@openagentpack/sdk 0.3.0-beta-fb9e73b-20260721 → 0.3.0-beta-e537ab3-20260722

package/dist/index.js

@@ -298,6 +298,7 @@ var BaseApiClient = class {
           buffer = buffer.slice(boundary + 2);
           boundary = buffer.indexOf("\n\n");
           const dataLines = [];
+          let sseId;
           for (const line of frame.split("\n")) {
             if (line.startsWith(":")) continue;
             if (line.startsWith("event:") && line.slice(6).trim() === "heartbeat") {
@@ -307,11 +308,18 @@ var BaseApiClient = class {
             if (line.startsWith("data:")) {
               dataLines.push(line.slice(5).trimStart());
             }
+            if (line.startsWith("id:")) {
+              sseId = line.slice(3).trimStart();
+            }
           }
           if (dataLines.length === 0) continue;
           const json = dataLines.join("\n");
           try {
-            yield JSON.parse(json);
+            const parsed = JSON.parse(json);
+            if (sseId !== void 0 && parsed.id === void 0) {
+              parsed.id = sseId;
+            }
+            yield parsed;
           } catch {
           }
         }
@@ -849,8 +857,193 @@ function stripAgentsMetadata(value) {
   return Object.keys(out).length > 0 ? out : void 0;
 }
 
+// src/internal/utils/sandbox-mount.ts
+var PROVIDER_MOUNT_PREFIXES = {
+  qoder: "/data",
+  claude: "/workspace",
+  bailian: "/mnt",
+  ark: "/mnt"
+};
+function joinAbsolute(prefix, sub) {
+  const left = prefix.replace(/\/+$/, "");
+  const right = sub.replace(/^\/+/, "");
+  return `${left}/${right}`;
+}
+function quoteShellWord(value) {
+  return `'${value.replaceAll("'", `'"'"'`)}'`;
+}
+function stripUrlQueryAndFragment(value) {
+  const queryIndex = value.indexOf("?");
+  const fragmentIndex = value.indexOf("#");
+  if (queryIndex === -1) {
+    return fragmentIndex === -1 ? value : value.slice(0, fragmentIndex);
+  }
+  if (fragmentIndex === -1) return value.slice(0, queryIndex);
+  return value.slice(0, Math.min(queryIndex, fragmentIndex));
+}
+function stripGitSuffix(value) {
+  return value.toLowerCase().endsWith(".git") ? value.slice(0, -4) : value;
+}
+function lastRemotePathSegment(value) {
+  const lastSlash = value.lastIndexOf("/");
+  const lastColon = value.lastIndexOf(":");
+  return value.slice(Math.max(lastSlash, lastColon) + 1).trim();
+}
+function providerMountPrefix(provider) {
+  return PROVIDER_MOUNT_PREFIXES[provider];
+}
+function resolveSandboxMountPath(provider, mountPath) {
+  const prefix = providerMountPrefix(provider);
+  if (!prefix) return mountPath;
+  if (mountPath === prefix || mountPath.startsWith(`${prefix}/`)) return mountPath;
+  if (mountPath.startsWith("/")) {
+    throw new UserError(`${provider} mount_path must start with '${prefix}/'; received '${mountPath}'.`);
+  }
+  return joinAbsolute(prefix, mountPath);
+}
+function resolveRepositoryMountPath(provider, resource) {
+  const prefix = providerMountPrefix(provider);
+  if (!prefix) throw new UserError(`Provider '${provider}' has no declared mount path prefix.`);
+  if (resource.mount_path) {
+    if (resource.mount_path !== prefix && !resource.mount_path.startsWith(`${prefix}/`)) {
+      throw new UserError(`${provider} Git repository Session resource mount_path must start with '${prefix}/'.`);
+    }
+    return resource.mount_path;
+  }
+  const repositoryName = stripGitSuffix(lastRemotePathSegment(stripUrlQueryAndFragment(resource.url)));
+  if (!repositoryName) {
+    throw new UserError(`Cannot derive a ${provider} Git repository mount path from URL '${resource.url}'.`);
+  }
+  return provider === "qoder" ? `${prefix}/workspace/${repositoryName}` : `${prefix}/${repositoryName}`;
+}
+function composeFileMountHint(files, provider) {
+  if (!files || files.length === 0) return "";
+  const lines = files.map((f) => `- ${resolveSandboxMountPath(provider, f.mount_path)}`);
+  return [
+    "The user uploaded files. They are available at the following sandbox paths:",
+    ...lines,
+    "Read them from these paths when relevant."
+  ].join("\n");
+}
+function prependFileHint(prompt, files, provider) {
+  const hint = composeFileMountHint(files, provider);
+  if (!hint) return prompt;
+  return `${hint}
+
+${prompt}`;
+}
+var FILE_MENTION_START = "\u27E6file:";
+var FILE_MENTION_END = "\u27E7";
+function rewriteFileMentions(prompt, provider) {
+  let cursor = 0;
+  let rewritten = "";
+  while (cursor < prompt.length) {
+    const start = prompt.indexOf(FILE_MENTION_START, cursor);
+    if (start === -1) {
+      rewritten += prompt.slice(cursor);
+      break;
+    }
+    const mountPathStart = start + FILE_MENTION_START.length;
+    const end = prompt.indexOf(FILE_MENTION_END, mountPathStart);
+    if (end === -1) {
+      rewritten += prompt.slice(cursor);
+      break;
+    }
+    rewritten += prompt.slice(cursor, start);
+    rewritten += resolveSandboxMountPath(provider, prompt.slice(mountPathStart, end));
+    cursor = end + FILE_MENTION_END.length;
+  }
+  return rewritten;
+}
+function preparePromptForProvider(prompt, files, provider) {
+  return prependFileHint(rewriteFileMentions(prompt, provider), files, provider);
+}
+function prepareInitialSessionPrompt(prompt, bindings, provider) {
+  const prepared = preparePromptForProvider(prompt, bindings.files, provider);
+  const repositories = (bindings.resources ?? []).filter(
+    (resource) => resource.type === "github_repository"
+  );
+  if (repositories.length === 0) return prepared;
+  const paths = repositories.map((resource) => resolveRepositoryMountPath(provider, resource));
+  if (paths.length === 1) {
+    const path = paths[0];
+    return [
+      `The Git working tree for this task is mounted at \`${path}\`.`,
+      "Work only inside this directory unless the user explicitly requests otherwise.",
+      "Prefix every shell command with:",
+      `cd -- ${quoteShellWord(path)} &&`,
+      `Use absolute paths under \`${path}\` for non-shell file tools.`,
+      "",
+      prepared
+    ].join("\n");
+  }
+  const lines = ["Git working trees for this task are mounted at:", ...paths.map((path) => `- ${path}`)];
+  lines.push("Choose the appropriate working tree for the task before inspecting or modifying files.");
+  return `${lines.join("\n")}
+
+${prepared}`;
+}
+
+// src/internal/utils/tool-permissions.ts
+function canonicalToolName(name) {
+  return name.trim().replace(/[^a-zA-Z0-9]+/g, "").toLowerCase();
+}
+function resolveBuiltinTools(tools, options = {}) {
+  const permissionByName = /* @__PURE__ */ new Map();
+  for (const [name, permission] of Object.entries(tools.permissions ?? {})) {
+    permissionByName.set(canonicalToolName(name), permission);
+  }
+  const supportedByName = options.supportedWireNames ? new Map([...options.supportedWireNames].map((name) => [canonicalToolName(name), name])) : void 0;
+  return tools.builtin.flatMap((configuredName) => {
+    const candidate = options.toWireName?.(configuredName) ?? configuredName;
+    const wireName = supportedByName?.get(canonicalToolName(candidate)) ?? (supportedByName ? void 0 : candidate);
+    if (!wireName) return [];
+    return [
+      {
+        configuredName,
+        wireName,
+        permission: permissionByName.get(canonicalToolName(configuredName)) ?? tools.default_permission ?? "allow"
+      }
+    ];
+  });
+}
+function toPermissionPolicy(permission) {
+  return { type: permission === "ask" ? "always_ask" : "always_allow" };
+}
+function permissionOverridesFromWire(configs, toConfigName = (name) => name) {
+  const permissions = {};
+  for (const config of configs) {
+    if (config.enabled === false) continue;
+    const rawPolicy = config.permission_policy;
+    const type = typeof rawPolicy === "string" ? rawPolicy : rawPolicy && typeof rawPolicy === "object" ? rawPolicy.type : void 0;
+    if (type === "always_ask") permissions[toConfigName(config.name)] = "ask";
+    else if (type === "always_allow") permissions[toConfigName(config.name)] = "allow";
+  }
+  return Object.keys(permissions).length ? permissions : void 0;
+}
+
+// src/internal/providers/session-resource-mapper.ts
+function resolveGithubRepositoryMountPath(provider, resource) {
+  return resolveRepositoryMountPath(provider, resource);
+}
+function mapGithubRepositorySessionResource(resource, options = {}) {
+  const entry = {
+    type: "github_repository",
+    url: options.mapUrl?.(resource.url) ?? resource.url,
+    authorization_token: resource.authorization_token
+  };
+  if (resource.checkout?.branch) entry.checkout = { type: "branch", name: resource.checkout.branch };
+  else if (resource.checkout?.commit) entry.checkout = { type: "commit", sha: resource.checkout.commit };
+  const mountPath = options.mapMountPath?.(resource) ?? resource.mount_path;
+  if (mountPath) entry.mount_path = mountPath;
+  return entry;
+}
+
 // src/internal/providers/claude/mapper.ts
 var CLAUDE_BUILTINS = /* @__PURE__ */ new Set(["read", "write", "edit", "bash", "glob", "grep", "web_search", "web_fetch"]);
+function normalizeGithubRepositoryUrlForClaude(url) {
+  return url.replace(/\.git\/?$/, "");
+}
 function credToDecl(raw, vaultName) {
   const auth = raw.auth ?? {};
   const name = raw.display_name || raw.id || "credential";
@@ -921,6 +1114,7 @@ function agentToDecl(raw) {
   const skills = raw.skills;
   const multiagent = raw.multiagent;
   let builtinTools;
+  let builtinPermissions;
   let allToolsEnabled = false;
   if (tools?.length) {
     const toolset = tools.find((t) => t.type === "agent_toolset_20260401");
@@ -929,6 +1123,7 @@ function agentToDecl(raw) {
       const configs = toolset.configs ?? [];
       if (configs.length > 0) {
         builtinTools = configs.filter((c) => c.enabled !== false).map((c) => c.name);
+        builtinPermissions = permissionOverridesFromWire(configs);
       } else if (defaultConfig?.enabled) {
         allToolsEnabled = true;
       }
@@ -955,7 +1150,7 @@ function agentToDecl(raw) {
   }
   let toolsDecl;
   if (builtinTools?.length) {
-    toolsDecl = { builtin: builtinTools };
+    toolsDecl = { builtin: builtinTools, permissions: builtinPermissions };
   } else if (allToolsEnabled) {
     toolsDecl = {
       builtin: ["read", "write", "edit", "bash", "glob", "grep", "web_search", "web_fetch"]
@@ -1015,16 +1210,11 @@ function mapAgent(name, decl, refs, version, projectName) {
     body.metadata = decl.metadata;
   }
   if (decl.tools) {
-    const toolConfigs = decl.tools.builtin.filter((toolName) => CLAUDE_BUILTINS.has(toolName)).map((toolName) => {
-      const permission = decl.tools?.permissions?.[toolName] ?? "allow";
-      return {
-        name: toolName,
-        enabled: true,
-        permission_policy: {
-          type: permission === "ask" ? "always_ask" : "always_allow"
-        }
-      };
-    });
+    const toolConfigs = resolveBuiltinTools(decl.tools, { supportedWireNames: CLAUDE_BUILTINS }).map((tool) => ({
+      name: tool.wireName,
+      enabled: true,
+      permission_policy: toPermissionPolicy(tool.permission)
+    }));
     body.tools = [
       {
         type: "agent_toolset_20260401",
@@ -1090,6 +1280,23 @@ function mapDeployment(name, decl, refs, projectName, uploadedFiles) {
   }
   return body;
 }
+function mapDeploymentUpdate(name, decl, refs, projectName, uploadedFiles, existingMetadata) {
+  const body = mapDeployment(name, decl, refs, projectName, uploadedFiles);
+  body.vault_ids = refs.vault_ids;
+  body.resources = mapDeploymentResources(decl, refs, uploadedFiles);
+  if (decl.schedule) {
+    body.schedule = { type: "cron", expression: decl.schedule.expression, timezone: decl.schedule.timezone };
+  }
+  body.description = decl.description ?? "";
+  const desiredMetadata = projectName ? injectMetadata(decl.metadata, projectName, name) : decl.metadata ?? {};
+  body.metadata = {
+    ...Object.fromEntries(
+      Object.keys(existingMetadata ?? {}).filter((key) => !(key in desiredMetadata)).map((key) => [key, null])
+    ),
+    ...desiredMetadata
+  };
+  return body;
+}
 function mapInitialEvents(events) {
   return events.map((ev) => {
     if (ev.type === "user.message" || ev.type === "system.message") {
@@ -1123,7 +1330,7 @@ function mapDeploymentResources(decl, refs, uploadedFiles) {
     } else if (r.type === "github_repository") {
       const entry = {
         type: "github_repository",
-        url: r.url
+        url: normalizeGithubRepositoryUrlForClaude(r.url)
       };
       if (r.authorization_token) entry.authorization_token = r.authorization_token;
       if (r.checkout?.branch) {
@@ -1252,8 +1459,16 @@ function mapSession(bindings) {
     resources.push({
       type: "file",
       file_id: f.file_id,
-      mount_path: f.mount_path
+      mount_path: resolveSandboxMountPath("claude", f.mount_path)
     });
+  for (const resource of bindings.resources ?? []) {
+    resources.push(
+      mapGithubRepositorySessionResource(resource, {
+        mapUrl: normalizeGithubRepositoryUrlForClaude,
+        mapMountPath: (item) => resolveGithubRepositoryMountPath("claude", item)
+      })
+    );
+  }
   if (resources.length) body.resources = resources;
   return body;
 }
@@ -1504,7 +1719,20 @@ var ClaudeAdapter = class _ClaudeAdapter {
   }
   async updateDeployment(id, name, decl, refs, basePath) {
     const uploaded = await this.uploadDeploymentFiles(decl, basePath);
-    const body = mapDeployment(name, decl, refs, this.projectName, uploaded);
+    const current = await this.client.get(`/deployments/${id}`);
+    if (current.schedule && !decl.schedule) {
+      throw new UserError(
+        `Deployment '${name}' cannot remove its schedule through the documented Claude update API; archive and recreate it as a manual deployment.`
+      );
+    }
+    const body = mapDeploymentUpdate(
+      name,
+      decl,
+      refs,
+      this.projectName,
+      uploaded,
+      current.metadata
+    );
     const res = await this.client.post(`/deployments/${id}`, body);
     return toRemoteResource(res);
   }
@@ -1556,6 +1784,36 @@ var ClaudeAdapter = class _ClaudeAdapter {
       attributes: res
     };
   }
+  async listDeployments(filter) {
+    const params = new URLSearchParams();
+    if (filter?.agent_id) params.set("agent_id", filter.agent_id);
+    if (filter?.status) params.set("status", filter.status);
+    if (filter?.include_archived) params.set("include_archived", "true");
+    if (filter?.limit) params.set("limit", String(filter.limit));
+    if (filter?.page) params.set("page", filter.page);
+    if (filter?.created_at_gte) params.set("created_at[gte]", filter.created_at_gte);
+    if (filter?.created_at_lte) params.set("created_at[lte]", filter.created_at_lte);
+    const query2 = params.toString();
+    const res = await this.client.get(`/deployments${query2 ? `?${query2}` : ""}`);
+    const nextPage = res.next_page ?? void 0;
+    return {
+      deployments: (res.data ?? []).map(toDeploymentInfo),
+      has_more: nextPage !== void 0,
+      next_page: nextPage
+    };
+  }
+  async pauseDeployment(ctx) {
+    return this.setDeploymentPaused(ctx, true);
+  }
+  async unpauseDeployment(ctx) {
+    return this.setDeploymentPaused(ctx, false);
+  }
+  async setDeploymentPaused(ctx, paused) {
+    if (!ctx.id) throw new UserError(`Deployment '${ctx.name}' has no remote id; run \`agents apply\` first.`);
+    const action = paused ? "pause" : "unpause";
+    const res = await this.client.post(`/deployments/${ctx.id}/${action}`, {});
+    return toDeploymentInfo(res);
+  }
   async createSession(bindings) {
     if (bindings.delivery === "forward") throw new UserError("Claude does not support Forward sessions.");
     const body = mapSession(bindings);
@@ -1627,6 +1885,16 @@ var ClaudeAdapter = class _ClaudeAdapter {
     await this.client.delete(`/files/${id}`);
   }
 };
+function toDeploymentInfo(res) {
+  const sched = res.schedule;
+  return {
+    id: res.id ?? null,
+    status: res.status ?? "unknown",
+    paused_reason: res.paused_reason ?? void 0,
+    schedule: sched ? { expression: sched.expression, timezone: sched.timezone } : void 0,
+    attributes: res
+  };
+}
 function toSessionInfo(res) {
   return buildSessionInfo(
     res,
@@ -1679,6 +1947,7 @@ registerProvider({
   name: "claude",
   configSchema: claudeConfigSchema,
   capabilities: CLAUDE_CAPABILITIES,
+  features: { tool_permissions: true, session_resources: ["github_repository"] },
   createAdapter: (config, projectName) => {
     const c = config;
     return new ClaudeAdapter(c.api_key, c.beta, projectName);
@@ -1687,7 +1956,7 @@ registerProvider({
 
 // src/internal/providers/qoder/adapter.ts
 import { readFileSync as readFileSync2 } from "fs";
-import { basename as basename3, dirname as dirname2, resolve as resolve2 } from "path";
+import { basename as basename2, dirname as dirname2, resolve as resolve2 } from "path";
 import JSZip2 from "jszip";
 
 // src/internal/providers/qoder/client.ts
@@ -1712,57 +1981,6 @@ var QoderClient = class extends BaseApiClient {
   }
 };
 
-// src/internal/utils/sandbox-mount.ts
-var AGENTS_SESSION_PREFIX = "/mnt/session";
-function joinAbsolute(prefix, sub) {
-  const left = prefix.replace(/\/+$/, "");
-  const right = sub.replace(/^\/+/, "");
-  return `${left}/${right}`;
-}
-function basename2(p) {
-  const trimmed = p.replace(/\/+$/, "");
-  const idx = trimmed.lastIndexOf("/");
-  return idx === -1 ? trimmed : trimmed.slice(idx + 1);
-}
-function resolveSandboxMountPath(provider, mountPath) {
-  switch (provider) {
-    case "ark":
-    case "bailian":
-    case "claude":
-      return joinAbsolute(AGENTS_SESSION_PREFIX, mountPath);
-    case "qoder":
-      return joinAbsolute("/data", basename2(mountPath));
-    default:
-      return mountPath;
-  }
-}
-function composeFileMountHint(files, provider) {
-  if (!files || files.length === 0) return "";
-  const lines = files.map((f) => `- ${resolveSandboxMountPath(provider, f.mount_path)}`);
-  return [
-    "The user uploaded files. They are available at the following sandbox paths:",
-    ...lines,
-    "Read them from these paths when relevant."
-  ].join("\n");
-}
-function prependFileHint(prompt, files, provider) {
-  const hint = composeFileMountHint(files, provider);
-  if (!hint) return prompt;
-  return `${hint}
-
-${prompt}`;
-}
-var FILE_MENTION_SENTINEL_RE = /\u27E6file:(.+?)\u27E7/g;
-function rewriteFileMentions(prompt, provider) {
-  return prompt.replace(
-    FILE_MENTION_SENTINEL_RE,
-    (_match, mountPath) => resolveSandboxMountPath(provider, mountPath)
-  );
-}
-function preparePromptForProvider(prompt, files, provider) {
-  return prependFileHint(rewriteFileMentions(prompt, provider), files, provider);
-}
-
 // src/internal/providers/qoder/mapper.ts
 function toPascalCase(name) {
   return name.replace(/([a-z])([A-Z])/g, "$1 $2").replace(/[^a-zA-Z0-9]+/g, " ").trim().split(/\s+/).map((part) => part.charAt(0).toUpperCase() + part.slice(1).toLowerCase()).join("");
@@ -1875,6 +2093,7 @@ function agentToDecl2(raw) {
   const mcpServers = raw.mcp_servers;
   const skills = raw.skills;
   let builtinTools;
+  let builtinPermissions;
   if (tools?.length) {
     const toolset = tools.find((t) => t.type === "agent_toolset_20260401");
     if (toolset && Array.isArray(toolset.enabled_tools)) {
@@ -1882,6 +2101,7 @@ function agentToDecl2(raw) {
     } else if (toolset) {
       const configs = toolset.configs ?? [];
       builtinTools = configs.filter((c) => c.enabled !== false).map((c) => normalizeToolNameFromQoder(c.name));
+      builtinPermissions = permissionOverridesFromWire(configs, normalizeToolNameFromQoder);
     }
   }
   let mcpServerDecls;
@@ -1903,7 +2123,7 @@ function agentToDecl2(raw) {
     description: raw.description,
     model: raw.model,
     instructions: raw.system,
-    tools: builtinTools?.length ? { builtin: builtinTools } : void 0,
+    tools: builtinTools?.length ? { builtin: builtinTools, permissions: builtinPermissions } : void 0,
     mcp_servers: mcpServerDecls,
     skills: skillDecls,
     metadata: stripAgentsMetadata(raw.metadata)
@@ -1934,6 +2154,7 @@ function mapDeployment2(name, decl, refs, projectName, uploadedFiles) {
     };
   }
   if (decl.description) body.description = decl.description;
+  if (decl.environment_variables !== void 0) body.environment_variables = decl.environment_variables;
   if (projectName) {
     body.metadata = injectMetadata(decl.metadata, projectName, name);
   } else if (decl.metadata) {
@@ -1941,6 +2162,24 @@ function mapDeployment2(name, decl, refs, projectName, uploadedFiles) {
   }
   return body;
 }
+function mapDeploymentUpdate2(name, decl, refs, projectName, uploadedFiles, existingMetadata) {
+  const body = mapDeployment2(name, decl, refs, projectName, uploadedFiles);
+  body.vault_ids = refs.vault_ids;
+  body.resources = mapDeploymentResources2(decl, refs, uploadedFiles);
+  if (decl.schedule) {
+    body.schedule = { type: "cron", expression: decl.schedule.expression, timezone: decl.schedule.timezone };
+  }
+  body.description = decl.description ?? "";
+  body.environment_variables = decl.environment_variables ?? null;
+  const desiredMetadata = projectName ? injectMetadata(decl.metadata, projectName, name) : decl.metadata ?? {};
+  body.metadata = {
+    ...Object.fromEntries(
+      Object.keys(existingMetadata ?? {}).filter((key) => !(key in desiredMetadata)).map((key) => [key, null])
+    ),
+    ...desiredMetadata
+  };
+  return body;
+}
 function mapDeploymentInitialEvents(events) {
   return events.map((ev) => {
     if (ev.type === "user.message" || ev.type === "system.message") {
@@ -2017,11 +2256,14 @@ function mapAgent2(name, decl, refs, version, projectName) {
     body.metadata = decl.metadata;
   }
   if (decl.tools) {
-    const enabledTools = decl.tools.builtin.map((t) => normalizeToolNameForQoder(t));
     body.tools = [
       {
         type: "agent_toolset_20260401",
-        enabled_tools: enabledTools
+        configs: resolveBuiltinTools(decl.tools, { toWireName: normalizeToolNameForQoder }).map((tool) => ({
+          name: tool.wireName,
+          enabled: true,
+          permission_policy: toPermissionPolicy(tool.permission)
+        }))
       }
     ];
   } else {
@@ -2079,19 +2321,14 @@ function mapForwardTemplate(name, decl, refs, projectName) {
   if (projectName) body.metadata = injectMetadata(decl.metadata, projectName, name);
   else body.metadata = decl.metadata ?? {};
   if (decl.tools) {
-    const permissions = decl.tools.permissions ?? {};
     body.tools = [
       {
         type: "agent_toolset_20260401",
-        configs: decl.tools.builtin.map((tool) => {
-          const normalized = normalizeToolNameForQoder(tool);
-          const policy = permissions[tool] ?? permissions[tool.toLowerCase()] ?? permissions[normalized];
-          return {
-            name: normalized,
-            enabled: true,
-            ...policy ? { permission_policy: { type: policy === "ask" ? "always_ask" : "always_allow" } } : {}
-          };
-        })
+        configs: resolveBuiltinTools(decl.tools, { toWireName: normalizeToolNameForQoder }).map((tool) => ({
+          name: tool.wireName,
+          enabled: true,
+          permission_policy: toPermissionPolicy(tool.permission)
+        }))
       }
     ];
   } else {
@@ -2147,6 +2384,7 @@ function toSessionEvent3(raw) {
   const rawType = raw.type ?? "";
   const type = QODER_EVENT_MAP[rawType] ?? "unknown";
   const event = { type, raw_type: rawType, raw };
+  if (typeof raw.id === "string") event.id = raw.id;
   if (typeof raw.role === "string") event.role = raw.role;
   if (type === "message") {
     event.role = roleFromType2(rawType, raw.role);
@@ -2157,12 +2395,15 @@ function toSessionEvent3(raw) {
   } else if (type === "tool_result") {
     event.content = extractContentText2(raw);
   } else if (type === "status") {
+    const stopReason = extractStopReason2(raw.stop_reason);
     if (rawType === "session.thread_status_idle") {
       event.status = "running";
+    } else if (rawType === "session.status_idle" && stopReason === "requires_action") {
+      event.status = "running";
     } else {
       event.status = rawType.includes("idle") ? "idle" : rawType.includes("terminated") ? "terminated" : "running";
     }
-    event.stop_reason = extractStopReason2(raw.stop_reason);
+    event.stop_reason = stopReason;
   } else if (type === "error") {
     event.content = extractErrorMessage2(raw);
   }
@@ -2224,6 +2465,13 @@ function mapSession2(bindings) {
   for (const id of bindings.memory_store_ids) resources.push({ type: "memory_store", memory_store_id: id });
   for (const f of bindings.files ?? [])
     resources.push({ type: "file", file_id: f.file_id, mount_path: resolveSandboxMountPath("qoder", f.mount_path) });
+  for (const resource of bindings.resources ?? []) {
+    resources.push(
+      mapGithubRepositorySessionResource(resource, {
+        mapMountPath: (item) => resolveGithubRepositoryMountPath("qoder", item)
+      })
+    );
+  }
   if (resources.length) body.resources = resources;
   return body;
 }
@@ -2234,6 +2482,16 @@ function deriveForwardGateway(cloudGateway) {
   const trimmed = cloudGateway.replace(/\/$/, "");
   return trimmed.endsWith("/cloud") ? `${trimmed.slice(0, -"/cloud".length)}/forward` : `${trimmed}/forward`;
 }
+function toDeploymentInfo2(res) {
+  const sched = res.schedule;
+  return {
+    id: res.id ?? null,
+    status: res.status ?? "unknown",
+    paused_reason: res.paused_reason ?? void 0,
+    schedule: sched ? { expression: sched.expression, timezone: sched.timezone } : void 0,
+    attributes: res
+  };
+}
 var QoderAdapter = class _QoderAdapter {
   name = "qoder";
   eventResume = true;
@@ -2279,8 +2537,8 @@ var QoderAdapter = class _QoderAdapter {
     vault: "/vaults",
     skill: "/skills",
     memory_store: "/memory_stores",
-    file: "/files"
-    // deployment omitted: emulated on Qoder, no remote listing endpoint
+    file: "/files",
+    deployment: "/deployments"
   };
   async findResource(type, name, id) {
     if (type === "template") {
@@ -2704,7 +2962,20 @@ var QoderAdapter = class _QoderAdapter {
   }
   async updateDeployment(id, name, decl, refs, basePath) {
     const uploaded = await this.uploadDeploymentFiles(decl, basePath);
-    const body = mapDeployment2(name, decl, refs, this.projectName, uploaded);
+    const current = await this.client.get(`/deployments/${id}`);
+    if (current.schedule && !decl.schedule) {
+      throw new UserError(
+        `Deployment '${name}' cannot remove its schedule through the documented Qoder update API; archive and recreate it as a manual deployment.`
+      );
+    }
+    const body = mapDeploymentUpdate2(
+      name,
+      decl,
+      refs,
+      this.projectName,
+      uploaded,
+      current.metadata
+    );
     const res = await this.client.post(`/deployments/${id}`, body);
     return toRemoteResource(res);
   }
@@ -2739,6 +3010,35 @@ var QoderAdapter = class _QoderAdapter {
       attributes: res
     };
   }
+  async listDeployments(filter) {
+    const params = new URLSearchParams();
+    if (filter?.agent_id) params.set("agent_id", filter.agent_id);
+    if (filter?.status) params.set("status", filter.status);
+    if (filter?.include_archived) params.set("include_archived", "true");
+    if (filter?.limit) params.set("limit", String(filter.limit));
+    if (filter?.page) params.set("page", filter.page);
+    if (filter?.created_at_gte) params.set("created_at[gte]", filter.created_at_gte);
+    if (filter?.created_at_lte) params.set("created_at[lte]", filter.created_at_lte);
+    const query2 = params.toString();
+    const res = await this.client.get(`/deployments${query2 ? `?${query2}` : ""}`);
+    return {
+      deployments: (res.data ?? []).map(toDeploymentInfo2),
+      has_more: Boolean(res.has_more),
+      next_page: res.next_page ?? void 0
+    };
+  }
+  async pauseDeployment(ctx) {
+    return this.setDeploymentPaused(ctx, true);
+  }
+  async unpauseDeployment(ctx) {
+    return this.setDeploymentPaused(ctx, false);
+  }
+  async setDeploymentPaused(ctx, paused) {
+    if (!ctx.id) throw new UserError(`Deployment '${ctx.name}' has no remote id; run \`agents apply\` first.`);
+    const action = paused ? "pause" : "unpause";
+    const res = await this.client.post(`/deployments/${ctx.id}/${action}`, {});
+    return toDeploymentInfo2(res);
+  }
   async uploadDeploymentFiles(decl, basePath) {
     const map = /* @__PURE__ */ new Map();
     for (const r of decl.resources ?? []) {
@@ -2752,7 +3052,7 @@ var QoderAdapter = class _QoderAdapter {
     const fullPath = resolve2(dirname2(basePath), source);
     const content = readFileSync2(fullPath);
     const formData = new FormData();
-    formData.append("file", new File([new Uint8Array(content)], basename3(fullPath)));
+    formData.append("file", new File([new Uint8Array(content)], basename2(fullPath)));
     formData.append("purpose", "session_resource");
     const res = await this.client.postFormData("/files", formData);
     return res.file_id ?? res.id;
@@ -2925,7 +3225,7 @@ var QoderAdapter = class _QoderAdapter {
   async uploadFile(filePath, options) {
     const resolved = resolve2(filePath);
     const content = readFileSync2(resolved);
-    const fileName = options?.name ?? basename3(resolved);
+    const fileName = options?.name ?? basename2(resolved);
     return this.uploadFileContent(new Uint8Array(content), fileName, {
       purpose: options?.purpose
     });
@@ -3050,6 +3350,7 @@ registerProvider({
   name: "qoder",
   configSchema: qoderConfigSchema,
   capabilities: QODER_CAPABILITIES,
+  features: { tool_permissions: true, session_resources: ["github_repository"] },
   createAdapter: (config, projectName) => {
     const c = config;
     return new QoderAdapter(c.api_key, c.gateway, projectName, c.forward_gateway);
@@ -3058,7 +3359,7 @@ registerProvider({
 
 // src/internal/providers/bailian/adapter.ts
 import { readFileSync as readFileSync3 } from "fs";
-import { basename as basename4, dirname as dirname3, extname, resolve as resolve3 } from "path";
+import { basename as basename3, dirname as dirname3, extname, resolve as resolve3 } from "path";
 import JSZip3 from "jszip";
 
 // src/internal/providers/bailian/client.ts
@@ -3252,8 +3553,8 @@ function mapAgent3(name, decl, refs, version, projectName, skillVersions) {
   }
   const BAILIAN_BUILTINS = /* @__PURE__ */ new Set(["bash", "read", "write", "edit", "glob", "grep", "download_file"]);
   if (decl.tools) {
-    const toolConfigs = decl.tools.builtin.filter((t) => BAILIAN_BUILTINS.has(t)).map((toolName) => ({
-      name: toolName,
+    const toolConfigs = resolveBuiltinTools(decl.tools, { supportedWireNames: BAILIAN_BUILTINS }).map((tool) => ({
+      name: tool.wireName,
       enabled: true
     }));
     body.tools = [
@@ -3315,7 +3616,13 @@ function mapSession3(bindings) {
   if (bindings.metadata) body.metadata = bindings.metadata;
   if (bindings.vault_ids.length) body.vault_ids = bindings.vault_ids;
   const resources = [];
-  for (const f of bindings.files ?? []) resources.push({ type: "file", file_id: f.file_id, mount_path: f.mount_path });
+  for (const f of bindings.files ?? []) {
+    resources.push({
+      type: "file",
+      file_id: f.file_id,
+      mount_path: resolveSandboxMountPath("bailian", f.mount_path)
+    });
+  }
   if (resources.length) body.resources = resources;
   if (bindings.memory_store_ids.length) body.memory_store_ids = bindings.memory_store_ids;
   return body;
@@ -3763,7 +4070,7 @@ var BailianAdapter = class _BailianAdapter {
     const fullPath = resolve3(dirname3(basePath), source);
     const content = readFileSync3(fullPath);
     const formData = new FormData();
-    formData.append("file", new File([new Uint8Array(content)], basename4(fullPath)));
+    formData.append("file", new File([new Uint8Array(content)], basename3(fullPath)));
     const res = await this.client.postFormData("/files", formData);
     const fileId = res.id;
     await this.waitForFileAvailable(fileId);
@@ -3828,7 +4135,7 @@ var BailianAdapter = class _BailianAdapter {
   async uploadFile(filePath, options) {
     const resolved = resolve3(filePath);
     const content = readFileSync3(resolved);
-    const fileName = options?.name ?? basename4(resolved);
+    const fileName = options?.name ?? basename3(resolved);
     return this.uploadFileContent(new Uint8Array(content), fileName, {
       purpose: options?.purpose
     });
@@ -3973,6 +4280,7 @@ registerProvider({
   name: "bailian",
   configSchema: bailianConfigSchema,
   capabilities: BAILIAN_CAPABILITIES,
+  features: { tool_permissions: false, session_resources: [] },
   createAdapter: (config, projectName) => {
     const c = config;
     return new BailianAdapter(c.api_key, c.workspace_id, c.base_url, projectName);
@@ -3981,7 +4289,7 @@ registerProvider({
 
 // src/internal/providers/ark/adapter.ts
 import { readFileSync as readFileSync4 } from "fs";
-import { basename as basename5, dirname as dirname4, resolve as resolve4 } from "path";
+import { basename as basename4, dirname as dirname4, resolve as resolve4 } from "path";
 import JSZip4 from "jszip";
 
 // src/internal/providers/resource-naming.ts
@@ -4106,6 +4414,7 @@ function agentToDecl4(raw) {
   const skills = raw.skills;
   const multiagent = raw.multiagent;
   let builtinTools;
+  let builtinPermissions;
   let allToolsEnabled = false;
   if (tools?.length) {
     const toolset = tools.find((t) => t.type === "agent_toolset_20260701");
@@ -4114,6 +4423,7 @@ function agentToDecl4(raw) {
       const configs = toolset.configs ?? [];
       if (configs.length > 0) {
         builtinTools = configs.filter((c) => c.enabled !== false).map((c) => c.name);
+        builtinPermissions = permissionOverridesFromWire(configs);
       } else if (defaultConfig?.enabled) {
         allToolsEnabled = true;
       }
@@ -4144,7 +4454,7 @@ function agentToDecl4(raw) {
   }
   let toolsDecl;
   if (builtinTools?.length) {
-    toolsDecl = { builtin: builtinTools };
+    toolsDecl = { builtin: builtinTools, permissions: builtinPermissions };
   } else if (allToolsEnabled) {
     toolsDecl = {
       builtin: ["read", "write", "edit", "bash", "glob", "grep", "web_search", "web_fetch"]
@@ -4205,16 +4515,11 @@ function mapAgent4(name, decl, refs, version, projectName) {
     body.metadata = decl.metadata;
   }
   if (decl.tools) {
-    const toolConfigs = decl.tools.builtin.filter((toolName) => ARK_BUILTINS.has(toolName)).map((toolName) => {
-      const permission = decl.tools?.permissions?.[toolName] ?? "allow";
-      return {
-        name: toolName,
-        enabled: true,
-        permission_policy: {
-          type: permission === "ask" ? "always_ask" : "always_allow"
-        }
-      };
-    });
+    const toolConfigs = resolveBuiltinTools(decl.tools, { supportedWireNames: ARK_BUILTINS }).map((tool) => ({
+      name: tool.wireName,
+      enabled: true,
+      permission_policy: toPermissionPolicy(tool.permission)
+    }));
     body.tools = [
       {
         type: "agent_toolset_20260701",
@@ -4369,7 +4674,7 @@ function mapSession4(bindings) {
     resources.push({
       type: "file",
       file_id: f.file_id,
-      mount_path: f.mount_path
+      mount_path: resolveSandboxMountPath("ark", f.mount_path)
     });
   if (resources.length) body.resources = resources;
   return body;
@@ -4643,7 +4948,7 @@ var ArkAdapter = class _ArkAdapter {
     const fullPath = resolve4(dirname4(basePath), source);
     const content = readFileSync4(fullPath);
     const formData = new FormData();
-    formData.append("file", new File([new Uint8Array(content)], basename5(fullPath)));
+    formData.append("file", new File([new Uint8Array(content)], basename4(fullPath)));
     formData.append("purpose", "agent");
     const res = await this.client.postFormData("/files", formData);
     return res.file_id ?? res.id;
@@ -4692,7 +4997,7 @@ var ArkAdapter = class _ArkAdapter {
   async uploadFile(filePath, options) {
     const resolved = resolve4(filePath);
     const content = readFileSync4(resolved);
-    const fileName = options?.name ?? basename5(resolved);
+    const fileName = options?.name ?? basename4(resolved);
     return this.uploadFileContent(new Uint8Array(content), fileName, {
       purpose: options?.purpose
     });
@@ -4773,6 +5078,7 @@ registerProvider({
   name: "ark",
   configSchema: arkConfigSchema,
   capabilities: ARK_CAPABILITIES,
+  features: { tool_permissions: true, session_resources: [] },
   createAdapter: (config, projectName) => {
     const c = config;
     return new ArkAdapter(c.api_key, projectName);
@@ -4885,7 +5191,7 @@ async function resolveFileReferences(config, configPath) {
 }
 
 // src/internal/parser/resolve-project-config.ts
-import { basename as basename6, dirname as dirname7, resolve as resolve7 } from "path";
+import { basename as basename5, dirname as dirname7, resolve as resolve7 } from "path";
 
 // src/internal/parser/schema.ts
 import { z as z5 } from "zod";
@@ -5030,8 +5336,32 @@ var mcpToolkitSchema = z5.object({
 }));
 var toolsSchema = z5.object({
   builtin: z5.array(z5.string()),
+  default_permission: z5.enum(["allow", "ask"]).optional(),
   mcp: z5.array(mcpToolkitSchema).optional(),
   permissions: z5.record(z5.string(), z5.enum(["allow", "ask"])).optional()
+}).superRefine((tools, ctx) => {
+  const enabled = new Set(tools.builtin.map(canonicalToolName));
+  const seen = /* @__PURE__ */ new Map();
+  for (const key of Object.keys(tools.permissions ?? {})) {
+    const canonical = canonicalToolName(key);
+    const previous = seen.get(canonical);
+    if (previous) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["permissions", key],
+        message: `duplicates permission key '${previous}' after tool-name normalization`
+      });
+    } else {
+      seen.set(canonical, key);
+    }
+    if (!enabled.has(canonical)) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["permissions", key],
+        message: `references tool '${key}' which is not enabled in tools.builtin`
+      });
+    }
+  }
 });
 var multiagentSchema = z5.object({
   type: z5.literal("coordinator"),
@@ -5052,6 +5382,15 @@ var agentSkillRefSchema = z5.object({
 var agentDeliverySchema = z5.object({
   type: z5.enum(["managed", "forward"])
 });
+var sessionGithubRepoResourceSchema = z5.object({
+  type: z5.literal("github_repository"),
+  url: z5.string().url(),
+  checkout: z5.object({ branch: z5.string().min(1).optional(), commit: z5.string().min(1).optional() }).refine((value) => !(value.branch && value.commit), {
+    message: "checkout accepts either branch or commit, not both"
+  }).optional(),
+  mount_path: z5.string().optional(),
+  authorization_token: z5.string().min(1)
+});
 var agentSchema = z5.object({
   name: z5.string().optional(),
   description: z5.string().optional(),
@@ -5065,6 +5404,7 @@ var agentSchema = z5.object({
   skills: z5.array(z5.union([z5.string(), agentSkillRefSchema])).optional(),
   vault: z5.string().optional(),
   memory_stores: z5.array(z5.string()).optional(),
+  resources: z5.array(sessionGithubRepoResourceSchema).optional(),
   multiagent: multiagentSchema.optional(),
   metadata: z5.record(z5.string(), z5.string()).optional(),
   delivery: z5.record(z5.string(), agentDeliverySchema).optional()
@@ -5132,7 +5472,8 @@ var deploymentSchema = z5.object({
   schedule: scheduleSchema.optional(),
   description: z5.string().optional(),
   provider: z5.string().optional(),
-  metadata: z5.record(z5.string(), z5.string()).optional()
+  metadata: z5.record(z5.string(), z5.string()).optional(),
+  environment_variables: z5.string().optional()
 });
 var projectConfigSchema = z5.object({
   version: z5.string(),
@@ -5203,7 +5544,7 @@ async function loadConfig(filePath, resolveEnv = false) {
 // src/internal/parser/resolve-project-config.ts
 async function resolveProjectConfig(filePath, options = {}) {
   const configPath = resolve7(filePath);
-  const projectName = options.projectName ?? basename6(dirname7(configPath));
+  const projectName = options.projectName ?? basename5(dirname7(configPath));
   const { config: parsed, errors } = await loadConfig(configPath, options.resolveEnv ?? true);
   if (errors.length > 0) {
     throw new UserError(errors.join("\n"));
@@ -6463,6 +6804,43 @@ function collectProviderCapabilities(config, providers, diagnostics) {
     for (const [name, agent] of Object.entries(config.agents ?? {})) {
       if (agent.provider && agent.provider !== providerName) continue;
       const delivery = agent.delivery?.[providerName]?.type ?? "managed";
+      const address = {
+        type: delivery === "forward" ? "template" : "agent",
+        name,
+        provider: providerName
+      };
+      const asksForApproval = agent.tools?.default_permission === "ask" || Object.values(agent.tools?.permissions ?? {}).some((permission) => permission === "ask");
+      if (asksForApproval && !def.features.tool_permissions) {
+        diagnostics.error(
+          `${providerName}.agent.tool_permissions.unsupported`,
+          `agent.${name}: provider '${providerName}' cannot enforce interactive tool permission 'ask'.`,
+          address
+        );
+      }
+      for (const resource of agent.resources ?? []) {
+        if (!def.features.session_resources.includes(resource.type)) {
+          diagnostics.error(
+            `${providerName}.agent.session_resource.${resource.type}.unsupported`,
+            `agent.${name}: provider '${providerName}' does not support Session resource type '${resource.type}'.`,
+            address
+          );
+        }
+        const mountPrefix = providerMountPrefix(providerName);
+        if (mountPrefix && resource.mount_path && resource.mount_path !== mountPrefix && !resource.mount_path.startsWith(`${mountPrefix}/`)) {
+          diagnostics.error(
+            `${providerName}.agent.session_resource.mount_path.invalid`,
+            `agent.${name}: ${providerName} Session resource mount_path must start with '${mountPrefix}/'.`,
+            address
+          );
+        }
+      }
+      if (delivery === "forward" && agent.resources?.length) {
+        diagnostics.error(
+          `${providerName}.template.session_resources.unsupported`,
+          `agent.${name}: Forward delivery cannot attach Agent Session resources; use managed delivery.`,
+          address
+        );
+      }
       if (delivery === "forward" && !isSupported(caps, "template")) {
         diagnostics.error(
           `${providerName}.agent.delivery.forward.unsupported`,
@@ -6536,6 +6914,14 @@ function collectProviderCapabilities(config, providers, diagnostics) {
         }
       }
       for (const [name, deployment] of Object.entries(config.deployments ?? {})) {
+        if (deployment.provider && deployment.provider !== providerName) continue;
+        if (deployment.environment_variables !== void 0) {
+          diagnostics.error(
+            `${providerName}.deployment.environment_variables.unsupported`,
+            `deployment.${name}: environment_variables is supported only by Qoder deployments; remove it or pin this deployment to the qoder provider.`,
+            { type: "deployment", name, provider: providerName }
+          );
+        }
         if (deployment.tunnel && (!deployment.provider || deployment.provider === providerName)) {
           diagnostics.error(
             `${providerName}.deployment.tunnel.unsupported`,
@@ -7498,6 +7884,12 @@ async function readYaml(path) {
 }
 
 // src/internal/core/deployment-runtime.ts
+async function listRemoteDeploymentsForContext(ctx, provider, filter) {
+  const adapter2 = getRuntimeProvider(ctx, provider);
+  if (!adapter2.listDeployments)
+    throw new UserError(`Provider '${provider}' does not support remote deployment listing.`);
+  return adapter2.listDeployments(filter);
+}
 function listDeploymentsForContext(ctx, providerFilter) {
   let rows = ctx.state.listResources().filter((resource) => resource.address.type === "deployment");
   if (providerFilter) {
@@ -7542,6 +7934,14 @@ async function runDeploymentForContext(ctx, name, adapter2, resolvedProvider) {
     result: await effectiveAdapter.runDeployment(depCtx)
   };
 }
+async function pauseDeploymentForContext(ctx, name, paused, resolvedProvider) {
+  const provider = resolvedProvider ?? resolveDeploymentProvider(name, ctx.config);
+  const adapter2 = getRuntimeProvider(ctx, provider);
+  const operation = paused ? adapter2.pauseDeployment : adapter2.unpauseDeployment;
+  if (!operation)
+    throw new UserError(`Provider '${provider}' does not support ${paused ? "pausing" : "unpausing"} deployments.`);
+  return operation.call(adapter2, buildDeploymentContext(ctx, name, provider));
+}
 function getDeploymentRuntimeProviderForContext(ctx, name, overrideProvider) {
   return resolveDeploymentProvider(name, ctx.config, overrideProvider);
 }
@@ -7943,7 +8343,21 @@ function buildSessionBindings(agentName, config, provider, state, options = {})
     const available = Object.keys(config.agents ?? {}).join(", ");
     throw new UserError(`Agent '${agentName}' not found in config. Available agents: ${available || "(none)"}`);
   }
+  const sessionResources = options.resources ?? agent.resources;
+  const providerFeatures = getProvider(provider)?.features;
+  for (const resource of sessionResources ?? []) {
+    if (!providerFeatures?.session_resources.includes(resource.type)) {
+      throw new UserError(
+        `Provider '${provider}' does not support Session resource type '${resource.type}' for agent '${agentName}'.`
+      );
+    }
+  }
   if (resolveAgentMaterialization(provider, agent).resourceType === "template") {
+    if (sessionResources?.length) {
+      throw new UserError(
+        `Forward session for '${agentName}' cannot attach Agent resources. Use managed delivery for GitHub repositories.`
+      );
+    }
     const templateId = requireRef(state, { type: "template", name: agentName, provider });
     const defaultIdentity = config.defaults?.identity;
     const identityId = options.identityId ?? (defaultIdentity ? requireRef(state, { type: "identity", name: defaultIdentity, provider }) : void 0);
@@ -8001,6 +8415,7 @@ function buildSessionBindings(agentName, config, provider, state, options = {})
     vault_ids: vaultIds,
     memory_store_ids: memoryStoreIds,
     files: (options.files ?? []).map((f) => ({ file_id: f.fileId, mount_path: f.mountPath })),
+    resources: sessionResources,
     title: options.title,
     metadata: options.metadata
   };
@@ -8370,6 +8785,7 @@ function toAgentSkillRef(skill) {
 var TERMINAL_SESSION_STATUSES = /* @__PURE__ */ new Set(["idle", "completed", "failed", "terminated", "deleted"]);
 var DEFAULT_POLL_INTERVAL_MS = 2e3;
 var DEFAULT_POLL_TIMEOUT_MS = 10 * 60 * 1e3;
+var POLL_INITIAL_INTERVAL_MS = 300;
 function resolveAgentName(agents, agentName) {
   if (agentName) return agentName;
   const names = Object.keys(agents ?? {});
@@ -8400,6 +8816,7 @@ async function createSessionForAgent(ctx, options = {}) {
     vaultIds: options.vaultIds,
     memoryStores: options.memoryStores,
     files: options.files,
+    resources: options.resources,
     title: options.title,
     metadata: options.metadata
   });
@@ -8418,6 +8835,7 @@ async function startSessionRun(ctx, prompt, options = {}) {
     vaultIds: options.vaultIds,
     memoryStores: options.memoryStores,
     files: options.files,
+    resources: options.resources,
     title: options.title,
     metadata: options.metadata
   });
@@ -8426,7 +8844,7 @@ async function startSessionRun(ctx, prompt, options = {}) {
     agentName,
     provider,
     session,
-    events: streamMessageEvents(adapter2, session.id, preparePromptForProvider(prompt, bindings.files, provider))
+    events: streamMessageEvents(adapter2, session.id, prepareInitialSessionPrompt(prompt, bindings, provider))
   };
 }
 function streamMessageEvents(adapter2, sessionId, message) {
@@ -8440,15 +8858,12 @@ async function sendSessionMessageStreaming(ctx, sessionId, message, options = {}
   return streamMessageEvents(adapter2, sessionId, message);
 }
 async function startSessionRunPolling(ctx, prompt, options = {}) {
-  const run = await createSessionForAgent(ctx, options);
-  const adapter2 = getRuntimeProvider(ctx, run.provider);
-  const hintedPrompt = preparePromptForProvider(
-    prompt,
-    options.files?.map((f) => ({ mount_path: f.mountPath })),
-    run.provider
-  );
-  const collected = await sendSessionMessageAndCollectEvents(adapter2, run.session.id, hintedPrompt, options);
-  return { ...run, ...collected };
+  const { agentName, provider, adapter: adapter2 } = resolveSessionRuntime(ctx, options);
+  const bindings = buildSessionBindings(agentName, ctx.config, provider, ctx.state, options);
+  const session = await adapter2.createSession(bindings);
+  const initialPrompt = prepareInitialSessionPrompt(prompt, bindings, provider);
+  const collected = await sendSessionMessageAndCollectEvents(adapter2, session.id, initialPrompt, options);
+  return { agentName, provider, session, ...collected };
 }
 async function sendSessionMessageAndCollectEvents(adapter2, sessionId, message, options = {}) {
   const eventId = await adapter2.sendSessionMessage(sessionId, message);
@@ -8464,8 +8879,9 @@ async function sendSessionMessagePolling(ctx, sessionId, message, options = {})
 }
 async function collectEventsUntilTerminal(adapter2, sessionId, options = {}) {
   const start = Date.now();
-  const pollIntervalMs = options.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
+  const maxPollIntervalMs = options.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
   const pollTimeoutMs = options.pollTimeoutMs ?? DEFAULT_POLL_TIMEOUT_MS;
+  let currentIntervalMs = Math.min(POLL_INITIAL_INTERVAL_MS, maxPollIntervalMs);
   let terminalStatus = "idle";
   let result;
   if (options.afterId) {
@@ -8482,7 +8898,8 @@ async function collectEventsUntilTerminal(adapter2, sessionId, options = {}) {
         terminalStatus = terminalEvent.status;
         break;
       }
-      await delay(pollIntervalMs);
+      await delay(currentIntervalMs);
+      currentIntervalMs = Math.min(currentIntervalMs * 2, maxPollIntervalMs);
     }
   } else {
     while (true) {
@@ -8492,7 +8909,8 @@ async function collectEventsUntilTerminal(adapter2, sessionId, options = {}) {
         terminalStatus = session.status;
         break;
       }
-      await delay(pollIntervalMs);
+      await delay(currentIntervalMs);
+      currentIntervalMs = Math.min(currentIntervalMs * 2, maxPollIntervalMs);
     }
     result = await adapter2.listSessionEvents(sessionId, { limit: 100 });
   }
@@ -8640,7 +9058,28 @@ function buildAgentNameByRemoteId(ctx, provider) {
 }
 async function* streamWithResume(adapter2, sessionId, message) {
   const eventId = await adapter2.sendSessionMessage(sessionId, message);
-  yield* adapter2.streamSessionEvents(sessionId, eventId ? { after_id: eventId } : void 0);
+  let lastEventId = eventId;
+  let reachedTerminal = false;
+  let reconnectIntervalMs = POLL_INITIAL_INTERVAL_MS;
+  const start = Date.now();
+  while (!reachedTerminal) {
+    assertNotTimedOut(start, DEFAULT_POLL_TIMEOUT_MS);
+    for await (const event of adapter2.streamSessionEvents(
+      sessionId,
+      lastEventId ? { after_id: lastEventId } : void 0
+    )) {
+      if (event.id) lastEventId = event.id;
+      yield event;
+      if (event.type === "status" && isTerminalSessionStatus(event.status)) {
+        reachedTerminal = true;
+        break;
+      }
+    }
+    if (!reachedTerminal) {
+      await delay(reconnectIntervalMs);
+      reconnectIntervalMs = Math.min(reconnectIntervalMs * 2, DEFAULT_POLL_INTERVAL_MS);
+    }
+  }
 }
 async function* streamConnectBeforeSend(adapter2, sessionId, message) {
   const iterator = adapter2.streamSessionEvents(sessionId)[Symbol.asyncIterator]();
@@ -9375,6 +9814,7 @@ export {
   listMemoryVersions,
   listProviderModelsForContext,
   listProviderNames,
+  listRemoteDeploymentsForContext,
   listSessionEvents,
   listSessionSummaries,
   listSkills,
@@ -9383,8 +9823,10 @@ export {
   loadProviderConfigIntoEnvSync,
   migrateConfig,
   parseStateAddress,
+  pauseDeploymentForContext,
   planDestroyProjectContext,
   planProjectContext,
+  prepareInitialSessionPrompt,
   preparePromptForProvider,
   prependFileHint,
   providerConfigPath,
@@ -9394,6 +9836,7 @@ export {
   resolveProjectConfig,
   resolveProjectConfigFromObject,
   resolveProviderConfigFromEnv,
+  resolveRepositoryMountPath,
   resolveSessionProvider,
   resolveSyncProvider,
   rewriteFileMentions,