@inkeep/agents-manage-api 0.21.0 → 1.0.0

package/dist/index.js

@@ -1,4 +1,4 @@
-import { loadEnvironmentFiles, getLogger, createDatabaseClient, commonGetErrorResponses, AgentListResponse, PaginationQueryParamsSchema, TenantProjectParamsSchema, listAgents, AgentResponse, TenantProjectIdParamsSchema, getAgentById, createApiError, ListResponseSchema, getAgentSubAgentInfos, SingleResponseSchema, TenantProjectAgentParamsSchema, AgentWithinContextOfProjectSchema, getFullAgentDefinition, AgentApiInsertSchema, createAgent, AgentApiUpdateSchema, updateAgent, ErrorResponseSchema, deleteAgent, ApiKeyListResponse, listApiKeysPaginated, ApiKeyResponse, getApiKeyById, ApiKeyApiCreationResponseSchema, ApiKeyApiInsertSchema, generateApiKey, createApiKey, ApiKeyApiUpdateSchema, updateApiKey, deleteApiKey, ArtifactComponentListResponse, listArtifactComponentsPaginated, ArtifactComponentResponse, getArtifactComponentById, ArtifactComponentApiInsertSchema, validatePropsAsJsonSchema, createArtifactComponent, ArtifactComponentApiUpdateSchema, updateArtifactComponent, deleteArtifactComponent, ContextConfigListResponse, listContextConfigsPaginated, ContextConfigResponse, TenantProjectAgentIdParamsSchema, getContextConfigById, ContextConfigApiInsertSchema, createContextConfig, commonUpdateErrorResponses, ContextConfigApiUpdateSchema, updateContextConfig, commonDeleteErrorResponses, deleteContextConfig, CredentialReferenceListResponse, listCredentialReferencesPaginated, CredentialReferenceApiSelectSchema, CredentialReferenceResponse, getCredentialReferenceWithTools, CredentialReferenceApiInsertSchema, createCredentialReference, CredentialReferenceApiUpdateSchema, updateCredentialReference, getCredentialReferenceById, getCredentialStoreLookupKeyFromRetrievalParams, deleteCredentialReference, DataComponentListResponse, listDataComponentsPaginated, DataComponentResponse, getDataComponent, DataComponentApiInsertSchema, createDataComponent, DataComponentApiUpdateSchema, updateDataComponent, deleteDataComponent, ExternalAgentListResponse, listExternalAgentsPaginated, ExternalAgentResponse, getExternalAgent, ExternalAgentApiInsertSchema, createExternalAgent, ExternalAgentApiUpdateSchema, updateExternalAgent, deleteExternalAgent, FunctionListResponse, listFunctions, FunctionResponse, getFunction, FunctionApiInsertSchema, upsertFunction, FunctionApiUpdateSchema, deleteFunction, FunctionToolApiSelectSchema, listFunctionTools, getFunctionToolById, FunctionToolApiInsertSchema, createFunctionTool, FunctionToolApiUpdateSchema, updateFunctionTool, deleteFunctionTool, createFullAgentServerSide, getFullAgent, updateFullAgentServerSide, deleteFullAgent, ProjectListResponse, TenantParamsSchema, listProjectsPaginated, ProjectResponse, TenantIdParamsSchema, getProject, ProjectApiInsertSchema, createProject, ProjectApiUpdateSchema, updateProject, deleteProject, ArtifactComponentApiSelectSchema, getArtifactComponentsForAgent, getAgentsUsingArtifactComponent, SubAgentArtifactComponentApiInsertSchema, SubAgentArtifactComponentApiSelectSchema, getSubAgentById, isArtifactComponentAssociatedWithAgent, associateArtifactComponentWithAgent, RemovedResponseSchema, removeArtifactComponentFromAgent, ExistsResponseSchema, DataComponentApiSelectSchema, getDataComponentsForAgent, getAgentsUsingDataComponent, SubAgentDataComponentApiInsertSchema, SubAgentDataComponentApiSelectSchema, isDataComponentAssociatedWithAgent, associateDataComponentWithAgent, removeDataComponentFromAgent, SubAgentRelationApiSelectSchema, SubAgentRelationQuerySchema, getAgentRelationsBySource, getAgentRelationsByTarget, getExternalAgentRelations, listAgentRelations, getAgentRelationById, SubAgentRelationApiInsertSchema, validateExternalAgent, validateInternalSubAgent, createSubAgentRelation, SubAgentRelationApiUpdateSchema, updateAgentRelation, deleteSubAgentRelation, SubAgentListResponse, listSubAgentsPaginated, SubAgentResponse, SubAgentApiInsertSchema, createSubAgent, SubAgentApiUpdateSchema, updateSubAgent, deleteSubAgent, SubAgentToolRelationApiSelectSchema, getAgentToolRelationByAgent, getAgentToolRelationByTool, listAgentToolRelations, getAgentToolRelationById, getAgentsForTool, SubAgentToolRelationApiInsertSchema, createAgentToolRelation, SubAgentToolRelationApiUpdateSchema, updateAgentToolRelation, deleteAgentToolRelation, McpToolSchema, ToolStatusSchema, listTools, dbResultToMcpTool, getToolById, ToolApiInsertSchema, createTool, ToolApiUpdateSchema, updateTool, deleteTool, CredentialStoreType, generateIdFromName, FullProjectDefinitionSchema, createFullProjectServerSide, getFullProject, updateFullProjectServerSide, deleteFullProject, createDefaultCredentialStores, CredentialStoreRegistry, discoverOAuthEndpoints, handleApiError } from '@inkeep/agents-core';
+import { loadEnvironmentFiles, getLogger, createDatabaseClient, commonGetErrorResponses, AgentListResponse, PaginationQueryParamsSchema, TenantProjectParamsSchema, listAgents, AgentResponse, TenantProjectIdParamsSchema, getAgentById, createApiError, ListResponseSchema, getAgentSubAgentInfos, SingleResponseSchema, TenantProjectAgentParamsSchema, AgentWithinContextOfProjectSchema, getFullAgentDefinition, AgentApiInsertSchema, createAgent, AgentApiUpdateSchema, updateAgent, ErrorResponseSchema, deleteAgent, createFullAgentServerSide, getFullAgent, updateFullAgentServerSide, deleteFullAgent, ApiKeyListResponse, listApiKeysPaginated, ApiKeyResponse, getApiKeyById, ApiKeyApiCreationResponseSchema, ApiKeyApiInsertSchema, generateApiKey, createApiKey, ApiKeyApiUpdateSchema, updateApiKey, deleteApiKey, ArtifactComponentListResponse, listArtifactComponentsPaginated, ArtifactComponentResponse, getArtifactComponentById, ArtifactComponentApiInsertSchema, validatePropsAsJsonSchema, createArtifactComponent, ArtifactComponentApiUpdateSchema, updateArtifactComponent, deleteArtifactComponent, ContextConfigListResponse, listContextConfigsPaginated, ContextConfigResponse, TenantProjectAgentIdParamsSchema, getContextConfigById, ContextConfigApiInsertSchema, createContextConfig, commonUpdateErrorResponses, ContextConfigApiUpdateSchema, updateContextConfig, commonDeleteErrorResponses, deleteContextConfig, CredentialStoreType, CredentialReferenceListResponse, listCredentialReferencesPaginated, CredentialReferenceApiSelectSchema, CredentialReferenceResponse, getCredentialReferenceWithTools, CredentialReferenceApiInsertSchema, createCredentialReference, CredentialReferenceApiUpdateSchema, updateCredentialReference, getCredentialReferenceById, getCredentialStoreLookupKeyFromRetrievalParams, deleteCredentialReference, DataComponentListResponse, listDataComponentsPaginated, DataComponentResponse, getDataComponent, DataComponentApiInsertSchema, createDataComponent, DataComponentApiUpdateSchema, updateDataComponent, deleteDataComponent, ExternalAgentListResponse, listExternalAgentsPaginated, ExternalAgentResponse, getExternalAgent, ExternalAgentApiInsertSchema, createExternalAgent, ExternalAgentApiUpdateSchema, updateExternalAgent, deleteExternalAgent, FunctionListResponse, listFunctions, FunctionResponse, getFunction, FunctionApiInsertSchema, upsertFunction, FunctionApiUpdateSchema, deleteFunction, FunctionToolApiSelectSchema, listFunctionTools, getFunctionToolById, FunctionToolApiInsertSchema, createFunctionTool, FunctionToolApiUpdateSchema, updateFunctionTool, deleteFunctionTool, ProjectListResponse, TenantParamsSchema, listProjectsPaginated, ProjectResponse, TenantIdParamsSchema, getProject, ProjectApiInsertSchema, createProject, ProjectApiUpdateSchema, updateProject, deleteProject, ArtifactComponentApiSelectSchema, getArtifactComponentsForAgent, getAgentsUsingArtifactComponent, SubAgentArtifactComponentApiInsertSchema, SubAgentArtifactComponentApiSelectSchema, getSubAgentById, isArtifactComponentAssociatedWithAgent, associateArtifactComponentWithAgent, RemovedResponseSchema, removeArtifactComponentFromAgent, ExistsResponseSchema, DataComponentApiSelectSchema, getDataComponentsForAgent, getAgentsUsingDataComponent, SubAgentDataComponentApiInsertSchema, SubAgentDataComponentApiSelectSchema, isDataComponentAssociatedWithAgent, associateDataComponentWithAgent, removeDataComponentFromAgent, SubAgentRelationApiSelectSchema, SubAgentRelationQuerySchema, getAgentRelationsBySource, getSubAgentRelationsByTarget, getExternalAgentRelations, listAgentRelations, getAgentRelationById, SubAgentRelationApiInsertSchema, validateExternalAgent, validateInternalSubAgent, createSubAgentRelation, SubAgentRelationApiUpdateSchema, updateAgentRelation, deleteSubAgentRelation, SubAgentListResponse, listSubAgentsPaginated, SubAgentResponse, SubAgentApiInsertSchema, createSubAgent, SubAgentApiUpdateSchema, updateSubAgent, deleteSubAgent, SubAgentToolRelationApiSelectSchema, getAgentToolRelationByAgent, getAgentToolRelationByTool, listAgentToolRelations, getAgentToolRelationById, getAgentsForTool, SubAgentToolRelationApiInsertSchema, createAgentToolRelation, SubAgentToolRelationApiUpdateSchema, updateAgentToolRelation, deleteAgentToolRelation, McpToolSchema, ToolStatusSchema, listTools, dbResultToMcpTool, getToolById, ToolApiInsertSchema, createTool, ToolApiUpdateSchema, updateTool, deleteTool, generateIdFromName, FullProjectDefinitionSchema, createFullProjectServerSide, getFullProject, updateFullProjectServerSide, deleteFullProject, createDefaultCredentialStores, CredentialStoreRegistry, discoverOAuthEndpoints, handleApiError } from '@inkeep/agents-core';
 import { OpenAPIHono, createRoute, z as z$1 } from '@hono/zod-openapi';
 import { Hono } from 'hono';
 import { cors } from 'hono/cors';
@@ -67,10 +67,10 @@ var apiKeyAuth = () => createMiddleware(async (c, next) => {
   await next();
   return;
 });
-function setupOpenAPIRoutes(app22) {
-  app22.get("/openapi.json", (c) => {
+function setupOpenAPIRoutes(app23) {
+  app23.get("/openapi.json", (c) => {
     try {
-      const document = app22.getOpenAPIDocument({
+      const document = app23.getOpenAPIDocument({
         openapi: "3.0.0",
         info: {
           title: "Inkeep Agents Manage API",
@@ -91,7 +91,7 @@ function setupOpenAPIRoutes(app22) {
       return c.json({ error: "Failed to generate OpenAPI document", details: errorDetails }, 500);
     }
   });
-  app22.get(
+  app23.get(
     "/docs",
     swaggerUI({
       url: "/openapi.json",
@@ -204,7 +204,7 @@ app.openapi(
     path: "/{agentId}/sub-agents/{subAgentId}/related",
     summary: "Get Related Agent Infos",
     operationId: "get-related-agent-infos",
-    tags: ["Agent Agent"],
+    tags: ["Agent"],
     request: {
       params: TenantProjectParamsSchema.extend({
         agentId: z.string(),
@@ -253,7 +253,7 @@ app.openapi(
     path: "/{agentId}/full",
     summary: "Get Full Agent Definition",
     operationId: "get-full-agent-definition",
-    tags: ["Agent Agent"],
+    tags: ["Agent"],
     request: {
       params: TenantProjectAgentParamsSchema
     },
@@ -413,8 +413,259 @@ app.openapi(
   }
 );
 var agent_default = app;
+var logger2 = getLogger("agentFull");
 var app2 = new OpenAPIHono();
+var AgentIdParamsSchema = z.object({
+  tenantId: z.string().openapi({
+    description: "Tenant identifier",
+    example: "tenant_123"
+  }),
+  projectId: z.string().openapi({
+    description: "Project identifier",
+    example: "project_456"
+  }),
+  agentId: z.string().openapi({
+    description: "Agent identifier",
+    example: "agent_789"
+  })
+}).openapi("AgentIdParams");
+app2.openapi(
+  createRoute({
+    method: "post",
+    path: "/",
+    summary: "Create Full Agent",
+    operationId: "create-full-agent",
+    tags: ["Full Agent"],
+    description: "Create a complete agent with all agents, tools, and relationships from JSON definition",
+    request: {
+      params: TenantProjectParamsSchema,
+      body: {
+        content: {
+          "application/json": {
+            schema: AgentWithinContextOfProjectSchema
+          }
+        }
+      }
+    },
+    responses: {
+      201: {
+        description: "Full agent created successfully",
+        content: {
+          "application/json": {
+            schema: SingleResponseSchema(AgentWithinContextOfProjectSchema)
+          }
+        }
+      },
+      409: {
+        description: "Agent already exists",
+        content: {
+          "application/json": {
+            schema: ErrorResponseSchema
+          }
+        }
+      },
+      ...commonGetErrorResponses
+    }
+  }),
+  async (c) => {
+    const { tenantId, projectId } = c.req.valid("param");
+    const agentData = c.req.valid("json");
+    const validatedAgentData = AgentWithinContextOfProjectSchema.parse(agentData);
+    const createdAgent = await createFullAgentServerSide(dbClient_default, logger2)(
+      { tenantId, projectId },
+      validatedAgentData
+    );
+    return c.json({ data: createdAgent }, 201);
+  }
+);
 app2.openapi(
+  createRoute({
+    method: "get",
+    path: "/{agentId}",
+    summary: "Get Full Agent",
+    operationId: "get-full-agent",
+    tags: ["Full Agent"],
+    description: "Retrieve a complete agent definition with all agents, tools, and relationships",
+    request: {
+      params: AgentIdParamsSchema
+    },
+    responses: {
+      200: {
+        description: "Full agent found",
+        content: {
+          "application/json": {
+            schema: SingleResponseSchema(AgentWithinContextOfProjectSchema)
+          }
+        }
+      },
+      ...commonGetErrorResponses
+    }
+  }),
+  async (c) => {
+    const { tenantId, projectId, agentId } = c.req.valid("param");
+    try {
+      const agent = await getFullAgent(
+        dbClient_default,
+        logger2
+      )({
+        scopes: { tenantId, projectId, agentId }
+      });
+      if (!agent) {
+        throw createApiError({
+          code: "not_found",
+          message: "Agent not found"
+        });
+      }
+      return c.json({ data: agent });
+    } catch (error) {
+      if (error instanceof Error && error.message.includes("not found")) {
+        throw createApiError({
+          code: "not_found",
+          message: "Agent not found"
+        });
+      }
+      throw createApiError({
+        code: "internal_server_error",
+        message: error instanceof Error ? error.message : "Failed to retrieve agent"
+      });
+    }
+  }
+);
+app2.openapi(
+  createRoute({
+    method: "put",
+    path: "/{agentId}",
+    summary: "Update Full Agent",
+    operationId: "update-full-agent",
+    tags: ["Full Agent"],
+    description: "Update or create a complete agent with all agents, tools, and relationships from JSON definition",
+    request: {
+      params: AgentIdParamsSchema,
+      body: {
+        content: {
+          "application/json": {
+            schema: AgentWithinContextOfProjectSchema
+          }
+        }
+      }
+    },
+    responses: {
+      200: {
+        description: "Full agent updated successfully",
+        content: {
+          "application/json": {
+            schema: SingleResponseSchema(AgentWithinContextOfProjectSchema)
+          }
+        }
+      },
+      201: {
+        description: "Full agent created successfully",
+        content: {
+          "application/json": {
+            schema: SingleResponseSchema(AgentWithinContextOfProjectSchema)
+          }
+        }
+      },
+      ...commonGetErrorResponses
+    }
+  }),
+  async (c) => {
+    const { tenantId, projectId, agentId } = c.req.valid("param");
+    const agentData = c.req.valid("json");
+    try {
+      const validatedAgentData = AgentWithinContextOfProjectSchema.parse(agentData);
+      if (agentId !== validatedAgentData.id) {
+        throw createApiError({
+          code: "bad_request",
+          message: `Agent ID mismatch: expected ${agentId}, got ${validatedAgentData.id}`
+        });
+      }
+      const existingAgent = await getFullAgent(
+        dbClient_default,
+        logger2
+      )({
+        scopes: { tenantId, projectId, agentId }
+      });
+      const isCreate = !existingAgent;
+      const updatedAgent = isCreate ? await createFullAgentServerSide(dbClient_default, logger2)(
+        { tenantId, projectId },
+        validatedAgentData
+      ) : await updateFullAgentServerSide(dbClient_default, logger2)(
+        { tenantId, projectId },
+        validatedAgentData
+      );
+      return c.json({ data: updatedAgent }, isCreate ? 201 : 200);
+    } catch (error) {
+      if (error instanceof z.ZodError) {
+        throw createApiError({
+          code: "bad_request",
+          message: "Invalid agent definition"
+        });
+      }
+      if (error instanceof Error && error.message.includes("ID mismatch")) {
+        throw createApiError({
+          code: "bad_request",
+          message: error.message
+        });
+      }
+      throw createApiError({
+        code: "internal_server_error",
+        message: error instanceof Error ? error.message : "Failed to update agent"
+      });
+    }
+  }
+);
+app2.openapi(
+  createRoute({
+    method: "delete",
+    path: "/{agentId}",
+    summary: "Delete Full Agent",
+    operationId: "delete-full-agent",
+    tags: ["Full Agent"],
+    description: "Delete a complete agent and cascade to all related entities (relationships, not other agents/tools)",
+    request: {
+      params: AgentIdParamsSchema
+    },
+    responses: {
+      204: {
+        description: "Agent deleted successfully"
+      },
+      ...commonGetErrorResponses
+    }
+  }),
+  async (c) => {
+    const { tenantId, projectId, agentId } = c.req.valid("param");
+    try {
+      const deleted = await deleteFullAgent(
+        dbClient_default,
+        logger2
+      )({
+        scopes: { tenantId, projectId, agentId }
+      });
+      if (!deleted) {
+        throw createApiError({
+          code: "not_found",
+          message: "Agent not found"
+        });
+      }
+      return c.body(null, 204);
+    } catch (error) {
+      if (error instanceof Error && error.message.includes("not found")) {
+        throw createApiError({
+          code: "not_found",
+          message: "Agent not found"
+        });
+      }
+      throw createApiError({
+        code: "internal_server_error",
+        message: error instanceof Error ? error.message : "Failed to delete agent"
+      });
+    }
+  }
+);
+var agentFull_default = app2;
+var app3 = new OpenAPIHono();
+app3.openapi(
   createRoute({
     method: "get",
     path: "/",
@@ -457,7 +708,7 @@ app2.openapi(
     });
   }
 );
-app2.openapi(
+app3.openapi(
   createRoute({
     method: "get",
     path: "/{id}",
@@ -502,7 +753,7 @@ app2.openapi(
     });
   }
 );
-app2.openapi(
+app3.openapi(
   createRoute({
     method: "post",
     path: "/",
@@ -572,7 +823,7 @@ app2.openapi(
     }
   }
 );
-app2.openapi(
+app3.openapi(
   createRoute({
     method: "put",
     path: "/{id}",
@@ -629,7 +880,7 @@ app2.openapi(
     });
   }
 );
-app2.openapi(
+app3.openapi(
   createRoute({
     method: "delete",
     path: "/{id}",
@@ -669,9 +920,9 @@ app2.openapi(
     return c.body(null, 204);
   }
 );
-var apiKeys_default = app2;
-var app3 = new OpenAPIHono();
-app3.openapi(
+var apiKeys_default = app3;
+var app4 = new OpenAPIHono();
+app4.openapi(
   createRoute({
     method: "get",
     path: "/",
@@ -705,7 +956,7 @@ app3.openapi(
     return c.json(result);
   }
 );
-app3.openapi(
+app4.openapi(
   createRoute({
     method: "get",
     path: "/{id}",
@@ -742,7 +993,7 @@ app3.openapi(
     return c.json({ data: artifactComponent });
   }
 );
-app3.openapi(
+app4.openapi(
   createRoute({
     method: "post",
     path: "/",
@@ -809,7 +1060,7 @@ app3.openapi(
     }
   }
 );
-app3.openapi(
+app4.openapi(
   createRoute({
     method: "put",
     path: "/{id}",
@@ -875,7 +1126,7 @@ app3.openapi(
     return c.json({ data: updatedArtifactComponent });
   }
 );
-app3.openapi(
+app4.openapi(
   createRoute({
     method: "delete",
     path: "/{id}",
@@ -914,9 +1165,9 @@ app3.openapi(
     return c.body(null, 204);
   }
 );
-var artifactComponents_default = app3;
-var app4 = new OpenAPIHono();
-app4.openapi(
+var artifactComponents_default = app4;
+var app5 = new OpenAPIHono();
+app5.openapi(
   createRoute({
     method: "get",
     path: "/",
@@ -950,7 +1201,7 @@ app4.openapi(
     return c.json(result);
   }
 );
-app4.openapi(
+app5.openapi(
   createRoute({
     method: "get",
     path: "/{id}",
@@ -987,7 +1238,7 @@ app4.openapi(
     return c.json({ data: contextConfig });
   }
 );
-app4.openapi(
+app5.openapi(
   createRoute({
     method: "post",
     path: "/",
@@ -1029,7 +1280,7 @@ app4.openapi(
     return c.json({ data: contextConfig }, 201);
   }
 );
-app4.openapi(
+app5.openapi(
   createRoute({
     method: "put",
     path: "/{id}",
@@ -1075,7 +1326,7 @@ app4.openapi(
     return c.json({ data: updatedContextConfig });
   }
 );
-app4.openapi(
+app5.openapi(
   createRoute({
     method: "delete",
     path: "/{id}",
@@ -1107,9 +1358,139 @@ app4.openapi(
     return c.body(null, 204);
   }
 );
-var contextConfigs_default = app4;
-var app5 = new OpenAPIHono();
-app5.openapi(
+var contextConfigs_default = app5;
+var app6 = new OpenAPIHono();
+var CredentialStoreSchema = z.object({
+  id: z.string().describe("Unique identifier of the credential store"),
+  type: z.enum(CredentialStoreType),
+  available: z.boolean().describe("Whether the store is functional and ready to use"),
+  reason: z.string().nullable().describe("Reason why store is not available, if applicable")
+});
+var CredentialStoreListResponseSchema = z.object({
+  data: z.array(CredentialStoreSchema).describe("List of credential stores")
+});
+var CreateCredentialInStoreRequestSchema = z.object({
+  key: z.string().describe("The credential key"),
+  value: z.string().describe("The credential value")
+});
+var CreateCredentialInStoreResponseSchema = z.object({
+  data: z.object({
+    key: z.string().describe("The credential key"),
+    storeId: z.string().describe("The store ID where credential was created"),
+    createdAt: z.string().describe("ISO timestamp of creation")
+  })
+});
+app6.openapi(
+  createRoute({
+    method: "get",
+    path: "/",
+    summary: "List Credential Stores",
+    operationId: "list-credential-stores",
+    tags: ["Credential Store"],
+    request: {
+      params: TenantProjectParamsSchema
+    },
+    responses: {
+      200: {
+        description: "List of credential stores retrieved successfully",
+        content: {
+          "application/json": {
+            schema: CredentialStoreListResponseSchema
+          }
+        }
+      },
+      ...commonGetErrorResponses
+    }
+  }),
+  async (c) => {
+    const credentialStores = c.get("credentialStores");
+    const allStores = credentialStores.getAll();
+    const storeStatuses = await Promise.all(
+      allStores.map(async (store) => {
+        const { available, reason } = await store.checkAvailability();
+        return {
+          id: store.id,
+          type: store.type,
+          available,
+          reason: reason || null
+        };
+      })
+    );
+    return c.json({
+      data: storeStatuses
+    });
+  }
+);
+app6.openapi(
+  createRoute({
+    method: "post",
+    path: "/{id}/credentials",
+    summary: "Create Credential in Store",
+    operationId: "create-credential-in-store",
+    tags: ["Credential Store"],
+    request: {
+      params: TenantProjectIdParamsSchema.extend({
+        id: z.string().describe("The credential store ID")
+      }),
+      body: {
+        content: {
+          "application/json": {
+            schema: CreateCredentialInStoreRequestSchema
+          }
+        }
+      }
+    },
+    responses: {
+      201: {
+        description: "Credential created successfully",
+        content: {
+          "application/json": {
+            schema: CreateCredentialInStoreResponseSchema
+          }
+        }
+      },
+      ...commonGetErrorResponses
+    }
+  }),
+  async (c) => {
+    const { id: storeId } = c.req.param();
+    const { key, value } = await c.req.json();
+    const credentialStores = c.get("credentialStores");
+    const store = credentialStores.get(storeId);
+    if (!store) {
+      throw createApiError({
+        code: "not_found",
+        message: `Credential store '${storeId}' not found`
+      });
+    }
+    try {
+      const { available, reason } = await store.checkAvailability();
+      if (!available) {
+        throw createApiError({
+          code: "internal_server_error",
+          message: `Credential store '${storeId}' is not available: ${reason}`
+        });
+      }
+      await store.set(key, value);
+      return c.json({
+        data: {
+          key,
+          storeId,
+          createdAt: (/* @__PURE__ */ new Date()).toISOString()
+        }
+      }, 201);
+    } catch (error) {
+      console.error(`Error setting credential in store ${storeId}:`, error);
+      throw createApiError({
+        code: "internal_server_error",
+        message: `Failed to store credential: ${error instanceof Error ? error.message : "Unknown error"}`
+      });
+    }
+  }
+);
+var credentialStores_default = app6;
+var app7 = new OpenAPIHono();
+app7.openapi(
   createRoute({
     method: "get",
     path: "/",
@@ -1144,7 +1525,7 @@ app5.openapi(
     return c.json(validatedResult);
   }
 );
-app5.openapi(
+app7.openapi(
   createRoute({
     method: "get",
     path: "/{id}",
@@ -1182,7 +1563,7 @@ app5.openapi(
     return c.json({ data: validatedCredential });
   }
 );
-app5.openapi(
+app7.openapi(
   createRoute({
     method: "post",
     path: "/",
@@ -1224,7 +1605,7 @@ app5.openapi(
     return c.json({ data: validatedCredential }, 201);
   }
 );
-app5.openapi(
+app7.openapi(
   createRoute({
     method: "put",
     path: "/{id}",
@@ -1271,7 +1652,7 @@ app5.openapi(
     return c.json({ data: validatedCredential });
   }
 );
-app5.openapi(
+app7.openapi(
   createRoute({
     method: "delete",
     path: "/{id}",
@@ -1342,9 +1723,9 @@ app5.openapi(
     return c.body(null, 204);
   }
 );
-var credentials_default = app5;
-var app6 = new OpenAPIHono();
-app6.openapi(
+var credentials_default = app7;
+var app8 = new OpenAPIHono();
+app8.openapi(
   createRoute({
     method: "get",
     path: "/",
@@ -1378,7 +1759,7 @@ app6.openapi(
     return c.json(result);
   }
 );
-app6.openapi(
+app8.openapi(
   createRoute({
     method: "get",
     path: "/{id}",
@@ -1415,7 +1796,7 @@ app6.openapi(
     return c.json({ data: dataComponent });
   }
 );
-app6.openapi(
+app8.openapi(
   createRoute({
     method: "post",
     path: "/",
@@ -1466,7 +1847,7 @@ app6.openapi(
     return c.json({ data: dataComponent }, 201);
   }
 );
-app6.openapi(
+app8.openapi(
   createRoute({
     method: "put",
     path: "/{id}",
@@ -1522,7 +1903,7 @@ app6.openapi(
     return c.json({ data: updatedDataComponent });
   }
 );
-app6.openapi(
+app8.openapi(
   createRoute({
     method: "delete",
     path: "/{id}",
@@ -1561,9 +1942,9 @@ app6.openapi(
     return c.body(null, 204);
   }
 );
-var dataComponents_default = app6;
-var app7 = new OpenAPIHono();
-app7.openapi(
+var dataComponents_default = app8;
+var app9 = new OpenAPIHono();
+app9.openapi(
   createRoute({
     method: "get",
     path: "/",
@@ -1603,7 +1984,7 @@ app7.openapi(
     return c.json(dataWithType);
   }
 );
-app7.openapi(
+app9.openapi(
   createRoute({
     method: "get",
     path: "/{id}",
@@ -1644,7 +2025,7 @@ app7.openapi(
     return c.json({ data: agentWithType });
   }
 );
-app7.openapi(
+app9.openapi(
   createRoute({
     method: "post",
     path: "/",
@@ -1695,7 +2076,7 @@ app7.openapi(
     return c.json({ data: agentWithType }, 201);
   }
 );
-app7.openapi(
+app9.openapi(
   createRoute({
     method: "put",
     path: "/{id}",
@@ -1745,7 +2126,7 @@ app7.openapi(
     return c.json({ data: agentWithType });
   }
 );
-app7.openapi(
+app9.openapi(
   createRoute({
     method: "delete",
     path: "/{id}",
@@ -1784,10 +2165,10 @@ app7.openapi(
     return c.body(null, 204);
   }
 );
-var externalAgents_default = app7;
-var logger2 = getLogger("functions");
-var app8 = new OpenAPIHono();
-app8.openapi(
+var externalAgents_default = app9;
+var logger3 = getLogger("functions");
+var app10 = new OpenAPIHono();
+app10.openapi(
   createRoute({
     method: "get",
     path: "/",
@@ -1824,7 +2205,7 @@ app8.openapi(
         }
       });
     } catch (error) {
-      logger2.error({ error, tenantId }, "Failed to list functions");
+      logger3.error({ error, tenantId }, "Failed to list functions");
       return c.json(
         createApiError({ code: "internal_server_error", message: "Failed to list functions" }),
         500
@@ -1832,7 +2213,7 @@ app8.openapi(
     }
   }
 );
-app8.openapi(
+app10.openapi(
   createRoute({
     method: "get",
     path: "/{id}",
@@ -1869,7 +2250,7 @@ app8.openapi(
       }
       return c.json({ data: functionData });
     } catch (error) {
-      logger2.error({ error, tenantId, id }, "Failed to get function");
+      logger3.error({ error, tenantId, id }, "Failed to get function");
       return c.json(
         createApiError({ code: "internal_server_error", message: "Failed to get function" }),
         500
@@ -1877,7 +2258,7 @@ app8.openapi(
     }
   }
 );
-app8.openapi(
+app10.openapi(
   createRoute({
     method: "post",
     path: "/",
@@ -1922,10 +2303,10 @@ app8.openapi(
         functionId: id,
         scopes: { tenantId, projectId }
       });
-      logger2.info({ tenantId, functionId: id }, "Function created");
+      logger3.info({ tenantId, functionId: id }, "Function created");
       return c.json({ data: created }, 201);
     } catch (error) {
-      logger2.error({ error, tenantId, functionData }, "Failed to create function");
+      logger3.error({ error, tenantId, functionData }, "Failed to create function");
       return c.json(
         createApiError({ code: "internal_server_error", message: "Failed to create function" }),
         500
@@ -1933,7 +2314,7 @@ app8.openapi(
     }
   }
 );
-app8.openapi(
+app10.openapi(
   createRoute({
     method: "put",
     path: "/{id}",
@@ -1988,10 +2369,10 @@ app8.openapi(
         functionId: id,
         scopes: { tenantId, projectId }
       });
-      logger2.info({ tenantId, functionId: id }, "Function updated");
+      logger3.info({ tenantId, functionId: id }, "Function updated");
       return c.json({ data: updated });
     } catch (error) {
-      logger2.error({ error, tenantId, id, updateData }, "Failed to update function");
+      logger3.error({ error, tenantId, id, updateData }, "Failed to update function");
       return c.json(
         createApiError({ code: "internal_server_error", message: "Failed to update function" }),
         500
@@ -1999,7 +2380,7 @@ app8.openapi(
     }
   }
 );
-app8.openapi(
+app10.openapi(
   createRoute({
     method: "delete",
     path: "/{id}",
@@ -2033,10 +2414,10 @@ app8.openapi(
         functionId: id,
         scopes: { tenantId, projectId }
       });
-      logger2.info({ tenantId, functionId: id }, "Function deleted");
+      logger3.info({ tenantId, functionId: id }, "Function deleted");
       return c.body(null, 204);
     } catch (error) {
-      logger2.error({ error, tenantId, id }, "Failed to delete function");
+      logger3.error({ error, tenantId, id }, "Failed to delete function");
       return c.json(
         createApiError({ code: "internal_server_error", message: "Failed to delete function" }),
         500
@@ -2044,10 +2425,10 @@ app8.openapi(
     }
   }
 );
-var functions_default = app8;
-var logger3 = getLogger("functionTools");
-var app9 = new OpenAPIHono();
-app9.openapi(
+var functions_default = app10;
+var logger4 = getLogger("functionTools");
+var app11 = new OpenAPIHono();
+app11.openapi(
   createRoute({
     method: "get",
     path: "/",
@@ -2080,7 +2461,7 @@ app9.openapi(
       });
       return c.json(result);
     } catch (error) {
-      logger3.error({ error, tenantId, projectId, agentId }, "Failed to list function tools");
+      logger4.error({ error, tenantId, projectId, agentId }, "Failed to list function tools");
       return c.json(
         createApiError({ code: "internal_server_error", message: "Failed to list function tools" }),
         500
@@ -2088,7 +2469,7 @@ app9.openapi(
     }
   }
 );
-app9.openapi(
+app11.openapi(
   createRoute({
     method: "get",
     path: "/:id",
@@ -2127,7 +2508,7 @@ app9.openapi(
       }
       return c.json({ data: functionTool });
     } catch (error) {
-      logger3.error({ error, tenantId, projectId, agentId, id }, "Failed to get function tool");
+      logger4.error({ error, tenantId, projectId, agentId, id }, "Failed to get function tool");
       return c.json(
         createApiError({ code: "internal_server_error", message: "Failed to get function tool" }),
         500
@@ -2135,7 +2516,7 @@ app9.openapi(
     }
   }
 );
-app9.openapi(
+app11.openapi(
   createRoute({
     method: "post",
     path: "/",
@@ -2165,288 +2546,55 @@ app9.openapi(
     }
   }),
   async (c) => {
-    const { tenantId, projectId, agentId } = c.req.valid("param");
-    const body = c.req.valid("json");
-    try {
-      const id = body.id || nanoid();
-      const functionTool = await createFunctionTool(dbClient_default)({
-        scopes: { tenantId, projectId, agentId },
-        data: {
-          ...body,
-          id
-        }
-      });
-      return c.json({ data: functionTool }, 201);
-    } catch (error) {
-      logger3.error({ error, tenantId, projectId, agentId, body }, "Failed to create function tool");
-      return c.json(
-        createApiError({
-          code: "internal_server_error",
-          message: "Failed to create function tool"
-        }),
-        500
-      );
-    }
-  }
-);
-app9.openapi(
-  createRoute({
-    method: "put",
-    path: "/:id",
-    summary: "Update Function Tool",
-    operationId: "update-function-tool",
-    tags: ["Function Tools"],
-    request: {
-      params: TenantProjectAgentParamsSchema.extend({
-        id: z.string()
-      }),
-      body: {
-        content: {
-          "application/json": {
-            schema: FunctionToolApiUpdateSchema
-          }
-        }
-      }
-    },
-    responses: {
-      200: {
-        description: "Function tool updated successfully",
-        content: {
-          "application/json": {
-            schema: SingleResponseSchema(FunctionToolApiSelectSchema)
-          }
-        }
-      },
-      ...commonGetErrorResponses
-    }
-  }),
-  async (c) => {
-    const { tenantId, projectId, agentId, id } = c.req.valid("param");
-    const body = c.req.valid("json");
-    try {
-      const functionTool = await updateFunctionTool(dbClient_default)({
-        scopes: { tenantId, projectId, agentId },
-        functionToolId: id,
-        data: body
-      });
-      if (!functionTool) {
-        return c.json(
-          createApiError({ code: "not_found", message: "Function tool not found" }),
-          404
-        );
-      }
-      return c.json({ data: functionTool });
-    } catch (error) {
-      logger3.error(
-        { error, tenantId, projectId, agentId, id, body },
-        "Failed to update function tool"
-      );
-      return c.json(
-        createApiError({
-          code: "internal_server_error",
-          message: "Failed to update function tool"
-        }),
-        500
-      );
-    }
-  }
-);
-app9.openapi(
-  createRoute({
-    method: "delete",
-    path: "/:id",
-    summary: "Delete Function Tool",
-    operationId: "delete-function-tool",
-    tags: ["Function Tools"],
-    request: {
-      params: TenantProjectAgentParamsSchema.extend({
-        id: z.string()
-      })
-    },
-    responses: {
-      204: {
-        description: "Function tool deleted successfully"
-      },
-      ...commonGetErrorResponses
-    }
-  }),
-  async (c) => {
-    const { tenantId, projectId, agentId, id } = c.req.valid("param");
-    try {
-      const deleted = await deleteFunctionTool(dbClient_default)({
-        scopes: { tenantId, projectId, agentId },
-        functionToolId: id
-      });
-      if (!deleted) {
-        return c.json(
-          createApiError({ code: "not_found", message: "Function tool not found" }),
-          404
-        );
-      }
-      return c.body(null, 204);
-    } catch (error) {
-      logger3.error({ error, tenantId, projectId, agentId, id }, "Failed to delete function tool");
-      return c.json(
-        createApiError({
-          code: "internal_server_error",
-          message: "Failed to delete function tool"
-        }),
-        500
-      );
-    }
-  }
-);
-var functionTools_default = app9;
-var logger4 = getLogger("agentFull");
-var app10 = new OpenAPIHono();
-var AgentIdParamsSchema = z.object({
-  tenantId: z.string().openapi({
-    description: "Tenant identifier",
-    example: "tenant_123"
-  }),
-  projectId: z.string().openapi({
-    description: "Project identifier",
-    example: "project_456"
-  }),
-  agentId: z.string().openapi({
-    description: "Agent identifier",
-    example: "agent_789"
-  })
-}).openapi("AgentIdParams");
-app10.openapi(
-  createRoute({
-    method: "post",
-    path: "/",
-    summary: "Create Full Agent",
-    operationId: "create-full-agent",
-    tags: ["Full Agent"],
-    description: "Create a complete agent with all agents, tools, and relationships from JSON definition",
-    request: {
-      params: TenantProjectParamsSchema,
-      body: {
-        content: {
-          "application/json": {
-            schema: AgentWithinContextOfProjectSchema
-          }
-        }
-      }
-    },
-    responses: {
-      201: {
-        description: "Full agent created successfully",
-        content: {
-          "application/json": {
-            schema: SingleResponseSchema(AgentWithinContextOfProjectSchema)
-          }
-        }
-      },
-      409: {
-        description: "Agent already exists",
-        content: {
-          "application/json": {
-            schema: ErrorResponseSchema
-          }
-        }
-      },
-      ...commonGetErrorResponses
-    }
-  }),
-  async (c) => {
-    const { tenantId, projectId } = c.req.valid("param");
-    const agentData = c.req.valid("json");
-    const validatedAgentData = AgentWithinContextOfProjectSchema.parse(agentData);
-    const createdAgent = await createFullAgentServerSide(dbClient_default, logger4)(
-      { tenantId, projectId },
-      validatedAgentData
-    );
-    return c.json({ data: createdAgent }, 201);
-  }
-);
-app10.openapi(
-  createRoute({
-    method: "get",
-    path: "/{agentId}",
-    summary: "Get Full Agent",
-    operationId: "get-full-agent",
-    tags: ["Full Agent"],
-    description: "Retrieve a complete agent definition with all agents, tools, and relationships",
-    request: {
-      params: AgentIdParamsSchema
-    },
-    responses: {
-      200: {
-        description: "Full agent found",
-        content: {
-          "application/json": {
-            schema: SingleResponseSchema(AgentWithinContextOfProjectSchema)
-          }
-        }
-      },
-      ...commonGetErrorResponses
-    }
-  }),
-  async (c) => {
-    const { tenantId, projectId, agentId } = c.req.valid("param");
-    try {
-      const agent = await getFullAgent(
-        dbClient_default,
-        logger4
-      )({
-        scopes: { tenantId, projectId, agentId }
-      });
-      if (!agent) {
-        throw createApiError({
-          code: "not_found",
-          message: "Agent not found"
-        });
-      }
-      return c.json({ data: agent });
-    } catch (error) {
-      if (error instanceof Error && error.message.includes("not found")) {
-        throw createApiError({
-          code: "not_found",
-          message: "Agent not found"
-        });
-      }
-      throw createApiError({
-        code: "internal_server_error",
-        message: error instanceof Error ? error.message : "Failed to retrieve agent"
+    const { tenantId, projectId, agentId } = c.req.valid("param");
+    const body = c.req.valid("json");
+    try {
+      const id = body.id || nanoid();
+      const functionTool = await createFunctionTool(dbClient_default)({
+        scopes: { tenantId, projectId, agentId },
+        data: {
+          ...body,
+          id
+        }
       });
+      return c.json({ data: functionTool }, 201);
+    } catch (error) {
+      logger4.error({ error, tenantId, projectId, agentId, body }, "Failed to create function tool");
+      return c.json(
+        createApiError({
+          code: "internal_server_error",
+          message: "Failed to create function tool"
+        }),
+        500
+      );
     }
   }
 );
-app10.openapi(
+app11.openapi(
   createRoute({
     method: "put",
-    path: "/{agentId}",
-    summary: "Update Full Agent",
-    operationId: "update-full-agent",
-    tags: ["Full Agent"],
-    description: "Update or create a complete agent with all agents, tools, and relationships from JSON definition",
+    path: "/:id",
+    summary: "Update Function Tool",
+    operationId: "update-function-tool",
+    tags: ["Function Tools"],
     request: {
-      params: AgentIdParamsSchema,
+      params: TenantProjectAgentParamsSchema.extend({
+        id: z.string()
+      }),
       body: {
         content: {
           "application/json": {
-            schema: AgentWithinContextOfProjectSchema
+            schema: FunctionToolApiUpdateSchema
           }
         }
       }
     },
     responses: {
       200: {
-        description: "Full agent updated successfully",
-        content: {
-          "application/json": {
-            schema: SingleResponseSchema(AgentWithinContextOfProjectSchema)
-          }
-        }
-      },
-      201: {
-        description: "Full agent created successfully",
+        description: "Function tool updated successfully",
         content: {
           "application/json": {
-            schema: SingleResponseSchema(AgentWithinContextOfProjectSchema)
+            schema: SingleResponseSchema(FunctionToolApiSelectSchema)
           }
         }
       },
@@ -2454,102 +2602,84 @@ app10.openapi(
     }
   }),
   async (c) => {
-    const { tenantId, projectId, agentId } = c.req.valid("param");
-    const agentData = c.req.valid("json");
+    const { tenantId, projectId, agentId, id } = c.req.valid("param");
+    const body = c.req.valid("json");
     try {
-      const validatedAgentData = AgentWithinContextOfProjectSchema.parse(agentData);
-      if (agentId !== validatedAgentData.id) {
-        throw createApiError({
-          code: "bad_request",
-          message: `Agent ID mismatch: expected ${agentId}, got ${validatedAgentData.id}`
-        });
-      }
-      const existingAgent = await getFullAgent(
-        dbClient_default,
-        logger4
-      )({
-        scopes: { tenantId, projectId, agentId }
+      const functionTool = await updateFunctionTool(dbClient_default)({
+        scopes: { tenantId, projectId, agentId },
+        functionToolId: id,
+        data: body
       });
-      const isCreate = !existingAgent;
-      const updatedAgent = isCreate ? await createFullAgentServerSide(dbClient_default, logger4)(
-        { tenantId, projectId },
-        validatedAgentData
-      ) : await updateFullAgentServerSide(dbClient_default, logger4)(
-        { tenantId, projectId },
-        validatedAgentData
-      );
-      return c.json({ data: updatedAgent }, isCreate ? 201 : 200);
-    } catch (error) {
-      if (error instanceof z.ZodError) {
-        throw createApiError({
-          code: "bad_request",
-          message: "Invalid agent definition"
-        });
-      }
-      if (error instanceof Error && error.message.includes("ID mismatch")) {
-        throw createApiError({
-          code: "bad_request",
-          message: error.message
-        });
+      if (!functionTool) {
+        return c.json(
+          createApiError({ code: "not_found", message: "Function tool not found" }),
+          404
+        );
       }
-      throw createApiError({
-        code: "internal_server_error",
-        message: error instanceof Error ? error.message : "Failed to update agent"
-      });
+      return c.json({ data: functionTool });
+    } catch (error) {
+      logger4.error(
+        { error, tenantId, projectId, agentId, id, body },
+        "Failed to update function tool"
+      );
+      return c.json(
+        createApiError({
+          code: "internal_server_error",
+          message: "Failed to update function tool"
+        }),
+        500
+      );
     }
   }
 );
-app10.openapi(
+app11.openapi(
   createRoute({
     method: "delete",
-    path: "/{agentId}",
-    summary: "Delete Full Agent",
-    operationId: "delete-full-agent",
-    tags: ["Full Agent"],
-    description: "Delete a complete agent and cascade to all related entities (relationships, not other agents/tools)",
+    path: "/:id",
+    summary: "Delete Function Tool",
+    operationId: "delete-function-tool",
+    tags: ["Function Tools"],
     request: {
-      params: AgentIdParamsSchema
+      params: TenantProjectAgentParamsSchema.extend({
+        id: z.string()
+      })
     },
     responses: {
       204: {
-        description: "Agent deleted successfully"
+        description: "Function tool deleted successfully"
       },
       ...commonGetErrorResponses
     }
   }),
   async (c) => {
-    const { tenantId, projectId, agentId } = c.req.valid("param");
+    const { tenantId, projectId, agentId, id } = c.req.valid("param");
     try {
-      const deleted = await deleteFullAgent(
-        dbClient_default,
-        logger4
-      )({
-        scopes: { tenantId, projectId, agentId }
+      const deleted = await deleteFunctionTool(dbClient_default)({
+        scopes: { tenantId, projectId, agentId },
+        functionToolId: id
       });
       if (!deleted) {
-        throw createApiError({
-          code: "not_found",
-          message: "Agent not found"
-        });
+        return c.json(
+          createApiError({ code: "not_found", message: "Function tool not found" }),
+          404
+        );
       }
       return c.body(null, 204);
     } catch (error) {
-      if (error instanceof Error && error.message.includes("not found")) {
-        throw createApiError({
-          code: "not_found",
-          message: "Agent not found"
-        });
-      }
-      throw createApiError({
-        code: "internal_server_error",
-        message: error instanceof Error ? error.message : "Failed to delete agent"
-      });
+      logger4.error({ error, tenantId, projectId, agentId, id }, "Failed to delete function tool");
+      return c.json(
+        createApiError({
+          code: "internal_server_error",
+          message: "Failed to delete function tool"
+        }),
+        500
+      );
     }
   }
 );
-var agentFull_default = app10;
-var app11 = new OpenAPIHono();
-app11.openapi(
+var functionTools_default = app11;
+var app12 = new OpenAPIHono();
+app12.openapi(
   createRoute({
     method: "get",
     path: "/",
@@ -2584,7 +2714,7 @@ app11.openapi(
     return c.json(result);
   }
 );
-app11.openapi(
+app12.openapi(
   createRoute({
     method: "get",
     path: "/{id}",
@@ -2619,7 +2749,7 @@ app11.openapi(
     return c.json({ data: project });
   }
 );
-app11.openapi(
+app12.openapi(
   createRoute({
     method: "post",
     path: "/",
@@ -2677,7 +2807,7 @@ app11.openapi(
     }
   }
 );
-app11.openapi(
+app12.openapi(
   createRoute({
     method: "patch",
     path: "/{id}",
@@ -2723,7 +2853,7 @@ app11.openapi(
     return c.json({ data: project });
   }
 );
-app11.openapi(
+app12.openapi(
   createRoute({
     method: "delete",
     path: "/{id}",
@@ -2773,9 +2903,9 @@ app11.openapi(
     }
   }
 );
-var projects_default = app11;
-var app12 = new OpenAPIHono();
-app12.openapi(
+var projects_default = app12;
+var app13 = new OpenAPIHono();
+app13.openapi(
   createRoute({
     method: "get",
     path: "/agent/:subAgentId",
@@ -2811,7 +2941,7 @@ app12.openapi(
     });
   }
 );
-app12.openapi(
+app13.openapi(
   createRoute({
     method: "get",
     path: "/component/:artifactComponentId/agents",
@@ -2851,7 +2981,7 @@ app12.openapi(
     return c.json({ data: agents });
   }
 );
-app12.openapi(
+app13.openapi(
   createRoute({
     method: "post",
     path: "/",
@@ -2928,7 +3058,7 @@ app12.openapi(
     return c.json({ data: association }, 201);
   }
 );
-app12.openapi(
+app13.openapi(
   createRoute({
     method: "delete",
     path: "/agent/:subAgentId/component/:artifactComponentId",
@@ -2971,7 +3101,7 @@ app12.openapi(
     });
   }
 );
-app12.openapi(
+app13.openapi(
   createRoute({
     method: "get",
     path: "/agent/:subAgentId/component/:artifactComponentId/exists",
@@ -3005,9 +3135,9 @@ app12.openapi(
     return c.json({ exists });
   }
 );
-var subAgentArtifactComponents_default = app12;
-var app13 = new OpenAPIHono();
-app13.openapi(
+var subAgentArtifactComponents_default = app13;
+var app14 = new OpenAPIHono();
+app14.openapi(
   createRoute({
     method: "get",
     path: "/agent/:subAgentId",
@@ -3041,7 +3171,7 @@ app13.openapi(
     return c.json({ data: dataComponents });
   }
 );
-app13.openapi(
+app14.openapi(
   createRoute({
     method: "get",
     path: "/component/:dataComponentId/agents",
@@ -3081,7 +3211,7 @@ app13.openapi(
     return c.json({ data: agents });
   }
 );
-app13.openapi(
+app14.openapi(
   createRoute({
     method: "post",
     path: "/",
@@ -3154,7 +3284,7 @@ app13.openapi(
     return c.json({ data: association }, 201);
   }
 );
-app13.openapi(
+app14.openapi(
   createRoute({
     method: "delete",
     path: "/agent/:subAgentId/component/:dataComponentId",
@@ -3197,7 +3327,7 @@ app13.openapi(
     });
   }
 );
-app13.openapi(
+app14.openapi(
   createRoute({
     method: "get",
     path: "/agent/:subAgentId/component/:dataComponentId/exists",
@@ -3231,22 +3361,22 @@ app13.openapi(
     return c.json({ exists });
   }
 );
-var subAgentDataComponents_default = app13;
-var app14 = new OpenAPIHono();
-app14.openapi(
+var subAgentDataComponents_default = app14;
+var app15 = new OpenAPIHono();
+app15.openapi(
   createRoute({
     method: "get",
     path: "/",
-    summary: "List Agent Relations",
-    operationId: "list-agent-relations",
-    tags: ["Agent Relations"],
+    summary: "List Sub Agent Relations",
+    operationId: "list-sub-agent-relations",
+    tags: ["Sub Agent Relations"],
     request: {
       params: TenantProjectAgentParamsSchema,
       query: PaginationQueryParamsSchema.merge(SubAgentRelationQuerySchema)
     },
     responses: {
       200: {
-        description: "List of agent relations retrieved successfully",
+        description: "List of sub agent relations retrieved successfully",
         content: {
           "application/json": {
             schema: ListResponseSchema(SubAgentRelationApiSelectSchema)
@@ -3277,7 +3407,7 @@ app14.openapi(
         });
         result = { ...rawResult, data: rawResult.data };
       } else if (targetSubAgentId) {
-        const rawResult = await getAgentRelationsByTarget(dbClient_default)({
+        const rawResult = await getSubAgentRelationsByTarget(dbClient_default)({
           scopes: { tenantId, projectId, agentId },
           targetSubAgentId,
           pagination: { page: pageNum, limit: limitNum }
@@ -3301,24 +3431,24 @@ app14.openapi(
     } catch (_error) {
       throw createApiError({
         code: "internal_server_error",
-        message: "Failed to retrieve agent relations"
+        message: "Failed to retrieve sub agent relations"
       });
     }
   }
 );
-app14.openapi(
+app15.openapi(
   createRoute({
     method: "get",
     path: "/{id}",
-    summary: "Get Agent Relation",
-    operationId: "get-agent-relation-by-id",
-    tags: ["Agent Relations"],
+    summary: "Get Sub Agent Relation",
+    operationId: "get-sub-agent-relation-by-id",
+    tags: ["Sub Agent Relations"],
     request: {
       params: TenantProjectAgentIdParamsSchema
     },
     responses: {
       200: {
-        description: "Agent relation found",
+        description: "Sub Agent relation found",
         content: {
           "application/json": {
             schema: SingleResponseSchema(SubAgentRelationApiSelectSchema)
@@ -3337,19 +3467,19 @@ app14.openapi(
     if (!agentRelation) {
       throw createApiError({
         code: "not_found",
-        message: "Agent relation not found"
+        message: "Sub Agent Relation not found"
       });
     }
     return c.json({ data: agentRelation });
   }
 );
-app14.openapi(
+app15.openapi(
   createRoute({
     method: "post",
     path: "/",
-    summary: "Create Agent Relation",
-    operationId: "create-agent-relation",
-    tags: ["Agent Relations"],
+    summary: "Create Sub Agent Relation",
+    operationId: "create-sub-agent-relation",
+    tags: ["Sub Agent Relations"],
     request: {
       params: TenantProjectAgentParamsSchema,
       body: {
@@ -3362,7 +3492,7 @@ app14.openapi(
     },
     responses: {
       201: {
-        description: "Agent relation created successfully",
+        description: "Sub Agent Relation created successfully",
         content: {
           "application/json": {
             schema: SingleResponseSchema(SubAgentRelationApiSelectSchema)
@@ -3434,13 +3564,13 @@ app14.openapi(
     return c.json({ data: agentRelation }, 201);
   }
 );
-app14.openapi(
+app15.openapi(
   createRoute({
     method: "put",
     path: "/{id}",
-    summary: "Update Agent Relation",
-    operationId: "update-agent-relation",
-    tags: ["Agent Relations"],
+    summary: "Update Sub Agent Relation",
+    operationId: "update-sub-agent-relation",
+    tags: ["Sub Agent Relations"],
     request: {
       params: TenantProjectAgentIdParamsSchema,
       body: {
@@ -3453,7 +3583,7 @@ app14.openapi(
     },
     responses: {
       200: {
-        description: "Agent relation updated successfully",
+        description: "Sub Agent relation updated successfully",
         content: {
           "application/json": {
             schema: SingleResponseSchema(SubAgentRelationApiSelectSchema)
@@ -3474,28 +3604,28 @@ app14.openapi(
     if (!updatedAgentRelation) {
       throw createApiError({
         code: "not_found",
-        message: "Agent relation not found"
+        message: "Sub Agent Relation not found"
       });
     }
     return c.json({ data: updatedAgentRelation });
   }
 );
-app14.openapi(
+app15.openapi(
   createRoute({
     method: "delete",
     path: "/{id}",
-    summary: "Delete Agent Relation",
-    operationId: "delete-agent-relation",
-    tags: ["Agent Relations"],
+    summary: "Delete Sub Agent Relation",
+    operationId: "delete-sub-agent-relation",
+    tags: ["Sub Agent Relations"],
     request: {
       params: TenantProjectAgentIdParamsSchema
     },
     responses: {
       204: {
-        description: "Agent relation deleted successfully"
+        description: "Sub Agent Relation deleted successfully"
       },
       404: {
-        description: "Agent relation not found",
+        description: "Sub Agent Relation not found",
         content: {
           "application/json": {
             schema: ErrorResponseSchema
@@ -3513,15 +3643,15 @@ app14.openapi(
     if (!deleted) {
       throw createApiError({
         code: "not_found",
-        message: "Agent relation not found"
+        message: "Sub Agent Relation not found"
       });
     }
     return c.body(null, 204);
   }
 );
-var subAgentRelations_default = app14;
-var app15 = new OpenAPIHono();
-app15.openapi(
+var subAgentRelations_default = app15;
+var app16 = new OpenAPIHono();
+app16.openapi(
   createRoute({
     method: "get",
     path: "/",
@@ -3562,7 +3692,7 @@ app15.openapi(
     return c.json(dataWithType);
   }
 );
-app15.openapi(
+app16.openapi(
   createRoute({
     method: "get",
     path: "/{id}",
@@ -3603,7 +3733,7 @@ app15.openapi(
     return c.json({ data: subAgentWithType });
   }
 );
-app15.openapi(
+app16.openapi(
   createRoute({
     method: "post",
     path: "/",
@@ -3650,7 +3780,7 @@ app15.openapi(
     return c.json({ data: subAgentWithType }, 201);
   }
 );
-app15.openapi(
+app16.openapi(
   createRoute({
     method: "put",
     path: "/{id}",
@@ -3700,7 +3830,7 @@ app15.openapi(
     return c.json({ data: subAgentWithType });
   }
 );
-app15.openapi(
+app16.openapi(
   createRoute({
     method: "delete",
     path: "/{id}",
@@ -3739,9 +3869,9 @@ app15.openapi(
     return c.body(null, 204);
   }
 );
-var subAgents_default = app15;
-var app16 = new OpenAPIHono();
-app16.openapi(
+var subAgents_default = app16;
+var app17 = new OpenAPIHono();
+app17.openapi(
   createRoute({
     method: "get",
     path: "/",
@@ -3803,7 +3933,7 @@ app16.openapi(
     return c.json(result);
   }
 );
-app16.openapi(
+app17.openapi(
   createRoute({
     method: "get",
     path: "/{id}",
@@ -3840,7 +3970,7 @@ app16.openapi(
     return c.json({ data: agentToolRelation });
   }
 );
-app16.openapi(
+app17.openapi(
   createRoute({
     method: "get",
     path: "/tool/{toolId}/sub-agents",
@@ -3876,7 +4006,7 @@ app16.openapi(
     return c.json(dbResult);
   }
 );
-app16.openapi(
+app17.openapi(
   createRoute({
     method: "post",
     path: "/",
@@ -3939,7 +4069,7 @@ app16.openapi(
     }
   }
 );
-app16.openapi(
+app17.openapi(
   createRoute({
     method: "put",
     path: "/{id}",
@@ -3992,7 +4122,7 @@ app16.openapi(
     return c.json({ data: updatedAgentToolRelation });
   }
 );
-app16.openapi(
+app17.openapi(
   createRoute({
     method: "delete",
     path: "/{id}",
@@ -4031,10 +4161,10 @@ app16.openapi(
     return c.body(null, 204);
   }
 );
-var subAgentToolRelations_default = app16;
+var subAgentToolRelations_default = app17;
 var logger5 = getLogger("tools");
-var app17 = new OpenAPIHono();
-app17.openapi(
+var app18 = new OpenAPIHono();
+app18.openapi(
   createRoute({
     method: "get",
     path: "/",
@@ -4094,7 +4224,7 @@ app17.openapi(
     return c.json(result);
   }
 );
-app17.openapi(
+app18.openapi(
   createRoute({
     method: "get",
     path: "/{id}",
@@ -4131,7 +4261,7 @@ app17.openapi(
     });
   }
 );
-app17.openapi(
+app18.openapi(
   createRoute({
     method: "post",
     path: "/",
@@ -4184,7 +4314,7 @@ app17.openapi(
     );
   }
 );
-app17.openapi(
+app18.openapi(
   createRoute({
     method: "put",
     path: "/{id}",
@@ -4245,7 +4375,7 @@ app17.openapi(
     });
   }
 );
-app17.openapi(
+app18.openapi(
   createRoute({
     method: "delete",
     path: "/{id}",
@@ -4281,37 +4411,38 @@ app17.openapi(
     return c.body(null, 204);
   }
 );
-var tools_default = app17;
+var tools_default = app18;
 
 // src/routes/index.ts
-var app18 = new OpenAPIHono();
-app18.route("/projects", projects_default);
-app18.route("/projects/:projectId/agents/:agentId/sub-agents", subAgents_default);
-app18.route("/projects/:projectId/agents/:agentId/sub-agent-relations", subAgentRelations_default);
-app18.route("/projects/:projectId/agents", agent_default);
-app18.route(
+var app19 = new OpenAPIHono();
+app19.route("/projects", projects_default);
+app19.route("/projects/:projectId/agents/:agentId/sub-agents", subAgents_default);
+app19.route("/projects/:projectId/agents/:agentId/sub-agent-relations", subAgentRelations_default);
+app19.route("/projects/:projectId/agents", agent_default);
+app19.route(
   "/projects/:projectId/agents/:agentId/sub-agent-tool-relations",
   subAgentToolRelations_default
 );
-app18.route(
+app19.route(
   "/projects/:projectId/agents/:agentId/sub-agent-artifact-components",
   subAgentArtifactComponents_default
 );
-app18.route(
+app19.route(
   "/projects/:projectId/agents/:agentId/sub-agent-data-components",
   subAgentDataComponents_default
 );
-app18.route("/projects/:projectId/artifact-components", artifactComponents_default);
-app18.route("/projects/:projectId/agents/:agentId/context-configs", contextConfigs_default);
-app18.route("/projects/:projectId/credentials", credentials_default);
-app18.route("/projects/:projectId/data-components", dataComponents_default);
-app18.route("/projects/:projectId/agents/:agentId/external-agents", externalAgents_default);
-app18.route("/projects/:projectId/agents/:agentId/function-tools", functionTools_default);
-app18.route("/projects/:projectId/functions", functions_default);
-app18.route("/projects/:projectId/tools", tools_default);
-app18.route("/projects/:projectId/api-keys", apiKeys_default);
-app18.route("/projects/:projectId/agent", agentFull_default);
-var routes_default = app18;
+app19.route("/projects/:projectId/artifact-components", artifactComponents_default);
+app19.route("/projects/:projectId/agents/:agentId/context-configs", contextConfigs_default);
+app19.route("/projects/:projectId/credentials", credentials_default);
+app19.route("/projects/:projectId/credential-stores", credentialStores_default);
+app19.route("/projects/:projectId/data-components", dataComponents_default);
+app19.route("/projects/:projectId/agents/:agentId/external-agents", externalAgents_default);
+app19.route("/projects/:projectId/agents/:agentId/function-tools", functionTools_default);
+app19.route("/projects/:projectId/functions", functions_default);
+app19.route("/projects/:projectId/tools", tools_default);
+app19.route("/projects/:projectId/api-keys", apiKeys_default);
+app19.route("/projects/:projectId/agent", agentFull_default);
+var routes_default = app19;
 var logger6 = getLogger("oauth-service");
 var pkceStore = /* @__PURE__ */ new Map();
 function storePKCEVerifier(state, codeVerifier, toolId, tenantId, projectId, clientId) {
@@ -4583,7 +4714,7 @@ async function findOrCreateCredential(tenantId, projectId, credentialData) {
     throw new Error(`Failed to save credential '${credentialData.id}' to database`);
   }
 }
-var app19 = new OpenAPIHono();
+var app20 = new OpenAPIHono();
 var logger7 = getLogger("oauth-callback");
 function getBaseUrlFromRequest(c) {
   const url = new URL(c.req.url);
@@ -4670,7 +4801,7 @@ var OAuthCallbackQuerySchema = z$1.object({
   error: z$1.string().optional(),
   error_description: z$1.string().optional()
 });
-app19.openapi(
+app20.openapi(
   createRoute({
     method: "get",
     path: "/login",
@@ -4737,7 +4868,7 @@ app19.openapi(
     }
   }
 );
-app19.openapi(
+app20.openapi(
   createRoute({
     method: "get",
     path: "/callback",
@@ -4821,22 +4952,7 @@ app19.openapi(
       );
       const credentialTokenKey = `oauth_token_${toolId}`;
       let newCredentialData;
-      const keychainStore = credentialStores.get("keychain-default");
-      if (keychainStore) {
-        try {
-          await keychainStore.set(credentialTokenKey, JSON.stringify(tokens));
-          newCredentialData = {
-            id: generateIdFromName(mcpTool.name),
-            type: CredentialStoreType.keychain,
-            credentialStoreId: "keychain-default",
-            retrievalParams: {
-              key: credentialTokenKey
-            }
-          };
-        } catch {
-        }
-      }
-      if (!newCredentialData && process.env.NANGO_SECRET_KEY) {
+      if (process.env.NANGO_SECRET_KEY) {
         const nangoStore = credentialStores.get("nango-default");
         await nangoStore?.set(credentialTokenKey, JSON.stringify(tokens));
         newCredentialData = {
@@ -4850,6 +4966,26 @@ app19.openapi(
             authMode: "API_KEY"
           }
         };
+      } else {
+        const keychainStore = credentialStores.get("keychain-default");
+        if (keychainStore) {
+          try {
+            await keychainStore.set(credentialTokenKey, JSON.stringify(tokens));
+            newCredentialData = {
+              id: generateIdFromName(mcpTool.name),
+              type: CredentialStoreType.keychain,
+              credentialStoreId: "keychain-default",
+              retrievalParams: {
+                key: credentialTokenKey
+              }
+            };
+          } catch (error2) {
+            logger7.info(
+              { error: error2 instanceof Error ? error2.message : error2 },
+              "Keychain store not available."
+            );
+          }
+        }
       }
       if (!newCredentialData) {
         throw new Error("No credential store found");
@@ -4881,9 +5017,9 @@ app19.openapi(
     }
   }
 );
-var oauth_default = app19;
+var oauth_default = app20;
 var logger8 = getLogger("projectFull");
-var app20 = new OpenAPIHono();
+var app21 = new OpenAPIHono();
 var ProjectIdParamsSchema = z.object({
   tenantId: z.string().openapi({
     description: "Tenant identifier",
@@ -4900,7 +5036,7 @@ var TenantParamsSchema2 = z.object({
     example: "tenant_123"
   })
 }).openapi("TenantParams");
-app20.openapi(
+app21.openapi(
   createRoute({
     method: "post",
     path: "/project-full",
@@ -4959,7 +5095,7 @@ app20.openapi(
     }
   }
 );
-app20.openapi(
+app21.openapi(
   createRoute({
     method: "get",
     path: "/project-full/{projectId}",
@@ -5012,7 +5148,7 @@ app20.openapi(
     }
   }
 );
-app20.openapi(
+app21.openapi(
   createRoute({
     method: "put",
     path: "/project-full/{projectId}",
@@ -5096,7 +5232,7 @@ app20.openapi(
     }
   }
 );
-app20.openapi(
+app21.openapi(
   createRoute({
     method: "delete",
     path: "/project-full/{projectId}",
@@ -5144,20 +5280,20 @@ app20.openapi(
     }
   }
 );
-var projectFull_default = app20;
+var projectFull_default = app21;
 
 // src/app.ts
 var logger9 = getLogger("agents-manage-api");
 logger9.info({ logger: logger9.getTransports() }, "Logger initialized");
 function createManagementHono(serverConfig, credentialStores) {
-  const app22 = new OpenAPIHono();
-  app22.use("*", requestId());
-  app22.use("*", async (c, next) => {
+  const app23 = new OpenAPIHono();
+  app23.use("*", requestId());
+  app23.use("*", async (c, next) => {
     c.set("serverConfig", serverConfig);
     c.set("credentialStores", credentialStores);
     return next();
   });
-  app22.use(
+  app23.use(
     pinoLogger({
       pino: getLogger("agents-manage-api").getPinoInstance(),
       http: {
@@ -5170,7 +5306,7 @@ function createManagementHono(serverConfig, credentialStores) {
       }
     })
   );
-  app22.onError(async (err, c) => {
+  app23.onError(async (err, c) => {
     const isExpectedError = err instanceof HTTPException;
     const status = isExpectedError ? err.status : 500;
     const requestId2 = c.get("requestId") || "unknown";
@@ -5245,7 +5381,7 @@ function createManagementHono(serverConfig, credentialStores) {
       ...instance && { instance }
     });
   });
-  app22.use(
+  app23.use(
     "*",
     cors({
       origin: (origin) => {
@@ -5259,7 +5395,7 @@ function createManagementHono(serverConfig, credentialStores) {
       credentials: true
     })
   );
-  app22.openapi(
+  app23.openapi(
     createRoute({
       method: "get",
       path: "/health",
@@ -5276,13 +5412,13 @@ function createManagementHono(serverConfig, credentialStores) {
       return c.body(null, 204);
     }
   );
-  app22.use("/tenants/*", apiKeyAuth());
-  app22.route("/tenants/:tenantId", routes_default);
-  app22.route("/tenants/:tenantId", projectFull_default);
-  app22.route("/oauth", oauth_default);
-  setupOpenAPIRoutes(app22);
+  app23.use("/tenants/*", apiKeyAuth());
+  app23.route("/tenants/:tenantId", routes_default);
+  app23.route("/tenants/:tenantId", projectFull_default);
+  app23.route("/oauth", oauth_default);
+  setupOpenAPIRoutes(app23);
   const baseApp = new Hono();
-  baseApp.route("/", app22);
+  baseApp.route("/", app23);
   return baseApp;
 }
 
@@ -5298,8 +5434,8 @@ var defaultConfig = {
 };
 var defaultStores = createDefaultCredentialStores();
 var defaultRegistry = new CredentialStoreRegistry(defaultStores);
-var app21 = createManagementHono(defaultConfig, defaultRegistry);
-var index_default = app21;
+var app22 = createManagementHono(defaultConfig, defaultRegistry);
+var index_default = app22;
 function createManagementApp(config) {
   const serverConfig = config?.serverConfig ?? defaultConfig;
   const stores = config?.credentialStores ?? defaultStores;