@dbx-tools/appkit-mastra 0.3.7 → 0.3.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/package.json +10 -10
  2. package/src/server.ts +9 -3
package/package.json CHANGED
@@ -27,22 +27,22 @@
27
27
  "@opentelemetry/api": "^1.9.1",
28
28
  "pg": "^8.22.0",
29
29
  "zod": "^4.3.6",
30
- "@dbx-tools/appkit": "0.3.7",
31
- "@dbx-tools/core": "0.3.7",
32
- "@dbx-tools/databricks": "0.3.7",
33
- "@dbx-tools/model": "0.3.7",
34
- "@dbx-tools/shared-mastra": "0.3.7",
35
- "@dbx-tools/genie": "0.3.7",
36
- "@dbx-tools/shared-genie": "0.3.7",
37
- "@dbx-tools/shared-model": "0.3.7",
38
- "@dbx-tools/shared-core": "0.3.7"
30
+ "@dbx-tools/appkit": "0.3.9",
31
+ "@dbx-tools/core": "0.3.9",
32
+ "@dbx-tools/databricks": "0.3.9",
33
+ "@dbx-tools/shared-core": "0.3.9",
34
+ "@dbx-tools/shared-genie": "0.3.9",
35
+ "@dbx-tools/genie": "0.3.9",
36
+ "@dbx-tools/shared-mastra": "0.3.9",
37
+ "@dbx-tools/model": "0.3.9",
38
+ "@dbx-tools/shared-model": "0.3.9"
39
39
  },
40
40
  "main": "index.ts",
41
41
  "license": "UNLICENSED",
42
42
  "publishConfig": {
43
43
  "access": "public"
44
44
  },
45
- "version": "0.3.7",
45
+ "version": "0.3.9",
46
46
  "types": "index.ts",
47
47
  "type": "module",
48
48
  "exports": {
package/src/server.ts CHANGED
@@ -281,11 +281,17 @@ export interface MastraApiGateOptions {
281
281
  * prefix their `-generate` non-streaming variants), the `-network-` variants,
282
282
  * and `resume-stream` (covers `resume-stream-until-idle`). Without these an
283
283
  * approval-gated tool (e.g. `send_email`) can be requested but never approved
284
- * from the browser - the resume `POST` 403s under scoped mode. These are the
285
- * only *writes* the browser client is allowed to make against stock Mastra.
284
+ * from the browser - the resume `POST` 403s under scoped mode.
285
+ *
286
+ * Also covers the mid-turn steering verbs the chat client uses to hand a
287
+ * message to a live run: `queue-message` / `send-message` and the
288
+ * `threads/subscribe` observer that watches an in-flight run. These are
289
+ * `@experimental` in Mastra; keeping them here means a steer request is not
290
+ * refused under scoped mode. These are the only *writes* the browser client
291
+ * is allowed to make against stock Mastra.
286
292
  */
287
293
  const AGENT_INFERENCE =
288
- /^\/agents\/[^/]+\/(stream|generate|network|resume-stream|approve-tool-call|decline-tool-call|approve-network-tool-call|decline-network-tool-call)/i;
294
+ /^\/agents\/[^/]+\/(stream|generate|network|resume-stream|approve-tool-call|decline-tool-call|approve-network-tool-call|decline-network-tool-call|queue-message|send-message|threads\/subscribe)/i;
289
295
 
290
296
  /** Mount-relative read-only agent metadata (`/agents`, `/agents/:id`). */
291
297
  const AGENT_METADATA = /^\/agents(\/[^/]+)?$/;