@mastra/connect 1.1.0-alpha.3 → 1.1.0-alpha.4

package/dist/multi-connection.d.ts

@@ -13,6 +13,8 @@ export interface NamedConnection {
     name: string;
     /** Raw accountLabel from the platform, if any (may be null/empty). */
     accountLabel?: string | null;
+    /** Resource key the connection is scoped to; null for global connections. */
+    resourceId?: string | null;
 }
 /**
  * Builds the ordered list of named connections for one provider. Called only
@@ -61,6 +63,13 @@ export declare function buildMcpMultiConnectionTools(input: {
     disallowTools?: string[];
     requireApproval?: boolean | string[];
     client: ResolvedClient;
+    /**
+     * Resource-free client for global connections' transports. The MCP client
+     * cache is shared across resource scopes, so a global connection's
+     * transport must not carry whichever scope's resource header resolved it
+     * first. Defaults to `client` (already resource-free in the global scope).
+     */
+    globalClient?: ResolvedClient;
     mcpClients: Map<string, {
         integrationId: string;
         connectionId: string;

package/dist/multi-connection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"multi-connection.d.ts","sourceRoot":"","sources":["../src/multi-connection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGxC,OAAO,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG3F,OAAO,KAAK,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAGxF;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,8BAA8B;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,6HAA6H;IAC7H,IAAI,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,iBAAiB,EAAE,GAAG,eAAe,EAAE,CA8BrF;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,eAAe,EAAE,EAC9B,cAAc,EAAE,MAAM,GACrB,MAAM,CAgBR;AAiLD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAEpE;AAkDD;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAAC,KAAK,EAAE;IACpD,YAAY,EAAE,yBAAyB,CAAC;IACxC,WAAW,EAAE,eAAe,EAAE,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,MAAM,CAAC,EAAE,oBAAoB,CAAC;CAC/B,GAAG,UAAU,CAyCb;AAED;;;;;GAKG;AACH,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,YAAY,EAAE,uBAAuB,CAAC;IACtC,WAAW,EAAE,eAAe,EAAE,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,eAAe,CAAC,EAAE,OAAO,GAAG,MAAM,EAAE,CAAC;IACrC,MAAM,EAAE,cAAc,CAAC;IACvB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,SAAS,CAAA;KAAE,CAAC,CAAC;IAC5F,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,UAAU,CAAC,CAyHtB"}
+{"version":3,"file":"multi-connection.d.ts","sourceRoot":"","sources":["../src/multi-connection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGxC,OAAO,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG3F,OAAO,KAAK,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAGxF;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,8BAA8B;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,6HAA6H;IAC7H,IAAI,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,iBAAiB,EAAE,GAAG,eAAe,EAAE,CAmCrF;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,eAAe,EAAE,EAC9B,cAAc,EAAE,MAAM,GACrB,MAAM,CAgBR;AAiLD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAEpE;AAkDD;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAAC,KAAK,EAAE;IACpD,YAAY,EAAE,yBAAyB,CAAC;IACxC,WAAW,EAAE,eAAe,EAAE,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,MAAM,CAAC,EAAE,oBAAoB,CAAC;CAC/B,GAAG,UAAU,CAyCb;AAED;;;;;GAKG;AACH,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,YAAY,EAAE,uBAAuB,CAAC;IACtC,WAAW,EAAE,eAAe,EAAE,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,eAAe,CAAC,EAAE,OAAO,GAAG,MAAM,EAAE,CAAC;IACrC,MAAM,EAAE,cAAc,CAAC;IACvB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,cAAc,CAAC;IAC9B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,SAAS,CAAA;KAAE,CAAC,CAAC;IAC5F,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,UAAU,CAAC,CA0HtB"}

package/dist/tools.d.ts

@@ -83,6 +83,20 @@ export interface ToolsOptions {
     client?: ConnectClientOptions;
     /** How long a resolved snapshot stays fresh, in milliseconds. Default 30_000. `0` revalidates every resolution. */
     ttlMs?: number;
+    /**
+     * Scope resolution to one end user. When set, the resolver returns tools
+     * for the project's global connections **plus** the connections created for
+     * this resource key, and every platform call made under the scope asserts
+     * `x-mastra-resource-id` so the platform can enforce ownership. Omit it to
+     * keep today's global-only behavior.
+     *
+     * Accepts a static key (`tools({ resourceId: userId })` — the per-request
+     * pattern `tools: (ctx) => tools({ resourceId: ... })` stays cheap because
+     * identical options share one internal state) or a callback derived per
+     * resolution from the invocation context. A callback returning `undefined`
+     * resolves global-only.
+     */
+    resourceId?: string | ((ctx?: ToolsResolverContext) => string | undefined | Promise<string | undefined>);
 }
 type ResolvedToolsRecord = Record<string, {
     id: string;
@@ -111,11 +125,17 @@ export type ToolsWithInput = Record<string, {
  * restarting the server. Call it directly (`await tools()`) when you need the
  * current flat tool record.
  */
-export interface ToolsResolver {
+export interface ToolsResolver extends Promise<ResolvedToolsRecord> {
     (ctx?: ToolsResolverContext): Promise<ResolvedToolsRecord>;
     /** Fetches tools from the platform now and updates the cache. Rejects if the platform fetch fails. */
     refresh(): Promise<ResolvedToolsRecord>;
-    /** Closes MCP transports owned by this resolver and clears its cached snapshot. */
+    /**
+     * Clears the cached snapshots and closes the MCP transports of the state
+     * behind this resolver. Resolvers created with identical options share that
+     * state, so this disconnects them too — but not permanently: a later
+     * resolution rebuilds the state, and already-returned MCP tools reconnect
+     * on their next call.
+     */
     disconnect(): Promise<void>;
     /**
      * Returns a new resolver that merges `extra` tools into every resolution,
@@ -137,6 +157,10 @@ export interface ToolsResolver {
  * usual TTL / stale-while-revalidate semantics.
  */
 export type ToolsOptionsInput = ToolsOptions | ((ctx?: ToolsResolverContext) => ToolsOptions | Promise<ToolsOptions>);
+/** Test-only: current number of states in the shared registry. */
+export declare function __sharedToolsStateCountForTests(): number;
+/** Test-only: disconnects and forgets every shared resolver state. */
+export declare function __clearSharedToolsStateForTests(): Promise<void>;
 /**
  * Returns a live toolset resolver over the project's Platform connections.
  * HTTP providers are loaded from the shipped `PROVIDERS` registry. MCP providers

package/dist/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,oBAAoB,EAA8D,MAAM,aAAa,CAAC;AAkBpH,UAAU,wBAAwB;IAChC,wGAAwG;IACxG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;OAUG;IACH,eAAe,CAAC,EAAE,OAAO,GAAG,MAAM,EAAE,CAAC;CACtC;AAED;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG,wBAAwB,GACzD,CACI;IACE;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,CAAC,EAAE,KAAK,CAAC;CACvB,GACD;IACE,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B,CACJ,CAAC;AAEJ,MAAM,WAAW,YAAY;IAC3B,uFAAuF;IACvF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;;;;;;;OAcG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,oBAAoB,CAAC,CAAC;IACtE;;;;;;;;;;OAUG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,kFAAkF;IAClF,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,OAAO,GAAG,MAAM,EAAE,CAAC;IACrC,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,mHAAmH;IACnH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAID,KAAK,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE1D,sFAAsF;AACtF,MAAM,WAAW,oBAAoB;IACnC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,MAAM,cAAc,GACtB,MAAM,CAAC,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,GAC9B,CAAC,CAAC,GAAG,CAAC,EAAE,oBAAoB,KAAK,MAAM,CAAC,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAAC,CAAC;AAE/G;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,CAAC,GAAG,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC3D,sGAAsG;IACtG,OAAO,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACxC,mFAAmF;IACnF,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B;;;;;;;OAOG;IACH,IAAI,CAAC,KAAK,EAAE,cAAc,GAAG,aAAa,CAAC;CAC5C;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,oBAAoB,KAAK,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;AAYtH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,KAAK,CAAC,OAAO,GAAE,iBAAsB,GAAG,aAAa,CAyKpE"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,oBAAoB,EAA8D,MAAM,aAAa,CAAC;AAwBpH,UAAU,wBAAwB;IAChC,wGAAwG;IACxG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;OAUG;IACH,eAAe,CAAC,EAAE,OAAO,GAAG,MAAM,EAAE,CAAC;CACtC;AAED;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG,wBAAwB,GACzD,CACI;IACE;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,CAAC,EAAE,KAAK,CAAC;CACvB,GACD;IACE,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B,CACJ,CAAC;AAEJ,MAAM,WAAW,YAAY;IAC3B,uFAAuF;IACvF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;;;;;;;OAcG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,oBAAoB,CAAC,CAAC;IACtE;;;;;;;;;;OAUG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,kFAAkF;IAClF,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,OAAO,GAAG,MAAM,EAAE,CAAC;IACrC,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,mHAAmH;IACnH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;;;;;;OAYG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,oBAAoB,KAAK,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;CAC1G;AAID,KAAK,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE1D,sFAAsF;AACtF,MAAM,WAAW,oBAAoB;IACnC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,MAAM,cAAc,GACtB,MAAM,CAAC,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,GAC9B,CAAC,CAAC,GAAG,CAAC,EAAE,oBAAoB,KAAK,MAAM,CAAC,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAAC,CAAC;AAE/G;;;;;;GAMG;AACH,MAAM,WAAW,aAAc,SAAQ,OAAO,CAAC,mBAAmB,CAAC;IACjE,CAAC,GAAG,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC3D,sGAAsG;IACtG,OAAO,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACxC;;;;;;OAMG;IACH,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B;;;;;;;OAOG;IACH,IAAI,CAAC,KAAK,EAAE,cAAc,GAAG,aAAa,CAAC;CAC5C;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,oBAAoB,KAAK,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;AAuKtH,kEAAkE;AAClE,wBAAgB,+BAA+B,IAAI,MAAM,CAExD;AAED,sEAAsE;AACtE,wBAAsB,+BAA+B,IAAI,OAAO,CAAC,IAAI,CAAC,CAIrE;AAqND;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,KAAK,CAAC,OAAO,GAAE,iBAAsB,GAAG,aAAa,CAmGpE"}

package/dist/user-connect-page.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Self-contained hosted connect page served by `userConnectRoutes()`.
+ *
+ * The page only ever talks to the mounted routes on the same origin — it never
+ * sees a platform token. OAuth and credential collection happen inside the
+ * platform-hosted `connectUrl` popup returned by the session route, so no
+ * vendor SDK is bundled here. Flow: explicit Connect click → POST sessions →
+ * popup to `connectUrl` → poll status every 2s (5 min cap) → redirect to the
+ * validated `returnTo` (or show a success state when none was given).
+ */
+export interface ConnectPageProvider {
+    id: string;
+    displayName?: string | null;
+    logoUrl?: string | null;
+}
+export interface ConnectPageParams {
+    /** Mount prefix of the connect routes, e.g. `/connect`. */
+    basePath: string;
+    provider: ConnectPageProvider;
+    /** Already validated by the route; null renders the in-page success state. */
+    returnTo: string | null;
+}
+export declare function renderConnectPage(params: ConnectPageParams): string;
+//# sourceMappingURL=user-connect-page.d.ts.map

package/dist/user-connect-page.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-connect-page.d.ts","sourceRoot":"","sources":["../src/user-connect-page.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC,2DAA2D;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAkCD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CA8InE"}

package/dist/user-connect-routes.d.ts

@@ -0,0 +1,72 @@
+import type { ApiRoute } from '@mastra/core/server';
+import type { ConnectClientOptions } from './client.js';
+/**
+ * Identity context handed to the optional {@link UserConnectRoutesOptions.resourceId}
+ * callback, derived from the server's request pipeline.
+ */
+export interface UserConnectIdentityContext {
+    /** Request-scoped context populated by the server (auth middleware, custom middleware). */
+    requestContext?: {
+        get(key: string): unknown;
+    };
+    /** The authenticated user the server's auth pipeline stored on the request context, when present. */
+    user?: unknown;
+}
+export interface UserConnectRoutesOptions {
+    /**
+     * Required explicit allowlist of platform integration ids exposed to end
+     * users (e.g. `['linear', 'slack']`). The end-user surface never defaults
+     * open: providers outside this set 404 on every mounted route.
+     */
+    providers: string[];
+    /**
+     * Derives the caller's end-user resource key per request. Defaults to the
+     * server-derived `MASTRA_RESOURCE_ID_KEY`, which `server.auth.mapUserToResourceId`
+     * populates after authentication. A request with no resolvable resource key
+     * (callback absent and key unset, callback returning a falsy value, or
+     * callback throwing) is rejected with 401 on every mounted route.
+     */
+    resourceId?: (ctx: UserConnectIdentityContext) => string | undefined | Promise<string | undefined>;
+    /** Mount prefix for every route. Default `/connect`. */
+    basePath?: string;
+    /** Platform project whose connections the routes act on. Falls back to MASTRA_PROJECT_ID. */
+    projectId?: string;
+    /** Platform client configuration. `client.resourceId` is rejected — the routes scope per request. */
+    client?: ConnectClientOptions;
+    returnTo?: {
+        /**
+         * Origins (e.g. `https://app.example.com`) allowed as absolute `returnTo`
+         * redirect targets on the hosted page. Relative paths are always allowed;
+         * everything else is rejected to keep the page free of open redirects.
+         */
+        allowedOrigins?: string[];
+    };
+}
+/**
+ * Validates a `returnTo` redirect target. Relative paths (`/done`) are always
+ * allowed; protocol-relative (`//host`), backslash tricks, and non-http(s)
+ * schemes are rejected; absolute URLs require their origin to be allowlisted.
+ */
+export declare function validateReturnTo(raw: string | undefined, allowedOrigins: string[]): {
+    ok: true;
+    value: string | null;
+} | {
+    ok: false;
+};
+/**
+ * Builds the mountable end-user connect surface as `ApiRoute[]` for
+ * `server.apiRoutes`. The routes do no authentication of their own — the
+ * server's auth pipeline authenticates the request and
+ * `server.auth.mapUserToResourceId` establishes the end-user resource key the
+ * routes are gated on. Every platform call happens server-side with the
+ * configured platform token; the browser only ever talks to these routes.
+ *
+ * ```ts
+ * server: {
+ *   auth: myAuth,
+ *   apiRoutes: [...userConnectRoutes({ providers: ['linear', 'slack'] })],
+ * }
+ * ```
+ */
+export declare function userConnectRoutes(options: UserConnectRoutesOptions): ApiRoute[];
+//# sourceMappingURL=user-connect-routes.d.ts.map

package/dist/user-connect-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-connect-routes.d.ts","sourceRoot":"","sources":["../src/user-connect-routes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAUpD,OAAO,KAAK,EAAE,oBAAoB,EAAqC,MAAM,aAAa,CAAC;AAI3F;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,2FAA2F;IAC3F,cAAc,CAAC,EAAE;QAAE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAC/C,qGAAqG;IACrG,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,wBAAwB;IACvC;;;;OAIG;IACH,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,0BAA0B,KAAK,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACnG,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6FAA6F;IAC7F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qGAAqG;IACrG,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,QAAQ,CAAC,EAAE;QACT;;;;WAIG;QACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;KAC3B,CAAC;CACH;AAoED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,cAAc,EAAE,MAAM,EAAE,GACvB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,CAkCpD;AAMD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,QAAQ,EAAE,CA2P/E"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mastra/connect",
-  "version": "1.1.0-alpha.3",
+  "version": "1.1.0-alpha.4",
   "description": "Use Mastra platform integration connections as agent toolsets",
   "type": "module",
   "main": "./dist/index.js",
@@ -56,16 +56,16 @@
     "typescript": "^7.0.2",
     "vitest": "4.1.11",
     "zod": "^4.6.7",
-    "@internal/types-builder": "0.0.119",
     "@internal/lint": "0.0.144",
-    "@mastra/core": "1.79.0-alpha.4"
+    "@internal/types-builder": "0.0.119",
+    "@mastra/core": "1.79.0-alpha.11"
   },
   "dependencies": {
-    "@mastra/mcp": "^2.5.0-alpha.1",
-    "@mastra/teams": "^0.1.2-alpha.1",
+    "@mastra/discord": "^1.3.1-alpha.1",
+    "@mastra/mcp": "^2.5.0-alpha.2",
     "@mastra/slack": "^1.7.3-alpha.0",
-    "@mastra/discord": "^1.3.1-alpha.0",
-    "@mastra/telegram": "^0.2.3-alpha.0"
+    "@mastra/telegram": "^0.2.3-alpha.1",
+    "@mastra/teams": "^0.1.2-alpha.2"
   },
   "scripts": {
     "add-provider": "tsx scripts/add-provider.ts",