agentkit-sdk-python 0.8.2__py3-none-any.whl → 0.8.4__py3-none-any.whl

agentkit/apps/agent_server_app/agent_server_app.py

@@ -22,6 +22,7 @@ from contextlib import asynccontextmanager
 from typing import TYPE_CHECKING, Any
 
 import uvicorn
+from a2a.types import AgentCard
 from fastapi import FastAPI, HTTPException, Request
 from fastapi.responses import StreamingResponse
 from google.adk.a2a.utils.agent_to_a2a import to_a2a
@@ -246,6 +247,12 @@ class AgentkitAgentServerApp(BaseAgentkitApp):
         app: App | None = None,
         allow_origins: list[str] | None = None,
         allow_origin_regex: str | list[str] | None = None,
+        a2a_host: str = "localhost",
+        a2a_port: int = 8000,
+        a2a_protocol: str = "http",
+        agent_card: AgentCard | str | None = None,
+        push_config_store: Any | None = None,
+        task_store: Any | None = None,
         enable_auth: bool = False,
         identity: IdentityRuntimeConfig | RuntimeIdentity | None = None,
         identity_health_routes: tuple[str, ...] = (),
@@ -291,7 +298,16 @@ class AgentkitAgentServerApp(BaseAgentkitApp):
             artifact_service=_artifact_service,
             credential_service=_credential_service,
         )
-        to_a2a_kwargs: dict[str, Any] = {"agent": root_agent, "runner": runner}
+        to_a2a_kwargs: dict[str, Any] = {
+            "agent": root_agent,
+            "runner": runner,
+            "host": a2a_host,
+            "port": a2a_port,
+            "protocol": a2a_protocol,
+            "agent_card": agent_card,
+            "push_config_store": push_config_store,
+            "task_store": task_store,
+        }
         if enable_auth:
             to_a2a_kwargs["agent_executor_factory"] = (
                 build_a2a_inbound_auth_executor_factory(

agentkit/auth/_openapi.py

@@ -12,18 +12,22 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-"""Minimal signed Volcengine OpenAPI client for the auth ADMIN commands.
+"""Minimal signed OpenAPI client for the auth ADMIN commands.
 
 Stdlib-only SigV4 (reusing :mod:`agentkit.auth._sigv4`) so the admin path that
 provisions the UserPool client / IAM OIDC provider / STS role carries no
 third-party dependency. Used only by ``agentkit auth admin`` — the end-user login
 path never touches it. A mandatory ``GetCallerIdentity`` guard runs before any write.
+
+Credentials and the OpenAPI gateway host are resolved through the SDK's unified,
+Cloud-Provider-aware chain (:class:`agentkit.platform.configuration.VolcConfiguration`),
+so ``CLOUD_PROVIDER=byteplus`` uses ``BYTEPLUS_ACCESS_KEY`` / ``BYTEPLUS_SECRET_KEY``
+and ``open.byteplusapi.com`` instead of the Volcengine equivalents.
 """
 
 from __future__ import annotations
 
 import json
-import os
 import urllib.error
 import urllib.parse
 import urllib.request
@@ -31,8 +35,9 @@ import urllib.request
 from agentkit.auth._sigv4 import sign_headers
 from agentkit.auth.errors import AuthError
 from agentkit.auth.ssl_trust import harden_default_ssl_context
+from agentkit.platform.configuration import VolcConfiguration
+from agentkit.platform.provider import CloudProvider
 
-_HOST = "open.volcengineapi.com"
 # Services whose OpenAPI reads parameters from the query string, not a JSON body.
 _QUERY_PARAM_SERVICES = {"iam"}
 
@@ -85,21 +90,51 @@ class OpenApiClient:
         access_key: str | None = None,
         secret_key: str | None = None,
         session_token: str | None = None,
-        region: str = "cn-beijing",
+        region: str | None = None,
         expect_account: str | None = None,
         harden_ssl: bool = True,
     ) -> None:
         if harden_ssl:
             harden_default_ssl_context()
-        self.ak = access_key or os.getenv("VOLCENGINE_ACCESS_KEY") or os.getenv("VOLC_ACCESSKEY")
-        self.sk = secret_key or os.getenv("VOLCENGINE_SECRET_KEY") or os.getenv("VOLC_SECRETKEY")
-        self.token = session_token or os.getenv("VOLCENGINE_SESSION_TOKEN")
-        if not (self.ak and self.sk):
+        # Credentials/region come from the SDK's unified provider-aware chain
+        # (CLOUD_PROVIDER=volcengine|byteplus), so the admin path accepts the same
+        # sources as the runtime clients: BYTEPLUS_* on BytePlus, VOLCENGINE_* /
+        # VOLC_* on Volcengine, plus ~/.agentkit/config.yaml.
+        cfg = VolcConfiguration(
+            region=region,
+            access_key=access_key,
+            secret_key=secret_key,
+            session_token=session_token,
+        )
+        self.provider = cfg.provider
+        if self.provider == CloudProvider.BYTEPLUS:
+            provider_label = "BytePlus"
+            self.cred_env_hint = "BYTEPLUS_ACCESS_KEY / BYTEPLUS_SECRET_KEY"
+        else:
+            provider_label = "Volcengine"
+            self.cred_env_hint = "VOLCENGINE_ACCESS_KEY / VOLCENGINE_SECRET_KEY"
+        try:
+            creds = cfg.get_service_credentials("iam")
+        except ValueError as exc:
+            raise AuthError(
+                f"admin provisioning needs {provider_label} credentials.",
+                hint=f"export {self.cred_env_hint} for the account that owns the UserPool.",
+            ) from exc
+        if creds.source == "sso-sts":
+            # `agentkit login` stores the END-USER sandbox STS role; provisioning
+            # UserPool/IAM resources needs the account's long-lived admin AK/SK.
             raise AuthError(
-                "admin provisioning needs Volcengine credentials.",
-                hint="export VOLCENGINE_ACCESS_KEY / VOLCENGINE_SECRET_KEY for the account that owns the UserPool.",
+                "admin provisioning cannot use the SSO login session (it carries the "
+                "end-user sandbox role, not account admin rights).",
+                hint=f"export {self.cred_env_hint} for the account that owns the UserPool.",
             )
-        self.region = region
+        self.ak = creds.access_key
+        self.sk = creds.secret_key
+        self.token = session_token or creds.session_token
+        # Every admin control-plane call signs against the provider's top OpenAPI
+        # gateway — the same host that serves the provider's IAM service.
+        self._host = cfg.get_service_endpoint("iam").host
+        self.region = cfg.region
         ident = self.call("sts", "GetCallerIdentity", "2018-01-01", {})
         self.account_id = str(ident.get("AccountId") or "")
         if expect_account and self.account_id != expect_account:
@@ -121,11 +156,11 @@ class OpenApiClient:
             query = {"Action": action, "Version": version}
             payload = json.dumps(body).encode()
         headers = sign_headers(
-            "POST", _HOST, query, payload,
+            "POST", self._host, query, payload,
             access_key=self.ak, secret_key=self.sk, service=service, region=self.region,
             session_token=self.token,
         )
-        url = f"https://{_HOST}/?{urllib.parse.urlencode(query)}"
+        url = f"https://{self._host}/?{urllib.parse.urlencode(query)}"
         req = urllib.request.Request(url, data=payload, headers=headers, method="POST")
         try:
             raw = urllib.request.urlopen(req, timeout=30).read()
@@ -147,11 +182,11 @@ class OpenApiClient:
             else:
                 query[k] = str(v)
         headers = sign_headers(
-            "GET", _HOST, query, b"",
+            "GET", self._host, query, b"",
             access_key=self.ak, secret_key=self.sk, service=service, region=self.region,
             session_token=self.token,
         )
-        url = f"https://{_HOST}/?{urllib.parse.urlencode(query)}"
+        url = f"https://{self._host}/?{urllib.parse.urlencode(query)}"
         req = urllib.request.Request(url, headers=headers, method="GET")
         try:
             raw = urllib.request.urlopen(req, timeout=30).read()

agentkit/auth/admin.py

@@ -73,9 +73,10 @@ class CliAccessCoords:
     client_id: str
     role_trn: str
     provider_trn: str
+    sts_host: str | None = None  # provider STS endpoint (None = Volcengine default)
 
     def discovery_doc(self) -> dict:
-        return {
+        doc = {
             "issuer": self.issuer,
             "client_id": self.client_id,
             "role_trn": self.role_trn,
@@ -84,12 +85,68 @@ class CliAccessCoords:
             "transport": "sts",
             "scope": "openid profile email offline_access",
         }
+        if self.sts_host:
+            doc["sts_host"] = self.sts_host
+        return doc
+
+
+def tos_public_host(region: str) -> str:
+    """Provider-aware public host of the TOS static-site endpoint for *region*.
+
+    ``tos-<region>.volces.com`` on Volcengine, ``tos-<region>.bytepluses.com`` on
+    BytePlus — resolved from the platform service registry, not hardcoded here.
+    """
+    from agentkit.platform.configuration import VolcConfiguration
+
+    return VolcConfiguration(region=region).get_service_endpoint("tos").host
+
+
+def sts_public_host(region: str) -> str:
+    """Provider-aware STS endpoint for *region*, from the platform service registry.
+
+    Published in the discovery doc as ``sts_host`` so the end-user login exchanges
+    the id_token against the pool's own cloud (BytePlus pools must not call the
+    Volcengine STS).
+    """
+    from agentkit.platform.configuration import VolcConfiguration
+
+    return VolcConfiguration(region=region).get_service_endpoint("sts").host
 
 
 def _issuer(user_pool_uid: str, region: str) -> str:
+    # Volcengine UserPool issuer domain template — LAST-RESORT fallback only.
+    # The real issuer is read from the platform (GetUserPool.IssuerUrl), which is
+    # provider-correct by construction; this template is wrong on BytePlus.
     return f"https://userpool-{user_pool_uid}.userpool.auth.id.{region}.volces.com"
 
 
+def _pool_info(api: OpenApiClient, user_pool_uid: str) -> dict:
+    """Best-effort GetUserPool detail; {} when the call fails."""
+    try:
+        return api.call("id", "GetUserPool", "2025-10-30", {"UserPoolUid": user_pool_uid})
+    except (ApiError, AuthError):
+        return {}
+
+
+def resolve_issuer(api: OpenApiClient, user_pool_uid: str, region: str) -> str:
+    """The pool's real issuer URL, read from the platform.
+
+    ``GetUserPool`` returns ``IssuerUrl`` (and ``Domain`` / ``CustomDomain``), so the
+    issuer is whatever domain the current cloud provider actually serves — no
+    hardcoded domain. IAM's ``CreateOIDCProvider`` validates the issuer's OIDC
+    discovery endpoint, so a template-guessed domain fails on BytePlus.
+    Falls back to the Volcengine template only if the platform returns nothing.
+    """
+    info = _pool_info(api, user_pool_uid)
+    issuer = str(info.get("IssuerUrl") or "").rstrip("/")
+    if issuer:
+        return issuer
+    domain = str(info.get("CustomDomain") or info.get("Domain") or "").strip()
+    if domain:
+        return f"https://{domain}"
+    return _issuer(user_pool_uid, region)
+
+
 def identity_console_url(region: str = "cn-beijing", *, user_pool_uid: str | None = None) -> str:
     """Volcengine console URL for the Identity (UserPool) management page.
 
@@ -100,16 +157,47 @@ def identity_console_url(region: str = "cn-beijing", *, user_pool_uid: str | Non
 
 
 def create_user_pool(name: str, *, region: str = "cn-beijing", api: OpenApiClient | None = None) -> tuple[str, str]:
-    """Create a UserPool; return ``(uid, issuer)``."""
+    """Create (or, on a re-run, reuse) the UserPool named ``name``; return ``(uid, issuer)``.
+
+    A same-name pool left by an earlier run is reused instead of failing with
+    ``Duplicated`` — sso-setup must stay idempotent to re-run.
+    """
     api = api or OpenApiClient(region=region)
-    res = api.call("id", "CreateUserPool", "2025-10-30", {
-        "Name": name, "Description": "AgentKit CLI login pool",
-        "PasswordSignInEnabled": True, "SelfSignUpEnabled": False,
-    })
+    try:
+        res = api.call("id", "CreateUserPool", "2025-10-30", {
+            "Name": name, "Description": "AgentKit CLI login pool",
+            "PasswordSignInEnabled": True, "SelfSignUpEnabled": False,
+        })
+    except ApiError as exc:
+        if not any(k in exc.code for k in ("Duplicat", "Exist", "Conflict")):
+            raise
+        existing = _find_pool_by_name(api, name)
+        if not existing:
+            raise
+        return existing, resolve_issuer(api, existing, region)
     uid = str(res.get("Uid") or res.get("uid") or "")
     if not uid:
         raise AuthError(f"CreateUserPool returned no uid: {json.dumps(res)[:200]}")
-    return uid, _issuer(uid, region)
+    return uid, resolve_issuer(api, uid, region)
+
+
+def _find_pool_by_name(api: OpenApiClient, name: str) -> str | None:
+    """Uid of the pool named ``name``, or None. Raises if the name is ambiguous."""
+    matches: list[str] = []
+    page = 1
+    while page <= 10:  # 500 pools is far beyond any real account
+        r = api.call("id", "ListUserPools", "2025-10-30", {"PageNumber": page, "PageSize": 50})
+        data = r.get("Data") or []
+        matches += [str(p.get("Uid")) for p in data if p.get("Name") == name and p.get("Uid")]
+        if len(data) < 50:
+            break
+        page += 1
+    if len(matches) > 1:
+        raise AuthError(
+            f"{len(matches)} user pools are named {name!r}; pass the intended one "
+            "explicitly with --user-pool <uid>."
+        )
+    return matches[0] if matches else None
 
 
 def _ensure_cli_client(api: OpenApiClient, user_pool_uid: str, client_name: str = CLI_CLIENT_NAME) -> str:
@@ -182,18 +270,33 @@ def _ensure_role(
 ) -> None:
     trust = {"Statement": [{"Effect": "Allow", "Principal": {"Federated": [provider_trn]},
                             "Action": ["sts:AssumeRoleWithOIDC"]}]}
+    # Probe existence BEFORE CreateRole: an account at its RolesPerAccount quota
+    # returns LimitExceeded before the duplicate-name check, which would wrongly
+    # kill re-runs (and --role-name reuse) even though the role is already there.
+    role_exists = True
     try:
-        api.call("iam", "CreateRole", "2018-01-01", {
-            "RoleName": role_name, "DisplayName": role_name,
-            "TrustPolicyDocument": json.dumps(trust), "MaxSessionDuration": 3600,
-            "Description": "STS role for AgentKit CLI (UserPool federated)",
-        })
+        api.call("iam", "GetRole", "2018-01-01", {"RoleName": role_name})
     except ApiError as exc:
-        if "Exist" not in exc.code and "Conflict" not in exc.code:
+        if not any(k in exc.code for k in ("NotExist", "NoSuchEntity", "NotFound")):
             raise
+        role_exists = False
+    if role_exists:
         api.call("iam", "UpdateRole", "2018-01-01",
                  {"RoleName": role_name, "TrustPolicyDocument": json.dumps(trust),
                   "MaxSessionDuration": 3600})
+    else:
+        try:
+            api.call("iam", "CreateRole", "2018-01-01", {
+                "RoleName": role_name, "DisplayName": role_name,
+                "TrustPolicyDocument": json.dumps(trust), "MaxSessionDuration": 3600,
+                "Description": "STS role for AgentKit CLI (UserPool federated)",
+            })
+        except ApiError as exc:
+            if "Exist" not in exc.code and "Conflict" not in exc.code:
+                raise
+            api.call("iam", "UpdateRole", "2018-01-01",
+                     {"RoleName": role_name, "TrustPolicyDocument": json.dumps(trust),
+                      "MaxSessionDuration": 3600})
     doc = {"Statement": [{"Effect": "Allow", "Action": list(ROLE_ACTIONS), "Resource": ["*"]}]}
     api.call_ok("iam", "CreatePolicy", "2018-01-01",
                 {"PolicyName": policy_name, "PolicyDocument": json.dumps(doc),
@@ -233,7 +336,7 @@ def provision_cli_access(
     """
     api = api or OpenApiClient(region=region, expect_account=account_id)
     acct = account_id or api.account_id
-    issuer = _issuer(user_pool_uid, region)
+    issuer = resolve_issuer(api, user_pool_uid, region)
     client_id = _ensure_cli_client(api, user_pool_uid, client_name)
     if not client_id:
         raise AuthError("could not create or find the public CLI client")
@@ -243,6 +346,7 @@ def provision_cli_access(
     return CliAccessCoords(
         account_id=acct, region=region, user_pool_uid=user_pool_uid, issuer=issuer,
         client_id=client_id, role_trn=f"trn:iam::{acct}:role/{role_name}", provider_trn=provider_trn,
+        sts_host=sts_public_host(region),
     )
 
 
@@ -277,7 +381,12 @@ def ensure_federation(
     preset = _IDP_PRESETS.get(idp)
     if not preset:
         raise AuthError(f"unknown idp {idp!r}; supported: {', '.join(_IDP_PRESETS)}")
-    callback = f"{_issuer(user_pool_uid, region)}/login/generic_oauth/callback"
+    # The platform publishes the pool's exact OAuth callback; derive it from the
+    # resolved issuer only when the field is absent.
+    info = _pool_info(api, user_pool_uid)
+    callback = str(info.get("OauthLoginCallbackUrl") or "") or (
+        f"{resolve_issuer(api, user_pool_uid, region)}/login/generic_oauth/callback"
+    )
     lst = api.call("id", "ListIdentityProviders", "2025-10-30",
                    {"UserPoolUID": user_pool_uid, "PageNumber": 1, "PageSize": 50})
     for it in (lst.get("Data") or lst.get("data") or []):
@@ -349,7 +458,7 @@ def sso_setup(
     if custom_domain:
         manual.append(
             f"把自定义域名指向该 bucket:CNAME {custom_domain} -> "
-            f"{bucket}.tos-{region}.volces.com,并配置 https 证书(TOS/CDN)。"
+            f"{bucket}.{tos_public_host(region)},并配置 https 证书(TOS/CDN)。"
         )
     return SsoSetupResult(login_address=url, coords=coords, manual_steps=manual)
 
@@ -371,18 +480,28 @@ def publish_discovery(
     The returned URL is what the end user types: ``agentkit login <url>``.
     """
     try:
-        import os as _os
-
         import tos  # type: ignore
     except Exception as exc:  # pragma: no cover - optional dep
         raise AuthError(
             "publishing needs the `tos` package (`pip install tos`), or host the "
             "discovery doc yourself.",
         ) from exc
-    ak = access_key or _os.getenv("VOLCENGINE_ACCESS_KEY")
-    sk = secret_key or _os.getenv("VOLCENGINE_SECRET_KEY")
-    token = session_token or _os.getenv("VOLCENGINE_SESSION_TOKEN")
-    endpoint = f"tos-{coords.region}.volces.com"
+    from agentkit.platform.configuration import VolcConfiguration
+
+    cfg = VolcConfiguration(
+        region=coords.region, access_key=access_key, secret_key=secret_key,
+        session_token=session_token,
+    )
+    try:
+        creds = cfg.get_service_credentials("tos")
+    except ValueError as exc:
+        raise AuthError(
+            "publishing the discovery doc needs cloud credentials for TOS.",
+            hint=str(exc).split("\n")[0],
+        ) from exc
+    ak, sk = creds.access_key, creds.secret_key
+    token = session_token or creds.session_token
+    endpoint = cfg.get_service_endpoint("tos").host
     client = tos.TosClientV2(ak, sk, endpoint, coords.region, security_token=token)
     try:
         client.create_bucket(bucket, acl=tos.ACLType.ACL_Public_Read)
@@ -453,7 +572,7 @@ def preflight(api: OpenApiClient, *, credential_hosting: bool = True) -> list[di
             checks.append({"name": name, "status": "warn", "detail": str(exc)[:80], "fix": fix})
 
     probe("caller identity (STS)", lambda: f"account {api.account_id}",
-          "export a valid admin VOLCENGINE_ACCESS_KEY / _SECRET_KEY")
+          f"export a valid admin {api.cred_env_hint}")
     def _pools():
         r = api.call("id", "ListUserPools", "2025-10-30", {"PageNumber": 1, "PageSize": 1})
         return f"reachable ({r.get('TotalCount') or r.get('Total') or len(r.get('Items') or r.get('Data') or [])}+ pools)"

agentkit/auth/profile.py

@@ -35,7 +35,7 @@ from agentkit.auth.errors import AuthError
 
 _PROFILE_FIELDS = {
     "name", "issuer", "client_id", "role_trn", "provider_trn",
-    "region", "scope", "transport", "address",
+    "region", "scope", "transport", "address", "sts_host",
 }
 
 
@@ -52,6 +52,7 @@ class AuthProfile:
     scope: str = "openid profile email offline_access"
     transport: str = "sts"  # "sts" (sandbox) | reserved for future transports
     address: str | None = None  # the login address this profile was resolved from
+    sts_host: str | None = None  # provider STS endpoint from the discovery doc (None = Volcengine default)
 
     def validate(self) -> "AuthProfile":
         missing = [k for k in ("name", "issuer", "client_id", "role_trn") if not getattr(self, k)]

agentkit/auth/resolve.py

@@ -55,6 +55,7 @@ _ALIASES = {
     "region": ("region",),
     "transport": ("transport",),
     "scope": ("scope",),
+    "sts_host": ("sts_host", "stsHost"),
 }
 
 
@@ -175,7 +176,7 @@ def resolve_profile(address: str, *, timeout: float = _TIMEOUT, harden_ssl: bool
     return AuthProfile(
         name=name, issuer=str(issuer), client_id=str(client_id), role_trn=str(role_trn),
         provider_trn=provider_trn, region=region, scope=scope, transport=transport,
-        address=base,
+        address=base, sts_host=disc.get("sts_host"),
     ).validate()
 
 

agentkit/auth/session.py

@@ -304,6 +304,7 @@ class AuthSession:
             self.profile.role_trn,
             self.profile.provider_trn,
             duration_seconds=self._duration,
+            host=self.profile.sts_host,
         )
         self._sts = StsCredentials(
             access_key=assumed.access_key_id,

agentkit/auth/sso.py

@@ -80,13 +80,14 @@ def login(
     refresh_token = token.get("refresh_token")
 
     assumed = assume_role_with_oidc(
-        id_token, prof.role_trn, prof.provider_trn, duration_seconds=duration_seconds
+        id_token, prof.role_trn, prof.provider_trn, duration_seconds=duration_seconds,
+        host=prof.sts_host,
     )
     account = None
     try:
         ident = get_caller_identity(
             assumed.access_key_id, assumed.secret_access_key, assumed.session_token,
-            region=prof.region,
+            region=prof.region, host=prof.sts_host,
         )
         account = ident.get("AccountId")
     except Exception:
@@ -154,7 +155,8 @@ def whoami(profile: str | None = None, *, harden_ssl: bool = True) -> dict:
         raise AuthError("not logged in.", hint="run `agentkit login` first.")
     creds = session.credentials()
     ident = get_caller_identity(
-        creds.access_key, creds.secret_key, creds.session_token, region=session.profile.region
+        creds.access_key, creds.secret_key, creds.session_token,
+        region=session.profile.region, host=session.profile.sts_host,
     )
     ident["_profile"] = session.profile.name
     ident["_expires_at"] = creds.expires_at.isoformat() if creds.expires_at else None

agentkit/auth/sts.py

@@ -73,13 +73,16 @@ def assume_role_with_oidc(
     role_session_name: str = "agentkit-cli",
     duration_seconds: int = 3600,
     timeout: float = _TIMEOUT,
+    host: str | None = None,
 ) -> AssumedRole:
     """Exchange an OIDC ``id_token`` for temporary STS credentials.
 
-    Anonymous call — the token is the credential. ``host`` MUST be
-    ``sts.volcengineapi.com``; the token is too long for the query string so it
-    travels in the POST body.
+    Anonymous call — the token is the credential; it is too long for the query
+    string so it travels in the POST body. ``host`` is the STS endpoint from the
+    login profile (the discovery doc's ``sts_host``, so BytePlus pools use the
+    BytePlus STS); it defaults to the Volcengine endpoint for older docs.
     """
+    sts_host = host or STS_HOST
     params = {
         "RoleTrn": role_trn,
         "OIDCToken": id_token,
@@ -89,7 +92,7 @@ def assume_role_with_oidc(
     if provider_trn:
         params["OIDCProviderTrn"] = provider_trn
     body = urllib.parse.urlencode(params).encode("utf-8")
-    url = f"https://{STS_HOST}/?Action=AssumeRoleWithOIDC&Version={STS_VERSION}"
+    url = f"https://{sts_host}/?Action=AssumeRoleWithOIDC&Version={STS_VERSION}"
     req = urllib.request.Request(
         url, data=body, headers={"Content-Type": "application/x-www-form-urlencoded"}, method="POST"
     )
@@ -103,7 +106,7 @@ def assume_role_with_oidc(
             "id_token's aud is in the provider's client-id allow-list.",
         ) from exc
     except urllib.error.URLError as exc:
-        raise NetworkError(f"cannot reach STS endpoint ({STS_HOST}): {exc.reason}") from exc
+        raise NetworkError(f"cannot reach STS endpoint ({sts_host}): {exc.reason}") from exc
 
     try:
         creds = json.loads(raw)["Result"]["Credentials"]
@@ -121,15 +124,17 @@ def get_caller_identity(
     *,
     region: str = "cn-beijing",
     timeout: float = _TIMEOUT,
+    host: str | None = None,
 ) -> dict:
     """Return the verified identity (``AccountId`` / ``IdentityType`` / ``UserId``)."""
+    sts_host = host or STS_HOST
     query = {"Action": "GetCallerIdentity", "Version": STS_VERSION}
     headers = sign_headers(
-        "POST", STS_HOST, query, b"",
+        "POST", sts_host, query, b"",
         access_key=access_key, secret_key=secret_key, service="sts", region=region,
         session_token=session_token,
     )
-    url = f"https://{STS_HOST}/?" + urllib.parse.urlencode(query)
+    url = f"https://{sts_host}/?" + urllib.parse.urlencode(query)
     req = urllib.request.Request(url, data=b"", headers=headers, method="POST")
     try:
         raw = urllib.request.urlopen(req, timeout=timeout).read()
@@ -137,5 +142,5 @@ def get_caller_identity(
         detail = redact(exc.read().decode("utf-8", "replace"))[:200]
         raise SsoError(f"GetCallerIdentity failed: {detail}") from exc
     except urllib.error.URLError as exc:
-        raise NetworkError(f"cannot reach STS endpoint ({STS_HOST}): {exc.reason}") from exc
+        raise NetworkError(f"cannot reach STS endpoint ({sts_host}): {exc.reason}") from exc
     return json.loads(raw).get("Result") or {}

agentkit/platform/configuration.py

@@ -146,7 +146,8 @@ class VolcConfiguration:
         1. Explicitly passed in constructor
         2. Environment variable (VOLCENGINE_REGION / VOLC_REGION)
         3. Global config file (~/.agentkit/config.yaml)
-        4. Default (cn-beijing)
+        4. Environment variable (REGION)
+        5. Default (cn-beijing)
         """
         if self._region:
             return self._region
@@ -163,6 +164,7 @@ class VolcConfiguration:
                 or os.getenv("VOLC_REGION")
                 or get_global_config_str("region")
                 or get_global_config_str("volcengine", "region")
+                or os.getenv("REGION")
             )
 
         if base_region:
@@ -409,7 +411,9 @@ class VolcConfiguration:
         else:
             ak = os.getenv("VOLCENGINE_ACCESS_KEY") or os.getenv("VOLC_ACCESSKEY")
             sk = os.getenv("VOLCENGINE_SECRET_KEY") or os.getenv("VOLC_SECRETKEY")
-            token = os.getenv("VOLCENGINE_SESSION_TOKEN") or os.getenv("VOLC_SESSIONTOKEN")
+            token = os.getenv("VOLCENGINE_SESSION_TOKEN") or os.getenv(
+                "VOLC_SESSIONTOKEN"
+            )
 
         if ak and sk:
             return Credentials(

agentkit/sdk/identity/client.py

@@ -16,7 +16,8 @@ from __future__ import annotations
 
 from typing import Dict
 
-from agentkit.client import BaseAgentkitClient
+from agentkit.client.base_service_client import BaseServiceClient
+from agentkit.platform.configuration import VolcConfiguration
 from agentkit.sdk.identity.types import (
     CreateInboundAuthConfigRequest,
     CreateInboundAuthConfigResponse,
@@ -27,7 +28,7 @@ from agentkit.sdk.identity.types import (
 )
 
 
-class AgentkitIdentityClient(BaseAgentkitClient):
+class AgentkitIdentityClient(BaseServiceClient):
     """AgentKit Identity / Inbound Auth Config Service."""
 
     API_ACTIONS: Dict[str, str] = {
@@ -44,11 +45,16 @@ class AgentkitIdentityClient(BaseAgentkitClient):
         session_token: str = "",
     ) -> None:
         super().__init__(
+            service="agent_identity",
             access_key=access_key,
             secret_key=secret_key,
             region=region,
             session_token=session_token,
             service_name="identity",
+            platform_config=VolcConfiguration(
+                region=region or None,
+                provider="volcengine",
+            ),
         )
 
     def create_inbound_auth_config(

agentkit/sdk/identity/types.py

@@ -15,9 +15,8 @@
 # Request/response models for the InboundAuthConfig APIs.
 #
 # ``CreateInboundAuthConfig`` mirrors the published OpenAPI definition
-# (Version 2025-10-30). ``ListInboundAuthConfigs`` and
-# ``DeleteInboundAuthConfig`` follow the standard Volcengine list/delete
-# conventions; adjust the field names here if the published specs differ.
+# (Version 2025-10-30). ``ListInboundAuthConfigs`` uses the id service's
+# PageNumber/PageSize pagination contract.
 
 from __future__ import annotations
 
@@ -32,15 +31,20 @@ class IdentityBaseModel(BaseModel):
 
 
 # Data Types
-class ApiKeyMetadata(IdentityBaseModel):
-    location: Optional[str] = Field(default=None, alias="Location")
+class ApiKeyInfo(IdentityBaseModel):
+    location: str = Field(..., alias="Location")
     parameter_name: Optional[str] = Field(default=None, alias="ParameterName")
+    prefix: Optional[str] = Field(default=None, alias="Prefix")
+
+
+# Backward-compatible name used by earlier SDK code.
+ApiKeyMetadata = ApiKeyInfo
 
 
 class ApiKeyAuthConfig(IdentityBaseModel):
     api_key_name: str = Field(..., alias="ApiKeyName")
     api_key: Optional[str] = Field(default=None, alias="ApiKey")
-    api_key_metadata: Optional[list[ApiKeyMetadata]] = Field(
+    api_key_metadata: Optional[list[ApiKeyInfo]] = Field(
         default=None, alias="ApiKeyMetadata"
     )
     expiry_timestamp: Optional[int] = Field(default=None, alias="ExpiryTimestamp")
@@ -54,72 +58,62 @@ class JwtAuthConfig(IdentityBaseModel):
     allowed_clients: Optional[list[str]] = Field(default=None, alias="AllowedClients")
 
 
-# CreateInboundAuthConfig - Request
-class CreateInboundAuthConfigRequest(IdentityBaseModel):
+class InboundAuthConfig(IdentityBaseModel):
+    trn: str = Field(..., alias="Trn")
+    inbound_auth_config_id: str = Field(..., alias="InboundAuthConfigId")
+    config_name: str = Field(..., alias="ConfigName")
+    description: Optional[str] = Field(default=None, alias="Description")
     auth_type: str = Field(..., alias="AuthType")
-    api_key_auth_configs: Optional[list[ApiKeyAuthConfig]] = Field(
-        default=None, alias="ApiKeyAuthConfigs"
-    )
     jwt_auth_config: Optional[JwtAuthConfig] = Field(
         default=None, alias="JwtAuthConfig"
     )
-    config_name: Optional[str] = Field(default=None, alias="ConfigName")
-    description: Optional[str] = Field(default=None, alias="Description")
+    api_key_auth_configs: Optional[list[ApiKeyAuthConfig]] = Field(
+        default=None, alias="ApiKeyAuthConfigs"
+    )
+    created_at: str = Field(..., alias="CreatedAt")
+    updated_at: str = Field(..., alias="UpdatedAt")
     instance_id: Optional[str] = Field(default=None, alias="InstanceId")
 
 
-# CreateInboundAuthConfig - Response
-class CreateInboundAuthConfigResponse(IdentityBaseModel):
-    inbound_auth_config_id: Optional[str] = Field(
-        default=None, alias="InboundAuthConfigId"
-    )
-    trn: Optional[str] = Field(default=None, alias="Trn")
+# CreateInboundAuthConfig - Request
+class CreateInboundAuthConfigRequest(IdentityBaseModel):
     config_name: Optional[str] = Field(default=None, alias="ConfigName")
     description: Optional[str] = Field(default=None, alias="Description")
-    auth_type: Optional[str] = Field(default=None, alias="AuthType")
-    jwt_auth_config: Optional[JwtAuthConfig] = Field(
-        default=None, alias="JwtAuthConfig"
-    )
+    auth_type: str = Field(..., alias="AuthType")
+    instance_id: Optional[str] = Field(default=None, alias="InstanceId")
     api_key_auth_configs: Optional[list[ApiKeyAuthConfig]] = Field(
         default=None, alias="ApiKeyAuthConfigs"
     )
-    instance_id: Optional[str] = Field(default=None, alias="InstanceId")
-    created_at: Optional[str] = Field(default=None, alias="CreatedAt")
-    updated_at: Optional[str] = Field(default=None, alias="UpdatedAt")
+    jwt_auth_config: Optional[JwtAuthConfig] = Field(
+        default=None, alias="JwtAuthConfig"
+    )
+
+
+# CreateInboundAuthConfig - Response
+class CreateInboundAuthConfigResponse(InboundAuthConfig):
+    pass
 
 
 # ListInboundAuthConfigs - Request
 class ListInboundAuthConfigsRequest(IdentityBaseModel):
+    page_number: int = Field(..., alias="PageNumber")
+    page_size: int = Field(..., alias="PageSize")
+    auth_type: Optional[str] = Field(default=None, alias="AuthType")
     instance_id: Optional[str] = Field(default=None, alias="InstanceId")
-    max_results: Optional[int] = Field(default=None, alias="MaxResults")
-    next_token: Optional[str] = Field(default=None, alias="NextToken")
 
 
 # ListInboundAuthConfigs - Response
-class InboundAuthConfigForList(IdentityBaseModel):
-    inbound_auth_config_id: Optional[str] = Field(
-        default=None, alias="InboundAuthConfigId"
-    )
-    trn: Optional[str] = Field(default=None, alias="Trn")
-    config_name: Optional[str] = Field(default=None, alias="ConfigName")
-    description: Optional[str] = Field(default=None, alias="Description")
-    auth_type: Optional[str] = Field(default=None, alias="AuthType")
-    jwt_auth_config: Optional[JwtAuthConfig] = Field(
-        default=None, alias="JwtAuthConfig"
-    )
-    api_key_auth_configs: Optional[list[ApiKeyAuthConfig]] = Field(
-        default=None, alias="ApiKeyAuthConfigs"
-    )
-    instance_id: Optional[str] = Field(default=None, alias="InstanceId")
-    created_at: Optional[str] = Field(default=None, alias="CreatedAt")
-    updated_at: Optional[str] = Field(default=None, alias="UpdatedAt")
+class InboundAuthConfigForList(InboundAuthConfig):
+    pass
 
 
 class ListInboundAuthConfigsResponse(IdentityBaseModel):
+    page_number: int = Field(..., alias="PageNumber")
+    page_size: int = Field(..., alias="PageSize")
+    total_count: int = Field(..., alias="TotalCount")
     inbound_auth_configs: Optional[list[InboundAuthConfigForList]] = Field(
         default=None, alias="InboundAuthConfigs"
     )
-    next_token: Optional[str] = Field(default=None, alias="NextToken")
 
 
 # DeleteInboundAuthConfig - Request
@@ -129,6 +123,4 @@ class DeleteInboundAuthConfigRequest(IdentityBaseModel):
 
 # DeleteInboundAuthConfig - Response
 class DeleteInboundAuthConfigResponse(IdentityBaseModel):
-    inbound_auth_config_id: Optional[str] = Field(
-        default=None, alias="InboundAuthConfigId"
-    )
+    pass

agentkit/toolkit/cli/cli_auth.py

@@ -161,16 +161,24 @@ def _profile_app() -> typer.Typer:
     return app
 
 
+def _default_region() -> str:
+    """Provider-aware default region (CLOUD_PROVIDER + env/config), for --region."""
+    from agentkit.platform.configuration import VolcConfiguration
+
+    return VolcConfiguration().region
+
+
 def _admin_app() -> typer.Typer:
     app = typer.Typer(
         help="Admin: provision UserPool CLI login and publish its discovery doc. "
-        "Needs Volcengine AK/SK for the account that owns the UserPool.",
+        "Needs the cloud account's AK/SK (Volcengine or BytePlus, per CLOUD_PROVIDER) "
+        "for the account that owns the UserPool.",
     )
 
     @app.command("doctor")
     def doctor(
         account: Optional[str] = typer.Option(None, "--account", help="Expected account id (guard)."),
-        region: str = typer.Option("cn-beijing", "--region"),
+        region: Optional[str] = typer.Option(None, "--region", help="Region (default: the provider's default region)."),
         data_plane: bool = typer.Option(
             True, "--data-plane/--no-data-plane",
             help="Also check credential-hosting prerequisites (APIG / VPC / VeFaaS / KMS)."),
@@ -184,6 +192,7 @@ def _admin_app() -> typer.Typer:
         from agentkit.auth.admin import preflight
         from agentkit.auth.errors import AuthError
 
+        region = region or _default_region()
         try:
             api = OpenApiClient(region=region, expect_account=account)
         except AuthError as exc:
@@ -217,12 +226,13 @@ def _admin_app() -> typer.Typer:
     @app.command("create-userpool")
     def create_userpool(
         name: str = typer.Option(..., "--name", help="UserPool name."),
-        region: str = typer.Option("cn-beijing", "--region"),
+        region: Optional[str] = typer.Option(None, "--region", help="Region (default: the provider's default region)."),
     ) -> None:
         """Create a UserPool (the IdP). Federate it to Feishu/ByteDance-SSO in the console."""
         from agentkit.auth.admin import create_user_pool
         from agentkit.auth.errors import AuthError
 
+        region = region or _default_region()
         try:
             uid, issuer = create_user_pool(name, region=region)
         except AuthError as exc:
@@ -234,12 +244,13 @@ def _admin_app() -> typer.Typer:
     def provision(
         user_pool: str = typer.Option(..., "--user-pool", help="UserPool uid."),
         account: Optional[str] = typer.Option(None, "--account", help="Account id (default: caller)."),
-        region: str = typer.Option("cn-beijing", "--region"),
+        region: Optional[str] = typer.Option(None, "--region", help="Region (default: the provider's default region)."),
     ) -> None:
         """Ensure the public CLI client + IAM OIDC provider + STS role (idempotent)."""
         from agentkit.auth.admin import provision_cli_access
         from agentkit.auth.errors import AuthError
 
+        region = region or _default_region()
         try:
             coords = provision_cli_access(user_pool, region=region, account_id=account)
         except AuthError as exc:
@@ -253,7 +264,7 @@ def _admin_app() -> typer.Typer:
         user_pool: Optional[str] = typer.Option(None, "--user-pool", help="Reuse an existing UserPool uid."),
         create_pool: Optional[str] = typer.Option(None, "--create-pool", help="Create a new UserPool with this name."),
         account: Optional[str] = typer.Option(None, "--account", help="Account id (default: caller)."),
-        region: str = typer.Option("cn-beijing", "--region"),
+        region: Optional[str] = typer.Option(None, "--region", help="Region (default: the provider's default region)."),
         idp: Optional[str] = typer.Option(None, "--idp", help="Federate an upstream IdP: bytedance | feishu."),
         idp_client_id: Optional[str] = typer.Option(None, "--idp-client-id"),
         idp_secret: Optional[str] = typer.Option(None, "--idp-secret"),
@@ -270,9 +281,10 @@ def _admin_app() -> typer.Typer:
         override. ``--yes`` (or passing flags) runs it non-interactively.
         """
         from agentkit.auth._openapi import OpenApiClient
-        from agentkit.auth.admin import CLI_CLIENT_NAME, OIDC_PROVIDER_NAME, ROLE_NAME, sso_setup
+        from agentkit.auth.admin import CLI_CLIENT_NAME, OIDC_PROVIDER_NAME, ROLE_NAME, sso_setup, tos_public_host
         from agentkit.auth.errors import AuthError
 
+        region = region or _default_region()
         try:
             api = OpenApiClient(region=region, expect_account=account)
         except AuthError as exc:
@@ -317,7 +329,7 @@ def _admin_app() -> typer.Typer:
 
         # 5. 列出将要做的改动,确认后执行
         if interactive:
-            host = dom or f"{bk}.tos-{region}.volces.com"
+            host = dom or f"{bk}.{tos_public_host(region)}"
             typer.secho("  将要执行以下配置:", fg=typer.colors.CYAN, bold=True, err=True)
             typer.secho(f"    • UserPool      {'复用 ' + user_pool if user_pool else '新建 (agentkit-cli-pool)'}", err=True)
             typer.secho(f"    • 上游联邦      {idp + ' 联邦登录' if idp else '不配置(用 UserPool 本地/已有登录)'}", err=True)
@@ -385,12 +397,13 @@ def _admin_app() -> typer.Typer:
         user_pool: str = typer.Option(..., "--user-pool", help="UserPool uid."),
         bucket: str = typer.Option(..., "--bucket", help="TOS bucket to host the discovery doc."),
         account: Optional[str] = typer.Option(None, "--account"),
-        region: str = typer.Option("cn-beijing", "--region"),
+        region: Optional[str] = typer.Option(None, "--region", help="Region (default: the provider's default region)."),
     ) -> None:
         """Provision (if needed) and publish /.well-known/agentkit-cli; print the login address."""
         from agentkit.auth.admin import provision_cli_access, publish_discovery
         from agentkit.auth.errors import AuthError
 
+        region = region or _default_region()
         try:
             coords = provision_cli_access(user_pool, region=region, account_id=account)
             url = publish_discovery(coords, bucket=bucket)

agentkit/toolkit/cli/cli_delete.py

@@ -46,27 +46,12 @@ def delete_credential_command(
     ),
 ):
     """Delete a credential (inbound auth config) by name."""
-    from agentkit.toolkit.cli.utils import PaginationHelper
+    from agentkit.toolkit.cli.cli_list import fetch_all_inbound_auth_configs
     from agentkit.sdk.identity.client import AgentkitIdentityClient
     from agentkit.sdk.identity import types as it
 
     client = AgentkitIdentityClient(region=(region or "").strip())
-
-    def build_request(next_token_val):
-        return it.ListInboundAuthConfigsRequest(
-            max_results=50,
-            next_token=next_token_val,
-        )
-
-    configs, _, _ = PaginationHelper.fetch_all_pages(
-        request_func=client.list_inbound_auth_configs,
-        request_builder=build_request,
-        max_results=50,
-        next_token=None,
-        fetch_all=True,
-        max_batches=None,
-        sleep_ms=0,
-    )
+    configs = fetch_all_inbound_auth_configs(client, page_size=50)
 
     matches = [c for c in configs if c.config_name == name]
     if not matches:

agentkit/toolkit/cli/cli_list.py

@@ -51,6 +51,33 @@ def _is_harness_runtime(runtime: rt.AgentKitRuntimesForListRuntimes) -> bool:
 _HARNESS_APP = "harness"
 
 
+def fetch_all_inbound_auth_configs(client, *, page_size: int):
+    """Fetch inbound auth configs using the id service's page-number protocol."""
+    from agentkit.sdk.identity import types as it
+
+    configs = []
+    page_number = 1
+    while True:
+        response = client.list_inbound_auth_configs(
+            it.ListInboundAuthConfigsRequest(
+                page_number=page_number,
+                page_size=page_size,
+            )
+        )
+        items = response.inbound_auth_configs or []
+        configs.extend(items)
+
+        total_count = response.total_count
+        if page_number * page_size >= total_count:
+            break
+        if not items or len(items) < page_size:
+            break
+
+        page_number += 1
+
+    return configs
+
+
 def _user_id_from_token(token: str) -> Optional[str]:
     """Return the OIDC ``sub`` claim from a JWT bearer token, else ``None``.
 
@@ -240,9 +267,7 @@ def list_sessions_command(
     output: str = typer.Option(
         "table", "--output", help="Output format: table|json|yaml"
     ),
-    quiet: bool = typer.Option(
-        False, "--quiet", "-q", help="Print only session ids"
-    ),
+    quiet: bool = typer.Option(False, "--quiet", "-q", help="Print only session ids"),
     no_color: bool = typer.Option(
         False, "--no-color", "-nc", help="Disable colored output for tables/panels"
     ),
@@ -304,7 +329,9 @@ def list_sessions_command(
     if output.lower() == "yaml":
         import yaml
 
-        local_console.print(yaml.safe_dump(sessions, sort_keys=False, allow_unicode=True))
+        local_console.print(
+            yaml.safe_dump(sessions, sort_keys=False, allow_unicode=True)
+        )
         return
 
     table = Table(
@@ -343,7 +370,7 @@ def list_credentials_command(
         "table", "--output", help="Output format: table|json|yaml"
     ),
     quiet: bool = typer.Option(
-        False, "--quiet", "-q", help="Print only credential names"
+        False, "--quiet", "-q", help="Print only InstanceId values"
     ),
     no_color: bool = typer.Option(
         False, "--no-color", "-nc", help="Disable colored output for tables/panels"
@@ -353,34 +380,19 @@ def list_credentials_command(
     ),
 ):
     """List credentials (inbound auth configs) visible to the credentials."""
-    from agentkit.toolkit.cli.utils import PaginationHelper, OutputFormatter
+    from agentkit.toolkit.cli.utils import OutputFormatter
     from agentkit.sdk.identity.client import AgentkitIdentityClient
-    from agentkit.sdk.identity import types as it
 
     local_console = console if not no_color else Console(no_color=True)
 
     client = AgentkitIdentityClient(region=(region or "").strip())
 
-    def build_request(next_token_val):
-        return it.ListInboundAuthConfigsRequest(
-            max_results=limit,
-            next_token=next_token_val,
-        )
-
     with local_console.status("[cyan]Fetching credentials...[/cyan]", spinner="dots"):
-        configs, _, _ = PaginationHelper.fetch_all_pages(
-            request_func=client.list_inbound_auth_configs,
-            request_builder=build_request,
-            max_results=limit,
-            next_token=None,
-            fetch_all=True,
-            max_batches=None,
-            sleep_ms=0,
-        )
+        configs = fetch_all_inbound_auth_configs(client, page_size=limit)
 
     if quiet:
         for c in configs:
-            local_console.print(c.config_name or "")
+            local_console.print(c.instance_id or "")
         return
 
     if output.lower() == "json":
@@ -391,7 +403,7 @@ def list_credentials_command(
         return
 
     columns = [
-        ("ConfigName", "Name", "cyan"),
+        ("InstanceId", "InstanceId", "cyan"),
         ("AuthType", "AuthType", "white"),
         ("InboundAuthConfigId", "InboundAuthConfigId", "green"),
         ("CreatedAt", "CreatedAt", "magenta"),

agentkit/toolkit/cli/cli_memory.py

@@ -57,8 +57,8 @@ PROVIDER_TYPE_ALIASES = {
     "VIKINGDB_MEMORY": "VIKINGDB_MEMORY",
 }
 CREATE_PROVIDER_TYPE_HELP = (
-    "Provider type: MEM0 | VIKINGDB_MEMORY. Defaults to MEM0; when cloud provider "
-    "is byteplus, defaults to VIKINGDB_MEMORY and MEM0 is not supported."
+    "Provider type for create. Defaults depend on the active cloud provider; "
+    "run 'agentkit memory provider-types' to view supported values."
 )
 
 
@@ -467,17 +467,25 @@ def add_command(
 def provider_types_command():
     """List allowed ProviderType values and common aliases."""
     try:
+        cloud_provider = VolcConfiguration().provider
         table = Table(title="Allowed Provider Types")
         table.add_column("Value", style="cyan")
         table.add_column("Aliases", style="magenta")
-        table.add_row("MEM0", "mem0")
+
+        if cloud_provider != CloudProvider.BYTEPLUS:
+            table.add_row("MEM0", "mem0")
         table.add_row("VIKINGDB_MEMORY", "vikingdb, vikingdb_memory, vikingdb-memory")
         console.print(table)
-        console.print(
-            "Default for create is [bold]MEM0[/bold], or "
-            "[bold]VIKINGDB_MEMORY[/bold] when cloud provider is byteplus. "
-            "MEM0 is not supported on BytePlus."
-        )
+        if cloud_provider == CloudProvider.BYTEPLUS:
+            console.print(
+                "Cloud provider: [bold]byteplus[/bold]. Default for create is "
+                "[bold]VIKINGDB_MEMORY[/bold]. MEM0 is not supported on BytePlus."
+            )
+        else:
+            console.print(
+                "Cloud provider: [bold]volcengine[/bold]. Default for create is "
+                "[bold]MEM0[/bold]."
+            )
     except Exception as e:
         console.print(f"[red]Failed to list provider types: {e}[/red]")
         raise typer.Exit(1)

agentkit/version.py

@@ -12,4 +12,4 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-VERSION = "0.8.2"
+VERSION = "0.8.4"

{agentkit_sdk_python-0.8.2.dist-info → agentkit_sdk_python-0.8.4.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentkit-sdk-python
-Version: 0.8.2
+Version: 0.8.4
 Summary: Python SDK for transforming any AI agent into a production-ready application. Framework-agnostic primitives for runtime, memory, authentication, and tools with volcengine-managed infrastructure.
 Author-email: Xiangrui Cheng <innsdcc@gmail.com>, Yumeng Bao <baoyumeng.123@gmail.com>, Yaozheng Fang <fangyozheng@gmail.com>, Guodong Li <cu.eric.lee@gmail.com>
 License:                                  Apache License

{agentkit_sdk_python-0.8.2.dist-info → agentkit_sdk_python-0.8.4.dist-info}/RECORD

@@ -1,6 +1,6 @@
 agentkit/__init__.py,sha256=l27ZMDslc3VhmmnPZJyrqVvTDoZ0LqhCtM5hw0caHcU,1021
 agentkit/errors.py,sha256=UWlXv0ZsXd_oLTMlxuf4u9-XkTdRYeVZueE--Z3JsHU,1214
-agentkit/version.py,sha256=g4CsgqE9kLMs6p4wSITaFW9ouorJTtg305eCrh59Tp0,653
+agentkit/version.py,sha256=fKAnVe0_BYK2q2PZxJGyG7eEu4cEnejRK9V0vQ6lftQ,653
 agentkit/apps/__init__.py,sha256=_Na1A4NSaMbVfPbsFKj2U-yI5mytD7W5skMaAOGbauY,2328
 agentkit/apps/base_app.py,sha256=3hZZExL1wyTGWveJEZZoqXN086MzmkVS_WU1vyulIWg,754
 agentkit/apps/utils.py,sha256=IzimIDmT6FS6PV9MLimPh46mq5zT-EjVmnYPxBdyEq0,1934
@@ -8,7 +8,7 @@ agentkit/apps/a2a_app/__init__.py,sha256=pkSabKw7_ai4NOo56pXKL40EcaxIDh6HYxPXOY7
 agentkit/apps/a2a_app/a2a_app.py,sha256=mFuPFuqRlGdQ2VIjQq2_gtQKWwnkwSjSmIMRnammWJU,7605
 agentkit/apps/a2a_app/telemetry.py,sha256=vR8tf7EHLor62cxs5PBx4mrfHeOaV1a7Xryqlu8nGCU,4290
 agentkit/apps/agent_server_app/__init__.py,sha256=pkSabKw7_ai4NOo56pXKL40EcaxIDh6HYxPXOY7qWbo,634
-agentkit/apps/agent_server_app/agent_server_app.py,sha256=d955uLspgQg3B6sKtI2NKer1encsYFFb7mG2eleOLYo,26465
+agentkit/apps/agent_server_app/agent_server_app.py,sha256=vdaNu0T3uRAVrw21KA2KWl5_0TyjoYxTCDh6vP0CGXM,26997
 agentkit/apps/agent_server_app/credential_service.py,sha256=jBSIY6-1yc01rRRVYN8wuahTIs9AEY4zH5JGSAWIzUU,3468
 agentkit/apps/agent_server_app/inbound_auth.py,sha256=FPCfFdg13Z9E-kasyZ-in3COdXHG_exKHAFThwXFnS8,1394
 agentkit/apps/agent_server_app/inbound_auth_adapter.py,sha256=n0ji_wKVmBOabepqTqWR1_0mrcYjH2xZlQJx-tGgNcs,6087
@@ -27,22 +27,22 @@ agentkit/apps/simple_app/simple_app.py,sha256=NgWONHpLckkqzw8iTP2kk2MJiB9L6Y22FD
 agentkit/apps/simple_app/simple_app_handlers.py,sha256=Rby8HGCDlWo5kXmliU2YEyqbaNI2u69JIZ5YqetJJco,15561
 agentkit/apps/simple_app/telemetry.py,sha256=F3sYCWmJb-tgLUoM-2EjYX6fnLT9N5kkVNbfHkPVqHg,5052
 agentkit/auth/__init__.py,sha256=eIW6ziL3rtBYEupfmqq8MshZ40wL3muYjCQRikFG_j0,3643
-agentkit/auth/_openapi.py,sha256=ofFX7Ch-1xQeOvwUYRU4YwGKUqDgIfI8lsnk8Vbi12s,8230
+agentkit/auth/_openapi.py,sha256=bToFSAqSCO_nvfvK0FegkJJtP50eZQhe5ZAtHBGla3E,10088
 agentkit/auth/_redact.py,sha256=Ef3yLlWj6jw0G6gZKy3cY64X6sm0jhzor8qx8b0Dp4A,911
 agentkit/auth/_sigv4.py,sha256=yAbFD57g3cBvCkGTVJap0BCakQeukyR_FlzMDYZdTkw,3375
-agentkit/auth/admin.py,sha256=JDyKIptLKMQOAp8DjUvrCRnJ2jER6cZUrXoUJcojMDU,23554
+agentkit/auth/admin.py,sha256=ZbyN21O4wVzkcGUzwliPneTEKZorLgCDVcxNXfijfE8,28721
 agentkit/auth/credential_hosting.py,sha256=lFFYseYHkqCUsv1djtK3EFR1XvESmw6l1Zgu1CcwIa8,24280
 agentkit/auth/errors.py,sha256=eNNdzXP35QAlYy-jM5I9CQZCSS9rW0cp5_1F0I75JcU,1448
 agentkit/auth/model_login.py,sha256=_30pbZgs22o4UtGF03dMgFRN9yE4OSyLqXJm9JhEe7E,13775
 agentkit/auth/oauth.py,sha256=vbFRJpmlQXxcKRjHk2LIDLs1I3hsVrWTvLRnDA8XNN4,8812
-agentkit/auth/profile.py,sha256=gJpPj1ivpjRdH3MnjB2ICN4fYVaQlkt9DreJqkOze0Y,5656
+agentkit/auth/profile.py,sha256=DN8NGgPyd4X_HyEwXZjTfhv782NiBMij7H0TmdsfrT4,5776
 agentkit/auth/providers.py,sha256=zcOjEryJvuUctnRl3_Uae6HdZ8hGc0NVX4Lp3Y_2W68,3041
-agentkit/auth/resolve.py,sha256=UAKFBRtGyLcR-nkisk49_bpGVG635SKM2kqVV37ofe4,7276
-agentkit/auth/session.py,sha256=iQ6Memsm7yTSPllJil6JjT-rHQeJnIzOch1s-WxPkGQ,13391
+agentkit/auth/resolve.py,sha256=vWeCBdwbQGDn_vsZ9oIhX5EXKFFomw7KONZACvI_zlQ,7348
+agentkit/auth/session.py,sha256=_VzpAAf-chx1ZFcDrcl6cH_4YzH718owV8FkZFlOGys,13431
 agentkit/auth/ssl_trust.py,sha256=QBE8pr-u9QV_FzqmRHkwOdynu1Kexm5_zGeMZbkH5_I,4069
-agentkit/auth/sso.py,sha256=pjNZGza_-UnfZcMNXuAHGdBT7xJzAOeBV7FpipCUQog,6051
+agentkit/auth/sso.py,sha256=v_7l0a1Z2JRDAATXRrAJc8ixlCBnulCfMkZE7h3ebJg,6140
 agentkit/auth/store.py,sha256=Wxkotn9jvPyNcVRJ_T3oRHV5qGuiyhe92JOhc6WiX7k,4239
-agentkit/auth/sts.py,sha256=mHcC4XJg9kwcX-Qt3_Ez88QnAOHkV7b_XRIIs3XznSM,5277
+agentkit/auth/sts.py,sha256=VE18SsI6GTJBJmtIrxqs-ECeOstC79qe99UizO3EExE,5535
 agentkit/client/__init__.py,sha256=WHKgNGkpYsJp0xD20drYcxAMDclwDqrfURqxEVv0V1Y,1053
 agentkit/client/base_agentkit_client.py,sha256=NV1m2FtboUcMdVUJL2ep75nAwDQ42roiWgl3YKaUSn8,2955
 agentkit/client/base_iam_client.py,sha256=F3ggcZjt14CAcgDYpncF2XGr1zTGnhaOzqEJl4NGHwU,2432
@@ -69,7 +69,7 @@ agentkit/identity/runtime.py,sha256=9K_CLqOfOfhw1DYSupChW47fc5k3_sK6tUTB-ky6Vo4,
 agentkit/identity/transport.py,sha256=Rdesbrai204tduAgvWTFrp0gXyCF0Sw_fqMbJUQSXyQ,238
 agentkit/identity/types.py,sha256=kCwNddu74pf8WWHHTkO2NUmU-VkSn91uTWMx9vkUSBc,588
 agentkit/platform/__init__.py,sha256=XD1YoXWJPpLGrP410Tb_psPFKR3LUo3-47UlqayUumo,3464
-agentkit/platform/configuration.py,sha256=lclvtiUUO1D6iwapmPygYGhNJCMfkqt4fHPBCIEqUhE,23378
+agentkit/platform/configuration.py,sha256=6pmCzhyiq3d2Q7VolrBxKyUJd5ZIJV713dSh0MvTF1U,23488
 agentkit/platform/console_urls.py,sha256=JcnjwyuxN5c4RuXcPevsxy6aInurVFtchqbibJBqjSk,1125
 agentkit/platform/constants.py,sha256=52XqqOEBcvGQFgEb2rALyaDhdx1MOT9YSyS1s8VSYV0,3975
 agentkit/platform/context.py,sha256=eb6ub4nUhoV1hXawjSVdY7gfc5XcgHJjFIhrzOuQ2G0,1662
@@ -79,8 +79,8 @@ agentkit/sdk/account/client.py,sha256=hOxqpiI0H7qlsBZR3aUNKi8G7eJOr46GtAS-J9on_U
 agentkit/sdk/account/types.py,sha256=RQdVaeQxd_ntlyG2HZIx4q24m1aDvttxncXtrSamILE,1540
 agentkit/sdk/identity/__init__.py,sha256=pkSabKw7_ai4NOo56pXKL40EcaxIDh6HYxPXOY7qWbo,634
 agentkit/sdk/identity/auth.py,sha256=zRX5ViIiEJZedBx4dctb7zEGYsOme70UmOPZFkBXvKk,2808
-agentkit/sdk/identity/client.py,sha256=fYP_QaRpPorve7Pl1pgYh_uYJOWEBKgf6yRnYo1P1Aw,2657
-agentkit/sdk/identity/types.py,sha256=rdQOoKMzTPHrWoiEEMNxzsNYIMo82T5nrBFZhLN55hY,5455
+agentkit/sdk/identity/client.py,sha256=LY0qds5y2p0b3_y1c7xa_0EnGCOub7c-D7VMMCEv-ew,2915
+agentkit/sdk/identity/types.py,sha256=L3C5SF62H7ZQqcTPzo4QJbcYzFauARfcgdPNv1KkHac,4621
 agentkit/sdk/knowledge/__init__.py,sha256=o0jcuhemoY-DmfpnCu4TsTHBpmZpfUxIFjnEEltlS0I,1600
 agentkit/sdk/knowledge/client.py,sha256=pEvsq5lcGMtteDTbXvh-bX7P79UdXPU3x49GLxCY-XI,3832
 agentkit/sdk/knowledge/types.py,sha256=01ViOou0YxdGqPrGCdlI7LTZKGFrPf3OPnvsrIJb-Ts,10545
@@ -116,19 +116,19 @@ agentkit/toolkit/cli/__init__.py,sha256=pkSabKw7_ai4NOo56pXKL40EcaxIDh6HYxPXOY7q
 agentkit/toolkit/cli/__main__.py,sha256=arwJ1gHkaaoQAXb0ezo_FeyxiMqVy0FXujB2WOX_ohU,775
 agentkit/toolkit/cli/cli.py,sha256=cwtaKwo8XeJZ-cWyDJSNe8oS-LnBXEn2R-JWHH9moys,4893
 agentkit/toolkit/cli/cli_add.py,sha256=aLyvN9Vcjis_KLhy92uuPi7e8ltFdHjwFOb-nME7CV0,39730
-agentkit/toolkit/cli/cli_auth.py,sha256=eislIHxafJovjDSQai8zfO4zcd502-U5oJYelnPFKgQ,26445
+agentkit/toolkit/cli/cli_auth.py,sha256=qfvzLwOV3bGnClX_-EP2CC1uDyEy8fezWoTaCe7Ourw,27271
 agentkit/toolkit/cli/cli_build.py,sha256=gtRBPJfm6Z4y37ISC_CiGwEkMhD4fD7IQi1H6Lzc2Yo,2984
 agentkit/toolkit/cli/cli_config.py,sha256=09TUTlV9-QmBfNpDox2HBCpbgsO7hS9rZRoAAUdE9eI,29311
-agentkit/toolkit/cli/cli_delete.py,sha256=Q6utRf5ak1fHF_Bm73weWgiiQA3Oz3iWzl5ij5_cTGA,6584
+agentkit/toolkit/cli/cli_delete.py,sha256=duoX7N1_uklleNMEcxz8t575FluzxLnGeokYUKyx58E,6228
 agentkit/toolkit/cli/cli_deploy.py,sha256=B912gRSpgLFBCLF8w8lD1J_jP5-PvpT_Zjblx-0yees,7066
 agentkit/toolkit/cli/cli_destroy.py,sha256=QpH7cctsaIFd2io6hhEeKnCjxK7DbE7AnFsecWL5BxY,1797
 agentkit/toolkit/cli/cli_init.py,sha256=feuypfgggXj6_0ZP4TEQ3rIZOuYRVUxXwvpdq9nsOY0,17911
 agentkit/toolkit/cli/cli_invoke.py,sha256=sLaCXXoOeTPzECZFtNCV8EIlIQPQZsaih2s5rocz2h8,46082
 agentkit/toolkit/cli/cli_knowledge.py,sha256=J3pcJs01tWJAMp79nFnX5pU6AEZK7XVCZtyPRLKkfUI,25142
 agentkit/toolkit/cli/cli_launch.py,sha256=vkhjTBcxteVGwxtkDXKQxDjqTsFyDPx0SZcKL-zkPMg,3774
-agentkit/toolkit/cli/cli_list.py,sha256=KBqSRMaiO6Frej_ZvTV4_ODWgMVdHzJtsl63K43Y3hY,14256
+agentkit/toolkit/cli/cli_list.py,sha256=4_SENlUS1P1WRP75fga05JVRkIG4IKGftrFpoVAn108,14555
 agentkit/toolkit/cli/cli_logs.py,sha256=hfyz89MpS7KCGd3ExUiDJoyveEwt_tOCKab_8P_I3Ck,9355
-agentkit/toolkit/cli/cli_memory.py,sha256=kyxGUP2RsCa725r1aRkyWtwqqAM9YySViQ_j_2L2ZTE,37798
+agentkit/toolkit/cli/cli_memory.py,sha256=mN1DwUeIjLD_xSRw6xFQoY8EVz0K8mMZf3PGydZkndE,38113
 agentkit/toolkit/cli/cli_model_gateway.py,sha256=_kMcDo-Y55G2LZZx4rL4Ksp6DQkou8A42_MKbsG-LgI,41233
 agentkit/toolkit/cli/cli_runtime.py,sha256=nzk3oVICVACXqZrg0KjgjpjN-K3ezQKAu0dwdjnsMPg,31961
 agentkit/toolkit/cli/cli_skill.py,sha256=nEZXc9CVGop4e0WC-V2AAHqy7to4nw6KnKOtzS2likQ,16170
@@ -285,9 +285,9 @@ agentkit_identity/py.typed,sha256=AbpHGcgLb-kRsJGnwFEktk7uzpZOCcBY74-YBdrKVGs,1
 agentkit_identity/runtime.py,sha256=hQHLvbAK760teFPTGZ0RG9Ed5DQAXAqIdaAm9ojzS34,14423
 agentkit_identity/transport.py,sha256=kwGHSEQ5Qcn1kIu6N6DVid7MdDUMj5uaIRIUA_tJ3cM,7693
 agentkit_identity/types.py,sha256=lT8KQz1pG0rgdy5Gh6WnM0mq9VqCsWSE41Z8Fw3DHZo,7358
-agentkit_sdk_python-0.8.2.dist-info/licenses/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
-agentkit_sdk_python-0.8.2.dist-info/METADATA,sha256=ugfvvvLHRLoSYCYia3xEE394p17bvkHjjXPaQCGX5s0,21580
-agentkit_sdk_python-0.8.2.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
-agentkit_sdk_python-0.8.2.dist-info/entry_points.txt,sha256=fhzZUsvsLXeB4mPaa0SBQiTBqFT404uDAKPaePAOUAE,58
-agentkit_sdk_python-0.8.2.dist-info/top_level.txt,sha256=Kw8DVx7vzg-oUh7xC_hBZw7OwKW3Y_fo_8rkWOL1d5o,27
-agentkit_sdk_python-0.8.2.dist-info/RECORD,,
+agentkit_sdk_python-0.8.4.dist-info/licenses/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
+agentkit_sdk_python-0.8.4.dist-info/METADATA,sha256=CmkfzVUQCoQ62WFvXFle1Il9-B77xpfEU-NOgAwtPUQ,21580
+agentkit_sdk_python-0.8.4.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
+agentkit_sdk_python-0.8.4.dist-info/entry_points.txt,sha256=fhzZUsvsLXeB4mPaa0SBQiTBqFT404uDAKPaePAOUAE,58
+agentkit_sdk_python-0.8.4.dist-info/top_level.txt,sha256=Kw8DVx7vzg-oUh7xC_hBZw7OwKW3Y_fo_8rkWOL1d5o,27
+agentkit_sdk_python-0.8.4.dist-info/RECORD,,