@inkeep/agents-api 0.42.0 → 0.44.0

package/dist/_virtual/rolldown_runtime.js

@@ -0,0 +1,7 @@
+import { createRequire } from "node:module";
+
+//#region rolldown:runtime
+var __require = /* @__PURE__ */ createRequire(import.meta.url);
+
+//#endregion
+export { __require };

package/dist/createApp.js

@@ -1,9 +1,10 @@
-import { getLogger } from "./logger.js";
+import { getLogger as getLogger$1 } from "./logger.js";
 import { env } from "./env.js";
 import { evalRoutes } from "./domains/evals/index.js";
 import { workflowRoutes } from "./domains/evals/workflow/routes.js";
 import { sessionAuth, sessionContext } from "./middleware/sessionAuth.js";
 import { manageRoutes } from "./domains/manage/index.js";
+import mcp_default from "./domains/mcp/routes/mcp.js";
 import { flushBatchProcessor } from "./instrumentation.js";
 import { runRoutes } from "./domains/run/index.js";
 import { authCorsConfig, defaultCorsConfig, playgroundCorsConfig, runCorsConfig, signozCorsConfig } from "./middleware/cors.js";
@@ -18,14 +19,17 @@ import { evalApiKeyAuth } from "./middleware/evalsAuth.js";
 import { projectConfigMiddleware, projectConfigMiddlewareExcept } from "./middleware/projectConfig.js";
 import { executionBaggageMiddleware } from "./middleware/tracing.js";
 import { setupOpenAPIRoutes } from "./openapi.js";
-import { OpenAPIHono, createRoute } from "@hono/zod-openapi";
+import { healthChecksHandler } from "./routes/healthChecks.js";
+import { OpenAPIHono, createRoute, z } from "@hono/zod-openapi";
+import { OrgRoles } from "@inkeep/agents-core";
+import { githubRoutes } from "@inkeep/agents-work-apps/github";
 import { Hono } from "hono";
 import { cors } from "hono/cors";
 import { requestId } from "hono/request-id";
 import { pinoLogger } from "hono-pino";
 
 //#region src/createApp.ts
-const logger = getLogger("agents-api");
+const logger = getLogger$1("agents-api");
 const isTestEnvironment = () => env.ENVIRONMENT === "test";
 const isWebhookRoute = (path) => {
 	return path.includes("/triggers/") && !path.endsWith("/triggers") && !path.endsWith("/triggers/");
@@ -33,6 +37,11 @@ const isWebhookRoute = (path) => {
 function createAgentsHono(config) {
 	const { serverConfig, credentialStores, auth, sandboxConfig } = config;
 	const app = new OpenAPIHono();
+	const CapabilitiesResponseSchema = z.object({ sandbox: z.object({
+		configured: z.boolean().describe("Whether a sandbox provider is configured. Required for Function Tools execution."),
+		provider: z.enum(["native", "vercel"]).optional().describe("The configured sandbox provider, if enabled."),
+		runtime: z.enum(["node22", "typescript"]).optional().describe("The configured sandbox runtime, if enabled.")
+	}).describe("Sandbox execution capabilities (used by Function Tools).") }).describe("Optional server capabilities and configuration.").openapi("CapabilitiesResponseSchema");
 	app.use("*", requestId());
 	if (auth) {
 		app.use("/api/auth/*", cors(authCorsConfig));
@@ -48,6 +57,7 @@ function createAgentsHono(config) {
 		if (c.req.path.startsWith("/run/")) return next();
 		if (c.req.path.includes("/playground/token")) return next();
 		if (c.req.path.includes("/signoz/")) return next();
+		if (c.req.path.includes("/work-apps/github/")) return next();
 		return cors(defaultCorsConfig)(c, next);
 	});
 	app.use("*", async (c, next) => {
@@ -73,7 +83,7 @@ function createAgentsHono(config) {
 		return next();
 	});
 	app.use(pinoLogger({
-		pino: getLogger("agents-api").getPinoInstance(),
+		pino: getLogger$1("agents-api").getPinoInstance(),
 		http: { onResLevel(c) {
 			if (c.res.status >= 500) return "error";
 			if (c.req.path.includes("/signoz/")) return "debug";
@@ -82,20 +92,11 @@ function createAgentsHono(config) {
 	}));
 	app.onError(errorHandler);
 	app.use("*", sessionContext());
-	app.openapi(createRoute({
-		method: "get",
-		path: "/health",
-		operationId: "health",
-		summary: "Health check",
-		description: "Check if the management service is healthy",
-		responses: { 204: { description: "Service is healthy" } }
-	}), (c) => {
-		return c.body(null, 204);
-	});
+	app.route("/", healthChecksHandler);
 	app.openapi(createRoute({
 		method: "get",
 		path: "/api/workflow/process",
-		tags: ["workflow"],
+		tags: ["Workflows"],
 		summary: "Process workflow jobs",
 		description: "Keeps the workflow worker active to process queued jobs (called by cron)",
 		responses: { 200: { description: "Processing complete" } }
@@ -107,18 +108,45 @@ function createAgentsHono(config) {
 		});
 	});
 	app.use("/manage/tenants/*", async (c, next) => {
-		if (env.DISABLE_AUTH || isTestEnvironment()) {
+		if (isTestEnvironment()) {
 			await next();
 			return;
 		}
 		if (c.req.header("Authorization")?.startsWith("Bearer ")) return manageApiKeyAuth()(c, next);
 		return sessionAuth()(c, next);
 	});
-	if (env.DISABLE_AUTH || isTestEnvironment()) app.use("/manage/tenants/:tenantId/*", async (c, next) => {
+	app.use("/manage/capabilities", async (c, next) => {
+		if (!auth || isTestEnvironment()) {
+			await next();
+			return;
+		}
+		if (c.req.header("Authorization")?.startsWith("Bearer ")) return manageApiKeyAuth()(c, next);
+		return sessionAuth()(c, next);
+	});
+	app.openapi(createRoute({
+		method: "get",
+		path: "/manage/capabilities",
+		operationId: "capabilities",
+		summary: "Get server capabilities",
+		description: "Get information about optional server-side capabilities and configuration.",
+		responses: { 200: {
+			description: "Server capabilities",
+			content: { "application/json": { schema: CapabilitiesResponseSchema } }
+		} }
+	}), (c) => {
+		if (!sandboxConfig) return c.json({ sandbox: { configured: false } });
+		return c.json({ sandbox: {
+			configured: true,
+			provider: sandboxConfig.provider,
+			runtime: sandboxConfig.runtime
+		} });
+	});
+	if (isTestEnvironment()) app.use("/manage/tenants/:tenantId/*", async (c, next) => {
 		const tenantId = c.req.param("tenantId");
 		if (tenantId) {
 			c.set("tenantId", tenantId);
 			c.set("userId", "anonymous");
+			c.set("tenantRole", OrgRoles.OWNER);
 		}
 		await next();
 	});
@@ -156,6 +184,8 @@ function createAgentsHono(config) {
 		return fetch(forwardedRequest);
 	});
 	app.route("/evals", evalRoutes);
+	app.route("/work-apps/github", githubRoutes);
+	app.route("/mcp", mcp_default);
 	setupOpenAPIRoutes(app);
 	app.use("/run/*", async (_c, next) => {
 		await next();

package/dist/domains/evals/api/.well-known/workflow/v1/flow.d.ts

@@ -0,0 +1,4 @@
+//#region src/domains/evals/api/.well-known/workflow/v1/flow.d.ts
+declare function handler(req: Request): Promise<Response>;
+//#endregion
+export { handler as default };

package/dist/domains/evals/api/.well-known/workflow/v1/flow.js

@@ -0,0 +1,12 @@
+import { createRequire } from "node:module";
+
+//#region src/domains/evals/api/.well-known/workflow/v1/flow.ts
+console.log("[WF CONSUMER] flow.ts loaded", (/* @__PURE__ */ new Date()).toISOString());
+const flowModule = createRequire(import.meta.url)("../../../../dist/.well-known/workflow/v1/flow.cjs");
+async function handler(req) {
+	console.log("[WF CONSUMER HIT] flow.ts", (/* @__PURE__ */ new Date()).toISOString(), req.method, req.url);
+	return flowModule.default(req);
+}
+
+//#endregion
+export { handler as default };

package/dist/domains/evals/api/.well-known/workflow/v1/step.d.ts

@@ -0,0 +1,4 @@
+//#region src/domains/evals/api/.well-known/workflow/v1/step.d.ts
+declare function handler(req: Request): Promise<Response>;
+//#endregion
+export { handler as default };

package/dist/domains/evals/api/.well-known/workflow/v1/step.js

@@ -0,0 +1,12 @@
+import { createRequire } from "node:module";
+
+//#region src/domains/evals/api/.well-known/workflow/v1/step.ts
+console.log("[WF CONSUMER] step.ts loaded", (/* @__PURE__ */ new Date()).toISOString());
+const stepModule = createRequire(import.meta.url)("../../../../dist/.well-known/workflow/v1/step.cjs");
+async function handler(req) {
+	console.log("[WF CONSUMER HIT] step.ts", (/* @__PURE__ */ new Date()).toISOString(), req.method, req.url);
+	return stepModule.default(req);
+}
+
+//#endregion
+export { handler as default };

package/dist/domains/evals/routes/datasetTriggers.d.ts

@@ -1,7 +1,7 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
-import * as hono14 from "hono";
+import * as hono17 from "hono";
 
 //#region src/domains/evals/routes/datasetTriggers.d.ts
-declare const app: OpenAPIHono<hono14.Env, {}, "/">;
+declare const app: OpenAPIHono<hono17.Env, {}, "/">;
 //#endregion
 export { app as default };

package/dist/domains/evals/routes/index.d.ts

@@ -1,7 +1,7 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
-import * as hono15 from "hono";
+import * as hono0 from "hono";
 
 //#region src/domains/evals/routes/index.d.ts
-declare const app: OpenAPIHono<hono15.Env, {}, "/">;
+declare const app: OpenAPIHono<hono0.Env, {}, "/">;
 //#endregion
 export { app as default };

package/dist/domains/evals/scripts/build-workflow.js

@@ -5,7 +5,7 @@ import { StandaloneBuilder } from "@workflow/builders";
 * Custom workflow build script that supports externalizing native modules.
 *
 * The default `workflow build` CLI doesn't expose the externalPackages option,
-* so we use the builder directly to exclude native modules like keytar.
+* so we use the builder directly to exclude native modules like @napi-rs/keyring.
 */
 const config = {
 	dirs: ["./src/domains/evals/workflow"],
@@ -14,7 +14,7 @@ const config = {
 	stepsBundlePath: "./.well-known/workflow/v1/step.cjs",
 	workflowsBundlePath: "./.well-known/workflow/v1/flow.cjs",
 	webhookBundlePath: "./.well-known/workflow/v1/webhook.mjs",
-	externalPackages: ["keytar"]
+	externalPackages: ["@napi-rs/keyring"]
 };
 async function build() {
 	console.log("Building workflow bundles...");

package/dist/domains/evals/workflow/world.js

@@ -11,8 +11,9 @@ import { createVercelWorld } from "@workflow/world-vercel";
 * Vercel's NFT can't trace dynamic imports in bundled code.
 *
 * Set WORKFLOW_TARGET_WORLD to: 'local' | 'vercel' | '@workflow/world-postgres'
+* Defaults to 'local' for development if not set.
 */
-const targetWorld = env.WORKFLOW_TARGET_WORLD;
+const targetWorld = env.WORKFLOW_TARGET_WORLD || "local";
 let world;
 if (targetWorld === "vercel") {
 	const token = process.env.WORKFLOW_VERCEL_AUTH_TOKEN;
@@ -30,7 +31,7 @@ if (targetWorld === "vercel") {
 	jobPrefix: env.WORKFLOW_POSTGRES_JOB_PREFIX,
 	queueConcurrency: Number(env.WORKFLOW_POSTGRES_WORKER_CONCURRENCY) || 10
 });
-else if (targetWorld === "local") world = createLocalWorld();
+else world = createLocalWorld();
 
 //#endregion
 export { world };

package/dist/domains/manage/index.js

@@ -1,11 +1,13 @@
 import cliAuth_default from "./routes/cliAuth.js";
-import evals_default from "./routes/evals/index.js";
+import github_default from "./routes/github.js";
 import routes_default from "./routes/index.js";
 import invitations_default from "./routes/invitations.js";
 import mcp_default from "./routes/mcp.js";
+import mcpToolGithubAccess_default from "./routes/mcpToolGithubAccess.js";
 import oauth_default from "./routes/oauth.js";
 import playgroundToken_default from "./routes/playgroundToken.js";
 import projectFull_default from "./routes/projectFull.js";
+import projectGithubAccess_default from "./routes/projectGithubAccess.js";
 import signoz_default from "./routes/signoz.js";
 import userOrganizations_default from "./routes/userOrganizations.js";
 import { OpenAPIHono } from "@hono/zod-openapi";
@@ -19,8 +21,10 @@ function createManageRoutes() {
 	app.route("/tenants/:tenantId", routes_default);
 	app.route("/tenants/:tenantId/playground/token", playgroundToken_default);
 	app.route("/tenants/:tenantId/signoz", signoz_default);
+	app.route("/tenants/:tenantId/github", github_default);
+	app.route("/tenants/:tenantId/projects/:projectId/github-access", projectGithubAccess_default);
+	app.route("/tenants/:tenantId/projects/:projectId/tools/:toolId/github-access", mcpToolGithubAccess_default);
 	app.route("/tenants/:tenantId", projectFull_default);
-	app.route("/tenants/:tenantId/projects/:projectId/evals", evals_default);
 	app.route("/oauth", oauth_default);
 	app.route("/mcp", mcp_default);
 	return app;

package/dist/domains/manage/routes/agent.js

@@ -11,8 +11,11 @@ app.use("/", async (c, next) => {
 	return next();
 });
 app.use("/:id", async (c, next) => {
-	if (c.req.method === "PUT") return requireProjectPermission("edit")(c, next);
-	if (c.req.method === "DELETE") return requireProjectPermission("edit")(c, next);
+	if ([
+		"PUT",
+		"PATCH",
+		"DELETE"
+	].includes(c.req.method)) return requireProjectPermission("edit")(c, next);
 	return next();
 });
 app.openapi(createRoute({
@@ -82,7 +85,7 @@ app.openapi(createRoute({
 	path: "/{agentId}/sub-agents/{subAgentId}/related",
 	summary: "Get Related Agent Infos",
 	operationId: "get-related-agent-infos",
-	tags: ["Agent"],
+	tags: ["Agents"],
 	request: { params: TenantProjectAgentSubAgentParamsSchema },
 	responses: {
 		200: {
@@ -116,7 +119,7 @@ app.openapi(createRoute({
 	path: "/{agentId}/full",
 	summary: "Get Full Agent Definition",
 	operationId: "get-full-agent-definition",
-	tags: ["Agent"],
+	tags: ["Agents"],
 	request: { params: TenantProjectAgentParamsSchema },
 	responses: {
 		200: {

package/dist/domains/manage/routes/agentFull.js

@@ -12,8 +12,11 @@ app.use("/", async (c, next) => {
 	return next();
 });
 app.use("/:agentId", async (c, next) => {
-	if (c.req.method === "PUT") return requireProjectPermission("edit")(c, next);
-	if (c.req.method === "DELETE") return requireProjectPermission("edit")(c, next);
+	if ([
+		"PUT",
+		"PATCH",
+		"DELETE"
+	].includes(c.req.method)) return requireProjectPermission("edit")(c, next);
 	return next();
 });
 app.openapi(createRoute({
@@ -21,7 +24,7 @@ app.openapi(createRoute({
 	path: "/",
 	summary: "Create Full Agent",
 	operationId: "create-full-agent",
-	tags: ["Full Agent"],
+	tags: ["Agents"],
 	description: "Create a complete agent with all agents, tools, and relationships from JSON definition",
 	request: {
 		params: TenantProjectParamsSchema,
@@ -54,7 +57,7 @@ app.openapi(createRoute({
 	path: "/{agentId}",
 	summary: "Get Full Agent",
 	operationId: "get-full-agent",
-	tags: ["Full Agent"],
+	tags: ["Agents"],
 	description: "Retrieve a complete agent definition with all agents, tools, and relationships",
 	request: { params: TenantProjectAgentParamsSchema },
 	responses: {
@@ -94,7 +97,7 @@ app.openapi(createRoute({
 	path: "/{agentId}",
 	summary: "Update Full Agent",
 	operationId: "update-full-agent",
-	tags: ["Full Agent"],
+	tags: ["Agents"],
 	description: "Update or create a complete agent with all agents, tools, and relationships from JSON definition",
 	request: {
 		params: TenantProjectAgentParamsSchema,
@@ -155,7 +158,7 @@ app.openapi(createRoute({
 	path: "/{agentId}",
 	summary: "Delete Full Agent",
 	operationId: "delete-full-agent",
-	tags: ["Full Agent"],
+	tags: ["Agents"],
 	description: "Delete a complete agent and cascade to all related entities (relationships, not other agents/tools)",
 	request: { params: TenantProjectAgentParamsSchema },
 	responses: {

package/dist/domains/manage/routes/apiKeys.js

@@ -11,8 +11,7 @@ app.use("/", async (c, next) => {
 	return next();
 });
 app.use("/:id", async (c, next) => {
-	if (c.req.method === "PATCH") return requireProjectPermission("edit")(c, next);
-	if (c.req.method === "DELETE") return requireProjectPermission("edit")(c, next);
+	if (c.req.method === "PUT" || c.req.method === "DELETE") return requireProjectPermission("edit")(c, next);
 	return next();
 });
 app.openapi(createRoute({

package/dist/domains/manage/routes/artifactComponents.js

@@ -19,7 +19,7 @@ app.openapi(createRoute({
 	path: "/",
 	summary: "List Artifact Components",
 	operationId: "list-artifact-components",
-	tags: ["Artifact Component"],
+	tags: ["Artifact Components"],
 	request: {
 		params: TenantProjectParamsSchema,
 		query: PaginationQueryParamsSchema
@@ -54,7 +54,7 @@ app.openapi(createRoute({
 	path: "/{id}",
 	summary: "Get Artifact Component",
 	operationId: "get-artifact-component-by-id",
-	tags: ["Artifact Component"],
+	tags: ["Artifact Components"],
 	request: { params: TenantProjectIdParamsSchema },
 	responses: {
 		200: {
@@ -84,7 +84,7 @@ app.openapi(createRoute({
 	path: "/",
 	summary: "Create Artifact Component",
 	operationId: "create-artifact-component",
-	tags: ["Artifact Component"],
+	tags: ["Artifact Components"],
 	request: {
 		params: TenantProjectParamsSchema,
 		body: { content: { "application/json": { schema: ArtifactComponentApiInsertSchema } } }
@@ -133,7 +133,7 @@ app.openapi(createRoute({
 	path: "/{id}",
 	summary: "Update Artifact Component",
 	operationId: "update-artifact-component",
-	tags: ["Artifact Component"],
+	tags: ["Artifact Components"],
 	request: {
 		params: TenantProjectIdParamsSchema,
 		body: { content: { "application/json": { schema: ArtifactComponentApiUpdateSchema } } }
@@ -180,7 +180,7 @@ app.openapi(createRoute({
 	path: "/{id}",
 	summary: "Delete Artifact Component",
 	operationId: "delete-artifact-component",
-	tags: ["Artifact Component"],
+	tags: ["Artifact Components"],
 	request: { params: TenantProjectIdParamsSchema },
 	responses: {
 		204: { description: "Artifact component deleted successfully" },

package/dist/domains/manage/routes/cliAuth.js

@@ -1,7 +1,7 @@
 import runDbClient_default from "../../../data/db/runDbClient.js";
 import { sessionAuth } from "../../../middleware/sessionAuth.js";
 import { OpenAPIHono, createRoute, z } from "@hono/zod-openapi";
-import { getUserOrganizations } from "@inkeep/agents-core";
+import { getUserOrganizationsFromDb } from "@inkeep/agents-core";
 
 //#region src/domains/manage/routes/cliAuth.ts
 const cliAuthRoutes = new OpenAPIHono();
@@ -21,7 +21,7 @@ const CLIMeResponseSchema = z.object({
 cliAuthRoutes.openapi(createRoute({
 	method: "get",
 	path: "/me",
-	tags: ["cli"],
+	tags: ["CLI"],
 	summary: "Get CLI user info",
 	description: "Get the current authenticated user and their organization for CLI usage",
 	middleware: [sessionAuth()],
@@ -37,7 +37,7 @@ cliAuthRoutes.openapi(createRoute({
 	const user = c.get("user");
 	const userId = c.get("userId");
 	if (!user || !userId) return c.json({ error: "Not authenticated" }, 401);
-	const organizations = await getUserOrganizations(runDbClient_default)(userId);
+	const organizations = await getUserOrganizationsFromDb(runDbClient_default)(userId);
 	if (organizations.length === 0) return c.json({ error: "User has no organization" }, 404);
 	const org = organizations[0];
 	return c.json({

package/dist/domains/manage/routes/contextConfigs.js

@@ -20,7 +20,7 @@ app.openapi(createRoute({
 	path: "/",
 	summary: "List Context Configurations",
 	operationId: "list-context-configs",
-	tags: ["Context Config"],
+	tags: ["Context Configs"],
 	request: {
 		params: TenantProjectAgentParamsSchema,
 		query: PaginationQueryParamsSchema
@@ -56,7 +56,7 @@ app.openapi(createRoute({
 	path: "/{id}",
 	summary: "Get Context Configuration",
 	operationId: "get-context-config-by-id",
-	tags: ["Context Config"],
+	tags: ["Context Configs"],
 	request: { params: TenantProjectAgentIdParamsSchema },
 	responses: {
 		200: {
@@ -87,7 +87,7 @@ app.openapi(createRoute({
 	path: "/",
 	summary: "Create Context Configuration",
 	operationId: "create-context-config",
-	tags: ["Context Config"],
+	tags: ["Context Configs"],
 	request: {
 		params: TenantProjectAgentParamsSchema,
 		body: { content: { "application/json": { schema: ContextConfigApiInsertSchema } } }
@@ -116,7 +116,7 @@ app.openapi(createRoute({
 	path: "/{id}",
 	summary: "Update Context Configuration",
 	operationId: "update-context-config",
-	tags: ["Context Config"],
+	tags: ["Context Configs"],
 	request: {
 		params: TenantProjectAgentIdParamsSchema,
 		body: { content: { "application/json": { schema: ContextConfigApiUpdateSchema } } }
@@ -152,7 +152,7 @@ app.openapi(createRoute({
 	path: "/{id}",
 	summary: "Delete Context Configuration",
 	operationId: "delete-context-config",
-	tags: ["Context Config"],
+	tags: ["Context Configs"],
 	request: { params: TenantProjectAgentIdParamsSchema },
 	responses: {
 		204: { description: "Context configuration deleted successfully" },

package/dist/domains/manage/routes/conversations.d.ts

@@ -1,7 +1,7 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
-import * as hono17 from "hono";
+import * as hono7 from "hono";
 
 //#region src/domains/manage/routes/conversations.d.ts
-declare const app: OpenAPIHono<hono17.Env, {}, "/">;
+declare const app: OpenAPIHono<hono7.Env, {}, "/">;
 //#endregion
 export { app as default };

package/dist/domains/manage/routes/credentialStores.js

@@ -13,7 +13,7 @@ app.openapi(createRoute({
 	path: "/",
 	summary: "List Credential Stores",
 	operationId: "list-credential-stores",
-	tags: ["Credential Store"],
+	tags: ["Credential Stores"],
 	request: { params: TenantProjectParamsSchema },
 	responses: {
 		200: {
@@ -40,7 +40,7 @@ app.openapi(createRoute({
 	path: "/{id}/credentials",
 	summary: "Create Credential in Store",
 	operationId: "create-credential-in-store",
-	tags: ["Credential Store"],
+	tags: ["Credential Stores"],
 	request: {
 		params: TenantProjectIdParamsSchema,
 		body: { content: { "application/json": { schema: CreateCredentialInStoreRequestSchema } } }

package/dist/domains/manage/routes/credentials.js

@@ -10,8 +10,7 @@ app.use("/", async (c, next) => {
 	return next();
 });
 app.use("/:id", async (c, next) => {
-	if (c.req.method === "PATCH") return requireProjectPermission("edit")(c, next);
-	if (c.req.method === "DELETE") return requireProjectPermission("edit")(c, next);
+	if (c.req.method === "PATCH" || c.req.method === "DELETE" || c.req.method === "PUT") return requireProjectPermission("edit")(c, next);
 	return next();
 });
 app.openapi(createRoute({
@@ -19,7 +18,7 @@ app.openapi(createRoute({
 	path: "/",
 	summary: "List Credentials",
 	operationId: "list-credentials",
-	tags: ["Credential"],
+	tags: ["Credentials"],
 	request: {
 		params: TenantProjectParamsSchema,
 		query: PaginationQueryParamsSchema
@@ -55,7 +54,7 @@ app.openapi(createRoute({
 	path: "/{id}",
 	summary: "Get Credential",
 	operationId: "get-credential-by-id",
-	tags: ["Credential"],
+	tags: ["Credentials"],
 	request: { params: TenantProjectIdParamsSchema },
 	responses: {
 		200: {
@@ -85,7 +84,7 @@ app.openapi(createRoute({
 	path: "/",
 	summary: "Create Credential",
 	operationId: "create-credential",
-	tags: ["Credential"],
+	tags: ["Credentials"],
 	request: {
 		params: TenantProjectParamsSchema,
 		body: { content: { "application/json": { schema: CredentialReferenceApiInsertSchema } } }
@@ -114,7 +113,7 @@ app.openapi(createRoute({
 	path: "/{id}",
 	summary: "Update Credential",
 	operationId: "update-credential",
-	tags: ["Credential"],
+	tags: ["Credentials"],
 	request: {
 		params: TenantProjectIdParamsSchema,
 		body: { content: { "application/json": { schema: CredentialReferenceApiUpdateSchema } } }
@@ -150,7 +149,7 @@ app.openapi(createRoute({
 	path: "/{id}",
 	summary: "Delete Credential",
 	operationId: "delete-credential",
-	tags: ["Credential"],
+	tags: ["Credentials"],
 	request: { params: TenantProjectIdParamsSchema },
 	responses: {
 		204: { description: "Credential deleted successfully" },

package/dist/domains/manage/routes/dataComponents.js

@@ -10,8 +10,7 @@ app.use("/", async (c, next) => {
 	return next();
 });
 app.use("/:id", async (c, next) => {
-	if (c.req.method === "PATCH") return requireProjectPermission("edit")(c, next);
-	if (c.req.method === "DELETE") return requireProjectPermission("edit")(c, next);
+	if (c.req.method === "PUT" || c.req.method === "DELETE") return requireProjectPermission("edit")(c, next);
 	return next();
 });
 app.openapi(createRoute({
@@ -19,7 +18,7 @@ app.openapi(createRoute({
 	path: "/",
 	summary: "List Data Components",
 	operationId: "list-data-components",
-	tags: ["Data Component"],
+	tags: ["Data Components"],
 	request: {
 		params: TenantProjectParamsSchema,
 		query: PaginationQueryParamsSchema
@@ -54,7 +53,7 @@ app.openapi(createRoute({
 	path: "/{id}",
 	summary: "Get Data Component",
 	operationId: "get-data-component-by-id",
-	tags: ["Data Component"],
+	tags: ["Data Components"],
 	request: { params: TenantProjectIdParamsSchema },
 	responses: {
 		200: {
@@ -84,7 +83,7 @@ app.openapi(createRoute({
 	path: "/",
 	summary: "Create Data Component",
 	operationId: "create-data-component",
-	tags: ["Data Component"],
+	tags: ["Data Components"],
 	request: {
 		params: TenantProjectParamsSchema,
 		body: { content: { "application/json": { schema: DataComponentApiInsertSchema } } }
@@ -120,7 +119,7 @@ app.openapi(createRoute({
 	path: "/{id}",
 	summary: "Update Data Component",
 	operationId: "update-data-component",
-	tags: ["Data Component"],
+	tags: ["Data Components"],
 	request: {
 		params: TenantProjectIdParamsSchema,
 		body: { content: { "application/json": { schema: DataComponentApiUpdateSchema } } }
@@ -162,7 +161,7 @@ app.openapi(createRoute({
 	path: "/{id}",
 	summary: "Delete Data Component",
 	operationId: "delete-data-component",
-	tags: ["Data Component"],
+	tags: ["Data Components"],
 	request: { params: TenantProjectIdParamsSchema },
 	responses: {
 		204: { description: "Data component deleted successfully" },

package/dist/domains/manage/routes/externalAgents.js

@@ -10,8 +10,7 @@ app.use("/", async (c, next) => {
 	return next();
 });
 app.use("/:id", async (c, next) => {
-	if (c.req.method === "PATCH") return requireProjectPermission("edit")(c, next);
-	if (c.req.method === "DELETE") return requireProjectPermission("edit")(c, next);
+	if (c.req.method === "PUT" || c.req.method === "DELETE") return requireProjectPermission("edit")(c, next);
 	return next();
 });
 app.openapi(createRoute({

package/dist/domains/manage/routes/github.d.ts

@@ -0,0 +1,16 @@
+import { ManageAppVariables } from "../../../types/app.js";
+import { OpenAPIHono } from "@hono/zod-openapi";
+
+//#region src/domains/manage/routes/github.d.ts
+declare const app: OpenAPIHono<{
+  Variables: ManageAppVariables;
+}, {}, "/">;
+declare const STATE_JWT_ISSUER = "inkeep-agents-api";
+declare const STATE_JWT_AUDIENCE = "github-app-install";
+/**
+ * Signs a JWT state token for the GitHub App installation flow.
+ * The state contains the tenantId and expires after 10 minutes.
+ */
+declare function signStateToken(tenantId: string): Promise<string>;
+//#endregion
+export { STATE_JWT_AUDIENCE, STATE_JWT_ISSUER, app as default, signStateToken };