@inkeep/agents-core 0.0.0-dev-20260123202200 → 0.0.0-dev-20260123205017

package/dist/auth/auth.d.ts

@@ -852,25 +852,25 @@ declare function createAuth(config: BetterAuthConfig): better_auth0.Auth<{
       ac: better_auth_plugins20.AccessControl;
       roles: {
         member: {
-          authorize<K_1 extends "project" | "organization" | "team" | "member" | "ac" | "invitation">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>[key] | {
-            actions: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>[key];
+          authorize<K_1 extends "organization" | "member" | "invitation" | "project" | "team" | "ac">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins20.Subset<"organization" | "member" | "invitation" | "project" | "team" | "ac", better_auth_plugins20.Statements>[key] | {
+            actions: better_auth_plugins20.Subset<"organization" | "member" | "invitation" | "project" | "team" | "ac", better_auth_plugins20.Statements>[key];
             connector: "OR" | "AND";
           } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins20.AuthorizeResponse;
-          statements: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>;
+          statements: better_auth_plugins20.Subset<"organization" | "member" | "invitation" | "project" | "team" | "ac", better_auth_plugins20.Statements>;
         };
         admin: {
-          authorize<K_1 extends "project" | "organization" | "team" | "member" | "ac" | "invitation">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>[key] | {
-            actions: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>[key];
+          authorize<K_1 extends "organization" | "member" | "invitation" | "project" | "team" | "ac">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins20.Subset<"organization" | "member" | "invitation" | "project" | "team" | "ac", better_auth_plugins20.Statements>[key] | {
+            actions: better_auth_plugins20.Subset<"organization" | "member" | "invitation" | "project" | "team" | "ac", better_auth_plugins20.Statements>[key];
             connector: "OR" | "AND";
           } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins20.AuthorizeResponse;
-          statements: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>;
+          statements: better_auth_plugins20.Subset<"organization" | "member" | "invitation" | "project" | "team" | "ac", better_auth_plugins20.Statements>;
         };
         owner: {
-          authorize<K_1 extends "project" | "organization" | "team" | "member" | "ac" | "invitation">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>[key] | {
-            actions: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>[key];
+          authorize<K_1 extends "organization" | "member" | "invitation" | "project" | "team" | "ac">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins20.Subset<"organization" | "member" | "invitation" | "project" | "team" | "ac", better_auth_plugins20.Statements>[key] | {
+            actions: better_auth_plugins20.Subset<"organization" | "member" | "invitation" | "project" | "team" | "ac", better_auth_plugins20.Statements>[key];
             connector: "OR" | "AND";
           } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins20.AuthorizeResponse;
-          statements: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>;
+          statements: better_auth_plugins20.Subset<"organization" | "member" | "invitation" | "project" | "team" | "ac", better_auth_plugins20.Statements>;
         };
       };
       membershipLimit: number;
@@ -1161,25 +1161,25 @@ declare function createAuth(config: BetterAuthConfig): better_auth0.Auth<{
       ac: better_auth_plugins20.AccessControl;
       roles: {
         member: {
-          authorize<K_1 extends "project" | "organization" | "team" | "member" | "ac" | "invitation">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>[key] | {
-            actions: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>[key];
+          authorize<K_1 extends "organization" | "member" | "invitation" | "project" | "team" | "ac">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins20.Subset<"organization" | "member" | "invitation" | "project" | "team" | "ac", better_auth_plugins20.Statements>[key] | {
+            actions: better_auth_plugins20.Subset<"organization" | "member" | "invitation" | "project" | "team" | "ac", better_auth_plugins20.Statements>[key];
             connector: "OR" | "AND";
           } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins20.AuthorizeResponse;
-          statements: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>;
+          statements: better_auth_plugins20.Subset<"organization" | "member" | "invitation" | "project" | "team" | "ac", better_auth_plugins20.Statements>;
         };
         admin: {
-          authorize<K_1 extends "project" | "organization" | "team" | "member" | "ac" | "invitation">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>[key] | {
-            actions: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>[key];
+          authorize<K_1 extends "organization" | "member" | "invitation" | "project" | "team" | "ac">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins20.Subset<"organization" | "member" | "invitation" | "project" | "team" | "ac", better_auth_plugins20.Statements>[key] | {
+            actions: better_auth_plugins20.Subset<"organization" | "member" | "invitation" | "project" | "team" | "ac", better_auth_plugins20.Statements>[key];
             connector: "OR" | "AND";
           } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins20.AuthorizeResponse;
-          statements: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>;
+          statements: better_auth_plugins20.Subset<"organization" | "member" | "invitation" | "project" | "team" | "ac", better_auth_plugins20.Statements>;
         };
         owner: {
-          authorize<K_1 extends "project" | "organization" | "team" | "member" | "ac" | "invitation">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>[key] | {
-            actions: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>[key];
+          authorize<K_1 extends "organization" | "member" | "invitation" | "project" | "team" | "ac">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins20.Subset<"organization" | "member" | "invitation" | "project" | "team" | "ac", better_auth_plugins20.Statements>[key] | {
+            actions: better_auth_plugins20.Subset<"organization" | "member" | "invitation" | "project" | "team" | "ac", better_auth_plugins20.Statements>[key];
             connector: "OR" | "AND";
           } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins20.AuthorizeResponse;
-          statements: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>;
+          statements: better_auth_plugins20.Subset<"organization" | "member" | "invitation" | "project" | "team" | "ac", better_auth_plugins20.Statements>;
         };
       };
       membershipLimit: number;

package/dist/auth/permissions.d.ts

@@ -5,25 +5,25 @@ import { organizationClient } from "better-auth/client/plugins";
 //#region src/auth/permissions.d.ts
 declare const ac: AccessControl;
 declare const memberRole: {
-  authorize<K_1 extends "project" | "organization" | "team" | "member" | "ac" | "invitation">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>[key] | {
-    actions: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>[key];
+  authorize<K_1 extends "organization" | "member" | "invitation" | "project" | "team" | "ac">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "project" | "team" | "ac", better_auth_plugins0.Statements>[key] | {
+    actions: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "project" | "team" | "ac", better_auth_plugins0.Statements>[key];
     connector: "OR" | "AND";
   } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
-  statements: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>;
+  statements: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "project" | "team" | "ac", better_auth_plugins0.Statements>;
 };
 declare const adminRole: {
-  authorize<K_1 extends "project" | "organization" | "team" | "member" | "ac" | "invitation">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>[key] | {
-    actions: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>[key];
+  authorize<K_1 extends "organization" | "member" | "invitation" | "project" | "team" | "ac">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "project" | "team" | "ac", better_auth_plugins0.Statements>[key] | {
+    actions: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "project" | "team" | "ac", better_auth_plugins0.Statements>[key];
     connector: "OR" | "AND";
   } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
-  statements: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>;
+  statements: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "project" | "team" | "ac", better_auth_plugins0.Statements>;
 };
 declare const ownerRole: {
-  authorize<K_1 extends "project" | "organization" | "team" | "member" | "ac" | "invitation">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>[key] | {
-    actions: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>[key];
+  authorize<K_1 extends "organization" | "member" | "invitation" | "project" | "team" | "ac">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "project" | "team" | "ac", better_auth_plugins0.Statements>[key] | {
+    actions: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "project" | "team" | "ac", better_auth_plugins0.Statements>[key];
     connector: "OR" | "AND";
   } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
-  statements: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>;
+  statements: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "project" | "team" | "ac", better_auth_plugins0.Statements>;
 };
 //#endregion
 export { ac, adminRole, memberRole, organizationClient, ownerRole };

package/dist/client-exports.d.ts

@@ -6,6 +6,7 @@ import "./types/index.js";
 import { DEFAULT_NANGO_STORE_ID } from "./credential-stores/default-constants.js";
 import { detectAuthenticationRequired } from "./utils/auth-detection.js";
 import { validatePropsAsJsonSchema } from "./validation/props-validation.js";
+import "./index.js";
 import { AgentStopWhen, AgentStopWhenSchema, ApiKeyApiUpdateSchema, FullAgentAgentInsertSchema, FunctionApiInsertSchema, FunctionApiSelectSchema, FunctionApiUpdateSchema, ModelSettings, ModelSettingsSchema, SignatureSource, SignatureVerificationConfig, SignatureVerificationConfigSchema, SignedComponent, StopWhen, StopWhenSchema, SubAgentStopWhen, SubAgentStopWhenSchema, TriggerApiInsertSchema, TriggerApiSelectSchema, TriggerApiUpdateSchema, TriggerInvocationApiSelectSchema, TriggerInvocationListResponse, TriggerInvocationResponse, TriggerInvocationStatusEnum, TriggerListResponse, TriggerResponse, TriggerWithWebhookUrlListResponse, TriggerWithWebhookUrlResponse, TriggerWithWebhookUrlSchema } from "./validation/schemas.js";
 import { z } from "@hono/zod-openapi";
 
@@ -64,8 +65,8 @@ declare const AgentApiInsertSchema: z.ZodObject<{
   canTransferTo: z.ZodOptional<z.ZodArray<z.ZodString>>;
   canDelegateTo: z.ZodOptional<z.ZodArray<z.ZodString>>;
   type: z.ZodOptional<z.ZodEnum<{
-    external: "external";
     internal: "internal";
+    external: "external";
   }>>;
 }, z.core.$strip>;
 declare const ToolApiInsertSchema: z.ZodObject<{
@@ -192,9 +193,9 @@ declare const FullAgentDefinitionSchema: z.ZodObject<{
   subAgents: z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodObject<{
     id: z.ZodString;
     name: z.ZodString;
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     createdAt: z.ZodOptional<z.ZodString>;
     updatedAt: z.ZodOptional<z.ZodString>;
-    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     models: z.ZodOptional<z.ZodObject<{
       base: z.ZodOptional<z.ZodObject<{
         model: z.ZodOptional<z.ZodString>;

package/dist/data-access/manage/agentFull.js

@@ -345,6 +345,7 @@ const createFullAgentServerSide = (db, logger = defaultLogger) => async (scopes,
 						},
 						subAgentId,
 						functionToolId: toolId,
+						toolPolicies,
 						relationId: agentToolRelationId
 					});
 					logger.info({
@@ -1092,6 +1093,7 @@ const updateFullAgentServerSide = (db, logger = defaultLogger) => async (scopes,
 						},
 						subAgentId,
 						functionToolId: toolId,
+						toolPolicies,
 						relationId: agentToolRelationId
 					});
 					logger.info({

package/dist/data-access/manage/agents.d.ts

@@ -8,15 +8,17 @@ import { PgTable } from "drizzle-orm/pg-core";
 declare const getAgentById: (db: AgentsManageDatabaseClient) => (params: {
   scopes: AgentScopeConfig;
 }) => Promise<{
-  id: string;
   name: string;
+  description: string | null;
+  id: string;
   createdAt: string;
   updatedAt: string;
-  description: string | null;
-  projectId: string;
   tenantId: string;
-  defaultSubAgentId: string | null;
-  contextConfigId: string | null;
+  projectId: string;
+  stopWhen: {
+    transferCountIs?: number | undefined;
+  } | null;
+  prompt: string | null;
   models: {
     base?: {
       model?: string | undefined;
@@ -31,7 +33,8 @@ declare const getAgentById: (db: AgentsManageDatabaseClient) => (params: {
       providerOptions?: Record<string, any> | undefined;
     } | undefined;
   } | null;
-  prompt: string | null;
+  defaultSubAgentId: string | null;
+  contextConfigId: string | null;
   statusUpdates: {
     enabled?: boolean | undefined;
     numEvents?: number | undefined;
@@ -47,22 +50,21 @@ declare const getAgentById: (db: AgentsManageDatabaseClient) => (params: {
       } | undefined;
     }[] | undefined;
   } | null;
-  stopWhen: {
-    transferCountIs?: number | undefined;
-  } | null;
 } | null>;
 declare const getAgentWithDefaultSubAgent: (db: AgentsManageDatabaseClient) => (params: {
   scopes: AgentScopeConfig;
 }) => Promise<{
-  id: string;
   name: string;
+  description: string | null;
+  id: string;
   createdAt: string;
   updatedAt: string;
-  description: string | null;
-  projectId: string;
   tenantId: string;
-  defaultSubAgentId: string | null;
-  contextConfigId: string | null;
+  projectId: string;
+  stopWhen: {
+    transferCountIs?: number | undefined;
+  } | null;
+  prompt: string | null;
   models: {
     base?: {
       model?: string | undefined;
@@ -77,7 +79,8 @@ declare const getAgentWithDefaultSubAgent: (db: AgentsManageDatabaseClient) => (
       providerOptions?: Record<string, any> | undefined;
     } | undefined;
   } | null;
-  prompt: string | null;
+  defaultSubAgentId: string | null;
+  contextConfigId: string | null;
   statusUpdates: {
     enabled?: boolean | undefined;
     numEvents?: number | undefined;
@@ -93,18 +96,19 @@ declare const getAgentWithDefaultSubAgent: (db: AgentsManageDatabaseClient) => (
       } | undefined;
     }[] | undefined;
   } | null;
-  stopWhen: {
-    transferCountIs?: number | undefined;
-  } | null;
   defaultSubAgent: {
-    id: string;
     name: string;
+    description: string | null;
+    id: string;
     createdAt: string;
     updatedAt: string;
-    description: string | null;
-    agentId: string;
-    projectId: string;
     tenantId: string;
+    projectId: string;
+    stopWhen: {
+      stepCountIs?: number | undefined;
+    } | null;
+    prompt: string | null;
+    conversationHistoryConfig: ConversationHistoryConfig | null;
     models: {
       base?: {
         model?: string | undefined;
@@ -119,25 +123,23 @@ declare const getAgentWithDefaultSubAgent: (db: AgentsManageDatabaseClient) => (
         providerOptions?: Record<string, any> | undefined;
       } | undefined;
     } | null;
-    prompt: string | null;
-    stopWhen: {
-      stepCountIs?: number | undefined;
-    } | null;
-    conversationHistoryConfig: ConversationHistoryConfig | null;
+    agentId: string;
   } | null;
 } | null>;
 declare const listAgents: (db: AgentsManageDatabaseClient) => (params: {
   scopes: ProjectScopeConfig;
 }) => Promise<{
-  id: string;
   name: string;
+  description: string | null;
+  id: string;
   createdAt: string;
   updatedAt: string;
-  description: string | null;
-  projectId: string;
   tenantId: string;
-  defaultSubAgentId: string | null;
-  contextConfigId: string | null;
+  projectId: string;
+  stopWhen: {
+    transferCountIs?: number | undefined;
+  } | null;
+  prompt: string | null;
   models: {
     base?: {
       model?: string | undefined;
@@ -152,7 +154,8 @@ declare const listAgents: (db: AgentsManageDatabaseClient) => (params: {
       providerOptions?: Record<string, any> | undefined;
     } | undefined;
   } | null;
-  prompt: string | null;
+  defaultSubAgentId: string | null;
+  contextConfigId: string | null;
   statusUpdates: {
     enabled?: boolean | undefined;
     numEvents?: number | undefined;
@@ -168,9 +171,6 @@ declare const listAgents: (db: AgentsManageDatabaseClient) => (params: {
       } | undefined;
     }[] | undefined;
   } | null;
-  stopWhen: {
-    transferCountIs?: number | undefined;
-  } | null;
 }[]>;
 declare const listAgentsPaginated: (db: AgentsManageDatabaseClient) => (params: {
   scopes: ProjectScopeConfig;
@@ -228,15 +228,17 @@ declare const listAgentsPaginated: (db: AgentsManageDatabaseClient) => (params:
   };
 }>;
 declare const createAgent: (db: AgentsManageDatabaseClient) => (data: AgentInsert) => Promise<{
-  id: string;
   name: string;
+  description: string | null;
+  id: string;
   createdAt: string;
   updatedAt: string;
-  description: string | null;
-  projectId: string;
   tenantId: string;
-  defaultSubAgentId: string | null;
-  contextConfigId: string | null;
+  projectId: string;
+  stopWhen: {
+    transferCountIs?: number | undefined;
+  } | null;
+  prompt: string | null;
   models: {
     base?: {
       model?: string | undefined;
@@ -251,7 +253,8 @@ declare const createAgent: (db: AgentsManageDatabaseClient) => (data: AgentInser
       providerOptions?: Record<string, any> | undefined;
     } | undefined;
   } | null;
-  prompt: string | null;
+  defaultSubAgentId: string | null;
+  contextConfigId: string | null;
   statusUpdates: {
     enabled?: boolean | undefined;
     numEvents?: number | undefined;
@@ -267,9 +270,6 @@ declare const createAgent: (db: AgentsManageDatabaseClient) => (data: AgentInser
       } | undefined;
     }[] | undefined;
   } | null;
-  stopWhen: {
-    transferCountIs?: number | undefined;
-  } | null;
 }>;
 declare const updateAgent: (db: AgentsManageDatabaseClient) => (params: {
   scopes: AgentScopeConfig;

package/dist/data-access/manage/agents.js

@@ -198,7 +198,8 @@ const getFullAgentDefinitionInternal = (db) => async ({ scopes: { tenantId, proj
 			tenantId: functionTools.tenantId,
 			projectId: functionTools.projectId,
 			agentId: functionTools.agentId,
-			agentToolRelationId: subAgentFunctionToolRelations.id
+			agentToolRelationId: subAgentFunctionToolRelations.id,
+			toolPolicies: subAgentFunctionToolRelations.toolPolicies
 		}).from(subAgentFunctionToolRelations).innerJoin(functionTools, and(eq(subAgentFunctionToolRelations.functionToolId, functionTools.id), eq(subAgentFunctionToolRelations.tenantId, functionTools.tenantId), eq(subAgentFunctionToolRelations.projectId, functionTools.projectId), eq(subAgentFunctionToolRelations.agentId, functionTools.agentId))).where(and(eq(subAgentFunctionToolRelations.tenantId, tenantId), eq(subAgentFunctionToolRelations.projectId, projectId), eq(subAgentFunctionToolRelations.agentId, agentId), eq(subAgentFunctionToolRelations.subAgentId, agent$1.id)));
 		const agentDataComponentIds = (await db.query.subAgentDataComponents.findMany({ where: and(eq(subAgentDataComponents.tenantId, tenantId), eq(subAgentDataComponents.subAgentId, agent$1.id)) })).map((rel) => rel.dataComponentId);
 		const agentArtifactComponentIds = (await db.query.subAgentArtifactComponents.findMany({ where: and(eq(subAgentArtifactComponents.tenantId, tenantId), eq(subAgentArtifactComponents.subAgentId, agent$1.id)) })).map((rel) => rel.artifactComponentId);
@@ -214,7 +215,7 @@ const getFullAgentDefinitionInternal = (db) => async ({ scopes: { tenantId, proj
 			toolId: tool.id,
 			toolSelection: null,
 			headers: null,
-			toolPolicies: null
+			toolPolicies: tool.toolPolicies || null
 		}));
 		const canUse = [...mcpToolCanUse, ...functionToolCanUse];
 		return {

package/dist/data-access/manage/artifactComponents.d.ts

@@ -7,13 +7,13 @@ declare const getArtifactComponentById: (db: AgentsManageDatabaseClient) => (par
   scopes: ProjectScopeConfig;
   id: string;
 }) => Promise<{
-  id: string;
   name: string;
+  description: string | null;
+  id: string;
   createdAt: string;
   updatedAt: string;
-  description: string | null;
-  projectId: string;
   tenantId: string;
+  projectId: string;
   props: Record<string, unknown> | null;
   render: {
     component: string;
@@ -49,13 +49,13 @@ declare const listArtifactComponentsPaginated: (db: AgentsManageDatabaseClient)
   };
 }>;
 declare const createArtifactComponent: (db: AgentsManageDatabaseClient) => (params: ArtifactComponentInsert) => Promise<{
-  id: string;
   name: string;
+  description: string | null;
+  id: string;
   createdAt: string;
   updatedAt: string;
-  description: string | null;
-  projectId: string;
   tenantId: string;
+  projectId: string;
   props: Record<string, unknown> | null;
   render: {
     component: string;
@@ -106,10 +106,10 @@ declare const associateArtifactComponentWithAgent: (db: AgentsManageDatabaseClie
 }) => Promise<{
   id: string;
   createdAt: string;
-  agentId: string;
-  projectId: string;
   tenantId: string;
+  projectId: string;
   subAgentId: string;
+  agentId: string;
   artifactComponentId: string;
 }>;
 declare const removeArtifactComponentFromAgent: (db: AgentsManageDatabaseClient) => (params: {
@@ -149,10 +149,10 @@ declare const upsertAgentArtifactComponentRelation: (db: AgentsManageDatabaseCli
 }) => Promise<{
   id: string;
   createdAt: string;
-  agentId: string;
-  projectId: string;
   tenantId: string;
+  projectId: string;
   subAgentId: string;
+  agentId: string;
   artifactComponentId: string;
 } | null>;
 /**

package/dist/data-access/manage/contextConfigs.d.ts

@@ -11,11 +11,11 @@ declare const getContextConfigById: (db: AgentsManageDatabaseClient) => (params:
   id: string;
   createdAt: string;
   updatedAt: string;
+  tenantId: string;
+  projectId: string;
+  agentId: string;
   headersSchema: unknown;
   contextVariables: Record<string, ContextFetchDefinition> | null;
-  agentId: string;
-  projectId: string;
-  tenantId: string;
 } | undefined>;
 declare const listContextConfigs: (db: AgentsManageDatabaseClient) => (params: {
   scopes: AgentScopeConfig;
@@ -23,11 +23,11 @@ declare const listContextConfigs: (db: AgentsManageDatabaseClient) => (params: {
   id: string;
   createdAt: string;
   updatedAt: string;
+  tenantId: string;
+  projectId: string;
+  agentId: string;
   headersSchema: unknown;
   contextVariables: Record<string, ContextFetchDefinition> | null;
-  agentId: string;
-  projectId: string;
-  tenantId: string;
 }[]>;
 declare const listContextConfigsPaginated: (db: AgentsManageDatabaseClient) => (params: {
   scopes: AgentScopeConfig;
@@ -45,11 +45,11 @@ declare const createContextConfig: (db: AgentsManageDatabaseClient) => (params:
   id: string;
   createdAt: string;
   updatedAt: string;
+  tenantId: string;
+  projectId: string;
+  agentId: string;
   headersSchema: unknown;
   contextVariables: Record<string, ContextFetchDefinition> | null;
-  agentId: string;
-  projectId: string;
-  tenantId: string;
 }>;
 declare const updateContextConfig: (db: AgentsManageDatabaseClient) => (params: {
   scopes: AgentScopeConfig;
@@ -85,11 +85,11 @@ declare const upsertContextConfig: (db: AgentsManageDatabaseClient) => (params:
   id: string;
   createdAt: string;
   updatedAt: string;
+  tenantId: string;
+  projectId: string;
+  agentId: string;
   headersSchema: unknown;
   contextVariables: Record<string, ContextFetchDefinition> | null;
-  agentId: string;
-  projectId: string;
-  tenantId: string;
 }>;
 //#endregion
 export { countContextConfigs, createContextConfig, deleteContextConfig, getContextConfigById, hasContextConfig, listContextConfigs, listContextConfigsPaginated, updateContextConfig, upsertContextConfig };

package/dist/data-access/manage/dataComponents.d.ts

@@ -66,10 +66,10 @@ declare const associateDataComponentWithAgent: (db: AgentsManageDatabaseClient)
 }) => Promise<{
   id: string;
   createdAt: string;
-  agentId: string;
-  projectId: string;
   tenantId: string;
+  projectId: string;
   subAgentId: string;
+  agentId: string;
   dataComponentId: string;
 }>;
 /**
@@ -108,10 +108,10 @@ declare const upsertAgentDataComponentRelation: (db: AgentsManageDatabaseClient)
 }) => Promise<{
   id: string;
   createdAt: string;
-  agentId: string;
-  projectId: string;
   tenantId: string;
+  projectId: string;
   subAgentId: string;
+  agentId: string;
   dataComponentId: string;
 } | null>;
 /**

package/dist/data-access/manage/functionTools.d.ts

@@ -53,14 +53,14 @@ declare const createFunctionTool: (db: AgentsManageDatabaseClient) => (params: {
   data: FunctionToolApiInsert;
   scopes: AgentScopeConfig;
 }) => Promise<{
-  id: string;
   name: string;
+  description: string | null;
+  id: string;
   createdAt: string;
   updatedAt: string;
-  description: string | null;
-  agentId: string;
-  projectId: string;
   tenantId: string;
+  projectId: string;
+  agentId: string;
   functionId: string;
 }>;
 /**
@@ -95,14 +95,14 @@ declare const upsertFunctionTool: (db: AgentsManageDatabaseClient) => (params: {
   data: FunctionToolApiInsert;
   scopes: AgentScopeConfig;
 }) => Promise<{
-  id: string;
   name: string;
+  description: string | null;
+  id: string;
   createdAt: string;
   updatedAt: string;
-  description: string | null;
-  agentId: string;
-  projectId: string;
   tenantId: string;
+  projectId: string;
+  agentId: string;
   functionId: string;
 }>;
 declare const getFunctionToolsForSubAgent: (db: AgentsManageDatabaseClient) => (params: {
@@ -125,6 +125,9 @@ declare const getFunctionToolsForSubAgent: (db: AgentsManageDatabaseClient) => (
     projectId: string;
     agentId: string;
     relationshipId: string;
+    toolPolicies: Record<string, {
+      needsApproval?: boolean;
+    }> | null;
   }[];
   pagination: {
     page: number;
@@ -140,6 +143,9 @@ declare const upsertSubAgentFunctionToolRelation: (db: AgentsManageDatabaseClien
   scopes: AgentScopeConfig;
   subAgentId: string;
   functionToolId: string;
+  toolPolicies?: Record<string, {
+    needsApproval?: boolean;
+  }> | null;
   relationId?: string;
 }) => Promise<{
   id: string;
@@ -151,15 +157,21 @@ declare const addFunctionToolToSubAgent: (db: AgentsManageDatabaseClient) => (pa
   scopes: AgentScopeConfig;
   subAgentId: string;
   functionToolId: string;
+  toolPolicies?: Record<string, {
+    needsApproval?: boolean;
+  }> | null;
 }) => Promise<{
   id: string;
   createdAt: string;
   updatedAt: string;
-  agentId: string;
-  projectId: string;
   tenantId: string;
+  projectId: string;
   subAgentId: string;
+  agentId: string;
   functionToolId: string;
+  toolPolicies: Record<string, {
+    needsApproval?: boolean;
+  }> | null;
 }>;
 /**
  * Update an agent-function tool relation
@@ -170,6 +182,9 @@ declare const updateSubAgentFunctionToolRelation: (db: AgentsManageDatabaseClien
   data: {
     subAgentId: string;
     functionToolId: string;
+    toolPolicies?: Record<string, {
+      needsApproval?: boolean;
+    }> | null;
   };
 }) => Promise<{
   id: string;
@@ -207,15 +222,21 @@ declare const associateFunctionToolWithSubAgent: (db: AgentsManageDatabaseClient
   scopes: AgentScopeConfig;
   subAgentId: string;
   functionToolId: string;
+  toolPolicies?: Record<string, {
+    needsApproval?: boolean;
+  }> | null;
 }) => Promise<{
   id: string;
   createdAt: string;
   updatedAt: string;
-  agentId: string;
-  projectId: string;
   tenantId: string;
+  projectId: string;
   subAgentId: string;
+  agentId: string;
   functionToolId: string;
+  toolPolicies: Record<string, {
+    needsApproval?: boolean;
+  }> | null;
 }>;
 //#endregion
 export { addFunctionToolToSubAgent, associateFunctionToolWithSubAgent, createFunctionTool, deleteFunctionTool, getFunctionToolById, getFunctionToolsForSubAgent, getSubAgentsUsingFunctionTool, isFunctionToolAssociatedWithSubAgent, listFunctionTools, removeFunctionToolFromSubAgent, updateFunctionTool, updateSubAgentFunctionToolRelation, upsertFunctionTool, upsertSubAgentFunctionToolRelation };