@inkeep/agents-manage-api 0.3.0 → 0.5.0

package/dist/index.cjs

@@ -9,10 +9,8 @@ var cors = require('hono/cors');
 var httpException = require('hono/http-exception');
 var requestId = require('hono/request-id');
 var honoPino = require('hono-pino');
-var async_hooks = require('async_hooks');
-var pino = require('pino');
-var zod = require('zod');
 var factory = require('hono/factory');
+var zod = require('zod');
 var swaggerUi = require('@hono/swagger-ui');
 var nanoid = require('nanoid');
 
@@ -46,39 +44,8 @@ ${error.message}`
 };
 var env = parseEnv();
 
-// src/logger.ts
-var isDevelopment = env.ENVIRONMENT === "development";
-var loggerConfig = {
-  level: env.LOG_LEVEL,
-  serializers: {
-    obj: (value) => ({ ...value })
-  },
-  redact: ["req.headers.authorization", 'req.headers["x-inkeep-admin-authentication"]'],
-  // Only use pino-pretty in development
-  ...isDevelopment && {
-    transport: {
-      target: "pino-pretty",
-      options: {
-        sync: true,
-        destination: 1,
-        // stdout
-        colorize: true,
-        translateTime: "SYS:standard"
-      }
-    }
-  }
-};
-var logger = pino.pino(loggerConfig);
-var asyncLocalStorage = new async_hooks.AsyncLocalStorage();
-function getLogger(name) {
-  const store = asyncLocalStorage.getStore();
-  const reqId = store?.get("requestId") || void 0;
-  if (!reqId) {
-    return logger.child({ name });
-  }
-  return logger.child({ reqId, name });
-}
-var logger2 = agentsCore.getLogger("env-key-auth");
+// src/middleware/auth.ts
+var logger = agentsCore.getLogger("env-key-auth");
 var apiKeyAuth = () => factory.createMiddleware(async (c, next) => {
   if (env.INKEEP_AGENTS_MANAGE_API_BYPASS_SECRET) {
     const authHeader = c.req.header("Authorization");
@@ -89,7 +56,7 @@ var apiKeyAuth = () => factory.createMiddleware(async (c, next) => {
     }
     const apiKey = authHeader.substring(7);
     if (apiKey === env.INKEEP_AGENTS_MANAGE_API_BYPASS_SECRET) {
-      logger2.info({}, "Bypass secret authenticated successfully");
+      logger.info({}, "Bypass secret authenticated successfully");
       await next();
       return;
     } else {
@@ -3058,7 +3025,7 @@ app12.openapi(
   }
 );
 var externalAgents_default = app12;
-var logger3 = getLogger("graphFull");
+var logger2 = agentsCore.getLogger("graphFull");
 var app13 = new zodOpenapi.OpenAPIHono();
 var GraphIdParamsSchema = zod.z.object({
   tenantId: zod.z.string().openapi({
@@ -3116,7 +3083,7 @@ app13.openapi(
     const { tenantId, projectId } = c.req.valid("param");
     const graphData = c.req.valid("json");
     const validatedGraphData = agentsCore.FullGraphDefinitionSchema.parse(graphData);
-    const createdGraph = await agentsCore.createFullGraphServerSide(dbClient_default, logger3)(
+    const createdGraph = await agentsCore.createFullGraphServerSide(dbClient_default, logger2)(
       { tenantId, projectId },
       validatedGraphData
     );
@@ -3151,7 +3118,7 @@ app13.openapi(
     try {
       const graph = await agentsCore.getFullGraph(
         dbClient_default,
-        logger3
+        logger2
       )({
         scopes: { tenantId, projectId, graphId }
       });
@@ -3227,15 +3194,15 @@ app13.openapi(
       }
       const existingGraph = await agentsCore.getFullGraph(
         dbClient_default,
-        logger3
+        logger2
       )({
         scopes: { tenantId, projectId, graphId }
       });
       const isCreate = !existingGraph;
-      const updatedGraph = isCreate ? await agentsCore.createFullGraphServerSide(dbClient_default, logger3)(
+      const updatedGraph = isCreate ? await agentsCore.createFullGraphServerSide(dbClient_default, logger2)(
         { tenantId, projectId },
         validatedGraphData
-      ) : await agentsCore.updateFullGraphServerSide(dbClient_default, logger3)(
+      ) : await agentsCore.updateFullGraphServerSide(dbClient_default, logger2)(
         { tenantId, projectId },
         validatedGraphData
       );
@@ -3283,7 +3250,7 @@ app13.openapi(
     try {
       const deleted = await agentsCore.deleteFullGraph(
         dbClient_default,
-        logger3
+        logger2
       )({
         scopes: { tenantId, projectId, graphId }
       });
@@ -3550,7 +3517,7 @@ function extractInputSchema(toolDef) {
   }
   return {};
 }
-var logger4 = getLogger("tools");
+var logger3 = agentsCore.getLogger("tools");
 var convertToMCPToolConfig = (tool) => {
   return {
     id: tool.id,
@@ -3659,7 +3626,7 @@ var checkToolHealth = async (tool, credentialStoreRegistry) => {
       }
     };
   } catch (error) {
-    logger4.error({ toolId: tool.id, error }, "Tool health check failed");
+    logger3.error({ toolId: tool.id, error }, "Tool health check failed");
     if (error instanceof Error && await agentsCore.detectAuthenticationRequired(tool, error)) {
       return {
         status: "needs_auth",
@@ -3740,7 +3707,7 @@ var discoverToolsFromServer = async (tool, credentialStoreRegistry) => {
     );
     return toolDefinitions;
   } catch (error) {
-    logger4.error({ toolId: tool.id, error }, "Tool discovery failed");
+    logger3.error({ toolId: tool.id, error }, "Tool discovery failed");
     throw error;
   }
 };
@@ -3804,7 +3771,7 @@ var checkAllToolsHealth = async (tenantId, projectId, credentialStoreRegistry) =
 };
 
 // src/utils/auth-detection.ts
-var logger5 = getLogger("auth-detection");
+var logger4 = agentsCore.getLogger("auth-detection");
 var getWellKnownUrls = (baseUrl) => [
   `${baseUrl}/.well-known/oauth-authorization-server`,
   `${baseUrl}/.well-known/openid-configuration`
@@ -3826,12 +3793,12 @@ var tryWellKnownEndpoints = async (baseUrl) => {
       if (response.ok) {
         const metadata = await response.json();
         if (validateOAuthMetadata(metadata)) {
-          logger5.debug({ baseUrl, wellKnownUrl }, "OAuth 2.1/PKCE support detected");
+          logger4.debug({ baseUrl, wellKnownUrl }, "OAuth 2.1/PKCE support detected");
           return buildOAuthConfig(metadata);
         }
       }
     } catch (error) {
-      logger5.debug({ wellKnownUrl, error }, "OAuth endpoint check failed");
+      logger4.debug({ wellKnownUrl, error }, "OAuth endpoint check failed");
     }
   }
   return null;
@@ -3866,7 +3833,7 @@ var discoverOAuthEndpoints = async (serverUrl) => {
 };
 
 // src/utils/oauth-service.ts
-var logger6 = getLogger("oauth-service");
+var logger5 = agentsCore.getLogger("oauth-service");
 var pkceStore = /* @__PURE__ */ new Map();
 function storePKCEVerifier(state, codeVerifier, toolId, tenantId, projectId, clientId) {
   pkceStore.set(state, { codeVerifier, toolId, tenantId, projectId, clientId });
@@ -3924,7 +3891,7 @@ var OAuthService = class {
       resource: tool.config.mcp.server.url
     });
     storePKCEVerifier(state, codeVerifier, toolId, tenantId, projectId, clientId);
-    logger6.info({ toolId, oAuthConfig, tenantId, projectId }, "OAuth flow initiated successfully");
+    logger5.info({ toolId, oAuthConfig, tenantId, projectId }, "OAuth flow initiated successfully");
     return {
       redirectUrl: authUrl,
       state
@@ -3949,9 +3916,9 @@ var OAuthService = class {
         codeVerifier,
         redirectUri
       });
-      logger6.info({ tokenType: tokens.token_type }, "Token exchange successful with openid-client");
+      logger5.info({ tokenType: tokens.token_type }, "Token exchange successful with openid-client");
     } catch (error) {
-      logger6.warn(
+      logger5.warn(
         { error: error instanceof Error ? error.message : error },
         "openid-client failed, falling back to manual token exchange"
       );
@@ -3962,7 +3929,7 @@ var OAuthService = class {
         codeVerifier,
         redirectUri
       });
-      logger6.info({ tokenType: tokens.token_type }, "Manual token exchange successful");
+      logger5.info({ tokenType: tokens.token_type }, "Manual token exchange successful");
     }
     return { tokens, oAuthConfig };
   }
@@ -3970,7 +3937,7 @@ var OAuthService = class {
    * Perform dynamic client registration
    */
   async performDynamicClientRegistration(registrationUrl, redirectUri) {
-    logger6.info({ registrationUrl }, "Attempting dynamic client registration");
+    logger5.info({ registrationUrl }, "Attempting dynamic client registration");
     try {
       const registrationResponse = await fetch(registrationUrl, {
         method: "POST",
@@ -3993,11 +3960,11 @@ var OAuthService = class {
       });
       if (registrationResponse.ok) {
         const registration = await registrationResponse.json();
-        logger6.info({ clientId: registration.client_id }, "Dynamic client registration successful");
+        logger5.info({ clientId: registration.client_id }, "Dynamic client registration successful");
         return registration.client_id;
       } else {
         const errorText = await registrationResponse.text();
-        logger6.warn(
+        logger5.warn(
           {
             status: registrationResponse.status,
             errorText
@@ -4006,7 +3973,7 @@ var OAuthService = class {
         );
       }
     } catch (regError) {
-      logger6.warn(
+      logger5.warn(
         { error: regError },
         "Dynamic client registration error, using default client_id"
       );
@@ -4036,7 +4003,7 @@ var OAuthService = class {
     const oauth = await import('openid-client');
     const tokenUrl = new URL(oAuthConfig.tokenUrl);
     const oauthServerUrl = `${tokenUrl.protocol}//${tokenUrl.host}`;
-    logger6.info({ oauthServerUrl, clientId }, "Attempting openid-client discovery");
+    logger5.info({ oauthServerUrl, clientId }, "Attempting openid-client discovery");
     const config = await oauth.discovery(
       new URL(oauthServerUrl),
       clientId,
@@ -4068,7 +4035,7 @@ var OAuthService = class {
    */
   async exchangeManually(params) {
     const { oAuthConfig, clientId, code, codeVerifier, redirectUri } = params;
-    logger6.info({ tokenUrl: oAuthConfig.tokenUrl }, "Attempting manual token exchange");
+    logger5.info({ tokenUrl: oAuthConfig.tokenUrl }, "Attempting manual token exchange");
     const tokenResponse = await fetch(oAuthConfig.tokenUrl, {
       method: "POST",
       headers: {
@@ -4086,7 +4053,7 @@ var OAuthService = class {
     });
     if (!tokenResponse.ok) {
       const errorText = await tokenResponse.text();
-      logger6.error(
+      logger5.error(
         {
           status: tokenResponse.status,
           statusText: tokenResponse.statusText,
@@ -4104,6 +4071,7 @@ var OAuthService = class {
 var oauthService = new OAuthService();
 
 // src/routes/tools.ts
+var logger6 = agentsCore.getLogger("tools");
 var app15 = new zodOpenapi.OpenAPIHono();
 app15.openapi(
   zodOpenapi.createRoute({
@@ -4226,7 +4194,7 @@ app15.openapi(
   async (c) => {
     const { tenantId, projectId } = c.req.valid("param");
     const body = c.req.valid("json");
-    getLogger().info({ body }, "body");
+    logger6.info({ body }, "body");
     const id = body.id || nanoid.nanoid();
     const tool = await agentsCore.createTool(dbClient_default)({
       tenantId,
@@ -4647,7 +4615,6 @@ app15.openapi(
   }),
   async (c) => {
     const { tenantId, projectId, id } = c.req.valid("param");
-    const logger9 = getLogger("oauth-login");
     try {
       const tool = await agentsCore.getToolById(dbClient_default)({ scopes: { tenantId, projectId }, toolId: id });
       if (!tool) {
@@ -4665,7 +4632,7 @@ app15.openapi(
       });
       return c.redirect(redirectUrl, 302);
     } catch (error) {
-      logger9.error({ toolId: id, error }, "OAuth login failed");
+      logger6.error({ toolId: id, error }, "OAuth login failed");
       if (error && typeof error === "object" && "code" in error) {
         const apiError = error;
         return c.json({ error: apiError.message }, apiError.code === "not_found" ? 404 : 400);
@@ -4700,7 +4667,7 @@ app16.route("/projects/:projectId/api-keys", apiKeys_default);
 app16.route("/projects/:projectId/graph", graphFull_default);
 var routes_default = app16;
 var app17 = new zodOpenapi.OpenAPIHono();
-var logger7 = getLogger("oauth-callback");
+var logger7 = agentsCore.getLogger("oauth-callback");
 var OAuthCallbackQuerySchema = zodOpenapi.z.object({
   code: zodOpenapi.z.string().min(1, "Authorization code is required"),
   state: zodOpenapi.z.string().min(1, "State parameter is required"),
@@ -4766,7 +4733,7 @@ app17.openapi(
         throw new Error(`Tool ${toolId} not found`);
       }
       logger7.info({ toolId, tenantId, projectId }, "Processing OAuth callback");
-      logger7.info("Exchanging authorization code for access token");
+      logger7.info({ toolId }, "Exchanging authorization code for access token");
       const mcpTool = agentsCore.dbResultToMcpTool(tool);
       const { tokens } = await oauthService.exchangeCodeForTokens({
         code,
@@ -4803,7 +4770,7 @@ app17.openapi(
           data: credentialData
         });
       } else {
-        logger7.info("Creating new credential");
+        logger7.info({ credentialId }, "Creating new credential");
         credential = await agentsCore.createCredentialReference(dbClient_default)({
           tenantId,
           projectId,
@@ -4870,7 +4837,7 @@ app17.openapi(
   }
 );
 var oauth_default = app17;
-var logger8 = getLogger("projectFull");
+var logger8 = agentsCore.getLogger("projectFull");
 var app18 = new zodOpenapi.OpenAPIHono();
 var ProjectIdParamsSchema = zod.z.object({
   tenantId: zod.z.string().openapi({
@@ -5135,6 +5102,8 @@ app18.openapi(
 var projectFull_default = app18;
 
 // src/app.ts
+var logger9 = agentsCore.getLogger("agents-manage-api");
+logger9.info({ logger: logger9.getTransports() }, "Logger initialized");
 function createManagementHono(serverConfig, credentialStores) {
   const app20 = new zodOpenapi.OpenAPIHono();
   app20.use("*", requestId.requestId());
@@ -5145,7 +5114,7 @@ function createManagementHono(serverConfig, credentialStores) {
   });
   app20.use(
     honoPino.pinoLogger({
-      pino: getLogger(),
+      pino: agentsCore.getLogger("agents-manage-api").getPinoInstance(),
       http: {
         onResLevel(c) {
           if (c.res.status >= 500) {
@@ -5189,7 +5158,7 @@ function createManagementHono(serverConfig, credentialStores) {
       if (!isExpectedError) {
         const errorMessage = err instanceof Error ? err.message : String(err);
         const errorStack = err instanceof Error ? err.stack : void 0;
-        getLogger().error(
+        logger9.error(
           {
             error: err,
             message: errorMessage,
@@ -5200,7 +5169,7 @@ function createManagementHono(serverConfig, credentialStores) {
           "Unexpected server error occurred"
         );
       } else {
-        getLogger().error(
+        logger9.error(
           {
             error: err,
             path: c.req.path,
@@ -5216,7 +5185,7 @@ function createManagementHono(serverConfig, credentialStores) {
         const response = err.getResponse();
         return response;
       } catch (responseError) {
-        getLogger().error({ error: responseError }, "Error while handling HTTPException response");
+        logger9.error({ error: responseError }, "Error while handling HTTPException response");
       }
     }
     const { status: respStatus, title, detail, instance } = await agentsCore.handleApiError(err, requestId2);

package/dist/index.js

@@ -1,14 +1,12 @@
-import { loadEnvironmentFiles, getLogger as getLogger$1, createDatabaseClient, commonGetErrorResponses, TenantProjectGraphParamsSchema, ArtifactComponentApiSelectSchema, getArtifactComponentsForAgent, getAgentsUsingArtifactComponent, ErrorResponseSchema, SingleResponseSchema, AgentArtifactComponentApiInsertSchema, AgentArtifactComponentApiSelectSchema, getAgentById, getArtifactComponentById, createApiError, isArtifactComponentAssociatedWithAgent, associateArtifactComponentWithAgent, RemovedResponseSchema, removeArtifactComponentFromAgent, ExistsResponseSchema, DataComponentApiSelectSchema, getDataComponentsForAgent, getAgentsUsingDataComponent, AgentDataComponentApiInsertSchema, AgentDataComponentApiSelectSchema, getDataComponent, isDataComponentAssociatedWithAgent, associateDataComponentWithAgent, removeDataComponentFromAgent, ListResponseSchema, PaginationQueryParamsSchema, TenantProjectParamsSchema, AgentGraphApiSelectSchema, listAgentGraphs, IdParamsSchema, getAgentGraphById, getGraphAgentInfos, FullGraphDefinitionSchema, getFullGraphDefinition, AgentGraphApiInsertSchema, createAgentGraph, AgentGraphApiUpdateSchema, updateAgentGraph, deleteAgentGraph, AgentRelationApiSelectSchema, AgentRelationQuerySchema, getAgentRelationsBySource, getAgentRelationsByTarget, getExternalAgentRelations, listAgentRelations, TenantProjectGraphIdParamsSchema, getAgentRelationById, AgentRelationApiInsertSchema, validateExternalAgent, validateInternalAgent, createAgentRelation, AgentRelationApiUpdateSchema, updateAgentRelation, deleteAgentRelation, AgentApiSelectSchema, listAgentsPaginated, AgentApiInsertSchema, createAgent, AgentApiUpdateSchema, updateAgent, deleteAgent, AgentToolRelationApiSelectSchema, getAgentToolRelationByAgent, getAgentToolRelationByTool, listAgentToolRelations, getAgentToolRelationById, getToolsForAgent, getAgentsForTool, AgentToolRelationApiInsertSchema, createAgentToolRelation, AgentToolRelationApiUpdateSchema, updateAgentToolRelation, deleteAgentToolRelation, ApiKeyApiSelectSchema, listApiKeysPaginated, getApiKeyById, ApiKeyApiCreationResponseSchema, ApiKeyApiInsertSchema, generateApiKey, createApiKey, ApiKeyApiUpdateSchema, updateApiKey, deleteApiKey, listArtifactComponentsPaginated, ArtifactComponentApiInsertSchema, createArtifactComponent, ArtifactComponentApiUpdateSchema, updateArtifactComponent, deleteArtifactComponent, ContextConfigApiSelectSchema, listContextConfigsPaginated, getContextConfigById, ContextConfigApiInsertSchema, createContextConfig, commonUpdateErrorResponses, ContextConfigApiUpdateSchema, updateContextConfig, commonDeleteErrorResponses, deleteContextConfig, CredentialReferenceApiSelectSchema, listCredentialReferencesPaginated, getCredentialReferenceById, CredentialReferenceApiInsertSchema, createCredentialReference, CredentialReferenceApiUpdateSchema, updateCredentialReference, getCredentialStoreLookupKeyFromRetrievalParams, deleteCredentialReference, listDataComponentsPaginated, DataComponentApiInsertSchema, createDataComponent, DataComponentApiUpdateSchema, updateDataComponent, deleteDataComponent, ExternalAgentApiSelectSchema, listExternalAgentsPaginated, getExternalAgent, ExternalAgentApiInsertSchema, createExternalAgent, ExternalAgentApiUpdateSchema, updateExternalAgent, deleteExternalAgent, createFullGraphServerSide, getFullGraph, updateFullGraphServerSide, deleteFullGraph, TenantParamsSchema, ProjectApiSelectSchema, listProjectsPaginated, TenantIdParamsSchema, getProject, ProjectApiInsertSchema, createProject, ProjectApiUpdateSchema, updateProject, deleteProject, McpToolSchema, ToolStatusSchema, listToolsByStatus, dbResultToMcpTool, listTools, getToolById, ToolApiInsertSchema, createTool, ToolApiUpdateSchema, updateTool, deleteTool, getCredentialReference, CredentialStoreType, FullProjectDefinitionSchema, createFullProjectServerSide, getFullProject, updateFullProjectServerSide, deleteFullProject, createDefaultCredentialStores, CredentialStoreRegistry, ContextResolver, CredentialStuffer, McpClient, detectAuthenticationRequired, handleApiError, MCPServerType, MCPTransportType } from '@inkeep/agents-core';
+import { loadEnvironmentFiles, getLogger, createDatabaseClient, commonGetErrorResponses, TenantProjectGraphParamsSchema, ArtifactComponentApiSelectSchema, getArtifactComponentsForAgent, getAgentsUsingArtifactComponent, ErrorResponseSchema, SingleResponseSchema, AgentArtifactComponentApiInsertSchema, AgentArtifactComponentApiSelectSchema, getAgentById, getArtifactComponentById, createApiError, isArtifactComponentAssociatedWithAgent, associateArtifactComponentWithAgent, RemovedResponseSchema, removeArtifactComponentFromAgent, ExistsResponseSchema, DataComponentApiSelectSchema, getDataComponentsForAgent, getAgentsUsingDataComponent, AgentDataComponentApiInsertSchema, AgentDataComponentApiSelectSchema, getDataComponent, isDataComponentAssociatedWithAgent, associateDataComponentWithAgent, removeDataComponentFromAgent, ListResponseSchema, PaginationQueryParamsSchema, TenantProjectParamsSchema, AgentGraphApiSelectSchema, listAgentGraphs, IdParamsSchema, getAgentGraphById, getGraphAgentInfos, FullGraphDefinitionSchema, getFullGraphDefinition, AgentGraphApiInsertSchema, createAgentGraph, AgentGraphApiUpdateSchema, updateAgentGraph, deleteAgentGraph, AgentRelationApiSelectSchema, AgentRelationQuerySchema, getAgentRelationsBySource, getAgentRelationsByTarget, getExternalAgentRelations, listAgentRelations, TenantProjectGraphIdParamsSchema, getAgentRelationById, AgentRelationApiInsertSchema, validateExternalAgent, validateInternalAgent, createAgentRelation, AgentRelationApiUpdateSchema, updateAgentRelation, deleteAgentRelation, AgentApiSelectSchema, listAgentsPaginated, AgentApiInsertSchema, createAgent, AgentApiUpdateSchema, updateAgent, deleteAgent, AgentToolRelationApiSelectSchema, getAgentToolRelationByAgent, getAgentToolRelationByTool, listAgentToolRelations, getAgentToolRelationById, getToolsForAgent, getAgentsForTool, AgentToolRelationApiInsertSchema, createAgentToolRelation, AgentToolRelationApiUpdateSchema, updateAgentToolRelation, deleteAgentToolRelation, ApiKeyApiSelectSchema, listApiKeysPaginated, getApiKeyById, ApiKeyApiCreationResponseSchema, ApiKeyApiInsertSchema, generateApiKey, createApiKey, ApiKeyApiUpdateSchema, updateApiKey, deleteApiKey, listArtifactComponentsPaginated, ArtifactComponentApiInsertSchema, createArtifactComponent, ArtifactComponentApiUpdateSchema, updateArtifactComponent, deleteArtifactComponent, ContextConfigApiSelectSchema, listContextConfigsPaginated, getContextConfigById, ContextConfigApiInsertSchema, createContextConfig, commonUpdateErrorResponses, ContextConfigApiUpdateSchema, updateContextConfig, commonDeleteErrorResponses, deleteContextConfig, CredentialReferenceApiSelectSchema, listCredentialReferencesPaginated, getCredentialReferenceById, CredentialReferenceApiInsertSchema, createCredentialReference, CredentialReferenceApiUpdateSchema, updateCredentialReference, getCredentialStoreLookupKeyFromRetrievalParams, deleteCredentialReference, listDataComponentsPaginated, DataComponentApiInsertSchema, createDataComponent, DataComponentApiUpdateSchema, updateDataComponent, deleteDataComponent, ExternalAgentApiSelectSchema, listExternalAgentsPaginated, getExternalAgent, ExternalAgentApiInsertSchema, createExternalAgent, ExternalAgentApiUpdateSchema, updateExternalAgent, deleteExternalAgent, createFullGraphServerSide, getFullGraph, updateFullGraphServerSide, deleteFullGraph, TenantParamsSchema, ProjectApiSelectSchema, listProjectsPaginated, TenantIdParamsSchema, getProject, ProjectApiInsertSchema, createProject, ProjectApiUpdateSchema, updateProject, deleteProject, McpToolSchema, ToolStatusSchema, listToolsByStatus, dbResultToMcpTool, listTools, getToolById, ToolApiInsertSchema, createTool, ToolApiUpdateSchema, updateTool, deleteTool, getCredentialReference, CredentialStoreType, FullProjectDefinitionSchema, createFullProjectServerSide, getFullProject, updateFullProjectServerSide, deleteFullProject, createDefaultCredentialStores, CredentialStoreRegistry, ContextResolver, CredentialStuffer, McpClient, detectAuthenticationRequired, handleApiError, MCPServerType, MCPTransportType } from '@inkeep/agents-core';
 import { OpenAPIHono, createRoute, z as z$1 } from '@hono/zod-openapi';
 import { Hono } from 'hono';
 import { cors } from 'hono/cors';
 import { HTTPException } from 'hono/http-exception';
 import { requestId } from 'hono/request-id';
 import { pinoLogger } from 'hono-pino';
-import { AsyncLocalStorage } from 'async_hooks';
-import { pino } from 'pino';
-import { z } from 'zod';
 import { createMiddleware } from 'hono/factory';
+import { z } from 'zod';
 import { swaggerUI } from '@hono/swagger-ui';
 import { nanoid } from 'nanoid';
 
@@ -42,39 +40,8 @@ ${error.message}`
 };
 var env = parseEnv();
 
-// src/logger.ts
-var isDevelopment = env.ENVIRONMENT === "development";
-var loggerConfig = {
-  level: env.LOG_LEVEL,
-  serializers: {
-    obj: (value) => ({ ...value })
-  },
-  redact: ["req.headers.authorization", 'req.headers["x-inkeep-admin-authentication"]'],
-  // Only use pino-pretty in development
-  ...isDevelopment && {
-    transport: {
-      target: "pino-pretty",
-      options: {
-        sync: true,
-        destination: 1,
-        // stdout
-        colorize: true,
-        translateTime: "SYS:standard"
-      }
-    }
-  }
-};
-var logger = pino(loggerConfig);
-var asyncLocalStorage = new AsyncLocalStorage();
-function getLogger(name) {
-  const store = asyncLocalStorage.getStore();
-  const reqId = store?.get("requestId") || void 0;
-  if (!reqId) {
-    return logger.child({ name });
-  }
-  return logger.child({ reqId, name });
-}
-var logger2 = getLogger$1("env-key-auth");
+// src/middleware/auth.ts
+var logger = getLogger("env-key-auth");
 var apiKeyAuth = () => createMiddleware(async (c, next) => {
   if (env.INKEEP_AGENTS_MANAGE_API_BYPASS_SECRET) {
     const authHeader = c.req.header("Authorization");
@@ -85,7 +52,7 @@ var apiKeyAuth = () => createMiddleware(async (c, next) => {
     }
     const apiKey = authHeader.substring(7);
     if (apiKey === env.INKEEP_AGENTS_MANAGE_API_BYPASS_SECRET) {
-      logger2.info({}, "Bypass secret authenticated successfully");
+      logger.info({}, "Bypass secret authenticated successfully");
       await next();
       return;
     } else {
@@ -3054,7 +3021,7 @@ app12.openapi(
   }
 );
 var externalAgents_default = app12;
-var logger3 = getLogger("graphFull");
+var logger2 = getLogger("graphFull");
 var app13 = new OpenAPIHono();
 var GraphIdParamsSchema = z.object({
   tenantId: z.string().openapi({
@@ -3112,7 +3079,7 @@ app13.openapi(
     const { tenantId, projectId } = c.req.valid("param");
     const graphData = c.req.valid("json");
     const validatedGraphData = FullGraphDefinitionSchema.parse(graphData);
-    const createdGraph = await createFullGraphServerSide(dbClient_default, logger3)(
+    const createdGraph = await createFullGraphServerSide(dbClient_default, logger2)(
       { tenantId, projectId },
       validatedGraphData
     );
@@ -3147,7 +3114,7 @@ app13.openapi(
     try {
       const graph = await getFullGraph(
         dbClient_default,
-        logger3
+        logger2
       )({
         scopes: { tenantId, projectId, graphId }
       });
@@ -3223,15 +3190,15 @@ app13.openapi(
       }
       const existingGraph = await getFullGraph(
         dbClient_default,
-        logger3
+        logger2
       )({
         scopes: { tenantId, projectId, graphId }
       });
       const isCreate = !existingGraph;
-      const updatedGraph = isCreate ? await createFullGraphServerSide(dbClient_default, logger3)(
+      const updatedGraph = isCreate ? await createFullGraphServerSide(dbClient_default, logger2)(
         { tenantId, projectId },
         validatedGraphData
-      ) : await updateFullGraphServerSide(dbClient_default, logger3)(
+      ) : await updateFullGraphServerSide(dbClient_default, logger2)(
         { tenantId, projectId },
         validatedGraphData
       );
@@ -3279,7 +3246,7 @@ app13.openapi(
     try {
       const deleted = await deleteFullGraph(
         dbClient_default,
-        logger3
+        logger2
       )({
         scopes: { tenantId, projectId, graphId }
       });
@@ -3546,7 +3513,7 @@ function extractInputSchema(toolDef) {
   }
   return {};
 }
-var logger4 = getLogger("tools");
+var logger3 = getLogger("tools");
 var convertToMCPToolConfig = (tool) => {
   return {
     id: tool.id,
@@ -3655,7 +3622,7 @@ var checkToolHealth = async (tool, credentialStoreRegistry) => {
       }
     };
   } catch (error) {
-    logger4.error({ toolId: tool.id, error }, "Tool health check failed");
+    logger3.error({ toolId: tool.id, error }, "Tool health check failed");
     if (error instanceof Error && await detectAuthenticationRequired(tool, error)) {
       return {
         status: "needs_auth",
@@ -3736,7 +3703,7 @@ var discoverToolsFromServer = async (tool, credentialStoreRegistry) => {
     );
     return toolDefinitions;
   } catch (error) {
-    logger4.error({ toolId: tool.id, error }, "Tool discovery failed");
+    logger3.error({ toolId: tool.id, error }, "Tool discovery failed");
     throw error;
   }
 };
@@ -3800,7 +3767,7 @@ var checkAllToolsHealth = async (tenantId, projectId, credentialStoreRegistry) =
 };
 
 // src/utils/auth-detection.ts
-var logger5 = getLogger("auth-detection");
+var logger4 = getLogger("auth-detection");
 var getWellKnownUrls = (baseUrl) => [
   `${baseUrl}/.well-known/oauth-authorization-server`,
   `${baseUrl}/.well-known/openid-configuration`
@@ -3822,12 +3789,12 @@ var tryWellKnownEndpoints = async (baseUrl) => {
       if (response.ok) {
         const metadata = await response.json();
         if (validateOAuthMetadata(metadata)) {
-          logger5.debug({ baseUrl, wellKnownUrl }, "OAuth 2.1/PKCE support detected");
+          logger4.debug({ baseUrl, wellKnownUrl }, "OAuth 2.1/PKCE support detected");
           return buildOAuthConfig(metadata);
         }
       }
     } catch (error) {
-      logger5.debug({ wellKnownUrl, error }, "OAuth endpoint check failed");
+      logger4.debug({ wellKnownUrl, error }, "OAuth endpoint check failed");
     }
   }
   return null;
@@ -3862,7 +3829,7 @@ var discoverOAuthEndpoints = async (serverUrl) => {
 };
 
 // src/utils/oauth-service.ts
-var logger6 = getLogger("oauth-service");
+var logger5 = getLogger("oauth-service");
 var pkceStore = /* @__PURE__ */ new Map();
 function storePKCEVerifier(state, codeVerifier, toolId, tenantId, projectId, clientId) {
   pkceStore.set(state, { codeVerifier, toolId, tenantId, projectId, clientId });
@@ -3920,7 +3887,7 @@ var OAuthService = class {
       resource: tool.config.mcp.server.url
     });
     storePKCEVerifier(state, codeVerifier, toolId, tenantId, projectId, clientId);
-    logger6.info({ toolId, oAuthConfig, tenantId, projectId }, "OAuth flow initiated successfully");
+    logger5.info({ toolId, oAuthConfig, tenantId, projectId }, "OAuth flow initiated successfully");
     return {
       redirectUrl: authUrl,
       state
@@ -3945,9 +3912,9 @@ var OAuthService = class {
         codeVerifier,
         redirectUri
       });
-      logger6.info({ tokenType: tokens.token_type }, "Token exchange successful with openid-client");
+      logger5.info({ tokenType: tokens.token_type }, "Token exchange successful with openid-client");
     } catch (error) {
-      logger6.warn(
+      logger5.warn(
         { error: error instanceof Error ? error.message : error },
         "openid-client failed, falling back to manual token exchange"
       );
@@ -3958,7 +3925,7 @@ var OAuthService = class {
         codeVerifier,
         redirectUri
       });
-      logger6.info({ tokenType: tokens.token_type }, "Manual token exchange successful");
+      logger5.info({ tokenType: tokens.token_type }, "Manual token exchange successful");
     }
     return { tokens, oAuthConfig };
   }
@@ -3966,7 +3933,7 @@ var OAuthService = class {
    * Perform dynamic client registration
    */
   async performDynamicClientRegistration(registrationUrl, redirectUri) {
-    logger6.info({ registrationUrl }, "Attempting dynamic client registration");
+    logger5.info({ registrationUrl }, "Attempting dynamic client registration");
     try {
       const registrationResponse = await fetch(registrationUrl, {
         method: "POST",
@@ -3989,11 +3956,11 @@ var OAuthService = class {
       });
       if (registrationResponse.ok) {
         const registration = await registrationResponse.json();
-        logger6.info({ clientId: registration.client_id }, "Dynamic client registration successful");
+        logger5.info({ clientId: registration.client_id }, "Dynamic client registration successful");
         return registration.client_id;
       } else {
         const errorText = await registrationResponse.text();
-        logger6.warn(
+        logger5.warn(
           {
             status: registrationResponse.status,
             errorText
@@ -4002,7 +3969,7 @@ var OAuthService = class {
         );
       }
     } catch (regError) {
-      logger6.warn(
+      logger5.warn(
         { error: regError },
         "Dynamic client registration error, using default client_id"
       );
@@ -4032,7 +3999,7 @@ var OAuthService = class {
     const oauth = await import('openid-client');
     const tokenUrl = new URL(oAuthConfig.tokenUrl);
     const oauthServerUrl = `${tokenUrl.protocol}//${tokenUrl.host}`;
-    logger6.info({ oauthServerUrl, clientId }, "Attempting openid-client discovery");
+    logger5.info({ oauthServerUrl, clientId }, "Attempting openid-client discovery");
     const config = await oauth.discovery(
       new URL(oauthServerUrl),
       clientId,
@@ -4064,7 +4031,7 @@ var OAuthService = class {
    */
   async exchangeManually(params) {
     const { oAuthConfig, clientId, code, codeVerifier, redirectUri } = params;
-    logger6.info({ tokenUrl: oAuthConfig.tokenUrl }, "Attempting manual token exchange");
+    logger5.info({ tokenUrl: oAuthConfig.tokenUrl }, "Attempting manual token exchange");
     const tokenResponse = await fetch(oAuthConfig.tokenUrl, {
       method: "POST",
       headers: {
@@ -4082,7 +4049,7 @@ var OAuthService = class {
     });
     if (!tokenResponse.ok) {
       const errorText = await tokenResponse.text();
-      logger6.error(
+      logger5.error(
         {
           status: tokenResponse.status,
           statusText: tokenResponse.statusText,
@@ -4100,6 +4067,7 @@ var OAuthService = class {
 var oauthService = new OAuthService();
 
 // src/routes/tools.ts
+var logger6 = getLogger("tools");
 var app15 = new OpenAPIHono();
 app15.openapi(
   createRoute({
@@ -4222,7 +4190,7 @@ app15.openapi(
   async (c) => {
     const { tenantId, projectId } = c.req.valid("param");
     const body = c.req.valid("json");
-    getLogger().info({ body }, "body");
+    logger6.info({ body }, "body");
     const id = body.id || nanoid();
     const tool = await createTool(dbClient_default)({
       tenantId,
@@ -4643,7 +4611,6 @@ app15.openapi(
   }),
   async (c) => {
     const { tenantId, projectId, id } = c.req.valid("param");
-    const logger9 = getLogger("oauth-login");
     try {
       const tool = await getToolById(dbClient_default)({ scopes: { tenantId, projectId }, toolId: id });
       if (!tool) {
@@ -4661,7 +4628,7 @@ app15.openapi(
       });
       return c.redirect(redirectUrl, 302);
     } catch (error) {
-      logger9.error({ toolId: id, error }, "OAuth login failed");
+      logger6.error({ toolId: id, error }, "OAuth login failed");
       if (error && typeof error === "object" && "code" in error) {
         const apiError = error;
         return c.json({ error: apiError.message }, apiError.code === "not_found" ? 404 : 400);
@@ -4762,7 +4729,7 @@ app17.openapi(
         throw new Error(`Tool ${toolId} not found`);
       }
       logger7.info({ toolId, tenantId, projectId }, "Processing OAuth callback");
-      logger7.info("Exchanging authorization code for access token");
+      logger7.info({ toolId }, "Exchanging authorization code for access token");
       const mcpTool = dbResultToMcpTool(tool);
       const { tokens } = await oauthService.exchangeCodeForTokens({
         code,
@@ -4799,7 +4766,7 @@ app17.openapi(
           data: credentialData
         });
       } else {
-        logger7.info("Creating new credential");
+        logger7.info({ credentialId }, "Creating new credential");
         credential = await createCredentialReference(dbClient_default)({
           tenantId,
           projectId,
@@ -5131,6 +5098,8 @@ app18.openapi(
 var projectFull_default = app18;
 
 // src/app.ts
+var logger9 = getLogger("agents-manage-api");
+logger9.info({ logger: logger9.getTransports() }, "Logger initialized");
 function createManagementHono(serverConfig, credentialStores) {
   const app20 = new OpenAPIHono();
   app20.use("*", requestId());
@@ -5141,7 +5110,7 @@ function createManagementHono(serverConfig, credentialStores) {
   });
   app20.use(
     pinoLogger({
-      pino: getLogger(),
+      pino: getLogger("agents-manage-api").getPinoInstance(),
       http: {
         onResLevel(c) {
           if (c.res.status >= 500) {
@@ -5185,7 +5154,7 @@ function createManagementHono(serverConfig, credentialStores) {
       if (!isExpectedError) {
         const errorMessage = err instanceof Error ? err.message : String(err);
         const errorStack = err instanceof Error ? err.stack : void 0;
-        getLogger().error(
+        logger9.error(
           {
             error: err,
             message: errorMessage,
@@ -5196,7 +5165,7 @@ function createManagementHono(serverConfig, credentialStores) {
           "Unexpected server error occurred"
         );
       } else {
-        getLogger().error(
+        logger9.error(
           {
             error: err,
             path: c.req.path,
@@ -5212,7 +5181,7 @@ function createManagementHono(serverConfig, credentialStores) {
         const response = err.getResponse();
         return response;
       } catch (responseError) {
-        getLogger().error({ error: responseError }, "Error while handling HTTPException response");
+        logger9.error({ error: responseError }, "Error while handling HTTPException response");
       }
     }
     const { status: respStatus, title, detail, instance } = await handleApiError(err, requestId2);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inkeep/agents-manage-api",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "description": "Agents Manage API for Inkeep Agent Framework - handles CRUD operations and OAuth",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -24,7 +24,7 @@
     "openid-client": "^6.6.4",
     "pino": "^9.7.0",
     "zod": "^4.1.5",
-    "@inkeep/agents-core": "^0.3.0"
+    "@inkeep/agents-core": "^0.5.0"
   },
   "devDependencies": {
     "@hono/vite-dev-server": "^0.20.1",