@inkeep/agents-manage-api 0.38.3 → 0.39.0

package/dist/{chunk-BAMAX6LI.js → chunk-VM5BBJTO.js}

@@ -1,5 +1,5 @@
 import { F, u, R, x, T, h, U, L, or, C, Vr, ce, ur, P } from './chunk-JCVMVG3J.js';
-import { loadEnvironmentFiles, createDatabaseClient, getLogger, commonGetErrorResponses, AgentListResponse, PaginationQueryParamsSchema, TenantProjectParamsSchema, listAgents, AgentResponse, TenantProjectIdParamsSchema, getAgentById, createApiError, RelatedAgentInfoListResponse, TenantProjectAgentSubAgentParamsSchema, getAgentSubAgentInfos, AgentWithinContextOfProjectResponse, TenantProjectAgentParamsSchema, getFullAgentDefinition, AgentApiInsertSchema, createAgent, generateId, AgentApiUpdateSchema, updateAgent, ErrorResponseSchema, deleteAgent, AgentWithinContextOfProjectSchema, createFullAgentServerSide, getFullAgent, updateFullAgentServerSide, deleteFullAgent, ApiKeyListResponse, listApiKeysPaginated, ApiKeyResponse, getApiKeyById, ApiKeyApiCreationResponseSchema, ApiKeyApiInsertSchema, generateApiKey, createApiKey, ApiKeyApiUpdateSchema, updateApiKey, deleteApiKey, ArtifactComponentListResponse, listArtifactComponentsPaginated, ArtifactComponentResponse, getArtifactComponentById, ArtifactComponentApiInsertSchema, validatePropsAsJsonSchema, createArtifactComponent, ArtifactComponentApiUpdateSchema, updateArtifactComponent, deleteArtifactComponent, ContextConfigListResponse, listContextConfigsPaginated, ContextConfigResponse, TenantProjectAgentIdParamsSchema, getContextConfigById, ContextConfigApiInsertSchema, createContextConfig, commonUpdateErrorResponses, ContextConfigApiUpdateSchema, updateContextConfig, commonDeleteErrorResponses, deleteContextConfig, getConversationHistory, formatMessagesForLLMContext, CredentialStoreListResponseSchema, CreateCredentialInStoreResponseSchema, CreateCredentialInStoreRequestSchema, CredentialReferenceListResponse, listCredentialReferencesPaginated, ListResponseSchema, CredentialReferenceApiSelectSchema, CredentialReferenceResponse, getCredentialReferenceWithResources, CredentialReferenceApiInsertSchema, createCredentialReference, CredentialReferenceApiUpdateSchema, updateCredentialReference, getCredentialReferenceById, getCredentialStoreLookupKeyFromRetrievalParams, deleteCredentialReference, DataComponentListResponse, listDataComponentsPaginated, DataComponentResponse, getDataComponent, DataComponentApiInsertSchema, createDataComponent, DataComponentApiUpdateSchema, updateDataComponent, deleteDataComponent, ExternalAgentListResponse, listExternalAgentsPaginated, ExternalAgentResponse, getExternalAgent, ExternalAgentApiInsertSchema, createExternalAgent, ExternalAgentApiUpdateSchema, updateExternalAgent, deleteExternalAgent, FunctionListResponse, listFunctions, FunctionResponse, getFunction, FunctionApiInsertSchema, upsertFunction, FunctionApiUpdateSchema, deleteFunction, FunctionToolListResponse, listFunctionTools, FunctionToolResponse, getFunctionToolById, FunctionToolApiInsertSchema, createFunctionTool, FunctionToolApiUpdateSchema, updateFunctionTool, deleteFunctionTool, MCPCatalogListResponse, fetchComposioServers, MCPTransportType, ProjectListResponse, TenantParamsSchema, listProjectsPaginated, ProjectResponse, TenantIdParamsSchema, getProject, ProjectApiInsertSchema, createProject, ProjectApiUpdateSchema, updateProject, deleteProject, ArtifactComponentArrayResponse, getArtifactComponentsForAgent, ComponentAssociationListResponse, getAgentsUsingArtifactComponent, SubAgentArtifactComponentResponse, SubAgentArtifactComponentApiInsertSchema, getSubAgentById, isArtifactComponentAssociatedWithAgent, associateArtifactComponentWithAgent, RemovedResponseSchema, removeArtifactComponentFromAgent, ExistsResponseSchema, DataComponentArrayResponse, getDataComponentsForAgent, getAgentsUsingDataComponent, SubAgentDataComponentResponse, SubAgentDataComponentApiInsertSchema, isDataComponentAssociatedWithAgent, associateDataComponentWithAgent, removeDataComponentFromAgent, SubAgentExternalAgentRelationListResponse, listSubAgentExternalAgentRelations, SubAgentExternalAgentRelationResponse, TenantProjectAgentSubAgentIdParamsSchema, getSubAgentExternalAgentRelationById, SubAgentExternalAgentRelationApiInsertSchema, createSubAgentExternalAgentRelation, SubAgentExternalAgentRelationApiUpdateSchema, updateSubAgentExternalAgentRelation, deleteSubAgentExternalAgentRelation, SubAgentRelationListResponse, SubAgentRelationQuerySchema, getAgentRelationsBySource, getSubAgentRelationsByTarget, listAgentRelations, SubAgentRelationResponse, getAgentRelationById, SubAgentRelationApiInsertSchema, validateSubAgent, createSubAgentRelation, SubAgentRelationApiUpdateSchema, updateAgentRelation, deleteSubAgentRelation, SubAgentListResponse, listSubAgentsPaginated, SubAgentResponse, SubAgentApiInsertSchema, createSubAgent, SubAgentApiUpdateSchema, updateSubAgent, deleteSubAgent, SubAgentIsDefaultError, SubAgentTeamAgentRelationListResponse, listSubAgentTeamAgentRelations, SubAgentTeamAgentRelationResponse, getSubAgentTeamAgentRelationById, SubAgentTeamAgentRelationApiInsertSchema, createSubAgentTeamAgentRelation, SubAgentTeamAgentRelationApiUpdateSchema, updateSubAgentTeamAgentRelation, deleteSubAgentTeamAgentRelation, SubAgentToolRelationListResponse, getAgentToolRelationByAgent, getAgentToolRelationByTool, listAgentToolRelations, SubAgentToolRelationResponse, getAgentToolRelationById, getAgentsForTool, SubAgentToolRelationApiInsertSchema, createAgentToolRelation, SubAgentToolRelationApiUpdateSchema, updateAgentToolRelation, deleteAgentToolRelation, ThirdPartyMCPServerResponse, fetchSingleComposioServer, getComposioOAuthRedirectUrl, McpToolListResponse, ToolStatusSchema, listTools, dbResultToMcpTool, McpToolResponse, getToolById, ToolApiInsertSchema, createTool, ToolApiUpdateSchema, updateTool, getUserScopedCredentialReference, deleteTool, getPendingInvitationsByEmail, OAuthLoginQuerySchema, OAuthCallbackQuerySchema, CredentialStoreType, projectExists, signTempToken, FullProjectDefinitionResponse, FullProjectDefinitionSchema, createFullProjectServerSide, getFullProject, updateFullProjectServerSide, deleteFullProject, getUserOrganizations, addUserToOrganization, initiateMcpOAuthFlow, exchangeMcpAuthorizationCode, organization, getUserByEmail, member, createDefaultCredentialStores, CredentialStoreRegistry, handleApiError, validateAndGetApiKey } from '@inkeep/agents-core';
+import { loadEnvironmentFiles, createDatabaseClient, getLogger, getUserOrganizations, commonGetErrorResponses, AgentListResponse, PaginationQueryParamsSchema, TenantProjectParamsSchema, listAgents, AgentResponse, TenantProjectIdParamsSchema, getAgentById, createApiError, RelatedAgentInfoListResponse, TenantProjectAgentSubAgentParamsSchema, getAgentSubAgentInfos, AgentWithinContextOfProjectResponse, TenantProjectAgentParamsSchema, getFullAgentDefinition, AgentApiInsertSchema, createAgent, generateId, AgentApiUpdateSchema, updateAgent, ErrorResponseSchema, deleteAgent, AgentWithinContextOfProjectSchema, createFullAgentServerSide, getFullAgent, updateFullAgentServerSide, deleteFullAgent, ApiKeyListResponse, listApiKeysPaginated, ApiKeyResponse, getApiKeyById, ApiKeyApiCreationResponseSchema, ApiKeyApiInsertSchema, generateApiKey, createApiKey, ApiKeyApiUpdateSchema, updateApiKey, deleteApiKey, ArtifactComponentListResponse, listArtifactComponentsPaginated, ArtifactComponentResponse, getArtifactComponentById, ArtifactComponentApiInsertSchema, validatePropsAsJsonSchema, createArtifactComponent, ArtifactComponentApiUpdateSchema, updateArtifactComponent, deleteArtifactComponent, ContextConfigListResponse, listContextConfigsPaginated, ContextConfigResponse, TenantProjectAgentIdParamsSchema, getContextConfigById, ContextConfigApiInsertSchema, createContextConfig, commonUpdateErrorResponses, ContextConfigApiUpdateSchema, updateContextConfig, commonDeleteErrorResponses, deleteContextConfig, getConversationHistory, formatMessagesForLLMContext, CredentialStoreListResponseSchema, CreateCredentialInStoreResponseSchema, CreateCredentialInStoreRequestSchema, CredentialReferenceListResponse, listCredentialReferencesPaginated, ListResponseSchema, CredentialReferenceApiSelectSchema, CredentialReferenceResponse, getCredentialReferenceWithResources, CredentialReferenceApiInsertSchema, createCredentialReference, CredentialReferenceApiUpdateSchema, updateCredentialReference, getCredentialReferenceById, getCredentialStoreLookupKeyFromRetrievalParams, deleteCredentialReference, DataComponentListResponse, listDataComponentsPaginated, DataComponentResponse, getDataComponent, DataComponentApiInsertSchema, createDataComponent, DataComponentApiUpdateSchema, updateDataComponent, deleteDataComponent, ExternalAgentListResponse, listExternalAgentsPaginated, ExternalAgentResponse, getExternalAgent, ExternalAgentApiInsertSchema, createExternalAgent, ExternalAgentApiUpdateSchema, updateExternalAgent, deleteExternalAgent, FunctionListResponse, listFunctions, FunctionResponse, getFunction, FunctionApiInsertSchema, upsertFunction, FunctionApiUpdateSchema, deleteFunction, FunctionToolListResponse, listFunctionTools, FunctionToolResponse, getFunctionToolById, FunctionToolApiInsertSchema, createFunctionTool, FunctionToolApiUpdateSchema, updateFunctionTool, deleteFunctionTool, MCPCatalogListResponse, fetchComposioServers, MCPTransportType, ProjectListResponse, TenantParamsSchema, listProjectsPaginated, ProjectResponse, TenantIdParamsSchema, getProject, ProjectApiInsertSchema, createProject, ProjectApiUpdateSchema, updateProject, deleteProject, ArtifactComponentArrayResponse, getArtifactComponentsForAgent, ComponentAssociationListResponse, getAgentsUsingArtifactComponent, SubAgentArtifactComponentResponse, SubAgentArtifactComponentApiInsertSchema, getSubAgentById, isArtifactComponentAssociatedWithAgent, associateArtifactComponentWithAgent, RemovedResponseSchema, removeArtifactComponentFromAgent, ExistsResponseSchema, DataComponentArrayResponse, getDataComponentsForAgent, getAgentsUsingDataComponent, SubAgentDataComponentResponse, SubAgentDataComponentApiInsertSchema, isDataComponentAssociatedWithAgent, associateDataComponentWithAgent, removeDataComponentFromAgent, SubAgentExternalAgentRelationListResponse, listSubAgentExternalAgentRelations, SubAgentExternalAgentRelationResponse, TenantProjectAgentSubAgentIdParamsSchema, getSubAgentExternalAgentRelationById, SubAgentExternalAgentRelationApiInsertSchema, createSubAgentExternalAgentRelation, SubAgentExternalAgentRelationApiUpdateSchema, updateSubAgentExternalAgentRelation, deleteSubAgentExternalAgentRelation, SubAgentRelationListResponse, SubAgentRelationQuerySchema, getAgentRelationsBySource, getSubAgentRelationsByTarget, listAgentRelations, SubAgentRelationResponse, getAgentRelationById, SubAgentRelationApiInsertSchema, validateSubAgent, createSubAgentRelation, SubAgentRelationApiUpdateSchema, updateAgentRelation, deleteSubAgentRelation, SubAgentListResponse, listSubAgentsPaginated, SubAgentResponse, SubAgentApiInsertSchema, createSubAgent, SubAgentApiUpdateSchema, updateSubAgent, deleteSubAgent, SubAgentIsDefaultError, SubAgentTeamAgentRelationListResponse, listSubAgentTeamAgentRelations, SubAgentTeamAgentRelationResponse, getSubAgentTeamAgentRelationById, SubAgentTeamAgentRelationApiInsertSchema, createSubAgentTeamAgentRelation, SubAgentTeamAgentRelationApiUpdateSchema, updateSubAgentTeamAgentRelation, deleteSubAgentTeamAgentRelation, SubAgentToolRelationListResponse, getAgentToolRelationByAgent, getAgentToolRelationByTool, listAgentToolRelations, SubAgentToolRelationResponse, getAgentToolRelationById, getAgentsForTool, SubAgentToolRelationApiInsertSchema, createAgentToolRelation, SubAgentToolRelationApiUpdateSchema, updateAgentToolRelation, deleteAgentToolRelation, ThirdPartyMCPServerResponse, fetchSingleComposioServer, getComposioOAuthRedirectUrl, McpToolListResponse, ToolStatusSchema, listTools, dbResultToMcpTool, McpToolResponse, getToolById, ToolApiInsertSchema, createTool, ToolApiUpdateSchema, updateTool, getUserScopedCredentialReference, deleteTool, getPendingInvitationsByEmail, OAuthLoginQuerySchema, OAuthCallbackQuerySchema, CredentialStoreType, projectExists, signTempToken, FullProjectDefinitionResponse, FullProjectDefinitionSchema, createFullProjectServerSide, getFullProject, updateFullProjectServerSide, deleteFullProject, addUserToOrganization, initiateMcpOAuthFlow, exchangeMcpAuthorizationCode, organization, getUserByEmail, member, createDefaultCredentialStores, CredentialStoreRegistry, handleApiError, validateAndGetApiKey } from '@inkeep/agents-core';
 import { createAuth } from '@inkeep/agents-core/auth';
 import { z, OpenAPIHono, createRoute } from '@hono/zod-openapi';
 import { Hono } from 'hono';
@@ -5132,15 +5132,35 @@ var apiKeyAuth = () => createMiddleware(async (c, next) => {
       message: "Missing or invalid authorization header. Expected: Bearer <api_key>"
     });
   }
-  const apiKey = authHeader.substring(7);
-  if (env.INKEEP_AGENTS_MANAGE_API_BYPASS_SECRET && apiKey === env.INKEEP_AGENTS_MANAGE_API_BYPASS_SECRET) {
+  const token = authHeader.substring(7);
+  if (env.INKEEP_AGENTS_MANAGE_API_BYPASS_SECRET && token === env.INKEEP_AGENTS_MANAGE_API_BYPASS_SECRET) {
     logger.info({}, "Bypass secret authenticated successfully");
     c.set("userId", "system");
     c.set("userEmail", "system@internal");
     await next();
     return;
   }
-  const validatedKey = await validateAndGetApiKey(apiKey, dbClient_default);
+  const auth = c.get("auth");
+  if (auth) {
+    try {
+      const headers = new Headers();
+      headers.set("Authorization", authHeader);
+      const session = await auth.api.getSession({ headers });
+      if (session?.user) {
+        logger.info(
+          { userId: session.user.id },
+          "Better-auth session authenticated successfully"
+        );
+        c.set("userId", session.user.id);
+        c.set("userEmail", session.user.email);
+        await next();
+        return;
+      }
+    } catch (error) {
+      logger.debug({ error }, "Better-auth session validation failed, trying API key");
+    }
+  }
+  const validatedKey = await validateAndGetApiKey(token, dbClient_default);
   if (validatedKey) {
     logger.info({ keyId: validatedKey.id }, "API key authenticated successfully");
     c.set("userId", `apikey:${validatedKey.id}`);
@@ -5465,6 +5485,72 @@ function setupOpenAPIRoutes(app30) {
     })
   );
 }
+var cliAuthRoutes = new OpenAPIHono();
+var CLIMeResponseSchema = z.object({
+  user: z.object({
+    id: z.string(),
+    email: z.string(),
+    name: z.string().nullable()
+  }),
+  organization: z.object({
+    id: z.string(),
+    name: z.string(),
+    slug: z.string(),
+    role: z.string()
+  })
+});
+cliAuthRoutes.openapi(
+  createRoute({
+    method: "get",
+    path: "/me",
+    tags: ["cli"],
+    summary: "Get CLI user info",
+    description: "Get the current authenticated user and their organization for CLI usage",
+    middleware: [sessionAuth()],
+    responses: {
+      200: {
+        description: "User info with organization",
+        content: {
+          "application/json": {
+            schema: CLIMeResponseSchema
+          }
+        }
+      },
+      401: {
+        description: "Not authenticated"
+      },
+      404: {
+        description: "User has no organization"
+      }
+    }
+  }),
+  async (c) => {
+    const user = c.get("user");
+    const userId = c.get("userId");
+    if (!user || !userId) {
+      return c.json({ error: "Not authenticated" }, 401);
+    }
+    const organizations = await getUserOrganizations(dbClient_default)(userId);
+    if (organizations.length === 0) {
+      return c.json({ error: "User has no organization" }, 404);
+    }
+    const org = organizations[0];
+    return c.json({
+      user: {
+        id: user.id,
+        email: user.email,
+        name: user.name || null
+      },
+      organization: {
+        id: org.organizationId,
+        name: org.organizationName || "",
+        slug: org.organizationSlug || "",
+        role: org.role
+      }
+    });
+  }
+);
+var cliAuth_default = cliAuthRoutes;
 function formatPermissionsForDisplay(permissions) {
   const formatted = [];
   for (const [resource, actions] of Object.entries(permissions)) {
@@ -35080,6 +35166,7 @@ function createManagementHono(serverConfig, credentialStores, auth) {
     app30.use("/tenants/:tenantId/*", requireTenantAccess());
   }
   app30.route("/api/users/:userId/organizations", userOrganizations_default);
+  app30.route("/api/cli", cliAuth_default);
   app30.route("/api/invitations", invitations_default);
   app30.route("/tenants/:tenantId", routes_default);
   app30.route("/tenants/:tenantId/playground/token", playgroundToken_default);

package/dist/factory.js

@@ -1 +1 @@
-export { createAuth0Provider, createManagementApp, createManagementHono, createOIDCProvider, initializeDefaultUser } from './chunk-BAMAX6LI.js';
+export { createAuth0Provider, createManagementApp, createManagementHono, createOIDCProvider, initializeDefaultUser } from './chunk-VM5BBJTO.js';

package/dist/index.d.ts

@@ -59,6 +59,22 @@ declare const auth: better_auth.Auth<{
     };
     trustedOrigins: string[];
     plugins: [{
+        id: "bearer";
+        hooks: {
+            before: {
+                matcher(context: better_auth.HookEndpointContext): boolean;
+                handler: (inputContext: better_auth.MiddlewareInputContext<better_auth.MiddlewareOptions>) => Promise<{
+                    context: {
+                        headers: Headers;
+                    };
+                } | undefined>;
+            }[];
+            after: {
+                matcher(context: better_auth.HookEndpointContext): true;
+                handler: (inputContext: better_auth.MiddlewareInputContext<better_auth.MiddlewareOptions>) => Promise<void>;
+            }[];
+        };
+    }, {
         id: "sso";
         endpoints: {
             spMetadata: ReturnType<() => better_auth.StrictEndpoint<"/sso/saml2/sp/metadata", {
@@ -958,6 +974,348 @@ declare const auth: better_auth.Auth<{
                 };
             }): Promise<void>;
         };
+    }, {
+        id: "device-authorization";
+        schema: {
+            deviceCode: {
+                fields: {
+                    deviceCode: {
+                        type: "string";
+                        required: true;
+                    };
+                    userCode: {
+                        type: "string";
+                        required: true;
+                    };
+                    userId: {
+                        type: "string";
+                        required: false;
+                    };
+                    expiresAt: {
+                        type: "date";
+                        required: true;
+                    };
+                    status: {
+                        type: "string";
+                        required: true;
+                    };
+                    lastPolledAt: {
+                        type: "date";
+                        required: false;
+                    };
+                    pollingInterval: {
+                        type: "number";
+                        required: false;
+                    };
+                    clientId: {
+                        type: "string";
+                        required: false;
+                    };
+                    scope: {
+                        type: "string";
+                        required: false;
+                    };
+                };
+            };
+        };
+        endpoints: {
+            deviceCode: better_auth.StrictEndpoint<"/device/code", {
+                method: "POST";
+                body: zod.ZodObject<{
+                    client_id: zod.ZodString;
+                    scope: zod.ZodOptional<zod.ZodString>;
+                }, better_auth.$strip>;
+                error: zod.ZodObject<{
+                    error: zod.ZodEnum<{
+                        invalid_request: "invalid_request";
+                        invalid_client: "invalid_client";
+                    }>;
+                    error_description: zod.ZodString;
+                }, better_auth.$strip>;
+                metadata: {
+                    openapi: {
+                        description: string;
+                        responses: {
+                            200: {
+                                description: string;
+                                content: {
+                                    "application/json": {
+                                        schema: {
+                                            type: "object";
+                                            properties: {
+                                                device_code: {
+                                                    type: string;
+                                                    description: string;
+                                                };
+                                                user_code: {
+                                                    type: string;
+                                                    description: string;
+                                                };
+                                                verification_uri: {
+                                                    type: string;
+                                                    format: string;
+                                                    description: string;
+                                                };
+                                                verification_uri_complete: {
+                                                    type: string;
+                                                    format: string;
+                                                    description: string;
+                                                };
+                                                expires_in: {
+                                                    type: string;
+                                                    description: string;
+                                                };
+                                                interval: {
+                                                    type: string;
+                                                    description: string;
+                                                };
+                                            };
+                                        };
+                                    };
+                                };
+                            };
+                            400: {
+                                description: string;
+                                content: {
+                                    "application/json": {
+                                        schema: {
+                                            type: "object";
+                                            properties: {
+                                                error: {
+                                                    type: string;
+                                                    enum: string[];
+                                                };
+                                                error_description: {
+                                                    type: string;
+                                                };
+                                            };
+                                        };
+                                    };
+                                };
+                            };
+                        };
+                    };
+                };
+            } & {
+                use: any[];
+            }, {
+                device_code: string;
+                user_code: string;
+                verification_uri: string;
+                verification_uri_complete: string;
+                expires_in: number;
+                interval: number;
+            }>;
+            deviceToken: better_auth.StrictEndpoint<"/device/token", {
+                method: "POST";
+                body: zod.ZodObject<{
+                    grant_type: zod.ZodLiteral<"urn:ietf:params:oauth:grant-type:device_code">;
+                    device_code: zod.ZodString;
+                    client_id: zod.ZodString;
+                }, better_auth.$strip>;
+                error: zod.ZodObject<{
+                    error: zod.ZodEnum<{
+                        invalid_request: "invalid_request";
+                        authorization_pending: "authorization_pending";
+                        slow_down: "slow_down";
+                        expired_token: "expired_token";
+                        access_denied: "access_denied";
+                        invalid_grant: "invalid_grant";
+                    }>;
+                    error_description: zod.ZodString;
+                }, better_auth.$strip>;
+                metadata: {
+                    openapi: {
+                        description: string;
+                        responses: {
+                            200: {
+                                description: string;
+                                content: {
+                                    "application/json": {
+                                        schema: {
+                                            type: "object";
+                                            properties: {
+                                                session: {
+                                                    $ref: string;
+                                                };
+                                                user: {
+                                                    $ref: string;
+                                                };
+                                            };
+                                        };
+                                    };
+                                };
+                            };
+                            400: {
+                                description: string;
+                                content: {
+                                    "application/json": {
+                                        schema: {
+                                            type: "object";
+                                            properties: {
+                                                error: {
+                                                    type: string;
+                                                    enum: string[];
+                                                };
+                                                error_description: {
+                                                    type: string;
+                                                };
+                                            };
+                                        };
+                                    };
+                                };
+                            };
+                        };
+                    };
+                };
+            } & {
+                use: any[];
+            }, {
+                access_token: string;
+                token_type: string;
+                expires_in: number;
+                scope: string;
+            }>;
+            deviceVerify: better_auth.StrictEndpoint<"/device", {
+                method: "GET";
+                query: zod.ZodObject<{
+                    user_code: zod.ZodString;
+                }, better_auth.$strip>;
+                error: zod.ZodObject<{
+                    error: zod.ZodEnum<{
+                        invalid_request: "invalid_request";
+                    }>;
+                    error_description: zod.ZodString;
+                }, better_auth.$strip>;
+                metadata: {
+                    openapi: {
+                        description: string;
+                        responses: {
+                            200: {
+                                description: string;
+                                content: {
+                                    "application/json": {
+                                        schema: {
+                                            type: "object";
+                                            properties: {
+                                                user_code: {
+                                                    type: string;
+                                                    description: string;
+                                                };
+                                                status: {
+                                                    type: string;
+                                                    enum: string[];
+                                                    description: string;
+                                                };
+                                            };
+                                        };
+                                    };
+                                };
+                            };
+                        };
+                    };
+                };
+            } & {
+                use: any[];
+            }, {
+                user_code: string;
+                status: string;
+            }>;
+            deviceApprove: better_auth.StrictEndpoint<"/device/approve", {
+                method: "POST";
+                body: zod.ZodObject<{
+                    userCode: zod.ZodString;
+                }, better_auth.$strip>;
+                error: zod.ZodObject<{
+                    error: zod.ZodEnum<{
+                        invalid_request: "invalid_request";
+                        expired_token: "expired_token";
+                        device_code_already_processed: "device_code_already_processed";
+                    }>;
+                    error_description: zod.ZodString;
+                }, better_auth.$strip>;
+                requireHeaders: true;
+                metadata: {
+                    openapi: {
+                        description: string;
+                        responses: {
+                            200: {
+                                description: string;
+                                content: {
+                                    "application/json": {
+                                        schema: {
+                                            type: "object";
+                                            properties: {
+                                                success: {
+                                                    type: string;
+                                                };
+                                            };
+                                        };
+                                    };
+                                };
+                            };
+                        };
+                    };
+                };
+            } & {
+                use: any[];
+            }, {
+                success: boolean;
+            }>;
+            deviceDeny: better_auth.StrictEndpoint<"/device/deny", {
+                method: "POST";
+                body: zod.ZodObject<{
+                    userCode: zod.ZodString;
+                }, better_auth.$strip>;
+                error: zod.ZodObject<{
+                    error: zod.ZodEnum<{
+                        invalid_request: "invalid_request";
+                        expired_token: "expired_token";
+                    }>;
+                    error_description: zod.ZodString;
+                }, better_auth.$strip>;
+                metadata: {
+                    openapi: {
+                        description: string;
+                        responses: {
+                            200: {
+                                description: string;
+                                content: {
+                                    "application/json": {
+                                        schema: {
+                                            type: "object";
+                                            properties: {
+                                                success: {
+                                                    type: string;
+                                                };
+                                            };
+                                        };
+                                    };
+                                };
+                            };
+                        };
+                    };
+                };
+            } & {
+                use: any[];
+            }, {
+                success: boolean;
+            }>;
+        };
+        $ERROR_CODES: {
+            readonly INVALID_DEVICE_CODE: "Invalid device code";
+            readonly EXPIRED_DEVICE_CODE: "Device code has expired";
+            readonly EXPIRED_USER_CODE: "User code has expired";
+            readonly AUTHORIZATION_PENDING: "Authorization pending";
+            readonly ACCESS_DENIED: "Access denied";
+            readonly INVALID_USER_CODE: "Invalid user code";
+            readonly DEVICE_CODE_ALREADY_PROCESSED: "Device code already processed";
+            readonly POLLING_TOO_FREQUENTLY: "Polling too frequently";
+            readonly USER_NOT_FOUND: "User not found";
+            readonly FAILED_TO_CREATE_SESSION: "Failed to create session";
+            readonly INVALID_DEVICE_CODE_STATUS: "Invalid device code status";
+            readonly AUTHENTICATION_REQUIRED: "Authentication required";
+        };
     }];
 }> | null;
 declare const app: Hono;

package/dist/index.js

@@ -1,5 +1,5 @@
-import { createAuth0Provider, createManagementHono, env, initializeDefaultUser, dbClient_default } from './chunk-BAMAX6LI.js';
-export { createAuth0Provider, createManagementApp, createManagementHono, createOIDCProvider, initializeDefaultUser } from './chunk-BAMAX6LI.js';
+import { createAuth0Provider, createManagementHono, env, initializeDefaultUser, dbClient_default } from './chunk-VM5BBJTO.js';
+export { createAuth0Provider, createManagementApp, createManagementHono, createOIDCProvider, initializeDefaultUser } from './chunk-VM5BBJTO.js';
 import { createDefaultCredentialStores, CredentialStoreRegistry } from '@inkeep/agents-core';
 import { createAuth } from '@inkeep/agents-core/auth';
 export { Hono } from 'hono';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inkeep/agents-manage-api",
-  "version": "0.38.3",
+  "version": "0.39.0",
   "description": "Agents Manage API for Inkeep Agent Framework - handles CRUD operations and OAuth",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -33,8 +33,8 @@
     "nanoid": "^5.1.5",
     "openid-client": "^6.6.4",
     "pino": "^9.7.0",
-    "@inkeep/agents-core": "^0.38.3",
-    "@inkeep/agents-manage-mcp": "^0.38.3"
+    "@inkeep/agents-core": "^0.39.0",
+    "@inkeep/agents-manage-mcp": "^0.39.0"
   },
   "peerDependencies": {
     "@hono/zod-openapi": "^1.1.5",