@agentstep/gateway 0.4.27 → 0.4.29

package/dist/gateway.js

@@ -158094,162 +158094,101 @@ var init_chunk_CY6AWCC6 = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-ALVC7G6R.js
+// ../agent-sdk/dist/chunk-4FDEJHH7.js
 function generateBridgeScript() {
-  return `#!/usr/bin/env node
-// Auto-generated MCP stdio server for custom tool bridge.
-// Reads tool definitions from ${TOOL_BRIDGE_TOOLS_PATH}
-import { readFileSync, writeFileSync, unlinkSync, existsSync, watch, watchFile, unwatchFile } from 'node:fs';
-import { createInterface } from 'node:readline';
-
-const TOOLS_PATH = ${JSON.stringify(TOOL_BRIDGE_TOOLS_PATH)};
-const REQUEST_PATH = ${JSON.stringify(TOOL_BRIDGE_REQUEST_PATH)};
-const RESPONSE_PATH = ${JSON.stringify(TOOL_BRIDGE_RESPONSE_PATH)};
-const PENDING_PATH = ${JSON.stringify(TOOL_BRIDGE_PENDING_PATH)};
-
-let tools = [];
-try { tools = JSON.parse(readFileSync(TOOLS_PATH, 'utf8')); } catch {}
+  return `#!/bin/bash
+# Auto-generated MCP stdio server for custom tool bridge.
+# Pure bash \u2014 no Node.js dependency. Instant startup on Firecracker VMs.
 
-function sendResponse(id, result) {
-  const msg = JSON.stringify({ jsonrpc: '2.0', id, result });
-  const buf = Buffer.from(msg, 'utf8');
-  process.stdout.write('Content-Length: ' + buf.length + '\\r\\n\\r\\n');
-  process.stdout.write(buf);
-}
+TOOLS_PATH="${TOOL_BRIDGE_TOOLS_PATH}"
+REQUEST_PATH="${TOOL_BRIDGE_REQUEST_PATH}"
+RESPONSE_PATH="${TOOL_BRIDGE_RESPONSE_PATH}"
+PENDING_PATH="${TOOL_BRIDGE_PENDING_PATH}"
 
-function sendError(id, code, message) {
-  const msg = JSON.stringify({ jsonrpc: '2.0', id, error: { code, message } });
-  const buf = Buffer.from(msg, 'utf8');
-  process.stdout.write('Content-Length: ' + buf.length + '\\r\\n\\r\\n');
-  process.stdout.write(buf);
+send_response() {
+  printf '%s\\n' "$1"
 }
 
-function handleRequest(req) {
-  if (req.method === 'initialize') {
-    sendResponse(req.id, {
-      protocolVersion: '2024-11-05',
-      capabilities: { tools: { listChanged: false } },
-      serverInfo: { name: 'tool-bridge', version: '1.0.0' },
-    });
-    return;
-  }
-  if (req.method === 'notifications/initialized') return;
-  if (req.method === 'tools/list') {
-    sendResponse(req.id, {
-      tools: tools.map(t => ({
-        name: t.name,
-        description: t.description || '',
-        inputSchema: t.input_schema || { type: 'object', properties: {} },
-      })),
-    });
-    return;
-  }
-  if (req.method === 'tools/call') {
-    const toolName = req.params?.name;
-    const toolInput = req.params?.arguments || {};
-
-    // Replay case: if response.json already exists (from a --resume re-entry),
-    // return it immediately without creating a pending sentinel.
-    if (existsSync(RESPONSE_PATH)) {
-      try {
-        const resp = JSON.parse(readFileSync(RESPONSE_PATH, 'utf8'));
-        sendResponse(req.id, {
-          content: [{ type: 'text', text: JSON.stringify(resp.content ?? resp) }],
-          isError: false,
-        });
-        try { unlinkSync(RESPONSE_PATH); } catch {}
-        return;
-      } catch (e) {
-        console.error('[tool-bridge] replay failed:', e);
-        process.exit(1);
-      }
-    }
-
-    // Write the request and create pending sentinel
-    writeFileSync(REQUEST_PATH, JSON.stringify({
-      tool_use_id: req.id,
-      name: toolName,
-      input: toolInput,
-    }));
-    writeFileSync(PENDING_PATH, '');
-
-    // Watch for response.json \u2014 prefer fs.watch (inotify/kqueue) over
-    // fs.watchFile (stat polling). Fall back to watchFile if watch fails.
-    let resolved = false;
-    const onResponse = () => {
-      if (resolved) return;
-      if (!existsSync(RESPONSE_PATH)) return;
-      resolved = true;
-      // Clean up whichever watcher is active
-      if (watcher) { try { watcher.close(); } catch {} }
-      try { unwatchFile(RESPONSE_PATH, pollFallback); } catch {}
-      try {
-        const resp = JSON.parse(readFileSync(RESPONSE_PATH, 'utf8'));
-        try { unlinkSync(RESPONSE_PATH); } catch {}
-        try { unlinkSync(PENDING_PATH); } catch {}
-        sendResponse(req.id, {
-          content: [{ type: 'text', text: JSON.stringify(resp.content ?? resp) }],
-          isError: false,
-        });
-      } catch (e) {
-        sendError(req.id, -32603, 'Failed to read response: ' + e.message);
-      }
-    };
-    const pollFallback = () => onResponse();
-    let watcher = null;
-    // Check immediately in case it was written between our existsSync check
-    onResponse();
-    if (resolved) return;
-    try {
-      watcher = watch(RESPONSE_PATH, () => onResponse());
-      watcher.on('error', () => {
-        // fs.watch failed mid-watch \u2014 fall back to polling
-        try { watcher.close(); } catch {}
-        watcher = null;
-        watchFile(RESPONSE_PATH, { interval: 200 }, pollFallback);
-      });
-    } catch {
-      // fs.watch not available \u2014 fall back to stat polling
-      watchFile(RESPONSE_PATH, { interval: 200 }, pollFallback);
-    }
-    return;
-  }
-  // Unknown method
-  if (req.id != null) {
-    sendError(req.id, -32601, 'Method not found: ' + req.method);
-  }
-}
+TOOLS_LIST_JSON=""
+if [ -f "$TOOLS_PATH" ]; then
+  TOOLS_LIST_JSON=$(sed 's/input_schema/inputSchema/g' "$TOOLS_PATH")
+fi
 
-// Read MCP stdio protocol: Content-Length headers + JSON body
-let buffer = '';
-process.stdin.setEncoding('utf8');
-process.stdin.on('data', (chunk) => {
-  buffer += chunk;
-  while (true) {
-    const headerEnd = buffer.indexOf('\\r\\n\\r\\n');
-    if (headerEnd === -1) break;
-    const header = buffer.slice(0, headerEnd);
-    const match = header.match(/Content-Length:\\s*(\\d+)/i);
-    if (!match) { buffer = buffer.slice(headerEnd + 4); continue; }
-    const len = parseInt(match[1], 10);
-    const bodyStart = headerEnd + 4;
-    if (buffer.length < bodyStart + len) break;
-    const body = buffer.slice(bodyStart, bodyStart + len);
-    buffer = buffer.slice(bodyStart + len);
-    try {
-      handleRequest(JSON.parse(body));
-    } catch {}
-  }
-});
-process.stdin.on('end', () => process.exit(0));
+handle_request() {
+  local body="$1"
+  local method id
+  method=$(echo "$body" | grep -o '"method":"[^"]*"' | head -1 | cut -d'"' -f4)
+  id=$(echo "$body" | grep -o '"id":[0-9]*' | head -1 | cut -d: -f2)
+
+  case "$method" in
+    initialize)
+      send_response '{"jsonrpc":"2.0","id":'"$id"',"result":{"protocolVersion":"2025-11-25","capabilities":{"tools":{"listChanged":false}},"serverInfo":{"name":"tool-bridge","version":"1.0.0"}}}'
+      ;;
+    notifications/initialized) ;;
+    tools/list)
+      send_response '{"jsonrpc":"2.0","id":'"$id"',"result":{"tools":'"$TOOLS_LIST_JSON"'}}'
+      ;;
+    tools/call)
+      local tool_name tool_args
+      tool_name=$(echo "$body" | grep -o '"name":"[^"]*"' | tail -1 | cut -d'"' -f4)
+      tool_args=$(echo "$body" | grep -o '"arguments":{[^}]*}' | head -1 | sed 's/^"arguments"://')
+      [ -z "$tool_args" ] && tool_args="{}"
+
+      # Replay case: response.json already exists (--resume re-entry)
+      if [ -f "$RESPONSE_PATH" ]; then
+        local rdata
+        rdata=$(cat "$RESPONSE_PATH" | tr -d '\\n' | sed 's/\\\\/\\\\\\\\/g; s/"/\\\\"/g')
+        rm -f "$RESPONSE_PATH"
+        send_response '{"jsonrpc":"2.0","id":'"$id"',"result":{"content":[{"type":"text","text":"'"$rdata"'"}],"isError":false}}'
+        return
+      fi
+
+      # Write request and create pending sentinel
+      printf '{"tool_use_id":%s,"name":"%s","input":%s}' "$id" "$tool_name" "$tool_args" > "$REQUEST_PATH"
+      touch "$PENDING_PATH"
+
+      # Poll for response.json (200ms interval, 5min timeout)
+      local elapsed=0
+      while [ $elapsed -lt 1500 ]; do
+        if [ -f "$RESPONSE_PATH" ]; then
+          local rdata
+          rdata=$(cat "$RESPONSE_PATH" | tr -d '\\n' | sed 's/\\\\/\\\\\\\\/g; s/"/\\\\"/g')
+          rm -f "$RESPONSE_PATH" "$PENDING_PATH"
+          send_response '{"jsonrpc":"2.0","id":'"$id"',"result":{"content":[{"type":"text","text":"'"$rdata"'"}],"isError":false}}'
+          return
+        fi
+        sleep 0.2
+        elapsed=$((elapsed + 1))
+      done
+      # Timeout
+      rm -f "$PENDING_PATH"
+      send_response '{"jsonrpc":"2.0","id":'"$id"',"error":{"code":-32603,"message":"Timeout waiting for tool response"}}'
+      ;;
+    *)
+      [ -n "$id" ] && send_response '{"jsonrpc":"2.0","id":'"$id"',"error":{"code":-32601,"message":"Method not found"}}'
+      ;;
+  esac
+}
+
+# Main loop: handle both raw JSON lines and Content-Length framed messages
+while IFS= read -r line; do
+  line=\${line%$'\\r'}
+  [ -z "$line" ] && continue
+  case "$line" in
+    Content-Length:*)
+      while IFS= read -r hdr; do hdr=\${hdr%$'\\r'}; [ -z "$hdr" ] && break; done
+      body=$(head -c "\${line#Content-Length: }")
+      handle_request "$body" ;;
+    "{"*) handle_request "$line" ;;
+  esac
+done
 `;
 }
 function buildBridgeMcpConfig(existingServers) {
   return {
     ...existingServers,
     "tool-bridge": {
-      type: "stdio",
-      command: "node",
+      command: "bash",
       args: [TOOL_BRIDGE_SCRIPT_PATH]
     }
   };
@@ -158263,15 +158202,16 @@ function toolsToJson(tools) {
     }))
   );
 }
-var TOOL_BRIDGE_DIR, TOOL_BRIDGE_SCRIPT_PATH, TOOL_BRIDGE_TOOLS_PATH, TOOL_BRIDGE_REQUEST_PATH, TOOL_BRIDGE_RESPONSE_PATH, TOOL_BRIDGE_PENDING_PATH;
-var init_chunk_ALVC7G6R = __esm({
-  "../agent-sdk/dist/chunk-ALVC7G6R.js"() {
+var TOOL_BRIDGE_DIR, TOOL_BRIDGE_SCRIPT_PATH, TOOL_BRIDGE_TOOLS_PATH, TOOL_BRIDGE_REQUEST_PATH, TOOL_BRIDGE_RESPONSE_PATH, TOOL_BRIDGE_MCP_CONFIG_PATH, TOOL_BRIDGE_PENDING_PATH;
+var init_chunk_4FDEJHH7 = __esm({
+  "../agent-sdk/dist/chunk-4FDEJHH7.js"() {
     "use strict";
     TOOL_BRIDGE_DIR = "/tmp/tool-bridge";
-    TOOL_BRIDGE_SCRIPT_PATH = `${TOOL_BRIDGE_DIR}/bridge.mjs`;
+    TOOL_BRIDGE_SCRIPT_PATH = `${TOOL_BRIDGE_DIR}/bridge.sh`;
     TOOL_BRIDGE_TOOLS_PATH = `${TOOL_BRIDGE_DIR}/tools.json`;
     TOOL_BRIDGE_REQUEST_PATH = `${TOOL_BRIDGE_DIR}/request.json`;
     TOOL_BRIDGE_RESPONSE_PATH = `${TOOL_BRIDGE_DIR}/response.json`;
+    TOOL_BRIDGE_MCP_CONFIG_PATH = `${TOOL_BRIDGE_DIR}/mcp.json`;
     TOOL_BRIDGE_PENDING_PATH = `${TOOL_BRIDGE_DIR}/pending`;
   }
 });
@@ -158466,7 +158406,7 @@ var init_chunk_JFYE5BFI = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-6VQXN6L3.js
+// ../agent-sdk/dist/chunk-RZKUB4JQ.js
 function buildTurn6(input) {
   const { agent, backendSessionId, promptText, toolResults } = input;
   const argsBase = buildClaudeArgs({
@@ -158477,7 +158417,7 @@ function buildTurn6(input) {
   const env3 = buildClaudeAuthEnv();
   const customTools = agent.tools.filter((t2) => t2.type === "custom");
   const hasBridgeTools = customTools.length > 0 || agent.threads_enabled;
-  if (hasBridgeTools) {
+  if (hasBridgeTools || agent.mcp_servers && Object.keys(agent.mcp_servers).length > 0) {
     const mcpIdx = argsBase.indexOf("--mcp-config");
     let existingServers = {};
     if (mcpIdx >= 0 && mcpIdx + 1 < argsBase.length) {
@@ -158488,7 +158428,7 @@ function buildTurn6(input) {
       }
       argsBase.splice(mcpIdx, 2);
     }
-    const merged = buildBridgeMcpConfig(existingServers);
+    const merged = hasBridgeTools ? buildBridgeMcpConfig(existingServers) : existingServers;
     argsBase.push("--mcp-config", JSON.stringify({ mcpServers: merged }));
   }
   if (toolResults.length > 0) {
@@ -158524,12 +158464,12 @@ async function installToolBridge(sandboxName, customTools, provider) {
   await provider.exec(sandboxName, ["mkdir", "-p", TOOL_BRIDGE_DIR]);
   await provider.exec(
     sandboxName,
-    ["bash", "-c", `cat > ${TOOL_BRIDGE_SCRIPT_PATH}`],
+    ["sh", "-c", `cat > "${TOOL_BRIDGE_SCRIPT_PATH}"`],
     { stdin: generateBridgeScript() }
   );
   await provider.exec(
     sandboxName,
-    ["bash", "-c", `cat > ${TOOL_BRIDGE_TOOLS_PATH}`],
+    ["sh", "-c", `cat > "${TOOL_BRIDGE_TOOLS_PATH}"`],
     { stdin: toolsToJson(customTools) }
   );
   await provider.exec(sandboxName, ["chmod", "+x", TOOL_BRIDGE_SCRIPT_PATH]);
@@ -158563,12 +158503,12 @@ async function installPermissionHook(sandboxName, provider) {
   );
 }
 var claudeBackend;
-var init_chunk_6VQXN6L3 = __esm({
-  "../agent-sdk/dist/chunk-6VQXN6L3.js"() {
+var init_chunk_RZKUB4JQ = __esm({
+  "../agent-sdk/dist/chunk-RZKUB4JQ.js"() {
     "use strict";
     init_chunk_WFIMX3HG();
     init_chunk_CY6AWCC6();
-    init_chunk_ALVC7G6R();
+    init_chunk_4FDEJHH7();
     init_chunk_JFYE5BFI();
     init_chunk_IU457W7Q();
     init_chunk_EF5QCTEQ();
@@ -158583,7 +158523,7 @@ var init_chunk_6VQXN6L3 = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-QAGHVCOK.js
+// ../agent-sdk/dist/chunk-KOGG7CSN.js
 function resolveBackend(name) {
   const key = name ?? "claude";
   const b2 = BACKENDS[key];
@@ -158591,15 +158531,15 @@ function resolveBackend(name) {
   return b2;
 }
 var BACKENDS;
-var init_chunk_QAGHVCOK = __esm({
-  "../agent-sdk/dist/chunk-QAGHVCOK.js"() {
+var init_chunk_KOGG7CSN = __esm({
+  "../agent-sdk/dist/chunk-KOGG7CSN.js"() {
     "use strict";
     init_chunk_I44FSUBC();
     init_chunk_DNGLD7VN();
     init_chunk_EHCGLMPC();
     init_chunk_X2CAT5MN();
     init_chunk_5D5P37FY();
-    init_chunk_6VQXN6L3();
+    init_chunk_RZKUB4JQ();
     BACKENDS = {
       claude: claudeBackend,
       opencode: opencodeBackend,
@@ -158627,11 +158567,11 @@ __export(claude_exports, {
 var init_claude = __esm({
   "../agent-sdk/dist/backends/claude/index.js"() {
     "use strict";
-    init_chunk_6VQXN6L3();
+    init_chunk_RZKUB4JQ();
     init_chunk_WFIMX3HG();
     init_chunk_FVBDEOTZ();
     init_chunk_CY6AWCC6();
-    init_chunk_ALVC7G6R();
+    init_chunk_4FDEJHH7();
     init_chunk_JFYE5BFI();
     init_chunk_XBHDQK4Z();
     init_chunk_IU457W7Q();
@@ -158897,7 +158837,7 @@ var init_storage = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-U7XXWFTQ.js
+// ../agent-sdk/dist/chunk-XGUSWFDD.js
 function wrapProviderWithSecrets(provider, secrets) {
   if (!secrets || Object.keys(secrets).length === 0) return provider;
   return {
@@ -159247,8 +159187,8 @@ async function reconcileDockerOrphanSandboxes() {
   return { deleted, kept };
 }
 var lcLog, SANDBOX_NAME_PREFIX;
-var init_chunk_U7XXWFTQ = __esm({
-  "../agent-sdk/dist/chunk-U7XXWFTQ.js"() {
+var init_chunk_XGUSWFDD = __esm({
+  "../agent-sdk/dist/chunk-XGUSWFDD.js"() {
     "use strict";
     init_chunk_DO4WVWW7();
     init_chunk_RMZRSYIJ();
@@ -159259,7 +159199,7 @@ var init_chunk_U7XXWFTQ = __esm({
     init_chunk_QUJNG4RA();
     init_chunk_NUO56TF7();
     init_chunk_JEI7I3EH();
-    init_chunk_QAGHVCOK();
+    init_chunk_KOGG7CSN();
     init_chunk_EF5QCTEQ();
     init_chunk_HFDLUBWN();
     init_chunk_EZYKRG4W();
@@ -159304,6 +159244,7 @@ var init_api_keys = __esm({
 var tool_bridge_exports = {};
 __export(tool_bridge_exports, {
   TOOL_BRIDGE_DIR: () => TOOL_BRIDGE_DIR,
+  TOOL_BRIDGE_MCP_CONFIG_PATH: () => TOOL_BRIDGE_MCP_CONFIG_PATH,
   TOOL_BRIDGE_PENDING_PATH: () => TOOL_BRIDGE_PENDING_PATH,
   TOOL_BRIDGE_REQUEST_PATH: () => TOOL_BRIDGE_REQUEST_PATH,
   TOOL_BRIDGE_RESPONSE_PATH: () => TOOL_BRIDGE_RESPONSE_PATH,
@@ -159316,7 +159257,7 @@ __export(tool_bridge_exports, {
 var init_tool_bridge = __esm({
   "../agent-sdk/dist/backends/claude/tool-bridge.js"() {
     "use strict";
-    init_chunk_ALVC7G6R();
+    init_chunk_4FDEJHH7();
     init_chunk_2ESYSVXG();
   }
 });
@@ -159808,7 +159749,7 @@ var MAX_THREAD_DEPTH;
 var init_threads = __esm({
   "../agent-sdk/dist/sessions/threads.js"() {
     "use strict";
-    init_chunk_BEXPMKTK();
+    init_chunk_KZ4AECAK();
     init_chunk_PJZ5TQYW();
     init_chunk_AU4NAQGA();
     init_chunk_H6TQGV4L();
@@ -159818,7 +159759,7 @@ var init_threads = __esm({
     init_chunk_NIOWKTIF();
     init_chunk_ZQGJKPPY();
     init_chunk_LAWTTG2E();
-    init_chunk_U7XXWFTQ();
+    init_chunk_XGUSWFDD();
     init_chunk_DO4WVWW7();
     init_chunk_RMZRSYIJ();
     init_chunk_5ZFOKZGR();
@@ -159835,7 +159776,7 @@ var init_threads = __esm({
     init_chunk_NUO56TF7();
     init_chunk_JEI7I3EH();
     init_chunk_JDELTTHV();
-    init_chunk_QAGHVCOK();
+    init_chunk_KOGG7CSN();
     init_chunk_I44FSUBC();
     init_chunk_T5VRE77P();
     init_chunk_TY3HD5I5();
@@ -159866,11 +159807,11 @@ var init_threads = __esm({
     init_chunk_QQDSHL27();
     init_chunk_IAF6VMPO();
     init_chunk_OWP537VU();
-    init_chunk_6VQXN6L3();
+    init_chunk_RZKUB4JQ();
     init_chunk_WFIMX3HG();
     init_chunk_FVBDEOTZ();
     init_chunk_CY6AWCC6();
-    init_chunk_ALVC7G6R();
+    init_chunk_4FDEJHH7();
     init_chunk_JFYE5BFI();
     init_chunk_NQX7WBA4();
     init_chunk_XBHDQK4Z();
@@ -159891,7 +159832,7 @@ var init_threads = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-BEXPMKTK.js
+// ../agent-sdk/dist/chunk-KZ4AECAK.js
 function formatStopReason(reason, eventIds) {
   if (reason === "custom_tool_call" && eventIds?.length) {
     return { type: "requires_action", event_ids: eventIds };
@@ -160069,6 +160010,9 @@ async function runTurn(sessionId, inputs, _depth = 0, parentTrace) {
   if (freshSession?.resources && freshSession.resources.length > 0) {
     turnBuild.env.RESOURCES_DIR = "/tmp/resources";
   }
+  if (agent.engine === "claude" && !turnBuild.env.MCP_TIMEOUT) {
+    turnBuild.env.MCP_TIMEOUT = "30000";
+  }
   const MCP_KEY_RE = /^MCP_(AUTH|HEADER)_/i;
   for (const entry of vaultEntries2) {
     if (!BLOCKED_ENV_KEYS.has(entry.key) && !MCP_KEY_RE.test(entry.key)) {
@@ -160206,6 +160150,17 @@ ${turnBuild.stdin}`;
       );
     }, 2e3);
   }
+  const customToolNames = resolveToolset(agent.tools).customToolNames;
+  let toolBridgePollTimer = null;
+  if (agent.engine === "claude" && customToolNames.size > 0) {
+    toolBridgePollTimer = setInterval(() => {
+      void checkToolBridgeSentinel(sessionId, sandboxName, provider, secrets, trace3).catch(
+        (err) => {
+          console.warn(`[driver] tool bridge sentinel check failed:`, err);
+        }
+      );
+    }, 1e3);
+  }
   try {
     const reader = exec2.stdout.getReader();
     const decoder3 = new TextDecoder();
@@ -160301,6 +160256,8 @@ ${turnBuild.stdin}`;
     }
   } finally {
     if (permissionPollTimer) clearInterval(permissionPollTimer);
+    if (toolBridgePollTimer) clearInterval(toolBridgePollTimer);
+    getPendingToolBridgeCalls().delete(sessionId);
     runtime2.inFlightRuns.delete(sessionId);
   }
   if (aborted) {
@@ -160568,9 +160525,80 @@ async function writePermissionResponse(sessionId, result, denyMessage) {
   }
   getPendingConfirmations().delete(sessionId);
 }
-var gd;
-var init_chunk_BEXPMKTK = __esm({
-  "../agent-sdk/dist/chunk-BEXPMKTK.js"() {
+function getPendingToolBridgeCalls() {
+  return pendingToolBridgeCalls;
+}
+async function checkToolBridgeSentinel(sessionId, sandboxName, provider, secrets, trace3) {
+  if (pendingToolBridgeCalls.has(sessionId)) return;
+  try {
+    const result = await provider.exec(
+      sandboxName,
+      ["test", "-f", TOOL_BRIDGE_PENDING_PATH],
+      { secrets }
+    );
+    if (result.exit_code !== 0) return;
+  } catch {
+    return;
+  }
+  let request2;
+  try {
+    const result = await provider.exec(
+      sandboxName,
+      ["cat", TOOL_BRIDGE_REQUEST_PATH],
+      { secrets }
+    );
+    const clean = result.stdout.replace(/[\x00-\x08\x0B\x0C\x0E-\x1F]/g, "");
+    request2 = JSON.parse(clean);
+  } catch (err) {
+    console.warn(`[driver] failed to read tool bridge request for ${sessionId}:`, err);
+    return;
+  }
+  pendingToolBridgeCalls.add(sessionId);
+  console.log(`[driver] ${sessionId} custom tool call: ${request2.name} (${request2.tool_use_id})`);
+  appendEvent2(sessionId, {
+    type: "agent.custom_tool_use",
+    payload: {
+      tool_use_id: request2.tool_use_id ?? "",
+      name: request2.name ?? "unknown",
+      input: request2.input ?? {}
+    },
+    origin: "server",
+    processedAt: nowMs(),
+    traceId: trace3.trace_id,
+    spanId: trace3.span_id,
+    parentSpanId: trace3.parent_span_id
+  });
+}
+async function writeToolBridgeResponse(sessionId, content) {
+  const row = getSessionRow(sessionId);
+  if (!row?.sandbox_name) {
+    console.warn(`[driver] no sandbox for session ${sessionId}, cannot write tool bridge response`);
+    return;
+  }
+  const env3 = getEnvironment(row.environment_id);
+  const provider = await resolveContainerProvider(env3?.config?.provider);
+  const bridgeSecrets = getBySession(sessionId)?.vaultSecrets;
+  const response = JSON.stringify({ content });
+  try {
+    await provider.exec(
+      row.sandbox_name,
+      ["sh", "-c", `cat > ${TOOL_BRIDGE_RESPONSE_PATH}`],
+      { stdin: response, secrets: bridgeSecrets }
+    );
+    await provider.exec(
+      row.sandbox_name,
+      ["rm", "-f", TOOL_BRIDGE_PENDING_PATH],
+      { secrets: bridgeSecrets }
+    );
+    console.log(`[driver] ${sessionId} tool bridge response written`);
+  } catch (err) {
+    console.warn(`[driver] failed to write tool bridge response for ${sessionId}:`, err);
+  }
+  pendingToolBridgeCalls.delete(sessionId);
+}
+var gd, pendingToolBridgeCalls;
+var init_chunk_KZ4AECAK = __esm({
+  "../agent-sdk/dist/chunk-KZ4AECAK.js"() {
     "use strict";
     init_chunk_PJZ5TQYW();
     init_chunk_AU4NAQGA();
@@ -160579,7 +160607,7 @@ var init_chunk_BEXPMKTK = __esm({
     init_chunk_72BKGVBE();
     init_chunk_M4CTE7EH();
     init_chunk_NIOWKTIF();
-    init_chunk_U7XXWFTQ();
+    init_chunk_XGUSWFDD();
     init_chunk_DO4WVWW7();
     init_chunk_BMPB7XJH();
     init_chunk_I5ZA45YL();
@@ -160588,8 +160616,9 @@ var init_chunk_BEXPMKTK = __esm({
     init_chunk_QUJNG4RA();
     init_chunk_NUO56TF7();
     init_chunk_JEI7I3EH();
-    init_chunk_QAGHVCOK();
+    init_chunk_KOGG7CSN();
     init_chunk_CY6AWCC6();
+    init_chunk_4FDEJHH7();
     init_chunk_XBHDQK4Z();
     init_chunk_EF5QCTEQ();
     init_chunk_HFDLUBWN();
@@ -160598,6 +160627,7 @@ var init_chunk_BEXPMKTK = __esm({
     init_errors3();
     init_clock();
     gd = globalThis;
+    pendingToolBridgeCalls = /* @__PURE__ */ new Set();
   }
 });
 
@@ -212949,7 +212979,7 @@ var init_chunk_3MQ2FWXS = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-KMBQ5U5W.js
+// ../agent-sdk/dist/chunk-FJAWIVSD.js
 function markStopping() {
   stopping = true;
 }
@@ -213015,11 +213045,11 @@ async function evictIdleSessions() {
   }
 }
 var sweeping, stopping;
-var init_chunk_KMBQ5U5W = __esm({
-  "../agent-sdk/dist/chunk-KMBQ5U5W.js"() {
+var init_chunk_FJAWIVSD = __esm({
+  "../agent-sdk/dist/chunk-FJAWIVSD.js"() {
     "use strict";
     init_chunk_LAWTTG2E();
-    init_chunk_U7XXWFTQ();
+    init_chunk_XGUSWFDD();
     init_chunk_BMPB7XJH();
     init_chunk_I5ZA45YL();
     init_chunk_EF5QCTEQ();
@@ -213031,7 +213061,7 @@ var init_chunk_KMBQ5U5W = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-OLZ2KIXD.js
+// ../agent-sdk/dist/chunk-NX6SIEN6.js
 function installShutdownHandlers() {
   if (g12.__caShutdownInstalled) return;
   g12.__caShutdownInstalled = true;
@@ -213074,10 +213104,10 @@ async function shutdown(signal) {
   process.exit(0);
 }
 var g12, shuttingDown;
-var init_chunk_OLZ2KIXD = __esm({
-  "../agent-sdk/dist/chunk-OLZ2KIXD.js"() {
+var init_chunk_NX6SIEN6 = __esm({
+  "../agent-sdk/dist/chunk-NX6SIEN6.js"() {
     "use strict";
-    init_chunk_KMBQ5U5W();
+    init_chunk_FJAWIVSD();
     init_chunk_5GZEX4HV();
     init_chunk_UYTSKFGK();
     init_client();
@@ -215178,7 +215208,7 @@ var init_rate_limit = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-VZQP2TG2.js
+// ../agent-sdk/dist/chunk-DT57EZQB.js
 import path10 from "path";
 async function ensureInitialized() {
   if (g14.__caInitPromise) return g14.__caInitPromise;
@@ -215397,18 +215427,18 @@ async function rebuildContainerPool() {
   }
 }
 var g14;
-var init_chunk_VZQP2TG2 = __esm({
-  "../agent-sdk/dist/chunk-VZQP2TG2.js"() {
+var init_chunk_DT57EZQB = __esm({
+  "../agent-sdk/dist/chunk-DT57EZQB.js"() {
     "use strict";
     init_chunk_AQXCXWAZ();
-    init_chunk_BEXPMKTK();
+    init_chunk_KZ4AECAK();
     init_chunk_Y2KDIPCT();
     init_chunk_UXMCHRGA();
     init_chunk_ADK2TYO4();
     init_chunk_3MQ2FWXS();
-    init_chunk_OLZ2KIXD();
-    init_chunk_KMBQ5U5W();
-    init_chunk_U7XXWFTQ();
+    init_chunk_NX6SIEN6();
+    init_chunk_FJAWIVSD();
+    init_chunk_XGUSWFDD();
     init_chunk_BMPB7XJH();
     init_chunk_I5ZA45YL();
     init_chunk_YPXI7Q2M();
@@ -215426,7 +215456,7 @@ var init_chunk_VZQP2TG2 = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-R3NRSPRU.js
+// ../agent-sdk/dist/chunk-ESXH27JB.js
 async function routeWrap(request2, handler) {
   const startedAt = Date.now();
   let status = 500;
@@ -215470,13 +215500,13 @@ async function routeWrap(request2, handler) {
 function jsonOk(body, status = 200) {
   return Response.json(body, { status });
 }
-var init_chunk_R3NRSPRU = __esm({
-  "../agent-sdk/dist/chunk-R3NRSPRU.js"() {
+var init_chunk_ESXH27JB = __esm({
+  "../agent-sdk/dist/chunk-ESXH27JB.js"() {
     "use strict";
     init_chunk_D2XITRN6();
     init_chunk_ZMMDLKR3();
     init_chunk_HVUWXUUI();
-    init_chunk_VZQP2TG2();
+    init_chunk_DT57EZQB();
     init_chunk_3MQ2FWXS();
     init_chunk_EZYKRG4W();
   }
@@ -215606,15 +215636,15 @@ var init_dist2 = __esm({
     init_chunk_HLNTWWAZ();
     init_chunk_MHQXDTJB();
     init_chunk_2N2KL4KM();
-    init_chunk_R3NRSPRU();
+    init_chunk_ESXH27JB();
     init_chunk_D2XITRN6();
     init_chunk_ZMMDLKR3();
     init_chunk_T45NOW43();
     init_chunk_W6WKXFHN();
     init_chunk_HVUWXUUI();
-    init_chunk_VZQP2TG2();
+    init_chunk_DT57EZQB();
     init_chunk_AQXCXWAZ();
-    init_chunk_BEXPMKTK();
+    init_chunk_KZ4AECAK();
     init_chunk_PJZ5TQYW();
     init_chunk_AU4NAQGA();
     init_chunk_H6TQGV4L();
@@ -215627,10 +215657,10 @@ var init_dist2 = __esm({
     init_chunk_ZQGJKPPY();
     init_chunk_ADK2TYO4();
     init_chunk_3MQ2FWXS();
-    init_chunk_OLZ2KIXD();
-    init_chunk_KMBQ5U5W();
+    init_chunk_NX6SIEN6();
+    init_chunk_FJAWIVSD();
     init_chunk_LAWTTG2E();
-    init_chunk_U7XXWFTQ();
+    init_chunk_XGUSWFDD();
     init_chunk_DO4WVWW7();
     init_chunk_RMZRSYIJ();
     init_chunk_5ZFOKZGR();
@@ -215647,7 +215677,7 @@ var init_dist2 = __esm({
     init_chunk_NUO56TF7();
     init_chunk_JEI7I3EH();
     init_chunk_JDELTTHV();
-    init_chunk_QAGHVCOK();
+    init_chunk_KOGG7CSN();
     init_chunk_I44FSUBC();
     init_chunk_T5VRE77P();
     init_chunk_TY3HD5I5();
@@ -215678,11 +215708,11 @@ var init_dist2 = __esm({
     init_chunk_QQDSHL27();
     init_chunk_IAF6VMPO();
     init_chunk_OWP537VU();
-    init_chunk_6VQXN6L3();
+    init_chunk_RZKUB4JQ();
     init_chunk_WFIMX3HG();
     init_chunk_FVBDEOTZ();
     init_chunk_CY6AWCC6();
-    init_chunk_ALVC7G6R();
+    init_chunk_4FDEJHH7();
     init_chunk_JFYE5BFI();
     init_chunk_NQX7WBA4();
     init_chunk_XBHDQK4Z();
@@ -215704,7 +215734,7 @@ var init_dist2 = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-HBERAFEH.js
+// ../agent-sdk/dist/chunk-2NAUMCWE.js
 function handleWhoami(request2) {
   return routeWrap(request2, async ({ auth }) => {
     return jsonOk({
@@ -215715,10 +215745,10 @@ function handleWhoami(request2) {
     });
   });
 }
-var init_chunk_HBERAFEH = __esm({
-  "../agent-sdk/dist/chunk-HBERAFEH.js"() {
+var init_chunk_2NAUMCWE = __esm({
+  "../agent-sdk/dist/chunk-2NAUMCWE.js"() {
     "use strict";
-    init_chunk_R3NRSPRU();
+    init_chunk_ESXH27JB();
   }
 });
 
@@ -215932,7 +215962,7 @@ var init_chunk_AMWWPUSK = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-RKXJLXPN.js
+// ../agent-sdk/dist/chunk-YIVJ3JTW.js
 async function handleGetSkillsCatalog(request2) {
   return routeWrap(request2, async ({ request: req }) => {
     const url2 = new URL(req.url);
@@ -215988,11 +216018,11 @@ async function handleGetSkillsFeed(request2) {
     return jsonOk(feed);
   });
 }
-var init_chunk_RKXJLXPN = __esm({
-  "../agent-sdk/dist/chunk-RKXJLXPN.js"() {
+var init_chunk_YIVJ3JTW = __esm({
+  "../agent-sdk/dist/chunk-YIVJ3JTW.js"() {
     "use strict";
     init_chunk_AMWWPUSK();
-    init_chunk_R3NRSPRU();
+    init_chunk_ESXH27JB();
   }
 });
 
@@ -216052,7 +216082,7 @@ var init_chunk_23UKWXJH = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-QI2UYVUF.js
+// ../agent-sdk/dist/chunk-JURAGCGR.js
 async function prepareSessionStream(request2, sessionId) {
   try {
     await ensureInitialized();
@@ -216145,14 +216175,14 @@ data: ${JSON.stringify(evt)}
     }
   });
 }
-var init_chunk_QI2UYVUF = __esm({
-  "../agent-sdk/dist/chunk-QI2UYVUF.js"() {
+var init_chunk_JURAGCGR = __esm({
+  "../agent-sdk/dist/chunk-JURAGCGR.js"() {
     "use strict";
     init_chunk_YGAHGTVZ();
     init_chunk_23UKWXJH();
     init_chunk_ZMMDLKR3();
     init_chunk_T45NOW43();
-    init_chunk_VZQP2TG2();
+    init_chunk_DT57EZQB();
     init_chunk_NIOWKTIF();
     init_chunk_BMPB7XJH();
     init_chunk_I5ZA45YL();
@@ -216162,7 +216192,7 @@ var init_chunk_QI2UYVUF = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-T2IKN6LM.js
+// ../agent-sdk/dist/chunk-XZOBOKL6.js
 function handleCreateTenant(request2) {
   return routeWrap(request2, async ({ auth, request: req }) => {
     requireFeature("tenancy", "multi-tenancy");
@@ -216261,13 +216291,13 @@ function handleArchiveTenant(request2, id) {
   });
 }
 var CreateBody, PatchBody;
-var init_chunk_T2IKN6LM = __esm({
-  "../agent-sdk/dist/chunk-T2IKN6LM.js"() {
+var init_chunk_XZOBOKL6 = __esm({
+  "../agent-sdk/dist/chunk-XZOBOKL6.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_MHQXDTJB();
     init_chunk_2N2KL4KM();
-    init_chunk_R3NRSPRU();
+    init_chunk_ESXH27JB();
     init_chunk_JDELTTHV();
     init_chunk_EZYKRG4W();
     init_zod();
@@ -216281,7 +216311,7 @@ var init_chunk_T2IKN6LM = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-EZCC3VWX.js
+// ../agent-sdk/dist/chunk-GQFC44YI.js
 function handleListThreads(request2, sessionId) {
   return routeWrap(request2, async ({ auth }) => {
     const row = getDb().prepare(`SELECT tenant_id FROM sessions WHERE id = ?`).get(sessionId);
@@ -216306,11 +216336,11 @@ function handleListThreads(request2, sessionId) {
     });
   });
 }
-var init_chunk_EZCC3VWX = __esm({
-  "../agent-sdk/dist/chunk-EZCC3VWX.js"() {
+var init_chunk_GQFC44YI = __esm({
+  "../agent-sdk/dist/chunk-GQFC44YI.js"() {
     "use strict";
     init_chunk_23UKWXJH();
-    init_chunk_R3NRSPRU();
+    init_chunk_ESXH27JB();
     init_chunk_I5ZA45YL();
     init_chunk_5GZEX4HV();
     init_chunk_EZYKRG4W();
@@ -216360,7 +216390,7 @@ var init_chunk_JK5TPJHH = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-TTICVJTT.js
+// ../agent-sdk/dist/chunk-OTLXV4RO.js
 function buildSpanTree(events2) {
   const nodes = /* @__PURE__ */ new Map();
   const openStarts = /* @__PURE__ */ new Map();
@@ -216544,11 +216574,11 @@ function handleExportTrace(request2, traceId) {
     return jsonOk(result, result.ok ? 200 : 502);
   });
 }
-var init_chunk_TTICVJTT = __esm({
-  "../agent-sdk/dist/chunk-TTICVJTT.js"() {
+var init_chunk_OTLXV4RO = __esm({
+  "../agent-sdk/dist/chunk-OTLXV4RO.js"() {
     "use strict";
     init_chunk_JK5TPJHH();
-    init_chunk_R3NRSPRU();
+    init_chunk_ESXH27JB();
     init_chunk_Y2KDIPCT();
     init_chunk_O45IQUWS();
     init_chunk_EZYKRG4W();
@@ -217135,7 +217165,7 @@ agentstep skills install \${n}
   }
 });
 
-// ../agent-sdk/dist/chunk-EVZABUMI.js
+// ../agent-sdk/dist/chunk-ZNQD65DN.js
 function handleAddUpstreamKey(request2) {
   return routeWrap(request2, async ({ auth, request: req }) => {
     requireFeature("upstream_pool", "upstream key pool");
@@ -217227,15 +217257,15 @@ function handleDeleteUpstreamKey(request2, id) {
   });
 }
 var AddBody, PatchBody2;
-var init_chunk_EVZABUMI = __esm({
-  "../agent-sdk/dist/chunk-EVZABUMI.js"() {
+var init_chunk_ZNQD65DN = __esm({
+  "../agent-sdk/dist/chunk-ZNQD65DN.js"() {
     "use strict";
     init_chunk_ATTHVKNE();
     init_chunk_BZ6HFTHU();
     init_chunk_23UKWXJH();
     init_chunk_MHQXDTJB();
     init_chunk_2N2KL4KM();
-    init_chunk_R3NRSPRU();
+    init_chunk_ESXH27JB();
     init_chunk_EZYKRG4W();
     init_zod();
     AddBody = external_exports.object({
@@ -217249,7 +217279,7 @@ var init_chunk_EVZABUMI = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-XLAHZKY6.js
+// ../agent-sdk/dist/chunk-EGCAA6KI.js
 function zeroTotals() {
   return {
     session_count: 0,
@@ -217609,12 +217639,12 @@ function handleGetApiMetrics(request2) {
   });
 }
 var BUCKET_MS, TOP_N, MAX_POINTS_PER_SERIES, MAX_TOTAL_CELLS;
-var init_chunk_XLAHZKY6 = __esm({
-  "../agent-sdk/dist/chunk-XLAHZKY6.js"() {
+var init_chunk_EGCAA6KI = __esm({
+  "../agent-sdk/dist/chunk-EGCAA6KI.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_2N2KL4KM();
-    init_chunk_R3NRSPRU();
+    init_chunk_ESXH27JB();
     init_chunk_D2XITRN6();
     init_chunk_5GZEX4HV();
     init_chunk_EZYKRG4W();
@@ -217630,7 +217660,7 @@ var init_chunk_XLAHZKY6 = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-DHROKUFE.js
+// ../agent-sdk/dist/chunk-OONL25NZ.js
 function handleListModels(request2) {
   return routeWrap(request2, async ({ request: req }) => {
     const url2 = new URL(req.url);
@@ -217641,11 +217671,11 @@ function handleListModels(request2) {
     return jsonOk({ data: models });
   });
 }
-var init_chunk_DHROKUFE = __esm({
-  "../agent-sdk/dist/chunk-DHROKUFE.js"() {
+var init_chunk_OONL25NZ = __esm({
+  "../agent-sdk/dist/chunk-OONL25NZ.js"() {
     "use strict";
     init_chunk_4WMYJM36();
-    init_chunk_R3NRSPRU();
+    init_chunk_ESXH27JB();
   }
 });
 
@@ -217668,7 +217698,7 @@ var init_chunk_RDGOGAQ5 = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-4ZL36MCY.js
+// ../agent-sdk/dist/chunk-W26HCKWX.js
 async function checkLocalProvider(name) {
   try {
     const provider = await resolveContainerProvider(name);
@@ -217707,10 +217737,10 @@ async function handleGetProviderStatus(request2) {
   });
 }
 var LOCAL_PROVIDERS, CLOUD_PROVIDERS, CLOUD_KEY_MAP;
-var init_chunk_4ZL36MCY = __esm({
-  "../agent-sdk/dist/chunk-4ZL36MCY.js"() {
+var init_chunk_W26HCKWX = __esm({
+  "../agent-sdk/dist/chunk-W26HCKWX.js"() {
     "use strict";
-    init_chunk_R3NRSPRU();
+    init_chunk_ESXH27JB();
     init_chunk_QUJNG4RA();
     init_chunk_EF5QCTEQ();
     LOCAL_PROVIDERS = ["docker", "apple-container", "podman"];
@@ -217726,7 +217756,7 @@ var init_chunk_4ZL36MCY = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-Q2GMMMR3.js
+// ../agent-sdk/dist/chunk-RK3QBYXO.js
 function assertSessionTenant(auth, sessionId) {
   const row = getDb().prepare(`SELECT tenant_id FROM sessions WHERE id = ?`).get(sessionId);
   if (row) {
@@ -217801,11 +217831,11 @@ function handleDeleteResource(request2, sessionId, resourceId) {
   });
 }
 var MAX_RESOURCES_PER_SESSION, AddResourceSchema;
-var init_chunk_Q2GMMMR3 = __esm({
-  "../agent-sdk/dist/chunk-Q2GMMMR3.js"() {
+var init_chunk_RK3QBYXO = __esm({
+  "../agent-sdk/dist/chunk-RK3QBYXO.js"() {
     "use strict";
     init_chunk_23UKWXJH();
-    init_chunk_R3NRSPRU();
+    init_chunk_ESXH27JB();
     init_chunk_NIOWKTIF();
     init_chunk_I5ZA45YL();
     init_chunk_R5OZHLAD();
@@ -218126,7 +218156,7 @@ var init_vaults = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-QPI6MKAU.js
+// ../agent-sdk/dist/chunk-HMBJOI5F.js
 function getAgentTenantId(id) {
   const row = getDb().prepare(`SELECT tenant_id FROM agents WHERE id = ?`).get(id);
   return row?.tenant_id;
@@ -218566,20 +218596,20 @@ function parseMs(v2) {
   return Number.isFinite(t2) ? t2 : void 0;
 }
 var ALLOWED_STATUSES, AgentRef, ResourceSchema, CreateSchema, UpdateSchema;
-var init_chunk_QPI6MKAU = __esm({
-  "../agent-sdk/dist/chunk-QPI6MKAU.js"() {
+var init_chunk_HMBJOI5F = __esm({
+  "../agent-sdk/dist/chunk-HMBJOI5F.js"() {
     "use strict";
     init_chunk_ZP5VMV5O();
     init_chunk_YGAHGTVZ();
     init_chunk_23UKWXJH();
     init_chunk_DC2UMEQH();
     init_chunk_HLNTWWAZ();
-    init_chunk_R3NRSPRU();
+    init_chunk_ESXH27JB();
     init_chunk_T45NOW43();
     init_chunk_H6TQGV4L();
     init_chunk_NIOWKTIF();
     init_chunk_LAWTTG2E();
-    init_chunk_U7XXWFTQ();
+    init_chunk_XGUSWFDD();
     init_chunk_BMPB7XJH();
     init_chunk_I5ZA45YL();
     init_chunk_NUO56TF7();
@@ -218632,7 +218662,7 @@ var init_chunk_QPI6MKAU = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-VGEBUTM5.js
+// ../agent-sdk/dist/chunk-LMHXLYUV.js
 function maskSecret(value) {
   if (!value) return "";
   if (value.length <= 12) return "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022";
@@ -218667,10 +218697,10 @@ function handleGetSetting(request2, key) {
   });
 }
 var NON_SECRET_KEYS, ALLOWED_KEYS, SECRET_KEYS;
-var init_chunk_VGEBUTM5 = __esm({
-  "../agent-sdk/dist/chunk-VGEBUTM5.js"() {
+var init_chunk_LMHXLYUV = __esm({
+  "../agent-sdk/dist/chunk-LMHXLYUV.js"() {
     "use strict";
-    init_chunk_R3NRSPRU();
+    init_chunk_ESXH27JB();
     init_chunk_EF5QCTEQ();
     init_chunk_EZYKRG4W();
     NON_SECRET_KEYS = /* @__PURE__ */ new Set([
@@ -218712,7 +218742,7 @@ var init_chunk_VGEBUTM5 = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-OGARYKIG.js
+// ../agent-sdk/dist/chunk-LYTHR3HC.js
 function handleCreateSkill(request2) {
   return routeWrap(request2, async () => {
     throw new ApiError(
@@ -218731,15 +218761,15 @@ function handleDeleteSkill(request2, _id) {
     );
   });
 }
-var init_chunk_OGARYKIG = __esm({
-  "../agent-sdk/dist/chunk-OGARYKIG.js"() {
+var init_chunk_LYTHR3HC = __esm({
+  "../agent-sdk/dist/chunk-LYTHR3HC.js"() {
     "use strict";
-    init_chunk_R3NRSPRU();
+    init_chunk_ESXH27JB();
     init_chunk_EZYKRG4W();
   }
 });
 
-// ../agent-sdk/dist/chunk-KD4GS64M.js
+// ../agent-sdk/dist/chunk-LLYP77OL.js
 function getVaultTenantId(id) {
   const row = getDb().prepare(`SELECT tenant_id FROM vaults WHERE id = ?`).get(id);
   return row?.tenant_id;
@@ -218847,11 +218877,11 @@ function handleDeleteEntry(request2, vaultId, key) {
   });
 }
 var CreateVaultSchema, PutEntrySchema;
-var init_chunk_KD4GS64M = __esm({
-  "../agent-sdk/dist/chunk-KD4GS64M.js"() {
+var init_chunk_LLYP77OL = __esm({
+  "../agent-sdk/dist/chunk-LLYP77OL.js"() {
     "use strict";
     init_chunk_23UKWXJH();
-    init_chunk_R3NRSPRU();
+    init_chunk_ESXH27JB();
     init_chunk_VIGJQU6V();
     init_chunk_JEI7I3EH();
     init_chunk_5GZEX4HV();
@@ -218874,7 +218904,7 @@ var init_chunk_KD4GS64M = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-DLFZAPUD.js
+// ../agent-sdk/dist/chunk-AE5JQORN.js
 function handleCreateCredential(request2, vaultId) {
   return routeWrap(request2, async ({ auth }) => {
     loadVaultForCaller(auth, vaultId);
@@ -218960,11 +218990,11 @@ function handleDeleteCredential(request2, vaultId, credentialId) {
   });
 }
 var CreateCredentialSchema, UpdateCredentialSchema;
-var init_chunk_DLFZAPUD = __esm({
-  "../agent-sdk/dist/chunk-DLFZAPUD.js"() {
+var init_chunk_AE5JQORN = __esm({
+  "../agent-sdk/dist/chunk-AE5JQORN.js"() {
     "use strict";
-    init_chunk_KD4GS64M();
-    init_chunk_R3NRSPRU();
+    init_chunk_LLYP77OL();
+    init_chunk_ESXH27JB();
     init_chunk_ZQGJKPPY();
     init_chunk_EZYKRG4W();
     init_zod();
@@ -219080,7 +219110,7 @@ var init_chunk_F27XQZ2O = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-V75I7WMU.js
+// ../agent-sdk/dist/chunk-WHASPTF3.js
 function getEnvironmentTenantId2(id) {
   const row = getDb().prepare(`SELECT tenant_id FROM environments WHERE id = ?`).get(id);
   return row?.tenant_id;
@@ -219232,12 +219262,12 @@ function handleUpdateEnvironment(request2, id) {
   });
 }
 var PackagesSchema, NetworkingSchema, ConfigSchema, CreateSchema2, UpdateSchema2;
-var init_chunk_V75I7WMU = __esm({
-  "../agent-sdk/dist/chunk-V75I7WMU.js"() {
+var init_chunk_WHASPTF3 = __esm({
+  "../agent-sdk/dist/chunk-WHASPTF3.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_HLNTWWAZ();
-    init_chunk_R3NRSPRU();
+    init_chunk_ESXH27JB();
     init_chunk_T45NOW43();
     init_chunk_NIOWKTIF();
     init_chunk_QUJNG4RA();
@@ -219287,7 +219317,98 @@ var init_chunk_V75I7WMU = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-4ZUORWES.js
+// ../agent-sdk/dist/sessions/driver.js
+var driver_exports = {};
+__export(driver_exports, {
+  getPendingToolBridgeCalls: () => getPendingToolBridgeCalls,
+  runTurn: () => runTurn,
+  writePermissionResponse: () => writePermissionResponse,
+  writeToolBridgeResponse: () => writeToolBridgeResponse
+});
+var init_driver = __esm({
+  "../agent-sdk/dist/sessions/driver.js"() {
+    "use strict";
+    init_chunk_KZ4AECAK();
+    init_chunk_PJZ5TQYW();
+    init_chunk_AU4NAQGA();
+    init_chunk_H6TQGV4L();
+    init_chunk_SV2B3P6B();
+    init_chunk_72BKGVBE();
+    init_chunk_M4CTE7EH();
+    init_chunk_NIOWKTIF();
+    init_chunk_ZQGJKPPY();
+    init_chunk_XGUSWFDD();
+    init_chunk_DO4WVWW7();
+    init_chunk_RMZRSYIJ();
+    init_chunk_5ZFOKZGR();
+    init_chunk_BMPB7XJH();
+    init_chunk_VIGJQU6V();
+    init_chunk_I5ZA45YL();
+    init_chunk_R5OZHLAD();
+    init_chunk_AIBH32FN();
+    init_chunk_YPXI7Q2M();
+    init_chunk_O45IQUWS();
+    init_chunk_YCXELHKG();
+    init_chunk_EFOIR7R3();
+    init_chunk_QUJNG4RA();
+    init_chunk_NUO56TF7();
+    init_chunk_JEI7I3EH();
+    init_chunk_JDELTTHV();
+    init_chunk_KOGG7CSN();
+    init_chunk_I44FSUBC();
+    init_chunk_T5VRE77P();
+    init_chunk_TY3HD5I5();
+    init_chunk_QYSDP6V5();
+    init_chunk_B6E6BVNK();
+    init_chunk_JDBXIJKG();
+    init_chunk_DNGLD7VN();
+    init_chunk_3IV56JJW();
+    init_chunk_B2JLKTBJ();
+    init_chunk_Z25I7DRV();
+    init_chunk_P7P2NWZD();
+    init_chunk_ETWGCBIQ();
+    init_chunk_SWIP7JBQ();
+    init_chunk_EHCGLMPC();
+    init_chunk_JHGJG2Z2();
+    init_chunk_MJ5J57UJ();
+    init_chunk_XG4UIGDH();
+    init_chunk_3W6KEDQE();
+    init_chunk_S3JRZFF5();
+    init_chunk_X2CAT5MN();
+    init_chunk_NWW4246M();
+    init_chunk_M2LUXIXU();
+    init_chunk_CULYZ3VA();
+    init_chunk_E4FQRMHV();
+    init_chunk_5D5P37FY();
+    init_chunk_YSUPRYX2();
+    init_chunk_7TSTCMII();
+    init_chunk_QQDSHL27();
+    init_chunk_IAF6VMPO();
+    init_chunk_OWP537VU();
+    init_chunk_RZKUB4JQ();
+    init_chunk_WFIMX3HG();
+    init_chunk_FVBDEOTZ();
+    init_chunk_CY6AWCC6();
+    init_chunk_4FDEJHH7();
+    init_chunk_JFYE5BFI();
+    init_chunk_NQX7WBA4();
+    init_chunk_XBHDQK4Z();
+    init_chunk_IU457W7Q();
+    init_chunk_F4WUVOLE();
+    init_chunk_EF5QCTEQ();
+    init_chunk_SXE7H3VK();
+    init_chunk_LHHBOQUR();
+    init_chunk_HFDLUBWN();
+    init_chunk_5GZEX4HV();
+    init_chunk_2BDD6OHG();
+    init_chunk_EZYKRG4W();
+    init_chunk_UYTSKFGK();
+    init_chunk_XZYIH3AF();
+    init_chunk_2ESYSVXG();
+  }
+});
+
+// ../agent-sdk/dist/chunk-BFXQ3IOS.js
 function assertSessionTenant2(auth, sessionId) {
   const row = getDb().prepare(`SELECT tenant_id FROM sessions WHERE id = ?`).get(sessionId);
   if (row) {
@@ -219715,16 +219836,22 @@ function handlePostEvents(request2, sessionId) {
             processedAt: nowMs()
           });
           rows.push(row);
-          const inp = {
-            kind: "tool_result",
-            eventId: row.id,
-            custom_tool_use_id: event.custom_tool_use_id,
-            content: event.content
-          };
           const currentStatus = getSessionRow(sessionId)?.status ?? "idle";
-          if (currentStatus === "running" || sawInterrupt) {
-            pushPendingUserInput({ sessionId, input: inp });
+          if (currentStatus === "running") {
+            const { writeToolBridgeResponse: writeToolBridgeResponse2 } = await Promise.resolve().then(() => (init_driver(), driver_exports));
+            void writeToolBridgeResponse2(
+              sessionId,
+              event.content
+            ).catch((err) => {
+              console.warn(`[events] writeToolBridgeResponse failed:`, err);
+            });
           } else {
+            const inp = {
+              kind: "tool_result",
+              eventId: row.id,
+              custom_tool_use_id: event.custom_tool_use_id,
+              content: event.content
+            };
             pendingForTurn.push(inp);
           }
           continue;
@@ -219805,18 +219932,18 @@ function handleListEvents(request2, sessionId) {
   });
 }
 var teeLog, activeTees, MAX_TEE_REENTRIES, TextBlock2, UserMessage, UserInterrupt, UserToolConfirmation, UserCustomToolResult, UserDefineOutcome, UserEvent, BatchSchema;
-var init_chunk_4ZUORWES = __esm({
-  "../agent-sdk/dist/chunk-4ZUORWES.js"() {
+var init_chunk_BFXQ3IOS = __esm({
+  "../agent-sdk/dist/chunk-BFXQ3IOS.js"() {
     "use strict";
     init_chunk_ATTHVKNE();
     init_chunk_YGAHGTVZ();
     init_chunk_23UKWXJH();
     init_chunk_DC2UMEQH();
     init_chunk_NUINUAXO();
-    init_chunk_R3NRSPRU();
+    init_chunk_ESXH27JB();
     init_chunk_T45NOW43();
     init_chunk_AQXCXWAZ();
-    init_chunk_BEXPMKTK();
+    init_chunk_KZ4AECAK();
     init_chunk_NIOWKTIF();
     init_chunk_LAWTTG2E();
     init_chunk_BMPB7XJH();
@@ -219871,7 +219998,7 @@ var init_chunk_4ZUORWES = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-SP2TOQZF.js
+// ../agent-sdk/dist/chunk-OA3CLTYY.js
 function assertFileTenantByScope(auth, scopeType, scopeId) {
   if (!scopeId || scopeType !== "session") {
     if (!auth.isGlobalAdmin) throw notFound("file not found");
@@ -220006,34 +220133,34 @@ function handleDeleteFile(request2, fileId) {
     return jsonOk(result);
   });
 }
-var init_chunk_SP2TOQZF = __esm({
-  "../agent-sdk/dist/chunk-SP2TOQZF.js"() {
+var init_chunk_OA3CLTYY = __esm({
+  "../agent-sdk/dist/chunk-OA3CLTYY.js"() {
     "use strict";
     init_chunk_STPT3SWU();
     init_chunk_NXRJ7Z4G();
     init_chunk_23UKWXJH();
-    init_chunk_R3NRSPRU();
+    init_chunk_ESXH27JB();
     init_chunk_5GZEX4HV();
     init_chunk_EZYKRG4W();
     init_client();
   }
 });
 
-// ../agent-sdk/dist/chunk-QPKMINTD.js
+// ../agent-sdk/dist/chunk-UIVEK3MD.js
 function handleGetLicense(request2) {
   return routeWrap(request2, async () => {
     return jsonOk(getLicenseInfo());
   });
 }
-var init_chunk_QPKMINTD = __esm({
-  "../agent-sdk/dist/chunk-QPKMINTD.js"() {
+var init_chunk_UIVEK3MD = __esm({
+  "../agent-sdk/dist/chunk-UIVEK3MD.js"() {
     "use strict";
     init_chunk_2N2KL4KM();
-    init_chunk_R3NRSPRU();
+    init_chunk_ESXH27JB();
   }
 });
 
-// ../agent-sdk/dist/chunk-R6L3HZP2.js
+// ../agent-sdk/dist/chunk-HGZ6R6ST.js
 function assertStoreTenant(auth, storeAgentId) {
   if (storeAgentId == null) {
     if (!auth.isGlobalAdmin) throw notFound("memory store not found");
@@ -220144,12 +220271,12 @@ function handleDeleteMemory(request2, storeId, memId) {
   });
 }
 var CreateStoreSchema, CreateMemorySchema, UpdateMemorySchema;
-var init_chunk_R6L3HZP2 = __esm({
-  "../agent-sdk/dist/chunk-R6L3HZP2.js"() {
+var init_chunk_HGZ6R6ST = __esm({
+  "../agent-sdk/dist/chunk-HGZ6R6ST.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_NUINUAXO();
-    init_chunk_R3NRSPRU();
+    init_chunk_ESXH27JB();
     init_chunk_5GZEX4HV();
     init_chunk_EZYKRG4W();
     init_zod();
@@ -220185,7 +220312,7 @@ var init_models = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-4EXGAKTK.js
+// ../agent-sdk/dist/chunk-OC2RYYTW.js
 function getAgentTenantId3(id) {
   const row = getDb().prepare(`SELECT tenant_id FROM agents WHERE id = ?`).get(id);
   return row?.tenant_id;
@@ -220351,15 +220478,15 @@ function handleDeleteAgent(request2, id) {
   });
 }
 var SkillSchema, ToolSchema, McpServerSchema, ModelConfigSchema2, CreateSchema3, UpdateSchema3;
-var init_chunk_4EXGAKTK = __esm({
-  "../agent-sdk/dist/chunk-4EXGAKTK.js"() {
+var init_chunk_OC2RYYTW = __esm({
+  "../agent-sdk/dist/chunk-OC2RYYTW.js"() {
     "use strict";
     init_chunk_23UKWXJH();
-    init_chunk_R3NRSPRU();
+    init_chunk_ESXH27JB();
     init_chunk_T45NOW43();
     init_chunk_NIOWKTIF();
     init_chunk_JEI7I3EH();
-    init_chunk_QAGHVCOK();
+    init_chunk_KOGG7CSN();
     init_chunk_5GZEX4HV();
     init_chunk_EZYKRG4W();
     init_zod();
@@ -220454,7 +220581,7 @@ var init_chunk_4EXGAKTK = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-WJ2BEGAZ.js
+// ../agent-sdk/dist/chunk-4DTL7OKD.js
 function toView3(row) {
   return row;
 }
@@ -220625,13 +220752,13 @@ function handleGetApiKeyActivity(request2, id) {
   });
 }
 var ScopeSchema, PermissionsSchema, CreateBody2, PatchBody3;
-var init_chunk_WJ2BEGAZ = __esm({
-  "../agent-sdk/dist/chunk-WJ2BEGAZ.js"() {
+var init_chunk_4DTL7OKD = __esm({
+  "../agent-sdk/dist/chunk-4DTL7OKD.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_MHQXDTJB();
     init_chunk_2N2KL4KM();
-    init_chunk_R3NRSPRU();
+    init_chunk_ESXH27JB();
     init_chunk_ADK2TYO4();
     init_chunk_I5ZA45YL();
     init_chunk_5GZEX4HV();
@@ -220658,7 +220785,7 @@ var init_chunk_WJ2BEGAZ = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-DMFY65GN.js
+// ../agent-sdk/dist/chunk-O3Z7JWR7.js
 function parseMs2(v2) {
   if (!v2) return void 0;
   const n = Number(v2);
@@ -220707,18 +220834,18 @@ function handleListAudit(request2) {
   });
 }
 var VALID_OUTCOMES;
-var init_chunk_DMFY65GN = __esm({
-  "../agent-sdk/dist/chunk-DMFY65GN.js"() {
+var init_chunk_O3Z7JWR7 = __esm({
+  "../agent-sdk/dist/chunk-O3Z7JWR7.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_MHQXDTJB();
-    init_chunk_R3NRSPRU();
+    init_chunk_ESXH27JB();
     init_chunk_EZYKRG4W();
     VALID_OUTCOMES = /* @__PURE__ */ new Set(["success", "denied", "failure"]);
   }
 });
 
-// ../agent-sdk/dist/chunk-Q3NN46KE.js
+// ../agent-sdk/dist/chunk-4GC7D5GD.js
 function handleBatch(request2) {
   return routeWrap(request2, async () => {
     const body = await request2.json();
@@ -220745,11 +220872,11 @@ function handleBatch(request2) {
   });
 }
 var OperationSchema, BatchSchema2;
-var init_chunk_Q3NN46KE = __esm({
-  "../agent-sdk/dist/chunk-Q3NN46KE.js"() {
+var init_chunk_4GC7D5GD = __esm({
+  "../agent-sdk/dist/chunk-4GC7D5GD.js"() {
     "use strict";
     init_chunk_S3SKODVV();
-    init_chunk_R3NRSPRU();
+    init_chunk_ESXH27JB();
     init_chunk_EZYKRG4W();
     init_zod();
     OperationSchema = external_exports.object({
@@ -220863,40 +220990,40 @@ __export(handlers_exports, {
 var init_handlers3 = __esm({
   "../agent-sdk/dist/handlers/index.js"() {
     "use strict";
-    init_chunk_HBERAFEH();
-    init_chunk_RKXJLXPN();
+    init_chunk_2NAUMCWE();
+    init_chunk_YIVJ3JTW();
     init_chunk_AMWWPUSK();
-    init_chunk_QI2UYVUF();
-    init_chunk_T2IKN6LM();
-    init_chunk_EZCC3VWX();
-    init_chunk_TTICVJTT();
+    init_chunk_JURAGCGR();
+    init_chunk_XZOBOKL6();
+    init_chunk_GQFC44YI();
+    init_chunk_OTLXV4RO();
     init_chunk_FZFICXAN();
-    init_chunk_EVZABUMI();
-    init_chunk_XLAHZKY6();
-    init_chunk_DHROKUFE();
+    init_chunk_ZNQD65DN();
+    init_chunk_EGCAA6KI();
+    init_chunk_OONL25NZ();
     init_chunk_4WMYJM36();
     init_chunk_RDGOGAQ5();
-    init_chunk_4ZL36MCY();
-    init_chunk_Q2GMMMR3();
-    init_chunk_QPI6MKAU();
+    init_chunk_W26HCKWX();
+    init_chunk_RK3QBYXO();
+    init_chunk_HMBJOI5F();
     init_chunk_ZP5VMV5O();
-    init_chunk_VGEBUTM5();
-    init_chunk_OGARYKIG();
-    init_chunk_DLFZAPUD();
-    init_chunk_KD4GS64M();
+    init_chunk_LMHXLYUV();
+    init_chunk_LYTHR3HC();
+    init_chunk_AE5JQORN();
+    init_chunk_LLYP77OL();
     init_chunk_F27XQZ2O();
-    init_chunk_V75I7WMU();
-    init_chunk_4ZUORWES();
+    init_chunk_WHASPTF3();
+    init_chunk_BFXQ3IOS();
     init_chunk_ATTHVKNE();
-    init_chunk_SP2TOQZF();
-    init_chunk_QPKMINTD();
-    init_chunk_R6L3HZP2();
+    init_chunk_OA3CLTYY();
+    init_chunk_UIVEK3MD();
+    init_chunk_HGZ6R6ST();
     init_chunk_BZ6HFTHU();
     init_chunk_STPT3SWU();
-    init_chunk_4EXGAKTK();
-    init_chunk_WJ2BEGAZ();
-    init_chunk_DMFY65GN();
-    init_chunk_Q3NN46KE();
+    init_chunk_OC2RYYTW();
+    init_chunk_4DTL7OKD();
+    init_chunk_O3Z7JWR7();
+    init_chunk_4GC7D5GD();
     init_chunk_YGAHGTVZ();
     init_chunk_JK5TPJHH();
     init_chunk_NXRJ7Z4G();
@@ -220911,15 +221038,15 @@ var init_handlers3 = __esm({
     init_chunk_HLNTWWAZ();
     init_chunk_MHQXDTJB();
     init_chunk_2N2KL4KM();
-    init_chunk_R3NRSPRU();
+    init_chunk_ESXH27JB();
     init_chunk_D2XITRN6();
     init_chunk_ZMMDLKR3();
     init_chunk_T45NOW43();
     init_chunk_W6WKXFHN();
     init_chunk_HVUWXUUI();
-    init_chunk_VZQP2TG2();
+    init_chunk_DT57EZQB();
     init_chunk_AQXCXWAZ();
-    init_chunk_BEXPMKTK();
+    init_chunk_KZ4AECAK();
     init_chunk_PJZ5TQYW();
     init_chunk_AU4NAQGA();
     init_chunk_H6TQGV4L();
@@ -220932,10 +221059,10 @@ var init_handlers3 = __esm({
     init_chunk_ZQGJKPPY();
     init_chunk_ADK2TYO4();
     init_chunk_3MQ2FWXS();
-    init_chunk_OLZ2KIXD();
-    init_chunk_KMBQ5U5W();
+    init_chunk_NX6SIEN6();
+    init_chunk_FJAWIVSD();
     init_chunk_LAWTTG2E();
-    init_chunk_U7XXWFTQ();
+    init_chunk_XGUSWFDD();
     init_chunk_DO4WVWW7();
     init_chunk_RMZRSYIJ();
     init_chunk_5ZFOKZGR();
@@ -220952,7 +221079,7 @@ var init_handlers3 = __esm({
     init_chunk_NUO56TF7();
     init_chunk_JEI7I3EH();
     init_chunk_JDELTTHV();
-    init_chunk_QAGHVCOK();
+    init_chunk_KOGG7CSN();
     init_chunk_I44FSUBC();
     init_chunk_T5VRE77P();
     init_chunk_TY3HD5I5();
@@ -220983,11 +221110,11 @@ var init_handlers3 = __esm({
     init_chunk_QQDSHL27();
     init_chunk_IAF6VMPO();
     init_chunk_OWP537VU();
-    init_chunk_6VQXN6L3();
+    init_chunk_RZKUB4JQ();
     init_chunk_WFIMX3HG();
     init_chunk_FVBDEOTZ();
     init_chunk_CY6AWCC6();
-    init_chunk_ALVC7G6R();
+    init_chunk_4FDEJHH7();
     init_chunk_JFYE5BFI();
     init_chunk_NQX7WBA4();
     init_chunk_XBHDQK4Z();