checkly 7.12.1 → 7.13.0

package/dist/ai-context/checkly.rules.md

@@ -152,15 +152,15 @@ Run `npx checkly skills manage plan` for the full reference.
 - Agentic checks are AI-powered: instead of writing code, you describe what the check should do in natural language with the `prompt` property. The agent decides how to satisfy the prompt at runtime.
 - Write prompts as concrete imperative steps, not vague goals. Tell the agent which URL to navigate to and what specific signals confirm success — for example, "Navigate to https://example.com/pricing and verify that at least three plan tiers are displayed", not "Check that pricing works".
 - Keep prompts under 10000 characters. The construct will fail validation otherwise.
-- **Frequency is restricted.** Only `30`, `60`, `120`, `180`, `360`, `720`, or `1440` minutes are accepted (matching `Frequency.EVERY_30M`, `EVERY_1H`, `EVERY_2H`, `EVERY_3H`, `EVERY_6H`, `EVERY_12H`, `EVERY_24H`). Anything else fails validation.
-- **Locations are not configurable.** Agentic checks currently run from a single fixed location. The construct hardcodes it — do not pass `locations` or `privateLocations`.
+- **Frequency is entitlement-gated by the backend.** You can configure the same `frequency` values as other checks, including `Frequency.EVERY_5M` / `5`. The backend enforces the fastest cadence available to the account.
+- **Locations are entitlement-gated by the backend.** You can pass `locations` just like other public checks. The backend enforces the allowed number of regions for the account. `privateLocations` are not supported.
 - **Several common check fields are intentionally omitted** from `AgenticCheckProps`: `runParallel`, `retryStrategy`, `shouldFail`, `doubleCheck`, `triggerIncident`, and `groupId`. The platform does not yet honor these for agentic checks. Setting them in the construct is a TypeScript error.
 - **Important:** The target URL must be publicly accessible. Checks run on Checkly's cloud infrastructure, not locally. If the user is developing against localhost, suggest a tunneling tool (ngrok, cloudflare tunnel) or a preview/staging deployment.
 - **Plan-gated:** Agentic checks require the `AGENTIC_CHECKS` entitlement on the account. Run `npx checkly skills manage` to check entitlements before using.
 
-#### `agentRuntime` — security boundary for skills and env vars
+#### `agentRuntime` skills
 
-`agentRuntime` is the explicit allowlist of resources the agent may use at execution time. Anything not declared in `agentRuntime` is **unavailable** to the agent. Treat it as a security boundary: the smaller the runtime surface, the smaller the blast radius of any prompt injection.
+`agentRuntime` is used to add skills the agent may use at execution time.
 
 ```typescript
 agentRuntime: {
@@ -173,23 +173,10 @@ agentRuntime: {
   //   - owner/repo form: 'addyosmani/web-quality-skills'
   //   - plain name:      'cost-optimization'
   skills: ['addyosmani/web-quality-skills'],
-
-  // Environment variables the agent is allowed to read at runtime.
-  // Anything not listed here is hidden from the agent process — even
-  // if it's defined at the project or check level.
-  exposeEnvironmentVariables: [
-    // Bare string form: variable name only.
-    'ENVIRONMENT_URL',
-    // Object form: pair the variable with a description so the agent
-    // can decide when to read it. Descriptions are passed to the model
-    // and are truncated to 200 characters.
-    { name: 'TEST_USER_EMAIL', description: 'Login email for the test account' },
-  ],
 },
 ```
 
-- Only declare env vars the agent **needs**. Adding a variable to `exposeEnvironmentVariables` exposes it to the model and to anything the model invokes via skills.
-- Descriptions are not just documentation — they steer the model's decisions. Use them to disambiguate variables that have non-obvious names.
+- Reference Checkly environment variables directly in the prompt with double brackets, for example `{{ENVIRONMENT_URL}}`.
 - The runner installs each skill via `npx skills add` at the start of every check run. The CLI does not validate the skill identifier at deploy time, so a typo will not surface until the first run.
 - The `playwright-cli` skill is preloaded for every agentic check. Only declare additional skills here.
 
@@ -206,10 +193,15 @@ new AgenticCheck('example-agentic-check', {
   name: 'Example Agentic Check',
   prompt: 'Navigate to https://www.checklyhq.com/pricing and verify that at least three plan tiers are displayed on the page.',
   activated: true,
+  locations: [
+    'us-east-1',
+    'eu-west-1',
+    'ap-southeast-1',
+  ],
   tags: [
     'app:webshop',
   ],
-  frequency: Frequency.EVERY_1H,
+  frequency: Frequency.EVERY_5M,
   alertEscalationPolicy: AlertEscalationBuilder.runBasedEscalation(1, {
     amount: 0,
     interval: 5,

package/dist/ai-context/skills-command/references/configure-agentic-checks.md

@@ -4,15 +4,15 @@
 - Agentic checks are AI-powered: instead of writing code, you describe what the check should do in natural language with the `prompt` property. The agent decides how to satisfy the prompt at runtime.
 - Write prompts as concrete imperative steps, not vague goals. Tell the agent which URL to navigate to and what specific signals confirm success — for example, "Navigate to https://example.com/pricing and verify that at least three plan tiers are displayed", not "Check that pricing works".
 - Keep prompts under 10000 characters. The construct will fail validation otherwise.
-- **Frequency is restricted.** Only `30`, `60`, `120`, `180`, `360`, `720`, or `1440` minutes are accepted (matching `Frequency.EVERY_30M`, `EVERY_1H`, `EVERY_2H`, `EVERY_3H`, `EVERY_6H`, `EVERY_12H`, `EVERY_24H`). Anything else fails validation.
-- **Locations are not configurable.** Agentic checks currently run from a single fixed location. The construct hardcodes it — do not pass `locations` or `privateLocations`.
+- **Frequency is entitlement-gated by the backend.** You can configure the same `frequency` values as other checks, including `Frequency.EVERY_5M` / `5`. The backend enforces the fastest cadence available to the account.
+- **Locations are entitlement-gated by the backend.** You can pass `locations` just like other public checks. The backend enforces the allowed number of regions for the account. `privateLocations` are not supported.
 - **Several common check fields are intentionally omitted** from `AgenticCheckProps`: `runParallel`, `retryStrategy`, `shouldFail`, `doubleCheck`, `triggerIncident`, and `groupId`. The platform does not yet honor these for agentic checks. Setting them in the construct is a TypeScript error.
 - **Important:** The target URL must be publicly accessible. Checks run on Checkly's cloud infrastructure, not locally. If the user is developing against localhost, suggest a tunneling tool (ngrok, cloudflare tunnel) or a preview/staging deployment.
 - **Plan-gated:** Agentic checks require the `AGENTIC_CHECKS` entitlement on the account. Run `npx checkly skills manage` to check entitlements before using.
 
-## `agentRuntime` — security boundary for skills and env vars
+## `agentRuntime` skills
 
-`agentRuntime` is the explicit allowlist of resources the agent may use at execution time. Anything not declared in `agentRuntime` is **unavailable** to the agent. Treat it as a security boundary: the smaller the runtime surface, the smaller the blast radius of any prompt injection.
+`agentRuntime` is used to add skills the agent may use at execution time.
 
 ```typescript
 agentRuntime: {
@@ -25,23 +25,10 @@ agentRuntime: {
   //   - owner/repo form: 'addyosmani/web-quality-skills'
   //   - plain name:      'cost-optimization'
   skills: ['addyosmani/web-quality-skills'],
-
-  // Environment variables the agent is allowed to read at runtime.
-  // Anything not listed here is hidden from the agent process — even
-  // if it's defined at the project or check level.
-  exposeEnvironmentVariables: [
-    // Bare string form: variable name only.
-    'ENVIRONMENT_URL',
-    // Object form: pair the variable with a description so the agent
-    // can decide when to read it. Descriptions are passed to the model
-    // and are truncated to 200 characters.
-    { name: 'TEST_USER_EMAIL', description: 'Login email for the test account' },
-  ],
 },
 ```
 
-- Only declare env vars the agent **needs**. Adding a variable to `exposeEnvironmentVariables` exposes it to the model and to anything the model invokes via skills.
-- Descriptions are not just documentation — they steer the model's decisions. Use them to disambiguate variables that have non-obvious names.
+- Reference Checkly environment variables directly in the prompt with double brackets, for example `{{ENVIRONMENT_URL}}`.
 - The runner installs each skill via `npx skills add` at the start of every check run. The CLI does not validate the skill identifier at deploy time, so a typo will not surface until the first run.
 - The `playwright-cli` skill is preloaded for every agentic check. Only declare additional skills here.
 
@@ -58,10 +45,15 @@ new AgenticCheck('example-agentic-check', {
   name: 'Example Agentic Check',
   prompt: 'Navigate to https://www.checklyhq.com/pricing and verify that at least three plan tiers are displayed on the page.',
   activated: true,
+  locations: [
+    'us-east-1',
+    'eu-west-1',
+    'ap-southeast-1',
+  ],
   tags: [
     'app:webshop',
   ],
-  frequency: Frequency.EVERY_1H,
+  frequency: Frequency.EVERY_5M,
   alertEscalationPolicy: AlertEscalationBuilder.runBasedEscalation(1, {
     amount: 0,
     interval: 5,

package/dist/constructs/agentic-check-codegen.d.ts

@@ -1,16 +1,5 @@
 import { Codegen, Context } from './internal/codegen';
 import { CheckResource } from './check-codegen';
-/**
- * Shape of a `selectedEnvironmentVariables` entry as stored on the backend
- * inside `agenticCheckData`. The runner accepts two forms — a bare variable
- * name, or an object with `key` and an optional `description`. The CLI
- * construct uses `name` (not `key`), so the codegen translates object-form
- * entries during emission.
- */
-type StoredAgenticEnvironmentVariable = string | {
-    key: string;
-    description?: string;
-};
 /**
  * Shape of `agenticCheckData` as stored on the backend and returned to the
  * CLI during `checkly import`. Only fields the construct exposes are read.
@@ -20,7 +9,6 @@ type StoredAgenticEnvironmentVariable = string | {
  */
 interface StoredAgenticCheckData {
     skills?: string[] | null;
-    selectedEnvironmentVariables?: StoredAgenticEnvironmentVariable[] | null;
 }
 export interface AgenticCheckResource extends CheckResource {
     checkType: 'AGENTIC';

package/dist/constructs/agentic-check-codegen.js

@@ -16,31 +16,19 @@ class AgenticCheckCodegen extends codegen_1.Codegen {
         });
         const file = this.program.generatedConstructFile(filePath.fullPath);
         file.namedImport(construct, 'checkly/constructs');
-        // `AgenticCheckProps` omits several fields that the platform does not
-        // yet honor (see `agentic-check.ts` for the full list and rationale).
-        // To keep the generated file type-checking against the construct, clear
-        // `locations` (which the construct hardcodes to a single value) and
-        // skip `retryStrategy` emission. The other omitted fields are already
-        // conditional in `buildCheckProps` and never populated for agentic
-        // checks today.
-        const sanitizedResource = {
-            ...resource,
-            locations: undefined,
-        };
         file.section((0, sourcegen_1.expr)((0, sourcegen_1.ident)(construct), builder => {
             builder.new(builder => {
                 builder.string(logicalId);
                 builder.object(builder => {
                     builder.string('prompt', resource.prompt);
-                    // Emit agentRuntime only when there's something meaningful to
-                    // carry. An imported check with no skills and no selected env
-                    // vars would otherwise produce an empty `agentRuntime: {}` block,
-                    // which is noise in the generated code.
+                    // Emit agentRuntime only when there's something meaningful to carry.
+                    // An imported check with no skills would otherwise produce an empty
+                    // `agentRuntime: {}` block, which is noise in the generated code.
                     const agentRuntimeValue = buildAgentRuntimeObject(resource.agenticCheckData);
                     if (agentRuntimeValue !== undefined) {
                         builder.object('agentRuntime', agentRuntimeValue);
                     }
-                    (0, check_codegen_1.buildCheckProps)(this.program, file, builder, sanitizedResource, context, {
+                    (0, check_codegen_1.buildCheckProps)(this.program, file, builder, resource, context, {
                         skipRetryStrategy: true,
                     });
                 });
@@ -51,17 +39,14 @@ class AgenticCheckCodegen extends codegen_1.Codegen {
 exports.AgenticCheckCodegen = AgenticCheckCodegen;
 /**
  * Build an `agentRuntime: { ... }` object literal for the codegen output,
- * reverse-translating the backend's storage shape (`selectedEnvironmentVariables`
- * with `key`) into the CLI construct's shape (`exposeEnvironmentVariables` with
- * `name`). Returns `undefined` when the input contains nothing worth
- * emitting, so the caller can skip the property entirely.
+ * returning `undefined` when the input contains nothing worth emitting so the
+ * caller can skip the property entirely.
  */
 function buildAgentRuntimeObject(data) {
     if (!data)
         return undefined;
     const skills = (data.skills ?? []).filter(s => s.length > 0);
-    const storedEnvVars = data.selectedEnvironmentVariables ?? [];
-    if (skills.length === 0 && storedEnvVars.length === 0) {
+    if (skills.length === 0) {
         return undefined;
     }
     return builder => {
@@ -72,23 +57,6 @@ function buildAgentRuntimeObject(data) {
                 }
             });
         }
-        if (storedEnvVars.length > 0) {
-            builder.array('exposeEnvironmentVariables', arrayBuilder => {
-                for (const entry of storedEnvVars) {
-                    if (typeof entry === 'string') {
-                        arrayBuilder.string(entry);
-                    }
-                    else {
-                        arrayBuilder.object(objectBuilder => {
-                            objectBuilder.string('name', entry.key);
-                            if (entry.description) {
-                                objectBuilder.string('description', entry.description);
-                            }
-                        });
-                    }
-                }
-            });
-        }
     };
 }
 //# sourceMappingURL=agentic-check-codegen.js.map

package/dist/constructs/agentic-check-codegen.js.map

@@ -1 +1 @@
-{"version":3,"file":"agentic-check-codegen.js","sourceRoot":"","sources":["../../src/constructs/agentic-check-codegen.ts"],"names":[],"mappings":";;;AAAA,gDAAqD;AACrD,4CAA8D;AAC9D,mDAAgE;AA+BhE,MAAM,SAAS,GAAG,cAAc,CAAA;AAEhC,MAAa,mBAAoB,SAAQ,iBAA6B;IACpE,QAAQ,CAAE,QAA8B;QACtC,OAAO,kBAAkB,QAAQ,CAAC,IAAI,EAAE,CAAA;IAC1C,CAAC;IAED,OAAO,CAAE,SAAiB,EAAE,QAA8B,EAAE,OAAgB;QAC1E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,0BAA0B,EAAE,QAAQ,CAAC,IAAI,EAAE;YAC3E,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,MAAM,EAAE,IAAI;SACb,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAEnE,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAA;QAEjD,sEAAsE;QACtE,sEAAsE;QACtE,wEAAwE;QACxE,oEAAoE;QACpE,sEAAsE;QACtE,mEAAmE;QACnE,gBAAgB;QAChB,MAAM,iBAAiB,GAAyB;YAC9C,GAAG,QAAQ;YACX,SAAS,EAAE,SAAS;SACrB,CAAA;QAED,IAAI,CAAC,OAAO,CAAC,IAAA,gBAAI,EAAC,IAAA,iBAAK,EAAC,SAAS,CAAC,EAAE,OAAO,CAAC,EAAE;YAC5C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;gBACpB,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;gBACzB,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;oBACvB,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;oBAEzC,8DAA8D;oBAC9D,8DAA8D;oBAC9D,kEAAkE;oBAClE,wCAAwC;oBACxC,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAA;oBAC5E,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;wBACpC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAA;oBACnD,CAAC;oBAED,IAAA,+BAAe,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE;wBACvE,iBAAiB,EAAE,IAAI;qBACxB,CAAC,CAAA;gBACJ,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAC,CAAA;IACL,CAAC;CACF;AAjDD,kDAiDC;AAED;;;;;;GAMG;AACH,SAAS,uBAAuB,CAC9B,IAA+C;IAE/C,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAA;IAE3B,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC5D,MAAM,aAAa,GAAG,IAAI,CAAC,4BAA4B,IAAI,EAAE,CAAA;IAE7D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,OAAO,OAAO,CAAC,EAAE;QACf,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE;gBACrC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBAC5B,CAAC;YACH,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,YAAY,CAAC,EAAE;gBACzD,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;oBAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;wBAC9B,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;oBAC5B,CAAC;yBAAM,CAAC;wBACN,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE;4BAClC,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAA;4BACvC,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gCACtB,aAAa,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;4BACxD,CAAC;wBACH,CAAC,CAAC,CAAA;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC,CAAA;AACH,CAAC"}
+{"version":3,"file":"agentic-check-codegen.js","sourceRoot":"","sources":["../../src/constructs/agentic-check-codegen.ts"],"names":[],"mappings":";;;AAAA,gDAAqD;AACrD,4CAA8D;AAC9D,mDAAgE;AAmBhE,MAAM,SAAS,GAAG,cAAc,CAAA;AAEhC,MAAa,mBAAoB,SAAQ,iBAA6B;IACpE,QAAQ,CAAE,QAA8B;QACtC,OAAO,kBAAkB,QAAQ,CAAC,IAAI,EAAE,CAAA;IAC1C,CAAC;IAED,OAAO,CAAE,SAAiB,EAAE,QAA8B,EAAE,OAAgB;QAC1E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,0BAA0B,EAAE,QAAQ,CAAC,IAAI,EAAE;YAC3E,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,MAAM,EAAE,IAAI;SACb,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAEnE,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAA;QAEjD,IAAI,CAAC,OAAO,CAAC,IAAA,gBAAI,EAAC,IAAA,iBAAK,EAAC,SAAS,CAAC,EAAE,OAAO,CAAC,EAAE;YAC5C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;gBACpB,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;gBACzB,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;oBACvB,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;oBAEzC,qEAAqE;oBACrE,oEAAoE;oBACpE,kEAAkE;oBAClE,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAA;oBAC5E,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;wBACpC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAA;oBACnD,CAAC;oBAED,IAAA,+BAAe,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE;wBAC9D,iBAAiB,EAAE,IAAI;qBACxB,CAAC,CAAA;gBACJ,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAC,CAAA;IACL,CAAC;CACF;AApCD,kDAoCC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAC9B,IAA+C;IAE/C,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAA;IAE3B,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAE5D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,OAAO,OAAO,CAAC,EAAE;QACf,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE;gBACrC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBAC5B,CAAC;YACH,CAAC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC,CAAA;AACH,CAAC"}

package/dist/constructs/agentic-check.d.ts

@@ -2,43 +2,15 @@ import { Check, CheckProps } from './check';
 import { Frequency } from './frequency';
 import { Diagnostics } from './diagnostics';
 /**
- * Frequencies (in minutes) currently supported for agentic checks: 30, 60, 120,
- * 180, 360, 720 or 1440. The matching `Frequency` constants
- * (`EVERY_30M`, `EVERY_1H`, `EVERY_2H`, `EVERY_3H`, `EVERY_6H`, `EVERY_12H`,
- * `EVERY_24H`) are also accepted.
+ * Frequencies for agentic checks are accepted locally and enforced by the
+ * backend according to the account's entitlements.
  */
-export type AgenticCheckFrequency = 30 | 60 | 120 | 180 | 360 | 720 | 1440 | Frequency;
-/**
- * An environment variable the agent is permitted to read at runtime.
- *
- * Use the bare string form when the variable name is self-explanatory, or
- * the object form to provide a `description` that helps the agent understand
- * what the variable is for. Descriptions are passed to the model so it can
- * make better decisions about when to read the variable.
- *
- * @example
- * ```typescript
- * 'API_KEY'
- * { name: 'TOKEN_42', description: 'Feature flag service auth token' }
- * ```
- */
-export type AgentRuntimeEnvironmentVariable = string | {
-    /** The environment variable name. */
-    name: string;
-    /**
-     * Optional human-readable explanation of what the variable is for.
-     * Passed to the agent so it can decide when to read the variable.
-     * Truncated to {@link MAX_ENV_VAR_DESCRIPTION_LENGTH} characters.
-     */
-    description?: string;
-};
+export type AgenticCheckFrequency = number | Frequency;
 /**
  * Configures the runtime context the agent has access to during a check.
  *
- * `agentRuntime` is the explicit allowlist of resources the agent may use
- * at execution time. Anything not declared here is unavailable to the agent.
- * Treat it as a security boundary: the smaller the runtime surface, the
- * smaller the blast radius of any prompt injection.
+ * `agentRuntime` lets you add extra skills on top of the defaults the runner
+ * provides automatically.
  */
 export interface AgentRuntime {
     /**
@@ -57,65 +29,38 @@ export interface AgentRuntime {
      * @example ['addyosmani/web-quality-skills']
      */
     skills?: string[];
-    /**
-     * Environment variables the agent is permitted to read at runtime.
-     *
-     * **Variables not listed here are not exposed to the agent**, even if
-     * they exist in the Checkly account. This is the primary defense against
-     * prompt injection: an attacker who controls content the agent reads
-     * cannot exfiltrate secrets the agent never had access to.
-     *
-     * Each entry is either a bare variable name, or an object with a
-     * `name` and an optional `description`. Descriptions help the agent
-     * understand what each variable is for.
-     *
-     * @example
-     * ```typescript
-     * exposeEnvironmentVariables: [
-     *   'API_KEY',
-     *   { name: 'TEST_USER_PASSWORD', description: 'Login password for the test account' },
-     * ]
-     * ```
-     */
-    exposeEnvironmentVariables?: AgentRuntimeEnvironmentVariable[];
 }
 /**
  * Configuration properties for {@link AgenticCheck}.
  *
  * Agentic checks intentionally expose only the subset of options that the
  * Checkly platform currently supports for them. Properties such as
- * `locations`, `privateLocations`, `runParallel`, `retryStrategy`,
- * `shouldFail`, `doubleCheck`, `triggerIncident` and `groupId` are omitted
- * because the platform does not yet honor them for agentic checks. They will
- * be added back as additive, non-breaking changes once support lands.
+ * `privateLocations`, `runParallel`, `retryStrategy`, `shouldFail`,
+ * `doubleCheck`, `triggerIncident` and `groupId` are omitted because the
+ * platform does not yet honor them for agentic checks. They will be added back
+ * as additive, non-breaking changes once support lands.
  */
-export interface AgenticCheckProps extends Omit<CheckProps, 'locations' | 'privateLocations' | 'runParallel' | 'retryStrategy' | 'shouldFail' | 'doubleCheck' | 'triggerIncident' | 'groupId' | 'frequency'> {
+export interface AgenticCheckProps extends Omit<CheckProps, 'privateLocations' | 'runParallel' | 'retryStrategy' | 'shouldFail' | 'doubleCheck' | 'triggerIncident' | 'groupId' | 'frequency'> {
     /**
      * The prompt that defines what the agentic check should verify.
      * Maximum 10,000 characters.
      */
     prompt: string;
     /**
-     * How often the check should run. Agentic checks currently support a
-     * restricted set of frequencies. Defaults to {@link Frequency.EVERY_30M}.
+     * How often the check should run. The backend enforces the fastest allowed
+     * cadence according to the account's entitlements. Defaults to
+     * {@link Frequency.EVERY_30M}.
      *
      * @example
      * ```typescript
-     * frequency: Frequency.EVERY_1H
+     * frequency: Frequency.EVERY_5M
      * // or equivalently
-     * frequency: 60
+     * frequency: 5
      * ```
      */
     frequency?: AgenticCheckFrequency;
     /**
-     * Configures the runtime context the agent has access to during execution:
-     * which skills it can use, which environment variables it can read, and
-     * (in the future) other access surfaces such as network policies or tool
-     * allowlists.
-     *
-     * Treat `agentRuntime` as a security boundary. Anything not declared here
-     * is unavailable to the agent at runtime, which keeps the blast radius of
-     * any prompt injection as small as possible.
+     * Configures additional skills the agent can use during execution.
      */
     agentRuntime?: AgentRuntime;
 }
@@ -157,7 +102,6 @@ export declare class AgenticCheck extends Check {
         prompt: string;
         agentRuntime: {
             skills: string[];
-            exposeEnvironmentVariables: AgentRuntimeEnvironmentVariable[];
         };
         activated: boolean | undefined;
         muted: boolean | undefined;

package/dist/constructs/agentic-check.js

@@ -6,21 +6,10 @@ const project_1 = require("./project");
 const constants_1 = require("../constants");
 const construct_diagnostics_1 = require("./construct-diagnostics");
 /**
- * Frequency values (in minutes) currently supported for agentic checks.
- * Mirrors the values exposed in the Checkly webapp's agentic check builder.
+ * Backwards-compatible default for checks that do not set a location and do
+ * not inherit one from the project config.
  */
-const ALLOWED_AGENTIC_FREQUENCIES = [30, 60, 120, 180, 360, 720, 1440];
-/**
- * The single location agentic checks currently run from. Until the platform
- * supports running agentic checks from multiple locations, this value is
- * forced server-side and the construct does not let users override it.
- */
-const AGENTIC_CHECK_LOCATION = 'us-east-1';
-/**
- * Maximum length of an environment variable description, in characters.
- * Matches the truncation length applied by the agentic runner.
- */
-const MAX_ENV_VAR_DESCRIPTION_LENGTH = 200;
+const DEFAULT_AGENTIC_CHECK_LOCATION = 'us-east-1';
 /**
  * Creates an Agentic Check that uses AI to monitor websites and applications.
  *
@@ -54,12 +43,13 @@ class AgenticCheck extends check_1.Check {
         super(logicalId, props);
         this.prompt = props.prompt;
         this.agentRuntime = props.agentRuntime;
+        // Preserve the old implicit single-region behavior for checks that do not
+        // set locations directly and do not inherit project-level locations.
+        this.locations ??= [DEFAULT_AGENTIC_CHECK_LOCATION];
         // Defensive overrides: even though these props are omitted from the type,
         // `Check.applyConfigDefaults()` may pull them in from the project-level
-        // `checks` config defaults. Force them to the only values the platform
-        // currently honors so the construct never claims to support something
-        // it doesn't.
-        this.locations = [AGENTIC_CHECK_LOCATION];
+        // `checks` config defaults. Force them to values the platform currently
+        // honors so the construct never claims to support something it doesn't.
         this.privateLocations = undefined;
         this.runParallel = false;
         this.retryStrategy = undefined;
@@ -84,11 +74,6 @@ class AgenticCheck extends check_1.Check {
         else if (this.prompt.length > 10000) {
             diagnostics.add(new construct_diagnostics_1.InvalidPropertyValueDiagnostic('prompt', new Error(`"prompt" must be at most 10000 characters, got ${this.prompt.length}.`)));
         }
-        if (this.frequency !== undefined
-            && !ALLOWED_AGENTIC_FREQUENCIES.includes(this.frequency)) {
-            diagnostics.add(new construct_diagnostics_1.InvalidPropertyValueDiagnostic('frequency', new Error(`"frequency" must be one of ${ALLOWED_AGENTIC_FREQUENCIES.join(', ')} `
-                + `for agentic checks, got ${this.frequency}.`)));
-        }
         this.validateAgentRuntime(diagnostics);
     }
     // eslint-disable-next-line require-await
@@ -100,34 +85,17 @@ class AgenticCheck extends check_1.Check {
                 }
             }
         }
-        if (this.agentRuntime?.exposeEnvironmentVariables) {
-            for (const [index, entry] of this.agentRuntime.exposeEnvironmentVariables.entries()) {
-                const name = typeof entry === 'string' ? entry : entry?.name;
-                if (typeof name !== 'string' || name.trim().length === 0) {
-                    diagnostics.add(new construct_diagnostics_1.InvalidPropertyValueDiagnostic('agentRuntime.exposeEnvironmentVariables', new Error(`"agentRuntime.exposeEnvironmentVariables[${index}]" must have a non-empty name.`)));
-                    continue;
-                }
-                if (typeof entry !== 'string'
-                    && typeof entry.description === 'string'
-                    && entry.description.length > MAX_ENV_VAR_DESCRIPTION_LENGTH) {
-                    diagnostics.add(new construct_diagnostics_1.InvalidPropertyValueDiagnostic('agentRuntime.exposeEnvironmentVariables', new Error(`"agentRuntime.exposeEnvironmentVariables[${index}].description" must be at most `
-                        + `${MAX_ENV_VAR_DESCRIPTION_LENGTH} characters, got ${entry.description.length}.`)));
-                }
-            }
-        }
     }
     synthesize() {
         return {
             ...super.synthesize(),
             checkType: constants_1.CheckTypes.AGENTIC,
             prompt: this.prompt,
-            // Always emit `agentRuntime` so the backend has an explicit, complete
-            // picture of the runtime surface the user wants. The CLI is the source
-            // of truth: omitted skills/env vars mean "the agent should not have
-            // them", not "preserve whatever was there before".
+            // Always emit `agentRuntime` so the backend has an explicit picture of
+            // the skills the user wants. Omitted skills mean "the agent should not
+            // have them", not "preserve whatever was there before".
             agentRuntime: {
                 skills: this.agentRuntime?.skills ?? [],
-                exposeEnvironmentVariables: this.agentRuntime?.exposeEnvironmentVariables ?? [],
             },
         };
     }

package/dist/constructs/agentic-check.js.map

@@ -1 +1 @@
-{"version":3,"file":"agentic-check.js","sourceRoot":"","sources":["../../src/constructs/agentic-check.ts"],"names":[],"mappings":";;;AAAA,mCAA2C;AAE3C,uCAAmC;AACnC,4CAAyC;AAEzC,mEAAwE;AAExE;;;GAGG;AACH,MAAM,2BAA2B,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAU,CAAA;AAkB/E;;;;GAIG;AACH,MAAM,sBAAsB,GAAG,WAAW,CAAA;AAE1C;;;GAGG;AACH,MAAM,8BAA8B,GAAG,GAAG,CAAA;AAmI1C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAa,YAAa,SAAQ,aAAK;IAC5B,MAAM,CAAQ;IACd,YAAY,CAAe;IAEpC;;;;;OAKG;IACH,YAAa,SAAiB,EAAE,KAAwB;QACtD,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QACvB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;QAC1B,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAA;QAEtC,0EAA0E;QAC1E,wEAAwE;QACxE,uEAAuE;QACvE,sEAAsE;QACtE,cAAc;QACd,IAAI,CAAC,SAAS,GAAG,CAAC,sBAAsB,CAAC,CAAA;QACzC,IAAI,CAAC,gBAAgB,GAAG,SAAS,CAAA;QACjC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAA;QACxB,IAAI,CAAC,aAAa,GAAG,SAAS,CAAA;QAC9B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAA;QAC3B,IAAI,CAAC,WAAW,GAAG,SAAS,CAAA;QAC5B,IAAI,CAAC,eAAe,GAAG,SAAS,CAAA;QAEhC,4DAA4D;QAC5D,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,SAAS,GAAG,EAAE,CAAA;QACrB,CAAC;QAED,iBAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,CAAC,gBAAgB,EAAE,CAAA;IACzB,CAAC;IAED,QAAQ;QACN,OAAO,gBAAgB,IAAI,CAAC,SAAS,EAAE,CAAA;IACzC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAE,WAAwB;QACtC,MAAM,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QAEjC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,WAAW,CAAC,GAAG,CAAC,IAAI,sDAA8B,CAChD,QAAQ,EACR,IAAI,KAAK,CAAC,6CAA6C,CAAC,CACzD,CAAC,CAAA;QACJ,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,KAAM,EAAE,CAAC;YACvC,WAAW,CAAC,GAAG,CAAC,IAAI,sDAA8B,CAChD,QAAQ,EACR,IAAI,KAAK,CAAC,kDAAkD,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CACnF,CAAC,CAAA;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;eAC3B,CAAE,2BAAiD,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAClF,WAAW,CAAC,GAAG,CAAC,IAAI,sDAA8B,CAChD,WAAW,EACX,IAAI,KAAK,CACP,8BAA8B,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;kBACrE,2BAA2B,IAAI,CAAC,SAAS,GAAG,CAC/C,CACF,CAAC,CAAA;QACJ,CAAC;QAED,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAA;IACxC,CAAC;IAED,yCAAyC;IAC/B,KAAK,CAAC,oBAAoB,CAAE,WAAwB;QAC5D,IAAI,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;YAC9B,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;gBAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC3D,WAAW,CAAC,GAAG,CAAC,IAAI,sDAA8B,CAChD,qBAAqB,EACrB,IAAI,KAAK,CACP,wBAAwB,KAAK,gCAAgC,CAC9D,CACF,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,EAAE,0BAA0B,EAAE,CAAC;YAClD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,0BAA0B,CAAC,OAAO,EAAE,EAAE,CAAC;gBACpF,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAA;gBAC5D,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzD,WAAW,CAAC,GAAG,CAAC,IAAI,sDAA8B,CAChD,yCAAyC,EACzC,IAAI,KAAK,CACP,4CAA4C,KAAK,gCAAgC,CAClF,CACF,CAAC,CAAA;oBACF,SAAQ;gBACV,CAAC;gBAED,IAAI,OAAO,KAAK,KAAK,QAAQ;uBACxB,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;uBACrC,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,8BAA8B,EAAE,CAAC;oBAC/D,WAAW,CAAC,GAAG,CAAC,IAAI,sDAA8B,CAChD,yCAAyC,EACzC,IAAI,KAAK,CACP,4CAA4C,KAAK,iCAAiC;0BAChF,GAAG,8BAA8B,oBAAoB,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CACnF,CACF,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,UAAU;QACR,OAAO;YACL,GAAG,KAAK,CAAC,UAAU,EAAE;YACrB,SAAS,EAAE,sBAAU,CAAC,OAAO;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,sEAAsE;YACtE,uEAAuE;YACvE,oEAAoE;YACpE,mDAAmD;YACnD,YAAY,EAAE;gBACZ,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,IAAI,EAAE;gBACvC,0BAA0B,EAAE,IAAI,CAAC,YAAY,EAAE,0BAA0B,IAAI,EAAE;aAChF;SACF,CAAA;IACH,CAAC;CACF;AAhID,oCAgIC"}
+{"version":3,"file":"agentic-check.js","sourceRoot":"","sources":["../../src/constructs/agentic-check.ts"],"names":[],"mappings":";;;AAAA,mCAA2C;AAE3C,uCAAmC;AACnC,4CAAyC;AAEzC,mEAAwE;AAQxE;;;GAGG;AACH,MAAM,8BAA8B,GAAG,WAAW,CAAA;AAyElD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAa,YAAa,SAAQ,aAAK;IAC5B,MAAM,CAAQ;IACd,YAAY,CAAe;IAEpC;;;;;OAKG;IACH,YAAa,SAAiB,EAAE,KAAwB;QACtD,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QACvB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;QAC1B,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAA;QAEtC,0EAA0E;QAC1E,qEAAqE;QACrE,IAAI,CAAC,SAAS,KAAK,CAAC,8BAA8B,CAAC,CAAA;QAEnD,0EAA0E;QAC1E,wEAAwE;QACxE,wEAAwE;QACxE,wEAAwE;QACxE,IAAI,CAAC,gBAAgB,GAAG,SAAS,CAAA;QACjC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAA;QACxB,IAAI,CAAC,aAAa,GAAG,SAAS,CAAA;QAC9B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAA;QAC3B,IAAI,CAAC,WAAW,GAAG,SAAS,CAAA;QAC5B,IAAI,CAAC,eAAe,GAAG,SAAS,CAAA;QAEhC,4DAA4D;QAC5D,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,SAAS,GAAG,EAAE,CAAA;QACrB,CAAC;QAED,iBAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,CAAC,gBAAgB,EAAE,CAAA;IACzB,CAAC;IAED,QAAQ;QACN,OAAO,gBAAgB,IAAI,CAAC,SAAS,EAAE,CAAA;IACzC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAE,WAAwB;QACtC,MAAM,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QAEjC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,WAAW,CAAC,GAAG,CAAC,IAAI,sDAA8B,CAChD,QAAQ,EACR,IAAI,KAAK,CAAC,6CAA6C,CAAC,CACzD,CAAC,CAAA;QACJ,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,KAAM,EAAE,CAAC;YACvC,WAAW,CAAC,GAAG,CAAC,IAAI,sDAA8B,CAChD,QAAQ,EACR,IAAI,KAAK,CAAC,kDAAkD,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CACnF,CAAC,CAAA;QACJ,CAAC;QAED,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAA;IACxC,CAAC;IAED,yCAAyC;IAC/B,KAAK,CAAC,oBAAoB,CAAE,WAAwB;QAC5D,IAAI,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;YAC9B,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;gBAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC3D,WAAW,CAAC,GAAG,CAAC,IAAI,sDAA8B,CAChD,qBAAqB,EACrB,IAAI,KAAK,CACP,wBAAwB,KAAK,gCAAgC,CAC9D,CACF,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,UAAU;QACR,OAAO;YACL,GAAG,KAAK,CAAC,UAAU,EAAE;YACrB,SAAS,EAAE,sBAAU,CAAC,OAAO;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,uEAAuE;YACvE,uEAAuE;YACvE,wDAAwD;YACxD,YAAY,EAAE;gBACZ,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,IAAI,EAAE;aACxC;SACF,CAAA;IACH,CAAC;CACF;AA1FD,oCA0FC"}