@inkeep/agents-core 0.65.1 → 0.66.0

package/dist/utils/error.js

@@ -3,6 +3,58 @@ import { z } from "@hono/zod-openapi";
 import { HTTPException } from "hono/http-exception";
 
 //#region src/utils/error.ts
+const PG_ERROR_KEYS = [
+	"code",
+	"detail",
+	"hint",
+	"severity",
+	"schema",
+	"table",
+	"column",
+	"constraint",
+	"routine",
+	"position",
+	"internalPosition",
+	"internalQuery",
+	"where",
+	"dataType",
+	"line",
+	"file"
+];
+const DRIZZLE_EXTRA_KEYS = ["query", "params"];
+/**
+* Builds structured fields from an error chain (Drizzle → pg DatabaseError / Doltgres).
+* Outer wrappers often omit SQLSTATE and server detail; those live on nested `.cause`.
+*/
+function getDatabaseErrorLogContext(error) {
+	const chain = [];
+	const seen = /* @__PURE__ */ new Set();
+	let current = error;
+	let depth = 0;
+	while (current != null && typeof current === "object" && !seen.has(current)) {
+		seen.add(current);
+		const e = current;
+		const slice = {};
+		if (typeof e.message === "string" && e.message.length > 0) slice.message = e.message;
+		if (depth === 0 && typeof e.stack === "string" && e.stack.length > 0) slice.stack = e.stack;
+		for (const k of PG_ERROR_KEYS) {
+			const v = e[k];
+			if (v !== void 0 && v !== null && v !== "") slice[k] = v;
+		}
+		for (const k of DRIZZLE_EXTRA_KEYS) if (e[k] !== void 0) slice[k] = k === "params" ? `[${Array.isArray(e[k]) ? e[k].length : "?"} params redacted]` : e[k];
+		if (Object.keys(slice).length > 0) chain.push(slice);
+		depth += 1;
+		current = "cause" in e ? e.cause : void 0;
+	}
+	if (chain.length === 0) return {};
+	const root = chain[chain.length - 1];
+	const out = { dbErrorChain: chain };
+	if (root.message !== void 0) out.dbRootMessage = root.message;
+	if (root.code !== void 0) out.dbRootCode = root.code;
+	if (root.detail !== void 0) out.dbRootDetail = root.detail;
+	if (root.hint !== void 0) out.dbRootHint = root.hint;
+	return out;
+}
 const ErrorCode = z.enum([
 	"bad_request",
 	"unauthorized",
@@ -62,19 +114,21 @@ const errorResponseSchema = z.object({ error: z.object({
 		example: "The requested resource was not found."
 	})
 }) }).openapi("ErrorResponse");
+const STATIC_500_MESSAGE = "An internal server error occurred. Please try again later.";
 function createApiError({ code, message, instance, requestId, extensions }) {
 	const status = errorCodeToHttpStatus[code];
 	const title = getTitleFromCode(code);
 	`${ERROR_DOCS_BASE_URL}${code}`;
+	const externalMessage = status >= 500 ? STATIC_500_MESSAGE : message;
 	const problemDetails = {
 		title,
 		status,
-		detail: message,
+		detail: externalMessage,
 		code,
 		...instance && { instance },
 		...requestId && { requestId }
 	};
-	const errorMessage = message.length > 100 ? `${message.substring(0, 97)}...` : message;
+	const errorMessage = externalMessage.length > 100 ? `${externalMessage.substring(0, 97)}...` : externalMessage;
 	const responseBody = {
 		...problemDetails,
 		error: {
@@ -115,13 +169,10 @@ async function handleApiError(error, requestId) {
 				}
 			};
 		}
-		if (error.status >= 500) getLogger("core").error({
-			error,
-			status: error.status,
-			message: responseJson.detail || responseJson.error.message,
-			requestId: responseJson.requestId || requestId || "unknown"
-		}, "API server error occurred");
-		else getLogger("core").info({
+		if (error.status >= 500) {
+			responseJson.detail = STATIC_500_MESSAGE;
+			responseJson.error.message = STATIC_500_MESSAGE;
+		} else getLogger("core").info({
 			error,
 			status: error.status,
 			code: responseJson.code,
@@ -130,24 +181,15 @@ async function handleApiError(error, requestId) {
 		}, "API client error occurred");
 		return responseJson;
 	}
-	const errorMessage = error instanceof Error ? error.message : String(error);
-	const errorStack = error instanceof Error ? error.stack : void 0;
-	getLogger("core").error({
-		error,
-		message: errorMessage,
-		stack: errorStack,
-		status: 500,
-		requestId: requestId || "unknown"
-	}, "Unhandled API error occurred");
 	return {
 		title: "Internal Server Error",
 		status: 500,
-		detail: `Server error occurred: ${error instanceof Error ? error.message.replace(/\b(password|token|key|secret|auth)\b/gi, "[REDACTED]") : "Unknown error"}`,
+		detail: STATIC_500_MESSAGE,
 		code: "internal_server_error",
 		...requestId && { requestId },
 		error: {
 			code: "internal_server_error",
-			message: "An internal server error occurred. Please try again later."
+			message: STATIC_500_MESSAGE
 		}
 	};
 }
@@ -240,4 +282,4 @@ const commonDeleteErrorResponses = {
 };
 
 //#endregion
-export { ERROR_DOCS_BASE_URL, ErrorCode, commonCreateErrorResponses, commonDeleteErrorResponses, commonGetErrorResponses, commonUpdateErrorResponses, createApiError, errorResponseSchema, errorSchemaFactory, handleApiError, isUniqueConstraintError, problemDetailsSchema, throwIfUniqueConstraintError };
+export { ERROR_DOCS_BASE_URL, ErrorCode, commonCreateErrorResponses, commonDeleteErrorResponses, commonGetErrorResponses, commonUpdateErrorResponses, createApiError, errorResponseSchema, errorSchemaFactory, getDatabaseErrorLogContext, handleApiError, isUniqueConstraintError, problemDetailsSchema, throwIfUniqueConstraintError };

package/dist/utils/index.d.ts

@@ -1,7 +1,7 @@
 import { JwtVerifyResult, SignJwtOptions, VerifyJwtOptions, decodeJwtPayload, deriveKidFromPublicKey, extractBearerToken, getJwtSecret, hasIssuer, signJwt, verifyJwt } from "./jwt-helpers.js";
 import { GenerateInternalServiceTokenParams, InternalServiceId, InternalServiceTokenPayload, InternalServices, VerifyInternalServiceTokenResult, generateInternalServiceToken, isInternalServiceToken, validateInternalServiceProjectAccess, validateInternalServiceTenantAccess, verifyInternalServiceAuthHeader, verifyInternalServiceToken } from "./internal-service-auth.js";
 import { GenerationType } from "../db/runtime/runtime-schema.js";
-import { LoggerFactoryConfig, PinoLogger, PinoLoggerConfig, getLogger, loggerFactory } from "./logger.js";
+import { LoggerFactoryConfig, PinoLogger, PinoLoggerConfig, getLogger, loggerFactory, runWithLogContext } from "./logger.js";
 import { McpClient, McpClientOptions, McpSSEConfig, McpServerConfig, McpStreamableHttpConfig, activeMcpClients } from "./mcp-client.js";
 import { ApiKeyGenerationResult, AppCredentialResult, extractPublicId, generateApiKey, generateAppCredential, getMetadataFromApiKey, hashApiKey, isApiKeyExpired, maskApiKey, sanitizeAppConfig, validateApiKey } from "./apiKeys.js";
 import { McpOAuthFlowResult, McpTokenExchangeResult, OAuthConfig, detectAuthenticationRequired, exchangeMcpAuthorizationCode, initiateMcpOAuthFlow } from "./auth-detection.js";
@@ -11,7 +11,7 @@ import { getCredentialStoreLookupKeyFromRetrievalParams } from "./credential-sto
 import { normalizeDateString, toISODateString } from "./date.js";
 import { validateOrigin } from "./domain-validation.js";
 import { isDevelopment, isProduction, isTest } from "./env-detection.js";
-import { CommonCreateErrorResponses, CommonDeleteErrorResponses, CommonGetErrorResponses, CommonUpdateErrorResponses, ERROR_DOCS_BASE_URL, ErrorCode, ErrorCodes, ErrorResponse, ProblemDetails, commonCreateErrorResponses, commonDeleteErrorResponses, commonGetErrorResponses, commonUpdateErrorResponses, createApiError, errorResponseSchema, errorSchemaFactory, handleApiError, isUniqueConstraintError, problemDetailsSchema, throwIfUniqueConstraintError } from "./error.js";
+import { CommonCreateErrorResponses, CommonDeleteErrorResponses, CommonGetErrorResponses, CommonUpdateErrorResponses, ERROR_DOCS_BASE_URL, ErrorCode, ErrorCodes, ErrorResponse, ProblemDetails, commonCreateErrorResponses, commonDeleteErrorResponses, commonGetErrorResponses, commonUpdateErrorResponses, createApiError, errorResponseSchema, errorSchemaFactory, getDatabaseErrorLogContext, handleApiError, isUniqueConstraintError, problemDetailsSchema, throwIfUniqueConstraintError } from "./error.js";
 import { LLMMessage, formatMessagesForLLM, formatMessagesForLLMContext } from "./format-messages.js";
 import { getInProcessFetch, registerAppFetch } from "./in-process-fetch.js";
 import { JsonTransformer } from "./JsonTransformer.js";
@@ -39,4 +39,4 @@ import "./usage-tracker.js";
 import { ValidatePublicKeyResult, validatePublicKey } from "./validate-public-key.js";
 import { _resetWaitUntilCache, getWaitUntil } from "./wait-until.js";
 import { TRUSTED_WORK_APP_MCP_PATHS, isTrustedWorkAppMcpUrl } from "./work-app-mcp.js";
-export { ApiKeyGenerationResult, AppCredentialResult, AssembleResult, CommonCreateErrorResponses, CommonDeleteErrorResponses, CommonGetErrorResponses, CommonUpdateErrorResponses, ComposioAuthResult, CredentialScope, ERROR_DOCS_BASE_URL, ErrorCode, ErrorCodes, ErrorResponse, GenerateInternalServiceTokenParams, GenerateServiceTokenParams, GenerationType, HashedHeaderValue, InternalServiceId, InternalServiceTokenPayload, InternalServices, JsonTransformer, JwtVerifyResult, LLMMessage, LoggerFactoryConfig, McpClient, McpClientOptions, McpOAuthFlowResult, McpSSEConfig, McpServerConfig, McpStreamableHttpConfig, McpTokenExchangeResult, MockLanguageModel, ModelFactory, OAuthConfig, ParsedSSEResponse, PinoLogger, PinoLoggerConfig, PoWError, PoWResult, ProblemDetails, SKILL_ENTRY_FILE_PATH, ServiceTokenPayload, SignJwtOptions, SignSlackLinkTokenParams, SignSlackUserTokenParams, SignatureVerificationErrorCode, SignatureVerificationResult, SlackAccessTokenPayload, SlackAccessTokenPayloadSchema, SlackLinkIntent, SlackLinkIntentSchema, SlackLinkTokenPayload, SlackLinkTokenPayloadSchema, TRUSTED_WORK_APP_MCP_PATHS, TempTokenPayload, TriggerAuthResult, ValidatePublicKeyResult, VerifyInternalServiceTokenResult, VerifyJwtOptions, VerifyServiceTokenResult, VerifySlackLinkTokenResult, VerifySlackUserTokenResult, _resetWaitUntilCache, activeMcpClients, buildConversationMetadata, commonCreateErrorResponses, commonDeleteErrorResponses, commonGetErrorResponses, commonUpdateErrorResponses, computeNextRunAt, configureComposioMCPServer, convertZodToJsonSchema, convertZodToJsonSchemaWithPreview, createApiError, createMockModel, decodeJwtPayload, deleteComposioConnectedAccount, deriveKidFromPublicKey, deriveRelationId, detectAuthenticationRequired, errorResponseSchema, errorSchemaFactory, estimateTokens, exchangeMcpAuthorizationCode, extractBearerToken, extractComposioServerId, extractPreviewFields, extractPublicId, extractUsageTokens, fetchComposioServers, fetchSingleComposioServer, flushTraces, formatMessagesForLLM, formatMessagesForLLMContext, gatewayCostMiddleware, generateApiKey, generateAppCredential, generateId, generateInternalServiceToken, generateServiceToken, getComposioInstance, getComposioOAuthRedirectUrl, getComposioUserId, getConversationId, getCredentialStoreLookupKeyFromRetrievalParams, getInProcessFetch, getJwtSecret, getLogger, getMetadataFromApiKey, getPoWErrorMessage, getTracer, getWaitUntil, handleApiError, hasIssuer, hashApiKey, hashAuthenticationHeaders, hashTriggerHeaderValue, initiateMcpOAuthFlow, interpolateTemplate, isApiKeyExpired, isComposioMCPServerAuthenticated, isDevelopment, isInternalServiceToken, isPoWEnabled, isProduction, isSlackUserToken, isTest, isThirdPartyMCPServerAuthenticated, isTrustedWorkAppMcpUrl, isUniqueConstraintError, isZodSchema, loggerFactory, makeAllPropertiesRequired, maskApiKey, normalizeDataComponentSchema, normalizeDateString, normalizeModelId, parseEmbeddedJson, parseSSEResponse, parseSkillFromMarkdown, preview, problemDetailsSchema, registerAppFetch, retryWithBackoff, sanitizeAppConfig, serializeSkillToMarkdown, setSpanWithError, signJwt, signSlackLinkToken, signSlackUserToken, stripUnsupportedConstraints, throwIfUniqueConstraintError, toISODateString, unwrapError, validateApiKey, validateInternalServiceProjectAccess, validateInternalServiceTenantAccess, validateOrigin, validatePublicKey, validateTargetAgent, validateTenantId, validateTriggerHeaderValue, verifyAuthorizationHeader, verifyInternalServiceAuthHeader, verifyInternalServiceToken, verifyJwt, verifyPoW, verifyServiceToken, verifySignatureWithConfig, verifySlackLinkToken, verifySlackUserToken, verifyTempToken, verifyTriggerAuth };
+export { ApiKeyGenerationResult, AppCredentialResult, AssembleResult, CommonCreateErrorResponses, CommonDeleteErrorResponses, CommonGetErrorResponses, CommonUpdateErrorResponses, ComposioAuthResult, CredentialScope, ERROR_DOCS_BASE_URL, ErrorCode, ErrorCodes, ErrorResponse, GenerateInternalServiceTokenParams, GenerateServiceTokenParams, GenerationType, HashedHeaderValue, InternalServiceId, InternalServiceTokenPayload, InternalServices, JsonTransformer, JwtVerifyResult, LLMMessage, LoggerFactoryConfig, McpClient, McpClientOptions, McpOAuthFlowResult, McpSSEConfig, McpServerConfig, McpStreamableHttpConfig, McpTokenExchangeResult, MockLanguageModel, ModelFactory, OAuthConfig, ParsedSSEResponse, PinoLogger, PinoLoggerConfig, PoWError, PoWResult, ProblemDetails, SKILL_ENTRY_FILE_PATH, ServiceTokenPayload, SignJwtOptions, SignSlackLinkTokenParams, SignSlackUserTokenParams, SignatureVerificationErrorCode, SignatureVerificationResult, SlackAccessTokenPayload, SlackAccessTokenPayloadSchema, SlackLinkIntent, SlackLinkIntentSchema, SlackLinkTokenPayload, SlackLinkTokenPayloadSchema, TRUSTED_WORK_APP_MCP_PATHS, TempTokenPayload, TriggerAuthResult, ValidatePublicKeyResult, VerifyInternalServiceTokenResult, VerifyJwtOptions, VerifyServiceTokenResult, VerifySlackLinkTokenResult, VerifySlackUserTokenResult, _resetWaitUntilCache, activeMcpClients, buildConversationMetadata, commonCreateErrorResponses, commonDeleteErrorResponses, commonGetErrorResponses, commonUpdateErrorResponses, computeNextRunAt, configureComposioMCPServer, convertZodToJsonSchema, convertZodToJsonSchemaWithPreview, createApiError, createMockModel, decodeJwtPayload, deleteComposioConnectedAccount, deriveKidFromPublicKey, deriveRelationId, detectAuthenticationRequired, errorResponseSchema, errorSchemaFactory, estimateTokens, exchangeMcpAuthorizationCode, extractBearerToken, extractComposioServerId, extractPreviewFields, extractPublicId, extractUsageTokens, fetchComposioServers, fetchSingleComposioServer, flushTraces, formatMessagesForLLM, formatMessagesForLLMContext, gatewayCostMiddleware, generateApiKey, generateAppCredential, generateId, generateInternalServiceToken, generateServiceToken, getComposioInstance, getComposioOAuthRedirectUrl, getComposioUserId, getConversationId, getCredentialStoreLookupKeyFromRetrievalParams, getDatabaseErrorLogContext, getInProcessFetch, getJwtSecret, getLogger, getMetadataFromApiKey, getPoWErrorMessage, getTracer, getWaitUntil, handleApiError, hasIssuer, hashApiKey, hashAuthenticationHeaders, hashTriggerHeaderValue, initiateMcpOAuthFlow, interpolateTemplate, isApiKeyExpired, isComposioMCPServerAuthenticated, isDevelopment, isInternalServiceToken, isPoWEnabled, isProduction, isSlackUserToken, isTest, isThirdPartyMCPServerAuthenticated, isTrustedWorkAppMcpUrl, isUniqueConstraintError, isZodSchema, loggerFactory, makeAllPropertiesRequired, maskApiKey, normalizeDataComponentSchema, normalizeDateString, normalizeModelId, parseEmbeddedJson, parseSSEResponse, parseSkillFromMarkdown, preview, problemDetailsSchema, registerAppFetch, retryWithBackoff, runWithLogContext, sanitizeAppConfig, serializeSkillToMarkdown, setSpanWithError, signJwt, signSlackLinkToken, signSlackUserToken, stripUnsupportedConstraints, throwIfUniqueConstraintError, toISODateString, unwrapError, validateApiKey, validateInternalServiceProjectAccess, validateInternalServiceTenantAccess, validateOrigin, validatePublicKey, validateTargetAgent, validateTenantId, validateTriggerHeaderValue, verifyAuthorizationHeader, verifyInternalServiceAuthHeader, verifyInternalServiceToken, verifyJwt, verifyPoW, verifyServiceToken, verifySignatureWithConfig, verifySlackLinkToken, verifySlackUserToken, verifyTempToken, verifyTriggerAuth };

package/dist/utils/index.js

@@ -1,6 +1,6 @@
 import { SKILL_ENTRY_FILE_PATH, parseSkillFromMarkdown, serializeSkillToMarkdown } from "./skill-files.js";
 import { detectAuthenticationRequired, exchangeMcpAuthorizationCode, initiateMcpOAuthFlow } from "./auth-detection.js";
-import { PinoLogger, getLogger, loggerFactory } from "./logger.js";
+import { PinoLogger, getLogger, loggerFactory, runWithLogContext } from "./logger.js";
 import { decodeJwtPayload, deriveKidFromPublicKey, extractBearerToken, getJwtSecret, hasIssuer, signJwt, verifyJwt } from "./jwt-helpers.js";
 import { InternalServices, generateInternalServiceToken, isInternalServiceToken, validateInternalServiceProjectAccess, validateInternalServiceTenantAccess, verifyInternalServiceAuthHeader, verifyInternalServiceToken } from "./internal-service-auth.js";
 import { convertZodToJsonSchema, convertZodToJsonSchemaWithPreview, extractPreviewFields, isZodSchema, makeAllPropertiesRequired, normalizeDataComponentSchema, preview, stripUnsupportedConstraints } from "./schema-conversion.js";
@@ -8,8 +8,8 @@ import { configureComposioMCPServer, deleteComposioConnectedAccount, extractComp
 import { isThirdPartyMCPServerAuthenticated } from "./third-party-mcp-servers/third-party-check.js";
 import "./third-party-mcp-servers/index.js";
 import { getCredentialStoreLookupKeyFromRetrievalParams } from "./credential-store-utils.js";
+import { ERROR_DOCS_BASE_URL, ErrorCode, commonCreateErrorResponses, commonDeleteErrorResponses, commonGetErrorResponses, commonUpdateErrorResponses, createApiError, errorResponseSchema, errorSchemaFactory, getDatabaseErrorLogContext, handleApiError, isUniqueConstraintError, problemDetailsSchema, throwIfUniqueConstraintError } from "./error.js";
 import { buildConversationMetadata, deriveRelationId, generateId, getConversationId } from "./conversations.js";
-import { ERROR_DOCS_BASE_URL, ErrorCode, commonCreateErrorResponses, commonDeleteErrorResponses, commonGetErrorResponses, commonUpdateErrorResponses, createApiError, errorResponseSchema, errorSchemaFactory, handleApiError, isUniqueConstraintError, problemDetailsSchema, throwIfUniqueConstraintError } from "./error.js";
 import { extractPublicId, generateApiKey, generateAppCredential, getMetadataFromApiKey, hashApiKey, isApiKeyExpired, maskApiKey, sanitizeAppConfig, validateApiKey } from "./apiKeys.js";
 import { computeNextRunAt } from "./compute-next-run-at.js";
 import { normalizeDateString, toISODateString } from "./date.js";
@@ -38,4 +38,4 @@ import { validatePublicKey } from "./validate-public-key.js";
 import { _resetWaitUntilCache, getWaitUntil } from "./wait-until.js";
 import { TRUSTED_WORK_APP_MCP_PATHS, isTrustedWorkAppMcpUrl } from "./work-app-mcp.js";
 
-export { ERROR_DOCS_BASE_URL, ErrorCode, InternalServices, JsonTransformer, McpClient, MockLanguageModel, ModelFactory, PinoLogger, SKILL_ENTRY_FILE_PATH, SlackAccessTokenPayloadSchema, SlackLinkIntentSchema, SlackLinkTokenPayloadSchema, TRUSTED_WORK_APP_MCP_PATHS, _resetWaitUntilCache, activeMcpClients, buildConversationMetadata, commonCreateErrorResponses, commonDeleteErrorResponses, commonGetErrorResponses, commonUpdateErrorResponses, computeNextRunAt, configureComposioMCPServer, convertZodToJsonSchema, convertZodToJsonSchemaWithPreview, createApiError, createMockModel, decodeJwtPayload, deleteComposioConnectedAccount, deriveKidFromPublicKey, deriveRelationId, detectAuthenticationRequired, errorResponseSchema, errorSchemaFactory, estimateTokens, exchangeMcpAuthorizationCode, extractBearerToken, extractComposioServerId, extractPreviewFields, extractPublicId, extractUsageTokens, fetchComposioServers, fetchSingleComposioServer, flushTraces, formatMessagesForLLM, formatMessagesForLLMContext, gatewayCostMiddleware, generateApiKey, generateAppCredential, generateId, generateInternalServiceToken, generateServiceToken, getComposioInstance, getComposioOAuthRedirectUrl, getComposioUserId, getConversationId, getCredentialStoreLookupKeyFromRetrievalParams, getInProcessFetch, getJwtSecret, getLogger, getMetadataFromApiKey, getPoWErrorMessage, getTracer, getWaitUntil, handleApiError, hasIssuer, hashApiKey, hashAuthenticationHeaders, hashTriggerHeaderValue, initiateMcpOAuthFlow, interpolateTemplate, isApiKeyExpired, isComposioMCPServerAuthenticated, isDevelopment, isInternalServiceToken, isPoWEnabled, isProduction, isSlackUserToken, isTest, isThirdPartyMCPServerAuthenticated, isTrustedWorkAppMcpUrl, isUniqueConstraintError, isZodSchema, loggerFactory, makeAllPropertiesRequired, maskApiKey, normalizeDataComponentSchema, normalizeDateString, normalizeModelId, parseEmbeddedJson, parseSSEResponse, parseSkillFromMarkdown, preview, problemDetailsSchema, registerAppFetch, retryWithBackoff, sanitizeAppConfig, serializeSkillToMarkdown, setSpanWithError, signJwt, signSlackLinkToken, signSlackUserToken, stripUnsupportedConstraints, throwIfUniqueConstraintError, toISODateString, unwrapError, validateApiKey, validateInternalServiceProjectAccess, validateInternalServiceTenantAccess, validateOrigin, validatePublicKey, validateTargetAgent, validateTenantId, validateTriggerHeaderValue, verifyAuthorizationHeader, verifyInternalServiceAuthHeader, verifyInternalServiceToken, verifyJwt, verifyPoW, verifyServiceToken, verifySignatureWithConfig, verifySlackLinkToken, verifySlackUserToken, verifyTempToken, verifyTriggerAuth };
+export { ERROR_DOCS_BASE_URL, ErrorCode, InternalServices, JsonTransformer, McpClient, MockLanguageModel, ModelFactory, PinoLogger, SKILL_ENTRY_FILE_PATH, SlackAccessTokenPayloadSchema, SlackLinkIntentSchema, SlackLinkTokenPayloadSchema, TRUSTED_WORK_APP_MCP_PATHS, _resetWaitUntilCache, activeMcpClients, buildConversationMetadata, commonCreateErrorResponses, commonDeleteErrorResponses, commonGetErrorResponses, commonUpdateErrorResponses, computeNextRunAt, configureComposioMCPServer, convertZodToJsonSchema, convertZodToJsonSchemaWithPreview, createApiError, createMockModel, decodeJwtPayload, deleteComposioConnectedAccount, deriveKidFromPublicKey, deriveRelationId, detectAuthenticationRequired, errorResponseSchema, errorSchemaFactory, estimateTokens, exchangeMcpAuthorizationCode, extractBearerToken, extractComposioServerId, extractPreviewFields, extractPublicId, extractUsageTokens, fetchComposioServers, fetchSingleComposioServer, flushTraces, formatMessagesForLLM, formatMessagesForLLMContext, gatewayCostMiddleware, generateApiKey, generateAppCredential, generateId, generateInternalServiceToken, generateServiceToken, getComposioInstance, getComposioOAuthRedirectUrl, getComposioUserId, getConversationId, getCredentialStoreLookupKeyFromRetrievalParams, getDatabaseErrorLogContext, getInProcessFetch, getJwtSecret, getLogger, getMetadataFromApiKey, getPoWErrorMessage, getTracer, getWaitUntil, handleApiError, hasIssuer, hashApiKey, hashAuthenticationHeaders, hashTriggerHeaderValue, initiateMcpOAuthFlow, interpolateTemplate, isApiKeyExpired, isComposioMCPServerAuthenticated, isDevelopment, isInternalServiceToken, isPoWEnabled, isProduction, isSlackUserToken, isTest, isThirdPartyMCPServerAuthenticated, isTrustedWorkAppMcpUrl, isUniqueConstraintError, isZodSchema, loggerFactory, makeAllPropertiesRequired, maskApiKey, normalizeDataComponentSchema, normalizeDateString, normalizeModelId, parseEmbeddedJson, parseSSEResponse, parseSkillFromMarkdown, preview, problemDetailsSchema, registerAppFetch, retryWithBackoff, runWithLogContext, sanitizeAppConfig, serializeSkillToMarkdown, setSpanWithError, signJwt, signSlackLinkToken, signSlackUserToken, stripUnsupportedConstraints, throwIfUniqueConstraintError, toISODateString, unwrapError, validateApiKey, validateInternalServiceProjectAccess, validateInternalServiceTenantAccess, validateOrigin, validatePublicKey, validateTargetAgent, validateTenantId, validateTriggerHeaderValue, verifyAuthorizationHeader, verifyInternalServiceAuthHeader, verifyInternalServiceToken, verifyJwt, verifyPoW, verifyServiceToken, verifySignatureWithConfig, verifySlackLinkToken, verifySlackUserToken, verifyTempToken, verifyTriggerAuth };

package/dist/utils/jwt-helpers.js

@@ -13,7 +13,7 @@ function getJwtSecret() {
 	const secret = env.INKEEP_AGENTS_JWT_SIGNING_SECRET;
 	if (!secret) {
 		if (env.ENVIRONMENT === "production") throw new Error("INKEEP_AGENTS_JWT_SIGNING_SECRET environment variable is required in production");
-		logger.warn({}, "INKEEP_AGENTS_JWT_SIGNING_SECRET not set, using insecure default. DO NOT USE IN PRODUCTION!");
+		logger.warn("INKEEP_AGENTS_JWT_SIGNING_SECRET not set, using insecure default. DO NOT USE IN PRODUCTION!");
 		return new TextEncoder().encode(DEV_SECRET);
 	}
 	return new TextEncoder().encode(secret);

package/dist/utils/logger.d.ts

@@ -1,7 +1,7 @@
 import { Logger, LoggerOptions, TransportSingleOptions } from "pino";
 
 //#region src/utils/logger.d.ts
-
+declare function runWithLogContext<T>(bindings: Record<string, unknown>, fn: () => T): T;
 /**
  * Configuration options for PinoLogger
  */
@@ -10,6 +10,10 @@ interface PinoLoggerConfig {
   options?: LoggerOptions;
   /** Pino transport configuration */
   transportConfigs?: TransportSingleOptions[];
+  /** Pre-built pino instance (used internally by .with()) */
+  fromInstance?: Logger;
+  /** When true, disables ALS proxying (used by .with() for snapshot semantics) */
+  snapshot?: boolean;
 }
 /**
  * Pino logger implementation with transport customization support
@@ -19,6 +23,8 @@ declare class PinoLogger {
   private transportConfigs;
   private pinoInstance;
   private options;
+  private alsChildCache;
+  private isSnapshot;
   constructor(name: string, config?: PinoLoggerConfig);
   /**
    * Recreate the pino instance with current transports
@@ -44,9 +50,22 @@ declare class PinoLogger {
    * Get the underlying pino instance for advanced usage
    */
   getPinoInstance(): Logger;
+  private resolveInstance;
+  /**
+   * Creates a new PinoLogger with the given bindings baked in (snapshot semantics).
+   * Captures the current ALS context at call time. The returned logger does NOT
+   * pick up subsequent ALS context changes — use for class member loggers that
+   * are constructed once and reused within a request scope.
+   */
+  with(bindings: Record<string, unknown>): PinoLogger;
+  child(bindings: Record<string, unknown>): PinoLogger;
+  error(message: string): void;
   error(data: any, message: string): void;
+  warn(message: string): void;
   warn(data: any, message: string): void;
+  info(message: string): void;
   info(data: any, message: string): void;
+  debug(message: string): void;
   debug(data: any, message: string): void;
 }
 /**
@@ -83,4 +102,4 @@ declare const loggerFactory: LoggerFactory;
  */
 declare function getLogger(name: string): PinoLogger;
 //#endregion
-export { LoggerFactoryConfig, PinoLogger, PinoLoggerConfig, getLogger, loggerFactory };
+export { LoggerFactoryConfig, PinoLogger, PinoLoggerConfig, getLogger, loggerFactory, runWithLogContext };

package/dist/utils/logger.js

@@ -1,3 +1,4 @@
+import { AsyncLocalStorage } from "node:async_hooks";
 import pino from "pino";
 import pinoPretty from "pino-pretty";
 
@@ -13,19 +14,42 @@ function shouldColorize() {
 	if (process.env.NO_COLOR && process.env.NO_COLOR !== "") return false;
 	return process.stdout.isTTY ?? false;
 }
+const loggerStorage = new AsyncLocalStorage();
+function runWithLogContext(bindings, fn) {
+	const child = (loggerStorage.getStore() ?? basePinoInstance).child(bindings);
+	return loggerStorage.run(child, fn);
+}
+let basePinoInstance = pino({ level: "silent" });
+function setBasePinoInstance(instance) {
+	basePinoInstance = instance;
+}
 /**
 * Pino logger implementation with transport customization support
 */
-var PinoLogger = class {
+var PinoLogger = class PinoLogger {
 	transportConfigs = [];
 	pinoInstance;
 	options;
+	alsChildCache = /* @__PURE__ */ new WeakMap();
+	isSnapshot;
 	constructor(name, config = {}) {
 		this.name = name;
+		if (config.fromInstance) {
+			this.pinoInstance = config.fromInstance;
+			this.options = {};
+			this.isSnapshot = config.snapshot ?? false;
+			if (!this.isSnapshot) setBasePinoInstance(this.pinoInstance);
+			return;
+		}
+		this.isSnapshot = false;
 		this.options = {
 			name: this.name,
 			level: process.env.LOG_LEVEL || (process.env.ENVIRONMENT === "test" ? "silent" : "info"),
-			serializers: { obj: (value) => ({ ...value }) },
+			serializers: {
+				err: pino.stdSerializers.err,
+				error: pino.stdSerializers.err,
+				obj: (value) => ({ ...value })
+			},
 			redact: [
 				"req.headers.authorization",
 				"req.headers[\"x-inkeep-admin-authentication\"]",
@@ -47,12 +71,14 @@ var PinoLogger = class {
 			console.warn("Warning: pino-pretty failed, using standard JSON output:", error);
 			this.pinoInstance = pino(this.options);
 		}
+		setBasePinoInstance(this.pinoInstance);
 	}
 	/**
 	* Recreate the pino instance with current transports
 	*/
 	recreateInstance() {
 		if (this.pinoInstance && typeof this.pinoInstance.flush === "function") this.pinoInstance.flush();
+		this.alsChildCache = /* @__PURE__ */ new WeakMap();
 		if (this.transportConfigs.length === 0) try {
 			const prettyStream = pinoPretty({
 				colorize: shouldColorize(),
@@ -108,17 +134,47 @@ var PinoLogger = class {
 	getPinoInstance() {
 		return this.pinoInstance;
 	}
-	error(data, message) {
-		this.pinoInstance.error(data, message);
+	resolveInstance() {
+		if (this.isSnapshot) return this.pinoInstance;
+		const alsInstance = loggerStorage.getStore();
+		if (!alsInstance) return this.pinoInstance;
+		let cached = this.alsChildCache.get(alsInstance);
+		if (!cached) {
+			cached = alsInstance.child({ module: this.name });
+			this.alsChildCache.set(alsInstance, cached);
+		}
+		return cached;
+	}
+	/**
+	* Creates a new PinoLogger with the given bindings baked in (snapshot semantics).
+	* Captures the current ALS context at call time. The returned logger does NOT
+	* pick up subsequent ALS context changes — use for class member loggers that
+	* are constructed once and reused within a request scope.
+	*/
+	with(bindings) {
+		return new PinoLogger(this.name, {
+			fromInstance: this.resolveInstance().child(bindings),
+			snapshot: true
+		});
+	}
+	child(bindings) {
+		return this.with(bindings);
+	}
+	error(dataOrMessage, message) {
+		if (message === void 0) this.resolveInstance().error(dataOrMessage);
+		else this.resolveInstance().error(dataOrMessage, message);
 	}
-	warn(data, message) {
-		this.pinoInstance.warn(data, message);
+	warn(dataOrMessage, message) {
+		if (message === void 0) this.resolveInstance().warn(dataOrMessage);
+		else this.resolveInstance().warn(dataOrMessage, message);
 	}
-	info(data, message) {
-		this.pinoInstance.info(data, message);
+	info(dataOrMessage, message) {
+		if (message === void 0) this.resolveInstance().info(dataOrMessage);
+		else this.resolveInstance().info(dataOrMessage, message);
 	}
-	debug(data, message) {
-		this.pinoInstance.debug(data, message);
+	debug(dataOrMessage, message) {
+		if (message === void 0) this.resolveInstance().debug(dataOrMessage);
+		else this.resolveInstance().debug(dataOrMessage, message);
 	}
 };
 /**
@@ -167,4 +223,4 @@ function getLogger(name) {
 }
 
 //#endregion
-export { PinoLogger, getLogger, loggerFactory };
+export { PinoLogger, getLogger, loggerFactory, runWithLogContext };

package/dist/utils/third-party-mcp-servers/composio-client.js

@@ -113,7 +113,7 @@ function extractComposioServerId(mcpUrl) {
 async function deleteComposioConnectedAccount(accountId) {
 	const composioInstance = getComposioInstance();
 	if (!composioInstance) {
-		logger$1.info({}, "Composio not configured, skipping account deletion");
+		logger$1.info("Composio not configured, skipping account deletion");
 		return false;
 	}
 	try {
@@ -131,7 +131,7 @@ async function deleteComposioConnectedAccount(accountId) {
 async function fetchComposioConnectedAccounts(derivedUserId) {
 	const composioInstance = getComposioInstance();
 	if (!composioInstance) {
-		logger$1.info({}, "Composio not configured, skipping connected accounts fetch");
+		logger$1.info("Composio not configured, skipping connected accounts fetch");
 		return null;
 	}
 	try {
@@ -155,7 +155,7 @@ async function fetchComposioConnectedAccounts(derivedUserId) {
 */
 async function isComposioMCPServerAuthenticated(tenantId, projectId, mcpServerUrl, credentialScope = "project", userId) {
 	if (!process.env.COMPOSIO_API_KEY) {
-		logger$1.info({}, "Composio API key not configured, skipping auth check");
+		logger$1.info("Composio API key not configured, skipping auth check");
 		return { authenticated: false };
 	}
 	const serverId = extractComposioServerId(mcpServerUrl);
@@ -166,7 +166,7 @@ async function isComposioMCPServerAuthenticated(tenantId, projectId, mcpServerUr
 	const composioUserId = getComposioUserId(tenantId, projectId, credentialScope, userId);
 	const composioInstance = getComposioInstance();
 	if (!composioInstance) {
-		logger$1.info({}, "Composio not configured, skipping auth check");
+		logger$1.info("Composio not configured, skipping auth check");
 		return { authenticated: false };
 	}
 	try {
@@ -250,7 +250,7 @@ async function ensureComposioAccount(composioMcpServer, derivedUserId, staleAcco
 */
 async function getComposioOAuthRedirectUrl(tenantId, projectId, mcpServerUrl, credentialScope, userId) {
 	if (!process.env.COMPOSIO_API_KEY) {
-		logger$1.info({}, "Composio API key not configured");
+		logger$1.info("Composio API key not configured");
 		return null;
 	}
 	const serverId = extractComposioServerId(mcpServerUrl);
@@ -260,7 +260,7 @@ async function getComposioOAuthRedirectUrl(tenantId, projectId, mcpServerUrl, cr
 	}
 	const composioInstance = getComposioInstance();
 	if (!composioInstance) {
-		logger$1.info({}, "Composio not configured");
+		logger$1.info("Composio not configured");
 		return null;
 	}
 	const composioUserId = getComposioUserId(tenantId, projectId, credentialScope, userId);
@@ -300,12 +300,12 @@ async function transformComposioServer(composioMcpServer, authenticatedAuthConfi
 */
 async function fetchComposioServers() {
 	if (!process.env.COMPOSIO_API_KEY) {
-		logger$1.info({}, "COMPOSIO_API_KEY not configured, skipping Composio servers");
+		logger$1.info("COMPOSIO_API_KEY not configured, skipping Composio servers");
 		return [];
 	}
 	const composioInstance = getComposioInstance();
 	if (!composioInstance) {
-		logger$1.info({}, "Composio not configured, returning empty list");
+		logger$1.info("Composio not configured, returning empty list");
 		return [];
 	}
 	try {
@@ -327,13 +327,13 @@ async function fetchComposioServers() {
 */
 async function fetchSingleComposioServer(tenantId, projectId, mcpServerUrl, credentialScope = "project", userId) {
 	if (!process.env.COMPOSIO_API_KEY) {
-		logger$1.debug({}, "COMPOSIO_API_KEY not configured");
+		logger$1.debug("COMPOSIO_API_KEY not configured");
 		return null;
 	}
 	const composioUserId = getComposioUserId(tenantId, projectId, credentialScope, userId);
 	const composioInstance = getComposioInstance();
 	if (!composioInstance) {
-		logger$1.info({}, "Composio not configured, returning null");
+		logger$1.info("Composio not configured, returning null");
 		return null;
 	}
 	try {

package/dist/utils/tracer-factory.js

@@ -70,7 +70,7 @@ function getTracer(serviceName, serviceVersion) {
 	try {
 		return trace.getTracer(serviceName, serviceVersion);
 	} catch (_error) {
-		logger.debug({}, "OpenTelemetry tracer not available, using no-op tracer");
+		logger.debug("OpenTelemetry tracer not available, using no-op tracer");
 		return noopTracer;
 	}
 }