@inkeep/agents-core 0.0.0-dev-20260113114948 → 0.0.0-dev-20260113172432

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (21) hide show
  1. package/dist/auth/auth-schema.d.ts +104 -104
  2. package/dist/auth/auth.d.ts +67 -39
  3. package/dist/auth/auth.js +17 -1
  4. package/dist/auth/permissions.d.ts +13 -13
  5. package/dist/data-access/agents.d.ts +41 -41
  6. package/dist/data-access/apiKeys.d.ts +20 -20
  7. package/dist/data-access/artifactComponents.d.ts +12 -12
  8. package/dist/data-access/contextConfigs.d.ts +12 -12
  9. package/dist/data-access/conversations.d.ts +12 -12
  10. package/dist/data-access/dataComponents.d.ts +6 -6
  11. package/dist/data-access/functionTools.d.ts +8 -8
  12. package/dist/data-access/messages.d.ts +18 -18
  13. package/dist/data-access/subAgentExternalAgentRelations.d.ts +24 -24
  14. package/dist/data-access/subAgentRelations.d.ts +30 -30
  15. package/dist/data-access/subAgentTeamAgentRelations.d.ts +18 -18
  16. package/dist/data-access/subAgents.d.ts +15 -15
  17. package/dist/data-access/tasks.d.ts +4 -4
  18. package/dist/data-access/tools.d.ts +33 -33
  19. package/dist/db/schema.d.ts +405 -405
  20. package/dist/validation/schemas.d.ts +757 -757
  21. package/package.json +1 -1
package/dist/auth/auth.d.ts CHANGED
@@ -2,7 +2,7 @@ import { DatabaseClient } from "../db/client.js";
2
2
  import * as _better_auth_sso0 from "@better-auth/sso";
3
3
  import * as better_auth0 from "better-auth";
4
4
  import { BetterAuthAdvancedOptions } from "better-auth";
5
- import * as better_auth_plugins0 from "better-auth/plugins";
5
+ import * as better_auth_plugins20 from "better-auth/plugins";
6
6
  import * as zod0 from "zod";
7
7
  import { GoogleOptions } from "better-auth/social-providers";
8
8
 
@@ -81,6 +81,34 @@ declare function createAuth(config: BetterAuthConfig): better_auth0.Auth<{
81
81
  requireEmailVerification: false;
82
82
  autoSignIn: true;
83
83
  };
84
+ databaseHooks: {
85
+ session: {
86
+ create: {
87
+ before: (session: {
88
+ id: string;
89
+ createdAt: Date;
90
+ updatedAt: Date;
91
+ userId: string;
92
+ expiresAt: Date;
93
+ token: string;
94
+ ipAddress?: string | null | undefined;
95
+ userAgent?: string | null | undefined;
96
+ } & Record<string, unknown>) => Promise<{
97
+ data: {
98
+ activeOrganizationId: string | null;
99
+ id: string;
100
+ createdAt: Date;
101
+ updatedAt: Date;
102
+ userId: string;
103
+ expiresAt: Date;
104
+ token: string;
105
+ ipAddress?: string | null | undefined;
106
+ userAgent?: string | null | undefined;
107
+ };
108
+ }>;
109
+ };
110
+ };
111
+ };
84
112
  socialProviders: {
85
113
  google: {
86
114
  redirectURI?: string | undefined;
@@ -185,7 +213,7 @@ declare function createAuth(config: BetterAuthConfig): better_auth0.Auth<{
185
213
  handler: (inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<void>;
186
214
  }[];
187
215
  };
188
- options: better_auth_plugins0.BearerOptions | undefined;
216
+ options: better_auth_plugins20.BearerOptions | undefined;
189
217
  }, {
190
218
  id: "sso";
191
219
  endpoints: {
@@ -813,30 +841,30 @@ declare function createAuth(config: BetterAuthConfig): better_auth0.Auth<{
813
841
  };
814
842
  }, {
815
843
  id: "organization";
816
- endpoints: better_auth_plugins0.OrganizationEndpoints<{
844
+ endpoints: better_auth_plugins20.OrganizationEndpoints<{
817
845
  allowUserToCreateOrganization: true;
818
- ac: better_auth_plugins0.AccessControl;
846
+ ac: better_auth_plugins20.AccessControl;
819
847
  roles: {
820
848
  member: {
821
- authorize<K_1 extends "function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team", better_auth_plugins0.Statements>[key] | {
822
- actions: better_auth_plugins0.Subset<"function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team", better_auth_plugins0.Statements>[key];
849
+ authorize<K_1 extends "function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins20.Subset<"function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac", better_auth_plugins20.Statements>[key] | {
850
+ actions: better_auth_plugins20.Subset<"function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac", better_auth_plugins20.Statements>[key];
823
851
  connector: "OR" | "AND";
824
- } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
825
- statements: better_auth_plugins0.Subset<"function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team", better_auth_plugins0.Statements>;
852
+ } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins20.AuthorizeResponse;
853
+ statements: better_auth_plugins20.Subset<"function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac", better_auth_plugins20.Statements>;
826
854
  };
827
855
  admin: {
828
- authorize<K_1 extends "function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team", better_auth_plugins0.Statements>[key] | {
829
- actions: better_auth_plugins0.Subset<"function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team", better_auth_plugins0.Statements>[key];
856
+ authorize<K_1 extends "function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins20.Subset<"function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac", better_auth_plugins20.Statements>[key] | {
857
+ actions: better_auth_plugins20.Subset<"function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac", better_auth_plugins20.Statements>[key];
830
858
  connector: "OR" | "AND";
831
- } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
832
- statements: better_auth_plugins0.Subset<"function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team", better_auth_plugins0.Statements>;
859
+ } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins20.AuthorizeResponse;
860
+ statements: better_auth_plugins20.Subset<"function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac", better_auth_plugins20.Statements>;
833
861
  };
834
862
  owner: {
835
- authorize<K_1 extends "function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team", better_auth_plugins0.Statements>[key] | {
836
- actions: better_auth_plugins0.Subset<"function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team", better_auth_plugins0.Statements>[key];
863
+ authorize<K_1 extends "function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins20.Subset<"function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac", better_auth_plugins20.Statements>[key] | {
864
+ actions: better_auth_plugins20.Subset<"function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac", better_auth_plugins20.Statements>[key];
837
865
  connector: "OR" | "AND";
838
- } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
839
- statements: better_auth_plugins0.Subset<"function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team", better_auth_plugins0.Statements>;
866
+ } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins20.AuthorizeResponse;
867
+ statements: better_auth_plugins20.Subset<"function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac", better_auth_plugins20.Statements>;
840
868
  };
841
869
  };
842
870
  membershipLimit: number;
@@ -846,9 +874,9 @@ declare function createAuth(config: BetterAuthConfig): better_auth0.Auth<{
846
874
  id: string;
847
875
  role: string;
848
876
  email: string;
849
- organization: better_auth_plugins0.Organization;
850
- invitation: better_auth_plugins0.Invitation;
851
- inviter: better_auth_plugins0.Member & {
877
+ organization: better_auth_plugins20.Organization;
878
+ invitation: better_auth_plugins20.Invitation;
879
+ inviter: better_auth_plugins20.Member & {
852
880
  user: better_auth0.User;
853
881
  };
854
882
  }): Promise<void>;
@@ -981,7 +1009,7 @@ declare function createAuth(config: BetterAuthConfig): better_auth0.Auth<{
981
1009
  organizationId: string;
982
1010
  email: string;
983
1011
  role: "member" | "admin" | "owner";
984
- status: better_auth_plugins0.InvitationStatus;
1012
+ status: better_auth_plugins20.InvitationStatus;
985
1013
  inviterId: string;
986
1014
  expiresAt: Date;
987
1015
  createdAt: Date;
@@ -1020,7 +1048,7 @@ declare function createAuth(config: BetterAuthConfig): better_auth0.Auth<{
1020
1048
  organizationId: string;
1021
1049
  email: string;
1022
1050
  role: "member" | "admin" | "owner";
1023
- status: better_auth_plugins0.InvitationStatus;
1051
+ status: better_auth_plugins20.InvitationStatus;
1024
1052
  inviterId: string;
1025
1053
  expiresAt: Date;
1026
1054
  createdAt: Date;
@@ -1094,28 +1122,28 @@ declare function createAuth(config: BetterAuthConfig): better_auth0.Auth<{
1094
1122
  };
1095
1123
  options: NoInfer<{
1096
1124
  allowUserToCreateOrganization: true;
1097
- ac: better_auth_plugins0.AccessControl;
1125
+ ac: better_auth_plugins20.AccessControl;
1098
1126
  roles: {
1099
1127
  member: {
1100
- authorize<K_1 extends "function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team", better_auth_plugins0.Statements>[key] | {
1101
- actions: better_auth_plugins0.Subset<"function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team", better_auth_plugins0.Statements>[key];
1128
+ authorize<K_1 extends "function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins20.Subset<"function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac", better_auth_plugins20.Statements>[key] | {
1129
+ actions: better_auth_plugins20.Subset<"function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac", better_auth_plugins20.Statements>[key];
1102
1130
  connector: "OR" | "AND";
1103
- } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
1104
- statements: better_auth_plugins0.Subset<"function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team", better_auth_plugins0.Statements>;
1131
+ } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins20.AuthorizeResponse;
1132
+ statements: better_auth_plugins20.Subset<"function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac", better_auth_plugins20.Statements>;
1105
1133
  };
1106
1134
  admin: {
1107
- authorize<K_1 extends "function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team", better_auth_plugins0.Statements>[key] | {
1108
- actions: better_auth_plugins0.Subset<"function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team", better_auth_plugins0.Statements>[key];
1135
+ authorize<K_1 extends "function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins20.Subset<"function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac", better_auth_plugins20.Statements>[key] | {
1136
+ actions: better_auth_plugins20.Subset<"function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac", better_auth_plugins20.Statements>[key];
1109
1137
  connector: "OR" | "AND";
1110
- } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
1111
- statements: better_auth_plugins0.Subset<"function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team", better_auth_plugins0.Statements>;
1138
+ } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins20.AuthorizeResponse;
1139
+ statements: better_auth_plugins20.Subset<"function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac", better_auth_plugins20.Statements>;
1112
1140
  };
1113
1141
  owner: {
1114
- authorize<K_1 extends "function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team", better_auth_plugins0.Statements>[key] | {
1115
- actions: better_auth_plugins0.Subset<"function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team", better_auth_plugins0.Statements>[key];
1142
+ authorize<K_1 extends "function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins20.Subset<"function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac", better_auth_plugins20.Statements>[key] | {
1143
+ actions: better_auth_plugins20.Subset<"function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac", better_auth_plugins20.Statements>[key];
1116
1144
  connector: "OR" | "AND";
1117
- } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
1118
- statements: better_auth_plugins0.Subset<"function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team", better_auth_plugins0.Statements>;
1145
+ } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins20.AuthorizeResponse;
1146
+ statements: better_auth_plugins20.Subset<"function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac", better_auth_plugins20.Statements>;
1119
1147
  };
1120
1148
  };
1121
1149
  membershipLimit: number;
@@ -1125,9 +1153,9 @@ declare function createAuth(config: BetterAuthConfig): better_auth0.Auth<{
1125
1153
  id: string;
1126
1154
  role: string;
1127
1155
  email: string;
1128
- organization: better_auth_plugins0.Organization;
1129
- invitation: better_auth_plugins0.Invitation;
1130
- inviter: better_auth_plugins0.Member & {
1156
+ organization: better_auth_plugins20.Organization;
1157
+ invitation: better_auth_plugins20.Invitation;
1158
+ inviter: better_auth_plugins20.Member & {
1131
1159
  user: better_auth0.User;
1132
1160
  };
1133
1161
  }): Promise<void>;
@@ -1465,8 +1493,8 @@ declare function createAuth(config: BetterAuthConfig): better_auth0.Auth<{
1465
1493
  readonly AUTHENTICATION_REQUIRED: "Authentication required";
1466
1494
  };
1467
1495
  options: Partial<{
1468
- expiresIn: better_auth_plugins0.TimeString;
1469
- interval: better_auth_plugins0.TimeString;
1496
+ expiresIn: better_auth_plugins20.TimeString;
1497
+ interval: better_auth_plugins20.TimeString;
1470
1498
  deviceCodeLength: number;
1471
1499
  userCodeLength: number;
1472
1500
  schema: {
package/dist/auth/auth.js CHANGED
@@ -1,4 +1,4 @@
1
- import { ssoProvider } from "./auth-schema.js";
1
+ import { member, ssoProvider } from "./auth-schema.js";
2
2
  import { env } from "../env.js";
3
3
  import { generateId } from "../utils/conversations.js";
4
4
  import "../utils/index.js";
@@ -11,6 +11,15 @@ import { bearer, deviceAuthorization, oAuthProxy, organization } from "better-au
11
11
 
12
12
  //#region src/auth/auth.ts
13
13
  /**
14
+ * Get the user's initial organization for a new session.
15
+ * Returns the oldest organization the user is a member of.
16
+ * See: https://www.better-auth.com/docs/plugins/organization#active-organization
17
+ */
18
+ async function getInitialOrganization(dbClient, userId) {
19
+ const [membership] = await dbClient.select({ organizationId: member.organizationId }).from(member).where(eq(member.userId, userId)).orderBy(member.createdAt).limit(1);
20
+ return membership ? { id: membership.organizationId } : null;
21
+ }
22
+ /**
14
23
  * Extracts the root domain from a URL for cross-subdomain cookie sharing.
15
24
  * For example:
16
25
  * - https://manage-api.pilot.inkeep.com -> .pilot.inkeep.com
@@ -67,6 +76,13 @@ function createAuth(config) {
67
76
  requireEmailVerification: false,
68
77
  autoSignIn: true
69
78
  },
79
+ databaseHooks: { session: { create: { before: async (session) => {
80
+ const organization$1 = await getInitialOrganization(config.dbClient, session.userId);
81
+ return { data: {
82
+ ...session,
83
+ activeOrganizationId: organization$1?.id ?? null
84
+ } };
85
+ } } } },
70
86
  socialProviders: config.socialProviders?.google && { google: {
71
87
  ...config.socialProviders.google,
72
88
  ...env.OAUTH_PROXY_PRODUCTION_URL && { redirectURI: `${env.OAUTH_PROXY_PRODUCTION_URL}/api/auth/callback/google` }
package/dist/auth/permissions.d.ts CHANGED
@@ -1,29 +1,29 @@
1
- import * as better_auth_plugins55 from "better-auth/plugins";
1
+ import * as better_auth_plugins0 from "better-auth/plugins";
2
2
  import { AccessControl } from "better-auth/plugins/access";
3
3
  import { organizationClient } from "better-auth/client/plugins";
4
4
 
5
5
  //#region src/auth/permissions.d.ts
6
6
  declare const ac: AccessControl;
7
7
  declare const memberRole: {
8
- authorize<K_1 extends "function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins55.Subset<"function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team", better_auth_plugins55.Statements>[key] | {
9
- actions: better_auth_plugins55.Subset<"function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team", better_auth_plugins55.Statements>[key];
8
+ authorize<K_1 extends "function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac", better_auth_plugins0.Statements>[key] | {
9
+ actions: better_auth_plugins0.Subset<"function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac", better_auth_plugins0.Statements>[key];
10
10
  connector: "OR" | "AND";
11
- } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins55.AuthorizeResponse;
12
- statements: better_auth_plugins55.Subset<"function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team", better_auth_plugins55.Statements>;
11
+ } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
12
+ statements: better_auth_plugins0.Subset<"function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac", better_auth_plugins0.Statements>;
13
13
  };
14
14
  declare const adminRole: {
15
- authorize<K_1 extends "function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins55.Subset<"function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team", better_auth_plugins55.Statements>[key] | {
16
- actions: better_auth_plugins55.Subset<"function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team", better_auth_plugins55.Statements>[key];
15
+ authorize<K_1 extends "function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac", better_auth_plugins0.Statements>[key] | {
16
+ actions: better_auth_plugins0.Subset<"function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac", better_auth_plugins0.Statements>[key];
17
17
  connector: "OR" | "AND";
18
- } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins55.AuthorizeResponse;
19
- statements: better_auth_plugins55.Subset<"function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team", better_auth_plugins55.Statements>;
18
+ } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
19
+ statements: better_auth_plugins0.Subset<"function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac", better_auth_plugins0.Statements>;
20
20
  };
21
21
  declare const ownerRole: {
22
- authorize<K_1 extends "function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins55.Subset<"function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team", better_auth_plugins55.Statements>[key] | {
23
- actions: better_auth_plugins55.Subset<"function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team", better_auth_plugins55.Statements>[key];
22
+ authorize<K_1 extends "function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac", better_auth_plugins0.Statements>[key] | {
23
+ actions: better_auth_plugins0.Subset<"function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac", better_auth_plugins0.Statements>[key];
24
24
  connector: "OR" | "AND";
25
- } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins55.AuthorizeResponse;
26
- statements: better_auth_plugins55.Subset<"function" | "organization" | "member" | "invitation" | "ac" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team", better_auth_plugins55.Statements>;
25
+ } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
26
+ statements: better_auth_plugins0.Subset<"function" | "organization" | "agent" | "invitation" | "member" | "project" | "tool" | "sub_agent" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "team" | "ac", better_auth_plugins0.Statements>;
27
27
  };
28
28
  //#endregion
29
29
  export { ac, adminRole, memberRole, organizationClient, ownerRole };
package/dist/data-access/agents.d.ts CHANGED
@@ -8,15 +8,14 @@ import { PgTable } from "drizzle-orm/pg-core";
8
8
  declare const getAgentById: (db: DatabaseClient) => (params: {
9
9
  scopes: AgentScopeConfig;
10
10
  }) => Promise<{
11
+ tenantId: string;
12
+ projectId: string;
11
13
  id: string;
12
14
  name: string;
15
+ description: string | null;
16
+ prompt: string | null;
13
17
  createdAt: string;
14
18
  updatedAt: string;
15
- description: string | null;
16
- projectId: string;
17
- tenantId: string;
18
- defaultSubAgentId: string | null;
19
- contextConfigId: string | null;
20
19
  models: {
21
20
  base?: {
22
21
  model?: string | undefined;
@@ -31,7 +30,11 @@ declare const getAgentById: (db: DatabaseClient) => (params: {
31
30
  providerOptions?: Record<string, any> | undefined;
32
31
  } | undefined;
33
32
  } | null;
34
- prompt: string | null;
33
+ stopWhen: {
34
+ transferCountIs?: number | undefined;
35
+ } | null;
36
+ defaultSubAgentId: string | null;
37
+ contextConfigId: string | null;
35
38
  statusUpdates: {
36
39
  enabled?: boolean | undefined;
37
40
  numEvents?: number | undefined;
@@ -47,22 +50,18 @@ declare const getAgentById: (db: DatabaseClient) => (params: {
47
50
  } | undefined;
48
51
  }[] | undefined;
49
52
  } | null;
50
- stopWhen: {
51
- transferCountIs?: number | undefined;
52
- } | null;
53
53
  } | null>;
54
54
  declare const getAgentWithDefaultSubAgent: (db: DatabaseClient) => (params: {
55
55
  scopes: AgentScopeConfig;
56
56
  }) => Promise<{
57
+ tenantId: string;
58
+ projectId: string;
57
59
  id: string;
58
60
  name: string;
61
+ description: string | null;
62
+ prompt: string | null;
59
63
  createdAt: string;
60
64
  updatedAt: string;
61
- description: string | null;
62
- projectId: string;
63
- tenantId: string;
64
- defaultSubAgentId: string | null;
65
- contextConfigId: string | null;
66
65
  models: {
67
66
  base?: {
68
67
  model?: string | undefined;
@@ -77,7 +76,11 @@ declare const getAgentWithDefaultSubAgent: (db: DatabaseClient) => (params: {
77
76
  providerOptions?: Record<string, any> | undefined;
78
77
  } | undefined;
79
78
  } | null;
80
- prompt: string | null;
79
+ stopWhen: {
80
+ transferCountIs?: number | undefined;
81
+ } | null;
82
+ defaultSubAgentId: string | null;
83
+ contextConfigId: string | null;
81
84
  statusUpdates: {
82
85
  enabled?: boolean | undefined;
83
86
  numEvents?: number | undefined;
@@ -93,18 +96,16 @@ declare const getAgentWithDefaultSubAgent: (db: DatabaseClient) => (params: {
93
96
  } | undefined;
94
97
  }[] | undefined;
95
98
  } | null;
96
- stopWhen: {
97
- transferCountIs?: number | undefined;
98
- } | null;
99
99
  defaultSubAgent: {
100
+ tenantId: string;
101
+ projectId: string;
100
102
  id: string;
101
103
  name: string;
102
- createdAt: string;
103
- updatedAt: string;
104
104
  description: string | null;
105
+ prompt: string | null;
105
106
  agentId: string;
106
- projectId: string;
107
- tenantId: string;
107
+ createdAt: string;
108
+ updatedAt: string;
108
109
  models: {
109
110
  base?: {
110
111
  model?: string | undefined;
@@ -119,7 +120,6 @@ declare const getAgentWithDefaultSubAgent: (db: DatabaseClient) => (params: {
119
120
  providerOptions?: Record<string, any> | undefined;
120
121
  } | undefined;
121
122
  } | null;
122
- prompt: string | null;
123
123
  stopWhen: {
124
124
  stepCountIs?: number | undefined;
125
125
  } | null;
@@ -129,15 +129,14 @@ declare const getAgentWithDefaultSubAgent: (db: DatabaseClient) => (params: {
129
129
  declare const listAgents: (db: DatabaseClient) => (params: {
130
130
  scopes: ProjectScopeConfig;
131
131
  }) => Promise<{
132
+ tenantId: string;
133
+ projectId: string;
132
134
  id: string;
133
135
  name: string;
136
+ description: string | null;
137
+ prompt: string | null;
134
138
  createdAt: string;
135
139
  updatedAt: string;
136
- description: string | null;
137
- projectId: string;
138
- tenantId: string;
139
- defaultSubAgentId: string | null;
140
- contextConfigId: string | null;
141
140
  models: {
142
141
  base?: {
143
142
  model?: string | undefined;
@@ -152,7 +151,11 @@ declare const listAgents: (db: DatabaseClient) => (params: {
152
151
  providerOptions?: Record<string, any> | undefined;
153
152
  } | undefined;
154
153
  } | null;
155
- prompt: string | null;
154
+ stopWhen: {
155
+ transferCountIs?: number | undefined;
156
+ } | null;
157
+ defaultSubAgentId: string | null;
158
+ contextConfigId: string | null;
156
159
  statusUpdates: {
157
160
  enabled?: boolean | undefined;
158
161
  numEvents?: number | undefined;
@@ -168,9 +171,6 @@ declare const listAgents: (db: DatabaseClient) => (params: {
168
171
  } | undefined;
169
172
  }[] | undefined;
170
173
  } | null;
171
- stopWhen: {
172
- transferCountIs?: number | undefined;
173
- } | null;
174
174
  }[]>;
175
175
  declare const listAgentsPaginated: (db: DatabaseClient) => (params: {
176
176
  scopes: ProjectScopeConfig;
@@ -228,15 +228,14 @@ declare const listAgentsPaginated: (db: DatabaseClient) => (params: {
228
228
  };
229
229
  }>;
230
230
  declare const createAgent: (db: DatabaseClient) => (data: AgentInsert) => Promise<{
231
+ tenantId: string;
232
+ projectId: string;
231
233
  id: string;
232
234
  name: string;
235
+ description: string | null;
236
+ prompt: string | null;
233
237
  createdAt: string;
234
238
  updatedAt: string;
235
- description: string | null;
236
- projectId: string;
237
- tenantId: string;
238
- defaultSubAgentId: string | null;
239
- contextConfigId: string | null;
240
239
  models: {
241
240
  base?: {
242
241
  model?: string | undefined;
@@ -251,7 +250,11 @@ declare const createAgent: (db: DatabaseClient) => (data: AgentInsert) => Promis
251
250
  providerOptions?: Record<string, any> | undefined;
252
251
  } | undefined;
253
252
  } | null;
254
- prompt: string | null;
253
+ stopWhen: {
254
+ transferCountIs?: number | undefined;
255
+ } | null;
256
+ defaultSubAgentId: string | null;
257
+ contextConfigId: string | null;
255
258
  statusUpdates: {
256
259
  enabled?: boolean | undefined;
257
260
  numEvents?: number | undefined;
@@ -267,9 +270,6 @@ declare const createAgent: (db: DatabaseClient) => (data: AgentInsert) => Promis
267
270
  } | undefined;
268
271
  }[] | undefined;
269
272
  } | null;
270
- stopWhen: {
271
- transferCountIs?: number | undefined;
272
- } | null;
273
273
  }>;
274
274
  declare const updateAgent: (db: DatabaseClient) => (params: {
275
275
  scopes: AgentScopeConfig;
package/dist/data-access/apiKeys.d.ts CHANGED
@@ -7,49 +7,49 @@ declare const getApiKeyById: (db: DatabaseClient) => (params: {
7
7
  scopes: ProjectScopeConfig;
8
8
  id: string;
9
9
  }) => Promise<{
10
+ tenantId: string;
11
+ projectId: string;
10
12
  id: string;
11
13
  name: string | null;
12
- createdAt: string;
13
- updatedAt: string;
14
- expiresAt: string | null;
15
14
  agentId: string;
16
- projectId: string;
17
- tenantId: string;
18
15
  publicId: string;
19
16
  keyHash: string;
20
17
  keyPrefix: string;
21
18
  lastUsedAt: string | null;
19
+ expiresAt: string | null;
20
+ createdAt: string;
21
+ updatedAt: string;
22
22
  } | undefined>;
23
23
  declare const getApiKeyByPublicId: (db: DatabaseClient) => (publicId: string) => Promise<{
24
+ tenantId: string;
25
+ projectId: string;
24
26
  id: string;
25
27
  name: string | null;
26
- createdAt: string;
27
- updatedAt: string;
28
- expiresAt: string | null;
29
28
  agentId: string;
30
- projectId: string;
31
- tenantId: string;
32
29
  publicId: string;
33
30
  keyHash: string;
34
31
  keyPrefix: string;
35
32
  lastUsedAt: string | null;
33
+ expiresAt: string | null;
34
+ createdAt: string;
35
+ updatedAt: string;
36
36
  } | undefined>;
37
37
  declare const listApiKeys: (db: DatabaseClient) => (params: {
38
38
  scopes: ProjectScopeConfig;
39
39
  agentId?: string;
40
40
  }) => Promise<{
41
+ tenantId: string;
42
+ projectId: string;
41
43
  id: string;
42
44
  name: string | null;
43
- createdAt: string;
44
- updatedAt: string;
45
- expiresAt: string | null;
46
45
  agentId: string;
47
- projectId: string;
48
- tenantId: string;
49
46
  publicId: string;
50
47
  keyHash: string;
51
48
  keyPrefix: string;
52
49
  lastUsedAt: string | null;
50
+ expiresAt: string | null;
51
+ createdAt: string;
52
+ updatedAt: string;
53
53
  }[]>;
54
54
  declare const listApiKeysPaginated: (db: DatabaseClient) => (params: {
55
55
  scopes: ProjectScopeConfig;
@@ -65,18 +65,18 @@ declare const listApiKeysPaginated: (db: DatabaseClient) => (params: {
65
65
  };
66
66
  }>;
67
67
  declare const createApiKey: (db: DatabaseClient) => (params: ApiKeyInsert) => Promise<{
68
+ tenantId: string;
69
+ projectId: string;
68
70
  id: string;
69
71
  name: string | null;
70
- createdAt: string;
71
- updatedAt: string;
72
- expiresAt: string | null;
73
72
  agentId: string;
74
- projectId: string;
75
- tenantId: string;
76
73
  publicId: string;
77
74
  keyHash: string;
78
75
  keyPrefix: string;
79
76
  lastUsedAt: string | null;
77
+ expiresAt: string | null;
78
+ createdAt: string;
79
+ updatedAt: string;
80
80
  }>;
81
81
  declare const updateApiKey: (db: DatabaseClient) => (params: {
82
82
  scopes: ProjectScopeConfig;