@inkeep/agents-core 0.58.19 → 0.58.21

package/dist/auth/auth.d.ts

@@ -4,7 +4,7 @@ import * as zod0 from "zod";
 import * as better_auth0 from "better-auth";
 import { BetterAuthAdvancedOptions } from "better-auth";
 import * as _better_auth_sso0 from "@better-auth/sso";
-import * as better_auth_plugins20 from "better-auth/plugins";
+import * as better_auth_plugins0 from "better-auth/plugins";
 import { GoogleOptions } from "better-auth/social-providers";
 
 //#region src/auth/auth.d.ts
@@ -277,7 +277,7 @@ declare function createAuth(config: BetterAuthConfig): better_auth0.Auth<{
         handler: (inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<void>;
       }[];
     };
-    options: better_auth_plugins20.BearerOptions | undefined;
+    options: better_auth_plugins0.BearerOptions | undefined;
   }, {
     id: "sso";
     endpoints: {
@@ -1268,30 +1268,30 @@ declare function createAuth(config: BetterAuthConfig): better_auth0.Auth<{
         handler: (inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<void>;
       }[];
     };
-  }, better_auth_plugins20.DefaultOrganizationPlugin<{
+  }, better_auth_plugins0.DefaultOrganizationPlugin<{
     allowUserToCreateOrganization: true;
-    ac: better_auth_plugins20.AccessControl;
+    ac: better_auth_plugins0.AccessControl;
     roles: {
       member: {
-        authorize<K_1 extends "project" | "organization" | "team" | "member" | "ac" | "invitation">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>[key] | {
-          actions: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>[key];
+        authorize<K_1 extends "organization" | "member" | "invitation" | "ac" | "project" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins0.Statements>[key] | {
+          actions: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins0.Statements>[key];
           connector: "OR" | "AND";
-        } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins20.AuthorizeResponse;
-        statements: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>;
+        } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
+        statements: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins0.Statements>;
       };
       admin: {
-        authorize<K_1 extends "project" | "organization" | "team" | "member" | "ac" | "invitation">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>[key] | {
-          actions: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>[key];
+        authorize<K_1 extends "organization" | "member" | "invitation" | "ac" | "project" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins0.Statements>[key] | {
+          actions: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins0.Statements>[key];
           connector: "OR" | "AND";
-        } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins20.AuthorizeResponse;
-        statements: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>;
+        } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
+        statements: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins0.Statements>;
       };
       owner: {
-        authorize<K_1 extends "project" | "organization" | "team" | "member" | "ac" | "invitation">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>[key] | {
-          actions: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>[key];
+        authorize<K_1 extends "organization" | "member" | "invitation" | "ac" | "project" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins0.Statements>[key] | {
+          actions: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins0.Statements>[key];
           connector: "OR" | "AND";
-        } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins20.AuthorizeResponse;
-        statements: better_auth_plugins20.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins20.Statements>;
+        } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
+        statements: better_auth_plugins0.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins0.Statements>;
       };
     };
     creatorRole: "admin";
@@ -1302,9 +1302,9 @@ declare function createAuth(config: BetterAuthConfig): better_auth0.Auth<{
       id: string;
       role: string;
       email: string;
-      organization: better_auth_plugins20.Organization;
-      invitation: better_auth_plugins20.Invitation;
-      inviter: better_auth_plugins20.Member & {
+      organization: better_auth_plugins0.Organization;
+      invitation: better_auth_plugins0.Invitation;
+      inviter: better_auth_plugins0.Member & {
         user: better_auth0.User;
       };
     }): Promise<void>;
@@ -1339,28 +1339,28 @@ declare function createAuth(config: BetterAuthConfig): better_auth0.Auth<{
         user,
         organization: org
       }: {
-        invitation: better_auth_plugins20.Invitation & Record<string, any>;
-        member: better_auth_plugins20.Member & Record<string, any>;
+        invitation: better_auth_plugins0.Invitation & Record<string, any>;
+        member: better_auth_plugins0.Member & Record<string, any>;
         user: better_auth0.User & Record<string, any>;
-        organization: better_auth_plugins20.Organization & Record<string, any>;
+        organization: better_auth_plugins0.Organization & Record<string, any>;
       }) => Promise<void>;
       beforeUpdateMemberRole: ({
         member,
         organization: org,
         newRole
       }: {
-        member: better_auth_plugins20.Member & Record<string, any>;
+        member: better_auth_plugins0.Member & Record<string, any>;
         newRole: string;
         user: better_auth0.User & Record<string, any>;
-        organization: better_auth_plugins20.Organization & Record<string, any>;
+        organization: better_auth_plugins0.Organization & Record<string, any>;
       }) => Promise<void>;
       beforeRemoveMember: ({
         member,
         organization: org
       }: {
-        member: better_auth_plugins20.Member & Record<string, any>;
+        member: better_auth_plugins0.Member & Record<string, any>;
         user: better_auth0.User & Record<string, any>;
-        organization: better_auth_plugins20.Organization & Record<string, any>;
+        organization: better_auth_plugins0.Organization & Record<string, any>;
       }) => Promise<void>;
     };
   }>, {
@@ -1701,8 +1701,8 @@ declare function createAuth(config: BetterAuthConfig): better_auth0.Auth<{
       readonly AUTHENTICATION_REQUIRED: "Authentication required";
     };
     options: Partial<{
-      expiresIn: better_auth_plugins20.TimeString;
-      interval: better_auth_plugins20.TimeString;
+      expiresIn: better_auth_plugins0.TimeString;
+      interval: better_auth_plugins0.TimeString;
       deviceCodeLength: number;
       userCodeLength: number;
       schema: {

package/dist/auth/cookie-names.d.ts

@@ -0,0 +1,7 @@
+//#region src/auth/cookie-names.d.ts
+declare const AUTH_COOKIE_PREFIX = "better-auth";
+declare const SESSION_COOKIE_NAME = "better-auth.session_token";
+declare function isAuthCookie(cookieName: string): boolean;
+declare function isSessionCookie(cookieName: string): boolean;
+//#endregion
+export { AUTH_COOKIE_PREFIX, SESSION_COOKIE_NAME, isAuthCookie, isSessionCookie };

package/dist/auth/cookie-names.js

@@ -0,0 +1,13 @@
+//#region src/auth/cookie-names.ts
+const AUTH_COOKIE_PREFIX = "better-auth";
+const SECURE_PREFIX = "__Secure-";
+const SESSION_COOKIE_NAME = `${AUTH_COOKIE_PREFIX}.session_token`;
+function isAuthCookie(cookieName) {
+	return cookieName.startsWith(AUTH_COOKIE_PREFIX) || cookieName.startsWith(`${SECURE_PREFIX}${AUTH_COOKIE_PREFIX}`);
+}
+function isSessionCookie(cookieName) {
+	return cookieName === SESSION_COOKIE_NAME || cookieName === `${SECURE_PREFIX}${SESSION_COOKIE_NAME}`;
+}
+
+//#endregion
+export { AUTH_COOKIE_PREFIX, SESSION_COOKIE_NAME, isAuthCookie, isSessionCookie };

package/dist/auth/permissions.d.ts

@@ -1,29 +1,29 @@
-import * as better_auth_plugins0 from "better-auth/plugins";
+import * as better_auth_plugins35 from "better-auth/plugins";
 import { AccessControl } from "better-auth/plugins/access";
 import { organizationClient } from "better-auth/client/plugins";
 
 //#region src/auth/permissions.d.ts
 declare const ac: AccessControl;
 declare const memberRole: {
-  authorize<K_1 extends "project" | "organization" | "team" | "member" | "ac" | "invitation">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>[key] | {
-    actions: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>[key];
+  authorize<K_1 extends "organization" | "member" | "invitation" | "ac" | "project" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins35.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins35.Statements>[key] | {
+    actions: better_auth_plugins35.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins35.Statements>[key];
     connector: "OR" | "AND";
-  } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
-  statements: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>;
+  } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins35.AuthorizeResponse;
+  statements: better_auth_plugins35.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins35.Statements>;
 };
 declare const adminRole: {
-  authorize<K_1 extends "project" | "organization" | "team" | "member" | "ac" | "invitation">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>[key] | {
-    actions: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>[key];
+  authorize<K_1 extends "organization" | "member" | "invitation" | "ac" | "project" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins35.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins35.Statements>[key] | {
+    actions: better_auth_plugins35.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins35.Statements>[key];
     connector: "OR" | "AND";
-  } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
-  statements: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>;
+  } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins35.AuthorizeResponse;
+  statements: better_auth_plugins35.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins35.Statements>;
 };
 declare const ownerRole: {
-  authorize<K_1 extends "project" | "organization" | "team" | "member" | "ac" | "invitation">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>[key] | {
-    actions: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>[key];
+  authorize<K_1 extends "organization" | "member" | "invitation" | "ac" | "project" | "team">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins35.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins35.Statements>[key] | {
+    actions: better_auth_plugins35.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins35.Statements>[key];
     connector: "OR" | "AND";
-  } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
-  statements: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>;
+  } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins35.AuthorizeResponse;
+  statements: better_auth_plugins35.Subset<"organization" | "member" | "invitation" | "ac" | "project" | "team", better_auth_plugins35.Statements>;
 };
 //#endregion
 export { ac, adminRole, memberRole, organizationClient, ownerRole };

package/dist/data-access/manage/skills.d.ts

@@ -99,8 +99,8 @@ declare const upsertSubAgentSkill: (db: AgentsManageDatabaseClient) => (params:
   updatedAt: string;
   index: number;
   alwaysLoaded: boolean;
-  subAgentId: string;
   skillId: string;
+  subAgentId: string;
 }>;
 declare const deleteSubAgentSkill: (db: AgentsManageDatabaseClient) => (params: {
   scopes: AgentScopeConfig;

package/dist/data-access/manage/tools.js

@@ -18,6 +18,7 @@ import { toISODateString } from "../../utils/date.js";
 import { McpClient } from "../../utils/mcp-client.js";
 import { configureComposioMCPServer } from "../../utils/third-party-mcp-servers/composio-client.js";
 import { isThirdPartyMCPServerAuthenticated } from "../../utils/third-party-mcp-servers/third-party-check.js";
+import { TRUSTED_WORK_APP_MCP_PATHS, isTrustedWorkAppMcpUrl } from "../../utils/work-app-mcp.js";
 import "../../utils/index.js";
 import { isGithubWorkAppTool } from "../runtime/github-work-app-installations.js";
 import { getCredentialReference, getUserScopedCredentialReference } from "./credentialReferences.js";
@@ -122,14 +123,15 @@ const discoverToolsFromServer = async (tool, credentialReference, credentialStor
 			sessionId: tool.config.mcp.transport?.sessionId
 		};
 		configureComposioMCPServer(serverConfig, tool.tenantId, tool.projectId, tool.credentialScope === "user" ? "user" : "project", userId);
-		if (isGithubWorkAppTool(tool)) serverConfig.headers = {
+		const urlString = String(serverConfig.url);
+		if (isGithubWorkAppTool(tool) && isTrustedWorkAppMcpUrl(urlString, TRUSTED_WORK_APP_MCP_PATHS.github, env.INKEEP_AGENTS_API_URL)) serverConfig.headers = {
 			...serverConfig.headers,
 			"x-inkeep-tool-id": tool.id,
 			"x-inkeep-tenant-id": tool.tenantId,
 			"x-inkeep-project-id": tool.projectId,
 			Authorization: `Bearer ${env.GITHUB_MCP_API_KEY}`
 		};
-		if (isSlackWorkAppTool(tool)) serverConfig.headers = {
+		if (isSlackWorkAppTool(tool) && isTrustedWorkAppMcpUrl(urlString, TRUSTED_WORK_APP_MCP_PATHS.slack, env.INKEEP_AGENTS_API_URL)) serverConfig.headers = {
 			...serverConfig.headers,
 			"x-inkeep-tool-id": tool.id,
 			"x-inkeep-tenant-id": tool.tenantId,

package/dist/data-access/manage/triggers.d.ts

@@ -40,13 +40,13 @@ declare const listTriggersPaginated: (db: AgentsManageDatabaseClient) => (params
       algorithm: "sha256" | "sha512" | "sha384" | "sha1" | "md5";
       encoding: "hex" | "base64";
       signature: {
-        source: "query" | "header" | "body";
+        source: "query" | "body" | "header";
         key: string;
         prefix?: string | undefined;
         regex?: string | undefined;
       };
       signedComponents: {
-        source: "literal" | "header" | "body";
+        source: "literal" | "body" | "header";
         required: boolean;
         key?: string | undefined;
         value?: string | undefined;

package/dist/data-access/runtime/apiKeys.d.ts

@@ -16,10 +16,10 @@ declare const getApiKeyById: (db: AgentsRunDatabaseClient) => (params: {
   createdAt: string;
   updatedAt: string;
   expiresAt: string | null;
-  lastUsedAt: string | null;
   publicId: string;
   keyHash: string;
   keyPrefix: string;
+  lastUsedAt: string | null;
 } | undefined>;
 declare const getApiKeyByPublicId: (db: AgentsRunDatabaseClient) => (publicId: string) => Promise<{
   id: string;
@@ -30,10 +30,10 @@ declare const getApiKeyByPublicId: (db: AgentsRunDatabaseClient) => (publicId: s
   createdAt: string;
   updatedAt: string;
   expiresAt: string | null;
-  lastUsedAt: string | null;
   publicId: string;
   keyHash: string;
   keyPrefix: string;
+  lastUsedAt: string | null;
 } | undefined>;
 declare const listApiKeys: (db: AgentsRunDatabaseClient) => (params: {
   scopes: ProjectScopeConfig;
@@ -47,10 +47,10 @@ declare const listApiKeys: (db: AgentsRunDatabaseClient) => (params: {
   createdAt: string;
   updatedAt: string;
   expiresAt: string | null;
-  lastUsedAt: string | null;
   publicId: string;
   keyHash: string;
   keyPrefix: string;
+  lastUsedAt: string | null;
 }[]>;
 declare const listApiKeysPaginated: (db: AgentsRunDatabaseClient) => (params: {
   scopes: ProjectScopeConfig;
@@ -74,10 +74,10 @@ declare const createApiKey: (db: AgentsRunDatabaseClient) => (params: ApiKeyInse
   createdAt: string;
   updatedAt: string;
   expiresAt: string | null;
-  lastUsedAt: string | null;
   publicId: string;
   keyHash: string;
   keyPrefix: string;
+  lastUsedAt: string | null;
 }>;
 declare const updateApiKey: (db: AgentsRunDatabaseClient) => (params: {
   scopes: ProjectScopeConfig;

package/dist/data-access/runtime/apps.d.ts

@@ -23,9 +23,9 @@ declare const getAppById: (db: AgentsRunDatabaseClient) => (id: string) => Promi
     type: "api";
     api: Record<string, never>;
   };
-  defaultAgentId: string | null;
-  defaultProjectId: string | null;
   lastUsedAt: string | null;
+  defaultProjectId: string | null;
+  defaultAgentId: string | null;
 } | undefined>;
 declare const updateAppLastUsed: (db: AgentsRunDatabaseClient) => (id: string) => Promise<void>;
 declare const getAppByIdForTenant: (db: AgentsRunDatabaseClient) => (params: {
@@ -70,9 +70,9 @@ declare const createApp: (db: AgentsRunDatabaseClient) => (params: AppInsert) =>
     type: "api";
     api: Record<string, never>;
   };
-  defaultAgentId: string | null;
-  defaultProjectId: string | null;
   lastUsedAt: string | null;
+  defaultProjectId: string | null;
+  defaultAgentId: string | null;
 }>;
 declare const updateAppForTenant: (db: AgentsRunDatabaseClient) => (params: {
   scopes: TenantScopeConfig;

package/dist/data-access/runtime/cascade-delete.d.ts

@@ -10,6 +10,10 @@ type CascadeDeleteResult = {
   conversationsDeleted: number;
   tasksDeleted: number;
   contextCacheDeleted: number;
+  triggerInvocationsDeleted: number;
+  scheduledTriggerInvocationsDeleted: number;
+  datasetRunsDeleted: number;
+  evaluationRunsDeleted: number;
   apiKeysDeleted: number;
   slackChannelConfigsDeleted: number;
   slackWorkspaceDefaultsCleared: number;

package/dist/data-access/runtime/cascade-delete.js

@@ -1,4 +1,4 @@
-import { apiKeys, contextCache, conversations, tasks, workAppGitHubMcpToolAccessMode, workAppGitHubMcpToolRepositoryAccess, workAppGitHubProjectAccessMode, workAppGitHubProjectRepositoryAccess } from "../../db/runtime/runtime-schema.js";
+import { apiKeys, contextCache, conversations, datasetRun, evaluationRun, scheduledTriggerInvocations, tasks, triggerInvocations, workAppGitHubMcpToolAccessMode, workAppGitHubMcpToolRepositoryAccess, workAppGitHubProjectAccessMode, workAppGitHubProjectRepositoryAccess } from "../../db/runtime/runtime-schema.js";
 import { projectScopedWhere } from "../manage/scope-helpers.js";
 import { clearAppDefaultsByAgent, clearAppDefaultsByProject, deleteAppsByProject } from "./apps.js";
 import { deleteSlackMcpToolAccessConfig } from "./slack-work-app-mcp.js";
@@ -18,10 +18,18 @@ const cascadeDeleteByBranch = (db) => async (params) => {
 	const contextCacheResult = await db.delete(contextCache).where(and(projectScopedWhere(contextCache, scopes), sql`${contextCache.ref}->>'name' = ${fullBranchName}`)).returning();
 	const conversationsResult = await db.delete(conversations).where(and(projectScopedWhere(conversations, scopes), sql`${conversations.ref}->>'name' = ${fullBranchName}`)).returning();
 	const tasksResult = await db.delete(tasks).where(and(projectScopedWhere(tasks, scopes), sql`${tasks.ref}->>'name' = ${fullBranchName}`)).returning();
+	const triggerInvocationsResult = await db.delete(triggerInvocations).where(and(eq(triggerInvocations.tenantId, scopes.tenantId), eq(triggerInvocations.projectId, scopes.projectId), sql`${triggerInvocations.ref}->>'name' = ${fullBranchName}`)).returning();
+	const scheduledTriggerInvocationsResult = await db.delete(scheduledTriggerInvocations).where(and(eq(scheduledTriggerInvocations.tenantId, scopes.tenantId), eq(scheduledTriggerInvocations.projectId, scopes.projectId), sql`${scheduledTriggerInvocations.ref}->>'name' = ${fullBranchName}`)).returning();
+	const datasetRunsResult = await db.delete(datasetRun).where(and(eq(datasetRun.tenantId, scopes.tenantId), eq(datasetRun.projectId, scopes.projectId), sql`${datasetRun.ref}->>'name' = ${fullBranchName}`)).returning();
+	const evaluationRunsResult = await db.delete(evaluationRun).where(and(eq(evaluationRun.tenantId, scopes.tenantId), eq(evaluationRun.projectId, scopes.projectId), sql`${evaluationRun.ref}->>'name' = ${fullBranchName}`)).returning();
 	return {
 		conversationsDeleted: conversationsResult.length,
 		tasksDeleted: tasksResult.length,
 		contextCacheDeleted: contextCacheResult.length,
+		triggerInvocationsDeleted: triggerInvocationsResult.length,
+		scheduledTriggerInvocationsDeleted: scheduledTriggerInvocationsResult.length,
+		datasetRunsDeleted: datasetRunsResult.length,
+		evaluationRunsDeleted: evaluationRunsResult.length,
 		apiKeysDeleted: 0,
 		slackChannelConfigsDeleted: 0,
 		slackWorkspaceDefaultsCleared: 0,
@@ -42,6 +50,10 @@ const cascadeDeleteByProject = (db) => async (params) => {
 	const contextCacheResult = await db.delete(contextCache).where(and(projectScopedWhere(contextCache, scopes), sql`${contextCache.ref}->>'name' = ${fullBranchName}`)).returning();
 	const conversationsResult = await db.delete(conversations).where(and(projectScopedWhere(conversations, scopes), sql`${conversations.ref}->>'name' = ${fullBranchName}`)).returning();
 	const tasksResult = await db.delete(tasks).where(and(projectScopedWhere(tasks, scopes), sql`${tasks.ref}->>'name' = ${fullBranchName}`)).returning();
+	const triggerInvocationsResult = await db.delete(triggerInvocations).where(and(eq(triggerInvocations.tenantId, scopes.tenantId), eq(triggerInvocations.projectId, scopes.projectId), sql`${triggerInvocations.ref}->>'name' = ${fullBranchName}`)).returning();
+	const scheduledTriggerInvocationsResult = await db.delete(scheduledTriggerInvocations).where(and(eq(scheduledTriggerInvocations.tenantId, scopes.tenantId), eq(scheduledTriggerInvocations.projectId, scopes.projectId), sql`${scheduledTriggerInvocations.ref}->>'name' = ${fullBranchName}`)).returning();
+	const datasetRunsResult = await db.delete(datasetRun).where(and(eq(datasetRun.tenantId, scopes.tenantId), eq(datasetRun.projectId, scopes.projectId), sql`${datasetRun.ref}->>'name' = ${fullBranchName}`)).returning();
+	const evaluationRunsResult = await db.delete(evaluationRun).where(and(eq(evaluationRun.tenantId, scopes.tenantId), eq(evaluationRun.projectId, scopes.projectId), sql`${evaluationRun.ref}->>'name' = ${fullBranchName}`)).returning();
 	const apiKeysResult = await db.delete(apiKeys).where(projectScopedWhere(apiKeys, scopes)).returning();
 	await cascadeDeleteGitHubAccessByProject(db)({
 		tenantId: scopes.tenantId,
@@ -56,6 +68,10 @@ const cascadeDeleteByProject = (db) => async (params) => {
 		conversationsDeleted: conversationsResult.length,
 		tasksDeleted: tasksResult.length,
 		contextCacheDeleted: contextCacheResult.length,
+		triggerInvocationsDeleted: triggerInvocationsResult.length,
+		scheduledTriggerInvocationsDeleted: scheduledTriggerInvocationsResult.length,
+		datasetRunsDeleted: datasetRunsResult.length,
+		evaluationRunsDeleted: evaluationRunsResult.length,
 		apiKeysDeleted: apiKeysResult.length,
 		slackChannelConfigsDeleted,
 		slackWorkspaceDefaultsCleared,
@@ -85,6 +101,8 @@ const cascadeDeleteByAgent = (db) => async (params) => {
 		}
 	}
 	tasksDeleted = (await db.delete(tasks).where(and(projectScopedWhere(tasks, scopes), eq(tasks.agentId, scopes.agentId), sql`${tasks.ref}->>'name' = ${fullBranchName}`)).returning()).length;
+	const triggerInvocationsResult = await db.delete(triggerInvocations).where(and(eq(triggerInvocations.tenantId, scopes.tenantId), eq(triggerInvocations.projectId, scopes.projectId), eq(triggerInvocations.agentId, scopes.agentId), sql`${triggerInvocations.ref}->>'name' = ${fullBranchName}`)).returning();
+	const scheduledTriggerInvocationsResult = await db.delete(scheduledTriggerInvocations).where(and(eq(scheduledTriggerInvocations.tenantId, scopes.tenantId), eq(scheduledTriggerInvocations.projectId, scopes.projectId), eq(scheduledTriggerInvocations.agentId, scopes.agentId), sql`${scheduledTriggerInvocations.ref}->>'name' = ${fullBranchName}`)).returning();
 	apiKeysDeleted = (await db.delete(apiKeys).where(and(projectScopedWhere(apiKeys, scopes), eq(apiKeys.agentId, scopes.agentId))).returning()).length;
 	const appDefaultsCleared = await clearAppDefaultsByAgent(db)(scopes.tenantId, scopes.agentId);
 	const slackChannelConfigsDeleted = await deleteWorkAppSlackChannelAgentConfigsByAgent(db)(scopes.tenantId, scopes.projectId, scopes.agentId);
@@ -94,6 +112,10 @@ const cascadeDeleteByAgent = (db) => async (params) => {
 		conversationsDeleted,
 		tasksDeleted,
 		contextCacheDeleted,
+		triggerInvocationsDeleted: triggerInvocationsResult.length,
+		scheduledTriggerInvocationsDeleted: scheduledTriggerInvocationsResult.length,
+		datasetRunsDeleted: 0,
+		evaluationRunsDeleted: 0,
 		apiKeysDeleted,
 		slackChannelConfigsDeleted,
 		slackWorkspaceDefaultsCleared,
@@ -121,6 +143,10 @@ const cascadeDeleteBySubAgent = (db) => async (params) => {
 		conversationsDeleted,
 		tasksDeleted: tasksResult.length,
 		contextCacheDeleted,
+		triggerInvocationsDeleted: 0,
+		scheduledTriggerInvocationsDeleted: 0,
+		datasetRunsDeleted: 0,
+		evaluationRunsDeleted: 0,
 		apiKeysDeleted: 0,
 		slackChannelConfigsDeleted: 0,
 		slackWorkspaceDefaultsCleared: 0,

package/dist/data-access/runtime/conversations.d.ts

@@ -25,7 +25,7 @@ declare const createConversation: (db: AgentsRunDatabaseClient) => (params: Conv
   updatedAt: string;
   metadata: ConversationMetadata | null;
   ref: {
-    type: "tag" | "commit" | "branch";
+    type: "commit" | "tag" | "branch";
     name: string;
     hash: string;
   } | null;
@@ -44,7 +44,7 @@ declare const updateConversation: (db: AgentsRunDatabaseClient) => (params: {
   agentId: string | null;
   activeSubAgentId: string;
   ref: {
-    type: "tag" | "commit" | "branch";
+    type: "commit" | "tag" | "branch";
     name: string;
     hash: string;
   } | null;
@@ -70,7 +70,7 @@ declare const updateConversationActiveSubAgent: (db: AgentsRunDatabaseClient) =>
   agentId: string | null;
   activeSubAgentId: string;
   ref: {
-    type: "tag" | "commit" | "branch";
+    type: "commit" | "tag" | "branch";
     name: string;
     hash: string;
   } | null;
@@ -94,7 +94,7 @@ declare const getConversation: (db: AgentsRunDatabaseClient) => (params: {
   updatedAt: string;
   metadata: ConversationMetadata | null;
   ref: {
-    type: "tag" | "commit" | "branch";
+    type: "commit" | "tag" | "branch";
     name: string;
     hash: string;
   } | null;
@@ -108,7 +108,7 @@ declare const createOrGetConversation: (db: AgentsRunDatabaseClient) => (input:
   tenantId: string;
   id: string;
   ref: {
-    type: "tag" | "commit" | "branch";
+    type: "commit" | "tag" | "branch";
     name: string;
     hash: string;
   };
@@ -130,7 +130,7 @@ declare const createOrGetConversation: (db: AgentsRunDatabaseClient) => (input:
   updatedAt: string;
   metadata: ConversationMetadata | null;
   ref: {
-    type: "tag" | "commit" | "branch";
+    type: "commit" | "tag" | "branch";
     name: string;
     hash: string;
   } | null;
@@ -162,7 +162,7 @@ declare const getActiveAgentForConversation: (db: AgentsRunDatabaseClient) => (p
   updatedAt: string;
   metadata: ConversationMetadata | null;
   ref: {
-    type: "tag" | "commit" | "branch";
+    type: "commit" | "tag" | "branch";
     name: string;
     hash: string;
   } | null;

package/dist/data-access/runtime/messages.d.ts

@@ -18,18 +18,18 @@ declare const getMessageById: (db: AgentsRunDatabaseClient) => (params: {
   metadata: MessageMetadata | null;
   content: MessageContent;
   role: string;
+  conversationId: string;
   fromSubAgentId: string | null;
   toSubAgentId: string | null;
   fromExternalAgentId: string | null;
   toExternalAgentId: string | null;
-  taskId: string | null;
-  a2aTaskId: string | null;
-  conversationId: string;
   fromTeamAgentId: string | null;
   toTeamAgentId: string | null;
   visibility: string;
   messageType: string;
+  taskId: string | null;
   parentMessageId: string | null;
+  a2aTaskId: string | null;
   a2aSessionId: string | null;
 } | undefined>;
 declare const listMessages: (db: AgentsRunDatabaseClient) => (params: {
@@ -152,18 +152,18 @@ declare const createMessage: (db: AgentsRunDatabaseClient) => (params: {
   metadata: MessageMetadata | null;
   content: MessageContent;
   role: string;
+  conversationId: string;
   fromSubAgentId: string | null;
   toSubAgentId: string | null;
   fromExternalAgentId: string | null;
   toExternalAgentId: string | null;
-  taskId: string | null;
-  a2aTaskId: string | null;
-  conversationId: string;
   fromTeamAgentId: string | null;
   toTeamAgentId: string | null;
   visibility: string;
   messageType: string;
+  taskId: string | null;
   parentMessageId: string | null;
+  a2aTaskId: string | null;
   a2aSessionId: string | null;
 }>;
 declare const updateMessage: (db: AgentsRunDatabaseClient) => (params: {
@@ -205,18 +205,18 @@ declare const deleteMessage: (db: AgentsRunDatabaseClient) => (params: {
   metadata: MessageMetadata | null;
   content: MessageContent;
   role: string;
+  conversationId: string;
   fromSubAgentId: string | null;
   toSubAgentId: string | null;
   fromExternalAgentId: string | null;
   toExternalAgentId: string | null;
-  taskId: string | null;
-  a2aTaskId: string | null;
-  conversationId: string;
   fromTeamAgentId: string | null;
   toTeamAgentId: string | null;
   visibility: string;
   messageType: string;
+  taskId: string | null;
   parentMessageId: string | null;
+  a2aTaskId: string | null;
   a2aSessionId: string | null;
 }>;
 declare const countMessagesByConversation: (db: AgentsRunDatabaseClient) => (params: {

package/dist/data-access/runtime/scheduledTriggerInvocations.d.ts

@@ -34,6 +34,11 @@ declare const listScheduledTriggerInvocationsPaginated: (db: AgentsRunDatabaseCl
 }) => Promise<{
   data: {
     scheduledTriggerId: string;
+    ref: {
+      type: "commit" | "tag" | "branch";
+      name: string;
+      hash: string;
+    } | null;
     status: "pending" | "failed" | "running" | "completed" | "cancelled";
     scheduledFor: string;
     startedAt: string | null;
@@ -174,6 +179,11 @@ declare const listUpcomingInvocationsForAgentPaginated: (db: AgentsRunDatabaseCl
 }) => Promise<{
   data: {
     scheduledTriggerId: string;
+    ref: {
+      type: "commit" | "tag" | "branch";
+      name: string;
+      hash: string;
+    } | null;
     status: "pending" | "failed" | "running" | "completed" | "cancelled";
     scheduledFor: string;
     startedAt: string | null;
@@ -208,6 +218,11 @@ declare const listProjectScheduledTriggerInvocationsPaginated: (db: AgentsRunDat
 }) => Promise<{
   data: {
     scheduledTriggerId: string;
+    ref: {
+      type: "commit" | "tag" | "branch";
+      name: string;
+      hash: string;
+    } | null;
     status: "pending" | "failed" | "running" | "completed" | "cancelled";
     scheduledFor: string;
     startedAt: string | null;

package/dist/data-access/runtime/tasks.d.ts

@@ -15,7 +15,7 @@ declare const createTask: (db: AgentsRunDatabaseClient) => (params: TaskInsert)
   updatedAt: string;
   metadata: TaskMetadataConfig | null;
   ref: {
-    type: "tag" | "commit" | "branch";
+    type: "commit" | "tag" | "branch";
     name: string;
     hash: string;
   } | null;
@@ -39,7 +39,7 @@ declare const updateTask: (db: AgentsRunDatabaseClient) => (params: {
   updatedAt: string;
   contextId: string;
   ref: {
-    type: "tag" | "commit" | "branch";
+    type: "commit" | "tag" | "branch";
     name: string;
     hash: string;
   } | null;

package/dist/data-access/runtime/triggerInvocations.d.ts

@@ -28,6 +28,11 @@ declare const listTriggerInvocationsPaginated: (db: AgentsRunDatabaseClient) =>
   data: {
     triggerId: string;
     conversationId: string | null;
+    ref: {
+      type: "commit" | "tag" | "branch";
+      name: string;
+      hash: string;
+    } | null;
     status: string;
     requestPayload: unknown;
     transformedPayload: unknown;