[SaladDay]

Upgrades the pinned official Agents API from openai-python 3.13.0 to 3.45.0 (9b3458a). The official OpenAPI moves to openai-openapi 820f97a, the last spec commit whose Agents, Vaults, Files and Skills schemas match that SDK; the next one adds a Turn error code the SDK lacks. /v1 grows from 58 to 73 operations.

Implemented

• POST /vaults/{vault_id}: Vault update, with the official update limits on metadata.
• GET /agents/sessions/{session_id}/turns/{turn_id}/items: root Turn Items, using the Session Items projection and pagination.
• A metadata[key]=value filter on Session, Vault and Credential lists. A repeated key and an empty key return 400.
• Credential metadata, through forward migration 000011.
• Vault and Credential limit now follows the shared 1–100 rule. Values are no longer clamped.
• Agent compaction and experimental:
  • Both are saved and returned.
  • experimental carries its official default.
  • A null compaction clears the saved value.
  • Session overrides apply per member.
• Hosted and Template desktop responses are {"enabled": false}. Hosted responses carry container_size: null.

Rejected with a typed error and recorded in the ledger

• These routes answer 404 unsupported_operation after the Beta-header and authentication checks:
  • the 10 Automations routes;
  • POST/GET /agents/environments;
  • Session traces.
• These return 400 naming the param:
  • Session update agent with members;
  • review: auto_review;
  • environment.environment_id and container_size;
  • desktop.enabled: true;
  • a nonempty blocked_domains;
  • environment_variable Credentials;
  • computer-use approval input.
• compaction.async: true, experimental.time_awareness: true and the automations and computer_use tools are saved, but Session admission rejects them on every Harness because no Harness runs them natively. ultrafast follows the existing service-tier declarations.
• Core never reports the new suspended state or the suspended, expired and reset Environment events. This is recorded as a gap.

Other changes

• The generator handles the new spec shapes. All generated contracts and TypeScript client types are regenerated, and agents-client is adapted.
• The Skills single-ZIP gap is closed, because SDK 3.45.0 sends the part.
• Every SDK link points at the new commit. English and Chinese docs are updated together.
• The Web and Parsar test fixtures carry the new required fields: hosted desktop and Credential metadata.

Verification

• go vet ./..., make check-openapi and make openapi all pass, and regeneration leaves no diff.
• Focused Go tests pass for api, execution, agents, vaults, harnessconfig, contracts/agents-api/v1 and the DB-backed sessionpg/vaultpg.
• With SDK 3.45.0 against a built Core and Postgres, these pass:
  • official_schema_test.py;
  • official_client.py;
  • TestAgentUpdateOfficialClient, TestSessionAgentFilterOfficialClient and the list-query, function-input, template-composition and Skills integration tests.
• packages/agents-client passes its typecheck and vitest (741). apps/web and example/parsar typechecks pass.
• pnpm --dir website check-translations passes.
• Two independent reviews found issues, and every finding is fixed in this branch.
• TestTemplateNullSelectionOfficialClientPostgres fails the same way on main with SDK 3.13.0 and is not touched here.