@inkeep/agents-core 0.23.5 → 0.24.1

package/dist/{chunk-AN3YZP42.js → chunk-ZGJI6UNK.js}

@@ -173,15 +173,38 @@ function generateIdFromName(name) {
 var MAX_CODE_SIZE = 5e4;
 var MAX_DATA_SIZE = 1e4;
 var DANGEROUS_PATTERNS = [
-  /\beval\s*\(/i,
-  /\bFunction\s*\(/i,
-  /dangerouslySetInnerHTML/i,
-  /<script\b/i,
-  /\bon\w+\s*=/i,
-  // inline event handlers like onclick=
-  /document\.write/i,
-  /window\.location/i,
-  /\.innerHTML\s*=/i
+  {
+    pattern: /\beval\s*\(/i,
+    message: "eval() is not allowed"
+  },
+  {
+    pattern: /\bFunction\s*\(/i,
+    message: "Function constructor is not allowed"
+  },
+  {
+    pattern: /dangerouslySetInnerHTML/i,
+    message: "dangerouslySetInnerHTML is not allowed"
+  },
+  {
+    pattern: /<script\b/i,
+    message: "Script tags are not allowed"
+  },
+  {
+    pattern: /\bon\w+\s*=/i,
+    message: "Inline event handlers (onClick=, onLoad=, etc.) are not allowed"
+  },
+  {
+    pattern: /document\.write/i,
+    message: "document.write is not allowed"
+  },
+  {
+    pattern: /window\.location/i,
+    message: "window.location is not allowed"
+  },
+  {
+    pattern: /\.innerHTML\s*=/i,
+    message: "innerHTML manipulation is not allowed"
+  }
 ];
 var ALLOWED_IMPORTS = ["lucide-react"];
 function validatePreview(preview) {
@@ -211,11 +234,11 @@ function validatePreview(preview) {
       message: `Data size exceeds maximum allowed (${MAX_DATA_SIZE} characters)`
     });
   }
-  for (const pattern of DANGEROUS_PATTERNS) {
+  for (const { pattern, message } of DANGEROUS_PATTERNS) {
     if (pattern.test(preview.code)) {
       errors.push({
         field: "preview.code",
-        message: `Code contains potentially dangerous pattern: ${pattern.source}`
+        message: `Code contains potentially dangerous pattern: ${message}`
       });
     }
   }

package/dist/client-exports.d.cts

@@ -1,7 +1,7 @@
 export { i as ACTIVITY_NAMES, g as ACTIVITY_STATUS, f as ACTIVITY_TYPES, h as AGENT_IDS, p as AGGREGATE_OPERATORS, A as AI_OPERATIONS, j as AI_TOOL_TYPES, o as DATA_SOURCES, k as DATA_TYPES, D as DELEGATION_FROM_SUB_AGENT_ID, b as DELEGATION_ID, a as DELEGATION_TO_SUB_AGENT_ID, F as FIELD_TYPES, O as OPERATORS, m as ORDER_DIRECTIONS, P as PANEL_TYPES, q as QUERY_DEFAULTS, l as QUERY_EXPRESSIONS, Q as QUERY_FIELD_CONFIGS, n as QUERY_TYPES, R as REDUCE_OPERATIONS, e as SPAN_KEYS, S as SPAN_NAMES, T as TRANSFER_FROM_SUB_AGENT_ID, c as TRANSFER_TO_SUB_AGENT_ID, U as UNKNOWN_VALUE, d as detectAuthenticationRequired } from './auth-detection-BO8bSpe4.cjs';
 import { z } from 'zod';
-import { C as ConversationHistoryConfig, F as FunctionApiInsertSchema, A as ApiKeyApiUpdateSchema, a as FullAgentAgentInsertSchema } from './utility-DVhMoRLZ.cjs';
-export { e as AgentStopWhen, b as AgentStopWhenSchema, h as CredentialStoreType, j as FunctionApiSelectSchema, k as FunctionApiUpdateSchema, i as MCPTransportType, g as ModelSettings, M as ModelSettingsSchema, d as StopWhen, S as StopWhenSchema, f as SubAgentStopWhen, c as SubAgentStopWhenSchema } from './utility-DVhMoRLZ.cjs';
+import { C as ConversationHistoryConfig, F as FunctionApiInsertSchema, A as ApiKeyApiUpdateSchema, a as FullAgentAgentInsertSchema } from './utility-mGrlR4Ta.cjs';
+export { e as AgentStopWhen, b as AgentStopWhenSchema, h as CredentialStoreType, j as FunctionApiSelectSchema, k as FunctionApiUpdateSchema, i as MCPTransportType, g as ModelSettings, M as ModelSettingsSchema, d as StopWhen, S as StopWhenSchema, f as SubAgentStopWhen, c as SubAgentStopWhenSchema } from './utility-mGrlR4Ta.cjs';
 export { v as validatePropsAsJsonSchema } from './props-validation-BMR1qNiy.cjs';
 import 'pino';
 import 'drizzle-zod';
@@ -129,8 +129,8 @@ declare const DataComponentApiInsertSchema: z.ZodObject<{
     props: z.ZodRecord<z.ZodString, z.ZodUnknown>;
 }, z.core.$strip>;
 declare const ArtifactComponentApiInsertSchema: z.ZodObject<{
-    name: z.ZodString;
     id: z.ZodString;
+    name: z.ZodString;
     description: z.ZodString;
     props: z.ZodOptional<z.ZodNullable<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>>;
 }, {
@@ -165,11 +165,12 @@ declare const FullAgentDefinitionSchema: z.ZodObject<{
     description: z.ZodOptional<z.ZodString>;
     defaultSubAgentId: z.ZodOptional<z.ZodString>;
     subAgents: z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodObject<{
-        name: z.ZodString;
         id: z.ZodString;
+        name: z.ZodString;
+        description: z.ZodString;
+        prompt: z.ZodString;
         createdAt: z.ZodOptional<z.ZodString>;
         updatedAt: z.ZodOptional<z.ZodString>;
-        description: z.ZodString;
         models: z.ZodOptional<z.ZodObject<{
             base: z.ZodOptional<z.ZodObject<{
                 model: z.ZodOptional<z.ZodString>;
@@ -193,7 +194,6 @@ declare const FullAgentDefinitionSchema: z.ZodObject<{
         }, {
             stepCountIs?: number | undefined;
         }>>>>;
-        prompt: z.ZodString;
         conversationHistoryConfig: z.ZodOptional<z.ZodNullable<z.ZodType<ConversationHistoryConfig, ConversationHistoryConfig, z.core.$ZodTypeInternals<ConversationHistoryConfig, ConversationHistoryConfig>>>>;
         type: z.ZodLiteral<"internal">;
         canUse: z.ZodArray<z.ZodObject<{

package/dist/client-exports.d.ts

@@ -1,7 +1,7 @@
 export { i as ACTIVITY_NAMES, g as ACTIVITY_STATUS, f as ACTIVITY_TYPES, h as AGENT_IDS, p as AGGREGATE_OPERATORS, A as AI_OPERATIONS, j as AI_TOOL_TYPES, o as DATA_SOURCES, k as DATA_TYPES, D as DELEGATION_FROM_SUB_AGENT_ID, b as DELEGATION_ID, a as DELEGATION_TO_SUB_AGENT_ID, F as FIELD_TYPES, O as OPERATORS, m as ORDER_DIRECTIONS, P as PANEL_TYPES, q as QUERY_DEFAULTS, l as QUERY_EXPRESSIONS, Q as QUERY_FIELD_CONFIGS, n as QUERY_TYPES, R as REDUCE_OPERATIONS, e as SPAN_KEYS, S as SPAN_NAMES, T as TRANSFER_FROM_SUB_AGENT_ID, c as TRANSFER_TO_SUB_AGENT_ID, U as UNKNOWN_VALUE, d as detectAuthenticationRequired } from './auth-detection-BO8bSpe4.js';
 import { z } from 'zod';
-import { C as ConversationHistoryConfig, F as FunctionApiInsertSchema, A as ApiKeyApiUpdateSchema, a as FullAgentAgentInsertSchema } from './utility-DVhMoRLZ.js';
-export { e as AgentStopWhen, b as AgentStopWhenSchema, h as CredentialStoreType, j as FunctionApiSelectSchema, k as FunctionApiUpdateSchema, i as MCPTransportType, g as ModelSettings, M as ModelSettingsSchema, d as StopWhen, S as StopWhenSchema, f as SubAgentStopWhen, c as SubAgentStopWhenSchema } from './utility-DVhMoRLZ.js';
+import { C as ConversationHistoryConfig, F as FunctionApiInsertSchema, A as ApiKeyApiUpdateSchema, a as FullAgentAgentInsertSchema } from './utility-mGrlR4Ta.js';
+export { e as AgentStopWhen, b as AgentStopWhenSchema, h as CredentialStoreType, j as FunctionApiSelectSchema, k as FunctionApiUpdateSchema, i as MCPTransportType, g as ModelSettings, M as ModelSettingsSchema, d as StopWhen, S as StopWhenSchema, f as SubAgentStopWhen, c as SubAgentStopWhenSchema } from './utility-mGrlR4Ta.js';
 export { v as validatePropsAsJsonSchema } from './props-validation-BMR1qNiy.js';
 import 'pino';
 import 'drizzle-zod';
@@ -129,8 +129,8 @@ declare const DataComponentApiInsertSchema: z.ZodObject<{
     props: z.ZodRecord<z.ZodString, z.ZodUnknown>;
 }, z.core.$strip>;
 declare const ArtifactComponentApiInsertSchema: z.ZodObject<{
-    name: z.ZodString;
     id: z.ZodString;
+    name: z.ZodString;
     description: z.ZodString;
     props: z.ZodOptional<z.ZodNullable<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>>;
 }, {
@@ -165,11 +165,12 @@ declare const FullAgentDefinitionSchema: z.ZodObject<{
     description: z.ZodOptional<z.ZodString>;
     defaultSubAgentId: z.ZodOptional<z.ZodString>;
     subAgents: z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodObject<{
-        name: z.ZodString;
         id: z.ZodString;
+        name: z.ZodString;
+        description: z.ZodString;
+        prompt: z.ZodString;
         createdAt: z.ZodOptional<z.ZodString>;
         updatedAt: z.ZodOptional<z.ZodString>;
-        description: z.ZodString;
         models: z.ZodOptional<z.ZodObject<{
             base: z.ZodOptional<z.ZodObject<{
                 model: z.ZodOptional<z.ZodString>;
@@ -193,7 +194,6 @@ declare const FullAgentDefinitionSchema: z.ZodObject<{
         }, {
             stepCountIs?: number | undefined;
         }>>>>;
-        prompt: z.ZodString;
         conversationHistoryConfig: z.ZodOptional<z.ZodNullable<z.ZodType<ConversationHistoryConfig, ConversationHistoryConfig, z.core.$ZodTypeInternals<ConversationHistoryConfig, ConversationHistoryConfig>>>>;
         type: z.ZodLiteral<"internal">;
         canUse: z.ZodArray<z.ZodObject<{

package/dist/db/schema.d.cts

@@ -1,7 +1,7 @@
 import 'drizzle-orm';
 import 'drizzle-orm/sqlite-core';
-import '../utility-DVhMoRLZ.cjs';
-export { E as agentRelations, H as agentToolRelationsRelations, a as agents, w as apiKeys, G as apiKeysRelations, j as artifactComponents, M as artifactComponentsRelations, b as contextCache, C as contextCacheRelations, c as contextConfigs, B as contextConfigsRelations, r as conversations, K as conversationsRelations, x as credentialReferences, I as credentialReferencesRelations, h as dataComponents, O as dataComponentsRelations, f as externalAgents, F as externalAgentsRelations, m as functionTools, T as functionToolsRelations, n as functions, R as functionsRelations, v as ledgerArtifacts, Q as ledgerArtifactsRelations, u as messages, L as messagesRelations, p as projects, z as projectsRelations, k as subAgentArtifactComponents, N as subAgentArtifactComponentsRelations, i as subAgentDataComponents, P as subAgentDataComponentsRelations, q as subAgentFunctionToolRelations, U as subAgentFunctionToolRelationsRelations, e as subAgentRelations, S as subAgentRelationsRelations, o as subAgentToolRelations, d as subAgents, D as subAgentsRelations, g as taskRelations, A as taskRelationsRelations, t as tasks, y as tasksRelations, l as tools, J as toolsRelations } from '../schema-DygzZEj3.cjs';
+import '../utility-mGrlR4Ta.cjs';
+export { E as agentRelations, H as agentToolRelationsRelations, a as agents, w as apiKeys, G as apiKeysRelations, j as artifactComponents, M as artifactComponentsRelations, b as contextCache, C as contextCacheRelations, c as contextConfigs, B as contextConfigsRelations, r as conversations, K as conversationsRelations, x as credentialReferences, I as credentialReferencesRelations, h as dataComponents, O as dataComponentsRelations, f as externalAgents, F as externalAgentsRelations, m as functionTools, T as functionToolsRelations, n as functions, R as functionsRelations, v as ledgerArtifacts, Q as ledgerArtifactsRelations, u as messages, L as messagesRelations, p as projects, z as projectsRelations, k as subAgentArtifactComponents, N as subAgentArtifactComponentsRelations, i as subAgentDataComponents, P as subAgentDataComponentsRelations, q as subAgentFunctionToolRelations, U as subAgentFunctionToolRelationsRelations, e as subAgentRelations, S as subAgentRelationsRelations, o as subAgentToolRelations, d as subAgents, D as subAgentsRelations, g as taskRelations, A as taskRelationsRelations, t as tasks, y as tasksRelations, l as tools, J as toolsRelations } from '../schema-B8NMPwEM.cjs';
 import 'zod';
 import 'drizzle-zod';
 import '@hono/zod-openapi';

package/dist/db/schema.d.ts

@@ -1,7 +1,7 @@
 import 'drizzle-orm';
 import 'drizzle-orm/sqlite-core';
-import '../utility-DVhMoRLZ.js';
-export { E as agentRelations, H as agentToolRelationsRelations, a as agents, w as apiKeys, G as apiKeysRelations, j as artifactComponents, M as artifactComponentsRelations, b as contextCache, C as contextCacheRelations, c as contextConfigs, B as contextConfigsRelations, r as conversations, K as conversationsRelations, x as credentialReferences, I as credentialReferencesRelations, h as dataComponents, O as dataComponentsRelations, f as externalAgents, F as externalAgentsRelations, m as functionTools, T as functionToolsRelations, n as functions, R as functionsRelations, v as ledgerArtifacts, Q as ledgerArtifactsRelations, u as messages, L as messagesRelations, p as projects, z as projectsRelations, k as subAgentArtifactComponents, N as subAgentArtifactComponentsRelations, i as subAgentDataComponents, P as subAgentDataComponentsRelations, q as subAgentFunctionToolRelations, U as subAgentFunctionToolRelationsRelations, e as subAgentRelations, S as subAgentRelationsRelations, o as subAgentToolRelations, d as subAgents, D as subAgentsRelations, g as taskRelations, A as taskRelationsRelations, t as tasks, y as tasksRelations, l as tools, J as toolsRelations } from '../schema-CxJkXzMM.js';
+import '../utility-mGrlR4Ta.js';
+export { E as agentRelations, H as agentToolRelationsRelations, a as agents, w as apiKeys, G as apiKeysRelations, j as artifactComponents, M as artifactComponentsRelations, b as contextCache, C as contextCacheRelations, c as contextConfigs, B as contextConfigsRelations, r as conversations, K as conversationsRelations, x as credentialReferences, I as credentialReferencesRelations, h as dataComponents, O as dataComponentsRelations, f as externalAgents, F as externalAgentsRelations, m as functionTools, T as functionToolsRelations, n as functions, R as functionsRelations, v as ledgerArtifacts, Q as ledgerArtifactsRelations, u as messages, L as messagesRelations, p as projects, z as projectsRelations, k as subAgentArtifactComponents, N as subAgentArtifactComponentsRelations, i as subAgentDataComponents, P as subAgentDataComponentsRelations, q as subAgentFunctionToolRelations, U as subAgentFunctionToolRelationsRelations, e as subAgentRelations, S as subAgentRelationsRelations, o as subAgentToolRelations, d as subAgents, D as subAgentsRelations, g as taskRelations, A as taskRelationsRelations, t as tasks, y as tasksRelations, l as tools, J as toolsRelations } from '../schema-PgBNwsV-.js';
 import 'zod';
 import 'drizzle-zod';
 import '@hono/zod-openapi';

package/dist/index.cjs

@@ -219729,15 +219729,38 @@ var setActiveAgentForThread = (db) => async ({
 var MAX_CODE_SIZE = 5e4;
 var MAX_DATA_SIZE = 1e4;
 var DANGEROUS_PATTERNS = [
-  /\beval\s*\(/i,
-  /\bFunction\s*\(/i,
-  /dangerouslySetInnerHTML/i,
-  /<script\b/i,
-  /\bon\w+\s*=/i,
-  // inline event handlers like onclick=
-  /document\.write/i,
-  /window\.location/i,
-  /\.innerHTML\s*=/i
+  {
+    pattern: /\beval\s*\(/i,
+    message: "eval() is not allowed"
+  },
+  {
+    pattern: /\bFunction\s*\(/i,
+    message: "Function constructor is not allowed"
+  },
+  {
+    pattern: /dangerouslySetInnerHTML/i,
+    message: "dangerouslySetInnerHTML is not allowed"
+  },
+  {
+    pattern: /<script\b/i,
+    message: "Script tags are not allowed"
+  },
+  {
+    pattern: /\bon\w+\s*=/i,
+    message: "Inline event handlers (onClick=, onLoad=, etc.) are not allowed"
+  },
+  {
+    pattern: /document\.write/i,
+    message: "document.write is not allowed"
+  },
+  {
+    pattern: /window\.location/i,
+    message: "window.location is not allowed"
+  },
+  {
+    pattern: /\.innerHTML\s*=/i,
+    message: "innerHTML manipulation is not allowed"
+  }
 ];
 var ALLOWED_IMPORTS = ["lucide-react"];
 function validatePreview(preview2) {
@@ -219767,11 +219790,11 @@ function validatePreview(preview2) {
       message: `Data size exceeds maximum allowed (${MAX_DATA_SIZE} characters)`
     });
   }
-  for (const pattern of DANGEROUS_PATTERNS) {
+  for (const { pattern, message } of DANGEROUS_PATTERNS) {
     if (pattern.test(preview2.code)) {
       errors.push({
         field: "preview.code",
-        message: `Code contains potentially dangerous pattern: ${pattern.source}`
+        message: `Code contains potentially dangerous pattern: ${message}`
       });
     }
   }