@inkeep/agents-api 0.0.0-dev-20260203033642 → 0.0.0-dev-20260203183511

package/dist/domains/manage/routes/invitations.js

@@ -1,34 +1,22 @@
 import runDbClient_default from "../../../data/db/runDbClient.js";
-import { OpenAPIHono, createRoute, z } from "@hono/zod-openapi";
-import { getPendingInvitationsByEmail } from "@inkeep/agents-core";
+import { sessionAuth } from "../../../middleware/sessionAuth.js";
+import { createApiError, getPendingInvitationsByEmail } from "@inkeep/agents-core";
+import { Hono } from "hono";
 
 //#region src/domains/manage/routes/invitations.ts
-const invitationsRoutes = new OpenAPIHono();
-const PendingInvitationSchema = z.object({
-	id: z.string(),
-	email: z.string(),
-	organizationId: z.string(),
-	organizationName: z.string().nullable(),
-	organizationSlug: z.string().nullable(),
-	role: z.string().nullable(),
-	status: z.string(),
-	expiresAt: z.number(),
-	inviterId: z.string()
-});
-const PendingInvitationsResponseSchema = z.array(PendingInvitationSchema);
-invitationsRoutes.openapi(createRoute({
-	method: "get",
-	path: "/pending",
-	tags: ["Invitations"],
-	summary: "Get pending invitations",
-	description: "Get all pending (non-expired) invitations for a given email address",
-	request: { query: z.object({ email: z.email().describe("Email address to check for invitations") }) },
-	responses: { 200: {
-		description: "List of pending invitations",
-		content: { "application/json": { schema: PendingInvitationsResponseSchema } }
-	} }
-}), async (c) => {
-	const { email } = c.req.valid("query");
+const invitationsRoutes = new Hono();
+invitationsRoutes.use("*", sessionAuth());
+invitationsRoutes.get("/pending", async (c) => {
+	const email = c.req.query("email");
+	const authenticatedEmail = c.get("userEmail");
+	if (!email) throw createApiError({
+		code: "bad_request",
+		message: "Email parameter is required"
+	});
+	if (email !== authenticatedEmail) throw createApiError({
+		code: "forbidden",
+		message: "Cannot access invitations for another email"
+	});
 	const response = (await getPendingInvitationsByEmail(runDbClient_default)(email)).map((inv) => ({
 		...inv,
 		expiresAt: inv.expiresAt instanceof Date ? inv.expiresAt.getTime() : inv.expiresAt

package/dist/domains/manage/routes/mcp.d.ts

@@ -1,7 +1,7 @@
 import { Hono } from "hono";
-import * as hono_types6 from "hono/types";
+import * as hono_types2 from "hono/types";
 
 //#region src/domains/manage/routes/mcp.d.ts
-declare const app: Hono<hono_types6.BlankEnv, hono_types6.BlankSchema, "/">;
+declare const app: Hono<hono_types2.BlankEnv, hono_types2.BlankSchema, "/">;
 //#endregion
 export { app as default };

package/dist/domains/manage/routes/signoz.d.ts

@@ -1,10 +1,10 @@
 import { ManageAppVariables } from "../../../types/app.js";
 import { Hono } from "hono";
-import * as hono_types3 from "hono/types";
+import * as hono_types9 from "hono/types";
 
 //#region src/domains/manage/routes/signoz.d.ts
 declare const app: Hono<{
   Variables: ManageAppVariables;
-}, hono_types3.BlankSchema, "/">;
+}, hono_types9.BlankSchema, "/">;
 //#endregion
 export { app as default };

package/dist/domains/manage/routes/signoz.js

@@ -1,7 +1,7 @@
 import { getLogger as getLogger$1 } from "../../../logger.js";
 import { env } from "../../../env.js";
 import { enforceSecurityFilters } from "../../../utils/signozHelpers.js";
-import { createApiError, projectExists } from "@inkeep/agents-core";
+import { canViewProject, createApiError } from "@inkeep/agents-core";
 import { Hono } from "hono";
 import axios from "axios";
 
@@ -12,10 +12,12 @@ app.post("/query", async (c) => {
 	let payload = await c.req.json();
 	const requestedProjectId = payload.projectId;
 	const tenantId = c.get("tenantId");
-	const db = c.get("db");
-	if (!tenantId) throw createApiError({
+	const userId = c.get("userId");
+	const tenantRole = c.get("tenantRole");
+	if (!userId || !tenantId) throw createApiError({
 		code: "unauthorized",
-		message: "Tenant ID not found"
+		message: "User or organization context not found",
+		instance: c.req.path
 	});
 	logger.debug({
 		tenantId,
@@ -23,18 +25,22 @@ app.post("/query", async (c) => {
 		hasProjectId: !!requestedProjectId
 	}, "Processing SigNoz query request");
 	if (requestedProjectId) {
-		if (!await projectExists(db)({
-			tenantId,
-			projectId: requestedProjectId
-		})) {
-			logger.warn({
-				tenantId,
-				projectId: requestedProjectId
-			}, "Project not found or access denied");
-			return c.json({
-				error: "Forbidden",
-				message: "You do not have access to this project"
-			}, 403);
+		if (!(userId === "system" || userId?.startsWith("apikey:"))) {
+			if (!await canViewProject({
+				userId,
+				projectId: requestedProjectId,
+				orgRole: tenantRole
+			})) {
+				logger.warn({
+					tenantId,
+					projectId: requestedProjectId,
+					userId
+				}, "Project not found or access denied");
+				return c.json({
+					error: "Forbidden",
+					message: "You do not have access to this project"
+				}, 403);
+			}
 		}
 	}
 	payload = enforceSecurityFilters(payload, tenantId, requestedProjectId);

package/dist/domains/manage/routes/userOrganizations.d.ts

@@ -1,9 +1,10 @@
 import { ManageAppVariables } from "../../../types/app.js";
-import { OpenAPIHono } from "@hono/zod-openapi";
+import { Hono } from "hono";
+import * as hono_types8 from "hono/types";
 
 //#region src/domains/manage/routes/userOrganizations.d.ts
-declare const userOrganizationsRoutes: OpenAPIHono<{
+declare const userOrganizationsRoutes: Hono<{
   Variables: ManageAppVariables;
-}, {}, "/">;
+}, hono_types8.BlankSchema, "/">;
 //#endregion
 export { userOrganizationsRoutes as default };

package/dist/domains/manage/routes/userOrganizations.js

@@ -1,57 +1,28 @@
 import runDbClient_default from "../../../data/db/runDbClient.js";
-import { OpenAPIHono, createRoute, z } from "@hono/zod-openapi";
-import { addUserToOrganization, getUserOrganizationsFromDb } from "@inkeep/agents-core";
-import { AddUserToOrganizationRequestSchema, AddUserToOrganizationResponseSchema, UserOrganizationsResponseSchema } from "@inkeep/agents-core/auth/validation";
+import { sessionAuth } from "../../../middleware/sessionAuth.js";
+import { createApiError, getUserOrganizationsFromDb } from "@inkeep/agents-core";
+import { Hono } from "hono";
 
 //#region src/domains/manage/routes/userOrganizations.ts
-const userOrganizationsRoutes = new OpenAPIHono();
-userOrganizationsRoutes.openapi(createRoute({
-	method: "get",
-	path: "/",
-	tags: ["User Organizations"],
-	summary: "List user organizations",
-	description: "Get all organizations associated with a user",
-	request: { params: z.object({ userId: z.string().describe("User ID") }) },
-	responses: { 200: {
-		description: "List of user organizations",
-		content: { "application/json": { schema: UserOrganizationsResponseSchema } }
-	} }
-}), async (c) => {
-	const { userId } = c.req.valid("param");
+const userOrganizationsRoutes = new Hono();
+userOrganizationsRoutes.use("*", sessionAuth());
+userOrganizationsRoutes.get("/", async (c) => {
+	const userId = c.req.param("userId");
+	const authenticatedUserId = c.get("userId");
+	if (!userId) throw createApiError({
+		code: "bad_request",
+		message: "User ID is required"
+	});
+	if (userId !== authenticatedUserId) throw createApiError({
+		code: "forbidden",
+		message: "Cannot access another user's organizations"
+	});
 	const userOrganizations = (await getUserOrganizationsFromDb(runDbClient_default)(userId)).map((org) => ({
 		...org,
 		createdAt: org.createdAt.toISOString()
 	}));
 	return c.json(userOrganizations);
 });
-userOrganizationsRoutes.openapi(createRoute({
-	method: "post",
-	path: "/",
-	tags: ["User Organizations"],
-	summary: "Add user to organization",
-	description: "Associate a user with an organization",
-	request: {
-		params: z.object({ userId: z.string().describe("User ID") }),
-		body: { content: { "application/json": { schema: AddUserToOrganizationRequestSchema } } }
-	},
-	responses: { 201: {
-		description: "User added to organization",
-		content: { "application/json": { schema: AddUserToOrganizationResponseSchema } }
-	} }
-}), async (c) => {
-	const { userId } = c.req.valid("param");
-	const { organizationId, role } = c.req.valid("json");
-	await addUserToOrganization(runDbClient_default)({
-		userId,
-		organizationId,
-		role
-	});
-	return c.json({
-		organizationId,
-		role,
-		createdAt: (/* @__PURE__ */ new Date()).toISOString()
-	}, 201);
-});
 var userOrganizations_default = userOrganizationsRoutes;
 
 //#endregion

package/dist/domains/mcp/routes/mcp.d.ts

@@ -1,7 +1,7 @@
 import { Hono } from "hono";
-import * as hono_types4 from "hono/types";
+import * as hono_types6 from "hono/types";
 
 //#region src/domains/mcp/routes/mcp.d.ts
-declare const app: Hono<hono_types4.BlankEnv, hono_types4.BlankSchema, "/">;
+declare const app: Hono<hono_types6.BlankEnv, hono_types6.BlankSchema, "/">;
 //#endregion
 export { app as default };