@inkeep/agents-core 0.0.0-dev-20260219040736 → 0.0.0-dev-20260219045007

package/dist/data-access/manage/subAgentTeamAgentRelations.d.ts

@@ -9,13 +9,13 @@ declare const getSubAgentTeamAgentRelationById: (db: AgentsManageDatabaseClient)
   relationId: string;
 }) => Promise<{
   id: string;
-  tenantId: string;
-  projectId: string;
-  agentId: string;
   createdAt: string;
   updatedAt: string;
   headers: Record<string, string> | null;
+  tenantId: string;
+  projectId: string;
   subAgentId: string;
+  agentId: string;
   targetAgentId: string;
 } | undefined>;
 declare const listSubAgentTeamAgentRelations: (db: AgentsManageDatabaseClient) => (params: {
@@ -44,26 +44,26 @@ declare const getSubAgentTeamAgentRelations: (db: AgentsManageDatabaseClient) =>
   scopes: SubAgentScopeConfig;
 }) => Promise<{
   id: string;
-  tenantId: string;
-  projectId: string;
-  agentId: string;
   createdAt: string;
   updatedAt: string;
   headers: Record<string, string> | null;
+  tenantId: string;
+  projectId: string;
   subAgentId: string;
+  agentId: string;
   targetAgentId: string;
 }[]>;
 declare const getSubAgentTeamAgentRelationsByAgent: (db: AgentsManageDatabaseClient) => (params: {
   scopes: AgentScopeConfig;
 }) => Promise<{
   id: string;
-  tenantId: string;
-  projectId: string;
-  agentId: string;
   createdAt: string;
   updatedAt: string;
   headers: Record<string, string> | null;
+  tenantId: string;
+  projectId: string;
   subAgentId: string;
+  agentId: string;
   targetAgentId: string;
 }[]>;
 declare const getSubAgentTeamAgentRelationsByTeamAgent: (db: AgentsManageDatabaseClient) => (params: {
@@ -210,13 +210,13 @@ declare const createSubAgentTeamAgentRelation: (db: AgentsManageDatabaseClient)
   };
 }) => Promise<{
   id: string;
-  tenantId: string;
-  projectId: string;
-  agentId: string;
   createdAt: string;
   updatedAt: string;
   headers: Record<string, string> | null;
+  tenantId: string;
+  projectId: string;
   subAgentId: string;
+  agentId: string;
   targetAgentId: string;
 }>;
 /**
@@ -227,13 +227,13 @@ declare const getSubAgentTeamAgentRelationByParams: (db: AgentsManageDatabaseCli
   targetAgentId: string;
 }) => Promise<{
   id: string;
-  tenantId: string;
-  projectId: string;
-  agentId: string;
   createdAt: string;
   updatedAt: string;
   headers: Record<string, string> | null;
+  tenantId: string;
+  projectId: string;
   subAgentId: string;
+  agentId: string;
   targetAgentId: string;
 } | undefined>;
 /**
@@ -248,13 +248,13 @@ declare const upsertSubAgentTeamAgentRelation: (db: AgentsManageDatabaseClient)
   };
 }) => Promise<{
   id: string;
-  tenantId: string;
-  projectId: string;
-  agentId: string;
   createdAt: string;
   updatedAt: string;
   headers: Record<string, string> | null;
+  tenantId: string;
+  projectId: string;
   subAgentId: string;
+  agentId: string;
   targetAgentId: string;
 }>;
 declare const updateSubAgentTeamAgentRelation: (db: AgentsManageDatabaseClient) => (params: {

package/dist/data-access/manage/subAgents.d.ts

@@ -10,12 +10,11 @@ declare const getSubAgentById: (db: AgentsManageDatabaseClient) => (params: {
 }) => Promise<{
   id: string;
   name: string;
+  createdAt: string;
+  updatedAt: string;
   description: string | null;
   tenantId: string;
   projectId: string;
-  agentId: string;
-  prompt: string | null;
-  conversationHistoryConfig: ConversationHistoryConfig | null;
   models: {
     base?: {
       model?: string | undefined;
@@ -33,20 +32,20 @@ declare const getSubAgentById: (db: AgentsManageDatabaseClient) => (params: {
   stopWhen: {
     stepCountIs?: number | undefined;
   } | null;
-  createdAt: string;
-  updatedAt: string;
+  prompt: string | null;
+  conversationHistoryConfig: ConversationHistoryConfig | null;
+  agentId: string;
 } | undefined>;
 declare const listSubAgents: (db: AgentsManageDatabaseClient) => (params: {
   scopes: AgentScopeConfig;
 }) => Promise<{
   id: string;
   name: string;
+  createdAt: string;
+  updatedAt: string;
   description: string | null;
   tenantId: string;
   projectId: string;
-  agentId: string;
-  prompt: string | null;
-  conversationHistoryConfig: ConversationHistoryConfig | null;
   models: {
     base?: {
       model?: string | undefined;
@@ -64,8 +63,9 @@ declare const listSubAgents: (db: AgentsManageDatabaseClient) => (params: {
   stopWhen: {
     stepCountIs?: number | undefined;
   } | null;
-  createdAt: string;
-  updatedAt: string;
+  prompt: string | null;
+  conversationHistoryConfig: ConversationHistoryConfig | null;
+  agentId: string;
 }[]>;
 declare const listSubAgentsPaginated: (db: AgentsManageDatabaseClient) => (params: {
   scopes: AgentScopeConfig;
@@ -110,12 +110,11 @@ declare const listSubAgentsPaginated: (db: AgentsManageDatabaseClient) => (param
 declare const createSubAgent: (db: AgentsManageDatabaseClient) => (params: SubAgentInsert) => Promise<{
   id: string;
   name: string;
+  createdAt: string;
+  updatedAt: string;
   description: string | null;
   tenantId: string;
   projectId: string;
-  agentId: string;
-  prompt: string | null;
-  conversationHistoryConfig: ConversationHistoryConfig | null;
   models: {
     base?: {
       model?: string | undefined;
@@ -133,8 +132,9 @@ declare const createSubAgent: (db: AgentsManageDatabaseClient) => (params: SubAg
   stopWhen: {
     stepCountIs?: number | undefined;
   } | null;
-  createdAt: string;
-  updatedAt: string;
+  prompt: string | null;
+  conversationHistoryConfig: ConversationHistoryConfig | null;
+  agentId: string;
 }>;
 declare const updateSubAgent: (db: AgentsManageDatabaseClient) => (params: {
   scopes: AgentScopeConfig;

package/dist/data-access/manage/tools.d.ts

@@ -20,12 +20,12 @@ declare const getToolById: (db: AgentsManageDatabaseClient) => (params: {
 }) => Promise<{
   id: string;
   name: string;
-  description: string | null;
-  tenantId: string;
-  projectId: string;
   createdAt: string;
   updatedAt: string;
+  description: string | null;
   headers: Record<string, string> | null;
+  tenantId: string;
+  projectId: string;
   config: {
     type: "mcp";
     mcp: ToolMcpConfig;
@@ -78,12 +78,12 @@ declare const listTools: (db: AgentsManageDatabaseClient) => (params: {
 declare const createTool: (db: AgentsManageDatabaseClient) => (params: ToolInsert) => Promise<{
   id: string;
   name: string;
-  description: string | null;
-  tenantId: string;
-  projectId: string;
   createdAt: string;
   updatedAt: string;
+  description: string | null;
   headers: Record<string, string> | null;
+  tenantId: string;
+  projectId: string;
   config: {
     type: "mcp";
     mcp: ToolMcpConfig;
@@ -134,17 +134,17 @@ declare const addToolToAgent: (db: AgentsManageDatabaseClient) => (params: {
   }> | null;
 }) => Promise<{
   id: string;
+  createdAt: string;
+  updatedAt: string;
+  headers: Record<string, string> | null;
   tenantId: string;
   projectId: string;
+  subAgentId: string;
   agentId: string;
-  createdAt: string;
-  updatedAt: string;
   toolId: string;
-  headers: Record<string, string> | null;
   toolPolicies: Record<string, {
     needsApproval?: boolean;
   }> | null;
-  subAgentId: string;
   selectedTools: string[] | null;
 }>;
 declare const removeToolFromAgent: (db: AgentsManageDatabaseClient) => (params: {
@@ -153,17 +153,17 @@ declare const removeToolFromAgent: (db: AgentsManageDatabaseClient) => (params:
   toolId: string;
 }) => Promise<{
   id: string;
+  createdAt: string;
+  updatedAt: string;
+  headers: Record<string, string> | null;
   tenantId: string;
   projectId: string;
+  subAgentId: string;
   agentId: string;
-  createdAt: string;
-  updatedAt: string;
   toolId: string;
-  headers: Record<string, string> | null;
   toolPolicies: Record<string, {
     needsApproval?: boolean;
   }> | null;
-  subAgentId: string;
   selectedTools: string[] | null;
 }>;
 /**
@@ -181,17 +181,17 @@ declare const upsertSubAgentToolRelation: (db: AgentsManageDatabaseClient) => (p
   relationId?: string;
 }) => Promise<{
   id: string;
+  createdAt: string;
+  updatedAt: string;
+  headers: Record<string, string> | null;
   tenantId: string;
   projectId: string;
+  subAgentId: string;
   agentId: string;
-  createdAt: string;
-  updatedAt: string;
   toolId: string;
-  headers: Record<string, string> | null;
   toolPolicies: Record<string, {
     needsApproval?: boolean;
   }> | null;
-  subAgentId: string;
   selectedTools: string[] | null;
 }>;
 /**
@@ -202,12 +202,12 @@ declare const upsertTool: (db: AgentsManageDatabaseClient) => (params: {
 }) => Promise<{
   id: string;
   name: string;
-  description: string | null;
-  tenantId: string;
-  projectId: string;
   createdAt: string;
   updatedAt: string;
+  description: string | null;
   headers: Record<string, string> | null;
+  tenantId: string;
+  projectId: string;
   config: {
     type: "mcp";
     mcp: ToolMcpConfig;

package/dist/data-access/runtime/apiKeys.d.ts

@@ -9,12 +9,12 @@ declare const getApiKeyById: (db: AgentsRunDatabaseClient) => (params: {
 }) => Promise<{
   id: string;
   name: string | null;
-  tenantId: string;
-  projectId: string;
-  agentId: string;
   createdAt: string;
   updatedAt: string;
   expiresAt: string | null;
+  tenantId: string;
+  projectId: string;
+  agentId: string;
   publicId: string;
   keyHash: string;
   keyPrefix: string;
@@ -23,12 +23,12 @@ declare const getApiKeyById: (db: AgentsRunDatabaseClient) => (params: {
 declare const getApiKeyByPublicId: (db: AgentsRunDatabaseClient) => (publicId: string) => Promise<{
   id: string;
   name: string | null;
-  tenantId: string;
-  projectId: string;
-  agentId: string;
   createdAt: string;
   updatedAt: string;
   expiresAt: string | null;
+  tenantId: string;
+  projectId: string;
+  agentId: string;
   publicId: string;
   keyHash: string;
   keyPrefix: string;
@@ -40,12 +40,12 @@ declare const listApiKeys: (db: AgentsRunDatabaseClient) => (params: {
 }) => Promise<{
   id: string;
   name: string | null;
-  tenantId: string;
-  projectId: string;
-  agentId: string;
   createdAt: string;
   updatedAt: string;
   expiresAt: string | null;
+  tenantId: string;
+  projectId: string;
+  agentId: string;
   publicId: string;
   keyHash: string;
   keyPrefix: string;
@@ -67,12 +67,12 @@ declare const listApiKeysPaginated: (db: AgentsRunDatabaseClient) => (params: {
 declare const createApiKey: (db: AgentsRunDatabaseClient) => (params: ApiKeyInsert) => Promise<{
   id: string;
   name: string | null;
-  tenantId: string;
-  projectId: string;
-  agentId: string;
   createdAt: string;
   updatedAt: string;
   expiresAt: string | null;
+  tenantId: string;
+  projectId: string;
+  agentId: string;
   publicId: string;
   keyHash: string;
   keyPrefix: string;

package/dist/data-access/runtime/conversations.d.ts

@@ -16,19 +16,19 @@ declare const listConversations: (db: AgentsRunDatabaseClient) => (params: {
 }>;
 declare const createConversation: (db: AgentsRunDatabaseClient) => (params: ConversationInsert) => Promise<{
   id: string;
-  tenantId: string;
-  projectId: string;
-  agentId: string | null;
-  title: string | null;
   createdAt: string;
   updatedAt: string;
-  metadata: ConversationMetadata | null;
   ref: {
     type: "commit" | "tag" | "branch";
     name: string;
     hash: string;
   } | null;
   userId: string | null;
+  metadata: ConversationMetadata | null;
+  title: string | null;
+  tenantId: string;
+  projectId: string;
+  agentId: string | null;
   activeSubAgentId: string;
   lastContextResolution: string | null;
 }>;
@@ -85,19 +85,19 @@ declare const getConversation: (db: AgentsRunDatabaseClient) => (params: {
   conversationId: string;
 }) => Promise<{
   id: string;
-  tenantId: string;
-  projectId: string;
-  agentId: string | null;
-  title: string | null;
   createdAt: string;
   updatedAt: string;
-  metadata: ConversationMetadata | null;
   ref: {
     type: "commit" | "tag" | "branch";
     name: string;
     hash: string;
   } | null;
   userId: string | null;
+  metadata: ConversationMetadata | null;
+  title: string | null;
+  tenantId: string;
+  projectId: string;
+  agentId: string | null;
   activeSubAgentId: string;
   lastContextResolution: string | null;
 } | undefined>;
@@ -121,19 +121,19 @@ declare const createOrGetConversation: (db: AgentsRunDatabaseClient) => (input:
   contextConfigId?: string | undefined;
 } | {
   id: string;
-  tenantId: string;
-  projectId: string;
-  agentId: string | null;
-  title: string | null;
   createdAt: string;
   updatedAt: string;
-  metadata: ConversationMetadata | null;
   ref: {
     type: "commit" | "tag" | "branch";
     name: string;
     hash: string;
   } | null;
   userId: string | null;
+  metadata: ConversationMetadata | null;
+  title: string | null;
+  tenantId: string;
+  projectId: string;
+  agentId: string | null;
   activeSubAgentId: string;
   lastContextResolution: string | null;
 }>;
@@ -153,19 +153,19 @@ declare const getActiveAgentForConversation: (db: AgentsRunDatabaseClient) => (p
   conversationId: string;
 }) => Promise<{
   id: string;
-  tenantId: string;
-  projectId: string;
-  agentId: string | null;
-  title: string | null;
   createdAt: string;
   updatedAt: string;
-  metadata: ConversationMetadata | null;
   ref: {
     type: "commit" | "tag" | "branch";
     name: string;
     hash: string;
   } | null;
   userId: string | null;
+  metadata: ConversationMetadata | null;
+  title: string | null;
+  tenantId: string;
+  projectId: string;
+  agentId: string | null;
   activeSubAgentId: string;
   lastContextResolution: string | null;
 } | undefined>;

package/dist/data-access/runtime/messages.d.ts

@@ -10,13 +10,13 @@ declare const getMessageById: (db: AgentsRunDatabaseClient) => (params: {
   messageId: string;
 }) => Promise<{
   id: string;
-  tenantId: string;
-  projectId: string;
   createdAt: string;
   updatedAt: string;
   metadata: MessageMetadata | null;
-  content: MessageContent;
   role: string;
+  content: MessageContent;
+  tenantId: string;
+  projectId: string;
   fromSubAgentId: string | null;
   toSubAgentId: string | null;
   fromExternalAgentId: string | null;
@@ -141,13 +141,13 @@ declare const getVisibleMessages: (db: AgentsRunDatabaseClient) => (params: {
 }[]>;
 declare const createMessage: (db: AgentsRunDatabaseClient) => (params: MessageInsert) => Promise<{
   id: string;
-  tenantId: string;
-  projectId: string;
   createdAt: string;
   updatedAt: string;
   metadata: MessageMetadata | null;
-  content: MessageContent;
   role: string;
+  content: MessageContent;
+  tenantId: string;
+  projectId: string;
   fromSubAgentId: string | null;
   toSubAgentId: string | null;
   fromExternalAgentId: string | null;
@@ -194,13 +194,13 @@ declare const deleteMessage: (db: AgentsRunDatabaseClient) => (params: {
   messageId: string;
 }) => Promise<{
   id: string;
-  tenantId: string;
-  projectId: string;
   createdAt: string;
   updatedAt: string;
   metadata: MessageMetadata | null;
-  content: MessageContent;
   role: string;
+  content: MessageContent;
+  tenantId: string;
+  projectId: string;
   fromSubAgentId: string | null;
   toSubAgentId: string | null;
   fromExternalAgentId: string | null;

package/dist/data-access/runtime/tasks.d.ts

@@ -7,19 +7,19 @@ import { TaskInsert, TaskSelect } from "../../types/entities.js";
 //#region src/data-access/runtime/tasks.d.ts
 declare const createTask: (db: AgentsRunDatabaseClient) => (params: TaskInsert) => Promise<{
   id: string;
-  tenantId: string;
-  projectId: string;
-  agentId: string;
   createdAt: string;
   updatedAt: string;
-  metadata: TaskMetadataConfig | null;
   ref: {
     type: "commit" | "tag" | "branch";
     name: string;
     hash: string;
   } | null;
+  metadata: TaskMetadataConfig | null;
   status: string;
+  tenantId: string;
+  projectId: string;
   subAgentId: string;
+  agentId: string;
   contextId: string;
 }>;
 declare const getTask: (db: AgentsRunDatabaseClient) => (params: {

package/dist/middleware/authz-meta.d.ts

@@ -0,0 +1,15 @@
+import { MiddlewareHandler } from "hono";
+
+//#region src/middleware/authz-meta.d.ts
+type AuthzMeta = {
+  resource?: string;
+  permission?: string;
+  description: string;
+};
+type ProjectScopedMiddleware = MiddlewareHandler & {
+  readonly __projectScoped: true;
+};
+declare function getAuthzMeta(mw: unknown): AuthzMeta | undefined;
+declare function registerAuthzMeta(mw: object, meta: AuthzMeta): void;
+//#endregion
+export { AuthzMeta, ProjectScopedMiddleware, getAuthzMeta, registerAuthzMeta };

package/dist/middleware/authz-meta.js

@@ -0,0 +1,11 @@
+//#region src/middleware/authz-meta.ts
+const authzMeta = /* @__PURE__ */ new WeakMap();
+function getAuthzMeta(mw) {
+	return typeof mw === "function" ? authzMeta.get(mw) : void 0;
+}
+function registerAuthzMeta(mw, meta) {
+	authzMeta.set(mw, meta);
+}
+
+//#endregion
+export { getAuthzMeta, registerAuthzMeta };

package/dist/middleware/create-protected-route.d.ts

@@ -0,0 +1,30 @@
+import { ProjectScopedMiddleware } from "./authz-meta.js";
+import { createRoute } from "@hono/zod-openapi";
+import { ZodType } from "zod";
+import { MiddlewareHandler } from "hono";
+
+//#region src/middleware/create-protected-route.d.ts
+type CreateRouteParams = Parameters<typeof createRoute>[0];
+declare function createProtectedRoute<T extends CreateRouteParams>(config: T & {
+  permission: ProjectScopedMiddleware;
+  request: {
+    params: ZodType<{
+      projectId: string;
+    }>;
+  };
+}): T;
+declare function createProtectedRoute<T extends CreateRouteParams>(config: T & {
+  permission: ProjectScopedMiddleware;
+  request: {
+    params: ZodType<{
+      id: string;
+    }>;
+  };
+}): T;
+declare function createProtectedRoute<T extends CreateRouteParams>(config: T & {
+  permission: MiddlewareHandler & {
+    __projectScoped?: never;
+  };
+}): T;
+//#endregion
+export { createProtectedRoute };

package/dist/middleware/create-protected-route.js

@@ -0,0 +1,20 @@
+import { getAuthzMeta } from "./authz-meta.js";
+
+//#region src/middleware/create-protected-route.ts
+function toArray(value) {
+	if (!value) return [];
+	return Array.isArray(value) ? value : [value];
+}
+function createProtectedRoute(config) {
+	const { permission, ...routeConfig } = config;
+	const meta = getAuthzMeta(permission);
+	return {
+		...routeConfig,
+		middleware: [permission, ...toArray(routeConfig.middleware)],
+		...meta && { "x-authz": meta },
+		...!meta && !("security" in config) && { security: [] }
+	};
+}
+
+//#endregion
+export { createProtectedRoute };

package/dist/middleware/index.d.ts

@@ -0,0 +1,5 @@
+import { AuthzMeta, ProjectScopedMiddleware, getAuthzMeta, registerAuthzMeta } from "./authz-meta.js";
+import { createProtectedRoute } from "./create-protected-route.js";
+import { inheritedAuth, inheritedManageTenantAuth, inheritedRunApiKeyAuth, inheritedWorkAppsAuth } from "./inherited-auth.js";
+import { noAuth } from "./no-auth.js";
+export { type AuthzMeta, type ProjectScopedMiddleware, createProtectedRoute, getAuthzMeta, inheritedAuth, inheritedManageTenantAuth, inheritedRunApiKeyAuth, inheritedWorkAppsAuth, noAuth, registerAuthzMeta };

package/dist/middleware/index.js

@@ -0,0 +1,6 @@
+import { getAuthzMeta, registerAuthzMeta } from "./authz-meta.js";
+import { createProtectedRoute } from "./create-protected-route.js";
+import { inheritedAuth, inheritedManageTenantAuth, inheritedRunApiKeyAuth, inheritedWorkAppsAuth } from "./inherited-auth.js";
+import { noAuth } from "./no-auth.js";
+
+export { createProtectedRoute, getAuthzMeta, inheritedAuth, inheritedManageTenantAuth, inheritedRunApiKeyAuth, inheritedWorkAppsAuth, noAuth, registerAuthzMeta };

package/dist/middleware/inherited-auth.d.ts

@@ -0,0 +1,43 @@
+import * as hono0 from "hono";
+
+//#region src/middleware/inherited-auth.d.ts
+
+/**
+ * Documentation-only permission marker for routes whose authentication
+ * is already enforced by a parent `app.use()` in createApp.ts.
+ *
+ * This does NOT perform any auth check itself — it only registers
+ * x-authz metadata so the OpenAPI spec accurately reflects the
+ * auth requirement.
+ *
+ * Use this when the route lives under a path that already has
+ * middleware applied (e.g. `/manage/tenants/*` has `manageApiKeyOrSessionAuth`).
+ */
+declare const inheritedAuth: (meta: {
+  resource?: string;
+  permission?: string;
+  description: string;
+}) => hono0.MiddlewareHandler<any, string, {}, Response>;
+/**
+ * Marker for routes under `/manage/tenants/*` whose auth is handled
+ * by `manageApiKeyOrSessionAuth()` in createApp.ts.
+ *
+ * No auth check runs at the route level — this is purely for OpenAPI documentation.
+ */
+declare const inheritedManageTenantAuth: () => hono0.MiddlewareHandler<any, string, {}, Response>;
+/**
+ * Marker for routes under `/run/*` whose auth is handled
+ * by `runApiKeyAuth()` in createApp.ts.
+ *
+ * No auth check runs at the route level — this is purely for OpenAPI documentation.
+ */
+declare const inheritedRunApiKeyAuth: () => hono0.MiddlewareHandler<any, string, {}, Response>;
+/**
+ * Marker for routes under `/work-apps/*` whose auth is handled
+ * by `workAppsAuth()` in createApp.ts.
+ *
+ * No auth check runs at the route level — this is purely for OpenAPI documentation.
+ */
+declare const inheritedWorkAppsAuth: () => hono0.MiddlewareHandler<any, string, {}, Response>;
+//#endregion
+export { inheritedAuth, inheritedManageTenantAuth, inheritedRunApiKeyAuth, inheritedWorkAppsAuth };