agentkit-sdk-python 0.8.4__py3-none-any.whl → 0.8.6__py3-none-any.whl

agentkit/frameworks/model_replacement.py

@@ -7,10 +7,12 @@ import logging
 import os
 from typing import Any
 
-
 logger = logging.getLogger(__name__)
 ARK_DEFAULT_BASE_URL = "https://ark.cn-beijing.volces.com/api/v3"
+VEADK_SOURCE_HEADER = "veadk-source"
+VEADK_SOURCE_VALUE = "veadk"
 _DISABLED_VALUES = {"0", "false", "off", "none", "disabled"}
+_HEADER_PATCH_MARKER = "__agentkit_veadk_source_header__"
 _MODEL_PARAM_KEYS = {
     "frequency_penalty",
     "max_tokens",
@@ -49,6 +51,55 @@ def _replacement_enabled() -> bool:
     return value not in _DISABLED_VALUES
 
 
+def _merge_veadk_source_header(headers: Any = None) -> dict[str, Any]:
+    merged = {
+        key: value
+        for key, value in dict(headers or {}).items()
+        if key.lower() != VEADK_SOURCE_HEADER
+    }
+    merged[VEADK_SOURCE_HEADER] = VEADK_SOURCE_VALUE
+    return merged
+
+
+def _header_kwarg_model_cls(base_cls: type[Any], header_kwarg: str) -> type[Any]:
+    if getattr(base_cls, _HEADER_PATCH_MARKER, False):
+        return base_cls
+
+    class AgentKitHeaderModel(base_cls):
+        def __init__(self, *args: Any, **kwargs: Any) -> None:
+            kwargs[header_kwarg] = _merge_veadk_source_header(kwargs.get(header_kwarg))
+            super().__init__(*args, **kwargs)
+
+    AgentKitHeaderModel.__name__ = base_cls.__name__
+    AgentKitHeaderModel.__qualname__ = base_cls.__qualname__
+    AgentKitHeaderModel.__module__ = base_cls.__module__
+    setattr(AgentKitHeaderModel, _HEADER_PATCH_MARKER, True)
+    return AgentKitHeaderModel
+
+
+def _openai_client_args_model_cls(base_cls: type[Any]) -> type[Any]:
+    if getattr(base_cls, _HEADER_PATCH_MARKER, False):
+        return base_cls
+
+    class AgentKitHeaderModel(base_cls):
+        def __init__(self, *args: Any, **kwargs: Any) -> None:
+            if args or kwargs.get("client") is not None:
+                super().__init__(*args, **kwargs)
+                return
+            client_args = dict(kwargs.get("client_args") or {})
+            client_args["default_headers"] = _merge_veadk_source_header(
+                client_args.get("default_headers")
+            )
+            kwargs["client_args"] = client_args
+            super().__init__(*args, **kwargs)
+
+    AgentKitHeaderModel.__name__ = base_cls.__name__
+    AgentKitHeaderModel.__qualname__ = base_cls.__qualname__
+    AgentKitHeaderModel.__module__ = base_cls.__module__
+    setattr(AgentKitHeaderModel, _HEADER_PATCH_MARKER, True)
+    return AgentKitHeaderModel
+
+
 def _replacement_model_config(config: dict[str, Any]) -> dict[str, Any]:
     model_id = _target_model_id()
     if not model_id:
@@ -90,6 +141,7 @@ def _agentkit_openai_model_cls() -> type[Any]:
                 client_args={
                     "base_url": _target_base_url(),
                     "api_key": api_key,
+                    "default_headers": _merge_veadk_source_header(),
                 },
                 **_replacement_model_config(kwargs),
             )
@@ -101,7 +153,7 @@ def _agentkit_openai_model_cls() -> type[Any]:
 def _patch_model_attr(module_name: str, attr: str, replacement: type[Any]) -> bool:
     try:
         module = importlib.import_module(module_name)
-    except Exception:
+    except Exception:  # noqa: BLE001 - optional framework imports are best effort
         return False
     if hasattr(module, attr):
         setattr(module, attr, replacement)
@@ -109,6 +161,49 @@ def _patch_model_attr(module_name: str, attr: str, replacement: type[Any]) -> bo
     return False
 
 
+def _patch_langchain_model_headers() -> bool:
+    try:
+        module = importlib.import_module("langchain_openai.chat_models.base")
+        replacement = _header_kwarg_model_cls(module.ChatOpenAI, "default_headers")
+    except Exception:  # noqa: BLE001 - optional framework imports are best effort
+        return False
+
+    patched = False
+    for module_name in (
+        "langchain_openai",
+        "langchain_openai.chat_models",
+        "langchain_openai.chat_models.base",
+    ):
+        patched = _patch_model_attr(module_name, "ChatOpenAI", replacement) or patched
+    return patched
+
+
+def _patch_adk_model_headers() -> bool:
+    try:
+        module = importlib.import_module("google.adk.models.lite_llm")
+        replacement = _header_kwarg_model_cls(module.LiteLlm, "extra_headers")
+    except Exception:  # noqa: BLE001 - optional framework imports are best effort
+        return False
+
+    patched = False
+    for module_name in ("google.adk.models", "google.adk.models.lite_llm"):
+        patched = _patch_model_attr(module_name, "LiteLlm", replacement) or patched
+    return patched
+
+
+def _patch_strands_openai_model_headers() -> bool:
+    try:
+        module = importlib.import_module("strands.models.openai")
+        replacement = _openai_client_args_model_cls(module.OpenAIModel)
+    except Exception:  # noqa: BLE001 - optional framework imports are best effort
+        return False
+
+    patched = False
+    for module_name in ("strands.models", "strands.models.openai"):
+        patched = _patch_model_attr(module_name, "OpenAIModel", replacement) or patched
+    return patched
+
+
 def _apply_env_aliases() -> bool:
     changed = False
     model_id = _target_model_id()
@@ -138,7 +233,7 @@ def _apply_env_aliases() -> bool:
 def _patch_strands_model_classes() -> bool:
     try:
         replacement = _agentkit_openai_model_cls()
-    except Exception:
+    except Exception:  # noqa: BLE001 - optional framework imports are best effort
         return False
 
     patched = False
@@ -155,21 +250,33 @@ def apply_agentkit_model_replacement() -> bool:
     """Apply explicit target-model replacement for generated migration wrappers.
 
     The helper intentionally stays low-intrusion: it normalizes common model
-    environment variables and patches only stable Strands Bedrock/Anthropic
-    model classes before user code constructs them. It does not rewrite project
-    source code or chase framework-specific model SDK constructor details.
+    environment variables and patches stable framework model constructors before
+    user code constructs them. It does not rewrite project source code or patch
+    global HTTP/OpenAI clients.
     """
 
     if not _replacement_enabled():
         logger.info("AgentKit model replacement disabled by ARK_MODEL_REPLACEMENT.")
         return False
     env_changed = _apply_env_aliases()
+    langchain_headers_patched = _patch_langchain_model_headers()
+    adk_headers_patched = _patch_adk_model_headers()
+    strands_headers_patched = _patch_strands_openai_model_headers()
     patched = _patch_strands_model_classes()
     logger.info(
-        "AgentKit model replacement enabled: env_aliases=%s strands_model_patch=%s target_model_configured=%s base_url_configured=%s",
+        "AgentKit model replacement enabled: env_aliases=%s langchain_headers=%s adk_headers=%s strands_headers=%s strands_model_patch=%s target_model_configured=%s base_url_configured=%s",
         env_changed,
+        langchain_headers_patched,
+        adk_headers_patched,
+        strands_headers_patched,
         patched,
         bool(_target_model_id()),
         bool(_target_base_url()),
     )
-    return env_changed or patched
+    return (
+        env_changed
+        or langchain_headers_patched
+        or adk_headers_patched
+        or strands_headers_patched
+        or patched
+    )

agentkit/sdk/tools/types.py

@@ -17,6 +17,7 @@
 
 from __future__ import annotations
 
+from enum import Enum
 from typing import Optional
 from pydantic import BaseModel, Field
 
@@ -28,6 +29,11 @@ class ToolsBaseModel(BaseModel):
 
 
 # Data Types
+class CredentialType(str, Enum):
+    TOS_CREDENTIAL_TYPE_ACCESS_KEY = "TOS_CREDENTIAL_TYPE_ACCESS_KEY"
+    TOS_CREDENTIAL_TYPE_IAM_ROLE = "TOS_CREDENTIAL_TYPE_IAM_ROLE"
+
+
 class AssociatedRuntimesForGetTool(ToolsBaseModel):
     id: Optional[str] = Field(default=None, alias="Id")
     name: Optional[str] = Field(default=None, alias="Name")
@@ -204,6 +210,9 @@ class TosMountConfigForGetTool(ToolsBaseModel):
     credentials: Optional[CredentialsForGetTool] = Field(
         default=None, alias="Credentials"
     )
+    credential_type: Optional[CredentialType] = Field(
+        default=None, alias="CredentialType"
+    )
     enable_tos: Optional[bool] = Field(default=None, alias="EnableTos")
     mount_points: Optional[list[MountPointsForGetTool]] = Field(
         default=None, alias="MountPoints"
@@ -348,6 +357,9 @@ class TosMountForCreateTool(ToolsBaseModel):
     credentials: Optional[TosMountCredentialsForCreateTool] = Field(
         default=None, alias="Credentials"
     )
+    credential_type: Optional[CredentialType] = Field(
+        default=None, alias="CredentialType"
+    )
     mount_points: Optional[list[TosMountMountPointsItemForCreateTool]] = Field(
         default=None, alias="MountPoints"
     )
@@ -678,6 +690,9 @@ class TosMountForUpdateTool(ToolsBaseModel):
     credentials: Optional[TosMountCredentialsForUpdateTool] = Field(
         default=None, alias="Credentials"
     )
+    credential_type: Optional[CredentialType] = Field(
+        default=None, alias="CredentialType"
+    )
     mount_points: Optional[list[TosMountMountPointsItemForUpdateTool]] = Field(
         default=None, alias="MountPoints"
     )

agentkit/toolkit/cli/cli_tools.py

@@ -329,6 +329,10 @@ def update_tool_command(
         client = AgentkitToolsClient(region=(region or "").strip())
         if json_body:
             payload = json.loads(json_body)
+            if not isinstance(payload, dict):
+                raise ValueError("--json must contain a JSON object")
+            payload.pop("tool_id", None)
+            payload["ToolId"] = tool_id.strip()
         else:
             payload = tools_types.UpdateToolRequest(
                 tool_id=tool_id, description=description

agentkit/toolkit/cli/sandbox/cli_create.py

@@ -56,8 +56,10 @@ from agentkit.toolkit.cli.sandbox.model_config import (
 )
 from agentkit.toolkit.cli.sandbox.tool_resolve import save_tool_result_if_resolvable
 from agentkit.toolkit.cli.sandbox.tos_config import (
+    DEFAULT_TOS_CREDENTIAL_TYPE,
     DEFAULT_TOS_LOCAL_PATH,
     build_create_tool_tos_mount_config,
+    normalize_tos_credential_type,
 )
 from agentkit.toolkit.cli.sandbox.sandbox_client import error
 from agentkit.toolkit.volcengine.services.tos_service import (
@@ -206,6 +208,7 @@ def _build_create_tool_request(
     tos_bucket: Optional[str],
     tos_region: str,
     tos_mount_path: str = DEFAULT_TOS_LOCAL_PATH,
+    tos_credential_type: str | tools_types.CredentialType | None = None,
     cpu: int = DEFAULT_CPU,
     model_name: Optional[str] = None,
     model_api_key: Optional[str] = None,
@@ -228,6 +231,16 @@ def _build_create_tool_request(
     is_private_tool = resolved_tool_type == PRIVATE_TOOL_TYPE
     if is_private_tool and not (image_url or "").strip():
         error("--image-url is required when --tool-type Private")
+    resolved_tos_credential_type = normalize_tos_credential_type(
+        tos_credential_type
+    )
+    if (
+        is_private_tool
+        and (tos_bucket or "").strip()
+        and resolved_tos_credential_type
+        == tools_types.CredentialType.TOS_CREDENTIAL_TYPE_IAM_ROLE
+    ):
+        error("TOS IAM Role mounting is only supported for Built-in Tools")
     command = PRIVATE_TOOL_COMMAND if is_private_tool else None
     port = PRIVATE_TOOL_PORT if is_private_tool else None
     envs = (
@@ -256,6 +269,7 @@ def _build_create_tool_request(
         tos_bucket,
         tos_region,
         local_mount_path=tos_mount_path,
+        credential_type=resolved_tos_credential_type,
         tos_service_cls=TOSService,
         tos_service_config_cls=TOSServiceConfig,
     )
@@ -451,6 +465,7 @@ def create_tool(
     tool_name: Optional[str] = None,
     tos_bucket: Optional[str] = None,
     tos_mount_path: str = DEFAULT_TOS_LOCAL_PATH,
+    tos_credential_type: str | tools_types.CredentialType | None = None,
     cpu: int = DEFAULT_CPU,
     model_name: Optional[str] = None,
     model_api_key: Optional[str] = None,
@@ -508,6 +523,7 @@ def create_tool(
         tos_bucket=tos_bucket,
         tos_region=tos_region,
         tos_mount_path=tos_mount_path,
+        tos_credential_type=tos_credential_type,
         cpu=cpu,
         model_name=model_name,
         model_api_key=model_api_key,
@@ -571,6 +587,15 @@ def create_command(
             f"Defaults to {DEFAULT_TOS_LOCAL_PATH} when omitted."
         ),
     ),
+    tos_credential_type: Optional[str] = typer.Option(
+        None,
+        "--tos-credential-type",
+        help=(
+            "TOS mount authentication: access-key or iam-role. "
+            "IAM Role is only supported for Built-in Tools. "
+            "Defaults to access-key."
+        ),
+    ),
     cpu: int = typer.Option(
         DEFAULT_CPU,
         "--cpu",
@@ -672,6 +697,13 @@ def create_command(
         tos_mount = config_default_if_unprovided(
             ctx, "tos_mount", "tos-mount", tos_mount, data=config_defaults
         )
+        tos_credential_type = config_default_if_unprovided(
+            ctx,
+            "tos_credential_type",
+            "tos-credential-type",
+            tos_credential_type,
+            data=config_defaults,
+        )
         cpu = config_default_if_unprovided(
             ctx,
             "cpu",
@@ -777,6 +809,11 @@ def create_command(
         )
         if tos_mount is not None and not (tos_bucket or "").strip():
             error("--tos-mount requires --tos-bucket")
+        if (
+            tos_credential_type is not None
+            and not (tos_bucket or "").strip()
+        ):
+            error("--tos-credential-type requires --tos-bucket")
         model_provider_was_provided = param_was_provided(ctx, "model_provider")
         model_base_url_was_provided = param_was_provided(ctx, "model_base_url")
         result = create_tool(
@@ -784,6 +821,9 @@ def create_command(
             tool_name=tool_name,
             tos_bucket=tos_bucket,
             tos_mount_path=tos_mount or DEFAULT_TOS_LOCAL_PATH,
+            tos_credential_type=(
+                tos_credential_type or DEFAULT_TOS_CREDENTIAL_TYPE
+            ),
             cpu=cpu,
             model_name=model_name,
             model_api_key=model_api_key,

agentkit/toolkit/cli/sandbox/config_store.py

@@ -157,6 +157,11 @@ CONFIG_KEY_SPECS: dict[str, ConfigKeySpec] = {
     "cpu": ConfigKeySpec(("tool", "cpu"), _int_value, VALID_CPU_VALUES),
     "tos-bucket": ConfigKeySpec(("tool", "tos_bucket"), _str_value),
     "tos-mount": ConfigKeySpec(("tool", "tos_mount"), _str_value),
+    "tos-credential-type": ConfigKeySpec(
+        ("tool", "tos_credential_type"),
+        _str_value,
+        ("access-key", "iam-role"),
+    ),
     "role-name": ConfigKeySpec(("tool", "role_name"), _str_value),
     "enable-snapshot": ConfigKeySpec(("tool", "enable_snapshot"), _bool_value),
     "websearch-apikey": ConfigKeySpec(("tool", "websearch_apikey"), _str_value),

agentkit/toolkit/cli/sandbox/tos_config.py

@@ -29,6 +29,35 @@ from agentkit.toolkit.volcengine.services.tos_service import (
 DEFAULT_TOS_BUCKET_PATH = "/sandbox-session/default/default"
 DEFAULT_TOS_LOCAL_PATH = "/home/gem/workspace"
 DEFAULT_SANDBOX_WORKSPACE = "/home/gem"
+DEFAULT_TOS_CREDENTIAL_TYPE = (
+    tools_types.CredentialType.TOS_CREDENTIAL_TYPE_ACCESS_KEY
+)
+
+
+def normalize_tos_credential_type(
+    value: str | tools_types.CredentialType | None,
+) -> tools_types.CredentialType:
+    if isinstance(value, tools_types.CredentialType):
+        return value
+
+    normalized = (value or "").strip().upper().replace("-", "_")
+    aliases = {
+        "": DEFAULT_TOS_CREDENTIAL_TYPE,
+        "ACCESS_KEY": tools_types.CredentialType.TOS_CREDENTIAL_TYPE_ACCESS_KEY,
+        "TOS_CREDENTIAL_TYPE_ACCESS_KEY": (
+            tools_types.CredentialType.TOS_CREDENTIAL_TYPE_ACCESS_KEY
+        ),
+        "IAM_ROLE": tools_types.CredentialType.TOS_CREDENTIAL_TYPE_IAM_ROLE,
+        "TOS_CREDENTIAL_TYPE_IAM_ROLE": (
+            tools_types.CredentialType.TOS_CREDENTIAL_TYPE_IAM_ROLE
+        ),
+    }
+    credential_type = aliases.get(normalized)
+    if credential_type is None:
+        error(
+            "--tos-credential-type must be one of: access-key, iam-role"
+        )
+    return credential_type
 
 
 def resolve_tos_bucket(tos_bucket: Optional[str]) -> str:
@@ -50,6 +79,7 @@ def build_create_tool_tos_mount_config(
     region: str,
     *,
     local_mount_path: str = DEFAULT_TOS_LOCAL_PATH,
+    credential_type: str | tools_types.CredentialType | None = None,
     tos_service_cls=TOSService,
     tos_service_config_cls=TOSServiceConfig,
 ) -> tools_types.TosMountForCreateTool | None:
@@ -58,6 +88,25 @@ def build_create_tool_tos_mount_config(
 
     resolved_bucket = resolve_tos_bucket(tos_bucket)
     resolved_local_mount_path = resolve_tos_mount_path(local_mount_path)
+    resolved_credential_type = normalize_tos_credential_type(credential_type)
+    if (
+        resolved_credential_type
+        == tools_types.CredentialType.TOS_CREDENTIAL_TYPE_IAM_ROLE
+    ):
+        return tools_types.TosMountForCreateTool(
+            EnableTos=True,
+            CredentialType=resolved_credential_type,
+            MountPoints=[
+                tools_types.TosMountMountPointsItemForCreateTool(
+                    BucketName=resolved_bucket,
+                    BucketPath=DEFAULT_TOS_BUCKET_PATH,
+                    Endpoint=TOSService.build_mount_endpoint(region),
+                    LocalMountPath=resolved_local_mount_path,
+                    ReadOnly=False,
+                )
+            ],
+        )
+
     service = tos_service_cls(
         tos_service_config_cls(
             bucket=resolved_bucket,
@@ -76,6 +125,9 @@ def to_create_tool_tos_mount_config(
 ) -> tools_types.TosMountForCreateTool:
     return tools_types.TosMountForCreateTool(
         EnableTos=True,
+        CredentialType=(
+            tools_types.CredentialType.TOS_CREDENTIAL_TYPE_ACCESS_KEY
+        ),
         Credentials=tools_types.TosMountCredentialsForCreateTool(
             AccessKeyId=mount_config.credentials.access_key_id,
             SecretAccessKey=mount_config.credentials.secret_access_key,

agentkit/toolkit/executors/init_executor.py

@@ -131,13 +131,19 @@ TEMPLATES = {
 }
 
 
-# `.env.example` written into a harness directory. Carries only the Volcengine
-# deploy credentials; copy to `.env` and fill in the AK/SK before deploying.
+# `.env.example` written into a harness directory. Copy it to `.env` and fill in
+# the credential pair for the selected cloud provider before deploying.
 _HARNESS_ENV_EXAMPLE = """\
 # Volcengine credentials for harness deploy. Copy this file to `.env` and fill in.
 VOLCENGINE_ACCESS_KEY=
 VOLCENGINE_SECRET_KEY=
 # VOLCENGINE_REGION=cn-beijing
+
+# BytePlus credentials (uncomment these lines and set CLOUD_PROVIDER=byteplus).
+# CLOUD_PROVIDER=byteplus
+# BYTEPLUS_ACCESS_KEY=
+# BYTEPLUS_SECRET_KEY=
+# BYTEPLUS_REGION=ap-southeast-1
 """
 
 # Container image for the harness server. The base image's apt mirror is an

agentkit/toolkit/harness/config_builder.py

@@ -23,6 +23,7 @@ def build_agentkit_config(
     envs: Dict[str, str],
     auth: Optional[Dict[str, Any]] = None,
     runtime_id: str = "Auto",
+    cloud_provider: Optional[str] = None,
 ) -> Dict[str, Any]:
     """Build the cloud AgentKit launch config dict (auto-provision).
 
@@ -37,7 +38,8 @@ def build_agentkit_config(
 
     When ``auth`` (a normalized ``{discovery_url, allowed_ids}`` block) is given,
     the runtime is gated by OAuth2/JWT (``custom_jwt``); otherwise it keeps the
-    default API-key auth (``key_auth``).
+    default API-key auth (``key_auth``). ``cloud_provider`` pins the generated
+    launch config to the same provider used to resolve credentials and region.
     """
     cloud: Dict[str, Any] = {
         "region": region,
@@ -64,16 +66,20 @@ def build_agentkit_config(
         cloud["runtime_apikey_name"] = "Auto"
         cloud["runtime_apikey"] = "Auto"
         cloud["runtime_jwt_allowed_clients"] = []
+    common: Dict[str, Any] = {
+        "agent_name": runtime_name,
+        "entry_point": "app.py",
+        "description": "Harness Server - VeADK",
+        "language": "Python",
+        "language_version": "3.12",
+        "runtime_envs": envs,
+        "launch_type": "cloud",
+    }
+    if cloud_provider:
+        common["cloud_provider"] = cloud_provider
+
     return {
-        "common": {
-            "agent_name": runtime_name,
-            "entry_point": "app.py",
-            "description": "Harness Server - VeADK",
-            "language": "Python",
-            "language_version": "3.12",
-            "runtime_envs": envs,
-            "launch_type": "cloud",
-        },
+        "common": common,
         "launch_types": {"cloud": cloud},
         "docker_build": {},
     }

agentkit/toolkit/harness/deploy.py

@@ -28,7 +28,6 @@ from typing import Any, Callable, Dict, Optional, Union
 
 from ..models import LifecycleResult
 from ..reporter import Reporter
-
 from .config_builder import build_agentkit_config
 from .env_mapping import to_runtime_env
 
@@ -43,9 +42,9 @@ _DEFAULT_HARNESS_NAME = "default"
 HARNESS_TAG_KEY = "agentkit:agenttype"
 HARNESS_TAG_VALUE = "harness"
 
-# Volcengine deploy credentials: needed locally to authenticate the build/deploy,
+# Cloud deploy credentials: needed locally to authenticate the build/deploy,
 # but must never be uploaded into the cloud runtime's environment (the runtime
-# gets its Volcengine access from its IAM role). A harness's own `.env` carries
+# gets its cloud access from its IAM role). A harness's own `.env` carries
 # these for deploy; they are excluded from the runtime env upload (see
 # COMPAT_ENV_EXCLUDE). Credentials a harness genuinely needs at runtime come from
 # its spec instead, so they are not affected.
@@ -56,6 +55,9 @@ _DEPLOY_CREDENTIAL_ENV_KEYS = {
     "VOLC_ACCESSKEY",
     "VOLC_SECRETKEY",
     "VOLC_SESSIONTOKEN",
+    "BYTEPLUS_ACCESS_KEY",
+    "BYTEPLUS_SECRET_KEY",
+    "BYTEPLUS_SESSION_TOKEN",
 }
 
 
@@ -217,16 +219,17 @@ def deploy_harness(
       (``HarnessDeployAborted``); if ``on_conflict`` is ``None`` (e.g. a
       programmatic caller or a non-interactive CLI), it fast-fails.
 
-    Credentials note: a local ``.env`` is loaded for deploy auth, but the
-    Volcengine deploy credentials in it are NOT uploaded into the runtime
+    Credentials note: a local ``.env`` is loaded for deploy auth, but the cloud
+    deploy credentials in it are NOT uploaded into the runtime
     environment (the runtime authenticates via its IAM role); other ``.env`` keys
     are still merged in.
 
     Args:
         name: Harness name; locates ``<name>.harness.json`` and names the runtime.
         path: Directory containing the spec and Dockerfile (default: cwd).
-        region: AgentKit region (default ``cn-beijing`` or ``VOLCENGINE_REGION``).
-        access_key / secret_key: Volcengine credentials (default: ``VOLCENGINE_*`` env).
+        region: AgentKit region (default resolved for the active cloud provider).
+        access_key / secret_key: Explicit cloud credentials (default: resolved from
+            provider-specific environment variables or global configuration).
         discovery_url / allowed_id: OAuth2/JWT overrides for the spec ``auth`` block.
         reporter: Progress reporter forwarded to the launch (default: silent).
         on_conflict: Callback consulted when a single same-name harness exists;
@@ -242,12 +245,13 @@ def deploy_harness(
     """
     # Heavy imports are lazy: this module is imported by `agentkit.toolkit.sdk`
     # at package init, and these pull in the runtime client / executors.
-    from agentkit.toolkit.sdk.lifecycle import launch
-    from agentkit.toolkit.models import PreflightMode
-    from agentkit.toolkit.config import utils as cfg_utils
-    from agentkit.toolkit.config.utils import load_dotenv_file
+    from agentkit.platform import VolcConfiguration, resolve_credentials
     from agentkit.sdk.runtime import types as rt_types
     from agentkit.sdk.runtime.client import AgentkitRuntimeClient
+    from agentkit.toolkit.config import utils as cfg_utils
+    from agentkit.toolkit.config.utils import load_dotenv_file
+    from agentkit.toolkit.models import PreflightMode
+    from agentkit.toolkit.sdk.lifecycle import launch
 
     proj_dir = Path(path).resolve()
     if not proj_dir.is_dir():
@@ -263,26 +267,27 @@ def deploy_harness(
     runtime_name = name
     auth = _resolve_auth(spec.get("auth"), discovery_url, allowed_id)
 
-    # AgentKit authenticates via the Volcengine SDK, which reads VOLC_ACCESSKEY /
-    # VOLC_SECRETKEY from the environment. Mirror whatever AK/SK was passed (or
-    # already set as VOLCENGINE_*) into those names.
-    ak = access_key or os.getenv("VOLCENGINE_ACCESS_KEY", "")
-    sk = secret_key or os.getenv("VOLCENGINE_SECRET_KEY", "")
-    if ak and sk:
-        os.environ["VOLC_ACCESSKEY"] = ak
-        os.environ["VOLC_SECRETKEY"] = sk
-    if not os.getenv("VOLC_ACCESSKEY") or not os.getenv("VOLC_SECRETKEY"):
-        raise ValueError(
-            "Volcengine credentials are required. Pass access_key / secret_key, "
-            "or set VOLCENGINE_ACCESS_KEY / VOLCENGINE_SECRET_KEY."
-        )
-
-    resolved_region = region or os.getenv("VOLCENGINE_REGION") or "cn-beijing"
+    # Use the shared platform abstraction so credentials and region follow the
+    # active provider (Volcengine or BytePlus) consistently with other clients.
+    platform_config = VolcConfiguration(region=region or None)
+    credentials = resolve_credentials(
+        "agentkit",
+        explicit_access_key=access_key,
+        explicit_secret_key=secret_key,
+        platform_config=platform_config,
+    )
+    resolved_region = platform_config.region
+    cloud_provider = platform_config.provider.value
 
     # Resolve a name collision into a deploy mode. The harness config defaults to
     # `runtime_id: Auto` (create new); an existing same-name harness can instead
     # be updated in place (new version) after confirmation.
-    client = AgentkitRuntimeClient(region=resolved_region)
+    client = AgentkitRuntimeClient(
+        access_key=credentials.access_key,
+        secret_key=credentials.secret_key,
+        region=resolved_region,
+        session_token=credentials.session_token or "",
+    )
     matches = _find_runtimes_by_name(client, runtime_name)
     update_runtime_id = None
     if len(matches) > 1:
@@ -328,6 +333,7 @@ def deploy_harness(
         runtime_envs,
         auth,
         runtime_id=update_runtime_id or "Auto",
+        cloud_provider=cloud_provider,
     )
 
     # AgentKit's launch path exposes no hook for runtime tags, so tag the runtime
@@ -349,11 +355,26 @@ def deploy_harness(
     cwd = os.getcwd()
     os.chdir(proj_dir)
     AgentkitRuntimeClient.create_runtime = _create_runtime_with_harness_tag
-    # Keep deploy-only Volcengine credentials in the local .env out of the
+    # Keep deploy-only cloud credentials in the local .env out of the
     # uploaded runtime environment (the compat layer auto-loads .env). Scoped to
     # this launch and restored afterwards.
     prev_exclude = cfg_utils.COMPAT_ENV_EXCLUDE
     cfg_utils.COMPAT_ENV_EXCLUDE = set(prev_exclude) | _DEPLOY_CREDENTIAL_ENV_KEYS
+    provider_prefix = "BYTEPLUS" if cloud_provider == "byteplus" else "VOLCENGINE"
+    deploy_env = {
+        "VOLC_ACCESSKEY": credentials.access_key,
+        "VOLC_SECRETKEY": credentials.secret_key,
+        "VOLC_SESSIONTOKEN": credentials.session_token,
+        f"{provider_prefix}_ACCESS_KEY": credentials.access_key,
+        f"{provider_prefix}_SECRET_KEY": credentials.secret_key,
+        f"{provider_prefix}_SESSION_TOKEN": credentials.session_token,
+    }
+    previous_deploy_env = {key: os.environ.get(key) for key in deploy_env}
+    for key, value in deploy_env.items():
+        if value:
+            os.environ[key] = value
+        else:
+            os.environ.pop(key, None)
     try:
         result = launch(
             config_dict=cfg,
@@ -363,6 +384,11 @@ def deploy_harness(
     finally:
         AgentkitRuntimeClient.create_runtime = orig_create_runtime
         cfg_utils.COMPAT_ENV_EXCLUDE = prev_exclude
+        for key, value in previous_deploy_env.items():
+            if value is None:
+                os.environ.pop(key, None)
+            else:
+                os.environ[key] = value
         os.chdir(cwd)
 
     if not result.success:

agentkit/version.py

@@ -12,4 +12,4 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-VERSION = "0.8.4"
+VERSION = "0.8.6"

{agentkit_sdk_python-0.8.4.dist-info → agentkit_sdk_python-0.8.6.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentkit-sdk-python
-Version: 0.8.4
+Version: 0.8.6
 Summary: Python SDK for transforming any AI agent into a production-ready application. Framework-agnostic primitives for runtime, memory, authentication, and tools with volcengine-managed infrastructure.
 Author-email: Xiangrui Cheng <innsdcc@gmail.com>, Yumeng Bao <baoyumeng.123@gmail.com>, Yaozheng Fang <fangyozheng@gmail.com>, Guodong Li <cu.eric.lee@gmail.com>
 License:                                  Apache License

{agentkit_sdk_python-0.8.4.dist-info → agentkit_sdk_python-0.8.6.dist-info}/RECORD

@@ -1,6 +1,6 @@
 agentkit/__init__.py,sha256=l27ZMDslc3VhmmnPZJyrqVvTDoZ0LqhCtM5hw0caHcU,1021
 agentkit/errors.py,sha256=UWlXv0ZsXd_oLTMlxuf4u9-XkTdRYeVZueE--Z3JsHU,1214
-agentkit/version.py,sha256=fKAnVe0_BYK2q2PZxJGyG7eEu4cEnejRK9V0vQ6lftQ,653
+agentkit/version.py,sha256=oiT47ntHQYP5lVwHBKHO62Vrkzn97W8vuO3VRiy71gY,653
 agentkit/apps/__init__.py,sha256=_Na1A4NSaMbVfPbsFKj2U-yI5mytD7W5skMaAOGbauY,2328
 agentkit/apps/base_app.py,sha256=3hZZExL1wyTGWveJEZZoqXN086MzmkVS_WU1vyulIWg,754
 agentkit/apps/utils.py,sha256=IzimIDmT6FS6PV9MLimPh46mq5zT-EjVmnYPxBdyEq0,1934
@@ -53,7 +53,7 @@ agentkit/frameworks/agentcore.py,sha256=L5bdqzVukm7V6esIttPZSHFEc8JiqysU8YxA6_pB
 agentkit/frameworks/langchain.py,sha256=Tcy2HGYqKmcugDSn3OMaD_6uxhsJtZI3o5E8Rw7UJrg,5947
 agentkit/frameworks/langgraph.py,sha256=hSYfh9Gy2vj3UM7zbpl4ZoawypTy6fFbz-Y0YrSS8p0,17651
 agentkit/frameworks/migration.py,sha256=OTIsrqxVOWlrP10D7_2Zt1tGFNWEmmAHqsTuLB7YBhY,4480
-agentkit/frameworks/model_replacement.py,sha256=EtRl617CZqYLNQ6CYKtK4XzObsv778jQCgWpBaJJahk,5196
+agentkit/frameworks/model_replacement.py,sha256=vvU9OKQll9Nvrf0Up4LX1_O79vSa_WDbJ6LavN6ZFbQ,9432
 agentkit/frameworks/strands.py,sha256=KFeTsdVpOyOh-SJvC3jcW8FdhR_5Y3NaGDd6zbuYrXE,20885
 agentkit/frameworks/serving/__init__.py,sha256=EaR0jzP6np8v1gyD6CYlaRoIY1KgBaFosqCmRUgMc2E,302
 agentkit/frameworks/serving/fastapi_mount.py,sha256=LV6gJunwd7aU8MFdDYSxeaIUYWvYwMl2Am1J07ddP0A,1958
@@ -101,7 +101,7 @@ agentkit/sdk/skills/client.py,sha256=aZLskCgixIBq9PIkMErWLzbySSYioTZrNwHYwksQPcQ
 agentkit/sdk/skills/types.py,sha256=3ihqQPVJA84TNlUDIuSi_IA-Z8gZh3qHRmIVpu3ytIw,14909
 agentkit/sdk/tools/__init__.py,sha256=YeCcKcedAqPxmS3LzkqPJOWoz9AVLoqE173cK8gtkHk,636
 agentkit/sdk/tools/client.py,sha256=EpOiDfr_JEFRcSIbWt4oADHxCSx2fFqSUblRh-A0xPQ,7084
-agentkit/sdk/tools/types.py,sha256=uerLcuj2I-3mvKSFUSdLqGQs36oqHqcC2hmMPGCnGYc,31468
+agentkit/sdk/tools/types.py,sha256=SE_dt6jyiEqfRimGDKfvWZmbnzNH325ZucoCgsl_tUM,31979
 agentkit/toolkit/__init__.py,sha256=VZkLRcjybKRHgWvGmLHAm0Gsb1FCUpKmKuJYfZmbfE0,1249
 agentkit/toolkit/context.py,sha256=6CPDjmUwB830JB0OrKGFVNUjeiJ17GPDtbbQBtt6L1w,7554
 agentkit/toolkit/errors.py,sha256=dUqxeYDSBx6npiw4f1T-M1eFsfbnrp0IA0oBszHT4P4,4913
@@ -135,7 +135,7 @@ agentkit/toolkit/cli/cli_skill.py,sha256=nEZXc9CVGop4e0WC-V2AAHqy7to4nw6KnKOtzS2
 agentkit/toolkit/cli/cli_skills.py,sha256=jBgpTb286MvXK4tr-asgmG9HAeVAIRr7k-VAcPYqqVI,41716
 agentkit/toolkit/cli/cli_skills_workflow.py,sha256=kteHk-ajiXZM8W-EghVon7Zb5irT0hXh4pdldCnqQX8,28080
 agentkit/toolkit/cli/cli_status.py,sha256=HP3TDCtqbD4NHPFAOq5LI8nuVLheCk-zo9hrm97K5lE,7645
-agentkit/toolkit/cli/cli_tools.py,sha256=LEDU7Oqx2SF96RjpgCH_i41uc6dw6HDh5Jd0RooQO6I,40888
+agentkit/toolkit/cli/cli_tools.py,sha256=lksz2Qno974GyIum_COCKVqg-0JqH6Okrioz7yHu1LE,41093
 agentkit/toolkit/cli/cli_version.py,sha256=vGZTplakjF4ZoHWGXsxWj3nC29sK4qJ5iHfYtuI0M2A,3080
 agentkit/toolkit/cli/console_reporter.py,sha256=ta9GFUDkPEFfGeANDsza5bZdVXidqhHIfsu_gTyXzDw,6926
 agentkit/toolkit/cli/interactive_config.py,sha256=y5g5aNMJuX2tHUuu2pvacOssx3O3oqs0u_g0ZinyP1c,46133
@@ -147,7 +147,7 @@ agentkit/toolkit/cli/sandbox/agentkit_client.py,sha256=DDYsfB4bHXAbJjcjyitif2qlM
 agentkit/toolkit/cli/sandbox/cli.py,sha256=un89osF6DWuy8yALdqsIGJcKZ7dBMja9Isj-9a6fxcs,2809
 agentkit/toolkit/cli/sandbox/cli_build.py,sha256=43s9ohfj-bM48YNEJ4YKSZMofO63bCzb1hWCswxC2ck,2976
 agentkit/toolkit/cli/sandbox/cli_config.py,sha256=lvAAW1AetRjufBH67YY4ExDPeyxZqY_UU225zz1ia10,4153
-agentkit/toolkit/cli/sandbox/cli_create.py,sha256=vKXaWdtHsx-ua01TbKm4GgRzyzezdXO0J7izjDFKrM4,28991
+agentkit/toolkit/cli/sandbox/cli_create.py,sha256=StNSWoHJk7QF04iuXAQYxwyPClmPrsEru0UqPczFnxo,30491
 agentkit/toolkit/cli/sandbox/cli_delete.py,sha256=S5nfDIbWt7Kqh4vYKAkG1Db9LaYX-mcu4H9rWN_KxLY,11215
 agentkit/toolkit/cli/sandbox/cli_exec.py,sha256=eoMX73akvtUMztZL4XoVkSQxnVQ5lyC8XZHVHLHxhP4,25640
 agentkit/toolkit/cli/sandbox/cli_init.py,sha256=X9jfqAmNg2bJA32sT0BvcHEMJSYiXHQec-UDx9n0hXg,4102
@@ -159,7 +159,7 @@ agentkit/toolkit/cli/sandbox/cli_run.py,sha256=Pa5n9TnCzhPB9GWaPxwIUzCcn0vuFH3mC
 agentkit/toolkit/cli/sandbox/cli_scp.py,sha256=CzhaUfRDfrGt78sx2W8evLVRwY5pAgSEvzA4tko4cKM,22617
 agentkit/toolkit/cli/sandbox/cli_shell.py,sha256=22nBh-Mq1VC5fSLWJXZKenzppm_EglP1qelVR5nbfLg,5392
 agentkit/toolkit/cli/sandbox/cli_web.py,sha256=s3JP-OuMNCfjsvsOStTOrTNhnY3xN-NI0inCIqqzrL8,3499
-agentkit/toolkit/cli/sandbox/config_store.py,sha256=vsYwuW9SkCtSCmkg0b7OATTx6gLm345yda6szCafz08,21632
+agentkit/toolkit/cli/sandbox/config_store.py,sha256=W50aIu15hl2MpbRgRUU2yQkoTAr5Mvqg60Wy8TmXJD8,21778
 agentkit/toolkit/cli/sandbox/env_config.py,sha256=mQKKtRG7FXG0vhizEMpkzH9_g2agCQt9FDKgSGf-Xjs,26184
 agentkit/toolkit/cli/sandbox/git_config.py,sha256=r0akBAe8njIwrZeQS96oaICVHDPJ6zozW1jF-q_B1HU,6096
 agentkit/toolkit/cli/sandbox/model_config.py,sha256=A3TagXhjYB1HWtsEDIRVUPmVOfc6c_e7qcipSkqCBLk,23752
@@ -167,7 +167,7 @@ agentkit/toolkit/cli/sandbox/sandbox_client.py,sha256=-0-tom8tzR7rFdXDWupOI67A9L
 agentkit/toolkit/cli/sandbox/session_create.py,sha256=xgZTXxhrCmuXFxuz_nOx8JINUrB3Jglg2GTQTBboQ7I,16287
 agentkit/toolkit/cli/sandbox/session_sync.py,sha256=Xz7aufW7CT5Vs72utOew1rpip5yDD-_M3GUaVVyMQko,3051
 agentkit/toolkit/cli/sandbox/tool_resolve.py,sha256=NHnu_H0-uo7ur8PfSvgJ9o78xuB8etqel4tDcxergKg,20516
-agentkit/toolkit/cli/sandbox/tos_config.py,sha256=gFdTWmr_FByqSQl_YC5nkIv5h04op9yGYq0V6lLc8gc,4787
+agentkit/toolkit/cli/sandbox/tos_config.py,sha256=6snQoI2E7xBWMasLtWV9U3jjwnbtouIUi6X44DdmDG4,6724
 agentkit/toolkit/config/__init__.py,sha256=EtArtF-LsaQYjU9Wc-G_xelqHmlo2XrOWiVqK6NVKA8,2505
 agentkit/toolkit/config/choice_resolvers.py,sha256=9OxVevL9gLTNqVpMvsDP_rC8ZFF6SPbhLJXrqXdf9xM,5958
 agentkit/toolkit/config/cloud_provider.py,sha256=fvG-TOfbDsPlda42h2JSZyfgxojAeTD12tYCsp0nww8,2747
@@ -193,13 +193,13 @@ agentkit/toolkit/executors/__init__.py,sha256=ocEKR3rqbIrNtHukTfx1yBYKziIJWNcT0b
 agentkit/toolkit/executors/base_executor.py,sha256=b-Mm_X_idN7hrL4d6wyER_ZQkIsdZEXvYxbgY8i6YlQ,21565
 agentkit/toolkit/executors/build_executor.py,sha256=BfTj-yVlmDJquzpsdXwl_npQJhkda-OY8Qb1cNH3B7M,7401
 agentkit/toolkit/executors/deploy_executor.py,sha256=aMF7uNznU_Toqomllel9Il86iSTycqmL76K_BfeTB6U,6694
-agentkit/toolkit/executors/init_executor.py,sha256=Z9HIjHtUCjnnZel9yPgOH-Qpde1syqIZPq5Sa6ikqQk,36646
+agentkit/toolkit/executors/init_executor.py,sha256=Yr2noIfxBXfVHg3Ppz0KEDFXIXNn1E3vyizpD0X8-_Q,36829
 agentkit/toolkit/executors/invoke_executor.py,sha256=xFqeFRAbt--PZeOzB6Sdij4JRTdOHt7bp4KoaCqOXY4,6545
 agentkit/toolkit/executors/lifecycle_executor.py,sha256=J4bBJ8QomKCttuF_Ruqk27PeAcx78Dyrrnnc2kLgMWI,16928
 agentkit/toolkit/executors/status_executor.py,sha256=mFta-aBUzvrlkpvjmDiyFs-hq9FZMZdHfXd0F7wTZxs,5353
 agentkit/toolkit/harness/__init__.py,sha256=EIPqG_tzXxslqHL7Zr0fd8x4VgRs14z7mNF6HIiCv28,1040
-agentkit/toolkit/harness/config_builder.py,sha256=v3YmdD7sOmLUDHj0y0v_LOXetM6RttxGQBxwP-glQHE,3091
-agentkit/toolkit/harness/deploy.py,sha256=7Z5msDq_GfbGrx1zwvnT8VYRRDH31mrt953wBK1tcPA,16270
+agentkit/toolkit/harness/config_builder.py,sha256=QLxSs3hGaqD39JTKHAJKd7o9ysis9GsHf0fMQ1LDz6E,3328
+agentkit/toolkit/harness/deploy.py,sha256=7Y1Gf1glb622RrBNAzCZioPeWtG_ldQLTay6DwDzMbE,17269
 agentkit/toolkit/harness/env_mapping.py,sha256=xcApQnVXW8ffcDoI2CpIU08llsUUxS3KbUggruFWjaQ,8567
 agentkit/toolkit/resources/samples/a2a.py,sha256=eKM56lrjnNLD35lT3Py_E7sN9eCGU4HdLOHrVz_xLwg,2867
 agentkit/toolkit/resources/samples/agent_server.py,sha256=tVD79gT8qhP3dLncKJPWhCjXNDKmRYB0DSyZFoRKiS0,2282
@@ -285,9 +285,9 @@ agentkit_identity/py.typed,sha256=AbpHGcgLb-kRsJGnwFEktk7uzpZOCcBY74-YBdrKVGs,1
 agentkit_identity/runtime.py,sha256=hQHLvbAK760teFPTGZ0RG9Ed5DQAXAqIdaAm9ojzS34,14423
 agentkit_identity/transport.py,sha256=kwGHSEQ5Qcn1kIu6N6DVid7MdDUMj5uaIRIUA_tJ3cM,7693
 agentkit_identity/types.py,sha256=lT8KQz1pG0rgdy5Gh6WnM0mq9VqCsWSE41Z8Fw3DHZo,7358
-agentkit_sdk_python-0.8.4.dist-info/licenses/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
-agentkit_sdk_python-0.8.4.dist-info/METADATA,sha256=CmkfzVUQCoQ62WFvXFle1Il9-B77xpfEU-NOgAwtPUQ,21580
-agentkit_sdk_python-0.8.4.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
-agentkit_sdk_python-0.8.4.dist-info/entry_points.txt,sha256=fhzZUsvsLXeB4mPaa0SBQiTBqFT404uDAKPaePAOUAE,58
-agentkit_sdk_python-0.8.4.dist-info/top_level.txt,sha256=Kw8DVx7vzg-oUh7xC_hBZw7OwKW3Y_fo_8rkWOL1d5o,27
-agentkit_sdk_python-0.8.4.dist-info/RECORD,,
+agentkit_sdk_python-0.8.6.dist-info/licenses/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
+agentkit_sdk_python-0.8.6.dist-info/METADATA,sha256=NN8bgpy6cuQ8yr3ZIb4xeKU1x2PlWCuX9khZzEU-aSk,21580
+agentkit_sdk_python-0.8.6.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
+agentkit_sdk_python-0.8.6.dist-info/entry_points.txt,sha256=fhzZUsvsLXeB4mPaa0SBQiTBqFT404uDAKPaePAOUAE,58
+agentkit_sdk_python-0.8.6.dist-info/top_level.txt,sha256=Kw8DVx7vzg-oUh7xC_hBZw7OwKW3Y_fo_8rkWOL1d5o,27
+agentkit_sdk_python-0.8.6.dist-info/RECORD,,