@openagentpack/sdk 0.4.0 → 0.6.0

package/dist/{chunk-GAAU67HX.js → chunk-6PDVAFLK.js}

@@ -19,6 +19,8 @@ function toSessionEvent(raw) {
   const event = { type, raw_type: rawType, raw };
   if (typeof raw.id === "string") event.id = raw.id;
   if (typeof raw.role === "string") event.role = raw.role;
+  const threadId = extractSessionThreadId(raw);
+  if (threadId) event.session_thread_id = threadId;
   if (type === "message") {
     if (event.role === void 0) {
       if (rawType === "thread_message_sent") event.role = "user";
@@ -46,6 +48,17 @@ function toSessionEvent(raw) {
   }
   return event;
 }
+function extractSessionThreadId(raw) {
+  if (typeof raw.session_thread_id === "string") return raw.session_thread_id;
+  const metadata = raw.metadata;
+  if (metadata && typeof metadata === "object" && !Array.isArray(metadata)) {
+    const value = metadata.session_thread_id;
+    if (typeof value === "string") return value;
+  }
+  const data = firstContentData(raw);
+  if (typeof data?.session_thread_id === "string") return data.session_thread_id;
+  return void 0;
+}
 function extractContentText(raw) {
   const content = raw.content;
   if (typeof content === "string") return content;

package/dist/{file-URqwlxLf.d.ts → file-Cj5-Vx27.d.ts}

@@ -7,6 +7,11 @@ interface ProviderFileInfo {
     downloadable?: boolean;
     status?: string;
     purpose?: string;
+    scope?: {
+        type?: string;
+        id?: string;
+    };
+    attributes?: Record<string, unknown>;
 }
 
 export type { ProviderFileInfo as P };

package/dist/file-lifecycle.d.ts

@@ -1,4 +1,4 @@
-import { P as ProviderFileInfo } from './file-URqwlxLf.js';
+import { P as ProviderFileInfo } from './file-Cj5-Vx27.js';
 
 /** Neutral file scan status after provider wire normalization. */
 type NeutralFileStatus = "available" | "checking" | "rejected" | "type_rejected";

package/dist/index.d.ts

@@ -1,6 +1,6 @@
-import { R as ResourceAddress, a as ResourceType, C as CloudAgent, b as CloudEnvironment, c as CloudVault, E as EventStreamOptions, P as ProviderSessionEvent, d as EventListOptions, e as ProviderSessionEventList, f as PlannedAction, D as Diagnostic, A as AgentDefinition, g as AgentWithReadiness, h as AgentSyncRun } from './session-event--Mxe1bnT.js';
-export { i as ActionType, j as ActionTypeSchema, k as AgentDefinitionSchema, l as AgentDriftSeverity, m as AgentDriftSeveritySchema, n as AgentModel, o as AgentModelSchema, p as AgentReadiness, q as AgentReadinessSchema, r as AgentReadinessStatus, s as AgentReadinessStatusSchema, t as AgentRecoveryAction, u as AgentRecoveryActionSchema, v as AgentSkillRef, w as AgentSkillRefSchema, x as AgentSyncResult, y as AgentSyncResultSchema, z as AgentSyncRunSchema, B as AgentSyncStatus, F as AgentSyncStatusSchema, G as AgentWithReadinessSchema, H as CloudAgentSchema, I as CloudEnvironmentSchema, J as CloudVaultSchema, K as CreateSessionRequest, L as CreateSessionRequestSchema, M as CreateSessionResponse, N as CreateSessionResponseSchema, O as DiagnosticSchema, Q as DiagnosticSeverity, S as DiagnosticSeveritySchema, T as DriftKind, U as DriftKindSchema, V as GetSessionRequest, W as GetSessionRequestSchema, X as KNOWN_SESSION_EVENT_TYPES, Y as KnownSessionEventType, Z as ListCloudAgentsResponse, _ as ListCloudAgentsResponseSchema, $ as ListCloudEnvironmentsResponse, a0 as ListCloudEnvironmentsResponseSchema, a1 as ListSessionEventsRequest, a2 as ListSessionEventsRequestSchema, a3 as ListSessionEventsResponse, a4 as ListSessionEventsResponseSchema, a5 as ListSessionsRequest, a6 as ListSessionsRequestSchema, a7 as ListSessionsResponse, a8 as ListSessionsResponseSchema, a9 as PlanReadinessImpact, aa as PlanReadinessImpactSchema, ab as PlannedActionSchema, ac as ResourceAddressSchema, ad as ResourceTypeSchema, ae as SendEventRequest, af as SendEventRequestSchema, ag as SendEventResponse, ah as SendEventResponseSchema, ai as Session, aj as SessionAgent, ak as SessionAgentSchema, al as SessionContentBlock, am as SessionContentBlockSchema, an as SessionEvent, ao as SessionEventSchema, ap as SessionEventType, aq as SessionEventTypeName, ar as SessionEventTypeSchema, as as SessionSchema } from './session-event--Mxe1bnT.js';
-import { P as ProviderFileInfo } from './file-URqwlxLf.js';
+import { C as CloudAgent, a as CloudEnvironment, b as CloudVault, R as ResourceAddress, c as ResourceType, E as EventStreamOptions, P as ProviderSessionEvent, d as EventListOptions, e as ProviderSessionEventList, f as PlannedAction, D as Diagnostic, A as AgentDefinition, g as AgentReadiness, h as AgentWithReadiness, i as AgentSyncRun } from './session-event-B63Rbjim.js';
+export { j as ActionType, k as ActionTypeSchema, l as AgentDefinitionSchema, m as AgentDriftSeverity, n as AgentDriftSeveritySchema, o as AgentModel, p as AgentModelSchema, q as AgentReadinessSchema, r as AgentReadinessStatus, s as AgentReadinessStatusSchema, t as AgentRecoveryAction, u as AgentRecoveryActionSchema, v as AgentSkillRef, w as AgentSkillRefSchema, x as AgentSyncReason, y as AgentSyncReasonSchema, z as AgentSyncResult, B as AgentSyncResultSchema, F as AgentSyncRunSchema, G as AgentSyncStatus, H as AgentSyncStatusSchema, I as AgentWithReadinessSchema, J as CloudAgentSchema, K as CloudEnvironmentSchema, L as CloudVaultSchema, M as CreateSessionRequest, N as CreateSessionRequestSchema, O as CreateSessionResponse, Q as CreateSessionResponseSchema, S as DiagnosticSchema, T as DiagnosticSeverity, U as DiagnosticSeveritySchema, V as DriftKind, W as DriftKindSchema, X as GetSessionRequest, Y as GetSessionRequestSchema, Z as KNOWN_SESSION_EVENT_TYPES, _ as KnownSessionEventType, $ as ListCloudAgentsResponse, a0 as ListCloudAgentsResponseSchema, a1 as ListCloudEnvironmentsResponse, a2 as ListCloudEnvironmentsResponseSchema, a3 as ListSessionEventsRequest, a4 as ListSessionEventsRequestSchema, a5 as ListSessionEventsResponse, a6 as ListSessionEventsResponseSchema, a7 as ListSessionsRequest, a8 as ListSessionsRequestSchema, a9 as ListSessionsResponse, aa as ListSessionsResponseSchema, ab as PlanReadinessImpact, ac as PlanReadinessImpactSchema, ad as PlannedActionSchema, ae as ResourceAddressSchema, af as ResourceTypeSchema, ag as SendEventRequest, ah as SendEventRequestSchema, ai as SendEventResponse, aj as SendEventResponseSchema, ak as Session, al as SessionAgent, am as SessionAgentSchema, an as SessionContentBlock, ao as SessionContentBlockSchema, ap as SessionEvent, aq as SessionEventSchema, ar as SessionEventType, as as SessionEventTypeName, at as SessionEventTypeSchema, au as SessionSchema } from './session-event-B63Rbjim.js';
+import { P as ProviderFileInfo } from './file-Cj5-Vx27.js';
 import 'zod';
 
 declare class UserError extends Error {
@@ -90,17 +90,26 @@ interface VaultDecl {
     metadata?: Record<string, string>;
 }
 type CredentialType = "static_bearer" | "environment_variable";
+interface CredentialNetworking {
+    /** Legacy policy type; Bailian requests use allowed_hosts instead. */
+    type?: "unrestricted" | "limited";
+    allowed_hosts?: string[];
+}
+interface CredentialInjectionLocation {
+    header?: boolean;
+    body?: boolean;
+}
 interface CredentialDecl {
     name: string;
     type: CredentialType;
+    metadata?: Record<string, string>;
     mcp_server_url?: string;
     access_token?: string;
     protocol?: "sse" | "streamable_http";
     secret_name?: string;
     secret_value?: string;
-    networking?: {
-        type: "unrestricted" | "limited";
-    };
+    networking?: CredentialNetworking;
+    injection_location?: CredentialInjectionLocation;
 }
 interface MemoryStoreDecl {
     description: string;
@@ -122,6 +131,7 @@ interface SkillDecl {
 }
 interface FileDecl {
     source: string;
+    /** Local label only; declarative uploads preserve the source file's basename. */
     name?: string;
     purpose?: string;
     provider?: ProviderName;
@@ -143,9 +153,9 @@ interface AgentDecl {
     mcp_servers?: McpServerDecl[];
     skills?: AgentSkillDecl[];
     vault?: string;
-    /** File declarations inherited by a Qoder Forward Template. */
-    files?: string[];
     memory_stores?: string[];
+    /** String refs are inherited by Qoder Forward Templates; object refs mount Files into Sessions. */
+    files?: Array<string | AgentFileMountDecl>;
     /** Desired display metadata for Qoder Forward's system-managed writable Store. */
     default_memory_store?: DefaultMemoryStoreDecl;
     /** Resources mounted into every managed session created for this agent. */
@@ -159,6 +169,12 @@ interface AgentDecl {
     /** Provider-specific remote materialization. Omitted means the existing managed Agent resource. */
     delivery?: Record<ProviderName, AgentDeliveryDecl>;
 }
+interface AgentFileMountDecl {
+    /** Logical key under the top-level files section. */
+    file: string;
+    /** Provider sandbox path. Bailian paths live under /mnt. */
+    mount_path: string;
+}
 interface DefaultMemoryStoreDecl {
     name: string;
     description?: string;
@@ -220,6 +236,7 @@ interface MultiagentDecl {
     agents: string[];
 }
 interface DeploymentDecl {
+    name?: string;
     agent: string;
     agent_version?: number;
     environment?: string;
@@ -292,6 +309,114 @@ interface ResolvedProjectConfig extends ProjectConfig {
     _resolved: true;
 }
 
+interface ProviderSkillInfo {
+    id: string;
+    name: string;
+    description?: string;
+    source: "custom" | "official";
+    status: "checking" | "active" | "rejected" | "deleted";
+    latest_version?: string;
+    created_at?: string;
+    updated_at?: string;
+    attributes?: Record<string, unknown>;
+}
+
+interface CursorPage<T> {
+    data: T[];
+    has_more: boolean;
+    next_page?: string;
+}
+interface CursorListOptions {
+    limit?: number;
+    page?: string;
+}
+interface AgentListOptions extends CursorListOptions {
+    include_archived?: boolean;
+}
+type AgentVersionListOptions = CursorListOptions;
+type AgentPage = CursorPage<CloudAgent>;
+interface EnvironmentListOptions extends CursorListOptions {
+    include_archived?: boolean;
+}
+type EnvironmentPage = CursorPage<CloudEnvironment>;
+interface VaultListOptions extends CursorListOptions {
+    include_archived?: boolean;
+}
+type VaultPage = CursorPage<CloudVault>;
+interface VaultCredentialInfo {
+    id: string;
+    display_name: string;
+    auth_type: string;
+    secret_name?: string;
+    mcp_server_url?: string;
+    networking_type?: string;
+    networking?: CredentialNetworking;
+    injection_location?: CredentialInjectionLocation;
+    metadata?: Record<string, string>;
+}
+interface SkillListOptions extends CursorListOptions {
+    source?: "custom" | "official";
+}
+interface SkillVersionInfo {
+    id?: string;
+    skill_id: string;
+    type: string;
+    name?: string;
+    description?: string;
+    version: string;
+    status?: string;
+    created_at?: string;
+    updated_at?: string;
+    additional_properties?: Record<string, unknown>;
+    attributes: Record<string, unknown>;
+}
+type SkillVersionListOptions = CursorListOptions;
+type SkillVersionPage = CursorPage<SkillVersionInfo>;
+interface SkillDownloadInfo {
+    skill_id: string;
+    version: string;
+    file_url: string;
+}
+type SkillPage = CursorPage<ProviderSkillInfo>;
+interface FileListOptions extends CursorListOptions {
+    scope_id?: string;
+}
+type FilePage = CursorPage<ProviderFileInfo>;
+interface SessionUpdateInput {
+    title?: string;
+    metadata?: Record<string, string>;
+}
+/** Raw AgentStudio message/event input. Provider adapters preserve the wire shape. */
+type SessionEventInput = Record<string, unknown>;
+interface SessionEventSendResult {
+    event_ids: string[];
+    attributes: Record<string, unknown>;
+}
+interface DeploymentRunInfo {
+    id: string;
+    deployment_id?: string;
+    session_id?: string | null;
+    status?: string;
+    error?: {
+        type?: string;
+        message?: string;
+    };
+    created_at?: string;
+    updated_at?: string;
+    attributes: Record<string, unknown>;
+}
+type DeploymentRunPage = CursorPage<DeploymentRunInfo>;
+type ManagedAgentOperationAuth = "api_key" | "none";
+interface ManagedAgentOperationCapability {
+    supported: boolean;
+    auth: ManagedAgentOperationAuth | null;
+    reason?: string;
+}
+interface ManagedAgentProviderCapabilities {
+    provider: string;
+    operations: Record<string, ManagedAgentOperationCapability>;
+}
+
 type MemoryMetadata = Record<string, string>;
 interface MemoryStoreInfo {
     id: string;
@@ -478,6 +603,9 @@ interface ProviderSessionInfo {
 }
 interface SessionFilter {
     agent_id?: string;
+    statuses?: string[];
+    created_at_gte?: string;
+    created_at_lte?: string;
     limit?: number;
     page?: string;
 }
@@ -492,17 +620,6 @@ interface SkillFile {
     content: Buffer;
 }
 
-interface ProviderSkillInfo {
-    id: string;
-    name: string;
-    description?: string;
-    source: "custom" | "official";
-    status: "checking" | "active" | "rejected" | "deleted";
-    latest_version?: string;
-    created_at?: string;
-    updated_at?: string;
-}
-
 interface ResourceState {
     address: ResourceAddress;
     remote_id: string | null;
@@ -648,6 +765,8 @@ interface DeploymentInfo$1 {
 }
 interface DeploymentListFilter {
     agent_id?: string;
+    /** Bailian server-side fuzzy match against deployment id or name. */
+    keyword?: string;
     status?: "active" | "paused";
     include_archived?: boolean;
     limit?: number;
@@ -680,12 +799,20 @@ interface ProviderAdapter {
         prefix?: string;
         limit?: number;
     }): Promise<CloudAgent[]>;
+    /** Cursor-preserving API listing used by command surfaces. */
+    listAgentResources?(options?: AgentListOptions): Promise<AgentPage>;
+    getRemoteAgent?(id: string, version?: number): Promise<CloudAgent>;
+    listAgentVersions?(id: string, options?: AgentVersionListOptions): Promise<AgentPage>;
     listEnvironments?(filter?: {
         limit?: number;
     }): Promise<CloudEnvironment[]>;
+    listEnvironmentResources?(options?: EnvironmentListOptions): Promise<EnvironmentPage>;
+    getRemoteEnvironment?(id: string): Promise<CloudEnvironment>;
     listVaults?(filter?: {
         limit?: number;
     }): Promise<CloudVault[]>;
+    listVaultResources?(options?: VaultListOptions): Promise<VaultPage>;
+    getRemoteVault?(id: string): Promise<CloudVault>;
     getDriftSupport?(type: ResourceType): DriftSupport;
     readComparableResource?(type: ResourceType, id: string | null, name: string): Promise<ComparableRemoteResource | null>;
     normalizeDesiredResource?(type: ResourceType, name: string, decl: unknown): unknown | null;
@@ -700,6 +827,8 @@ interface ProviderAdapter {
     deleteEnvironment(id: string, cascade?: boolean, mode?: ProviderResourceMode): Promise<void>;
     createVault(name: string, decl: VaultDecl, mode?: ProviderResourceMode): Promise<RemoteResource>;
     deleteVault(id: string, mode?: ProviderResourceMode): Promise<void>;
+    createCredential?(vaultId: string, credential: CredentialDecl): Promise<RemoteResource>;
+    listCredentials?(vaultId: string): Promise<VaultCredentialInfo[]>;
     createSkill(name: string, decl: SkillDecl, files: SkillFile[], mode?: ProviderResourceMode): Promise<RemoteResource>;
     updateSkill(id: string, name: string, decl: SkillDecl, files: SkillFile[], mode?: ProviderResourceMode): Promise<RemoteResource>;
     deleteSkill(id: string, mode?: ProviderResourceMode): Promise<void>;
@@ -740,6 +869,12 @@ interface ProviderAdapter {
     runDeployment(ctx: DeploymentContext): Promise<DeploymentRunResult$1>;
     getDeployment(ctx: DeploymentContext): Promise<DeploymentInfo$1>;
     listDeployments?(filter?: DeploymentListFilter): Promise<DeploymentListResult>;
+    getDeploymentById?(id: string): Promise<DeploymentInfo$1>;
+    runDeploymentById?(id: string): Promise<DeploymentRunResult$1>;
+    pauseDeploymentById?(id: string): Promise<DeploymentInfo$1>;
+    unpauseDeploymentById?(id: string): Promise<DeploymentInfo$1>;
+    listDeploymentRuns?(deploymentId: string, options?: CursorListOptions): Promise<DeploymentRunPage>;
+    getDeploymentRun?(runId: string): Promise<DeploymentRunInfo>;
     pauseDeployment?(ctx: DeploymentContext): Promise<DeploymentInfo$1>;
     unpauseDeployment?(ctx: DeploymentContext): Promise<DeploymentInfo$1>;
     uploadFile(filePath: string, options?: {
@@ -765,14 +900,20 @@ interface ProviderAdapter {
     }>;
     /** List workspace user-uploaded files (newest first). Optional — only providers with a list API implement it. */
     listFiles?(): Promise<ProviderFileInfo[]>;
+    listFileResources?(options?: FileListOptions): Promise<FilePage>;
+    downloadFileContent?(id: string): Promise<Uint8Array>;
     /**
      * List skills (newest first). `source` selects the catalog: "custom" (workspace-uploaded, the
      * default) or "official" (the provider's built-in catalog). Optional — only providers with a
      * list API implement it.
      */
     listSkills?(source?: "custom" | "official"): Promise<ProviderSkillInfo[]>;
+    listSkillResources?(options?: SkillListOptions): Promise<SkillPage>;
     /** Fetch a single skill's metadata (incl. scan `status`); used to poll create → active. */
     getSkillInfo?(id: string): Promise<ProviderSkillInfo>;
+    listSkillVersions?(id: string, options?: SkillVersionListOptions): Promise<SkillVersionPage>;
+    getSkillVersion?(id: string, version: string): Promise<SkillVersionInfo>;
+    getSkillDownloadInfo?(id: string, version: string): Promise<SkillDownloadInfo>;
     /**
      * Create a skill from an already-uploaded zip's file_id and return immediately with the
      * initial (usually `checking`) status. NON-blocking — unlike `createSkill`, it does NOT wait
@@ -782,8 +923,11 @@ interface ProviderAdapter {
     createSession(bindings: SessionBindings): Promise<ProviderSessionInfo>;
     listSessions(filter?: SessionFilter): Promise<SessionListResult>;
     getSession(id: string): Promise<ProviderSessionInfo>;
+    updateSession?(id: string, input: SessionUpdateInput): Promise<ProviderSessionInfo>;
+    archiveSession?(id: string): Promise<ProviderSessionInfo>;
     deleteSession(id: string): Promise<void>;
     sendSessionMessage(sessionId: string, message: string): Promise<string | undefined>;
+    sendSessionEvents?(sessionId: string, events: SessionEventInput[]): Promise<SessionEventSendResult>;
     streamSessionEvents(sessionId: string, options?: EventStreamOptions): AsyncIterable<ProviderSessionEvent>;
     listSessionEvents(sessionId: string, options?: EventListOptions): Promise<ProviderSessionEventList>;
     listModels?(): Promise<ModelInfo[]>;
@@ -886,11 +1030,15 @@ interface ResolveProjectConfigOptions {
     projectName?: string;
     /** Expand `${env:...}` references while loading (defaults to true). */
     resolveEnv?: boolean;
+    /** Project-local fallback values; the process environment takes precedence. Never mutates process.env. */
+    environment?: Record<string, string>;
 }
 interface LoadedProjectConfig {
     configPath: string;
     projectName: string;
     config: ResolvedProjectConfig;
+    /** Root config and local files/directories that influence the resolved project. */
+    sourcePaths: string[];
 }
 /**
  * Shared config-resolution spine for every host: load the config file, raise
@@ -903,6 +1051,10 @@ interface ResolveProjectConfigFromObjectOptions {
     projectName: string;
     /** Base path used to resolve any `file:` references (defaults to process.cwd()). */
     basePath?: string;
+    /** Resolve `${ENV_VAR}` references recursively before schema validation. */
+    resolveEnv?: boolean;
+    /** Project-local fallback values; the process environment takes precedence. */
+    environment?: Record<string, string>;
 }
 /**
  * Object-level twin of {@link resolveProjectConfig}: validate an in-memory config
@@ -930,10 +1082,18 @@ type RuntimeFeedbackSink = (event: RuntimeFeedbackEvent) => void;
 
 interface ResourceRuntimeOptions extends DestructiveDecisionOptions {
     provider?: string;
+    scope?: ResourcePlanScope;
+    mode?: ResourceSyncMode;
     refresh?: boolean;
     refreshOnly?: boolean;
     quiet?: boolean;
     onFeedback?: RuntimeFeedbackSink;
+    concurrency?: number;
+}
+type ResourceSyncMode = "reconcile" | "create-only";
+interface ResourcePlanScope {
+    roots: ResourceAddress[];
+    includeDependencies?: boolean;
 }
 interface ResourceRefreshResult {
     removed: ResourceState[];
@@ -957,6 +1117,8 @@ interface ResourcePlanResult {
     refreshResult?: ResourceRefreshResult;
     targetProviders?: string[];
     destructiveActions: PlannedAction[];
+    selectedAddresses?: ResourceAddress[];
+    mode?: ResourceSyncMode;
 }
 type DestructivePolicy = "block" | "prompt" | "force";
 interface DestructiveDecisionOptions {
@@ -967,6 +1129,7 @@ interface ResourceSyncRun {
     planned: ResourcePlanResult;
     execution?: ResourceExecutionResult;
 }
+declare function planProjectWithStateBackend(input: BackendRuntimeInput, options?: ResourceRuntimeOptions): Promise<ResourcePlanResult>;
 declare function syncProjectResourcesWithStateBackend(input: BackendRuntimeInput, options?: ResourceRuntimeOptions): Promise<ResourceSyncRun>;
 declare function importResource(ctx: ProjectRuntimeContext, address: ResourceAddress, remoteId: string, options?: {
     resourceVersion?: number;
@@ -991,6 +1154,14 @@ declare function validateProjectConfig(config: ProjectConfig, options?: Validate
  */
 declare function collectConfigReferences(config: ProjectConfig): Diagnostic[];
 
+interface ProjectSourceInspection {
+    diagnostics: Diagnostic[];
+    redacted_source: string;
+    sensitive_literals: string[];
+}
+/** Validates a complete agents.yaml source and produces a display-safe copy. */
+declare function inspectProjectSource(source: string, configPath: string): Promise<ProjectSourceInspection>;
+
 interface SyncProjectOptions {
     /** Provider to read remote resources from (single provider, not "all"). */
     provider: string;
@@ -1121,6 +1292,105 @@ declare function runDeploymentForContext(ctx: ProjectRuntimeContext, name: strin
 declare function pauseDeploymentForContext(ctx: ProjectRuntimeContext, name: string, paused: boolean, resolvedProvider?: string): Promise<DeploymentInfo$1>;
 declare function getDeploymentRuntimeProviderForContext(ctx: ProjectRuntimeContext, name: string, overrideProvider?: string): string;
 
+interface ManagedApiTarget {
+    provider?: string;
+}
+declare function listRemoteAgents(ctx: ProjectRuntimeContext, options?: ManagedApiTarget & AgentListOptions): Promise<AgentPage>;
+declare function getRemoteAgent(ctx: ProjectRuntimeContext, id: string, options?: ManagedApiTarget & {
+    version?: number;
+}): Promise<{
+    id: string;
+    name?: string | undefined;
+    description?: string | null | undefined;
+    model?: unknown;
+    system?: string | undefined;
+    tools?: unknown;
+    skills?: unknown;
+    mcp_servers?: unknown;
+    metadata?: Record<string, string> | undefined;
+    version?: number | undefined;
+    type?: string | undefined;
+    workspace_id?: string | undefined;
+    created_at?: string | undefined;
+    updated_at?: string | undefined;
+    archived_at?: string | null | undefined;
+    attributes?: Record<string, unknown> | undefined;
+}>;
+declare function listRemoteAgentVersions(ctx: ProjectRuntimeContext, id: string, options?: ManagedApiTarget & AgentVersionListOptions): Promise<AgentPage>;
+declare function listRemoteEnvironments(ctx: ProjectRuntimeContext, options?: ManagedApiTarget & EnvironmentListOptions): Promise<EnvironmentPage>;
+declare function getRemoteEnvironment(ctx: ProjectRuntimeContext, id: string, options?: ManagedApiTarget): Promise<{
+    id: string;
+    name?: string | undefined;
+    description?: string | null | undefined;
+    config?: unknown;
+    metadata?: Record<string, string> | undefined;
+    scope?: string | undefined;
+    version?: number | undefined;
+    type?: string | undefined;
+    workspace_id?: string | undefined;
+    created_at?: string | undefined;
+    updated_at?: string | undefined;
+    archived_at?: string | null | undefined;
+    attributes?: Record<string, unknown> | undefined;
+}>;
+declare function listRemoteVaults(ctx: ProjectRuntimeContext, options?: ManagedApiTarget & VaultListOptions): Promise<VaultPage>;
+declare function getRemoteVault(ctx: ProjectRuntimeContext, id: string, options?: ManagedApiTarget): Promise<{
+    id: string;
+    display_name?: string | undefined;
+    metadata?: Record<string, string> | undefined;
+    type?: string | undefined;
+    created_at?: string | null | undefined;
+    updated_at?: string | null | undefined;
+    archived_at?: string | null | undefined;
+    attributes?: Record<string, unknown> | undefined;
+}>;
+declare function listRemoteSkills(ctx: ProjectRuntimeContext, options?: ManagedApiTarget & SkillListOptions): Promise<SkillPage>;
+declare function getRemoteSkill(ctx: ProjectRuntimeContext, id: string, options?: ManagedApiTarget): Promise<ProviderSkillInfo>;
+declare function listRemoteSkillVersions(ctx: ProjectRuntimeContext, id: string, options?: ManagedApiTarget & SkillVersionListOptions): Promise<SkillVersionPage>;
+declare function getRemoteSkillVersion(ctx: ProjectRuntimeContext, id: string, version: string, options?: ManagedApiTarget): Promise<SkillVersionInfo>;
+declare function getRemoteSkillDownloadInfo(ctx: ProjectRuntimeContext, id: string, version: string, options?: ManagedApiTarget): Promise<SkillDownloadInfo>;
+declare function downloadRemoteSkill(ctx: ProjectRuntimeContext, id: string, version: string, options?: ManagedApiTarget): Promise<Uint8Array>;
+declare function listRemoteFiles(ctx: ProjectRuntimeContext, options?: ManagedApiTarget & FileListOptions): Promise<FilePage>;
+declare function downloadRemoteFile(ctx: ProjectRuntimeContext, id: string, options?: ManagedApiTarget): Promise<Uint8Array>;
+declare function updateRemoteSession(ctx: ProjectRuntimeContext, id: string, input: SessionUpdateInput, options?: ManagedApiTarget): Promise<ProviderSessionInfo>;
+declare function archiveRemoteSession(ctx: ProjectRuntimeContext, id: string, options?: ManagedApiTarget): Promise<ProviderSessionInfo>;
+declare function sendRemoteSessionEvents(ctx: ProjectRuntimeContext, id: string, events: SessionEventInput[], options?: ManagedApiTarget): Promise<SessionEventSendResult>;
+declare function listRemoteDeployments(ctx: ProjectRuntimeContext, options?: ManagedApiTarget & DeploymentListFilter): Promise<DeploymentListResult>;
+declare function getRemoteDeployment(ctx: ProjectRuntimeContext, id: string, options?: ManagedApiTarget): Promise<DeploymentInfo$1>;
+declare function runRemoteDeployment(ctx: ProjectRuntimeContext, id: string, options?: ManagedApiTarget): Promise<DeploymentRunResult$1>;
+declare function setRemoteDeploymentPaused(ctx: ProjectRuntimeContext, id: string, paused: boolean, options?: ManagedApiTarget): Promise<DeploymentInfo$1>;
+declare function listRemoteDeploymentRuns(ctx: ProjectRuntimeContext, deploymentId: string, options?: ManagedApiTarget & {
+    limit?: number;
+    page?: string;
+}): Promise<DeploymentRunPage>;
+declare function getRemoteDeploymentRun(ctx: ProjectRuntimeContext, runId: string, options?: ManagedApiTarget): Promise<DeploymentRunInfo>;
+declare function getManagedAgentProviderCapabilities(provider: string): ManagedAgentProviderCapabilities;
+
+interface VaultCredentialCreateOptions {
+    provider?: string;
+    refresh?: boolean;
+    quiet?: boolean;
+    /** Set false only for an offline preview; create always requires the remote duplicate check. */
+    checkRemote?: boolean;
+}
+interface VaultCredentialCreatePlan {
+    provider: string;
+    vault: string;
+    vaultRemoteId: string;
+    credential: string;
+    remoteChecked: boolean;
+    reuseRemote: boolean;
+    remoteCredentialId?: string;
+}
+interface VaultCredentialCreateResult extends VaultCredentialCreatePlan {
+    credentialId: string;
+    adopted: boolean;
+}
+declare function planVaultCredentialCreate(ctx: ProjectRuntimeContext, vaultName: string, credentialName: string, options?: VaultCredentialCreateOptions): Promise<VaultCredentialCreatePlan>;
+declare function planVaultCredentialCreateWithStateBackend(input: BackendRuntimeInput, vaultName: string, credentialName: string, options?: VaultCredentialCreateOptions): Promise<VaultCredentialCreatePlan>;
+declare function createVaultCredential(ctx: ProjectRuntimeContext, vaultName: string, credentialName: string, options?: VaultCredentialCreateOptions): Promise<VaultCredentialCreateResult>;
+declare function createVaultCredentialWithStateBackend(input: BackendRuntimeInput, vaultName: string, credentialName: string, options?: VaultCredentialCreateOptions): Promise<VaultCredentialCreateResult>;
+
 type DestroyResourceStatus = "success" | "failed" | "blocked" | "skipped";
 type DestroyResourceResultReason = "destroyed" | "reference_removed" | "already_gone" | "cascade_required" | "provider_missing" | "failed" | "skipped";
 interface DestroyResourceResult {
@@ -1234,6 +1504,7 @@ interface AgentMcpBuildInput {
     }>;
 }
 interface AgentBuildInput {
+    name?: string;
     description?: string;
     model?: AgentDecl["model"];
     instructions?: string;
@@ -1257,13 +1528,29 @@ interface BuiltAgent {
  */
 declare function buildAgentDecl(base: AgentDecl | undefined, input: AgentBuildInput): BuiltAgent;
 
+interface AgentResourcePlan {
+    agentId: string;
+    provider: string;
+    fingerprint: string;
+    actions: PlannedAction[];
+    diagnostics: Diagnostic[];
+    destructiveActions: PlannedAction[];
+    planned: ResourcePlanResult;
+}
 interface AgentResourcePlanOptions {
     refresh?: boolean;
     quiet?: boolean;
+    onFeedback?: RuntimeFeedbackSink;
+    /** Strict Agent runtime closure; excludes downstream resources such as deployments. */
+    scope?: "runtime";
+    mode?: AgentResourceSyncMode;
 }
+type AgentResourceSyncMode = ResourceSyncMode;
 interface AgentResourceSyncOptions extends AgentResourcePlanOptions {
     policy?: DestructivePolicy;
     confirm?: (actions: PlannedAction[]) => boolean | Promise<boolean>;
+    /** Refuse execution when a fresh plan no longer matches the plan shown to the user. */
+    expectedPlanFingerprint?: string;
 }
 /**
  * List RAW cloud agents from the provider — the actual remote objects, not the local
@@ -1320,6 +1607,9 @@ declare function getAgent(ctx: ProjectRuntimeContext, agentId: string): AgentDef
 declare function listAgentsWithReadiness(ctx: ProjectRuntimeContext, options?: {
     refresh?: boolean;
 }): Promise<AgentWithReadiness[]>;
+declare function isAgentRunnable(readiness: AgentReadiness): boolean;
+declare function planAgentResources(ctx: ProjectRuntimeContext, agentId: string, options?: AgentResourcePlanOptions): Promise<AgentResourcePlan>;
+declare function planAgentResourcesWithStateBackend(input: BackendRuntimeInput, agentId: string, options?: AgentResourcePlanOptions): Promise<AgentResourcePlan>;
 declare function syncAgentResourcesWithStateBackend(input: BackendRuntimeInput, agentId: string, options?: AgentResourceSyncOptions): Promise<AgentSyncRun>;
 
 interface SessionCreateOptions {
@@ -1411,12 +1701,7 @@ declare function listSessionSummaries(ctx: ProjectRuntimeContext, options?: Sess
 }): Promise<SessionSummaryList>;
 declare function getSession(ctx: ProjectRuntimeContext, sessionId: string, provider?: string): Promise<ProviderSessionInfo>;
 declare function deleteSession(ctx: ProjectRuntimeContext, sessionId: string, provider?: string): Promise<void>;
-declare function listSessionEvents(ctx: ProjectRuntimeContext, sessionId: string, options?: SessionRuntimeTarget & {
-    limit?: number;
-    order?: string;
-    page_token?: string;
-    page?: string;
-}): Promise<ProviderSessionEventList>;
+declare function listSessionEvents(ctx: ProjectRuntimeContext, sessionId: string, options?: SessionRuntimeTarget & EventListOptions): Promise<ProviderSessionEventList>;
 /**
  * Upload a file's raw bytes to the resolved provider's Files API and return its metadata.
  * Content-based (no filesystem) so server contexts can forward browser uploads directly.
@@ -1456,9 +1741,9 @@ declare function createSkillFromFileId(ctx: ProjectRuntimeContext, fileId: strin
 /** Delete a custom skill by id from the resolved provider's Skills API. */
 declare function deleteSkill(ctx: ProjectRuntimeContext, id: string, options?: SessionRuntimeTarget): Promise<void>;
 /**
- * Subscribe to a session's live event stream by id (native SSE). The underlying provider
- * stream pushes only post-connect events, so callers that need full history must replay it
- * via listSessionEvents and de-dupe by ProviderSessionEvent.id.
+ * Subscribe to a session's event stream by id. Providers with native cursor support receive
+ * `after_id` directly; providers without it resume by replaying paginated history and polling
+ * for new events with event-id de-duplication.
  */
 declare function streamSessionEvents(ctx: ProjectRuntimeContext, sessionId: string, options?: SessionRuntimeTarget & EventStreamOptions): AsyncIterable<ProviderSessionEvent>;
 
@@ -1543,4 +1828,14 @@ declare class LocalFileStateBackend implements StateBackend {
 /** Normalize a skill zip and extract its entries to SkillFile[]. */
 declare function extractSkillZipFiles(raw: Buffer): Promise<SkillFile[]>;
 
-export { AGENTS_CONFIG_PROVIDERS, AGENTS_PROVIDER_FIELDS, type AgentBuildInput, AgentDefinition, type AgentMcpBuildInput, type AgentSkillBuildInput, AgentSyncRun, AgentWithReadiness, ApiError, type BackendRuntimeInput, type BatchCreateMemoryInput, type BatchCreateMemoryResult, CloudAgent, CloudEnvironment, CloudVault, type CollectedSessionEvents, ConflictError, type CreateMemoryInput, type CreateMemoryStoreInput, type DeploymentListFilter, type DeploymentListResult, type DestroyDefaultMemoryStoreResult, type DestroyResourceResult, type DestructivePolicy, Diagnostic, type FetchLike, type IStateManager, type LoadedProjectConfig, LocalFileStateBackend, type MemoryInfo, type MemoryListItem, type MemoryListOptions, type MemoryPage, type MemoryPrefixInfo, type MemoryProviderCapabilities, type MemoryStoreInfo, type MemoryStoreListOptions, type MemoryVersionInfo, type MemoryVersionListOptions, type MigrateOptions, type MigrateResult, PlannedAction, type ProjectRuntimeContext, type ProviderConfig, type ProviderConfigProvider, ProviderFileInfo, ProviderSessionEvent, type ProviderSessionInfo, type ProviderSkillInfo, type ResolvedProjectConfig, type ResourceActionResult, ResourceAddress, type ResourceExecutionResult, type ResourcePlanResult, type ResourceRefreshResult, type ResourceRuntimeOptions, type ResourceState, type ResourceSyncRun, ResourceType, type RuntimeFeedbackEvent, type RuntimeFeedbackSink, type SecretPlaceholder, type SkillFile, StateManager, type StateScope, type SyncProjectOptions, type SyncProjectResult, type UpdateMemoryInput, type UpdateMemoryStoreInput, UserError, type ValidateProjectConfigOptions, applyProviderConfigToEnv, archiveCloudAgent, archiveMemoryStore, areRuntimeCredentialsReady, batchCreateMemories, bootstrapRuntimeCredentials, bootstrapRuntimeCredentialsSync, buildAgentDecl, collectConfigReferences, createCloudEnvironment, createCloudVault, createMemory, createMemoryStore, createProjectRuntime, createSessionForAgent, createSkillFromFileId, decideDestructive, deleteCloudEnvironment, deleteCloudVault, deleteFile, deleteMemory, deleteMemoryStore, deleteSession, deleteSkill, destroyPlannedProjectResources, executePlannedProject, extractSkillZipFiles, getAgent, getDeploymentDetailsForContext, getDeploymentRuntimeProviderForContext, getFileDownloadUrl, getFileInfo, getMemory, getMemoryProviderCapabilities, getMemoryStore, getMemoryVersion, getSession, getSkillInfo, importResource, isTerminalSessionStatus, listAgentsWithReadiness, listCloudAgents, listCloudEnvironments, listCloudVaults, listDeploymentsForContext, listFiles, listMemories, listMemoryStores, listMemoryVersions, listProviderModelsForContext, listProviderNames, listRemoteDeploymentsForContext, listSessionEvents, listSessionSummaries, listSkills, loadDotEnv, loadProviderConfigIntoEnv, loadProviderConfigIntoEnvSync, migrateConfig, parseStateAddress, pauseDeploymentForContext, planDestroyProjectContext, planProjectContext, prepareInitialSessionPrompt, preparePromptForProvider, prependFileHint, providerConfigPath, readProjectRuntime, redactMemoryVersion, resolveActiveProvider, resolveProjectConfig, resolveProjectConfigFromObject, resolveProviderConfigFromEnv, resolveRepositoryMountPath, resolveSessionProvider, resolveSyncProvider, rewriteFileMentions, runDeploymentForContext, sendSessionMessagePolling, sendSessionMessageStreaming, setDefaultFetch, startSessionRun, startSessionRunPolling, streamSessionEvents, syncAgentResourcesWithStateBackend, syncProjectResourcesWithStateBackend, syncProviderResourcesFromContext, syncProviderResourcesFromEnv, updateMemory, updateMemoryStore, uploadFile, validateProjectConfig, writeProjectRuntime };
+interface SkillSourceInspection {
+    name: string;
+    sourcePath: string;
+    files: SkillFile[];
+}
+/** Inspect and normalize a local Skill directory, zip, or single SKILL.md. */
+declare function inspectSkillSource(source: string, options?: {
+    basePath?: string;
+}): Promise<SkillSourceInspection>;
+
+export { AGENTS_CONFIG_PROVIDERS, AGENTS_PROVIDER_FIELDS, type AgentBuildInput, AgentDefinition, type AgentListOptions, type AgentMcpBuildInput, type AgentPage, AgentReadiness, type AgentResourcePlan, type AgentResourcePlanOptions, type AgentResourceSyncMode, type AgentResourceSyncOptions, type AgentSkillBuildInput, AgentSyncRun, type AgentVersionListOptions, AgentWithReadiness, ApiError, type BackendRuntimeInput, type BatchCreateMemoryInput, type BatchCreateMemoryResult, CloudAgent, CloudEnvironment, CloudVault, type CollectedSessionEvents, ConflictError, type CreateMemoryInput, type CreateMemoryStoreInput, type CredentialDecl, type CredentialInjectionLocation, type CredentialNetworking, type CursorListOptions, type CursorPage, type DeploymentDecl, type DeploymentInfo$1 as DeploymentInfo, type DeploymentListFilter, type DeploymentListResult, type DeploymentRunInfo, type DeploymentRunPage, type DeploymentRunResult$1 as DeploymentRunResult, type DestroyDefaultMemoryStoreResult, type DestroyResourceResult, type DestructivePolicy, Diagnostic, type EnvironmentDecl, type EnvironmentListOptions, type EnvironmentPage, EventListOptions, EventStreamOptions, type FetchLike, type FileListOptions, type FilePage, type IStateManager, type LoadedProjectConfig, LocalFileStateBackend, type ManagedAgentOperationAuth, type ManagedAgentOperationCapability, type ManagedAgentProviderCapabilities, type ManagedApiTarget, type MemoryInfo, type MemoryListItem, type MemoryListOptions, type MemoryPage, type MemoryPrefixInfo, type MemoryProviderCapabilities, type MemoryStoreInfo, type MemoryStoreListOptions, type MemoryVersionInfo, type MemoryVersionListOptions, type MigrateOptions, type MigrateResult, PlannedAction, type ProjectConfig, type ProjectRuntimeContext, type ProjectSourceInspection, type ProviderConfig, type ProviderConfigProvider, ProviderFileInfo, ProviderSessionEvent, ProviderSessionEventList, type ProviderSessionInfo, type ProviderSkillInfo, type ResolvedProjectConfig, type ResourceActionResult, ResourceAddress, type ResourceExecutionResult, type ResourcePlanResult, type ResourcePlanScope, type ResourceRefreshResult, type ResourceRuntimeOptions, type ResourceState, type ResourceSyncMode, type ResourceSyncRun, ResourceType, type RuntimeFeedbackEvent, type RuntimeFeedbackSink, type SecretPlaceholder, type SessionEventInput, type SessionEventSendResult, type SessionFilter, type SessionListResult, type SessionUpdateInput, type SkillDecl, type SkillDownloadInfo, type SkillFile, type SkillListOptions, type SkillPage, type SkillSourceInspection, type SkillVersionInfo, type SkillVersionListOptions, type SkillVersionPage, StateManager, type StateScope, type SyncProjectOptions, type SyncProjectResult, type UpdateMemoryInput, type UpdateMemoryStoreInput, UserError, type ValidateProjectConfigOptions, type VaultCredentialCreateOptions, type VaultCredentialCreatePlan, type VaultCredentialCreateResult, type VaultCredentialInfo, type VaultDecl, type VaultListOptions, type VaultPage, applyProviderConfigToEnv, archiveCloudAgent, archiveMemoryStore, archiveRemoteSession, areRuntimeCredentialsReady, batchCreateMemories, bootstrapRuntimeCredentials, bootstrapRuntimeCredentialsSync, buildAgentDecl, collectConfigReferences, createCloudEnvironment, createCloudVault, createMemory, createMemoryStore, createProjectRuntime, createSessionForAgent, createSkillFromFileId, createVaultCredential, createVaultCredentialWithStateBackend, decideDestructive, deleteCloudEnvironment, deleteCloudVault, deleteFile, deleteMemory, deleteMemoryStore, deleteSession, deleteSkill, destroyPlannedProjectResources, downloadRemoteFile, downloadRemoteSkill, executePlannedProject, extractSkillZipFiles, getAgent, getDeploymentDetailsForContext, getDeploymentRuntimeProviderForContext, getFileDownloadUrl, getFileInfo, getManagedAgentProviderCapabilities, getMemory, getMemoryProviderCapabilities, getMemoryStore, getMemoryVersion, getRemoteAgent, getRemoteDeployment, getRemoteDeploymentRun, getRemoteEnvironment, getRemoteSkill, getRemoteSkillDownloadInfo, getRemoteSkillVersion, getRemoteVault, getSession, getSkillInfo, importResource, inspectProjectSource, inspectSkillSource, isAgentRunnable, isTerminalSessionStatus, listAgentsWithReadiness, listCloudAgents, listCloudEnvironments, listCloudVaults, listDeploymentsForContext, listFiles, listMemories, listMemoryStores, listMemoryVersions, listProviderModelsForContext, listProviderNames, listRemoteAgentVersions, listRemoteAgents, listRemoteDeploymentRuns, listRemoteDeployments, listRemoteDeploymentsForContext, listRemoteEnvironments, listRemoteFiles, listRemoteSkillVersions, listRemoteSkills, listRemoteVaults, listSessionEvents, listSessionSummaries, listSkills, loadDotEnv, loadProviderConfigIntoEnv, loadProviderConfigIntoEnvSync, migrateConfig, parseStateAddress, pauseDeploymentForContext, planAgentResources, planAgentResourcesWithStateBackend, planDestroyProjectContext, planProjectContext, planProjectWithStateBackend, planVaultCredentialCreate, planVaultCredentialCreateWithStateBackend, prepareInitialSessionPrompt, preparePromptForProvider, prependFileHint, providerConfigPath, readProjectRuntime, redactMemoryVersion, resolveActiveProvider, resolveProjectConfig, resolveProjectConfigFromObject, resolveProviderConfigFromEnv, resolveRepositoryMountPath, resolveSessionProvider, resolveSyncProvider, rewriteFileMentions, runDeploymentForContext, runRemoteDeployment, sendRemoteSessionEvents, sendSessionMessagePolling, sendSessionMessageStreaming, setDefaultFetch, setRemoteDeploymentPaused, startSessionRun, startSessionRunPolling, streamSessionEvents, syncAgentResourcesWithStateBackend, syncProjectResourcesWithStateBackend, syncProviderResourcesFromContext, syncProviderResourcesFromEnv, updateMemory, updateMemoryStore, updateRemoteSession, uploadFile, validateProjectConfig, writeProjectRuntime };