@mastra/server 1.0.4 → 1.1.0-alpha.1

package/dist/{chunk-YK63KHHB.cjs → chunk-6DHJKQLP.cjs}

@@ -1,10 +1,10 @@
 'use strict';
 
-var chunk5W4RPVTK_cjs = require('./chunk-5W4RPVTK.cjs');
-var chunkBRI4GUZ2_cjs = require('./chunk-BRI4GUZ2.cjs');
-var chunkGU4EWMZB_cjs = require('./chunk-GU4EWMZB.cjs');
-var chunkAVRO3FIN_cjs = require('./chunk-AVRO3FIN.cjs');
+var chunk4UNYZYBB_cjs = require('./chunk-4UNYZYBB.cjs');
+var chunkK2SXZLA3_cjs = require('./chunk-K2SXZLA3.cjs');
+var chunkZKMVCV4G_cjs = require('./chunk-ZKMVCV4G.cjs');
 var chunkSUKFO7UM_cjs = require('./chunk-SUKFO7UM.cjs');
+var chunk4LVJBXI2_cjs = require('./chunk-4LVJBXI2.cjs');
 var chunk64ITUOXI_cjs = require('./chunk-64ITUOXI.cjs');
 var chunkO7I5CWRX_cjs = require('./chunk-O7I5CWRX.cjs');
 var agent = require('@mastra/core/agent');
@@ -27,6 +27,7 @@ chunkO7I5CWRX_cjs.__export(agents_exports, {
   GENERATE_AGENT_VNEXT_ROUTE: () => GENERATE_AGENT_VNEXT_ROUTE,
   GENERATE_LEGACY_ROUTE: () => GENERATE_LEGACY_ROUTE,
   GET_AGENT_BY_ID_ROUTE: () => GET_AGENT_BY_ID_ROUTE,
+  GET_AGENT_SKILL_ROUTE: () => GET_AGENT_SKILL_ROUTE,
   GET_PROVIDERS_ROUTE: () => GET_PROVIDERS_ROUTE,
   LIST_AGENTS_ROUTE: () => LIST_AGENTS_ROUTE,
   REORDER_AGENT_MODEL_LIST_ROUTE: () => REORDER_AGENT_MODEL_LIST_ROUTE,
@@ -42,8 +43,59 @@ chunkO7I5CWRX_cjs.__export(agents_exports, {
   UPDATE_AGENT_MODEL_ROUTE: () => UPDATE_AGENT_MODEL_ROUTE,
   getAgentFromSystem: () => getAgentFromSystem,
   getSerializedAgentTools: () => getSerializedAgentTools,
-  getSerializedProcessors: () => getSerializedProcessors
+  getSerializedProcessors: () => getSerializedProcessors,
+  getSerializedSkillsFromAgent: () => getSerializedSkillsFromAgent,
+  getWorkspaceToolsFromAgent: () => getWorkspaceToolsFromAgent
 });
+
+// src/server/constants.ts
+var WORKSPACE_TOOLS_PREFIX = "mastra_workspace";
+var WORKSPACE_TOOLS = {
+  FILESYSTEM: {
+    READ_FILE: `${WORKSPACE_TOOLS_PREFIX}_read_file`,
+    WRITE_FILE: `${WORKSPACE_TOOLS_PREFIX}_write_file`,
+    EDIT_FILE: `${WORKSPACE_TOOLS_PREFIX}_edit_file`,
+    LIST_FILES: `${WORKSPACE_TOOLS_PREFIX}_list_files`,
+    DELETE: `${WORKSPACE_TOOLS_PREFIX}_delete`,
+    FILE_STAT: `${WORKSPACE_TOOLS_PREFIX}_file_stat`,
+    MKDIR: `${WORKSPACE_TOOLS_PREFIX}_mkdir`
+  },
+  SANDBOX: {
+    EXECUTE_COMMAND: `${WORKSPACE_TOOLS_PREFIX}_execute_command`
+  },
+  SEARCH: {
+    SEARCH: `${WORKSPACE_TOOLS_PREFIX}_search`,
+    INDEX: `${WORKSPACE_TOOLS_PREFIX}_index`
+  }
+};
+function resolveToolConfig(toolsConfig, toolName) {
+  let enabled = true;
+  let requireApproval = false;
+  let requireReadBeforeWrite;
+  if (toolsConfig) {
+    if (toolsConfig.enabled !== void 0) {
+      enabled = toolsConfig.enabled;
+    }
+    if (toolsConfig.requireApproval !== void 0) {
+      requireApproval = toolsConfig.requireApproval;
+    }
+    const perToolConfig = toolsConfig[toolName];
+    if (perToolConfig) {
+      if (perToolConfig.enabled !== void 0) {
+        enabled = perToolConfig.enabled;
+      }
+      if (perToolConfig.requireApproval !== void 0) {
+        requireApproval = perToolConfig.requireApproval;
+      }
+      if (perToolConfig.requireReadBeforeWrite !== void 0) {
+        requireReadBeforeWrite = perToolConfig.requireReadBeforeWrite;
+      }
+    }
+  }
+  return { enabled, requireApproval, requireReadBeforeWrite };
+}
+
+// src/server/handlers/agents.ts
 function isProviderConnected(providerId) {
   const cleanId = providerId.includes(".") ? providerId.split(".")[0] : providerId;
   const provider = llm.PROVIDER_REGISTRY[cleanId];
@@ -56,36 +108,51 @@ async function getSerializedAgentTools(tools, partial = false) {
     const toolId = tool.id ?? `tool-${key}`;
     let inputSchemaForReturn = void 0;
     let outputSchemaForReturn = void 0;
+    let requestContextSchemaForReturn = void 0;
     if (!partial) {
       try {
         if (tool.inputSchema) {
           if (tool.inputSchema && typeof tool.inputSchema === "object" && "jsonSchema" in tool.inputSchema) {
-            inputSchemaForReturn = chunkGU4EWMZB_cjs.stringify(tool.inputSchema.jsonSchema);
+            inputSchemaForReturn = chunkK2SXZLA3_cjs.stringify(tool.inputSchema.jsonSchema);
           } else if (typeof tool.inputSchema === "function") {
             const inputSchema = tool.inputSchema();
             if (inputSchema && inputSchema.jsonSchema) {
-              inputSchemaForReturn = chunkGU4EWMZB_cjs.stringify(inputSchema.jsonSchema);
+              inputSchemaForReturn = chunkK2SXZLA3_cjs.stringify(inputSchema.jsonSchema);
             }
           } else if (tool.inputSchema) {
-            inputSchemaForReturn = chunkGU4EWMZB_cjs.stringify(
+            inputSchemaForReturn = chunkK2SXZLA3_cjs.stringify(
               zodToJson.zodToJsonSchema(tool.inputSchema)
             );
           }
         }
         if (tool.outputSchema) {
           if (tool.outputSchema && typeof tool.outputSchema === "object" && "jsonSchema" in tool.outputSchema) {
-            outputSchemaForReturn = chunkGU4EWMZB_cjs.stringify(tool.outputSchema.jsonSchema);
+            outputSchemaForReturn = chunkK2SXZLA3_cjs.stringify(tool.outputSchema.jsonSchema);
           } else if (typeof tool.outputSchema === "function") {
             const outputSchema = tool.outputSchema();
             if (outputSchema && outputSchema.jsonSchema) {
-              outputSchemaForReturn = chunkGU4EWMZB_cjs.stringify(outputSchema.jsonSchema);
+              outputSchemaForReturn = chunkK2SXZLA3_cjs.stringify(outputSchema.jsonSchema);
             }
           } else if (tool.outputSchema) {
-            outputSchemaForReturn = chunkGU4EWMZB_cjs.stringify(
+            outputSchemaForReturn = chunkK2SXZLA3_cjs.stringify(
               zodToJson.zodToJsonSchema(tool.outputSchema)
             );
           }
         }
+        if (tool.requestContextSchema) {
+          if (tool.requestContextSchema && typeof tool.requestContextSchema === "object" && "jsonSchema" in tool.requestContextSchema) {
+            requestContextSchemaForReturn = chunkK2SXZLA3_cjs.stringify(tool.requestContextSchema.jsonSchema);
+          } else if (typeof tool.requestContextSchema === "function") {
+            const requestContextSchema = tool.requestContextSchema();
+            if (requestContextSchema && requestContextSchema.jsonSchema) {
+              requestContextSchemaForReturn = chunkK2SXZLA3_cjs.stringify(requestContextSchema.jsonSchema);
+            }
+          } else if (tool.requestContextSchema) {
+            requestContextSchemaForReturn = chunkK2SXZLA3_cjs.stringify(
+              zodToJson.zodToJsonSchema(tool.requestContextSchema)
+            );
+          }
+        }
       } catch (error) {
         console.error(`Error getting serialized tool`, {
           toolId: tool.id,
@@ -97,7 +164,8 @@ async function getSerializedAgentTools(tools, partial = false) {
       ...tool,
       id: toolId,
       inputSchema: inputSchemaForReturn,
-      outputSchema: outputSchemaForReturn
+      outputSchema: outputSchemaForReturn,
+      requestContextSchema: requestContextSchemaForReturn
     };
     return acc;
   }, {});
@@ -110,6 +178,77 @@ function getSerializedProcessors(processors) {
     };
   });
 }
+async function getSerializedSkillsFromAgent(agent, requestContext) {
+  try {
+    const workspace = await agent.getWorkspace({ requestContext });
+    if (!workspace?.skills) {
+      return [];
+    }
+    const skillsList = await workspace.skills.list();
+    return skillsList.map((skill) => ({
+      name: skill.name,
+      description: skill.description,
+      license: skill.license
+    }));
+  } catch {
+    return [];
+  }
+}
+async function getWorkspaceToolsFromAgent(agent, requestContext) {
+  try {
+    const workspace = await agent.getWorkspace({ requestContext });
+    if (!workspace) {
+      return [];
+    }
+    const tools = [];
+    const isReadOnly = workspace.filesystem?.readOnly ?? false;
+    const toolsConfig = workspace.getToolsConfig();
+    const isEnabled = (toolName) => {
+      return resolveToolConfig(toolsConfig, toolName).enabled;
+    };
+    if (workspace.filesystem) {
+      if (isEnabled(WORKSPACE_TOOLS.FILESYSTEM.READ_FILE)) {
+        tools.push(WORKSPACE_TOOLS.FILESYSTEM.READ_FILE);
+      }
+      if (isEnabled(WORKSPACE_TOOLS.FILESYSTEM.LIST_FILES)) {
+        tools.push(WORKSPACE_TOOLS.FILESYSTEM.LIST_FILES);
+      }
+      if (isEnabled(WORKSPACE_TOOLS.FILESYSTEM.FILE_STAT)) {
+        tools.push(WORKSPACE_TOOLS.FILESYSTEM.FILE_STAT);
+      }
+      if (!isReadOnly) {
+        if (isEnabled(WORKSPACE_TOOLS.FILESYSTEM.WRITE_FILE)) {
+          tools.push(WORKSPACE_TOOLS.FILESYSTEM.WRITE_FILE);
+        }
+        if (isEnabled(WORKSPACE_TOOLS.FILESYSTEM.EDIT_FILE)) {
+          tools.push(WORKSPACE_TOOLS.FILESYSTEM.EDIT_FILE);
+        }
+        if (isEnabled(WORKSPACE_TOOLS.FILESYSTEM.DELETE)) {
+          tools.push(WORKSPACE_TOOLS.FILESYSTEM.DELETE);
+        }
+        if (isEnabled(WORKSPACE_TOOLS.FILESYSTEM.MKDIR)) {
+          tools.push(WORKSPACE_TOOLS.FILESYSTEM.MKDIR);
+        }
+      }
+    }
+    if (workspace.canBM25 || workspace.canVector) {
+      if (isEnabled(WORKSPACE_TOOLS.SEARCH.SEARCH)) {
+        tools.push(WORKSPACE_TOOLS.SEARCH.SEARCH);
+      }
+      if (!isReadOnly && isEnabled(WORKSPACE_TOOLS.SEARCH.INDEX)) {
+        tools.push(WORKSPACE_TOOLS.SEARCH.INDEX);
+      }
+    }
+    if (workspace.sandbox) {
+      if (workspace.sandbox.executeCommand && isEnabled(WORKSPACE_TOOLS.SANDBOX.EXECUTE_COMMAND)) {
+        tools.push(WORKSPACE_TOOLS.SANDBOX.EXECUTE_COMMAND);
+      }
+    }
+    return tools;
+  } catch {
+    return [];
+  }
+}
 async function getSerializedAgentDefinition({
   agent,
   requestContext
@@ -173,6 +312,14 @@ async function formatAgentList({
   } catch (error) {
     logger.error("Error getting configured processors for agent", { agentName: agent.name, error });
   }
+  const serializedSkills = await getSerializedSkillsFromAgent(agent, requestContext);
+  const workspaceTools = await getWorkspaceToolsFromAgent(agent, requestContext);
+  let workspaceId;
+  try {
+    const workspace = await agent.getWorkspace({ requestContext });
+    workspaceId = workspace?.id;
+  } catch {
+  }
   const model = llm?.getModel();
   const models = await agent.getModelList(requestContext);
   const modelList = models?.map((md) => ({
@@ -191,6 +338,9 @@ async function formatAgentList({
     agents: serializedAgentAgents,
     tools: serializedAgentTools,
     workflows: serializedAgentWorkflows,
+    skills: serializedSkills,
+    workspaceTools,
+    workspaceId,
     inputProcessors: serializedInputProcessors,
     outputProcessors: serializedOutputProcessors,
     provider: llm?.getProvider(),
@@ -199,7 +349,8 @@ async function formatAgentList({
     defaultOptions,
     modelList,
     defaultGenerateOptionsLegacy,
-    defaultStreamOptionsLegacy
+    defaultStreamOptionsLegacy,
+    source: agent.source ?? "code"
   };
 }
 async function getAgentFromSystem({ mastra, agentId }) {
@@ -230,6 +381,14 @@ async function getAgentFromSystem({ mastra, agentId }) {
       }
     }
   }
+  if (!agent) {
+    logger.debug(`Agent ${agentId} not found in code-defined agents, looking in stored agents`);
+    try {
+      agent = await mastra.getStoredAgentById(agentId);
+    } catch (error) {
+      logger.debug("Error getting stored agent", error);
+    }
+  }
   if (!agent) {
     throw new chunk64ITUOXI_cjs.HTTPException(404, { message: `Agent with id ${agentId} not found` });
   }
@@ -303,6 +462,22 @@ async function formatAgent({
   } catch (error) {
     mastra.getLogger().error("Error getting configured processors for agent", { agentName: agent.name, error });
   }
+  const serializedSkills = await getSerializedSkillsFromAgent(agent, proxyRequestContext);
+  const workspaceTools = await getWorkspaceToolsFromAgent(agent, proxyRequestContext);
+  let workspaceId;
+  try {
+    const workspace = await agent.getWorkspace({ requestContext: proxyRequestContext });
+    workspaceId = workspace?.id;
+  } catch {
+  }
+  let serializedRequestContextSchema;
+  if (agent.requestContextSchema) {
+    try {
+      serializedRequestContextSchema = chunkK2SXZLA3_cjs.stringify(zodToJson.zodToJsonSchema(agent.requestContextSchema));
+    } catch (error) {
+      mastra.getLogger().error("Error serializing requestContextSchema for agent", { agentName: agent.name, error });
+    }
+  }
   return {
     name: agent.name,
     description,
@@ -310,6 +485,9 @@ async function formatAgent({
     tools: serializedAgentTools,
     agents: serializedAgentAgents,
     workflows: serializedAgentWorkflows,
+    skills: serializedSkills,
+    workspaceTools,
+    workspaceId,
     inputProcessors: serializedInputProcessors,
     outputProcessors: serializedOutputProcessors,
     provider: llm?.getProvider(),
@@ -318,51 +496,80 @@ async function formatAgent({
     modelList,
     defaultOptions,
     defaultGenerateOptionsLegacy,
-    defaultStreamOptionsLegacy
+    defaultStreamOptionsLegacy,
+    requestContextSchema: serializedRequestContextSchema,
+    source: agent.source ?? "code"
   };
 }
-var LIST_AGENTS_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var LIST_AGENTS_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "GET",
-  path: "/api/agents",
+  path: "/agents",
   responseType: "json",
   queryParamSchema: zod.z.object({
     partial: zod.z.string().optional()
   }),
-  responseSchema: chunkBRI4GUZ2_cjs.listAgentsResponseSchema,
+  responseSchema: chunkK2SXZLA3_cjs.listAgentsResponseSchema,
   summary: "List all agents",
-  description: "Returns a list of all available agents in the system",
+  description: "Returns a list of all available agents in the system (both code-defined and stored)",
   tags: ["Agents"],
+  requiresAuth: true,
   handler: async ({ mastra, requestContext, partial }) => {
     try {
-      const agents = mastra.listAgents();
+      const codeAgents = mastra.listAgents();
       const isPartial = partial === "true";
-      const serializedAgentsMap = await Promise.all(
-        Object.entries(agents).map(async ([id, agent]) => {
+      const serializedCodeAgentsMap = await Promise.all(
+        Object.entries(codeAgents).map(async ([id, agent]) => {
           return formatAgentList({ id, mastra, agent, requestContext, partial: isPartial });
         })
       );
-      const serializedAgents = serializedAgentsMap.reduce(
+      const serializedAgents = serializedCodeAgentsMap.reduce(
         (acc, { id, ...rest }) => {
           acc[id] = { id, ...rest };
           return acc;
         },
         {}
       );
+      try {
+        const storedAgentsResult = await mastra.listStoredAgents();
+        if (storedAgentsResult?.agents) {
+          for (const agent of storedAgentsResult.agents) {
+            try {
+              const serialized = await formatAgentList({
+                id: agent.id,
+                mastra,
+                agent,
+                requestContext,
+                partial: isPartial
+              });
+              if (!serializedAgents[serialized.id]) {
+                serializedAgents[serialized.id] = serialized;
+              }
+            } catch (agentError) {
+              const logger = mastra.getLogger();
+              logger.warn("Failed to serialize stored agent", { agentId: agent.id, error: agentError });
+            }
+          }
+        }
+      } catch (storageError) {
+        const logger = mastra.getLogger();
+        logger.debug("Could not fetch stored agents", { error: storageError });
+      }
       return serializedAgents;
     } catch (error) {
       return chunkSUKFO7UM_cjs.handleError(error, "Error getting agents");
     }
   }
 });
-var GET_AGENT_BY_ID_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var GET_AGENT_BY_ID_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "GET",
-  path: "/api/agents/:agentId",
+  path: "/agents/:agentId",
   responseType: "json",
-  pathParamSchema: chunkBRI4GUZ2_cjs.agentIdPathParams,
-  responseSchema: chunkBRI4GUZ2_cjs.serializedAgentSchema,
+  pathParamSchema: chunkK2SXZLA3_cjs.agentIdPathParams,
+  responseSchema: chunkK2SXZLA3_cjs.serializedAgentSchema,
   summary: "Get agent by ID",
   description: "Returns details for a specific agent including configuration, tools, and memory settings",
   tags: ["Agents"],
+  requiresAuth: true,
   handler: async ({ agentId, mastra, requestContext }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
@@ -379,24 +586,52 @@ var GET_AGENT_BY_ID_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var GENERATE_AGENT_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var GENERATE_AGENT_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/generate",
+  path: "/agents/:agentId/generate",
   responseType: "json",
-  pathParamSchema: chunkBRI4GUZ2_cjs.agentIdPathParams,
-  bodySchema: chunkBRI4GUZ2_cjs.agentExecutionBodySchema,
-  responseSchema: chunkBRI4GUZ2_cjs.generateResponseSchema,
+  pathParamSchema: chunkK2SXZLA3_cjs.agentIdPathParams,
+  bodySchema: chunkK2SXZLA3_cjs.agentExecutionBodySchema,
+  responseSchema: chunkK2SXZLA3_cjs.generateResponseSchema,
   summary: "Generate agent response",
   description: "Executes an agent with the provided messages and returns the complete response",
   tags: ["Agents"],
-  handler: async ({ agentId, mastra, abortSignal, ...params }) => {
+  requiresAuth: true,
+  handler: async ({ agentId, mastra, abortSignal, requestContext: serverRequestContext, ...params }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
-      chunk5W4RPVTK_cjs.sanitizeBody(params, ["tools"]);
-      const { messages, ...rest } = params;
-      chunk5W4RPVTK_cjs.validateBody({ messages });
+      chunkZKMVCV4G_cjs.sanitizeBody(params, ["tools"]);
+      const { messages, memory: memoryOption, requestContext: bodyRequestContext, ...rest } = params;
+      chunkZKMVCV4G_cjs.validateBody({ messages });
+      if (bodyRequestContext && typeof bodyRequestContext === "object") {
+        for (const [key, value] of Object.entries(bodyRequestContext)) {
+          if (serverRequestContext.get(key) === void 0) {
+            serverRequestContext.set(key, value);
+          }
+        }
+      }
+      let authorizedMemoryOption = memoryOption;
+      if (memoryOption) {
+        const clientThreadId = typeof memoryOption.thread === "string" ? memoryOption.thread : memoryOption.thread?.id;
+        const effectiveResourceId = chunkZKMVCV4G_cjs.getEffectiveResourceId(serverRequestContext, memoryOption.resource);
+        const effectiveThreadId = chunkZKMVCV4G_cjs.getEffectiveThreadId(serverRequestContext, clientThreadId);
+        if (effectiveThreadId && effectiveResourceId) {
+          const memoryInstance = await agent.getMemory({ requestContext: serverRequestContext });
+          if (memoryInstance) {
+            const thread = await memoryInstance.getThreadById({ threadId: effectiveThreadId });
+            await chunkZKMVCV4G_cjs.validateThreadOwnership(thread, effectiveResourceId);
+          }
+        }
+        authorizedMemoryOption = {
+          ...memoryOption,
+          resource: effectiveResourceId ?? memoryOption.resource,
+          thread: effectiveThreadId ?? memoryOption.thread
+        };
+      }
       const result = await agent.generate(messages, {
         ...rest,
+        requestContext: serverRequestContext,
+        memory: authorizedMemoryOption,
         abortSignal
       });
       return result;
@@ -405,31 +640,41 @@ var GENERATE_AGENT_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var GENERATE_LEGACY_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var GENERATE_LEGACY_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/generate-legacy",
+  path: "/agents/:agentId/generate-legacy",
   responseType: "json",
-  pathParamSchema: chunkBRI4GUZ2_cjs.agentIdPathParams,
-  bodySchema: chunkBRI4GUZ2_cjs.agentExecutionLegacyBodySchema,
-  responseSchema: chunkBRI4GUZ2_cjs.generateResponseSchema,
+  pathParamSchema: chunkK2SXZLA3_cjs.agentIdPathParams,
+  bodySchema: chunkK2SXZLA3_cjs.agentExecutionLegacyBodySchema,
+  responseSchema: chunkK2SXZLA3_cjs.generateResponseSchema,
   summary: "[DEPRECATED] Generate with legacy format",
-  description: "Legacy endpoint for generating agent responses. Use /api/agents/:agentId/generate instead.",
+  description: "Legacy endpoint for generating agent responses. Use /agents/:agentId/generate instead.",
   tags: ["Agents", "Legacy"],
-  handler: async ({ mastra, agentId, abortSignal, ...params }) => {
+  requiresAuth: true,
+  handler: async ({ mastra, agentId, abortSignal, requestContext, ...params }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
-      chunk5W4RPVTK_cjs.sanitizeBody(params, ["tools"]);
+      chunkZKMVCV4G_cjs.sanitizeBody(params, ["tools"]);
       const { messages, resourceId, resourceid, threadId, ...rest } = params;
-      const finalResourceId = resourceId ?? resourceid;
-      chunk5W4RPVTK_cjs.validateBody({ messages });
-      if (threadId && !finalResourceId || !threadId && finalResourceId) {
+      const clientResourceId = resourceId ?? resourceid;
+      const effectiveResourceId = chunkZKMVCV4G_cjs.getEffectiveResourceId(requestContext, clientResourceId);
+      const effectiveThreadId = chunkZKMVCV4G_cjs.getEffectiveThreadId(requestContext, threadId);
+      chunkZKMVCV4G_cjs.validateBody({ messages });
+      if (effectiveThreadId && !effectiveResourceId || !effectiveThreadId && effectiveResourceId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Both threadId or resourceId must be provided" });
       }
+      if (effectiveThreadId && effectiveResourceId) {
+        const memory = await agent.getMemory({ requestContext });
+        if (memory) {
+          const thread = await memory.getThreadById({ threadId: effectiveThreadId });
+          await chunkZKMVCV4G_cjs.validateThreadOwnership(thread, effectiveResourceId);
+        }
+      }
       const result = await agent.generateLegacy(messages, {
         ...rest,
         abortSignal,
-        resourceId: finalResourceId ?? "",
-        threadId: threadId ?? ""
+        resourceId: effectiveResourceId ?? "",
+        threadId: effectiveThreadId ?? ""
       });
       return result;
     } catch (error) {
@@ -437,31 +682,41 @@ var GENERATE_LEGACY_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var STREAM_GENERATE_LEGACY_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var STREAM_GENERATE_LEGACY_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/stream-legacy",
+  path: "/agents/:agentId/stream-legacy",
   responseType: "datastream-response",
-  pathParamSchema: chunkBRI4GUZ2_cjs.agentIdPathParams,
-  bodySchema: chunkBRI4GUZ2_cjs.agentExecutionLegacyBodySchema,
-  responseSchema: chunkBRI4GUZ2_cjs.streamResponseSchema,
+  pathParamSchema: chunkK2SXZLA3_cjs.agentIdPathParams,
+  bodySchema: chunkK2SXZLA3_cjs.agentExecutionLegacyBodySchema,
+  responseSchema: chunkK2SXZLA3_cjs.streamResponseSchema,
   summary: "[DEPRECATED] Stream with legacy format",
-  description: "Legacy endpoint for streaming agent responses. Use /api/agents/:agentId/stream instead.",
+  description: "Legacy endpoint for streaming agent responses. Use /agents/:agentId/stream instead.",
   tags: ["Agents", "Legacy"],
-  handler: async ({ mastra, agentId, abortSignal, ...params }) => {
+  requiresAuth: true,
+  handler: async ({ mastra, agentId, abortSignal, requestContext, ...params }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
-      chunk5W4RPVTK_cjs.sanitizeBody(params, ["tools"]);
+      chunkZKMVCV4G_cjs.sanitizeBody(params, ["tools"]);
       const { messages, resourceId, resourceid, threadId, ...rest } = params;
-      const finalResourceId = resourceId ?? resourceid;
-      chunk5W4RPVTK_cjs.validateBody({ messages });
-      if (threadId && !finalResourceId || !threadId && finalResourceId) {
+      const clientResourceId = resourceId ?? resourceid;
+      const effectiveResourceId = chunkZKMVCV4G_cjs.getEffectiveResourceId(requestContext, clientResourceId);
+      const effectiveThreadId = chunkZKMVCV4G_cjs.getEffectiveThreadId(requestContext, threadId);
+      chunkZKMVCV4G_cjs.validateBody({ messages });
+      if (effectiveThreadId && !effectiveResourceId || !effectiveThreadId && effectiveResourceId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Both threadId or resourceId must be provided" });
       }
+      if (effectiveThreadId && effectiveResourceId) {
+        const memory = await agent.getMemory({ requestContext });
+        if (memory) {
+          const thread = await memory.getThreadById({ threadId: effectiveThreadId });
+          await chunkZKMVCV4G_cjs.validateThreadOwnership(thread, effectiveResourceId);
+        }
+      }
       const streamResult = await agent.streamLegacy(messages, {
         ...rest,
         abortSignal,
-        resourceId: finalResourceId ?? "",
-        threadId: threadId ?? ""
+        resourceId: effectiveResourceId ?? "",
+        threadId: effectiveThreadId ?? ""
       });
       const streamResponse = rest.output ? streamResult.toTextStreamResponse({
         headers: {
@@ -483,14 +738,15 @@ var STREAM_GENERATE_LEGACY_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var GET_PROVIDERS_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var GET_PROVIDERS_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "GET",
-  path: "/api/agents/providers",
+  path: "/agents/providers",
   responseType: "json",
-  responseSchema: chunkBRI4GUZ2_cjs.providersResponseSchema,
+  responseSchema: chunkK2SXZLA3_cjs.providersResponseSchema,
   summary: "List AI providers",
   description: "Returns a list of all configured AI model providers",
   tags: ["Agents"],
+  requiresAuth: true,
   handler: async () => {
     try {
       const providers = Object.entries(llm.PROVIDER_REGISTRY).map(([id, provider]) => {
@@ -512,37 +768,66 @@ var GET_PROVIDERS_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var GENERATE_AGENT_VNEXT_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var GENERATE_AGENT_VNEXT_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/generate/vnext",
+  path: "/agents/:agentId/generate/vnext",
   responseType: "json",
-  pathParamSchema: chunkBRI4GUZ2_cjs.agentIdPathParams,
-  bodySchema: chunkBRI4GUZ2_cjs.agentExecutionBodySchema,
-  responseSchema: chunkBRI4GUZ2_cjs.generateResponseSchema,
+  pathParamSchema: chunkK2SXZLA3_cjs.agentIdPathParams,
+  bodySchema: chunkK2SXZLA3_cjs.agentExecutionBodySchema,
+  responseSchema: chunkK2SXZLA3_cjs.generateResponseSchema,
   summary: "Generate a response from an agent",
   description: "Generate a response from an agent",
   tags: ["Agents"],
+  requiresAuth: true,
   handler: GENERATE_AGENT_ROUTE.handler
 });
-var STREAM_GENERATE_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var STREAM_GENERATE_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/stream",
+  path: "/agents/:agentId/stream",
   responseType: "stream",
   streamFormat: "sse",
-  pathParamSchema: chunkBRI4GUZ2_cjs.agentIdPathParams,
-  bodySchema: chunkBRI4GUZ2_cjs.agentExecutionBodySchema,
-  responseSchema: chunkBRI4GUZ2_cjs.streamResponseSchema,
+  pathParamSchema: chunkK2SXZLA3_cjs.agentIdPathParams,
+  bodySchema: chunkK2SXZLA3_cjs.agentExecutionBodySchema,
+  responseSchema: chunkK2SXZLA3_cjs.streamResponseSchema,
   summary: "Stream agent response",
   description: "Executes an agent with the provided messages and streams the response in real-time",
   tags: ["Agents"],
-  handler: async ({ mastra, agentId, abortSignal, ...params }) => {
+  requiresAuth: true,
+  handler: async ({ mastra, agentId, abortSignal, requestContext: serverRequestContext, ...params }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
-      chunk5W4RPVTK_cjs.sanitizeBody(params, ["tools"]);
-      const { messages, ...rest } = params;
-      chunk5W4RPVTK_cjs.validateBody({ messages });
+      chunkZKMVCV4G_cjs.sanitizeBody(params, ["tools"]);
+      const { messages, memory: memoryOption, requestContext: bodyRequestContext, ...rest } = params;
+      chunkZKMVCV4G_cjs.validateBody({ messages });
+      if (bodyRequestContext && typeof bodyRequestContext === "object") {
+        for (const [key, value] of Object.entries(bodyRequestContext)) {
+          if (serverRequestContext.get(key) === void 0) {
+            serverRequestContext.set(key, value);
+          }
+        }
+      }
+      let authorizedMemoryOption = memoryOption;
+      if (memoryOption) {
+        const clientThreadId = typeof memoryOption.thread === "string" ? memoryOption.thread : memoryOption.thread?.id;
+        const effectiveResourceId = chunkZKMVCV4G_cjs.getEffectiveResourceId(serverRequestContext, memoryOption.resource);
+        const effectiveThreadId = chunkZKMVCV4G_cjs.getEffectiveThreadId(serverRequestContext, clientThreadId);
+        if (effectiveThreadId && effectiveResourceId) {
+          const memoryInstance = await agent.getMemory({ requestContext: serverRequestContext });
+          if (memoryInstance) {
+            const thread = await memoryInstance.getThreadById({ threadId: effectiveThreadId });
+            await chunkZKMVCV4G_cjs.validateThreadOwnership(thread, effectiveResourceId);
+          }
+        }
+        authorizedMemoryOption = {
+          ...memoryOption,
+          resource: effectiveResourceId ?? memoryOption.resource,
+          thread: effectiveThreadId ?? memoryOption.thread
+        };
+      }
       const streamResult = await agent.stream(messages, {
         ...rest,
+        requestContext: serverRequestContext,
+        memory: authorizedMemoryOption,
         abortSignal
       });
       return streamResult.fullStream;
@@ -551,30 +836,32 @@ var STREAM_GENERATE_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var STREAM_GENERATE_VNEXT_DEPRECATED_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var STREAM_GENERATE_VNEXT_DEPRECATED_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/stream/vnext",
+  path: "/agents/:agentId/stream/vnext",
   responseType: "stream",
-  pathParamSchema: chunkBRI4GUZ2_cjs.agentIdPathParams,
-  bodySchema: chunkBRI4GUZ2_cjs.agentExecutionBodySchema,
-  responseSchema: chunkBRI4GUZ2_cjs.streamResponseSchema,
+  pathParamSchema: chunkK2SXZLA3_cjs.agentIdPathParams,
+  bodySchema: chunkK2SXZLA3_cjs.agentExecutionBodySchema,
+  responseSchema: chunkK2SXZLA3_cjs.streamResponseSchema,
   summary: "Stream a response from an agent",
   description: "[DEPRECATED] This endpoint is deprecated. Please use /stream instead.",
   tags: ["Agents"],
+  requiresAuth: true,
   deprecated: true,
   handler: STREAM_GENERATE_ROUTE.handler
 });
-var APPROVE_TOOL_CALL_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var APPROVE_TOOL_CALL_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/approve-tool-call",
+  path: "/agents/:agentId/approve-tool-call",
   responseType: "stream",
   streamFormat: "sse",
-  pathParamSchema: chunkBRI4GUZ2_cjs.agentIdPathParams,
-  bodySchema: chunkBRI4GUZ2_cjs.approveToolCallBodySchema,
-  responseSchema: chunkBRI4GUZ2_cjs.toolCallResponseSchema,
+  pathParamSchema: chunkK2SXZLA3_cjs.agentIdPathParams,
+  bodySchema: chunkK2SXZLA3_cjs.approveToolCallBodySchema,
+  responseSchema: chunkK2SXZLA3_cjs.toolCallResponseSchema,
   summary: "Approve tool call",
   description: "Approves a pending tool call and continues agent execution",
   tags: ["Agents", "Tools"],
+  requiresAuth: true,
   handler: async ({ mastra, agentId, abortSignal, ...params }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
@@ -584,7 +871,7 @@ var APPROVE_TOOL_CALL_ROUTE = chunkAVRO3FIN_cjs.createRoute({
       if (!params.toolCallId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Tool call id is required" });
       }
-      chunk5W4RPVTK_cjs.sanitizeBody(params, ["tools"]);
+      chunkZKMVCV4G_cjs.sanitizeBody(params, ["tools"]);
       const streamResult = await agent.approveToolCall({
         ...params,
         abortSignal
@@ -595,17 +882,18 @@ var APPROVE_TOOL_CALL_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var DECLINE_TOOL_CALL_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var DECLINE_TOOL_CALL_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/decline-tool-call",
+  path: "/agents/:agentId/decline-tool-call",
   responseType: "stream",
   streamFormat: "sse",
-  pathParamSchema: chunkBRI4GUZ2_cjs.agentIdPathParams,
-  bodySchema: chunkBRI4GUZ2_cjs.declineToolCallBodySchema,
-  responseSchema: chunkBRI4GUZ2_cjs.toolCallResponseSchema,
+  pathParamSchema: chunkK2SXZLA3_cjs.agentIdPathParams,
+  bodySchema: chunkK2SXZLA3_cjs.declineToolCallBodySchema,
+  responseSchema: chunkK2SXZLA3_cjs.toolCallResponseSchema,
   summary: "Decline tool call",
   description: "Declines a pending tool call and continues agent execution without executing the tool",
   tags: ["Agents", "Tools"],
+  requiresAuth: true,
   handler: async ({ mastra, agentId, abortSignal, ...params }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
@@ -615,7 +903,7 @@ var DECLINE_TOOL_CALL_ROUTE = chunkAVRO3FIN_cjs.createRoute({
       if (!params.toolCallId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Tool call id is required" });
       }
-      chunk5W4RPVTK_cjs.sanitizeBody(params, ["tools"]);
+      chunkZKMVCV4G_cjs.sanitizeBody(params, ["tools"]);
       const streamResult = await agent.declineToolCall({
         ...params,
         abortSignal
@@ -626,16 +914,17 @@ var DECLINE_TOOL_CALL_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var APPROVE_TOOL_CALL_GENERATE_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var APPROVE_TOOL_CALL_GENERATE_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/approve-tool-call-generate",
+  path: "/agents/:agentId/approve-tool-call-generate",
   responseType: "json",
-  pathParamSchema: chunkBRI4GUZ2_cjs.agentIdPathParams,
-  bodySchema: chunkBRI4GUZ2_cjs.approveToolCallBodySchema,
-  responseSchema: chunkBRI4GUZ2_cjs.generateResponseSchema,
+  pathParamSchema: chunkK2SXZLA3_cjs.agentIdPathParams,
+  bodySchema: chunkK2SXZLA3_cjs.approveToolCallBodySchema,
+  responseSchema: chunkK2SXZLA3_cjs.generateResponseSchema,
   summary: "Approve tool call (non-streaming)",
   description: "Approves a pending tool call and returns the complete response",
   tags: ["Agents", "Tools"],
+  requiresAuth: true,
   handler: async ({ mastra, agentId, abortSignal, ...params }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
@@ -645,7 +934,7 @@ var APPROVE_TOOL_CALL_GENERATE_ROUTE = chunkAVRO3FIN_cjs.createRoute({
       if (!params.toolCallId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Tool call id is required" });
       }
-      chunk5W4RPVTK_cjs.sanitizeBody(params, ["tools"]);
+      chunkZKMVCV4G_cjs.sanitizeBody(params, ["tools"]);
       const result = await agent.approveToolCallGenerate({
         ...params,
         abortSignal
@@ -656,16 +945,17 @@ var APPROVE_TOOL_CALL_GENERATE_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var DECLINE_TOOL_CALL_GENERATE_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var DECLINE_TOOL_CALL_GENERATE_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/decline-tool-call-generate",
+  path: "/agents/:agentId/decline-tool-call-generate",
   responseType: "json",
-  pathParamSchema: chunkBRI4GUZ2_cjs.agentIdPathParams,
-  bodySchema: chunkBRI4GUZ2_cjs.declineToolCallBodySchema,
-  responseSchema: chunkBRI4GUZ2_cjs.generateResponseSchema,
+  pathParamSchema: chunkK2SXZLA3_cjs.agentIdPathParams,
+  bodySchema: chunkK2SXZLA3_cjs.declineToolCallBodySchema,
+  responseSchema: chunkK2SXZLA3_cjs.generateResponseSchema,
   summary: "Decline tool call (non-streaming)",
   description: "Declines a pending tool call and returns the complete response",
   tags: ["Agents", "Tools"],
+  requiresAuth: true,
   handler: async ({ mastra, agentId, abortSignal, ...params }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
@@ -675,7 +965,7 @@ var DECLINE_TOOL_CALL_GENERATE_ROUTE = chunkAVRO3FIN_cjs.createRoute({
       if (!params.toolCallId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Tool call id is required" });
       }
-      chunk5W4RPVTK_cjs.sanitizeBody(params, ["tools"]);
+      chunkZKMVCV4G_cjs.sanitizeBody(params, ["tools"]);
       const result = await agent.declineToolCallGenerate({
         ...params,
         abortSignal
@@ -686,22 +976,23 @@ var DECLINE_TOOL_CALL_GENERATE_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var STREAM_NETWORK_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var STREAM_NETWORK_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/network",
+  path: "/agents/:agentId/network",
   responseType: "stream",
   streamFormat: "sse",
-  pathParamSchema: chunkBRI4GUZ2_cjs.agentIdPathParams,
-  bodySchema: chunkBRI4GUZ2_cjs.agentExecutionBodySchema,
-  responseSchema: chunkBRI4GUZ2_cjs.streamResponseSchema,
+  pathParamSchema: chunkK2SXZLA3_cjs.agentIdPathParams,
+  bodySchema: chunkK2SXZLA3_cjs.agentExecutionBodySchema,
+  responseSchema: chunkK2SXZLA3_cjs.streamResponseSchema,
   summary: "Stream agent network",
   description: "Executes an agent network with multiple agents and streams the response",
   tags: ["Agents"],
+  requiresAuth: true,
   handler: async ({ mastra, messages, agentId, ...params }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
-      chunk5W4RPVTK_cjs.sanitizeBody(params, ["tools"]);
-      chunk5W4RPVTK_cjs.validateBody({ messages });
+      chunkZKMVCV4G_cjs.sanitizeBody(params, ["tools"]);
+      chunkZKMVCV4G_cjs.validateBody({ messages });
       const streamResult = await agent.network(messages, {
         ...params
       });
@@ -711,24 +1002,25 @@ var STREAM_NETWORK_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var APPROVE_NETWORK_TOOL_CALL_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var APPROVE_NETWORK_TOOL_CALL_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/approve-network-tool-call",
+  path: "/agents/:agentId/approve-network-tool-call",
   responseType: "stream",
   streamFormat: "sse",
-  pathParamSchema: chunkBRI4GUZ2_cjs.agentIdPathParams,
-  bodySchema: chunkBRI4GUZ2_cjs.approveNetworkToolCallBodySchema,
-  responseSchema: chunkBRI4GUZ2_cjs.streamResponseSchema,
+  pathParamSchema: chunkK2SXZLA3_cjs.agentIdPathParams,
+  bodySchema: chunkK2SXZLA3_cjs.approveNetworkToolCallBodySchema,
+  responseSchema: chunkK2SXZLA3_cjs.streamResponseSchema,
   summary: "Approve network tool call",
   description: "Approves a pending network tool call and continues network agent execution",
   tags: ["Agents", "Tools"],
+  requiresAuth: true,
   handler: async ({ mastra, agentId, ...params }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
       if (!params.runId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Run id is required" });
       }
-      chunk5W4RPVTK_cjs.sanitizeBody(params, ["tools"]);
+      chunkZKMVCV4G_cjs.sanitizeBody(params, ["tools"]);
       const streamResult = await agent.approveNetworkToolCall({
         ...params
       });
@@ -738,24 +1030,25 @@ var APPROVE_NETWORK_TOOL_CALL_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var DECLINE_NETWORK_TOOL_CALL_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var DECLINE_NETWORK_TOOL_CALL_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/decline-network-tool-call",
+  path: "/agents/:agentId/decline-network-tool-call",
   responseType: "stream",
   streamFormat: "sse",
-  pathParamSchema: chunkBRI4GUZ2_cjs.agentIdPathParams,
-  bodySchema: chunkBRI4GUZ2_cjs.declineNetworkToolCallBodySchema,
-  responseSchema: chunkBRI4GUZ2_cjs.streamResponseSchema,
+  pathParamSchema: chunkK2SXZLA3_cjs.agentIdPathParams,
+  bodySchema: chunkK2SXZLA3_cjs.declineNetworkToolCallBodySchema,
+  responseSchema: chunkK2SXZLA3_cjs.streamResponseSchema,
   summary: "Decline network tool call",
   description: "Declines a pending network tool call and continues network agent execution without executing the tool",
   tags: ["Agents", "Tools"],
+  requiresAuth: true,
   handler: async ({ mastra, agentId, ...params }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
       if (!params.runId) {
         throw new chunk64ITUOXI_cjs.HTTPException(400, { message: "Run id is required" });
       }
-      chunk5W4RPVTK_cjs.sanitizeBody(params, ["tools"]);
+      chunkZKMVCV4G_cjs.sanitizeBody(params, ["tools"]);
       const streamResult = await agent.declineNetworkToolCall({
         ...params
       });
@@ -765,16 +1058,17 @@ var DECLINE_NETWORK_TOOL_CALL_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var UPDATE_AGENT_MODEL_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var UPDATE_AGENT_MODEL_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/model",
+  path: "/agents/:agentId/model",
   responseType: "json",
-  pathParamSchema: chunkBRI4GUZ2_cjs.agentIdPathParams,
-  bodySchema: chunkBRI4GUZ2_cjs.updateAgentModelBodySchema,
-  responseSchema: chunkBRI4GUZ2_cjs.modelManagementResponseSchema,
+  pathParamSchema: chunkK2SXZLA3_cjs.agentIdPathParams,
+  bodySchema: chunkK2SXZLA3_cjs.updateAgentModelBodySchema,
+  responseSchema: chunkK2SXZLA3_cjs.modelManagementResponseSchema,
   summary: "Update agent model",
   description: "Updates the AI model used by the agent",
   tags: ["Agents", "Models"],
+  requiresAuth: true,
   handler: async ({ mastra, agentId, modelId, provider }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
@@ -786,15 +1080,16 @@ var UPDATE_AGENT_MODEL_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var RESET_AGENT_MODEL_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var RESET_AGENT_MODEL_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/model/reset",
+  path: "/agents/:agentId/model/reset",
   responseType: "json",
-  pathParamSchema: chunkBRI4GUZ2_cjs.agentIdPathParams,
-  responseSchema: chunkBRI4GUZ2_cjs.modelManagementResponseSchema,
+  pathParamSchema: chunkK2SXZLA3_cjs.agentIdPathParams,
+  responseSchema: chunkK2SXZLA3_cjs.modelManagementResponseSchema,
   summary: "Reset agent model",
   description: "Resets the agent model to its original configuration",
   tags: ["Agents", "Models"],
+  requiresAuth: true,
   handler: async ({ mastra, agentId }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
@@ -805,16 +1100,17 @@ var RESET_AGENT_MODEL_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var REORDER_AGENT_MODEL_LIST_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var REORDER_AGENT_MODEL_LIST_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/models/reorder",
+  path: "/agents/:agentId/models/reorder",
   responseType: "json",
-  pathParamSchema: chunkBRI4GUZ2_cjs.agentIdPathParams,
-  bodySchema: chunkBRI4GUZ2_cjs.reorderAgentModelListBodySchema,
-  responseSchema: chunkBRI4GUZ2_cjs.modelManagementResponseSchema,
+  pathParamSchema: chunkK2SXZLA3_cjs.agentIdPathParams,
+  bodySchema: chunkK2SXZLA3_cjs.reorderAgentModelListBodySchema,
+  responseSchema: chunkK2SXZLA3_cjs.modelManagementResponseSchema,
   summary: "Reorder agent model list",
   description: "Reorders the model list for agents with multiple model configurations",
   tags: ["Agents", "Models"],
+  requiresAuth: true,
   handler: async ({ mastra, agentId, reorderedModelIds }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
@@ -829,16 +1125,17 @@ var REORDER_AGENT_MODEL_LIST_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var UPDATE_AGENT_MODEL_IN_MODEL_LIST_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var UPDATE_AGENT_MODEL_IN_MODEL_LIST_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/models/:modelConfigId",
+  path: "/agents/:agentId/models/:modelConfigId",
   responseType: "json",
-  pathParamSchema: chunkBRI4GUZ2_cjs.modelConfigIdPathParams,
-  bodySchema: chunkBRI4GUZ2_cjs.updateAgentModelInModelListBodySchema,
-  responseSchema: chunkBRI4GUZ2_cjs.modelManagementResponseSchema,
+  pathParamSchema: chunkK2SXZLA3_cjs.modelConfigIdPathParams,
+  bodySchema: chunkK2SXZLA3_cjs.updateAgentModelInModelListBodySchema,
+  responseSchema: chunkK2SXZLA3_cjs.modelManagementResponseSchema,
   summary: "Update model in model list",
   description: "Updates a specific model configuration in the agent model list",
   tags: ["Agents", "Models"],
+  requiresAuth: true,
   handler: async ({ mastra, agentId, modelConfigId, model: bodyModel, maxRetries, enabled }) => {
     try {
       const agent = await getAgentFromSystem({ mastra, agentId });
@@ -933,16 +1230,17 @@ async function findConnectedModel(agent) {
   }
   return null;
 }
-var ENHANCE_INSTRUCTIONS_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var ENHANCE_INSTRUCTIONS_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/instructions/enhance",
+  path: "/agents/:agentId/instructions/enhance",
   responseType: "json",
-  pathParamSchema: chunkBRI4GUZ2_cjs.agentIdPathParams,
-  bodySchema: chunkBRI4GUZ2_cjs.enhanceInstructionsBodySchema,
-  responseSchema: chunkBRI4GUZ2_cjs.enhanceInstructionsResponseSchema,
+  pathParamSchema: chunkK2SXZLA3_cjs.agentIdPathParams,
+  bodySchema: chunkK2SXZLA3_cjs.enhanceInstructionsBodySchema,
+  responseSchema: chunkK2SXZLA3_cjs.enhanceInstructionsResponseSchema,
   summary: "Enhance agent instructions",
   description: "Uses AI to enhance or modify agent instructions based on user feedback",
   tags: ["Agents"],
+  requiresAuth: true,
   handler: async ({ mastra, agentId, instructions, comment }) => {
     try {
       const agent$1 = await getAgentFromSystem({ mastra, agentId });
@@ -964,7 +1262,7 @@ Current: ${instructions}
 ${comment ? `User feedback: ${comment}` : ""}`,
         {
           structuredOutput: {
-            schema: chunkBRI4GUZ2_cjs.enhanceInstructionsResponseSchema
+            schema: chunkK2SXZLA3_cjs.enhanceInstructionsResponseSchema
           }
         }
       );
@@ -974,31 +1272,33 @@ ${comment ? `User feedback: ${comment}` : ""}`,
     }
   }
 });
-var STREAM_VNEXT_DEPRECATED_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var STREAM_VNEXT_DEPRECATED_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/streamVNext",
+  path: "/agents/:agentId/streamVNext",
   responseType: "stream",
-  pathParamSchema: chunkBRI4GUZ2_cjs.agentIdPathParams,
-  bodySchema: chunkBRI4GUZ2_cjs.agentExecutionBodySchema,
-  responseSchema: chunkBRI4GUZ2_cjs.streamResponseSchema,
+  pathParamSchema: chunkK2SXZLA3_cjs.agentIdPathParams,
+  bodySchema: chunkK2SXZLA3_cjs.agentExecutionBodySchema,
+  responseSchema: chunkK2SXZLA3_cjs.streamResponseSchema,
   summary: "Stream a response from an agent",
   description: "[DEPRECATED] This endpoint is deprecated. Please use /stream instead.",
   tags: ["Agents"],
+  requiresAuth: true,
   deprecated: true,
   handler: async () => {
     throw new chunk64ITUOXI_cjs.HTTPException(410, { message: "This endpoint is deprecated. Please use /stream instead." });
   }
 });
-var STREAM_UI_MESSAGE_VNEXT_DEPRECATED_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var STREAM_UI_MESSAGE_VNEXT_DEPRECATED_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/stream/vnext/ui",
+  path: "/agents/:agentId/stream/vnext/ui",
   responseType: "stream",
-  pathParamSchema: chunkBRI4GUZ2_cjs.agentIdPathParams,
-  bodySchema: chunkBRI4GUZ2_cjs.agentExecutionBodySchema,
-  responseSchema: chunkBRI4GUZ2_cjs.streamResponseSchema,
+  pathParamSchema: chunkK2SXZLA3_cjs.agentIdPathParams,
+  bodySchema: chunkK2SXZLA3_cjs.agentExecutionBodySchema,
+  responseSchema: chunkK2SXZLA3_cjs.streamResponseSchema,
   summary: "Stream UI messages from an agent",
   description: "[DEPRECATED] This endpoint is deprecated. Please use the @mastra/ai-sdk package for uiMessage transformations",
   tags: ["Agents"],
+  requiresAuth: true,
   deprecated: true,
   handler: async () => {
     try {
@@ -1013,19 +1313,61 @@ var STREAM_UI_MESSAGE_VNEXT_DEPRECATED_ROUTE = chunkAVRO3FIN_cjs.createRoute({
     }
   }
 });
-var STREAM_UI_MESSAGE_DEPRECATED_ROUTE = chunkAVRO3FIN_cjs.createRoute({
+var STREAM_UI_MESSAGE_DEPRECATED_ROUTE = chunk4LVJBXI2_cjs.createRoute({
   method: "POST",
-  path: "/api/agents/:agentId/stream/ui",
+  path: "/agents/:agentId/stream/ui",
   responseType: "stream",
-  pathParamSchema: chunkBRI4GUZ2_cjs.agentIdPathParams,
-  bodySchema: chunkBRI4GUZ2_cjs.agentExecutionBodySchema,
-  responseSchema: chunkBRI4GUZ2_cjs.streamResponseSchema,
+  pathParamSchema: chunkK2SXZLA3_cjs.agentIdPathParams,
+  bodySchema: chunkK2SXZLA3_cjs.agentExecutionBodySchema,
+  responseSchema: chunkK2SXZLA3_cjs.streamResponseSchema,
   summary: "Stream UI messages from an agent",
   description: "[DEPRECATED] This endpoint is deprecated. Please use the @mastra/ai-sdk package for uiMessage transformations",
   tags: ["Agents"],
+  requiresAuth: true,
   deprecated: true,
   handler: STREAM_UI_MESSAGE_VNEXT_DEPRECATED_ROUTE.handler
 });
+var GET_AGENT_SKILL_ROUTE = chunk4LVJBXI2_cjs.createRoute({
+  method: "GET",
+  path: "/agents/:agentId/skills/:skillName",
+  responseType: "json",
+  pathParamSchema: chunkK2SXZLA3_cjs.agentSkillPathParams,
+  responseSchema: chunk4UNYZYBB_cjs.getAgentSkillResponseSchema,
+  summary: "Get agent skill",
+  description: "Returns details for a specific skill available to the agent via its workspace",
+  tags: ["Agents", "Skills"],
+  handler: async ({ mastra, agentId, skillName, requestContext }) => {
+    try {
+      const agent = agentId ? mastra.getAgentById(agentId) : null;
+      if (!agent) {
+        throw new chunk64ITUOXI_cjs.HTTPException(404, { message: "Agent not found" });
+      }
+      const workspace = await agent.getWorkspace({ requestContext });
+      if (!workspace?.skills) {
+        throw new chunk64ITUOXI_cjs.HTTPException(404, { message: "Agent does not have skills configured" });
+      }
+      const skill = await workspace.skills.get(skillName);
+      if (!skill) {
+        throw new chunk64ITUOXI_cjs.HTTPException(404, { message: `Skill "${skillName}" not found` });
+      }
+      return {
+        name: skill.name,
+        description: skill.description,
+        license: skill.license,
+        compatibility: skill.compatibility,
+        metadata: skill.metadata,
+        path: skill.path,
+        instructions: skill.instructions,
+        source: skill.source,
+        references: skill.references,
+        scripts: skill.scripts,
+        assets: skill.assets
+      };
+    } catch (error) {
+      return chunkSUKFO7UM_cjs.handleError(error, "Error getting agent skill");
+    }
+  }
+});
 
 exports.APPROVE_NETWORK_TOOL_CALL_ROUTE = APPROVE_NETWORK_TOOL_CALL_ROUTE;
 exports.APPROVE_TOOL_CALL_GENERATE_ROUTE = APPROVE_TOOL_CALL_GENERATE_ROUTE;
@@ -1038,6 +1380,7 @@ exports.GENERATE_AGENT_ROUTE = GENERATE_AGENT_ROUTE;
 exports.GENERATE_AGENT_VNEXT_ROUTE = GENERATE_AGENT_VNEXT_ROUTE;
 exports.GENERATE_LEGACY_ROUTE = GENERATE_LEGACY_ROUTE;
 exports.GET_AGENT_BY_ID_ROUTE = GET_AGENT_BY_ID_ROUTE;
+exports.GET_AGENT_SKILL_ROUTE = GET_AGENT_SKILL_ROUTE;
 exports.GET_PROVIDERS_ROUTE = GET_PROVIDERS_ROUTE;
 exports.LIST_AGENTS_ROUTE = LIST_AGENTS_ROUTE;
 exports.REORDER_AGENT_MODEL_LIST_ROUTE = REORDER_AGENT_MODEL_LIST_ROUTE;
@@ -1055,5 +1398,7 @@ exports.agents_exports = agents_exports;
 exports.getAgentFromSystem = getAgentFromSystem;
 exports.getSerializedAgentTools = getSerializedAgentTools;
 exports.getSerializedProcessors = getSerializedProcessors;
-//# sourceMappingURL=chunk-YK63KHHB.cjs.map
-//# sourceMappingURL=chunk-YK63KHHB.cjs.map
+exports.getSerializedSkillsFromAgent = getSerializedSkillsFromAgent;
+exports.getWorkspaceToolsFromAgent = getWorkspaceToolsFromAgent;
+//# sourceMappingURL=chunk-6DHJKQLP.cjs.map
+//# sourceMappingURL=chunk-6DHJKQLP.cjs.map