@inkeep/agents-api 0.0.0-dev-20260325103346 → 0.0.0-dev-20260325193448

package/dist/.well-known/workflow/v1/manifest.json

@@ -12,18 +12,14 @@
         "stepId": "__builtin_response_text"
       }
     },
-    "src/domains/evals/workflow/functions/runDatasetItem.ts": {
-      "callChatApiStep": {
-        "stepId": "step//./src/domains/evals/workflow/functions/runDatasetItem//callChatApiStep"
-      },
-      "createRelationStep": {
-        "stepId": "step//./src/domains/evals/workflow/functions/runDatasetItem//createRelationStep"
-      },
-      "executeEvaluatorStep": {
-        "stepId": "step//./src/domains/evals/workflow/functions/runDatasetItem//executeEvaluatorStep"
-      },
-      "logStep": {
-        "stepId": "step//./src/domains/evals/workflow/functions/runDatasetItem//logStep"
+    "node_modules/.pnpm/workflow@4.2.0-beta.68_@nestjs+common@11.1.13_reflect-metadata@0.2.2_rxjs@7.8.2__@nestj_c30ae014a2256b6140edb80852c498d1/node_modules/workflow/dist/stdlib.js": {
+      "fetch": {
+        "stepId": "step//workflow@4.2.0-beta.68//fetch"
+      }
+    },
+    "src/domains/run/workflow/functions/scheduledTriggerRunner.ts": {
+      "startNextIterationStep": {
+        "stepId": "step//./src/domains/run/workflow/functions/scheduledTriggerRunner//startNextIterationStep"
       }
     },
     "src/domains/evals/workflow/functions/evaluateConversation.ts": {
@@ -40,14 +36,18 @@
         "stepId": "step//./src/domains/evals/workflow/functions/evaluateConversation//logStep"
       }
     },
-    "node_modules/.pnpm/workflow@4.2.0-beta.68_@nestjs+common@11.1.13_reflect-metadata@0.2.2_rxjs@7.8.2__@nestj_c30ae014a2256b6140edb80852c498d1/node_modules/workflow/dist/stdlib.js": {
-      "fetch": {
-        "stepId": "step//workflow@4.2.0-beta.68//fetch"
-      }
-    },
-    "src/domains/run/workflow/functions/scheduledTriggerRunner.ts": {
-      "startNextIterationStep": {
-        "stepId": "step//./src/domains/run/workflow/functions/scheduledTriggerRunner//startNextIterationStep"
+    "src/domains/evals/workflow/functions/runDatasetItem.ts": {
+      "callChatApiStep": {
+        "stepId": "step//./src/domains/evals/workflow/functions/runDatasetItem//callChatApiStep"
+      },
+      "createRelationStep": {
+        "stepId": "step//./src/domains/evals/workflow/functions/runDatasetItem//createRelationStep"
+      },
+      "executeEvaluatorStep": {
+        "stepId": "step//./src/domains/evals/workflow/functions/runDatasetItem//executeEvaluatorStep"
+      },
+      "logStep": {
+        "stepId": "step//./src/domains/evals/workflow/functions/runDatasetItem//logStep"
       }
     },
     "src/domains/run/workflow/steps/scheduledTriggerSteps.ts": {
@@ -99,72 +99,6 @@
     }
   },
   "workflows": {
-    "src/domains/evals/workflow/functions/runDatasetItem.ts": {
-      "_runDatasetItemWorkflow": {
-        "workflowId": "workflow//./src/domains/evals/workflow/functions/runDatasetItem//_runDatasetItemWorkflow",
-        "graph": {
-          "nodes": [
-            {
-              "id": "start",
-              "type": "workflowStart",
-              "data": {
-                "label": "Start: _runDatasetItemWorkflow",
-                "nodeKind": "workflow_start"
-              }
-            },
-            {
-              "id": "end",
-              "type": "workflowEnd",
-              "data": {
-                "label": "Return",
-                "nodeKind": "workflow_end"
-              }
-            }
-          ],
-          "edges": [
-            {
-              "id": "e_start_end",
-              "source": "start",
-              "target": "end",
-              "type": "default"
-            }
-          ]
-        }
-      }
-    },
-    "src/domains/evals/workflow/functions/evaluateConversation.ts": {
-      "_evaluateConversationWorkflow": {
-        "workflowId": "workflow//./src/domains/evals/workflow/functions/evaluateConversation//_evaluateConversationWorkflow",
-        "graph": {
-          "nodes": [
-            {
-              "id": "start",
-              "type": "workflowStart",
-              "data": {
-                "label": "Start: _evaluateConversationWorkflow",
-                "nodeKind": "workflow_start"
-              }
-            },
-            {
-              "id": "end",
-              "type": "workflowEnd",
-              "data": {
-                "label": "Return",
-                "nodeKind": "workflow_end"
-              }
-            }
-          ],
-          "edges": [
-            {
-              "id": "e_start_end",
-              "source": "start",
-              "target": "end",
-              "type": "default"
-            }
-          ]
-        }
-      }
-    },
     "src/domains/run/workflow/functions/scheduledTriggerRunner.ts": {
       "_scheduledTriggerRunnerWorkflow": {
         "workflowId": "workflow//./src/domains/run/workflow/functions/scheduledTriggerRunner//_scheduledTriggerRunnerWorkflow",
@@ -254,6 +188,72 @@
           ]
         }
       }
+    },
+    "src/domains/evals/workflow/functions/evaluateConversation.ts": {
+      "_evaluateConversationWorkflow": {
+        "workflowId": "workflow//./src/domains/evals/workflow/functions/evaluateConversation//_evaluateConversationWorkflow",
+        "graph": {
+          "nodes": [
+            {
+              "id": "start",
+              "type": "workflowStart",
+              "data": {
+                "label": "Start: _evaluateConversationWorkflow",
+                "nodeKind": "workflow_start"
+              }
+            },
+            {
+              "id": "end",
+              "type": "workflowEnd",
+              "data": {
+                "label": "Return",
+                "nodeKind": "workflow_end"
+              }
+            }
+          ],
+          "edges": [
+            {
+              "id": "e_start_end",
+              "source": "start",
+              "target": "end",
+              "type": "default"
+            }
+          ]
+        }
+      }
+    },
+    "src/domains/evals/workflow/functions/runDatasetItem.ts": {
+      "_runDatasetItemWorkflow": {
+        "workflowId": "workflow//./src/domains/evals/workflow/functions/runDatasetItem//_runDatasetItemWorkflow",
+        "graph": {
+          "nodes": [
+            {
+              "id": "start",
+              "type": "workflowStart",
+              "data": {
+                "label": "Start: _runDatasetItemWorkflow",
+                "nodeKind": "workflow_start"
+              }
+            },
+            {
+              "id": "end",
+              "type": "workflowEnd",
+              "data": {
+                "label": "Return",
+                "nodeKind": "workflow_end"
+              }
+            }
+          ],
+          "edges": [
+            {
+              "id": "e_start_end",
+              "source": "start",
+              "target": "end",
+              "type": "default"
+            }
+          ]
+        }
+      }
     }
   },
   "classes": {}

package/dist/createApp.d.ts

@@ -1,10 +1,10 @@
 import { AppConfig } from "./types/app.js";
 import "./types/index.js";
 import { Hono } from "hono";
-import * as hono_types0 from "hono/types";
+import * as hono_types12 from "hono/types";
 
 //#region src/createApp.d.ts
 declare const isWebhookRoute: (path: string) => boolean;
-declare function createAgentsHono(config: AppConfig): Hono<hono_types0.BlankEnv, hono_types0.BlankSchema, "/">;
+declare function createAgentsHono(config: AppConfig): Hono<hono_types12.BlankEnv, hono_types12.BlankSchema, "/">;
 //#endregion
 export { createAgentsHono, isWebhookRoute };

package/dist/data/db/manageDbClient.d.ts

@@ -1,6 +1,6 @@
-import * as _inkeep_agents_core0 from "@inkeep/agents-core";
+import * as _inkeep_agents_core2 from "@inkeep/agents-core";
 
 //#region src/data/db/manageDbClient.d.ts
-declare const manageDbClient: _inkeep_agents_core0.AgentsManageDatabaseClient;
+declare const manageDbClient: _inkeep_agents_core2.AgentsManageDatabaseClient;
 //#endregion
 export { manageDbClient as default };

package/dist/data/db/runDbClient.d.ts

@@ -1,6 +1,6 @@
-import * as _inkeep_agents_core7 from "@inkeep/agents-core";
+import * as _inkeep_agents_core3 from "@inkeep/agents-core";
 
 //#region src/data/db/runDbClient.d.ts
-declare const runDbClient: _inkeep_agents_core7.AgentsRunDatabaseClient;
+declare const runDbClient: _inkeep_agents_core3.AgentsRunDatabaseClient;
 //#endregion
 export { runDbClient as default };

package/dist/data-reconciliation/handlers/agent.d.ts

@@ -1,6 +1,6 @@
-import * as _inkeep_agents_core8 from "@inkeep/agents-core";
+import * as _inkeep_agents_core0 from "@inkeep/agents-core";
 
 //#region src/data-reconciliation/handlers/agent.d.ts
-declare const agentHandlers: _inkeep_agents_core8.EntityEffectHandlers<"agent">;
+declare const agentHandlers: _inkeep_agents_core0.EntityEffectHandlers<"agent">;
 //#endregion
 export { agentHandlers };

package/dist/data-reconciliation/handlers/context-configs.d.ts

@@ -1,6 +1,6 @@
-import * as _inkeep_agents_core0 from "@inkeep/agents-core";
+import * as _inkeep_agents_core1 from "@inkeep/agents-core";
 
 //#region src/data-reconciliation/handlers/context-configs.d.ts
-declare const contextConfigsHandlers: _inkeep_agents_core0.EntityEffectHandlers<"context_configs">;
+declare const contextConfigsHandlers: _inkeep_agents_core1.EntityEffectHandlers<"context_configs">;
 //#endregion
 export { contextConfigsHandlers };

package/dist/data-reconciliation/handlers/scheduled-triggers.d.ts

@@ -1,6 +1,6 @@
-import * as _inkeep_agents_core3 from "@inkeep/agents-core";
+import * as _inkeep_agents_core0 from "@inkeep/agents-core";
 
 //#region src/data-reconciliation/handlers/scheduled-triggers.d.ts
-declare const scheduledTriggersHandlers: _inkeep_agents_core3.EntityEffectHandlers<"scheduled_triggers">;
+declare const scheduledTriggersHandlers: _inkeep_agents_core0.EntityEffectHandlers<"scheduled_triggers">;
 //#endregion
 export { scheduledTriggersHandlers };

package/dist/domains/evals/routes/datasetTriggers.d.ts

@@ -1,7 +1,7 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
-import * as hono19 from "hono";
+import * as hono11 from "hono";
 
 //#region src/domains/evals/routes/datasetTriggers.d.ts
-declare const app: OpenAPIHono<hono19.Env, {}, "/">;
+declare const app: OpenAPIHono<hono11.Env, {}, "/">;
 //#endregion
 export { app as default };

package/dist/domains/evals/routes/index.d.ts

@@ -1,7 +1,7 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
-import * as hono18 from "hono";
+import * as hono12 from "hono";
 
 //#region src/domains/evals/routes/index.d.ts
-declare const app: OpenAPIHono<hono18.Env, {}, "/">;
+declare const app: OpenAPIHono<hono12.Env, {}, "/">;
 //#endregion
 export { app as default };

package/dist/domains/evals/workflow/routes.d.ts

@@ -1,7 +1,7 @@
 import { Hono } from "hono";
-import * as hono_types8 from "hono/types";
+import * as hono_types4 from "hono/types";
 
 //#region src/domains/evals/workflow/routes.d.ts
-declare const workflowRoutes: Hono<hono_types8.BlankEnv, hono_types8.BlankSchema, "/">;
+declare const workflowRoutes: Hono<hono_types4.BlankEnv, hono_types4.BlankSchema, "/">;
 //#endregion
 export { workflowRoutes };

package/dist/domains/manage/routes/authLookup.d.ts

@@ -1,10 +1,10 @@
 import { ManageAppVariables } from "../../../types/app.js";
 import { Hono } from "hono";
-import * as hono_types5 from "hono/types";
+import * as hono_types6 from "hono/types";
 
 //#region src/domains/manage/routes/authLookup.d.ts
 declare const authLookupRoutes: Hono<{
   Variables: ManageAppVariables;
-}, hono_types5.BlankSchema, "/">;
+}, hono_types6.BlankSchema, "/">;
 //#endregion
 export { authLookupRoutes as default };

package/dist/domains/manage/routes/availableAgents.d.ts

@@ -1,7 +1,7 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
-import * as hono15 from "hono";
+import * as hono14 from "hono";
 
 //#region src/domains/manage/routes/availableAgents.d.ts
-declare const app: OpenAPIHono<hono15.Env, {}, "/">;
+declare const app: OpenAPIHono<hono14.Env, {}, "/">;
 //#endregion
 export { app as default };

package/dist/domains/manage/routes/conversations.d.ts

@@ -1,7 +1,7 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
-import * as hono17 from "hono";
+import * as hono13 from "hono";
 
 //#region src/domains/manage/routes/conversations.d.ts
-declare const app: OpenAPIHono<hono17.Env, {}, "/">;
+declare const app: OpenAPIHono<hono13.Env, {}, "/">;
 //#endregion
 export { app as default };

package/dist/domains/manage/routes/index.d.ts

@@ -1,7 +1,7 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
-import * as hono16 from "hono";
+import * as hono15 from "hono";
 
 //#region src/domains/manage/routes/index.d.ts
-declare const app: OpenAPIHono<hono16.Env, {}, "/">;
+declare const app: OpenAPIHono<hono15.Env, {}, "/">;
 //#endregion
 export { app as default };

package/dist/domains/manage/routes/invitations.d.ts

@@ -1,10 +1,10 @@
 import { ManageAppVariables } from "../../../types/app.js";
 import { Hono } from "hono";
-import * as hono_types6 from "hono/types";
+import * as hono_types1 from "hono/types";
 
 //#region src/domains/manage/routes/invitations.d.ts
 declare const invitationsRoutes: Hono<{
   Variables: ManageAppVariables;
-}, hono_types6.BlankSchema, "/">;
+}, hono_types1.BlankSchema, "/">;
 //#endregion
 export { invitationsRoutes as default };

package/dist/domains/manage/routes/passwordResetLinks.d.ts

@@ -1,10 +1,10 @@
 import { ManageAppVariables } from "../../../types/app.js";
 import { Hono } from "hono";
-import * as hono_types13 from "hono/types";
+import * as hono_types9 from "hono/types";
 
 //#region src/domains/manage/routes/passwordResetLinks.d.ts
 declare const passwordResetLinksRoutes: Hono<{
   Variables: ManageAppVariables;
-}, hono_types13.BlankSchema, "/">;
+}, hono_types9.BlankSchema, "/">;
 //#endregion
 export { passwordResetLinksRoutes as default };

package/dist/domains/manage/routes/signoz.d.ts

@@ -1,10 +1,10 @@
 import { ManageAppVariables } from "../../../types/app.js";
 import { Hono } from "hono";
-import * as hono_types12 from "hono/types";
+import * as hono_types10 from "hono/types";
 
 //#region src/domains/manage/routes/signoz.d.ts
 declare const app: Hono<{
   Variables: ManageAppVariables;
-}, hono_types12.BlankSchema, "/">;
+}, hono_types10.BlankSchema, "/">;
 //#endregion
 export { app as default };

package/dist/domains/manage/routes/users.d.ts

@@ -1,10 +1,10 @@
 import { ManageAppVariables } from "../../../types/app.js";
 import { Hono } from "hono";
-import * as hono_types7 from "hono/types";
+import * as hono_types11 from "hono/types";
 
 //#region src/domains/manage/routes/users.d.ts
 declare const usersRoutes: Hono<{
   Variables: ManageAppVariables;
-}, hono_types7.BlankSchema, "/">;
+}, hono_types11.BlankSchema, "/">;
 //#endregion
 export { usersRoutes as default };

package/dist/domains/mcp/routes/mcp.d.ts

@@ -1,7 +1,7 @@
 import { Hono } from "hono";
-import * as hono_types10 from "hono/types";
+import * as hono_types7 from "hono/types";
 
 //#region src/domains/mcp/routes/mcp.d.ts
-declare const app: Hono<hono_types10.BlankEnv, hono_types10.BlankSchema, "/">;
+declare const app: Hono<hono_types7.BlankEnv, hono_types7.BlankSchema, "/">;
 //#endregion
 export { app as default };

package/dist/domains/run/agents/relationTools.d.ts

@@ -1,7 +1,7 @@
 import { AgentConfig, DelegateRelation } from "./agent-types.js";
 import "./Agent.js";
 import { InternalRelation } from "../utils/project.js";
-import * as _inkeep_agents_core1 from "@inkeep/agents-core";
+import * as _inkeep_agents_core6 from "@inkeep/agents-core";
 import { CredentialStoreRegistry, FullExecutionContext } from "@inkeep/agents-core";
 import * as ai0 from "ai";
 
@@ -45,7 +45,7 @@ declare function createDelegateToAgentTool({
   message: string;
 }, {
   toolCallId: any;
-  result: _inkeep_agents_core1.Message | _inkeep_agents_core1.Task;
+  result: _inkeep_agents_core6.Message | _inkeep_agents_core6.Task;
 }>;
 /**
  * Parameters for building a transfer relation config

package/dist/domains/run/handlers/executionHandler.d.ts

@@ -42,4 +42,4 @@ declare class ExecutionHandler {
   execute(params: ExecutionHandlerParams): Promise<ExecutionResult>;
 }
 //#endregion
-export { ExecutionHandler };
+export { ExecutionHandler, ExecutionHandlerParams };

package/dist/domains/run/routes/auth.d.ts

@@ -1,8 +1,8 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
-import * as hono14 from "hono";
+import * as hono16 from "hono";
 
 //#region src/domains/run/routes/auth.d.ts
 declare function getAnonJwtSecret(): Uint8Array;
-declare const app: OpenAPIHono<hono14.Env, {}, "/">;
+declare const app: OpenAPIHono<hono16.Env, {}, "/">;
 //#endregion
 export { app as default, getAnonJwtSecret };

package/dist/domains/run/routes/chat.js

@@ -9,7 +9,8 @@ import { handleContextResolution } from "../context/context.js";
 import "../context/index.js";
 import { FileContentItemSchema, ImageContentItemSchema } from "../types/chat.js";
 import { extractTextFromParts, getMessagePartsFromOpenAIContent } from "../utils/message-parts.js";
-import { buildPersistedMessageContent } from "../services/blob-storage/file-upload-helpers.js";
+import { PdfUrlIngestionError } from "../services/blob-storage/file-security-errors.js";
+import { buildPersistedMessageContent, inlineExternalPdfUrlParts } from "../services/blob-storage/file-upload-helpers.js";
 import { toolApprovalUiBus } from "../session/ToolApprovalUiBus.js";
 import { OpenAPIHono, z } from "@hono/zod-openapi";
 import { PartSchema, createApiError, createMessage, createOrGetConversation, generateId, getActiveAgentForConversation, getConversationId, setActiveAgentForConversation } from "@inkeep/agents-core";
@@ -208,7 +209,7 @@ app.openapi(chatCompletionsRoute, async (c) => {
 			const requestId = `chatcmpl-${Date.now()}`;
 			const timestamp = Math.floor(Date.now() / 1e3);
 			const lastUserMessage = body.messages.filter((msg) => msg.role === "user").slice(-1)[0];
-			const messageParts = z.array(PartSchema).parse(lastUserMessage ? getMessagePartsFromOpenAIContent(lastUserMessage.content) : []);
+			const messageParts = await inlineExternalPdfUrlParts(z.array(PartSchema).parse(lastUserMessage ? getMessagePartsFromOpenAIContent(lastUserMessage.content) : []));
 			const userMessage = extractTextFromParts(messageParts);
 			const agentName = agent.name;
 			const messageSpan = trace.getActiveSpan();
@@ -357,6 +358,10 @@ app.openapi(chatCompletionsRoute, async (c) => {
 			});
 		});
 	} catch (error) {
+		if (error instanceof PdfUrlIngestionError) throw createApiError({
+			code: "bad_request",
+			message: error.message
+		});
 		if (error instanceof HTTPException) throw error;
 		logger.error({
 			error: error instanceof Error ? error.message : error,

package/dist/domains/run/routes/chatDataStream.js

@@ -9,7 +9,8 @@ import { handleContextResolution } from "../context/context.js";
 import "../context/index.js";
 import { VercelMessageSchema } from "../types/chat.js";
 import { extractTextFromParts, getMessagePartsFromVercelContent } from "../utils/message-parts.js";
-import { buildPersistedMessageContent } from "../services/blob-storage/file-upload-helpers.js";
+import { PdfUrlIngestionError } from "../services/blob-storage/file-security-errors.js";
+import { buildPersistedMessageContent, inlineExternalPdfUrlParts } from "../services/blob-storage/file-upload-helpers.js";
 import { pendingToolApprovalManager } from "../session/PendingToolApprovalManager.js";
 import { toolApprovalUiBus } from "../session/ToolApprovalUiBus.js";
 import { OpenAPIHono, z } from "@hono/zod-openapi";
@@ -182,7 +183,7 @@ app.openapi(chatDataStreamRoute, async (c) => {
 				credentialStores: c.get("credentialStores")
 			});
 			const lastUserMessage = body.messages.filter((m) => m.role === "user").slice(-1)[0];
-			const messageParts = z.array(PartSchema).parse(getMessagePartsFromVercelContent(lastUserMessage?.content, lastUserMessage?.parts));
+			const messageParts = await inlineExternalPdfUrlParts(z.array(PartSchema).parse(getMessagePartsFromVercelContent(lastUserMessage?.content, lastUserMessage?.parts)));
 			const userText = extractTextFromParts(messageParts) || "";
 			logger.info({
 				userText,
@@ -353,6 +354,10 @@ app.openapi(chatDataStreamRoute, async (c) => {
 			return stream(c, (stream$1) => stream$1.pipe(dataStream.pipeThrough(new JsonToSseTransformStream()).pipeThrough(new TextEncoderStream())));
 		});
 	} catch (error) {
+		if (error instanceof PdfUrlIngestionError) throw createApiError({
+			code: "bad_request",
+			message: error.message
+		});
 		if (error instanceof HTTPException) throw error;
 		logger.error({
 			error,

package/dist/domains/run/services/blob-storage/external-file-downloader.d.ts

@@ -1,7 +1,13 @@
+import { LookupAddress } from "node:dns";
+
 //#region src/domains/run/services/blob-storage/external-file-downloader.d.ts
-declare function downloadExternalFile(url: string): Promise<{
+type LookupCallback = (error: Error | null, address: string | LookupAddress[], family?: number) => void;
+declare function forwardLookupResult(hostname: string, address: string | LookupAddress[], family: number | undefined, callback: LookupCallback): void;
+declare function downloadExternalFile(url: string, options?: {
+  expectedMimeType?: string;
+}): Promise<{
   data: Uint8Array;
   mimeType: string;
 }>;
 //#endregion
-export { downloadExternalFile };
+export { downloadExternalFile, forwardLookupResult };

package/dist/domains/run/services/blob-storage/external-file-downloader.js

@@ -1,6 +1,6 @@
 import { EXTERNAL_FETCH_TIMEOUT_MS, MAX_EXTERNAL_REDIRECTS, MAX_FILE_BYTES } from "./file-security-constants.js";
 import { BlockedConnectionToPrivateIpError, BlockedExternalFileExceedingError, BlockedExternalFileLargerThanError, ExternalFileResponseBodyEmptyError, FailedToDownloadError, FileSecurityError, RedirectMissingLocationError, TimedOutDownloadingError, TooManyRedirectsError, UnableToResolveHostError, UnexpectedRedirectStateError } from "./file-security-errors.js";
-import { resolveDownloadedImageMimeType } from "./file-content-security.js";
+import { resolveDownloadedFileMimeType } from "./file-content-security.js";
 import { isBlockedIpAddress, validateExternalFileUrl, validateUrlResolvesToPublicIp } from "./file-url-security.js";
 import { retryWithBackoff } from "@inkeep/agents-core";
 import { lookup } from "node:dns";
@@ -13,28 +13,31 @@ const externalImageDispatcher = new Agent({ connect: { lookup(hostname, options,
 			callback(new UnableToResolveHostError(hostname, { cause: error }), "", 0);
 			return;
 		}
-		if (Array.isArray(address)) {
-			const selected = address[0];
-			if (!selected) {
-				callback(new UnableToResolveHostError(hostname), "", 0);
-				return;
-			}
-			if (isBlockedIpAddress(selected.address)) {
-				callback(new BlockedConnectionToPrivateIpError(selected.address), "", 0);
-				return;
-			}
-			callback(null, selected.address, selected.family);
+		forwardLookupResult(hostname, address, family, callback);
+	});
+} } });
+const MAX_EXTERNAL_FETCH_ATTEMPTS = 3;
+function forwardLookupResult(hostname, address, family, callback) {
+	if (Array.isArray(address)) {
+		if (!address[0]) {
+			callback(new UnableToResolveHostError(hostname), "", 0);
 			return;
 		}
-		if (isBlockedIpAddress(address)) {
-			callback(new BlockedConnectionToPrivateIpError(address), "", 0);
+		const blocked = address.find((candidate) => isBlockedIpAddress(candidate.address));
+		if (blocked) {
+			callback(new BlockedConnectionToPrivateIpError(blocked.address), "", 0);
 			return;
 		}
-		callback(null, address, family);
-	});
-} } });
-const MAX_EXTERNAL_FETCH_ATTEMPTS = 3;
-async function downloadExternalFile(url) {
+		callback(null, address);
+		return;
+	}
+	if (isBlockedIpAddress(address)) {
+		callback(new BlockedConnectionToPrivateIpError(address), "", 0);
+		return;
+	}
+	callback(null, address, family);
+}
+async function downloadExternalFile(url, options) {
 	let currentUrl = validateExternalFileUrl(url);
 	await validateUrlResolvesToPublicIp(currentUrl);
 	for (let redirectCount = 0; redirectCount <= MAX_EXTERNAL_REDIRECTS; redirectCount++) {
@@ -54,7 +57,7 @@ async function downloadExternalFile(url) {
 		const data = await readResponseBytesWithLimit(response, MAX_FILE_BYTES);
 		return {
 			data,
-			mimeType: await resolveDownloadedImageMimeType(data, headerContentType)
+			mimeType: await resolveDownloadedFileMimeType(data, headerContentType, options?.expectedMimeType)
 		};
 	}
 	throw new UnexpectedRedirectStateError(toSanitizedUrl(url));
@@ -138,4 +141,4 @@ function toSanitizedUrl(url) {
 }
 
 //#endregion
-export { downloadExternalFile };
+export { downloadExternalFile, forwardLookupResult };

package/dist/domains/run/services/blob-storage/file-content-security.d.ts

@@ -13,6 +13,6 @@ declare function normalizeInlineFileBytes(file: {
   data: Uint8Array;
   mimeType: string;
 }>;
-declare function resolveDownloadedImageMimeType(data: Uint8Array, headerContentType: string): Promise<string>;
+declare function resolveDownloadedFileMimeType(data: Uint8Array, headerContentType: string, expectedMimeType?: string): Promise<string>;
 //#endregion
-export { normalizeInlineFileBytes, normalizeInlineImageBytes, resolveDownloadedImageMimeType };
+export { normalizeInlineFileBytes, normalizeInlineImageBytes, resolveDownloadedFileMimeType };

package/dist/domains/run/services/blob-storage/file-content-security.js

@@ -19,10 +19,15 @@ async function normalizeInlineFileBytes(file) {
 	};
 	throw new BlockedInlineUnsupportedFileBytesError(file.mimeType || "unknown");
 }
-async function resolveDownloadedImageMimeType(data, headerContentType) {
+async function resolveDownloadedFileMimeType(data, headerContentType, expectedMimeType) {
+	const expected = expectedMimeType?.split(";")[0]?.trim().toLowerCase();
+	if (expected === "application/pdf") {
+		if (looksLikePdf(data)) return "application/pdf";
+		throw new BlockedExternalUnsupportedBytesError(headerContentType || expected || "unknown");
+	}
 	const sniffedMime = await sniffAllowedImageMimeType(data);
 	if (sniffedMime) return sniffedMime;
-	throw new BlockedExternalUnsupportedBytesError(headerContentType || "unknown");
+	throw new BlockedExternalUnsupportedBytesError(headerContentType || expected || "unknown");
 }
 function validateInlineFileSize(data) {
 	if (data.length > MAX_FILE_BYTES) throw new BlockedInlineFileExceedingError(MAX_FILE_BYTES);
@@ -52,4 +57,4 @@ function looksLikePdf(data) {
 }
 
 //#endregion
-export { normalizeInlineFileBytes, normalizeInlineImageBytes, resolveDownloadedImageMimeType };
+export { normalizeInlineFileBytes, normalizeInlineImageBytes, resolveDownloadedFileMimeType };