@agentstep/gateway 0.5.18 → 0.5.20

package/dist/gateway.js

@@ -156436,7 +156436,7 @@ var init_threads = __esm({
   "../agent-sdk/dist/sessions/threads.js"() {
     "use strict";
     init_chunk_2Z56TPBL();
-    init_chunk_Q4ZKB45D();
+    init_chunk_GCMVPJYR();
     init_chunk_PJZ5TQYW();
     init_chunk_AU4NAQGA();
     init_chunk_DBFPJSOY();
@@ -156520,7 +156520,7 @@ var init_threads = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-Q4ZKB45D.js
+// ../agent-sdk/dist/chunk-GCMVPJYR.js
 function formatStopReason(reason, eventIds) {
   if (reason === "custom_tool_call") {
     return { type: "requires_action", event_ids: eventIds ?? [] };
@@ -156995,6 +156995,7 @@ ${turnBuild.stdin}`;
     if (permissionPollTimer) clearInterval(permissionPollTimer);
     if (toolBridgePollTimer) clearInterval(toolBridgePollTimer);
     getPendingToolBridgeCalls().delete(sessionId);
+    customToolCallCounts.delete(sessionId);
     runtime2.inFlightRuns.delete(sessionId);
   }
   if (aborted) {
@@ -157309,6 +157310,11 @@ function getPendingToolBridgeCalls() {
 }
 async function checkToolBridgeSentinel(sessionId, sandboxName, provider, secrets, trace3) {
   if (pendingToolBridgeCalls.has(sessionId)) return;
+  const callCount = customToolCallCounts.get(sessionId) ?? 0;
+  if (callCount >= MAX_CUSTOM_TOOL_CALLS_PER_TURN) {
+    console.warn(`[driver] ${sessionId}: custom tool call limit reached (${MAX_CUSTOM_TOOL_CALLS_PER_TURN}), skipping`);
+    return;
+  }
   try {
     const result = await provider.exec(
       sandboxName,
@@ -157343,7 +157349,8 @@ async function checkToolBridgeSentinel(sessionId, sandboxName, provider, secrets
     return;
   }
   pendingToolBridgeCalls.add(sessionId);
-  console.log(`[driver] ${sessionId} custom tool call: ${request2.name} (${request2.tool_use_id})`);
+  customToolCallCounts.set(sessionId, (customToolCallCounts.get(sessionId) ?? 0) + 1);
+  console.log(`[driver] ${sessionId} custom tool call #${customToolCallCounts.get(sessionId)}: ${request2.name} (${request2.tool_use_id})`);
   appendEvent2(sessionId, {
     type: "agent.custom_tool_use",
     payload: {
@@ -157367,7 +157374,11 @@ async function writeToolBridgeResponse(sessionId, content) {
   const env3 = getEnvironment(row.environment_id);
   const provider = await resolveProvider({ envConfigProvider: env3?.config?.provider });
   const bridgeSecrets = getBySession(sessionId)?.vaultSecrets;
-  const response = JSON.stringify({ content });
+  const augmentedContent = [
+    ...Array.isArray(content) ? content : [],
+    { type: "text", text: "\n[Tool result delivered. Your turn is complete \u2014 do not call this tool again.]" }
+  ];
+  const response = JSON.stringify({ content: augmentedContent });
   try {
     await provider.exec(
       row.sandbox_name,
@@ -157385,9 +157396,9 @@ async function writeToolBridgeResponse(sessionId, content) {
   }
   pendingToolBridgeCalls.delete(sessionId);
 }
-var gd, pendingToolBridgeCalls;
-var init_chunk_Q4ZKB45D = __esm({
-  "../agent-sdk/dist/chunk-Q4ZKB45D.js"() {
+var gd, pendingToolBridgeCalls, customToolCallCounts, MAX_CUSTOM_TOOL_CALLS_PER_TURN;
+var init_chunk_GCMVPJYR = __esm({
+  "../agent-sdk/dist/chunk-GCMVPJYR.js"() {
     "use strict";
     init_chunk_PJZ5TQYW();
     init_chunk_AU4NAQGA();
@@ -157417,10 +157428,12 @@ var init_chunk_Q4ZKB45D = __esm({
     init_clock();
     gd = globalThis;
     pendingToolBridgeCalls = /* @__PURE__ */ new Set();
+    customToolCallCounts = /* @__PURE__ */ new Map();
+    MAX_CUSTOM_TOOL_CALLS_PER_TURN = 10;
   }
 });
 
-// ../agent-sdk/dist/chunk-VNFFC3QW.js
+// ../agent-sdk/dist/chunk-R2CJ7DHL.js
 async function startWorker(opts) {
   const pollInterval = opts.pollIntervalMs ?? 5e3;
   const workerId = opts.workerId ?? `worker-${process.pid}`;
@@ -157470,11 +157483,11 @@ async function startWorker(opts) {
   }
   console.log("[worker] stopped");
 }
-var init_chunk_VNFFC3QW = __esm({
-  "../agent-sdk/dist/chunk-VNFFC3QW.js"() {
+var init_chunk_R2CJ7DHL = __esm({
+  "../agent-sdk/dist/chunk-R2CJ7DHL.js"() {
     "use strict";
     init_chunk_D2GADI73();
-    init_chunk_Q4ZKB45D();
+    init_chunk_GCMVPJYR();
   }
 });
 
@@ -217487,7 +217500,7 @@ var init_rate_limit = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-YONYO3IP.js
+// ../agent-sdk/dist/chunk-O23CGBUN.js
 import path10 from "path";
 async function ensureInitialized() {
   if (g15.__caInitPromise) return g15.__caInitPromise;
@@ -217711,11 +217724,11 @@ async function rebuildContainerPool() {
   }
 }
 var g15;
-var init_chunk_YONYO3IP = __esm({
-  "../agent-sdk/dist/chunk-YONYO3IP.js"() {
+var init_chunk_O23CGBUN = __esm({
+  "../agent-sdk/dist/chunk-O23CGBUN.js"() {
     "use strict";
     init_chunk_MTRTBT7L();
-    init_chunk_Q4ZKB45D();
+    init_chunk_GCMVPJYR();
     init_chunk_7Z6LTBYQ();
     init_chunk_FV2XE3DX();
     init_chunk_W6QYWXOZ();
@@ -217740,7 +217753,7 @@ var init_chunk_YONYO3IP = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-N2VPAG2M.js
+// ../agent-sdk/dist/chunk-HZY43FS6.js
 async function routeWrap(request2, handler) {
   const startedAt = Date.now();
   let status = 500;
@@ -217797,13 +217810,13 @@ function decodeCursor(page) {
     return void 0;
   }
 }
-var init_chunk_N2VPAG2M = __esm({
-  "../agent-sdk/dist/chunk-N2VPAG2M.js"() {
+var init_chunk_HZY43FS6 = __esm({
+  "../agent-sdk/dist/chunk-HZY43FS6.js"() {
     "use strict";
     init_chunk_D2XITRN6();
     init_chunk_BQ5MWNWN();
     init_chunk_HVUWXUUI();
-    init_chunk_YONYO3IP();
+    init_chunk_O23CGBUN();
     init_chunk_3MQ2FWXS();
     init_chunk_EZYKRG4W();
   }
@@ -217929,7 +217942,7 @@ var init_dist2 = __esm({
   "../agent-sdk/dist/index.js"() {
     "use strict";
     init_chunk_VFSOYCGN();
-    init_chunk_VNFFC3QW();
+    init_chunk_R2CJ7DHL();
     init_chunk_I2WVMCYN();
     init_chunk_CBPO2P4I();
     init_chunk_7346CKTF();
@@ -217942,15 +217955,15 @@ var init_dist2 = __esm({
     init_chunk_2N2KL4KM();
     init_chunk_STTBYGOU();
     init_chunk_B5ZDEPDY();
-    init_chunk_N2VPAG2M();
+    init_chunk_HZY43FS6();
     init_chunk_D2XITRN6();
     init_chunk_BQ5MWNWN();
     init_chunk_5LDBCBOR();
     init_chunk_W6WKXFHN();
     init_chunk_HVUWXUUI();
-    init_chunk_YONYO3IP();
+    init_chunk_O23CGBUN();
     init_chunk_MTRTBT7L();
-    init_chunk_Q4ZKB45D();
+    init_chunk_GCMVPJYR();
     init_chunk_PJZ5TQYW();
     init_chunk_AU4NAQGA();
     init_chunk_DBFPJSOY();
@@ -218097,7 +218110,7 @@ var init_chunk_23UKWXJH = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-74XKSG7K.js
+// ../agent-sdk/dist/chunk-2TGRXJTJ.js
 function handleCreateTenant(request2) {
   return routeWrap(request2, async ({ auth, request: req }) => {
     requireFeature("tenancy", "multi-tenancy");
@@ -218196,13 +218209,13 @@ function handleArchiveTenant(request2, id) {
   });
 }
 var CreateBody, PatchBody;
-var init_chunk_74XKSG7K = __esm({
-  "../agent-sdk/dist/chunk-74XKSG7K.js"() {
+var init_chunk_2TGRXJTJ = __esm({
+  "../agent-sdk/dist/chunk-2TGRXJTJ.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_PDUQCDIO();
     init_chunk_2N2KL4KM();
-    init_chunk_N2VPAG2M();
+    init_chunk_HZY43FS6();
     init_chunk_CD2FQVQR();
     init_chunk_EZYKRG4W();
     init_zod();
@@ -218216,7 +218229,7 @@ var init_chunk_74XKSG7K = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-BL3L2Z6R.js
+// ../agent-sdk/dist/chunk-FBAAKIZL.js
 function loadSession(auth, sessionId) {
   const row = getDb().prepare(`SELECT tenant_id FROM sessions WHERE id = ?`).get(sessionId);
   if (!row) throw notFound(`session ${sessionId} not found`);
@@ -218341,12 +218354,12 @@ data: ${JSON.stringify(evt)}
     });
   });
 }
-var init_chunk_BL3L2Z6R = __esm({
-  "../agent-sdk/dist/chunk-BL3L2Z6R.js"() {
+var init_chunk_FBAAKIZL = __esm({
+  "../agent-sdk/dist/chunk-FBAAKIZL.js"() {
     "use strict";
     init_chunk_2Z56TPBL();
     init_chunk_23UKWXJH();
-    init_chunk_N2VPAG2M();
+    init_chunk_HZY43FS6();
     init_chunk_X23OAFFE();
     init_chunk_MTB7SCZ5();
     init_chunk_PRWWTLPR();
@@ -218398,7 +218411,7 @@ var init_chunk_4MKJB6U2 = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-NEUBT5MP.js
+// ../agent-sdk/dist/chunk-TIYUIRUG.js
 function buildSpanTree(events2) {
   const nodes = /* @__PURE__ */ new Map();
   const openStarts = /* @__PURE__ */ new Map();
@@ -218582,11 +218595,11 @@ function handleExportTrace(request2, traceId) {
     return jsonOk(result, result.ok ? 200 : 502);
   });
 }
-var init_chunk_NEUBT5MP = __esm({
-  "../agent-sdk/dist/chunk-NEUBT5MP.js"() {
+var init_chunk_TIYUIRUG = __esm({
+  "../agent-sdk/dist/chunk-TIYUIRUG.js"() {
     "use strict";
     init_chunk_4MKJB6U2();
-    init_chunk_N2VPAG2M();
+    init_chunk_HZY43FS6();
     init_chunk_7Z6LTBYQ();
     init_chunk_PRWWTLPR();
     init_chunk_EZYKRG4W();
@@ -219173,7 +219186,7 @@ agentstep skills install \${n}
   }
 });
 
-// ../agent-sdk/dist/chunk-TOUDZT55.js
+// ../agent-sdk/dist/chunk-VHMGFHT6.js
 function handleAddUpstreamKey(request2) {
   return routeWrap(request2, async ({ auth, request: req }) => {
     requireFeature("upstream_pool", "upstream key pool");
@@ -219265,15 +219278,15 @@ function handleDeleteUpstreamKey(request2, id) {
   });
 }
 var AddBody, PatchBody2;
-var init_chunk_TOUDZT55 = __esm({
-  "../agent-sdk/dist/chunk-TOUDZT55.js"() {
+var init_chunk_VHMGFHT6 = __esm({
+  "../agent-sdk/dist/chunk-VHMGFHT6.js"() {
     "use strict";
     init_chunk_HHS6EHSG();
     init_chunk_G7Y5YGLE();
     init_chunk_23UKWXJH();
     init_chunk_PDUQCDIO();
     init_chunk_2N2KL4KM();
-    init_chunk_N2VPAG2M();
+    init_chunk_HZY43FS6();
     init_chunk_EZYKRG4W();
     init_zod();
     AddBody = external_exports.object({
@@ -219287,7 +219300,7 @@ var init_chunk_TOUDZT55 = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-PXC56PKA.js
+// ../agent-sdk/dist/chunk-RKGOAHGI.js
 function handleWhoami(request2) {
   return routeWrap(request2, async ({ auth }) => {
     return jsonOk({
@@ -219298,14 +219311,14 @@ function handleWhoami(request2) {
     });
   });
 }
-var init_chunk_PXC56PKA = __esm({
-  "../agent-sdk/dist/chunk-PXC56PKA.js"() {
+var init_chunk_RKGOAHGI = __esm({
+  "../agent-sdk/dist/chunk-RKGOAHGI.js"() {
     "use strict";
-    init_chunk_N2VPAG2M();
+    init_chunk_HZY43FS6();
   }
 });
 
-// ../agent-sdk/dist/chunk-CFEE6ITA.js
+// ../agent-sdk/dist/chunk-CDPYDM7U.js
 function assertSelfHostedEnv(envId) {
   const env3 = getEnvironment(envId);
   if (!env3) throw notFound(`environment not found: ${envId}`);
@@ -219407,11 +219420,11 @@ function handleStopWork(request2, envId, workId) {
   });
 }
 var UpdateWorkSchema, AckWorkSchema, StopWorkSchema;
-var init_chunk_CFEE6ITA = __esm({
-  "../agent-sdk/dist/chunk-CFEE6ITA.js"() {
+var init_chunk_CDPYDM7U = __esm({
+  "../agent-sdk/dist/chunk-CDPYDM7U.js"() {
     "use strict";
     init_chunk_D2GADI73();
-    init_chunk_N2VPAG2M();
+    init_chunk_HZY43FS6();
     init_chunk_3ORQ2THI();
     init_chunk_EZYKRG4W();
     init_zod();
@@ -219446,7 +219459,7 @@ var init_chunk_3FLQ7KZP = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-3OOBDE2Q.js
+// ../agent-sdk/dist/chunk-ZGUZK6HI.js
 async function checkLocalProvider(name) {
   try {
     const provider = await resolveContainerProvider(name);
@@ -219485,10 +219498,10 @@ async function handleGetProviderStatus(request2) {
   });
 }
 var LOCAL_PROVIDERS, CLOUD_PROVIDERS, CLOUD_KEY_MAP;
-var init_chunk_3OOBDE2Q = __esm({
-  "../agent-sdk/dist/chunk-3OOBDE2Q.js"() {
+var init_chunk_ZGUZK6HI = __esm({
+  "../agent-sdk/dist/chunk-ZGUZK6HI.js"() {
     "use strict";
-    init_chunk_N2VPAG2M();
+    init_chunk_HZY43FS6();
     init_chunk_JXU6SA6S();
     init_chunk_WKGJQIRC();
     LOCAL_PROVIDERS = ["docker", "apple-container", "podman"];
@@ -219504,7 +219517,7 @@ var init_chunk_3OOBDE2Q = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-BOKR4447.js
+// ../agent-sdk/dist/chunk-E6RIAAMX.js
 function assertSessionTenant(auth, sessionId) {
   const row = getDb().prepare(`SELECT tenant_id FROM sessions WHERE id = ?`).get(sessionId);
   if (row) {
@@ -219592,11 +219605,11 @@ function handleDeleteResource(request2, sessionId, resourceId) {
   });
 }
 var MAX_RESOURCES_PER_SESSION, AddResourceSchema, UpdateResourceSchema;
-var init_chunk_BOKR4447 = __esm({
-  "../agent-sdk/dist/chunk-BOKR4447.js"() {
+var init_chunk_E6RIAAMX = __esm({
+  "../agent-sdk/dist/chunk-E6RIAAMX.js"() {
     "use strict";
     init_chunk_23UKWXJH();
-    init_chunk_N2VPAG2M();
+    init_chunk_HZY43FS6();
     init_chunk_YCL5RHEC();
     init_chunk_MTB7SCZ5();
     init_chunk_UROFA6OZ();
@@ -219920,7 +219933,7 @@ var init_vaults = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-EBMVU25T.js
+// ../agent-sdk/dist/chunk-JR6KNUYN.js
 function getAgentTenantId(id) {
   const row = getDb().prepare(`SELECT tenant_id FROM agents WHERE id = ?`).get(id);
   return row?.tenant_id;
@@ -220398,8 +220411,8 @@ function parseMs(v2) {
   return Number.isFinite(t2) ? t2 : void 0;
 }
 var ALLOWED_STATUSES, AgentRef, ResourceSchema, CreateSchema, UpdateSchema;
-var init_chunk_EBMVU25T = __esm({
-  "../agent-sdk/dist/chunk-EBMVU25T.js"() {
+var init_chunk_JR6KNUYN = __esm({
+  "../agent-sdk/dist/chunk-JR6KNUYN.js"() {
     "use strict";
     init_chunk_75AAVCJ2();
     init_chunk_LOWHDHDD();
@@ -220407,7 +220420,7 @@ var init_chunk_EBMVU25T = __esm({
     init_chunk_DC2UMEQH();
     init_chunk_T3CXZ2BE();
     init_chunk_B5ZDEPDY();
-    init_chunk_N2VPAG2M();
+    init_chunk_HZY43FS6();
     init_chunk_5LDBCBOR();
     init_chunk_H6TQGV4L();
     init_chunk_YCL5RHEC();
@@ -220471,7 +220484,7 @@ var init_chunk_EBMVU25T = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-R7TNAZCE.js
+// ../agent-sdk/dist/chunk-JIHEUBWW.js
 function maskSecret(value) {
   if (!value) return "";
   if (value.length <= 12) return "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022";
@@ -220506,10 +220519,10 @@ function handleGetSetting(request2, key) {
   });
 }
 var NON_SECRET_KEYS, ALLOWED_KEYS, SECRET_KEYS;
-var init_chunk_R7TNAZCE = __esm({
-  "../agent-sdk/dist/chunk-R7TNAZCE.js"() {
+var init_chunk_JIHEUBWW = __esm({
+  "../agent-sdk/dist/chunk-JIHEUBWW.js"() {
     "use strict";
-    init_chunk_N2VPAG2M();
+    init_chunk_HZY43FS6();
     init_chunk_WKGJQIRC();
     init_chunk_EZYKRG4W();
     NON_SECRET_KEYS = /* @__PURE__ */ new Set([
@@ -220715,7 +220728,7 @@ var init_chunk_YEJFXJHR = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-3PBXII4J.js
+// ../agent-sdk/dist/chunk-ONB22QYA.js
 import { inflateRawSync } from "zlib";
 function extractFromZipRaw(buffer) {
   const files2 = /* @__PURE__ */ new Map();
@@ -220894,12 +220907,12 @@ function handleDeleteSkillVersion(request2, skillId, version3) {
   });
 }
 var TEXT_EXTENSIONS, CreateSkillSchema, CreateVersionSchema;
-var init_chunk_3PBXII4J = __esm({
-  "../agent-sdk/dist/chunk-3PBXII4J.js"() {
+var init_chunk_ONB22QYA = __esm({
+  "../agent-sdk/dist/chunk-ONB22QYA.js"() {
     "use strict";
     init_chunk_YEJFXJHR();
     init_chunk_23UKWXJH();
-    init_chunk_N2VPAG2M();
+    init_chunk_HZY43FS6();
     init_chunk_EZYKRG4W();
     init_zod();
     TEXT_EXTENSIONS = /* @__PURE__ */ new Set([
@@ -221214,7 +221227,7 @@ var init_chunk_PJTGQVKB = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-QDZBUJNK.js
+// ../agent-sdk/dist/chunk-BYVKGBSJ.js
 async function handleGetSkillsCatalog(request2) {
   return routeWrap(request2, async ({ request: req }) => {
     const url2 = new URL(req.url);
@@ -221270,15 +221283,15 @@ async function handleGetSkillsFeed(request2) {
     return jsonOk(feed);
   });
 }
-var init_chunk_QDZBUJNK = __esm({
-  "../agent-sdk/dist/chunk-QDZBUJNK.js"() {
+var init_chunk_BYVKGBSJ = __esm({
+  "../agent-sdk/dist/chunk-BYVKGBSJ.js"() {
     "use strict";
     init_chunk_PJTGQVKB();
-    init_chunk_N2VPAG2M();
+    init_chunk_HZY43FS6();
   }
 });
 
-// ../agent-sdk/dist/chunk-3T6DEOMP.js
+// ../agent-sdk/dist/chunk-4CZR6RDU.js
 async function prepareSessionStream(request2, sessionId) {
   try {
     await ensureInitialized();
@@ -221371,14 +221384,14 @@ data: ${JSON.stringify(evt)}
     }
   });
 }
-var init_chunk_3T6DEOMP = __esm({
-  "../agent-sdk/dist/chunk-3T6DEOMP.js"() {
+var init_chunk_4CZR6RDU = __esm({
+  "../agent-sdk/dist/chunk-4CZR6RDU.js"() {
     "use strict";
     init_chunk_LOWHDHDD();
     init_chunk_23UKWXJH();
     init_chunk_BQ5MWNWN();
     init_chunk_5LDBCBOR();
-    init_chunk_YONYO3IP();
+    init_chunk_O23CGBUN();
     init_chunk_YCL5RHEC();
     init_chunk_X23OAFFE();
     init_chunk_MTB7SCZ5();
@@ -221388,7 +221401,7 @@ var init_chunk_3T6DEOMP = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-RHSPINXG.js
+// ../agent-sdk/dist/chunk-FTYNRG64.js
 function getEnvironmentTenantId2(id) {
   const row = getDb().prepare(`SELECT tenant_id FROM environments WHERE id = ?`).get(id);
   return row?.tenant_id;
@@ -221546,12 +221559,12 @@ function handleUpdateEnvironment(request2, id) {
   });
 }
 var PackagesSchema, NetworkingSchema, ConfigSchema, CreateSchema2, UpdateSchema2;
-var init_chunk_RHSPINXG = __esm({
-  "../agent-sdk/dist/chunk-RHSPINXG.js"() {
+var init_chunk_FTYNRG64 = __esm({
+  "../agent-sdk/dist/chunk-FTYNRG64.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_B5ZDEPDY();
-    init_chunk_N2VPAG2M();
+    init_chunk_HZY43FS6();
     init_chunk_5LDBCBOR();
     init_chunk_YCL5RHEC();
     init_chunk_JXU6SA6S();
@@ -221613,7 +221626,7 @@ __export(driver_exports, {
 var init_driver = __esm({
   "../agent-sdk/dist/sessions/driver.js"() {
     "use strict";
-    init_chunk_Q4ZKB45D();
+    init_chunk_GCMVPJYR();
     init_chunk_PJZ5TQYW();
     init_chunk_AU4NAQGA();
     init_chunk_DBFPJSOY();
@@ -221777,7 +221790,7 @@ var init_sessions = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-PTUYQ6ND.js
+// ../agent-sdk/dist/chunk-WRABQK5G.js
 function assertSessionTenant2(auth, sessionId) {
   const row = getDb().prepare(`SELECT tenant_id FROM sessions WHERE id = ?`).get(sessionId);
   if (row) {
@@ -222363,18 +222376,18 @@ function handleListEvents(request2, sessionId) {
   });
 }
 var teeLog, activeTees, MAX_TEE_REENTRIES, TextBlock2, UserMessage, UserInterrupt, UserToolConfirmation, UserCustomToolResult, UserDefineOutcome, UserEvent, BatchSchema;
-var init_chunk_PTUYQ6ND = __esm({
-  "../agent-sdk/dist/chunk-PTUYQ6ND.js"() {
+var init_chunk_WRABQK5G = __esm({
+  "../agent-sdk/dist/chunk-WRABQK5G.js"() {
     "use strict";
     init_chunk_HHS6EHSG();
     init_chunk_LOWHDHDD();
     init_chunk_23UKWXJH();
     init_chunk_DC2UMEQH();
     init_chunk_T3CXZ2BE();
-    init_chunk_N2VPAG2M();
+    init_chunk_HZY43FS6();
     init_chunk_5LDBCBOR();
     init_chunk_MTRTBT7L();
-    init_chunk_Q4ZKB45D();
+    init_chunk_GCMVPJYR();
     init_chunk_YCL5RHEC();
     init_chunk_LAWTTG2E();
     init_chunk_X23OAFFE();
@@ -222435,7 +222448,7 @@ var init_chunk_PTUYQ6ND = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-QB4E6VTS.js
+// ../agent-sdk/dist/chunk-SSKU3VER.js
 function assertFileTenantByScope(auth, scopeType, scopeId) {
   if (!scopeId || scopeType !== "session") {
     if (!auth.isGlobalAdmin) throw notFound("file not found");
@@ -222570,34 +222583,34 @@ function handleDeleteFile(request2, fileId) {
     return jsonOk(result);
   });
 }
-var init_chunk_QB4E6VTS = __esm({
-  "../agent-sdk/dist/chunk-QB4E6VTS.js"() {
+var init_chunk_SSKU3VER = __esm({
+  "../agent-sdk/dist/chunk-SSKU3VER.js"() {
     "use strict";
     init_chunk_STPT3SWU();
     init_chunk_KNWM237Q();
     init_chunk_23UKWXJH();
-    init_chunk_N2VPAG2M();
+    init_chunk_HZY43FS6();
     init_chunk_U3QU5AVC();
     init_chunk_EZYKRG4W();
     init_client();
   }
 });
 
-// ../agent-sdk/dist/chunk-FSZ6V5D4.js
+// ../agent-sdk/dist/chunk-DXOSSGI4.js
 function handleGetLicense(request2) {
   return routeWrap(request2, async () => {
     return jsonOk(getLicenseInfo());
   });
 }
-var init_chunk_FSZ6V5D4 = __esm({
-  "../agent-sdk/dist/chunk-FSZ6V5D4.js"() {
+var init_chunk_DXOSSGI4 = __esm({
+  "../agent-sdk/dist/chunk-DXOSSGI4.js"() {
     "use strict";
     init_chunk_2N2KL4KM();
-    init_chunk_N2VPAG2M();
+    init_chunk_HZY43FS6();
   }
 });
 
-// ../agent-sdk/dist/chunk-HPPILE4T.js
+// ../agent-sdk/dist/chunk-6UNPJZVG.js
 function assertStoreTenant(auth, storeAgentId) {
   if (storeAgentId == null) {
     if (!auth.isGlobalAdmin) throw notFound("memory store not found");
@@ -222797,13 +222810,13 @@ function handleDreamMemoryStore(request2, storeId) {
   });
 }
 var CreateStoreSchema, UpdateStoreSchema, CreateMemorySchema, UpdateMemorySchema, DreamRequestSchema, dreamCooldowns, DREAM_COOLDOWN_MS;
-var init_chunk_HPPILE4T = __esm({
-  "../agent-sdk/dist/chunk-HPPILE4T.js"() {
+var init_chunk_6UNPJZVG = __esm({
+  "../agent-sdk/dist/chunk-6UNPJZVG.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_PXMTLKUJ();
     init_chunk_T3CXZ2BE();
-    init_chunk_N2VPAG2M();
+    init_chunk_HZY43FS6();
     init_chunk_WKGJQIRC();
     init_chunk_U3QU5AVC();
     init_chunk_EZYKRG4W();
@@ -222838,7 +222851,7 @@ var init_chunk_HPPILE4T = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-66TI3WU3.js
+// ../agent-sdk/dist/chunk-LJCVLAIG.js
 function zeroTotals() {
   return {
     session_count: 0,
@@ -223198,12 +223211,12 @@ function handleGetApiMetrics(request2) {
   });
 }
 var BUCKET_MS, TOP_N, MAX_POINTS_PER_SERIES, MAX_TOTAL_CELLS;
-var init_chunk_66TI3WU3 = __esm({
-  "../agent-sdk/dist/chunk-66TI3WU3.js"() {
+var init_chunk_LJCVLAIG = __esm({
+  "../agent-sdk/dist/chunk-LJCVLAIG.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_2N2KL4KM();
-    init_chunk_N2VPAG2M();
+    init_chunk_HZY43FS6();
     init_chunk_D2XITRN6();
     init_chunk_U3QU5AVC();
     init_chunk_EZYKRG4W();
@@ -223219,7 +223232,7 @@ var init_chunk_66TI3WU3 = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-H4OVI4ZD.js
+// ../agent-sdk/dist/chunk-PZRRE4CA.js
 function handleListModels(request2) {
   return routeWrap(request2, async ({ request: req }) => {
     const url2 = new URL(req.url);
@@ -223230,11 +223243,11 @@ function handleListModels(request2) {
     return jsonOk({ data: models });
   });
 }
-var init_chunk_H4OVI4ZD = __esm({
-  "../agent-sdk/dist/chunk-H4OVI4ZD.js"() {
+var init_chunk_PZRRE4CA = __esm({
+  "../agent-sdk/dist/chunk-PZRRE4CA.js"() {
     "use strict";
     init_chunk_NWIMPG4M();
-    init_chunk_N2VPAG2M();
+    init_chunk_HZY43FS6();
   }
 });
 
@@ -223279,7 +223292,7 @@ var init_models = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-3A355TBS.js
+// ../agent-sdk/dist/chunk-EH73DPPL.js
 function getAgentTenantId2(id) {
   const row = getDb().prepare(`SELECT tenant_id FROM agents WHERE id = ?`).get(id);
   return row?.tenant_id;
@@ -223304,17 +223317,38 @@ async function resolveSkillInputs(skills2, nowIso) {
     if ("skill_id" in s && s.skill_id) {
       const { getSkill: dbGetSkill, getSkillVersion: dbGetSkillVersion } = await Promise.resolve().then(() => (init_skills(), skills_exports));
       const dbSkill = dbGetSkill(s.skill_id);
-      if (!dbSkill) throw badRequest(`skill ${s.skill_id} not found`);
-      const version3 = s.version ?? dbSkill.current_version;
-      const sv = dbGetSkillVersion(s.skill_id, version3);
-      if (!sv) throw badRequest(`skill version ${version3} not found for skill ${s.skill_id}`);
-      resolved.push({
-        name: dbSkill.name,
-        source: `skill:${s.skill_id}@${version3}`,
-        content: sv.content,
-        ...sv.files && Object.keys(sv.files).length > 0 ? { files: sv.files } : {},
-        installed_at: nowIso
-      });
+      if (dbSkill) {
+        const version3 = s.version ?? dbSkill.current_version;
+        const sv = dbGetSkillVersion(s.skill_id, version3);
+        if (!sv) throw badRequest(`skill version ${version3} not found for skill ${s.skill_id}`);
+        resolved.push({
+          name: dbSkill.name,
+          source: `skill:${s.skill_id}@${version3}`,
+          content: sv.content,
+          ...sv.files && Object.keys(sv.files).length > 0 ? { files: sv.files } : {},
+          installed_at: nowIso
+        });
+      } else if (s.type === "anthropic" || !s.type) {
+        const skillName = s.skill_id;
+        try {
+          const skillMdUrl = `https://raw.githubusercontent.com/anthropics/skills/main/skills/${skillName}/SKILL.md`;
+          const resp = await fetch(skillMdUrl, { signal: AbortSignal.timeout(1e4) });
+          if (!resp.ok) throw new Error(`HTTP ${resp.status}`);
+          const content = await resp.text();
+          resolved.push({
+            name: skillName,
+            source: `anthropic:${skillName}`,
+            content,
+            installed_at: nowIso
+          });
+        } catch (err) {
+          throw badRequest(
+            `skill "${skillName}" not found in local DB or Anthropic skills repo. Upload it via POST /v1/skills or check the skill_id. Available Anthropic skills: docx, pdf, pptx, xlsx`
+          );
+        }
+      } else {
+        throw badRequest(`skill "${s.skill_id}" not found`);
+      }
     } else {
       const inline = s;
       resolved.push({
@@ -223534,11 +223568,11 @@ function handleListAgentVersions(request2, id) {
   });
 }
 var InlineSkillSchema, RefSkillSchema, SkillSchema, ToolSchema, ModelConfigSchema2, CreateSchema3, UpdateSchema3;
-var init_chunk_3A355TBS = __esm({
-  "../agent-sdk/dist/chunk-3A355TBS.js"() {
+var init_chunk_EH73DPPL = __esm({
+  "../agent-sdk/dist/chunk-EH73DPPL.js"() {
     "use strict";
     init_chunk_23UKWXJH();
-    init_chunk_N2VPAG2M();
+    init_chunk_HZY43FS6();
     init_chunk_5LDBCBOR();
     init_chunk_YCL5RHEC();
     init_chunk_WT3SEE34();
@@ -223675,7 +223709,7 @@ var init_chunk_3A355TBS = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-J77A3CKR.js
+// ../agent-sdk/dist/chunk-XWWKOIA5.js
 function toView3(row) {
   return row;
 }
@@ -223846,13 +223880,13 @@ function handleGetApiKeyActivity(request2, id) {
   });
 }
 var ScopeSchema, PermissionsSchema, CreateBody2, PatchBody3;
-var init_chunk_J77A3CKR = __esm({
-  "../agent-sdk/dist/chunk-J77A3CKR.js"() {
+var init_chunk_XWWKOIA5 = __esm({
+  "../agent-sdk/dist/chunk-XWWKOIA5.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_PDUQCDIO();
     init_chunk_2N2KL4KM();
-    init_chunk_N2VPAG2M();
+    init_chunk_HZY43FS6();
     init_chunk_W6QYWXOZ();
     init_chunk_MTB7SCZ5();
     init_chunk_U3QU5AVC();
@@ -223879,7 +223913,7 @@ var init_chunk_J77A3CKR = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-KGPBQBMN.js
+// ../agent-sdk/dist/chunk-BSRT6GK5.js
 function parseMs2(v2) {
   if (!v2) return void 0;
   const n = Number(v2);
@@ -223926,18 +223960,18 @@ function handleListAudit(request2) {
   });
 }
 var VALID_OUTCOMES;
-var init_chunk_KGPBQBMN = __esm({
-  "../agent-sdk/dist/chunk-KGPBQBMN.js"() {
+var init_chunk_BSRT6GK5 = __esm({
+  "../agent-sdk/dist/chunk-BSRT6GK5.js"() {
     "use strict";
     init_chunk_23UKWXJH();
     init_chunk_PDUQCDIO();
-    init_chunk_N2VPAG2M();
+    init_chunk_HZY43FS6();
     init_chunk_EZYKRG4W();
     VALID_OUTCOMES = /* @__PURE__ */ new Set(["success", "denied", "failure"]);
   }
 });
 
-// ../agent-sdk/dist/chunk-NJDDJ7NK.js
+// ../agent-sdk/dist/chunk-HQMQHYZB.js
 function handleBatch(request2) {
   return routeWrap(request2, async () => {
     const body = await request2.json();
@@ -223964,11 +223998,11 @@ function handleBatch(request2) {
   });
 }
 var OperationSchema, BatchSchema2;
-var init_chunk_NJDDJ7NK = __esm({
-  "../agent-sdk/dist/chunk-NJDDJ7NK.js"() {
+var init_chunk_HQMQHYZB = __esm({
+  "../agent-sdk/dist/chunk-HQMQHYZB.js"() {
     "use strict";
     init_chunk_STTBYGOU();
-    init_chunk_N2VPAG2M();
+    init_chunk_HZY43FS6();
     init_chunk_EZYKRG4W();
     init_zod();
     OperationSchema = external_exports.object({
@@ -223982,7 +224016,7 @@ var init_chunk_NJDDJ7NK = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-BBBVX6XL.js
+// ../agent-sdk/dist/chunk-5MK5KBJT.js
 function getVaultTenantId(id) {
   const row = getDb().prepare(`SELECT tenant_id FROM vaults WHERE id = ?`).get(id);
   return row?.tenant_id;
@@ -224121,11 +224155,11 @@ function handleDeleteEntry(request2, vaultId, key) {
   });
 }
 var CreateVaultSchema, PutEntrySchema, UpdateVaultSchema;
-var init_chunk_BBBVX6XL = __esm({
-  "../agent-sdk/dist/chunk-BBBVX6XL.js"() {
+var init_chunk_5MK5KBJT = __esm({
+  "../agent-sdk/dist/chunk-5MK5KBJT.js"() {
     "use strict";
     init_chunk_23UKWXJH();
-    init_chunk_N2VPAG2M();
+    init_chunk_HZY43FS6();
     init_chunk_REY2YZ5X();
     init_chunk_WT3SEE34();
     init_chunk_U3QU5AVC();
@@ -224157,7 +224191,7 @@ var init_chunk_BBBVX6XL = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-LXDX7T3J.js
+// ../agent-sdk/dist/chunk-TMDX6UEY.js
 function handleCreateCredential(request2, vaultId) {
   return routeWrap(request2, async ({ auth }) => {
     loadVaultForCaller(auth, vaultId);
@@ -224293,11 +224327,11 @@ function handleDeleteCredential(request2, vaultId, credentialId) {
   });
 }
 var TokenEndpointAuthSchema, OAuthRefreshSchema, StaticBearerAuthSchema, McpOauthAuthSchema, CreateCredentialSchema, UpdateStaticBearerAuthSchema, UpdateMcpOauthAuthSchema, UpdateAuthSchema, UpdateCredentialSchema;
-var init_chunk_LXDX7T3J = __esm({
-  "../agent-sdk/dist/chunk-LXDX7T3J.js"() {
+var init_chunk_TMDX6UEY = __esm({
+  "../agent-sdk/dist/chunk-TMDX6UEY.js"() {
     "use strict";
-    init_chunk_BBBVX6XL();
-    init_chunk_N2VPAG2M();
+    init_chunk_5MK5KBJT();
+    init_chunk_HZY43FS6();
     init_chunk_7D55V4XP();
     init_chunk_EZYKRG4W();
     init_zod();
@@ -224577,39 +224611,39 @@ __export(handlers_exports, {
 var init_handlers3 = __esm({
   "../agent-sdk/dist/handlers/index.js"() {
     "use strict";
-    init_chunk_74XKSG7K();
-    init_chunk_BL3L2Z6R();
-    init_chunk_NEUBT5MP();
+    init_chunk_2TGRXJTJ();
+    init_chunk_FBAAKIZL();
+    init_chunk_TIYUIRUG();
     init_chunk_SWGCL54X();
-    init_chunk_TOUDZT55();
-    init_chunk_PXC56PKA();
-    init_chunk_CFEE6ITA();
+    init_chunk_VHMGFHT6();
+    init_chunk_RKGOAHGI();
+    init_chunk_CDPYDM7U();
     init_chunk_3FLQ7KZP();
-    init_chunk_3OOBDE2Q();
-    init_chunk_BOKR4447();
-    init_chunk_EBMVU25T();
+    init_chunk_ZGUZK6HI();
+    init_chunk_E6RIAAMX();
+    init_chunk_JR6KNUYN();
     init_chunk_75AAVCJ2();
-    init_chunk_R7TNAZCE();
-    init_chunk_3PBXII4J();
-    init_chunk_QDZBUJNK();
+    init_chunk_JIHEUBWW();
+    init_chunk_ONB22QYA();
+    init_chunk_BYVKGBSJ();
     init_chunk_PJTGQVKB();
-    init_chunk_3T6DEOMP();
-    init_chunk_RHSPINXG();
-    init_chunk_PTUYQ6ND();
+    init_chunk_4CZR6RDU();
+    init_chunk_FTYNRG64();
+    init_chunk_WRABQK5G();
     init_chunk_HHS6EHSG();
-    init_chunk_QB4E6VTS();
-    init_chunk_FSZ6V5D4();
-    init_chunk_HPPILE4T();
-    init_chunk_66TI3WU3();
-    init_chunk_H4OVI4ZD();
+    init_chunk_SSKU3VER();
+    init_chunk_DXOSSGI4();
+    init_chunk_6UNPJZVG();
+    init_chunk_LJCVLAIG();
+    init_chunk_PZRRE4CA();
     init_chunk_NWIMPG4M();
     init_chunk_STPT3SWU();
-    init_chunk_3A355TBS();
-    init_chunk_J77A3CKR();
-    init_chunk_KGPBQBMN();
-    init_chunk_NJDDJ7NK();
-    init_chunk_LXDX7T3J();
-    init_chunk_BBBVX6XL();
+    init_chunk_EH73DPPL();
+    init_chunk_XWWKOIA5();
+    init_chunk_BSRT6GK5();
+    init_chunk_HQMQHYZB();
+    init_chunk_TMDX6UEY();
+    init_chunk_5MK5KBJT();
     init_chunk_F27XQZ2O();
     init_chunk_2Z56TPBL();
     init_chunk_4MKJB6U2();
@@ -224631,15 +224665,15 @@ var init_handlers3 = __esm({
     init_chunk_2N2KL4KM();
     init_chunk_STTBYGOU();
     init_chunk_B5ZDEPDY();
-    init_chunk_N2VPAG2M();
+    init_chunk_HZY43FS6();
     init_chunk_D2XITRN6();
     init_chunk_BQ5MWNWN();
     init_chunk_5LDBCBOR();
     init_chunk_W6WKXFHN();
     init_chunk_HVUWXUUI();
-    init_chunk_YONYO3IP();
+    init_chunk_O23CGBUN();
     init_chunk_MTRTBT7L();
-    init_chunk_Q4ZKB45D();
+    init_chunk_GCMVPJYR();
     init_chunk_PJZ5TQYW();
     init_chunk_AU4NAQGA();
     init_chunk_DBFPJSOY();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentstep/gateway",
-  "version": "0.5.18",
+  "version": "0.5.20",
   "description": "Self-hosted, open-source, Anthropic Managed Agents-compatible. CLI + web UI for running AI agents in sandboxed environments.",
   "keywords": [
     "anthropic",