@inkeep/create-agents 0.53.0 → 0.53.2

package/README.md

@@ -40,23 +40,19 @@ Ensure Docker Desktop (or Docker daemon) is running before running the setup scr
 pnpm setup-dev
 ```
 
-Or if you are using a cloud database, you can skip the local Docker database startup by running:
-
-```bash
-pnpm setup-dev:cloud
-```
-
-Make sure your `INKEEP_AGENTS_MANAGE_DATABASE_URL` and `INKEEP_AGENTS_RUN_DATABASE_URL` environment variables are configured in `.env` for your cloud databases.
-
 ### Step 3: Launch the dev environment
 
 ```bash
 pnpm dev
 ```
 
-The Visual Builder will auto-open at http://localhost:3000. You'll be signed in automatically.
+The Visual Builder will auto-open at http://localhost:3000.
+
+### Step 4: Login to the Visual Builder
+
+Use the credentials from your root `.env` file (`INKEEP_AGENTS_MANAGE_UI_USERNAME` and `INKEEP_AGENTS_MANAGE_UI_PASSWORD`) to log in when the Visual Builder opens.
 
-### Step 4: Chat with your agent
+### Step 5: Chat with your agent
 
 Navigate to the **Activities Planner** agent at http://localhost:3000 and ask about fun activities at a location of your choice:
 

package/dist/__tests__/e2e/quickstart.test.js

@@ -229,8 +229,12 @@ describe('create-agents quickstart e2e', () => {
                 console.warn('Login API test failed (non-fatal):', loginTestError);
             }
             // --- Dashboard Lap ---
+            // Start the dashboard with ENVIRONMENT=development so the proxy middleware
+            // auto-logs in using the bypass secret — this mirrors the real quickstart
+            // experience where users never see a login form.
             console.log('Starting dashboard lap');
             const dashboardProcess = await startDashboardServer(projectDir, {
+                ENVIRONMENT: 'development',
                 INKEEP_AGENTS_API_URL: dashboardApiUrl,
                 NEXT_PUBLIC_API_URL: dashboardApiUrl,
                 PUBLIC_INKEEP_AGENTS_API_URL: dashboardApiUrl,
@@ -241,21 +245,19 @@ describe('create-agents quickstart e2e', () => {
             const browser = await chromium.launch({ headless: true });
             try {
                 const page = await browser.newPage();
-                console.log('Navigating to login page');
-                await page.goto('http://localhost:3000/login', {
+                // Navigate to root — the proxy middleware auto-logs in via the bypass
+                // secret and sets a session cookie, so no manual login is needed.
+                console.log('Navigating to dashboard (auto-login via proxy)');
+                await page.goto('http://localhost:3000/', {
                     waitUntil: 'networkidle',
-                    timeout: 15000,
+                    timeout: 30000,
                 });
-                console.log('Filling login form');
-                await page.fill('input[type="email"]', 'admin@example.com');
-                await page.fill('input[type="password"]', 'adminADMIN!@12');
-                await page.click('button[type="submit"]');
                 console.log('Waiting for redirect to projects page');
                 await page.waitForURL('**/default/projects**', {
-                    timeout: 15000,
+                    timeout: 30000,
                     waitUntil: 'domcontentloaded',
                 });
-                console.log('Redirected to projects page');
+                console.log('Auto-login succeeded — redirected to projects page');
                 console.log('Clicking activities-planner project');
                 // Use force:true because card uses a linkoverlay pattern that intercepts pointer events
                 await page.click(`a[href*="${projectId}"]`, { timeout: 15000, force: true });

package/dist/__tests__/e2e/utils.js

@@ -137,15 +137,32 @@ export async function verifyDirectoryStructure(baseDir, expectedPaths) {
         }
     }
 }
+/**
+ * Recursively find all package.json files in a directory, skipping node_modules and dot-dirs.
+ * Mirrors the discovery logic in syncTemplateDependencies so E2E tests cover the same files.
+ */
+async function findPackageJsonFiles(dir) {
+    const results = [];
+    const rootPkg = path.join(dir, 'package.json');
+    if (await fs.pathExists(rootPkg)) {
+        results.push(rootPkg);
+    }
+    const entries = await fs.readdir(dir, { withFileTypes: true });
+    for (const entry of entries) {
+        if (!entry.isDirectory() || entry.name === 'node_modules' || entry.name.startsWith('.')) {
+            continue;
+        }
+        const nested = await findPackageJsonFiles(path.join(dir, entry.name));
+        results.push(...nested);
+    }
+    return results;
+}
 /**
  * Link local monorepo packages to the created project
  * This replaces published @inkeep packages with local versions for testing
  */
 export async function linkLocalPackages(projectDir, monorepoRoot) {
-    const packageJsonPaths = [
-        path.join(projectDir, 'package.json'),
-        path.join(projectDir, 'apps/agents-api/package.json'),
-    ];
+    const packageJsonPaths = await findPackageJsonFiles(projectDir);
     const packageJsons = {};
     for (const packageJsonPath of packageJsonPaths) {
         packageJsons[packageJsonPath] = await fs.readJson(packageJsonPath);

package/dist/__tests__/utils.test.js

@@ -376,13 +376,19 @@ describe('createAgents - Template and Project ID Logic', () => {
         });
     });
     describe('Environment file generation', () => {
-        it('should contain INKEEP_AGENTS_MANAGE_API_BYPASS_SECRET from .env.example', async () => {
+        it('should generate a unique INKEEP_AGENTS_MANAGE_API_BYPASS_SECRET', async () => {
             await createAgents({
                 dirName: 'test-dir',
                 openAiKey: 'test-openai-key',
                 anthropicKey: 'test-anthropic-key',
             });
-            expect(fs.writeFile).toHaveBeenCalledWith('.env', expect.stringContaining('INKEEP_AGENTS_MANAGE_API_BYPASS_SECRET=test-bypass-secret-for-ci'));
+            const envWriteCall = vi.mocked(fs.writeFile).mock.calls.find((call) => call[0] === '.env');
+            expect(envWriteCall).toBeDefined();
+            const envContent = envWriteCall?.[1];
+            const match = envContent.match(/INKEEP_AGENTS_MANAGE_API_BYPASS_SECRET=(.+)/);
+            expect(match).not.toBeNull();
+            expect(match?.[1]).not.toBe('test-bypass-secret-for-ci');
+            expect(match?.[1]).toHaveLength(64);
         });
         it('should inject CLI-prompted API keys into the .env', async () => {
             await createAgents({
@@ -494,6 +500,10 @@ describe('syncTemplateDependencies', () => {
     }
     beforeEach(() => {
         vi.clearAllMocks();
+        vi.stubGlobal('fetch', vi.fn().mockRejectedValue(new Error('no network in tests')));
+    });
+    afterEach(() => {
+        vi.unstubAllGlobals();
     });
     it('should update @inkeep/* dependencies to match CLI version', async () => {
         const mockPkg = {
@@ -588,21 +598,127 @@ describe('syncTemplateDependencies', () => {
             },
         }), { spaces: 2 });
     });
-    it('should not update excluded packages like @inkeep/agents-ui', async () => {
+    it('should resolve @inkeep/agents-ui version from npm registry', async () => {
+        const mockFetch = vi.fn().mockResolvedValue({
+            ok: true,
+            json: () => Promise.resolve({ version: '0.16.0' }),
+        });
+        vi.stubGlobal('fetch', mockFetch);
         const mockPkg = {
             name: 'test-project',
             dependencies: {
                 '@inkeep/agents-core': '^0.50.3',
-                '@inkeep/agents-ui': '^0.50.3',
+                '@inkeep/agents-ui': '^0.15.12',
                 '@inkeep/agents-sdk': '^0.50.3',
             },
         };
         setupFlatTemplate(mockPkg);
         await syncTemplateDependencies('/test/path');
+        expect(mockFetch).toHaveBeenCalledWith('https://registry.npmjs.org/@inkeep/agents-ui/latest', expect.objectContaining({ signal: expect.any(AbortSignal) }));
+        expect(mockFetch).toHaveBeenCalledTimes(1);
+        expect(fs.writeJson).toHaveBeenCalledWith('/test/path/package.json', expect.objectContaining({
+            dependencies: {
+                '@inkeep/agents-core': '^1.2.3',
+                '@inkeep/agents-ui': '^0.16.0',
+                '@inkeep/agents-sdk': '^1.2.3',
+            },
+        }), { spaces: 2 });
+    });
+    it('should leave divergent package specifier unchanged when registry fetch fails', async () => {
+        const mockFetch = vi.fn().mockRejectedValue(new Error('network error'));
+        vi.stubGlobal('fetch', mockFetch);
+        const mockPkg = {
+            name: 'test-project',
+            dependencies: {
+                '@inkeep/agents-core': '^0.50.3',
+                '@inkeep/agents-ui': '^0.15.12',
+            },
+        };
+        setupFlatTemplate(mockPkg);
+        await syncTemplateDependencies('/test/path');
+        expect(fs.writeJson).toHaveBeenCalledWith('/test/path/package.json', expect.objectContaining({
+            dependencies: {
+                '@inkeep/agents-core': '^1.2.3',
+                '@inkeep/agents-ui': '^0.15.12',
+            },
+        }), { spaces: 2 });
+    });
+    it('should leave divergent package specifier unchanged when registry returns non-ok', async () => {
+        const mockFetch = vi.fn().mockResolvedValue({
+            ok: false,
+            status: 404,
+        });
+        vi.stubGlobal('fetch', mockFetch);
+        const mockPkg = {
+            name: 'test-project',
+            dependencies: {
+                '@inkeep/agents-ui': '^0.15.12',
+            },
+        };
+        setupFlatTemplate(mockPkg);
+        await syncTemplateDependencies('/test/path');
+        expect(fs.writeJson).toHaveBeenCalledWith('/test/path/package.json', expect.objectContaining({
+            dependencies: {
+                '@inkeep/agents-ui': '^0.15.12',
+            },
+        }), { spaces: 2 });
+    });
+    it('should resolve divergent package version in devDependencies from npm registry', async () => {
+        const mockFetch = vi.fn().mockResolvedValue({
+            ok: true,
+            json: () => Promise.resolve({ version: '0.16.0' }),
+        });
+        vi.stubGlobal('fetch', mockFetch);
+        const mockPkg = {
+            name: 'test-project',
+            dependencies: { '@inkeep/agents-core': '^0.50.3' },
+            devDependencies: { '@inkeep/agents-ui': '^0.15.12' },
+        };
+        setupFlatTemplate(mockPkg);
+        await syncTemplateDependencies('/test/path');
+        expect(fs.writeJson).toHaveBeenCalledWith('/test/path/package.json', expect.objectContaining({
+            dependencies: { '@inkeep/agents-core': '^1.2.3' },
+            devDependencies: { '@inkeep/agents-ui': '^0.16.0' },
+        }), { spaces: 2 });
+    });
+    it('should only fetch once when same divergent package appears in multiple files', async () => {
+        const mockFetch = vi.fn().mockResolvedValue({
+            ok: true,
+            json: () => Promise.resolve({ version: '0.16.0' }),
+        });
+        vi.stubGlobal('fetch', mockFetch);
+        const nodeFs = await import('node:fs');
+        vi.mocked(nodeFs.readFileSync).mockReturnValue(JSON.stringify({ version: '1.2.3' }));
+        const rootPkg = {
+            name: 'monorepo',
+            dependencies: { '@inkeep/agents-core': '^0.50.3', '@inkeep/agents-ui': '^0.15.12' },
+        };
+        const nestedPkg = {
+            name: 'nested-app',
+            dependencies: { '@inkeep/agents-ui': '^0.15.12', '@inkeep/agents-sdk': '^0.50.3' },
+        };
+        vi.mocked(fs.pathExists).mockImplementation(async (p) => {
+            const s = String(p);
+            return s === '/test/path/package.json' || s === '/test/path/apps/api/package.json';
+        });
+        vi.mocked(fs.readdir)
+            .mockResolvedValueOnce([mockDirent('apps', true)])
+            .mockResolvedValueOnce([mockDirent('api', true)])
+            .mockResolvedValueOnce([]);
+        vi.mocked(fs.readJson).mockResolvedValueOnce(rootPkg).mockResolvedValueOnce(nestedPkg);
+        vi.mocked(fs.writeJson).mockResolvedValue(undefined);
+        await syncTemplateDependencies('/test/path');
+        expect(mockFetch).toHaveBeenCalledTimes(1);
+        expect(fs.writeJson).toHaveBeenCalledTimes(2);
         expect(fs.writeJson).toHaveBeenCalledWith('/test/path/package.json', expect.objectContaining({
             dependencies: {
                 '@inkeep/agents-core': '^1.2.3',
-                '@inkeep/agents-ui': '^0.50.3',
+                '@inkeep/agents-ui': '^0.16.0',
+            },
+        }), { spaces: 2 });
+        expect(fs.writeJson).toHaveBeenCalledWith('/test/path/apps/api/package.json', expect.objectContaining({
+            dependencies: {
+                '@inkeep/agents-ui': '^0.16.0',
                 '@inkeep/agents-sdk': '^1.2.3',
             },
         }), { spaces: 2 });
@@ -632,23 +748,22 @@ describe('syncTemplateDependencies', () => {
             name: 'nested-app',
             dependencies: { '@inkeep/agents-sdk': '^0.50.3', express: '^4.0.0' },
         };
-        vi.mocked(fs.pathExists).mockResolvedValue(true);
+        vi.mocked(fs.pathExists).mockImplementation(async (p) => {
+            const s = String(p);
+            return s === '/test/path/package.json' || s === '/test/path/apps/api/package.json';
+        });
         vi.mocked(fs.readdir)
             .mockResolvedValueOnce([mockDirent('apps', true), mockDirent('README.md', false)])
             .mockResolvedValueOnce([mockDirent('api', true)])
             .mockResolvedValueOnce([]);
-        vi.mocked(fs.readJson)
-            .mockResolvedValueOnce(rootPkg)
-            .mockResolvedValueOnce(nestedPkg)
-            .mockResolvedValueOnce(nestedPkg);
+        vi.mocked(fs.readJson).mockResolvedValueOnce(rootPkg).mockResolvedValueOnce(nestedPkg);
         vi.mocked(fs.writeJson).mockResolvedValue(undefined);
         await syncTemplateDependencies('/test/path');
-        expect(fs.writeJson).toHaveBeenCalledTimes(3);
+        expect(fs.writeJson).toHaveBeenCalledTimes(2);
         expect(fs.writeJson).toHaveBeenCalledWith('/test/path/package.json', expect.objectContaining({
             dependencies: { '@inkeep/agents-core': '^1.2.3' },
         }), { spaces: 2 });
-        expect(fs.writeJson).toHaveBeenCalledWith(expect.stringContaining('apps/package.json'), expect.anything(), { spaces: 2 });
-        expect(fs.writeJson).toHaveBeenCalledWith(expect.stringContaining('apps/api/package.json'), expect.objectContaining({
+        expect(fs.writeJson).toHaveBeenCalledWith('/test/path/apps/api/package.json', expect.objectContaining({
             dependencies: { '@inkeep/agents-sdk': '^1.2.3', express: '^4.0.0' },
         }), { spaces: 2 });
     });

package/dist/utils.js

@@ -1,4 +1,5 @@
 import { exec } from 'node:child_process';
+import crypto from 'node:crypto';
 import { readFileSync } from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
@@ -34,6 +35,7 @@ const agentsTemplateRepo = 'https://github.com/inkeep/agents/create-agents-templ
 const projectTemplateRepo = 'https://github.com/inkeep/agents/agents-cookbook/template-projects';
 const execAsync = promisify(exec);
 const agentsApiPort = '3002';
+const DIVERGENT_PACKAGES = new Set(['@inkeep/agents-ui']);
 function getCliVersion() {
     try {
         const __dirname = path.dirname(fileURLToPath(import.meta.url));
@@ -44,19 +46,66 @@ function getCliVersion() {
         return '';
     }
 }
+async function fetchLatestVersion(packageName) {
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), 10000);
+    try {
+        const response = await fetch(`https://registry.npmjs.org/${packageName}/latest`, {
+            signal: controller.signal,
+        });
+        if (!response.ok)
+            return null;
+        const data = (await response.json());
+        return data.version ?? null;
+    }
+    catch {
+        return null;
+    }
+    finally {
+        clearTimeout(timeoutId);
+    }
+}
 export async function syncTemplateDependencies(templatePath) {
     const cliVersion = getCliVersion();
     if (!cliVersion)
         return;
     const packageJsonPaths = await findPackageJsonFiles(templatePath);
-    await Promise.all(packageJsonPaths.map(async (pkgPath) => {
+    const divergentVersions = new Map();
+    const allDeps = new Set();
+    const pkgDataList = [];
+    for (const pkgPath of packageJsonPaths) {
         const pkg = await fs.readJson(pkgPath);
+        pkgDataList.push({ pkgPath, pkg });
         for (const depType of ['dependencies', 'devDependencies']) {
             const deps = pkg[depType];
             if (!deps)
                 continue;
             for (const name of Object.keys(deps)) {
-                if (name.startsWith('@inkeep/') && name !== '@inkeep/agents-ui') {
+                if (name.startsWith('@inkeep/') && DIVERGENT_PACKAGES.has(name)) {
+                    allDeps.add(name);
+                }
+            }
+        }
+    }
+    await Promise.all([...allDeps].map(async (name) => {
+        const version = await fetchLatestVersion(name);
+        if (version)
+            divergentVersions.set(name, version);
+    }));
+    await Promise.all(pkgDataList.map(async ({ pkgPath, pkg }) => {
+        for (const depType of ['dependencies', 'devDependencies']) {
+            const deps = pkg[depType];
+            if (!deps)
+                continue;
+            for (const name of Object.keys(deps)) {
+                if (!name.startsWith('@inkeep/'))
+                    continue;
+                if (DIVERGENT_PACKAGES.has(name)) {
+                    const resolved = divergentVersions.get(name);
+                    if (resolved)
+                        deps[name] = `^${resolved}`;
+                }
+                else {
                     deps[name] = `^${cliVersion}`;
                 }
             }
@@ -461,6 +510,7 @@ async function createWorkspaceStructure() {
     await fs.ensureDir(`src`);
 }
 async function createEnvironmentFiles(config) {
+    const bypassSecret = crypto.randomBytes(32).toString('hex');
     let envExampleContent;
     try {
         envExampleContent = await fs.readFile('.env.example', 'utf-8');
@@ -475,6 +525,7 @@ async function createEnvironmentFiles(config) {
         GOOGLE_GENERATIVE_AI_API_KEY: config.googleKey || '',
         AZURE_API_KEY: config.azureKey || '',
         DEFAULT_PROJECT_ID: config.projectId,
+        INKEEP_AGENTS_MANAGE_API_BYPASS_SECRET: bypassSecret,
     };
     for (let i = 0; i < lines.length; i++) {
         for (const [varName, value] of Object.entries(injections)) {
@@ -491,8 +542,11 @@ async function createInkeepConfig(config) {
 const config = defineConfig({
   tenantId: "${config.tenantId}",
   agentsApi: {
-    url: 'http://localhost:3002',
+    // Using 127.0.0.1 instead of localhost to avoid IPv6/IPv4 resolution issues
+    url: 'http://127.0.0.1:3002',
+    apiKey: process.env.INKEEP_AGENTS_MANAGE_API_BYPASS_SECRET,
   },
+  manageUiUrl: 'http://localhost:3000',
 });
     
 export default config;`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inkeep/create-agents",
-  "version": "0.53.0",
+  "version": "0.53.2",
   "description": "Create an Inkeep Agent Framework project",
   "type": "module",
   "bin": {
@@ -33,7 +33,7 @@
     "degit": "^2.8.4",
     "fs-extra": "^11.0.0",
     "picocolors": "^1.0.0",
-    "@inkeep/agents-core": "0.53.0"
+    "@inkeep/agents-core": "0.53.2"
   },
   "devDependencies": {
     "@types/degit": "^2.8.6",