@mastra/server 1.0.4 → 1.1.0-alpha.1

package/dist/{chunk-2CLS2PYJ.js → chunk-7YCFHDWX.js}

@@ -1,8 +1,8 @@
-import { sanitizeBody, validateBody } from './chunk-XWGAT2DA.js';
-import { listAgentsResponseSchema, serializedAgentSchema, agentIdPathParams, generateResponseSchema, agentExecutionBodySchema, agentExecutionLegacyBodySchema, streamResponseSchema, providersResponseSchema, toolCallResponseSchema, approveToolCallBodySchema, declineToolCallBodySchema, approveNetworkToolCallBodySchema, declineNetworkToolCallBodySchema, modelManagementResponseSchema, updateAgentModelBodySchema, reorderAgentModelListBodySchema, updateAgentModelInModelListBodySchema, modelConfigIdPathParams, enhanceInstructionsResponseSchema, enhanceInstructionsBodySchema } from './chunk-WLGJVDH4.js';
-import { stringify } from './chunk-LF2ZLOFP.js';
-import { createRoute } from './chunk-7S7ALPCY.js';
+import { getAgentSkillResponseSchema } from './chunk-GDWZ2R7I.js';
+import { stringify, listAgentsResponseSchema, serializedAgentSchema, agentIdPathParams, generateResponseSchema, agentExecutionBodySchema, agentExecutionLegacyBodySchema, streamResponseSchema, providersResponseSchema, toolCallResponseSchema, approveToolCallBodySchema, declineToolCallBodySchema, approveNetworkToolCallBodySchema, declineNetworkToolCallBodySchema, modelManagementResponseSchema, updateAgentModelBodySchema, reorderAgentModelListBodySchema, updateAgentModelInModelListBodySchema, modelConfigIdPathParams, enhanceInstructionsResponseSchema, enhanceInstructionsBodySchema, agentSkillPathParams } from './chunk-LFNP3ACE.js';
+import { sanitizeBody, validateBody, getEffectiveResourceId, getEffectiveThreadId, validateThreadOwnership } from './chunk-USR6JK77.js';
 import { handleError } from './chunk-ONN5EA7E.js';
+import { createRoute } from './chunk-D5VCL56B.js';
 import { HTTPException } from './chunk-6QWQZI4Q.js';
 import { __export } from './chunk-PR4QN5HX.js';
 import { Agent } from '@mastra/core/agent';
@@ -25,6 +25,7 @@ __export(agents_exports, {
   GENERATE_AGENT_VNEXT_ROUTE: () => GENERATE_AGENT_VNEXT_ROUTE,
   GENERATE_LEGACY_ROUTE: () => GENERATE_LEGACY_ROUTE,
   GET_AGENT_BY_ID_ROUTE: () => GET_AGENT_BY_ID_ROUTE,
+  GET_AGENT_SKILL_ROUTE: () => GET_AGENT_SKILL_ROUTE,
   GET_PROVIDERS_ROUTE: () => GET_PROVIDERS_ROUTE,
   LIST_AGENTS_ROUTE: () => LIST_AGENTS_ROUTE,
   REORDER_AGENT_MODEL_LIST_ROUTE: () => REORDER_AGENT_MODEL_LIST_ROUTE,
@@ -40,8 +41,59 @@ __export(agents_exports, {
   UPDATE_AGENT_MODEL_ROUTE: () => UPDATE_AGENT_MODEL_ROUTE,
   getAgentFromSystem: () => getAgentFromSystem,
   getSerializedAgentTools: () => getSerializedAgentTools,
-  getSerializedProcessors: () => getSerializedProcessors
+  getSerializedProcessors: () => getSerializedProcessors,
+  getSerializedSkillsFromAgent: () => getSerializedSkillsFromAgent,
+  getWorkspaceToolsFromAgent: () => getWorkspaceToolsFromAgent
 });
+
+// src/server/constants.ts
+var WORKSPACE_TOOLS_PREFIX = "mastra_workspace";
+var WORKSPACE_TOOLS = {
+  FILESYSTEM: {
+    READ_FILE: `${WORKSPACE_TOOLS_PREFIX}_read_file`,
+    WRITE_FILE: `${WORKSPACE_TOOLS_PREFIX}_write_file`,
+    EDIT_FILE: `${WORKSPACE_TOOLS_PREFIX}_edit_file`,
+    LIST_FILES: `${WORKSPACE_TOOLS_PREFIX}_list_files`,
+    DELETE: `${WORKSPACE_TOOLS_PREFIX}_delete`,
+    FILE_STAT: `${WORKSPACE_TOOLS_PREFIX}_file_stat`,
+    MKDIR: `${WORKSPACE_TOOLS_PREFIX}_mkdir`
+  },
+  SANDBOX: {
+    EXECUTE_COMMAND: `${WORKSPACE_TOOLS_PREFIX}_execute_command`
+  },
+  SEARCH: {
+    SEARCH: `${WORKSPACE_TOOLS_PREFIX}_search`,
+    INDEX: `${WORKSPACE_TOOLS_PREFIX}_index`
+  }
+};
+function resolveToolConfig(toolsConfig, toolName) {
+  let enabled = true;
+  let requireApproval = false;
+  let requireReadBeforeWrite;
+  if (toolsConfig) {
+    if (toolsConfig.enabled !== void 0) {
+      enabled = toolsConfig.enabled;
+    }
+    if (toolsConfig.requireApproval !== void 0) {
+      requireApproval = toolsConfig.requireApproval;
+    }
+    const perToolConfig = toolsConfig[toolName];
+    if (perToolConfig) {
+      if (perToolConfig.enabled !== void 0) {
+        enabled = perToolConfig.enabled;
+      }
+      if (perToolConfig.requireApproval !== void 0) {
+        requireApproval = perToolConfig.requireApproval;
+      }
+      if (perToolConfig.requireReadBeforeWrite !== void 0) {
+        requireReadBeforeWrite = perToolConfig.requireReadBeforeWrite;
+      }
+    }
+  }
+  return { enabled, requireApproval, requireReadBeforeWrite };
+}
+
+// src/server/handlers/agents.ts
 function isProviderConnected(providerId) {
   const cleanId = providerId.includes(".") ? providerId.split(".")[0] : providerId;
   const provider = PROVIDER_REGISTRY[cleanId];
@@ -54,6 +106,7 @@ async function getSerializedAgentTools(tools, partial = false) {
     const toolId = tool.id ?? `tool-${key}`;
     let inputSchemaForReturn = void 0;
     let outputSchemaForReturn = void 0;
+    let requestContextSchemaForReturn = void 0;
     if (!partial) {
       try {
         if (tool.inputSchema) {
@@ -84,6 +137,20 @@ async function getSerializedAgentTools(tools, partial = false) {
             );
           }
         }
+        if (tool.requestContextSchema) {
+          if (tool.requestContextSchema && typeof tool.requestContextSchema === "object" && "jsonSchema" in tool.requestContextSchema) {
+            requestContextSchemaForReturn = stringify(tool.requestContextSchema.jsonSchema);
+          } else if (typeof tool.requestContextSchema === "function") {
+            const requestContextSchema = tool.requestContextSchema();
+            if (requestContextSchema && requestContextSchema.jsonSchema) {
+              requestContextSchemaForReturn = stringify(requestContextSchema.jsonSchema);
+            }
+          } else if (tool.requestContextSchema) {
+            requestContextSchemaForReturn = stringify(
+              zodToJsonSchema(tool.requestContextSchema)
+            );
+          }
+        }
       } catch (error) {
         console.error(`Error getting serialized tool`, {
           toolId: tool.id,
@@ -95,7 +162,8 @@ async function getSerializedAgentTools(tools, partial = false) {
       ...tool,
       id: toolId,
       inputSchema: inputSchemaForReturn,
-      outputSchema: outputSchemaForReturn
+      outputSchema: outputSchemaForReturn,
+      requestContextSchema: requestContextSchemaForReturn
     };
     return acc;
   }, {});
@@ -108,6 +176,77 @@ function getSerializedProcessors(processors) {
     };
   });
 }
+async function getSerializedSkillsFromAgent(agent, requestContext) {
+  try {
+    const workspace = await agent.getWorkspace({ requestContext });
+    if (!workspace?.skills) {
+      return [];
+    }
+    const skillsList = await workspace.skills.list();
+    return skillsList.map((skill) => ({
+      name: skill.name,
+      description: skill.description,
+      license: skill.license
+    }));
+  } catch {
+    return [];
+  }
+}
+async function getWorkspaceToolsFromAgent(agent, requestContext) {
+  try {
+    const workspace = await agent.getWorkspace({ requestContext });
+    if (!workspace) {
+      return [];
+    }
+    const tools = [];
+    const isReadOnly = workspace.filesystem?.readOnly ?? false;
+    const toolsConfig = workspace.getToolsConfig();
+    const isEnabled = (toolName) => {
+      return resolveToolConfig(toolsConfig, toolName).enabled;
+    };
+    if (workspace.filesystem) {
+      if (isEnabled(WORKSPACE_TOOLS.FILESYSTEM.READ_FILE)) {
+        tools.push(WORKSPACE_TOOLS.FILESYSTEM.READ_FILE);
+      }
+      if (isEnabled(WORKSPACE_TOOLS.FILESYSTEM.LIST_FILES)) {
+        tools.push(WORKSPACE_TOOLS.FILESYSTEM.LIST_FILES);
+      }
+      if (isEnabled(WORKSPACE_TOOLS.FILESYSTEM.FILE_STAT)) {
+        tools.push(WORKSPACE_TOOLS.FILESYSTEM.FILE_STAT);
+      }
+      if (!isReadOnly) {
+        if (isEnabled(WORKSPACE_TOOLS.FILESYSTEM.WRITE_FILE)) {
+          tools.push(WORKSPACE_TOOLS.FILESYSTEM.WRITE_FILE);
+        }
+        if (isEnabled(WORKSPACE_TOOLS.FILESYSTEM.EDIT_FILE)) {
+          tools.push(WORKSPACE_TOOLS.FILESYSTEM.EDIT_FILE);
+        }
+        if (isEnabled(WORKSPACE_TOOLS.FILESYSTEM.DELETE)) {
+          tools.push(WORKSPACE_TOOLS.FILESYSTEM.DELETE);
+        }
+        if (isEnabled(WORKSPACE_TOOLS.FILESYSTEM.MKDIR)) {
+          tools.push(WORKSPACE_TOOLS.FILESYSTEM.MKDIR);
+        }
+      }
+    }
+    if (workspace.canBM25 || workspace.canVector) {
+      if (isEnabled(WORKSPACE_TOOLS.SEARCH.SEARCH)) {
+        tools.push(WORKSPACE_TOOLS.SEARCH.SEARCH);
+      }
+      if (!isReadOnly && isEnabled(WORKSPACE_TOOLS.SEARCH.INDEX)) {
+        tools.push(WORKSPACE_TOOLS.SEARCH.INDEX);
+      }
+    }
+    if (workspace.sandbox) {
+      if (workspace.sandbox.executeCommand && isEnabled(WORKSPACE_TOOLS.SANDBOX.EXECUTE_COMMAND)) {
+        tools.push(WORKSPACE_TOOLS.SANDBOX.EXECUTE_COMMAND);
+      }
+    }
+    return tools;
+  } catch {
+    return [];
+  }
+}
 async function getSerializedAgentDefinition({
   agent,
   requestContext
@@ -171,6 +310,14 @@ async function formatAgentList({
   } catch (error) {
     logger.error("Error getting configured processors for agent", { agentName: agent.name, error });
   }
+  const serializedSkills = await getSerializedSkillsFromAgent(agent, requestContext);
+  const workspaceTools = await getWorkspaceToolsFromAgent(agent, requestContext);
+  let workspaceId;
+  try {
+    const workspace = await agent.getWorkspace({ requestContext });
+    workspaceId = workspace?.id;
+  } catch {
+  }
   const model = llm?.getModel();
   const models = await agent.getModelList(requestContext);
   const modelList = models?.map((md) => ({
@@ -189,6 +336,9 @@ async function formatAgentList({
     agents: serializedAgentAgents,
     tools: serializedAgentTools,
     workflows: serializedAgentWorkflows,
+    skills: serializedSkills,
+    workspaceTools,
+    workspaceId,
     inputProcessors: serializedInputProcessors,
     outputProcessors: serializedOutputProcessors,
     provider: llm?.getProvider(),
@@ -197,7 +347,8 @@ async function formatAgentList({
     defaultOptions,
     modelList,
     defaultGenerateOptionsLegacy,
-    defaultStreamOptionsLegacy
+    defaultStreamOptionsLegacy,
+    source: agent.source ?? "code"
   };
 }
 async function getAgentFromSystem({ mastra, agentId }) {
@@ -228,6 +379,14 @@ async function getAgentFromSystem({ mastra, agentId }) {
       }
     }
   }
+  if (!agent) {
+    logger.debug(`Agent ${agentId} not found in code-defined agents, looking in stored agents`);
+    try {
+      agent = await mastra.getStoredAgentById(agentId);
+    } catch (error) {
+      logger.debug("Error getting stored agent", error);
+    }
+  }
   if (!agent) {
     throw new HTTPException(404, { message: `Agent with id ${agentId} not found` });
   }
@@ -301,6 +460,22 @@ async function formatAgent({
   } catch (error) {
     mastra.getLogger().error("Error getting configured processors for agent", { agentName: agent.name, error });
   }
+  const serializedSkills = await getSerializedSkillsFromAgent(agent, proxyRequestContext);
+  const workspaceTools = await getWorkspaceToolsFromAgent(agent, proxyRequestContext);
+  let workspaceId;
+  try {
+    const workspace = await agent.getWorkspace({ requestContext: proxyRequestContext });
+    workspaceId = workspace?.id;
+  } catch {
+  }
+  let serializedRequestContextSchema;
+  if (agent.requestContextSchema) {
+    try {
+      serializedRequestContextSchema = stringify(zodToJsonSchema(agent.requestContextSchema));
+    } catch (error) {
+      mastra.getLogger().error("Error serializing requestContextSchema for agent", { agentName: agent.name, error });
+    }
+  }
   return {
     name: agent.name,
     description,
@@ -308,6 +483,9 @@ async function formatAgent({
     tools: serializedAgentTools,
     agents: serializedAgentAgents,
     workflows: serializedAgentWorkflows,
+    skills: serializedSkills,
+    workspaceTools,
+    workspaceId,
     inputProcessors: serializedInputProcessors,
     outputProcessors: serializedOutputProcessors,
     provider: llm?.getProvider(),
@@ -316,36 +494,64 @@ async function formatAgent({
     modelList,
     defaultOptions,
     defaultGenerateOptionsLegacy,
-    defaultStreamOptionsLegacy
+    defaultStreamOptionsLegacy,
+    requestContextSchema: serializedRequestContextSchema,
+    source: agent.source ?? "code"
   };
 }
 var LIST_AGENTS_ROUTE = createRoute({
   method: "GET",
-  path: "/api/agents",
+  path: "/agents",
   responseType: "json",
   queryParamSchema: z.object({
     partial: z.string().optional()
   }),
   responseSchema: listAgentsResponseSchema,
   summary: "List all agents",
-  description: "Returns a list of all available agents in the system",
+  description: "Returns a list of all available agents in the system (both code-defined and stored)",
   tags: ["Agents"],
+  requiresAuth: true,
   handler: async ({ mastra, requestContext, partial }) => {
     try {
-      const agents = mastra.listAgents();
+      const codeAgents = mastra.listAgents();
       const isPartial = partial === "true";
-      const serializedAgentsMap = await Promise.all(
-        Object.entries(agents).map(async ([id, agent]) => {
+      const serializedCodeAgentsMap = await Promise.all(
+        Object.entries(codeAgents).map(async ([id, agent]) => {
           return formatAgentList({ id, mastra, agent, requestContext, partial: isPartial });
         })
       );
-      const serializedAgents = serializedAgentsMap.reduce(
+      const serializedAgents = serializedCodeAgentsMap.reduce(
         (acc, { id, ...rest }) => {
           acc[id] = { id, ...rest };
           return acc;
         },
         {}
       );
+      try {
+        const storedAgentsResult = await mastra.listStoredAgents();
+        if (storedAgentsResult?.agents) {
+          for (const agent of storedAgentsResult.agents) {
+            try {
+              const serialized = await formatAgentList({
+                id: agent.id,
+                mastra,
+                agent,
+                requestContext,
+                partial: isPartial
+              });
+              if (!serializedAgents[serialized.id]) {
+                serializedAgents[serialized.id] = serialized;
+              }
+            } catch (agentError) {
+              const logger = mastra.getLogger();
+              logger.warn("Failed to serialize stored agent", { agentId: agent.id, error: agentError });
+            }
+          }
+        }
+      } catch (storageError) {
+        const logger = mastra.getLogger();
+        logger.debug("Could not fetch stored agents", { error: storageError });
+      }
       return serializedAgents;
     } catch (error) {
       return handleError(error, "Error getting agents");
@@ -354,13 +560,14 @@ var LIST_AGENTS_ROUTE = createRoute({
 });
 var GET_AGENT_BY_ID_ROUTE = createRoute({
   method: "GET",
-  path: "/api/agents/:agentId",
+  path: "/agents/:agentId",
   responseType: "json",
   pathParamSchema: agentIdPathParams,
   responseSchema: serializedAgentSchema,
   summary: "Get agent by ID",
   description: "Returns details for a specific agent including configuration, tools, and memory settings",
   tags: ["Agents"],
+  requiresAuth: true,
   handler: async ({ agentId, mastra, requestContext }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
@@ -379,7 +586,7 @@ var GET_AGENT_BY_ID_ROUTE = createRoute({
 });
 var GENERATE_AGENT_ROUTE = createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/generate",
+  path: "/agents/:agentId/generate",
   responseType: "json",
   pathParamSchema: agentIdPathParams,
   bodySchema: agentExecutionBodySchema,
@@ -387,14 +594,42 @@ var GENERATE_AGENT_ROUTE = createRoute({
   summary: "Generate agent response",
   description: "Executes an agent with the provided messages and returns the complete response",
   tags: ["Agents"],
-  handler: async ({ agentId, mastra, abortSignal, ...params }) => {
+  requiresAuth: true,
+  handler: async ({ agentId, mastra, abortSignal, requestContext: serverRequestContext, ...params }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
       sanitizeBody(params, ["tools"]);
-      const { messages, ...rest } = params;
+      const { messages, memory: memoryOption, requestContext: bodyRequestContext, ...rest } = params;
       validateBody({ messages });
+      if (bodyRequestContext && typeof bodyRequestContext === "object") {
+        for (const [key, value] of Object.entries(bodyRequestContext)) {
+          if (serverRequestContext.get(key) === void 0) {
+            serverRequestContext.set(key, value);
+          }
+        }
+      }
+      let authorizedMemoryOption = memoryOption;
+      if (memoryOption) {
+        const clientThreadId = typeof memoryOption.thread === "string" ? memoryOption.thread : memoryOption.thread?.id;
+        const effectiveResourceId = getEffectiveResourceId(serverRequestContext, memoryOption.resource);
+        const effectiveThreadId = getEffectiveThreadId(serverRequestContext, clientThreadId);
+        if (effectiveThreadId && effectiveResourceId) {
+          const memoryInstance = await agent.getMemory({ requestContext: serverRequestContext });
+          if (memoryInstance) {
+            const thread = await memoryInstance.getThreadById({ threadId: effectiveThreadId });
+            await validateThreadOwnership(thread, effectiveResourceId);
+          }
+        }
+        authorizedMemoryOption = {
+          ...memoryOption,
+          resource: effectiveResourceId ?? memoryOption.resource,
+          thread: effectiveThreadId ?? memoryOption.thread
+        };
+      }
       const result = await agent.generate(messages, {
         ...rest,
+        requestContext: serverRequestContext,
+        memory: authorizedMemoryOption,
         abortSignal
       });
       return result;
@@ -405,29 +640,39 @@ var GENERATE_AGENT_ROUTE = createRoute({
 });
 var GENERATE_LEGACY_ROUTE = createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/generate-legacy",
+  path: "/agents/:agentId/generate-legacy",
   responseType: "json",
   pathParamSchema: agentIdPathParams,
   bodySchema: agentExecutionLegacyBodySchema,
   responseSchema: generateResponseSchema,
   summary: "[DEPRECATED] Generate with legacy format",
-  description: "Legacy endpoint for generating agent responses. Use /api/agents/:agentId/generate instead.",
+  description: "Legacy endpoint for generating agent responses. Use /agents/:agentId/generate instead.",
   tags: ["Agents", "Legacy"],
-  handler: async ({ mastra, agentId, abortSignal, ...params }) => {
+  requiresAuth: true,
+  handler: async ({ mastra, agentId, abortSignal, requestContext, ...params }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
       sanitizeBody(params, ["tools"]);
       const { messages, resourceId, resourceid, threadId, ...rest } = params;
-      const finalResourceId = resourceId ?? resourceid;
+      const clientResourceId = resourceId ?? resourceid;
+      const effectiveResourceId = getEffectiveResourceId(requestContext, clientResourceId);
+      const effectiveThreadId = getEffectiveThreadId(requestContext, threadId);
       validateBody({ messages });
-      if (threadId && !finalResourceId || !threadId && finalResourceId) {
+      if (effectiveThreadId && !effectiveResourceId || !effectiveThreadId && effectiveResourceId) {
         throw new HTTPException(400, { message: "Both threadId or resourceId must be provided" });
       }
+      if (effectiveThreadId && effectiveResourceId) {
+        const memory = await agent.getMemory({ requestContext });
+        if (memory) {
+          const thread = await memory.getThreadById({ threadId: effectiveThreadId });
+          await validateThreadOwnership(thread, effectiveResourceId);
+        }
+      }
       const result = await agent.generateLegacy(messages, {
         ...rest,
         abortSignal,
-        resourceId: finalResourceId ?? "",
-        threadId: threadId ?? ""
+        resourceId: effectiveResourceId ?? "",
+        threadId: effectiveThreadId ?? ""
       });
       return result;
     } catch (error) {
@@ -437,29 +682,39 @@ var GENERATE_LEGACY_ROUTE = createRoute({
 });
 var STREAM_GENERATE_LEGACY_ROUTE = createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/stream-legacy",
+  path: "/agents/:agentId/stream-legacy",
   responseType: "datastream-response",
   pathParamSchema: agentIdPathParams,
   bodySchema: agentExecutionLegacyBodySchema,
   responseSchema: streamResponseSchema,
   summary: "[DEPRECATED] Stream with legacy format",
-  description: "Legacy endpoint for streaming agent responses. Use /api/agents/:agentId/stream instead.",
+  description: "Legacy endpoint for streaming agent responses. Use /agents/:agentId/stream instead.",
   tags: ["Agents", "Legacy"],
-  handler: async ({ mastra, agentId, abortSignal, ...params }) => {
+  requiresAuth: true,
+  handler: async ({ mastra, agentId, abortSignal, requestContext, ...params }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
       sanitizeBody(params, ["tools"]);
       const { messages, resourceId, resourceid, threadId, ...rest } = params;
-      const finalResourceId = resourceId ?? resourceid;
+      const clientResourceId = resourceId ?? resourceid;
+      const effectiveResourceId = getEffectiveResourceId(requestContext, clientResourceId);
+      const effectiveThreadId = getEffectiveThreadId(requestContext, threadId);
       validateBody({ messages });
-      if (threadId && !finalResourceId || !threadId && finalResourceId) {
+      if (effectiveThreadId && !effectiveResourceId || !effectiveThreadId && effectiveResourceId) {
         throw new HTTPException(400, { message: "Both threadId or resourceId must be provided" });
       }
+      if (effectiveThreadId && effectiveResourceId) {
+        const memory = await agent.getMemory({ requestContext });
+        if (memory) {
+          const thread = await memory.getThreadById({ threadId: effectiveThreadId });
+          await validateThreadOwnership(thread, effectiveResourceId);
+        }
+      }
       const streamResult = await agent.streamLegacy(messages, {
         ...rest,
         abortSignal,
-        resourceId: finalResourceId ?? "",
-        threadId: threadId ?? ""
+        resourceId: effectiveResourceId ?? "",
+        threadId: effectiveThreadId ?? ""
       });
       const streamResponse = rest.output ? streamResult.toTextStreamResponse({
         headers: {
@@ -483,12 +738,13 @@ var STREAM_GENERATE_LEGACY_ROUTE = createRoute({
 });
 var GET_PROVIDERS_ROUTE = createRoute({
   method: "GET",
-  path: "/api/agents/providers",
+  path: "/agents/providers",
   responseType: "json",
   responseSchema: providersResponseSchema,
   summary: "List AI providers",
   description: "Returns a list of all configured AI model providers",
   tags: ["Agents"],
+  requiresAuth: true,
   handler: async () => {
     try {
       const providers = Object.entries(PROVIDER_REGISTRY).map(([id, provider]) => {
@@ -512,7 +768,7 @@ var GET_PROVIDERS_ROUTE = createRoute({
 });
 var GENERATE_AGENT_VNEXT_ROUTE = createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/generate/vnext",
+  path: "/agents/:agentId/generate/vnext",
   responseType: "json",
   pathParamSchema: agentIdPathParams,
   bodySchema: agentExecutionBodySchema,
@@ -520,11 +776,12 @@ var GENERATE_AGENT_VNEXT_ROUTE = createRoute({
   summary: "Generate a response from an agent",
   description: "Generate a response from an agent",
   tags: ["Agents"],
+  requiresAuth: true,
   handler: GENERATE_AGENT_ROUTE.handler
 });
 var STREAM_GENERATE_ROUTE = createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/stream",
+  path: "/agents/:agentId/stream",
   responseType: "stream",
   streamFormat: "sse",
   pathParamSchema: agentIdPathParams,
@@ -533,14 +790,42 @@ var STREAM_GENERATE_ROUTE = createRoute({
   summary: "Stream agent response",
   description: "Executes an agent with the provided messages and streams the response in real-time",
   tags: ["Agents"],
-  handler: async ({ mastra, agentId, abortSignal, ...params }) => {
+  requiresAuth: true,
+  handler: async ({ mastra, agentId, abortSignal, requestContext: serverRequestContext, ...params }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
       sanitizeBody(params, ["tools"]);
-      const { messages, ...rest } = params;
+      const { messages, memory: memoryOption, requestContext: bodyRequestContext, ...rest } = params;
       validateBody({ messages });
+      if (bodyRequestContext && typeof bodyRequestContext === "object") {
+        for (const [key, value] of Object.entries(bodyRequestContext)) {
+          if (serverRequestContext.get(key) === void 0) {
+            serverRequestContext.set(key, value);
+          }
+        }
+      }
+      let authorizedMemoryOption = memoryOption;
+      if (memoryOption) {
+        const clientThreadId = typeof memoryOption.thread === "string" ? memoryOption.thread : memoryOption.thread?.id;
+        const effectiveResourceId = getEffectiveResourceId(serverRequestContext, memoryOption.resource);
+        const effectiveThreadId = getEffectiveThreadId(serverRequestContext, clientThreadId);
+        if (effectiveThreadId && effectiveResourceId) {
+          const memoryInstance = await agent.getMemory({ requestContext: serverRequestContext });
+          if (memoryInstance) {
+            const thread = await memoryInstance.getThreadById({ threadId: effectiveThreadId });
+            await validateThreadOwnership(thread, effectiveResourceId);
+          }
+        }
+        authorizedMemoryOption = {
+          ...memoryOption,
+          resource: effectiveResourceId ?? memoryOption.resource,
+          thread: effectiveThreadId ?? memoryOption.thread
+        };
+      }
       const streamResult = await agent.stream(messages, {
         ...rest,
+        requestContext: serverRequestContext,
+        memory: authorizedMemoryOption,
         abortSignal
       });
       return streamResult.fullStream;
@@ -551,7 +836,7 @@ var STREAM_GENERATE_ROUTE = createRoute({
 });
 var STREAM_GENERATE_VNEXT_DEPRECATED_ROUTE = createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/stream/vnext",
+  path: "/agents/:agentId/stream/vnext",
   responseType: "stream",
   pathParamSchema: agentIdPathParams,
   bodySchema: agentExecutionBodySchema,
@@ -559,12 +844,13 @@ var STREAM_GENERATE_VNEXT_DEPRECATED_ROUTE = createRoute({
   summary: "Stream a response from an agent",
   description: "[DEPRECATED] This endpoint is deprecated. Please use /stream instead.",
   tags: ["Agents"],
+  requiresAuth: true,
   deprecated: true,
   handler: STREAM_GENERATE_ROUTE.handler
 });
 var APPROVE_TOOL_CALL_ROUTE = createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/approve-tool-call",
+  path: "/agents/:agentId/approve-tool-call",
   responseType: "stream",
   streamFormat: "sse",
   pathParamSchema: agentIdPathParams,
@@ -573,6 +859,7 @@ var APPROVE_TOOL_CALL_ROUTE = createRoute({
   summary: "Approve tool call",
   description: "Approves a pending tool call and continues agent execution",
   tags: ["Agents", "Tools"],
+  requiresAuth: true,
   handler: async ({ mastra, agentId, abortSignal, ...params }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
@@ -595,7 +882,7 @@ var APPROVE_TOOL_CALL_ROUTE = createRoute({
 });
 var DECLINE_TOOL_CALL_ROUTE = createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/decline-tool-call",
+  path: "/agents/:agentId/decline-tool-call",
   responseType: "stream",
   streamFormat: "sse",
   pathParamSchema: agentIdPathParams,
@@ -604,6 +891,7 @@ var DECLINE_TOOL_CALL_ROUTE = createRoute({
   summary: "Decline tool call",
   description: "Declines a pending tool call and continues agent execution without executing the tool",
   tags: ["Agents", "Tools"],
+  requiresAuth: true,
   handler: async ({ mastra, agentId, abortSignal, ...params }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
@@ -626,7 +914,7 @@ var DECLINE_TOOL_CALL_ROUTE = createRoute({
 });
 var APPROVE_TOOL_CALL_GENERATE_ROUTE = createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/approve-tool-call-generate",
+  path: "/agents/:agentId/approve-tool-call-generate",
   responseType: "json",
   pathParamSchema: agentIdPathParams,
   bodySchema: approveToolCallBodySchema,
@@ -634,6 +922,7 @@ var APPROVE_TOOL_CALL_GENERATE_ROUTE = createRoute({
   summary: "Approve tool call (non-streaming)",
   description: "Approves a pending tool call and returns the complete response",
   tags: ["Agents", "Tools"],
+  requiresAuth: true,
   handler: async ({ mastra, agentId, abortSignal, ...params }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
@@ -656,7 +945,7 @@ var APPROVE_TOOL_CALL_GENERATE_ROUTE = createRoute({
 });
 var DECLINE_TOOL_CALL_GENERATE_ROUTE = createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/decline-tool-call-generate",
+  path: "/agents/:agentId/decline-tool-call-generate",
   responseType: "json",
   pathParamSchema: agentIdPathParams,
   bodySchema: declineToolCallBodySchema,
@@ -664,6 +953,7 @@ var DECLINE_TOOL_CALL_GENERATE_ROUTE = createRoute({
   summary: "Decline tool call (non-streaming)",
   description: "Declines a pending tool call and returns the complete response",
   tags: ["Agents", "Tools"],
+  requiresAuth: true,
   handler: async ({ mastra, agentId, abortSignal, ...params }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
@@ -686,7 +976,7 @@ var DECLINE_TOOL_CALL_GENERATE_ROUTE = createRoute({
 });
 var STREAM_NETWORK_ROUTE = createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/network",
+  path: "/agents/:agentId/network",
   responseType: "stream",
   streamFormat: "sse",
   pathParamSchema: agentIdPathParams,
@@ -695,6 +985,7 @@ var STREAM_NETWORK_ROUTE = createRoute({
   summary: "Stream agent network",
   description: "Executes an agent network with multiple agents and streams the response",
   tags: ["Agents"],
+  requiresAuth: true,
   handler: async ({ mastra, messages, agentId, ...params }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
@@ -711,7 +1002,7 @@ var STREAM_NETWORK_ROUTE = createRoute({
 });
 var APPROVE_NETWORK_TOOL_CALL_ROUTE = createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/approve-network-tool-call",
+  path: "/agents/:agentId/approve-network-tool-call",
   responseType: "stream",
   streamFormat: "sse",
   pathParamSchema: agentIdPathParams,
@@ -720,6 +1011,7 @@ var APPROVE_NETWORK_TOOL_CALL_ROUTE = createRoute({
   summary: "Approve network tool call",
   description: "Approves a pending network tool call and continues network agent execution",
   tags: ["Agents", "Tools"],
+  requiresAuth: true,
   handler: async ({ mastra, agentId, ...params }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
@@ -738,7 +1030,7 @@ var APPROVE_NETWORK_TOOL_CALL_ROUTE = createRoute({
 });
 var DECLINE_NETWORK_TOOL_CALL_ROUTE = createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/decline-network-tool-call",
+  path: "/agents/:agentId/decline-network-tool-call",
   responseType: "stream",
   streamFormat: "sse",
   pathParamSchema: agentIdPathParams,
@@ -747,6 +1039,7 @@ var DECLINE_NETWORK_TOOL_CALL_ROUTE = createRoute({
   summary: "Decline network tool call",
   description: "Declines a pending network tool call and continues network agent execution without executing the tool",
   tags: ["Agents", "Tools"],
+  requiresAuth: true,
   handler: async ({ mastra, agentId, ...params }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
@@ -765,7 +1058,7 @@ var DECLINE_NETWORK_TOOL_CALL_ROUTE = createRoute({
 });
 var UPDATE_AGENT_MODEL_ROUTE = createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/model",
+  path: "/agents/:agentId/model",
   responseType: "json",
   pathParamSchema: agentIdPathParams,
   bodySchema: updateAgentModelBodySchema,
@@ -773,6 +1066,7 @@ var UPDATE_AGENT_MODEL_ROUTE = createRoute({
   summary: "Update agent model",
   description: "Updates the AI model used by the agent",
   tags: ["Agents", "Models"],
+  requiresAuth: true,
   handler: async ({ mastra, agentId, modelId, provider }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
@@ -786,13 +1080,14 @@ var UPDATE_AGENT_MODEL_ROUTE = createRoute({
 });
 var RESET_AGENT_MODEL_ROUTE = createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/model/reset",
+  path: "/agents/:agentId/model/reset",
   responseType: "json",
   pathParamSchema: agentIdPathParams,
   responseSchema: modelManagementResponseSchema,
   summary: "Reset agent model",
   description: "Resets the agent model to its original configuration",
   tags: ["Agents", "Models"],
+  requiresAuth: true,
   handler: async ({ mastra, agentId }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
@@ -805,7 +1100,7 @@ var RESET_AGENT_MODEL_ROUTE = createRoute({
 });
 var REORDER_AGENT_MODEL_LIST_ROUTE = createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/models/reorder",
+  path: "/agents/:agentId/models/reorder",
   responseType: "json",
   pathParamSchema: agentIdPathParams,
   bodySchema: reorderAgentModelListBodySchema,
@@ -813,6 +1108,7 @@ var REORDER_AGENT_MODEL_LIST_ROUTE = createRoute({
   summary: "Reorder agent model list",
   description: "Reorders the model list for agents with multiple model configurations",
   tags: ["Agents", "Models"],
+  requiresAuth: true,
   handler: async ({ mastra, agentId, reorderedModelIds }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
@@ -829,7 +1125,7 @@ var REORDER_AGENT_MODEL_LIST_ROUTE = createRoute({
 });
 var UPDATE_AGENT_MODEL_IN_MODEL_LIST_ROUTE = createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/models/:modelConfigId",
+  path: "/agents/:agentId/models/:modelConfigId",
   responseType: "json",
   pathParamSchema: modelConfigIdPathParams,
   bodySchema: updateAgentModelInModelListBodySchema,
@@ -837,6 +1133,7 @@ var UPDATE_AGENT_MODEL_IN_MODEL_LIST_ROUTE = createRoute({
   summary: "Update model in model list",
   description: "Updates a specific model configuration in the agent model list",
   tags: ["Agents", "Models"],
+  requiresAuth: true,
   handler: async ({ mastra, agentId, modelConfigId, model: bodyModel, maxRetries, enabled }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
@@ -933,7 +1230,7 @@ async function findConnectedModel(agent) {
 }
 var ENHANCE_INSTRUCTIONS_ROUTE = createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/instructions/enhance",
+  path: "/agents/:agentId/instructions/enhance",
   responseType: "json",
   pathParamSchema: agentIdPathParams,
   bodySchema: enhanceInstructionsBodySchema,
@@ -941,6 +1238,7 @@ var ENHANCE_INSTRUCTIONS_ROUTE = createRoute({
   summary: "Enhance agent instructions",
   description: "Uses AI to enhance or modify agent instructions based on user feedback",
   tags: ["Agents"],
+  requiresAuth: true,
   handler: async ({ mastra, agentId, instructions, comment }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
@@ -974,7 +1272,7 @@ ${comment ? `User feedback: ${comment}` : ""}`,
 });
 var STREAM_VNEXT_DEPRECATED_ROUTE = createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/streamVNext",
+  path: "/agents/:agentId/streamVNext",
   responseType: "stream",
   pathParamSchema: agentIdPathParams,
   bodySchema: agentExecutionBodySchema,
@@ -982,6 +1280,7 @@ var STREAM_VNEXT_DEPRECATED_ROUTE = createRoute({
   summary: "Stream a response from an agent",
   description: "[DEPRECATED] This endpoint is deprecated. Please use /stream instead.",
   tags: ["Agents"],
+  requiresAuth: true,
   deprecated: true,
   handler: async () => {
     throw new HTTPException(410, { message: "This endpoint is deprecated. Please use /stream instead." });
@@ -989,7 +1288,7 @@ var STREAM_VNEXT_DEPRECATED_ROUTE = createRoute({
 });
 var STREAM_UI_MESSAGE_VNEXT_DEPRECATED_ROUTE = createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/stream/vnext/ui",
+  path: "/agents/:agentId/stream/vnext/ui",
   responseType: "stream",
   pathParamSchema: agentIdPathParams,
   bodySchema: agentExecutionBodySchema,
@@ -997,6 +1296,7 @@ var STREAM_UI_MESSAGE_VNEXT_DEPRECATED_ROUTE = createRoute({
   summary: "Stream UI messages from an agent",
   description: "[DEPRECATED] This endpoint is deprecated. Please use the @mastra/ai-sdk package for uiMessage transformations",
   tags: ["Agents"],
+  requiresAuth: true,
   deprecated: true,
   handler: async () => {
     try {
@@ -1013,7 +1313,7 @@ var STREAM_UI_MESSAGE_VNEXT_DEPRECATED_ROUTE = createRoute({
 });
 var STREAM_UI_MESSAGE_DEPRECATED_ROUTE = createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/stream/ui",
+  path: "/agents/:agentId/stream/ui",
   responseType: "stream",
   pathParamSchema: agentIdPathParams,
   bodySchema: agentExecutionBodySchema,
@@ -1021,10 +1321,52 @@ var STREAM_UI_MESSAGE_DEPRECATED_ROUTE = createRoute({
   summary: "Stream UI messages from an agent",
   description: "[DEPRECATED] This endpoint is deprecated. Please use the @mastra/ai-sdk package for uiMessage transformations",
   tags: ["Agents"],
+  requiresAuth: true,
   deprecated: true,
   handler: STREAM_UI_MESSAGE_VNEXT_DEPRECATED_ROUTE.handler
 });
+var GET_AGENT_SKILL_ROUTE = createRoute({
+  method: "GET",
+  path: "/agents/:agentId/skills/:skillName",
+  responseType: "json",
+  pathParamSchema: agentSkillPathParams,
+  responseSchema: getAgentSkillResponseSchema,
+  summary: "Get agent skill",
+  description: "Returns details for a specific skill available to the agent via its workspace",
+  tags: ["Agents", "Skills"],
+  handler: async ({ mastra, agentId, skillName, requestContext }) => {
+    try {
+      const agent = agentId ? mastra.getAgentById(agentId) : null;
+      if (!agent) {
+        throw new HTTPException(404, { message: "Agent not found" });
+      }
+      const workspace = await agent.getWorkspace({ requestContext });
+      if (!workspace?.skills) {
+        throw new HTTPException(404, { message: "Agent does not have skills configured" });
+      }
+      const skill = await workspace.skills.get(skillName);
+      if (!skill) {
+        throw new HTTPException(404, { message: `Skill "${skillName}" not found` });
+      }
+      return {
+        name: skill.name,
+        description: skill.description,
+        license: skill.license,
+        compatibility: skill.compatibility,
+        metadata: skill.metadata,
+        path: skill.path,
+        instructions: skill.instructions,
+        source: skill.source,
+        references: skill.references,
+        scripts: skill.scripts,
+        assets: skill.assets
+      };
+    } catch (error) {
+      return handleError(error, "Error getting agent skill");
+    }
+  }
+});
 
-export { APPROVE_NETWORK_TOOL_CALL_ROUTE, APPROVE_TOOL_CALL_GENERATE_ROUTE, APPROVE_TOOL_CALL_ROUTE, DECLINE_NETWORK_TOOL_CALL_ROUTE, DECLINE_TOOL_CALL_GENERATE_ROUTE, DECLINE_TOOL_CALL_ROUTE, ENHANCE_INSTRUCTIONS_ROUTE, GENERATE_AGENT_ROUTE, GENERATE_AGENT_VNEXT_ROUTE, GENERATE_LEGACY_ROUTE, GET_AGENT_BY_ID_ROUTE, GET_PROVIDERS_ROUTE, LIST_AGENTS_ROUTE, REORDER_AGENT_MODEL_LIST_ROUTE, RESET_AGENT_MODEL_ROUTE, STREAM_GENERATE_LEGACY_ROUTE, STREAM_GENERATE_ROUTE, STREAM_GENERATE_VNEXT_DEPRECATED_ROUTE, STREAM_NETWORK_ROUTE, STREAM_UI_MESSAGE_DEPRECATED_ROUTE, STREAM_UI_MESSAGE_VNEXT_DEPRECATED_ROUTE, STREAM_VNEXT_DEPRECATED_ROUTE, UPDATE_AGENT_MODEL_IN_MODEL_LIST_ROUTE, UPDATE_AGENT_MODEL_ROUTE, agents_exports, getAgentFromSystem, getSerializedAgentTools, getSerializedProcessors };
-//# sourceMappingURL=chunk-2CLS2PYJ.js.map
-//# sourceMappingURL=chunk-2CLS2PYJ.js.map
+export { APPROVE_NETWORK_TOOL_CALL_ROUTE, APPROVE_TOOL_CALL_GENERATE_ROUTE, APPROVE_TOOL_CALL_ROUTE, DECLINE_NETWORK_TOOL_CALL_ROUTE, DECLINE_TOOL_CALL_GENERATE_ROUTE, DECLINE_TOOL_CALL_ROUTE, ENHANCE_INSTRUCTIONS_ROUTE, GENERATE_AGENT_ROUTE, GENERATE_AGENT_VNEXT_ROUTE, GENERATE_LEGACY_ROUTE, GET_AGENT_BY_ID_ROUTE, GET_AGENT_SKILL_ROUTE, GET_PROVIDERS_ROUTE, LIST_AGENTS_ROUTE, REORDER_AGENT_MODEL_LIST_ROUTE, RESET_AGENT_MODEL_ROUTE, STREAM_GENERATE_LEGACY_ROUTE, STREAM_GENERATE_ROUTE, STREAM_GENERATE_VNEXT_DEPRECATED_ROUTE, STREAM_NETWORK_ROUTE, STREAM_UI_MESSAGE_DEPRECATED_ROUTE, STREAM_UI_MESSAGE_VNEXT_DEPRECATED_ROUTE, STREAM_VNEXT_DEPRECATED_ROUTE, UPDATE_AGENT_MODEL_IN_MODEL_LIST_ROUTE, UPDATE_AGENT_MODEL_ROUTE, agents_exports, getAgentFromSystem, getSerializedAgentTools, getSerializedProcessors, getSerializedSkillsFromAgent, getWorkspaceToolsFromAgent };
+//# sourceMappingURL=chunk-7YCFHDWX.js.map
+//# sourceMappingURL=chunk-7YCFHDWX.js.map