@openbkn/bkn-sdk 0.1.4 → 0.1.5-rc.1

package/dist/{chunk-Z2NRTUB3.js → chunk-WIYRGBAB.js}

@@ -4,6 +4,68 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
+// src/utils/dry-run.ts
+var enabled = false;
+var suppressed = 0;
+function enableDryRun() {
+  enabled = true;
+}
+function isDryRun() {
+  return enabled;
+}
+async function withoutPreview(fn) {
+  suppressed += 1;
+  try {
+    return await fn();
+  } finally {
+    suppressed -= 1;
+  }
+}
+var DryRunSignal = class extends Error {
+  request;
+  constructor(request2) {
+    super("dry run: request not sent");
+    this.name = "DryRunSignal";
+    this.request = request2;
+  }
+};
+function redact(headers2) {
+  const out = {};
+  const entries = headers2 instanceof Headers ? [...headers2.entries()] : Array.isArray(headers2) ? headers2 : Object.entries(headers2 ?? {});
+  for (const [k, v] of entries) {
+    const key = String(k);
+    out[key] = /authorization|cookie|token|api-key/i.test(key) ? "<redacted>" : String(v);
+  }
+  return out;
+}
+var SECRET_FIELD = /^(bkn_token|token|access_token|refresh_token|password|secret|api_key)$/i;
+function redactBody(body) {
+  if (Array.isArray(body)) return body.map(redactBody);
+  if (!body || typeof body !== "object") return body;
+  const out = {};
+  for (const [k, v] of Object.entries(body)) {
+    out[k] = SECRET_FIELD.test(k) ? "<redacted>" : redactBody(v);
+  }
+  return out;
+}
+function previewRequest(input) {
+  if (!enabled || suppressed > 0) return;
+  let body = input.body;
+  if (typeof body === "string") {
+    try {
+      body = JSON.parse(body);
+    } catch {
+    }
+  }
+  throw new DryRunSignal({
+    dryRun: true,
+    method: input.method,
+    url: String(input.url),
+    headers: redact(input.headers),
+    ...body === void 0 ? {} : { body: redactBody(body) }
+  });
+}
+
 // src/utils/errors.ts
 var HttpError = class extends Error {
   status;
@@ -93,7 +155,7 @@ function formatError(err2) {
       const next2 = err2.hint ? ` ${err2.hint}` : "";
       return `Forbidden (HTTP 403)${serverMsg ? `: ${serverMsg}` : " \u2014 admin privileges required"}.${next2}`;
     }
-    const detail = err2.body ? `: ${truncate(err2.body, 500)}` : "";
+    const detail = serverMsg ? `: ${serverMsg}` : err2.body ? `: ${truncate(err2.body, 500)}` : "";
     const next = err2.hint ? ` ${err2.hint}` : "";
     return `Request failed (HTTP ${err2.status} ${err2.statusText})${detail}${next}`;
   }
@@ -109,12 +171,40 @@ function formatError(err2) {
   }
   return String(err2);
 }
+function readableServerError(body) {
+  return serverError(body);
+}
 function serverError(body) {
   if (!body) return "";
   try {
-    const j = JSON.parse(body);
-    const m = j.error ?? j.detail ?? j.description ?? j.message;
-    return typeof m === "string" ? m : "";
+    return describeEnvelope(JSON.parse(body));
+  } catch {
+    return "";
+  }
+}
+function describeEnvelope(j, depth = 0) {
+  const text = (v) => typeof v === "string" && v.trim() ? v.trim() : "";
+  const description = text(j.description) || text(j.error) || text(j.detail) || text(j.message);
+  const code = text(j.error_code) || text(j.code);
+  const solution = text(j.solution);
+  const details = text(j.error_details) || text(j.details);
+  const inner = depth < 2 ? innerEnvelope(details) : "";
+  const parts = [
+    description || code,
+    description && code ? `[${code}]` : "",
+    inner || (details && details !== description ? truncate(details, 200) : ""),
+    solution && solution !== description ? `\u2014 ${solution}` : ""
+  ].filter(Boolean);
+  return parts.join(" ");
+}
+function innerEnvelope(details, depth = 0) {
+  const start = details.indexOf("{");
+  const end = details.lastIndexOf("}");
+  if (start === -1 || end <= start) return "";
+  try {
+    const nested = JSON.parse(details.slice(start, end + 1));
+    const rendered = describeEnvelope(nested, depth + 1);
+    return rendered ? `(${rendered})` : "";
   } catch {
     return "";
   }
@@ -133,7 +223,7 @@ var rawJSON = JSON.rawJSON;
 function assertNativeJSONSupport() {
   if (typeof rawJSON !== "function") {
     throw new Error(
-      "Lossless BIGINT JSON support requires Node.js >=24.19.0 (missing JSON.rawJSON)."
+      "Lossless BIGINT JSON support requires Node.js >=22.19.0 (missing JSON.rawJSON)."
     );
   }
   let source;
@@ -143,7 +233,7 @@ function assertNativeJSONSupport() {
   });
   if (source !== "1") {
     throw new Error(
-      "Lossless BIGINT JSON support requires Node.js >=24.19.0 (missing JSON.parse source text access)."
+      "Lossless BIGINT JSON support requires Node.js >=22.19.0 (missing JSON.parse source text access)."
     );
   }
 }
@@ -200,6 +290,12 @@ function toUndiciBody(body) {
   return form2;
 }
 function tlsFetch(insecure, url, init, headersTimeoutMs) {
+  previewRequest({
+    method: String(init?.method ?? "GET"),
+    url,
+    headers: init?.headers,
+    body: typeof init?.body === "string" ? init.body : init?.body ? "<binary or multipart>" : void 0
+  });
   const needsAgent = headersTimeoutMs !== void 0 && headersTimeoutMs > UNDICI_HEADERS_TIMEOUT_MS;
   if (!insecure && !needsAgent) return fetch(url, init);
   return undiciFetch(url, {
@@ -209,9 +305,16 @@ function tlsFetch(insecure, url, init, headersTimeoutMs) {
   });
 }
 
+// src/utils/base-url.ts
+function trimTrailingSlashes(value) {
+  let end = value.length;
+  while (end > 0 && value.charCodeAt(end - 1) === 47) end -= 1;
+  return value.slice(0, end);
+}
+
 // src/auth/oauth.ts
 function normalizeBaseUrl(value) {
-  return value.replace(/\/+$/, "");
+  return trimTrailingSlashes(value);
 }
 function mapToken(data) {
   return {
@@ -528,15 +631,17 @@ async function request(ctx, path, init = {}) {
   const hasBody = init.body !== void 0;
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), init.timeoutMs ?? DEFAULT_TIMEOUT_MS);
+  const method = init.method ?? (hasBody ? "POST" : "GET");
+  const headers2 = buildHeaders(ctx, {
+    ...hasBody ? { "content-type": "application/json" } : {},
+    ...init.headers
+  });
   const send = () => tlsFetch(
     ctx.insecure,
     url,
     {
-      method: init.method ?? (hasBody ? "POST" : "GET"),
-      headers: buildHeaders(ctx, {
-        ...hasBody ? { "content-type": "application/json" } : {},
-        ...init.headers
-      }),
+      method,
+      headers: headers2,
       body: hasBody ? stringifyBigIntJSON(init.body) : void 0,
       redirect: init.redirect,
       signal: controller.signal
@@ -551,7 +656,7 @@ async function request(ctx, path, init = {}) {
     const text = await res.text();
     const contentType = res.headers.get("content-type") ?? "";
     if (!res.ok) {
-      const gateway = gatewayHint(url, contentType, text);
+      const gateway = gatewayHint(url, res.status, contentType, text);
       const hints = [gateway, hintFor(ctx, res.status, text)].filter(Boolean);
       throw new HttpError(
         res.status,
@@ -565,7 +670,7 @@ async function request(ctx, path, init = {}) {
     try {
       return (init.responseParser ?? JSON.parse)(text);
     } catch {
-      const gateway = gatewayHint(url, contentType, text);
+      const gateway = gatewayHint(url, res.status, contentType, text);
       throw new NonJsonResponseError(
         res.status,
         contentType,
@@ -578,9 +683,16 @@ async function request(ctx, path, init = {}) {
     clearTimeout(timer);
   }
 }
-function gatewayHint(url, contentType, body) {
+function gatewayHint(url, status2, contentType, body) {
   const looksHtml = contentType.includes("html") || /^\s*(<!doctype html|<html)/i.test(body.slice(0, 200));
   if (!looksHtml) return void 0;
+  if (status2 === 504 || status2 === 408) {
+    return [
+      "The gateway timed out waiting for the service behind",
+      `${url.pathname} \u2014 it is routed, it did not answer in time. Long-running work`,
+      "(a sandbox run, a build) may still be going; retry the read rather than the write."
+    ].join(" ");
+  }
   return [
     "The response is an HTML error page, not JSON \u2014 the request did not reach the service",
     `behind ${url.pathname}. That backend is likely not deployed or not routed on this`,
@@ -818,7 +930,7 @@ function resolveContext(opts = {}) {
       "No base URL. Pass --base-url, set BKN_BASE_URL, or run `openbkn auth login`."
     );
   }
-  const normalized = baseUrl.replace(/\/+$/, "");
+  const normalized = trimTrailingSlashes(baseUrl);
   const user = opts.user ?? process.env.BKN_USER;
   const stored = user ? readToken(normalized, resolveUserId(normalized, user)) : readToken(normalized);
   const explicit = opts.token ?? process.env.BKN_TOKEN;
@@ -1140,6 +1252,9 @@ function admin(ctx) {
   };
 }
 
+// src/api/lifecycle.ts
+import { createHash, randomUUID as randomUUID2 } from "crypto";
+
 // src/api/auth-fetch.ts
 async function authFetch(ctx, send) {
   let res = await send();
@@ -1149,267 +1264,6 @@ async function authFetch(ctx, send) {
   return res;
 }
 
-// src/api/agent-chat.ts
-var FACTORY = "/api/agent-factory";
-async function fetchAgentInfo(ctx, agentId, version = "v0") {
-  const data = await request(
-    ctx,
-    `${FACTORY}/v3/agent-market/agent/${encodeURIComponent(agentId)}/version/${encodeURIComponent(version)}`,
-    { query: { is_visit: true } }
-  );
-  const id = data.id;
-  const key = data.key;
-  if (typeof id !== "string" || !id || typeof key !== "string" || !key) {
-    throw new Error("Agent info response did not include id and key.");
-  }
-  return { id, key, version: typeof data.version === "string" ? data.version : version };
-}
-function getByPath(obj, path) {
-  let cur = obj;
-  for (const k of path) {
-    if (cur === null || typeof cur !== "object") return void 0;
-    cur = cur[k];
-  }
-  return cur;
-}
-function setByPath(obj, path, value) {
-  let cur = obj;
-  for (let i = 0; i < path.length - 1; i += 1) {
-    const k = path[i];
-    if (!(k in cur) || typeof cur[k] !== "object" || cur[k] === null) cur[k] = {};
-    cur = cur[k];
-  }
-  cur[path[path.length - 1]] = value;
-}
-function applyPatch(data, result) {
-  const path = data.key;
-  if (!path || path.length === 0) return;
-  if (data.action === "upsert" && data.content !== void 0) {
-    setByPath(result, path, data.content);
-  } else if (data.action === "append") {
-    const existing = getByPath(result, path);
-    const add = typeof data.content === "string" ? data.content : String(data.content ?? "");
-    setByPath(result, path, typeof existing === "string" ? existing + add : add);
-  } else if (data.action === "remove" && path.length === 1) {
-    delete result[path[0]];
-  }
-}
-function extractText(result) {
-  const content = getByPath(result, ["message", "content"]);
-  if (content) {
-    if (typeof content.text === "string" && content.text) return content.text;
-    const fa = content.final_answer;
-    const ans = fa?.answer;
-    if (typeof ans?.text === "string" && ans.text) return ans.text;
-    if (typeof fa?.text === "string" && fa.text) return fa.text;
-  }
-  const msg = result.message;
-  if (typeof msg?.text === "string" && msg.text) return msg.text;
-  return "";
-}
-async function sendChat(ctx, info, query, opts = {}) {
-  const body = {
-    agent_id: info.id,
-    agent_key: info.key,
-    agent_version: info.version,
-    query,
-    stream: Boolean(opts.stream)
-  };
-  if (opts.conversationId) body.conversation_id = opts.conversationId;
-  const res = await authFetch(
-    ctx,
-    () => tlsFetch(ctx.insecure, `${ctx.baseUrl}${FACTORY}/v1/app/${info.key}/chat/completion`, {
-      method: "POST",
-      headers: {
-        ...buildHeaders(ctx),
-        "content-type": "application/json",
-        accept: opts.stream ? "text/event-stream" : "application/json",
-        "x-language": "zh-CN"
-      },
-      body: stringifyBigIntJSON(body)
-    })
-  );
-  if (!res.ok) throw new HttpError(res.status, res.statusText, await res.text());
-  const contentType = res.headers.get("content-type") ?? "";
-  if (opts.stream && contentType.includes("text/event-stream")) {
-    return consumeStream(res, opts.onDelta);
-  }
-  const result = parseBigIntJSON(await res.text());
-  return { text: extractText(result), conversationId: conversationIdOf(result) };
-}
-function conversationIdOf(result) {
-  const id = result.conversation_id;
-  return typeof id === "string" ? id : void 0;
-}
-async function consumeStream(res, onDelta) {
-  const reader = res.body?.getReader();
-  if (!reader) throw new Error("No response body for stream");
-  const decoder = new TextDecoder();
-  const result = {};
-  let buffer = "";
-  let lastText = "";
-  let conversationId;
-  const handle = (line) => {
-    if (!line.startsWith("data:")) return;
-    const payload = line.slice(5).trim();
-    if (payload === "" || payload === "[DONE]") return;
-    let data;
-    try {
-      data = parseBigIntJSON(payload);
-    } catch {
-      return;
-    }
-    applyPatch(data, result);
-    if (data.key?.length === 1 && data.key[0] === "conversation_id") {
-      conversationId = typeof data.content === "string" ? data.content : conversationId;
-    }
-    const text = extractText(result);
-    if (text && text !== lastText) {
-      if (onDelta) onDelta(text.slice(lastText.length));
-      lastText = text;
-    }
-  };
-  for (; ; ) {
-    const { done, value } = await reader.read();
-    if (done) break;
-    buffer += decoder.decode(value, { stream: true });
-    const lines = buffer.split("\n");
-    buffer = lines.pop() ?? "";
-    for (const ln of lines) handle(ln.replace(/\r$/, ""));
-  }
-  if (buffer.trim()) handle(buffer.trim());
-  return { text: lastText, conversationId: conversationId ?? conversationIdOf(result) };
-}
-
-// src/api/agents.ts
-var BASE = "/api/agent-factory/v3";
-function listAgents(ctx, opts = {}) {
-  return request(ctx, `${BASE}/published/agent`, {
-    method: "POST",
-    body: {
-      offset: opts.offset ?? 0,
-      limit: opts.limit ?? 30,
-      category_id: opts.categoryId ?? "",
-      name: opts.name ?? "",
-      custom_space_id: opts.customSpaceId ?? "",
-      is_to_square: opts.isToSquare ?? 1
-    }
-  });
-}
-function getAgent(ctx, agentId) {
-  return request(ctx, `${BASE}/agent/${encodeURIComponent(agentId)}`);
-}
-function getAgentByKey(ctx, key) {
-  return request(ctx, `${BASE}/agent/by-key/${encodeURIComponent(key)}`);
-}
-function listPersonalAgents(ctx, opts = {}) {
-  return request(ctx, `${BASE}/personal-space/agent-list`, {
-    query: { offset: opts.offset ?? 0, limit: opts.limit ?? 30, name: opts.name || void 0 }
-  });
-}
-function listAgentTemplates(ctx, opts = {}) {
-  return request(ctx, `${BASE}/published/agent-tpl`, {
-    query: { offset: opts.offset ?? 0, limit: opts.limit ?? 30, name: opts.name || void 0 }
-  });
-}
-function getAgentTemplate(ctx, templateId) {
-  return request(ctx, `${BASE}/published/agent-tpl/${encodeURIComponent(templateId)}`);
-}
-function listAgentCategories(ctx) {
-  return request(ctx, `${BASE}/category`);
-}
-function createAgent(ctx, body) {
-  return request(ctx, `${BASE}/agent`, { method: "POST", body });
-}
-function updateAgent(ctx, agentId, body) {
-  return request(ctx, `${BASE}/agent/${encodeURIComponent(agentId)}`, { method: "PUT", body });
-}
-function deleteAgent(ctx, agentId) {
-  return request(ctx, `${BASE}/agent/${encodeURIComponent(agentId)}`, { method: "DELETE" });
-}
-function publishAgent(ctx, agentId) {
-  return request(ctx, `${BASE}/agent/${encodeURIComponent(agentId)}/publish`, { method: "POST" });
-}
-function unpublishAgent(ctx, agentId) {
-  return request(ctx, `${BASE}/agent/${encodeURIComponent(agentId)}/unpublish`, { method: "PUT" });
-}
-var APP = "/api/agent-factory/v1/app";
-function listConversations(ctx, agentKey, opts = {}) {
-  return request(ctx, `${APP}/${encodeURIComponent(agentKey)}/conversation`, {
-    query: { page: opts.page ?? 1, size: opts.size ?? 30 }
-  });
-}
-function listMessages(ctx, agentKey, conversationId) {
-  return request(
-    ctx,
-    `${APP}/${encodeURIComponent(agentKey)}/conversation/${encodeURIComponent(conversationId)}`
-  );
-}
-
-// src/resources/agents.ts
-function skillMembers(agent) {
-  const config = agent.config ?? {};
-  const skills2 = config.skills ?? {};
-  return Array.isArray(skills2.skills) ? skills2.skills : [];
-}
-function setSkillMembers(agent, members) {
-  if (!agent.config || typeof agent.config !== "object") agent.config = {};
-  const config = agent.config;
-  if (!config.skills || typeof config.skills !== "object") config.skills = {};
-  config.skills.skills = members;
-}
-function agents2(ctx) {
-  return {
-    list: (opts) => listAgents(ctx, opts),
-    get: (agentId) => getAgent(ctx, agentId),
-    getByKey: (key) => getAgentByKey(ctx, key),
-    personalList: (opts) => listPersonalAgents(ctx, opts),
-    templateList: (opts) => listAgentTemplates(ctx, opts),
-    templateGet: (templateId) => getAgentTemplate(ctx, templateId),
-    categoryList: () => listAgentCategories(ctx),
-    create: (body) => createAgent(ctx, body),
-    update: (agentId, body) => updateAgent(ctx, agentId, body),
-    delete: (agentId) => deleteAgent(ctx, agentId),
-    publish: (agentId) => publishAgent(ctx, agentId),
-    unpublish: (agentId) => unpublishAgent(ctx, agentId),
-    sessions: (agentKey, opts) => listConversations(ctx, agentKey, opts),
-    history: (agentKey, conversationId) => listMessages(ctx, agentKey, conversationId),
-    /** List skill ids attached to an agent (config.skills.skills). */
-    skillList: async (agentId) => {
-      const agent = await getAgent(ctx, agentId);
-      const arr = skillMembers(agent);
-      return arr.map((m) => String(m.skill_id ?? "")).filter(Boolean);
-    },
-    /** Attach skill(s) to an agent (dedup), then persist. */
-    skillAdd: async (agentId, skillIds) => {
-      const agent = await getAgent(ctx, agentId);
-      const arr = skillMembers(agent);
-      const have = new Set(arr.map((m) => String(m.skill_id ?? "")));
-      for (const id of skillIds) if (!have.has(id)) arr.push({ skill_id: id });
-      setSkillMembers(agent, arr);
-      return updateAgent(ctx, agentId, agent);
-    },
-    /** Detach skill(s) from an agent, then persist. */
-    skillRemove: async (agentId, skillIds) => {
-      const agent = await getAgent(ctx, agentId);
-      const drop = new Set(skillIds);
-      const arr = skillMembers(agent).filter(
-        (m) => !drop.has(String(m.skill_id ?? ""))
-      );
-      setSkillMembers(agent, arr);
-      return updateAgent(ctx, agentId, agent);
-    },
-    /** Send a chat turn to an agent (resolves agent id/key/version first). */
-    chat: async (agentId, query, opts = {}) => {
-      const info = await fetchAgentInfo(ctx, agentId, opts.version ?? "v0");
-      return sendChat(ctx, info, query, opts);
-    }
-  };
-}
-
-// src/api/lifecycle.ts
-import { createHash, randomUUID as randomUUID2 } from "crypto";
-
 // src/api/context-loader.ts
 var MCP_PATH = "/api/agent-retrieval/v1/mcp";
 var PROTOCOL = "2024-11-05";
@@ -1450,16 +1304,19 @@ function parseBody(text) {
 async function post(ctx, knId, sessionId, body, timeoutMs) {
   const controller = timeoutMs === void 0 ? void 0 : new AbortController();
   const timer = controller === void 0 ? void 0 : setTimeout(() => controller.abort(), timeoutMs);
+  const rpcMethod = body?.method;
+  const isHandshake = rpcMethod === "initialize" || Boolean(rpcMethod?.startsWith("notifications/"));
+  const send = () => authFetch(
+    ctx,
+    () => tlsFetch(ctx.insecure, mcpUrl(ctx), {
+      method: "POST",
+      headers: headers(ctx, knId, sessionId),
+      body: stringifyBigIntJSON(body),
+      ...controller ? { signal: controller.signal } : {}
+    })
+  );
   try {
-    const res = await authFetch(
-      ctx,
-      () => tlsFetch(ctx.insecure, mcpUrl(ctx), {
-        method: "POST",
-        headers: headers(ctx, knId, sessionId),
-        body: stringifyBigIntJSON(body),
-        ...controller ? { signal: controller.signal } : {}
-      })
-    );
+    const res = await (isHandshake ? withoutPreview(send) : send());
     const text = await res.text();
     if (!res.ok) throw new HttpError(res.status, res.statusText, text);
     return { res, text };
@@ -1506,7 +1363,8 @@ function unwrapToolResult(parsed) {
   const receipt = structuredContent?.bkn_receipt;
   const content = result.content;
   if (result.isError === true) {
-    const message = Array.isArray(content) && content[0] && typeof content[0].text === "string" ? content[0].text : "tool call failed";
+    const raw = Array.isArray(content) && content[0] && typeof content[0].text === "string" ? content[0].text : "tool call failed";
+    const message = readableServerError(raw) || raw;
     throw new ToolError(`Context-loader error: ${message}`, toolErrorCode(structuredContent));
   }
   if (Array.isArray(content) && content[0] && typeof content[0].text === "string") {
@@ -1941,15 +1799,93 @@ function context(ctx) {
   };
 }
 
+// src/api/sandbox-budget.ts
+var SANDBOX_MAX_TIMEOUT_SEC = 3600;
+function sandboxBudgetMs(timeoutSec) {
+  return (timeoutSec ?? SANDBOX_MAX_TIMEOUT_SEC) * 1e3 + 15e3;
+}
+
+// src/api/functions.ts
+var PATH = "/api/agent-operator-integration/v1";
+function functionInputBody(def) {
+  return {
+    name: def.name,
+    description: def.description ?? "",
+    script_type: def.scriptType ?? "python",
+    code: def.code,
+    inputs: def.inputs ?? [],
+    outputs: def.outputs ?? [],
+    ...def.dependencies?.length ? { dependencies: def.dependencies } : {},
+    ...def.dependenciesUrl ? { dependencies_url: def.dependenciesUrl } : {}
+  };
+}
+function executeFunction(ctx, opts) {
+  return request(ctx, `${PATH}/function/execute`, {
+    method: "POST",
+    // The sandbox has to boot, install, and run before it answers, and it sends
+    // no header until it does — so the abort budget and undici's 300s header
+    // deadline both have to move, or a long run dies at 300s regardless.
+    timeoutMs: sandboxBudgetMs(opts.timeout),
+    headersTimeoutMs: sandboxBudgetMs(opts.timeout),
+    body: {
+      code: opts.code,
+      event: opts.event ?? {},
+      ...opts.language ? { language: opts.language } : {},
+      ...opts.timeout !== void 0 ? { timeout: opts.timeout } : {},
+      ...opts.dependencies?.length ? { dependencies: opts.dependencies } : {},
+      ...opts.dependenciesUrl ? { dependencies_url: opts.dependenciesUrl } : {},
+      ...opts.source ? { source: opts.source } : {},
+      ...opts.taskId ? { task_id: opts.taskId } : {},
+      ...opts.bknToken ? { bkn_token: opts.bknToken } : {},
+      ...opts.conversationId ? { bkn_conversation_id: opts.conversationId } : {},
+      ...opts.interactionId ? { bkn_interaction_id: opts.interactionId } : {}
+    }
+  });
+}
+function inferFunctionSchema(ctx, code) {
+  return request(ctx, `${PATH}/function/infer-schema`, {
+    method: "POST",
+    // Deriving a schema runs the code, so it is a sandbox run like any other.
+    timeoutMs: sandboxBudgetMs(void 0),
+    headersTimeoutMs: sandboxBudgetMs(void 0),
+    body: { code }
+  });
+}
+function listFunctionDependencies(ctx) {
+  return request(ctx, `${PATH}/function/dependencies`);
+}
+function listDependencyVersions(ctx, packageName, opts = {}) {
+  return request(ctx, `${PATH}/function/dependency-versions/${encodeURIComponent(packageName)}`, {
+    query: {
+      pypi_repo_url: opts.pypiRepoUrl,
+      python_version: opts.pythonVersion
+    }
+  });
+}
+function functionTemplate(ctx, templateType = "python") {
+  return request(ctx, `${PATH}/template/${encodeURIComponent(templateType)}`);
+}
+
+// src/resources/functions.ts
+function functions(ctx) {
+  return {
+    run: (opts) => executeFunction(ctx, opts),
+    inferSchema: (code) => inferFunctionSchema(ctx, code),
+    dependencies: () => listFunctionDependencies(ctx),
+    dependencyVersions: (packageName, opts) => listDependencyVersions(ctx, packageName, opts),
+    template: (templateType) => functionTemplate(ctx, templateType)
+  };
+}
+
 // src/resources/knowledge-networks.ts
 import { mkdirSync as mkdirSync2 } from "fs";
 import { resolve as resolve2 } from "path";
 
 // src/api/bkn-backend.ts
-var BASE2 = "/api/bkn-backend/v1/knowledge-networks";
+var BASE = "/api/bkn-backend/v1/knowledge-networks";
 var BKNS = "/api/bkn-backend/v1/bkns";
 function knPath(knId, path) {
-  return `${BASE2}/${encodeURIComponent(knId)}/${path}`;
+  return `${BASE}/${encodeURIComponent(knId)}/${path}`;
 }
 async function uploadBkn(ctx, tarBuffer, opts = {}) {
   const url = new URL(`${ctx.baseUrl}${BKNS}`);
@@ -2049,7 +1985,7 @@ function deleteActionSchedules(ctx, knId, ids) {
 }
 
 // src/api/knowledge-networks.ts
-var ONTOLOGY_BASE = "/api/ontology-manager/v1/knowledge-networks";
+var ONTOLOGY_BASE = "/api/bkn-backend/v1/knowledge-networks";
 var ONTOLOGY_QUERY_BASE = "/api/ontology-query/v1/knowledge-networks";
 var RETRIEVAL_BASE = "/api/agent-retrieval/v1/kn";
 function listKnowledgeNetworks(ctx, opts = {}) {
@@ -2140,12 +2076,6 @@ function executeActionType(ctx, knId, atId, body) {
     { method: "POST", body, responseParser: parseBigIntJSON }
   );
 }
-function getActionTypeInputs(ctx, knId, atId) {
-  return request(
-    ctx,
-    `${ONTOLOGY_QUERY_BASE}/${encodeURIComponent(knId)}/action-types/${encodeURIComponent(atId)}/inputs`
-  );
-}
 function getActionExecution(ctx, knId, executionId) {
   return request(
     ctx,
@@ -2259,12 +2189,6 @@ function deleteMetric(ctx, knId, metricId) {
     }
   );
 }
-function searchMetrics(ctx, knId, body) {
-  return request(ctx, `${ONTOLOGY_BASE}/${encodeURIComponent(knId)}/metrics/search`, {
-    method: "POST",
-    body
-  });
-}
 function validateMetric(ctx, knId, body) {
   return request(ctx, `${ONTOLOGY_BASE}/${encodeURIComponent(knId)}/metrics/validation`, {
     method: "POST",
@@ -2275,14 +2199,18 @@ function searchBody(knId, query, opts) {
   return {
     kn_id: knId,
     query,
-    mode: opts.mode ?? "keyword_vector_retrieval",
-    max_concepts: opts.maxConcepts ?? 10,
-    return_query_understanding: opts.returnQueryUnderstanding ?? false
+    ...opts.conceptGroups?.length ? { concept_groups: opts.conceptGroups } : {},
+    ...opts.objectTypes?.length ? { object_types: opts.objectTypes } : {},
+    ...opts.excludeObjectTypes?.length ? { exclude_object_types: opts.excludeObjectTypes } : {},
+    ...opts.maxObjectTypes === void 0 ? {} : { max_object_types: opts.maxObjectTypes },
+    ...opts.maxInstancesPerType === void 0 ? {} : { max_instances_per_type: opts.maxInstancesPerType },
+    ...opts.rerank === void 0 ? {} : { rerank: opts.rerank },
+    ...opts.includeObjectTypes === void 0 ? {} : { include_object_types: opts.includeObjectTypes }
   };
 }
-function semanticSearch(ctx, knId, query, opts = {}) {
+function searchInstance(ctx, knId, query, opts = {}) {
   if (opts.bknContext) {
-    return request(ctx, `${RETRIEVAL_BASE}/semantic-search`, {
+    return request(ctx, `${RETRIEVAL_BASE}/search_instance`, {
       method: "POST",
       body: { ...searchBody(knId, query, opts), bkn_context: opts.bknContext }
     });
@@ -2291,7 +2219,7 @@ function semanticSearch(ctx, knId, query, opts = {}) {
     ctx,
     knId,
     query,
-    (bknContext) => request(ctx, `${RETRIEVAL_BASE}/semantic-search`, {
+    (bknContext) => request(ctx, `${RETRIEVAL_BASE}/search_instance`, {
       method: "POST",
       body: {
         ...searchBody(knId, query, opts),
@@ -2466,7 +2394,7 @@ async function rerank(ctx, model, query, documents) {
 }
 
 // src/api/resources.ts
-var BASE3 = "/api/vega-backend/v1/resources";
+var BASE2 = "/api/vega-backend/v1/resources";
 var ResourceCategory = z.enum([
   "table",
   "file",
@@ -2478,7 +2406,7 @@ var ResourceCategory = z.enum([
   "logicview",
   "dataset"
 ]);
-var ResourceStatus = z.enum(["active", "disabled", "deprecated", "stale"]);
+var ResourceStatus = z.enum(["active", "deprecated", "stale"]);
 var ResourceLocalStatus = z.enum(["unavailable", "available", "stale"]);
 var ResourceAccountInfo = z.object({ id: z.string(), type: z.string(), name: z.string().optional() }).passthrough();
 var nullAsAbsent = (schema) => schema.nullish().transform((v) => v ?? void 0);
@@ -2516,6 +2444,8 @@ var Resource = z.object({
   // status; request options below remain constrained to known values.
   category: z.string(),
   status: z.string(),
+  // Older deployments omit this newly split field; the migration default is enabled.
+  enabled: z.boolean().default(true),
   status_message: z.string().optional(),
   last_discover_status: z.string().optional(),
   schema: z.string().optional(),
@@ -2542,10 +2472,16 @@ var Resource = z.object({
   update_time: z.number(),
   operations: z.array(z.string()).optional()
 }).passthrough();
-var ListResourcesResponse = z.object({ entries: z.array(Resource), total_count: z.number() }).passthrough();
+var ResourceSummary = Resource.omit({
+  source_metadata: true,
+  schema_definition: true,
+  index_config: true,
+  logic_definition: true
+});
+var ListResourcesResponse = z.object({ entries: z.array(ResourceSummary), total_count: z.number() }).passthrough();
 var BatchResourcesResponse = z.object({ entries: z.array(Resource) }).passthrough();
 async function listResources2(ctx, opts = {}) {
-  const result = await request(ctx, BASE3, {
+  const result = await request(ctx, BASE2, {
     query: {
       catalog_id: opts.catalogId || void 0,
       name: opts.name || void 0,
@@ -2565,7 +2501,7 @@ async function listResources2(ctx, opts = {}) {
 }
 async function getResource(ctx, id, opts = {}) {
   const ids = Array.isArray(id) ? id : [id];
-  const result = await request(ctx, `${BASE3}/${ids.map(encodeURIComponent).join(",")}`, {
+  const result = await request(ctx, `${BASE2}/${ids.map(encodeURIComponent).join(",")}`, {
     query: {
       ignore_missing: opts.ignoreMissing === void 0 ? void 0 : String(opts.ignoreMissing)
     }
@@ -2573,7 +2509,7 @@ async function getResource(ctx, id, opts = {}) {
   return BatchResourcesResponse.parse(result);
 }
 function createResourceRaw(ctx, body) {
-  return request(ctx, BASE3, { method: "POST", body });
+  return request(ctx, BASE2, { method: "POST", body });
 }
 async function createResource(ctx, req) {
   const result = await createResourceRaw(ctx, {
@@ -2594,7 +2530,13 @@ async function createResource(ctx, req) {
   return Resource.parse(result);
 }
 function updateResourceRaw(ctx, id, body) {
-  return request(ctx, `${BASE3}/${encodeURIComponent(id)}`, { method: "PUT", body });
+  return request(ctx, `${BASE2}/${encodeURIComponent(id)}`, { method: "PUT", body });
+}
+function enableResource(ctx, id) {
+  return request(ctx, `${BASE2}/${encodeURIComponent(id)}/enable`, { method: "POST" });
+}
+function disableResource(ctx, id) {
+  return request(ctx, `${BASE2}/${encodeURIComponent(id)}/disable`, { method: "POST" });
 }
 async function updateResource(ctx, id, patch) {
   const current = firstResource(await getResource(ctx, id));
@@ -2635,6 +2577,7 @@ function resourceUpdateBody(id, current, patch) {
     tags: patch.tags ?? current.tags ?? [],
     description: patch.description ?? current.description ?? "",
     category: current.category,
+    enabled: current.enabled,
     schema_definition: patch.schemaDefinition ?? current.schema_definition,
     index_config: patch.indexConfig === void 0 ? current.index_config : patch.indexConfig,
     logic_definition: patch.logicDefinition ?? current.logic_definition
@@ -2674,7 +2617,7 @@ function firstResource(result) {
 }
 function deleteResource(ctx, id, opts = {}) {
   const ids = Array.isArray(id) ? id : [id];
-  return request(ctx, `${BASE3}/${ids.map(encodeURIComponent).join(",")}`, {
+  return request(ctx, `${BASE2}/${ids.map(encodeURIComponent).join(",")}`, {
     method: "DELETE",
     query: {
       ignore_missing: opts.ignoreMissing === void 0 ? void 0 : String(opts.ignoreMissing)
@@ -2714,7 +2657,7 @@ function queryResource(ctx, id, opts = {}) {
     } : {},
     ...opts.having !== void 0 ? { having: opts.having } : {}
   };
-  return request(ctx, `${BASE3}/${encodeURIComponent(id)}/data`, {
+  return request(ctx, `${BASE2}/${encodeURIComponent(id)}/data`, {
     method: "POST",
     headers: { "X-HTTP-Method-Override": "GET" },
     body,
@@ -2722,7 +2665,7 @@ function queryResource(ctx, id, opts = {}) {
   });
 }
 async function createResourceDocuments(ctx, resourceId, documents) {
-  const result = await request(ctx, `${BASE3}/${encodeURIComponent(resourceId)}/data`, {
+  const result = await request(ctx, `${BASE2}/${encodeURIComponent(resourceId)}/data`, {
     method: "POST",
     headers: { "X-HTTP-Method-Override": "POST" },
     body: documents
@@ -2730,7 +2673,7 @@ async function createResourceDocuments(ctx, resourceId, documents) {
   return z.object({ ids: z.array(z.string()) }).passthrough().parse(result);
 }
 async function upsertResourceDocuments(ctx, resourceId, documents) {
-  const result = await request(ctx, `${BASE3}/${encodeURIComponent(resourceId)}/data`, {
+  const result = await request(ctx, `${BASE2}/${encodeURIComponent(resourceId)}/data`, {
     method: "PUT",
     body: documents
   });
@@ -2739,7 +2682,7 @@ async function upsertResourceDocuments(ctx, resourceId, documents) {
 async function getResourceDocument(ctx, resourceId, documentId) {
   const result = await request(
     ctx,
-    `${BASE3}/${encodeURIComponent(resourceId)}/data/${encodeURIComponent(documentId)}`,
+    `${BASE2}/${encodeURIComponent(resourceId)}/data/${encodeURIComponent(documentId)}`,
     { responseParser: parseBigIntJSON }
   );
   return z.record(z.unknown()).parse(result);
@@ -2747,7 +2690,7 @@ async function getResourceDocument(ctx, resourceId, documentId) {
 async function upsertResourceDocument(ctx, resourceId, documentId, document) {
   const result = await request(
     ctx,
-    `${BASE3}/${encodeURIComponent(resourceId)}/data/${encodeURIComponent(documentId)}`,
+    `${BASE2}/${encodeURIComponent(resourceId)}/data/${encodeURIComponent(documentId)}`,
     { method: "PUT", body: document }
   );
   return z.object({ id: z.string() }).passthrough().parse(result);
@@ -2756,7 +2699,7 @@ function deleteResourceDocuments(ctx, resourceId, documentIds) {
   const ids = Array.isArray(documentIds) ? documentIds : [documentIds];
   return request(
     ctx,
-    `${BASE3}/${encodeURIComponent(resourceId)}/data/${ids.map(encodeURIComponent).join(",")}`,
+    `${BASE2}/${encodeURIComponent(resourceId)}/data/${ids.map(encodeURIComponent).join(",")}`,
     { method: "DELETE" }
   );
 }
@@ -2764,7 +2707,7 @@ async function deleteResourceDocumentsByFilter(ctx, resourceId, filterCondition)
   if (Object.keys(filterCondition).length === 0) {
     throw new InputError("delete-by-filter requires a non-empty filter condition");
   }
-  return request(ctx, `${BASE3}/${encodeURIComponent(resourceId)}/data`, {
+  return request(ctx, `${BASE2}/${encodeURIComponent(resourceId)}/data`, {
     method: "POST",
     headers: { "X-HTTP-Method-Override": "DELETE" },
     body: { filter_condition: filterCondition }
@@ -2828,7 +2771,8 @@ var Catalog = z2.object({
   update_time: z2.number(),
   operations: z2.array(z2.string()).optional()
 }).passthrough();
-var ListCatalogsResponse = z2.object({ entries: z2.array(Catalog), total_count: z2.number() }).passthrough();
+var CatalogSummary = Catalog.omit({ connector_config: true, metadata: true });
+var ListCatalogsResponse = z2.object({ entries: z2.array(CatalogSummary), total_count: z2.number() }).passthrough();
 var BatchCatalogsResponse = z2.object({ entries: z2.array(Catalog) }).passthrough();
 var CatalogRef = z2.object({ id: z2.string() }).passthrough();
 var CatalogHealthStatus = z2.object({
@@ -2967,6 +2911,7 @@ async function listBuildTasks(ctx, opts = {}) {
       catalog_id: opts.catalogId || void 0,
       status: opts.status || void 0,
       mode: opts.mode,
+      execute_type: opts.executeType,
       sort: opts.sort,
       direction: opts.direction
     }
@@ -3457,10 +3402,14 @@ var DiscoverResult = z3.object({
 var DiscoverTask = z3.object({
   id: z3.string(),
   catalog_id: z3.string(),
+  resource_id: z3.string().optional(),
+  resource_name: z3.string().optional(),
   catalog_name: z3.string().optional(),
   schedule_id: z3.string(),
   strategy: z3.string(),
   trigger_type: z3.string(),
+  // Catalog tasks created before priority support have the manual default.
+  queue_priority: z3.number().default(20),
   status: z3.string(),
   progress: z3.number(),
   message: z3.string(),
@@ -3484,6 +3433,7 @@ async function listDiscoverTasks(ctx, opts = {}) {
   const result = await request(ctx, `${VEGA_BASE2}/discover-tasks`, {
     query: {
       catalog_id: opts.catalogId || void 0,
+      resource_id: opts.resourceId || void 0,
       schedule_id: opts.scheduleId || void 0,
       status: opts.status,
       strategy: opts.strategy,
@@ -3520,6 +3470,14 @@ async function discoverCatalog(ctx, catalogId, req = {}) {
   );
   return IdResponse.parse(result);
 }
+async function discoverResource(ctx, resourceId) {
+  const result = await request(
+    ctx,
+    `${VEGA_BASE2}/resources/${encodeURIComponent(resourceId)}/discover`,
+    { method: "POST" }
+  );
+  return IdResponse.parse(result);
+}
 
 // src/utils/pk-detection.ts
 var PK_NAME_HINTS = ["id", "_id", "pk"];
@@ -3934,7 +3892,7 @@ function kn(ctx) {
   return {
     list: (opts) => listKnowledgeNetworks(ctx, opts),
     get: (knId, opts) => getKnowledgeNetwork(ctx, knId, opts),
-    search: (knId, query, opts) => semanticSearch(ctx, knId, query, opts),
+    search: (knId, query, opts) => searchInstance(ctx, knId, query, opts),
     create: (opts) => createKnowledgeNetwork(ctx, opts),
     update: (knId, body) => updateKnowledgeNetwork(ctx, knId, body),
     delete: (knId) => deleteKnowledgeNetwork(ctx, knId),
@@ -3950,7 +3908,6 @@ function kn(ctx) {
     metricCreate: (knId, body) => createMetric(ctx, knId, body),
     metricUpdate: (knId, metricId, body) => updateMetric(ctx, knId, metricId, body),
     metricDelete: (knId, metricId) => deleteMetric(ctx, knId, metricId),
-    metricSearch: (knId, body) => searchMetrics(ctx, knId, body),
     metricValidate: (knId, body) => validateMetric(ctx, knId, body),
     objectTypes: (knId, opts) => listObjectTypes(ctx, knId, opts),
     objectTypeQuery: (knId, otId, body) => queryObjectTypeInstances(ctx, knId, otId, body),
@@ -3966,7 +3923,6 @@ function kn(ctx) {
     actionTypes: (knId, opts) => listActionTypes(ctx, knId, opts),
     actionTypeQuery: (knId, atId, body) => queryActionType(ctx, knId, atId, body),
     actionTypeExecute: (knId, atId, body) => executeActionType(ctx, knId, atId, body),
-    actionTypeInputs: (knId, atId) => getActionTypeInputs(ctx, knId, atId),
     actionTypeGet: (knId, id) => getSchemaItem(ctx, knId, "action-types", id),
     conceptGroups: (knId) => listConceptGroups(ctx, knId),
     conceptGroup: (knId, cgId) => getConceptGroup(ctx, knId, cgId),
@@ -4067,6 +4023,8 @@ function resources(ctx) {
     create: (req) => createResource(ctx, req),
     delete: (id, opts) => deleteResource(ctx, id, opts),
     update: (id, patch) => updateResource(ctx, id, patch),
+    enable: (id) => enableResource(ctx, id),
+    disable: (id) => disableResource(ctx, id),
     configureIndex: (id, opts) => configureResourceIndex(ctx, id, opts),
     find: (name, opts) => findResource(ctx, name, opts),
     query: (id, opts) => queryResource(ctx, id, opts),
@@ -4084,7 +4042,7 @@ import { mkdirSync as mkdirSync4, writeFileSync as writeFileSync3 } from "fs";
 import { basename, dirname as dirname2, resolve as resolve4 } from "path";
 
 // src/api/skills.ts
-var BASE4 = "/api/agent-operator-integration/v1";
+var BASE3 = "/api/agent-operator-integration/v1";
 async function registerSkillZip(ctx, bytes, opts = {}) {
   const form2 = new FormData();
   form2.set("file_type", "zip");
@@ -4093,7 +4051,7 @@ async function registerSkillZip(ctx, bytes, opts = {}) {
   if (opts.extendInfo) form2.set("extend_info", stringifyBigIntJSON(opts.extendInfo));
   const res = await authFetch(
     ctx,
-    () => tlsFetch(ctx.insecure, `${ctx.baseUrl}${BASE4}/skills`, {
+    () => tlsFetch(ctx.insecure, `${ctx.baseUrl}${BASE3}/skills`, {
       method: "POST",
       headers: buildHeaders(ctx),
       body: form2
@@ -4109,7 +4067,7 @@ async function updateSkillPackageZip(ctx, skillId, bytes, filename = "skill.zip"
   form2.set("file", new Blob([bytes]), filename);
   const res = await authFetch(
     ctx,
-    () => tlsFetch(ctx.insecure, `${ctx.baseUrl}${BASE4}/skills/${encodeURIComponent(skillId)}/package`, {
+    () => tlsFetch(ctx.insecure, `${ctx.baseUrl}${BASE3}/skills/${encodeURIComponent(skillId)}/package`, {
       method: "PUT",
       headers: buildHeaders(ctx),
       body: form2
@@ -4121,7 +4079,7 @@ async function updateSkillPackageZip(ctx, skillId, bytes, filename = "skill.zip"
 }
 function skillPath(skillId, view, path) {
   const seg = view === "draft" ? "management/" : "";
-  return `${BASE4}/skills/${encodeURIComponent(skillId)}/${seg}${path}`;
+  return `${BASE3}/skills/${encodeURIComponent(skillId)}/${seg}${path}`;
 }
 async function downloadSkill(ctx, skillId, view = "published") {
   const res = await authFetch(
@@ -4134,7 +4092,7 @@ async function downloadSkill(ctx, skillId, view = "published") {
   return new Uint8Array(await res.arrayBuffer());
 }
 function executeSkill(ctx, skillId, opts) {
-  return request(ctx, `${BASE4}/skills/${encodeURIComponent(skillId)}/execute`, {
+  return request(ctx, `${BASE3}/skills/${encodeURIComponent(skillId)}/execute`, {
     method: "POST",
     body: {
       entry_shell: opts.entryShell,
@@ -4145,30 +4103,29 @@ function executeSkill(ctx, skillId, opts) {
     // caller never learns the exit code. With no stated limit the sandbox
     // applies its own — 300s by default, 3600s at most — so the budget has to
     // cover that rather than a number of ours.
-    timeoutMs: executeBudgetMs(opts.timeout),
+    timeoutMs: sandboxBudgetMs(opts.timeout),
     // The abort deadline alone tops out at undici's 300s header deadline,
     // because `execute-sync` blocks and sends no headers until the run is over.
-    headersTimeoutMs: executeBudgetMs(opts.timeout)
+    headersTimeoutMs: sandboxBudgetMs(opts.timeout)
   });
 }
-var SANDBOX_MAX_TIMEOUT_SEC = 3600;
-function executeBudgetMs(timeoutSec) {
-  return (timeoutSec ?? SANDBOX_MAX_TIMEOUT_SEC) * 1e3 + 15e3;
-}
 function getSkillNames(ctx, ids) {
-  return request(ctx, `${BASE4}/skills/names`, { method: "POST", body: { ids } });
+  return request(ctx, `${BASE3}/skills/names`, { method: "POST", body: { ids } });
 }
 function updateSkillMetadata(ctx, skillId, body) {
-  return request(ctx, `${BASE4}/skills/${encodeURIComponent(skillId)}`, { method: "PUT", body });
+  return request(ctx, `${BASE3}/skills/${encodeURIComponent(skillId)}/metadata`, {
+    method: "PUT",
+    body
+  });
 }
 function republishSkillVersion(ctx, skillId, version) {
-  return request(ctx, `${BASE4}/skills/${encodeURIComponent(skillId)}/history/republish`, {
+  return request(ctx, `${BASE3}/skills/${encodeURIComponent(skillId)}/history/republish`, {
     method: "POST",
     body: { version }
   });
 }
 function publishSkillVersion(ctx, skillId, version) {
-  return request(ctx, `${BASE4}/skills/${encodeURIComponent(skillId)}/history/publish`, {
+  return request(ctx, `${BASE3}/skills/${encodeURIComponent(skillId)}/history/publish`, {
     method: "POST",
     body: { version }
   });
@@ -4184,19 +4141,19 @@ function listQuery2(opts) {
   };
 }
 function listSkills(ctx, opts = {}) {
-  return request(ctx, `${BASE4}/skills`, { query: listQuery2(opts) });
+  return request(ctx, `${BASE3}/skills`, { query: listQuery2(opts) });
 }
 function listSkillMarket(ctx, opts = {}) {
-  return request(ctx, `${BASE4}/skills/market`, { query: listQuery2(opts) });
+  return request(ctx, `${BASE3}/skills/market`, { query: listQuery2(opts) });
 }
 function getSkill(ctx, skillId) {
-  return request(ctx, `${BASE4}/skills/${encodeURIComponent(skillId)}`);
+  return request(ctx, `${BASE3}/skills/${encodeURIComponent(skillId)}`);
 }
 function getSkillMarket(ctx, skillId) {
-  return request(ctx, `${BASE4}/skills/market/${encodeURIComponent(skillId)}`);
+  return request(ctx, `${BASE3}/skills/market/${encodeURIComponent(skillId)}`);
 }
 function deleteSkill(ctx, skillId) {
-  return request(ctx, `${BASE4}/skills/${encodeURIComponent(skillId)}`, { method: "DELETE" });
+  return request(ctx, `${BASE3}/skills/${encodeURIComponent(skillId)}`, { method: "DELETE" });
 }
 function getSkillContent(ctx, skillId, opts = {}) {
   return request(ctx, skillPath(skillId, opts.view ?? "published", "content"), {
@@ -4211,10 +4168,10 @@ function readSkillFile(ctx, skillId, relPath, opts = {}) {
   });
 }
 function getSkillHistory(ctx, skillId) {
-  return request(ctx, `${BASE4}/skills/${encodeURIComponent(skillId)}/history`);
+  return request(ctx, `${BASE3}/skills/${encodeURIComponent(skillId)}/history`);
 }
 function setSkillStatus(ctx, skillId, status2) {
-  return request(ctx, `${BASE4}/skills/${encodeURIComponent(skillId)}/status`, {
+  return request(ctx, `${BASE3}/skills/${encodeURIComponent(skillId)}/status`, {
     method: "PUT",
     body: { status: status2 }
   });
@@ -4502,7 +4459,7 @@ import { dirname as dirname3, resolve as resolve5 } from "path";
 // src/api/toolboxes.ts
 import { readFile } from "fs/promises";
 import { basename as basename2 } from "path";
-var PATH = "/api/agent-operator-integration/v1/tool-box";
+var PATH2 = "/api/agent-operator-integration/v1/tool-box";
 var IMPEX = "/api/agent-operator-integration/v1/impex";
 async function exportConfig(ctx, id, type = "toolbox") {
   const res = await authFetch(
@@ -4542,7 +4499,7 @@ async function uploadTool(ctx, boxId, filePath, metadataType = "openapi") {
   form2.append("data", new Blob([new Uint8Array(buf)]), basename2(filePath));
   const res = await authFetch(
     ctx,
-    () => tlsFetch(ctx.insecure, `${ctx.baseUrl}${PATH}/${encodeURIComponent(boxId)}/tool`, {
+    () => tlsFetch(ctx.insecure, `${ctx.baseUrl}${PATH2}/${encodeURIComponent(boxId)}/tool`, {
       method: "POST",
       headers: buildHeaders(ctx),
       body: form2
@@ -4552,13 +4509,42 @@ async function uploadTool(ctx, boxId, filePath, metadataType = "openapi") {
   if (!res.ok) throw new HttpError(res.status, res.statusText, text);
   return text ? parseBigIntJSON(text) : text;
 }
+function toolBody(opts) {
+  return {
+    metadata_type: opts.metadataType,
+    ...opts.function ? { function_input: functionInputBody(opts.function) } : {},
+    ...opts.data !== void 0 ? { data: opts.data } : {},
+    ...opts.useRule ? { use_rule: opts.useRule } : {}
+  };
+}
+function createTool(ctx, boxId, opts) {
+  return request(ctx, `${PATH2}/${encodeURIComponent(boxId)}/tool`, {
+    method: "POST",
+    body: toolBody(opts)
+  });
+}
+function getTool(ctx, boxId, toolId) {
+  return request(ctx, `${PATH2}/${encodeURIComponent(boxId)}/tool/${encodeURIComponent(toolId)}`);
+}
+function updateTool(ctx, boxId, toolId, opts) {
+  return request(ctx, `${PATH2}/${encodeURIComponent(boxId)}/tool/${encodeURIComponent(toolId)}`, {
+    method: "POST",
+    body: { name: opts.name, description: opts.description, ...toolBody(opts) }
+  });
+}
+function deleteTools(ctx, boxId, toolIds) {
+  return request(ctx, `${PATH2}/${encodeURIComponent(boxId)}/tools/batch-delete`, {
+    method: "POST",
+    body: { tool_ids: toolIds }
+  });
+}
 function listToolboxes(ctx, opts = {}) {
-  return request(ctx, `${PATH}/list`, {
+  return request(ctx, `${PATH2}/list`, {
     query: { keyword: opts.keyword || void 0, limit: opts.limit, offset: opts.offset ?? 0 }
   });
 }
 function listTools2(ctx, boxId, opts = {}) {
-  return request(ctx, `${PATH}/${encodeURIComponent(boxId)}/tools/list`, {
+  return request(ctx, `${PATH2}/${encodeURIComponent(boxId)}/tools/list`, {
     query: {
       page: opts.page,
       page_size: Number.isFinite(opts.pageSize) && opts.pageSize > 0 ? opts.pageSize : void 0,
@@ -4567,22 +4553,22 @@ function listTools2(ctx, boxId, opts = {}) {
   });
 }
 function createToolbox(ctx, opts) {
-  return request(ctx, PATH, {
+  return request(ctx, PATH2, {
     method: "POST",
     body: {
-      metadata_type: "openapi",
+      metadata_type: opts.metadataType ?? "openapi",
       box_name: opts.name,
       box_desc: opts.description ?? "",
-      box_svc_url: opts.serviceUrl,
+      ...opts.serviceUrl ? { box_svc_url: opts.serviceUrl } : {},
       source: opts.source ?? "custom"
     }
   });
 }
 function deleteToolbox(ctx, boxId) {
-  return request(ctx, `${PATH}/${encodeURIComponent(boxId)}`, { method: "DELETE" });
+  return request(ctx, `${PATH2}/${encodeURIComponent(boxId)}`, { method: "DELETE" });
 }
 function setToolboxStatus(ctx, boxId, status2) {
-  return request(ctx, `${PATH}/${encodeURIComponent(boxId)}/status`, {
+  return request(ctx, `${PATH2}/${encodeURIComponent(boxId)}/status`, {
     method: "POST",
     body: { status: status2 }
   });
@@ -4597,7 +4583,7 @@ function envelope(e) {
   };
 }
 function executeTool(ctx, boxId, toolId, e = {}) {
-  return request(ctx, `${PATH}/${encodeURIComponent(boxId)}/proxy/${encodeURIComponent(toolId)}`, {
+  return request(ctx, `${PATH2}/${encodeURIComponent(boxId)}/proxy/${encodeURIComponent(toolId)}`, {
     method: "POST",
     body: envelope(e)
   });
@@ -4605,7 +4591,7 @@ function executeTool(ctx, boxId, toolId, e = {}) {
 function debugTool(ctx, boxId, toolId, e = {}) {
   return request(
     ctx,
-    `${PATH}/${encodeURIComponent(boxId)}/tool/${encodeURIComponent(toolId)}/debug`,
+    `${PATH2}/${encodeURIComponent(boxId)}/tool/${encodeURIComponent(toolId)}/debug`,
     {
       method: "POST",
       body: envelope(e)
@@ -4613,7 +4599,7 @@ function debugTool(ctx, boxId, toolId, e = {}) {
   );
 }
 function setToolStatuses(ctx, boxId, updates) {
-  return request(ctx, `${PATH}/${encodeURIComponent(boxId)}/tools/status`, {
+  return request(ctx, `${PATH2}/${encodeURIComponent(boxId)}/tools/status`, {
     method: "POST",
     body: updates.map((u) => ({ tool_id: u.toolId, status: u.status }))
   });
@@ -4634,6 +4620,10 @@ function toolboxes(ctx) {
       toolIds.map((toolId) => ({ toolId, status: status2 }))
     ),
     upload: (boxId, filePath, metadataType) => uploadTool(ctx, boxId, filePath, metadataType),
+    createTool: (boxId, opts) => createTool(ctx, boxId, opts),
+    getTool: (boxId, toolId) => getTool(ctx, boxId, toolId),
+    updateTool: (boxId, toolId, opts) => updateTool(ctx, boxId, toolId, opts),
+    deleteTools: (boxId, toolIds) => deleteTools(ctx, boxId, toolIds),
     /** Export a toolbox config to a local `.adp` file. */
     export: async (id, outPath, type) => {
       const bytes = await exportConfig(ctx, id, type);
@@ -5851,132 +5841,6 @@ function buildCasesFromQueries(raw) {
     };
   });
 }
-function applyOp(actual, op, expected) {
-  return op === "eq" ? actual === expected : op === "lt" ? actual < expected : op === "lte" ? actual <= expected : op === "gt" ? actual > expected : actual >= expected;
-}
-function toolName2(s) {
-  const v = s.attributes["gen_ai.tool.name"];
-  return typeof v === "string" ? v : s.name;
-}
-function orderedToolNames(spans) {
-  return spans.filter((s) => s.kind === "tool").slice().sort((a, b) => Number(BigInt(a.startTimeUnixNano) - BigInt(b.startTimeUnixNano))).map(toolName2);
-}
-function isSubsequence(seq, actual) {
-  let i = 0;
-  for (const n of actual) {
-    if (n === seq[i]) i++;
-    if (i === seq.length) return true;
-  }
-  return seq.length === 0;
-}
-async function evaluateAssertion(a, ctx) {
-  const r = a;
-  switch (a.type) {
-    case "contains": {
-      const v = String(r.value ?? "");
-      return ctx.answer.includes(v) ? { type: a.type, verdict: "pass" } : { type: a.type, verdict: "fail", actual: ctx.answer };
-    }
-    case "not_contains": {
-      const v = String(r.value ?? "");
-      return ctx.answer.includes(v) ? { type: a.type, verdict: "fail", actual: ctx.answer } : { type: a.type, verdict: "pass" };
-    }
-    case "regex": {
-      let re;
-      try {
-        re = new RegExp(String(r.pattern ?? ""));
-      } catch {
-        return { type: a.type, verdict: "skip", reason: `invalid regex: ${r.pattern}` };
-      }
-      return re.test(ctx.answer) ? { type: a.type, verdict: "pass" } : { type: a.type, verdict: "fail", actual: ctx.answer };
-    }
-    case "tool_call_count": {
-      const count = ctx.spans.filter(
-        (s) => s.kind === "tool" && toolName2(s) === String(r.tool ?? "")
-      ).length;
-      return applyOp(count, r.op ?? "eq", Number(r.value ?? 0)) ? { type: a.type, verdict: "pass", actual: count } : { type: a.type, verdict: "fail", actual: count };
-    }
-    case "tool_call_order": {
-      const seq = Array.isArray(r.sequence) ? r.sequence.map(String) : [];
-      const actual = orderedToolNames(ctx.spans);
-      return isSubsequence(seq, actual) ? { type: a.type, verdict: "pass", actual } : { type: a.type, verdict: "fail", actual };
-    }
-    case "latency_ms": {
-      if (ctx.durationMs == null)
-        return { type: a.type, verdict: "skip", reason: "durationMs unavailable" };
-      return applyOp(ctx.durationMs, r.op ?? "lte", Number(r.value ?? 0)) ? { type: a.type, verdict: "pass", actual: ctx.durationMs } : { type: a.type, verdict: "fail", actual: ctx.durationMs };
-    }
-    case "semantic_match": {
-      if (!ctx.judgeSemanticMatch)
-        return { type: a.type, verdict: "skip", reason: "no judge (pass --llm)" };
-      if (!ctx.reference?.answer)
-        return { type: a.type, verdict: "skip", reason: "no reference.answer on case" };
-      const smv = await ctx.judgeSemanticMatch(
-        String(r.question ?? ""),
-        ctx.answer,
-        ctx.reference.answer
-      );
-      return { type: a.type, verdict: smv.verdict, actual: smv.reasoning };
-    }
-    default:
-      return { type: a.type, verdict: "skip", reason: `unknown assertion type: ${a.type}` };
-  }
-}
-async function runEvalSet(agentId, cases, deps) {
-  const results = [];
-  for (const c of cases) {
-    const query = c.input.user_message;
-    let answer = "";
-    let conversationId = null;
-    let spans = [];
-    let errorCode;
-    let chatFailed = false;
-    try {
-      const run = await deps.runQuery(query);
-      answer = run.answer;
-      conversationId = run.conversationId;
-      if (conversationId) {
-        try {
-          spans = await deps.fetchSpans(conversationId);
-        } catch {
-          errorCode = "trace-fetch-failed";
-        }
-      }
-    } catch {
-      chatFailed = true;
-      errorCode = "chat-failed";
-    }
-    const assertionResults = [];
-    if (!chatFailed) {
-      for (const a of c.assertions ?? []) {
-        assertionResults.push(
-          await evaluateAssertion(a, {
-            answer,
-            spans,
-            reference: c.reference,
-            judgeSemanticMatch: deps.judgeSemanticMatch
-          })
-        );
-      }
-    }
-    results.push({
-      queryId: c.query_id,
-      query,
-      answer,
-      conversationId,
-      assertions: assertionResults,
-      ...errorCode ? { errorCode } : {}
-    });
-  }
-  const flat = results.flatMap((r) => r.assertions);
-  return {
-    agentId,
-    total: cases.length,
-    passed: flat.filter((a) => a.verdict === "pass").length,
-    failed: flat.filter((a) => a.verdict === "fail").length,
-    skipped: flat.filter((a) => a.verdict === "skip").length,
-    cases: results
-  };
-}
 
 // src/bkn-trace/fixture-validate.ts
 import { readFileSync as readFileSync4, readdirSync as readdirSync4, statSync as statSync3 } from "fs";
@@ -6720,20 +6584,6 @@ function validateFixturePath(path) {
 }
 
 // src/resources/trace.ts
-async function semanticJudge(question, answer, reference) {
-  const prompt = [
-    "You judge whether an agent ANSWER semantically matches a REFERENCE answer.",
-    question ? `QUESTION/CRITERION: ${question}` : "",
-    `ANSWER: ${answer}`,
-    `REFERENCE: ${reference}`,
-    'Respond with ONLY JSON: {"verdict":"pass|fail","reasoning":"<one sentence>"}'
-  ].filter(Boolean).join("\n");
-  const out = await judgeJson(prompt, { timeoutMs: 12e4 });
-  return {
-    verdict: out.verdict === "pass" ? "pass" : "fail",
-    reasoning: typeof out.reasoning === "string" ? out.reasoning : ""
-  };
-}
 function trace(ctx) {
   const lifecycle = traceLifecycleApi(ctx);
   const managed = new ManagedTrace(lifecycle);
@@ -6824,30 +6674,7 @@ function trace(ctx) {
     /** Build eval cases from a loosely-shaped queries object/array. */
     evalSetBuild: (raw) => buildCasesFromQueries(raw),
     /** Validate BKN Trace phase-one fixture files or directories. */
-    validateFixture: (path) => validateFixturePath(path),
-    /**
-     * Run an eval set against an agent: each case's query is sent to the agent,
-     * the resulting trace is fetched, and assertions are checked. `llm` enables
-     * `semantic_match` assertions via the local claude judge.
-     */
-    evalSetTest: async (agentId, cases, opts = {}) => {
-      const info = await fetchAgentInfo(ctx, agentId, opts.version ?? "v0");
-      return runEvalSet(agentId, cases, {
-        runQuery: async (query) => {
-          const res = await sendChat(ctx, info, query, {});
-          return { answer: res.text, conversationId: res.conversationId ?? null };
-        },
-        fetchSpans: async (conversationId) => {
-          const { spans, traceIds } = await getRawSpansByConversation(ctx, conversationId);
-          const primary = traceIds[0] ?? conversationId;
-          return assembleTraceTree(
-            primary,
-            traceIds.length > 0 ? spans.filter((s) => !s.traceId || s.traceId === primary) : spans
-          ).spans;
-        },
-        judgeSemanticMatch: opts.llm && claudeAvailable() ? semanticJudge : void 0
-      });
-    }
+    validateFixture: (path) => validateFixturePath(path)
   };
 }
 function isRuleApplicable(ruleId, spans) {
@@ -6878,7 +6705,7 @@ function isRuleApplicable(ruleId, spans) {
 
 // src/api/vega-semantic.ts
 import { z as z4 } from "zod";
-var BASE5 = "/api/vega-backend/v1/semantic-understanding-tasks";
+var BASE4 = "/api/vega-backend/v1/semantic-understanding-tasks";
 var SemanticUnderstandingScope = z4.enum(["resource", "catalog"]);
 var SemanticUnderstandingApplyMode = z4.enum(["dry_run", "fill_empty", "force"]);
 var SemanticUnderstandingTaskSort = z4.enum(["create_time", "start_time", "finish_time"]);
@@ -6927,7 +6754,7 @@ async function createSemanticUnderstandingTask(ctx, req) {
       }
     } : {}
   };
-  const result = await request(ctx, BASE5, {
+  const result = await request(ctx, BASE4, {
     method: "POST",
     body: {
       scope: req.scope,
@@ -6939,7 +6766,7 @@ async function createSemanticUnderstandingTask(ctx, req) {
   return SemanticUnderstandingTask.parse(result);
 }
 async function listSemanticUnderstandingTasks(ctx, opts = {}) {
-  const result = await request(ctx, BASE5, {
+  const result = await request(ctx, BASE4, {
     query: {
       scope: opts.scope,
       catalog_id: opts.catalogId || void 0,
@@ -6956,12 +6783,12 @@ async function listSemanticUnderstandingTasks(ctx, opts = {}) {
   return ListSemanticUnderstandingTasksResponse.parse(result);
 }
 async function getSemanticUnderstandingTask(ctx, id) {
-  const result = await request(ctx, `${BASE5}/${encodeURIComponent(id)}`);
+  const result = await request(ctx, `${BASE4}/${encodeURIComponent(id)}`);
   return SemanticUnderstandingTask.parse(result);
 }
 function deleteSemanticUnderstandingTasks(ctx, ids, opts = {}) {
   const values = Array.isArray(ids) ? ids : [ids];
-  return request(ctx, `${BASE5}/${values.map(encodeURIComponent).join(",")}`, {
+  return request(ctx, `${BASE4}/${values.map(encodeURIComponent).join(",")}`, {
     method: "DELETE",
     query: {
       ignore_missing: opts.ignoreMissing === void 0 ? void 0 : String(opts.ignoreMissing)
@@ -6992,6 +6819,7 @@ function vega(ctx) {
     catalogHealthCheckSchedule: (id) => getCatalogHealthCheckSchedule(ctx, id),
     updateCatalogHealthCheckSchedule: (id, req) => updateCatalogHealthCheckSchedule(ctx, id, req),
     discoverCatalog: (catalogId, req) => discoverCatalog(ctx, catalogId, req),
+    discoverResource: (resourceId) => discoverResource(ctx, resourceId),
     catalogResources: (id, category, limit, offset) => listCatalogResources(ctx, id, category, limit, offset),
     catalogHealth: (id) => catalogHealthStatus(ctx, id),
     connectorTypes: () => listConnectorTypes(ctx),
@@ -7153,9 +6981,9 @@ function createClient(opts = {}) {
     ctx,
     kn: kn(ctx),
     resource: resources(ctx),
-    agents: agents2(ctx),
     context: context(ctx),
     models: models(ctx),
+    functions: functions(ctx),
     skills: skills(ctx),
     toolboxes: toolboxes(ctx),
     trace: trace(ctx),
@@ -7192,7 +7020,7 @@ function hostOf(baseUrl) {
   }
 }
 function normalize2(baseUrl) {
-  return baseUrl.replace(/\/+$/, "");
+  return trimTrailingSlashes(baseUrl);
 }
 function usernameOf(token) {
   if (!token) return void 0;
@@ -7255,7 +7083,7 @@ async function currentTokenFresh(opts = {}) {
   const claims = decodeJwt(token.accessToken);
   const decodable = claims?.exp !== void 0;
   const needsRefresh = decodable ? isExpired(claims) : true;
-  if (token.refreshToken && needsRefresh) {
+  if (token.refreshToken && needsRefresh && !isDryRun()) {
     try {
       const t = await refreshAccessToken(baseUrl, token.refreshToken, void 0, opts.insecure);
       writeToken(
@@ -7345,6 +7173,9 @@ function exportCreds() {
 }
 
 export {
+  enableDryRun,
+  DryRunSignal,
+  trimTrailingSlashes,
   HttpError,
   NonJsonResponseError,
   ToolError,
@@ -7372,9 +7203,10 @@ export {
   getUserSafe,
   changePasswordSafe,
   admin,
-  agents2 as agents,
   releaseLifecycleSessions,
   context,
+  functions,
+  BuildTaskExecuteType,
   BuildTaskStatus,
   BuildTaskSort,
   SortDirection,
@@ -7416,4 +7248,4 @@ export {
   exportCreds,
   auth_exports
 };
-//# sourceMappingURL=chunk-Z2NRTUB3.js.map
+//# sourceMappingURL=chunk-WIYRGBAB.js.map