@inkeep/agents-core 0.0.0-dev-20260219225345 → 0.0.0-dev-20260220015147

package/dist/db/manage/manage-schema.js

@@ -338,7 +338,7 @@ const subAgentSkills = pgTable("sub_agent_skills", {
 		],
 		name: "sub_agent_skills_skill_fk"
 	}).onDelete("cascade"),
-	unique("sub_agent_skills_sub_agent_skill_unique").on(table.subAgentId, table.skillId),
+	unique("sub_agent_skills_sub_agent_skill_unique").on(table.tenantId, table.projectId, table.agentId, table.subAgentId, table.skillId),
 	index("sub_agent_skills_skill_idx").on(table.skillId)
 ]);
 const subAgentRelations = pgTable("sub_agent_relations", {

package/dist/db/runtime/runtime-schema.d.ts

@@ -1743,6 +1743,23 @@ declare const workAppSlackChannelAgentConfigs: drizzle_orm_pg_core1267.PgTableWi
       identity: undefined;
       generated: undefined;
     }, {}, {}>;
+    grantAccessToMembers: drizzle_orm_pg_core1267.PgColumn<{
+      name: "grant_access_to_members";
+      tableName: "work_app_slack_channel_agent_configs";
+      dataType: "boolean";
+      columnType: "PgBoolean";
+      data: boolean;
+      driverParam: boolean;
+      notNull: true;
+      hasDefault: true;
+      isPrimaryKey: false;
+      isAutoincrement: false;
+      hasRuntimeDefault: false;
+      enumValues: undefined;
+      baseColumn: never;
+      identity: undefined;
+      generated: undefined;
+    }, {}, {}>;
   };
   dialect: "pg";
 }>;

package/dist/db/runtime/runtime-schema.js

@@ -228,6 +228,7 @@ const workAppSlackChannelAgentConfigs = pgTable("work_app_slack_channel_agent_co
 	agentName: varchar("agent_name", { length: 256 }),
 	configuredByUserId: text("configured_by_user_id").references(() => user.id, { onDelete: "set null" }),
 	enabled: boolean("enabled").notNull().default(true),
+	grantAccessToMembers: boolean("grant_access_to_members").notNull().default(true),
 	...timestamps
 }, (table) => [
 	unique("work_app_slack_channel_agent_configs_unique").on(table.tenantId, table.slackTeamId, table.slackChannelId),

package/dist/middleware/no-auth.d.ts

@@ -1,6 +1,6 @@
-import * as hono3 from "hono";
+import * as hono0 from "hono";
 
 //#region src/middleware/no-auth.d.ts
-declare const noAuth: () => hono3.MiddlewareHandler<any, string, {}, Response>;
+declare const noAuth: () => hono0.MiddlewareHandler<any, string, {}, Response>;
 //#endregion
 export { noAuth };

package/dist/types/utility.d.ts

@@ -243,6 +243,12 @@ interface BaseExecutionContext {
       type: 'user' | 'api_key';
       id: string;
     };
+    slack?: {
+      authorized: true;
+      authSource: 'channel' | 'workspace';
+      channelId?: string;
+      teamId: string;
+    };
   };
 }
 interface FullExecutionContext extends BaseExecutionContext {

package/dist/utils/slack-user-token.d.ts

@@ -24,6 +24,13 @@ declare const SlackAccessTokenPayloadSchema: z.ZodObject<{
     userId: z.ZodString;
     enterpriseId: z.ZodOptional<z.ZodString>;
     email: z.ZodOptional<z.ZodString>;
+    authorized: z.ZodOptional<z.ZodBoolean>;
+    authSource: z.ZodOptional<z.ZodEnum<{
+      channel: "channel";
+      workspace: "workspace";
+    }>>;
+    channelId: z.ZodOptional<z.ZodString>;
+    authorizedProjectId: z.ZodOptional<z.ZodString>;
   }, z.core.$strip>;
 }, z.core.$strip>;
 type SlackAccessTokenPayload = z.infer<typeof SlackAccessTokenPayloadSchema>;
@@ -37,6 +44,10 @@ interface SignSlackUserTokenParams {
   slackUserId: string;
   slackEnterpriseId?: string;
   slackEmail?: string;
+  slackAuthorized?: boolean;
+  slackAuthSource?: 'channel' | 'workspace';
+  slackChannelId?: string;
+  slackAuthorizedProjectId?: string;
 }
 /**
  * Result of verifying a Slack user token

package/dist/utils/slack-user-token.js

@@ -27,8 +27,12 @@ const SlackAccessTokenPayloadSchema = z.object({
 		teamId: z.string().min(1),
 		userId: z.string().min(1),
 		enterpriseId: z.string().min(1).optional(),
-		email: z.string().email().optional()
-	})
+		email: z.string().email().optional(),
+		authorized: z.boolean().optional(),
+		authSource: z.enum(["channel", "workspace"]).optional(),
+		channelId: z.string().min(1).optional(),
+		authorizedProjectId: z.string().min(1).optional()
+	}).refine((data) => !data.authorized || data.authorizedProjectId && data.authSource, { message: "When authorized is true, authorizedProjectId and authSource are required" })
 });
 /**
 * Sign a Slack user JWT token for calling Manage/Run APIs.
@@ -53,7 +57,11 @@ async function signSlackUserToken(params) {
 					teamId: params.slackTeamId,
 					userId: params.slackUserId,
 					...params.slackEnterpriseId && { enterpriseId: params.slackEnterpriseId },
-					...params.slackEmail && { email: params.slackEmail }
+					...params.slackEmail && { email: params.slackEmail },
+					...params.slackAuthorized != null && { authorized: params.slackAuthorized },
+					...params.slackAuthSource && { authSource: params.slackAuthSource },
+					...params.slackChannelId && { channelId: params.slackChannelId },
+					...params.slackAuthorizedProjectId && { authorizedProjectId: params.slackAuthorizedProjectId }
 				}
 			}
 		});