@mastra/deployer 1.32.0-alpha.1 → 1.32.0-alpha.2

package/dist/server/index.js

@@ -12,7 +12,7 @@ import { existsSync, createReadStream, statSync } from 'fs';
 import { versions } from 'process';
 import { html } from 'hono/html';
 import { Tool } from '@mastra/core/tools';
-import { MastraServer as MastraServer$1, normalizeQueryParams, redactStreamChunk } from '@mastra/server/server-adapter';
+import { MastraServer as MastraServer$1, normalizeQueryParams, checkRouteFGA, redactStreamChunk } from '@mastra/server/server-adapter';
 import util from 'util';
 import { Buffer as Buffer$1 } from 'buffer';
 import { ViewerRegistry, handleInputMessage } from '@mastra/server/browser-stream';
@@ -3605,6 +3605,14 @@ var MastraServer = class extends MastraServer$1 {
             }
           }
         }
+        const fgaError = await checkRouteFGA(this.mastra, route, c.get("requestContext"), {
+          ...params.urlParams,
+          ...params.queryParams,
+          ...typeof params.body === "object" ? params.body : {}
+        });
+        if (fgaError) {
+          return c.json({ error: fgaError.error, message: fgaError.message }, fgaError.status);
+        }
         try {
           const result = await route.handler(handlerParams);
           return this.sendResponse(route, c, result, prefix);
@@ -3653,7 +3661,9 @@ var MastraServer = class extends MastraServer$1 {
         responseType: "json",
         handler: async () => {
         },
-        requiresAuth: route.requiresAuth
+        requiresAuth: route.requiresAuth,
+        requiresPermission: route.requiresPermission,
+        fga: route.fga
       };
       const routeHandler = async (c) => {
         const authError = await this.checkRouteAuth(serverRoute, {
@@ -3689,6 +3699,32 @@ var MastraServer = class extends MastraServer$1 {
             }
           }
         }
+        let bodyParams = {};
+        const contentType = c.req.header("content-type");
+        if (contentType?.includes("application/json")) {
+          try {
+            const body = await c.req.raw.clone().json();
+            if (body && typeof body === "object" && !Array.isArray(body)) {
+              bodyParams = body;
+            }
+          } catch {
+            bodyParams = {};
+          }
+        } else if (contentType?.includes("application/x-www-form-urlencoded") || contentType?.includes("multipart/form-data")) {
+          try {
+            bodyParams = Object.fromEntries(await c.req.raw.clone().formData());
+          } catch {
+            bodyParams = {};
+          }
+        }
+        const fgaError = await checkRouteFGA(this.mastra, serverRoute, c.get("requestContext"), {
+          ...c.req.param(),
+          ...Object.fromEntries(new URL(c.req.url).searchParams.entries()),
+          ...bodyParams
+        });
+        if (fgaError) {
+          return c.json({ error: fgaError.error, message: fgaError.message }, fgaError.status);
+        }
         const reqHeaders = {};
         c.req.raw.headers.forEach((v, k) => {
           reqHeaders[k] = v;