agentengine-sdk-python 0.8.4__py3-none-any.whl → 0.8.5__py3-none-any.whl

ksadk/_build_provenance.json

@@ -1 +1 @@
-{"schemaVersion":1,"sourceCommit":"8e37106d1faed44c2de8b7f72a0d8cd2f1fbddd5","sourceTree":"clean","version":"0.8.4"}
+{"schemaVersion":1,"sourceCommit":"5128ff1e57d1c37bc16f780028698da433c12a7e","sourceTree":"clean","version":"0.8.5"}

ksadk/_process.py

@@ -0,0 +1,83 @@
+"""Small process-group lifecycle helpers shared by local runtime backends."""
+
+from __future__ import annotations
+
+import os
+import signal
+import subprocess
+import time
+
+
+def starts_new_process_group() -> bool:
+    return os.name == "posix"
+
+
+def terminate_process_group(
+    process: subprocess.Popen[object],
+    *,
+    grace_seconds: float = 0.2,
+    reap_seconds: float = 1.0,
+) -> str | None:
+    """Stop a process and its descendants, then reap the direct child.
+
+    The caller must have created the process with ``start_new_session=True`` on
+    POSIX. The bounded waits intentionally avoid ``communicate()`` because a
+    surviving descendant may keep inherited output descriptors open.
+    """
+
+    errors: list[str] = []
+    if os.name == "posix":
+        _signal_group(process.pid, signal.SIGTERM, errors)
+        deadline = time.monotonic() + max(grace_seconds, 0)
+        while time.monotonic() < deadline and _group_exists(process.pid):
+            # Reap an exited group leader before probing again. On Darwin an
+            # unreaped leader can make a now-empty group appear present and a
+            # subsequent killpg report EPERM.
+            process.poll()
+            time.sleep(0.01)
+        process.poll()
+        if _group_exists(process.pid):
+            _signal_group(process.pid, signal.SIGKILL, errors)
+    elif process.poll() is None:
+        try:
+            process.terminate()
+        except ProcessLookupError:
+            pass
+        except Exception as exc:  # pragma: no cover - platform/runtime specific
+            errors.append(type(exc).__name__)
+
+    try:
+        process.wait(timeout=max(reap_seconds, 0.01))
+    except subprocess.TimeoutExpired:
+        try:
+            process.kill()
+        except ProcessLookupError:
+            pass
+        except Exception as exc:  # pragma: no cover - platform/runtime specific
+            errors.append(type(exc).__name__)
+        try:
+            process.wait(timeout=max(reap_seconds, 0.01))
+        except subprocess.TimeoutExpired:
+            errors.append("process_reap_timeout")
+    except Exception as exc:  # pragma: no cover - platform/runtime specific
+        errors.append(type(exc).__name__)
+    return ",".join(dict.fromkeys(errors)) or None
+
+
+def _signal_group(pid: int, sig: signal.Signals, errors: list[str]) -> None:
+    try:
+        os.killpg(pid, sig)
+    except ProcessLookupError:
+        pass
+    except Exception as exc:  # pragma: no cover - platform/runtime specific
+        errors.append(type(exc).__name__)
+
+
+def _group_exists(pid: int) -> bool:
+    try:
+        os.killpg(pid, 0)
+        return True
+    except ProcessLookupError:
+        return False
+    except PermissionError:  # pragma: no cover - cannot inspect another owner
+        return True

ksadk/_str_enum.py

@@ -0,0 +1,17 @@
+"""String-valued enums on all supported Python versions (including 3.10)."""
+
+try:
+    from enum import StrEnum
+except ImportError:  # Python 3.10
+    from enum import Enum
+
+    class StrEnum(str, Enum):
+        __str__ = str.__str__
+        __format__ = str.__format__
+
+        @staticmethod
+        def _generate_next_value_(name, start, count, last_values):
+            return name.lower()
+
+
+__all__ = ["StrEnum"]

ksadk/a2ui/core.py

@@ -73,7 +73,7 @@ class A2UICore:
         self._seq = 0
         self._seen_surfaces: set[str] = set()
         # InteractionLedger 存在时它是 pending interaction 的唯一权威
-        # （Phase 1 Task 5 Step 6）；本地 dict 只作无 ledger 的降级路径。
+        # （Kernel Task 5 Step 6）；本地 dict 只作无 ledger 的降级路径。
         self._ledger = interaction_ledger
         self._guard = interaction_guard
         self._tenant_id = tenant_id
@@ -181,7 +181,7 @@ class A2UICore:
         await self.display_ui(surface, invocation_id=invocation_id, origin=origin)
         interaction_id = f"int_{uuid.uuid4().hex[:12]}"
         if self._ledger is not None and self._guard is not None:
-            # Phase 1 Task 5 Step 6:durable ledger 是 pending interaction 的
+            # Kernel Task 5 Step 6:durable ledger 是 pending interaction 的
             # 唯一权威;持久化身份与 interaction.requested 事实由 ledger 落盘。
             from datetime import datetime, timezone
 
@@ -264,7 +264,7 @@ class A2UICore:
         ``action``: ``{"action_id","surface_id","name","actor"?,"component_id"?}``;
         携带 ``interaction_id`` 且配置了 InteractionLedger 时,对原 ID 建
         InteractionSubmission 走 durable resolve,不再发第二个
-        InteractionRequested(Phase 1 Task 5 Step 6)。
+        InteractionRequested(Kernel Task 5 Step 6)。
         """
         receipt = ActionReceipt(
             action_id=str(action.get("action_id") or f"act_{uuid.uuid4().hex[:12]}"),

ksadk/api/client.py

@@ -1615,6 +1615,9 @@ class AgentEngineClient:
             "EnableObservability": enable_observability,
             "EnvironmentVariables": env_vars,
         }
+        component_config = data.get("component_config")
+        if component_config:
+            advanced["ComponentConfig"] = component_config
         inbound_identity_auth = data.get("inbound_identity_auth")
         if inbound_identity_auth is not None:
             advanced["InboundIdentityAuth"] = inbound_identity_auth
@@ -1966,6 +1969,9 @@ class AgentEngineClient:
         inbound_identity_auth = data.get("inbound_identity_auth")
         if inbound_identity_auth is not None:
             advanced["InboundIdentityAuth"] = inbound_identity_auth
+        component_config = data.get("component_config")
+        if component_config:
+            advanced["ComponentConfig"] = component_config
         project_id = data.get("project_id")
         if project_id:
             advanced["ProjectId"] = project_id

ksadk/builders/code_builder.py

@@ -236,6 +236,14 @@ class CodeBuilder(BaseBuilder):
         ".ruff_cache",
     }
     IGNORED_FILE_NAMES = {".DS_Store"}
+    BUNDLED_SOURCE_IGNORED_DIR_NAMES = {
+        "__pycache__",
+        "node_modules",
+        ".git",
+        ".pytest_cache",
+        ".mypy_cache",
+        ".ruff_cache",
+    }
     KSADK_ALLOWED_SUFFIXES = {
         ".py",
         ".yaml",
@@ -850,18 +858,36 @@ class CodeBuilder(BaseBuilder):
             yield from self._iter_bundled_source_package(package_name, package_root)
 
     def _iter_bundled_source_package(self, package_name: str, package_root: Path):
-        for file_path in sorted(package_root.rglob("*")):
-            if not file_path.is_file():
-                continue
-            relative_path = file_path.relative_to(package_root)
-            if package_name == "ksadk" and self._should_skip_ksadk_relative_path(relative_path):
-                continue
-            if "__pycache__" in file_path.parts:
-                continue
-            suffix = file_path.suffix.lower()
-            if suffix not in self.KSADK_ALLOWED_SUFFIXES:
-                continue
-            yield package_name, relative_path.as_posix(), file_path
+        bundled_files = []
+        for current_root, dirnames, filenames in os.walk(package_root):
+            current_path = Path(current_root)
+            dirnames[:] = sorted(
+                dir_name
+                for dir_name in dirnames
+                if dir_name not in self.BUNDLED_SOURCE_IGNORED_DIR_NAMES
+                and not (
+                    package_name == "ksadk"
+                    and self._should_skip_ksadk_relative_path(
+                        (current_path / dir_name).relative_to(package_root)
+                    )
+                )
+            )
+            for file_name in sorted(filenames):
+                file_path = current_path / file_name
+                if not file_path.is_file():
+                    continue
+                relative_path = file_path.relative_to(package_root)
+                if (
+                    package_name == "ksadk"
+                    and self._should_skip_ksadk_relative_path(relative_path)
+                ):
+                    continue
+                if file_path.suffix.lower() not in self.KSADK_ALLOWED_SUFFIXES:
+                    continue
+                bundled_files.append((relative_path.as_posix(), file_path))
+
+        for relative_path, file_path in sorted(bundled_files):
+            yield package_name, relative_path, file_path
 
     def _should_skip_ksadk_relative_path(self, relative_path: Path) -> bool:
         parts = relative_path.parts

ksadk/builders/framework_requirements.py

@@ -23,8 +23,22 @@ LANGCHAIN_ECOSYSTEM_REQUIREMENTS = (
 
 DEEPAGENTS_REQUIREMENTS = ("deepagents>=0.6.2,<1.0.0",)
 
-# codex runtime:openai-codex SDK(自带 codex CLI 二进制,见 PyPI cli-bin wheel)
-CODEX_REQUIREMENTS = ("openai-codex==0.144.4",)
+# codex runtime:openai-codex SDK(自带 codex CLI 二进制,见 PyPI cli-bin wheel)。
+# 版本必须与 pyproject.toml 的 ksadk[codex] extra 保持一致:适配层
+# (ksadk/codex/client.py)依赖 app-server 私有协议,SDK/CLI 是精确 co-pin。
+CODEX_REQUIREMENTS = ("openai-codex==0.154.0",)
+
+# KsADK Harness is a managed LangGraph runtime.  Keep its checkpoint adapter
+# explicit: LangGraph split the SQLite saver into a separately distributed
+# package, so installing only ``langgraph`` leaves
+# ``langgraph.checkpoint.sqlite`` unavailable in a freshly built agent.
+HARNESS_REQUIREMENTS = (
+    "langgraph>=1.2.0,<1.3.0",
+    "langgraph-checkpoint-sqlite>=2.0.0",
+    "langchain>=1.3.14,<2.0.0",
+    "langchain-core>=1.5.0,<2.0.0",
+    "langchain-openai>=1.4.0,<2.0.0",
+)
 
 
 def code_requirements_for_framework(framework: str) -> list[str]:
@@ -46,6 +60,8 @@ def requirements_for_framework(framework: str) -> list[str]:
         return list(ADK_REQUIREMENTS)
     if normalized == "codex":
         return list(CODEX_REQUIREMENTS)
+    if normalized == "harness":
+        return list(HARNESS_REQUIREMENTS)
     if normalized in {"langchain", "langgraph", "deepagents"}:
         requirements = list(LANGCHAIN_ECOSYSTEM_REQUIREMENTS)
         if normalized == "deepagents":
@@ -61,6 +77,8 @@ def minimal_requirements_for_framework(framework: str) -> list[str]:
         return list(ADK_REQUIREMENTS)
     if normalized == "codex":
         return list(CODEX_REQUIREMENTS)
+    if normalized == "harness":
+        return list(HARNESS_REQUIREMENTS)
     if normalized in {"langchain", "langgraph", "deepagents"}:
         requirements = [
             "langchain>=1.3.14,<2.0.0",

ksadk/cli/__init__.py

@@ -354,6 +354,17 @@ def _register_commands():
 
     _add_command_once(cli, web)
 
+    # The desktop shell invokes exactly ``ksadk studio``. Avoid importing the
+    # full command registry (A2A, deploy, eval, etc.) on this hot path: those
+    # optional SDKs are unrelated to Studio and their import warnings used to
+    # obscure the real startup error. This also shortens the time to the first
+    # local health check in Electron.
+    if bool(_argv) and _argv[0] == "studio":
+        from ksadk.cli.cmd_studio import studio
+
+        _add_command_once(cli, studio)
+        return
+
     if _runtime_only:
         # Skip create/deploy/run/managed_runtime imports on the runtime path.
         return
@@ -460,6 +471,31 @@ def _main():
     except ImportError:
         pass
 
+    # Studio and ordinary CLI commands consume the same saved workspace values.
+    from pathlib import Path
+
+    from ksadk.studio.configuration import WorkspaceConfiguration
+    from ksadk.studio.workspace import Workspace
+
+    try:
+        root = Path.cwd()
+        if any(
+            (root / ".agentkit" / name).is_file()
+            for name in ("config.yaml", "settings.yaml", "secrets.env")
+        ):
+            configuration = WorkspaceConfiguration(Workspace(root))
+            effective = configuration.environment()
+            os.environ.update(effective)
+            if (
+                "codexProxy" in configuration.settings()
+                and "KSADK_CODEX_USE_PROXY" not in effective
+            ):
+                os.environ.pop("KSADK_CODEX_USE_PROXY", None)
+    except Exception as error:
+        cli_error = cli_error_from_exception(error, show_help=False)
+        emit_cli_error(cli_error)
+        raise SystemExit(cli_error.exit_code) from None
+
     # 全局配置回退: .env 未设置的变量从 ~/.agentengine/settings.json 补充
     try:
         from ksadk.configs.global_config import get_env_from_global_config

ksadk/cli/cmd_config.py

@@ -184,7 +184,7 @@ def _apply_set_command(
     if not updates_yaml and not updates_env and invalid_items:
         raise usage_error(
             "至少提供一个有效的 KEY=VALUE 配置项。",
-            hints=["示例: `agentengine config set region=cn-beijing-6 OPENAI_MODEL_NAME=glm-5.2`"],
+            hints=["示例: `agentengine config set region=cn-beijing-6 OPENAI_MODEL_NAME=deepseek-v4.1-flash`"],
         )
 
     result = {
@@ -323,7 +323,7 @@ def _run_config_set_command(
     if not set_items:
         raise usage_error(
             "请至少提供一个 KEY=VALUE 配置项。",
-            hints=["示例: `agentengine config set region=cn-beijing-6 OPENAI_MODEL_NAME=glm-5.2`"],
+            hints=["示例: `agentengine config set region=cn-beijing-6 OPENAI_MODEL_NAME=deepseek-v4.1-flash`"],
         )
     return _apply_set_command(set_items, output_path, env_path, is_global)
 
@@ -464,7 +464,7 @@ def run_config_wizard(config_file: str | None, set_items: tuple, is_global: bool
 
     new_env["OPENAI_MODEL_NAME"] = _ask_or_exit(
         questionary.text(
-            "模型名称 (OPENAI_MODEL_NAME) [选填,默认使用金山云星流平台glm-5.2]:",
+            "模型名称 (OPENAI_MODEL_NAME) [选填,默认使用金山云星流平台deepseek-v4.1-flash]:",
             default=existing_env.get("OPENAI_MODEL_NAME", ""),
             style=_questionary_style(),
         )
@@ -784,7 +784,7 @@ def config_set(set_items: tuple, is_global: bool, output_mode: str | None):
     \b
     示例:
       agentengine config set region=cn-beijing-6
-      agentengine config set OPENAI_MODEL_NAME=glm-5.2 OPENAI_BASE_URL=https://example.com/v1
+      agentengine config set OPENAI_MODEL_NAME=deepseek-v4.1-flash OPENAI_BASE_URL=https://example.com/v1
       agentengine config set KSYUN_REGION=cn-beijing-6 --global
     """
     _ = output_mode

ksadk/cli/cmd_create.py

@@ -104,7 +104,7 @@ from google.adk.agents import Agent
 from google.adk.models.lite_llm import LiteLlm
 
 model = LiteLlm(
-    model=f"openai/{{os.getenv('OPENAI_MODEL_NAME', 'glm-5.2')}}",
+    model=f"openai/{{os.getenv('OPENAI_MODEL_NAME', 'deepseek-v4.1-flash')}}",
     api_base=os.getenv("OPENAI_BASE_URL"),
     api_key=os.getenv("OPENAI_API_KEY"),
     stream=True,  # 启用流式输出
@@ -147,7 +147,7 @@ from langchain.agents import create_agent
 from langchain_openai import ChatOpenAI
 
 llm = ChatOpenAI(
-    model=os.getenv("OPENAI_MODEL_NAME", "glm-5.2"),
+    model=os.getenv("OPENAI_MODEL_NAME", "deepseek-v4.1-flash"),
     base_url=os.getenv("OPENAI_BASE_URL"),
     api_key=os.getenv("OPENAI_API_KEY"),
     streaming=True,
@@ -194,7 +194,7 @@ from typing import TypedDict, Annotated
 import operator
 
 llm = ChatOpenAI(
-    model=os.getenv("OPENAI_MODEL_NAME", "glm-5.2"),
+    model=os.getenv("OPENAI_MODEL_NAME", "deepseek-v4.1-flash"),
     base_url=os.getenv("OPENAI_BASE_URL"),
     api_key=os.getenv("OPENAI_API_KEY"),
     streaming=True,
@@ -234,7 +234,7 @@ from deepagents import create_deep_agent
 from langchain_openai import ChatOpenAI
 
 llm = ChatOpenAI(
-    model=os.getenv("OPENAI_MODEL_NAME", "glm-5.2"),
+    model=os.getenv("OPENAI_MODEL_NAME", "deepseek-v4.1-flash"),
     base_url=os.getenv("OPENAI_BASE_URL"),
     api_key=os.getenv("OPENAI_API_KEY"),
     streaming=True,
@@ -671,7 +671,7 @@ def _generate_codex_env_content(global_env: dict) -> str:
         "# 本地 Codex 模型配置（仅用于 ksadk web，不会进入 ManagedRuntime bundle）",
         "# OPENAI_API_KEY=",
         f"OPENAI_BASE_URL={base_url}" if base_url else "# OPENAI_BASE_URL=",
-        f"OPENAI_MODEL_NAME={model_name}" if model_name else "# OPENAI_MODEL_NAME=glm-5.2",
+        f"OPENAI_MODEL_NAME={model_name}" if model_name else "# OPENAI_MODEL_NAME=deepseek-v4.1-flash",
         "",
         "# 可选：自定义上游仅支持 Chat Completions 时，强制启用协议转换代理",
         "# KSADK_CODEX_USE_PROXY=1",
@@ -1601,7 +1601,7 @@ runtime:
   name: codex
 
 # codex 的模型与开发者指令（CodexRuntimeAdapter 传入 codex thread）
-model: glm-5.2
+model: deepseek-v4.1-flash
 prompt: |
   你是 codex 编码助手。简洁回答,能跑命令验证就跑(shell 工具),中文回复。
 """,
@@ -1820,7 +1820,7 @@ KSYUN_REGION={ks_region}
         if model_name:
             env_content += f"OPENAI_MODEL_NAME={model_name}\n"
         else:
-            env_content += "# OPENAI_MODEL_NAME=glm-5.2\n"
+            env_content += "# OPENAI_MODEL_NAME=deepseek-v4.1-flash\n"
     elif framework == "hermes":
         env_content = f"""# ======================
 # Hermes 标准部署最小配置
@@ -1840,7 +1840,7 @@ KSYUN_REGION={ks_region}
         if model_name:
             env_content += f"OPENAI_MODEL_NAME={model_name}\n"
         else:
-            env_content += "# OPENAI_MODEL_NAME=glm-5.2\n"
+            env_content += "# OPENAI_MODEL_NAME=deepseek-v4.1-flash\n"
 
         env_content += """
 # Hermes runtime
@@ -1851,7 +1851,7 @@ HERMES_DASHBOARD_HOST=127.0.0.1
 HERMES_DASHBOARD_PORT=9119
 PORT=8080
 # HERMES_CONTEXT_LENGTH=200000
-# HERMES_FALLBACK_MODEL=deepseek-v4-pro
+# HERMES_FALLBACK_MODEL=glm-5.3-flash
 """
         env_example_content = """# ======================
 # Hermes 标准部署最小配置示例
@@ -1863,7 +1863,7 @@ KSYUN_REGION=cn-beijing-6
 
 OPENAI_API_KEY=your-model-api-key
 OPENAI_BASE_URL=https://kspmas.ksyun.com/v1/
-OPENAI_MODEL_NAME=glm-5.2
+OPENAI_MODEL_NAME=deepseek-v4.1-flash
 
 # Hermes runtime
 API_SERVER_ENABLED=true
@@ -1873,7 +1873,7 @@ HERMES_DASHBOARD_HOST=127.0.0.1
 HERMES_DASHBOARD_PORT=9119
 PORT=8080
 # HERMES_CONTEXT_LENGTH=200000
-# HERMES_FALLBACK_MODEL=deepseek-v4-pro
+# HERMES_FALLBACK_MODEL=glm-5.3-flash
 """
     elif framework == "codex":
         env_content = _generate_codex_env_content(global_env)
@@ -1893,7 +1893,7 @@ PORT=8080
         if model_name:
             env_content += f"OPENAI_MODEL_NAME={model_name}\n"
         else:
-            env_content += "# OPENAI_MODEL_NAME=glm-5.2\n"
+            env_content += "# OPENAI_MODEL_NAME=deepseek-v4.1-flash\n"
 
         env_content += """
 # ======================

ksadk/cli/cmd_hermes.py

@@ -24,6 +24,7 @@ from ksadk.cli.error_utils import remote_error, resolution_error
 from ksadk.cli.model_catalog import fetch_provider_model_metadata
 from ksadk.cli.network_options import build_network_payload, network_cli_kwargs, network_options
 from ksadk.cli.resource_common import (
+    build_component_config,
     CONTEXT_SETTINGS,
     ResourceActionSet,
     ResourceDescriptor,
@@ -65,8 +66,8 @@ from ksadk.hermes_terminal import (
 )
 
 DEFAULT_HERMES_IMAGE = "ghcr.io/kingsoftcloud/hermes-agent:v2026.7.7.2-ksadk-v070"
-DEFAULT_HERMES_CONTEXT_LENGTHS = (("glm-5.1", "200000"),)
-DEFAULT_HERMES_MODEL_NAME = "glm-5.2"
+DEFAULT_HERMES_CONTEXT_LENGTHS = (("deepseek-v4.1-flash", "128000"),)
+DEFAULT_HERMES_MODEL_NAME = "deepseek-v4.1-flash"
 DEFAULT_HERMES_PUBLIC_BASE_URL = "https://kspmas.ksyun.com/v1/"
 DEFAULT_HERMES_RUNTIME_BASE_URL = DEFAULT_HERMES_PUBLIC_BASE_URL
 KSPMAS_PUBLIC_BASES = (
@@ -163,6 +164,8 @@ def _build_hermes_update_payload(
         update_payload["storage"] = storage_config
     if network_payload:
         update_payload["network"] = network_payload
+    if payload.get("component_config"):
+        update_payload["component_config"] = payload["component_config"]
     return update_payload
 
 
@@ -428,6 +431,9 @@ def _render_hermes_dry_run(
 @click.option("--storage-size-gi", type=int, default=20, show_default=True, help="PVC 容量（Gi）")
 @click.option("--storage-mount-path", default=None, help="PVC 挂载目录（默认: /home/node/.hermes）")
 @click.option("--no-storage", is_flag=True, help="禁用默认 PVC 挂载")
+@click.option("--skill-space-id", "skill_space_ids", multiple=True, help="Skill 中心空间 ID（可重复传入多个）")
+@click.option("--sandbox-template-id", default=None, help="沙箱模板 ID（启用 E2B 沙箱执行 execute_skills）")
+@click.option("--sandbox-api-key", default=None, help="沙箱 API Key（可选，默认从服务端注入）")
 @env_options
 @click.option(
     "--observability/--no-observability",
@@ -468,6 +474,9 @@ def deploy(
     subnet_id: Optional[str],
     security_group_id: Optional[str],
     availability_zone: Optional[str],
+    skill_space_ids: tuple[str, ...],
+    sandbox_template_id: Optional[str],
+    sandbox_api_key: Optional[str],
     dry_run: bool,
     output_mode: str | None,
 ):
@@ -510,6 +519,9 @@ def deploy(
             include_storage_on_update=include_storage_on_update,
             extra_env=extra_env,
             env_file=env_file,
+            skill_space_ids=skill_space_ids,
+            sandbox_template_id=sandbox_template_id,
+            sandbox_api_key=sandbox_api_key,
             **network_cli_kwargs(
                 enable_public_access=enable_public_access,
                 enable_vpc_access=enable_vpc_access,
@@ -551,6 +563,9 @@ async def _deploy_hermes(
     subnet_id: str | None = None,
     security_group_id: str | None = None,
     availability_zone: str | None = None,
+    skill_space_ids: tuple[str, ...] = (),
+    sandbox_template_id: str | None = None,
+    sandbox_api_key: str | None = None,
     dry_run: bool = False,
 ) -> None:
     project_dir = Path(".").resolve()
@@ -606,6 +621,11 @@ async def _deploy_hermes(
         auto_dotenv=auto_dotenv,
         shell_keys=shell_keys,
     )
+    component_config = build_component_config(
+        skill_space_ids=skill_space_ids,
+        sandbox_template_id=sandbox_template_id,
+        sandbox_api_key=sandbox_api_key,
+    )
     payload = {
         "name": agent_name,
         "description": "Hermes Agent (managed by AgentEngine)",
@@ -619,6 +639,8 @@ async def _deploy_hermes(
         "env_vars": env_vars,
         "ui_config": {"profile": "hermes", "path": "/", "url": None},
     }
+    if component_config:
+        payload["component_config"] = component_config
     storage_config = build_storage_config(
         "hermes",
         no_storage=no_storage,

ksadk/cli/cmd_invoke.py

@@ -18,7 +18,6 @@ import click
 
 from ksadk.api import AgentEngineAPIError, AgentEngineClient
 from ksadk.cli.agent_ref import merge_agent_inputs, resolve_agent_ref, resolve_openclaw_ref
-from ksadk.cli.invoke_payload import build_chat_request
 from ksadk.cli.cmd_files import (
     _build_sync_payload,
     _collect_local_files_report,
@@ -27,6 +26,7 @@ from ksadk.cli.cmd_files import (
     _normalize_workspace_dir,
     _push_workspace_files,
 )
+from ksadk.cli.invoke_payload import build_chat_request
 from ksadk.cli.resource_common import (
     CONTEXT_SETTINGS,
     CompatibilityAliasCommand,
@@ -1311,7 +1311,15 @@ async def _invoke_once(
                     last_refresh_time = 0.0
                     full_reasoning = ""
                     async for chunk in _stream_chat(
-                        endpoint, message, api_key, session_id, True, insecure, model, api_format, default_model
+                        endpoint,
+                        message,
+                        api_key,
+                        session_id,
+                        True,
+                        insecure,
+                        model,
+                        api_format,
+                        default_model,
                     ):
                         content, reasoning = _extract_content(chunk)
 
@@ -1341,7 +1349,15 @@ async def _invoke_once(
                     live.refresh()  # 确保最后一次刷新
             else:
                 async for chunk in _stream_chat(
-                    endpoint, message, api_key, session_id, True, insecure, model, api_format, default_model
+                    endpoint,
+                    message,
+                    api_key,
+                    session_id,
+                    True,
+                    insecure,
+                    model,
+                    api_format,
+                    default_model,
                 ):
                     content, reasoning = _extract_content(chunk)
                     if reasoning:
@@ -1510,8 +1526,15 @@ def _extract_content(chunk: dict) -> tuple[str, str]:
     event_name = str(chunk.get("_event") or "")
     if event_name == "response.output_text.delta":
         return str(chunk.get("delta") or ""), ""
-    if event_name == "response.reasoning.delta":
-        return "", str(chunk.get("delta") or "")
+    # reasoning delta 有 4 个变体名(与 remote_runner / 前端 chatProtocol 对齐),
+    # 主 runtime 发 reasoning.delta,Studio shared_web 发 reasoning_summary_text.delta。
+    if event_name in {
+        "response.reasoning.delta",
+        "response.reasoning_text.delta",
+        "response.reasoning_summary.delta",
+        "response.reasoning_summary_text.delta",
+    }:
+        return "", str(chunk.get("delta") or chunk.get("text") or "")
     if event_name == "response.completed":
         return "", ""