_LA3LXLFL = __esm({
-  "../agent-sdk/dist/chunk-LA3LXLFL.js"() {
+var init_chunk_HBHWYYHS = __esm({
+  "../agent-sdk/dist/chunk-HBHWYYHS.js"() {
     "use strict";
     init_chunk_3LG7DRJL();
     init_chunk_BZ6HFTHU();
     init_chunk_23UKWXJH();
     init_chunk_MHQXDTJB();
     init_chunk_2N2KL4KM();
-    init_chunk_QOXHG4Y6();
+    init_chunk_X7NFCRRZ();
     init_chunk_EZYKRG4W();
     init_zod();
     AddBody = external_exports.object({
@@ -217224,7 +217226,7 @@ var init_chunk_LA3LXLFL = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-EAPJXYAX.js
+// ../agent-sdk/dist/chunk-AURHYRGS.js
 function zeroTotals() {
   return {
     session_count: 0,
@@ -217584,12 +217586,12 @@ function handleGetApiMetrics(request2) {
   });
 }
 var BUCKET_MS, TOP_N, MAX_POINTS_PER_SERIES, MAX_TOTAL_CELLS;
-var init_chunk_EAPJXYAX = __esm({
-  "../agent-sdk/dist/chunk-EAPJXYAX.js"() {
+var init_chunk_AURHYRGS = __esm({
+  "../agent-sdk/dist/chunk-AURHYRGS.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_2N2KL4KM();
-    init_chunk_QOXHG4Y6();
+    init_chunk_X7NFCRRZ();
     init_chunk_D2XITRN6();
     init_chunk_5GZEX4HV();
     init_chunk_EZYKRG4W();
@@ -217605,7 +217607,7 @@ var init_chunk_EAPJXYAX = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-3TU24KRF.js
+// ../agent-sdk/dist/chunk-FBLGJU36.js
 function handleListModels(request2) {
   return routeWrap(request2, async ({ request: req }) => {
     const url2 = new URL(req.url);
@@ -217616,11 +217618,11 @@ function handleListModels(request2) {
     return jsonOk({ data: models });
   });
 }
-var init_chunk_3TU24KRF = __esm({
-  "../agent-sdk/dist/chunk-3TU24KRF.js"() {
+var init_chunk_FBLGJU36 = __esm({
+  "../agent-sdk/dist/chunk-FBLGJU36.js"() {
     "use strict";
     init_chunk_R45W644X();
-    init_chunk_QOXHG4Y6();
+    init_chunk_X7NFCRRZ();
   }
 });
 
@@ -217643,7 +217645,7 @@ var init_chunk_RDGOGAQ5 = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-QREI2B7N.js
+// ../agent-sdk/dist/chunk-SUTKEAJ5.js
 async function checkLocalProvider(name) {
   try {
     const provider = await resolveContainerProvider(name);
@@ -217682,10 +217684,10 @@ async function handleGetProviderStatus(request2) {
   });
 }
 var LOCAL_PROVIDERS, CLOUD_PROVIDERS, CLOUD_KEY_MAP;
-var init_chunk_QREI2B7N = __esm({
-  "../agent-sdk/dist/chunk-QREI2B7N.js"() {
+var init_chunk_SUTKEAJ5 = __esm({
+  "../agent-sdk/dist/chunk-SUTKEAJ5.js"() {
     "use strict";
-    init_chunk_QOXHG4Y6();
+    init_chunk_X7NFCRRZ();
     init_chunk_JSLEB2ED();
     init_chunk_QH57EOKP();
     LOCAL_PROVIDERS = ["docker", "apple-container", "podman"];
@@ -217701,7 +217703,7 @@ var init_chunk_QREI2B7N = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-SXYRLCQ7.js
+// ../agent-sdk/dist/chunk-HOXEY4LO.js
 function assertSessionTenant(auth, sessionId) {
   const row = getDb().prepare(`SELECT tenant_id FROM sessions WHERE id = ?`).get(sessionId);
   if (row) {
@@ -217776,11 +217778,11 @@ function handleDeleteResource(request2, sessionId, resourceId) {
   });
 }
 var MAX_RESOURCES_PER_SESSION, AddResourceSchema;
-var init_chunk_SXYRLCQ7 = __esm({
-  "../agent-sdk/dist/chunk-SXYRLCQ7.js"() {
+var init_chunk_HOXEY4LO = __esm({
+  "../agent-sdk/dist/chunk-HOXEY4LO.js"() {
     "use strict";
     init_chunk_23UKWXJH();
-    init_chunk_QOXHG4Y6();
+    init_chunk_X7NFCRRZ();
     init_chunk_NIOWKTIF();
     init_chunk_I5ZA45YL();
     init_chunk_R5OZHLAD();
@@ -218101,7 +218103,7 @@ var init_vaults = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-EDVS5OMU.js
+// ../agent-sdk/dist/chunk-DFOXEUFV.js
 function getAgentTenantId(id) {
   const row = getDb().prepare(`SELECT tenant_id FROM agents WHERE id = ?`).get(id);
   return row?.tenant_id;
@@ -218262,12 +218264,22 @@ function handleCreateSession(request2) {
         if (data.resources?.length) {
           const { createResource: createResource2 } = await Promise.resolve().then(() => (init_session_resources2(), session_resources_exports2));
           for (const r of data.resources) {
+            let repoUrl = r.type === "github_repository" ? r.repository_url ?? r.url : r.uri;
+            if (r.type === "github_repository" && r.authorization_token && repoUrl) {
+              try {
+                const u4 = new URL(repoUrl);
+                u4.username = "x-access-token";
+                u4.password = r.authorization_token;
+                repoUrl = u4.toString();
+              } catch {
+              }
+            }
             createResource2(session2.id, {
               type: r.type,
               file_id: r.file_id,
               mount_path: r.mount_path,
-              url: r.type === "github_repository" ? r.repository_url : r.uri,
-              checkout: r.branch ? { type: "branch", name: r.branch } : r.commit ? { type: "commit", name: r.commit } : void 0
+              url: repoUrl,
+              checkout: r.checkout ? { type: r.checkout.type, name: r.checkout.name ?? r.checkout.sha ?? "" } : r.branch ? { type: "branch", name: r.branch } : r.commit ? { type: "commit", name: r.commit } : void 0
             });
           }
         }
@@ -218311,12 +218323,22 @@ function handleCreateSession(request2) {
       if (data.resources?.length) {
         const { createResource: createResource2 } = await Promise.resolve().then(() => (init_session_resources2(), session_resources_exports2));
         for (const r of data.resources) {
+          let repoUrl = r.type === "github_repository" ? r.repository_url ?? r.url : r.uri;
+          if (r.type === "github_repository" && r.authorization_token && repoUrl) {
+            try {
+              const u4 = new URL(repoUrl);
+              u4.username = "x-access-token";
+              u4.password = r.authorization_token;
+              repoUrl = u4.toString();
+            } catch {
+            }
+          }
           createResource2(session.id, {
             type: r.type,
             file_id: r.file_id,
             mount_path: r.mount_path,
-            url: r.type === "github_repository" ? r.repository_url : r.uri,
-            checkout: r.branch ? { type: "branch", name: r.branch } : r.commit ? { type: "commit", name: r.commit } : void 0
+            url: repoUrl,
+            checkout: r.checkout ? { type: r.checkout.type, name: r.checkout.name ?? r.checkout.sha ?? "" } : r.branch ? { type: "branch", name: r.branch } : r.commit ? { type: "commit", name: r.commit } : void 0
           });
         }
       }
@@ -218521,20 +218543,20 @@ function parseMs(v2) {
   return Number.isFinite(t2) ? t2 : void 0;
 }
 var ALLOWED_STATUSES, AgentRef, ResourceSchema, CreateSchema, UpdateSchema;
-var init_chunk_EDVS5OMU = __esm({
-  "../agent-sdk/dist/chunk-EDVS5OMU.js"() {
+var init_chunk_DFOXEUFV = __esm({
+  "../agent-sdk/dist/chunk-DFOXEUFV.js"() {
     "use strict";
     init_chunk_ZP5VMV5O();
     init_chunk_YGAHGTVZ();
     init_chunk_23UKWXJH();
     init_chunk_DC2UMEQH();
     init_chunk_SDLNBA53();
-    init_chunk_QOXHG4Y6();
+    init_chunk_X7NFCRRZ();
     init_chunk_QLWA4MJ5();
     init_chunk_H6TQGV4L();
     init_chunk_NIOWKTIF();
     init_chunk_LAWTTG2E();
-    init_chunk_V2C4E2MN();
+    init_chunk_KMYX7DZG();
     init_chunk_BMPB7XJH();
     init_chunk_I5ZA45YL();
     init_chunk_NUO56TF7();
@@ -218557,9 +218579,18 @@ var init_chunk_EDVS5OMU = __esm({
       content: external_exports.string().optional(),
       file_id: external_exports.string().optional(),
       mount_path: external_exports.string().optional(),
+      // Accept both internal (repository_url, branch, commit) and
+      // Anthropic API (url, checkout, authorization_token) field names.
+      url: external_exports.string().optional(),
       repository_url: external_exports.string().optional(),
       branch: external_exports.string().optional(),
-      commit: external_exports.string().optional()
+      commit: external_exports.string().optional(),
+      checkout: external_exports.object({
+        type: external_exports.string(),
+        name: external_exports.string().optional(),
+        sha: external_exports.string().optional()
+      }).optional(),
+      authorization_token: external_exports.string().optional()
     });
     CreateSchema = external_exports.object({
       agent: AgentRef,
@@ -218578,7 +218609,7 @@ var init_chunk_EDVS5OMU = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-4HBGBRU3.js
+// ../agent-sdk/dist/chunk-2CP76FVZ.js
 function maskSecret(value) {
   if (!value) return "";
   if (value.length <= 12) return "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022";
@@ -218613,10 +218644,10 @@ function handleGetSetting(request2, key) {
   });
 }
 var NON_SECRET_KEYS, ALLOWED_KEYS, SECRET_KEYS;
-var init_chunk_4HBGBRU3 = __esm({
-  "../agent-sdk/dist/chunk-4HBGBRU3.js"() {
+var init_chunk_2CP76FVZ = __esm({
+  "../agent-sdk/dist/chunk-2CP76FVZ.js"() {
     "use strict";
-    init_chunk_QOXHG4Y6();
+    init_chunk_X7NFCRRZ();
     init_chunk_QH57EOKP();
     init_chunk_EZYKRG4W();
     NON_SECRET_KEYS = /* @__PURE__ */ new Set([
@@ -218658,7 +218689,7 @@ var init_chunk_4HBGBRU3 = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-WDOPDZAQ.js
+// ../agent-sdk/dist/chunk-NHV2H6SO.js
 function handleCreateSkill(request2) {
   return routeWrap(request2, async () => {
     throw new ApiError(
@@ -218677,15 +218708,15 @@ function handleDeleteSkill(request2, _id) {
     );
   });
 }
-var init_chunk_WDOPDZAQ = __esm({
-  "../agent-sdk/dist/chunk-WDOPDZAQ.js"() {
+var init_chunk_NHV2H6SO = __esm({
+  "../agent-sdk/dist/chunk-NHV2H6SO.js"() {
     "use strict";
-    init_chunk_QOXHG4Y6();
+    init_chunk_X7NFCRRZ();
     init_chunk_EZYKRG4W();
   }
 });
 
-// ../agent-sdk/dist/chunk-IYM2AYJX.js
+// ../agent-sdk/dist/chunk-QLAY3AKZ.js
 function getVaultTenantId(id) {
   const row = getDb().prepare(`SELECT tenant_id FROM vaults WHERE id = ?`).get(id);
   return row?.tenant_id;
@@ -218793,11 +218824,11 @@ function handleDeleteEntry(request2, vaultId, key) {
   });
 }
 var CreateVaultSchema, PutEntrySchema;
-var init_chunk_IYM2AYJX = __esm({
-  "../agent-sdk/dist/chunk-IYM2AYJX.js"() {
+var init_chunk_QLAY3AKZ = __esm({
+  "../agent-sdk/dist/chunk-QLAY3AKZ.js"() {
     "use strict";
     init_chunk_23UKWXJH();
-    init_chunk_QOXHG4Y6();
+    init_chunk_X7NFCRRZ();
     init_chunk_VIGJQU6V();
     init_chunk_JEI7I3EH();
     init_chunk_5GZEX4HV();
@@ -218820,7 +218851,7 @@ var init_chunk_IYM2AYJX = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-NNFXHHPL.js
+// ../agent-sdk/dist/chunk-PP3F4TDU.js
 function handleCreateCredential(request2, vaultId) {
   return routeWrap(request2, async ({ auth }) => {
     loadVaultForCaller(auth, vaultId);
@@ -218906,11 +218937,11 @@ function handleDeleteCredential(request2, vaultId, credentialId) {
   });
 }
 var CreateCredentialSchema, UpdateCredentialSchema;
-var init_chunk_NNFXHHPL = __esm({
-  "../agent-sdk/dist/chunk-NNFXHHPL.js"() {
+var init_chunk_PP3F4TDU = __esm({
+  "../agent-sdk/dist/chunk-PP3F4TDU.js"() {
     "use strict";
-    init_chunk_IYM2AYJX();
-    init_chunk_QOXHG4Y6();
+    init_chunk_QLAY3AKZ();
+    init_chunk_X7NFCRRZ();
     init_chunk_ZQGJKPPY();
     init_chunk_EZYKRG4W();
     init_zod();
@@ -219026,7 +219057,7 @@ var init_chunk_F27XQZ2O = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-26MLN4YD.js
+// ../agent-sdk/dist/chunk-6MEOUVVJ.js
 function getEnvironmentTenantId2(id) {
   const row = getDb().prepare(`SELECT tenant_id FROM environments WHERE id = ?`).get(id);
   return row?.tenant_id;
@@ -219178,12 +219209,12 @@ function handleUpdateEnvironment(request2, id) {
   });
 }
 var PackagesSchema, NetworkingSchema, ConfigSchema, CreateSchema2, UpdateSchema2;
-var init_chunk_26MLN4YD = __esm({
-  "../agent-sdk/dist/chunk-26MLN4YD.js"() {
+var init_chunk_6MEOUVVJ = __esm({
+  "../agent-sdk/dist/chunk-6MEOUVVJ.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_SDLNBA53();
-    init_chunk_QOXHG4Y6();
+    init_chunk_X7NFCRRZ();
     init_chunk_QLWA4MJ5();
     init_chunk_NIOWKTIF();
     init_chunk_JSLEB2ED();
@@ -219233,7 +219264,7 @@ var init_chunk_26MLN4YD = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-AQCZFV3Q.js
+// ../agent-sdk/dist/chunk-XLU2TDN5.js
 function assertSessionTenant2(auth, sessionId) {
   const row = getDb().prepare(`SELECT tenant_id FROM sessions WHERE id = ?`).get(sessionId);
   if (row) {
@@ -219751,18 +219782,18 @@ function handleListEvents(request2, sessionId) {
   });
 }
 var teeLog, activeTees, MAX_TEE_REENTRIES, TextBlock2, UserMessage, UserInterrupt, UserToolConfirmation, UserCustomToolResult, UserDefineOutcome, UserEvent, BatchSchema;
-var init_chunk_AQCZFV3Q = __esm({
-  "../agent-sdk/dist/chunk-AQCZFV3Q.js"() {
+var init_chunk_XLU2TDN5 = __esm({
+  "../agent-sdk/dist/chunk-XLU2TDN5.js"() {
     "use strict";
     init_chunk_3LG7DRJL();
     init_chunk_YGAHGTVZ();
     init_chunk_23UKWXJH();
     init_chunk_DC2UMEQH();
     init_chunk_NUINUAXO();
-    init_chunk_QOXHG4Y6();
+    init_chunk_X7NFCRRZ();
     init_chunk_QLWA4MJ5();
     init_chunk_HECQRMDR();
-    init_chunk_TDSJP5AV();
+    init_chunk_XZZ3E7KS();
     init_chunk_NIOWKTIF();
     init_chunk_LAWTTG2E();
     init_chunk_BMPB7XJH();
@@ -219817,7 +219848,7 @@ var init_chunk_AQCZFV3Q = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-QCRRP2YS.js
+// ../agent-sdk/dist/chunk-JNSXQHDS.js
 function assertFileTenantByScope(auth, scopeType, scopeId) {
   if (!scopeId || scopeType !== "session") {
     if (!auth.isGlobalAdmin) throw notFound("file not found");
@@ -219952,34 +219983,34 @@ function handleDeleteFile(request2, fileId) {
     return jsonOk(result);
   });
 }
-var init_chunk_QCRRP2YS = __esm({
-  "../agent-sdk/dist/chunk-QCRRP2YS.js"() {
+var init_chunk_JNSXQHDS = __esm({
+  "../agent-sdk/dist/chunk-JNSXQHDS.js"() {
     "use strict";
     init_chunk_STPT3SWU();
     init_chunk_NXRJ7Z4G();
     init_chunk_23UKWXJH();
-    init_chunk_QOXHG4Y6();
+    init_chunk_X7NFCRRZ();
     init_chunk_5GZEX4HV();
     init_chunk_EZYKRG4W();
     init_client();
   }
 });
 
-// ../agent-sdk/dist/chunk-2XWOQ3BY.js
+// ../agent-sdk/dist/chunk-WR2OZUIM.js
 function handleGetLicense(request2) {
   return routeWrap(request2, async () => {
     return jsonOk(getLicenseInfo());
   });
 }
-var init_chunk_2XWOQ3BY = __esm({
-  "../agent-sdk/dist/chunk-2XWOQ3BY.js"() {
+var init_chunk_WR2OZUIM = __esm({
+  "../agent-sdk/dist/chunk-WR2OZUIM.js"() {
     "use strict";
     init_chunk_2N2KL4KM();
-    init_chunk_QOXHG4Y6();
+    init_chunk_X7NFCRRZ();
   }
 });
 
-// ../agent-sdk/dist/chunk-74TKPNGH.js
+// ../agent-sdk/dist/chunk-36P24YAQ.js
 function assertStoreTenant(auth, storeAgentId) {
   if (storeAgentId == null) {
     if (!auth.isGlobalAdmin) throw notFound("memory store not found");
@@ -220090,12 +220121,12 @@ function handleDeleteMemory(request2, storeId, memId) {
   });
 }
 var CreateStoreSchema, CreateMemorySchema, UpdateMemorySchema;
-var init_chunk_74TKPNGH = __esm({
-  "../agent-sdk/dist/chunk-74TKPNGH.js"() {
+var init_chunk_36P24YAQ = __esm({
+  "../agent-sdk/dist/chunk-36P24YAQ.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_NUINUAXO();
-    init_chunk_QOXHG4Y6();
+    init_chunk_X7NFCRRZ();
     init_chunk_5GZEX4HV();
     init_chunk_EZYKRG4W();
     init_zod();
@@ -220131,7 +220162,7 @@ var init_models = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-VCM3ZLSO.js
+// ../agent-sdk/dist/chunk-DGD2FXDQ.js
 function getAgentTenantId3(id) {
   const row = getDb().prepare(`SELECT tenant_id FROM agents WHERE id = ?`).get(id);
   return row?.tenant_id;
@@ -220297,11 +220328,11 @@ function handleDeleteAgent(request2, id) {
   });
 }
 var SkillSchema, ToolSchema, McpServerSchema, ModelConfigSchema2, CreateSchema3, UpdateSchema3;
-var init_chunk_VCM3ZLSO = __esm({
-  "../agent-sdk/dist/chunk-VCM3ZLSO.js"() {
+var init_chunk_DGD2FXDQ = __esm({
+  "../agent-sdk/dist/chunk-DGD2FXDQ.js"() {
     "use strict";
     init_chunk_23UKWXJH();
-    init_chunk_QOXHG4Y6();
+    init_chunk_X7NFCRRZ();
     init_chunk_QLWA4MJ5();
     init_chunk_NIOWKTIF();
     init_chunk_JEI7I3EH();
@@ -220400,7 +220431,7 @@ var init_chunk_VCM3ZLSO = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-ORAB6DT4.js
+// ../agent-sdk/dist/chunk-TX76DTZU.js
 function toView3(row) {
   return row;
 }
@@ -220571,13 +220602,13 @@ function handleGetApiKeyActivity(request2, id) {
   });
 }
 var ScopeSchema, PermissionsSchema, CreateBody2, PatchBody3;
-var init_chunk_ORAB6DT4 = __esm({
-  "../agent-sdk/dist/chunk-ORAB6DT4.js"() {
+var init_chunk_TX76DTZU = __esm({
+  "../agent-sdk/dist/chunk-TX76DTZU.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_MHQXDTJB();
     init_chunk_2N2KL4KM();
-    init_chunk_QOXHG4Y6();
+    init_chunk_X7NFCRRZ();
     init_chunk_ADK2TYO4();
     init_chunk_I5ZA45YL();
     init_chunk_5GZEX4HV();
@@ -220604,7 +220635,7 @@ var init_chunk_ORAB6DT4 = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-YI74CMQH.js
+// ../agent-sdk/dist/chunk-KVGKRIX4.js
 function parseMs2(v2) {
   if (!v2) return void 0;
   const n = Number(v2);
@@ -220653,18 +220684,18 @@ function handleListAudit(request2) {
   });
 }
 var VALID_OUTCOMES;
-var init_chunk_YI74CMQH = __esm({
-  "../agent-sdk/dist/chunk-YI74CMQH.js"() {
+var init_chunk_KVGKRIX4 = __esm({
+  "../agent-sdk/dist/chunk-KVGKRIX4.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_MHQXDTJB();
-    init_chunk_QOXHG4Y6();
+    init_chunk_X7NFCRRZ();
     init_chunk_EZYKRG4W();
     VALID_OUTCOMES = /* @__PURE__ */ new Set(["success", "denied", "failure"]);
   }
 });
 
-// ../agent-sdk/dist/chunk-4TUARBXU.js
+// ../agent-sdk/dist/chunk-IE34EGK6.js
 function handleBatch(request2) {
   return routeWrap(request2, async () => {
     const body = await request2.json();
@@ -220691,11 +220722,11 @@ function handleBatch(request2) {
   });
 }
 var OperationSchema, BatchSchema2;
-var init_chunk_4TUARBXU = __esm({
-  "../agent-sdk/dist/chunk-4TUARBXU.js"() {
+var init_chunk_IE34EGK6 = __esm({
+  "../agent-sdk/dist/chunk-IE34EGK6.js"() {
     "use strict";
     init_chunk_S3SKODVV();
-    init_chunk_QOXHG4Y6();
+    init_chunk_X7NFCRRZ();
     init_chunk_EZYKRG4W();
     init_zod();
     OperationSchema = external_exports.object({
@@ -220809,40 +220840,40 @@ __export(handlers_exports, {
 var init_handlers3 = __esm({
   "../agent-sdk/dist/handlers/index.js"() {
     "use strict";
-    init_chunk_QTBXZSVW();
-    init_chunk_NXUSIOLM();
+    init_chunk_X56NSB2J();
+    init_chunk_L6YBWSJU();
     init_chunk_FB4OSWM2();
-    init_chunk_J5DICKEN();
-    init_chunk_JCW24KHR();
-    init_chunk_TNQ2H344();
-    init_chunk_D2FQAAM2();
+    init_chunk_TC5CGHRE();
+    init_chunk_OIHCQ3K6();
+    init_chunk_567H2QO2();
+    init_chunk_WJ2ED73J();
     init_chunk_HKAW5ATE();
-    init_chunk_LA3LXLFL();
-    init_chunk_EAPJXYAX();
-    init_chunk_3TU24KRF();
+    init_chunk_HBHWYYHS();
+    init_chunk_AURHYRGS();
+    init_chunk_FBLGJU36();
     init_chunk_R45W644X();
     init_chunk_RDGOGAQ5();
-    init_chunk_QREI2B7N();
-    init_chunk_SXYRLCQ7();
-    init_chunk_EDVS5OMU();
+    init_chunk_SUTKEAJ5();
+    init_chunk_HOXEY4LO();
+    init_chunk_DFOXEUFV();
     init_chunk_ZP5VMV5O();
-    init_chunk_4HBGBRU3();
-    init_chunk_WDOPDZAQ();
-    init_chunk_NNFXHHPL();
-    init_chunk_IYM2AYJX();
+    init_chunk_2CP76FVZ();
+    init_chunk_NHV2H6SO();
+    init_chunk_PP3F4TDU();
+    init_chunk_QLAY3AKZ();
     init_chunk_F27XQZ2O();
-    init_chunk_26MLN4YD();
-    init_chunk_AQCZFV3Q();
+    init_chunk_6MEOUVVJ();
+    init_chunk_XLU2TDN5();
     init_chunk_3LG7DRJL();
-    init_chunk_QCRRP2YS();
-    init_chunk_2XWOQ3BY();
-    init_chunk_74TKPNGH();
+    init_chunk_JNSXQHDS();
+    init_chunk_WR2OZUIM();
+    init_chunk_36P24YAQ();
     init_chunk_BZ6HFTHU();
     init_chunk_STPT3SWU();
-    init_chunk_VCM3ZLSO();
-    init_chunk_ORAB6DT4();
-    init_chunk_YI74CMQH();
-    init_chunk_4TUARBXU();
+    init_chunk_DGD2FXDQ();
+    init_chunk_TX76DTZU();
+    init_chunk_KVGKRIX4();
+    init_chunk_IE34EGK6();
     init_chunk_YGAHGTVZ();
     init_chunk_JK5TPJHH();
     init_chunk_NXRJ7Z4G();
@@ -220857,15 +220888,15 @@ var init_handlers3 = __esm({
     init_chunk_SDLNBA53();
     init_chunk_MHQXDTJB();
     init_chunk_2N2KL4KM();
-    init_chunk_QOXHG4Y6();
+    init_chunk_X7NFCRRZ();
     init_chunk_D2XITRN6();
     init_chunk_PWWRWR75();
     init_chunk_QLWA4MJ5();
     init_chunk_W6WKXFHN();
     init_chunk_HVUWXUUI();
-    init_chunk_BEGJBTM2();
+    init_chunk_YGGORPEQ();
     init_chunk_HECQRMDR();
-    init_chunk_TDSJP5AV();
+    init_chunk_XZZ3E7KS();
     init_chunk_PJZ5TQYW();
     init_chunk_AU4NAQGA();
     init_chunk_H6TQGV4L();
@@ -220878,10 +220909,10 @@ var init_handlers3 = __esm({
     init_chunk_ZQGJKPPY();
     init_chunk_ADK2TYO4();
     init_chunk_3MQ2FWXS();
-    init_chunk_MROQIA7C();
-    init_chunk_CQ7SDFTO();
+    init_chunk_XHSOHO7G();
+    init_chunk_WCE2QP2C();
     init_chunk_LAWTTG2E();
-    init_chunk_V2C4E2MN();
+    init_chunk_KMYX7DZG();
     init_chunk_DO4WVWW7();
     init_chunk_RMZRSYIJ();
     init_chunk_5ZFOKZGR();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentstep/gateway",
-  "version": "0.4.20",
+  "version": "0.4.21",
   "description": "Self-hosted, open-source, Anthropic Managed Agents-compatible. CLI + web UI for running AI agents in sandboxed environments.",
   "keywords": [
     "anthropic",