@agentstep/gateway 0.5.36 → 0.5.38

package/dist/gateway.js

@@ -158933,7 +158933,7 @@ var init_chunk_7346CKTF = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-EOUNXIPM.js
+// ../agent-sdk/dist/chunk-2HVY2WZL.js
 function listEnvelope(name, item) {
   const schema2 = external_exports.object({
     data: external_exports.array(item),
@@ -158943,9 +158943,9 @@ function listEnvelope(name, item) {
   });
   return registry2.register(name, schema2);
 }
-var import_zod_to_openapi2, UlidId, IsoTimestamp, ErrorEnvelopeSchema, AgentToolsetTool, CustomTool, ToolConfigSchema, McpServerConfigSchema, AgentSkillSchema, ModelConfigSchema, AgentSchema, CreateAgentRequestSchema, UpdateAgentRequestSchema, EnvironmentPackages, EnvironmentNetworking, EnvironmentConfigSchema, EnvironmentSchema, CreateEnvironmentRequestSchema, UpdateEnvironmentRequestSchema, SessionStatsSchema, SessionUsageSchema, SessionStatusSchema, SessionSchema, CreateSessionRequestSchema, UpdateSessionRequestSchema, TextBlock, UserMessageEvent, UserInterruptEvent, UserCustomToolResultEvent, UserToolConfirmationEvent, UserDefineOutcomeEvent, UserEventSchema, UserEventBatchRequestSchema, ManagedEventSchema, VaultSchema, VaultEntrySchema, CreateVaultRequestSchema, UpdateVaultRequestSchema, SetVaultEntryRequestSchema, VaultDeletedResponseSchema, VaultEntryDeletedResponseSchema, BatchOperationSchema, BatchRequestSchema, BatchResultSchema, BatchResponseSchema, AgentListResponseSchema, EnvironmentListResponseSchema, SessionListResponseSchema, EventListResponseSchema, VaultListResponseSchema, VaultEntryListResponseSchema, AgentDeletedResponseSchema, SessionDeletedResponseSchema, EnvironmentDeletedResponseSchema, UserEventAppendResponseSchema, FileScopeSchema, FileRecordSchema, FileListResponseSchema, FileDeletedResponseSchema, VaultCredentialSchema, CreateCredentialRequestSchema, UpdateCredentialRequestSchema, CredentialListResponseSchema, CredentialDeletedResponseSchema, MemoryStoreSchema, CreateMemoryStoreRequestSchema, MemoryStoreListResponseSchema, MemoryStoreDeletedResponseSchema, MemorySchema, CreateMemoryRequestSchema, UpdateMemoryRequestSchema, MemoryListResponseSchema, MemoryDeletedResponseSchema, SessionResourceSchema, AddResourceRequestSchema, ResourceListResponseSchema, ResourceDeletedResponseSchema, KeyScopeSchema, KeyPermissionsSchema, ApiKeySchema, ApiKeyCreatedSchema, CreateApiKeyRequestSchema, PatchApiKeyRequestSchema, ApiKeyListResponseSchema, ApiKeyRevokedResponseSchema, ApiKeyActivityResponseSchema, UpstreamKeySchema, AddUpstreamKeyRequestSchema, PatchUpstreamKeyRequestSchema, UpstreamKeyListResponseSchema, UpstreamKeyDeletedResponseSchema, TenantSchema, CreateTenantRequestSchema, PatchTenantRequestSchema, TenantListResponseSchema, TenantArchivedResponseSchema, AuditEntrySchema, AuditListResponseSchema, TraceListItemSchema, TraceListResponseSchema, SpanNodeSchema, TraceDetailSchema, TraceExportResponseSchema, SkillsCatalogResponseSchema, SkillsSearchResponseSchema, SkillsStatsResponseSchema, SkillsSourcesResponseSchema, MetricsTotalsSchema, MetricsResponseSchema, ApiMetricsResponseSchema, PutSettingRequestSchema, SettingResponseSchema, ProviderStatusResponseSchema, ModelEntrySchema, ModelListResponseSchema, WhoamiResponseSchema, LicenseResponseSchema;
-var init_chunk_EOUNXIPM = __esm({
-  "../agent-sdk/dist/chunk-EOUNXIPM.js"() {
+var import_zod_to_openapi2, UlidId, IsoTimestamp, ErrorEnvelopeSchema, AgentToolsetTool, CustomTool, ToolConfigSchema, McpServerConfigSchema, AgentSkillSchema, ModelConfigSchema, AgentSchema, CreateAgentRequestSchema, UpdateAgentRequestSchema, EnvironmentPackages, EnvironmentNetworking, EnvironmentConfigSchema, EnvironmentSchema, CreateEnvironmentRequestSchema, UpdateEnvironmentRequestSchema, SessionStatsSchema, SessionUsageSchema, SessionStatusSchema, SessionSchema, CreateSessionRequestSchema, UpdateSessionRequestSchema, TextBlock, UserMessageEvent, UserInterruptEvent, UserCustomToolResultEvent, UserToolConfirmationEvent, UserDefineOutcomeEvent, UserEventSchema, UserEventBatchRequestSchema, ManagedEventSchema, VaultSchema, VaultEntrySchema, CreateVaultRequestSchema, UpdateVaultRequestSchema, SetVaultEntryRequestSchema, VaultDeletedResponseSchema, VaultEntryDeletedResponseSchema, BatchOperationSchema, BatchRequestSchema, BatchResultSchema, BatchResponseSchema, AgentListResponseSchema, EnvironmentListResponseSchema, SessionListResponseSchema, EventListResponseSchema, VaultListResponseSchema, VaultEntryListResponseSchema, TrustGrantSchema, UserProfileSchema, UserProfileCreateSchema, UserProfileUpdateSchema, UserProfileListSchema, EnrollmentUrlRequestSchema, EnrollmentUrlResponseSchema, AgentDeletedResponseSchema, SessionDeletedResponseSchema, EnvironmentDeletedResponseSchema, UserEventAppendResponseSchema, FileScopeSchema, FileRecordSchema, FileListResponseSchema, FileDeletedResponseSchema, VaultCredentialSchema, CreateCredentialRequestSchema, UpdateCredentialRequestSchema, CredentialListResponseSchema, CredentialDeletedResponseSchema, MemoryStoreSchema, CreateMemoryStoreRequestSchema, MemoryStoreListResponseSchema, MemoryStoreDeletedResponseSchema, MemorySchema, CreateMemoryRequestSchema, UpdateMemoryRequestSchema, MemoryListResponseSchema, MemoryDeletedResponseSchema, SessionResourceSchema, AddResourceRequestSchema, ResourceListResponseSchema, ResourceDeletedResponseSchema, KeyScopeSchema, KeyPermissionsSchema, ApiKeySchema, ApiKeyCreatedSchema, CreateApiKeyRequestSchema, PatchApiKeyRequestSchema, ApiKeyListResponseSchema, ApiKeyRevokedResponseSchema, ApiKeyActivityResponseSchema, UpstreamKeySchema, AddUpstreamKeyRequestSchema, PatchUpstreamKeyRequestSchema, UpstreamKeyListResponseSchema, UpstreamKeyDeletedResponseSchema, TenantSchema, CreateTenantRequestSchema, PatchTenantRequestSchema, TenantListResponseSchema, TenantArchivedResponseSchema, AuditEntrySchema, AuditListResponseSchema, TraceListItemSchema, TraceListResponseSchema, SpanNodeSchema, TraceDetailSchema, TraceExportResponseSchema, SkillsCatalogResponseSchema, SkillsSearchResponseSchema, SkillsStatsResponseSchema, SkillsSourcesResponseSchema, MetricsTotalsSchema, MetricsResponseSchema, ApiMetricsResponseSchema, PutSettingRequestSchema, SettingResponseSchema, ProviderStatusResponseSchema, ModelEntrySchema, ModelListResponseSchema, WhoamiResponseSchema, LicenseResponseSchema;
+var init_chunk_2HVY2WZL = __esm({
+  "../agent-sdk/dist/chunk-2HVY2WZL.js"() {
     "use strict";
     init_chunk_7346CKTF();
     init_zod();
@@ -159072,6 +159072,10 @@ var init_chunk_EOUNXIPM = __esm({
         skills: external_exports.array(AgentSkillSchema).openapi({
           description: "Skills injected into the container at session start. For Claude backend, written to .claude/skills/<name>/SKILL.md. For all backends, also written to .agents/skills/<name>/SKILL.md. Non-Claude backends also receive skills prepended to the system prompt."
         }),
+        permission_policy: external_exports.object({
+          always_allow: external_exports.array(external_exports.string()).optional(),
+          always_ask: external_exports.array(external_exports.string()).optional()
+        }).nullable().optional().openapi({ description: "Per-tool permission control." }),
         model_config: ModelConfigSchema.openapi({
           description: "Model configuration options. 'fast' speed enables fast mode on Claude (claude engine only)."
         }),
@@ -159310,6 +159314,7 @@ var init_chunk_EOUNXIPM = __esm({
         vault_ids: external_exports.array(external_exports.string()).nullable().openapi({
           description: "Vault IDs whose entries are injected as environment variables."
         }),
+        user_profile_id: external_exports.string().nullable().optional().openapi({ description: "User profile ID for credential scoping." }),
         parent_session_id: external_exports.string().nullable().openapi({
           description: "Parent session ID if this is a child thread session."
         }),
@@ -159345,7 +159350,17 @@ var init_chunk_EOUNXIPM = __esm({
           uri: external_exports.string().optional(),
           content: external_exports.string().optional()
         })).optional(),
-        vault_ids: external_exports.array(external_exports.string()).optional()
+        vault_ids: external_exports.array(external_exports.string()).optional(),
+        user_profile_id: external_exports.string().optional().openapi({ description: "Links session to a user profile for per-user credential scoping." }),
+        outcomes: external_exports.object({
+          description: external_exports.string(),
+          rubric: external_exports.array(external_exports.object({
+            name: external_exports.string(),
+            description: external_exports.string(),
+            weight: external_exports.number().optional()
+          })).optional(),
+          max_iterations: external_exports.number().int().optional()
+        }).optional().openapi({ description: "Success criteria with optional rubric for self-evaluation." })
       }).openapi({
         example: {
           agent: "agent_01ABCDEFG...",
@@ -159543,6 +159558,49 @@ var init_chunk_EOUNXIPM = __esm({
       "VaultEntryListResponse",
       external_exports.object({ data: external_exports.array(VaultEntrySchema) })
     );
+    TrustGrantSchema = registry2.register("TrustGrant", external_exports.object({
+      type: external_exports.literal("vault_credential"),
+      vault_id: external_exports.string(),
+      credential_id: external_exports.string()
+    }));
+    UserProfileSchema = registry2.register("UserProfile", external_exports.object({
+      type: external_exports.literal("user_profile"),
+      id: external_exports.string(),
+      external_id: external_exports.string().nullable(),
+      display_name: external_exports.string().nullable(),
+      trust_grants: external_exports.array(TrustGrantSchema),
+      created_at: external_exports.string(),
+      updated_at: external_exports.string()
+    }));
+    UserProfileCreateSchema = registry2.register("UserProfileCreate", external_exports.object({
+      external_id: external_exports.string().optional(),
+      display_name: external_exports.string().optional(),
+      trust_grants: external_exports.array(TrustGrantSchema).optional()
+    }));
+    UserProfileUpdateSchema = registry2.register("UserProfileUpdate", external_exports.object({
+      external_id: external_exports.string().nullish(),
+      display_name: external_exports.string().nullish(),
+      trust_grants: external_exports.array(TrustGrantSchema).optional()
+    }));
+    UserProfileListSchema = listEnvelope("UserProfileList", UserProfileSchema);
+    EnrollmentUrlRequestSchema = registry2.register("EnrollmentUrlRequest", external_exports.object({
+      vault_id: external_exports.string(),
+      credential_id: external_exports.string().optional(),
+      display_name: external_exports.string().optional(),
+      authorize_url: external_exports.string(),
+      token_endpoint: external_exports.string(),
+      client_id: external_exports.string(),
+      client_secret: external_exports.string().optional(),
+      scope: external_exports.string().optional(),
+      redirect_uri: external_exports.string().optional()
+    }));
+    EnrollmentUrlResponseSchema = registry2.register("EnrollmentUrlResponse", external_exports.object({
+      type: external_exports.literal("enrollment_url"),
+      url: external_exports.string(),
+      state: external_exports.string(),
+      redirect_uri: external_exports.string(),
+      expires_in: external_exports.number()
+    }));
     AgentDeletedResponseSchema = registry2.register(
       "AgentDeletedResponse",
       external_exports.object({ id: UlidId, type: external_exports.literal("agent_deleted") })
@@ -160101,7 +160159,7 @@ var init_chunk_EOUNXIPM = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-CNMMJFJI.js
+// ../agent-sdk/dist/chunk-R43A2QH7.js
 function buildOpenApiDocument(opts) {
   const generator = new import_zod_to_openapi3.OpenApiGeneratorV31(registry2.definitions);
   return generator.generateDocument({
@@ -160134,15 +160192,17 @@ function buildOpenApiDocument(opts) {
       { name: "Tenants", description: "Multi-tenant isolation (global-admin-only)" },
       { name: "Audit", description: "Admin audit trail" },
       { name: "Auth", description: "Caller identity and license info" },
-      { name: "Batch", description: "Atomic batch operations" }
+      { name: "Batch", description: "Atomic batch operations" },
+      { name: "User Profiles", description: "User profile management and OAuth enrollment" },
+      { name: "Google Compat", description: "Google Interactions API compatibility layer" }
     ]
   });
 }
 var import_zod_to_openapi3, ErrorResponses;
-var init_chunk_CNMMJFJI = __esm({
-  "../agent-sdk/dist/chunk-CNMMJFJI.js"() {
+var init_chunk_R43A2QH7 = __esm({
+  "../agent-sdk/dist/chunk-R43A2QH7.js"() {
     "use strict";
-    init_chunk_EOUNXIPM();
+    init_chunk_2HVY2WZL();
     init_chunk_7346CKTF();
     init_zod();
     import_zod_to_openapi3 = __toESM(require_dist2(), 1);
@@ -161883,6 +161943,97 @@ var init_chunk_CNMMJFJI = __esm({
         ...ErrorResponses
       }
     });
+    registry2.registerPath({
+      method: "post",
+      path: "/v1/user_profiles",
+      tags: ["User Profiles"],
+      summary: "Create user profile",
+      security: [{ ApiKey: [] }],
+      request: {
+        body: {
+          required: true,
+          content: { "application/json": { schema: UserProfileCreateSchema } }
+        }
+      },
+      responses: {
+        201: {
+          description: "Created",
+          content: { "application/json": { schema: UserProfileSchema } }
+        },
+        ...ErrorResponses
+      }
+    });
+    registry2.registerPath({
+      method: "get",
+      path: "/v1/user_profiles",
+      tags: ["User Profiles"],
+      summary: "List user profiles",
+      security: [{ ApiKey: [] }],
+      responses: {
+        200: {
+          description: "OK",
+          content: { "application/json": { schema: UserProfileListSchema } }
+        },
+        ...ErrorResponses
+      }
+    });
+    registry2.registerPath({
+      method: "get",
+      path: "/v1/user_profiles/{id}",
+      tags: ["User Profiles"],
+      summary: "Get user profile",
+      security: [{ ApiKey: [] }],
+      request: { params: external_exports.object({ id: external_exports.string() }) },
+      responses: {
+        200: {
+          description: "OK",
+          content: { "application/json": { schema: UserProfileSchema } }
+        },
+        ...ErrorResponses
+      }
+    });
+    registry2.registerPath({
+      method: "post",
+      path: "/v1/user_profiles/{id}",
+      tags: ["User Profiles"],
+      summary: "Update user profile",
+      security: [{ ApiKey: [] }],
+      request: {
+        params: external_exports.object({ id: external_exports.string() }),
+        body: {
+          required: true,
+          content: { "application/json": { schema: UserProfileUpdateSchema } }
+        }
+      },
+      responses: {
+        200: {
+          description: "OK",
+          content: { "application/json": { schema: UserProfileSchema } }
+        },
+        ...ErrorResponses
+      }
+    });
+    registry2.registerPath({
+      method: "post",
+      path: "/v1/user_profiles/{id}/enrollment_url",
+      tags: ["User Profiles"],
+      summary: "Generate OAuth enrollment URL",
+      security: [{ ApiKey: [] }],
+      request: {
+        params: external_exports.object({ id: external_exports.string() }),
+        body: {
+          required: true,
+          content: { "application/json": { schema: EnrollmentUrlRequestSchema } }
+        }
+      },
+      responses: {
+        200: {
+          description: "OK",
+          content: { "application/json": { schema: EnrollmentUrlResponseSchema } }
+        },
+        ...ErrorResponses
+      }
+    });
     registry2.registerPath({
       method: "post",
       path: "/v1/batch",
@@ -161904,6 +162055,76 @@ var init_chunk_CNMMJFJI = __esm({
         ...ErrorResponses
       }
     });
+    registry2.registerPath({
+      method: "post",
+      path: "/google/v1beta/interactions",
+      tags: ["Google Compat"],
+      summary: "Create interaction (Google compat)",
+      description: "Google Interactions API compatibility. Accepts google-genai SDK format.",
+      responses: { 200: { description: "OK" } }
+    });
+    registry2.registerPath({
+      method: "get",
+      path: "/google/v1beta/interactions/{id}",
+      tags: ["Google Compat"],
+      summary: "Get interaction (Google compat)",
+      request: { params: external_exports.object({ id: external_exports.string() }) },
+      responses: { 200: { description: "OK" } }
+    });
+    registry2.registerPath({
+      method: "delete",
+      path: "/google/v1beta/interactions/{id}",
+      tags: ["Google Compat"],
+      summary: "Delete interaction (Google compat)",
+      request: { params: external_exports.object({ id: external_exports.string() }) },
+      responses: { 200: { description: "OK" } }
+    });
+    registry2.registerPath({
+      method: "post",
+      path: "/google/v1beta/interactions/{id}/cancel",
+      tags: ["Google Compat"],
+      summary: "Cancel interaction (Google compat)",
+      request: { params: external_exports.object({ id: external_exports.string() }) },
+      responses: { 200: { description: "OK" } }
+    });
+    registry2.registerPath({
+      method: "post",
+      path: "/google/v1beta/agents",
+      tags: ["Google Compat"],
+      summary: "Create agent (Google compat)",
+      responses: { 201: { description: "Created" } }
+    });
+    registry2.registerPath({
+      method: "get",
+      path: "/google/v1beta/agents",
+      tags: ["Google Compat"],
+      summary: "List agents (Google compat)",
+      responses: { 200: { description: "OK" } }
+    });
+    registry2.registerPath({
+      method: "get",
+      path: "/google/v1beta/agents/{id}",
+      tags: ["Google Compat"],
+      summary: "Get agent (Google compat)",
+      request: { params: external_exports.object({ id: external_exports.string() }) },
+      responses: { 200: { description: "OK" } }
+    });
+    registry2.registerPath({
+      method: "delete",
+      path: "/google/v1beta/agents/{id}",
+      tags: ["Google Compat"],
+      summary: "Delete agent (Google compat)",
+      request: { params: external_exports.object({ id: external_exports.string() }) },
+      responses: { 200: { description: "OK" } }
+    });
+    registry2.registerPath({
+      method: "get",
+      path: "/google/v1beta/files/{fileRef}",
+      tags: ["Google Compat"],
+      summary: "Download environment files (Google compat)",
+      request: { params: external_exports.object({ fileRef: external_exports.string() }) },
+      responses: { 200: { description: "Tar archive", content: { "application/x-tar": { schema: external_exports.string().openapi({ description: "Raw tar archive bytes." }) } } } }
+    });
   }
 });
 
@@ -218189,8 +218410,8 @@ var init_dist2 = __esm({
     "use strict";
     init_chunk_VFSOYCGN();
     init_chunk_2Z4T32WO();
-    init_chunk_CNMMJFJI();
-    init_chunk_EOUNXIPM();
+    init_chunk_R43A2QH7();
+    init_chunk_2HVY2WZL();
     init_chunk_7346CKTF();
     init_chunk_DC2UMEQH();
     init_chunk_IC2ETYU5();
@@ -219500,7 +219721,7 @@ var init_vaults = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-R6NWAM37.js
+// ../agent-sdk/dist/chunk-VSDPZ77X.js
 function getAgentTenantId2(id) {
   const row = getDb().prepare(`SELECT tenant_id FROM agents WHERE id = ?`).get(id);
   return row?.tenant_id;
@@ -219618,7 +219839,7 @@ function handleCreateSession(request2) {
           const vaultRow = getDb().prepare(`SELECT agent_id, tenant_id FROM vaults WHERE id = ?`).get(vid);
           if (!vaultRow) throw badRequest(`vault not found: ${vid}`);
           assertResourceTenant(auth, vaultRow.tenant_id, `vault not found: ${vid}`);
-          if (vaultRow.agent_id !== agent.id) {
+          if (vaultRow.agent_id && vaultRow.agent_id !== agent.id) {
             throw badRequest(
               `vault ${vid} belongs to a different agent \u2014 vaults are scoped per-agent`
             );
@@ -220004,8 +220225,8 @@ function parseMs(v2) {
   return Number.isFinite(t2) ? t2 : void 0;
 }
 var ALLOWED_STATUSES, AgentRef, ResourceSchema, CreateSchema2, UpdateSchema2;
-var init_chunk_R6NWAM37 = __esm({
-  "../agent-sdk/dist/chunk-R6NWAM37.js"() {
+var init_chunk_VSDPZ77X = __esm({
+  "../agent-sdk/dist/chunk-VSDPZ77X.js"() {
     "use strict";
     init_chunk_VCU64NHY();
     init_chunk_ZBWKJ42J();
@@ -220100,7 +220321,7 @@ __export(sessions_exports, {
 var init_sessions = __esm({
   "../agent-sdk/dist/handlers/sessions.js"() {
     "use strict";
-    init_chunk_R6NWAM37();
+    init_chunk_VSDPZ77X();
     init_chunk_VCU64NHY();
     init_chunk_ZBWKJ42J();
     init_chunk_23UKWXJH();
@@ -221564,7 +221785,7 @@ var init_bus = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-RHSVYAI4.js
+// ../agent-sdk/dist/chunk-IS37752C.js
 function ensureTable() {
   const db = getDb();
   db.exec(`
@@ -221632,17 +221853,17 @@ function handleCreateInteraction(request2) {
       ).run(interactionId2, sessionId2, seq, result2.status, environmentId ?? null, (/* @__PURE__ */ new Date()).toISOString());
       return jsonOk(buildResponse(interactionId2, result2, environmentId));
     }
-    const agentName = data.agent || `auto-${(data.model || "gemini-2.5-flash").replace(/[^a-z0-9-]/g, "-")}`;
+    const modelId = data.model || "gemini-2.5-flash";
+    const agentName = data.agent || `auto-${modelId.replace(/[^a-z0-9-]/g, "-")}`;
     const listReq = new Request(request2.url.replace(/\/google\/v1beta\/interactions.*/, `/v1/agents?limit=1000`), {
       headers: request2.headers
     });
     const listRes = await handleListAgents2(listReq);
     const listBody = await listRes.json();
-    const existing = listBody.data?.find((a) => a.name === agentName);
+    const existing = listBody.data?.find((a) => a.name === agentName) ?? (data.agent ? void 0 : listBody.data?.find((a) => a.model?.id === modelId));
     if (existing) {
       agentId = existing.id;
     } else {
-      const modelId = data.model || "gemini-2.5-flash";
       const createReq = new Request(request2.url.replace(/\/google\/v1beta\/interactions.*/, `/v1/agents`), {
         method: "POST",
         headers: request2.headers,
@@ -221679,12 +221900,19 @@ function handleCreateInteraction(request2) {
       }
     }
     if (!environmentId) throw badRequest("no environment available");
+    const { listVaults: listVaults2 } = await Promise.resolve().then(() => (init_vaults(), vaults_exports));
+    const { tenantFilter: getTenantFilter } = await Promise.resolve().then(() => (init_scope2(), scope_exports));
+    const tenantVaults = listVaults2({
+      tenantFilter: getTenantFilter(auth)
+    });
+    const vaultIds = tenantVaults.filter((v2) => !v2.archived_at && (v2.agent_id === agentId || !v2.agent_id)).map((v2) => v2.id);
     const sessReq = new Request(request2.url.replace(/\/google\/v1beta\/interactions.*/, `/v1/sessions`), {
       method: "POST",
       headers: request2.headers,
       body: JSON.stringify({
         agent: agentId,
-        environment_id: environmentId
+        environment_id: environmentId,
+        ...vaultIds.length > 0 ? { vault_ids: vaultIds } : {}
       })
     });
     const sessRes = await handleCreateSession2(sessReq);
@@ -221939,8 +222167,8 @@ function buildResponse(id, result, environmentId) {
   };
 }
 var CreateSchema4;
-var init_chunk_RHSVYAI4 = __esm({
-  "../agent-sdk/dist/chunk-RHSVYAI4.js"() {
+var init_chunk_IS37752C = __esm({
+  "../agent-sdk/dist/chunk-IS37752C.js"() {
     "use strict";
     init_chunk_RMCBO7K7();
     init_chunk_F4WUVOLE();
@@ -224035,7 +224263,7 @@ function handleUpdateUserProfile(request2, id) {
     return jsonOk(updated);
   });
 }
-var TrustGrantSchema, CreateSchema5, UpdateSchema4;
+var TrustGrantSchema2, CreateSchema5, UpdateSchema4;
 var init_chunk_2YZUXJAN = __esm({
   "../agent-sdk/dist/chunk-2YZUXJAN.js"() {
     "use strict";
@@ -224044,7 +224272,7 @@ var init_chunk_2YZUXJAN = __esm({
     init_chunk_YOZ6WDP3();
     init_chunk_EZYKRG4W();
     init_zod();
-    TrustGrantSchema = external_exports.object({
+    TrustGrantSchema2 = external_exports.object({
       type: external_exports.literal("vault_credential"),
       vault_id: external_exports.string().min(1),
       credential_id: external_exports.string().min(1)
@@ -224052,12 +224280,12 @@ var init_chunk_2YZUXJAN = __esm({
     CreateSchema5 = external_exports.object({
       external_id: external_exports.string().max(256).optional(),
       display_name: external_exports.string().max(256).optional(),
-      trust_grants: external_exports.array(TrustGrantSchema).max(50).optional()
+      trust_grants: external_exports.array(TrustGrantSchema2).max(50).optional()
     });
     UpdateSchema4 = external_exports.object({
       external_id: external_exports.string().max(256).nullish(),
       display_name: external_exports.string().max(256).nullish(),
-      trust_grants: external_exports.array(TrustGrantSchema).max(50).optional()
+      trust_grants: external_exports.array(TrustGrantSchema2).max(50).optional()
     });
   }
 });
@@ -224462,7 +224690,7 @@ var init_chunk_VIWYYVGR = __esm({
   }
 });
 
-// ../agent-sdk/dist/chunk-NG6NUC3W.js
+// ../agent-sdk/dist/chunk-CCNG7D6Y.js
 function originFromRequest(request2) {
   const headers3 = request2.headers;
   const proto3 = headers3.get("x-forwarded-proto") ?? new URL(request2.url).protocol.replace(":", "");
@@ -224474,10 +224702,10 @@ async function handleGetOpenApiSpec(request2) {
   const doc = buildOpenApiDocument({ serverUrl });
   return Response.json(doc);
 }
-var init_chunk_NG6NUC3W = __esm({
-  "../agent-sdk/dist/chunk-NG6NUC3W.js"() {
+var init_chunk_CCNG7D6Y = __esm({
+  "../agent-sdk/dist/chunk-CCNG7D6Y.js"() {
     "use strict";
-    init_chunk_CNMMJFJI();
+    init_chunk_R43A2QH7();
   }
 });
 
@@ -226657,7 +226885,7 @@ __export(handlers_exports, {
 var init_handlers3 = __esm({
   "../agent-sdk/dist/handlers/index.js"() {
     "use strict";
-    init_chunk_RHSVYAI4();
+    init_chunk_IS37752C();
     init_chunk_2HTAIROL();
     init_chunk_PULMO5OO();
     init_chunk_3CDJ2VQN();
@@ -226674,10 +226902,10 @@ var init_handlers3 = __esm({
     init_chunk_W3DA3OFL();
     init_chunk_VIWYYVGR();
     init_chunk_UTGP4X74();
-    init_chunk_NG6NUC3W();
+    init_chunk_CCNG7D6Y();
     init_chunk_R7MZNZNC();
     init_chunk_DQIQBMC2();
-    init_chunk_R6NWAM37();
+    init_chunk_VSDPZ77X();
     init_chunk_VCU64NHY();
     init_chunk_52K3LOFD();
     init_chunk_2E43SH4Y();
@@ -226704,8 +226932,8 @@ var init_handlers3 = __esm({
     init_chunk_LJ2ZXLLT();
     init_chunk_23UKWXJH();
     init_chunk_ZBFU37UL();
-    init_chunk_CNMMJFJI();
-    init_chunk_EOUNXIPM();
+    init_chunk_R43A2QH7();
+    init_chunk_2HVY2WZL();
     init_chunk_7346CKTF();
     init_chunk_DC2UMEQH();
     init_chunk_IC2ETYU5();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentstep/gateway",
-  "version": "0.5.36",
+  "version": "0.5.38",
   "description": "Self-hosted, open-source, Anthropic Managed Agents-compatible. CLI + web UI for running AI agents in sandboxed environments.",
   "keywords": [
     "anthropic",