@inkeep/agents-manage-api 0.6.6 → 0.7.1

package/dist/index.js

@@ -1,4 +1,4 @@
-import { loadEnvironmentFiles, getLogger, createDatabaseClient, commonGetErrorResponses, TenantProjectGraphParamsSchema, ArtifactComponentApiSelectSchema, getArtifactComponentsForAgent, getAgentsUsingArtifactComponent, ErrorResponseSchema, SingleResponseSchema, AgentArtifactComponentApiInsertSchema, AgentArtifactComponentApiSelectSchema, getAgentById, getArtifactComponentById, createApiError, isArtifactComponentAssociatedWithAgent, associateArtifactComponentWithAgent, RemovedResponseSchema, removeArtifactComponentFromAgent, ExistsResponseSchema, DataComponentApiSelectSchema, getDataComponentsForAgent, getAgentsUsingDataComponent, AgentDataComponentApiInsertSchema, AgentDataComponentApiSelectSchema, getDataComponent, isDataComponentAssociatedWithAgent, associateDataComponentWithAgent, removeDataComponentFromAgent, ListResponseSchema, PaginationQueryParamsSchema, TenantProjectParamsSchema, AgentGraphApiSelectSchema, listAgentGraphs, IdParamsSchema, getAgentGraphById, getGraphAgentInfos, FullGraphDefinitionSchema, getFullGraphDefinition, AgentGraphApiInsertSchema, createAgentGraph, AgentGraphApiUpdateSchema, updateAgentGraph, deleteAgentGraph, AgentRelationApiSelectSchema, AgentRelationQuerySchema, getAgentRelationsBySource, getAgentRelationsByTarget, getExternalAgentRelations, listAgentRelations, TenantProjectGraphIdParamsSchema, getAgentRelationById, AgentRelationApiInsertSchema, validateExternalAgent, validateInternalAgent, createAgentRelation, AgentRelationApiUpdateSchema, updateAgentRelation, deleteAgentRelation, AgentApiSelectSchema, listAgentsPaginated, AgentApiInsertSchema, createAgent, AgentApiUpdateSchema, updateAgent, deleteAgent, AgentToolRelationApiSelectSchema, getAgentToolRelationByAgent, getAgentToolRelationByTool, listAgentToolRelations, getAgentToolRelationById, getToolsForAgent, getAgentsForTool, AgentToolRelationApiInsertSchema, createAgentToolRelation, AgentToolRelationApiUpdateSchema, updateAgentToolRelation, deleteAgentToolRelation, ApiKeyApiSelectSchema, listApiKeysPaginated, getApiKeyById, ApiKeyApiCreationResponseSchema, ApiKeyApiInsertSchema, generateApiKey, createApiKey, ApiKeyApiUpdateSchema, updateApiKey, deleteApiKey, listArtifactComponentsPaginated, ArtifactComponentApiInsertSchema, createArtifactComponent, ArtifactComponentApiUpdateSchema, updateArtifactComponent, deleteArtifactComponent, ContextConfigApiSelectSchema, listContextConfigsPaginated, getContextConfigById, ContextConfigApiInsertSchema, createContextConfig, commonUpdateErrorResponses, ContextConfigApiUpdateSchema, updateContextConfig, commonDeleteErrorResponses, deleteContextConfig, CredentialReferenceApiSelectSchema, listCredentialReferencesPaginated, getCredentialReferenceWithTools, CredentialReferenceApiInsertSchema, createCredentialReference, CredentialReferenceApiUpdateSchema, updateCredentialReference, getCredentialReferenceById, getCredentialStoreLookupKeyFromRetrievalParams, deleteCredentialReference, listDataComponentsPaginated, DataComponentApiInsertSchema, createDataComponent, DataComponentApiUpdateSchema, updateDataComponent, deleteDataComponent, ExternalAgentApiSelectSchema, listExternalAgentsPaginated, getExternalAgent, ExternalAgentApiInsertSchema, createExternalAgent, ExternalAgentApiUpdateSchema, updateExternalAgent, deleteExternalAgent, createFullGraphServerSide, getFullGraph, updateFullGraphServerSide, deleteFullGraph, TenantParamsSchema, ProjectApiSelectSchema, listProjectsPaginated, TenantIdParamsSchema, getProject, ProjectApiInsertSchema, createProject, ProjectApiUpdateSchema, updateProject, deleteProject, McpToolSchema, ToolStatusSchema, listToolsByStatus, dbResultToMcpTool, listTools, getToolById, ToolApiInsertSchema, createTool, ToolApiUpdateSchema, updateTool, deleteTool, getCredentialReference, CredentialStoreType, FullProjectDefinitionSchema, createFullProjectServerSide, getFullProject, updateFullProjectServerSide, deleteFullProject, createDefaultCredentialStores, CredentialStoreRegistry, discoverOAuthEndpoints, ContextResolver, CredentialStuffer, McpClient, detectAuthenticationRequired, handleApiError, MCPServerType, MCPTransportType } from '@inkeep/agents-core';
+import { loadEnvironmentFiles, getLogger, createDatabaseClient, commonGetErrorResponses, TenantProjectGraphParamsSchema, ArtifactComponentApiSelectSchema, getArtifactComponentsForAgent, getAgentsUsingArtifactComponent, ErrorResponseSchema, SingleResponseSchema, AgentArtifactComponentApiInsertSchema, AgentArtifactComponentApiSelectSchema, getAgentById, getArtifactComponentById, createApiError, isArtifactComponentAssociatedWithAgent, associateArtifactComponentWithAgent, RemovedResponseSchema, removeArtifactComponentFromAgent, ExistsResponseSchema, DataComponentApiSelectSchema, getDataComponentsForAgent, getAgentsUsingDataComponent, AgentDataComponentApiInsertSchema, AgentDataComponentApiSelectSchema, getDataComponent, isDataComponentAssociatedWithAgent, associateDataComponentWithAgent, removeDataComponentFromAgent, ListResponseSchema, PaginationQueryParamsSchema, TenantProjectParamsSchema, AgentGraphApiSelectSchema, listAgentGraphs, IdParamsSchema, getAgentGraphById, getGraphAgentInfos, FullGraphDefinitionSchema, getFullGraphDefinition, AgentGraphApiInsertSchema, createAgentGraph, AgentGraphApiUpdateSchema, updateAgentGraph, deleteAgentGraph, AgentRelationApiSelectSchema, AgentRelationQuerySchema, getAgentRelationsBySource, getAgentRelationsByTarget, getExternalAgentRelations, listAgentRelations, TenantProjectGraphIdParamsSchema, getAgentRelationById, AgentRelationApiInsertSchema, validateExternalAgent, validateInternalAgent, createAgentRelation, AgentRelationApiUpdateSchema, updateAgentRelation, deleteAgentRelation, AgentApiSelectSchema, listAgentsPaginated, AgentApiInsertSchema, createAgent, AgentApiUpdateSchema, updateAgent, deleteAgent, AgentToolRelationApiSelectSchema, getAgentToolRelationByAgent, getAgentToolRelationByTool, listAgentToolRelations, getAgentToolRelationById, getAgentsForTool, AgentToolRelationApiInsertSchema, createAgentToolRelation, AgentToolRelationApiUpdateSchema, updateAgentToolRelation, deleteAgentToolRelation, ApiKeyApiSelectSchema, listApiKeysPaginated, getApiKeyById, ApiKeyApiCreationResponseSchema, ApiKeyApiInsertSchema, generateApiKey, createApiKey, ApiKeyApiUpdateSchema, updateApiKey, deleteApiKey, listArtifactComponentsPaginated, ArtifactComponentApiInsertSchema, createArtifactComponent, ArtifactComponentApiUpdateSchema, updateArtifactComponent, deleteArtifactComponent, ContextConfigApiSelectSchema, listContextConfigsPaginated, getContextConfigById, ContextConfigApiInsertSchema, createContextConfig, commonUpdateErrorResponses, ContextConfigApiUpdateSchema, updateContextConfig, commonDeleteErrorResponses, deleteContextConfig, CredentialReferenceApiSelectSchema, listCredentialReferencesPaginated, getCredentialReferenceWithTools, CredentialReferenceApiInsertSchema, createCredentialReference, CredentialReferenceApiUpdateSchema, updateCredentialReference, getCredentialReferenceById, getCredentialStoreLookupKeyFromRetrievalParams, deleteCredentialReference, listDataComponentsPaginated, DataComponentApiInsertSchema, createDataComponent, DataComponentApiUpdateSchema, updateDataComponent, deleteDataComponent, ExternalAgentApiSelectSchema, listExternalAgentsPaginated, getExternalAgent, ExternalAgentApiInsertSchema, createExternalAgent, ExternalAgentApiUpdateSchema, updateExternalAgent, deleteExternalAgent, createFullGraphServerSide, getFullGraph, updateFullGraphServerSide, deleteFullGraph, TenantParamsSchema, ProjectApiSelectSchema, listProjectsPaginated, TenantIdParamsSchema, getProject, ProjectApiInsertSchema, createProject, ProjectApiUpdateSchema, updateProject, deleteProject, McpToolSchema, ToolStatusSchema, listTools, dbResultToMcpTool, getToolById, ToolApiInsertSchema, createTool, ToolApiUpdateSchema, updateTool, deleteTool, getCredentialReference, CredentialStoreType, FullProjectDefinitionSchema, createFullProjectServerSide, getFullProject, updateFullProjectServerSide, deleteFullProject, createDefaultCredentialStores, CredentialStoreRegistry, discoverOAuthEndpoints, handleApiError } from '@inkeep/agents-core';
 import { OpenAPIHono, createRoute, z as z$1 } from '@hono/zod-openapi';
 import { Hono } from 'hono';
 import { cors } from 'hono/cors';
@@ -1465,45 +1465,6 @@ app6.openapi(
     return c.json({ data: agentToolRelation });
   }
 );
-app6.openapi(
-  createRoute({
-    method: "get",
-    path: "/agent/{agentId}/tools",
-    summary: "Get Tools for Agent",
-    operationId: "get-tools-for-agent",
-    tags: ["Agent Tool Relations"],
-    request: {
-      params: TenantProjectGraphParamsSchema.extend({
-        agentId: z.string()
-      }),
-      query: PaginationQueryParamsSchema
-    },
-    responses: {
-      200: {
-        description: "Tools for agent retrieved successfully",
-        content: {
-          "application/json": {
-            schema: ListResponseSchema(AgentToolRelationApiSelectSchema)
-          }
-        }
-      },
-      ...commonGetErrorResponses
-    }
-  }),
-  async (c) => {
-    const { tenantId, projectId, graphId, agentId } = c.req.valid("param");
-    const { page, limit } = c.req.valid("query");
-    const dbResult = await getToolsForAgent(dbClient_default)({
-      scopes: { tenantId, projectId, graphId, agentId },
-      pagination: { page, limit }
-    });
-    const result = {
-      data: dbResult.data,
-      pagination: dbResult.pagination
-    };
-    return c.json(result);
-  }
-);
 app6.openapi(
   createRoute({
     method: "get",
@@ -3500,274 +3461,7 @@ app14.openapi(
   }
 );
 var projects_default = app14;
-function extractInputSchema(toolDef) {
-  if (toolDef.inputSchema) {
-    return toolDef.inputSchema;
-  }
-  if (toolDef.parameters?.properties) {
-    return toolDef.parameters.properties;
-  }
-  if (toolDef.parameters && typeof toolDef.parameters === "object") {
-    return toolDef.parameters;
-  }
-  if (toolDef.schema) {
-    return toolDef.schema;
-  }
-  return {};
-}
-var logger3 = getLogger("tools");
-var convertToMCPToolConfig = (tool) => {
-  return {
-    id: tool.id,
-    name: tool.name,
-    description: tool.name,
-    // Use name as description fallback
-    serverUrl: tool.config.mcp.server.url,
-    mcpType: tool.config.mcp.server.url.includes("api.nango.dev") ? MCPServerType.nango : MCPServerType.generic,
-    transport: tool.config.mcp.transport,
-    headers: tool.headers
-  };
-};
-var updateToolHealth = async ({
-  tenantId,
-  projectId,
-  toolId,
-  status,
-  error
-}) => {
-  const now = (/* @__PURE__ */ new Date()).toISOString();
-  const updateData = {
-    status,
-    lastHealthCheck: now,
-    updatedAt: now
-  };
-  if (error !== void 0) {
-    updateData.lastError = error;
-  }
-  const tool = await updateTool(dbClient_default)({
-    scopes: { tenantId, projectId },
-    toolId,
-    data: updateData
-  });
-  return tool;
-};
-var checkToolHealth = async (tool, credentialStoreRegistry) => {
-  try {
-    const transportType = tool.config.mcp.transport?.type || MCPTransportType.streamableHttp;
-    const baseConfig = {
-      url: tool.config.mcp.server.url
-    };
-    const credentialReferenceId = tool.credentialReferenceId;
-    let serverConfig;
-    if (credentialReferenceId) {
-      const credentialReference = await getCredentialReference(dbClient_default)({
-        scopes: { tenantId: tool.tenantId, projectId: tool.projectId },
-        id: credentialReferenceId
-      });
-      if (!credentialReference) {
-        throw new Error(`Credential store not found: ${credentialReferenceId}`);
-      }
-      const storeReference = {
-        credentialStoreId: credentialReference.credentialStoreId,
-        retrievalParams: credentialReference.retrievalParams || {}
-      };
-      if (!credentialStoreRegistry) {
-        throw new Error("CredentialStoreRegistry is required for authenticated tools");
-      }
-      const contextResolver = new ContextResolver(
-        tool.tenantId,
-        tool.projectId,
-        dbClient_default,
-        credentialStoreRegistry
-      );
-      const credentialStuffer = new CredentialStuffer(credentialStoreRegistry, contextResolver);
-      serverConfig = await credentialStuffer.buildMcpServerConfig(
-        { tenantId: tool.tenantId, projectId: tool.projectId },
-        convertToMCPToolConfig(tool),
-        storeReference
-      );
-    } else {
-      if (transportType === MCPTransportType.sse) {
-        serverConfig = {
-          type: MCPTransportType.sse,
-          url: baseConfig.url,
-          activeTools: tool.config.mcp.activeTools,
-          eventSourceInit: tool.config.mcp.transport?.eventSourceInit
-        };
-      } else {
-        serverConfig = {
-          type: MCPTransportType.streamableHttp,
-          url: baseConfig.url,
-          activeTools: tool.config.mcp.activeTools,
-          requestInit: tool.config.mcp.transport?.requestInit,
-          eventSourceInit: tool.config.mcp.transport?.eventSourceInit,
-          reconnectionOptions: tool.config.mcp.transport?.reconnectionOptions,
-          sessionId: tool.config.mcp.transport?.sessionId
-        };
-      }
-    }
-    const client = new McpClient({
-      name: tool.name,
-      server: serverConfig
-    });
-    await client.connect();
-    await client.tools();
-    await client.disconnect();
-    return {
-      status: "healthy",
-      capabilities: {
-        tools: true,
-        resources: false,
-        // Could be enhanced to check actual capabilities
-        prompts: false,
-        logging: false
-      }
-    };
-  } catch (error) {
-    logger3.error({ toolId: tool.id, error }, "Tool health check failed");
-    if (error instanceof Error && await detectAuthenticationRequired(tool, error)) {
-      return {
-        status: "needs_auth",
-        error: "Authentication required - OAuth login needed"
-      };
-    }
-    return {
-      status: "unhealthy",
-      error: error instanceof Error ? error.message : "Unknown error"
-    };
-  }
-};
-var discoverToolsFromServer = async (tool, credentialStoreRegistry) => {
-  try {
-    const credentialReferenceId = tool.credentialReferenceId;
-    let serverConfig;
-    if (credentialReferenceId) {
-      const credentialReference = await getCredentialReference(dbClient_default)({
-        scopes: { tenantId: tool.tenantId, projectId: tool.projectId },
-        id: credentialReferenceId
-      });
-      if (!credentialReference) {
-        throw new Error(`Credential store not found: ${credentialReferenceId}`);
-      }
-      const storeReference = {
-        credentialStoreId: credentialReference.credentialStoreId,
-        retrievalParams: credentialReference.retrievalParams || {}
-      };
-      if (!credentialStoreRegistry) {
-        throw new Error("CredentialStoreRegistry is required for authenticated tools");
-      }
-      const contextResolver = new ContextResolver(
-        tool.tenantId,
-        tool.projectId,
-        dbClient_default,
-        credentialStoreRegistry
-      );
-      const credentialStuffer = new CredentialStuffer(credentialStoreRegistry, contextResolver);
-      serverConfig = await credentialStuffer.buildMcpServerConfig(
-        { tenantId: tool.tenantId, projectId: tool.projectId },
-        convertToMCPToolConfig(tool),
-        storeReference
-      );
-    } else {
-      const transportType = tool.config.mcp.transport?.type || MCPTransportType.streamableHttp;
-      if (transportType === MCPTransportType.sse) {
-        serverConfig = {
-          type: MCPTransportType.sse,
-          url: tool.config.mcp.server.url,
-          activeTools: tool.config.mcp.activeTools,
-          eventSourceInit: tool.config.mcp.transport?.eventSourceInit
-        };
-      } else {
-        serverConfig = {
-          type: MCPTransportType.streamableHttp,
-          url: tool.config.mcp.server.url,
-          activeTools: tool.config.mcp.activeTools,
-          requestInit: tool.config.mcp.transport?.requestInit,
-          eventSourceInit: tool.config.mcp.transport?.eventSourceInit,
-          reconnectionOptions: tool.config.mcp.transport?.reconnectionOptions,
-          sessionId: tool.config.mcp.transport?.sessionId
-        };
-      }
-    }
-    const client = new McpClient({
-      name: tool.name,
-      server: serverConfig
-    });
-    await client.connect();
-    const serverTools = await client.tools();
-    await client.disconnect();
-    const toolDefinitions = Object.entries(serverTools).map(
-      ([name, toolDef]) => ({
-        name,
-        description: toolDef.description || "",
-        inputSchema: extractInputSchema(toolDef)
-      })
-    );
-    return toolDefinitions;
-  } catch (error) {
-    logger3.error({ toolId: tool.id, error }, "Tool discovery failed");
-    throw error;
-  }
-};
-var syncToolDefinitions = async ({
-  tenantId,
-  projectId,
-  toolId,
-  credentialStoreRegistry
-}) => {
-  const tool = await getToolById(dbClient_default)({ scopes: { tenantId, projectId }, toolId });
-  if (!tool) {
-    throw new Error(`Tool ${toolId} not found`);
-  }
-  const mcpTool = dbResultToMcpTool(tool);
-  try {
-    const availableTools = await discoverToolsFromServer(mcpTool, credentialStoreRegistry);
-    const updatedTool = await updateTool(dbClient_default)({
-      scopes: { tenantId, projectId },
-      toolId,
-      data: {
-        availableTools,
-        lastToolsSync: (/* @__PURE__ */ new Date()).toISOString(),
-        status: "healthy",
-        updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-      }
-    });
-    return updatedTool;
-  } catch (error) {
-    const toolNeedsAuth = error instanceof Error && await detectAuthenticationRequired(mcpTool, error);
-    const now = (/* @__PURE__ */ new Date()).toISOString();
-    const updatedTool = await updateTool(dbClient_default)({
-      scopes: { tenantId, projectId },
-      toolId,
-      data: {
-        availableTools: [],
-        lastToolsSync: (/* @__PURE__ */ new Date()).toISOString(),
-        status: toolNeedsAuth ? "needs_auth" : "unhealthy",
-        lastError: toolNeedsAuth ? "Authentication required - OAuth login needed" : error instanceof Error ? error.message : "Tool sync failed",
-        lastHealthCheck: now,
-        updatedAt: now
-      }
-    });
-    return updatedTool;
-  }
-};
-var checkAllToolsHealth = async (tenantId, projectId, credentialStoreRegistry) => {
-  const toolsList = await listTools(dbClient_default)({ scopes: { tenantId, projectId } });
-  const results = await Promise.allSettled(
-    toolsList.data.map(async (tool) => {
-      const healthResult = await checkToolHealth(dbResultToMcpTool(tool), credentialStoreRegistry);
-      return await updateToolHealth({
-        tenantId,
-        projectId: tool.projectId,
-        toolId: tool.id,
-        status: healthResult.status,
-        error: healthResult.error
-      });
-    })
-  );
-  return results;
-};
-var logger4 = getLogger("oauth-service");
+var logger3 = getLogger("oauth-service");
 var pkceStore = /* @__PURE__ */ new Map();
 function storePKCEVerifier(state, codeVerifier, toolId, tenantId, projectId, clientId) {
   pkceStore.set(state, { codeVerifier, toolId, tenantId, projectId, clientId });
@@ -3802,7 +3496,7 @@ var OAuthService = class {
    */
   async initiateOAuthFlow(params) {
     const { tool, tenantId, projectId, toolId } = params;
-    const oAuthConfig = await discoverOAuthEndpoints(tool.config.mcp.server.url, logger4);
+    const oAuthConfig = await discoverOAuthEndpoints(tool.config.mcp.server.url, logger3);
     if (!oAuthConfig) {
       throw new Error("OAuth not supported by this server");
     }
@@ -3825,7 +3519,7 @@ var OAuthService = class {
       resource: tool.config.mcp.server.url
     });
     storePKCEVerifier(state, codeVerifier, toolId, tenantId, projectId, clientId);
-    logger4.info({ toolId, oAuthConfig, tenantId, projectId }, "OAuth flow initiated successfully");
+    logger3.info({ toolId, oAuthConfig, tenantId, projectId }, "OAuth flow initiated successfully");
     return {
       redirectUrl: authUrl,
       state
@@ -3836,7 +3530,7 @@ var OAuthService = class {
    */
   async exchangeCodeForTokens(params) {
     const { code, codeVerifier, clientId, tool } = params;
-    const oAuthConfig = await discoverOAuthEndpoints(tool.config.mcp.server.url, logger4);
+    const oAuthConfig = await discoverOAuthEndpoints(tool.config.mcp.server.url, logger3);
     if (!oAuthConfig?.tokenUrl) {
       throw new Error("Could not discover OAuth token endpoint");
     }
@@ -3850,9 +3544,9 @@ var OAuthService = class {
         codeVerifier,
         redirectUri
       });
-      logger4.info({ tokenType: tokens.token_type }, "Token exchange successful with openid-client");
+      logger3.info({ tokenType: tokens.token_type }, "Token exchange successful with openid-client");
     } catch (error) {
-      logger4.warn(
+      logger3.warn(
         { error: error instanceof Error ? error.message : error },
         "openid-client failed, falling back to manual token exchange"
       );
@@ -3863,7 +3557,7 @@ var OAuthService = class {
         codeVerifier,
         redirectUri
       });
-      logger4.info({ tokenType: tokens.token_type }, "Manual token exchange successful");
+      logger3.info({ tokenType: tokens.token_type }, "Manual token exchange successful");
     }
     return { tokens, oAuthConfig };
   }
@@ -3871,7 +3565,7 @@ var OAuthService = class {
    * Perform dynamic client registration
    */
   async performDynamicClientRegistration(registrationUrl, redirectUri) {
-    logger4.info({ registrationUrl }, "Attempting dynamic client registration");
+    logger3.info({ registrationUrl }, "Attempting dynamic client registration");
     try {
       const registrationResponse = await fetch(registrationUrl, {
         method: "POST",
@@ -3894,11 +3588,11 @@ var OAuthService = class {
       });
       if (registrationResponse.ok) {
         const registration = await registrationResponse.json();
-        logger4.info({ clientId: registration.client_id }, "Dynamic client registration successful");
+        logger3.info({ clientId: registration.client_id }, "Dynamic client registration successful");
         return registration.client_id;
       } else {
         const errorText = await registrationResponse.text();
-        logger4.warn(
+        logger3.warn(
           {
             status: registrationResponse.status,
             errorText
@@ -3907,7 +3601,7 @@ var OAuthService = class {
         );
       }
     } catch (regError) {
-      logger4.warn(
+      logger3.warn(
         { error: regError },
         "Dynamic client registration error, using default client_id"
       );
@@ -3937,7 +3631,7 @@ var OAuthService = class {
     const oauth = await import('openid-client');
     const tokenUrl = new URL(oAuthConfig.tokenUrl);
     const oauthServerUrl = `${tokenUrl.protocol}//${tokenUrl.host}`;
-    logger4.info({ oauthServerUrl, clientId }, "Attempting openid-client discovery");
+    logger3.info({ oauthServerUrl, clientId }, "Attempting openid-client discovery");
     const config = await oauth.discovery(
       new URL(oauthServerUrl),
       clientId,
@@ -3969,7 +3663,7 @@ var OAuthService = class {
    */
   async exchangeManually(params) {
     const { oAuthConfig, clientId, code, codeVerifier, redirectUri } = params;
-    logger4.info({ tokenUrl: oAuthConfig.tokenUrl }, "Attempting manual token exchange");
+    logger3.info({ tokenUrl: oAuthConfig.tokenUrl }, "Attempting manual token exchange");
     const tokenResponse = await fetch(oAuthConfig.tokenUrl, {
       method: "POST",
       headers: {
@@ -3987,7 +3681,7 @@ var OAuthService = class {
     });
     if (!tokenResponse.ok) {
       const errorText = await tokenResponse.text();
-      logger4.error(
+      logger3.error(
         {
           status: tokenResponse.status,
           statusText: tokenResponse.statusText,
@@ -4005,7 +3699,7 @@ var OAuthService = class {
 var oauthService = new OAuthService();
 
 // src/routes/tools.ts
-var logger5 = getLogger("tools");
+var logger4 = getLogger("tools");
 var app15 = new OpenAPIHono();
 app15.openapi(
   createRoute({
@@ -4036,16 +3730,19 @@ app15.openapi(
     const { tenantId, projectId } = c.req.valid("param");
     const { page, limit, status } = c.req.valid("query");
     let result;
+    const credentialStores = c.get("credentialStores");
     if (status) {
-      const tools = await listToolsByStatus(dbClient_default)({ scopes: { tenantId, projectId }, status });
+      const dbResult = await listTools(dbClient_default)({
+        scopes: { tenantId, projectId },
+        pagination: { page, limit }
+      });
       result = {
-        data: tools.map((tool) => dbResultToMcpTool(tool)),
-        pagination: {
-          page: 1,
-          limit: tools.length,
-          total: tools.length,
-          pages: 1
-        }
+        data: (await Promise.all(
+          dbResult.data.map(
+            async (tool) => await dbResultToMcpTool(tool, dbClient_default, credentialStores)
+          )
+        )).filter((tool) => tool.status === status),
+        pagination: dbResult.pagination
       };
     } else {
       const dbResult = await listTools(dbClient_default)({
@@ -4053,7 +3750,11 @@ app15.openapi(
         pagination: { page, limit }
       });
       result = {
-        data: dbResult.data.map((tool) => dbResultToMcpTool(tool)),
+        data: await Promise.all(
+          dbResult.data.map(
+            async (tool) => await dbResultToMcpTool(tool, dbClient_default, credentialStores)
+          )
+        ),
         pagination: dbResult.pagination
       };
     }
@@ -4091,8 +3792,9 @@ app15.openapi(
         message: "Tool not found"
       });
     }
+    const credentialStores = c.get("credentialStores");
     return c.json({
-      data: dbResultToMcpTool(tool)
+      data: await dbResultToMcpTool(tool, dbClient_default, credentialStores)
     });
   }
 );
@@ -4128,7 +3830,8 @@ app15.openapi(
   async (c) => {
     const { tenantId, projectId } = c.req.valid("param");
     const body = c.req.valid("json");
-    logger5.info({ body }, "body");
+    const credentialStores = c.get("credentialStores");
+    logger4.info({ body }, "body");
     const id = body.id || nanoid();
     const tool = await createTool(dbClient_default)({
       tenantId,
@@ -4142,7 +3845,7 @@ app15.openapi(
     });
     return c.json(
       {
-        data: dbResultToMcpTool(tool)
+        data: await dbResultToMcpTool(tool, dbClient_default, credentialStores)
       },
       201
     );
@@ -4180,6 +3883,7 @@ app15.openapi(
   async (c) => {
     const { tenantId, projectId, id } = c.req.valid("param");
     const body = c.req.valid("json");
+    const credentialStores = c.get("credentialStores");
     if (Object.keys(body).length === 0) {
       throw createApiError({
         code: "bad_request",
@@ -4204,7 +3908,7 @@ app15.openapi(
       });
     }
     return c.json({
-      data: dbResultToMcpTool(updatedTool)
+      data: await dbResultToMcpTool(updatedTool, dbClient_default, credentialStores)
     });
   }
 );
@@ -4244,268 +3948,6 @@ app15.openapi(
     return c.body(null, 204);
   }
 );
-app15.openapi(
-  createRoute({
-    method: "post",
-    path: "/{id}/health-check",
-    summary: "Check Tool Health",
-    operationId: "check-tool-health",
-    tags: ["Tools"],
-    request: {
-      params: TenantProjectParamsSchema.extend(IdParamsSchema.shape)
-    },
-    responses: {
-      200: {
-        description: "Tool health check completed",
-        content: {
-          "application/json": {
-            schema: SingleResponseSchema(
-              z.object({
-                tool: McpToolSchema,
-                healthCheck: z.object({
-                  status: ToolStatusSchema,
-                  error: z.string().optional()
-                })
-              })
-            )
-          }
-        }
-      },
-      ...commonGetErrorResponses
-    }
-  }),
-  async (c) => {
-    const { tenantId, projectId, id } = c.req.valid("param");
-    const tool = await getToolById(dbClient_default)({ scopes: { tenantId, projectId }, toolId: id });
-    if (!tool) {
-      throw createApiError({
-        code: "not_found",
-        message: "Tool not found"
-      });
-    }
-    const credentialStores = c.get("credentialStores");
-    const healthResult = await checkToolHealth(dbResultToMcpTool(tool), credentialStores);
-    const updatedTool = await updateToolHealth({
-      tenantId,
-      projectId,
-      toolId: id,
-      status: healthResult.status,
-      error: healthResult.error
-    });
-    return c.json({
-      data: {
-        tool: dbResultToMcpTool(updatedTool),
-        healthCheck: healthResult
-      }
-    });
-  }
-);
-app15.openapi(
-  createRoute({
-    method: "post",
-    path: "/health-check-all",
-    summary: "Check All Tools Health",
-    operationId: "check-all-tools-health",
-    tags: ["Tools"],
-    request: {
-      params: TenantProjectParamsSchema
-    },
-    responses: {
-      200: {
-        description: "All tools health check completed",
-        content: {
-          "application/json": {
-            schema: SingleResponseSchema(
-              z.object({
-                total: z.number(),
-                successful: z.number(),
-                failed: z.number(),
-                results: z.array(
-                  z.object({
-                    index: z.number(),
-                    status: z.enum(["fulfilled", "rejected"]),
-                    data: z.string().optional(),
-                    error: z.string().optional()
-                  })
-                )
-              })
-            )
-          }
-        }
-      },
-      ...commonGetErrorResponses
-    }
-  }),
-  async (c) => {
-    const { tenantId, projectId } = c.req.valid("param");
-    const credentialStores = c.get("credentialStores");
-    const results = await checkAllToolsHealth(tenantId, projectId, credentialStores);
-    const summary = {
-      total: results.length,
-      successful: results.filter((r) => r.status === "fulfilled").length,
-      failed: results.filter((r) => r.status === "rejected").length,
-      results: results.map((result, index) => {
-        const baseResult = {
-          index,
-          status: result.status
-        };
-        if (result.status === "fulfilled") {
-          return {
-            ...baseResult,
-            data: `Tool ${index} health check completed`
-          };
-        }
-        return {
-          ...baseResult,
-          error: result.reason?.message || "Unknown error"
-        };
-      })
-    };
-    return c.json({ data: summary });
-  }
-);
-app15.openapi(
-  createRoute({
-    method: "post",
-    path: "/{id}/sync",
-    summary: "Sync Tool Definitions",
-    operationId: "sync-tool-definitions",
-    tags: ["Tools"],
-    request: {
-      params: TenantProjectParamsSchema.extend(IdParamsSchema.shape)
-    },
-    responses: {
-      200: {
-        description: "Tool definitions synchronized successfully",
-        content: {
-          "application/json": {
-            schema: SingleResponseSchema(McpToolSchema)
-          }
-        }
-      },
-      ...commonGetErrorResponses
-    }
-  }),
-  async (c) => {
-    const { tenantId, projectId, id } = c.req.valid("param");
-    const tool = await getToolById(dbClient_default)({ scopes: { tenantId, projectId }, toolId: id });
-    if (!tool) {
-      throw createApiError({
-        code: "not_found",
-        message: "Tool not found"
-      });
-    }
-    const credentialStores = c.get("credentialStores");
-    const updatedTool = await syncToolDefinitions({
-      tenantId,
-      projectId,
-      toolId: id,
-      credentialStoreRegistry: credentialStores
-    });
-    return c.json({
-      data: dbResultToMcpTool(updatedTool),
-      message: "Tool definitions synchronized successfully"
-    });
-  }
-);
-app15.openapi(
-  createRoute({
-    method: "get",
-    path: "/{id}/available-tools",
-    summary: "Get Available Tools",
-    operationId: "get-available-tools",
-    tags: ["Tools"],
-    request: {
-      params: TenantProjectParamsSchema.extend(IdParamsSchema.shape)
-    },
-    responses: {
-      200: {
-        description: "Available tools retrieved successfully",
-        content: {
-          "application/json": {
-            schema: SingleResponseSchema(
-              z.object({
-                availableTools: z.array(
-                  z.object({
-                    name: z.string(),
-                    description: z.string().optional(),
-                    inputSchema: z.record(z.string(), z.unknown()).optional()
-                  })
-                ),
-                lastSync: z.string().optional(),
-                status: ToolStatusSchema
-              })
-            )
-          }
-        }
-      },
-      ...commonGetErrorResponses
-    }
-  }),
-  async (c) => {
-    const { tenantId, projectId, id } = c.req.valid("param");
-    const tool = await getToolById(dbClient_default)({ scopes: { tenantId, projectId }, toolId: id });
-    if (!tool) {
-      throw createApiError({
-        code: "not_found",
-        message: "Tool not found"
-      });
-    }
-    return c.json({
-      data: {
-        availableTools: tool.availableTools || [],
-        lastSync: tool.lastToolsSync || void 0,
-        status: tool.status
-      }
-    });
-  }
-);
-app15.openapi(
-  createRoute({
-    method: "patch",
-    path: "/{id}/status",
-    summary: "Update Tool Status",
-    operationId: "update-tool-status",
-    tags: ["Tools"],
-    request: {
-      params: TenantProjectParamsSchema.extend(IdParamsSchema.shape),
-      body: {
-        content: {
-          "application/json": {
-            schema: z.object({
-              status: ToolStatusSchema
-            })
-          }
-        }
-      }
-    },
-    responses: {
-      200: {
-        description: "Tool status updated successfully",
-        content: {
-          "application/json": {
-            schema: SingleResponseSchema(McpToolSchema)
-          }
-        }
-      },
-      ...commonGetErrorResponses
-    }
-  }),
-  async (c) => {
-    const { tenantId, projectId, id } = c.req.valid("param");
-    const { status } = c.req.valid("json");
-    const updatedTool = await updateToolHealth({
-      tenantId,
-      projectId,
-      toolId: id,
-      status
-    });
-    return c.json({
-      data: dbResultToMcpTool(updatedTool),
-      message: `Tool status updated to ${status}`
-    });
-  }
-);
 app15.openapi(
   createRoute({
     method: "get",
@@ -4557,7 +3999,8 @@ app15.openapi(
           message: "Tool not found"
         });
       }
-      const mcpTool = dbResultToMcpTool(tool);
+      const credentialStores = c.get("credentialStores");
+      const mcpTool = await dbResultToMcpTool(tool, dbClient_default, credentialStores);
       const { redirectUrl } = await oauthService.initiateOAuthFlow({
         tool: mcpTool,
         tenantId,
@@ -4566,7 +4009,7 @@ app15.openapi(
       });
       return c.redirect(redirectUrl, 302);
     } catch (error) {
-      logger5.error({ toolId: id, error }, "OAuth login failed");
+      logger4.error({ toolId: id, error }, "OAuth login failed");
       if (error && typeof error === "object" && "code" in error) {
         const apiError = error;
         return c.json({ error: apiError.message }, apiError.code === "not_found" ? 404 : 400);
@@ -4601,7 +4044,7 @@ app16.route("/projects/:projectId/api-keys", apiKeys_default);
 app16.route("/projects/:projectId/graph", graphFull_default);
 var routes_default = app16;
 var app17 = new OpenAPIHono();
-var logger6 = getLogger("oauth-callback");
+var logger5 = getLogger("oauth-callback");
 var OAuthCallbackQuerySchema = z$1.object({
   code: z$1.string().min(1, "Authorization code is required"),
   state: z$1.string().min(1, "State parameter is required"),
@@ -4644,15 +4087,15 @@ app17.openapi(
   async (c) => {
     try {
       const { code, state, error, error_description } = c.req.valid("query");
-      logger6.info({ state, hasCode: !!code }, "OAuth callback received");
+      logger5.info({ state, hasCode: !!code }, "OAuth callback received");
       if (error) {
-        logger6.error({ error, error_description }, "OAuth authorization failed");
+        logger5.error({ error, error_description }, "OAuth authorization failed");
         const errorMessage = "OAuth Authorization Failed. Please try again.";
         return c.text(errorMessage, 400);
       }
       const pkceData = retrievePKCEVerifier(state);
       if (!pkceData) {
-        logger6.error({ state }, "Invalid or expired OAuth state");
+        logger5.error({ state }, "Invalid or expired OAuth state");
         return c.text(
           "OAuth Session Expired: The OAuth session has expired or is invalid. Please try again.",
           400
@@ -4666,20 +4109,20 @@ app17.openapi(
       if (!tool) {
         throw new Error(`Tool ${toolId} not found`);
       }
-      logger6.info({ toolId, tenantId, projectId }, "Processing OAuth callback");
-      logger6.info({ toolId }, "Exchanging authorization code for access token");
-      const mcpTool = dbResultToMcpTool(tool);
+      logger5.info({ toolId, tenantId, projectId }, "Processing OAuth callback");
+      logger5.info({ toolId }, "Exchanging authorization code for access token");
+      const credentialStores = c.get("credentialStores");
+      const mcpTool = await dbResultToMcpTool(tool, dbClient_default, credentialStores);
       const { tokens } = await oauthService.exchangeCodeForTokens({
         code,
         codeVerifier,
         clientId,
         tool: mcpTool
       });
-      logger6.info(
+      logger5.info(
         { toolId, tokenType: tokens.token_type, hasRefresh: !!tokens.refresh_token },
         "Token exchange successful"
       );
-      const credentialStores = c.get("credentialStores");
       const keychainStore = credentialStores.get("keychain-default");
       const keychainKey = `oauth_token_${toolId}`;
       await keychainStore?.set(keychainKey, JSON.stringify(tokens));
@@ -4697,14 +4140,14 @@ app17.openapi(
       };
       let credential;
       if (existingCredential) {
-        logger6.info({ credentialId: existingCredential.id }, "Updating existing credential");
+        logger5.info({ credentialId: existingCredential.id }, "Updating existing credential");
         credential = await updateCredentialReference(dbClient_default)({
           scopes: { tenantId, projectId },
           id: existingCredential.id,
           data: credentialData
         });
       } else {
-        logger6.info({ credentialId }, "Creating new credential");
+        logger5.info({ credentialId }, "Creating new credential");
         credential = await createCredentialReference(dbClient_default)({
           tenantId,
           projectId,
@@ -4722,7 +4165,7 @@ app17.openapi(
           credentialReferenceId: credential.id
         }
       });
-      logger6.info({ toolId, credentialId: credential.id }, "OAuth flow completed successfully");
+      logger5.info({ toolId, credentialId: credential.id }, "OAuth flow completed successfully");
       const successPage = `
         <!DOCTYPE html>
         <html>
@@ -4764,14 +4207,14 @@ app17.openapi(
       `;
       return c.html(successPage);
     } catch (error) {
-      logger6.error({ error }, "OAuth callback processing failed");
+      logger5.error({ error }, "OAuth callback processing failed");
       const errorMessage = "OAuth Processing Failed. Please try again.";
       return c.text(errorMessage, 500);
     }
   }
 );
 var oauth_default = app17;
-var logger7 = getLogger("projectFull");
+var logger6 = getLogger("projectFull");
 var app18 = new OpenAPIHono();
 var ProjectIdParamsSchema = z.object({
   tenantId: z.string().openapi({
@@ -4832,7 +4275,7 @@ app18.openapi(
     const projectData = c.req.valid("json");
     const validatedProjectData = FullProjectDefinitionSchema.parse(projectData);
     try {
-      const createdProject = await createFullProjectServerSide(dbClient_default, logger7)(
+      const createdProject = await createFullProjectServerSide(dbClient_default, logger6)(
         { tenantId, projectId: validatedProjectData.id },
         validatedProjectData
       );
@@ -4876,7 +4319,7 @@ app18.openapi(
     try {
       const project = await getFullProject(
         dbClient_default,
-        logger7
+        logger6
       )({
         scopes: { tenantId, projectId }
       });
@@ -4952,15 +4395,15 @@ app18.openapi(
       }
       const existingProject = await getFullProject(
         dbClient_default,
-        logger7
+        logger6
       )({
         scopes: { tenantId, projectId }
       });
       const isCreate = !existingProject;
-      const updatedProject = isCreate ? await createFullProjectServerSide(dbClient_default, logger7)(
+      const updatedProject = isCreate ? await createFullProjectServerSide(dbClient_default, logger6)(
         { tenantId, projectId },
         validatedProjectData
-      ) : await updateFullProjectServerSide(dbClient_default, logger7)(
+      ) : await updateFullProjectServerSide(dbClient_default, logger6)(
         { tenantId, projectId },
         validatedProjectData
       );
@@ -5008,7 +4451,7 @@ app18.openapi(
     try {
       const deleted = await deleteFullProject(
         dbClient_default,
-        logger7
+        logger6
       )({
         scopes: { tenantId, projectId }
       });
@@ -5036,8 +4479,8 @@ app18.openapi(
 var projectFull_default = app18;
 
 // src/app.ts
-var logger8 = getLogger("agents-manage-api");
-logger8.info({ logger: logger8.getTransports() }, "Logger initialized");
+var logger7 = getLogger("agents-manage-api");
+logger7.info({ logger: logger7.getTransports() }, "Logger initialized");
 function createManagementHono(serverConfig, credentialStores) {
   const app20 = new OpenAPIHono();
   app20.use("*", requestId());
@@ -5092,7 +4535,7 @@ function createManagementHono(serverConfig, credentialStores) {
       if (!isExpectedError) {
         const errorMessage = err instanceof Error ? err.message : String(err);
         const errorStack = err instanceof Error ? err.stack : void 0;
-        logger8.error(
+        logger7.error(
           {
             error: err,
             message: errorMessage,
@@ -5103,7 +4546,7 @@ function createManagementHono(serverConfig, credentialStores) {
           "Unexpected server error occurred"
         );
       } else {
-        logger8.error(
+        logger7.error(
           {
             error: err,
             path: c.req.path,
@@ -5119,7 +4562,7 @@ function createManagementHono(serverConfig, credentialStores) {
         const response = err.getResponse();
         return response;
       } catch (responseError) {
-        logger8.error({ error: responseError }, "Error while handling HTTPException response");
+        logger7.error({ error: responseError }, "Error while handling HTTPException response");
       }
     }
     const { status: respStatus, title, detail, instance } = await handleApiError(err, requestId2);