@mastra/inngest 1.8.0-alpha.1 → 1.8.0

package/CHANGELOG.md

@@ -1,5 +1,92 @@
 # @mastra/inngest
 
+## 1.8.0
+
+### Minor Changes
+
+- Added support for the fine-grained authorization (FGA) `actor` signal on the Inngest execution engine. ([#18674](https://github.com/mastra-ai/mastra/pull/18674))
+
+  Workflows running on the Inngest engine can now pass a trusted `actor` through `run.start()`, `startAsync()`, `resume()`, `stream()`, and `timeTravel()`. The signal is re-threaded across durable step and nested-workflow boundaries, so every nested agent, tool, and memory FGA check sees the same actor. Previously `actor` was only threaded through the default engine, so trusted background workflows on Inngest lost the membership bypass at each step re-entry.
+
+  **Usage**
+
+  ```ts
+  const run = await workflow.createRun();
+  await run.start({
+    inputData,
+    requestContext, // includes organizationId / tenant scope
+    actor: { actorKind: 'system', sourceWorkflow: 'nightly-sync' },
+  });
+  ```
+
+- Bring `InngestAgent` (Inngest-backed durable agent) to parity with `DurableAgent` for per-call execution options, abort handling, idle-aware resume, and `generate()`. ([#18615](https://github.com/mastra-ai/mastra/pull/18615))
+
+  `InngestAgent.stream()` and `resume()` now accept the same execution-option surface as `DurableAgent`, including `stopWhen`, `activeTools`, `structuredOutput`, `versions`, `system`, `disableBackgroundTasks`, `tracingOptions`, `actor`, `transform`, `prepareStep`, `isTaskComplete`, `delegation`, function-form `requireToolApproval`, and the lifecycle callbacks `onAbort` / `onIterationComplete`. Closure-shaped options (`prepareStep`, `transform`, function-form `isTaskComplete` / `requireToolApproval`, `stopWhen` callbacks) continue to work in-process; they degrade after a worker hop the same way they do for in-memory `DurableAgent`.
+
+  ```ts
+  const result = await inngestAgent.stream(messages, {
+    runId: 'run-1',
+    abortSignal: controller.signal,
+    stopWhen: stepCountIs(5),
+    onIterationComplete: ({ iteration }) => console.log('done', iteration),
+  });
+
+  // Cancel a live run from the caller
+  result.abort();
+
+  // Resume and drive the run to completion in a single call
+  await inngestAgent.resume({ runId: 'run-1', resumeData, untilIdle: true });
+
+  // Durable equivalents of Agent.generate / resumeGenerate
+  const out = await inngestAgent.generate(messages, { runId: 'run-2' });
+  const resumed = await inngestAgent.resumeGenerate({ runId: 'run-2', resumeData });
+  ```
+
+  `@mastra/core` re-exports `globalRunRegistry` and `runResumeDurableStreamUntilIdle` from `@mastra/core/agent/durable` so durable-agent integrations can share the same registry and idle-wrapper plumbing.
+
+### Patch Changes
+
+- Fix `observe()` on Inngest durable agents so late subscribers replay buffered events before the live stream. ([#18535](https://github.com/mastra-ai/mastra/pull/18535))
+
+  Previously, calling `observe()` after a run had started — or reconnecting after a disconnect — only delivered chunks emitted from that moment on. Anything published earlier in the run was lost, including events from nested durable steps. `observe()` now replays the full history of `chunk`, `finish`, and `suspended` events for the requested `runId`, then continues on the live stream, matching the in-memory `DurableAgent` behavior.
+
+  ```ts
+  // First connection kicks off the run
+  await inngestAgent.stream(messages, { runId: 'run-1' });
+
+  // Second connection replays earlier events, then continues live
+  const { fullStream } = await inngestAgent.observe('run-1');
+  ```
+
+  When no cache is configured, an in-process cache is used as a fallback so single-process replay works out of the box. Cross-process `observe()` still requires a shared cache backend (e.g. Redis) passed via `cache` or `mastra.serverCache`.
+
+- Updated dependencies [[`b9a2961`](https://github.com/mastra-ai/mastra/commit/b9a2961c1be81e3639c0879e58588c26dd0ae866), [`b33c77d`](https://github.com/mastra-ai/mastra/commit/b33c77d5293f14a794f3ec38dc947a6676de2764), [`1274eb3`](https://github.com/mastra-ai/mastra/commit/1274eb3a9508f579ceb3187fbce34408222d4b71), [`cdd5f93`](https://github.com/mastra-ai/mastra/commit/cdd5f939cefa67390629704dce92563ccbf492b2), [`1274eb3`](https://github.com/mastra-ai/mastra/commit/1274eb3a9508f579ceb3187fbce34408222d4b71), [`0ac14ce`](https://github.com/mastra-ai/mastra/commit/0ac14cea48e1b0a7857782153c78f7242fdf7e1a), [`9566d27`](https://github.com/mastra-ai/mastra/commit/9566d27ead3d95bdbe5a69e5a082a68222829cf2), [`8be63b0`](https://github.com/mastra-ai/mastra/commit/8be63b015fb8d72cea1220f05e7dc3bb997cc249), [`1009f77`](https://github.com/mastra-ai/mastra/commit/1009f772aa40016b49267c8566d0c29f6a16aa3c), [`1b8728a`](https://github.com/mastra-ai/mastra/commit/1b8728a57fd844205a452b0b4216d20ff60c784a), [`23c31de`](https://github.com/mastra-ai/mastra/commit/23c31de96ed8153402dcf092ac84b27a0c3638c1), [`0368766`](https://github.com/mastra-ai/mastra/commit/0368766744c7ea3df4d6059e2cc15f7bdf55f5a6), [`6f578ac`](https://github.com/mastra-ai/mastra/commit/6f578acba84930b406b2a0700b17cfdfaf5aae56), [`345eecc`](https://github.com/mastra-ai/mastra/commit/345eecce6ba519b5d987f0e10b5de4c8e5734580), [`1917c53`](https://github.com/mastra-ai/mastra/commit/1917c53b19dac43926f29c496893b0686462dca4), [`c01012f`](https://github.com/mastra-ai/mastra/commit/c01012f50368d29eb3fc3764df42d48291973d23), [`705ba98`](https://github.com/mastra-ai/mastra/commit/705ba98726d388a596e896225f237907ca6807a9), [`95857bc`](https://github.com/mastra-ai/mastra/commit/95857bcd6669da7193f503e803f0d72a2bd66be6), [`e62c108`](https://github.com/mastra-ai/mastra/commit/e62c108409dfd6a6cac0a48ec39c5cc81d24fd52), [`2866f04`](https://github.com/mastra-ai/mastra/commit/2866f04953edb78c1637fa45cc53abe24122edcb), [`ee14cae`](https://github.com/mastra-ai/mastra/commit/ee14cae244805783bde518a6142de28b744b169c), [`e84e791`](https://github.com/mastra-ai/mastra/commit/e84e79174031d7bc8793ca6c805eb38b06e7cfb1), [`c2f0b7f`](https://github.com/mastra-ai/mastra/commit/c2f0b7f1370f4428d165f51f0d1d9a48331cc257), [`213feb8`](https://github.com/mastra-ai/mastra/commit/213feb87bfdd1d8ec00ea660e218f9bcfcb34e7b), [`58e287b`](https://github.com/mastra-ai/mastra/commit/58e287b1edaf978b13745a1795989cad3826e82b), [`e420b3c`](https://github.com/mastra-ai/mastra/commit/e420b3c3ffc98bbc5b791897ea390bb47af99696), [`be875ed`](https://github.com/mastra-ai/mastra/commit/be875ed43f856742ce58529f531b5ea0ae6911f3), [`9eefdc0`](https://github.com/mastra-ai/mastra/commit/9eefdc0ac03f989718c6d835334940a977938895), [`bfbbb01`](https://github.com/mastra-ai/mastra/commit/bfbbb01bd845ba54cdc0c678c277d08a7cb847e4), [`7d112ca`](https://github.com/mastra-ai/mastra/commit/7d112ca17078479b2659b88ba1c85b936cfc111c)]:
+  - @mastra/core@1.48.0
+
+## 1.8.0-alpha.2
+
+### Minor Changes
+
+- Added support for the fine-grained authorization (FGA) `actor` signal on the Inngest execution engine. ([#18674](https://github.com/mastra-ai/mastra/pull/18674))
+
+  Workflows running on the Inngest engine can now pass a trusted `actor` through `run.start()`, `startAsync()`, `resume()`, `stream()`, and `timeTravel()`. The signal is re-threaded across durable step and nested-workflow boundaries, so every nested agent, tool, and memory FGA check sees the same actor. Previously `actor` was only threaded through the default engine, so trusted background workflows on Inngest lost the membership bypass at each step re-entry.
+
+  **Usage**
+
+  ```ts
+  const run = await workflow.createRun();
+  await run.start({
+    inputData,
+    requestContext, // includes organizationId / tenant scope
+    actor: { actorKind: 'system', sourceWorkflow: 'nightly-sync' },
+  });
+  ```
+
+### Patch Changes
+
+- Updated dependencies [[`8be63b0`](https://github.com/mastra-ai/mastra/commit/8be63b015fb8d72cea1220f05e7dc3bb997cc249), [`345eecc`](https://github.com/mastra-ai/mastra/commit/345eecce6ba519b5d987f0e10b5de4c8e5734580), [`ee14cae`](https://github.com/mastra-ai/mastra/commit/ee14cae244805783bde518a6142de28b744b169c)]:
+  - @mastra/core@1.48.0-alpha.7
+
 ## 1.8.0-alpha.1
 
 ### Minor Changes

package/dist/{chunk-5BEMBEWN.js → chunk-6AX2K2MQ.js}

@@ -270,7 +270,8 @@ var InngestExecutionEngine = class extends DefaultExecutionEngine {
       pubsub,
       startedAt,
       perStep,
-      stepSpan
+      stepSpan,
+      actor
     } = params;
     const nestedTracingContext = executionContext.tracingIds?.traceId ? {
       traceId: executionContext.tracingIds.traceId,
@@ -303,7 +304,8 @@ var InngestExecutionEngine = class extends DefaultExecutionEngine {
             },
             outputOptions: { includeState: true },
             perStep,
-            tracingOptions: nestedTracingContext
+            tracingOptions: nestedTracingContext,
+            actor
           }
         });
         result = invokeResp.result;
@@ -332,7 +334,8 @@ var InngestExecutionEngine = class extends DefaultExecutionEngine {
             runId: executionContext.runId,
             outputOptions: { includeState: true },
             perStep,
-            tracingOptions: nestedTracingContext
+            tracingOptions: nestedTracingContext,
+            actor
           }
         });
         result = invokeResp.result;
@@ -346,7 +349,8 @@ var InngestExecutionEngine = class extends DefaultExecutionEngine {
             initialState: executionContext.state ?? {},
             outputOptions: { includeState: true },
             perStep,
-            tracingOptions: nestedTracingContext
+            tracingOptions: nestedTracingContext,
+            actor
           }
         });
         result = invokeResp.result;
@@ -864,6 +868,7 @@ var InngestRun = class extends Run {
         outputOptions: args.outputOptions,
         tracingOptions: args.tracingOptions,
         requestContext: args.requestContext ? Object.fromEntries(args.requestContext.entries()) : {},
+        actor: args.actor,
         perStep: args.perStep
       }
     });
@@ -880,6 +885,7 @@ var InngestRun = class extends Run {
     tracingOptions,
     format,
     requestContext,
+    actor,
     perStep
   }) {
     const workflowsStore = await this.#mastra.getStorage()?.getStore("workflows");
@@ -915,6 +921,7 @@ var InngestRun = class extends Run {
         tracingOptions,
         format,
         requestContext: requestContext ? Object.fromEntries(requestContext.entries()) : {},
+        actor,
         perStep
       }
     });
@@ -1011,6 +1018,13 @@ var InngestRun = class extends Run {
             resumePath: steps?.[0] ? snapshot?.suspendedPaths?.[steps?.[0]] : void 0
           },
           requestContext: mergedRequestContext,
+          // `actor` is a per-call trust signal, not rehydrated from the snapshot like
+          // `requestContext` is above. This intentionally matches the default engine,
+          // which passes `actor: params.actor` on resume and never reads it from the
+          // snapshot (see packages/core/src/workflows/workflow.ts `_resume`). The caller
+          // (a trusted background system) re-supplies `actor` on each resume; we never
+          // persist a membership-bypass signal into durable storage.
+          actor: params.actor,
           perStep: params.perStep
         }
       });
@@ -1167,6 +1181,7 @@ var InngestRun = class extends Run {
           tracingOptions: params.tracingOptions,
           outputOptions: params.outputOptions,
           requestContext: params.requestContext ? Object.fromEntries(params.requestContext.entries()) : {},
+          actor: params.actor,
           perStep: params.perStep
         }
       });
@@ -1220,7 +1235,11 @@ var InngestRun = class extends Run {
       });
     };
   }
-  streamLegacy({ inputData, requestContext } = {}) {
+  streamLegacy({
+    inputData,
+    requestContext,
+    actor
+  } = {}) {
     const { readable, writable } = new TransformStream();
     const writer = writable.getWriter();
     void writer.write({
@@ -1257,7 +1276,7 @@ var InngestRun = class extends Run {
         writer.releaseLock();
       }
     };
-    this.executionResults = this._start({ inputData, requestContext, format: "legacy" }).then((result) => {
+    this.executionResults = this._start({ inputData, requestContext, actor, format: "legacy" }).then((result) => {
       if (result.status !== "suspended") {
         this.closeStreamAction?.().catch(() => {
         });
@@ -1272,6 +1291,7 @@ var InngestRun = class extends Run {
   stream({
     inputData,
     requestContext,
+    actor,
     tracingOptions,
     closeOnSuspend = true,
     initialState,
@@ -1308,6 +1328,7 @@ var InngestRun = class extends Run {
         const executionResultsPromise = self._start({
           inputData,
           requestContext,
+          actor,
           // tracingContext, // We are not able to pass a reference to a span here, what to do?
           initialState,
           tracingOptions,
@@ -1352,6 +1373,7 @@ var InngestRun = class extends Run {
     context,
     nestedStepsContext,
     requestContext,
+    actor,
     // tracingContext,
     tracingOptions,
     outputOptions,
@@ -1389,6 +1411,7 @@ var InngestRun = class extends Run {
           resumeData,
           initialState,
           requestContext,
+          actor,
           tracingOptions,
           outputOptions,
           perStep
@@ -1635,7 +1658,8 @@ var InngestWorkflow = class _InngestWorkflow extends Workflow {
           format,
           timeTravel,
           perStep,
-          tracingOptions
+          tracingOptions,
+          actor
         } = event.data;
         if (!runId) {
           runId = await step.run(`workflow.${this.id}.runIdGen`, async () => {
@@ -1681,6 +1705,7 @@ var InngestWorkflow = class _InngestWorkflow extends Workflow {
             pubsub,
             retryConfig: this.retryConfig,
             requestContext,
+            actor,
             resume,
             timeTravel,
             perStep,
@@ -1906,5 +1931,5 @@ async function connect(options) {
 }
 
 export { InngestExecutionEngine, InngestPubSub, InngestRun, InngestWorkflow, collectInngestFunctions, connect };
-//# sourceMappingURL=chunk-5BEMBEWN.js.map
-//# sourceMappingURL=chunk-5BEMBEWN.js.map
+//# sourceMappingURL=chunk-6AX2K2MQ.js.map
+//# sourceMappingURL=chunk-6AX2K2MQ.js.map