@inkeep/agents-api 0.0.0-dev-20260330224432 → 0.0.0-dev-20260331031331

package/dist/.well-known/workflow/v1/manifest.json

@@ -12,6 +12,11 @@
         "stepId": "__builtin_response_text"
       }
     },
+    "node_modules/.pnpm/workflow@4.2.0-beta.67_@nestjs+common@11.1.13_reflect-metadata@0.2.2_rxjs@7.8.2__@nestj_59326db5a7501857789e302437f4195e/node_modules/workflow/dist/stdlib.js": {
+      "fetch": {
+        "stepId": "step//workflow@4.2.0-beta.67//fetch"
+      }
+    },
     "src/domains/evals/workflow/functions/runDatasetItem.ts": {
       "callChatApiStep": {
         "stepId": "step//./src/domains/evals/workflow/functions/runDatasetItem//callChatApiStep"
@@ -26,20 +31,6 @@
         "stepId": "step//./src/domains/evals/workflow/functions/runDatasetItem//logStep"
       }
     },
-    "src/domains/evals/workflow/functions/evaluateConversation.ts": {
-      "executeEvaluatorStep": {
-        "stepId": "step//./src/domains/evals/workflow/functions/evaluateConversation//executeEvaluatorStep"
-      },
-      "getConversationStep": {
-        "stepId": "step//./src/domains/evals/workflow/functions/evaluateConversation//getConversationStep"
-      },
-      "getEvaluatorsStep": {
-        "stepId": "step//./src/domains/evals/workflow/functions/evaluateConversation//getEvaluatorsStep"
-      },
-      "logStep": {
-        "stepId": "step//./src/domains/evals/workflow/functions/evaluateConversation//logStep"
-      }
-    },
     "src/domains/run/workflow/steps/schedulerSteps.ts": {
       "checkSchedulerCurrentStep": {
         "stepId": "step//./src/domains/run/workflow/steps/schedulerSteps//checkSchedulerCurrentStep"
@@ -54,9 +45,18 @@
         "stepId": "step//./src/domains/run/workflow/steps/schedulerSteps//registerSchedulerStep"
       }
     },
-    "node_modules/.pnpm/workflow@4.2.0-beta.67_@nestjs+common@11.1.13_reflect-metadata@0.2.2_rxjs@7.8.2__@nestj_59326db5a7501857789e302437f4195e/node_modules/workflow/dist/stdlib.js": {
-      "fetch": {
-        "stepId": "step//workflow@4.2.0-beta.67//fetch"
+    "src/domains/evals/workflow/functions/evaluateConversation.ts": {
+      "executeEvaluatorStep": {
+        "stepId": "step//./src/domains/evals/workflow/functions/evaluateConversation//executeEvaluatorStep"
+      },
+      "getConversationStep": {
+        "stepId": "step//./src/domains/evals/workflow/functions/evaluateConversation//getConversationStep"
+      },
+      "getEvaluatorsStep": {
+        "stepId": "step//./src/domains/evals/workflow/functions/evaluateConversation//getEvaluatorsStep"
+      },
+      "logStep": {
+        "stepId": "step//./src/domains/evals/workflow/functions/evaluateConversation//logStep"
       }
     },
     "src/domains/run/workflow/steps/scheduledTriggerSteps.ts": {

package/dist/createApp.d.ts

@@ -1,10 +1,10 @@
 import { AppConfig } from "./types/app.js";
 import "./types/index.js";
 import { Hono } from "hono";
-import * as hono_types0 from "hono/types";
+import * as hono_types1 from "hono/types";
 
 //#region src/createApp.d.ts
 declare const isWebhookRoute: (path: string) => boolean;
-declare function createAgentsHono(config: AppConfig): Hono<hono_types0.BlankEnv, hono_types0.BlankSchema, "/">;
+declare function createAgentsHono(config: AppConfig): Hono<hono_types1.BlankEnv, hono_types1.BlankSchema, "/">;
 //#endregion
 export { createAgentsHono, isWebhookRoute };

package/dist/data/db/manageDbClient.d.ts

@@ -1,6 +1,6 @@
-import * as _inkeep_agents_core5 from "@inkeep/agents-core";
+import * as _inkeep_agents_core4 from "@inkeep/agents-core";
 
 //#region src/data/db/manageDbClient.d.ts
-declare const manageDbClient: _inkeep_agents_core5.AgentsManageDatabaseClient;
+declare const manageDbClient: _inkeep_agents_core4.AgentsManageDatabaseClient;
 //#endregion
 export { manageDbClient as default };

package/dist/data/db/runDbClient.d.ts

@@ -1,6 +1,6 @@
-import * as _inkeep_agents_core0 from "@inkeep/agents-core";
+import * as _inkeep_agents_core1 from "@inkeep/agents-core";
 
 //#region src/data/db/runDbClient.d.ts
-declare const runDbClient: _inkeep_agents_core0.AgentsRunDatabaseClient;
+declare const runDbClient: _inkeep_agents_core1.AgentsRunDatabaseClient;
 //#endregion
 export { runDbClient as default };

package/dist/data-reconciliation/handlers/agent.d.ts

@@ -1,6 +1,6 @@
-import * as _inkeep_agents_core1 from "@inkeep/agents-core";
+import * as _inkeep_agents_core0 from "@inkeep/agents-core";
 
 //#region src/data-reconciliation/handlers/agent.d.ts
-declare const agentHandlers: _inkeep_agents_core1.EntityEffectHandlers<"agent">;
+declare const agentHandlers: _inkeep_agents_core0.EntityEffectHandlers<"agent">;
 //#endregion
 export { agentHandlers };

package/dist/data-reconciliation/handlers/context-configs.d.ts

@@ -1,6 +1,6 @@
-import * as _inkeep_agents_core2 from "@inkeep/agents-core";
+import * as _inkeep_agents_core0 from "@inkeep/agents-core";
 
 //#region src/data-reconciliation/handlers/context-configs.d.ts
-declare const contextConfigsHandlers: _inkeep_agents_core2.EntityEffectHandlers<"context_configs">;
+declare const contextConfigsHandlers: _inkeep_agents_core0.EntityEffectHandlers<"context_configs">;
 //#endregion
 export { contextConfigsHandlers };

package/dist/data-reconciliation/handlers/sub-agents.d.ts

@@ -1,6 +1,6 @@
-import * as _inkeep_agents_core6 from "@inkeep/agents-core";
+import * as _inkeep_agents_core3 from "@inkeep/agents-core";
 
 //#region src/data-reconciliation/handlers/sub-agents.d.ts
-declare const subAgentsHandlers: _inkeep_agents_core6.EntityEffectHandlers<"sub_agents">;
+declare const subAgentsHandlers: _inkeep_agents_core3.EntityEffectHandlers<"sub_agents">;
 //#endregion
 export { subAgentsHandlers };

package/dist/data-reconciliation/handlers/tools.d.ts

@@ -1,6 +1,6 @@
-import * as _inkeep_agents_core0 from "@inkeep/agents-core";
+import * as _inkeep_agents_core2 from "@inkeep/agents-core";
 
 //#region src/data-reconciliation/handlers/tools.d.ts
-declare const toolsHandlers: _inkeep_agents_core0.EntityEffectHandlers<"tools">;
+declare const toolsHandlers: _inkeep_agents_core2.EntityEffectHandlers<"tools">;
 //#endregion
 export { toolsHandlers };

package/dist/domains/evals/routes/datasetTriggers.d.ts

@@ -1,7 +1,7 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
-import * as hono14 from "hono";
+import * as hono17 from "hono";
 
 //#region src/domains/evals/routes/datasetTriggers.d.ts
-declare const app: OpenAPIHono<hono14.Env, {}, "/">;
+declare const app: OpenAPIHono<hono17.Env, {}, "/">;
 //#endregion
 export { app as default };

package/dist/domains/evals/routes/index.d.ts

@@ -1,7 +1,7 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
-import * as hono19 from "hono";
+import * as hono18 from "hono";
 
 //#region src/domains/evals/routes/index.d.ts
-declare const app: OpenAPIHono<hono19.Env, {}, "/">;
+declare const app: OpenAPIHono<hono18.Env, {}, "/">;
 //#endregion
 export { app as default };

package/dist/domains/evals/workflow/routes.d.ts

@@ -1,7 +1,7 @@
 import { Hono } from "hono";
-import * as hono_types12 from "hono/types";
+import * as hono_types4 from "hono/types";
 
 //#region src/domains/evals/workflow/routes.d.ts
-declare const workflowRoutes: Hono<hono_types12.BlankEnv, hono_types12.BlankSchema, "/">;
+declare const workflowRoutes: Hono<hono_types4.BlankEnv, hono_types4.BlankSchema, "/">;
 //#endregion
 export { workflowRoutes };

package/dist/domains/manage/routes/authLookup.d.ts

@@ -1,10 +1,10 @@
 import { ManageAppVariables } from "../../../types/app.js";
 import { Hono } from "hono";
-import * as hono_types10 from "hono/types";
+import * as hono_types3 from "hono/types";
 
 //#region src/domains/manage/routes/authLookup.d.ts
 declare const authLookupRoutes: Hono<{
   Variables: ManageAppVariables;
-}, hono_types10.BlankSchema, "/">;
+}, hono_types3.BlankSchema, "/">;
 //#endregion
 export { authLookupRoutes as default };

package/dist/domains/manage/routes/availableAgents.d.ts

@@ -1,7 +1,7 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
-import * as hono13 from "hono";
+import * as hono12 from "hono";
 
 //#region src/domains/manage/routes/availableAgents.d.ts
-declare const app: OpenAPIHono<hono13.Env, {}, "/">;
+declare const app: OpenAPIHono<hono12.Env, {}, "/">;
 //#endregion
 export { app as default };

package/dist/domains/manage/routes/conversations.d.ts

@@ -1,7 +1,7 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
-import * as hono10 from "hono";
+import * as hono13 from "hono";
 
 //#region src/domains/manage/routes/conversations.d.ts
-declare const app: OpenAPIHono<hono10.Env, {}, "/">;
+declare const app: OpenAPIHono<hono13.Env, {}, "/">;
 //#endregion
 export { app as default };

package/dist/domains/manage/routes/index.d.ts

@@ -1,7 +1,7 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
-import * as hono9 from "hono";
+import * as hono14 from "hono";
 
 //#region src/domains/manage/routes/index.d.ts
-declare const app: OpenAPIHono<hono9.Env, {}, "/">;
+declare const app: OpenAPIHono<hono14.Env, {}, "/">;
 //#endregion
 export { app as default };

package/dist/domains/manage/routes/invitations.d.ts

@@ -1,10 +1,10 @@
 import { ManageAppVariables } from "../../../types/app.js";
 import { Hono } from "hono";
-import * as hono_types5 from "hono/types";
+import * as hono_types7 from "hono/types";
 
 //#region src/domains/manage/routes/invitations.d.ts
 declare const invitationsRoutes: Hono<{
   Variables: ManageAppVariables;
-}, hono_types5.BlankSchema, "/">;
+}, hono_types7.BlankSchema, "/">;
 //#endregion
 export { invitationsRoutes as default };

package/dist/domains/manage/routes/passwordResetLinks.d.ts

@@ -1,10 +1,10 @@
 import { ManageAppVariables } from "../../../types/app.js";
 import { Hono } from "hono";
-import * as hono_types9 from "hono/types";
+import * as hono_types6 from "hono/types";
 
 //#region src/domains/manage/routes/passwordResetLinks.d.ts
 declare const passwordResetLinksRoutes: Hono<{
   Variables: ManageAppVariables;
-}, hono_types9.BlankSchema, "/">;
+}, hono_types6.BlankSchema, "/">;
 //#endregion
 export { passwordResetLinksRoutes as default };

package/dist/domains/manage/routes/signoz.d.ts

@@ -1,10 +1,10 @@
 import { ManageAppVariables } from "../../../types/app.js";
 import { Hono } from "hono";
-import * as hono_types11 from "hono/types";
+import * as hono_types10 from "hono/types";
 
 //#region src/domains/manage/routes/signoz.d.ts
 declare const app: Hono<{
   Variables: ManageAppVariables;
-}, hono_types11.BlankSchema, "/">;
+}, hono_types10.BlankSchema, "/">;
 //#endregion
 export { app as default };

package/dist/domains/manage/routes/users.d.ts

@@ -1,10 +1,10 @@
 import { ManageAppVariables } from "../../../types/app.js";
 import { Hono } from "hono";
-import * as hono_types6 from "hono/types";
+import * as hono_types11 from "hono/types";
 
 //#region src/domains/manage/routes/users.d.ts
 declare const usersRoutes: Hono<{
   Variables: ManageAppVariables;
-}, hono_types6.BlankSchema, "/">;
+}, hono_types11.BlankSchema, "/">;
 //#endregion
 export { usersRoutes as default };

package/dist/domains/mcp/routes/mcp.d.ts

@@ -1,7 +1,7 @@
 import { Hono } from "hono";
-import * as hono_types7 from "hono/types";
+import * as hono_types8 from "hono/types";
 
 //#region src/domains/mcp/routes/mcp.d.ts
-declare const app: Hono<hono_types7.BlankEnv, hono_types7.BlankSchema, "/">;
+declare const app: Hono<hono_types8.BlankEnv, hono_types8.BlankSchema, "/">;
 //#endregion
 export { app as default };

package/dist/domains/run/agents/relationTools.d.ts

@@ -2,7 +2,7 @@ import { AgentConfig, DelegateRelation } from "./agent-types.js";
 import "./Agent.js";
 import { InternalRelation } from "../utils/project.js";
 import { z } from "@hono/zod-openapi";
-import * as _inkeep_agents_core3 from "@inkeep/agents-core";
+import * as _inkeep_agents_core5 from "@inkeep/agents-core";
 import { CredentialStoreRegistry, FullExecutionContext } from "@inkeep/agents-core";
 import * as ai0 from "ai";
 
@@ -48,7 +48,7 @@ declare function createDelegateToAgentTool({
   message: string;
 }, {
   toolCallId: any;
-  result: _inkeep_agents_core3.Message | _inkeep_agents_core3.Task;
+  result: _inkeep_agents_core5.Message | _inkeep_agents_core5.Task;
 }>;
 /**
  * Parameters for building a transfer relation config

package/dist/domains/run/routes/auth.d.ts

@@ -1,8 +1,8 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
-import * as hono18 from "hono";
+import * as hono19 from "hono";
 
 //#region src/domains/run/routes/auth.d.ts
 declare function getAnonJwtSecret(): Uint8Array;
-declare const app: OpenAPIHono<hono18.Env, {}, "/">;
+declare const app: OpenAPIHono<hono19.Env, {}, "/">;
 //#endregion
 export { app as default, getAnonJwtSecret };

package/dist/domains/run/routes/auth.js

@@ -118,6 +118,8 @@ app.openapi(createProtectedRoute({
 	});
 	const secret = getAnonJwtSecret();
 	let anonUserId;
+	let refreshTenantId;
+	let refreshProjectId;
 	const authHeader = c.req.header("Authorization");
 	if (authHeader?.startsWith("Bearer ")) {
 		const bearerToken = authHeader.slice(7);
@@ -126,8 +128,11 @@ app.openapi(createProtectedRoute({
 				issuer: "inkeep",
 				algorithms: ["HS256"]
 			});
-			if (payload.app === appId && payload.type === "anonymous" && typeof payload.sub === "string" && payload.sub.startsWith("anon_")) anonUserId = payload.sub;
-			else logger.debug({
+			if (payload.app === appId && payload.type === "anonymous" && typeof payload.sub === "string" && payload.sub.startsWith("anon_")) {
+				anonUserId = payload.sub;
+				refreshTenantId = typeof payload.tid === "string" ? payload.tid : null;
+				refreshProjectId = typeof payload.pid === "string" ? payload.pid : null;
+			} else logger.debug({
 				appId,
 				tokenApp: payload.app,
 				tokenType: payload.type
@@ -145,13 +150,15 @@ app.openapi(createProtectedRoute({
 	}
 	const isRefresh = !!anonUserId;
 	if (!anonUserId) anonUserId = `anon_${crypto.randomUUID()}`;
+	const tenantId = isRefresh ? refreshTenantId ?? appRecord.tenantId : appRecord.tenantId || c.req.header("x-inkeep-tenant-id") || null;
+	const projectId = isRefresh ? refreshProjectId ?? appRecord.projectId : appRecord.projectId || c.req.header("x-inkeep-project-id") || null;
 	const lifetimeSeconds = env.INKEEP_ANON_SESSION_LIFETIME_SECONDS;
 	const now = Math.floor(Date.now() / 1e3);
 	const exp = now + lifetimeSeconds;
 	const expiresAt = (/* @__PURE__ */ new Date(exp * 1e3)).toISOString();
 	const token = await new SignJWT({
-		tid: appRecord.tenantId,
-		pid: appRecord.projectId,
+		tid: tenantId,
+		pid: projectId,
 		app: appId,
 		type: "anonymous"
 	}).setProtectedHeader({

package/dist/env.d.ts

@@ -14,11 +14,11 @@ declare const envSchema: z.ZodObject<{
     pentest: "pentest";
   }>>;
   LOG_LEVEL: z.ZodDefault<z.ZodEnum<{
+    error: "error";
     trace: "trace";
     debug: "debug";
     info: "info";
     warn: "warn";
-    error: "error";
   }>>;
   INKEEP_AGENTS_MANAGE_DATABASE_URL: z.ZodString;
   INKEEP_AGENTS_RUN_DATABASE_URL: z.ZodString;
@@ -79,7 +79,7 @@ declare const envSchema: z.ZodObject<{
 declare const env: {
   NODE_ENV: "development" | "production" | "test";
   ENVIRONMENT: "development" | "production" | "test" | "pentest";
-  LOG_LEVEL: "trace" | "debug" | "info" | "warn" | "error";
+  LOG_LEVEL: "error" | "trace" | "debug" | "info" | "warn";
   INKEEP_AGENTS_MANAGE_DATABASE_URL: string;
   INKEEP_AGENTS_RUN_DATABASE_URL: string;
   INKEEP_AGENTS_API_URL: string;

package/dist/factory.d.ts

@@ -5,7 +5,7 @@ import { CredentialStore, ServerConfig } from "@inkeep/agents-core";
 import * as hono0 from "hono";
 import * as zod0 from "zod";
 import { EmailServiceConfig, SSOProviderConfig, UserAuthConfig } from "@inkeep/agents-core/auth";
-import * as hono_types1 from "hono/types";
+import * as hono_types0 from "hono/types";
 import * as better_auth0 from "better-auth";
 import * as better_auth_plugins0 from "better-auth/plugins";
 
@@ -479,6 +479,6 @@ declare function createAgentsApp(config?: {
   auth?: UserAuthConfig;
   sandboxConfig?: SandboxConfig;
   emailService?: EmailServiceConfig;
-}): hono0.Hono<hono_types1.BlankEnv, hono_types1.BlankSchema, "/">;
+}): hono0.Hono<hono_types0.BlankEnv, hono_types0.BlankSchema, "/">;
 //#endregion
 export { type SSOProviderConfig, type UserAuthConfig, createAgentsApp, createAgentsAuth, createAgentsHono };

package/dist/index.d.ts

@@ -6,7 +6,7 @@ import { SSOProviderConfig, UserAuthConfig, createAgentsApp } from "./factory.js
 import "./sentry.js";
 import { Hono } from "hono";
 import * as zod32 from "zod";
-import * as hono_types3 from "hono/types";
+import * as hono_types12 from "hono/types";
 import * as better_auth43 from "better-auth";
 import * as better_auth_plugins4 from "better-auth/plugins";
 
@@ -474,6 +474,6 @@ declare const auth: better_auth43.Auth<{
     }>;
   }];
 }>;
-declare const app: Hono<hono_types3.BlankEnv, hono_types3.BlankSchema, "/">;
+declare const app: Hono<hono_types12.BlankEnv, hono_types12.BlankSchema, "/">;
 //#endregion
 export { type AppConfig, type AppVariables, Hono, type NativeSandboxConfig, type SSOProviderConfig, type SandboxConfig, type UserAuthConfig, type VercelSandboxConfig, auth, createAgentsApp, createAgentsHono, app as default };

package/dist/middleware/evalsAuth.d.ts

@@ -1,5 +1,5 @@
 import { BaseExecutionContext } from "@inkeep/agents-core";
-import * as hono17 from "hono";
+import * as hono0 from "hono";
 
 //#region src/middleware/evalsAuth.d.ts
 
@@ -7,7 +7,7 @@ import * as hono17 from "hono";
  * Middleware to authenticate API requests using Bearer token authentication
  * First checks if token matches INKEEP_AGENTS_EVAL_API_BYPASS_SECRET,
  */
-declare const evalApiKeyAuth: () => hono17.MiddlewareHandler<{
+declare const evalApiKeyAuth: () => hono0.MiddlewareHandler<{
   Variables: {
     executionContext: BaseExecutionContext;
   };

package/dist/middleware/projectConfig.d.ts

@@ -1,11 +1,11 @@
 import { BaseExecutionContext, ResolvedRef } from "@inkeep/agents-core";
-import * as hono6 from "hono";
+import * as hono1 from "hono";
 
 //#region src/middleware/projectConfig.d.ts
 /**
  * Middleware that fetches the full project definition from the Management API
  */
-declare const projectConfigMiddleware: hono6.MiddlewareHandler<{
+declare const projectConfigMiddleware: hono1.MiddlewareHandler<{
   Variables: {
     executionContext: BaseExecutionContext;
     resolvedRef: ResolvedRef;
@@ -15,7 +15,7 @@ declare const projectConfigMiddleware: hono6.MiddlewareHandler<{
  * Creates a middleware that applies project config fetching except for specified route patterns
  * @param skipRouteCheck - Function that returns true if the route should skip the middleware
  */
-declare const projectConfigMiddlewareExcept: (skipRouteCheck: (path: string) => boolean) => hono6.MiddlewareHandler<{
+declare const projectConfigMiddlewareExcept: (skipRouteCheck: (path: string) => boolean) => hono1.MiddlewareHandler<{
   Variables: {
     executionContext: BaseExecutionContext;
     resolvedRef: ResolvedRef;

package/dist/middleware/requirePermission.d.ts

@@ -1,5 +1,5 @@
 import { ManageAppVariables } from "../types/app.js";
-import * as hono8 from "hono";
+import * as hono3 from "hono";
 
 //#region src/middleware/requirePermission.d.ts
 type Permission = {
@@ -9,6 +9,6 @@ declare const requirePermission: <Env$1 extends {
   Variables: ManageAppVariables;
 } = {
   Variables: ManageAppVariables;
-}>(permissions: Permission) => hono8.MiddlewareHandler<Env$1, string, {}, Response>;
+}>(permissions: Permission) => hono3.MiddlewareHandler<Env$1, string, {}, Response>;
 //#endregion
 export { requirePermission };

package/dist/middleware/runAuth.d.ts

@@ -1,8 +1,8 @@
 import { BaseExecutionContext } from "@inkeep/agents-core";
-import * as hono0 from "hono";
+import * as hono4 from "hono";
 
 //#region src/middleware/runAuth.d.ts
-declare const runApiKeyAuth: () => hono0.MiddlewareHandler<{
+declare const runApiKeyAuth: () => hono4.MiddlewareHandler<{
   Variables: {
     executionContext: BaseExecutionContext;
   };
@@ -11,7 +11,7 @@ declare const runApiKeyAuth: () => hono0.MiddlewareHandler<{
  * Creates a middleware that applies API key authentication except for specified route patterns
  * @param skipRouteCheck - Function that returns true if the route should skip authentication
  */
-declare const runApiKeyAuthExcept: (skipRouteCheck: (path: string) => boolean) => hono0.MiddlewareHandler<{
+declare const runApiKeyAuthExcept: (skipRouteCheck: (path: string) => boolean) => hono4.MiddlewareHandler<{
   Variables: {
     executionContext: BaseExecutionContext;
   };
@@ -20,7 +20,7 @@ declare const runApiKeyAuthExcept: (skipRouteCheck: (path: string) => boolean) =
  * Helper middleware for endpoints that optionally support API key authentication
  * If no auth header is present, it continues without setting the executionContext
  */
-declare const runOptionalAuth: () => hono0.MiddlewareHandler<{
+declare const runOptionalAuth: () => hono4.MiddlewareHandler<{
   Variables: {
     executionContext?: BaseExecutionContext;
   };

package/dist/middleware/runAuth.js

@@ -440,6 +440,8 @@ async function tryAppCredentialAuth(reqData) {
 		failureMessage: "App is disabled"
 	};
 	let endUserId;
+	let anonTid;
+	let anonPid;
 	let authMethod;
 	if (app.type === "web_client") {
 		const config = app.config;
@@ -583,6 +585,8 @@ async function tryAppCredentialAuth(reqData) {
 				};
 			}
 			endUserId = payload.sub;
+			anonTid = typeof payload.tid === "string" ? payload.tid : void 0;
+			anonPid = typeof payload.pid === "string" ? payload.pid : void 0;
 		} catch (err) {
 			const errorType = err instanceof errors.JWTExpired ? "expired" : err instanceof errors.JWSSignatureVerificationFailed ? "signature_invalid" : "unknown";
 			logger.debug({
@@ -618,8 +622,8 @@ async function tryAppCredentialAuth(reqData) {
 	}, "App credential authenticated successfully");
 	return { authResult: {
 		apiKey: bearerToken || appIdHeader,
-		tenantId: app.tenantId || reqData.tenantId || "",
-		projectId: app.projectId || reqData.projectId || "",
+		tenantId: app.tenantId || anonTid || "",
+		projectId: app.projectId || anonPid || "",
 		agentId,
 		apiKeyId: `app:${app.id}`,
 		metadata: {

package/dist/middleware/sessionAuth.d.ts

@@ -1,5 +1,5 @@
 import { AppVariables } from "../types/app.js";
-import * as hono11 from "hono";
+import * as hono7 from "hono";
 
 //#region src/middleware/sessionAuth.d.ts
 
@@ -8,12 +8,12 @@ import * as hono11 from "hono";
  * Requires that a user has already been authenticated via Better Auth session.
  * Used primarily for manage routes that require an active user session.
  */
-declare const sessionAuth: () => hono11.MiddlewareHandler<any, string, {}, Response>;
+declare const sessionAuth: () => hono7.MiddlewareHandler<any, string, {}, Response>;
 /**
  * Global session middleware - sets user and session in context for all routes
  * Used for all routes that require an active user session.
  */
-declare const sessionContext: () => hono11.MiddlewareHandler<{
+declare const sessionContext: () => hono7.MiddlewareHandler<{
   Variables: AppVariables;
 }, string, {}, Response>;
 //#endregion

package/dist/middleware/tenantAccess.d.ts

@@ -1,4 +1,4 @@
-import * as hono5 from "hono";
+import * as hono9 from "hono";
 
 //#region src/middleware/tenantAccess.d.ts
 
@@ -12,7 +12,7 @@ import * as hono5 from "hono";
  * - API key user: Access only to the tenant associated with the API key
  * - Session user: Access based on organization membership
  */
-declare const requireTenantAccess: () => hono5.MiddlewareHandler<{
+declare const requireTenantAccess: () => hono9.MiddlewareHandler<{
   Variables: {
     userId: string;
     tenantId: string;

package/dist/middleware/tracing.d.ts

@@ -1,7 +1,7 @@
-import * as hono3 from "hono";
+import * as hono10 from "hono";
 
 //#region src/middleware/tracing.d.ts
-declare const otelBaggageMiddleware: () => hono3.MiddlewareHandler<any, string, {}, Response>;
-declare const executionBaggageMiddleware: () => hono3.MiddlewareHandler<any, string, {}, Response>;
+declare const otelBaggageMiddleware: () => hono10.MiddlewareHandler<any, string, {}, Response>;
+declare const executionBaggageMiddleware: () => hono10.MiddlewareHandler<any, string, {}, Response>;
 //#endregion
 export { executionBaggageMiddleware, otelBaggageMiddleware };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inkeep/agents-api",
-  "version": "0.0.0-dev-20260330224432",
+  "version": "0.0.0-dev-20260331031331",
   "description": "Unified Inkeep Agents API - combines management, runtime, and evaluation capabilities",
   "types": "dist/index.d.ts",
   "exports": {
@@ -73,10 +73,10 @@
     "pg": "^8.16.3",
     "undici": "^7.22.0",
     "workflow": "4.2.0-beta.67",
-    "@inkeep/agents-core": "^0.0.0-dev-20260330224432",
-    "@inkeep/agents-email": "^0.0.0-dev-20260330224432",
-    "@inkeep/agents-mcp": "^0.0.0-dev-20260330224432",
-    "@inkeep/agents-work-apps": "^0.0.0-dev-20260330224432"
+    "@inkeep/agents-core": "^0.0.0-dev-20260331031331",
+    "@inkeep/agents-email": "^0.0.0-dev-20260331031331",
+    "@inkeep/agents-mcp": "^0.0.0-dev-20260331031331",
+    "@inkeep/agents-work-apps": "^0.0.0-dev-20260331031331"
   },
   "peerDependencies": {
     "@hono/zod-openapi": "^1.1.5",