@inkeep/agents-core 0.0.0-dev-20251020154015 → 0.0.0-dev-20251020214311

package/dist/{chunk-AN3YZP42.js → chunk-ZGJI6UNK.js}

@@ -173,15 +173,38 @@ function generateIdFromName(name) {
 var MAX_CODE_SIZE = 5e4;
 var MAX_DATA_SIZE = 1e4;
 var DANGEROUS_PATTERNS = [
-  /\beval\s*\(/i,
-  /\bFunction\s*\(/i,
-  /dangerouslySetInnerHTML/i,
-  /<script\b/i,
-  /\bon\w+\s*=/i,
-  // inline event handlers like onclick=
-  /document\.write/i,
-  /window\.location/i,
-  /\.innerHTML\s*=/i
+  {
+    pattern: /\beval\s*\(/i,
+    message: "eval() is not allowed"
+  },
+  {
+    pattern: /\bFunction\s*\(/i,
+    message: "Function constructor is not allowed"
+  },
+  {
+    pattern: /dangerouslySetInnerHTML/i,
+    message: "dangerouslySetInnerHTML is not allowed"
+  },
+  {
+    pattern: /<script\b/i,
+    message: "Script tags are not allowed"
+  },
+  {
+    pattern: /\bon\w+\s*=/i,
+    message: "Inline event handlers (onClick=, onLoad=, etc.) are not allowed"
+  },
+  {
+    pattern: /document\.write/i,
+    message: "document.write is not allowed"
+  },
+  {
+    pattern: /window\.location/i,
+    message: "window.location is not allowed"
+  },
+  {
+    pattern: /\.innerHTML\s*=/i,
+    message: "innerHTML manipulation is not allowed"
+  }
 ];
 var ALLOWED_IMPORTS = ["lucide-react"];
 function validatePreview(preview) {
@@ -211,11 +234,11 @@ function validatePreview(preview) {
       message: `Data size exceeds maximum allowed (${MAX_DATA_SIZE} characters)`
     });
   }
-  for (const pattern of DANGEROUS_PATTERNS) {
+  for (const { pattern, message } of DANGEROUS_PATTERNS) {
     if (pattern.test(preview.code)) {
       errors.push({
         field: "preview.code",
-        message: `Code contains potentially dangerous pattern: ${pattern.source}`
+        message: `Code contains potentially dangerous pattern: ${message}`
       });
     }
   }

package/dist/index.cjs

@@ -219729,15 +219729,38 @@ var setActiveAgentForThread = (db) => async ({
 var MAX_CODE_SIZE = 5e4;
 var MAX_DATA_SIZE = 1e4;
 var DANGEROUS_PATTERNS = [
-  /\beval\s*\(/i,
-  /\bFunction\s*\(/i,
-  /dangerouslySetInnerHTML/i,
-  /<script\b/i,
-  /\bon\w+\s*=/i,
-  // inline event handlers like onclick=
-  /document\.write/i,
-  /window\.location/i,
-  /\.innerHTML\s*=/i
+  {
+    pattern: /\beval\s*\(/i,
+    message: "eval() is not allowed"
+  },
+  {
+    pattern: /\bFunction\s*\(/i,
+    message: "Function constructor is not allowed"
+  },
+  {
+    pattern: /dangerouslySetInnerHTML/i,
+    message: "dangerouslySetInnerHTML is not allowed"
+  },
+  {
+    pattern: /<script\b/i,
+    message: "Script tags are not allowed"
+  },
+  {
+    pattern: /\bon\w+\s*=/i,
+    message: "Inline event handlers (onClick=, onLoad=, etc.) are not allowed"
+  },
+  {
+    pattern: /document\.write/i,
+    message: "document.write is not allowed"
+  },
+  {
+    pattern: /window\.location/i,
+    message: "window.location is not allowed"
+  },
+  {
+    pattern: /\.innerHTML\s*=/i,
+    message: "innerHTML manipulation is not allowed"
+  }
 ];
 var ALLOWED_IMPORTS = ["lucide-react"];
 function validatePreview(preview2) {
@@ -219767,11 +219790,11 @@ function validatePreview(preview2) {
       message: `Data size exceeds maximum allowed (${MAX_DATA_SIZE} characters)`
     });
   }
-  for (const pattern of DANGEROUS_PATTERNS) {
+  for (const { pattern, message } of DANGEROUS_PATTERNS) {
     if (pattern.test(preview2.code)) {
       errors.push({
         field: "preview.code",
-        message: `Code contains potentially dangerous pattern: ${pattern.source}`
+        message: `Code contains potentially dangerous pattern: ${message}`
       });
     }
   }

package/dist/index.js

@@ -4,8 +4,8 @@ export { ANTHROPIC_MODELS, GOOGLE_MODELS, OPENAI_MODELS } from './chunk-MQTANAMG
 export { TaskState } from './chunk-H2F72PDA.js';
 import { getLogger, convertZodToJsonSchema } from './chunk-YECQCT5N.js';
 export { PinoLogger, convertZodToJsonSchema, convertZodToJsonSchemaWithPreview, extractPreviewFields, getLogger, isZodSchema, loggerFactory, preview } from './chunk-YECQCT5N.js';
-import { validatePreview, validateAndTypeAgentData, validateAgentStructure, isInternalAgent, isExternalAgent } from './chunk-AN3YZP42.js';
-export { A2AMessageMetadataSchema, DataOperationDetailsSchema, DataOperationEventSchema, DelegationReturnedDataSchema, DelegationSentDataSchema, TransferDataSchema, generateIdFromName, isExternalAgent, isInternalAgent, isValidResourceId, validateAgentRelationships, validateAgentStructure, validateAndTypeAgentData, validateArtifactComponentReferences, validateDataComponentReferences, validatePreview, validateToolReferences } from './chunk-AN3YZP42.js';
+import { validatePreview, validateAndTypeAgentData, validateAgentStructure, isInternalAgent, isExternalAgent } from './chunk-ZGJI6UNK.js';
+export { A2AMessageMetadataSchema, DataOperationDetailsSchema, DataOperationEventSchema, DelegationReturnedDataSchema, DelegationSentDataSchema, TransferDataSchema, generateIdFromName, isExternalAgent, isInternalAgent, isValidResourceId, validateAgentRelationships, validateAgentStructure, validateAndTypeAgentData, validateArtifactComponentReferences, validateDataComponentReferences, validatePreview, validateToolReferences } from './chunk-ZGJI6UNK.js';
 import { ContextConfigApiUpdateSchema, validatePropsAsJsonSchema } from './chunk-HN77JIDP.js';
 export { AgentApiInsertSchema, AgentApiSelectSchema, AgentApiUpdateSchema, AgentInsertSchema, AgentListResponse, AgentResponse, AgentSelectSchema, AgentStopWhenSchema, AgentUpdateSchema, AgentWithinContextOfProjectSchema, AllAgentSchema, ApiKeyApiCreationResponseSchema, ApiKeyApiInsertSchema, ApiKeyApiSelectSchema, ApiKeyApiUpdateSchema, ApiKeyInsertSchema, ApiKeyListResponse, ApiKeyResponse, ApiKeySelectSchema, ApiKeyUpdateSchema, ArtifactComponentApiInsertSchema, ArtifactComponentApiSelectSchema, ArtifactComponentApiUpdateSchema, ArtifactComponentInsertSchema, ArtifactComponentListResponse, ArtifactComponentResponse, ArtifactComponentSelectSchema, ArtifactComponentUpdateSchema, CanUseItemSchema, ContextCacheApiInsertSchema, ContextCacheApiSelectSchema, ContextCacheApiUpdateSchema, ContextCacheInsertSchema, ContextCacheSelectSchema, ContextCacheUpdateSchema, ContextConfigApiInsertSchema, ContextConfigApiSelectSchema, ContextConfigApiUpdateSchema, ContextConfigInsertSchema, ContextConfigListResponse, ContextConfigResponse, ContextConfigSelectSchema, ContextConfigUpdateSchema, ConversationApiInsertSchema, ConversationApiSelectSchema, ConversationApiUpdateSchema, ConversationInsertSchema, ConversationListResponse, ConversationResponse, ConversationSelectSchema, ConversationUpdateSchema, CredentialReferenceApiInsertSchema, CredentialReferenceApiSelectSchema, CredentialReferenceApiUpdateSchema, CredentialReferenceInsertSchema, CredentialReferenceListResponse, CredentialReferenceResponse, CredentialReferenceSelectSchema, CredentialReferenceUpdateSchema, DataComponentApiInsertSchema, DataComponentApiSelectSchema, DataComponentApiUpdateSchema, DataComponentBaseSchema, DataComponentInsertSchema, DataComponentListResponse, DataComponentResponse, DataComponentSelectSchema, DataComponentUpdateSchema, ErrorResponseSchema, ExistsResponseSchema, ExternalAgentApiInsertSchema, ExternalAgentApiSelectSchema, ExternalAgentApiUpdateSchema, ExternalAgentInsertSchema, ExternalAgentListResponse, ExternalAgentResponse, ExternalAgentSelectSchema, ExternalAgentUpdateSchema, ExternalSubAgentRelationApiInsertSchema, ExternalSubAgentRelationInsertSchema, FetchConfigSchema, FetchDefinitionSchema, FullAgentAgentInsertSchema, FullProjectDefinitionSchema, FunctionApiInsertSchema, FunctionApiSelectSchema, FunctionApiUpdateSchema, FunctionInsertSchema, FunctionListResponse, FunctionResponse, FunctionSelectSchema, FunctionToolApiInsertSchema, FunctionToolApiSelectSchema, FunctionToolApiUpdateSchema, FunctionToolConfigSchema, FunctionToolInsertSchema, FunctionToolListResponse, FunctionToolResponse, FunctionToolSelectSchema, FunctionToolUpdateSchema, FunctionUpdateSchema, HeadersScopeSchema, LedgerArtifactApiInsertSchema, LedgerArtifactApiSelectSchema, LedgerArtifactApiUpdateSchema, LedgerArtifactInsertSchema, LedgerArtifactSelectSchema, LedgerArtifactUpdateSchema, ListResponseSchema, MAX_ID_LENGTH, MCPToolConfigSchema, MIN_ID_LENGTH, McpToolDefinitionSchema, McpToolSchema, McpTransportConfigSchema, MessageApiInsertSchema, MessageApiSelectSchema, MessageApiUpdateSchema, MessageInsertSchema, MessageListResponse, MessageResponse, MessageSelectSchema, MessageUpdateSchema, ModelSchema, ModelSettingsSchema, PaginationQueryParamsSchema, PaginationSchema, ProjectApiInsertSchema, ProjectApiSelectSchema, ProjectApiUpdateSchema, ProjectInsertSchema, ProjectListResponse, ProjectModelSchema, ProjectResponse, ProjectSelectSchema, ProjectUpdateSchema, RemovedResponseSchema, SingleResponseSchema, StatusComponentSchema, StatusUpdateSchema, StopWhenSchema, SubAgentApiInsertSchema, SubAgentApiSelectSchema, SubAgentApiUpdateSchema, SubAgentArtifactComponentApiInsertSchema, SubAgentArtifactComponentApiSelectSchema, SubAgentArtifactComponentApiUpdateSchema, SubAgentArtifactComponentInsertSchema, SubAgentArtifactComponentListResponse, SubAgentArtifactComponentResponse, SubAgentArtifactComponentSelectSchema, SubAgentArtifactComponentUpdateSchema, SubAgentDataComponentApiInsertSchema, SubAgentDataComponentApiSelectSchema, SubAgentDataComponentApiUpdateSchema, SubAgentDataComponentInsertSchema, SubAgentDataComponentListResponse, SubAgentDataComponentResponse, SubAgentDataComponentSelectSchema, SubAgentDataComponentUpdateSchema, SubAgentInsertSchema, SubAgentListResponse, SubAgentRelationApiInsertSchema, SubAgentRelationApiSelectSchema, SubAgentRelationApiUpdateSchema, SubAgentRelationInsertSchema, SubAgentRelationListResponse, SubAgentRelationQuerySchema, SubAgentRelationResponse, SubAgentRelationSelectSchema, SubAgentRelationUpdateSchema, SubAgentResponse, SubAgentSelectSchema, SubAgentStopWhenSchema, SubAgentToolRelationApiInsertSchema, SubAgentToolRelationApiSelectSchema, SubAgentToolRelationApiUpdateSchema, SubAgentToolRelationInsertSchema, SubAgentToolRelationListResponse, SubAgentToolRelationResponse, SubAgentToolRelationSelectSchema, SubAgentToolRelationUpdateSchema, SubAgentUpdateSchema, TaskApiInsertSchema, TaskApiSelectSchema, TaskApiUpdateSchema, TaskInsertSchema, TaskRelationApiInsertSchema, TaskRelationApiSelectSchema, TaskRelationApiUpdateSchema, TaskRelationInsertSchema, TaskRelationSelectSchema, TaskRelationUpdateSchema, TaskSelectSchema, TaskUpdateSchema, TenantIdParamsSchema, TenantParamsSchema, TenantProjectAgentIdParamsSchema, TenantProjectAgentParamsSchema, TenantProjectAgentSubAgentIdParamsSchema, TenantProjectAgentSubAgentParamsSchema, TenantProjectIdParamsSchema, TenantProjectParamsSchema, ToolApiInsertSchema, ToolApiSelectSchema, ToolApiUpdateSchema, ToolInsertSchema, ToolListResponse, ToolResponse, ToolSelectSchema, ToolStatusSchema, ToolUpdateSchema, URL_SAFE_ID_PATTERN, resourceIdSchema, validatePropsAsJsonSchema } from './chunk-HN77JIDP.js';
 import { schema_exports, contextConfigs, externalAgents, functions, functionTools, subAgentFunctionToolRelations, subAgentRelations, subAgents, subAgentToolRelations, tools, credentialReferences, agents, subAgentDataComponents, subAgentArtifactComponents, dataComponents, artifactComponents, projects, apiKeys, contextCache, conversations, messages, ledgerArtifacts, tasks, taskRelations } from './chunk-5B6IOJZY.js';

package/dist/validation/index.cjs

@@ -1794,15 +1794,38 @@ function generateIdFromName(name) {
 var MAX_CODE_SIZE = 5e4;
 var MAX_DATA_SIZE = 1e4;
 var DANGEROUS_PATTERNS = [
-  /\beval\s*\(/i,
-  /\bFunction\s*\(/i,
-  /dangerouslySetInnerHTML/i,
-  /<script\b/i,
-  /\bon\w+\s*=/i,
-  // inline event handlers like onclick=
-  /document\.write/i,
-  /window\.location/i,
-  /\.innerHTML\s*=/i
+  {
+    pattern: /\beval\s*\(/i,
+    message: "eval() is not allowed"
+  },
+  {
+    pattern: /\bFunction\s*\(/i,
+    message: "Function constructor is not allowed"
+  },
+  {
+    pattern: /dangerouslySetInnerHTML/i,
+    message: "dangerouslySetInnerHTML is not allowed"
+  },
+  {
+    pattern: /<script\b/i,
+    message: "Script tags are not allowed"
+  },
+  {
+    pattern: /\bon\w+\s*=/i,
+    message: "Inline event handlers (onClick=, onLoad=, etc.) are not allowed"
+  },
+  {
+    pattern: /document\.write/i,
+    message: "document.write is not allowed"
+  },
+  {
+    pattern: /window\.location/i,
+    message: "window.location is not allowed"
+  },
+  {
+    pattern: /\.innerHTML\s*=/i,
+    message: "innerHTML manipulation is not allowed"
+  }
 ];
 var ALLOWED_IMPORTS = ["lucide-react"];
 function validatePreview(preview) {
@@ -1832,11 +1855,11 @@ function validatePreview(preview) {
       message: `Data size exceeds maximum allowed (${MAX_DATA_SIZE} characters)`
     });
   }
-  for (const pattern of DANGEROUS_PATTERNS) {
+  for (const { pattern, message } of DANGEROUS_PATTERNS) {
     if (pattern.test(preview.code)) {
       errors.push({
         field: "preview.code",
-        message: `Code contains potentially dangerous pattern: ${pattern.source}`
+        message: `Code contains potentially dangerous pattern: ${message}`
       });
     }
   }

package/dist/validation/index.js

@@ -1,2 +1,2 @@
-export { A2AMessageMetadataSchema, DataOperationDetailsSchema, DataOperationEventSchema, DelegationReturnedDataSchema, DelegationSentDataSchema, TransferDataSchema, generateIdFromName, isExternalAgent, isInternalAgent, isValidResourceId, validateAgentRelationships, validateAgentStructure, validateAndTypeAgentData, validateArtifactComponentReferences, validateDataComponentReferences, validatePreview, validateToolReferences } from '../chunk-AN3YZP42.js';
+export { A2AMessageMetadataSchema, DataOperationDetailsSchema, DataOperationEventSchema, DelegationReturnedDataSchema, DelegationSentDataSchema, TransferDataSchema, generateIdFromName, isExternalAgent, isInternalAgent, isValidResourceId, validateAgentRelationships, validateAgentStructure, validateAndTypeAgentData, validateArtifactComponentReferences, validateDataComponentReferences, validatePreview, validateToolReferences } from '../chunk-ZGJI6UNK.js';
 export { AgentApiInsertSchema, AgentApiSelectSchema, AgentApiUpdateSchema, AgentInsertSchema, AgentListResponse, AgentResponse, AgentSelectSchema, AgentStopWhenSchema, AgentUpdateSchema, AgentWithinContextOfProjectSchema, AllAgentSchema, ApiKeyApiCreationResponseSchema, ApiKeyApiInsertSchema, ApiKeyApiSelectSchema, ApiKeyApiUpdateSchema, ApiKeyInsertSchema, ApiKeyListResponse, ApiKeyResponse, ApiKeySelectSchema, ApiKeyUpdateSchema, ArtifactComponentApiInsertSchema, ArtifactComponentApiSelectSchema, ArtifactComponentApiUpdateSchema, ArtifactComponentInsertSchema, ArtifactComponentListResponse, ArtifactComponentResponse, ArtifactComponentSelectSchema, ArtifactComponentUpdateSchema, CanUseItemSchema, ContextCacheApiInsertSchema, ContextCacheApiSelectSchema, ContextCacheApiUpdateSchema, ContextCacheInsertSchema, ContextCacheSelectSchema, ContextCacheUpdateSchema, ContextConfigApiInsertSchema, ContextConfigApiSelectSchema, ContextConfigApiUpdateSchema, ContextConfigInsertSchema, ContextConfigListResponse, ContextConfigResponse, ContextConfigSelectSchema, ContextConfigUpdateSchema, ConversationApiInsertSchema, ConversationApiSelectSchema, ConversationApiUpdateSchema, ConversationInsertSchema, ConversationListResponse, ConversationResponse, ConversationSelectSchema, ConversationUpdateSchema, CredentialReferenceApiInsertSchema, CredentialReferenceApiSelectSchema, CredentialReferenceApiUpdateSchema, CredentialReferenceInsertSchema, CredentialReferenceListResponse, CredentialReferenceResponse, CredentialReferenceSelectSchema, CredentialReferenceUpdateSchema, DataComponentApiInsertSchema, DataComponentApiSelectSchema, DataComponentApiUpdateSchema, DataComponentBaseSchema, DataComponentInsertSchema, DataComponentListResponse, DataComponentResponse, DataComponentSelectSchema, DataComponentUpdateSchema, ErrorResponseSchema, ExistsResponseSchema, ExternalAgentApiInsertSchema, ExternalAgentApiSelectSchema, ExternalAgentApiUpdateSchema, ExternalAgentInsertSchema, ExternalAgentListResponse, ExternalAgentResponse, ExternalAgentSelectSchema, ExternalAgentUpdateSchema, ExternalSubAgentRelationApiInsertSchema, ExternalSubAgentRelationInsertSchema, FetchConfigSchema, FetchDefinitionSchema, FullAgentAgentInsertSchema, FullProjectDefinitionSchema, FunctionApiInsertSchema, FunctionApiSelectSchema, FunctionApiUpdateSchema, FunctionInsertSchema, FunctionListResponse, FunctionResponse, FunctionSelectSchema, FunctionToolApiInsertSchema, FunctionToolApiSelectSchema, FunctionToolApiUpdateSchema, FunctionToolConfigSchema, FunctionToolInsertSchema, FunctionToolListResponse, FunctionToolResponse, FunctionToolSelectSchema, FunctionToolUpdateSchema, FunctionUpdateSchema, HeadersScopeSchema, LedgerArtifactApiInsertSchema, LedgerArtifactApiSelectSchema, LedgerArtifactApiUpdateSchema, LedgerArtifactInsertSchema, LedgerArtifactSelectSchema, LedgerArtifactUpdateSchema, ListResponseSchema, MAX_ID_LENGTH, MCPToolConfigSchema, MIN_ID_LENGTH, McpToolDefinitionSchema, McpToolSchema, McpTransportConfigSchema, MessageApiInsertSchema, MessageApiSelectSchema, MessageApiUpdateSchema, MessageInsertSchema, MessageListResponse, MessageResponse, MessageSelectSchema, MessageUpdateSchema, ModelSchema, ModelSettingsSchema, PaginationQueryParamsSchema, PaginationSchema, ProjectApiInsertSchema, ProjectApiSelectSchema, ProjectApiUpdateSchema, ProjectInsertSchema, ProjectListResponse, ProjectModelSchema, ProjectResponse, ProjectSelectSchema, ProjectUpdateSchema, RemovedResponseSchema, SingleResponseSchema, StatusComponentSchema, StatusUpdateSchema, StopWhenSchema, SubAgentApiInsertSchema, SubAgentApiSelectSchema, SubAgentApiUpdateSchema, SubAgentArtifactComponentApiInsertSchema, SubAgentArtifactComponentApiSelectSchema, SubAgentArtifactComponentApiUpdateSchema, SubAgentArtifactComponentInsertSchema, SubAgentArtifactComponentListResponse, SubAgentArtifactComponentResponse, SubAgentArtifactComponentSelectSchema, SubAgentArtifactComponentUpdateSchema, SubAgentDataComponentApiInsertSchema, SubAgentDataComponentApiSelectSchema, SubAgentDataComponentApiUpdateSchema, SubAgentDataComponentInsertSchema, SubAgentDataComponentListResponse, SubAgentDataComponentResponse, SubAgentDataComponentSelectSchema, SubAgentDataComponentUpdateSchema, SubAgentInsertSchema, SubAgentListResponse, SubAgentRelationApiInsertSchema, SubAgentRelationApiSelectSchema, SubAgentRelationApiUpdateSchema, SubAgentRelationInsertSchema, SubAgentRelationListResponse, SubAgentRelationQuerySchema, SubAgentRelationResponse, SubAgentRelationSelectSchema, SubAgentRelationUpdateSchema, SubAgentResponse, SubAgentSelectSchema, SubAgentStopWhenSchema, SubAgentToolRelationApiInsertSchema, SubAgentToolRelationApiSelectSchema, SubAgentToolRelationApiUpdateSchema, SubAgentToolRelationInsertSchema, SubAgentToolRelationListResponse, SubAgentToolRelationResponse, SubAgentToolRelationSelectSchema, SubAgentToolRelationUpdateSchema, SubAgentUpdateSchema, TaskApiInsertSchema, TaskApiSelectSchema, TaskApiUpdateSchema, TaskInsertSchema, TaskRelationApiInsertSchema, TaskRelationApiSelectSchema, TaskRelationApiUpdateSchema, TaskRelationInsertSchema, TaskRelationSelectSchema, TaskRelationUpdateSchema, TaskSelectSchema, TaskUpdateSchema, TenantIdParamsSchema, TenantParamsSchema, TenantProjectAgentIdParamsSchema, TenantProjectAgentParamsSchema, TenantProjectAgentSubAgentIdParamsSchema, TenantProjectAgentSubAgentParamsSchema, TenantProjectIdParamsSchema, TenantProjectParamsSchema, ToolApiInsertSchema, ToolApiSelectSchema, ToolApiUpdateSchema, ToolInsertSchema, ToolListResponse, ToolResponse, ToolSelectSchema, ToolStatusSchema, ToolUpdateSchema, URL_SAFE_ID_PATTERN, resourceIdSchema, validatePropsAsJsonSchema } from '../chunk-HN77JIDP.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inkeep/agents-core",
-  "version": "0.0.0-dev-20251020154015",
+  "version": "0.0.0-dev-20251020214311",
   "description": "Agents Core contains the database schema, types, and validation schemas for Inkeep Agent Framework, along with core components.",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE.md",