@inkeep/agents-core 0.37.1 → 0.37.2

package/dist/auth/auth-schema.d.ts

@@ -1,3 +1,4 @@
+import * as drizzle_orm from 'drizzle-orm';
 import * as drizzle_orm_pg_core from 'drizzle-orm/pg-core';
 
 declare const user: drizzle_orm_pg_core.PgTableWithColumns<{
@@ -1073,6 +1074,23 @@ declare const invitation: drizzle_orm_pg_core.PgTableWithColumns<{
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        createdAt: drizzle_orm_pg_core.PgColumn<{
+            name: "created_at";
+            tableName: "invitation";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         inviterId: drizzle_orm_pg_core.PgColumn<{
             name: "inviter_id";
             tableName: "invitation";
@@ -1093,5 +1111,33 @@ declare const invitation: drizzle_orm_pg_core.PgTableWithColumns<{
     };
     dialect: "pg";
 }>;
+declare const userRelations: drizzle_orm.Relations<"user", {
+    sessions: drizzle_orm.Many<"session">;
+    accounts: drizzle_orm.Many<"account">;
+    ssoProviders: drizzle_orm.Many<"sso_provider">;
+    members: drizzle_orm.Many<"member">;
+    invitations: drizzle_orm.Many<"invitation">;
+}>;
+declare const sessionRelations: drizzle_orm.Relations<"session", {
+    user: drizzle_orm.One<"user", true>;
+}>;
+declare const accountRelations: drizzle_orm.Relations<"account", {
+    user: drizzle_orm.One<"user", true>;
+}>;
+declare const ssoProviderRelations: drizzle_orm.Relations<"sso_provider", {
+    user: drizzle_orm.One<"user", false>;
+}>;
+declare const organizationRelations: drizzle_orm.Relations<"organization", {
+    members: drizzle_orm.Many<"member">;
+    invitations: drizzle_orm.Many<"invitation">;
+}>;
+declare const memberRelations: drizzle_orm.Relations<"member", {
+    organization: drizzle_orm.One<"organization", true>;
+    user: drizzle_orm.One<"user", true>;
+}>;
+declare const invitationRelations: drizzle_orm.Relations<"invitation", {
+    organization: drizzle_orm.One<"organization", true>;
+    user: drizzle_orm.One<"user", true>;
+}>;
 
-export { account, invitation, member, organization, session, ssoProvider, user, verification };
+export { account, accountRelations, invitation, invitationRelations, member, memberRelations, organization, organizationRelations, session, sessionRelations, ssoProvider, ssoProviderRelations, user, userRelations, verification };

package/dist/auth/auth-schema.js

@@ -1 +1 @@
-export { account, invitation, member, organization, session, ssoProvider, user, verification } from '../chunk-NFTJ5JBY.js';
+export { account, accountRelations, invitation, invitationRelations, member, memberRelations, organization, organizationRelations, session, sessionRelations, ssoProvider, ssoProviderRelations, user, userRelations, verification } from '../chunk-GENLXHZ4.js';

package/dist/auth/auth-validation-schemas.d.ts

@@ -1,6 +1,6 @@
 import * as drizzle_zod from 'drizzle-zod';
 import * as drizzle_orm_pg_core from 'drizzle-orm/pg-core';
-import { z } from 'zod';
+import { z } from '@hono/zod-openapi';
 
 declare const UserSelectSchema: drizzle_zod.BuildSchema<"select", {
     id: drizzle_orm_pg_core.PgColumn<{
@@ -1485,6 +1485,23 @@ declare const InvitationSelectSchema: drizzle_zod.BuildSchema<"select", {
         identity: undefined;
         generated: undefined;
     }, {}, {}>;
+    createdAt: drizzle_orm_pg_core.PgColumn<{
+        name: "created_at";
+        tableName: "invitation";
+        dataType: "date";
+        columnType: "PgTimestamp";
+        data: Date;
+        driverParam: string;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
     inviterId: drizzle_orm_pg_core.PgColumn<{
         name: "inviter_id";
         tableName: "invitation";
@@ -1606,6 +1623,23 @@ declare const InvitationInsertSchema: drizzle_zod.BuildSchema<"insert", {
         identity: undefined;
         generated: undefined;
     }, {}, {}>;
+    createdAt: drizzle_orm_pg_core.PgColumn<{
+        name: "created_at";
+        tableName: "invitation";
+        dataType: "date";
+        columnType: "PgTimestamp";
+        data: Date;
+        driverParam: string;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
     inviterId: drizzle_orm_pg_core.PgColumn<{
         name: "inviter_id";
         tableName: "invitation";

package/dist/auth/auth-validation-schemas.js

@@ -1,6 +1,6 @@
-import { user, session, account, organization, member, invitation, verification } from '../chunk-NFTJ5JBY.js';
+import { user, session, account, organization, member, invitation, verification } from '../chunk-GENLXHZ4.js';
 import { createSelectSchema, createInsertSchema } from 'drizzle-zod';
-import { z } from 'zod';
+import { z } from '@hono/zod-openapi';
 
 var UserSelectSchema = createSelectSchema(user);
 var UserInsertSchema = createInsertSchema(user);

package/dist/auth/auth.d.ts

@@ -4,15 +4,15 @@ import * as zod from 'zod';
 import * as better_auth from 'better-auth';
 import { BetterAuthAdvancedOptions } from 'better-auth';
 import { GoogleOptions } from 'better-auth/social-providers';
-import { D as DatabaseClient } from '../client-B_3j-V4-.js';
+import { D as DatabaseClient } from '../client-B3nwdklT.js';
 import 'drizzle-orm/node-postgres';
 import 'drizzle-orm/pglite';
-import '../schema-DKbG39on.js';
+import '../schema-BhYTubhP.js';
 import 'drizzle-orm';
 import 'drizzle-orm/pg-core';
-import '../utility-Lo5NoRHK.js';
-import 'drizzle-zod';
+import '../utility-5USfJ5Xd.js';
 import '@hono/zod-openapi';
+import 'drizzle-zod';
 import './auth-schema.js';
 
 interface OIDCProviderConfig {
@@ -115,7 +115,7 @@ declare function createAuth(config: BetterAuthConfig): better_auth.Auth<{
                 attributes?: better_auth.CookieOptions;
             };
         } | undefined;
-        defaultCookieAttributes?: better_auth.CookieOptions | undefined;
+        defaultCookieAttributes: better_auth.CookieOptions;
         cookiePrefix?: string | undefined;
         database?: {
             defaultFindManyLimit?: number;
@@ -716,25 +716,25 @@ declare function createAuth(config: BetterAuthConfig): better_auth.Auth<{
             ac: better_auth_plugins.AccessControl;
             roles: {
                 member: {
-                    authorize<K_1 extends "function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins.Subset<"function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config", better_auth_plugins.Statements>[key] | {
-                        actions: better_auth_plugins.Subset<"function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config", better_auth_plugins.Statements>[key];
+                    authorize<K_1 extends "function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins.Subset<"function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team", better_auth_plugins.Statements>[key] | {
+                        actions: better_auth_plugins.Subset<"function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team", better_auth_plugins.Statements>[key];
                         connector: "OR" | "AND";
                     } | undefined; } : never, connector?: "OR" | "AND"): better_auth_plugins.AuthorizeResponse;
-                    statements: better_auth_plugins.Subset<"function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config", better_auth_plugins.Statements>;
+                    statements: better_auth_plugins.Subset<"function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team", better_auth_plugins.Statements>;
                 };
                 admin: {
-                    authorize<K_1 extends "function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins.Subset<"function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config", better_auth_plugins.Statements>[key] | {
-                        actions: better_auth_plugins.Subset<"function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config", better_auth_plugins.Statements>[key];
+                    authorize<K_1 extends "function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins.Subset<"function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team", better_auth_plugins.Statements>[key] | {
+                        actions: better_auth_plugins.Subset<"function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team", better_auth_plugins.Statements>[key];
                         connector: "OR" | "AND";
                     } | undefined; } : never, connector?: "OR" | "AND"): better_auth_plugins.AuthorizeResponse;
-                    statements: better_auth_plugins.Subset<"function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config", better_auth_plugins.Statements>;
+                    statements: better_auth_plugins.Subset<"function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team", better_auth_plugins.Statements>;
                 };
                 owner: {
-                    authorize<K_1 extends "function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins.Subset<"function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config", better_auth_plugins.Statements>[key] | {
-                        actions: better_auth_plugins.Subset<"function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config", better_auth_plugins.Statements>[key];
+                    authorize<K_1 extends "function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins.Subset<"function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team", better_auth_plugins.Statements>[key] | {
+                        actions: better_auth_plugins.Subset<"function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team", better_auth_plugins.Statements>[key];
                         connector: "OR" | "AND";
                     } | undefined; } : never, connector?: "OR" | "AND"): better_auth_plugins.AuthorizeResponse;
-                    statements: better_auth_plugins.Subset<"function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config", better_auth_plugins.Statements>;
+                    statements: better_auth_plugins.Subset<"function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team", better_auth_plugins.Statements>;
                 };
             };
             sendInvitationEmail(data: {
@@ -992,25 +992,25 @@ declare function createAuth(config: BetterAuthConfig): better_auth.Auth<{
             ac: better_auth_plugins.AccessControl;
             roles: {
                 member: {
-                    authorize<K_1 extends "function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins.Subset<"function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config", better_auth_plugins.Statements>[key] | {
-                        actions: better_auth_plugins.Subset<"function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config", better_auth_plugins.Statements>[key];
+                    authorize<K_1 extends "function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins.Subset<"function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team", better_auth_plugins.Statements>[key] | {
+                        actions: better_auth_plugins.Subset<"function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team", better_auth_plugins.Statements>[key];
                         connector: "OR" | "AND";
                     } | undefined; } : never, connector?: "OR" | "AND"): better_auth_plugins.AuthorizeResponse;
-                    statements: better_auth_plugins.Subset<"function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config", better_auth_plugins.Statements>;
+                    statements: better_auth_plugins.Subset<"function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team", better_auth_plugins.Statements>;
                 };
                 admin: {
-                    authorize<K_1 extends "function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins.Subset<"function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config", better_auth_plugins.Statements>[key] | {
-                        actions: better_auth_plugins.Subset<"function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config", better_auth_plugins.Statements>[key];
+                    authorize<K_1 extends "function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins.Subset<"function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team", better_auth_plugins.Statements>[key] | {
+                        actions: better_auth_plugins.Subset<"function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team", better_auth_plugins.Statements>[key];
                         connector: "OR" | "AND";
                     } | undefined; } : never, connector?: "OR" | "AND"): better_auth_plugins.AuthorizeResponse;
-                    statements: better_auth_plugins.Subset<"function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config", better_auth_plugins.Statements>;
+                    statements: better_auth_plugins.Subset<"function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team", better_auth_plugins.Statements>;
                 };
                 owner: {
-                    authorize<K_1 extends "function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins.Subset<"function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config", better_auth_plugins.Statements>[key] | {
-                        actions: better_auth_plugins.Subset<"function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config", better_auth_plugins.Statements>[key];
+                    authorize<K_1 extends "function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins.Subset<"function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team", better_auth_plugins.Statements>[key] | {
+                        actions: better_auth_plugins.Subset<"function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team", better_auth_plugins.Statements>[key];
                         connector: "OR" | "AND";
                     } | undefined; } : never, connector?: "OR" | "AND"): better_auth_plugins.AuthorizeResponse;
-                    statements: better_auth_plugins.Subset<"function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config", better_auth_plugins.Statements>;
+                    statements: better_auth_plugins.Subset<"function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team", better_auth_plugins.Statements>;
                 };
             };
             sendInvitationEmail(data: {

package/dist/auth/auth.js

@@ -1,7 +1,7 @@
-import { generateId } from '../chunk-ROXPFQAM.js';
-import { env } from '../chunk-LL6F3EAR.js';
-import { ssoProvider } from '../chunk-NFTJ5JBY.js';
-import { ownerRole, adminRole, memberRole, ac } from '../chunk-VMSYBWFH.js';
+import { generateId } from '../chunk-3HACEHXF.js';
+import { env } from '../chunk-RUTYLJB7.js';
+import { ssoProvider } from '../chunk-GENLXHZ4.js';
+import { ownerRole, adminRole, memberRole, ac } from '../chunk-JNBVHWXX.js';
 import { sso } from '@better-auth/sso';
 import { betterAuth } from 'better-auth';
 import { drizzleAdapter } from 'better-auth/adapters/drizzle';
@@ -82,6 +82,13 @@ function createAuth(config) {
         enabled: true,
         ...cookieDomain && { domain: cookieDomain }
       },
+      defaultCookieAttributes: {
+        sameSite: "none",
+        secure: true,
+        httpOnly: true,
+        partitioned: true,
+        ...cookieDomain && { domain: cookieDomain }
+      },
       ...config.advanced
     },
     trustedOrigins: [

package/dist/auth/permissions.d.ts

@@ -3,25 +3,25 @@ import { AccessControl } from 'better-auth/plugins/access';
 
 declare const ac: AccessControl;
 declare const memberRole: {
-    authorize<K_1 extends "function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins.Subset<"function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config", better_auth_plugins.Statements>[key] | {
-        actions: better_auth_plugins.Subset<"function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config", better_auth_plugins.Statements>[key];
+    authorize<K_1 extends "function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins.Subset<"function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team", better_auth_plugins.Statements>[key] | {
+        actions: better_auth_plugins.Subset<"function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team", better_auth_plugins.Statements>[key];
         connector: "OR" | "AND";
     } | undefined; } : never, connector?: "OR" | "AND"): better_auth_plugins.AuthorizeResponse;
-    statements: better_auth_plugins.Subset<"function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config", better_auth_plugins.Statements>;
+    statements: better_auth_plugins.Subset<"function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team", better_auth_plugins.Statements>;
 };
 declare const adminRole: {
-    authorize<K_1 extends "function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins.Subset<"function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config", better_auth_plugins.Statements>[key] | {
-        actions: better_auth_plugins.Subset<"function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config", better_auth_plugins.Statements>[key];
+    authorize<K_1 extends "function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins.Subset<"function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team", better_auth_plugins.Statements>[key] | {
+        actions: better_auth_plugins.Subset<"function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team", better_auth_plugins.Statements>[key];
         connector: "OR" | "AND";
     } | undefined; } : never, connector?: "OR" | "AND"): better_auth_plugins.AuthorizeResponse;
-    statements: better_auth_plugins.Subset<"function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config", better_auth_plugins.Statements>;
+    statements: better_auth_plugins.Subset<"function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team", better_auth_plugins.Statements>;
 };
 declare const ownerRole: {
-    authorize<K_1 extends "function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins.Subset<"function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config", better_auth_plugins.Statements>[key] | {
-        actions: better_auth_plugins.Subset<"function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config", better_auth_plugins.Statements>[key];
+    authorize<K_1 extends "function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins.Subset<"function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team", better_auth_plugins.Statements>[key] | {
+        actions: better_auth_plugins.Subset<"function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team", better_auth_plugins.Statements>[key];
         connector: "OR" | "AND";
     } | undefined; } : never, connector?: "OR" | "AND"): better_auth_plugins.AuthorizeResponse;
-    statements: better_auth_plugins.Subset<"function" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config", better_auth_plugins.Statements>;
+    statements: better_auth_plugins.Subset<"function" | "organization" | "ac" | "member" | "project" | "agent" | "sub_agent" | "tool" | "api_key" | "credential" | "data_component" | "artifact_component" | "external_agent" | "context_config" | "invitation" | "team", better_auth_plugins.Statements>;
 };
 
 export { ac, adminRole, memberRole, ownerRole };

package/dist/auth/permissions.js

@@ -1 +1 @@
-export { ac, adminRole, memberRole, ownerRole } from '../chunk-VMSYBWFH.js';
+export { ac, adminRole, memberRole, ownerRole } from '../chunk-JNBVHWXX.js';

package/dist/{chunk-ROXPFQAM.js → chunk-3HACEHXF.js}

@@ -1,11 +1,10 @@
-import { loadEnvironmentFiles, env } from './chunk-LL6F3EAR.js';
+import { loadEnvironmentFiles, env } from './chunk-RUTYLJB7.js';
 import { getLogger } from './chunk-DN4B564Y.js';
 import { CredentialStoreType, MCPTransportType } from './chunk-YFHT5M2R.js';
-import { z } from 'zod';
+import { z } from '@hono/zod-openapi';
 import { customAlphabet } from 'nanoid';
 import { scrypt, randomBytes, timingSafeEqual } from 'crypto';
 import { promisify } from 'util';
-import { z as z$1 } from '@hono/zod-openapi';
 import { HTTPException } from 'hono/http-exception';
 import { Client } from '@modelcontextprotocol/sdk/client/index.js';
 import { SSEClientTransport } from '@modelcontextprotocol/sdk/client/sse.js';
@@ -195,7 +194,7 @@ function toISODateString(dateValue) {
   }
   return dateValue.toISOString();
 }
-var ErrorCode = z$1.enum([
+var ErrorCode = z.enum([
   "bad_request",
   "unauthorized",
   "forbidden",
@@ -214,28 +213,28 @@ var errorCodeToHttpStatus = {
   internal_server_error: 500
 };
 var ERROR_DOCS_BASE_URL = "https://docs.inkeep.com/agents-api/errors";
-var problemDetailsSchema = z$1.object({
+var problemDetailsSchema = z.object({
   // type: z.string().url().openapi({
   //   description: "A URI reference that identifies the problem type.",
   //   example: `${ERROR_DOCS_BASE_URL}#not-found`,
   // }),
-  title: z$1.string().openapi({
+  title: z.string().openapi({
     description: "A short, human-readable summary of the problem type.",
     example: "Resource Not Found"
   }),
-  status: z$1.number().int().openapi({
+  status: z.number().int().openapi({
     description: "The HTTP status code.",
     example: 404
   }),
-  detail: z$1.string().openapi({
+  detail: z.string().openapi({
     description: "A human-readable explanation specific to this occurrence of the problem.",
     example: "The requested resource was not found."
   }),
-  instance: z$1.string().optional().openapi({
+  instance: z.string().optional().openapi({
     description: "A URI reference that identifies the specific occurrence of the problem.",
     example: "/conversations/123"
   }),
-  requestId: z$1.string().optional().openapi({
+  requestId: z.string().optional().openapi({
     description: "A unique identifier for the request, useful for troubleshooting.",
     example: "req_1234567890"
   }),
@@ -244,13 +243,13 @@ var problemDetailsSchema = z$1.object({
     example: "not_found"
   })
 }).openapi("ProblemDetails");
-var errorResponseSchema = z$1.object({
-  error: z$1.object({
+var errorResponseSchema = z.object({
+  error: z.object({
     code: ErrorCode.openapi({
       description: "A short code indicating the error code returned.",
       example: "not_found"
     }),
-    message: z$1.string().openapi({
+    message: z.string().openapi({
       description: "A human readable error message.",
       example: "The requested resource was not found."
     })
@@ -260,7 +259,8 @@ function createApiError({
   code,
   message,
   instance,
-  requestId
+  requestId,
+  extensions
 }) {
   const status = errorCodeToHttpStatus[code];
   const title = getTitleFromCode(code);
@@ -275,7 +275,8 @@ function createApiError({
   const errorMessage = message.length > 100 ? `${message.substring(0, 97)}...` : message;
   const responseBody = {
     ...problemDetails,
-    error: { code, message: errorMessage }
+    error: { code, message: errorMessage },
+    ...extensions && extensions
   };
   const res = new Response(JSON.stringify(responseBody), {
     status,
@@ -388,15 +389,15 @@ var errorSchemaFactory = (code, description) => ({
   content: {
     "application/problem+json": {
       schema: problemDetailsSchema.extend({
-        code: z$1.literal(code).openapi({
+        code: z.literal(code).openapi({
           description: "A short code indicating the error code returned.",
           example: code
         }),
-        detail: z$1.string().openapi({
+        detail: z.string().openapi({
           description: "A detailed explanation specific to this occurrence of the problem, providing context and specifics about what went wrong.",
           example: description
         }),
-        title: z$1.string().openapi({
+        title: z.string().openapi({
           description: "A short, human-readable summary of the problem type.",
           example: getTitleFromCode(code)
         }),
@@ -404,16 +405,16 @@ var errorSchemaFactory = (code, description) => ({
         //   description: "A URI reference that identifies the problem type.",
         //   example: `${ERROR_DOCS_BASE_URL}#${code}`,
         // }),
-        status: z$1.number().int().openapi({
+        status: z.number().int().openapi({
           description: "The HTTP status code.",
           example: errorCodeToHttpStatus[code]
         }),
-        error: z$1.object({
-          code: z$1.literal(code).openapi({
+        error: z.object({
+          code: z.literal(code).openapi({
             description: "A short code indicating the error code returned.",
             example: code
           }),
-          message: z$1.string().openapi({
+          message: z.string().openapi({
             description: "A concise error message suitable for display to end users. May be truncated if the full detail is long.",
             example: description.length > 100 ? `${description.substring(0, 97)}...` : description
           })

package/dist/{chunk-W3QDM7WH.js → chunk-5QZSNATS.js}

@@ -1,5 +1,5 @@
-import { AgentWithinContextOfProjectSchema, resourceIdSchema, MAX_ID_LENGTH } from './chunk-K6GMXJPW.js';
-import { z } from 'zod';
+import { AgentWithinContextOfProjectSchema, resourceIdSchema, MAX_ID_LENGTH } from './chunk-XHODTX4H.js';
+import { z } from '@hono/zod-openapi';
 
 // src/validation/cycleDetection.ts
 function detectDelegationCycles(agentData) {

package/dist/{chunk-7GZHUB4J.js → chunk-6CYQZ5KX.js}

@@ -1,5 +1,5 @@
 import { getLogger } from './chunk-DN4B564Y.js';
-import { z } from 'zod';
+import { z } from '@hono/zod-openapi';
 
 var logger = getLogger("schema-conversion");
 function convertZodToJsonSchema(zodSchema) {

package/dist/{chunk-ZEZCCHV7.js → chunk-BJLC7EI4.js}

@@ -1,6 +1,6 @@
 import { schemaValidationDefaults } from './chunk-Z64UK4CA.js';
-import { loadEnvironmentFiles } from './chunk-LL6F3EAR.js';
-import { z } from 'zod';
+import { loadEnvironmentFiles } from './chunk-RUTYLJB7.js';
+import { z } from '@hono/zod-openapi';
 
 loadEnvironmentFiles();
 var constantsSchema = z.object(

package/dist/{chunk-PVRIMF6N.js → chunk-DEYPSEXR.js}

@@ -1,4 +1,4 @@
-import { verification, user, ssoProvider, session, organization, member, invitation, account } from './chunk-NFTJ5JBY.js';
+import { verification, user, ssoProvider, session, organization, member, invitation, account } from './chunk-GENLXHZ4.js';
 import { __export } from './chunk-SIAA4J6H.js';
 import { relations } from 'drizzle-orm';
 import { pgTable, varchar, text, timestamp, jsonb, primaryKey, foreignKey, integer, index, unique } from 'drizzle-orm/pg-core';