@cap-js/agents 0.9.1 → 0.9.2

package/README.md

@@ -1,5 +1,3 @@
-[![REUSE status](https://api.reuse.software/badge/github.com/cap-js/agents)](https://api.reuse.software/info/github.com/cap-js/agents)
-
 # SAP Cloud Application Programming Model, agent development plugin for Node.js
 
 ## About this project
@@ -54,7 +52,7 @@ Both approaches start from a CDS service annotated with `@agent` (as shown in [R
 
 ### Agentify Existing CAP Services
 
-With `@agent` alone, the plugin auto-generates tools from the service's entities and actions, creates a ReAct agent loop, and serves it as a remote agent — no code required.
+With `@agent` alone, the plugin auto-generates tools from the service's entities and actions, creates a [ReAct agent](https://arxiv.org/abs/2210.03629) loop, and serves it as a remote agent — no code required.
 
 ```cds
 @agent
@@ -135,6 +133,7 @@ The following capabilities are experimental and documented separately. Their pub
 - [Configuration](.docs/configuration.md) — using multiple models, global and per-service settings, file I/O, and push notifications
 - [Quota Enforcement](.docs/quota.md) — configurable rate limits and resource quotas
 - [Audit Logging](.docs/audit-logging.md) — immutable audit trail of agent decisions and tool usage
+- [Data Privacy](.docs/data-privacy.md) — deletion of message history
 - [Telemetry](.docs/telemetry.md) — OpenTelemetry metrics, tracing, and MLflow export
 - [Content Filter](.docs/content-filter.md) — SAP AI Core content filtering and prompt injection shielding
 

package/index.cds

@@ -50,12 +50,23 @@ entity Tasks : managed {
        * Files written by agent via /outputs/ path for this task.
        */
       outputFiles    : Composition of many Attachments;
+
+      /** LangGraph checkpoints created by this task. Cascade-deleted. */
+      checkpoints    : Composition of many Checkpoints
+                         on checkpoints.task_id = taskId;
+
+      /** LangGraph checkpoint writes tied to this task. Cascade-deleted. */
+      checkpointWrites : Composition of many CheckpointWrites
+                           on checkpointWrites.task_id = taskId;
 }
 
 entity Checkpoints : managed {
   key thread_id            : String;
   key checkpoint_ns        : String default '';
   key checkpoint_id        : String;
+      task_id              : String;
+      task                 : Association to one Tasks
+                               on task.taskId = task_id;
       parent_checkpoint_id : String;
       parent               : Association to one Checkpoints
                                on parent.checkpoint_id = parent_checkpoint_id;

package/lib/agents/markdown/backends/outputs-backend.js

@@ -9,6 +9,7 @@
  *
  */
 
+import { getConfig } from "@langchain/langgraph"
 import { isTextMime, globToRegex } from "./mime-utils.js"
 
 function inferMimeType(name) {
@@ -38,11 +39,14 @@ function inferMimeType(name) {
 }
 
 export class OutputsBackend {
-  constructor(taskId, fileStore) {
-    this.taskId = taskId
+  constructor(fileStore) {
     this.fileStore = fileStore
   }
 
+  _taskId() {
+    return getConfig()?.configurable?._taskId || ""
+  }
+
   // CompositeBackend strips the route prefix (/outputs/) before delegating,
   // so paths arrive here as either "/name" (stripped) or "/outputs/name" (direct).
   // _name() handles both forms.
@@ -54,19 +58,19 @@ export class OutputsBackend {
     const name = this._name(filePath)
     const mimeType = options.mimeType || inferMimeType(name)
     const buf = typeof content === "string" ? Buffer.from(content, "utf-8") : Buffer.from(content)
-    await this.fileStore.saveOutputFile(this.taskId, name, mimeType, buf)
+    await this.fileStore.saveOutputFile(this._taskId(), name, mimeType, buf)
     return { success: true }
   }
 
   async exists(filePath) {
     const name = this._name(filePath)
-    const files = await this.fileStore.listOutputFilesMeta(this.taskId)
+    const files = await this.fileStore.listOutputFilesMeta(this._taskId())
     return files.some((f) => f.name === name)
   }
 
   async stat(filePath) {
     const name = this._name(filePath)
-    const files = await this.fileStore.listOutputFilesMeta(this.taskId)
+    const files = await this.fileStore.listOutputFilesMeta(this._taskId())
     const file = files.find((f) => f.name === name)
     if (!file) return null
     return { name: file.name, mimeType: file.mimeType, size: file.size }
@@ -75,12 +79,12 @@ export class OutputsBackend {
   // CompositeBackend re-prepends the route prefix to paths returned here,
   // so return bare "/<name>" paths (without /outputs/) to avoid double-prefix.
   async list(_dirPath) {
-    const files = await this.fileStore.listOutputFilesMeta(this.taskId)
+    const files = await this.fileStore.listOutputFilesMeta(this._taskId())
     return files.map((f) => `/${f.name}`)
   }
 
   async ls(_path) {
-    const files = await this.fileStore.listOutputFilesMeta(this.taskId)
+    const files = await this.fileStore.listOutputFilesMeta(this._taskId())
     return {
       files: files.map((f) => ({
         path: `/${f.name}`,
@@ -93,7 +97,7 @@ export class OutputsBackend {
 
   async glob(pattern, _path) {
     const re = globToRegex(pattern)
-    const files = await this.fileStore.listOutputFilesMeta(this.taskId)
+    const files = await this.fileStore.listOutputFilesMeta(this._taskId())
     return {
       files: files
         .filter((f) => re.test(f.name))
@@ -103,7 +107,7 @@ export class OutputsBackend {
 
   async grep(pattern, _path, glob) {
     const reGlob = glob ? globToRegex(glob) : null
-    const files = await this.fileStore.listOutputFiles(this.taskId)
+    const files = await this.fileStore.listOutputFiles(this._taskId())
     const matches = []
     for (const f of files) {
       if (reGlob && !reGlob.test(f.name)) continue
@@ -120,9 +124,9 @@ export class OutputsBackend {
 
   async read(filePath, offset = 0, limit = 100) {
     const name = this._name(filePath)
-    const file = await this.fileStore.getOutputFile(this.taskId, name)
+    const file = await this.fileStore.getOutputFile(this._taskId(), name)
     if (!file) {
-      const files = await this.fileStore.listOutputFilesMeta(this.taskId)
+      const files = await this.fileStore.listOutputFilesMeta(this._taskId())
       const available = files.map((f) => `/outputs/${f.name}`).join(", ") || "none"
       return { error: `File not found: ${filePath}. Available: ${available}` }
     }
@@ -141,7 +145,7 @@ export class OutputsBackend {
   // for the rationale. Currently unused by our shipped code paths; do not delete.
   async readRaw(filePath) {
     const name = this._name(filePath)
-    const file = await this.fileStore.getOutputFile(this.taskId, name)
+    const file = await this.fileStore.getOutputFile(this._taskId(), name)
     if (!file) return { error: `File not found: ${filePath}` }
     return { bytes: file.bytes, mimeType: file.mimeType, size: file.size }
   }

package/lib/agents/markdown/backends/readonly-backend.js

@@ -0,0 +1,48 @@
+import { FilesystemBackend } from "deepagents"
+
+export class ReadonlyBackend {
+  constructor(options) {
+    // explicitly keep this internal (no class inheritance) so we do not expose write operations
+    this._fsBackend = new FilesystemBackend(options)
+  }
+
+  ls(path) {
+    return this._fsBackend.ls(path)
+  }
+
+  read(filePath, offset, limit) {
+    return this._fsBackend.read(filePath, offset, limit)
+  }
+
+  readRaw(filePath) {
+    return this._fsBackend.readRaw(filePath)
+  }
+
+  grep(pattern, path, glob, maxCount) {
+    return this._fsBackend.grep(pattern, path, glob, maxCount)
+  }
+
+  glob(pattern, path) {
+    return this._fsBackend.glob(pattern, path)
+  }
+
+  downloadFiles(paths) {
+    return this._fsBackend.downloadFiles(paths)
+  }
+
+  write() {
+    return { error: "read-only" }
+  }
+
+  edit() {
+    return { error: "read-only" }
+  }
+
+  delete() {
+    return { error: "read-only" }
+  }
+
+  uploadFiles() {
+    return { error: "read-only" }
+  }
+}

package/lib/agents/markdown/backends/uploads-backend.js

@@ -9,13 +9,22 @@
  *
  */
 
+import { getConfig } from "@langchain/langgraph"
 import { isTextMime, globToRegex } from "./mime-utils.js"
 
 export class UploadsBackend {
-  constructor(contextId, fileStore, userId) {
-    this.contextId = contextId
+  constructor(fileStore) {
     this.fileStore = fileStore
-    this.userId = userId
+  }
+
+  _resolveContext() {
+    const config = getConfig()
+    const rawThreadId = config?.configurable?.thread_id || ""
+    const contextId = rawThreadId.includes(":")
+      ? rawThreadId.split(":").slice(1).join(":")
+      : rawThreadId
+    const userId = config?.configurable?._userId
+    return { contextId, userId }
   }
 
   // CompositeBackend strips the route prefix (/uploads/) before delegating,
@@ -26,12 +35,13 @@ export class UploadsBackend {
   }
 
   async read(filePath, offset = 0, limit = 100) {
+    const { contextId, userId } = this._resolveContext()
     const name = this._name(filePath)
-    const file = await this.fileStore.getInputFile(this.contextId, name, this.userId)
+    const file = await this.fileStore.getInputFile(contextId, name, userId)
 
     if (!file) {
       const available =
-        (await this.fileStore.listInputFiles(this.contextId, this.userId))
+        (await this.fileStore.listInputFiles(contextId, userId))
           .map((f) => `/uploads/${f.name}`)
           .join(", ") || "none"
       return { error: `File not found: ${filePath}. Available: ${available}` }
@@ -58,8 +68,9 @@ export class UploadsBackend {
   // throws `TypeError: backend.readRaw is not a function`. Currently unused
   // by our shipped code paths — do not delete as "dead".
   async readRaw(filePath) {
+    const { contextId, userId } = this._resolveContext()
     const name = this._name(filePath)
-    const file = await this.fileStore.getInputFile(this.contextId, name, this.userId)
+    const file = await this.fileStore.getInputFile(contextId, name, userId)
     if (!file) return { error: `File not found: ${filePath}` }
     return { bytes: file.bytes, mimeType: file.mimeType, size: file.size }
   }
@@ -67,12 +78,14 @@ export class UploadsBackend {
   // CompositeBackend re-prepends the route prefix to paths returned here,
   // so return bare "/<name>" paths (without /uploads/) to avoid double-prefix.
   async list(_dirPath) {
-    const files = await this.fileStore.listInputFiles(this.contextId, this.userId)
+    const { contextId, userId } = this._resolveContext()
+    const files = await this.fileStore.listInputFiles(contextId, userId)
     return files.map((f) => `/${f.name}`)
   }
 
   async ls(_path) {
-    const files = await this.fileStore.listInputFiles(this.contextId, this.userId)
+    const { contextId, userId } = this._resolveContext()
+    const files = await this.fileStore.listInputFiles(contextId, userId)
     return {
       files: files.map((f) => ({
         path: `/${f.name}`,
@@ -84,8 +97,9 @@ export class UploadsBackend {
   }
 
   async glob(pattern, _path) {
+    const { contextId, userId } = this._resolveContext()
     const re = globToRegex(pattern)
-    const files = await this.fileStore.listInputFiles(this.contextId, this.userId)
+    const files = await this.fileStore.listInputFiles(contextId, userId)
     return {
       files: files
         .filter((f) => re.test(f.name))
@@ -94,13 +108,14 @@ export class UploadsBackend {
   }
 
   async grep(pattern, _path, glob) {
+    const { contextId, userId } = this._resolveContext()
     const reGlob = glob ? globToRegex(glob) : null
-    const files = await this.fileStore.listInputFiles(this.contextId, this.userId)
+    const files = await this.fileStore.listInputFiles(contextId, userId)
     const candidates = files.filter(
       (f) => (!reGlob || reGlob.test(f.name)) && isTextMime(f.mimeType),
     )
     const fetched = await Promise.all(
-      candidates.map((f) => this.fileStore.getInputFile(this.contextId, f.name, this.userId)),
+      candidates.map((f) => this.fileStore.getInputFile(contextId, f.name, userId)),
     )
     const matches = []
     for (let i = 0; i < candidates.length; i++) {
@@ -121,14 +136,16 @@ export class UploadsBackend {
   }
 
   async exists(filePath) {
+    const { contextId, userId } = this._resolveContext()
     const name = this._name(filePath)
-    const file = await this.fileStore.getInputFile(this.contextId, name, this.userId)
+    const file = await this.fileStore.getInputFile(contextId, name, userId)
     return !!file
   }
 
   async stat(filePath) {
+    const { contextId, userId } = this._resolveContext()
     const name = this._name(filePath)
-    const file = await this.fileStore.getInputFile(this.contextId, name, this.userId)
+    const file = await this.fileStore.getInputFile(contextId, name, userId)
     if (!file) return null
     return { name: file.name, mimeType: file.mimeType, size: file.size }
   }

package/lib/agents/markdown/deep-agent.js

@@ -1,4 +1,5 @@
 import cds from "@sap/cds"
+import { ReadonlyBackend } from "./backends/readonly-backend.js"
 const { fs, path } = cds.utils
 
 const LOG = cds.log("agents")
@@ -22,7 +23,6 @@ export async function createAutoDeepAgent(srv, agentDir) {
     createDeepAgent,
     StateBackend,
     CompositeBackend,
-    FilesystemBackend,
     createMemoryMiddleware,
     createSkillsMiddleware,
   } = await import("deepagents")
@@ -33,37 +33,20 @@ export async function createAutoDeepAgent(srv, agentDir) {
     tools: tools.length,
   })
 
-  let backend
+  const additionalBackends = {}
+
   if (cds.env.agents?.fileIO?.enabled) {
     const { CdsFileStore } = await import("../../protocol/persistence/file-store.js")
     const { UploadsBackend } = await import("./backends/uploads-backend.js")
     const { OutputsBackend } = await import("./backends/outputs-backend.js")
     const fileStore = new CdsFileStore()
-    backend = (runtime) => {
-      const rawThreadId = runtime?.configurable?.thread_id || ""
-      const contextId = rawThreadId.includes(":")
-        ? rawThreadId.split(":").slice(1).join(":")
-        : rawThreadId
-      const taskId = runtime?.configurable?._taskId || ""
-      // GraphExecutor threads the request-entry user id as `_userId` so the
-      // backend keeps user isolation even if cds.context drifts inside the
-      // agent's tool callbacks. Falls back to cds.context for compatibility.
-      const userId = runtime?.configurable?._userId
-      return new CompositeBackend(
-        new StateBackend(),
-        {
-          "/uploads/": new UploadsBackend(contextId, fileStore, userId),
-          "/outputs/": new OutputsBackend(taskId, fileStore),
-        },
-        // Fallback to StateBackend for any other paths so deepagents'
-        // built-in tools that read state still work.
-      )
-    }
-  } else {
-    backend = new StateBackend()
+    Object.assign(additionalBackends, {
+      "/uploads/": new UploadsBackend(fileStore),
+      "/outputs/": new OutputsBackend(fileStore),
+    })
   }
 
-  const agentFsBackend = new FilesystemBackend({ rootDir: agentDir })
+  const agentFsBackend = new ReadonlyBackend({ rootDir: agentDir, virtualMode: true })
   const agentDirMiddleware = []
   if (fs.existsSync(path.join(agentDir, "AGENTS.md"))) {
     agentDirMiddleware.push(
@@ -74,14 +57,20 @@ export async function createAutoDeepAgent(srv, agentDir) {
     )
   }
   if (fs.existsSync(path.join(agentDir, "skills"))) {
+    additionalBackends["./skills/"] = additionalBackends["/skills/"] = new ReadonlyBackend({
+      rootDir: path.join(agentDir, "skills"),
+      virtualMode: true,
+    })
     agentDirMiddleware.push(
       createSkillsMiddleware({
         backend: agentFsBackend,
-        sources: ["./skills/"],
+        sources: ["./skills"],
       }),
     )
   }
 
+  const backend = new CompositeBackend(new StateBackend(), additionalBackends)
+
   return createDeepAgent({
     model,
     tools,

package/lib/index.js

@@ -122,7 +122,7 @@ export default function A2AProtocolAdapter(srv, options = {}) {
     }
   })
 
-  if (!cds.env.profiles?.includes("production")) {
+  if (cds.env?.server?.index) {
     linkProviders.push((entity, endpoint) => {
       if (entity || endpoint?.kind !== "agent") return undefined
       return {
@@ -182,7 +182,7 @@ export default function A2AProtocolAdapter(srv, options = {}) {
     res.json(card)
   })
 
-  if (!cds.env.profiles?.includes("production")) {
+  if (cds.env?.server?.index) {
     router.use("/preview", previewAuthChallenge(srv), preview(agentCard.name || srv.name))
   }
 

package/lib/preview/chat.html

@@ -429,7 +429,29 @@
     <script>
       const AGENT_URL = window.location.pathname.replace(/\/preview\/?$/, "") + "/"
       const AUTH_HEADER = document.querySelector('meta[name="a2a-auth"]')?.content || ""
-      const authHeaders = () => (AUTH_HEADER ? { Authorization: AUTH_HEADER } : {})
+
+      const fetchCsrfToken = async () => {
+        if (document.csrfToken === undefined) {
+          const res = await fetch("/", {
+            method: "HEAD",
+            headers: { "x-csrf-token": "fetch", ...(await authHeaders({ includeCsrf: false })) },
+          })
+          if (!res.ok) {
+            throw new Error(`Could not fetch CSRF token ${res.status}: ${res.statusText}`)
+          }
+          document.csrfToken = res.headers.get("x-csrf-token")
+        }
+        return document.csrfToken
+      }
+
+      const authHeaders = async ({ includeCsrf = true } = {}) => {
+        const headers = AUTH_HEADER ? { Authorization: AUTH_HEADER } : {}
+        if (!includeCsrf) return headers
+        const csrfToken = await fetchCsrfToken()
+        if (csrfToken) headers["x-csrf-token"] = csrfToken
+        return headers
+      }
+
       document.getElementById("back").addEventListener("click", () => history.back())
       const messages = document.getElementById("messages")
       const typing = document.getElementById("typing")
@@ -579,7 +601,7 @@
         try {
           const resp = await fetch(AGENT_URL, {
             method: "POST",
-            headers: { "Content-Type": "application/json", ...authHeaders() },
+            headers: { "Content-Type": "application/json", ...(await authHeaders()) },
             signal: abort.signal,
             body: JSON.stringify({
               jsonrpc: "2.0",
@@ -677,7 +699,7 @@
         try {
           const resp = await fetch(AGENT_URL, {
             method: "POST",
-            headers: { "Content-Type": "application/json", ...authHeaders() },
+            headers: { "Content-Type": "application/json", ...(await authHeaders()) },
             signal: abort.signal,
             body: JSON.stringify({
               jsonrpc: "2.0",
@@ -856,7 +878,7 @@
         if (taskId) {
           fetch(AGENT_URL, {
             method: "POST",
-            headers: { "Content-Type": "application/json", ...authHeaders() },
+            headers: { "Content-Type": "application/json", ...(await authHeaders()) },
             body: JSON.stringify({
               jsonrpc: "2.0",
               method: "tasks/cancel",

package/lib/protocol/persistence/checkpoint-saver.js

@@ -151,6 +151,7 @@ export class CdsCheckpointSaver extends BaseCheckpointSaver {
     const thread_id = config.configurable?.thread_id
     const checkpoint_ns = config.configurable?.checkpoint_ns ?? ""
     const parent_checkpoint_id = config.configurable?.checkpoint_id
+    const task_id = config.configurable?._taskId || cds.context?.["agent.task.id"] || null
 
     if (!thread_id) {
       throw new Error('Missing required "thread_id" in config.configurable')
@@ -165,12 +166,14 @@ export class CdsCheckpointSaver extends BaseCheckpointSaver {
       checkpoint_ns,
       checkpoint_id: checkpoint.id,
       parent_checkpoint_id,
+      task_id,
       checkpoint: toUtf8String(serializedCheckpoint),
       metadata: toUtf8String(serializedMetadata),
       createdBy: resolveUserId(),
     })
 
-    LOG._trace && LOG.debug("Checkpoint saved", { thread_id, checkpoint_id: checkpoint.id })
+    LOG._trace &&
+      LOG.debug("Checkpoint saved", { thread_id, checkpoint_id: checkpoint.id, task_id })
 
     return {
       configurable: {

package/lib/protocol/persistence/cleanup.js

@@ -0,0 +1,84 @@
+import cds from "@sap/cds"
+import { ms4 } from "../../utils/utils.js"
+
+const LOG = cds.log("agent")
+
+const TASKS = "cap.agent.Tasks"
+
+// Throttle: last cleanup timestamp per tenant & service
+const lastDeletionTriggerMap = new Map()
+
+/** Test-only: reset throttle map. */
+export function _resetCleanupThrottle() {
+  lastDeletionTriggerMap.clear()
+}
+
+// TTL from cds.env.agents.retention., `false`/0 → disabled.
+function resolveTtlMs() {
+  const cfg = cds.env.agents?.retention
+  if (cfg === false || cfg === 0) return 0
+  const value = cfg === true || cfg
+  if (typeof value === "number") return value
+  return ms4(String(value))
+}
+
+const MS_OF_A_DAY = ms4("1d")
+
+export async function triggerCleanup(serviceName) {
+  const ttlMs = resolveTtlMs()
+  if (!ttlMs) {
+    LOG.debug(`cds.agents.retention is not configured. Skipping cleanup of old Tasks.`)
+    return
+  }
+  const tenant = cds.context?.tenant
+  if (!lastDeletionTriggerMap.has(tenant)) lastDeletionTriggerMap.set(tenant, new Map())
+  const serviceMap = lastDeletionTriggerMap.get(tenant)
+  const lastDeletionTriggered = serviceMap.get(serviceName)
+  if (lastDeletionTriggered > Date.now() - MS_OF_A_DAY) {
+    LOG.debug(
+      `Skip scheduling deletion of tasks for ${serviceName} because the last scheduled deletion was triggered within the last 24h.`,
+    )
+    return
+  }
+  const srv = cds.services[serviceName]
+  if (!srv) {
+    LOG.warn(`triggerCleanup: service "${serviceName}" not found in cds.services, skipping.`)
+    return
+  }
+  if (typeof srv.schedule !== "function") {
+    LOG.debug(`triggerCleanup: srv.schedule not available (CDS < 9). Skipping cleanup scheduling.`)
+    return
+  }
+  serviceMap.set(serviceName, Date.now())
+  const MAX_TIMEOUT = 2_147_483_647
+  const delay = Math.min(ttlMs + MS_OF_A_DAY, MAX_TIMEOUT)
+  await srv.schedule("cleanupTasks", {}).after(delay)
+}
+
+/**
+ * GC of expired tasks per service.
+ * Compositions cascade automatically: inputFiles, outputFiles, pushConfigs,
+ * checkpoints, checkpointWrites.
+ */
+export async function cleanupExpiredTasks(serviceName) {
+  const ttlMs = resolveTtlMs()
+  if (!ttlMs) {
+    LOG.debug(`cds.agents.retention is not configured. Skipping cleanup of old Tasks.`)
+    return
+  }
+
+  const tenant = cds.context?.tenant
+  const now = Date.now()
+  const cutoff = new Date(now - ttlMs).toISOString()
+
+  const taskResult = await DELETE.from(TASKS).where({
+    modifiedAt: { "<": cutoff },
+    agentService: serviceName,
+  })
+  // affectedRows since cds10
+  const deletedTasks = typeof taskResult === "number" ? taskResult : taskResult?.affectedRows || 0
+
+  if (deletedTasks > 0) {
+    LOG.debug("Cleanup", { tenant, deletedTasks, cutoff })
+  }
+}

package/lib/telemetry/chat-tracing.js

@@ -71,6 +71,28 @@ export function _patchChatModelProto(proto) {
       try {
         const result = await original.call(this, input, opts)
         const duration = Date.now() - t0
+        const ir = result.additional_kwargs?.intermediate_results
+        if (span && ir) {
+          if (ir.input_filtering) span.setAttribute("gen_ai.orchestration.input_filtering", true)
+          if (ir.output_filtering) span.setAttribute("gen_ai.orchestration.output_filtering", true)
+          if (ir.input_masking) span.setAttribute("gen_ai.orchestration.input_masking", true)
+          const appliedFilterAmount = (filtering) => {
+            let res = []
+            for (const entry of filtering?.data?.choices ?? []) {
+              Object.keys(entry).forEach((e) => {
+                if (e !== "index") {
+                  res = res.concat(Object.keys(entry[e]).map((filter) => `${e}_${filter}`))
+                }
+              })
+            }
+            return res
+          }
+          let ic = appliedFilterAmount(ir.input_filtering)
+          let oc = appliedFilterAmount(ir.output_filtering)
+          if (ic.length) span.setAttribute("gen_ai.orchestration.input_filter_services", ic)
+          if (oc.length) span.setAttribute("gen_ai.orchestration.output_filter_services", oc)
+        }
+
         /** @type {import('@langchain/core/messages').UsageMetadata} */
         const usage = result.usage_metadata
         const finishReason =

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cap-js/agents",
-  "version": "0.9.1",
+  "version": "0.9.2",
   "description": "CDS plugin for building agents",
   "author": "SAP SE (https://www.sap.com)",
   "license": "Apache-2.0",
@@ -87,6 +87,7 @@
       "trace_langchain": true,
       "mlflow": false,
       "connect": "auto",
+      "retention": "30d",
       "[development]": {
         "pushNotifications": {
           "allowedDomains": [
@@ -116,7 +117,6 @@
         "max_tokens": 4096,
         "temperature": 0
       },
-      "contentFilter": true,
       "fileIO": {
         "enabled": false,
         "maxInputFileSizeBytes": 2097152,

package/srv/handlers/graph-executor.js

@@ -6,6 +6,7 @@ import { mlflowAttrs, mlflowTraceAttrs, setSpanAttrs } from "../../lib/telemetry
 import { CdsFileStore } from "../../lib/protocol/persistence/file-store.js"
 import { formatFileSize, sanitizeFilename } from "./tools.js"
 import { convertUsageData } from "../../lib/telemetry/chat-tracing.js"
+import { triggerCleanup } from "../../lib/protocol/persistence/cleanup.js"
 
 const LOG = cds.log("agents")
 
@@ -589,6 +590,10 @@ class GraphExecutor {
       audit("AgentTaskStarted", {
         data: { taskId, contextId, service: serviceName, userMessage: requestContext.userMessage },
       })
+      // Lazy scheduling task deletion
+      cds.spawn({}, async () => {
+        await triggerCleanup(serviceName)
+      })
     }
 
     // ── File I/O: persist incoming FileParts to cap.agent.Tasks.inputFiles ──

package/srv/handlers/index.js

@@ -3,6 +3,7 @@ import { generateTools, createReadFileTool } from "./tools.js"
 import { buildSystemPrompt } from "./system-prompt.js"
 import buildMiddleware from "../../lib/agents/middleware/index.js"
 import { partsToText } from "../../lib/utils/message-handling.js"
+import { cleanupExpiredTasks } from "../../lib/protocol/persistence/cleanup.js"
 
 const LOG = cds.log("agents")
 
@@ -170,4 +171,8 @@ export default function registerDefaultAgentHandlers(srv) {
       },
     })
   })
+
+  srv.on("cleanupTasks", async () => {
+    await cleanupExpiredTasks(srv.name)
+  })
 }

package/srv/handlers/mcp-tools.js

@@ -94,7 +94,8 @@ export async function buildMcpToolsFromConnection(serviceName) {
   const { credentials, kind } = cds.requires[serviceName]
 
   // dest is either a string (BTP destination name) or an object { name, url, ... }
-  const destinationName = typeof credentials === "string" ? credentials : credentials?.name
+  const destinationName =
+    typeof credentials === "string" ? credentials : (credentials?.destination ?? credentials?.name)
   const localUrl =
     typeof credentials === "string"
       ? null
@@ -121,7 +122,8 @@ export async function buildMcpToolsFromConnection(serviceName) {
     )
   }
 
-  const mcpUrl = url.replace(/\/$/, "")
+  const path = typeof credentials === "object" ? credentials?.path : null
+  const mcpUrl = url.replace(/\/$/, "") + (path ? `/${path.replace(/^\//, "")}` : "")
   LOG.info(`Connecting to MCP server at ${mcpUrl}`)
 
   const resolveHeaders = async () => {

package/srv/handlers/sub-agent-tools.js

@@ -206,7 +206,8 @@ export async function buildSubAgentToolFromConnection(serviceName) {
   endpoints = Object.fromEntries(endpoints.map((o) => [o.kind, o.path]))
   const { credentials, kind } = cds.requires[serviceName]
 
-  const destinationName = typeof credentials === "string" ? credentials : credentials?.name
+  const destinationName =
+    typeof credentials === "string" ? credentials : (credentials?.destination ?? credentials?.name)
   const localUrl =
     typeof credentials === "string"
       ? null
@@ -270,7 +271,8 @@ export async function buildSubAgentToolFromConnection(serviceName) {
     )
   }
 
-  const base = agentBaseUrl.replace(/\/$/, "")
+  const path = typeof credentials === "object" ? credentials?.path : null
+  const base = agentBaseUrl.replace(/\/$/, "") + (path ? `/${path.replace(/^\//, "")}` : "")
   LOG.info(`Connecting to sub-agent at ${base}`)
 
   // revisit: a2a agents may be tenant specific, card per tenant?