@inkeep/agents-api 0.0.0-dev-20260212210717 → 0.0.0-dev-20260212211616

package/dist/.well-known/workflow/v1/manifest.json

@@ -1,6 +1,20 @@
 {
   "version": "1.0.0",
   "steps": {
+    "src/domains/evals/workflow/functions/runDatasetItem.ts": {
+      "callChatApiStep": {
+        "stepId": "step//./src/domains/evals/workflow/functions/runDatasetItem//callChatApiStep"
+      },
+      "createRelationStep": {
+        "stepId": "step//./src/domains/evals/workflow/functions/runDatasetItem//createRelationStep"
+      },
+      "executeEvaluatorStep": {
+        "stepId": "step//./src/domains/evals/workflow/functions/runDatasetItem//executeEvaluatorStep"
+      },
+      "logStep": {
+        "stepId": "step//./src/domains/evals/workflow/functions/runDatasetItem//logStep"
+      }
+    },
     "node_modules/.pnpm/workflow@4.1.0-beta.54_@aws-sdk+client-sts@3.970.0_@nestjs+common@11.1.13_reflect-metad_f85281f2580d7065fc514e637f5f5e1f/node_modules/workflow/dist/internal/builtins.js": {
       "__builtin_response_array_buffer": {
         "stepId": "__builtin_response_array_buffer"
@@ -12,11 +26,6 @@
         "stepId": "__builtin_response_text"
       }
     },
-    "node_modules/.pnpm/workflow@4.1.0-beta.54_@aws-sdk+client-sts@3.970.0_@nestjs+common@11.1.13_reflect-metad_f85281f2580d7065fc514e637f5f5e1f/node_modules/workflow/dist/stdlib.js": {
-      "fetch": {
-        "stepId": "step//workflow@4.1.0-beta.54//fetch"
-      }
-    },
     "src/domains/evals/workflow/functions/evaluateConversation.ts": {
       "executeEvaluatorStep": {
         "stepId": "step//./src/domains/evals/workflow/functions/evaluateConversation//executeEvaluatorStep"
@@ -31,20 +40,6 @@
         "stepId": "step//./src/domains/evals/workflow/functions/evaluateConversation//logStep"
       }
     },
-    "src/domains/evals/workflow/functions/runDatasetItem.ts": {
-      "callChatApiStep": {
-        "stepId": "step//./src/domains/evals/workflow/functions/runDatasetItem//callChatApiStep"
-      },
-      "createRelationStep": {
-        "stepId": "step//./src/domains/evals/workflow/functions/runDatasetItem//createRelationStep"
-      },
-      "executeEvaluatorStep": {
-        "stepId": "step//./src/domains/evals/workflow/functions/runDatasetItem//executeEvaluatorStep"
-      },
-      "logStep": {
-        "stepId": "step//./src/domains/evals/workflow/functions/runDatasetItem//logStep"
-      }
-    },
     "src/domains/run/workflow/steps/scheduledTriggerSteps.ts": {
       "addConversationIdStep": {
         "stepId": "step//./src/domains/run/workflow/steps/scheduledTriggerSteps//addConversationIdStep"
@@ -88,21 +83,26 @@
       "markRunningStep": {
         "stepId": "step//./src/domains/run/workflow/steps/scheduledTriggerSteps//markRunningStep"
       }
+    },
+    "node_modules/.pnpm/workflow@4.1.0-beta.54_@aws-sdk+client-sts@3.970.0_@nestjs+common@11.1.13_reflect-metad_f85281f2580d7065fc514e637f5f5e1f/node_modules/workflow/dist/stdlib.js": {
+      "fetch": {
+        "stepId": "step//workflow@4.1.0-beta.54//fetch"
+      }
     }
   },
   "workflows": {
-    "src/domains/evals/workflow/functions/evaluateConversation.ts": {
-      "_evaluateConversationWorkflow": {
-        "workflowId": "workflow//./src/domains/evals/workflow/functions/evaluateConversation//_evaluateConversationWorkflow",
+    "src/domains/evals/workflow/functions/runDatasetItem.ts": {
+      "_runDatasetItemWorkflow": {
+        "workflowId": "workflow//./src/domains/evals/workflow/functions/runDatasetItem//_runDatasetItemWorkflow",
         "graph": {
           "nodes": [],
           "edges": []
         }
       }
     },
-    "src/domains/evals/workflow/functions/runDatasetItem.ts": {
-      "_runDatasetItemWorkflow": {
-        "workflowId": "workflow//./src/domains/evals/workflow/functions/runDatasetItem//_runDatasetItemWorkflow",
+    "src/domains/evals/workflow/functions/evaluateConversation.ts": {
+      "_evaluateConversationWorkflow": {
+        "workflowId": "workflow//./src/domains/evals/workflow/functions/evaluateConversation//_evaluateConversationWorkflow",
         "graph": {
           "nodes": [],
           "edges": []

package/dist/createApp.d.ts

@@ -1,10 +1,10 @@
 import { AppConfig } from "./types/app.js";
 import "./types/index.js";
 import { Hono } from "hono";
-import * as hono_types12 from "hono/types";
+import * as hono_types13 from "hono/types";
 
 //#region src/createApp.d.ts
 declare const isWebhookRoute: (path: string) => boolean;
-declare function createAgentsHono(config: AppConfig): Hono<hono_types12.BlankEnv, hono_types12.BlankSchema, "/">;
+declare function createAgentsHono(config: AppConfig): Hono<hono_types13.BlankEnv, hono_types13.BlankSchema, "/">;
 //#endregion
 export { createAgentsHono, isWebhookRoute };

package/dist/domains/evals/routes/datasetTriggers.d.ts

@@ -1,7 +1,7 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
-import * as hono9 from "hono";
+import * as hono16 from "hono";
 
 //#region src/domains/evals/routes/datasetTriggers.d.ts
-declare const app: OpenAPIHono<hono9.Env, {}, "/">;
+declare const app: OpenAPIHono<hono16.Env, {}, "/">;
 //#endregion
 export { app as default };

package/dist/domains/evals/routes/index.d.ts

@@ -1,7 +1,7 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
-import * as hono8 from "hono";
+import * as hono12 from "hono";
 
 //#region src/domains/evals/routes/index.d.ts
-declare const app: OpenAPIHono<hono8.Env, {}, "/">;
+declare const app: OpenAPIHono<hono12.Env, {}, "/">;
 //#endregion
 export { app as default };

package/dist/domains/evals/workflow/routes.d.ts

@@ -1,7 +1,7 @@
 import { Hono } from "hono";
-import * as hono_types0 from "hono/types";
+import * as hono_types5 from "hono/types";
 
 //#region src/domains/evals/workflow/routes.d.ts
-declare const workflowRoutes: Hono<hono_types0.BlankEnv, hono_types0.BlankSchema, "/">;
+declare const workflowRoutes: Hono<hono_types5.BlankEnv, hono_types5.BlankSchema, "/">;
 //#endregion
 export { workflowRoutes };

package/dist/domains/manage/routes/invitations.d.ts

@@ -1,10 +1,10 @@
 import { ManageAppVariables } from "../../../types/app.js";
 import { Hono } from "hono";
-import * as hono_types6 from "hono/types";
+import * as hono_types8 from "hono/types";
 
 //#region src/domains/manage/routes/invitations.d.ts
 declare const invitationsRoutes: Hono<{
   Variables: ManageAppVariables;
-}, hono_types6.BlankSchema, "/">;
+}, hono_types8.BlankSchema, "/">;
 //#endregion
 export { invitationsRoutes as default };

package/dist/domains/manage/routes/mcp.d.ts

@@ -1,7 +1,7 @@
 import { Hono } from "hono";
-import * as hono_types4 from "hono/types";
+import * as hono_types9 from "hono/types";
 
 //#region src/domains/manage/routes/mcp.d.ts
-declare const app: Hono<hono_types4.BlankEnv, hono_types4.BlankSchema, "/">;
+declare const app: Hono<hono_types9.BlankEnv, hono_types9.BlankSchema, "/">;
 //#endregion
 export { app as default };

package/dist/domains/manage/routes/passwordResetLinks.d.ts

@@ -1,10 +1,10 @@
 import { ManageAppVariables } from "../../../types/app.js";
 import { Hono } from "hono";
-import * as hono_types3 from "hono/types";
+import * as hono_types11 from "hono/types";
 
 //#region src/domains/manage/routes/passwordResetLinks.d.ts
 declare const passwordResetLinksRoutes: Hono<{
   Variables: ManageAppVariables;
-}, hono_types3.BlankSchema, "/">;
+}, hono_types11.BlankSchema, "/">;
 //#endregion
 export { passwordResetLinksRoutes as default };

package/dist/domains/manage/routes/projectFull.js

@@ -5,7 +5,7 @@ import { requireProjectPermission } from "../../../middleware/projectAccess.js";
 import { onTriggerCreated, onTriggerDeleted, onTriggerUpdated } from "../../run/services/ScheduledTriggerService.js";
 import { requirePermission } from "../../../middleware/requirePermission.js";
 import { OpenAPIHono, createRoute, z } from "@hono/zod-openapi";
-import { ErrorResponseSchema, FullProjectDefinitionSchema, FullProjectSelectResponse, FullProjectSelectWithRelationIdsResponse, TenantParamsSchema, TenantProjectParamsSchema, cascadeDeleteByProject, checkoutBranch, commonGetErrorResponses, createApiError, createFullProjectServerSide, createProjectMetadataAndBranch, deleteFullProject, deleteProjectWithBranch, doltCheckout, getFullProject, getFullProjectWithRelationIds, getProjectMainBranchName, getProjectMetadata, listScheduledTriggers, updateFullProjectServerSide } from "@inkeep/agents-core";
+import { ErrorResponseSchema, FullProjectDefinitionSchema, FullProjectSelectResponse, FullProjectSelectWithRelationIdsResponse, TenantParamsSchema, TenantProjectParamsSchema, cascadeDeleteByProject, checkoutBranch, commonGetErrorResponses, createApiError, createFullProjectServerSide, createProjectMetadataAndBranch, deleteFullProject, deleteProjectWithBranch, doltCheckout, getFullProject, getFullProjectWithRelationIds, getProjectMainBranchName, getProjectMetadata, listScheduledTriggers, removeProjectFromSpiceDb, syncProjectToSpiceDb, updateFullProjectServerSide } from "@inkeep/agents-core";
 
 //#region src/domains/manage/routes/projectFull.ts
 const logger = getLogger$1("projectFull");
@@ -65,33 +65,47 @@ app.openapi(createRoute({
 	const projectData = c.req.valid("json");
 	const validatedProjectData = FullProjectDefinitionSchema.parse(projectData);
 	try {
-		await createProjectMetadataAndBranch(runDbClient_default, configDb)({
-			tenantId,
-			projectId: validatedProjectData.id,
-			createdBy: userId
-		});
-		logger.info({
-			tenantId,
-			projectId: validatedProjectData.id
-		}, "Created project with branch, now populating config");
-		const projectMainBranch = getProjectMainBranchName(tenantId, validatedProjectData.id);
-		await checkoutBranch(configDb)({
-			branchName: projectMainBranch,
-			autoCommitPending: true
-		});
-		const newResolvedRef = {
-			type: "branch",
-			name: projectMainBranch,
-			hash: ""
-		};
-		c.set("resolvedRef", newResolvedRef);
-		logger.debug({ projectMainBranch }, "Checked out project branch for config writes");
-		const createdProject = await createFullProjectServerSide(configDb)({
-			scopes: {
-				tenantId,
-				projectId: validatedProjectData.id
-			},
-			projectData: validatedProjectData
+		const createdProject = await runDbClient_default.transaction(async (runTx) => {
+			return await configDb.transaction(async (configTx) => {
+				await createProjectMetadataAndBranch(runTx, configTx)({
+					tenantId,
+					projectId: validatedProjectData.id,
+					createdBy: userId
+				});
+				logger.info({
+					tenantId,
+					projectId: validatedProjectData.id
+				}, "Created project with branch, now populating config");
+				const projectMainBranch = getProjectMainBranchName(tenantId, validatedProjectData.id);
+				await checkoutBranch(configTx)({
+					branchName: projectMainBranch,
+					autoCommitPending: true
+				});
+				const newResolvedRef = {
+					type: "branch",
+					name: projectMainBranch,
+					hash: ""
+				};
+				c.set("resolvedRef", newResolvedRef);
+				logger.debug({ projectMainBranch }, "Checked out project branch for config writes");
+				const project = await createFullProjectServerSide(configTx)({
+					scopes: {
+						tenantId,
+						projectId: validatedProjectData.id
+					},
+					projectData: validatedProjectData
+				});
+				if (userId) await syncProjectToSpiceDb({
+					tenantId,
+					projectId: validatedProjectData.id,
+					creatorUserId: userId
+				});
+				else logger.warn({
+					tenantId,
+					projectId: validatedProjectData.id
+				}, "Skipping SpiceDB sync — no userId available");
+				return project;
+			});
 		});
 		return c.json({ data: createdProject }, 201);
 	} catch (error) {
@@ -100,6 +114,19 @@ app.openapi(createRoute({
 			code: "conflict",
 			message: `Project with ID '${projectData.id}' already exists`
 		});
+		const isGrpcError = error?.metadata !== void 0 && typeof error?.code === "number";
+		if (error?.message?.includes("SpiceDB") || isGrpcError) {
+			logger.error({
+				error,
+				tenantId,
+				projectId: validatedProjectData.id,
+				userId
+			}, "Failed to sync project to SpiceDB — database transactions rolled back");
+			throw createApiError({
+				code: "internal_server_error",
+				message: "Failed to set up project authorization. No changes were made to the database."
+			});
+		}
 		throw error;
 	}
 });
@@ -212,29 +239,13 @@ app.openapi(createRoute({
 	const projectData = c.req.valid("json");
 	const configDb = c.get("db");
 	const userId = c.get("userId");
+	const isCreate = c.get("isProjectCreate") ?? false;
 	try {
 		const validatedProjectData = FullProjectDefinitionSchema.parse(projectData);
 		if (projectId !== validatedProjectData.id) throw createApiError({
 			code: "bad_request",
 			message: `Project ID mismatch: expected ${projectId}, got ${validatedProjectData.id}`
 		});
-		const isCreate = c.get("isProjectCreate") ?? false;
-		if (isCreate) {
-			await createProjectMetadataAndBranch(runDbClient_default, configDb)({
-				tenantId,
-				projectId,
-				createdBy: userId
-			});
-			logger.info({
-				tenantId,
-				projectId
-			}, "Created project with branch for PUT (upsert)");
-			const projectMainBranch = getProjectMainBranchName(tenantId, projectId);
-			await checkoutBranch(configDb)({
-				branchName: projectMainBranch,
-				autoCommitPending: true
-			});
-		}
 		const existingTriggersByAgent = /* @__PURE__ */ new Map();
 		if (!isCreate) {
 			const agents = Object.keys(validatedProjectData.agents || {});
@@ -247,12 +258,40 @@ app.openapi(createRoute({
 				existingTriggersByAgent.set(agentId, existingTriggers);
 			}
 		}
-		const updatedProject = isCreate ? await createFullProjectServerSide(configDb)({
-			scopes: {
-				tenantId,
-				projectId
-			},
-			projectData: validatedProjectData
+		const updatedProject = isCreate ? await runDbClient_default.transaction(async (runTx) => {
+			return await configDb.transaction(async (configTx) => {
+				await createProjectMetadataAndBranch(runTx, configTx)({
+					tenantId,
+					projectId,
+					createdBy: userId
+				});
+				logger.info({
+					tenantId,
+					projectId
+				}, "Created project with branch for PUT (upsert)");
+				const projectMainBranch = getProjectMainBranchName(tenantId, projectId);
+				await checkoutBranch(configTx)({
+					branchName: projectMainBranch,
+					autoCommitPending: true
+				});
+				const project = await createFullProjectServerSide(configTx)({
+					scopes: {
+						tenantId,
+						projectId
+					},
+					projectData: validatedProjectData
+				});
+				if (userId) await syncProjectToSpiceDb({
+					tenantId,
+					projectId,
+					creatorUserId: userId
+				});
+				else logger.warn({
+					tenantId,
+					projectId
+				}, "Skipping SpiceDB sync — no userId available");
+				return project;
+			});
 		}) : await updateFullProjectServerSide(configDb)({
 			scopes: {
 				tenantId,
@@ -356,6 +395,21 @@ app.openapi(createRoute({
 			code: "bad_request",
 			message: error.message
 		});
+		if (isCreate) {
+			const isGrpcError = error?.metadata !== void 0 && typeof error?.code === "number";
+			if (error?.message?.includes("SpiceDB") || isGrpcError) {
+				logger.error({
+					error,
+					tenantId,
+					projectId,
+					userId
+				}, "Failed to sync project to SpiceDB — database transactions rolled back");
+				throw createApiError({
+					code: "internal_server_error",
+					message: "Failed to set up project authorization. No changes were made to the database."
+				});
+			}
+		}
 		throw createApiError({
 			code: "internal_server_error",
 			message: error instanceof Error ? error.message : "Failed to update project"
@@ -407,6 +461,22 @@ app.openapi(createRoute({
 			code: "not_found",
 			message: "Project not found"
 		});
+		try {
+			await removeProjectFromSpiceDb({
+				tenantId,
+				projectId
+			});
+			logger.info({
+				tenantId,
+				projectId
+			}, "Removed project from SpiceDB");
+		} catch (error) {
+			logger.warn({
+				error,
+				tenantId,
+				projectId
+			}, "Failed to remove project from SpiceDB - orphaned auth relationships may remain");
+		}
 		return c.body(null, 204);
 	} catch (error) {
 		if (error instanceof Error && error.message.includes("not found")) throw createApiError({

package/dist/domains/manage/routes/users.d.ts

@@ -1,10 +1,10 @@
 import { ManageAppVariables } from "../../../types/app.js";
 import { Hono } from "hono";
-import * as hono_types14 from "hono/types";
+import * as hono_types12 from "hono/types";
 
 //#region src/domains/manage/routes/users.d.ts
 declare const usersRoutes: Hono<{
   Variables: ManageAppVariables;
-}, hono_types14.BlankSchema, "/">;
+}, hono_types12.BlankSchema, "/">;
 //#endregion
 export { usersRoutes as default };

package/dist/domains/mcp/routes/mcp.d.ts

@@ -1,7 +1,7 @@
 import { Hono } from "hono";
-import * as hono_types1 from "hono/types";
+import * as hono_types3 from "hono/types";
 
 //#region src/domains/mcp/routes/mcp.d.ts
-declare const app: Hono<hono_types1.BlankEnv, hono_types1.BlankSchema, "/">;
+declare const app: Hono<hono_types3.BlankEnv, hono_types3.BlankSchema, "/">;
 //#endregion
 export { app as default };

package/dist/domains/run/workflow/steps/scheduledTriggerSteps.d.ts

@@ -105,7 +105,7 @@ declare function createInvocationIdempotentStep(params: {
     projectId: string;
     tenantId: string;
     id: string;
-    status: "completed" | "pending" | "failed" | "running" | "cancelled";
+    status: "pending" | "completed" | "failed" | "running" | "cancelled";
     resolvedPayload?: Record<string, unknown> | null | undefined;
   };
   alreadyExists: boolean;
@@ -145,7 +145,7 @@ declare function markRunningStep(params: {
   projectId: string;
   tenantId: string;
   id: string;
-  status: "completed" | "pending" | "failed" | "running" | "cancelled";
+  status: "pending" | "completed" | "failed" | "running" | "cancelled";
   resolvedPayload?: Record<string, unknown> | null | undefined;
 }>;
 /**
@@ -172,7 +172,7 @@ declare function addConversationIdStep(params: {
   projectId: string;
   tenantId: string;
   id: string;
-  status: "completed" | "pending" | "failed" | "running" | "cancelled";
+  status: "pending" | "completed" | "failed" | "running" | "cancelled";
   resolvedPayload?: Record<string, unknown> | null | undefined;
 } | undefined>;
 /**
@@ -197,7 +197,7 @@ declare function markCompletedStep(params: {
   projectId: string;
   tenantId: string;
   id: string;
-  status: "completed" | "pending" | "failed" | "running" | "cancelled";
+  status: "pending" | "completed" | "failed" | "running" | "cancelled";
   resolvedPayload?: Record<string, unknown> | null | undefined;
 } | undefined>;
 /**
@@ -222,7 +222,7 @@ declare function markFailedStep(params: {
   projectId: string;
   tenantId: string;
   id: string;
-  status: "completed" | "pending" | "failed" | "running" | "cancelled";
+  status: "pending" | "completed" | "failed" | "running" | "cancelled";
   resolvedPayload?: Record<string, unknown> | null | undefined;
 } | undefined>;
 /**

package/dist/env.d.ts

@@ -14,11 +14,11 @@ declare const envSchema: z.ZodObject<{
     pentest: "pentest";
   }>>;
   LOG_LEVEL: z.ZodDefault<z.ZodEnum<{
-    error: "error";
     trace: "trace";
     debug: "debug";
     info: "info";
     warn: "warn";
+    error: "error";
   }>>;
   INKEEP_AGENTS_MANAGE_DATABASE_URL: z.ZodString;
   INKEEP_AGENTS_RUN_DATABASE_URL: z.ZodString;
@@ -59,7 +59,7 @@ declare const envSchema: z.ZodObject<{
 declare const env: {
   NODE_ENV: "development" | "production" | "test";
   ENVIRONMENT: "development" | "production" | "test" | "pentest";
-  LOG_LEVEL: "error" | "trace" | "debug" | "info" | "warn";
+  LOG_LEVEL: "trace" | "debug" | "info" | "warn" | "error";
   INKEEP_AGENTS_MANAGE_DATABASE_URL: string;
   INKEEP_AGENTS_RUN_DATABASE_URL: string;
   INKEEP_AGENTS_API_URL: string;