@inkeep/agents-api 0.0.0-dev-20260203023016 → 0.0.0-dev-20260203033642

package/dist/.well-known/workflow/v1/manifest.debug.json

@@ -1,16 +1,5 @@
 {
   "steps": {
-    "node_modules/.pnpm/workflow@4.0.1-beta.33_@aws-sdk+client-sts@3.970.0_@opentelemetry+api@1.9.0_@types+reac_c3fd21eb4e661cd5cc8d67d9c0f6cfda/node_modules/workflow/dist/internal/builtins.js": {
-      "__builtin_response_array_buffer": {
-        "stepId": "__builtin_response_array_buffer"
-      },
-      "__builtin_response_json": {
-        "stepId": "__builtin_response_json"
-      },
-      "__builtin_response_text": {
-        "stepId": "__builtin_response_text"
-      }
-    },
     "src/domains/evals/workflow/functions/evaluateConversation.ts": {
       "executeEvaluatorStep": {
         "stepId": "step//src/domains/evals/workflow/functions/evaluateConversation.ts//executeEvaluatorStep"
@@ -25,6 +14,17 @@
         "stepId": "step//src/domains/evals/workflow/functions/evaluateConversation.ts//logStep"
       }
     },
+    "node_modules/.pnpm/workflow@4.0.1-beta.33_@aws-sdk+client-sts@3.970.0_@opentelemetry+api@1.9.0_@types+reac_c3fd21eb4e661cd5cc8d67d9c0f6cfda/node_modules/workflow/dist/internal/builtins.js": {
+      "__builtin_response_array_buffer": {
+        "stepId": "__builtin_response_array_buffer"
+      },
+      "__builtin_response_json": {
+        "stepId": "__builtin_response_json"
+      },
+      "__builtin_response_text": {
+        "stepId": "__builtin_response_text"
+      }
+    },
     "src/domains/evals/workflow/functions/runDatasetItem.ts": {
       "callChatApiStep": {
         "stepId": "step//src/domains/evals/workflow/functions/runDatasetItem.ts//callChatApiStep"

package/dist/.well-known/workflow/v1/step.cjs

@@ -146812,17 +146812,17 @@ var envSchema = external_exports.object({
     "production",
     "pentest",
     "test"
-  ]).optional(),
-  INKEEP_AGENTS_MANAGE_DATABASE_URL: external_exports.string().optional(),
-  INKEEP_AGENTS_RUN_DATABASE_URL: external_exports.string().optional(),
-  POSTGRES_POOL_SIZE: external_exports.string().optional(),
-  INKEEP_AGENTS_JWT_SIGNING_SECRET: external_exports.string().min(32, "INKEEP_AGENTS_JWT_SIGNING_SECRET must be at least 32 characters").optional(),
-  INKEEP_AGENTS_MANAGE_UI_URL: external_exports.string().optional(),
-  INKEEP_AGENTS_API_URL: external_exports.string().optional(),
-  BETTER_AUTH_SECRET: external_exports.string().optional(),
-  TRUSTED_ORIGIN: external_exports.string().optional(),
-  OAUTH_PROXY_PRODUCTION_URL: external_exports.string().optional(),
-  GITHUB_MCP_API_KEY: external_exports.string().optional()
+  ]).optional().describe("Application environment mode"),
+  INKEEP_AGENTS_MANAGE_DATABASE_URL: external_exports.string().optional().describe("PostgreSQL connection URL for the management database (Doltgres with Git version control)"),
+  INKEEP_AGENTS_RUN_DATABASE_URL: external_exports.string().optional().describe("PostgreSQL connection URL for the runtime database (Doltgres with Git version control)"),
+  POSTGRES_POOL_SIZE: external_exports.string().optional().describe("Maximum number of connections in the PostgreSQL connection pool"),
+  INKEEP_AGENTS_JWT_SIGNING_SECRET: external_exports.string().min(32, "INKEEP_AGENTS_JWT_SIGNING_SECRET must be at least 32 characters").optional().describe("Secret key for signing JWT tokens (minimum 32 characters)"),
+  BETTER_AUTH_SECRET: external_exports.string().optional().describe("Secret key for Better Auth session encryption (change in production)"),
+  TRUSTED_ORIGIN: external_exports.string().optional().describe("Trusted origin URL for CORS in local/preview environments"),
+  OAUTH_PROXY_PRODUCTION_URL: external_exports.string().optional().describe("OAuth proxy URL for production environment (used in local/preview environments)"),
+  INKEEP_AGENTS_MANAGE_UI_URL: external_exports.string().optional().describe("URL where the management UI is hosted"),
+  INKEEP_AGENTS_API_URL: external_exports.string().optional().describe("URL where the agents management API is running"),
+  GITHUB_MCP_API_KEY: external_exports.string().optional().describe("API key for the GitHub MCP")
 });
 var parseEnv = /* @__PURE__ */ __name(() => {
   try {
@@ -228474,62 +228474,74 @@ __name(withRef, "withRef");
 // src/env.ts
 loadEnvironmentFiles();
 var envSchema2 = external_exports.object({
+  // Core Environment
   NODE_ENV: external_exports.enum([
     "development",
     "production",
     "test"
-  ]).default("development"),
+  ]).default("development").describe("Node.js environment mode"),
   ENVIRONMENT: external_exports.enum([
     "development",
     "production",
     "pentest",
     "test"
-  ]).default("development"),
+  ]).default("development").describe("Application environment mode"),
   LOG_LEVEL: external_exports.enum([
     "trace",
     "debug",
     "info",
     "warn",
     "error"
-  ]).default("info"),
-  INKEEP_AGENTS_MANAGE_DATABASE_URL: external_exports.string(),
-  INKEEP_AGENTS_RUN_DATABASE_URL: external_exports.string(),
-  INKEEP_AGENTS_MANAGE_UI_URL: external_exports.string().optional(),
-  INKEEP_AGENTS_API_URL: external_exports.string().optional().default("http://localhost:3002"),
-  BETTER_AUTH_SECRET: external_exports.string().optional(),
+  ]).default("info").describe("Logging verbosity level"),
+  // Database
+  INKEEP_AGENTS_MANAGE_DATABASE_URL: external_exports.string().describe("PostgreSQL connection URL for the management database (Doltgres with Git version control)"),
+  INKEEP_AGENTS_RUN_DATABASE_URL: external_exports.string().describe("PostgreSQL connection URL for the runtime database (Doltgres with Git version control)"),
+  INKEEP_AGENTS_MANAGE_UI_URL: external_exports.string().optional().describe("URL where the management UI is hosted"),
+  INKEEP_AGENTS_API_URL: external_exports.string().optional().default("http://localhost:3002").describe("URL where the agents management API is running"),
+  // Authentication
+  BETTER_AUTH_SECRET: external_exports.string().optional().describe("Secret key for Better Auth session encryption (change in production)"),
   INKEEP_AGENTS_MANAGE_UI_USERNAME: external_exports.string().optional().refine((val) => !val || /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(val), {
     message: "Invalid email address"
-  }),
+  }).describe("Admin email address for management UI login"),
   INKEEP_AGENTS_MANAGE_UI_PASSWORD: external_exports.string().optional().refine((val) => !val || val.length >= 8, {
     message: "Password must be at least 8 characters"
-  }),
-  INKEEP_AGENTS_API_BYPASS_SECRET: external_exports.string().optional(),
-  INKEEP_AGENTS_MANAGE_API_BYPASS_SECRET: external_exports.string().optional(),
-  INKEEP_AGENTS_RUN_API_BYPASS_SECRET: external_exports.string().optional(),
-  INKEEP_AGENTS_EVAL_API_BYPASS_SECRET: external_exports.string().optional(),
-  INKEEP_AGENTS_TEMP_JWT_PUBLIC_KEY: external_exports.string().optional(),
-  INKEEP_AGENTS_TEMP_JWT_PRIVATE_KEY: external_exports.string().optional(),
-  NANGO_SERVER_URL: external_exports.string().optional().default("https://api.nango.dev"),
-  NANGO_SECRET_KEY: external_exports.string().optional(),
-  OTEL_BSP_SCHEDULE_DELAY: external_exports.coerce.number().optional().default(500),
-  OTEL_BSP_MAX_EXPORT_BATCH_SIZE: external_exports.coerce.number().optional().default(64),
-  TENANT_ID: external_exports.string().optional().default("default"),
-  SIGNOZ_URL: external_exports.string().optional(),
-  SIGNOZ_API_KEY: external_exports.string().optional(),
-  PUBLIC_SIGNOZ_URL: external_exports.string().optional(),
-  ANTHROPIC_API_KEY: external_exports.string(),
-  OPENAI_API_KEY: external_exports.string().optional(),
-  GOOGLE_GENERATIVE_AI_API_KEY: external_exports.string().optional(),
-  WORKFLOW_TARGET_WORLD: external_exports.string().optional(),
-  WORKFLOW_POSTGRES_URL: external_exports.string().optional(),
-  WORKFLOW_POSTGRES_JOB_PREFIX: external_exports.string().optional(),
-  WORKFLOW_POSTGRES_WORKER_CONCURRENCY: external_exports.string().optional(),
-  GITHUB_APP_ID: external_exports.string().optional(),
-  GITHUB_APP_PRIVATE_KEY: external_exports.string().optional(),
-  GITHUB_WEBHOOK_SECRET: external_exports.string().optional(),
-  GITHUB_STATE_SIGNING_SECRET: external_exports.string().min(32, "GITHUB_STATE_SIGNING_SECRET must be at least 32 characters").optional(),
-  GITHUB_APP_NAME: external_exports.string().optional(),
-  GITHUB_MCP_API_KEY: external_exports.string().optional().describe("API key for the GitHub MCP")
+  }).describe("Admin password for management UI login (min 8 characters)"),
+  // API Bypass Secrets (for local development and testing, skips auth)
+  INKEEP_AGENTS_API_BYPASS_SECRET: external_exports.string().optional().describe("API bypass secret for local development and testing (skips auth)"),
+  INKEEP_AGENTS_MANAGE_API_BYPASS_SECRET: external_exports.string().optional().describe("Management API bypass secret for local development and testing (skips auth)"),
+  INKEEP_AGENTS_RUN_API_BYPASS_SECRET: external_exports.string().optional().describe("Run API bypass secret for local development and testing (skips auth)"),
+  INKEEP_AGENTS_EVAL_API_BYPASS_SECRET: external_exports.string().optional().describe("Eval API bypass secret for local development and testing (skips auth)"),
+  // JWT Keys (for Playground)
+  INKEEP_AGENTS_TEMP_JWT_PUBLIC_KEY: external_exports.string().optional().describe("Temporary JWT public key for Playground (generate with scripts/generate-jwt-keys.sh)"),
+  INKEEP_AGENTS_TEMP_JWT_PRIVATE_KEY: external_exports.string().optional().describe("Temporary JWT private key for Playground (generate with scripts/generate-jwt-keys.sh)"),
+  // Nango (OAuth integrations)
+  NANGO_SERVER_URL: external_exports.string().optional().default("https://api.nango.dev").describe("Nango server URL for OAuth integrations"),
+  NANGO_SECRET_KEY: external_exports.string().optional().describe("Nango secret key for OAuth integrations"),
+  // OpenTelemetry Configuration
+  OTEL_BSP_SCHEDULE_DELAY: external_exports.coerce.number().optional().default(500).describe("OpenTelemetry batch span processor schedule delay in milliseconds"),
+  OTEL_BSP_MAX_EXPORT_BATCH_SIZE: external_exports.coerce.number().optional().default(64).describe("OpenTelemetry batch span processor max export batch size"),
+  // Tenant Configuration
+  TENANT_ID: external_exports.string().optional().default("default").describe("Default tenant ID for development"),
+  // SigNoz (Observability)
+  SIGNOZ_URL: external_exports.string().optional().describe("SigNoz server URL for observability"),
+  SIGNOZ_API_KEY: external_exports.string().optional().describe("SigNoz API key for authentication"),
+  PUBLIC_SIGNOZ_URL: external_exports.string().optional().describe("Public SigNoz URL accessible from the browser"),
+  // AI Providers
+  ANTHROPIC_API_KEY: external_exports.string().describe("Anthropic API key for Claude models (required for agent execution). Get from https://console.anthropic.com/"),
+  OPENAI_API_KEY: external_exports.string().optional().describe("OpenAI API key for GPT models. Get from https://platform.openai.com/"),
+  GOOGLE_GENERATIVE_AI_API_KEY: external_exports.string().optional().describe("Google Generative AI API key for Gemini models"),
+  // GitHub App Configuration
+  GITHUB_APP_ID: external_exports.string().optional().describe("GitHub App ID for GitHub integration"),
+  GITHUB_APP_PRIVATE_KEY: external_exports.string().optional().describe("GitHub App private key for authentication"),
+  GITHUB_WEBHOOK_SECRET: external_exports.string().optional().describe("Secret for validating GitHub webhook payloads"),
+  GITHUB_STATE_SIGNING_SECRET: external_exports.string().min(32, "GITHUB_STATE_SIGNING_SECRET must be at least 32 characters").optional().describe("Secret for signing GitHub OAuth state (minimum 32 characters)"),
+  GITHUB_APP_NAME: external_exports.string().optional().describe("Name of the GitHub App"),
+  GITHUB_MCP_API_KEY: external_exports.string().optional().describe("API key for the GitHub MCP"),
+  // Workflow Configuration
+  WORKFLOW_TARGET_WORLD: external_exports.string().optional().describe("Target world for workflow execution"),
+  WORKFLOW_POSTGRES_URL: external_exports.string().optional().describe("PostgreSQL connection URL for workflow job queue"),
+  WORKFLOW_POSTGRES_JOB_PREFIX: external_exports.string().optional().describe("Prefix for workflow job names in the queue"),
+  WORKFLOW_POSTGRES_WORKER_CONCURRENCY: external_exports.string().optional().describe("Number of concurrent workflow workers")
 });
 var parseEnv2 = /* @__PURE__ */ __name(() => {
   try {

package/dist/domains/evals/workflow/routes.d.ts

@@ -1,7 +1,7 @@
 import { Hono } from "hono";
-import * as hono_types5 from "hono/types";
+import * as hono_types8 from "hono/types";
 
 //#region src/domains/evals/workflow/routes.d.ts
-declare const workflowRoutes: Hono<hono_types5.BlankEnv, hono_types5.BlankSchema, "/">;
+declare const workflowRoutes: Hono<hono_types8.BlankEnv, hono_types8.BlankSchema, "/">;
 //#endregion
 export { workflowRoutes };

package/dist/domains/manage/routes/conversations.d.ts

@@ -1,7 +1,7 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
-import * as hono3 from "hono";
+import * as hono9 from "hono";
 
 //#region src/domains/manage/routes/conversations.d.ts
-declare const app: OpenAPIHono<hono3.Env, {}, "/">;
+declare const app: OpenAPIHono<hono9.Env, {}, "/">;
 //#endregion
 export { app as default };

package/dist/domains/manage/routes/evals/evaluationResults.d.ts

@@ -1,7 +1,7 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
-import * as hono18 from "hono";
+import * as hono6 from "hono";
 
 //#region src/domains/manage/routes/evals/evaluationResults.d.ts
-declare const app: OpenAPIHono<hono18.Env, {}, "/">;
+declare const app: OpenAPIHono<hono6.Env, {}, "/">;
 //#endregion
 export { app as default };

package/dist/domains/manage/routes/index.d.ts

@@ -1,7 +1,7 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
-import * as hono7 from "hono";
+import * as hono15 from "hono";
 
 //#region src/domains/manage/routes/index.d.ts
-declare const app: OpenAPIHono<hono7.Env, {}, "/">;
+declare const app: OpenAPIHono<hono15.Env, {}, "/">;
 //#endregion
 export { app as default };

package/dist/domains/manage/routes/mcp.d.ts

@@ -1,7 +1,7 @@
 import { Hono } from "hono";
-import * as hono_types7 from "hono/types";
+import * as hono_types6 from "hono/types";
 
 //#region src/domains/manage/routes/mcp.d.ts
-declare const app: Hono<hono_types7.BlankEnv, hono_types7.BlankSchema, "/">;
+declare const app: Hono<hono_types6.BlankEnv, hono_types6.BlankSchema, "/">;
 //#endregion
 export { app as default };

package/dist/domains/manage/routes/signoz.d.ts

@@ -1,10 +1,10 @@
 import { ManageAppVariables } from "../../../types/app.js";
 import { Hono } from "hono";
-import * as hono_types11 from "hono/types";
+import * as hono_types3 from "hono/types";
 
 //#region src/domains/manage/routes/signoz.d.ts
 declare const app: Hono<{
   Variables: ManageAppVariables;
-}, hono_types11.BlankSchema, "/">;
+}, hono_types3.BlankSchema, "/">;
 //#endregion
 export { app as default };

package/dist/domains/mcp/routes/mcp.d.ts

@@ -1,7 +1,7 @@
 import { Hono } from "hono";
-import * as hono_types9 from "hono/types";
+import * as hono_types4 from "hono/types";
 
 //#region src/domains/mcp/routes/mcp.d.ts
-declare const app: Hono<hono_types9.BlankEnv, hono_types9.BlankSchema, "/">;
+declare const app: Hono<hono_types4.BlankEnv, hono_types4.BlankSchema, "/">;
 //#endregion
 export { app as default };

package/dist/domains/run/agents/relationTools.d.ts

@@ -1,6 +1,6 @@
 import { AgentConfig, DelegateRelation } from "./Agent.js";
 import { InternalRelation } from "../utils/project.js";
-import * as _inkeep_agents_core1 from "@inkeep/agents-core";
+import * as _inkeep_agents_core2 from "@inkeep/agents-core";
 import { CredentialStoreRegistry, FullExecutionContext } from "@inkeep/agents-core";
 import * as ai0 from "ai";
 
@@ -44,7 +44,7 @@ declare function createDelegateToAgentTool({
   message: string;
 }, {
   toolCallId: any;
-  result: _inkeep_agents_core1.Message | _inkeep_agents_core1.Task;
+  result: _inkeep_agents_core2.Message | _inkeep_agents_core2.Task;
 }>;
 /**
  * Parameters for building a transfer relation config

package/dist/domains/run/utils/token-estimator.d.ts

@@ -1,4 +1,4 @@
-import * as _inkeep_agents_core3 from "@inkeep/agents-core";
+import * as _inkeep_agents_core1 from "@inkeep/agents-core";
 import { BreakdownComponentDef, ContextBreakdown, calculateBreakdownTotal, createEmptyBreakdown } from "@inkeep/agents-core";
 
 //#region src/domains/run/utils/token-estimator.d.ts
@@ -17,7 +17,7 @@ interface AssembleResult {
   /** The assembled prompt string */
   prompt: string;
   /** Token breakdown for each component */
-  breakdown: _inkeep_agents_core3.ContextBreakdown;
+  breakdown: _inkeep_agents_core1.ContextBreakdown;
 }
 //#endregion
 export { AssembleResult, type BreakdownComponentDef, type ContextBreakdown, calculateBreakdownTotal, createEmptyBreakdown, estimateTokens };

package/dist/env.d.ts

@@ -44,16 +44,16 @@ declare const envSchema: z.ZodObject<{
   ANTHROPIC_API_KEY: z.ZodString;
   OPENAI_API_KEY: z.ZodOptional<z.ZodString>;
   GOOGLE_GENERATIVE_AI_API_KEY: z.ZodOptional<z.ZodString>;
-  WORKFLOW_TARGET_WORLD: z.ZodOptional<z.ZodString>;
-  WORKFLOW_POSTGRES_URL: z.ZodOptional<z.ZodString>;
-  WORKFLOW_POSTGRES_JOB_PREFIX: z.ZodOptional<z.ZodString>;
-  WORKFLOW_POSTGRES_WORKER_CONCURRENCY: z.ZodOptional<z.ZodString>;
   GITHUB_APP_ID: z.ZodOptional<z.ZodString>;
   GITHUB_APP_PRIVATE_KEY: z.ZodOptional<z.ZodString>;
   GITHUB_WEBHOOK_SECRET: z.ZodOptional<z.ZodString>;
   GITHUB_STATE_SIGNING_SECRET: z.ZodOptional<z.ZodString>;
   GITHUB_APP_NAME: z.ZodOptional<z.ZodString>;
   GITHUB_MCP_API_KEY: z.ZodOptional<z.ZodString>;
+  WORKFLOW_TARGET_WORLD: z.ZodOptional<z.ZodString>;
+  WORKFLOW_POSTGRES_URL: z.ZodOptional<z.ZodString>;
+  WORKFLOW_POSTGRES_JOB_PREFIX: z.ZodOptional<z.ZodString>;
+  WORKFLOW_POSTGRES_WORKER_CONCURRENCY: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 declare const env: {
   NODE_ENV: "development" | "production" | "test";
@@ -83,16 +83,16 @@ declare const env: {
   PUBLIC_SIGNOZ_URL?: string | undefined;
   OPENAI_API_KEY?: string | undefined;
   GOOGLE_GENERATIVE_AI_API_KEY?: string | undefined;
-  WORKFLOW_TARGET_WORLD?: string | undefined;
-  WORKFLOW_POSTGRES_URL?: string | undefined;
-  WORKFLOW_POSTGRES_JOB_PREFIX?: string | undefined;
-  WORKFLOW_POSTGRES_WORKER_CONCURRENCY?: string | undefined;
   GITHUB_APP_ID?: string | undefined;
   GITHUB_APP_PRIVATE_KEY?: string | undefined;
   GITHUB_WEBHOOK_SECRET?: string | undefined;
   GITHUB_STATE_SIGNING_SECRET?: string | undefined;
   GITHUB_APP_NAME?: string | undefined;
   GITHUB_MCP_API_KEY?: string | undefined;
+  WORKFLOW_TARGET_WORLD?: string | undefined;
+  WORKFLOW_POSTGRES_URL?: string | undefined;
+  WORKFLOW_POSTGRES_JOB_PREFIX?: string | undefined;
+  WORKFLOW_POSTGRES_WORKER_CONCURRENCY?: string | undefined;
 };
 type Env = z.infer<typeof envSchema>;
 //#endregion

package/dist/env.js

@@ -8,54 +8,54 @@ const envSchema = z.object({
 		"development",
 		"production",
 		"test"
-	]).default("development"),
+	]).default("development").describe("Node.js environment mode"),
 	ENVIRONMENT: z.enum([
 		"development",
 		"production",
 		"pentest",
 		"test"
-	]).default("development"),
+	]).default("development").describe("Application environment mode"),
 	LOG_LEVEL: z.enum([
 		"trace",
 		"debug",
 		"info",
 		"warn",
 		"error"
-	]).default("info"),
-	INKEEP_AGENTS_MANAGE_DATABASE_URL: z.string(),
-	INKEEP_AGENTS_RUN_DATABASE_URL: z.string(),
-	INKEEP_AGENTS_MANAGE_UI_URL: z.string().optional(),
-	INKEEP_AGENTS_API_URL: z.string().optional().default("http://localhost:3002"),
-	BETTER_AUTH_SECRET: z.string().optional(),
-	INKEEP_AGENTS_MANAGE_UI_USERNAME: z.string().optional().refine((val) => !val || /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(val), { message: "Invalid email address" }),
-	INKEEP_AGENTS_MANAGE_UI_PASSWORD: z.string().optional().refine((val) => !val || val.length >= 8, { message: "Password must be at least 8 characters" }),
-	INKEEP_AGENTS_API_BYPASS_SECRET: z.string().optional(),
-	INKEEP_AGENTS_MANAGE_API_BYPASS_SECRET: z.string().optional(),
-	INKEEP_AGENTS_RUN_API_BYPASS_SECRET: z.string().optional(),
-	INKEEP_AGENTS_EVAL_API_BYPASS_SECRET: z.string().optional(),
-	INKEEP_AGENTS_TEMP_JWT_PUBLIC_KEY: z.string().optional(),
-	INKEEP_AGENTS_TEMP_JWT_PRIVATE_KEY: z.string().optional(),
-	NANGO_SERVER_URL: z.string().optional().default("https://api.nango.dev"),
-	NANGO_SECRET_KEY: z.string().optional(),
-	OTEL_BSP_SCHEDULE_DELAY: z.coerce.number().optional().default(500),
-	OTEL_BSP_MAX_EXPORT_BATCH_SIZE: z.coerce.number().optional().default(64),
-	TENANT_ID: z.string().optional().default("default"),
-	SIGNOZ_URL: z.string().optional(),
-	SIGNOZ_API_KEY: z.string().optional(),
-	PUBLIC_SIGNOZ_URL: z.string().optional(),
-	ANTHROPIC_API_KEY: z.string(),
-	OPENAI_API_KEY: z.string().optional(),
-	GOOGLE_GENERATIVE_AI_API_KEY: z.string().optional(),
-	WORKFLOW_TARGET_WORLD: z.string().optional(),
-	WORKFLOW_POSTGRES_URL: z.string().optional(),
-	WORKFLOW_POSTGRES_JOB_PREFIX: z.string().optional(),
-	WORKFLOW_POSTGRES_WORKER_CONCURRENCY: z.string().optional(),
-	GITHUB_APP_ID: z.string().optional(),
-	GITHUB_APP_PRIVATE_KEY: z.string().optional(),
-	GITHUB_WEBHOOK_SECRET: z.string().optional(),
-	GITHUB_STATE_SIGNING_SECRET: z.string().min(32, "GITHUB_STATE_SIGNING_SECRET must be at least 32 characters").optional(),
-	GITHUB_APP_NAME: z.string().optional(),
-	GITHUB_MCP_API_KEY: z.string().optional().describe("API key for the GitHub MCP")
+	]).default("info").describe("Logging verbosity level"),
+	INKEEP_AGENTS_MANAGE_DATABASE_URL: z.string().describe("PostgreSQL connection URL for the management database (Doltgres with Git version control)"),
+	INKEEP_AGENTS_RUN_DATABASE_URL: z.string().describe("PostgreSQL connection URL for the runtime database (Doltgres with Git version control)"),
+	INKEEP_AGENTS_MANAGE_UI_URL: z.string().optional().describe("URL where the management UI is hosted"),
+	INKEEP_AGENTS_API_URL: z.string().optional().default("http://localhost:3002").describe("URL where the agents management API is running"),
+	BETTER_AUTH_SECRET: z.string().optional().describe("Secret key for Better Auth session encryption (change in production)"),
+	INKEEP_AGENTS_MANAGE_UI_USERNAME: z.string().optional().refine((val) => !val || /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(val), { message: "Invalid email address" }).describe("Admin email address for management UI login"),
+	INKEEP_AGENTS_MANAGE_UI_PASSWORD: z.string().optional().refine((val) => !val || val.length >= 8, { message: "Password must be at least 8 characters" }).describe("Admin password for management UI login (min 8 characters)"),
+	INKEEP_AGENTS_API_BYPASS_SECRET: z.string().optional().describe("API bypass secret for local development and testing (skips auth)"),
+	INKEEP_AGENTS_MANAGE_API_BYPASS_SECRET: z.string().optional().describe("Management API bypass secret for local development and testing (skips auth)"),
+	INKEEP_AGENTS_RUN_API_BYPASS_SECRET: z.string().optional().describe("Run API bypass secret for local development and testing (skips auth)"),
+	INKEEP_AGENTS_EVAL_API_BYPASS_SECRET: z.string().optional().describe("Eval API bypass secret for local development and testing (skips auth)"),
+	INKEEP_AGENTS_TEMP_JWT_PUBLIC_KEY: z.string().optional().describe("Temporary JWT public key for Playground (generate with scripts/generate-jwt-keys.sh)"),
+	INKEEP_AGENTS_TEMP_JWT_PRIVATE_KEY: z.string().optional().describe("Temporary JWT private key for Playground (generate with scripts/generate-jwt-keys.sh)"),
+	NANGO_SERVER_URL: z.string().optional().default("https://api.nango.dev").describe("Nango server URL for OAuth integrations"),
+	NANGO_SECRET_KEY: z.string().optional().describe("Nango secret key for OAuth integrations"),
+	OTEL_BSP_SCHEDULE_DELAY: z.coerce.number().optional().default(500).describe("OpenTelemetry batch span processor schedule delay in milliseconds"),
+	OTEL_BSP_MAX_EXPORT_BATCH_SIZE: z.coerce.number().optional().default(64).describe("OpenTelemetry batch span processor max export batch size"),
+	TENANT_ID: z.string().optional().default("default").describe("Default tenant ID for development"),
+	SIGNOZ_URL: z.string().optional().describe("SigNoz server URL for observability"),
+	SIGNOZ_API_KEY: z.string().optional().describe("SigNoz API key for authentication"),
+	PUBLIC_SIGNOZ_URL: z.string().optional().describe("Public SigNoz URL accessible from the browser"),
+	ANTHROPIC_API_KEY: z.string().describe("Anthropic API key for Claude models (required for agent execution). Get from https://console.anthropic.com/"),
+	OPENAI_API_KEY: z.string().optional().describe("OpenAI API key for GPT models. Get from https://platform.openai.com/"),
+	GOOGLE_GENERATIVE_AI_API_KEY: z.string().optional().describe("Google Generative AI API key for Gemini models"),
+	GITHUB_APP_ID: z.string().optional().describe("GitHub App ID for GitHub integration"),
+	GITHUB_APP_PRIVATE_KEY: z.string().optional().describe("GitHub App private key for authentication"),
+	GITHUB_WEBHOOK_SECRET: z.string().optional().describe("Secret for validating GitHub webhook payloads"),
+	GITHUB_STATE_SIGNING_SECRET: z.string().min(32, "GITHUB_STATE_SIGNING_SECRET must be at least 32 characters").optional().describe("Secret for signing GitHub OAuth state (minimum 32 characters)"),
+	GITHUB_APP_NAME: z.string().optional().describe("Name of the GitHub App"),
+	GITHUB_MCP_API_KEY: z.string().optional().describe("API key for the GitHub MCP"),
+	WORKFLOW_TARGET_WORLD: z.string().optional().describe("Target world for workflow execution"),
+	WORKFLOW_POSTGRES_URL: z.string().optional().describe("PostgreSQL connection URL for workflow job queue"),
+	WORKFLOW_POSTGRES_JOB_PREFIX: z.string().optional().describe("Prefix for workflow job names in the queue"),
+	WORKFLOW_POSTGRES_WORKER_CONCURRENCY: z.string().optional().describe("Number of concurrent workflow workers")
 });
 const parseEnv = () => {
 	try {

package/dist/factory.d.ts

@@ -3,10 +3,10 @@ import "./types/index.js";
 import { createAgentsHono } from "./createApp.js";
 import { createAuth0Provider, createOIDCProvider } from "./ssoHelpers.js";
 import { CredentialStore, ServerConfig } from "@inkeep/agents-core";
-import * as hono0 from "hono";
+import * as hono10 from "hono";
 import * as zod205 from "zod";
 import { SSOProviderConfig, UserAuthConfig } from "@inkeep/agents-core/auth";
-import * as hono_types3 from "hono/types";
+import * as hono_types10 from "hono/types";
 import * as better_auth78 from "better-auth";
 import * as better_auth_plugins69 from "better-auth/plugins";
 import * as _better_auth_sso10 from "@better-auth/sso";
@@ -794,25 +794,25 @@ declare function createAgentsAuth(userAuthConfig?: UserAuthConfig): better_auth7
       ac: better_auth_plugins69.AccessControl;
       roles: {
         member: {
-          authorize<K_1 extends "organization" | "member" | "invitation" | "ac" | "project" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins69.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins69.Statements>[key] | {
-            actions: better_auth_plugins69.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins69.Statements>[key];
+          authorize<K_1 extends "organization" | "project" | "member" | "invitation" | "ac" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins69.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins69.Statements>[key] | {
+            actions: better_auth_plugins69.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins69.Statements>[key];
             connector: "OR" | "AND";
           } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins69.AuthorizeResponse;
-          statements: better_auth_plugins69.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins69.Statements>;
+          statements: better_auth_plugins69.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins69.Statements>;
         };
         admin: {
-          authorize<K_1 extends "organization" | "member" | "invitation" | "ac" | "project" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins69.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins69.Statements>[key] | {
-            actions: better_auth_plugins69.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins69.Statements>[key];
+          authorize<K_1 extends "organization" | "project" | "member" | "invitation" | "ac" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins69.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins69.Statements>[key] | {
+            actions: better_auth_plugins69.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins69.Statements>[key];
             connector: "OR" | "AND";
           } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins69.AuthorizeResponse;
-          statements: better_auth_plugins69.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins69.Statements>;
+          statements: better_auth_plugins69.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins69.Statements>;
         };
         owner: {
-          authorize<K_1 extends "organization" | "member" | "invitation" | "ac" | "project" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins69.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins69.Statements>[key] | {
-            actions: better_auth_plugins69.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins69.Statements>[key];
+          authorize<K_1 extends "organization" | "project" | "member" | "invitation" | "ac" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins69.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins69.Statements>[key] | {
+            actions: better_auth_plugins69.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins69.Statements>[key];
             connector: "OR" | "AND";
           } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins69.AuthorizeResponse;
-          statements: better_auth_plugins69.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins69.Statements>;
+          statements: better_auth_plugins69.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins69.Statements>;
         };
       };
       creatorRole: "admin";
@@ -987,7 +987,7 @@ declare function createAgentsAuth(userAuthConfig?: UserAuthConfig): better_auth7
         id: string;
         organizationId: string;
         email: string;
-        role: "member" | "admin" | "owner";
+        role: "owner" | "admin" | "member";
         status: better_auth_plugins69.InvitationStatus;
         inviterId: string;
         expiresAt: Date;
@@ -996,7 +996,7 @@ declare function createAgentsAuth(userAuthConfig?: UserAuthConfig): better_auth7
       Member: {
         id: string;
         organizationId: string;
-        role: "member" | "admin" | "owner";
+        role: "owner" | "admin" | "member";
         createdAt: Date;
         userId: string;
         user: {
@@ -1012,7 +1012,7 @@ declare function createAgentsAuth(userAuthConfig?: UserAuthConfig): better_auth7
         members: {
           id: string;
           organizationId: string;
-          role: "member" | "admin" | "owner";
+          role: "owner" | "admin" | "member";
           createdAt: Date;
           userId: string;
           user: {
@@ -1026,7 +1026,7 @@ declare function createAgentsAuth(userAuthConfig?: UserAuthConfig): better_auth7
           id: string;
           organizationId: string;
           email: string;
-          role: "member" | "admin" | "owner";
+          role: "owner" | "admin" | "member";
           status: better_auth_plugins69.InvitationStatus;
           inviterId: string;
           expiresAt: Date;
@@ -1104,25 +1104,25 @@ declare function createAgentsAuth(userAuthConfig?: UserAuthConfig): better_auth7
       ac: better_auth_plugins69.AccessControl;
       roles: {
         member: {
-          authorize<K_1 extends "organization" | "member" | "invitation" | "ac" | "project" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins69.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins69.Statements>[key] | {
-            actions: better_auth_plugins69.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins69.Statements>[key];
+          authorize<K_1 extends "organization" | "project" | "member" | "invitation" | "ac" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins69.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins69.Statements>[key] | {
+            actions: better_auth_plugins69.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins69.Statements>[key];
             connector: "OR" | "AND";
           } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins69.AuthorizeResponse;
-          statements: better_auth_plugins69.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins69.Statements>;
+          statements: better_auth_plugins69.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins69.Statements>;
         };
         admin: {
-          authorize<K_1 extends "organization" | "member" | "invitation" | "ac" | "project" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins69.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins69.Statements>[key] | {
-            actions: better_auth_plugins69.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins69.Statements>[key];
+          authorize<K_1 extends "organization" | "project" | "member" | "invitation" | "ac" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins69.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins69.Statements>[key] | {
+            actions: better_auth_plugins69.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins69.Statements>[key];
             connector: "OR" | "AND";
           } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins69.AuthorizeResponse;
-          statements: better_auth_plugins69.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins69.Statements>;
+          statements: better_auth_plugins69.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins69.Statements>;
         };
         owner: {
-          authorize<K_1 extends "organization" | "member" | "invitation" | "ac" | "project" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins69.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins69.Statements>[key] | {
-            actions: better_auth_plugins69.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins69.Statements>[key];
+          authorize<K_1 extends "organization" | "project" | "member" | "invitation" | "ac" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins69.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins69.Statements>[key] | {
+            actions: better_auth_plugins69.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins69.Statements>[key];
             connector: "OR" | "AND";
           } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins69.AuthorizeResponse;
-          statements: better_auth_plugins69.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins69.Statements>;
+          statements: better_auth_plugins69.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins69.Statements>;
         };
       };
       creatorRole: "admin";
@@ -1536,6 +1536,6 @@ declare function createAgentsApp(config?: {
   credentialStores?: CredentialStore[];
   auth?: UserAuthConfig;
   sandboxConfig?: SandboxConfig;
-}): hono0.Hono<hono_types3.BlankEnv, hono_types3.BlankSchema, "/">;
+}): hono10.Hono<hono_types10.BlankEnv, hono_types10.BlankSchema, "/">;
 //#endregion
 export { type SSOProviderConfig, type UserAuthConfig, createAgentsApp, createAgentsAuth, createAgentsHono, createAuth0Provider, createOIDCProvider };

package/dist/index.d.ts

@@ -795,25 +795,25 @@ declare const auth: better_auth0.Auth<{
       ac: better_auth_plugins0.AccessControl;
       roles: {
         member: {
-          authorize<K_1 extends "organization" | "member" | "invitation" | "ac" | "project" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins0.Statements>[key] | {
-            actions: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins0.Statements>[key];
+          authorize<K_1 extends "organization" | "project" | "member" | "invitation" | "ac" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins0.Statements>[key] | {
+            actions: better_auth_plugins0.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins0.Statements>[key];
             connector: "OR" | "AND";
           } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
-          statements: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins0.Statements>;
+          statements: better_auth_plugins0.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins0.Statements>;
         };
         admin: {
-          authorize<K_1 extends "organization" | "member" | "invitation" | "ac" | "project" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins0.Statements>[key] | {
-            actions: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins0.Statements>[key];
+          authorize<K_1 extends "organization" | "project" | "member" | "invitation" | "ac" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins0.Statements>[key] | {
+            actions: better_auth_plugins0.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins0.Statements>[key];
             connector: "OR" | "AND";
           } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
-          statements: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins0.Statements>;
+          statements: better_auth_plugins0.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins0.Statements>;
         };
         owner: {
-          authorize<K_1 extends "organization" | "member" | "invitation" | "ac" | "project" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins0.Statements>[key] | {
-            actions: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins0.Statements>[key];
+          authorize<K_1 extends "organization" | "project" | "member" | "invitation" | "ac" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins0.Statements>[key] | {
+            actions: better_auth_plugins0.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins0.Statements>[key];
             connector: "OR" | "AND";
           } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
-          statements: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins0.Statements>;
+          statements: better_auth_plugins0.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins0.Statements>;
         };
       };
       creatorRole: "admin";
@@ -988,7 +988,7 @@ declare const auth: better_auth0.Auth<{
         id: string;
         organizationId: string;
         email: string;
-        role: "member" | "admin" | "owner";
+        role: "owner" | "admin" | "member";
         status: better_auth_plugins0.InvitationStatus;
         inviterId: string;
         expiresAt: Date;
@@ -997,7 +997,7 @@ declare const auth: better_auth0.Auth<{
       Member: {
         id: string;
         organizationId: string;
-        role: "member" | "admin" | "owner";
+        role: "owner" | "admin" | "member";
         createdAt: Date;
         userId: string;
         user: {
@@ -1013,7 +1013,7 @@ declare const auth: better_auth0.Auth<{
         members: {
           id: string;
           organizationId: string;
-          role: "member" | "admin" | "owner";
+          role: "owner" | "admin" | "member";
           createdAt: Date;
           userId: string;
           user: {
@@ -1027,7 +1027,7 @@ declare const auth: better_auth0.Auth<{
           id: string;
           organizationId: string;
           email: string;
-          role: "member" | "admin" | "owner";
+          role: "owner" | "admin" | "member";
           status: better_auth_plugins0.InvitationStatus;
           inviterId: string;
           expiresAt: Date;
@@ -1105,25 +1105,25 @@ declare const auth: better_auth0.Auth<{
       ac: better_auth_plugins0.AccessControl;
       roles: {
         member: {
-          authorize<K_1 extends "organization" | "member" | "invitation" | "ac" | "project" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins0.Statements>[key] | {
-            actions: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins0.Statements>[key];
+          authorize<K_1 extends "organization" | "project" | "member" | "invitation" | "ac" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins0.Statements>[key] | {
+            actions: better_auth_plugins0.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins0.Statements>[key];
             connector: "OR" | "AND";
           } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
-          statements: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins0.Statements>;
+          statements: better_auth_plugins0.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins0.Statements>;
         };
         admin: {
-          authorize<K_1 extends "organization" | "member" | "invitation" | "ac" | "project" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins0.Statements>[key] | {
-            actions: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins0.Statements>[key];
+          authorize<K_1 extends "organization" | "project" | "member" | "invitation" | "ac" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins0.Statements>[key] | {
+            actions: better_auth_plugins0.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins0.Statements>[key];
             connector: "OR" | "AND";
           } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
-          statements: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins0.Statements>;
+          statements: better_auth_plugins0.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins0.Statements>;
         };
         owner: {
-          authorize<K_1 extends "organization" | "member" | "invitation" | "ac" | "project" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins0.Statements>[key] | {
-            actions: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins0.Statements>[key];
+          authorize<K_1 extends "organization" | "project" | "member" | "invitation" | "ac" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins0.Statements>[key] | {
+            actions: better_auth_plugins0.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins0.Statements>[key];
             connector: "OR" | "AND";
           } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
-          statements: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins0.Statements>;
+          statements: better_auth_plugins0.Subset<"organization" | "project" | "member" | "invitation" | "ac" | "team", better_auth_plugins0.Statements>;
         };
       };
       creatorRole: "admin";

package/dist/middleware/evalsAuth.d.ts

@@ -1,5 +1,5 @@
 import { BaseExecutionContext } from "@inkeep/agents-core";
-import * as hono4 from "hono";
+import * as hono0 from "hono";
 
 //#region src/middleware/evalsAuth.d.ts
 
@@ -7,7 +7,7 @@ import * as hono4 from "hono";
  * Middleware to authenticate API requests using Bearer token authentication
  * First checks if token matches INKEEP_AGENTS_EVAL_API_BYPASS_SECRET,
  */
-declare const evalApiKeyAuth: () => hono4.MiddlewareHandler<{
+declare const evalApiKeyAuth: () => hono0.MiddlewareHandler<{
   Variables: {
     executionContext: BaseExecutionContext;
   };

package/dist/middleware/manageAuth.d.ts

@@ -1,5 +1,5 @@
 import { BaseExecutionContext } from "@inkeep/agents-core";
-import * as hono16 from "hono";
+import * as hono2 from "hono";
 import { createAuth } from "@inkeep/agents-core/auth";
 
 //#region src/middleware/manageAuth.d.ts
@@ -12,7 +12,7 @@ import { createAuth } from "@inkeep/agents-core/auth";
  * 3. Database API key
  * 4. Internal service token
  */
-declare const manageApiKeyAuth: () => hono16.MiddlewareHandler<{
+declare const manageApiKeyAuth: () => hono2.MiddlewareHandler<{
   Variables: {
     executionContext: BaseExecutionContext;
     userId?: string;

package/dist/middleware/projectAccess.d.ts

@@ -1,6 +1,6 @@
 import { ManageAppVariables } from "../types/app.js";
 import { ProjectPermissionLevel } from "@inkeep/agents-core";
-import * as hono17 from "hono";
+import * as hono3 from "hono";
 
 //#region src/middleware/projectAccess.d.ts
 /**
@@ -10,6 +10,6 @@ declare const requireProjectPermission: <Env$1 extends {
   Variables: ManageAppVariables;
 } = {
   Variables: ManageAppVariables;
-}>(permission?: ProjectPermissionLevel) => hono17.MiddlewareHandler<Env$1, string, {}, Response>;
+}>(permission?: ProjectPermissionLevel) => hono3.MiddlewareHandler<Env$1, string, {}, Response>;
 //#endregion
 export { requireProjectPermission };

package/dist/middleware/projectConfig.d.ts

@@ -1,11 +1,11 @@
 import { BaseExecutionContext, ResolvedRef } from "@inkeep/agents-core";
-import * as hono9 from "hono";
+import * as hono4 from "hono";
 
 //#region src/middleware/projectConfig.d.ts
 /**
  * Middleware that fetches the full project definition from the Management API
  */
-declare const projectConfigMiddleware: hono9.MiddlewareHandler<{
+declare const projectConfigMiddleware: hono4.MiddlewareHandler<{
   Variables: {
     executionContext: BaseExecutionContext;
     resolvedRef: ResolvedRef;
@@ -15,7 +15,7 @@ declare const projectConfigMiddleware: hono9.MiddlewareHandler<{
  * Creates a middleware that applies project config fetching except for specified route patterns
  * @param skipRouteCheck - Function that returns true if the route should skip the middleware
  */
-declare const projectConfigMiddlewareExcept: (skipRouteCheck: (path: string) => boolean) => hono9.MiddlewareHandler<{
+declare const projectConfigMiddlewareExcept: (skipRouteCheck: (path: string) => boolean) => hono4.MiddlewareHandler<{
   Variables: {
     executionContext: BaseExecutionContext;
     resolvedRef: ResolvedRef;

package/dist/middleware/requirePermission.d.ts

@@ -1,5 +1,5 @@
 import { ManageAppVariables } from "../types/app.js";
-import * as hono8 from "hono";
+import * as hono11 from "hono";
 
 //#region src/middleware/requirePermission.d.ts
 type Permission = {
@@ -9,6 +9,6 @@ declare const requirePermission: <Env$1 extends {
   Variables: ManageAppVariables;
 } = {
   Variables: ManageAppVariables;
-}>(permissions: Permission) => hono8.MiddlewareHandler<Env$1, string, {}, Response>;
+}>(permissions: Permission) => hono11.MiddlewareHandler<Env$1, string, {}, Response>;
 //#endregion
 export { requirePermission };

package/dist/middleware/runAuth.d.ts

@@ -1,8 +1,8 @@
 import { BaseExecutionContext } from "@inkeep/agents-core";
-import * as hono11 from "hono";
+import * as hono12 from "hono";
 
 //#region src/middleware/runAuth.d.ts
-declare const runApiKeyAuth: () => hono11.MiddlewareHandler<{
+declare const runApiKeyAuth: () => hono12.MiddlewareHandler<{
   Variables: {
     executionContext: BaseExecutionContext;
   };
@@ -11,7 +11,7 @@ declare const runApiKeyAuth: () => hono11.MiddlewareHandler<{
  * Creates a middleware that applies API key authentication except for specified route patterns
  * @param skipRouteCheck - Function that returns true if the route should skip authentication
  */
-declare const runApiKeyAuthExcept: (skipRouteCheck: (path: string) => boolean) => hono11.MiddlewareHandler<{
+declare const runApiKeyAuthExcept: (skipRouteCheck: (path: string) => boolean) => hono12.MiddlewareHandler<{
   Variables: {
     executionContext: BaseExecutionContext;
   };
@@ -20,7 +20,7 @@ declare const runApiKeyAuthExcept: (skipRouteCheck: (path: string) => boolean) =
  * Helper middleware for endpoints that optionally support API key authentication
  * If no auth header is present, it continues without setting the executionContext
  */
-declare const runOptionalAuth: () => hono11.MiddlewareHandler<{
+declare const runOptionalAuth: () => hono12.MiddlewareHandler<{
   Variables: {
     executionContext?: BaseExecutionContext;
   };

package/dist/middleware/sessionAuth.d.ts

@@ -1,4 +1,4 @@
-import * as hono5 from "hono";
+import * as hono16 from "hono";
 
 //#region src/middleware/sessionAuth.d.ts
 
@@ -7,11 +7,11 @@ import * as hono5 from "hono";
  * Requires that a user has already been authenticated via Better Auth session.
  * Used primarily for manage routes that require an active user session.
  */
-declare const sessionAuth: () => hono5.MiddlewareHandler<any, string, {}, Response>;
+declare const sessionAuth: () => hono16.MiddlewareHandler<any, string, {}, Response>;
 /**
  * Global session middleware - sets user and session in context for all routes
  * Used for all routes that require an active user session.
  */
-declare const sessionContext: () => hono5.MiddlewareHandler<any, string, {}, Response>;
+declare const sessionContext: () => hono16.MiddlewareHandler<any, string, {}, Response>;
 //#endregion
 export { sessionAuth, sessionContext };

package/dist/middleware/tenantAccess.d.ts

@@ -1,4 +1,4 @@
-import * as hono2 from "hono";
+import * as hono18 from "hono";
 
 //#region src/middleware/tenantAccess.d.ts
 
@@ -11,7 +11,7 @@ import * as hono2 from "hono";
  * - API key user: Access only to the tenant associated with the API key
  * - Session user: Access based on organization membership
  */
-declare const requireTenantAccess: () => hono2.MiddlewareHandler<{
+declare const requireTenantAccess: () => hono18.MiddlewareHandler<{
   Variables: {
     userId: string;
     tenantId: string;

package/dist/middleware/tracing.d.ts

@@ -1,7 +1,7 @@
-import * as hono14 from "hono";
+import * as hono7 from "hono";
 
 //#region src/middleware/tracing.d.ts
-declare const otelBaggageMiddleware: () => hono14.MiddlewareHandler<any, string, {}, Response>;
-declare const executionBaggageMiddleware: () => hono14.MiddlewareHandler<any, string, {}, Response>;
+declare const otelBaggageMiddleware: () => hono7.MiddlewareHandler<any, string, {}, Response>;
+declare const executionBaggageMiddleware: () => hono7.MiddlewareHandler<any, string, {}, Response>;
 //#endregion
 export { executionBaggageMiddleware, otelBaggageMiddleware };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inkeep/agents-api",
-  "version": "0.0.0-dev-20260203023016",
+  "version": "0.0.0-dev-20260203033642",
   "description": "Unified Inkeep Agents API - combines management, runtime, and evaluation capabilities",
   "types": "dist/index.d.ts",
   "exports": {
@@ -66,10 +66,10 @@
     "openid-client": "^6.8.1",
     "pg": "^8.16.3",
     "workflow": "4.0.1-beta.33",
-    "@inkeep/agents-core": "^0.0.0-dev-20260203023016",
-    "@inkeep/agents-manage-mcp": "^0.0.0-dev-20260203023016",
-    "@inkeep/agents-mcp": "^0.0.0-dev-20260203023016",
-    "@inkeep/agents-work-apps": "^0.0.0-dev-20260203023016"
+    "@inkeep/agents-core": "^0.0.0-dev-20260203033642",
+    "@inkeep/agents-manage-mcp": "^0.0.0-dev-20260203033642",
+    "@inkeep/agents-mcp": "^0.0.0-dev-20260203033642",
+    "@inkeep/agents-work-apps": "^0.0.0-dev-20260203033642"
   },
   "peerDependencies": {
     "@hono/zod-openapi": "^1.1.5",