feat(sdk): expose Managed Agents operation-level APIs

Command hosts could only reach Managed Agents through the declarative
project workflows, so per-resource reads, cursor pagination, raw session
events and deployment actions had no public entry point.

- Add internal/core/managed-api-runtime.ts: cursor-preserving reads for
  agents, agent versions, environments, vaults, skills (list/get/versions/
  download) and files, plus session update/archive/raw-event-send and
  deployment get/run/pause/unpause with run history.
- Resolve the target provider from ManagedApiTarget and fail fast with a
  UserError when several providers are configured or the adapter lacks the
  operation; publish per-operation capability metadata (supported/auth/
  reason) so hosts can explain unsupported surfaces (model catalog, Thread
  resources, MCP OAuth) without probing the API.
- Extend ProviderAdapter with the matching optional methods and implement
  them on the Bailian adapter; keep the raw wire payload on `attributes`
  for agent/environment/vault/skill/file DTOs.
- Support `types` and `created_at[*]` filters on event listing plus
  status/created-at filters on session listing, with client-side type
  filtering where the server has no support.
- Resume streamSessionEvents from `after_id` on providers without native
  stream cursors by replaying paginated history and polling, de-duping by
  event id and stopping on terminal session status.
- Carry `session_thread_id` through the Bailian event mapper and the event
  sanitizer so child-agent threads stay attributable.
- Document the new public layers and add a minor changeset.

Tests: packages/sdk/tests/unit/bailian-managed-api.test.ts (new) and
core-session-runtime.test.ts (client-side type filter, after-id replay).

Author: chenanran555

.changeset/calm-otters-list.md

@@ -0,0 +1,5 @@
+---
+"@openagentpack/sdk": minor
+---
+
+Expose Bailian Managed Agents operation-level reads, cursor pagination, session events, file downloads, deployment actions, and provider capability metadata.

packages/sdk/docs/public-api-layers.md

@@ -18,10 +18,17 @@ The public entry exposes domain workflows that return structured domain results.
 New CLI and WebUI behavior should start here.
 
 - Project/resource workflows: config resolution, planning, apply, and destroy.
-- Agent workflows: agent listing, readiness, resource planning, and sync.
-- Session workflows: creation, runs, follow-up messages, event listing, and
-  summaries.
-- Deployment workflows: listing, details, and runs.
+- Agent workflows: agent listing/detail/version reads, readiness, resource
+  planning, and sync.
+- Managed-resource reads: environment, skill/version/download, vault, and file
+  metadata/content APIs with opaque cursor preservation.
+- Session workflows: creation, list/get/update/archive/delete, runs, follow-up
+  messages, raw event send/list/stream, and summaries. Managed Agents child
+  threads remain event metadata (`session_thread_id`); there is no independent
+  public Thread resource API.
+- Deployment workflows: list/get/search, run history, run, pause, and unpause.
+- Operation capabilities: provider-scoped support/auth/reason metadata for
+  API-oriented command hosts.
 - State workflows: a file/in-memory `StateManager` plus state-address parsing.
 - Validation/model workflows: config validation and provider/model discovery.
 

packages/sdk/src/index.ts

@@ -79,7 +79,68 @@ export {
 	runDeploymentForContext,
 } from "./internal/core/deployment-runtime.ts";
 
-export type { DeploymentListFilter, DeploymentListResult } from "./internal/providers/interface.ts";
+export type {
+	DeploymentInfo,
+	DeploymentListFilter,
+	DeploymentListResult,
+	DeploymentRunResult,
+} from "./internal/providers/interface.ts";
+
+export {
+	archiveRemoteSession,
+	downloadRemoteFile,
+	downloadRemoteSkill,
+	getManagedAgentProviderCapabilities,
+	getRemoteAgent,
+	getRemoteDeployment,
+	getRemoteDeploymentRun,
+	getRemoteEnvironment,
+	getRemoteSkill,
+	getRemoteSkillDownloadInfo,
+	getRemoteSkillVersion,
+	getRemoteVault,
+	listRemoteAgents,
+	listRemoteAgentVersions,
+	listRemoteDeploymentRuns,
+	listRemoteDeployments,
+	listRemoteEnvironments,
+	listRemoteFiles,
+	listRemoteSkills,
+	listRemoteSkillVersions,
+	listRemoteVaults,
+	runRemoteDeployment,
+	sendRemoteSessionEvents,
+	setRemoteDeploymentPaused,
+	updateRemoteSession,
+} from "./internal/core/managed-api-runtime.ts";
+export type { ManagedApiTarget } from "./internal/core/managed-api-runtime.ts";
+export type {
+	AgentListOptions,
+	AgentPage,
+	AgentVersionListOptions,
+	CursorListOptions,
+	CursorPage,
+	DeploymentRunInfo,
+	DeploymentRunPage,
+	EnvironmentListOptions,
+	EnvironmentPage,
+	FileListOptions,
+	FilePage,
+	ManagedAgentOperationAuth,
+	ManagedAgentOperationCapability,
+	ManagedAgentProviderCapabilities,
+	SessionEventInput,
+	SessionEventSendResult,
+	SessionUpdateInput,
+	SkillDownloadInfo,
+	SkillListOptions,
+	SkillPage,
+	SkillVersionInfo,
+	SkillVersionListOptions,
+	SkillVersionPage,
+	VaultListOptions,
+	VaultPage,
+} from "./internal/types/managed-api.ts";
 
 export type {
 	DestroyDefaultMemoryStoreResult,
@@ -198,8 +259,13 @@ export {
 	type ProviderConfig,
 	type ProviderConfigProvider,
 } from "./internal/provider-config.ts";
-export type { ProviderSessionInfo } from "./internal/types/session.ts";
-export type { ProviderSessionEvent } from "./internal/types/session-event.ts";
+export type { ProviderSessionInfo, SessionFilter, SessionListResult } from "./internal/types/session.ts";
+export type {
+	EventListOptions,
+	EventStreamOptions,
+	ProviderSessionEvent,
+	ProviderSessionEventList,
+} from "./internal/types/session-event.ts";
 export type { ProviderFileInfo } from "./internal/types/file.ts";
 export type { ProviderSkillInfo } from "./internal/types/skill-info.ts";