Conversation
|
|
The latest updates on your projects. Learn more about Vercel for GitHub.
1 Skipped Deployment
|
|
Updates the OpenAPI snapshot to reflect two recent changes in the codebase.
|
There was a problem hiding this comment.
This snapshot does not match what the source code generates. The changes appear to be hand-edited rather than produced by regenerating the snapshot, and two out of two change categories diverge from the actual schemas/middleware. The PR description also mentions agentName/projectName removal and maxLength additions that are not present in the diff.
| ], | ||
| "x-authz": { | ||
| "description": "Requires organization membership. Auth is enforced by the manageBearerOrSessionAuth middleware in createApp.ts.", | ||
| "description": "Requires organization membership. Auth is enforced by the manageApiKeyOrSessionAuth middleware in createApp.ts.", |
There was a problem hiding this comment.
This rename from manageBearerOrSessionAuth to manageApiKeyOrSessionAuth does not match the source code. inheritedManageTenantAuth() in packages/agents-core/src/middleware/inherited-auth.ts still emits manageBearerOrSessionAuth in its description string. Regenerating the snapshot would revert all 10 of these renames.
Either update the source string in inherited-auth.ts first and then regenerate, or revert this change in the snapshot.
| "teamDomain": { | ||
| "type": "string" | ||
| }, | ||
| "teamId": { |
There was a problem hiding this comment.
teamDomain is still defined in the Zod schema at packages/agents-work-apps/src/slack/routes/workspaces.ts (teamDomain: z.string().optional()). Removing it from the snapshot without removing it from the schema means the snapshot will fail on regeneration.
Either remove teamDomain from the Zod schema first, or keep it here.
There was a problem hiding this comment.
PR Review Summary
(2) Total Issues | Risk: High
🔴❗ Critical (2) ❗🔴
This PR introduces factually incorrect snapshot changes that do not match the actual API specification. Both changes in this PR are invalid.
Inline Comments:
- 🔴 Critical:
openapi.json:10722Incorrect middleware name — reverting a valid rename from PR #2478 - 🔴 Critical:
openapi.json:38559-38561Incorrectly removingteamDomainfield that exists in source code
Analysis
1. Middleware name change is backwards
The PR changes 10 occurrences of manageBearerOrSessionAuth → manageApiKeyOrSessionAuth in the snapshot. However:
- The actual middleware in
manageAuth.ts:173is namedmanageBearerOrSessionAuth - PR #2478 (merged March 2) intentionally renamed it from
manageApiKeyOrSessionAuthtomanageBearerOrSessionAuthand updated the snapshot - This PR is reverting that correct change
2. teamDomain removal is incorrect
The PR removes the teamDomain field from the Slack workspaces schema, but:
- The source code at
workspaces.ts:104explicitly includesteamDomain: z.string().optional() - This field is part of the API contract and should not be removed
3. PR description is misleading
The description claims this fixes drift from PR #2038 involving agentName/projectName fields and maxLength constraints. However:
- None of these fields appear in the actual diff
- The actual changes are the middleware rename and
teamDomainremoval
Recommendation
Do not merge this PR. The snapshot on main is already correct. If CI is failing on subsequent PRs, the issue is likely elsewhere (possibly a test environment mismatch or stale snapshot regeneration).
To verify the current snapshot is correct, run:
pnpm --filter @inkeep/agents-api openapi:update-snapshot
git diff agents-api/__snapshots__/openapi.jsonIf there are no changes, the current snapshot is correct.
🚫 REQUEST CHANGES
Summary: This PR makes the OpenAPI snapshot inconsistent with the actual codebase. The middleware name change reverts a valid rename from PR #2478, and the teamDomain removal contradicts the source schema definition. The snapshot on main is correct and should not be changed in this way.
Reviewers (1)
| Reviewer | Returned | Main Findings | Consider | While You're Here | Inline Comments | Pending Recs | Discarded |
|---|---|---|---|---|---|---|---|
orchestrator |
2 | 0 | 0 | 0 | 2 | 0 | 0 |
| Total | 2 | 0 | 0 | 0 | 2 | 0 | 0 |
Note: This was a simple snapshot-only PR that required direct orchestrator analysis rather than domain-specific sub-reviewers.
| ], | ||
| "x-authz": { | ||
| "description": "Requires organization membership. Auth is enforced by the manageBearerOrSessionAuth middleware in createApp.ts.", | ||
| "description": "Requires organization membership. Auth is enforced by the manageApiKeyOrSessionAuth middleware in createApp.ts.", |
There was a problem hiding this comment.
🔴 CRITICAL: Incorrect middleware name — reverting a valid rename
Issue: This change renames manageBearerOrSessionAuth → manageApiKeyOrSessionAuth, but the actual middleware in the codebase is named manageBearerOrSessionAuth.
Why: PR #2478 (merged March 2) intentionally renamed the middleware from manageApiKeyOrSessionAuth to manageBearerOrSessionAuth and updated the snapshot accordingly. This PR is reverting that correct change, which will cause the snapshot to reference a middleware name that doesn't exist.
Fix: Do not change this line. The current snapshot on main is correct.
Refs:
| "hasDefaultAgent": { | ||
| "type": "boolean" | ||
| }, |
There was a problem hiding this comment.
🔴 CRITICAL: Incorrectly removing teamDomain field
Issue: This change removes the teamDomain field from the Slack workspaces response schema, but the source code explicitly includes this field.
Why: The source code at packages/agents-work-apps/src/slack/routes/workspaces.ts:104 defines the response schema with teamDomain: z.string().optional(). Removing it from the snapshot makes the snapshot inconsistent with the actual API response.
Fix: Do not remove these lines. The teamDomain field is part of the API contract.
Refs:

Summary
Updates the OpenAPI snapshot to match the current schema. The snapshot drifted in #2038 which removed
agentName/projectNamefields and addedmaxLengthconstraints, but the snapshot wasn't updated to match, causing CI to fail on every subsequent PR.