@agentstep/gateway 0.4.34 → 0.4.36

package/dist/gateway.js

@@ -159500,6 +159500,7 @@ function extractFilePaths(sessionId) {
   const seen = /* @__PURE__ */ new Set();
   const paths = [];
   let sawFileTools = false;
+  let sawBash = false;
   for (const evt of events2) {
     if (evt.type !== "agent.tool_use") continue;
     let payload;
@@ -159514,6 +159515,8 @@ function extractFilePaths(sessionId) {
     if (FILE_TOOLS.has(toolName ?? "") && payload.input) {
       sawFileTools = true;
       filePath = payload.input.file_path ?? payload.input.filePath ?? payload.input.path;
+    } else if (toolName === "Bash" || toolName === "bash") {
+      sawBash = true;
     } else if (toolName === "apply_patch" && payload.input) {
       sawFileTools = true;
       const patch = payload.input.patchText;
@@ -159526,7 +159529,7 @@ function extractFilePaths(sessionId) {
     seen.add(resolved);
     paths.push(resolved);
   }
-  return { paths, sawFileTools };
+  return { paths, sawFileTools, sawBash };
 }
 function isPathSafe(p2) {
   if (!p2.startsWith("/")) return false;
@@ -159542,7 +159545,7 @@ async function discoverChangedFiles(sandboxName, provider, secrets) {
     const result = await provider.exec(
       sandboxName,
       ["sh", "-c", [
-        "find /home /root /workspace /mnt",
+        "find /home /root /workspace /mnt /tmp",
         "-maxdepth 4 -type f -mmin -30 -size +0c",
         "! -path '*/.git/*' ! -path '*/node_modules/*' ! -path '*/.npm/*'",
         "! -path '*/.config/*' ! -path '*/.local/*' ! -path '*/.cache/*'",
@@ -159563,8 +159566,11 @@ async function syncContainerFiles(opts) {
   const { sessionId, sandboxName, provider, secrets } = opts;
   const extracted = extractFilePaths(sessionId);
   let allPaths = extracted.paths;
-  if (allPaths.length === 0 && extracted.sawFileTools) {
-    allPaths = await discoverChangedFiles(sandboxName, provider, secrets);
+  if (extracted.sawFileTools || extracted.sawBash) {
+    const discovered = await discoverChangedFiles(sandboxName, provider, secrets);
+    for (const p2 of discovered) {
+      if (!allPaths.includes(p2)) allPaths.push(p2);
+    }
   }
   if (allPaths.length === 0) return { synced: 0, skipped: 0 };
   const validPaths = [];
@@ -159589,24 +159595,42 @@ async function syncContainerFiles(opts) {
     validPaths.length = MAX_FILES_PER_SYNC;
   }
   let synced = 0;
+  const BINARY_READ_EXTS = /* @__PURE__ */ new Set([
+    ".docx",
+    ".xlsx",
+    ".pptx",
+    ".pdf",
+    ".zip",
+    ".tar",
+    ".gz",
+    ".png",
+    ".jpg",
+    ".jpeg",
+    ".gif",
+    ".ico",
+    ".webp",
+    ".woff",
+    ".woff2",
+    ".ttf",
+    ".otf",
+    ".eot"
+  ]);
   for (const filePath of validPaths) {
     try {
-      const result = await provider.exec(
-        sandboxName,
-        ["cat", "--", filePath],
-        { secrets, timeoutMs: 15e3 }
-      );
+      const ext = path9.extname(filePath).toLowerCase();
+      const isBinary = BINARY_READ_EXTS.has(ext);
+      const result = isBinary ? await provider.exec(sandboxName, ["base64", "-w", "0", "--", filePath], { secrets, timeoutMs: 15e3 }) : await provider.exec(sandboxName, ["cat", "--", filePath], { secrets, timeoutMs: 15e3 });
       if (result.exit_code !== 0 || !result.stdout) {
         skipped++;
         continue;
       }
-      const content = result.stdout;
-      const byteLength = Buffer.byteLength(content, "utf8");
-      if (byteLength > MAX_FILE_SIZE) {
+      const raw2 = result.stdout.replace(/[\x00-\x08\x0B\x0C\x0E-\x1F]/g, "");
+      const data = isBinary ? Buffer.from(raw2.trim(), "base64") : Buffer.from(raw2, "utf8");
+      if (data.length > MAX_FILE_SIZE) {
         skipped++;
         continue;
       }
-      const hash = createHash3("sha256").update(content).digest("hex");
+      const hash = createHash3("sha256").update(data).digest("hex");
       const existing = findFileByContainerPath(sessionId, filePath, hash);
       if (existing) {
         skipped++;
@@ -159614,10 +159638,9 @@ async function syncContainerFiles(opts) {
       }
       const fileId = newId("file");
       const filename = path9.basename(filePath);
-      const data = Buffer.from(content, "utf8");
       const storagePath = storeFile(fileId, filename, data);
-      const ext = path9.extname(filename).toLowerCase();
-      const contentType = MIME_MAP[ext] ?? "text/plain";
+      const fileExt = path9.extname(filename).toLowerCase();
+      const contentType = MIME_MAP[fileExt] ?? "text/plain";
       createFile({
         filename,
         size: data.length,
@@ -159657,18 +159680,8 @@ var init_container_file_sync = __esm({
       ".dylib",
       ".bin",
       ".wasm",
-      ".png",
-      ".jpg",
-      ".jpeg",
-      ".gif",
-      ".ico",
-      ".svg",
       ".mp3",
-      ".mp4",
-      ".zip",
-      ".tar",
-      ".gz",
-      ".pdf"
+      ".mp4"
     ]);
     BLOCKED_PREFIXES = [
       "/proc/",
@@ -159706,6 +159719,17 @@ var init_container_file_sync = __esm({
       ".xml": "text/xml",
       ".sql": "text/x-sql",
       ".txt": "text/plain",
+      ".docx": "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+      ".xlsx": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+      ".pptx": "application/vnd.openxmlformats-officedocument.presentationml.presentation",
+      ".pdf": "application/pdf",
+      ".zip": "application/zip",
+      ".png": "image/png",
+      ".jpg": "image/jpeg",
+      ".jpeg": "image/jpeg",
+      ".gif": "image/gif",
+      ".svg": "image/svg+xml",
+      ".csv": "text/csv",
       ".c": "text/x-c",
       ".cpp": "text/x-c++",
       ".h": "text/x-c",
@@ -159975,7 +159999,7 @@ var MAX_THREAD_DEPTH;
 var init_threads = __esm({
   "../agent-sdk/dist/sessions/threads.js"() {
     "use strict";
-    init_chunk_5CCJVWDQ();
+    init_chunk_QB23B7L5();
     init_chunk_PJZ5TQYW();
     init_chunk_AU4NAQGA();
     init_chunk_H6TQGV4L();
@@ -160059,7 +160083,7 @@ var init_threads = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-5CCJVWDQ.js
+// ../agent-sdk/dist/chunk-QB23B7L5.js
 function formatStopReason(reason, eventIds) {
   if (reason === "custom_tool_call") {
     return { type: "requires_action", event_ids: eventIds ?? [] };
@@ -160807,6 +160831,18 @@ async function checkToolBridgeSentinel(sessionId, sandboxName, provider, secrets
     console.warn(`[driver] failed to read tool bridge request for ${sessionId}:`, err);
     return;
   }
+  const input = request2.input;
+  const filename = input?.filename ?? "";
+  const SCRIPT_EXTS = /\.(js|ts|py|sh|mjs|cjs)$/i;
+  if (request2.name === "save_output" && SCRIPT_EXTS.test(filename)) {
+    console.log(`[driver] ${sessionId} rejecting save_output for script file: ${filename}`);
+    pendingToolBridgeCalls.add(sessionId);
+    await writeToolBridgeResponse(sessionId, [{
+      type: "text",
+      text: `Error: "${filename}" is a script file, not a deliverable. Run the script first (e.g. "node ${filename}" or "python3 ${filename}"), then call save_output with the OUTPUT file (e.g. the .docx, .pdf, or .csv that the script produces).`
+    }]);
+    return;
+  }
   pendingToolBridgeCalls.add(sessionId);
   console.log(`[driver] ${sessionId} custom tool call: ${request2.name} (${request2.tool_use_id})`);
   appendEvent2(sessionId, {
@@ -160851,8 +160887,8 @@ async function writeToolBridgeResponse(sessionId, content) {
   pendingToolBridgeCalls.delete(sessionId);
 }
 var gd, pendingToolBridgeCalls;
-var init_chunk_5CCJVWDQ = __esm({
-  "../agent-sdk/dist/chunk-5CCJVWDQ.js"() {
+var init_chunk_QB23B7L5 = __esm({
+  "../agent-sdk/dist/chunk-QB23B7L5.js"() {
     "use strict";
     init_chunk_PJZ5TQYW();
     init_chunk_AU4NAQGA();
@@ -215551,7 +215587,7 @@ var init_rate_limit = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-FLZY57OW.js
+// ../agent-sdk/dist/chunk-H6HEGKCW.js
 import path10 from "path";
 async function ensureInitialized() {
   if (g15.__caInitPromise) return g15.__caInitPromise;
@@ -215773,10 +215809,10 @@ async function rebuildContainerPool() {
   }
 }
 var g15;
-var init_chunk_FLZY57OW = __esm({
-  "../agent-sdk/dist/chunk-FLZY57OW.js"() {
+var init_chunk_H6HEGKCW = __esm({
+  "../agent-sdk/dist/chunk-H6HEGKCW.js"() {
     "use strict";
-    init_chunk_5CCJVWDQ();
+    init_chunk_QB23B7L5();
     init_chunk_2PPB644A();
     init_chunk_GVPJL3XS();
     init_chunk_N3QIXC2B();
@@ -215802,7 +215838,7 @@ var init_chunk_FLZY57OW = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-KUJYDAWD.js
+// ../agent-sdk/dist/chunk-NDIBNZ5J.js
 async function routeWrap(request2, handler) {
   const startedAt = Date.now();
   let status = 500;
@@ -215846,13 +215882,13 @@ async function routeWrap(request2, handler) {
 function jsonOk(body, status = 200) {
   return Response.json(body, { status });
 }
-var init_chunk_KUJYDAWD = __esm({
-  "../agent-sdk/dist/chunk-KUJYDAWD.js"() {
+var init_chunk_NDIBNZ5J = __esm({
+  "../agent-sdk/dist/chunk-NDIBNZ5J.js"() {
     "use strict";
     init_chunk_D2XITRN6();
     init_chunk_WQARLGBG();
     init_chunk_HVUWXUUI();
-    init_chunk_FLZY57OW();
+    init_chunk_H6HEGKCW();
     init_chunk_3MQ2FWXS();
     init_chunk_EZYKRG4W();
   }
@@ -215982,14 +216018,14 @@ var init_dist2 = __esm({
     init_chunk_2N2KL4KM();
     init_chunk_7GG3FEK2();
     init_chunk_C6AXM3M7();
-    init_chunk_KUJYDAWD();
+    init_chunk_NDIBNZ5J();
     init_chunk_D2XITRN6();
     init_chunk_WQARLGBG();
     init_chunk_JCW3ZRES();
     init_chunk_W6WKXFHN();
     init_chunk_HVUWXUUI();
-    init_chunk_FLZY57OW();
-    init_chunk_5CCJVWDQ();
+    init_chunk_H6HEGKCW();
+    init_chunk_QB23B7L5();
     init_chunk_PJZ5TQYW();
     init_chunk_AU4NAQGA();
     init_chunk_H6TQGV4L();
@@ -216081,7 +216117,7 @@ var init_dist2 = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-S4USSG25.js
+// ../agent-sdk/dist/chunk-LVDYHS7N.js
 function handleWhoami(request2) {
   return routeWrap(request2, async ({ auth }) => {
     return jsonOk({
@@ -216092,14 +216128,14 @@ function handleWhoami(request2) {
     });
   });
 }
-var init_chunk_S4USSG25 = __esm({
-  "../agent-sdk/dist/chunk-S4USSG25.js"() {
+var init_chunk_LVDYHS7N = __esm({
+  "../agent-sdk/dist/chunk-LVDYHS7N.js"() {
     "use strict";
-    init_chunk_KUJYDAWD();
+    init_chunk_NDIBNZ5J();
   }
 });
 
-// ../agent-sdk/dist/chunk-ZIGTEOKH.js
+// ../agent-sdk/dist/chunk-CD7SK6XL.js
 function handleCreateSkill(request2) {
   return routeWrap(request2, async () => {
     throw new ApiError(
@@ -216118,10 +216154,10 @@ function handleDeleteSkill(request2, _id) {
     );
   });
 }
-var init_chunk_ZIGTEOKH = __esm({
-  "../agent-sdk/dist/chunk-ZIGTEOKH.js"() {
+var init_chunk_CD7SK6XL = __esm({
+  "../agent-sdk/dist/chunk-CD7SK6XL.js"() {
     "use strict";
-    init_chunk_KUJYDAWD();
+    init_chunk_NDIBNZ5J();
     init_chunk_EZYKRG4W();
   }
 });
@@ -216336,7 +216372,7 @@ var init_chunk_P3PHXVMA = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-LE3XJK5J.js
+// ../agent-sdk/dist/chunk-P6RXTR4X.js
 async function handleGetSkillsCatalog(request2) {
   return routeWrap(request2, async ({ request: req }) => {
     const url2 = new URL(req.url);
@@ -216392,11 +216428,11 @@ async function handleGetSkillsFeed(request2) {
     return jsonOk(feed);
   });
 }
-var init_chunk_LE3XJK5J = __esm({
-  "../agent-sdk/dist/chunk-LE3XJK5J.js"() {
+var init_chunk_P6RXTR4X = __esm({
+  "../agent-sdk/dist/chunk-P6RXTR4X.js"() {
     "use strict";
     init_chunk_P3PHXVMA();
-    init_chunk_KUJYDAWD();
+    init_chunk_NDIBNZ5J();
   }
 });
 
@@ -216456,7 +216492,7 @@ var init_chunk_23UKWXJH = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-DHSEH44K.js
+// ../agent-sdk/dist/chunk-MKATGKGM.js
 async function prepareSessionStream(request2, sessionId) {
   try {
     await ensureInitialized();
@@ -216549,14 +216585,14 @@ data: ${JSON.stringify(evt)}
     }
   });
 }
-var init_chunk_DHSEH44K = __esm({
-  "../agent-sdk/dist/chunk-DHSEH44K.js"() {
+var init_chunk_MKATGKGM = __esm({
+  "../agent-sdk/dist/chunk-MKATGKGM.js"() {
     "use strict";
     init_chunk_L2RX552S();
     init_chunk_23UKWXJH();
     init_chunk_WQARLGBG();
     init_chunk_JCW3ZRES();
-    init_chunk_FLZY57OW();
+    init_chunk_H6HEGKCW();
     init_chunk_E7DD7F7J();
     init_chunk_MHBLVGRF();
     init_chunk_3NK6YTA5();
@@ -216566,7 +216602,7 @@ var init_chunk_DHSEH44K = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-KOLBALYY.js
+// ../agent-sdk/dist/chunk-PCJTXF5I.js
 function handleCreateTenant(request2) {
   return routeWrap(request2, async ({ auth, request: req }) => {
     requireFeature("tenancy", "multi-tenancy");
@@ -216665,13 +216701,13 @@ function handleArchiveTenant(request2, id) {
   });
 }
 var CreateBody, PatchBody;
-var init_chunk_KOLBALYY = __esm({
-  "../agent-sdk/dist/chunk-KOLBALYY.js"() {
+var init_chunk_PCJTXF5I = __esm({
+  "../agent-sdk/dist/chunk-PCJTXF5I.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_KLN6HPYM();
     init_chunk_2N2KL4KM();
-    init_chunk_KUJYDAWD();
+    init_chunk_NDIBNZ5J();
     init_chunk_AR2TM7CR();
     init_chunk_EZYKRG4W();
     init_zod();
@@ -216685,7 +216721,7 @@ var init_chunk_KOLBALYY = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-FVVK6ZOP.js
+// ../agent-sdk/dist/chunk-O3IPK2YQ.js
 function handleListThreads(request2, sessionId) {
   return routeWrap(request2, async ({ auth }) => {
     const row = getDb().prepare(`SELECT tenant_id FROM sessions WHERE id = ?`).get(sessionId);
@@ -216713,11 +216749,11 @@ function handleListThreads(request2, sessionId) {
     });
   });
 }
-var init_chunk_FVVK6ZOP = __esm({
-  "../agent-sdk/dist/chunk-FVVK6ZOP.js"() {
+var init_chunk_O3IPK2YQ = __esm({
+  "../agent-sdk/dist/chunk-O3IPK2YQ.js"() {
     "use strict";
     init_chunk_23UKWXJH();
-    init_chunk_KUJYDAWD();
+    init_chunk_NDIBNZ5J();
     init_chunk_3NK6YTA5();
     init_chunk_6POQAFEC();
     init_chunk_EZYKRG4W();
@@ -216767,7 +216803,7 @@ var init_chunk_6GP5IKXE = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-CTR6EUXT.js
+// ../agent-sdk/dist/chunk-2PNZELEJ.js
 function buildSpanTree(events2) {
   const nodes = /* @__PURE__ */ new Map();
   const openStarts = /* @__PURE__ */ new Map();
@@ -216951,11 +216987,11 @@ function handleExportTrace(request2, traceId) {
     return jsonOk(result, result.ok ? 200 : 502);
   });
 }
-var init_chunk_CTR6EUXT = __esm({
-  "../agent-sdk/dist/chunk-CTR6EUXT.js"() {
+var init_chunk_2PNZELEJ = __esm({
+  "../agent-sdk/dist/chunk-2PNZELEJ.js"() {
     "use strict";
     init_chunk_6GP5IKXE();
-    init_chunk_KUJYDAWD();
+    init_chunk_NDIBNZ5J();
     init_chunk_GVPJL3XS();
     init_chunk_TH7WJLZC();
     init_chunk_EZYKRG4W();
@@ -217542,7 +217578,7 @@ agentstep skills install \${n}
   }
 });
 
-// ../agent-sdk/dist/chunk-53XO5VOW.js
+// ../agent-sdk/dist/chunk-TGTPTLBM.js
 function handleAddUpstreamKey(request2) {
   return routeWrap(request2, async ({ auth, request: req }) => {
     requireFeature("upstream_pool", "upstream key pool");
@@ -217634,15 +217670,15 @@ function handleDeleteUpstreamKey(request2, id) {
   });
 }
 var AddBody, PatchBody2;
-var init_chunk_53XO5VOW = __esm({
-  "../agent-sdk/dist/chunk-53XO5VOW.js"() {
+var init_chunk_TGTPTLBM = __esm({
+  "../agent-sdk/dist/chunk-TGTPTLBM.js"() {
     "use strict";
     init_chunk_PIJKJNGB();
     init_chunk_H7UKW666();
     init_chunk_23UKWXJH();
     init_chunk_KLN6HPYM();
     init_chunk_2N2KL4KM();
-    init_chunk_KUJYDAWD();
+    init_chunk_NDIBNZ5J();
     init_chunk_EZYKRG4W();
     init_zod();
     AddBody = external_exports.object({
@@ -217656,7 +217692,7 @@ var init_chunk_53XO5VOW = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-YVNA2TSG.js
+// ../agent-sdk/dist/chunk-Y35PFFL2.js
 function assertStoreTenant(auth, storeAgentId) {
   if (storeAgentId == null) {
     if (!auth.isGlobalAdmin) throw notFound("memory store not found");
@@ -217780,12 +217816,12 @@ function handleDeleteMemory(request2, storeId, memId) {
   });
 }
 var CreateStoreSchema, CreateMemorySchema, UpdateMemorySchema;
-var init_chunk_YVNA2TSG = __esm({
-  "../agent-sdk/dist/chunk-YVNA2TSG.js"() {
+var init_chunk_Y35PFFL2 = __esm({
+  "../agent-sdk/dist/chunk-Y35PFFL2.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_SUGSHXND();
-    init_chunk_KUJYDAWD();
+    init_chunk_NDIBNZ5J();
     init_chunk_6POQAFEC();
     init_chunk_EZYKRG4W();
     init_zod();
@@ -217806,7 +217842,7 @@ var init_chunk_YVNA2TSG = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-33T7CXNO.js
+// ../agent-sdk/dist/chunk-CZZP4UTX.js
 function zeroTotals() {
   return {
     session_count: 0,
@@ -218166,12 +218202,12 @@ function handleGetApiMetrics(request2) {
   });
 }
 var BUCKET_MS, TOP_N, MAX_POINTS_PER_SERIES, MAX_TOTAL_CELLS;
-var init_chunk_33T7CXNO = __esm({
-  "../agent-sdk/dist/chunk-33T7CXNO.js"() {
+var init_chunk_CZZP4UTX = __esm({
+  "../agent-sdk/dist/chunk-CZZP4UTX.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_2N2KL4KM();
-    init_chunk_KUJYDAWD();
+    init_chunk_NDIBNZ5J();
     init_chunk_D2XITRN6();
     init_chunk_6POQAFEC();
     init_chunk_EZYKRG4W();
@@ -218187,7 +218223,7 @@ var init_chunk_33T7CXNO = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-R7DSCB4M.js
+// ../agent-sdk/dist/chunk-PIZGJG3H.js
 function handleListModels(request2) {
   return routeWrap(request2, async ({ request: req }) => {
     const url2 = new URL(req.url);
@@ -218198,11 +218234,11 @@ function handleListModels(request2) {
     return jsonOk({ data: models });
   });
 }
-var init_chunk_R7DSCB4M = __esm({
-  "../agent-sdk/dist/chunk-R7DSCB4M.js"() {
+var init_chunk_PIZGJG3H = __esm({
+  "../agent-sdk/dist/chunk-PIZGJG3H.js"() {
     "use strict";
     init_chunk_C46UG6GQ();
-    init_chunk_KUJYDAWD();
+    init_chunk_NDIBNZ5J();
   }
 });
 
@@ -218225,7 +218261,7 @@ var init_chunk_RDGOGAQ5 = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-BYDG6ESH.js
+// ../agent-sdk/dist/chunk-4ODMO275.js
 async function checkLocalProvider(name) {
   try {
     const provider = await resolveContainerProvider(name);
@@ -218264,10 +218300,10 @@ async function handleGetProviderStatus(request2) {
   });
 }
 var LOCAL_PROVIDERS, CLOUD_PROVIDERS, CLOUD_KEY_MAP;
-var init_chunk_BYDG6ESH = __esm({
-  "../agent-sdk/dist/chunk-BYDG6ESH.js"() {
+var init_chunk_4ODMO275 = __esm({
+  "../agent-sdk/dist/chunk-4ODMO275.js"() {
     "use strict";
-    init_chunk_KUJYDAWD();
+    init_chunk_NDIBNZ5J();
     init_chunk_WPK4ZPMG();
     init_chunk_V7MTIMPB();
     LOCAL_PROVIDERS = ["docker", "apple-container", "podman"];
@@ -218283,7 +218319,7 @@ var init_chunk_BYDG6ESH = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-ZRTU5LSJ.js
+// ../agent-sdk/dist/chunk-M24MZZDW.js
 function assertSessionTenant(auth, sessionId) {
   const row = getDb().prepare(`SELECT tenant_id FROM sessions WHERE id = ?`).get(sessionId);
   if (row) {
@@ -218358,11 +218394,11 @@ function handleDeleteResource(request2, sessionId, resourceId) {
   });
 }
 var MAX_RESOURCES_PER_SESSION, AddResourceSchema;
-var init_chunk_ZRTU5LSJ = __esm({
-  "../agent-sdk/dist/chunk-ZRTU5LSJ.js"() {
+var init_chunk_M24MZZDW = __esm({
+  "../agent-sdk/dist/chunk-M24MZZDW.js"() {
     "use strict";
     init_chunk_23UKWXJH();
-    init_chunk_KUJYDAWD();
+    init_chunk_NDIBNZ5J();
     init_chunk_E7DD7F7J();
     init_chunk_3NK6YTA5();
     init_chunk_5EKQBD2H();
@@ -218683,7 +218719,7 @@ var init_vaults = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-RRYSUT4G.js
+// ../agent-sdk/dist/chunk-RONZU5AQ.js
 function getAgentTenantId(id) {
   const row = getDb().prepare(`SELECT tenant_id FROM agents WHERE id = ?`).get(id);
   return row?.tenant_id;
@@ -219130,15 +219166,15 @@ function parseMs(v2) {
   return Number.isFinite(t2) ? t2 : void 0;
 }
 var ALLOWED_STATUSES, AgentRef, ResourceSchema, CreateSchema, UpdateSchema;
-var init_chunk_RRYSUT4G = __esm({
-  "../agent-sdk/dist/chunk-RRYSUT4G.js"() {
+var init_chunk_RONZU5AQ = __esm({
+  "../agent-sdk/dist/chunk-RONZU5AQ.js"() {
     "use strict";
     init_chunk_R6V363NP();
     init_chunk_L2RX552S();
     init_chunk_23UKWXJH();
     init_chunk_DC2UMEQH();
     init_chunk_C6AXM3M7();
-    init_chunk_KUJYDAWD();
+    init_chunk_NDIBNZ5J();
     init_chunk_JCW3ZRES();
     init_chunk_H6TQGV4L();
     init_chunk_E7DD7F7J();
@@ -219198,7 +219234,7 @@ var init_chunk_RRYSUT4G = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-UKN2FATI.js
+// ../agent-sdk/dist/chunk-I5X7ERAU.js
 function maskSecret(value) {
   if (!value) return "";
   if (value.length <= 12) return "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022";
@@ -219233,10 +219269,10 @@ function handleGetSetting(request2, key) {
   });
 }
 var NON_SECRET_KEYS, ALLOWED_KEYS, SECRET_KEYS;
-var init_chunk_UKN2FATI = __esm({
-  "../agent-sdk/dist/chunk-UKN2FATI.js"() {
+var init_chunk_I5X7ERAU = __esm({
+  "../agent-sdk/dist/chunk-I5X7ERAU.js"() {
     "use strict";
-    init_chunk_KUJYDAWD();
+    init_chunk_NDIBNZ5J();
     init_chunk_V7MTIMPB();
     init_chunk_EZYKRG4W();
     NON_SECRET_KEYS = /* @__PURE__ */ new Set([
@@ -219278,7 +219314,7 @@ var init_chunk_UKN2FATI = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-UKK256CD.js
+// ../agent-sdk/dist/chunk-D4ONR4AQ.js
 function handleBatch(request2) {
   return routeWrap(request2, async () => {
     const body = await request2.json();
@@ -219305,11 +219341,11 @@ function handleBatch(request2) {
   });
 }
 var OperationSchema, BatchSchema;
-var init_chunk_UKK256CD = __esm({
-  "../agent-sdk/dist/chunk-UKK256CD.js"() {
+var init_chunk_D4ONR4AQ = __esm({
+  "../agent-sdk/dist/chunk-D4ONR4AQ.js"() {
     "use strict";
     init_chunk_7GG3FEK2();
-    init_chunk_KUJYDAWD();
+    init_chunk_NDIBNZ5J();
     init_chunk_EZYKRG4W();
     init_zod();
     OperationSchema = external_exports.object({
@@ -219323,7 +219359,7 @@ var init_chunk_UKK256CD = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-PQFQAUDE.js
+// ../agent-sdk/dist/chunk-2RQCMWUR.js
 function getVaultTenantId(id) {
   const row = getDb().prepare(`SELECT tenant_id FROM vaults WHERE id = ?`).get(id);
   return row?.tenant_id;
@@ -219437,11 +219473,11 @@ function handleDeleteEntry(request2, vaultId, key) {
   });
 }
 var CreateVaultSchema, PutEntrySchema;
-var init_chunk_PQFQAUDE = __esm({
-  "../agent-sdk/dist/chunk-PQFQAUDE.js"() {
+var init_chunk_2RQCMWUR = __esm({
+  "../agent-sdk/dist/chunk-2RQCMWUR.js"() {
     "use strict";
     init_chunk_23UKWXJH();
-    init_chunk_KUJYDAWD();
+    init_chunk_NDIBNZ5J();
     init_chunk_ZVXIZ2JD();
     init_chunk_ZTH5JRZG();
     init_chunk_6POQAFEC();
@@ -219464,7 +219500,7 @@ var init_chunk_PQFQAUDE = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-N6JXE6F7.js
+// ../agent-sdk/dist/chunk-6LLDT3F3.js
 function handleCreateCredential(request2, vaultId) {
   return routeWrap(request2, async ({ auth }) => {
     loadVaultForCaller(auth, vaultId);
@@ -219597,11 +219633,11 @@ function handleDeleteCredential(request2, vaultId, credentialId) {
   });
 }
 var TokenEndpointAuthSchema, OAuthRefreshSchema, StaticBearerAuthSchema, McpOauthAuthSchema, CreateCredentialSchema, UpdateStaticBearerAuthSchema, UpdateMcpOauthAuthSchema, UpdateAuthSchema, UpdateCredentialSchema;
-var init_chunk_N6JXE6F7 = __esm({
-  "../agent-sdk/dist/chunk-N6JXE6F7.js"() {
+var init_chunk_6LLDT3F3 = __esm({
+  "../agent-sdk/dist/chunk-6LLDT3F3.js"() {
     "use strict";
-    init_chunk_PQFQAUDE();
-    init_chunk_KUJYDAWD();
+    init_chunk_2RQCMWUR();
+    init_chunk_NDIBNZ5J();
     init_chunk_L5RW66H5();
     init_chunk_EZYKRG4W();
     init_zod();
@@ -219751,7 +219787,7 @@ var init_chunk_F27XQZ2O = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-2HHJMH7Y.js
+// ../agent-sdk/dist/chunk-JID2FSDR.js
 function getEnvironmentTenantId2(id) {
   const row = getDb().prepare(`SELECT tenant_id FROM environments WHERE id = ?`).get(id);
   return row?.tenant_id;
@@ -219906,12 +219942,12 @@ function handleUpdateEnvironment(request2, id) {
   });
 }
 var PackagesSchema, NetworkingSchema, ConfigSchema, CreateSchema2, UpdateSchema2;
-var init_chunk_2HHJMH7Y = __esm({
-  "../agent-sdk/dist/chunk-2HHJMH7Y.js"() {
+var init_chunk_JID2FSDR = __esm({
+  "../agent-sdk/dist/chunk-JID2FSDR.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_C6AXM3M7();
-    init_chunk_KUJYDAWD();
+    init_chunk_NDIBNZ5J();
     init_chunk_JCW3ZRES();
     init_chunk_E7DD7F7J();
     init_chunk_WPK4ZPMG();
@@ -219973,7 +220009,7 @@ __export(driver_exports, {
 var init_driver = __esm({
   "../agent-sdk/dist/sessions/driver.js"() {
     "use strict";
-    init_chunk_5CCJVWDQ();
+    init_chunk_QB23B7L5();
     init_chunk_PJZ5TQYW();
     init_chunk_AU4NAQGA();
     init_chunk_H6TQGV4L();
@@ -220054,7 +220090,7 @@ var init_driver = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-IQFCD5LB.js
+// ../agent-sdk/dist/chunk-HZNJ5U2B.js
 function assertSessionTenant2(auth, sessionId) {
   const row = getDb().prepare(`SELECT tenant_id FROM sessions WHERE id = ?`).get(sessionId);
   if (row) {
@@ -220581,17 +220617,17 @@ function handleListEvents(request2, sessionId) {
   });
 }
 var teeLog, activeTees, MAX_TEE_REENTRIES, TextBlock2, UserMessage, UserInterrupt, UserToolConfirmation, UserCustomToolResult, UserDefineOutcome, UserEvent, BatchSchema2;
-var init_chunk_IQFCD5LB = __esm({
-  "../agent-sdk/dist/chunk-IQFCD5LB.js"() {
+var init_chunk_HZNJ5U2B = __esm({
+  "../agent-sdk/dist/chunk-HZNJ5U2B.js"() {
     "use strict";
     init_chunk_PIJKJNGB();
     init_chunk_L2RX552S();
     init_chunk_23UKWXJH();
     init_chunk_DC2UMEQH();
     init_chunk_SUGSHXND();
-    init_chunk_KUJYDAWD();
+    init_chunk_NDIBNZ5J();
     init_chunk_JCW3ZRES();
-    init_chunk_5CCJVWDQ();
+    init_chunk_QB23B7L5();
     init_chunk_2PPB644A();
     init_chunk_E7DD7F7J();
     init_chunk_LAWTTG2E();
@@ -220647,7 +220683,7 @@ var init_chunk_IQFCD5LB = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-OZ4GCKDV.js
+// ../agent-sdk/dist/chunk-XNDCK2A7.js
 function assertFileTenantByScope(auth, scopeType, scopeId) {
   if (!scopeId || scopeType !== "session") {
     if (!auth.isGlobalAdmin) throw notFound("file not found");
@@ -220782,30 +220818,30 @@ function handleDeleteFile(request2, fileId) {
     return jsonOk(result);
   });
 }
-var init_chunk_OZ4GCKDV = __esm({
-  "../agent-sdk/dist/chunk-OZ4GCKDV.js"() {
+var init_chunk_XNDCK2A7 = __esm({
+  "../agent-sdk/dist/chunk-XNDCK2A7.js"() {
     "use strict";
     init_chunk_STPT3SWU();
     init_chunk_A3KHFT7I();
     init_chunk_23UKWXJH();
-    init_chunk_KUJYDAWD();
+    init_chunk_NDIBNZ5J();
     init_chunk_6POQAFEC();
     init_chunk_EZYKRG4W();
     init_client();
   }
 });
 
-// ../agent-sdk/dist/chunk-GYX4GTAJ.js
+// ../agent-sdk/dist/chunk-R2RI5S3Q.js
 function handleGetLicense(request2) {
   return routeWrap(request2, async () => {
     return jsonOk(getLicenseInfo());
   });
 }
-var init_chunk_GYX4GTAJ = __esm({
-  "../agent-sdk/dist/chunk-GYX4GTAJ.js"() {
+var init_chunk_R2RI5S3Q = __esm({
+  "../agent-sdk/dist/chunk-R2RI5S3Q.js"() {
     "use strict";
     init_chunk_2N2KL4KM();
-    init_chunk_KUJYDAWD();
+    init_chunk_NDIBNZ5J();
   }
 });
 
@@ -220824,7 +220860,7 @@ var init_models = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-BG75HBSJ.js
+// ../agent-sdk/dist/chunk-7QLYJIKK.js
 function getAgentTenantId3(id) {
   const row = getDb().prepare(`SELECT tenant_id FROM agents WHERE id = ?`).get(id);
   return row?.tenant_id;
@@ -220993,11 +221029,11 @@ function handleDeleteAgent(request2, id) {
   });
 }
 var SkillSchema, ToolSchema, McpServerSchema, ModelConfigSchema2, CreateSchema3, UpdateSchema3;
-var init_chunk_BG75HBSJ = __esm({
-  "../agent-sdk/dist/chunk-BG75HBSJ.js"() {
+var init_chunk_7QLYJIKK = __esm({
+  "../agent-sdk/dist/chunk-7QLYJIKK.js"() {
     "use strict";
     init_chunk_23UKWXJH();
-    init_chunk_KUJYDAWD();
+    init_chunk_NDIBNZ5J();
     init_chunk_JCW3ZRES();
     init_chunk_E7DD7F7J();
     init_chunk_ZTH5JRZG();
@@ -221096,7 +221132,7 @@ var init_chunk_BG75HBSJ = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-OPYXKFR3.js
+// ../agent-sdk/dist/chunk-W5QHJGLU.js
 function toView3(row) {
   return row;
 }
@@ -221267,13 +221303,13 @@ function handleGetApiKeyActivity(request2, id) {
   });
 }
 var ScopeSchema, PermissionsSchema, CreateBody2, PatchBody3;
-var init_chunk_OPYXKFR3 = __esm({
-  "../agent-sdk/dist/chunk-OPYXKFR3.js"() {
+var init_chunk_W5QHJGLU = __esm({
+  "../agent-sdk/dist/chunk-W5QHJGLU.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_KLN6HPYM();
     init_chunk_2N2KL4KM();
-    init_chunk_KUJYDAWD();
+    init_chunk_NDIBNZ5J();
     init_chunk_USYY3L7G();
     init_chunk_3NK6YTA5();
     init_chunk_6POQAFEC();
@@ -221300,7 +221336,7 @@ var init_chunk_OPYXKFR3 = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-KE6ILZ5Z.js
+// ../agent-sdk/dist/chunk-WOWJPX7E.js
 function parseMs2(v2) {
   if (!v2) return void 0;
   const n = Number(v2);
@@ -221352,12 +221388,12 @@ function handleListAudit(request2) {
   });
 }
 var VALID_OUTCOMES;
-var init_chunk_KE6ILZ5Z = __esm({
-  "../agent-sdk/dist/chunk-KE6ILZ5Z.js"() {
+var init_chunk_WOWJPX7E = __esm({
+  "../agent-sdk/dist/chunk-WOWJPX7E.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_KLN6HPYM();
-    init_chunk_KUJYDAWD();
+    init_chunk_NDIBNZ5J();
     init_chunk_EZYKRG4W();
     VALID_OUTCOMES = /* @__PURE__ */ new Set(["success", "denied", "failure"]);
   }
@@ -221463,41 +221499,41 @@ __export(handlers_exports, {
 var init_handlers3 = __esm({
   "../agent-sdk/dist/handlers/index.js"() {
     "use strict";
-    init_chunk_S4USSG25();
-    init_chunk_ZIGTEOKH();
-    init_chunk_LE3XJK5J();
+    init_chunk_LVDYHS7N();
+    init_chunk_CD7SK6XL();
+    init_chunk_P6RXTR4X();
     init_chunk_P3PHXVMA();
-    init_chunk_DHSEH44K();
-    init_chunk_KOLBALYY();
-    init_chunk_FVVK6ZOP();
-    init_chunk_CTR6EUXT();
+    init_chunk_MKATGKGM();
+    init_chunk_PCJTXF5I();
+    init_chunk_O3IPK2YQ();
+    init_chunk_2PNZELEJ();
     init_chunk_FZFICXAN();
-    init_chunk_53XO5VOW();
-    init_chunk_YVNA2TSG();
-    init_chunk_33T7CXNO();
-    init_chunk_R7DSCB4M();
+    init_chunk_TGTPTLBM();
+    init_chunk_Y35PFFL2();
+    init_chunk_CZZP4UTX();
+    init_chunk_PIZGJG3H();
     init_chunk_C46UG6GQ();
     init_chunk_RDGOGAQ5();
-    init_chunk_BYDG6ESH();
-    init_chunk_ZRTU5LSJ();
-    init_chunk_RRYSUT4G();
+    init_chunk_4ODMO275();
+    init_chunk_M24MZZDW();
+    init_chunk_RONZU5AQ();
     init_chunk_R6V363NP();
-    init_chunk_UKN2FATI();
-    init_chunk_UKK256CD();
-    init_chunk_N6JXE6F7();
-    init_chunk_PQFQAUDE();
+    init_chunk_I5X7ERAU();
+    init_chunk_D4ONR4AQ();
+    init_chunk_6LLDT3F3();
+    init_chunk_2RQCMWUR();
     init_chunk_F27XQZ2O();
-    init_chunk_2HHJMH7Y();
-    init_chunk_IQFCD5LB();
+    init_chunk_JID2FSDR();
+    init_chunk_HZNJ5U2B();
     init_chunk_PIJKJNGB();
-    init_chunk_OZ4GCKDV();
-    init_chunk_GYX4GTAJ();
+    init_chunk_XNDCK2A7();
+    init_chunk_R2RI5S3Q();
     init_chunk_6GP5IKXE();
     init_chunk_H7UKW666();
     init_chunk_STPT3SWU();
-    init_chunk_BG75HBSJ();
-    init_chunk_OPYXKFR3();
-    init_chunk_KE6ILZ5Z();
+    init_chunk_7QLYJIKK();
+    init_chunk_W5QHJGLU();
+    init_chunk_WOWJPX7E();
     init_chunk_L2RX552S();
     init_chunk_A3KHFT7I();
     init_chunk_23UKWXJH();
@@ -221511,14 +221547,14 @@ var init_handlers3 = __esm({
     init_chunk_2N2KL4KM();
     init_chunk_7GG3FEK2();
     init_chunk_C6AXM3M7();
-    init_chunk_KUJYDAWD();
+    init_chunk_NDIBNZ5J();
     init_chunk_D2XITRN6();
     init_chunk_WQARLGBG();
     init_chunk_JCW3ZRES();
     init_chunk_W6WKXFHN();
     init_chunk_HVUWXUUI();
-    init_chunk_FLZY57OW();
-    init_chunk_5CCJVWDQ();
+    init_chunk_H6HEGKCW();
+    init_chunk_QB23B7L5();
     init_chunk_PJZ5TQYW();
     init_chunk_AU4NAQGA();
     init_chunk_H6TQGV4L();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentstep/gateway",
-  "version": "0.4.34",
+  "version": "0.4.36",
   "description": "Self-hosted, open-source, Anthropic Managed Agents-compatible. CLI + web UI for running AI agents in sandboxed environments.",
   "keywords": [
     "anthropic",