@dbx-tools/appkit-mastra 0.1.75 → 0.1.76

package/README.md

@@ -117,6 +117,9 @@ management (registered alongside `/route/history`):
 - `DELETE /route/threads` - delete the targeted thread (id from the
   thread-selection header). Ownership is enforced server-side: a thread
   is only removed when it belongs to the caller.
+- `PATCH /route/threads` - rename the targeted thread (id from the
+  thread-selection header) to the `{ title }` in the JSON body. Same
+  ownership enforcement; existing thread metadata is preserved.
 
 Each thread is auto-titled from its opening turn (Mastra's
 `generateTitle`), but titling runs on the **small / fast chat tier**

package/dist/index.js

@@ -1,4 +1,4 @@
-import { ChartSchema, ChartTypeSchema, DEFAULT_COMMENT_NAME, DEFAULT_FEEDBACK_NAME, MASTRA_ROUTES, MLFLOW_TRACE_ID_HEADER, MODEL_OVERRIDE_BODY_FIELDS, MODEL_OVERRIDE_HEADER, MODEL_OVERRIDE_QUERY, MastraFeedbackRequestSchema, THREAD_ID_HEADER, THREAD_ID_QUERY } from "@dbx-tools/appkit-mastra-shared";
+import { ChartSchema, ChartTypeSchema, DEFAULT_COMMENT_NAME, DEFAULT_FEEDBACK_NAME, MASTRA_ROUTES, MLFLOW_TRACE_ID_HEADER, MODEL_OVERRIDE_BODY_FIELDS, MODEL_OVERRIDE_HEADER, MODEL_OVERRIDE_QUERY, MastraFeedbackRequestSchema, MastraUpdateThreadRequestSchema, THREAD_ID_HEADER, THREAD_ID_QUERY } from "@dbx-tools/appkit-mastra-shared";
 import { DEFAULT_FUZZY_THRESHOLD, DEFAULT_MODEL_CACHE_TTL_MS, FALLBACK_MODEL_IDS, ModelClass, ModelClass as ModelClass$1, clearServingEndpointsCache, listServingEndpoints, parseModelClass, selectModel } from "@dbx-tools/model";
 import { apiUtils, appkitUtils, commonUtils, httpUtils, logUtils, netUtils, projectUtils, stringUtils } from "@dbx-tools/shared";
 import { Agent } from "@mastra/core/agent";
@@ -226,8 +226,8 @@ const SERVING_ENDPOINTS_PATH_PREFIX = "/serving-endpoints/";
 *
 * Safe to call from any hot path: {@link commonUtils.memoize} ensures
 * the wrapper is installed at most once per process, so subsequent
-* calls collapse to a single cached promise even when
-* {@link buildModel} fires on every agent step.
+* calls are a no-op even when {@link buildModel} fires on every agent
+* step.
 */
 const setupFetchInterceptor = commonUtils.memoize(() => {
 	const log = logUtils.logger("mastra/llm");
@@ -3788,6 +3788,26 @@ function attachRoutePatchMiddleware(app) {
 
 //#endregion
 //#region packages/appkit-mastra/src/threads.ts
+/**
+* Conversation-thread listing exposed as a Mastra custom API route.
+*
+* Backed entirely by native Mastra: looks up the active agent by id,
+* asks its `Memory` instance to `listThreads` filtered to the caller's
+* resource, and shapes each into the JSON-safe {@link MastraThread}
+* wire type. A sibling `DELETE` removes a single named thread.
+*
+* A sibling `DELETE` removes a single named thread; a `PATCH` renames
+* one ({@link renameThread}).
+*
+* Like {@link historyRoute} this registers through Mastra's
+* `registerApiRoute` so it shares the `MastraServer` auth-middleware
+* pipeline (in `./server.ts`), which has already stamped the resource
+* id (`MASTRA_RESOURCE_ID_KEY`) and the targeted thread id
+* (`MASTRA_THREAD_ID_KEY`, resolved from the thread-selection header /
+* cookie) on `RequestContext` by the time a handler runs. Resource
+* scoping lives here so a caller can only ever see, rename, or delete
+* its own threads; no cookie or user lookups happen in this module.
+*/
 const log = logUtils.logger("mastra/threads");
 /** Default threads page size. */
 const DEFAULT_PER_PAGE = 30;
@@ -3882,7 +3902,47 @@ async function deleteThread(opts) {
 	return { deleted: true };
 }
 /**
-* Register the `<path>` Mastra custom API route. Handles two methods
+* Rename a single thread, returning the updated wire thread.
+*
+* Ownership is enforced the same way {@link deleteThread} enforces it:
+* the title is only changed when the thread belongs to the calling
+* resource, so a client can't rename another user's conversation by
+* guessing its id. Existing thread `metadata` is preserved untouched
+* (Mastra's `updateThread` replaces the row, so it must be passed back
+* in). Returns `null` when the thread doesn't exist, isn't owned by the
+* caller, or the agent has no memory configured, letting the route map
+* that to a 404.
+*/
+async function renameThread(opts) {
+	const memory = await opts.agent.getMemory();
+	if (!memory) {
+		log.debug("rename:no-memory", { agentId: opts.agent.id });
+		return null;
+	}
+	const existing = await memory.getThreadById({ threadId: opts.threadId });
+	if (!existing || existing.resourceId !== opts.resourceId) {
+		log.debug("rename:not-owned", {
+			agentId: opts.agent.id,
+			threadId: opts.threadId,
+			found: existing !== null
+		});
+		return null;
+	}
+	const startedAt = Date.now();
+	const updated = await memory.updateThread({
+		id: opts.threadId,
+		title: opts.title,
+		metadata: existing.metadata ?? {}
+	});
+	log.info("rename:done", {
+		agentId: opts.agent.id,
+		threadId: opts.threadId,
+		elapsedMs: Date.now() - startedAt
+	});
+	return toWireThread(updated);
+}
+/**
+* Register the `<path>` Mastra custom API route. Handles three methods
 * on the same mount:
 *
 *   - `GET`: a page of the resource's conversation threads
@@ -3892,6 +3952,10 @@ async function deleteThread(opts) {
 *     `RequestContext` (the auth middleware resolves it the same way it
 *     does for streaming and history), so the client deletes any of its
 *     threads by stamping the target id - no separate path param.
+*   - `PATCH`: rename the thread named by the thread-selection header /
+*     `?threadId=` query to the `{ title }` in the JSON body
+*     ({@link renameThread}). Targets a thread the same way `DELETE`
+*     does; 404s when the thread isn't owned by the caller.
 *
 * Follows the `@mastra/ai-sdk` agent-binding convention: pass `agent`
 * for a fixed-agent mount, or include `:agentId` in the path for
@@ -3918,40 +3982,67 @@ function threadsRoute(options) {
 			resourceId
 		};
 	};
-	return [registerApiRoute(path, {
-		method: "GET",
-		handler: async (c) => {
-			const ctx = resolveContext(c);
-			if ("error" in ctx) return ctx.error;
-			const payload = await listThreads({
-				agent: ctx.agent,
-				resourceId: ctx.resourceId,
-				page: parseIntParam(c.req.query("page")),
-				perPage: parseIntParam(c.req.query("perPage"))
-			});
-			return c.json(payload);
-		}
-	}), registerApiRoute(path, {
-		method: "DELETE",
-		handler: async (c) => {
-			const ctx = resolveContext(c);
-			if ("error" in ctx) return ctx.error;
-			const threadId = ctx.requestContext.get(MASTRA_THREAD_ID_KEY);
-			if (!threadId) return c.json({ error: "thread id missing from request context" }, 400);
-			const { deleted } = await deleteThread({
-				agent: ctx.agent,
-				threadId,
-				resourceId: ctx.resourceId
-			});
-			const payload = {
-				ok: true,
-				agentId: ctx.agentId,
-				threadId,
-				deleted
-			};
-			return c.json(payload);
-		}
-	})];
+	return [
+		registerApiRoute(path, {
+			method: "GET",
+			handler: async (c) => {
+				const ctx = resolveContext(c);
+				if ("error" in ctx) return ctx.error;
+				const payload = await listThreads({
+					agent: ctx.agent,
+					resourceId: ctx.resourceId,
+					page: parseIntParam(c.req.query("page")),
+					perPage: parseIntParam(c.req.query("perPage"))
+				});
+				return c.json(payload);
+			}
+		}),
+		registerApiRoute(path, {
+			method: "DELETE",
+			handler: async (c) => {
+				const ctx = resolveContext(c);
+				if ("error" in ctx) return ctx.error;
+				const threadId = ctx.requestContext.get(MASTRA_THREAD_ID_KEY);
+				if (!threadId) return c.json({ error: "thread id missing from request context" }, 400);
+				const { deleted } = await deleteThread({
+					agent: ctx.agent,
+					threadId,
+					resourceId: ctx.resourceId
+				});
+				const payload = {
+					ok: true,
+					agentId: ctx.agentId,
+					threadId,
+					deleted
+				};
+				return c.json(payload);
+			}
+		}),
+		registerApiRoute(path, {
+			method: "PATCH",
+			handler: async (c) => {
+				const ctx = resolveContext(c);
+				if ("error" in ctx) return ctx.error;
+				const threadId = ctx.requestContext.get(MASTRA_THREAD_ID_KEY);
+				if (!threadId) return c.json({ error: "thread id missing from request context" }, 400);
+				const body = MastraUpdateThreadRequestSchema.safeParse(await c.req.json());
+				if (!body.success) return c.json({ error: body.error.message }, 400);
+				const thread = await renameThread({
+					agent: ctx.agent,
+					threadId,
+					resourceId: ctx.resourceId,
+					title: body.data.title
+				});
+				if (!thread) return c.json({ error: `Unknown thread "${threadId}"` }, 404);
+				const payload = {
+					ok: true,
+					agentId: ctx.agentId,
+					thread
+				};
+				return c.json(payload);
+			}
+		})
+	];
 }
 /** Coerce a Mastra `StorageThreadType` into the JSON-safe wire shape. */
 function toWireThread(thread) {

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@dbx-tools/appkit-mastra",
-  "version": "0.1.75",
+  "version": "0.1.76",
   "dependencies": {
     "@databricks/sdk-experimental": "^0.17",
-    "@dbx-tools/appkit-mastra-shared": "0.1.75",
-    "@dbx-tools/genie": "0.1.75",
-    "@dbx-tools/genie-shared": "0.1.75",
-    "@dbx-tools/model": "0.1.75",
-    "@dbx-tools/shared": "0.1.75",
+    "@dbx-tools/appkit-mastra-shared": "0.1.76",
+    "@dbx-tools/genie": "0.1.76",
+    "@dbx-tools/genie-shared": "0.1.76",
+    "@dbx-tools/model": "0.1.76",
+    "@dbx-tools/shared": "0.1.76",
     "@mastra/ai-sdk": "^1",
     "@mastra/core": "^1",
     "@mastra/express": "^1",