@inkeep/agents-core 0.58.19 → 0.58.20

package/dist/auth/auth-validation-schemas.d.ts

@@ -1,9 +1,9 @@
 import { z } from "@hono/zod-openapi";
 import * as drizzle_orm_pg_core0 from "drizzle-orm/pg-core";
-import * as drizzle_zod0 from "drizzle-zod";
+import * as drizzle_zod3 from "drizzle-zod";
 
 //#region src/auth/auth-validation-schemas.d.ts
-declare const UserSelectSchema: drizzle_zod0.BuildSchema<"select", {
+declare const UserSelectSchema: drizzle_zod3.BuildSchema<"select", {
   id: drizzle_orm_pg_core0.PgColumn<{
     name: "id";
     tableName: "user";
@@ -124,7 +124,7 @@ declare const UserSelectSchema: drizzle_zod0.BuildSchema<"select", {
     generated: undefined;
   }, {}, {}>;
 }, undefined, undefined>;
-declare const UserInsertSchema: drizzle_zod0.BuildSchema<"insert", {
+declare const UserInsertSchema: drizzle_zod3.BuildSchema<"insert", {
   id: drizzle_orm_pg_core0.PgColumn<{
     name: "id";
     tableName: "user";
@@ -245,7 +245,7 @@ declare const UserInsertSchema: drizzle_zod0.BuildSchema<"insert", {
     generated: undefined;
   }, {}, {}>;
 }, undefined, undefined>;
-declare const SessionSelectSchema: drizzle_zod0.BuildSchema<"select", {
+declare const SessionSelectSchema: drizzle_zod3.BuildSchema<"select", {
   id: drizzle_orm_pg_core0.PgColumn<{
     name: "id";
     tableName: "session";
@@ -400,7 +400,7 @@ declare const SessionSelectSchema: drizzle_zod0.BuildSchema<"select", {
     generated: undefined;
   }, {}, {}>;
 }, undefined, undefined>;
-declare const SessionInsertSchema: drizzle_zod0.BuildSchema<"insert", {
+declare const SessionInsertSchema: drizzle_zod3.BuildSchema<"insert", {
   id: drizzle_orm_pg_core0.PgColumn<{
     name: "id";
     tableName: "session";
@@ -555,7 +555,7 @@ declare const SessionInsertSchema: drizzle_zod0.BuildSchema<"insert", {
     generated: undefined;
   }, {}, {}>;
 }, undefined, undefined>;
-declare const AccountSelectSchema: drizzle_zod0.BuildSchema<"select", {
+declare const AccountSelectSchema: drizzle_zod3.BuildSchema<"select", {
   id: drizzle_orm_pg_core0.PgColumn<{
     name: "id";
     tableName: "account";
@@ -778,7 +778,7 @@ declare const AccountSelectSchema: drizzle_zod0.BuildSchema<"select", {
     generated: undefined;
   }, {}, {}>;
 }, undefined, undefined>;
-declare const AccountInsertSchema: drizzle_zod0.BuildSchema<"insert", {
+declare const AccountInsertSchema: drizzle_zod3.BuildSchema<"insert", {
   id: drizzle_orm_pg_core0.PgColumn<{
     name: "id";
     tableName: "account";
@@ -1001,7 +1001,7 @@ declare const AccountInsertSchema: drizzle_zod0.BuildSchema<"insert", {
     generated: undefined;
   }, {}, {}>;
 }, undefined, undefined>;
-declare const OrganizationSelectSchema: drizzle_zod0.BuildSchema<"select", {
+declare const OrganizationSelectSchema: drizzle_zod3.BuildSchema<"select", {
   id: drizzle_orm_pg_core0.PgColumn<{
     name: "id";
     tableName: "organization";
@@ -1139,7 +1139,7 @@ declare const OrganizationSelectSchema: drizzle_zod0.BuildSchema<"select", {
     generated: undefined;
   }, {}, {}>;
 }, undefined, undefined>;
-declare const OrganizationInsertSchema: drizzle_zod0.BuildSchema<"insert", {
+declare const OrganizationInsertSchema: drizzle_zod3.BuildSchema<"insert", {
   id: drizzle_orm_pg_core0.PgColumn<{
     name: "id";
     tableName: "organization";
@@ -1277,7 +1277,7 @@ declare const OrganizationInsertSchema: drizzle_zod0.BuildSchema<"insert", {
     generated: undefined;
   }, {}, {}>;
 }, undefined, undefined>;
-declare const MemberSelectSchema: drizzle_zod0.BuildSchema<"select", {
+declare const MemberSelectSchema: drizzle_zod3.BuildSchema<"select", {
   id: drizzle_orm_pg_core0.PgColumn<{
     name: "id";
     tableName: "member";
@@ -1364,7 +1364,7 @@ declare const MemberSelectSchema: drizzle_zod0.BuildSchema<"select", {
     generated: undefined;
   }, {}, {}>;
 }, undefined, undefined>;
-declare const MemberInsertSchema: drizzle_zod0.BuildSchema<"insert", {
+declare const MemberInsertSchema: drizzle_zod3.BuildSchema<"insert", {
   id: drizzle_orm_pg_core0.PgColumn<{
     name: "id";
     tableName: "member";
@@ -1451,7 +1451,7 @@ declare const MemberInsertSchema: drizzle_zod0.BuildSchema<"insert", {
     generated: undefined;
   }, {}, {}>;
 }, undefined, undefined>;
-declare const InvitationSelectSchema: drizzle_zod0.BuildSchema<"select", {
+declare const InvitationSelectSchema: drizzle_zod3.BuildSchema<"select", {
   id: drizzle_orm_pg_core0.PgColumn<{
     name: "id";
     tableName: "invitation";
@@ -1606,7 +1606,7 @@ declare const InvitationSelectSchema: drizzle_zod0.BuildSchema<"select", {
     generated: undefined;
   }, {}, {}>;
 }, undefined, undefined>;
-declare const InvitationInsertSchema: drizzle_zod0.BuildSchema<"insert", {
+declare const InvitationInsertSchema: drizzle_zod3.BuildSchema<"insert", {
   id: drizzle_orm_pg_core0.PgColumn<{
     name: "id";
     tableName: "invitation";
@@ -1761,7 +1761,7 @@ declare const InvitationInsertSchema: drizzle_zod0.BuildSchema<"insert", {
     generated: undefined;
   }, {}, {}>;
 }, undefined, undefined>;
-declare const DeviceCodeSelectSchema: drizzle_zod0.BuildSchema<"select", {
+declare const DeviceCodeSelectSchema: drizzle_zod3.BuildSchema<"select", {
   id: drizzle_orm_pg_core0.PgColumn<{
     name: "id";
     tableName: "device_code";
@@ -1933,7 +1933,7 @@ declare const DeviceCodeSelectSchema: drizzle_zod0.BuildSchema<"select", {
     generated: undefined;
   }, {}, {}>;
 }, undefined, undefined>;
-declare const DeviceCodeInsertSchema: drizzle_zod0.BuildSchema<"insert", {
+declare const DeviceCodeInsertSchema: drizzle_zod3.BuildSchema<"insert", {
   id: drizzle_orm_pg_core0.PgColumn<{
     name: "id";
     tableName: "device_code";
@@ -2105,7 +2105,7 @@ declare const DeviceCodeInsertSchema: drizzle_zod0.BuildSchema<"insert", {
     generated: undefined;
   }, {}, {}>;
 }, undefined, undefined>;
-declare const VerificationSelectSchema: drizzle_zod0.BuildSchema<"select", {
+declare const VerificationSelectSchema: drizzle_zod3.BuildSchema<"select", {
   id: drizzle_orm_pg_core0.PgColumn<{
     name: "id";
     tableName: "verification";
@@ -2209,7 +2209,7 @@ declare const VerificationSelectSchema: drizzle_zod0.BuildSchema<"select", {
     generated: undefined;
   }, {}, {}>;
 }, undefined, undefined>;
-declare const VerificationInsertSchema: drizzle_zod0.BuildSchema<"insert", {
+declare const VerificationInsertSchema: drizzle_zod3.BuildSchema<"insert", {
   id: drizzle_orm_pg_core0.PgColumn<{
     name: "id";
     tableName: "verification";

package/dist/auth/auth.d.ts

@@ -4,7 +4,7 @@ import * as zod0 from "zod";
 import * as better_auth0 from "better-auth";
 import { BetterAuthAdvancedOptions } from "better-auth";
 import * as _better_auth_sso0 from "@better-auth/sso";
-import * as better_auth_plugins20 from "better-auth/plugins";
+import * as better_auth_plugins0 from "better-auth/plugins";
 import { GoogleOptions } from "better-auth/social-providers";
 
 //#region src/auth/auth.d.ts
@@ -277,7 +277,7 @@ declare function createAuth(config: BetterAuthConfig): better_auth0.Auth<{
         handler: (inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<void>;
       }[];
     };
-    options: better_auth_plugins20.BearerOptions | undefined;
+    options: better_auth_plugins0.BearerOptions | undefined;
   }, {
     id: "sso";
     endpoints: {
@@ -1268,30 +1268,30 @@ declare function createAuth(config: BetterAuthConfig): better_auth0.Auth<{
         handler: (inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<void>;
       }[];
     };
-  }, better_auth_plugins20.DefaultOrganizationPlugin<{
+  }, better_auth_plugins0.DefaultOrganizationPlugin<{
     allowUserToCreateOrganization: true;
-    ac: better_auth_plugins20.AccessControl;
+    ac: better_auth_plugins0.AccessControl;
     roles: {
       member: {
-        authorize<K_1 extends "project" | "organization" | "team" | "member" | "ac" | "invitation">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>[key] | {
-          actions: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>[key];
+        authorize<K_1 extends "project" | "organization" | "member" | "invitation" | "ac" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"project" | "organization" | "member" | "invitation" | "ac" | "team", better_auth_plugins0.Statements>[key] | {
+          actions: better_auth_plugins0.Subset<"project" | "organization" | "member" | "invitation" | "ac" | "team", better_auth_plugins0.Statements>[key];
           connector: "OR" | "AND";
-        } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins20.AuthorizeResponse;
-        statements: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>;
+        } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
+        statements: better_auth_plugins0.Subset<"project" | "organization" | "member" | "invitation" | "ac" | "team", better_auth_plugins0.Statements>;
       };
       admin: {
-        authorize<K_1 extends "project" | "organization" | "team" | "member" | "ac" | "invitation">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>[key] | {
-          actions: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>[key];
+        authorize<K_1 extends "project" | "organization" | "member" | "invitation" | "ac" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"project" | "organization" | "member" | "invitation" | "ac" | "team", better_auth_plugins0.Statements>[key] | {
+          actions: better_auth_plugins0.Subset<"project" | "organization" | "member" | "invitation" | "ac" | "team", better_auth_plugins0.Statements>[key];
           connector: "OR" | "AND";
-        } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins20.AuthorizeResponse;
-        statements: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>;
+        } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
+        statements: better_auth_plugins0.Subset<"project" | "organization" | "member" | "invitation" | "ac" | "team", better_auth_plugins0.Statements>;
       };
       owner: {
-        authorize<K_1 extends "project" | "organization" | "team" | "member" | "ac" | "invitation">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>[key] | {
-          actions: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>[key];
+        authorize<K_1 extends "project" | "organization" | "member" | "invitation" | "ac" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"project" | "organization" | "member" | "invitation" | "ac" | "team", better_auth_plugins0.Statements>[key] | {
+          actions: better_auth_plugins0.Subset<"project" | "organization" | "member" | "invitation" | "ac" | "team", better_auth_plugins0.Statements>[key];
           connector: "OR" | "AND";
-        } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins20.AuthorizeResponse;
-        statements: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>;
+        } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
+        statements: better_auth_plugins0.Subset<"project" | "organization" | "member" | "invitation" | "ac" | "team", better_auth_plugins0.Statements>;
       };
     };
     creatorRole: "admin";
@@ -1302,9 +1302,9 @@ declare function createAuth(config: BetterAuthConfig): better_auth0.Auth<{
       id: string;
       role: string;
       email: string;
-      organization: better_auth_plugins20.Organization;
-      invitation: better_auth_plugins20.Invitation;
-      inviter: better_auth_plugins20.Member & {
+      organization: better_auth_plugins0.Organization;
+      invitation: better_auth_plugins0.Invitation;
+      inviter: better_auth_plugins0.Member & {
         user: better_auth0.User;
       };
     }): Promise<void>;
@@ -1339,28 +1339,28 @@ declare function createAuth(config: BetterAuthConfig): better_auth0.Auth<{
         user,
         organization: org
       }: {
-        invitation: better_auth_plugins20.Invitation & Record<string, any>;
-        member: better_auth_plugins20.Member & Record<string, any>;
+        invitation: better_auth_plugins0.Invitation & Record<string, any>;
+        member: better_auth_plugins0.Member & Record<string, any>;
         user: better_auth0.User & Record<string, any>;
-        organization: better_auth_plugins20.Organization & Record<string, any>;
+        organization: better_auth_plugins0.Organization & Record<string, any>;
       }) => Promise<void>;
       beforeUpdateMemberRole: ({
         member,
         organization: org,
         newRole
       }: {
-        member: better_auth_plugins20.Member & Record<string, any>;
+        member: better_auth_plugins0.Member & Record<string, any>;
         newRole: string;
         user: better_auth0.User & Record<string, any>;
-        organization: better_auth_plugins20.Organization & Record<string, any>;
+        organization: better_auth_plugins0.Organization & Record<string, any>;
       }) => Promise<void>;
       beforeRemoveMember: ({
         member,
         organization: org
       }: {
-        member: better_auth_plugins20.Member & Record<string, any>;
+        member: better_auth_plugins0.Member & Record<string, any>;
         user: better_auth0.User & Record<string, any>;
-        organization: better_auth_plugins20.Organization & Record<string, any>;
+        organization: better_auth_plugins0.Organization & Record<string, any>;
       }) => Promise<void>;
     };
   }>, {
@@ -1701,8 +1701,8 @@ declare function createAuth(config: BetterAuthConfig): better_auth0.Auth<{
       readonly AUTHENTICATION_REQUIRED: "Authentication required";
     };
     options: Partial<{
-      expiresIn: better_auth_plugins20.TimeString;
-      interval: better_auth_plugins20.TimeString;
+      expiresIn: better_auth_plugins0.TimeString;
+      interval: better_auth_plugins0.TimeString;
       deviceCodeLength: number;
       userCodeLength: number;
       schema: {

package/dist/auth/permissions.d.ts

@@ -1,29 +1,29 @@
-import * as better_auth_plugins0 from "better-auth/plugins";
+import * as better_auth_plugins35 from "better-auth/plugins";
 import { AccessControl } from "better-auth/plugins/access";
 import { organizationClient } from "better-auth/client/plugins";
 
 //#region src/auth/permissions.d.ts
 declare const ac: AccessControl;
 declare const memberRole: {
-  authorize<K_1 extends "project" | "organization" | "team" | "member" | "ac" | "invitation">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>[key] | {
-    actions: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>[key];
+  authorize<K_1 extends "project" | "organization" | "member" | "invitation" | "ac" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins35.Subset<"project" | "organization" | "member" | "invitation" | "ac" | "team", better_auth_plugins35.Statements>[key] | {
+    actions: better_auth_plugins35.Subset<"project" | "organization" | "member" | "invitation" | "ac" | "team", better_auth_plugins35.Statements>[key];
     connector: "OR" | "AND";
-  } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
-  statements: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>;
+  } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins35.AuthorizeResponse;
+  statements: better_auth_plugins35.Subset<"project" | "organization" | "member" | "invitation" | "ac" | "team", better_auth_plugins35.Statements>;
 };
 declare const adminRole: {
-  authorize<K_1 extends "project" | "organization" | "team" | "member" | "ac" | "invitation">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>[key] | {
-    actions: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>[key];
+  authorize<K_1 extends "project" | "organization" | "member" | "invitation" | "ac" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins35.Subset<"project" | "organization" | "member" | "invitation" | "ac" | "team", better_auth_plugins35.Statements>[key] | {
+    actions: better_auth_plugins35.Subset<"project" | "organization" | "member" | "invitation" | "ac" | "team", better_auth_plugins35.Statements>[key];
     connector: "OR" | "AND";
-  } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
-  statements: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>;
+  } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins35.AuthorizeResponse;
+  statements: better_auth_plugins35.Subset<"project" | "organization" | "member" | "invitation" | "ac" | "team", better_auth_plugins35.Statements>;
 };
 declare const ownerRole: {
-  authorize<K_1 extends "project" | "organization" | "team" | "member" | "ac" | "invitation">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>[key] | {
-    actions: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>[key];
+  authorize<K_1 extends "project" | "organization" | "member" | "invitation" | "ac" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins35.Subset<"project" | "organization" | "member" | "invitation" | "ac" | "team", better_auth_plugins35.Statements>[key] | {
+    actions: better_auth_plugins35.Subset<"project" | "organization" | "member" | "invitation" | "ac" | "team", better_auth_plugins35.Statements>[key];
     connector: "OR" | "AND";
-  } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
-  statements: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>;
+  } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins35.AuthorizeResponse;
+  statements: better_auth_plugins35.Subset<"project" | "organization" | "member" | "invitation" | "ac" | "team", better_auth_plugins35.Statements>;
 };
 //#endregion
 export { ac, adminRole, memberRole, organizationClient, ownerRole };

package/dist/data-access/manage/contextConfigs.d.ts

@@ -10,25 +10,25 @@ declare const getContextConfigById: (db: AgentsManageDatabaseClient) => (params:
   id: string;
 }) => Promise<{
   id: string;
-  tenantId: string;
-  projectId: string;
-  agentId: string;
   createdAt: string;
   updatedAt: string;
+  tenantId: string;
+  projectId: string;
   headersSchema: unknown;
   contextVariables: Record<string, ContextFetchDefinition> | null;
+  agentId: string;
 } | undefined>;
 declare const listContextConfigs: (db: AgentsManageDatabaseClient) => (params: {
   scopes: AgentScopeConfig;
 }) => Promise<{
   id: string;
-  tenantId: string;
-  projectId: string;
-  agentId: string;
   createdAt: string;
   updatedAt: string;
+  tenantId: string;
+  projectId: string;
   headersSchema: unknown;
   contextVariables: Record<string, ContextFetchDefinition> | null;
+  agentId: string;
 }[]>;
 declare const listContextConfigsPaginated: (db: AgentsManageDatabaseClient) => (params: {
   scopes: AgentScopeConfig;
@@ -44,13 +44,13 @@ declare const listContextConfigsPaginated: (db: AgentsManageDatabaseClient) => (
 }>;
 declare const createContextConfig: (db: AgentsManageDatabaseClient) => (params: ContextConfigInsert) => Promise<{
   id: string;
-  tenantId: string;
-  projectId: string;
-  agentId: string;
   createdAt: string;
   updatedAt: string;
+  tenantId: string;
+  projectId: string;
   headersSchema: unknown;
   contextVariables: Record<string, ContextFetchDefinition> | null;
+  agentId: string;
 }>;
 declare const updateContextConfig: (db: AgentsManageDatabaseClient) => (params: {
   scopes: AgentScopeConfig;
@@ -84,13 +84,13 @@ declare const upsertContextConfig: (db: AgentsManageDatabaseClient) => (params:
   data: ContextConfigInsert;
 }) => Promise<{
   id: string;
-  tenantId: string;
-  projectId: string;
-  agentId: string;
   createdAt: string;
   updatedAt: string;
+  tenantId: string;
+  projectId: string;
   headersSchema: unknown;
   contextVariables: Record<string, ContextFetchDefinition> | null;
+  agentId: string;
 }>;
 //#endregion
 export { countContextConfigs, createContextConfig, deleteContextConfig, getContextConfigById, hasContextConfig, listContextConfigs, listContextConfigsPaginated, updateContextConfig, upsertContextConfig };

package/dist/data-access/manage/tools.js

@@ -18,6 +18,7 @@ import { toISODateString } from "../../utils/date.js";
 import { McpClient } from "../../utils/mcp-client.js";
 import { configureComposioMCPServer } from "../../utils/third-party-mcp-servers/composio-client.js";
 import { isThirdPartyMCPServerAuthenticated } from "../../utils/third-party-mcp-servers/third-party-check.js";
+import { TRUSTED_WORK_APP_MCP_PATHS, isTrustedWorkAppMcpUrl } from "../../utils/work-app-mcp.js";
 import "../../utils/index.js";
 import { isGithubWorkAppTool } from "../runtime/github-work-app-installations.js";
 import { getCredentialReference, getUserScopedCredentialReference } from "./credentialReferences.js";
@@ -122,14 +123,15 @@ const discoverToolsFromServer = async (tool, credentialReference, credentialStor
 			sessionId: tool.config.mcp.transport?.sessionId
 		};
 		configureComposioMCPServer(serverConfig, tool.tenantId, tool.projectId, tool.credentialScope === "user" ? "user" : "project", userId);
-		if (isGithubWorkAppTool(tool)) serverConfig.headers = {
+		const urlString = String(serverConfig.url);
+		if (isGithubWorkAppTool(tool) && isTrustedWorkAppMcpUrl(urlString, TRUSTED_WORK_APP_MCP_PATHS.github, env.INKEEP_AGENTS_API_URL)) serverConfig.headers = {
 			...serverConfig.headers,
 			"x-inkeep-tool-id": tool.id,
 			"x-inkeep-tenant-id": tool.tenantId,
 			"x-inkeep-project-id": tool.projectId,
 			Authorization: `Bearer ${env.GITHUB_MCP_API_KEY}`
 		};
-		if (isSlackWorkAppTool(tool)) serverConfig.headers = {
+		if (isSlackWorkAppTool(tool) && isTrustedWorkAppMcpUrl(urlString, TRUSTED_WORK_APP_MCP_PATHS.slack, env.INKEEP_AGENTS_API_URL)) serverConfig.headers = {
 			...serverConfig.headers,
 			"x-inkeep-tool-id": tool.id,
 			"x-inkeep-tenant-id": tool.tenantId,

package/dist/data-access/runtime/cascade-delete.d.ts

@@ -10,6 +10,10 @@ type CascadeDeleteResult = {
   conversationsDeleted: number;
   tasksDeleted: number;
   contextCacheDeleted: number;
+  triggerInvocationsDeleted: number;
+  scheduledTriggerInvocationsDeleted: number;
+  datasetRunsDeleted: number;
+  evaluationRunsDeleted: number;
   apiKeysDeleted: number;
   slackChannelConfigsDeleted: number;
   slackWorkspaceDefaultsCleared: number;

package/dist/data-access/runtime/cascade-delete.js

@@ -1,4 +1,4 @@
-import { apiKeys, contextCache, conversations, tasks, workAppGitHubMcpToolAccessMode, workAppGitHubMcpToolRepositoryAccess, workAppGitHubProjectAccessMode, workAppGitHubProjectRepositoryAccess } from "../../db/runtime/runtime-schema.js";
+import { apiKeys, contextCache, conversations, datasetRun, evaluationRun, scheduledTriggerInvocations, tasks, triggerInvocations, workAppGitHubMcpToolAccessMode, workAppGitHubMcpToolRepositoryAccess, workAppGitHubProjectAccessMode, workAppGitHubProjectRepositoryAccess } from "../../db/runtime/runtime-schema.js";
 import { projectScopedWhere } from "../manage/scope-helpers.js";
 import { clearAppDefaultsByAgent, clearAppDefaultsByProject, deleteAppsByProject } from "./apps.js";
 import { deleteSlackMcpToolAccessConfig } from "./slack-work-app-mcp.js";
@@ -18,10 +18,18 @@ const cascadeDeleteByBranch = (db) => async (params) => {
 	const contextCacheResult = await db.delete(contextCache).where(and(projectScopedWhere(contextCache, scopes), sql`${contextCache.ref}->>'name' = ${fullBranchName}`)).returning();
 	const conversationsResult = await db.delete(conversations).where(and(projectScopedWhere(conversations, scopes), sql`${conversations.ref}->>'name' = ${fullBranchName}`)).returning();
 	const tasksResult = await db.delete(tasks).where(and(projectScopedWhere(tasks, scopes), sql`${tasks.ref}->>'name' = ${fullBranchName}`)).returning();
+	const triggerInvocationsResult = await db.delete(triggerInvocations).where(and(eq(triggerInvocations.tenantId, scopes.tenantId), eq(triggerInvocations.projectId, scopes.projectId), sql`${triggerInvocations.ref}->>'name' = ${fullBranchName}`)).returning();
+	const scheduledTriggerInvocationsResult = await db.delete(scheduledTriggerInvocations).where(and(eq(scheduledTriggerInvocations.tenantId, scopes.tenantId), eq(scheduledTriggerInvocations.projectId, scopes.projectId), sql`${scheduledTriggerInvocations.ref}->>'name' = ${fullBranchName}`)).returning();
+	const datasetRunsResult = await db.delete(datasetRun).where(and(eq(datasetRun.tenantId, scopes.tenantId), eq(datasetRun.projectId, scopes.projectId), sql`${datasetRun.ref}->>'name' = ${fullBranchName}`)).returning();
+	const evaluationRunsResult = await db.delete(evaluationRun).where(and(eq(evaluationRun.tenantId, scopes.tenantId), eq(evaluationRun.projectId, scopes.projectId), sql`${evaluationRun.ref}->>'name' = ${fullBranchName}`)).returning();
 	return {
 		conversationsDeleted: conversationsResult.length,
 		tasksDeleted: tasksResult.length,
 		contextCacheDeleted: contextCacheResult.length,
+		triggerInvocationsDeleted: triggerInvocationsResult.length,
+		scheduledTriggerInvocationsDeleted: scheduledTriggerInvocationsResult.length,
+		datasetRunsDeleted: datasetRunsResult.length,
+		evaluationRunsDeleted: evaluationRunsResult.length,
 		apiKeysDeleted: 0,
 		slackChannelConfigsDeleted: 0,
 		slackWorkspaceDefaultsCleared: 0,
@@ -42,6 +50,10 @@ const cascadeDeleteByProject = (db) => async (params) => {
 	const contextCacheResult = await db.delete(contextCache).where(and(projectScopedWhere(contextCache, scopes), sql`${contextCache.ref}->>'name' = ${fullBranchName}`)).returning();
 	const conversationsResult = await db.delete(conversations).where(and(projectScopedWhere(conversations, scopes), sql`${conversations.ref}->>'name' = ${fullBranchName}`)).returning();
 	const tasksResult = await db.delete(tasks).where(and(projectScopedWhere(tasks, scopes), sql`${tasks.ref}->>'name' = ${fullBranchName}`)).returning();
+	const triggerInvocationsResult = await db.delete(triggerInvocations).where(and(eq(triggerInvocations.tenantId, scopes.tenantId), eq(triggerInvocations.projectId, scopes.projectId), sql`${triggerInvocations.ref}->>'name' = ${fullBranchName}`)).returning();
+	const scheduledTriggerInvocationsResult = await db.delete(scheduledTriggerInvocations).where(and(eq(scheduledTriggerInvocations.tenantId, scopes.tenantId), eq(scheduledTriggerInvocations.projectId, scopes.projectId), sql`${scheduledTriggerInvocations.ref}->>'name' = ${fullBranchName}`)).returning();
+	const datasetRunsResult = await db.delete(datasetRun).where(and(eq(datasetRun.tenantId, scopes.tenantId), eq(datasetRun.projectId, scopes.projectId), sql`${datasetRun.ref}->>'name' = ${fullBranchName}`)).returning();
+	const evaluationRunsResult = await db.delete(evaluationRun).where(and(eq(evaluationRun.tenantId, scopes.tenantId), eq(evaluationRun.projectId, scopes.projectId), sql`${evaluationRun.ref}->>'name' = ${fullBranchName}`)).returning();
 	const apiKeysResult = await db.delete(apiKeys).where(projectScopedWhere(apiKeys, scopes)).returning();
 	await cascadeDeleteGitHubAccessByProject(db)({
 		tenantId: scopes.tenantId,
@@ -56,6 +68,10 @@ const cascadeDeleteByProject = (db) => async (params) => {
 		conversationsDeleted: conversationsResult.length,
 		tasksDeleted: tasksResult.length,
 		contextCacheDeleted: contextCacheResult.length,
+		triggerInvocationsDeleted: triggerInvocationsResult.length,
+		scheduledTriggerInvocationsDeleted: scheduledTriggerInvocationsResult.length,
+		datasetRunsDeleted: datasetRunsResult.length,
+		evaluationRunsDeleted: evaluationRunsResult.length,
 		apiKeysDeleted: apiKeysResult.length,
 		slackChannelConfigsDeleted,
 		slackWorkspaceDefaultsCleared,
@@ -85,6 +101,8 @@ const cascadeDeleteByAgent = (db) => async (params) => {
 		}
 	}
 	tasksDeleted = (await db.delete(tasks).where(and(projectScopedWhere(tasks, scopes), eq(tasks.agentId, scopes.agentId), sql`${tasks.ref}->>'name' = ${fullBranchName}`)).returning()).length;
+	const triggerInvocationsResult = await db.delete(triggerInvocations).where(and(eq(triggerInvocations.tenantId, scopes.tenantId), eq(triggerInvocations.projectId, scopes.projectId), eq(triggerInvocations.agentId, scopes.agentId), sql`${triggerInvocations.ref}->>'name' = ${fullBranchName}`)).returning();
+	const scheduledTriggerInvocationsResult = await db.delete(scheduledTriggerInvocations).where(and(eq(scheduledTriggerInvocations.tenantId, scopes.tenantId), eq(scheduledTriggerInvocations.projectId, scopes.projectId), eq(scheduledTriggerInvocations.agentId, scopes.agentId), sql`${scheduledTriggerInvocations.ref}->>'name' = ${fullBranchName}`)).returning();
 	apiKeysDeleted = (await db.delete(apiKeys).where(and(projectScopedWhere(apiKeys, scopes), eq(apiKeys.agentId, scopes.agentId))).returning()).length;
 	const appDefaultsCleared = await clearAppDefaultsByAgent(db)(scopes.tenantId, scopes.agentId);
 	const slackChannelConfigsDeleted = await deleteWorkAppSlackChannelAgentConfigsByAgent(db)(scopes.tenantId, scopes.projectId, scopes.agentId);
@@ -94,6 +112,10 @@ const cascadeDeleteByAgent = (db) => async (params) => {
 		conversationsDeleted,
 		tasksDeleted,
 		contextCacheDeleted,
+		triggerInvocationsDeleted: triggerInvocationsResult.length,
+		scheduledTriggerInvocationsDeleted: scheduledTriggerInvocationsResult.length,
+		datasetRunsDeleted: 0,
+		evaluationRunsDeleted: 0,
 		apiKeysDeleted,
 		slackChannelConfigsDeleted,
 		slackWorkspaceDefaultsCleared,
@@ -121,6 +143,10 @@ const cascadeDeleteBySubAgent = (db) => async (params) => {
 		conversationsDeleted,
 		tasksDeleted: tasksResult.length,
 		contextCacheDeleted,
+		triggerInvocationsDeleted: 0,
+		scheduledTriggerInvocationsDeleted: 0,
+		datasetRunsDeleted: 0,
+		evaluationRunsDeleted: 0,
 		apiKeysDeleted: 0,
 		slackChannelConfigsDeleted: 0,
 		slackWorkspaceDefaultsCleared: 0,

package/dist/data-access/runtime/conversations.d.ts

@@ -25,7 +25,7 @@ declare const createConversation: (db: AgentsRunDatabaseClient) => (params: Conv
   updatedAt: string;
   metadata: ConversationMetadata | null;
   ref: {
-    type: "tag" | "commit" | "branch";
+    type: "commit" | "tag" | "branch";
     name: string;
     hash: string;
   } | null;
@@ -44,7 +44,7 @@ declare const updateConversation: (db: AgentsRunDatabaseClient) => (params: {
   agentId: string | null;
   activeSubAgentId: string;
   ref: {
-    type: "tag" | "commit" | "branch";
+    type: "commit" | "tag" | "branch";
     name: string;
     hash: string;
   } | null;
@@ -70,7 +70,7 @@ declare const updateConversationActiveSubAgent: (db: AgentsRunDatabaseClient) =>
   agentId: string | null;
   activeSubAgentId: string;
   ref: {
-    type: "tag" | "commit" | "branch";
+    type: "commit" | "tag" | "branch";
     name: string;
     hash: string;
   } | null;
@@ -94,7 +94,7 @@ declare const getConversation: (db: AgentsRunDatabaseClient) => (params: {
   updatedAt: string;
   metadata: ConversationMetadata | null;
   ref: {
-    type: "tag" | "commit" | "branch";
+    type: "commit" | "tag" | "branch";
     name: string;
     hash: string;
   } | null;
@@ -108,7 +108,7 @@ declare const createOrGetConversation: (db: AgentsRunDatabaseClient) => (input:
   tenantId: string;
   id: string;
   ref: {
-    type: "tag" | "commit" | "branch";
+    type: "commit" | "tag" | "branch";
     name: string;
     hash: string;
   };
@@ -130,7 +130,7 @@ declare const createOrGetConversation: (db: AgentsRunDatabaseClient) => (input:
   updatedAt: string;
   metadata: ConversationMetadata | null;
   ref: {
-    type: "tag" | "commit" | "branch";
+    type: "commit" | "tag" | "branch";
     name: string;
     hash: string;
   } | null;
@@ -162,7 +162,7 @@ declare const getActiveAgentForConversation: (db: AgentsRunDatabaseClient) => (p
   updatedAt: string;
   metadata: ConversationMetadata | null;
   ref: {
-    type: "tag" | "commit" | "branch";
+    type: "commit" | "tag" | "branch";
     name: string;
     hash: string;
   } | null;

package/dist/data-access/runtime/messages.d.ts

@@ -17,17 +17,17 @@ declare const getMessageById: (db: AgentsRunDatabaseClient) => (params: {
   updatedAt: string;
   metadata: MessageMetadata | null;
   content: MessageContent;
-  role: string;
+  conversationId: string;
   fromSubAgentId: string | null;
   toSubAgentId: string | null;
   fromExternalAgentId: string | null;
   toExternalAgentId: string | null;
   taskId: string | null;
   a2aTaskId: string | null;
-  conversationId: string;
+  role: string;
+  visibility: string;
   fromTeamAgentId: string | null;
   toTeamAgentId: string | null;
-  visibility: string;
   messageType: string;
   parentMessageId: string | null;
   a2aSessionId: string | null;
@@ -151,17 +151,17 @@ declare const createMessage: (db: AgentsRunDatabaseClient) => (params: {
   updatedAt: string;
   metadata: MessageMetadata | null;
   content: MessageContent;
-  role: string;
+  conversationId: string;
   fromSubAgentId: string | null;
   toSubAgentId: string | null;
   fromExternalAgentId: string | null;
   toExternalAgentId: string | null;
   taskId: string | null;
   a2aTaskId: string | null;
-  conversationId: string;
+  role: string;
+  visibility: string;
   fromTeamAgentId: string | null;
   toTeamAgentId: string | null;
-  visibility: string;
   messageType: string;
   parentMessageId: string | null;
   a2aSessionId: string | null;
@@ -204,17 +204,17 @@ declare const deleteMessage: (db: AgentsRunDatabaseClient) => (params: {
   updatedAt: string;
   metadata: MessageMetadata | null;
   content: MessageContent;
-  role: string;
+  conversationId: string;
   fromSubAgentId: string | null;
   toSubAgentId: string | null;
   fromExternalAgentId: string | null;
   toExternalAgentId: string | null;
   taskId: string | null;
   a2aTaskId: string | null;
-  conversationId: string;
+  role: string;
+  visibility: string;
   fromTeamAgentId: string | null;
   toTeamAgentId: string | null;
-  visibility: string;
   messageType: string;
   parentMessageId: string | null;
   a2aSessionId: string | null;