@inkeep/agents-api 0.0.0-dev-20260219033751 → 0.0.0-dev-20260219045007

package/dist/domains/manage/routes/evals/evaluationRunConfigs.js

@@ -1,26 +1,20 @@
 import { getLogger as getLogger$1 } from "../../../../logger.js";
 import runDbClient_default from "../../../../data/db/runDbClient.js";
 import { requireProjectPermission } from "../../../../middleware/projectAccess.js";
-import { OpenAPIHono, createRoute, z } from "@hono/zod-openapi";
+import { OpenAPIHono, z } from "@hono/zod-openapi";
 import { EvaluationResultApiSelectSchema, EvaluationRunConfigApiInsertSchema, EvaluationRunConfigApiUpdateSchema, EvaluationRunConfigWithSuiteConfigsApiSelectSchema, ListResponseSchema, SingleResponseSchema, TenantProjectParamsSchema, commonGetErrorResponses, createApiError, createEvaluationRunConfig, createEvaluationRunConfigEvaluationSuiteConfigRelation, deleteEvaluationRunConfig, deleteEvaluationRunConfigEvaluationSuiteConfigRelation, generateId, getConversation, getEvaluationRunConfigById, getEvaluationRunConfigEvaluationSuiteConfigRelations, getMessagesByConversation, listEvaluationResultsByRun, listEvaluationRunConfigsWithSuiteConfigs, listEvaluationRuns, updateEvaluationRunConfig } from "@inkeep/agents-core";
+import { createProtectedRoute } from "@inkeep/agents-core/middleware";
 
 //#region src/domains/manage/routes/evals/evaluationRunConfigs.ts
 const app = new OpenAPIHono();
 const logger = getLogger$1("evaluationRunConfigs");
-app.use("/", async (c, next) => {
-	if (c.req.method === "POST") return requireProjectPermission("edit")(c, next);
-	return next();
-});
-app.use("/:configId", async (c, next) => {
-	if (["PATCH", "DELETE"].includes(c.req.method)) return requireProjectPermission("edit")(c, next);
-	return next();
-});
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "get",
 	path: "/",
 	summary: "List Evaluation Run Configs",
 	operationId: "list-evaluation-run-configs",
 	tags: ["Evaluations"],
+	permission: requireProjectPermission("view"),
 	request: { params: TenantProjectParamsSchema },
 	responses: {
 		200: {
@@ -58,12 +52,13 @@ app.openapi(createRoute({
 		}), 500);
 	}
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "get",
 	path: "/{configId}",
 	summary: "Get Evaluation Run Config by ID",
 	operationId: "get-evaluation-run-config",
 	tags: ["Evaluations"],
+	permission: requireProjectPermission("view"),
 	request: { params: TenantProjectParamsSchema.extend({ configId: z.string() }) },
 	responses: {
 		200: {
@@ -107,12 +102,13 @@ app.openapi(createRoute({
 		}), 500);
 	}
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "get",
 	path: "/{configId}/results",
 	summary: "Get Evaluation Results by Run Config ID",
 	operationId: "get-evaluation-run-config-results",
 	tags: ["Evaluations"],
+	permission: requireProjectPermission("view"),
 	request: { params: TenantProjectParamsSchema.extend({ configId: z.string() }) },
 	responses: {
 		200: {
@@ -209,12 +205,13 @@ app.openapi(createRoute({
 		}), 500);
 	}
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "post",
 	path: "/",
 	summary: "Create Evaluation Run Config",
 	operationId: "create-evaluation-run-config",
 	tags: ["Evaluations"],
+	permission: requireProjectPermission("edit"),
 	request: {
 		params: TenantProjectParamsSchema,
 		body: { content: { "application/json": { schema: EvaluationRunConfigApiInsertSchema } } }
@@ -274,12 +271,13 @@ app.openapi(createRoute({
 		}), 500);
 	}
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "patch",
 	path: "/{configId}",
 	summary: "Update Evaluation Run Config",
 	operationId: "update-evaluation-run-config",
 	tags: ["Evaluations"],
+	permission: requireProjectPermission("edit"),
 	request: {
 		params: TenantProjectParamsSchema.extend({ configId: z.string() }),
 		body: { content: { "application/json": { schema: EvaluationRunConfigApiUpdateSchema } } }
@@ -360,12 +358,13 @@ app.openapi(createRoute({
 		}), 500);
 	}
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "delete",
 	path: "/{configId}",
 	summary: "Delete Evaluation Run Config",
 	operationId: "delete-evaluation-run-config",
 	tags: ["Evaluations"],
+	permission: requireProjectPermission("edit"),
 	request: { params: TenantProjectParamsSchema.extend({ configId: z.string() }) },
 	responses: {
 		204: { description: "Evaluation run config deleted" },

package/dist/domains/manage/routes/evals/evaluationSuiteConfigEvaluatorRelations.js

@@ -1,21 +1,19 @@
 import { getLogger as getLogger$1 } from "../../../../logger.js";
 import { requireProjectPermission } from "../../../../middleware/projectAccess.js";
-import { OpenAPIHono, createRoute, z } from "@hono/zod-openapi";
+import { OpenAPIHono, z } from "@hono/zod-openapi";
 import { TenantProjectParamsSchema, commonGetErrorResponses, createApiError, createEvaluationSuiteConfigEvaluatorRelation, deleteEvaluationSuiteConfigEvaluatorRelation, generateId, getEvaluationSuiteConfigEvaluatorRelations } from "@inkeep/agents-core";
+import { createProtectedRoute } from "@inkeep/agents-core/middleware";
 
 //#region src/domains/manage/routes/evals/evaluationSuiteConfigEvaluatorRelations.ts
 const app = new OpenAPIHono();
 const logger = getLogger$1("evaluationSuiteConfigEvaluatorRelations");
-app.use("/:configId/evaluators/:evaluatorId", async (c, next) => {
-	if (["POST", "DELETE"].includes(c.req.method)) return requireProjectPermission("edit")(c, next);
-	return next();
-});
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "get",
 	path: "/{configId}/evaluators",
 	summary: "List Evaluators for Evaluation Suite Config",
 	operationId: "list-evaluation-suite-config-evaluators",
 	tags: ["Evaluations"],
+	permission: requireProjectPermission("view"),
 	request: { params: TenantProjectParamsSchema.extend({ configId: z.string() }) },
 	responses: {
 		200: {
@@ -47,12 +45,13 @@ app.openapi(createRoute({
 		}), 500);
 	}
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "post",
 	path: "/{configId}/evaluators/{evaluatorId}",
 	summary: "Add Evaluator to Evaluation Suite Config",
 	operationId: "add-evaluator-to-suite-config",
 	tags: ["Evaluations"],
+	permission: requireProjectPermission("edit"),
 	request: { params: TenantProjectParamsSchema.extend({
 		configId: z.string(),
 		evaluatorId: z.string()
@@ -97,12 +96,13 @@ app.openapi(createRoute({
 		}), 500);
 	}
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "delete",
 	path: "/{configId}/evaluators/{evaluatorId}",
 	summary: "Remove Evaluator from Evaluation Suite Config",
 	operationId: "remove-evaluator-from-suite-config",
 	tags: ["Evaluations"],
+	permission: requireProjectPermission("edit"),
 	request: { params: TenantProjectParamsSchema.extend({
 		configId: z.string(),
 		evaluatorId: z.string()

package/dist/domains/manage/routes/evals/evaluationSuiteConfigs.js

@@ -1,25 +1,19 @@
 import { getLogger as getLogger$1 } from "../../../../logger.js";
 import { requireProjectPermission } from "../../../../middleware/projectAccess.js";
-import { OpenAPIHono, createRoute, z } from "@hono/zod-openapi";
+import { OpenAPIHono, z } from "@hono/zod-openapi";
 import { EvaluationSuiteConfigApiInsertSchema, EvaluationSuiteConfigApiSelectSchema, EvaluationSuiteConfigApiUpdateSchema, ListResponseSchema, SingleResponseSchema, TenantProjectParamsSchema, commonGetErrorResponses, createApiError, createEvaluationSuiteConfig, createEvaluationSuiteConfigEvaluatorRelation, deleteEvaluationSuiteConfig, generateId, getEvaluationSuiteConfigById, listEvaluationSuiteConfigs, updateEvaluationSuiteConfig } from "@inkeep/agents-core";
+import { createProtectedRoute } from "@inkeep/agents-core/middleware";
 
 //#region src/domains/manage/routes/evals/evaluationSuiteConfigs.ts
 const app = new OpenAPIHono();
 const logger = getLogger$1("evaluationSuiteConfigs");
-app.use("/", async (c, next) => {
-	if (c.req.method === "POST") return requireProjectPermission("edit")(c, next);
-	return next();
-});
-app.use("/:configId", async (c, next) => {
-	if (["PATCH", "DELETE"].includes(c.req.method)) return requireProjectPermission("edit")(c, next);
-	return next();
-});
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "get",
 	path: "/",
 	summary: "List Evaluation Suite Configs",
 	operationId: "list-evaluation-suite-configs",
 	tags: ["Evaluations"],
+	permission: requireProjectPermission("view"),
 	request: { params: TenantProjectParamsSchema },
 	responses: {
 		200: {
@@ -57,12 +51,13 @@ app.openapi(createRoute({
 		}), 500);
 	}
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "get",
 	path: "/{configId}",
 	summary: "Get Evaluation Suite Config by ID",
 	operationId: "get-evaluation-suite-config",
 	tags: ["Evaluations"],
+	permission: requireProjectPermission("view"),
 	request: { params: TenantProjectParamsSchema.extend({ configId: z.string() }) },
 	responses: {
 		200: {
@@ -98,12 +93,13 @@ app.openapi(createRoute({
 		}), 500);
 	}
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "post",
 	path: "/",
 	summary: "Create Evaluation Suite Config",
 	operationId: "create-evaluation-suite-config",
 	tags: ["Evaluations"],
+	permission: requireProjectPermission("edit"),
 	request: {
 		params: TenantProjectParamsSchema,
 		body: { content: { "application/json": { schema: EvaluationSuiteConfigApiInsertSchema } } }
@@ -154,12 +150,13 @@ app.openapi(createRoute({
 		}), 500);
 	}
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "patch",
 	path: "/{configId}",
 	summary: "Update Evaluation Suite Config",
 	operationId: "update-evaluation-suite-config",
 	tags: ["Evaluations"],
+	permission: requireProjectPermission("edit"),
 	request: {
 		params: TenantProjectParamsSchema.extend({ configId: z.string() }),
 		body: { content: { "application/json": { schema: EvaluationSuiteConfigApiUpdateSchema } } }
@@ -207,12 +204,13 @@ app.openapi(createRoute({
 		}), 500);
 	}
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "delete",
 	path: "/{configId}",
 	summary: "Delete Evaluation Suite Config",
 	operationId: "delete-evaluation-suite-config",
 	tags: ["Evaluations"],
+	permission: requireProjectPermission("edit"),
 	request: { params: TenantProjectParamsSchema.extend({ configId: z.string() }) },
 	responses: {
 		204: { description: "Evaluation suite config deleted" },

package/dist/domains/manage/routes/evals/evaluators.js

@@ -1,25 +1,19 @@
 import { getLogger as getLogger$1 } from "../../../../logger.js";
 import { requireProjectPermission } from "../../../../middleware/projectAccess.js";
-import { OpenAPIHono, createRoute, z } from "@hono/zod-openapi";
+import { OpenAPIHono, z } from "@hono/zod-openapi";
 import { EvaluatorApiInsertSchema, EvaluatorApiSelectSchema, EvaluatorApiUpdateSchema, ListResponseSchema, SingleResponseSchema, TenantProjectParamsSchema, commonGetErrorResponses, createApiError, createEvaluator, deleteEvaluator, generateId, getEvaluatorById, getEvaluatorsByIds, listEvaluators, updateEvaluator } from "@inkeep/agents-core";
+import { createProtectedRoute } from "@inkeep/agents-core/middleware";
 
 //#region src/domains/manage/routes/evals/evaluators.ts
 const app = new OpenAPIHono();
 const logger = getLogger$1("evaluators");
-app.use("/", async (c, next) => {
-	if (c.req.method === "POST") return requireProjectPermission("edit")(c, next);
-	return next();
-});
-app.use("/:evaluatorId", async (c, next) => {
-	if (["PATCH", "DELETE"].includes(c.req.method)) return requireProjectPermission("edit")(c, next);
-	return next();
-});
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "get",
 	path: "/",
 	summary: "List Evaluators",
 	operationId: "list-evaluators",
 	tags: ["Evaluations"],
+	permission: requireProjectPermission("view"),
 	request: { params: TenantProjectParamsSchema },
 	responses: {
 		200: {
@@ -57,12 +51,13 @@ app.openapi(createRoute({
 		}), 500);
 	}
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "get",
 	path: "/{evaluatorId}",
 	summary: "Get Evaluator by ID",
 	operationId: "get-evaluator",
 	tags: ["Evaluations"],
+	permission: requireProjectPermission("view"),
 	request: { params: TenantProjectParamsSchema.extend({ evaluatorId: z.string() }) },
 	responses: {
 		200: {
@@ -98,12 +93,13 @@ app.openapi(createRoute({
 		}), 500);
 	}
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "post",
 	path: "/batch",
 	summary: "Get Evaluators by IDs",
 	operationId: "get-evaluators-batch",
 	tags: ["Evaluations"],
+	permission: requireProjectPermission("edit"),
 	request: {
 		params: TenantProjectParamsSchema,
 		body: { content: { "application/json": { schema: z.object({ evaluatorIds: z.array(z.string()).min(1, "At least one evaluator ID is required") }) } } }
@@ -141,12 +137,13 @@ app.openapi(createRoute({
 		}), 500);
 	}
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "post",
 	path: "/",
 	summary: "Create Evaluator",
 	operationId: "create-evaluator",
 	tags: ["Evaluations"],
+	permission: requireProjectPermission("edit"),
 	request: {
 		params: TenantProjectParamsSchema,
 		body: { content: { "application/json": { schema: EvaluatorApiInsertSchema } } }
@@ -189,12 +186,13 @@ app.openapi(createRoute({
 		}), 500);
 	}
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "patch",
 	path: "/{evaluatorId}",
 	summary: "Update Evaluator",
 	operationId: "update-evaluator",
 	tags: ["Evaluations"],
+	permission: requireProjectPermission("edit"),
 	request: {
 		params: TenantProjectParamsSchema.extend({ evaluatorId: z.string() }),
 		body: { content: { "application/json": { schema: EvaluatorApiUpdateSchema } } }
@@ -242,12 +240,13 @@ app.openapi(createRoute({
 		}), 500);
 	}
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "delete",
 	path: "/{evaluatorId}",
 	summary: "Delete Evaluator",
 	operationId: "delete-evaluator",
 	tags: ["Evaluations"],
+	permission: requireProjectPermission("edit"),
 	request: { params: TenantProjectParamsSchema.extend({ evaluatorId: z.string() }) },
 	responses: {
 		204: { description: "Evaluator deleted" },

package/dist/domains/manage/routes/externalAgents.js

@@ -1,24 +1,18 @@
 import { requireProjectPermission } from "../../../middleware/projectAccess.js";
 import { speakeasyOffsetLimitPagination } from "../../../utils/speakeasy.js";
-import { OpenAPIHono, createRoute } from "@hono/zod-openapi";
+import { OpenAPIHono } from "@hono/zod-openapi";
 import { ErrorResponseSchema, ExternalAgentApiInsertSchema, ExternalAgentApiUpdateSchema, ExternalAgentListResponse, ExternalAgentResponse, PaginationQueryParamsSchema, TenantProjectIdParamsSchema, TenantProjectParamsSchema, commonGetErrorResponses, createApiError, createExternalAgent, deleteExternalAgent, generateId, getExternalAgent, listExternalAgentsPaginated, updateExternalAgent } from "@inkeep/agents-core";
+import { createProtectedRoute } from "@inkeep/agents-core/middleware";
 
 //#region src/domains/manage/routes/externalAgents.ts
 const app = new OpenAPIHono();
-app.use("/", async (c, next) => {
-	if (c.req.method === "POST") return requireProjectPermission("edit")(c, next);
-	return next();
-});
-app.use("/:id", async (c, next) => {
-	if (c.req.method === "PUT" || c.req.method === "DELETE") return requireProjectPermission("edit")(c, next);
-	return next();
-});
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "get",
 	path: "/",
 	summary: "List External Agents",
 	operationId: "list-external-agents",
 	tags: ["External Agents"],
+	permission: requireProjectPermission("view"),
 	request: {
 		params: TenantProjectParamsSchema,
 		query: PaginationQueryParamsSchema
@@ -54,12 +48,13 @@ app.openapi(createRoute({
 	};
 	return c.json(dataWithType);
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "get",
 	path: "/{id}",
 	summary: "Get External Agent",
 	operationId: "get-external-agent-by-id",
 	tags: ["External Agents"],
+	permission: requireProjectPermission("view"),
 	request: { params: TenantProjectIdParamsSchema },
 	responses: {
 		200: {
@@ -88,12 +83,13 @@ app.openapi(createRoute({
 	};
 	return c.json({ data: agentWithType });
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "post",
 	path: "/",
 	summary: "Create External Agent",
 	operationId: "create-external-agent",
 	tags: ["External Agents"],
+	permission: requireProjectPermission("edit"),
 	request: {
 		params: TenantProjectParamsSchema,
 		body: { content: { "application/json": { schema: ExternalAgentApiInsertSchema } } }
@@ -124,12 +120,13 @@ app.openapi(createRoute({
 	};
 	return c.json({ data: agentWithType }, 201);
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "put",
 	path: "/{id}",
 	summary: "Update External Agent",
 	operationId: "update-external-agent",
 	tags: ["External Agents"],
+	permission: requireProjectPermission("edit"),
 	request: {
 		params: TenantProjectIdParamsSchema,
 		body: { content: { "application/json": { schema: ExternalAgentApiUpdateSchema } } }
@@ -163,12 +160,13 @@ app.openapi(createRoute({
 	};
 	return c.json({ data: agentWithType });
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "delete",
 	path: "/{id}",
 	summary: "Delete External Agent",
 	operationId: "delete-external-agent",
 	tags: ["External Agents"],
+	permission: requireProjectPermission("edit"),
 	request: { params: TenantProjectIdParamsSchema },
 	responses: {
 		204: { description: "External agent deleted successfully" },

package/dist/domains/manage/routes/functionTools.js

@@ -1,27 +1,20 @@
 import { getLogger as getLogger$1 } from "../../../logger.js";
 import { requireProjectPermission } from "../../../middleware/projectAccess.js";
 import { speakeasyOffsetLimitPagination } from "../../../utils/speakeasy.js";
-import { OpenAPIHono, createRoute } from "@hono/zod-openapi";
+import { OpenAPIHono } from "@hono/zod-openapi";
 import { FunctionToolApiInsertSchema, FunctionToolApiUpdateSchema, FunctionToolListResponse, FunctionToolResponse, PaginationQueryParamsSchema, TenantProjectAgentIdParamsSchema, TenantProjectAgentParamsSchema, commonGetErrorResponses, createApiError, createFunctionTool, deleteFunctionTool, generateId, getFunctionToolById, listFunctionTools, updateFunctionTool } from "@inkeep/agents-core";
+import { createProtectedRoute } from "@inkeep/agents-core/middleware";
 
 //#region src/domains/manage/routes/functionTools.ts
 const logger = getLogger$1("functionTools");
 const app = new OpenAPIHono();
-app.use("/", async (c, next) => {
-	if (c.req.method === "POST") return requireProjectPermission("edit")(c, next);
-	return next();
-});
-app.use("/:id", async (c, next) => {
-	if (c.req.method === "PUT") return requireProjectPermission("edit")(c, next);
-	if (c.req.method === "DELETE") return requireProjectPermission("edit")(c, next);
-	return next();
-});
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "get",
 	path: "/",
 	summary: "List Function Tools",
 	operationId: "list-function-tools",
 	tags: ["Function Tools"],
+	permission: requireProjectPermission("view"),
 	request: {
 		params: TenantProjectAgentParamsSchema,
 		query: PaginationQueryParamsSchema
@@ -64,12 +57,13 @@ app.openapi(createRoute({
 		}), 500);
 	}
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "get",
 	path: "/{id}",
 	summary: "Get Function Tool by ID",
 	operationId: "get-function-tool",
 	tags: ["Function Tools"],
+	permission: requireProjectPermission("view"),
 	request: { params: TenantProjectAgentIdParamsSchema },
 	responses: {
 		200: {
@@ -109,12 +103,13 @@ app.openapi(createRoute({
 		}), 500);
 	}
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "post",
 	path: "/",
 	summary: "Create Function Tool",
 	operationId: "create-function-tool",
 	tags: ["Function Tools"],
+	permission: requireProjectPermission("edit"),
 	request: {
 		params: TenantProjectAgentParamsSchema,
 		body: { content: { "application/json": { schema: FunctionToolApiInsertSchema } } }
@@ -158,12 +153,13 @@ app.openapi(createRoute({
 		}), 500);
 	}
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "put",
 	path: "/{id}",
 	summary: "Update Function Tool",
 	operationId: "update-function-tool",
 	tags: ["Function Tools"],
+	permission: requireProjectPermission("edit"),
 	request: {
 		params: TenantProjectAgentIdParamsSchema,
 		body: { content: { "application/json": { schema: FunctionToolApiUpdateSchema } } }
@@ -209,12 +205,13 @@ app.openapi(createRoute({
 		}), 500);
 	}
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "delete",
 	path: "/{id}",
 	summary: "Delete Function Tool",
 	operationId: "delete-function-tool",
 	tags: ["Function Tools"],
+	permission: requireProjectPermission("edit"),
 	request: { params: TenantProjectAgentIdParamsSchema },
 	responses: {
 		204: { description: "Function tool deleted successfully" },

package/dist/domains/manage/routes/functions.js

@@ -1,27 +1,20 @@
 import { getLogger as getLogger$1 } from "../../../logger.js";
 import { requireProjectPermission } from "../../../middleware/projectAccess.js";
 import { speakeasyOffsetLimitPagination } from "../../../utils/speakeasy.js";
-import { OpenAPIHono, createRoute } from "@hono/zod-openapi";
+import { OpenAPIHono } from "@hono/zod-openapi";
 import { FunctionApiInsertSchema, FunctionApiUpdateSchema, FunctionListResponse, FunctionResponse, PaginationQueryParamsSchema, TenantProjectIdParamsSchema, TenantProjectParamsSchema, commonGetErrorResponses, createApiError, deleteFunction, generateId, getFunction, listFunctionsPaginated, upsertFunction } from "@inkeep/agents-core";
+import { createProtectedRoute } from "@inkeep/agents-core/middleware";
 
 //#region src/domains/manage/routes/functions.ts
 const logger = getLogger$1("functions");
 const app = new OpenAPIHono();
-app.use("/", async (c, next) => {
-	if (c.req.method === "POST") return requireProjectPermission("edit")(c, next);
-	return next();
-});
-app.use("/:id", async (c, next) => {
-	if (c.req.method === "PUT") return requireProjectPermission("edit")(c, next);
-	if (c.req.method === "DELETE") return requireProjectPermission("edit")(c, next);
-	return next();
-});
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "get",
 	path: "/",
 	summary: "List Functions",
 	operationId: "list-functions",
 	tags: ["Functions"],
+	permission: requireProjectPermission("view"),
 	request: {
 		params: TenantProjectParamsSchema,
 		query: PaginationQueryParamsSchema
@@ -62,9 +55,10 @@ app.openapi(createRoute({
 		}), 500);
 	}
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "get",
 	path: "/{id}",
+	permission: requireProjectPermission("view"),
 	summary: "Get Function by ID",
 	operationId: "get-function",
 	tags: ["Functions"],
@@ -104,9 +98,10 @@ app.openapi(createRoute({
 		}), 500);
 	}
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "post",
 	path: "/",
+	permission: requireProjectPermission("edit"),
 	summary: "Create Function",
 	operationId: "create-function",
 	tags: ["Functions"],
@@ -161,9 +156,10 @@ app.openapi(createRoute({
 		}), 500);
 	}
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "put",
 	path: "/{id}",
+	permission: requireProjectPermission("edit"),
 	summary: "Update Function",
 	operationId: "update-function",
 	tags: ["Functions"],
@@ -230,9 +226,10 @@ app.openapi(createRoute({
 		}), 500);
 	}
 });
-app.openapi(createRoute({
+app.openapi(createProtectedRoute({
 	method: "delete",
 	path: "/{id}",
+	permission: requireProjectPermission("edit"),
 	summary: "Delete Function",
 	operationId: "delete-function",
 	tags: ["Functions"],