@mastra/hono 0.0.0-trace-timeline-update-20251121114225 → 0.0.0-unified-workspace-snapshot-20260128233410

package/dist/index.cjs

@@ -1,19 +1,31 @@
 'use strict';
 
-var store = require('@mastra/server/a2a/store');
+var error = require('@mastra/server/handlers/error');
 var serverAdapter = require('@mastra/server/server-adapter');
+var fetchToNode = require('fetch-to-node');
+var auth = require('@mastra/server/auth');
 
 // src/index.ts
 
-// ../../node_modules/.pnpm/hono@4.10.4/node_modules/hono/dist/http-exception.js
+// ../../node_modules/.pnpm/hono@4.11.3/node_modules/hono/dist/http-exception.js
 var HTTPException = class extends Error {
   res;
   status;
+  /**
+   * Creates an instance of `HTTPException`.
+   * @param status - HTTP status code for the exception. Defaults to 500.
+   * @param options - Additional options for the exception.
+   */
   constructor(status = 500, options) {
     super(options?.message, { cause: options?.cause });
     this.res = options?.res;
     this.status = status;
   }
+  /**
+   * Returns the response object associated with the exception.
+   * If a response object is not provided, a new response is created with the error message and status code.
+   * @returns The response object.
+   */
   getResponse() {
     if (this.res) {
       const newResponse = new Response(this.res.body, {
@@ -28,7 +40,7 @@ var HTTPException = class extends Error {
   }
 };
 
-// ../../node_modules/.pnpm/hono@4.10.4/node_modules/hono/dist/middleware/body-limit/index.js
+// ../../node_modules/.pnpm/hono@4.11.3/node_modules/hono/dist/middleware/body-limit/index.js
 var ERROR_MESSAGE = "Payload Too Large";
 var BodyLimitError = class extends Error {
   constructor(message) {
@@ -85,14 +97,20 @@ var bodyLimit = (options) => {
   };
 };
 
-// ../../node_modules/.pnpm/hono@4.10.4/node_modules/hono/dist/utils/stream.js
+// ../../node_modules/.pnpm/hono@4.11.3/node_modules/hono/dist/utils/stream.js
 var StreamingApi = class {
   writer;
   encoder;
   writable;
   abortSubscribers = [];
   responseReadable;
+  /**
+   * Whether the stream has been aborted.
+   */
   aborted = false;
+  /**
+   * Whether the stream has been closed normally.
+   */
   closed = false;
   constructor(writable, _readable) {
     this.writable = writable;
@@ -144,6 +162,10 @@ var StreamingApi = class {
   onAbort(listener) {
     this.abortSubscribers.push(listener);
   }
+  /**
+   * Abort the stream.
+   * You can call this method when stream is aborted by external event.
+   */
   abort() {
     if (!this.aborted) {
       this.aborted = true;
@@ -152,7 +174,7 @@ var StreamingApi = class {
   }
 };
 
-// ../../node_modules/.pnpm/hono@4.10.4/node_modules/hono/dist/helper/streaming/utils.js
+// ../../node_modules/.pnpm/hono@4.11.3/node_modules/hono/dist/helper/streaming/utils.js
 var isOldBunVersion = () => {
   const version = typeof Bun !== "undefined" ? Bun.version : void 0;
   if (version === void 0) {
@@ -163,7 +185,7 @@ var isOldBunVersion = () => {
   return result;
 };
 
-// ../../node_modules/.pnpm/hono@4.10.4/node_modules/hono/dist/helper/streaming/stream.js
+// ../../node_modules/.pnpm/hono@4.11.3/node_modules/hono/dist/helper/streaming/stream.js
 var contextStash = /* @__PURE__ */ new WeakMap();
 var stream = (c, cb, onError) => {
   const { readable, writable } = new TransformStream();
@@ -192,27 +214,318 @@ var stream = (c, cb, onError) => {
   return c.newResponse(stream2.responseReadable);
 };
 
-// src/index.ts
-var HonoServerAdapter = class extends serverAdapter.MastraServerAdapter {
-  taskStore;
-  customRouteAuthConfig;
-  playground;
-  isDev;
-  constructor({
-    mastra,
-    tools,
-    taskStore,
-    customRouteAuthConfig,
-    playground,
-    isDev,
-    bodyLimitOptions
-  }) {
-    super({ mastra, bodyLimitOptions, tools });
-    this.taskStore = taskStore || new store.InMemoryTaskStore();
-    this.customRouteAuthConfig = customRouteAuthConfig;
-    this.playground = playground;
-    this.isDev = isDev;
+// ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/util.js
+var util;
+(function(util2) {
+  util2.assertEqual = (_) => {
+  };
+  function assertIs(_arg) {
+  }
+  util2.assertIs = assertIs;
+  function assertNever(_x) {
+    throw new Error();
+  }
+  util2.assertNever = assertNever;
+  util2.arrayToEnum = (items) => {
+    const obj = {};
+    for (const item of items) {
+      obj[item] = item;
+    }
+    return obj;
+  };
+  util2.getValidEnumValues = (obj) => {
+    const validKeys = util2.objectKeys(obj).filter((k) => typeof obj[obj[k]] !== "number");
+    const filtered = {};
+    for (const k of validKeys) {
+      filtered[k] = obj[k];
+    }
+    return util2.objectValues(filtered);
+  };
+  util2.objectValues = (obj) => {
+    return util2.objectKeys(obj).map(function(e) {
+      return obj[e];
+    });
+  };
+  util2.objectKeys = typeof Object.keys === "function" ? (obj) => Object.keys(obj) : (object) => {
+    const keys = [];
+    for (const key in object) {
+      if (Object.prototype.hasOwnProperty.call(object, key)) {
+        keys.push(key);
+      }
+    }
+    return keys;
+  };
+  util2.find = (arr, checker) => {
+    for (const item of arr) {
+      if (checker(item))
+        return item;
+    }
+    return void 0;
+  };
+  util2.isInteger = typeof Number.isInteger === "function" ? (val) => Number.isInteger(val) : (val) => typeof val === "number" && Number.isFinite(val) && Math.floor(val) === val;
+  function joinValues(array, separator = " | ") {
+    return array.map((val) => typeof val === "string" ? `'${val}'` : val).join(separator);
+  }
+  util2.joinValues = joinValues;
+  util2.jsonStringifyReplacer = (_, value) => {
+    if (typeof value === "bigint") {
+      return value.toString();
+    }
+    return value;
+  };
+})(util || (util = {}));
+var objectUtil;
+(function(objectUtil2) {
+  objectUtil2.mergeShapes = (first, second) => {
+    return {
+      ...first,
+      ...second
+      // second overwrites first
+    };
+  };
+})(objectUtil || (objectUtil = {}));
+util.arrayToEnum([
+  "string",
+  "nan",
+  "number",
+  "integer",
+  "float",
+  "boolean",
+  "date",
+  "bigint",
+  "symbol",
+  "function",
+  "undefined",
+  "null",
+  "array",
+  "object",
+  "unknown",
+  "promise",
+  "void",
+  "never",
+  "map",
+  "set"
+]);
+
+// ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/ZodError.js
+util.arrayToEnum([
+  "invalid_type",
+  "invalid_literal",
+  "custom",
+  "invalid_union",
+  "invalid_union_discriminator",
+  "invalid_enum_value",
+  "unrecognized_keys",
+  "invalid_arguments",
+  "invalid_return_type",
+  "invalid_date",
+  "invalid_string",
+  "too_small",
+  "too_big",
+  "invalid_intersection_types",
+  "not_multiple_of",
+  "not_finite"
+]);
+var ZodError = class _ZodError extends Error {
+  get errors() {
+    return this.issues;
+  }
+  constructor(issues) {
+    super();
+    this.issues = [];
+    this.addIssue = (sub) => {
+      this.issues = [...this.issues, sub];
+    };
+    this.addIssues = (subs = []) => {
+      this.issues = [...this.issues, ...subs];
+    };
+    const actualProto = new.target.prototype;
+    if (Object.setPrototypeOf) {
+      Object.setPrototypeOf(this, actualProto);
+    } else {
+      this.__proto__ = actualProto;
+    }
+    this.name = "ZodError";
+    this.issues = issues;
+  }
+  format(_mapper) {
+    const mapper = _mapper || function(issue) {
+      return issue.message;
+    };
+    const fieldErrors = { _errors: [] };
+    const processError = (error) => {
+      for (const issue of error.issues) {
+        if (issue.code === "invalid_union") {
+          issue.unionErrors.map(processError);
+        } else if (issue.code === "invalid_return_type") {
+          processError(issue.returnTypeError);
+        } else if (issue.code === "invalid_arguments") {
+          processError(issue.argumentsError);
+        } else if (issue.path.length === 0) {
+          fieldErrors._errors.push(mapper(issue));
+        } else {
+          let curr = fieldErrors;
+          let i = 0;
+          while (i < issue.path.length) {
+            const el = issue.path[i];
+            const terminal = i === issue.path.length - 1;
+            if (!terminal) {
+              curr[el] = curr[el] || { _errors: [] };
+            } else {
+              curr[el] = curr[el] || { _errors: [] };
+              curr[el]._errors.push(mapper(issue));
+            }
+            curr = curr[el];
+            i++;
+          }
+        }
+      }
+    };
+    processError(this);
+    return fieldErrors;
+  }
+  static assert(value) {
+    if (!(value instanceof _ZodError)) {
+      throw new Error(`Not a ZodError: ${value}`);
+    }
+  }
+  toString() {
+    return this.message;
+  }
+  get message() {
+    return JSON.stringify(this.issues, util.jsonStringifyReplacer, 2);
+  }
+  get isEmpty() {
+    return this.issues.length === 0;
+  }
+  flatten(mapper = (issue) => issue.message) {
+    const fieldErrors = {};
+    const formErrors = [];
+    for (const sub of this.issues) {
+      if (sub.path.length > 0) {
+        const firstEl = sub.path[0];
+        fieldErrors[firstEl] = fieldErrors[firstEl] || [];
+        fieldErrors[firstEl].push(mapper(sub));
+      } else {
+        formErrors.push(mapper(sub));
+      }
+    }
+    return { formErrors, fieldErrors };
+  }
+  get formErrors() {
+    return this.flatten();
+  }
+};
+ZodError.create = (issues) => {
+  const error = new ZodError(issues);
+  return error;
+};
+var authenticationMiddleware = async (c, next) => {
+  const mastra = c.get("mastra");
+  const authConfig = mastra.getServer()?.auth;
+  const customRouteAuthConfig = c.get("customRouteAuthConfig");
+  if (!authConfig) {
+    return next();
+  }
+  const path = c.req.path;
+  const method = c.req.method;
+  const getHeader = (name) => c.req.header(name);
+  if (auth.isDevPlaygroundRequest(path, method, getHeader, authConfig, customRouteAuthConfig)) {
+    return next();
+  }
+  if (!auth.isProtectedPath(c.req.path, c.req.method, authConfig, customRouteAuthConfig)) {
+    return next();
+  }
+  if (auth.canAccessPublicly(c.req.path, c.req.method, authConfig)) {
+    return next();
+  }
+  const authHeader = c.req.header("Authorization");
+  let token = authHeader ? authHeader.replace("Bearer ", "") : null;
+  if (!token && c.req.query("apiKey")) {
+    token = c.req.query("apiKey") || null;
+  }
+  if (!token) {
+    return c.json({ error: "Authentication required" }, 401);
+  }
+  try {
+    let user;
+    if (typeof authConfig.authenticateToken === "function") {
+      user = await authConfig.authenticateToken(token, c.req);
+    } else {
+      throw new Error("No token verification method configured");
+    }
+    if (!user) {
+      return c.json({ error: "Invalid or expired token" }, 401);
+    }
+    c.get("requestContext").set("user", user);
+    return next();
+  } catch (err) {
+    console.error(err);
+    return c.json({ error: "Invalid or expired token" }, 401);
+  }
+};
+var authorizationMiddleware = async (c, next) => {
+  const mastra = c.get("mastra");
+  const authConfig = mastra.getServer()?.auth;
+  const customRouteAuthConfig = c.get("customRouteAuthConfig");
+  if (!authConfig) {
+    return next();
   }
+  const path = c.req.path;
+  const method = c.req.method;
+  const getHeader = (name) => c.req.header(name);
+  if (auth.isDevPlaygroundRequest(path, method, getHeader, authConfig, customRouteAuthConfig)) {
+    return next();
+  }
+  if (!auth.isProtectedPath(c.req.path, c.req.method, authConfig, customRouteAuthConfig)) {
+    return next();
+  }
+  if (auth.canAccessPublicly(path, method, authConfig)) {
+    return next();
+  }
+  const user = c.get("requestContext").get("user");
+  if ("authorizeUser" in authConfig && typeof authConfig.authorizeUser === "function") {
+    try {
+      const isAuthorized = await authConfig.authorizeUser(user, c.req);
+      if (isAuthorized) {
+        return next();
+      }
+      return c.json({ error: "Access denied" }, 403);
+    } catch (err) {
+      console.error(err);
+      return c.json({ error: "Authorization error" }, 500);
+    }
+  }
+  if ("authorize" in authConfig && typeof authConfig.authorize === "function") {
+    try {
+      const isAuthorized = await authConfig.authorize(path, method, user, c);
+      if (isAuthorized) {
+        return next();
+      }
+      return c.json({ error: "Access denied" }, 403);
+    } catch (err) {
+      console.error(err);
+      return c.json({ error: "Authorization error" }, 500);
+    }
+  }
+  if ("rules" in authConfig && authConfig.rules && authConfig.rules.length > 0) {
+    const isAuthorized = await auth.checkRules(authConfig.rules, path, method, user);
+    if (isAuthorized) {
+      return next();
+    }
+    return c.json({ error: "Access denied" }, 403);
+  }
+  if (auth.defaultAuthConfig.rules && auth.defaultAuthConfig.rules.length > 0) {
+    const isAuthorized = await auth.checkRules(auth.defaultAuthConfig.rules, path, method, user);
+    if (isAuthorized) {
+      return next();
+    }
+  }
+  return c.json({ error: "Access denied" }, 403);
+};
+
+// src/index.ts
+var MastraServer = class extends serverAdapter.MastraServer {
   createContextMiddleware() {
     return async (c, next) => {
       let bodyRequestContext;
@@ -250,12 +563,10 @@ var HonoServerAdapter = class extends serverAdapter.MastraServerAdapter {
       const requestContext = this.mergeRequestContext({ paramsRequestContext, bodyRequestContext });
       c.set("requestContext", requestContext);
       c.set("mastra", this.mastra);
-      c.set("tools", this.tools || {});
+      c.set("registeredTools", this.tools || {});
       c.set("taskStore", this.taskStore);
-      c.set("playground", this.playground === true);
-      c.set("isDev", this.isDev === true);
-      c.set("customRouteAuthConfig", this.customRouteAuthConfig);
       c.set("abortSignal", c.req.raw.signal);
+      c.set("customRouteAuthConfig", this.customRouteAuthConfig);
       return next();
     };
   }
@@ -276,12 +587,14 @@ var HonoServerAdapter = class extends serverAdapter.MastraServerAdapter {
             const { done, value } = await reader.read();
             if (done) break;
             if (value) {
+              const shouldRedact = this.streamOptions?.redact ?? true;
+              const outputValue = shouldRedact ? serverAdapter.redactStreamChunk(value) : value;
               if (streamFormat === "sse") {
-                await stream2.write(`data: ${JSON.stringify(value)}
+                await stream2.write(`data: ${JSON.stringify(outputValue)}
 
 `);
               } else {
-                await stream2.write(JSON.stringify(value) + "");
+                await stream2.write(JSON.stringify(outputValue) + "");
               }
             }
           }
@@ -299,17 +612,64 @@ var HonoServerAdapter = class extends serverAdapter.MastraServerAdapter {
   }
   async getParams(route, request) {
     const urlParams = request.param();
-    const queryParams = request.query();
+    const queryParams = serverAdapter.normalizeQueryParams(request.queries());
     let body;
+    let bodyParseError;
     if (route.method === "POST" || route.method === "PUT" || route.method === "PATCH") {
-      try {
-        body = await request.json();
-      } catch {
+      const contentType = request.header("content-type") || "";
+      if (contentType.includes("multipart/form-data")) {
+        try {
+          const formData = await request.formData();
+          body = await this.parseFormData(formData);
+        } catch (error) {
+          console.error("Failed to parse multipart form data:", error);
+          if (error instanceof Error && error.message.toLowerCase().includes("size")) {
+            throw error;
+          }
+          bodyParseError = {
+            message: error instanceof Error ? error.message : "Failed to parse multipart form data"
+          };
+        }
+      } else if (contentType.includes("application/json")) {
+        const clonedReq = request.raw.clone();
+        const bodyText = await clonedReq.text();
+        if (bodyText && bodyText.trim().length > 0) {
+          try {
+            body = JSON.parse(bodyText);
+          } catch (error) {
+            console.error("Failed to parse JSON body:", error);
+            bodyParseError = {
+              message: error instanceof Error ? error.message : "Invalid JSON in request body"
+            };
+          }
+        }
+      }
+    }
+    return { urlParams, queryParams, body, bodyParseError };
+  }
+  /**
+   * Parse FormData into a plain object, converting File objects to Buffers.
+   */
+  async parseFormData(formData) {
+    const result = {};
+    for (const [key, value] of formData.entries()) {
+      if (value instanceof File) {
+        const arrayBuffer = await value.arrayBuffer();
+        result[key] = Buffer.from(arrayBuffer);
+      } else if (typeof value === "string") {
+        try {
+          result[key] = JSON.parse(value);
+        } catch {
+          result[key] = value;
+        }
+      } else {
+        result[key] = value;
       }
     }
-    return { urlParams, queryParams, body };
+    return result;
   }
-  async sendResponse(route, response, result) {
+  async sendResponse(route, response, result, prefix) {
+    const resolvedPrefix = prefix ?? this.prefix ?? "";
     if (route.responseType === "json") {
       return response.json(result, 200);
     } else if (route.responseType === "stream") {
@@ -317,11 +677,51 @@ var HonoServerAdapter = class extends serverAdapter.MastraServerAdapter {
     } else if (route.responseType === "datastream-response") {
       const fetchResponse = result;
       return fetchResponse;
+    } else if (route.responseType === "mcp-http") {
+      const { server, httpPath, mcpOptions: routeMcpOptions } = result;
+      const { req, res } = fetchToNode.toReqRes(response.req.raw);
+      try {
+        const options = { ...this.mcpOptions, ...routeMcpOptions };
+        await server.startHTTP({
+          url: new URL(response.req.url),
+          httpPath: `${resolvedPrefix}${httpPath}`,
+          req,
+          res,
+          options: Object.keys(options).length > 0 ? options : void 0
+        });
+        return await fetchToNode.toFetchResponse(res);
+      } catch {
+        if (!res.headersSent) {
+          res.writeHead(500, { "Content-Type": "application/json" });
+          res.end(
+            JSON.stringify({
+              jsonrpc: "2.0",
+              error: { code: -32603, message: "Internal server error" },
+              id: null
+            })
+          );
+          return await fetchToNode.toFetchResponse(res);
+        }
+        return await fetchToNode.toFetchResponse(res);
+      }
+    } else if (route.responseType === "mcp-sse") {
+      const { server, ssePath, messagePath } = result;
+      try {
+        return await server.startHonoSSE({
+          url: new URL(response.req.url),
+          ssePath: `${resolvedPrefix}${ssePath}`,
+          messagePath: `${resolvedPrefix}${messagePath}`,
+          context: response
+        });
+      } catch {
+        return response.json({ error: "Error handling MCP SSE request" }, 500);
+      }
     } else {
       return response.status(500);
     }
   }
-  async registerRoute(app, route, { prefix }) {
+  async registerRoute(app, route, { prefix: prefixParam } = {}) {
+    const prefix = prefixParam ?? this.prefix ?? "";
     const shouldApplyBodyLimit = this.bodyLimitOptions && ["POST", "PUT", "PATCH"].includes(route.method.toUpperCase());
     const maxSize = route.maxBodySize ?? this.bodyLimitOptions?.maxSize;
     const middlewares = [];
@@ -337,16 +737,38 @@ var HonoServerAdapter = class extends serverAdapter.MastraServerAdapter {
       `${prefix}${route.path}`,
       ...middlewares,
       async (c) => {
+        const authError = await this.checkRouteAuth(route, {
+          path: c.req.path,
+          method: c.req.method,
+          getHeader: (name) => c.req.header(name),
+          getQuery: (name) => c.req.query(name),
+          requestContext: c.get("requestContext")
+        });
+        if (authError) {
+          return c.json({ error: authError.error }, authError.status);
+        }
         const params = await this.getParams(route, c.req);
+        if (params.bodyParseError) {
+          return c.json(
+            {
+              error: "Invalid request body",
+              issues: [{ field: "body", message: params.bodyParseError.message }]
+            },
+            400
+          );
+        }
         if (params.queryParams) {
           try {
             params.queryParams = await this.parseQueryParams(route, params.queryParams);
-          } catch (error) {
-            console.error("Error parsing query params", error);
+          } catch (error$1) {
+            console.error("Error parsing query params", error$1);
+            if (error$1 instanceof ZodError) {
+              return c.json(error.formatZodError(error$1, "query parameters"), 400);
+            }
             return c.json(
               {
                 error: "Invalid query parameters",
-                details: error instanceof Error ? error.message : "Unknown error"
+                issues: [{ field: "unknown", message: error$1 instanceof Error ? error$1.message : "Unknown error" }]
               },
               400
             );
@@ -355,12 +777,15 @@ var HonoServerAdapter = class extends serverAdapter.MastraServerAdapter {
         if (params.body) {
           try {
             params.body = await this.parseBody(route, params.body);
-          } catch (error) {
-            console.error("Error parsing body", error);
+          } catch (error$1) {
+            console.error("Error parsing body:", error$1 instanceof Error ? error$1.message : String(error$1));
+            if (error$1 instanceof ZodError) {
+              return c.json(error.formatZodError(error$1, "request body"), 400);
+            }
             return c.json(
               {
                 error: "Invalid request body",
-                details: error instanceof Error ? error.message : "Unknown error"
+                issues: [{ field: "unknown", message: error$1 instanceof Error ? error$1.message : "Unknown error" }]
               },
               400
             );
@@ -372,13 +797,14 @@ var HonoServerAdapter = class extends serverAdapter.MastraServerAdapter {
           ...typeof params.body === "object" ? params.body : {},
           requestContext: c.get("requestContext"),
           mastra: this.mastra,
-          tools: c.get("tools"),
+          registeredTools: c.get("registeredTools"),
           taskStore: c.get("taskStore"),
-          abortSignal: c.get("abortSignal")
+          abortSignal: c.get("abortSignal"),
+          routePrefix: prefix
         };
         try {
           const result = await route.handler(handlerParams);
-          return this.sendResponse(route, c, result);
+          return this.sendResponse(route, c, result, prefix);
         } catch (error) {
           console.error("Error calling handler", error);
           if (error && typeof error === "object") {
@@ -396,14 +822,19 @@ var HonoServerAdapter = class extends serverAdapter.MastraServerAdapter {
       }
     );
   }
-  registerContextMiddleware(app) {
-    app.use("*", this.createContextMiddleware());
+  registerContextMiddleware() {
+    this.app.use("*", this.createContextMiddleware());
   }
-  async registerRoutes(app, { prefix, openapiPath }) {
-    await super.registerRoutes(app, { prefix, openapiPath });
+  registerAuthMiddleware() {
+    const authConfig = this.mastra.getServer()?.auth;
+    if (!authConfig) {
+      return;
+    }
+    this.app.use("*", authenticationMiddleware);
+    this.app.use("*", authorizationMiddleware);
   }
 };
 
-exports.HonoServerAdapter = HonoServerAdapter;
+exports.MastraServer = MastraServer;
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map