@mastra/server 1.0.4 → 1.1.0-alpha.0

package/dist/{chunk-ZQ2G6QKS.cjs → chunk-MZRJNOYJ.cjs}

@@ -1,10 +1,11 @@
 'use strict';
 
-var chunk33CKPQS4_cjs = require('./chunk-33CKPQS4.cjs');
-var chunkBRI4GUZ2_cjs = require('./chunk-BRI4GUZ2.cjs');
+var chunkA2K5ZL47_cjs = require('./chunk-A2K5ZL47.cjs');
+var chunkK2SXZLA3_cjs = require('./chunk-K2SXZLA3.cjs');
+var chunkZKMVCV4G_cjs = require('./chunk-ZKMVCV4G.cjs');
 var chunkMCYD5LW7_cjs = require('./chunk-MCYD5LW7.cjs');
-var chunkAVRO3FIN_cjs = require('./chunk-AVRO3FIN.cjs');
 var chunkSUKFO7UM_cjs = require('./chunk-SUKFO7UM.cjs');
+var chunk4LVJBXI2_cjs = require('./chunk-4LVJBXI2.cjs');
 var chunk64ITUOXI_cjs = require('./chunk-64ITUOXI.cjs');
 var chunkO7I5CWRX_cjs = require('./chunk-O7I5CWRX.cjs');
 var web = require('stream/web');
@@ -212,7 +213,7 @@ async function listWorkflowsFromSystem({ mastra, workflowId }) {
     throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Workflow ID is required" });
   }
   let workflow;
-  workflow = chunk33CKPQS4_cjs.WorkflowRegistry.getWorkflow(workflowId);
+  workflow = chunkA2K5ZL47_cjs.WorkflowRegistry.getWorkflow(workflowId);
   if (!workflow) {
     try {
       workflow = mastra.getWorkflowById(workflowId);
@@ -231,7 +232,6 @@ async function listWorkflowsFromSystem({ mastra, workflowId }) {
             workflow = workflows[workflowId];
             break;
           }
-          break;
         } catch (error) {
           logger.debug("Error getting workflow from agent", error);
         }
@@ -243,9 +243,9 @@ async function listWorkflowsFromSystem({ mastra, workflowId }) {
   }
   return { workflow };
 }
-var LIST_WORKFLOWS_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var LIST_WORKFLOWS_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "GET",
-  path: "/api/workflows",
+  path: "/workflows",
   responseType: "json",
   queryParamSchema: z.z.object({
     partial: z.z.string().optional()
@@ -254,12 +254,13 @@ var LIST_WORKFLOWS_ROUTE = chunkAVRO3FIN_cjs.createRoute({
   summary: "List all workflows",
   description: "Returns a list of all available workflows in the system",
   tags: ["Workflows"],
+  requiresAuth: true,
   handler: async ({ mastra, partial }) => {
     try {
       const workflows = mastra.listWorkflows({ serialized: false });
       const isPartial = partial === "true";
       const _workflows = Object.entries(workflows).reduce((acc, [key, workflow]) => {
-        acc[key] = chunk33CKPQS4_cjs.getWorkflowInfo(workflow, isPartial);
+        acc[key] = chunkA2K5ZL47_cjs.getWorkflowInfo(workflow, isPartial);
         return acc;
       }, {});
       return _workflows;
@@ -268,30 +269,31 @@ var LIST_WORKFLOWS_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var GET_WORKFLOW_BY_ID_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var GET_WORKFLOW_BY_ID_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "GET",
-  path: "/api/workflows/:workflowId",
+  path: "/workflows/:workflowId",
   responseType: "json",
   pathParamSchema: workflowIdPathParams,
   responseSchema: workflowInfoSchema,
   summary: "Get workflow by ID",
   description: "Returns details for a specific workflow",
   tags: ["Workflows"],
+  requiresAuth: true,
   handler: async ({ mastra, workflowId }) => {
     try {
       if (!workflowId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Workflow ID is required" });
       }
       const { workflow } = await listWorkflowsFromSystem({ mastra, workflowId });
-      return chunk33CKPQS4_cjs.getWorkflowInfo(workflow);
+      return chunkA2K5ZL47_cjs.getWorkflowInfo(workflow);
     } catch (error) {
       return chunkSUKFO7UM_cjs.handleError(error, "Error getting workflow");
     }
   }
 });
-var LIST_WORKFLOW_RUNS_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var LIST_WORKFLOW_RUNS_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "GET",
-  path: "/api/workflows/:workflowId/runs",
+  path: "/workflows/:workflowId/runs",
   responseType: "json",
   pathParamSchema: workflowIdPathParams,
   queryParamSchema: listWorkflowRunsQuerySchema,
@@ -299,8 +301,22 @@ var LIST_WORKFLOW_RUNS_ROUTE = chunkAVRO3FIN_cjs.createRoute({
   summary: "List workflow runs",
   description: "Returns a paginated list of execution runs for the specified workflow",
   tags: ["Workflows"],
-  handler: async ({ mastra, workflowId, fromDate, toDate, page, perPage, limit, offset, resourceId, status }) => {
+  requiresAuth: true,
+  handler: async ({
+    mastra,
+    workflowId,
+    fromDate,
+    toDate,
+    page,
+    perPage,
+    limit,
+    offset,
+    resourceId,
+    status,
+    requestContext
+  }) => {
     try {
+      const effectiveResourceId = chunkZKMVCV4G_cjs.getEffectiveResourceId(requestContext, resourceId);
       if (!workflowId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Workflow ID is required" });
       }
@@ -327,7 +343,7 @@ var LIST_WORKFLOW_RUNS_ROUTE = chunkAVRO3FIN_cjs.createRoute({
         toDate: toDate ? typeof toDate === "string" ? new Date(toDate) : toDate : void 0,
         perPage: finalPerPage,
         page: finalPage,
-        resourceId,
+        resourceId: effectiveResourceId,
         status
       }) || {
         runs: [],
@@ -339,9 +355,9 @@ var LIST_WORKFLOW_RUNS_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var GET_WORKFLOW_RUN_BY_ID_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var GET_WORKFLOW_RUN_BY_ID_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "GET",
-  path: "/api/workflows/:workflowId/runs/:runId",
+  path: "/workflows/:workflowId/runs/:runId",
   responseType: "json",
   pathParamSchema: workflowRunPathParams,
   queryParamSchema: workflowRunResultQuerySchema,
@@ -349,8 +365,10 @@ var GET_WORKFLOW_RUN_BY_ID_ROUTE = chunkAVRO3FIN_cjs.createRoute({
   summary: "Get workflow run by ID",
   description: "Returns a workflow run with metadata and processed execution state. Use the fields query parameter to reduce payload size by requesting only specific fields (e.g., ?fields=status,result,metadata)",
   tags: ["Workflows"],
-  handler: async ({ mastra, workflowId, runId, fields, withNestedWorkflows }) => {
+  requiresAuth: true,
+  handler: async ({ mastra, workflowId, runId, fields, withNestedWorkflows, requestContext }) => {
     try {
+      const effectiveResourceId = chunkZKMVCV4G_cjs.getEffectiveResourceId(requestContext, void 0);
       if (!workflowId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Workflow ID is required" });
       }
@@ -370,23 +388,26 @@ var GET_WORKFLOW_RUN_BY_ID_ROUTE = chunkAVRO3FIN_cjs.createRoute({
       if (!run) {
         throw new chunk64ITUOXI_cjs.HTTPException(404, { message: "Workflow run not found" });
       }
+      await chunkZKMVCV4G_cjs.validateRunOwnership(run, effectiveResourceId);
       return run;
     } catch (error) {
       return chunkSUKFO7UM_cjs.handleError(error, "Error getting workflow run");
     }
   }
 });
-var DELETE_WORKFLOW_RUN_BY_ID_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var DELETE_WORKFLOW_RUN_BY_ID_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "DELETE",
-  path: "/api/workflows/:workflowId/runs/:runId",
+  path: "/workflows/:workflowId/runs/:runId",
   responseType: "json",
   pathParamSchema: workflowRunPathParams,
   responseSchema: workflowControlResponseSchema,
   summary: "Delete workflow run by ID",
   description: "Deletes a specific workflow run by ID",
   tags: ["Workflows"],
-  handler: async ({ mastra, workflowId, runId }) => {
+  requiresAuth: true,
+  handler: async ({ mastra, workflowId, runId, requestContext }) => {
     try {
+      const effectiveResourceId = chunkZKMVCV4G_cjs.getEffectiveResourceId(requestContext, void 0);
       if (!workflowId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Workflow ID is required" });
       }
@@ -397,6 +418,11 @@ var DELETE_WORKFLOW_RUN_BY_ID_ROUTE = chunkAVRO3FIN_cjs.createRoute({
       if (!workflow) {
         throw new chunk64ITUOXI_cjs.HTTPException(404, { message: "Workflow not found" });
       }
+      const run = await workflow.getWorkflowRunById(runId);
+      if (!run) {
+        throw new chunk64ITUOXI_cjs.HTTPException(404, { message: "Workflow run not found" });
+      }
+      await chunkZKMVCV4G_cjs.validateRunOwnership(run, effectiveResourceId);
       await workflow.deleteWorkflowRunById(runId);
       return { message: "Workflow run deleted" };
     } catch (error) {
@@ -404,9 +430,9 @@ var DELETE_WORKFLOW_RUN_BY_ID_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var CREATE_WORKFLOW_RUN_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var CREATE_WORKFLOW_RUN_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/workflows/:workflowId/create-run",
+  path: "/workflows/:workflowId/create-run",
   responseType: "json",
   pathParamSchema: workflowIdPathParams,
   queryParamSchema: chunkMCYD5LW7_cjs.optionalRunIdSchema,
@@ -415,8 +441,10 @@ var CREATE_WORKFLOW_RUN_ROUTE = chunkAVRO3FIN_cjs.createRoute({
   summary: "Create workflow run",
   description: "Creates a new workflow execution instance with an optional custom run ID",
   tags: ["Workflows"],
-  handler: async ({ mastra, workflowId, runId, resourceId, disableScorers }) => {
+  requiresAuth: true,
+  handler: async ({ mastra, workflowId, runId, resourceId, disableScorers, requestContext }) => {
     try {
+      const effectiveResourceId = chunkZKMVCV4G_cjs.getEffectiveResourceId(requestContext, resourceId);
       if (!workflowId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Workflow ID is required" });
       }
@@ -424,16 +452,16 @@ var CREATE_WORKFLOW_RUN_ROUTE = chunkAVRO3FIN_cjs.createRoute({
       if (!workflow) {
         throw new chunk64ITUOXI_cjs.HTTPException(404, { message: "Workflow not found" });
       }
-      const run = await workflow.createRun({ runId, resourceId, disableScorers });
+      const run = await workflow.createRun({ runId, resourceId: effectiveResourceId, disableScorers });
       return { runId: run.runId };
     } catch (error) {
       return chunkSUKFO7UM_cjs.handleError(error, "Error creating workflow run");
     }
   }
 });
-var STREAM_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var STREAM_WORKFLOW_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/workflows/:workflowId/stream",
+  path: "/workflows/:workflowId/stream",
   responseType: "stream",
   pathParamSchema: workflowIdPathParams,
   queryParamSchema: chunkMCYD5LW7_cjs.runIdSchema,
@@ -441,8 +469,10 @@ var STREAM_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
   summary: "Stream workflow execution",
   description: "Executes a workflow and streams the results in real-time",
   tags: ["Workflows"],
-  handler: async ({ mastra, workflowId, runId, resourceId, ...params }) => {
+  requiresAuth: true,
+  handler: async ({ mastra, workflowId, runId, resourceId, requestContext, ...params }) => {
     try {
+      const effectiveResourceId = chunkZKMVCV4G_cjs.getEffectiveResourceId(requestContext, resourceId);
       if (!workflowId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Workflow ID is required" });
       }
@@ -454,8 +484,8 @@ var STREAM_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
         throw new chunk64ITUOXI_cjs.HTTPException(404, { message: "Workflow not found" });
       }
       const serverCache = mastra.getServerCache();
-      const run = await workflow.createRun({ runId, resourceId });
-      const result = run.stream(params);
+      const run = await workflow.createRun({ runId, resourceId: effectiveResourceId });
+      const result = run.stream({ ...params, requestContext });
       return result.fullStream.pipeThrough(
         new web.TransformStream({
           transform(chunk, controller) {
@@ -473,19 +503,21 @@ var STREAM_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var RESUME_STREAM_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var RESUME_STREAM_WORKFLOW_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/workflows/:workflowId/resume-stream",
+  path: "/workflows/:workflowId/resume-stream",
   responseType: "stream",
   pathParamSchema: workflowIdPathParams,
   queryParamSchema: chunkMCYD5LW7_cjs.runIdSchema,
   bodySchema: resumeBodySchema,
-  responseSchema: chunkBRI4GUZ2_cjs.streamResponseSchema,
+  responseSchema: chunkK2SXZLA3_cjs.streamResponseSchema,
   summary: "Resume workflow stream",
   description: "Resumes a suspended workflow execution and continues streaming results",
   tags: ["Workflows"],
-  handler: async ({ mastra, workflowId, runId, ...params }) => {
+  requiresAuth: true,
+  handler: async ({ mastra, workflowId, runId, requestContext, ...params }) => {
     try {
+      const effectiveResourceId = chunkZKMVCV4G_cjs.getEffectiveResourceId(requestContext, void 0);
       if (!workflowId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Workflow ID is required" });
       }
@@ -500,9 +532,10 @@ var RESUME_STREAM_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
       if (!run) {
         throw new chunk64ITUOXI_cjs.HTTPException(404, { message: "Workflow run not found" });
       }
+      await chunkZKMVCV4G_cjs.validateRunOwnership(run, effectiveResourceId);
       const _run = await workflow.createRun({ runId, resourceId: run.resourceId });
       const serverCache = mastra.getServerCache();
-      const stream = _run.resumeStream(params).fullStream.pipeThrough(
+      const stream = _run.resumeStream({ ...params, requestContext }).fullStream.pipeThrough(
         new web.TransformStream({
           transform(chunk, controller) {
             if (serverCache) {
@@ -520,9 +553,9 @@ var RESUME_STREAM_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var START_ASYNC_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var START_ASYNC_WORKFLOW_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/workflows/:workflowId/start-async",
+  path: "/workflows/:workflowId/start-async",
   responseType: "json",
   pathParamSchema: workflowIdPathParams,
   queryParamSchema: chunkMCYD5LW7_cjs.optionalRunIdSchema,
@@ -531,8 +564,10 @@ var START_ASYNC_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
   summary: "Start workflow asynchronously",
   description: "Starts a workflow execution asynchronously without streaming results",
   tags: ["Workflows"],
-  handler: async ({ mastra, workflowId, runId, ...params }) => {
+  requiresAuth: true,
+  handler: async ({ mastra, workflowId, runId, resourceId, requestContext, ...params }) => {
     try {
+      const effectiveResourceId = chunkZKMVCV4G_cjs.getEffectiveResourceId(requestContext, resourceId);
       if (!workflowId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Workflow ID is required" });
       }
@@ -540,17 +575,17 @@ var START_ASYNC_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
       if (!workflow) {
         throw new chunk64ITUOXI_cjs.HTTPException(404, { message: "Workflow not found" });
       }
-      const _run = await workflow.createRun({ runId });
-      const result = await _run.start(params);
+      const _run = await workflow.createRun({ runId, resourceId: effectiveResourceId });
+      const result = await _run.start({ ...params, requestContext });
       return result;
     } catch (error) {
       return chunkSUKFO7UM_cjs.handleError(error, "Error starting async workflow");
     }
   }
 });
-var START_WORKFLOW_RUN_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var START_WORKFLOW_RUN_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/workflows/:workflowId/start",
+  path: "/workflows/:workflowId/start",
   responseType: "json",
   pathParamSchema: workflowIdPathParams,
   queryParamSchema: chunkMCYD5LW7_cjs.runIdSchema,
@@ -559,8 +594,10 @@ var START_WORKFLOW_RUN_ROUTE = chunkAVRO3FIN_cjs.createRoute({
   summary: "Start specific workflow run",
   description: "Starts execution of a specific workflow run by ID",
   tags: ["Workflows"],
-  handler: async ({ mastra, workflowId, runId, ...params }) => {
+  requiresAuth: true,
+  handler: async ({ mastra, workflowId, runId, requestContext, ...params }) => {
     try {
+      const effectiveResourceId = chunkZKMVCV4G_cjs.getEffectiveResourceId(requestContext, void 0);
       if (!workflowId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Workflow ID is required" });
       }
@@ -575,9 +612,11 @@ var START_WORKFLOW_RUN_ROUTE = chunkAVRO3FIN_cjs.createRoute({
       if (!run) {
         throw new chunk64ITUOXI_cjs.HTTPException(404, { message: "Workflow run not found" });
       }
+      await chunkZKMVCV4G_cjs.validateRunOwnership(run, effectiveResourceId);
       const _run = await workflow.createRun({ runId, resourceId: run.resourceId });
       void _run.start({
-        ...params
+        ...params,
+        requestContext
       });
       return { message: "Workflow run started" };
     } catch (e) {
@@ -585,18 +624,20 @@ var START_WORKFLOW_RUN_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var OBSERVE_STREAM_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var OBSERVE_STREAM_WORKFLOW_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/workflows/:workflowId/observe",
+  path: "/workflows/:workflowId/observe",
   responseType: "stream",
   pathParamSchema: workflowIdPathParams,
   queryParamSchema: chunkMCYD5LW7_cjs.runIdSchema,
-  responseSchema: chunkBRI4GUZ2_cjs.streamResponseSchema,
+  responseSchema: chunkK2SXZLA3_cjs.streamResponseSchema,
   summary: "Observe workflow stream",
   description: "Observes and streams updates from an already running workflow execution",
   tags: ["Workflows"],
-  handler: async ({ mastra, workflowId, runId }) => {
+  requiresAuth: true,
+  handler: async ({ mastra, workflowId, runId, requestContext }) => {
     try {
+      const effectiveResourceId = chunkZKMVCV4G_cjs.getEffectiveResourceId(requestContext, void 0);
       if (!workflowId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Workflow ID is required" });
       }
@@ -611,6 +652,7 @@ var OBSERVE_STREAM_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
       if (!run) {
         throw new chunk64ITUOXI_cjs.HTTPException(404, { message: "Workflow run not found" });
       }
+      await chunkZKMVCV4G_cjs.validateRunOwnership(run, effectiveResourceId);
       const _run = await workflow.createRun({ runId, resourceId: run.resourceId });
       const serverCache = mastra.getServerCache();
       if (!serverCache) {
@@ -655,9 +697,9 @@ var OBSERVE_STREAM_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var RESUME_ASYNC_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var RESUME_ASYNC_WORKFLOW_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/workflows/:workflowId/resume-async",
+  path: "/workflows/:workflowId/resume-async",
   responseType: "json",
   pathParamSchema: workflowIdPathParams,
   queryParamSchema: chunkMCYD5LW7_cjs.runIdSchema,
@@ -666,8 +708,10 @@ var RESUME_ASYNC_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
   summary: "Resume workflow asynchronously",
   description: "Resumes a suspended workflow execution asynchronously without streaming",
   tags: ["Workflows"],
-  handler: async ({ mastra, workflowId, runId, ...params }) => {
+  requiresAuth: true,
+  handler: async ({ mastra, workflowId, runId, requestContext, ...params }) => {
     try {
+      const effectiveResourceId = chunkZKMVCV4G_cjs.getEffectiveResourceId(requestContext, void 0);
       if (!workflowId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Workflow ID is required" });
       }
@@ -682,17 +726,18 @@ var RESUME_ASYNC_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
       if (!run) {
         throw new chunk64ITUOXI_cjs.HTTPException(404, { message: "Workflow run not found" });
       }
+      await chunkZKMVCV4G_cjs.validateRunOwnership(run, effectiveResourceId);
       const _run = await workflow.createRun({ runId, resourceId: run.resourceId });
-      const result = await _run.resume(params);
+      const result = await _run.resume({ ...params, requestContext });
       return result;
     } catch (error) {
       return chunkSUKFO7UM_cjs.handleError(error, "Error resuming workflow step");
     }
   }
 });
-var RESUME_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var RESUME_WORKFLOW_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/workflows/:workflowId/resume",
+  path: "/workflows/:workflowId/resume",
   responseType: "json",
   pathParamSchema: workflowIdPathParams,
   queryParamSchema: chunkMCYD5LW7_cjs.runIdSchema,
@@ -701,8 +746,10 @@ var RESUME_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
   summary: "Resume workflow",
   description: "Resumes a suspended workflow execution from a specific step",
   tags: ["Workflows"],
-  handler: async ({ mastra, workflowId, runId, ...params }) => {
+  requiresAuth: true,
+  handler: async ({ mastra, workflowId, runId, requestContext, ...params }) => {
     try {
+      const effectiveResourceId = chunkZKMVCV4G_cjs.getEffectiveResourceId(requestContext, void 0);
       if (!workflowId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Workflow ID is required" });
       }
@@ -717,17 +764,18 @@ var RESUME_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
       if (!run) {
         throw new chunk64ITUOXI_cjs.HTTPException(404, { message: "Workflow run not found" });
       }
+      await chunkZKMVCV4G_cjs.validateRunOwnership(run, effectiveResourceId);
       const _run = await workflow.createRun({ runId, resourceId: run.resourceId });
-      void _run.resume(params);
+      void _run.resume({ ...params, requestContext });
       return { message: "Workflow run resumed" };
     } catch (error) {
       return chunkSUKFO7UM_cjs.handleError(error, "Error resuming workflow");
     }
   }
 });
-var RESTART_ASYNC_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var RESTART_ASYNC_WORKFLOW_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/workflows/:workflowId/restart-async",
+  path: "/workflows/:workflowId/restart-async",
   responseType: "json",
   pathParamSchema: workflowIdPathParams,
   queryParamSchema: chunkMCYD5LW7_cjs.runIdSchema,
@@ -736,8 +784,10 @@ var RESTART_ASYNC_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
   summary: "Restart workflow asynchronously",
   description: "Restarts an active workflow execution asynchronously",
   tags: ["Workflows"],
-  handler: async ({ mastra, workflowId, runId, ...params }) => {
+  requiresAuth: true,
+  handler: async ({ mastra, workflowId, runId, requestContext, ...params }) => {
     try {
+      const effectiveResourceId = chunkZKMVCV4G_cjs.getEffectiveResourceId(requestContext, void 0);
       if (!workflowId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Workflow ID is required" });
       }
@@ -752,17 +802,18 @@ var RESTART_ASYNC_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
       if (!run) {
         throw new chunk64ITUOXI_cjs.HTTPException(404, { message: "Workflow run not found" });
       }
+      await chunkZKMVCV4G_cjs.validateRunOwnership(run, effectiveResourceId);
       const _run = await workflow.createRun({ runId, resourceId: run.resourceId });
-      const result = await _run.restart(params);
+      const result = await _run.restart({ ...params, requestContext });
       return result;
     } catch (error) {
       return chunkSUKFO7UM_cjs.handleError(error, "Error restarting workflow");
     }
   }
 });
-var RESTART_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var RESTART_WORKFLOW_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/workflows/:workflowId/restart",
+  path: "/workflows/:workflowId/restart",
   responseType: "json",
   pathParamSchema: workflowIdPathParams,
   queryParamSchema: chunkMCYD5LW7_cjs.runIdSchema,
@@ -771,8 +822,10 @@ var RESTART_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
   summary: "Restart workflow",
   description: "Restarts an active workflow execution",
   tags: ["Workflows"],
-  handler: async ({ mastra, workflowId, runId, ...params }) => {
+  requiresAuth: true,
+  handler: async ({ mastra, workflowId, runId, requestContext, ...params }) => {
     try {
+      const effectiveResourceId = chunkZKMVCV4G_cjs.getEffectiveResourceId(requestContext, void 0);
       if (!workflowId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Workflow ID is required" });
       }
@@ -787,23 +840,25 @@ var RESTART_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
       if (!run) {
         throw new chunk64ITUOXI_cjs.HTTPException(404, { message: "Workflow run not found" });
       }
+      await chunkZKMVCV4G_cjs.validateRunOwnership(run, effectiveResourceId);
       const _run = await workflow.createRun({ runId, resourceId: run.resourceId });
-      void _run.restart(params);
+      void _run.restart({ ...params, requestContext });
       return { message: "Workflow run restarted" };
     } catch (error) {
       return chunkSUKFO7UM_cjs.handleError(error, "Error restarting workflow");
     }
   }
 });
-var RESTART_ALL_ACTIVE_WORKFLOW_RUNS_ASYNC_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var RESTART_ALL_ACTIVE_WORKFLOW_RUNS_ASYNC_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/workflows/:workflowId/restart-all-active-workflow-runs-async",
+  path: "/workflows/:workflowId/restart-all-active-workflow-runs-async",
   responseType: "json",
   pathParamSchema: workflowIdPathParams,
   responseSchema: workflowControlResponseSchema,
   summary: "Restart all active workflow runs asynchronously",
   description: "Restarts all active workflow runs asynchronously",
   tags: ["Workflows"],
+  requiresAuth: true,
   handler: async ({ mastra, workflowId }) => {
     try {
       if (!workflowId) {
@@ -820,15 +875,16 @@ var RESTART_ALL_ACTIVE_WORKFLOW_RUNS_ASYNC_ROUTE = chunkAVRO3FIN_cjs.createRoute
     }
   }
 });
-var RESTART_ALL_ACTIVE_WORKFLOW_RUNS_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var RESTART_ALL_ACTIVE_WORKFLOW_RUNS_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/workflows/:workflowId/restart-all-active-workflow-runs",
+  path: "/workflows/:workflowId/restart-all-active-workflow-runs",
   responseType: "json",
   pathParamSchema: workflowIdPathParams,
   responseSchema: workflowControlResponseSchema,
   summary: "Restart all active workflow runs",
   description: "Restarts all active workflow runs",
   tags: ["Workflows"],
+  requiresAuth: true,
   handler: async ({ mastra, workflowId }) => {
     try {
       if (!workflowId) {
@@ -845,9 +901,9 @@ var RESTART_ALL_ACTIVE_WORKFLOW_RUNS_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var TIME_TRAVEL_ASYNC_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var TIME_TRAVEL_ASYNC_WORKFLOW_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/workflows/:workflowId/time-travel-async",
+  path: "/workflows/:workflowId/time-travel-async",
   responseType: "json",
   pathParamSchema: workflowIdPathParams,
   queryParamSchema: chunkMCYD5LW7_cjs.runIdSchema,
@@ -856,8 +912,10 @@ var TIME_TRAVEL_ASYNC_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
   summary: "Time travel workflow asynchronously",
   description: "Time travels a workflow run asynchronously without streaming",
   tags: ["Workflows"],
-  handler: async ({ mastra, workflowId, runId, ...params }) => {
+  requiresAuth: true,
+  handler: async ({ mastra, workflowId, runId, requestContext, ...params }) => {
     try {
+      const effectiveResourceId = chunkZKMVCV4G_cjs.getEffectiveResourceId(requestContext, void 0);
       if (!workflowId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Workflow ID is required" });
       }
@@ -872,17 +930,18 @@ var TIME_TRAVEL_ASYNC_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
       if (!run) {
         throw new chunk64ITUOXI_cjs.HTTPException(404, { message: "Workflow run not found" });
       }
+      await chunkZKMVCV4G_cjs.validateRunOwnership(run, effectiveResourceId);
       const _run = await workflow.createRun({ runId, resourceId: run.resourceId });
-      const result = await _run.timeTravel(params);
+      const result = await _run.timeTravel({ ...params, requestContext });
       return result;
     } catch (error) {
       return chunkSUKFO7UM_cjs.handleError(error, "Error time traveling workflow");
     }
   }
 });
-var TIME_TRAVEL_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var TIME_TRAVEL_WORKFLOW_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/workflows/:workflowId/time-travel",
+  path: "/workflows/:workflowId/time-travel",
   responseType: "json",
   pathParamSchema: workflowIdPathParams,
   queryParamSchema: chunkMCYD5LW7_cjs.runIdSchema,
@@ -891,8 +950,10 @@ var TIME_TRAVEL_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
   summary: "Time travel workflow",
   description: "Time travels a workflow run, starting from a specific step",
   tags: ["Workflows"],
-  handler: async ({ mastra, workflowId, runId, ...params }) => {
+  requiresAuth: true,
+  handler: async ({ mastra, workflowId, runId, requestContext, ...params }) => {
     try {
+      const effectiveResourceId = chunkZKMVCV4G_cjs.getEffectiveResourceId(requestContext, void 0);
       if (!workflowId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Workflow ID is required" });
       }
@@ -907,17 +968,18 @@ var TIME_TRAVEL_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
       if (!run) {
         throw new chunk64ITUOXI_cjs.HTTPException(404, { message: "Workflow run not found" });
       }
+      await chunkZKMVCV4G_cjs.validateRunOwnership(run, effectiveResourceId);
       const _run = await workflow.createRun({ runId, resourceId: run.resourceId });
-      void _run.timeTravel(params);
+      void _run.timeTravel({ ...params, requestContext });
       return { message: "Workflow run time travel started" };
     } catch (error) {
       return chunkSUKFO7UM_cjs.handleError(error, "Error time traveling workflow");
     }
   }
 });
-var TIME_TRAVEL_STREAM_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var TIME_TRAVEL_STREAM_WORKFLOW_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/workflows/:workflowId/time-travel-stream",
+  path: "/workflows/:workflowId/time-travel-stream",
   responseType: "stream",
   pathParamSchema: workflowIdPathParams,
   queryParamSchema: chunkMCYD5LW7_cjs.runIdSchema,
@@ -925,8 +987,10 @@ var TIME_TRAVEL_STREAM_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
   summary: "Time travel workflow stream",
   description: "Time travels a workflow run, starting from a specific step, and streams the results in real-time",
   tags: ["Workflows"],
-  handler: async ({ mastra, workflowId, runId, ...params }) => {
+  requiresAuth: true,
+  handler: async ({ mastra, workflowId, runId, requestContext, ...params }) => {
     try {
+      const effectiveResourceId = chunkZKMVCV4G_cjs.getEffectiveResourceId(requestContext, void 0);
       if (!workflowId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Workflow ID is required" });
       }
@@ -937,9 +1001,14 @@ var TIME_TRAVEL_STREAM_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
       if (!workflow) {
         throw new chunk64ITUOXI_cjs.HTTPException(404, { message: "Workflow not found" });
       }
+      const existingRun = await workflow.getWorkflowRunById(runId);
+      if (!existingRun) {
+        throw new chunk64ITUOXI_cjs.HTTPException(404, { message: "Workflow run not found" });
+      }
+      await chunkZKMVCV4G_cjs.validateRunOwnership(existingRun, effectiveResourceId);
       const serverCache = mastra.getServerCache();
-      const run = await workflow.createRun({ runId });
-      const result = run.timeTravelStream(params);
+      const run = await workflow.createRun({ runId, resourceId: existingRun.resourceId });
+      const result = run.timeTravelStream({ ...params, requestContext });
       return result.fullStream.pipeThrough(
         new web.TransformStream({
           transform(chunk, controller) {
@@ -957,17 +1026,19 @@ var TIME_TRAVEL_STREAM_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var CANCEL_WORKFLOW_RUN_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var CANCEL_WORKFLOW_RUN_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/workflows/:workflowId/runs/:runId/cancel",
+  path: "/workflows/:workflowId/runs/:runId/cancel",
   responseType: "json",
   pathParamSchema: workflowRunPathParams,
   responseSchema: workflowControlResponseSchema,
   summary: "Cancel workflow run",
   description: "Cancels an in-progress workflow execution",
   tags: ["Workflows"],
-  handler: async ({ mastra, workflowId, runId }) => {
+  requiresAuth: true,
+  handler: async ({ mastra, workflowId, runId, requestContext }) => {
     try {
+      const effectiveResourceId = chunkZKMVCV4G_cjs.getEffectiveResourceId(requestContext, void 0);
       if (!workflowId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Workflow ID is required" });
       }
@@ -982,6 +1053,7 @@ var CANCEL_WORKFLOW_RUN_ROUTE = chunkAVRO3FIN_cjs.createRoute({
       if (!run) {
         throw new chunk64ITUOXI_cjs.HTTPException(404, { message: "Workflow run not found" });
       }
+      await chunkZKMVCV4G_cjs.validateRunOwnership(run, effectiveResourceId);
       const _run = await workflow.createRun({ runId, resourceId: run.resourceId });
       await _run.cancel();
       return { message: "Workflow run cancelled" };
@@ -990,19 +1062,21 @@ var CANCEL_WORKFLOW_RUN_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var STREAM_LEGACY_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var STREAM_LEGACY_WORKFLOW_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/workflows/:workflowId/stream-legacy",
+  path: "/workflows/:workflowId/stream-legacy",
   responseType: "stream",
   pathParamSchema: workflowIdPathParams,
   queryParamSchema: chunkMCYD5LW7_cjs.runIdSchema,
   bodySchema: streamWorkflowBodySchema,
-  responseSchema: chunkBRI4GUZ2_cjs.streamResponseSchema,
+  responseSchema: chunkK2SXZLA3_cjs.streamResponseSchema,
   summary: "[DEPRECATED] Stream workflow with legacy format",
-  description: "Legacy endpoint for streaming workflow execution. Use /api/workflows/:workflowId/stream instead.",
+  description: "Legacy endpoint for streaming workflow execution. Use /workflows/:workflowId/stream instead.",
   tags: ["Workflows", "Legacy"],
-  handler: async ({ mastra, workflowId, runId, ...params }) => {
+  requiresAuth: true,
+  handler: async ({ mastra, workflowId, runId, resourceId, requestContext, ...params }) => {
     try {
+      const effectiveResourceId = chunkZKMVCV4G_cjs.getEffectiveResourceId(requestContext, resourceId);
       if (!workflowId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Workflow ID is required" });
       }
@@ -1014,9 +1088,10 @@ var STREAM_LEGACY_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
         throw new chunk64ITUOXI_cjs.HTTPException(404, { message: "Workflow not found" });
       }
       const serverCache = mastra.getServerCache();
-      const run = await workflow.createRun({ runId });
+      const run = await workflow.createRun({ runId, resourceId: effectiveResourceId });
       const result = run.streamLegacy({
         ...params,
+        requestContext,
         onChunk: async (chunk) => {
           if (serverCache) {
             const cacheKey = runId;
@@ -1030,18 +1105,20 @@ var STREAM_LEGACY_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var OBSERVE_STREAM_LEGACY_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var OBSERVE_STREAM_LEGACY_WORKFLOW_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/workflows/:workflowId/observe-stream-legacy",
+  path: "/workflows/:workflowId/observe-stream-legacy",
   responseType: "stream",
   pathParamSchema: workflowIdPathParams,
   queryParamSchema: chunkMCYD5LW7_cjs.runIdSchema,
-  responseSchema: chunkBRI4GUZ2_cjs.streamResponseSchema,
+  responseSchema: chunkK2SXZLA3_cjs.streamResponseSchema,
   summary: "[DEPRECATED] Observe workflow stream with legacy format",
-  description: "Legacy endpoint for observing workflow stream. Use /api/workflows/:workflowId/observe instead.",
+  description: "Legacy endpoint for observing workflow stream. Use /workflows/:workflowId/observe instead.",
   tags: ["Workflows", "Legacy"],
-  handler: async ({ mastra, workflowId, runId }) => {
+  requiresAuth: true,
+  handler: async ({ mastra, workflowId, runId, requestContext }) => {
     try {
+      const effectiveResourceId = chunkZKMVCV4G_cjs.getEffectiveResourceId(requestContext, void 0);
       if (!workflowId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Workflow ID is required" });
       }
@@ -1056,6 +1133,7 @@ var OBSERVE_STREAM_LEGACY_WORKFLOW_ROUTE = chunkAVRO3FIN_cjs.createRoute({
       if (!run) {
         throw new chunk64ITUOXI_cjs.HTTPException(404, { message: "Workflow run not found" });
       }
+      await chunkZKMVCV4G_cjs.validateRunOwnership(run, effectiveResourceId);
       const _run = await workflow.createRun({ runId, resourceId: run.resourceId });
       const serverCache = mastra.getServerCache();
       if (!serverCache) {
@@ -1113,5 +1191,5 @@ exports.workflowRunResultQuerySchema = workflowRunResultQuerySchema;
 exports.workflowRunResultSchema = workflowRunResultSchema;
 exports.workflowRunsResponseSchema = workflowRunsResponseSchema;
 exports.workflows_exports = workflows_exports;
-//# sourceMappingURL=chunk-ZQ2G6QKS.cjs.map
-//# sourceMappingURL=chunk-ZQ2G6QKS.cjs.map
+//# sourceMappingURL=chunk-MZRJNOYJ.cjs.map
+//# sourceMappingURL=chunk-MZRJNOYJ.cjs.map