@mastra/client-js 1.22.0-alpha.4 → 1.22.0-alpha.5

package/CHANGELOG.md

@@ -1,5 +1,40 @@
 # @mastra/client-js
 
+## 1.22.0-alpha.5
+
+### Minor Changes
+
+- Added an agent override export API and server-side ownership enforcement. ([#17228](https://github.com/mastra-ai/mastra/pull/17228))
+
+  The server and client now expose an agent override export endpoint so Studio can download an agent's overrides as JSON for review or commit workflows. Saves are enforced server-side against each agent's `editor` config, so only owned fields (instructions, tools, or tool descriptions) are persisted and fields locked by the `editor` config are stripped.
+
+  The system packages response also reports the active editor `source` so clients can render the correct editing experience.
+
+- Added a `PATCH /tool-providers/:providerId/connections/:connectionId` endpoint and matching client SDK method so authors can rename a connection's display label after creation. ([#17249](https://github.com/mastra-ai/mastra/pull/17249))
+
+  **Rename a connection from the client SDK**
+
+  ```ts
+  import { MastraClient } from '@mastra/client-js';
+
+  const client = new MastraClient({ baseUrl: '…' });
+
+  await client.getToolProvider('composio').updateConnection('auth_abc', {
+    label: 'Work inbox',
+  });
+  ```
+
+  Pass `label: null` (or an empty string) to clear the existing label. Labels are 1–32 characters and accept letters, digits, spaces, underscores, and hyphens (`[A-Za-z0-9 _-]+`).
+
+  **Ownership enforced server-side**
+
+  Non-owners get a 403 unless they hold `tool-providers:admin`. Shared connections are reachable by every author. The label is stored on the connection row itself, so the rename flows to every agent that pins the connection — no per-agent edit needed.
+
+### Patch Changes
+
+- Updated dependencies [[`a18775a`](https://github.com/mastra-ai/mastra/commit/a18775a693172546ee2378d39b67d4e32895b251), [`1baf2d1`](https://github.com/mastra-ai/mastra/commit/1baf2d152c6881338ff8f114633d5316fe13dd15)]:
+  - @mastra/core@1.38.0-alpha.5
+
 ## 1.22.0-alpha.4
 
 ### Minor Changes

package/dist/docs/SKILL.md

@@ -3,7 +3,7 @@ name: mastra-client-js
 description: Documentation for @mastra/client-js. Use when working with @mastra/client-js APIs, configuration, or implementation.
 metadata:
   package: "@mastra/client-js"
-  version: "1.22.0-alpha.4"
+  version: "1.22.0-alpha.5"
 ---
 
 ## When to use

package/dist/docs/assets/SOURCE_MAP.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.22.0-alpha.4",
+  "version": "1.22.0-alpha.5",
   "package": "@mastra/client-js",
   "exports": {
     "RequestContext": {

package/dist/docs/references/docs-editor-overview.md

@@ -66,6 +66,41 @@ Once registered, you can manage agents through [Studio](https://mastra.ai/docs/s
 
 > **Note:** See the [MastraEditor reference](https://mastra.ai/reference/editor/mastra-editor) for all configuration options.
 
+## Code and database sources
+
+The editor stores agent overrides in one of two sources, set with the `source` option on `MastraEditor`:
+
+| Source         | Where overrides live                                      | Studio actions                                           |
+| -------------- | --------------------------------------------------------- | -------------------------------------------------------- |
+| `db` (default) | The configured storage backend.                           | Save and publish drafts.                                 |
+| `code`         | Per-agent JSON files on disk, tracked in your repository. | Download the override file or save it to the filesystem. |
+
+The default `db` source is best when non-developers iterate through Studio and you want versioning, drafts, and runtime version targeting. The `code` source is best when overrides should live in your repository alongside the rest of your code, reviewed through pull requests and deployed with your application.
+
+To use the code source, set `source: 'code'`:
+
+```typescript
+import { Mastra } from '@mastra/core'
+import { MastraEditor } from '@mastra/editor'
+
+export const mastra = new Mastra({
+  agents: {
+    /* your existing agents */
+  },
+  editor: new MastraEditor({
+    source: 'code',
+  }),
+})
+```
+
+When `source` is `'code'`, the editor writes each override to a deterministic JSON file under `./mastra/editor/agents/<agentId>.json`. Set `codePath` to change the directory. Because the files are deterministic, every save produces a clean diff you can commit and review.
+
+### Versioning with the code source
+
+The code source uses the Git history of each per-agent JSON file as its version history. Each commit that changes a file appears as a read-only version in Studio, labeled with the commit message. Saving in Studio updates the working file in place rather than creating a database draft, so the version dropdown reflects your actual commit history.
+
+This means versions and rollbacks are managed through Git rather than through draft and publish actions.
+
 ## Studio
 
 Go to the **Agents** tab in Studio and select an agent to edit. Select the **Editor** tab. You'll be taken to the editor interface, where you can modify the agent's instructions, tools, and variables.
@@ -114,15 +149,16 @@ The `editor.agent` namespace also exposes `getById`, `list`, `listResolved`, and
 
 The same operations are available over HTTP through the Mastra server. Use these when you want to manage stored agents from a separate service or from a non-TypeScript client:
 
-| Method   | Path                            | Description               |
-| -------- | ------------------------------- | ------------------------- |
-| `GET`    | `/stored/agents`                | List all stored agents.   |
-| `POST`   | `/stored/agents`                | Create a stored agent.    |
-| `GET`    | `/stored/agents/:storedAgentId` | Get a stored agent by ID. |
-| `PATCH`  | `/stored/agents/:storedAgentId` | Update a stored agent.    |
-| `DELETE` | `/stored/agents/:storedAgentId` | Delete a stored agent.    |
+| Method   | Path                                   | Description                                                      |
+| -------- | -------------------------------------- | ---------------------------------------------------------------- |
+| `GET`    | `/stored/agents`                       | List all stored agents.                                          |
+| `POST`   | `/stored/agents`                       | Create a stored agent.                                           |
+| `GET`    | `/stored/agents/:storedAgentId`        | Get a stored agent by ID.                                        |
+| `PATCH`  | `/stored/agents/:storedAgentId`        | Update a stored agent.                                           |
+| `DELETE` | `/stored/agents/:storedAgentId`        | Delete a stored agent.                                           |
+| `POST`   | `/stored/agents/:storedAgentId/export` | Export a stored agent's override as a deterministic JSON config. |
 
-The Client SDK wraps these endpoints with `client.listStoredAgents()`, `client.createStoredAgent()`, and `client.getStoredAgent()`. Version management endpoints live under `/stored/agents/:storedAgentId/versions`, see [version management](https://mastra.ai/reference/client-js/agents) for the full list.
+The export endpoint returns only the fields the agent's [`editor` config](https://mastra.ai/reference/agents/agent) allows, so the output matches the per-agent file the code source writes to disk. The Client SDK wraps these endpoints with `client.listStoredAgents()`, `client.createStoredAgent()`, `client.getStoredAgent()`, and `client.getStoredAgent(id).export()`. Version management endpoints live under `/stored/agents/:storedAgentId/versions`, see [version management](https://mastra.ai/reference/client-js/agents) for the full list.
 
 ### Automated experimentation
 
@@ -149,6 +185,32 @@ When you edit a code-defined agent through the editor, only specific fields can
 
 Fields like the agent's `id`, `name`, and `model` come from your code and can't be changed through the editor for code-defined agents. The variables are also read-only.
 
+### Controlling what is editable
+
+Use the `editor` field on a code-defined agent to control which fields the editor can override. This lets you keep some fields code-owned while allowing edits to others:
+
+```typescript
+import { Agent } from '@mastra/core/agent'
+
+export const supportAgent = new Agent({
+  name: 'support-agent',
+  model: 'openai/gpt-5.4',
+  editor: { instructions: true, tools: { description: true } },
+})
+```
+
+The `editor` field accepts these shapes:
+
+| Value                              | Result                                                     |
+| ---------------------------------- | ---------------------------------------------------------- |
+| Omitted                            | Instructions and tools are editable.                       |
+| `false`                            | Nothing is editable. The agent is locked.                  |
+| `{ instructions: true }`           | Instructions are editable.                                 |
+| `{ tools: true }`                  | Tool membership and descriptions are editable.             |
+| `{ tools: { description: true } }` | Only tool descriptions are editable. Membership is locked. |
+
+When a field is owned by code, Studio shows it as read-only and the server strips it from saved overrides, so the stored config only contains the fields you allow. See the [`editor` overrides reference](https://mastra.ai/reference/agents/agent) for the full type.
+
 ## Versioning
 
 Every time you save changes to an agent or prompt block, a new version snapshot is created. Versions give you a full history of your agent's configuration. You can roll back to any previous state, compare what changed between two snapshots, and target specific versions per request for A/B testing or gradual rollouts.

package/dist/index.cjs

@@ -4710,6 +4710,15 @@ var StoredAgent = class extends BaseResource {
       }
     );
   }
+  /**
+   * Exports deterministic JSON for this agent without mutating storage.
+   */
+  export(params) {
+    return this.request(`/stored/agents/${encodeURIComponent(this.storedAgentId)}/export`, {
+      method: "POST",
+      body: params
+    });
+  }
   /**
    * Deletes the stored agent
    * @param requestContext - Optional request context to pass as query parameter
@@ -5370,6 +5379,20 @@ var ToolProvider = class extends BaseResource {
       }
     );
   }
+  /**
+   * Updates the persisted display label on a connection row. Pass `label: null`
+   * (or an empty string) to clear the existing label. Only the connection owner
+   * or an admin may rename, unless the row is `scope: 'shared'`.
+   */
+  updateConnection(connectionId, params) {
+    return this.request(
+      `/tool-providers/${encodeURIComponent(this.providerId)}/connections/${encodeURIComponent(connectionId)}`,
+      {
+        method: "PATCH",
+        body: params
+      }
+    );
+  }
   /**
    * Lists the agents that currently pin a given connection. Used by the
    * picker to warn the user before disconnecting a shared account.