@mastra/nestjs 0.2.29 → 0.2.30-alpha.1

package/dist/mastra.module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mastra.module.d.ts","sourceRoot":"","sources":["../src/mastra.module.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAElE,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,UAAU,EAAY,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAoBpG;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IAEf,qCAAqC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,+BAA+B;IAC/B,gBAAgB,CAAC,EAAE;QACjB,6CAA6C;QAC7C,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,iDAAiD;QACjD,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,sCAAsC;QACtC,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,0CAA0C;QAC1C,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;KAC7B,CAAC;IAEF;;;OAGG;IACH,gBAAgB,CAAC,EAAE;QACjB,mDAAmD;QACnD,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,iDAAiD;QACjD,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,oDAAoD;QACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,2DAA2D;QAC3D,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;IAEF,gCAAgC;IAChC,eAAe,CAAC,EAAE;QAChB,kEAAkE;QAClE,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,yDAAyD;QACzD,aAAa,CAAC,EAAE,OAAO,CAAC;KACzB,CAAC;IAEF,4BAA4B;IAC5B,cAAc,CAAC,EAAE;QACf,+DAA+D;QAC/D,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,6BAA6B;QAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IAEF,8BAA8B;IAC9B,cAAc,CAAC,EAAE;QACf,4CAA4C;QAC5C,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,yCAAyC;QACzC,WAAW,CAAC,EAAE,OAAO,CAAC;KACvB,CAAC;IAEF,mCAAmC;IACnC,KAAK,CAAC,EAAE,UAAU,CAAC;IAEnB,sCAAsC;IACtC,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAE9B;;qEAEiE;IACjE,IAAI,CAAC,EAAE;QACL,qDAAqD;QACrD,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,8EAA8E;QAC9E,gBAAgB,CAAC,EAAE,OAAO,CAAC;KAC5B,CAAC;IAEF,mCAAmC;IACnC,qBAAqB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE7C,8BAA8B;IAC9B,aAAa,CAAC,EAAE;QACd,yDAAyD;QACzD,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,+EAA+E;QAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IAEF,4BAA4B;IAC5B,UAAU,CAAC,EAAE;QACX,6BAA6B;QAC7B,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,kCAAkC;QAClC,kBAAkB,CAAC,EAAE,MAAM,MAAM,CAAC;KACnC,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,iDAAiD;IACjD,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC;IAChB,gDAAgD;IAChD,UAAU,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,mBAAmB,CAAC,GAAG,mBAAmB,CAAC;IACpF,uDAAuD;IACvD,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,+BAA+B;IAC/B,WAAW,CAAC,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC/C,oCAAoC;IACpC,QAAQ,CAAC,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,mBAAmB,IAAI,OAAO,CAAC,mBAAmB,CAAC,GAAG,mBAAmB,CAAC;CAC3E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,qBACa,YAAa,YAAW,UAAU;IAC7C;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,GAAG,aAAa,CA4C3D;IAED;;;;;OAKG;IACH,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,wBAAwB,GAAG,aAAa,CAkFrE;IAED;;;;;;OAMG;IACH,SAAS,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAI5C;CACF"}
+{"version":3,"file":"mastra.module.d.ts","sourceRoot":"","sources":["../src/mastra.module.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAElE,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,UAAU,EAAY,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAqBpG;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IAEf,qCAAqC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,+BAA+B;IAC/B,gBAAgB,CAAC,EAAE;QACjB,6CAA6C;QAC7C,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,iDAAiD;QACjD,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,sCAAsC;QACtC,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,0CAA0C;QAC1C,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;KAC7B,CAAC;IAEF;;;OAGG;IACH,gBAAgB,CAAC,EAAE;QACjB,mDAAmD;QACnD,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,iDAAiD;QACjD,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,oDAAoD;QACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,2DAA2D;QAC3D,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;IAEF,gCAAgC;IAChC,eAAe,CAAC,EAAE;QAChB,kEAAkE;QAClE,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,yDAAyD;QACzD,aAAa,CAAC,EAAE,OAAO,CAAC;KACzB,CAAC;IAEF,4BAA4B;IAC5B,cAAc,CAAC,EAAE;QACf,+DAA+D;QAC/D,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,6BAA6B;QAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IAEF,8BAA8B;IAC9B,cAAc,CAAC,EAAE;QACf,4CAA4C;QAC5C,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,yCAAyC;QACzC,WAAW,CAAC,EAAE,OAAO,CAAC;KACvB,CAAC;IAEF,mCAAmC;IACnC,KAAK,CAAC,EAAE,UAAU,CAAC;IAEnB,sCAAsC;IACtC,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAE9B;;qEAEiE;IACjE,IAAI,CAAC,EAAE;QACL,qDAAqD;QACrD,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,8EAA8E;QAC9E,gBAAgB,CAAC,EAAE,OAAO,CAAC;KAC5B,CAAC;IAEF,mCAAmC;IACnC,qBAAqB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE7C,8BAA8B;IAC9B,aAAa,CAAC,EAAE;QACd,yDAAyD;QACzD,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,+EAA+E;QAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IAEF,4BAA4B;IAC5B,UAAU,CAAC,EAAE;QACX,6BAA6B;QAC7B,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,kCAAkC;QAClC,kBAAkB,CAAC,EAAE,MAAM,MAAM,CAAC;KACnC,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,iDAAiD;IACjD,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC;IAChB,gDAAgD;IAChD,UAAU,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,mBAAmB,CAAC,GAAG,mBAAmB,CAAC;IACpF,uDAAuD;IACvD,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,+BAA+B;IAC/B,WAAW,CAAC,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC/C,oCAAoC;IACpC,QAAQ,CAAC,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,mBAAmB,IAAI,OAAO,CAAC,mBAAmB,CAAC,GAAG,mBAAmB,CAAC;CAC3E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,qBACa,YAAa,YAAW,UAAU;IAC7C;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,GAAG,aAAa,CA6C3D;IAED;;;;;OAKG;IACH,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,wBAAwB,GAAG,aAAa,CAmFrE;IAED;;;;;;OAMG;IACH,SAAS,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAI5C;CACF"}

package/dist/services/auth.service.d.ts

@@ -1,30 +1,40 @@
 import type { Mastra } from '@mastra/core/mastra';
-import type { Request } from 'express';
+import { RequestContext } from '@mastra/core/request-context';
+import type { Request, Response } from 'express';
 import type { MastraModuleOptions } from '../mastra.module.js';
+import { CustomRouteService } from './custom-route.service.js';
+export interface AuthenticateOptions {
+    /** Request context that receives the user, auth token, and mapped resource ID. */
+    requestContext?: RequestContext;
+    /** Response used to forward session refresh headers (e.g. Set-Cookie). */
+    response?: Response;
+    /** Force authentication even for publicly accessible paths. */
+    requiresAuth?: boolean;
+    /** Set when `requiresAuth` comes from a matched `server.apiRoutes` entry. */
+    customRoute?: boolean;
+}
 /**
  * Service that handles authentication for Mastra routes.
- * Called after route matching to check if auth is required.
+ * Delegates to the shared `coreAuthMiddleware` so NestJS behaves like the
+ * other server adapters (cookie sessions, session refresh, RBAC,
+ * `mapUserToResourceId`).
  */
 export declare class AuthService {
     private readonly mastra;
     private readonly options;
-    private readonly logger;
-    constructor(mastra: Mastra, options: MastraModuleOptions);
+    private readonly customRoutes;
+    constructor(mastra: Mastra, options: MastraModuleOptions, customRoutes: CustomRouteService);
     /**
-     * Check authentication for a request based on the matched route.
-     * Returns the authenticated user if auth succeeds, undefined if no auth required.
-     * Throws UnauthorizedException or ForbiddenException if auth fails.
-     *
-     * Type assertions (`as any`) are used because `@mastra/server/auth` types
-     * are Hono-centric. The runtime values work with Express requests.
+     * Whether Mastra auth should run: module options enable it, or the Mastra
+     * server has auth configured (unless module options explicitly disable it).
      */
-    authenticate(request: Request): Promise<unknown>;
+    isEnabled(): boolean;
     /**
-     * Check authorization for an authenticated user.
-     * `authConfig` is typed as `any` because `@mastra/server/auth` doesn't
-     * export a standalone type for the auth config object.
+     * Check authentication for a request.
+     * Returns the authenticated user if auth succeeds, undefined if no auth required.
+     * Throws UnauthorizedException or ForbiddenException if auth fails.
      */
-    private authorize;
+    authenticate(request: Request, options?: AuthenticateOptions): Promise<unknown>;
     /**
      * Extract authentication token from request.
      * Supports Authorization header (Bearer token) and API key query param.

package/dist/services/auth.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../src/services/auth.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAUlD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAGvC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAU5D;;;GAGG;AACH,qBACa,WAAW;IAIJ,OAAO,CAAC,QAAQ,CAAC,MAAM;IACf,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJlD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IAEvD,YACmC,MAAM,EAAE,MAAM,EACN,OAAO,EAAE,mBAAmB,EACnE;IAEJ;;;;;;;OAOG;IACG,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CA0ErD;IAED;;;;OAIG;YACW,SAAS;IAqDvB;;;OAGG;IACH,OAAO,CAAC,YAAY;CAuBrB"}
+{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../src/services/auth.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAI9D,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAGjD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAE5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAE5D,MAAM,WAAW,mBAAmB;IAClC,kFAAkF;IAClF,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,+DAA+D;IAC/D,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,6EAA6E;IAC7E,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;;;GAKG;AACH,qBACa,WAAW;IAEJ,OAAO,CAAC,QAAQ,CAAC,MAAM;IACf,OAAO,CAAC,QAAQ,CAAC,OAAO;IACpB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAH3D,YACmC,MAAM,EAAE,MAAM,EACN,OAAO,EAAE,mBAAmB,EACxB,YAAY,EAAE,kBAAkB,EAC3E;IAEJ;;;OAGG;IACH,SAAS,IAAI,OAAO,CAGnB;IAED;;;;OAIG;IACG,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,OAAO,CAAC,CAiExF;IAED;;;OAGG;IACH,OAAO,CAAC,YAAY;CAuBrB"}

package/dist/services/custom-route.service.d.ts

@@ -0,0 +1,30 @@
+import type { Mastra } from '@mastra/core/mastra';
+import { RequestContext } from '@mastra/core/request-context';
+import type { Request, Response as ExpressResponse } from 'express';
+import type { MastraModuleOptions } from '../mastra.module.js';
+/** Authenticates a matched custom route. Throws to reject the request. */
+export type CustomRouteAuthenticate = (requiresAuth: boolean) => Promise<void>;
+/**
+ * Serves custom routes registered with `registerApiRoute()` via `server.apiRoutes`,
+ * matching the behavior of the other Mastra server adapters.
+ */
+export declare class CustomRouteService {
+    private readonly mastra;
+    private readonly routes;
+    private readonly authConfig;
+    private fetchPromise?;
+    constructor(mastra: Mastra, options: MastraModuleOptions);
+    /** Auth config for custom routes, keyed by `METHOD:path`. */
+    get customRouteAuthConfig(): Map<string, boolean>;
+    /**
+     * Runs a matched custom route and writes its response.
+     * Returns false if no custom route handled the request.
+     *
+     * `authenticate` runs after Hono's router selects the route, so auth is enforced
+     * for exactly the routes Hono dispatches (including regex-constrained params).
+     */
+    handle(req: Request, res: ExpressResponse, requestContext: RequestContext, authenticate: CustomRouteAuthenticate): Promise<boolean>;
+    private build;
+    private toFetchRequest;
+}
+//# sourceMappingURL=custom-route.service.d.ts.map

package/dist/services/custom-route.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-route.service.d.ts","sourceRoot":"","sources":["../../src/services/custom-route.service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAG9D,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,IAAI,eAAe,EAAE,MAAM,SAAS,CAAC;AAIpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAM5D,0EAA0E;AAC1E,MAAM,MAAM,uBAAuB,GAAG,CAAC,YAAY,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAM/E;;;GAGG;AACH,qBACa,kBAAkB;IAMX,OAAO,CAAC,QAAQ,CAAC,MAAM;IALzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAClD,OAAO,CAAC,YAAY,CAAC,CAA4B;IAEjD,YACmC,MAAM,EAAE,MAAM,EACvB,OAAO,EAAE,mBAAmB,EAYrD;IAED,6DAA6D;IAC7D,IAAI,qBAAqB,IAAI,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAEhD;IAED;;;;;;OAMG;IACG,MAAM,CACV,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,eAAe,EACpB,cAAc,EAAE,cAAc,EAC9B,YAAY,EAAE,uBAAuB,GACpC,OAAO,CAAC,OAAO,CAAC,CAmDlB;YAEa,KAAK;IAiEnB,OAAO,CAAC,cAAc;CAgCvB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mastra/nestjs",
-  "version": "0.2.29",
+  "version": "0.2.30-alpha.1",
   "description": "Mastra NestJS adapter for the server",
   "type": "module",
   "main": "dist/index.js",
@@ -21,7 +21,8 @@
   "license": "Apache-2.0",
   "dependencies": {
     "@fastify/busboy": "^3.2.2",
-    "@mastra/server": "1.70.0"
+    "hono": "^4.13.7",
+    "@mastra/server": "1.71.0-alpha.1"
   },
   "devDependencies": {
     "@ai-sdk/openai": "^2.0.115",
@@ -43,15 +44,15 @@
     "typescript": "^7.0.2",
     "vitest": "^4.1.11",
     "zod": "^3.25.0",
-    "@internal/types-builder": "0.0.111",
     "@internal/lint": "0.0.136",
     "@mastra/server-adapters-test-suite": "0.1.0",
+    "@internal/types-builder": "0.0.111",
     "@internal/storage-test-utils": "0.0.132",
-    "@mastra/core": "1.70.0",
     "@mastra/evals": "1.10.2",
-    "@mastra/libsql": "1.23.2",
-    "@mastra/observability": "1.18.0",
-    "@mastra/memory": "1.32.0"
+    "@mastra/libsql": "1.23.3-alpha.0",
+    "@mastra/core": "1.71.0-alpha.1",
+    "@mastra/memory": "1.32.1-alpha.0",
+    "@mastra/observability": "1.18.1-alpha.0"
   },
   "peerDependencies": {
     "@mastra/core": ">=1.58.0-0 <2.0.0-0",