@openagentpack/sdk 0.4.0-beta-2472720-20260827 → 0.5.0

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { C as CloudAgent, a as CloudEnvironment, b as CloudVault, R as ResourceAddress, c as ResourceType, E as EventStreamOptions, P as ProviderSessionEvent, d as EventListOptions, e as ProviderSessionEventList, f as PlannedAction, D as Diagnostic, A as AgentDefinition, g as AgentWithReadiness, h as AgentSyncRun } from './session-event-DHLkM9iF.js';
-export { i as ActionType, j as ActionTypeSchema, k as AgentDefinitionSchema, l as AgentDriftSeverity, m as AgentDriftSeveritySchema, n as AgentModel, o as AgentModelSchema, p as AgentReadiness, q as AgentReadinessSchema, r as AgentReadinessStatus, s as AgentReadinessStatusSchema, t as AgentRecoveryAction, u as AgentRecoveryActionSchema, v as AgentSkillRef, w as AgentSkillRefSchema, x as AgentSyncResult, y as AgentSyncResultSchema, z as AgentSyncRunSchema, B as AgentSyncStatus, F as AgentSyncStatusSchema, G as AgentWithReadinessSchema, H as CloudAgentSchema, I as CloudEnvironmentSchema, J as CloudVaultSchema, K as CreateSessionRequest, L as CreateSessionRequestSchema, M as CreateSessionResponse, N as CreateSessionResponseSchema, O as DiagnosticSchema, Q as DiagnosticSeverity, S as DiagnosticSeveritySchema, T as DriftKind, U as DriftKindSchema, V as GetSessionRequest, W as GetSessionRequestSchema, X as KNOWN_SESSION_EVENT_TYPES, Y as KnownSessionEventType, Z as ListCloudAgentsResponse, _ as ListCloudAgentsResponseSchema, $ as ListCloudEnvironmentsResponse, a0 as ListCloudEnvironmentsResponseSchema, a1 as ListSessionEventsRequest, a2 as ListSessionEventsRequestSchema, a3 as ListSessionEventsResponse, a4 as ListSessionEventsResponseSchema, a5 as ListSessionsRequest, a6 as ListSessionsRequestSchema, a7 as ListSessionsResponse, a8 as ListSessionsResponseSchema, a9 as PlanReadinessImpact, aa as PlanReadinessImpactSchema, ab as PlannedActionSchema, ac as ResourceAddressSchema, ad as ResourceTypeSchema, ae as SendEventRequest, af as SendEventRequestSchema, ag as SendEventResponse, ah as SendEventResponseSchema, ai as Session, aj as SessionAgent, ak as SessionAgentSchema, al as SessionContentBlock, am as SessionContentBlockSchema, an as SessionEvent, ao as SessionEventSchema, ap as SessionEventType, aq as SessionEventTypeName, ar as SessionEventTypeSchema, as as SessionSchema } from './session-event-DHLkM9iF.js';
+import { C as CloudAgent, a as CloudEnvironment, b as CloudVault, R as ResourceAddress, c as ResourceType, E as EventStreamOptions, P as ProviderSessionEvent, d as EventListOptions, e as ProviderSessionEventList, f as PlannedAction, D as Diagnostic, A as AgentDefinition, g as AgentWithReadiness, h as AgentSyncRun } from './session-event-5kLRNMHC.js';
+export { i as ActionType, j as ActionTypeSchema, k as AgentDefinitionSchema, l as AgentDriftSeverity, m as AgentDriftSeveritySchema, n as AgentModel, o as AgentModelSchema, p as AgentReadiness, q as AgentReadinessSchema, r as AgentReadinessStatus, s as AgentReadinessStatusSchema, t as AgentRecoveryAction, u as AgentRecoveryActionSchema, v as AgentSkillRef, w as AgentSkillRefSchema, x as AgentSyncResult, y as AgentSyncResultSchema, z as AgentSyncRunSchema, B as AgentSyncStatus, F as AgentSyncStatusSchema, G as AgentWithReadinessSchema, H as CloudAgentSchema, I as CloudEnvironmentSchema, J as CloudVaultSchema, K as CreateSessionRequest, L as CreateSessionRequestSchema, M as CreateSessionResponse, N as CreateSessionResponseSchema, O as DiagnosticSchema, Q as DiagnosticSeverity, S as DiagnosticSeveritySchema, T as DriftKind, U as DriftKindSchema, V as GetSessionRequest, W as GetSessionRequestSchema, X as KNOWN_SESSION_EVENT_TYPES, Y as KnownSessionEventType, Z as ListCloudAgentsResponse, _ as ListCloudAgentsResponseSchema, $ as ListCloudEnvironmentsResponse, a0 as ListCloudEnvironmentsResponseSchema, a1 as ListSessionEventsRequest, a2 as ListSessionEventsRequestSchema, a3 as ListSessionEventsResponse, a4 as ListSessionEventsResponseSchema, a5 as ListSessionsRequest, a6 as ListSessionsRequestSchema, a7 as ListSessionsResponse, a8 as ListSessionsResponseSchema, a9 as PlanReadinessImpact, aa as PlanReadinessImpactSchema, ab as PlannedActionSchema, ac as ResourceAddressSchema, ad as ResourceTypeSchema, ae as SendEventRequest, af as SendEventRequestSchema, ag as SendEventResponse, ah as SendEventResponseSchema, ai as Session, aj as SessionAgent, ak as SessionAgentSchema, al as SessionContentBlock, am as SessionContentBlockSchema, an as SessionEvent, ao as SessionEventSchema, ap as SessionEventType, aq as SessionEventTypeName, ar as SessionEventTypeSchema, as as SessionSchema } from './session-event-5kLRNMHC.js';
 import { P as ProviderFileInfo } from './file-Cj5-Vx27.js';
 import 'zod';
 
@@ -333,6 +333,7 @@ interface VaultCredentialInfo {
     display_name: string;
     auth_type: string;
     secret_name?: string;
+    mcp_server_url?: string;
     networking_type?: string;
     metadata?: Record<string, string>;
 }

package/dist/index.js

@@ -1310,7 +1310,7 @@ function mapAgent(name, decl, refs, version, projectName) {
 }
 function mapDeployment(name, decl, refs, projectName, uploadedFiles) {
   const body = {
-    name,
+    name: decl.name ?? name,
     agent: refs.agent_version !== void 0 ? { id: refs.agent_id, type: "agent", version: refs.agent_version } : refs.agent_id,
     environment_id: refs.environment_id,
     initial_events: mapInitialEvents(decl.initial_events)
@@ -2215,7 +2215,7 @@ function mapMemoryStore2(name, decl) {
 }
 function mapDeployment2(name, decl, refs, projectName, uploadedFiles) {
   const body = {
-    name,
+    name: decl.name ?? name,
     agent: refs.agent_version !== void 0 ? { id: refs.agent_id, type: "agent", version: refs.agent_version } : refs.agent_id,
     environment_id: refs.environment_id,
     initial_events: mapDeploymentInitialEvents(decl.initial_events)
@@ -2846,7 +2846,7 @@ var QoderAdapter = class _QoderAdapter {
     const currentMetadata = current.metadata ?? {};
     const metadata = { ...body.metadata ?? {} };
     for (const key of Object.keys(currentMetadata)) {
-      if (!key.startsWith("agents.") && !(key in metadata)) metadata[key] = null;
+      if (key !== "created_by" && !key.startsWith("agents.") && !(key in metadata)) metadata[key] = null;
     }
     body.metadata = metadata;
     const res = await client.post(`/environments/${id}`, body);
@@ -3657,24 +3657,17 @@ function mapVault2(name, decl, projectName) {
   return body;
 }
 function mapCredential2(cred) {
-  if (cred.type === "environment_variable") {
-    const body2 = {
-      auth: {
-        type: "environment_variable",
-        secret_name: cred.secret_name,
-        secret_value: cred.secret_value,
-        networking: cred.networking ?? { type: "unrestricted" }
-      },
-      display_name: cred.name
-    };
-    if (cred.metadata) body2.metadata = cred.metadata;
-    return body2;
+  if (cred.type !== "environment_variable") {
+    throw new UserError(
+      `credential '${cred.name}': Bailian only supports credential type 'environment_variable', but '${cred.type}' was declared.`
+    );
   }
   const body = {
     auth: {
-      type: cred.type,
-      token: cred.access_token,
-      mcp_server_url: cred.mcp_server_url
+      type: "environment_variable",
+      secret_name: cred.secret_name,
+      secret_value: cred.secret_value,
+      networking: cred.networking ?? { type: "unrestricted" }
     },
     display_name: cred.name
   };
@@ -4310,6 +4303,7 @@ var BailianAdapter = class _BailianAdapter {
   // thin wrappers over the AgentStudio endpoints, exposed so callers/tests can
   // exercise the full surface through real project code rather than raw fetch.
   async createVault(name, decl) {
+    for (const credential of decl.credentials ?? []) mapCredential2(credential);
     const body = mapVault2(name, decl, this.projectName);
     const res = await this.client.post("/vaults", body);
     const vaultId = res.id;
@@ -4364,6 +4358,7 @@ var BailianAdapter = class _BailianAdapter {
         display_name: raw.display_name ?? raw.id,
         auth_type: auth.type ?? "",
         secret_name: auth.secret_name,
+        mcp_server_url: auth.mcp_server_url,
         networking_type: networking?.type,
         metadata: metadata ? Object.fromEntries(
           Object.entries(metadata).filter((entry) => typeof entry[1] === "string")
@@ -4780,7 +4775,7 @@ function guessMimeType(fileName) {
 // src/internal/providers/bailian/capabilities.ts
 var BAILIAN_CAPABILITIES = {
   environment: { tier: "native", reason: "environments API" },
-  vault: { tier: "native", reason: "vaults + credentials API (static_bearer MCP credentials)" },
+  vault: { tier: "native", reason: "vaults + environment_variable credentials API" },
   skill: { tier: "native", reason: "skills API with 2-step zip upload via Files API" },
   agent: { tier: "native", reason: "agents API with versioned updates" },
   template: { tier: "unsupported", reason: "no Forward Template equivalent on Bailian" },
@@ -6725,7 +6720,9 @@ async function executePlan(plan, ctx, options = {}) {
     await runWithConcurrency(level, concurrency, runAction);
     await ctx.state.save();
   }
-  await reconcileDefaultMemoryStores(ctx, new Set(plan.actions.map((action) => action.address.provider)));
+  if (!ctx.createOnly) {
+    await reconcileDefaultMemoryStores(ctx, new Set(plan.actions.map((action) => action.address.provider)));
+  }
   for (const action of deletions) {
     await runAction(action);
     await ctx.state.save();
@@ -6937,6 +6934,7 @@ async function executeActionInner(action, provider, ctx) {
         } catch (err) {
           result = await adoptOnConflict(err, address, provider, ctx.onFeedback, {
             mode: apiMode,
+            createOnly: ctx.createOnly,
             onExisting: (existing) => provider.updateEnvironment(existing.id, remoteName, decl, apiMode)
           });
           adopted = true;
@@ -6956,6 +6954,7 @@ async function executeActionInner(action, provider, ctx) {
         } catch (err) {
           result = await adoptOnConflict(err, address, provider, ctx.onFeedback, {
             mode: apiMode,
+            createOnly: ctx.createOnly,
             onExisting: (existing) => provider.updateEnvironment(existing.id, remoteName, decl, apiMode)
           });
           adopted = true;
@@ -6982,6 +6981,7 @@ async function executeActionInner(action, provider, ctx) {
         } catch (err) {
           result = await adoptOnConflict(err, address, provider, ctx.onFeedback, {
             mode: apiMode,
+            createOnly: ctx.createOnly,
             onExisting: async (existing) => {
               await provider.deleteVault(existing.id, apiMode);
               return provider.createVault(name, decl, apiMode);
@@ -7018,6 +7018,7 @@ async function executeActionInner(action, provider, ctx) {
         const searchNames = manifestName && manifestName !== remoteName ? [remoteName, manifestName] : [remoteName];
         const existing = await findExistingByNames(provider, "skill", searchNames, apiMode);
         if (existing) {
+          if (ctx.createOnly) throw createOnlyExistingResourceError(address, existing.name);
           result = existing.resource;
           emitRuntimeFeedback(ctx.onFeedback, {
             type: "resource_adopted",
@@ -7033,6 +7034,7 @@ async function executeActionInner(action, provider, ctx) {
             result = await adoptOnConflict(err, address, provider, ctx.onFeedback, {
               mode: apiMode,
               searchNames,
+              createOnly: ctx.createOnly,
               onExisting: async (existing2) => existing2
             });
             adopted = true;
@@ -7099,6 +7101,7 @@ async function executeActionInner(action, provider, ctx) {
         } catch (err) {
           result = await adoptOnConflict(err, address, provider, ctx.onFeedback, {
             mode: apiMode,
+            createOnly: ctx.createOnly,
             onExisting: async (existing) => reconcile(existing.id)
           });
           adopted = true;
@@ -7117,6 +7120,7 @@ async function executeActionInner(action, provider, ctx) {
           result = await provider.createAgent(remoteName, decl, refs);
         } catch (err) {
           result = await adoptOnConflict(err, address, provider, ctx.onFeedback, {
+            createOnly: ctx.createOnly,
             onExisting: (existing) => provider.updateAgent(existing.id, remoteName, decl, refs)
           });
           adopted = true;
@@ -7140,6 +7144,7 @@ async function executeActionInner(action, provider, ctx) {
           result = await createTemplate(remoteName, decl, refs);
         } catch (err) {
           result = await adoptOnConflict(err, address, provider, ctx.onFeedback, {
+            createOnly: ctx.createOnly,
             onExisting: (existing) => updateTemplate(existing.id, remoteName, decl, refs)
           });
           adopted = true;
@@ -7174,6 +7179,7 @@ async function executeActionInner(action, provider, ctx) {
           result = await createIdentity(name, decl);
         } catch (err) {
           if (!(err instanceof ConflictError)) throw err;
+          if (ctx.createOnly) throw createOnlyExistingResourceError(address);
           const existing = await provider.findResource("identity", decl.external_id);
           if (!existing?.id) throw err;
           result = await updateIdentity(existing.id, name, decl);
@@ -7197,6 +7203,7 @@ async function executeActionInner(action, provider, ctx) {
           result = await createChannel(name, decl, refs);
         } catch (err) {
           result = await adoptOnConflict(err, address, provider, ctx.onFeedback, {
+            createOnly: ctx.createOnly,
             onExisting: (existing) => updateChannel(existing.id, name, decl, refs)
           });
           adopted = true;
@@ -7216,6 +7223,7 @@ async function executeActionInner(action, provider, ctx) {
         } catch (err) {
           const preparedFiles = err instanceof DeploymentCreateConflictError ? err.preparedFiles : void 0;
           const existing = await adoptOnConflict(err, address, provider, ctx.onFeedback, {
+            createOnly: ctx.createOnly,
             onExisting: (existing2) => provider.updateDeployment(existing2.id, name, decl, refs, ctx.configPath ?? "", preparedFiles)
           });
           adopted = true;
@@ -7227,6 +7235,7 @@ async function executeActionInner(action, provider, ctx) {
       } else {
         const existing = hasLocalFileSources ? await findExistingByNames(provider, "deployment", [name]) : null;
         if (existing) {
+          if (ctx.createOnly) throw createOnlyExistingResourceError(address, existing.name);
           result = await provider.updateDeployment(existing.resource.id, name, decl, refs, ctx.configPath ?? "");
           emitRuntimeFeedback(ctx.onFeedback, {
             type: "resource_adopted",
@@ -7327,6 +7336,7 @@ async function findExistingByNames(provider, type, names, mode) {
 async function adoptOnConflict(err, address, provider, onFeedback, opts) {
   if (!(err instanceof ConflictError)) throw err;
   const candidates = opts.searchNames?.length ? opts.searchNames : [address.name];
+  if (opts.createOnly) throw createOnlyExistingResourceError(address, candidates.join('" / "'));
   const existing = await findExistingByNames(provider, address.type, candidates, opts.mode);
   if (!existing) throw nameReservedError(err, address, candidates.join('" / "'));
   emitRuntimeFeedback(onFeedback, {
@@ -7337,6 +7347,11 @@ async function adoptOnConflict(err, address, provider, onFeedback, opts) {
   });
   return opts.onExisting(existing.resource);
 }
+function createOnlyExistingResourceError(address, remoteName = address.name) {
+  return new UserError(
+    `Create-only cannot adopt or reconcile existing ${address.type} "${remoteName}" on provider '${address.provider}'. Choose a new name, or use a normal apply/import workflow to manage the existing resource.`
+  );
+}
 function nameReservedError(err, address, searchName) {
   const detail = err instanceof ApiError ? err.message : String(err);
   if (address.type === "channel" && err instanceof ApiError && err.responseBody.includes("CHANNEL_CREDENTIAL_CONFLICT")) {
@@ -8806,6 +8821,10 @@ function resolvePlanScope(ctx, targetProviders, scope) {
   return scope.includeDependencies === false ? [...scope.roots] : collectDependencyClosure(graph, scope.roots);
 }
 async function executePlannedProject(planned, options = {}) {
+  if (planned.mode === "create-only") {
+    const errorDiagnostic = planned.plan.diagnostics.find((diagnostic) => diagnostic.severity === "error");
+    if (errorDiagnostic) throw new UserError(errorDiagnostic.message);
+  }
   const decision = await decideDestructive(planned.destructiveActions, {
     policy: options.policy,
     confirm: options.confirm
@@ -8823,7 +8842,8 @@ async function executePlannedProject(planned, options = {}) {
       configPath: ctx.configPath,
       providers: ctx.providers,
       state: ctx.state,
-      onFeedback: options.onFeedback
+      onFeedback: options.onFeedback,
+      createOnly: planned.mode === "create-only"
     },
     { concurrency: options.concurrency }
   );
@@ -9368,7 +9388,10 @@ var BAILIAN_OPERATIONS = {
   "skill.versions": API_KEY,
   "skill.download": API_KEY,
   "vault.create": { ...API_KEY, reason: "YAML declaration plus scoped create-only apply." },
-  "vault.credential.create": { ...API_KEY, reason: "YAML declaration plus scoped Vault transaction." },
+  "vault.credential.create": {
+    ...API_KEY,
+    reason: "YAML declaration plus scoped Vault transaction; Bailian supports environment_variable credentials only."
+  },
   "vault.list": API_KEY,
   "vault.get": API_KEY,
   "vault.search": CLIENT_SEARCH,
@@ -9483,6 +9506,11 @@ async function prepareVaultCredentialCreate(ctx, vaultName, credentialName, opti
   if (vault.credentials.slice(0, -1).some((entry) => entry.name === credentialName)) {
     throw new UserError(`Vault '${vaultName}' already declares a credential named '${credentialName}'.`);
   }
+  if (provider === "bailian" && credential.type !== "environment_variable") {
+    throw new UserError(
+      `Credential '${credentialName}' uses '${credential.type}', but Bailian only supports 'environment_variable' credentials.`
+    );
+  }
   const address = { type: "vault", name: vaultName, provider };
   const priorConfig = structuredClone(ctx.config);
   priorConfig.vaults[vaultName] = {
@@ -9541,7 +9569,14 @@ function resolveVaultProvider(ctx, declaredProvider, requestedProvider) {
   throw new UserError("Cannot infer one provider for Vault Credential create.");
 }
 function credentialMatches(remote, desired) {
-  return remote.auth_type === desired.type && remote.secret_name === desired.secret_name && (remote.networking_type ?? "unrestricted") === (desired.networking?.type ?? "unrestricted");
+  if (remote.auth_type !== desired.type || !metadataMatches(remote.metadata, desired.metadata)) return false;
+  if (desired.type === "static_bearer") return remote.mcp_server_url === desired.mcp_server_url;
+  return remote.secret_name === desired.secret_name && (remote.networking_type ?? "unrestricted") === (desired.networking?.type ?? "unrestricted");
+}
+function metadataMatches(remote, desired) {
+  const remoteEntries = Object.entries(remote ?? {});
+  const desiredEntries = Object.entries(desired ?? {});
+  return remoteEntries.length === desiredEntries.length && desiredEntries.every(([key, value]) => remote?.[key] === value);
 }
 
 // src/internal/core/destroy-runtime.ts

package/dist/session-events.d.ts

@@ -1,4 +1,4 @@
-import { P as ProviderSessionEvent, an as SessionEvent } from './session-event-DHLkM9iF.js';
+import { P as ProviderSessionEvent, an as SessionEvent } from './session-event-5kLRNMHC.js';
 import 'zod';
 
 declare function sanitizeSessionEvents(events: ProviderSessionEvent[], options?: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openagentpack/sdk",
-  "version": "0.4.0-beta-2472720-20260827",
+  "version": "0.5.0",
   "description": "OpenAgentPack SDK (Node-compatible runtime)",
   "license": "Apache-2.0",
   "keywords": [

package/dist/{session-event-DHLkM9iF.d.ts → session-event-5kLRNMHC.d.ts}

@@ -155,8 +155,8 @@ declare const PlannedActionSchema: z.ZodObject<{
 }, z.core.$strip>;
 type PlannedAction = z.infer<typeof PlannedActionSchema>;
 declare const AgentReadinessStatusSchema: z.ZodEnum<{
-    ready: "ready";
     error: "error";
+    ready: "ready";
     missing: "missing";
     creating: "creating";
     updating: "updating";
@@ -203,8 +203,8 @@ declare const AgentDefinitionSchema: z.ZodObject<{
 type AgentDefinition = z.infer<typeof AgentDefinitionSchema>;
 declare const AgentReadinessSchema: z.ZodObject<{
     status: z.ZodEnum<{
-        ready: "ready";
         error: "error";
+        ready: "ready";
         missing: "missing";
         creating: "creating";
         updating: "updating";
@@ -353,8 +353,8 @@ declare const AgentWithReadinessSchema: z.ZodObject<{
     }, z.core.$strip>;
     readiness: z.ZodObject<{
         status: z.ZodEnum<{
-            ready: "ready";
             error: "error";
+            ready: "ready";
             missing: "missing";
             creating: "creating";
             updating: "updating";
@@ -585,9 +585,9 @@ declare const SessionEventTypeSchema: z.ZodEnum<{
 }>;
 type SessionEventType = z.infer<typeof SessionEventTypeSchema>;
 declare const AgentSyncStatusSchema: z.ZodEnum<{
-    failed: "failed";
     completed: "completed";
     blocked: "blocked";
+    failed: "failed";
 }>;
 type AgentSyncStatus = z.infer<typeof AgentSyncStatusSchema>;
 declare const AgentSyncResultSchema: z.ZodObject<{
@@ -663,8 +663,8 @@ declare const AgentSyncResultSchema: z.ZodObject<{
         }, z.core.$strip>>;
     }, z.core.$strip>;
     status: z.ZodEnum<{
-        failed: "failed";
         success: "success";
+        failed: "failed";
         skipped: "skipped";
     }>;
     error: z.ZodOptional<z.ZodString>;
@@ -674,9 +674,9 @@ declare const AgentSyncRunSchema: z.ZodObject<{
     agentId: z.ZodString;
     provider: z.ZodOptional<z.ZodString>;
     status: z.ZodEnum<{
-        failed: "failed";
         completed: "completed";
         blocked: "blocked";
+        failed: "failed";
     }>;
     actions: z.ZodArray<z.ZodObject<{
         action: z.ZodEnum<{
@@ -918,8 +918,8 @@ declare const AgentSyncRunSchema: z.ZodObject<{
             }, z.core.$strip>>;
         }, z.core.$strip>;
         status: z.ZodEnum<{
-            failed: "failed";
             success: "success";
+            failed: "failed";
             skipped: "skipped";
         }>;
         error: z.ZodOptional<z.ZodString>;