@openagentpack/sdk 0.3.1-beta-85cd4b6-20260727 → 0.3.2

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { R as ResourceAddress, a as ResourceType, C as CloudAgent, b as CloudEnvironment, c as CloudVault, E as EventStreamOptions, P as ProviderSessionEvent, d as EventListOptions, e as ProviderSessionEventList, f as PlannedAction, D as Diagnostic, A as AgentDefinition, g as AgentWithReadiness, h as AgentSyncRun } from './session-event-CxLg_XqS.js';
-export { i as ActionType, j as ActionTypeSchema, k as AgentDefinitionSchema, l as AgentDriftSeverity, m as AgentDriftSeveritySchema, n as AgentModel, o as AgentModelSchema, p as AgentReadiness, q as AgentReadinessSchema, r as AgentReadinessStatus, s as AgentReadinessStatusSchema, t as AgentRecoveryAction, u as AgentRecoveryActionSchema, v as AgentSkillRef, w as AgentSkillRefSchema, x as AgentSyncResult, y as AgentSyncResultSchema, z as AgentSyncRunSchema, B as AgentSyncStatus, F as AgentSyncStatusSchema, G as AgentWithReadinessSchema, H as CloudAgentSchema, I as CloudEnvironmentSchema, J as CloudVaultSchema, K as CreateSessionRequest, L as CreateSessionRequestSchema, M as CreateSessionResponse, N as CreateSessionResponseSchema, O as DiagnosticSchema, Q as DiagnosticSeverity, S as DiagnosticSeveritySchema, T as DriftKind, U as DriftKindSchema, V as GetSessionRequest, W as GetSessionRequestSchema, X as KNOWN_SESSION_EVENT_TYPES, Y as KnownSessionEventType, Z as ListCloudAgentsResponse, _ as ListCloudAgentsResponseSchema, $ as ListCloudEnvironmentsResponse, a0 as ListCloudEnvironmentsResponseSchema, a1 as ListSessionEventsRequest, a2 as ListSessionEventsRequestSchema, a3 as ListSessionEventsResponse, a4 as ListSessionEventsResponseSchema, a5 as ListSessionsRequest, a6 as ListSessionsRequestSchema, a7 as ListSessionsResponse, a8 as ListSessionsResponseSchema, a9 as PlanReadinessImpact, aa as PlanReadinessImpactSchema, ab as PlannedActionSchema, ac as ResourceAddressSchema, ad as ResourceTypeSchema, ae as SendEventRequest, af as SendEventRequestSchema, ag as SendEventResponse, ah as SendEventResponseSchema, ai as Session, aj as SessionAgent, ak as SessionAgentSchema, al as SessionContentBlock, am as SessionContentBlockSchema, an as SessionEvent, ao as SessionEventSchema, ap as SessionEventType, aq as SessionEventTypeName, ar as SessionEventTypeSchema, as as SessionSchema } from './session-event-CxLg_XqS.js';
+import { R as ResourceAddress, a as ResourceType, C as CloudAgent, b as CloudEnvironment, c as CloudVault, E as EventStreamOptions, P as ProviderSessionEvent, d as EventListOptions, e as ProviderSessionEventList, f as PlannedAction, D as Diagnostic, A as AgentDefinition, g as AgentWithReadiness, h as AgentSyncRun } from './session-event-mzuENtyH.js';
+export { i as ActionType, j as ActionTypeSchema, k as AgentDefinitionSchema, l as AgentDriftSeverity, m as AgentDriftSeveritySchema, n as AgentModel, o as AgentModelSchema, p as AgentReadiness, q as AgentReadinessSchema, r as AgentReadinessStatus, s as AgentReadinessStatusSchema, t as AgentRecoveryAction, u as AgentRecoveryActionSchema, v as AgentSkillRef, w as AgentSkillRefSchema, x as AgentSyncResult, y as AgentSyncResultSchema, z as AgentSyncRunSchema, B as AgentSyncStatus, F as AgentSyncStatusSchema, G as AgentWithReadinessSchema, H as CloudAgentSchema, I as CloudEnvironmentSchema, J as CloudVaultSchema, K as CreateSessionRequest, L as CreateSessionRequestSchema, M as CreateSessionResponse, N as CreateSessionResponseSchema, O as DiagnosticSchema, Q as DiagnosticSeverity, S as DiagnosticSeveritySchema, T as DriftKind, U as DriftKindSchema, V as GetSessionRequest, W as GetSessionRequestSchema, X as KNOWN_SESSION_EVENT_TYPES, Y as KnownSessionEventType, Z as ListCloudAgentsResponse, _ as ListCloudAgentsResponseSchema, $ as ListCloudEnvironmentsResponse, a0 as ListCloudEnvironmentsResponseSchema, a1 as ListSessionEventsRequest, a2 as ListSessionEventsRequestSchema, a3 as ListSessionEventsResponse, a4 as ListSessionEventsResponseSchema, a5 as ListSessionsRequest, a6 as ListSessionsRequestSchema, a7 as ListSessionsResponse, a8 as ListSessionsResponseSchema, a9 as PlanReadinessImpact, aa as PlanReadinessImpactSchema, ab as PlannedActionSchema, ac as ResourceAddressSchema, ad as ResourceTypeSchema, ae as SendEventRequest, af as SendEventRequestSchema, ag as SendEventResponse, ah as SendEventResponseSchema, ai as Session, aj as SessionAgent, ak as SessionAgentSchema, al as SessionContentBlock, am as SessionContentBlockSchema, an as SessionEvent, ao as SessionEventSchema, ap as SessionEventType, aq as SessionEventTypeName, ar as SessionEventTypeSchema, as as SessionSchema } from './session-event-mzuENtyH.js';
 import { P as ProviderFileInfo } from './file-URqwlxLf.js';
 import 'zod';
 
@@ -59,6 +59,8 @@ interface EnvironmentConfig {
     type: "cloud" | "self_hosted";
     networking?: NetworkingConfig;
     packages?: PackagesConfig;
+    /** Shell script executed by supported providers while preparing a sandbox. */
+    setup_script?: string;
 }
 interface TunnelDecl {
     name?: string;
@@ -146,6 +148,8 @@ interface AgentDecl {
     resources?: SessionResourceDecl[];
     multiagent?: MultiagentDecl;
     metadata?: Record<string, string>;
+    /** Qoder runtime environment variables. Forward delivery stores these as Template defaults. */
+    environment_variables?: Record<string, string>;
     /** Provider-specific remote materialization. Omitted means the existing managed Agent resource. */
     delivery?: Record<ProviderName, AgentDeliveryDecl>;
 }
@@ -418,6 +422,8 @@ interface CommonSessionBindings {
     resources?: SessionResource[];
     title?: string;
     metadata?: Record<string, string>;
+    /** Provider-neutral representation; Qoder maps it to each Session API's wire shape. */
+    environment_variables?: Record<string, string>;
 }
 interface ManagedSessionBindings extends CommonSessionBindings {
     /** Omitted for backward compatibility; omitted always means managed. */
@@ -498,6 +504,8 @@ interface ResourceState {
     desired_readiness_baseline?: ResourceReadinessBaseline;
     remote_hash?: string;
     remote_snapshot?: unknown;
+    /** Non-reversible declaration fingerprint used to infer safe logical renames. */
+    replacement_fingerprint?: string;
     drift_paths?: string[];
     drift_status?: "in_sync" | "drifted" | "missing" | "unchecked";
 }
@@ -685,7 +693,7 @@ interface ProviderAdapter {
     getMemoryVersion?(storeId: string, versionId: string): Promise<MemoryVersionInfo>;
     redactMemoryVersion?(storeId: string, versionId: string): Promise<MemoryVersionInfo>;
     createDeployment(name: string, decl: DeploymentDecl, refs: ResolvedDeploymentRefs, basePath: string): Promise<RemoteResource>;
-    updateDeployment(id: string, name: string, decl: DeploymentDecl, refs: ResolvedDeploymentRefs, basePath: string): Promise<RemoteResource>;
+    updateDeployment(id: string, name: string, decl: DeploymentDecl, refs: ResolvedDeploymentRefs, basePath: string, preparedFiles?: ReadonlyMap<string, string>): Promise<RemoteResource>;
     deleteDeployment(id: string): Promise<void>;
     runDeployment(ctx: DeploymentContext): Promise<DeploymentRunResult$1>;
     getDeployment(ctx: DeploymentContext): Promise<DeploymentInfo$1>;
@@ -1289,6 +1297,8 @@ interface SessionCreateOptions {
     title?: string;
     provider?: string;
     metadata?: Record<string, string>;
+    /** Session-level environment variables. Currently supported by Qoder. */
+    environmentVariables?: Record<string, string>;
 }
 declare function resolveSessionProvider(agentName: string, config: ProjectConfig, overrideProvider?: string): string;
 

package/dist/index.js

@@ -395,6 +395,24 @@ function skillNameFromFiles(files) {
   return match?.[1]?.replace(/^["']|["']$/g, "") || void 0;
 }
 
+// src/internal/providers/deployment-conflict.ts
+var DeploymentCreateConflictError = class extends ConflictError {
+  constructor(conflict, preparedFiles) {
+    super(conflict.statusCode, conflict.responseBody, "Deployment create");
+    this.preparedFiles = preparedFiles;
+    this.name = conflict.name;
+    this.message = conflict.message;
+    this.stack = conflict.stack;
+  }
+  preparedFiles;
+};
+function preserveDeploymentFilesOnConflict(error, preparedFiles) {
+  if (error instanceof ConflictError && preparedFiles.size > 0) {
+    throw new DeploymentCreateConflictError(error, preparedFiles);
+  }
+  throw error;
+}
+
 // src/internal/providers/memory-api.ts
 function query(path, values) {
   const params = new URLSearchParams();
@@ -1736,11 +1754,15 @@ var ClaudeAdapter = class _ClaudeAdapter {
   async createDeployment(name, decl, refs, basePath) {
     const uploaded = await this.uploadDeploymentFiles(decl, basePath);
     const body = mapDeployment(name, decl, refs, this.projectName, uploaded);
-    const res = await this.client.post("/deployments", body);
-    return toRemoteResource(res);
+    try {
+      const res = await this.client.post("/deployments", body);
+      return toRemoteResource(res);
+    } catch (error) {
+      preserveDeploymentFilesOnConflict(error, uploaded);
+    }
   }
-  async updateDeployment(id, name, decl, refs, basePath) {
-    const uploaded = await this.uploadDeploymentFiles(decl, basePath);
+  async updateDeployment(id, name, decl, refs, basePath, preparedFiles) {
+    const uploaded = preparedFiles ? new Map(preparedFiles) : await this.uploadDeploymentFiles(decl, basePath);
     const current = await this.client.get(`/deployments/${id}`);
     if (current.schedule && !decl.schedule) {
       throw new UserError(
@@ -2013,12 +2035,23 @@ function normalizeToolNameForQoder(name) {
 function normalizeToolNameFromQoder(name) {
   return name.replace(/([A-Z]+)([A-Z][a-z])/g, "$1_$2").replace(/([a-z])([A-Z])/g, "$1_$2").toLowerCase();
 }
+function normalizeEnvironmentPackages(value) {
+  if (!value || typeof value !== "object") return void 0;
+  const raw = value;
+  const packages = {};
+  for (const key of ["apt", "npm", "pip"]) {
+    if (Array.isArray(raw[key]) && raw[key].length > 0) packages[key] = raw[key];
+  }
+  return Object.keys(packages).length > 0 ? packages : void 0;
+}
 function mapEnvironment2(name, decl, projectName) {
   const envType = decl.config.type ?? "cloud";
   const config = { type: envType };
   if (decl.config.networking) config.networking = decl.config.networking;
   else if (envType === "cloud") config.networking = { type: "unrestricted" };
-  if (decl.config.packages) config.packages = decl.config.packages;
+  const packages = normalizeEnvironmentPackages(decl.config.packages);
+  if (packages) config.packages = packages;
+  if (decl.config.setup_script !== void 0) config.setup_script = decl.config.setup_script;
   return {
     name,
     description: decl.description ?? "",
@@ -2099,7 +2132,8 @@ function envToDecl2(raw) {
     config: {
       type: config.type ?? "cloud",
       networking: config.networking,
-      packages: config.packages
+      packages: normalizeEnvironmentPackages(config.packages),
+      setup_script: config.setup_script
     },
     metadata: stripAgentsMetadata(raw.metadata)
   });
@@ -2342,6 +2376,7 @@ function mapForwardTemplate(name, decl, refs, projectName) {
   if (refs.tunnel_id) body.tunnel_id = refs.tunnel_id;
   if (projectName) body.metadata = injectMetadata(decl.metadata, projectName, name);
   else body.metadata = decl.metadata ?? {};
+  if (decl.environment_variables) body.environment_variables = decl.environment_variables;
   if (decl.tools) {
     body.tools = [
       {
@@ -2482,6 +2517,9 @@ function mapSession2(bindings) {
   if (bindings.tunnel_id) body.tunnel_id = bindings.tunnel_id;
   if (bindings.title) body.title = bindings.title;
   if (bindings.metadata) body.metadata = bindings.metadata;
+  if (bindings.environment_variables) {
+    body.environment_variables = Object.entries(bindings.environment_variables).map(([key, value]) => `${key}=${value}`).join(";");
+  }
   if (bindings.vault_ids.length) body.vault_ids = bindings.vault_ids;
   const resources = [];
   for (const id of bindings.memory_store_ids) resources.push({ type: "memory_store", memory_store_id: id });
@@ -2691,14 +2729,10 @@ var QoderAdapter = class _QoderAdapter {
   }
   normalizeRemote(type, raw) {
     if (type === "environment") {
-      const config = raw.config ?? {};
+      const normalized = envToDecl2(raw);
       return compactDeep({
         description: raw.description,
-        config: {
-          type: config.type ?? "cloud",
-          networking: config.networking,
-          packages: config.packages
-        },
+        config: normalized.config,
         metadata: stripAgentsMetadata(raw.metadata)
       });
     }
@@ -2757,7 +2791,14 @@ var QoderAdapter = class _QoderAdapter {
   }
   async updateEnvironment(id, name, decl) {
     const body = mapEnvironment2(name, decl, this.projectName);
-    const res = await this.client.put(`/environments/${id}`, body);
+    const current = await this.client.get(`/environments/${id}`);
+    const currentMetadata = current.metadata ?? {};
+    const metadata = { ...body.metadata ?? {} };
+    for (const key of Object.keys(currentMetadata)) {
+      if (!key.startsWith("agents.") && !(key in metadata)) metadata[key] = null;
+    }
+    body.metadata = metadata;
+    const res = await this.client.post(`/environments/${id}`, body);
     return toRemoteResource(res);
   }
   async deleteEnvironment(id, cascade = false) {
@@ -2979,11 +3020,15 @@ var QoderAdapter = class _QoderAdapter {
   async createDeployment(name, decl, refs, basePath) {
     const uploaded = await this.uploadDeploymentFiles(decl, basePath);
     const body = mapDeployment2(name, decl, refs, this.projectName, uploaded);
-    const res = await this.client.post("/deployments", body);
-    return toRemoteResource(res);
+    try {
+      const res = await this.client.post("/deployments", body);
+      return toRemoteResource(res);
+    } catch (error) {
+      preserveDeploymentFilesOnConflict(error, uploaded);
+    }
   }
-  async updateDeployment(id, name, decl, refs, basePath) {
-    const uploaded = await this.uploadDeploymentFiles(decl, basePath);
+  async updateDeployment(id, name, decl, refs, basePath, preparedFiles) {
+    const uploaded = preparedFiles ? new Map(preparedFiles) : await this.uploadDeploymentFiles(decl, basePath);
     const current = await this.client.get(`/deployments/${id}`);
     if (current.schedule && !decl.schedule) {
       throw new UserError(
@@ -3091,6 +3136,9 @@ var QoderAdapter = class _QoderAdapter {
       };
       if (bindings.title) body2.title = bindings.title;
       if (bindings.metadata) body2.metadata = bindings.metadata;
+      if (bindings.environment_variables) {
+        body2.config = { environment_variables: bindings.environment_variables };
+      }
       if (bindings.files?.length) {
         body2.resources = bindings.files.map((file) => ({
           type: "file",
@@ -3581,7 +3629,9 @@ function mapAgent3(name, decl, refs, version, projectName, skillVersions) {
   }
   const BAILIAN_BUILTINS = /* @__PURE__ */ new Set(["bash", "read", "write", "edit", "glob", "grep", "download_file"]);
   if (decl.tools) {
-    const toolConfigs = resolveBuiltinTools(decl.tools, { supportedWireNames: BAILIAN_BUILTINS }).map((tool) => ({
+    const toolConfigs = resolveBuiltinTools(decl.tools, {
+      supportedWireNames: BAILIAN_BUILTINS
+    }).map((tool) => ({
       name: tool.wireName,
       enabled: true
     }));
@@ -3655,30 +3705,60 @@ function mapSession3(bindings) {
   if (bindings.memory_store_ids.length) body.memory_store_ids = bindings.memory_store_ids;
   return body;
 }
-function mapDeploymentToSession(decl, refs, fileIds) {
+function mapDeployment3(name, decl, refs, projectName, uploadedFiles) {
+  const agent = { id: refs.agent_id };
+  if (refs.agent_version !== void 0) agent.version = refs.agent_version;
   const body = {
-    agent: refs.agent_id,
-    environment_id: refs.environment_id
+    name,
+    agent,
+    environment_id: refs.environment_id,
+    initial_events: mapMessageEvents(decl.initial_events)
   };
-  if (decl.description) body.title = decl.description;
-  if (fileIds.length) {
-    const fileResources = (decl.resources ?? []).filter((r) => r.type === "file");
-    body.resources = fileIds.map((id, index) => {
-      const entry = { type: "file", file_id: id };
-      const mountPath = fileResources[index]?.mount_path;
-      if (mountPath) entry.mount_path = mountPath;
-      return entry;
-    });
+  if (decl.description) body.description = decl.description;
+  if (refs.vault_ids.length) body.vault_ids = refs.vault_ids;
+  const resources = mapDeploymentResources3(decl, uploadedFiles);
+  if (resources.length) body.resources = resources;
+  if (decl.schedule) {
+    body.schedule = {
+      type: "cron",
+      expression: decl.schedule.expression,
+      timezone: decl.schedule.timezone
+    };
   }
+  if (projectName) {
+    body.metadata = injectMetadata(decl.metadata, projectName, name);
+  } else if (decl.metadata) {
+    body.metadata = decl.metadata;
+  }
+  return body;
+}
+function mapDeploymentUpdate3(name, decl, refs, projectName, uploadedFiles, existingMetadata) {
+  const body = mapDeployment3(name, decl, refs, projectName, uploadedFiles);
+  body.description = decl.description ?? "";
+  body.vault_ids = refs.vault_ids;
+  body.resources = mapDeploymentResources3(decl, uploadedFiles);
+  if (!decl.schedule) body.schedule = null;
+  if (!projectName && !decl.metadata && existingMetadata) body.metadata = existingMetadata;
   return body;
 }
-function mapInitialEvents2(events) {
-  const input = events.filter((e) => e.type === "user.message" || e.type === "system.message").map((e) => ({
+function mapDeploymentResources3(decl, uploadedFiles) {
+  const resources = [];
+  for (const resource of decl.resources ?? []) {
+    if (resource.type !== "file") continue;
+    const fileId = resource.file_id ?? (resource.source ? uploadedFiles?.get(resource.source) : void 0);
+    if (!fileId) continue;
+    const entry = { type: "file", file_id: fileId };
+    if (resource.mount_path) entry.mount_path = resolveSandboxMountPath("bailian", resource.mount_path);
+    resources.push(entry);
+  }
+  return resources;
+}
+function mapMessageEvents(events) {
+  return events.filter((event) => event.type === "user.message" || event.type === "system.message").map((event) => ({
     role: "user",
     type: "message",
-    content: [{ type: "text", text: e.content }]
+    content: [{ type: "text", text: event.content }]
   }));
-  return { input };
 }
 function mapSendMessage3(text) {
   return {
@@ -3710,7 +3790,8 @@ var BailianAdapter = class _BailianAdapter {
     agent: "/agents",
     skill: "/skills",
     vault: "/vaults",
-    file: "/files"
+    file: "/files",
+    deployment: "/deployments"
   };
   async findResource(type, name, id) {
     const accept = type === "agent" ? (r) => !isArchivedAgent(r) : void 0;
@@ -4055,46 +4136,93 @@ var BailianAdapter = class _BailianAdapter {
   async deleteCredential(vaultId, credentialId) {
     await this.client.delete(`/vaults/${vaultId}/credentials/${credentialId}`);
   }
-  // --- Deployment (emulated) ---
-  async createDeployment(_name, _decl, _refs, _basePath) {
-    return { id: null, type: "deployment" };
+  // --- Deployment ---
+  async createDeployment(name, decl, refs, basePath) {
+    const uploaded = await this.uploadDeploymentFiles(decl, basePath);
+    const body = mapDeployment3(name, decl, refs, this.projectName, uploaded);
+    try {
+      const res = await this.client.post("/deployments", body);
+      return toRemoteResource(res);
+    } catch (error) {
+      preserveDeploymentFilesOnConflict(error, uploaded);
+    }
   }
-  async updateDeployment(_id, _name, _decl, _refs, _basePath) {
-    return { id: null, type: "deployment" };
+  async updateDeployment(id, name, decl, refs, basePath, preparedFiles) {
+    if (!id) return this.createDeployment(name, decl, refs, basePath);
+    const current = await this.client.get(`/deployments/${id}`);
+    const uploaded = preparedFiles ? new Map(preparedFiles) : await this.uploadDeploymentFiles(decl, basePath);
+    const body = mapDeploymentUpdate3(
+      name,
+      decl,
+      refs,
+      this.projectName,
+      uploaded,
+      current.metadata
+    );
+    const res = await this.client.post(`/deployments/${id}`, body);
+    return toRemoteResource(res);
   }
-  async deleteDeployment(_id) {
+  async deleteDeployment(id) {
+    await this.client.post(`/deployments/${id}/archive`, {});
   }
   async runDeployment(ctx) {
-    const fileIds = [];
-    for (const r of ctx.decl.resources ?? []) {
-      if (r.type === "file") {
-        if (r.file_id) {
-          fileIds.push(r.file_id);
-        } else if (r.source) {
-          fileIds.push(await this.uploadSessionFile(r.source, ctx.basePath));
-        }
-      }
-    }
-    const body = mapDeploymentToSession(ctx.decl, ctx.refs, fileIds);
-    const sessionRes = await this.client.post("/sessions", body);
-    const sessionId = sessionRes.id;
-    const eventsBody = mapInitialEvents2(ctx.decl.initial_events);
-    const input = eventsBody.input;
-    if (input.length) {
-      await this.client.post(`/sessions/${sessionId}/events`, eventsBody);
+    if (!ctx.id) {
+      throw new UserError(`Deployment '${ctx.name}' has no remote id; run \`agents apply\` first.`);
     }
-    return { session_id: sessionId };
+    const res = await this.client.post(`/deployments/${ctx.id}/run`, {});
+    return {
+      run_id: res.id,
+      session_id: res.session_id ?? null,
+      error: res.error ?? void 0
+    };
   }
   async getDeployment(ctx) {
-    const plan = mapDeploymentToSession(ctx.decl, ctx.refs, []);
+    if (!ctx.id) {
+      throw new UserError(`Deployment '${ctx.name}' has no remote id; run \`agents apply\` first.`);
+    }
+    const res = await this.client.get(`/deployments/${ctx.id}`);
+    return toDeploymentInfo3(res);
+  }
+  async listDeployments(filter) {
+    const params = new URLSearchParams();
+    if (filter?.agent_id) params.set("agent_id", filter.agent_id);
+    if (filter?.status) params.set("status", filter.status);
+    if (filter?.include_archived) params.set("include_archived", "true");
+    if (filter?.limit) params.set("limit", String(filter.limit));
+    if (filter?.page) params.set("page", filter.page);
+    if (filter?.created_at_gte) params.set("created_at[gte]", filter.created_at_gte);
+    if (filter?.created_at_lte) params.set("created_at[lte]", filter.created_at_lte);
+    const query2 = params.toString();
+    const res = await this.client.get(`/deployments${query2 ? `?${query2}` : ""}`);
+    const nextPage = res.next_page ?? void 0;
     return {
-      id: ctx.id,
-      status: "emulated (local)",
-      schedule: ctx.decl.schedule,
-      attributes: { materialization_plan: plan }
+      deployments: (res.data ?? []).map(toDeploymentInfo3),
+      has_more: nextPage != null,
+      next_page: nextPage
     };
   }
-  async uploadSessionFile(source, basePath) {
+  async pauseDeployment(ctx) {
+    return this.setDeploymentPaused(ctx, true);
+  }
+  async unpauseDeployment(ctx) {
+    return this.setDeploymentPaused(ctx, false);
+  }
+  async setDeploymentPaused(ctx, paused) {
+    if (!ctx.id) throw new UserError(`Deployment '${ctx.name}' has no remote id; run \`agents apply\` first.`);
+    const action = paused ? "pause" : "unpause";
+    const res = await this.client.post(`/deployments/${ctx.id}/${action}`, {});
+    return toDeploymentInfo3(res);
+  }
+  async uploadDeploymentFiles(decl, basePath) {
+    const uploaded = /* @__PURE__ */ new Map();
+    for (const resource of decl.resources ?? []) {
+      if (resource.type === "file" && !resource.file_id && resource.source && !uploaded.has(resource.source)) {
+        uploaded.set(resource.source, await this.uploadDeploymentFile(resource.source, basePath));
+      }
+    }
+    return uploaded;
+  }
+  async uploadDeploymentFile(source, basePath) {
     const fullPath = resolve3(dirname3(basePath), source);
     const content = readFileSync3(fullPath);
     const formData = new FormData();
@@ -4190,6 +4318,19 @@ var BailianAdapter = class _BailianAdapter {
 function isArchivedAgent(raw) {
   return typeof raw.archived_at === "string" && raw.archived_at.trim().length > 0;
 }
+function toDeploymentInfo3(res) {
+  const schedule = res.schedule;
+  return {
+    id: res.id ?? null,
+    status: res.status ?? "unknown",
+    paused_reason: res.paused_reason ?? void 0,
+    schedule: schedule ? {
+      expression: schedule.expression,
+      timezone: schedule.timezone
+    } : void 0,
+    attributes: res
+  };
+}
 function toSessionInfo3(res) {
   return buildSessionInfo(res, () => []);
 }
@@ -4286,9 +4427,8 @@ var BAILIAN_CAPABILITIES = {
     remediation: "deploy agents independently and orchestrate via MCP"
   },
   deployment: {
-    tier: "emulated",
-    reason: "no deployment primitive on Bailian; expanded into a session at run time",
-    remediation: "scheduling and outcome rubrics are not enforced server-side \u2014 use external cron/CI for always-on or scheduled runs"
+    tier: "native",
+    reason: "deployments API with cron schedules, manual runs, pause/unpause and archive"
   },
   session: { tier: "native", reason: "sessions API" },
   identity: { tier: "unsupported", reason: "no mapped Identity primitive on Bailian" },
@@ -4590,7 +4730,7 @@ function mapAgent4(name, decl, refs, version, projectName) {
   }
   return body;
 }
-function mapDeploymentToSession2(decl, refs, fileIds) {
+function mapDeploymentToSession(decl, refs, fileIds) {
   const body = {
     agent: refs.agent_id,
     environment_id: refs.environment_id
@@ -4953,7 +5093,7 @@ var ArkAdapter = class _ArkAdapter {
         }
       }
     }
-    const body = mapDeploymentToSession2(ctx.decl, ctx.refs, fileIds);
+    const body = mapDeploymentToSession(ctx.decl, ctx.refs, fileIds);
     const sessionRes = await this.client.post("/sessions", body);
     const sessionId = sessionRes.id;
     const events = ctx.decl.initial_events.filter((e) => e.type === "user.message" || e.type === "system.message").map((e) => ({
@@ -4966,7 +5106,7 @@ var ArkAdapter = class _ArkAdapter {
     return { session_id: sessionId };
   }
   async getDeployment(ctx) {
-    const plan = mapDeploymentToSession2(ctx.decl, ctx.refs, []);
+    const plan = mapDeploymentToSession(ctx.decl, ctx.refs, []);
     return {
       id: ctx.id,
       status: "emulated (local)",
@@ -5239,6 +5379,9 @@ var packagesSchema = z5.object({
   gem: z5.array(z5.string()).optional(),
   go: z5.array(z5.string()).optional()
 });
+var setupScriptSchema = z5.string().refine((value) => new TextEncoder().encode(value).byteLength <= 64 * 1024, {
+  message: "setup_script must not exceed 65536 UTF-8 bytes"
+});
 var environmentSchema = z5.object({
   name: z5.string().optional(),
   description: z5.string().optional(),
@@ -5248,7 +5391,8 @@ var environmentSchema = z5.object({
   config: z5.object({
     type: z5.enum(["cloud", "self_hosted"]),
     networking: networkingSchema.optional(),
-    packages: packagesSchema.optional()
+    packages: packagesSchema.optional(),
+    setup_script: setupScriptSchema.optional()
   }),
   metadata: z5.record(z5.string(), z5.string()).optional()
 });
@@ -5437,6 +5581,7 @@ var agentSchema = z5.object({
   resources: z5.array(sessionGithubRepoResourceSchema).optional(),
   multiagent: multiagentSchema.optional(),
   metadata: z5.record(z5.string(), z5.string()).optional(),
+  environment_variables: z5.record(z5.string().min(1), z5.string()).optional(),
   delivery: z5.record(z5.string(), agentDeliverySchema).optional()
 });
 var channelSchema = z5.object({
@@ -5688,9 +5833,15 @@ async function computeResourceHash(address, config, basePath, state) {
       return contentHash({ decl, fileHash });
     }
   }
+  if (address.type === "file" && basePath) {
+    const fileDecl = decl;
+    const fileHash = computeLocalFileContentHash(fileDecl.source, basePath);
+    return contentHash({ decl, fileHash });
+  }
   if (address.type === "deployment") {
     const refs = resolveDeploymentReferenceIds(decl, config, address.provider, state);
-    if (refs) return contentHash({ decl, refs });
+    const sourceHashes = basePath ? computeDeploymentSourceHashes(decl, basePath) : void 0;
+    if (refs || sourceHashes) return contentHash({ decl, refs, sourceHashes });
   }
   if (address.type === "template") {
     const refs = resolveTemplateReferenceIds(decl, config, address.provider, state);
@@ -5707,6 +5858,12 @@ async function computeResourceHash(address, config, basePath, state) {
   }
   return contentHash(decl);
 }
+function computeReplacementFingerprint(address, config) {
+  if (address.type !== "channel") return void 0;
+  const decl = config.channels?.[address.name];
+  if (!decl) return void 0;
+  return contentHash({ channel_type: decl.type, credentials: decl.credentials ?? {} });
+}
 function resolveChannelReferenceIds(decl, config, provider, state) {
   const agent = config.agents?.[decl.agent];
   const agentType = agent?.delivery?.[provider]?.type === "forward" ? "template" : "agent";
@@ -5745,6 +5902,23 @@ function resolveDeploymentReferenceIds(decl, config, provider, state) {
 function getDeclaration(address, config) {
   return getResourceDeclaration(address, config);
 }
+function computeDeploymentSourceHashes(decl, basePath) {
+  const sources = [
+    ...new Set(
+      (decl.resources ?? []).flatMap(
+        (resource) => resource.type === "file" && !resource.file_id && resource.source ? [resource.source] : []
+      )
+    )
+  ];
+  if (sources.length === 0) return void 0;
+  return Object.fromEntries(sources.map((source) => [source, computeLocalFileContentHash(source, basePath)]));
+}
+function computeLocalFileContentHash(source, basePath) {
+  const fullPath = resolve9(dirname8(basePath), source);
+  const stat = statSync2(fullPath, { throwIfNoEntry: false });
+  if (!stat?.isFile()) return "";
+  return contentHash(readFileSync6(fullPath).toString("base64"));
+}
 function computeSkillContentHash(source, basePath) {
   const fullPath = resolve9(dirname8(basePath), source);
   const stat = statSync2(fullPath, { throwIfNoEntry: false });
@@ -6157,8 +6331,8 @@ async function executeAction(action, provider, ctx) {
       resource: action.address,
       message: `update ${action.address.type}.${action.address.name} (${action.address.provider}) \u2014 not found remotely, recreating`
     });
-    ctx.state.removeResource(action.address);
-    return executeActionInner({ ...action, action: "create" }, provider, ctx);
+    ctx.state.removeResource(action.previousAddress ?? action.address);
+    return executeActionInner({ ...action, action: "create", previousAddress: void 0 }, provider, ctx);
   }
 }
 async function executeActionInner(action, provider, ctx) {
@@ -6231,7 +6405,8 @@ async function executeActionInner(action, provider, ctx) {
     return false;
   }
   const isUpdate = action.action === "update";
-  const existingId = isUpdate ? ctx.state.getResource(address)?.remote_id : void 0;
+  const priorAddress = action.previousAddress ?? address;
+  const existingId = isUpdate ? ctx.state.getResource(priorAddress)?.remote_id : void 0;
   let result;
   switch (type) {
     case "environment": {
@@ -6489,16 +6664,36 @@ async function executeActionInner(action, provider, ctx) {
     case "deployment": {
       const decl = ctx.config.deployments[name];
       const refs = resolveDeploymentRefs(name, ctx.config, address.provider, ctx.state);
-      if (isUpdate) {
-        result = await provider.updateDeployment(existingId, name, decl, refs, ctx.configPath ?? "");
-      } else {
+      const hasLocalFileSources = decl.resources?.some(
+        (resource) => resource.type === "file" && !resource.file_id && Boolean(resource.source)
+      );
+      const materializeDeployment = async () => {
         try {
-          result = await provider.createDeployment(name, decl, refs, ctx.configPath ?? "");
+          return await provider.createDeployment(name, decl, refs, ctx.configPath ?? "");
         } catch (err) {
-          result = await adoptOnConflict(err, address, provider, ctx.onFeedback, {
-            onExisting: (existing) => provider.updateDeployment(existing.id, name, decl, refs, ctx.configPath ?? "")
+          const preparedFiles = err instanceof DeploymentCreateConflictError ? err.preparedFiles : void 0;
+          const existing = await adoptOnConflict(err, address, provider, ctx.onFeedback, {
+            onExisting: (existing2) => provider.updateDeployment(existing2.id, name, decl, refs, ctx.configPath ?? "", preparedFiles)
           });
           adopted = true;
+          return existing;
+        }
+      };
+      if (isUpdate && existingId) {
+        result = await provider.updateDeployment(existingId, name, decl, refs, ctx.configPath ?? "");
+      } else {
+        const existing = hasLocalFileSources ? await findExistingByNames(provider, "deployment", [name]) : null;
+        if (existing) {
+          result = await provider.updateDeployment(existing.resource.id, name, decl, refs, ctx.configPath ?? "");
+          emitRuntimeFeedback(ctx.onFeedback, {
+            type: "resource_adopted",
+            level: "info",
+            resource: address,
+            message: `adopt deployment.${name} (${address.provider}) \u2014 already existed remotely as "${existing.name}"`
+          });
+          adopted = true;
+        } else {
+          result = await materializeDeployment();
         }
       }
       break;
@@ -6534,7 +6729,7 @@ async function executeActionInner(action, provider, ctx) {
     remoteHash = contentHash(remote.comparable);
     remoteSnapshot = remote.snapshot ?? remote.comparable;
   }
-  const priorResource = ctx.state.getResource(address);
+  const priorResource = ctx.state.getResource(priorAddress);
   ctx.state.setResource({
     address,
     remote_id: result.id,
@@ -6546,9 +6741,11 @@ async function executeActionInner(action, provider, ctx) {
     desired_readiness_baseline: buildReadinessBaseline(getResourceDeclaration(address, ctx.config)),
     remote_hash: remoteHash,
     remote_snapshot: remoteSnapshot,
+    replacement_fingerprint: computeReplacementFingerprint(address, ctx.config),
     drift_paths: [],
     drift_status: remoteHash ? "in_sync" : void 0
   });
+  if (action.previousAddress) ctx.state.removeResource(action.previousAddress);
   return adopted;
 }
 async function findExistingByNames(provider, type, names) {
@@ -6573,6 +6770,11 @@ async function adoptOnConflict(err, address, provider, onFeedback, opts) {
 }
 function nameReservedError(err, address, searchName) {
   const detail = err instanceof ApiError ? err.message : String(err);
+  if (address.type === "channel" && err instanceof ApiError && err.responseBody.includes("CHANNEL_CREDENTIAL_CONFLICT")) {
+    return new UserError(
+      `${address.provider} rejected channel.${address.name} because its credentials are already used by another Channel. Keep the existing Channel address so it can be updated in place, remove the old Channel first, or use a different credential set. (${detail})`
+    );
+  }
   return new UserError(
     `${address.provider} reported ${address.type} "${searchName}" already exists, but it could not be found remotely to adopt. This usually means it was recently deleted and the provider still reserves the name. Wait for the provider to release the name, or use a different name for ${address.type}.${address.name}. (${detail})`
   );
@@ -6757,6 +6959,37 @@ function collectProviderCapabilities(config, providers, diagnostics) {
       continue;
     }
     const caps = def.capabilities;
+    for (const [name, environment] of Object.entries(config.environments ?? {})) {
+      if (environment.provider && environment.provider !== providerName) continue;
+      if (environment.environment_id) continue;
+      const address = { type: "environment", name, provider: providerName };
+      if (environment.config.setup_script !== void 0 && providerName !== "qoder") {
+        diagnostics.error(
+          `${providerName}.environment.setup_script.unsupported`,
+          `environment.${name}: provider '${providerName}' does not support setup_script; remove it or pin this environment to qoder.`,
+          address
+        );
+      }
+      if (providerName === "qoder") {
+        if (environment.config.type === "self_hosted" && (environment.config.networking !== void 0 || environment.config.packages !== void 0)) {
+          diagnostics.error(
+            "qoder.environment.self_hosted.config.unsupported",
+            `environment.${name}: Qoder self_hosted environments accept only config.type and config.setup_script; remove networking and packages.`,
+            address
+          );
+        }
+        const unsupported = ["cargo", "gem", "go"].filter(
+          (key) => (environment.config.packages?.[key]?.length ?? 0) > 0
+        );
+        if (unsupported.length > 0) {
+          diagnostics.error(
+            "qoder.environment.packages.unsupported",
+            `environment.${name}: Qoder accepts only apt, npm, and pip package declarations; remove ${unsupported.join(", ")} or install them from setup_script.`,
+            address
+          );
+        }
+      }
+    }
     for (const [name, identity] of Object.entries(config.identities ?? {})) {
       if (identity.provider && identity.provider !== providerName) continue;
       if (!isSupported(caps, "identity")) {
@@ -6923,6 +7156,68 @@ function collectProviderCapabilities(config, providers, diagnostics) {
         }
       }
     }
+    if (providerName === "bailian") {
+      for (const [name, deployment] of Object.entries(config.deployments ?? {})) {
+        if (deployment.provider && deployment.provider !== providerName) continue;
+        const addr = {
+          type: "deployment",
+          name,
+          provider: providerName
+        };
+        if (deployment.initial_events?.some((event) => event.type === "user.define_outcome")) {
+          diagnostics.warning(
+            `${providerName}.deployment.define_outcome_unsupported`,
+            "Outcome rubrics (user.define_outcome) are dropped from the Bailian deployment payload; the run executes without rubric grading.",
+            addr
+          );
+        }
+        if (!deployment.initial_events?.some((event) => event.type === "user.message" || event.type === "system.message")) {
+          diagnostics.error(
+            `${providerName}.deployment.initial_events.message_required`,
+            `deployment.${name}: Bailian requires at least one user.message or system.message initial event; user.define_outcome events are dropped.`,
+            addr
+          );
+        }
+        if (deployment.resources?.some((resource) => resource.type === "github_repository")) {
+          diagnostics.warning(
+            `${providerName}.deployment.github_repository_unsupported`,
+            "Bailian deployment resources accept files only; github_repository resources are dropped. Clone the repository inside the session instead.",
+            addr
+          );
+        }
+        const mountPrefix = providerMountPrefix(providerName);
+        const normalizedMountPaths = /* @__PURE__ */ new Set();
+        for (const resource of deployment.resources ?? []) {
+          if (resource.type !== "file") continue;
+          if (!resource.mount_path?.trim()) {
+            diagnostics.error(
+              `${providerName}.deployment.file.mount_path.required`,
+              `deployment.${name}: Bailian file resources require mount_path.`,
+              addr
+            );
+            continue;
+          }
+          if (mountPrefix && resource.mount_path.startsWith("/") && resource.mount_path !== mountPrefix && !resource.mount_path.startsWith(`${mountPrefix}/`)) {
+            diagnostics.error(
+              `${providerName}.deployment.file.mount_path.invalid`,
+              `deployment.${name}: Bailian file mount_path must start with '${mountPrefix}/'.`,
+              addr
+            );
+            continue;
+          }
+          const normalizedMountPath = resolveSandboxMountPath(providerName, resource.mount_path);
+          if (normalizedMountPaths.has(normalizedMountPath)) {
+            diagnostics.error(
+              `${providerName}.deployment.file.mount_path.duplicate`,
+              `deployment.${name}: Bailian file mount_path '${normalizedMountPath}' is duplicated after normalization.`,
+              addr
+            );
+          } else {
+            normalizedMountPaths.add(normalizedMountPath);
+          }
+        }
+      }
+    }
     if (providerName !== "qoder") {
       for (const [name, env] of Object.entries(config.environments ?? {})) {
         if (env.environment_id) continue;
@@ -6935,6 +7230,13 @@ function collectProviderCapabilities(config, providers, diagnostics) {
         }
       }
       for (const [name, agent] of Object.entries(config.agents ?? {})) {
+        if (agent.environment_variables && (!agent.provider || agent.provider === providerName)) {
+          diagnostics.error(
+            `${providerName}.agent.environment_variables.unsupported`,
+            `agent.${name}: environment_variables is supported only by Qoder; remove it or pin this agent to qoder.`,
+            { type: "agent", name, provider: providerName }
+          );
+        }
         if (agent.tunnel && (!agent.provider || agent.provider === providerName)) {
           diagnostics.error(
             `${providerName}.agent.tunnel.unsupported`,
@@ -6995,7 +7297,11 @@ function collectProviderCapabilities(config, providers, diagnostics) {
     if (config.deployments && caps.deployment.tier === "emulated") {
       for (const [name, dep] of Object.entries(config.deployments)) {
         if (dep.provider && dep.provider !== providerName) continue;
-        const addr = { type: "deployment", name, provider: providerName };
+        const addr = {
+          type: "deployment",
+          name,
+          provider: providerName
+        };
         if (dep.schedule) {
           diagnostics.warning(
             `${providerName}.deployment.schedule_unsupported`,
@@ -7254,6 +7560,7 @@ async function buildPlan(config, state, options = {}) {
     const desiredHash = await computeResourceHash(address, config, options.configPath, hashStateLookup);
     const existing = stateIndex.get(key);
     const deps = getDependencies(address, graph);
+    const needsNativeDeploymentMaterialization = address.type === "deployment" && existing?.remote_id === null && getProvider(address.provider)?.capabilities.deployment.tier === "native";
     if (address.type === "environment" && existing) {
       const envDecl = config.environments?.[address.name];
       if (existing.externally_managed && envDecl && !envDecl.environment_id) {
@@ -7305,6 +7612,17 @@ async function buildPlan(config, state, options = {}) {
         after: { content_hash: desiredHash },
         dependencies: deps
       });
+    } else if (needsNativeDeploymentMaterialization) {
+      actions.push({
+        action: "update",
+        address,
+        driftKind: "none",
+        readinessImpact: "blocking",
+        reason: "Materialize legacy state as a native deployment",
+        before: { content_hash: existing.desired_hash ?? existing.content_hash },
+        after: { content_hash: desiredHash },
+        dependencies: deps
+      });
     } else if ((existing.desired_hash ?? existing.content_hash) !== desiredHash && existing.drift_status === "drifted") {
       const changedPaths = collectChangedPaths(address, config, existing, true);
       actions.push({
@@ -7377,8 +7695,62 @@ async function buildPlan(config, state, options = {}) {
       dependencies: replacement ? [replacement] : []
     });
   }
+  coalesceChannelRenames(actions, config, state);
   return { actions, diagnostics: diagnostics.getAll() };
 }
+function coalesceChannelRenames(actions, config, state) {
+  const creates = actions.filter((action) => action.action === "create" && action.address.type === "channel");
+  const deletes = actions.filter((action) => action.action === "delete" && action.address.type === "channel");
+  const stateByAddress = new Map(state.resources.map((resource) => [addressKey(resource.address), resource]));
+  const matchedDeletes = /* @__PURE__ */ new Set();
+  for (const create of creates) {
+    const desiredType = config.channels?.[create.address.name]?.type;
+    if (!desiredType) continue;
+    const desiredFingerprint = computeReplacementFingerprint(create.address, config);
+    const candidates = deletes.filter((deletion2) => {
+      if (matchedDeletes.has(deletion2) || deletion2.address.provider !== create.address.provider) return false;
+      const prior2 = stateByAddress.get(addressKey(deletion2.address));
+      const snapshot = prior2?.remote_snapshot;
+      if (snapshot?.channel_type !== desiredType) return false;
+      return !prior2?.replacement_fingerprint || prior2.replacement_fingerprint === desiredFingerprint;
+    });
+    if (candidates.length !== 1) continue;
+    const deletion = candidates[0];
+    const prior = stateByAddress.get(addressKey(deletion.address));
+    const competingCreates = creates.filter(
+      (candidate) => candidate !== create && candidate.address.provider === create.address.provider && config.channels?.[candidate.address.name]?.type === desiredType && (!prior?.replacement_fingerprint || computeReplacementFingerprint(candidate.address, config) === prior.replacement_fingerprint)
+    );
+    if (competingCreates.length > 0) continue;
+    create.action = "update";
+    create.previousAddress = deletion.address;
+    create.before = deletion.before;
+    create.driftKind = "local";
+    create.reason = `Channel key renamed from '${deletion.address.name}' (remote resource retained)`;
+    protectRenamedChannelDependencies(actions, stateByAddress, deletion, create);
+    matchedDeletes.add(deletion);
+  }
+  for (let index = actions.length - 1; index >= 0; index--) {
+    if (matchedDeletes.has(actions[index])) actions.splice(index, 1);
+  }
+}
+function protectRenamedChannelDependencies(actions, stateByAddress, deletion, replacement) {
+  const prior = stateByAddress.get(addressKey(deletion.address));
+  const snapshot = prior?.remote_snapshot;
+  const referencedIds = new Set(
+    [snapshot?.identity_id, snapshot?.template_id].filter((id) => typeof id === "string")
+  );
+  if (referencedIds.size === 0) return;
+  for (const action of actions) {
+    if (action.action !== "delete" || action.address.type !== "identity" && action.address.type !== "template" || action.address.provider !== replacement.address.provider) {
+      continue;
+    }
+    const dependency = stateByAddress.get(addressKey(action.address));
+    if (!dependency?.remote_id || !referencedIds.has(dependency.remote_id)) continue;
+    if (!action.dependencies.some((address) => addressKey(address) === addressKey(replacement.address))) {
+      action.dependencies.push(replacement.address);
+    }
+  }
+}
 function deliveryReplacementAddress(address, graph) {
   if (address.type !== "agent" && address.type !== "template") return void 0;
   const replacementType = address.type === "agent" ? "template" : "agent";
@@ -8374,6 +8746,10 @@ function buildSessionBindings(agentName, config, provider, state, options = {})
     throw new UserError(`Agent '${agentName}' not found in config. Available agents: ${available || "(none)"}`);
   }
   const sessionResources = options.resources ?? agent.resources;
+  const environmentVariables = options.environmentVariables ?? agent.environment_variables;
+  if (environmentVariables && provider !== "qoder") {
+    throw new UserError("Session environment variables are supported only by Qoder.");
+  }
   const providerFeatures = getProvider(provider)?.features;
   for (const resource of sessionResources ?? []) {
     if (!providerFeatures?.session_resources.includes(resource.type)) {
@@ -8402,7 +8778,8 @@ function buildSessionBindings(agentName, config, provider, state, options = {})
       identity_id: identityId,
       files: (options.files ?? []).map((file) => ({ file_id: file.fileId, mount_path: file.mountPath })),
       title: options.title,
-      metadata: options.metadata
+      metadata: options.metadata,
+      environment_variables: environmentVariables
     };
   }
   const agentId = requireRef(state, { type: "agent", name: agentName, provider });
@@ -8447,7 +8824,8 @@ function buildSessionBindings(agentName, config, provider, state, options = {})
     files: (options.files ?? []).map((f) => ({ file_id: f.fileId, mount_path: f.mountPath })),
     resources: sessionResources,
     title: options.title,
-    metadata: options.metadata
+    metadata: options.metadata,
+    environment_variables: environmentVariables
   };
 }
 function resolveTunnelId(agent, config, options, provider) {
@@ -8848,7 +9226,8 @@ async function createSessionForAgent(ctx, options = {}) {
     files: options.files,
     resources: options.resources,
     title: options.title,
-    metadata: options.metadata
+    metadata: options.metadata,
+    environmentVariables: options.environmentVariables
   });
   const session = await adapter2.createSession(bindings);
   return { agentName, provider, session };
@@ -8867,7 +9246,8 @@ async function startSessionRun(ctx, prompt, options = {}) {
     files: options.files,
     resources: options.resources,
     title: options.title,
-    metadata: options.metadata
+    metadata: options.metadata,
+    environmentVariables: options.environmentVariables
   });
   const session = await adapter2.createSession(bindings);
   return {
@@ -9327,6 +9707,7 @@ var StateManager = class _StateManager {
         desired_readiness_baseline: r.desired_readiness_baseline,
         remote_hash: r.remote_hash,
         remote_snapshot: r.remote_snapshot,
+        replacement_fingerprint: r.replacement_fingerprint,
         drift_paths: r.drift_paths,
         drift_status: r.drift_status
       }));
@@ -9528,6 +9909,8 @@ var PlanReadinessImpactSchema = z6.enum(["none", "non_blocking", "blocking"]);
 var PlannedActionSchema = z6.object({
   action: ActionTypeSchema,
   address: ResourceAddressSchema,
+  /** Existing state address to retain when this action is an inferred logical rename. */
+  previousAddress: ResourceAddressSchema.optional(),
   reason: z6.string(),
   driftKind: DriftKindSchema.optional(),
   readinessImpact: PlanReadinessImpactSchema.optional(),

package/dist/{session-event-CxLg_XqS.d.ts → session-event-mzuENtyH.d.ts}

@@ -105,6 +105,22 @@ declare const PlannedActionSchema: z.ZodObject<{
         name: z.ZodString;
         provider: z.ZodString;
     }, z.core.$strip>;
+    previousAddress: z.ZodOptional<z.ZodObject<{
+        type: z.ZodEnum<{
+            file: "file";
+            memory_store: "memory_store";
+            environment: "environment";
+            vault: "vault";
+            skill: "skill";
+            agent: "agent";
+            template: "template";
+            deployment: "deployment";
+            identity: "identity";
+            channel: "channel";
+        }>;
+        name: z.ZodString;
+        provider: z.ZodString;
+    }, z.core.$strip>>;
     reason: z.ZodString;
     driftKind: z.ZodOptional<z.ZodEnum<{
         none: "none";
@@ -265,6 +281,22 @@ declare const AgentReadinessSchema: z.ZodObject<{
             name: z.ZodString;
             provider: z.ZodString;
         }, z.core.$strip>;
+        previousAddress: z.ZodOptional<z.ZodObject<{
+            type: z.ZodEnum<{
+                file: "file";
+                memory_store: "memory_store";
+                environment: "environment";
+                vault: "vault";
+                skill: "skill";
+                agent: "agent";
+                template: "template";
+                deployment: "deployment";
+                identity: "identity";
+                channel: "channel";
+            }>;
+            name: z.ZodString;
+            provider: z.ZodString;
+        }, z.core.$strip>>;
         reason: z.ZodString;
         driftKind: z.ZodOptional<z.ZodEnum<{
             none: "none";
@@ -399,6 +431,22 @@ declare const AgentWithReadinessSchema: z.ZodObject<{
                 name: z.ZodString;
                 provider: z.ZodString;
             }, z.core.$strip>;
+            previousAddress: z.ZodOptional<z.ZodObject<{
+                type: z.ZodEnum<{
+                    file: "file";
+                    memory_store: "memory_store";
+                    environment: "environment";
+                    vault: "vault";
+                    skill: "skill";
+                    agent: "agent";
+                    template: "template";
+                    deployment: "deployment";
+                    identity: "identity";
+                    channel: "channel";
+                }>;
+                name: z.ZodString;
+                provider: z.ZodString;
+            }, z.core.$strip>>;
             reason: z.ZodString;
             driftKind: z.ZodOptional<z.ZodEnum<{
                 none: "none";
@@ -561,6 +609,22 @@ declare const AgentSyncResultSchema: z.ZodObject<{
             name: z.ZodString;
             provider: z.ZodString;
         }, z.core.$strip>;
+        previousAddress: z.ZodOptional<z.ZodObject<{
+            type: z.ZodEnum<{
+                file: "file";
+                memory_store: "memory_store";
+                environment: "environment";
+                vault: "vault";
+                skill: "skill";
+                agent: "agent";
+                template: "template";
+                deployment: "deployment";
+                identity: "identity";
+                channel: "channel";
+            }>;
+            name: z.ZodString;
+            provider: z.ZodString;
+        }, z.core.$strip>>;
         reason: z.ZodString;
         driftKind: z.ZodOptional<z.ZodEnum<{
             none: "none";
@@ -632,6 +696,22 @@ declare const AgentSyncRunSchema: z.ZodObject<{
             name: z.ZodString;
             provider: z.ZodString;
         }, z.core.$strip>;
+        previousAddress: z.ZodOptional<z.ZodObject<{
+            type: z.ZodEnum<{
+                file: "file";
+                memory_store: "memory_store";
+                environment: "environment";
+                vault: "vault";
+                skill: "skill";
+                agent: "agent";
+                template: "template";
+                deployment: "deployment";
+                identity: "identity";
+                channel: "channel";
+            }>;
+            name: z.ZodString;
+            provider: z.ZodString;
+        }, z.core.$strip>>;
         reason: z.ZodString;
         driftKind: z.ZodOptional<z.ZodEnum<{
             none: "none";
@@ -712,6 +792,22 @@ declare const AgentSyncRunSchema: z.ZodObject<{
             name: z.ZodString;
             provider: z.ZodString;
         }, z.core.$strip>;
+        previousAddress: z.ZodOptional<z.ZodObject<{
+            type: z.ZodEnum<{
+                file: "file";
+                memory_store: "memory_store";
+                environment: "environment";
+                vault: "vault";
+                skill: "skill";
+                agent: "agent";
+                template: "template";
+                deployment: "deployment";
+                identity: "identity";
+                channel: "channel";
+            }>;
+            name: z.ZodString;
+            provider: z.ZodString;
+        }, z.core.$strip>>;
         reason: z.ZodString;
         driftKind: z.ZodOptional<z.ZodEnum<{
             none: "none";
@@ -768,6 +864,22 @@ declare const AgentSyncRunSchema: z.ZodObject<{
                 name: z.ZodString;
                 provider: z.ZodString;
             }, z.core.$strip>;
+            previousAddress: z.ZodOptional<z.ZodObject<{
+                type: z.ZodEnum<{
+                    file: "file";
+                    memory_store: "memory_store";
+                    environment: "environment";
+                    vault: "vault";
+                    skill: "skill";
+                    agent: "agent";
+                    template: "template";
+                    deployment: "deployment";
+                    identity: "identity";
+                    channel: "channel";
+                }>;
+                name: z.ZodString;
+                provider: z.ZodString;
+            }, z.core.$strip>>;
             reason: z.ZodString;
             driftKind: z.ZodOptional<z.ZodEnum<{
                 none: "none";

package/dist/session-events.d.ts

@@ -1,4 +1,4 @@
-import { P as ProviderSessionEvent, an as SessionEvent } from './session-event-CxLg_XqS.js';
+import { P as ProviderSessionEvent, an as SessionEvent } from './session-event-mzuENtyH.js';
 import 'zod';
 
 declare function sanitizeSessionEvents(events: ProviderSessionEvent[], options?: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openagentpack/sdk",
-  "version": "0.3.1-beta-85cd4b6-20260727",
+  "version": "0.3.2",
   "description": "OpenAgentPack SDK (Node-compatible runtime)",
   "license": "Apache-2.0",
   "keywords": [