@mastra/server 1.58.0-alpha.1 → 1.58.0-alpha.13

package/dist/server/handlers/auth.d.ts

@@ -27,323 +27,719 @@ import { z } from 'zod/v4';
  * 4. No Host header → fall back to request.url.origin (local dev / direct access).
  */
 export declare function getPublicOrigin(request: Request): string;
-export declare const GET_AUTH_CAPABILITIES_ROUTE: import("../server-adapter").ServerRoute<{}, {
-    enabled: boolean;
-    login: {
-        type: "credentials" | "sso" | "both";
-        sso?: {
-            provider: string;
-            text: string;
-            url: string;
-            icon?: string | undefined;
+export declare const GET_AUTH_CAPABILITIES_ROUTE: Omit<import("@mastra/core/server").ApiRoute, "path" | "method" | "handler" | "createHandler" | "openapi"> & {
+    method: "GET";
+    path: "/auth/capabilities";
+    responseType: "json";
+    streamFormat?: "sse" | "stream";
+    sseFlushOnConnect?: boolean;
+    handler(params: import("../server-adapter").ServerContext): Promise<{
+        enabled: boolean;
+        login: {
+            type: "credentials" | "sso" | "both";
+            sso?: {
+                provider: string;
+                text: string;
+                url: string;
+                icon?: string | undefined;
+                description?: string | undefined;
+            } | undefined;
+            signUpEnabled?: boolean | undefined;
             description?: string | undefined;
-        } | undefined;
-        signUpEnabled?: boolean | undefined;
-        description?: string | undefined;
-    } | null;
-} | {
-    enabled: boolean;
-    login: {
-        type: "credentials" | "sso" | "both";
-        sso?: {
-            provider: string;
-            text: string;
-            url: string;
-            icon?: string | undefined;
+        } | null;
+    } | {
+        enabled: boolean;
+        login: {
+            type: "credentials" | "sso" | "both";
+            sso?: {
+                provider: string;
+                text: string;
+                url: string;
+                icon?: string | undefined;
+                description?: string | undefined;
+            } | undefined;
+            signUpEnabled?: boolean | undefined;
             description?: string | undefined;
-        } | undefined;
-        signUpEnabled?: boolean | undefined;
-        description?: string | undefined;
-    } | null;
-    user: {
+        } | null;
+        user: {
+            id: string;
+            email?: string | undefined;
+            name?: string | undefined;
+            avatarUrl?: string | undefined;
+        };
+        capabilities: {
+            user: boolean;
+            session: boolean;
+            sso: boolean;
+            rbac: boolean;
+            acl: boolean;
+        };
+        access: {
+            roles: string[];
+            permissions: string[];
+        } | null;
+    }>;
+    pathParamSchema?: z.ZodType;
+    queryParamSchema?: z.ZodType;
+    bodySchema?: z.ZodType;
+    responseSchema?: z.ZodType;
+    openapi?: import("../server-adapter/openapi-utils").OpenAPIRoute;
+    maxBodySize?: number;
+    deprecated?: boolean;
+    requiresPermission?: import("@mastra/core/auth").MastraFGAPermissionInput | import("@mastra/core/auth").MastraFGAPermissionInput[];
+    fga?: import("@mastra/core/auth").FGARouteConfig;
+    onValidationError?: import("@mastra/core/server").ValidationErrorHook;
+    readonly __schemas?: import("../server-adapter").RouteSchemas<undefined, undefined, undefined, z.ZodUnion<readonly [z.ZodObject<{
+        enabled: z.ZodBoolean;
+        login: z.ZodNullable<z.ZodObject<{
+            type: z.ZodEnum<{
+                credentials: "credentials";
+                sso: "sso";
+                both: "both";
+            }>;
+            sso: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                text: z.ZodString;
+                icon: z.ZodOptional<z.ZodString>;
+                description: z.ZodOptional<z.ZodString>;
+                url: z.ZodString;
+            }, z.core.$strip>>;
+            signUpEnabled: z.ZodOptional<z.ZodBoolean>;
+            description: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        user: z.ZodObject<{
+            id: z.ZodString;
+            email: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+            avatarUrl: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        capabilities: z.ZodObject<{
+            user: z.ZodBoolean;
+            session: z.ZodBoolean;
+            sso: z.ZodBoolean;
+            rbac: z.ZodBoolean;
+            acl: z.ZodBoolean;
+        }, z.core.$strip>;
+        access: z.ZodNullable<z.ZodObject<{
+            roles: z.ZodArray<z.ZodString>;
+            permissions: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        enabled: z.ZodBoolean;
+        login: z.ZodNullable<z.ZodObject<{
+            type: z.ZodEnum<{
+                credentials: "credentials";
+                sso: "sso";
+                both: "both";
+            }>;
+            sso: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                text: z.ZodString;
+                icon: z.ZodOptional<z.ZodString>;
+                description: z.ZodOptional<z.ZodString>;
+                url: z.ZodString;
+            }, z.core.$strip>>;
+            signUpEnabled: z.ZodOptional<z.ZodBoolean>;
+            description: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>]>> | undefined;
+} & {
+    readonly _mastraSchemaRoute: true;
+};
+export declare const GET_CURRENT_USER_ROUTE: Omit<import("@mastra/core/server").ApiRoute, "path" | "method" | "handler" | "createHandler" | "openapi"> & {
+    method: "GET";
+    path: "/auth/me";
+    responseType: "json";
+    streamFormat?: "sse" | "stream";
+    sseFlushOnConnect?: boolean;
+    handler(params: import("../server-adapter").ServerContext): Promise<{
         id: string;
         email?: string | undefined;
         name?: string | undefined;
         avatarUrl?: string | undefined;
-    };
-    capabilities: {
-        user: boolean;
-        session: boolean;
-        sso: boolean;
-        rbac: boolean;
-        acl: boolean;
-    };
-    access: {
-        roles: string[];
-        permissions: string[];
-    } | null;
-}, "json", import("../server-adapter").RouteSchemas<undefined, undefined, undefined, z.ZodUnion<readonly [z.ZodObject<{
-    enabled: z.ZodBoolean;
-    login: z.ZodNullable<z.ZodObject<{
-        type: z.ZodEnum<{
-            credentials: "credentials";
-            sso: "sso";
-            both: "both";
-        }>;
-        sso: z.ZodOptional<z.ZodObject<{
-            provider: z.ZodString;
-            text: z.ZodString;
-            icon: z.ZodOptional<z.ZodString>;
-            description: z.ZodOptional<z.ZodString>;
-            url: z.ZodString;
-        }, z.core.$strip>>;
-        signUpEnabled: z.ZodOptional<z.ZodBoolean>;
-        description: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>;
-    user: z.ZodObject<{
+        roles?: string[] | undefined;
+        permissions?: string[] | undefined;
+    } | null>;
+    pathParamSchema?: z.ZodType;
+    queryParamSchema?: z.ZodType;
+    bodySchema?: z.ZodType;
+    responseSchema?: z.ZodType;
+    openapi?: import("../server-adapter/openapi-utils").OpenAPIRoute;
+    maxBodySize?: number;
+    deprecated?: boolean;
+    requiresPermission?: import("@mastra/core/auth").MastraFGAPermissionInput | import("@mastra/core/auth").MastraFGAPermissionInput[];
+    fga?: import("@mastra/core/auth").FGARouteConfig;
+    onValidationError?: import("@mastra/core/server").ValidationErrorHook;
+    readonly __schemas?: import("../server-adapter").RouteSchemas<undefined, undefined, undefined, z.ZodNullable<z.ZodObject<{
         id: z.ZodString;
         email: z.ZodOptional<z.ZodString>;
         name: z.ZodOptional<z.ZodString>;
         avatarUrl: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>;
-    capabilities: z.ZodObject<{
-        user: z.ZodBoolean;
-        session: z.ZodBoolean;
-        sso: z.ZodBoolean;
-        rbac: z.ZodBoolean;
-        acl: z.ZodBoolean;
-    }, z.core.$strip>;
-    access: z.ZodNullable<z.ZodObject<{
-        roles: z.ZodArray<z.ZodString>;
+        roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        permissions: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>> | undefined;
+} & {
+    readonly _mastraSchemaRoute: true;
+};
+export declare const GET_SSO_LOGIN_ROUTE: Omit<import("@mastra/core/server").ApiRoute, "path" | "method" | "handler" | "createHandler" | "openapi"> & {
+    method: "GET";
+    path: "/auth/sso/login";
+    responseType: "datastream-response";
+    streamFormat?: "sse" | "stream";
+    sseFlushOnConnect?: boolean;
+    handler(params: {
+        redirect_uri?: string | undefined;
+    } & import("../server-adapter").ServerContext): Promise<Response>;
+    pathParamSchema?: z.ZodType;
+    queryParamSchema?: z.ZodType;
+    bodySchema?: z.ZodType;
+    responseSchema?: z.ZodType;
+    openapi?: import("../server-adapter/openapi-utils").OpenAPIRoute;
+    maxBodySize?: number;
+    deprecated?: boolean;
+    requiresPermission?: import("@mastra/core/auth").MastraFGAPermissionInput | import("@mastra/core/auth").MastraFGAPermissionInput[];
+    fga?: import("@mastra/core/auth").FGARouteConfig;
+    onValidationError?: import("@mastra/core/server").ValidationErrorHook;
+    readonly __schemas?: import("../server-adapter").RouteSchemas<undefined, z.ZodObject<{
+        redirect_uri: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, undefined, undefined> | undefined;
+} & {
+    readonly _mastraSchemaRoute: true;
+};
+export declare const GET_SSO_CALLBACK_ROUTE: Omit<import("@mastra/core/server").ApiRoute, "path" | "method" | "handler" | "createHandler" | "openapi"> & {
+    method: "GET";
+    path: "/auth/sso/callback";
+    responseType: "datastream-response";
+    streamFormat?: "sse" | "stream";
+    sseFlushOnConnect?: boolean;
+    handler(params: {
+        code: string;
+        state?: string | undefined;
+    } & import("../server-adapter").ServerContext): Promise<Response>;
+    pathParamSchema?: z.ZodType;
+    queryParamSchema?: z.ZodType;
+    bodySchema?: z.ZodType;
+    responseSchema?: z.ZodType;
+    openapi?: import("../server-adapter/openapi-utils").OpenAPIRoute;
+    maxBodySize?: number;
+    deprecated?: boolean;
+    requiresPermission?: import("@mastra/core/auth").MastraFGAPermissionInput | import("@mastra/core/auth").MastraFGAPermissionInput[];
+    fga?: import("@mastra/core/auth").FGARouteConfig;
+    onValidationError?: import("@mastra/core/server").ValidationErrorHook;
+    readonly __schemas?: import("../server-adapter").RouteSchemas<undefined, z.ZodObject<{
+        code: z.ZodString;
+        state: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, undefined, undefined> | undefined;
+} & {
+    readonly _mastraSchemaRoute: true;
+};
+export declare const POST_LOGOUT_ROUTE: Omit<import("@mastra/core/server").ApiRoute, "path" | "method" | "handler" | "createHandler" | "openapi"> & {
+    method: "POST";
+    path: "/auth/logout";
+    responseType: "datastream-response";
+    streamFormat?: "sse" | "stream";
+    sseFlushOnConnect?: boolean;
+    handler(params: import("../server-adapter").ServerContext): Promise<Response>;
+    pathParamSchema?: z.ZodType;
+    queryParamSchema?: z.ZodType;
+    bodySchema?: z.ZodType;
+    responseSchema?: z.ZodType;
+    openapi?: import("../server-adapter/openapi-utils").OpenAPIRoute;
+    maxBodySize?: number;
+    deprecated?: boolean;
+    requiresPermission?: import("@mastra/core/auth").MastraFGAPermissionInput | import("@mastra/core/auth").MastraFGAPermissionInput[];
+    fga?: import("@mastra/core/auth").FGARouteConfig;
+    onValidationError?: import("@mastra/core/server").ValidationErrorHook;
+    readonly __schemas?: import("../server-adapter").RouteSchemas<undefined, undefined, undefined, undefined> | undefined;
+} & {
+    readonly _mastraSchemaRoute: true;
+};
+export declare const POST_REFRESH_ROUTE: Omit<import("@mastra/core/server").ApiRoute, "path" | "method" | "handler" | "createHandler" | "openapi"> & {
+    method: "POST";
+    path: "/auth/refresh";
+    responseType: "datastream-response";
+    streamFormat?: "sse" | "stream";
+    sseFlushOnConnect?: boolean;
+    handler(params: import("../server-adapter").ServerContext): Promise<Response>;
+    pathParamSchema?: z.ZodType;
+    queryParamSchema?: z.ZodType;
+    bodySchema?: z.ZodType;
+    responseSchema?: z.ZodType;
+    openapi?: import("../server-adapter/openapi-utils").OpenAPIRoute;
+    maxBodySize?: number;
+    deprecated?: boolean;
+    requiresPermission?: import("@mastra/core/auth").MastraFGAPermissionInput | import("@mastra/core/auth").MastraFGAPermissionInput[];
+    fga?: import("@mastra/core/auth").FGARouteConfig;
+    onValidationError?: import("@mastra/core/server").ValidationErrorHook;
+    readonly __schemas?: import("../server-adapter").RouteSchemas<undefined, undefined, undefined, z.ZodObject<{
+        success: z.ZodBoolean;
+    }, z.core.$strip>> | undefined;
+} & {
+    readonly _mastraSchemaRoute: true;
+};
+export declare const POST_CREDENTIALS_SIGN_IN_ROUTE: Omit<import("@mastra/core/server").ApiRoute, "path" | "method" | "handler" | "createHandler" | "openapi"> & {
+    method: "POST";
+    path: "/auth/credentials/sign-in";
+    responseType: "datastream-response";
+    streamFormat?: "sse" | "stream";
+    sseFlushOnConnect?: boolean;
+    handler(params: {
+        email: string;
+        password: string;
+    } & import("../server-adapter").ServerContext): Promise<Response>;
+    pathParamSchema?: z.ZodType;
+    queryParamSchema?: z.ZodType;
+    bodySchema?: z.ZodType;
+    responseSchema?: z.ZodType;
+    openapi?: import("../server-adapter/openapi-utils").OpenAPIRoute;
+    maxBodySize?: number;
+    deprecated?: boolean;
+    requiresPermission?: import("@mastra/core/auth").MastraFGAPermissionInput | import("@mastra/core/auth").MastraFGAPermissionInput[];
+    fga?: import("@mastra/core/auth").FGARouteConfig;
+    onValidationError?: import("@mastra/core/server").ValidationErrorHook;
+    readonly __schemas?: import("../server-adapter").RouteSchemas<undefined, undefined, z.ZodObject<{
+        email: z.ZodString;
+        password: z.ZodString;
+    }, z.core.$strip>, undefined> | undefined;
+} & {
+    readonly _mastraSchemaRoute: true;
+};
+export declare const POST_CREDENTIALS_SIGN_UP_ROUTE: Omit<import("@mastra/core/server").ApiRoute, "path" | "method" | "handler" | "createHandler" | "openapi"> & {
+    method: "POST";
+    path: "/auth/credentials/sign-up";
+    responseType: "datastream-response";
+    streamFormat?: "sse" | "stream";
+    sseFlushOnConnect?: boolean;
+    handler(params: {
+        email: string;
+        password: string;
+        name?: string | undefined;
+    } & import("../server-adapter").ServerContext): Promise<Response>;
+    pathParamSchema?: z.ZodType;
+    queryParamSchema?: z.ZodType;
+    bodySchema?: z.ZodType;
+    responseSchema?: z.ZodType;
+    openapi?: import("../server-adapter/openapi-utils").OpenAPIRoute;
+    maxBodySize?: number;
+    deprecated?: boolean;
+    requiresPermission?: import("@mastra/core/auth").MastraFGAPermissionInput | import("@mastra/core/auth").MastraFGAPermissionInput[];
+    fga?: import("@mastra/core/auth").FGARouteConfig;
+    onValidationError?: import("@mastra/core/server").ValidationErrorHook;
+    readonly __schemas?: import("../server-adapter").RouteSchemas<undefined, undefined, z.ZodObject<{
+        email: z.ZodString;
+        password: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, undefined> | undefined;
+} & {
+    readonly _mastraSchemaRoute: true;
+};
+export declare const GET_ROLE_PERMISSIONS_ROUTE: Omit<import("@mastra/core/server").ApiRoute, "path" | "method" | "handler" | "createHandler" | "openapi"> & {
+    method: "GET";
+    path: "/auth/roles/:roleId/permissions";
+    responseType: "json";
+    streamFormat?: "sse" | "stream";
+    sseFlushOnConnect?: boolean;
+    handler(params: {
+        roleId: string;
+    } & import("../server-adapter").ServerContext): Promise<{
+        roleId: string;
+        permissions: string[];
+    }>;
+    pathParamSchema?: z.ZodType;
+    queryParamSchema?: z.ZodType;
+    bodySchema?: z.ZodType;
+    responseSchema?: z.ZodType;
+    openapi?: import("../server-adapter/openapi-utils").OpenAPIRoute;
+    maxBodySize?: number;
+    deprecated?: boolean;
+    requiresPermission?: import("@mastra/core/auth").MastraFGAPermissionInput | import("@mastra/core/auth").MastraFGAPermissionInput[];
+    fga?: import("@mastra/core/auth").FGARouteConfig;
+    onValidationError?: import("@mastra/core/server").ValidationErrorHook;
+    readonly __schemas?: import("../server-adapter").RouteSchemas<z.ZodObject<{
+        roleId: z.ZodString;
+    }, z.core.$strip>, undefined, undefined, z.ZodObject<{
+        roleId: z.ZodString;
         permissions: z.ZodArray<z.ZodString>;
-    }, z.core.$strip>>;
-}, z.core.$strip>, z.ZodObject<{
-    enabled: z.ZodBoolean;
-    login: z.ZodNullable<z.ZodObject<{
-        type: z.ZodEnum<{
-            credentials: "credentials";
-            sso: "sso";
-            both: "both";
-        }>;
-        sso: z.ZodOptional<z.ZodObject<{
-            provider: z.ZodString;
-            text: z.ZodString;
-            icon: z.ZodOptional<z.ZodString>;
-            description: z.ZodOptional<z.ZodString>;
-            url: z.ZodString;
-        }, z.core.$strip>>;
-        signUpEnabled: z.ZodOptional<z.ZodBoolean>;
-        description: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>;
-}, z.core.$strip>]>>, "GET", "/auth/capabilities">;
-export declare const GET_CURRENT_USER_ROUTE: import("../server-adapter").ServerRoute<{}, {
-    id: string;
-    email?: string | undefined;
-    name?: string | undefined;
-    avatarUrl?: string | undefined;
-    roles?: string[] | undefined;
-    permissions?: string[] | undefined;
-} | null, "json", import("../server-adapter").RouteSchemas<undefined, undefined, undefined, z.ZodNullable<z.ZodObject<{
-    id: z.ZodString;
-    email: z.ZodOptional<z.ZodString>;
-    name: z.ZodOptional<z.ZodString>;
-    avatarUrl: z.ZodOptional<z.ZodString>;
-    roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    permissions: z.ZodOptional<z.ZodArray<z.ZodString>>;
-}, z.core.$strip>>>, "GET", "/auth/me">;
-export declare const GET_SSO_LOGIN_ROUTE: import("../server-adapter").ServerRoute<{
-    redirect_uri?: string | undefined;
-}, unknown, "datastream-response", import("../server-adapter").RouteSchemas<undefined, z.ZodObject<{
-    redirect_uri: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>, undefined, undefined>, "GET", "/auth/sso/login">;
-export declare const GET_SSO_CALLBACK_ROUTE: import("../server-adapter").ServerRoute<{
-    code: string;
-    state?: string | undefined;
-}, unknown, "datastream-response", import("../server-adapter").RouteSchemas<undefined, z.ZodObject<{
-    code: z.ZodString;
-    state: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>, undefined, undefined>, "GET", "/auth/sso/callback">;
-export declare const POST_LOGOUT_ROUTE: import("../server-adapter").ServerRoute<{}, unknown, "datastream-response", import("../server-adapter").RouteSchemas<undefined, undefined, undefined, undefined>, "POST", "/auth/logout">;
-export declare const POST_REFRESH_ROUTE: import("../server-adapter").ServerRoute<{}, {
-    success: boolean;
-}, "datastream-response", import("../server-adapter").RouteSchemas<undefined, undefined, undefined, z.ZodObject<{
-    success: z.ZodBoolean;
-}, z.core.$strip>>, "POST", "/auth/refresh">;
-export declare const POST_CREDENTIALS_SIGN_IN_ROUTE: import("../server-adapter").ServerRoute<{
-    email: string;
-    password: string;
-}, unknown, "datastream-response", import("../server-adapter").RouteSchemas<undefined, undefined, z.ZodObject<{
-    email: z.ZodString;
-    password: z.ZodString;
-}, z.core.$strip>, undefined>, "POST", "/auth/credentials/sign-in">;
-export declare const POST_CREDENTIALS_SIGN_UP_ROUTE: import("../server-adapter").ServerRoute<{
-    email: string;
-    password: string;
-    name?: string | undefined;
-}, unknown, "datastream-response", import("../server-adapter").RouteSchemas<undefined, undefined, z.ZodObject<{
-    email: z.ZodString;
-    password: z.ZodString;
-    name: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>, undefined>, "POST", "/auth/credentials/sign-up">;
-export declare const GET_ROLE_PERMISSIONS_ROUTE: import("../server-adapter").ServerRoute<{
-    roleId: string;
-}, {
-    roleId: string;
-    permissions: string[];
-}, "json", import("../server-adapter").RouteSchemas<z.ZodObject<{
-    roleId: z.ZodString;
-}, z.core.$strip>, undefined, undefined, z.ZodObject<{
-    roleId: z.ZodString;
-    permissions: z.ZodArray<z.ZodString>;
-}, z.core.$strip>>, "GET", "/auth/roles/:roleId/permissions">;
-export declare const GET_PERMISSION_PATTERNS_ROUTE: import("../server-adapter").ServerRoute<{}, {
-    patterns: string[];
-}, "json", import("../server-adapter").RouteSchemas<undefined, undefined, undefined, z.ZodObject<{
-    patterns: z.ZodArray<z.ZodString>;
-}, z.core.$strip>>, "GET", "/auth/permission-patterns">;
-export declare const AUTH_ROUTES: readonly [import("../server-adapter").ServerRoute<{}, {
-    enabled: boolean;
-    login: {
-        type: "credentials" | "sso" | "both";
-        sso?: {
-            provider: string;
-            text: string;
-            url: string;
-            icon?: string | undefined;
+    }, z.core.$strip>> | undefined;
+} & {
+    readonly _mastraSchemaRoute: true;
+};
+export declare const GET_PERMISSION_PATTERNS_ROUTE: Omit<import("@mastra/core/server").ApiRoute, "path" | "method" | "handler" | "createHandler" | "openapi"> & {
+    method: "GET";
+    path: "/auth/permission-patterns";
+    responseType: "json";
+    streamFormat?: "sse" | "stream";
+    sseFlushOnConnect?: boolean;
+    handler(params: import("../server-adapter").ServerContext): Promise<{
+        patterns: string[];
+    }>;
+    pathParamSchema?: z.ZodType;
+    queryParamSchema?: z.ZodType;
+    bodySchema?: z.ZodType;
+    responseSchema?: z.ZodType;
+    openapi?: import("../server-adapter/openapi-utils").OpenAPIRoute;
+    maxBodySize?: number;
+    deprecated?: boolean;
+    requiresPermission?: import("@mastra/core/auth").MastraFGAPermissionInput | import("@mastra/core/auth").MastraFGAPermissionInput[];
+    fga?: import("@mastra/core/auth").FGARouteConfig;
+    onValidationError?: import("@mastra/core/server").ValidationErrorHook;
+    readonly __schemas?: import("../server-adapter").RouteSchemas<undefined, undefined, undefined, z.ZodObject<{
+        patterns: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>> | undefined;
+} & {
+    readonly _mastraSchemaRoute: true;
+};
+export declare const AUTH_ROUTES: readonly [Omit<import("@mastra/core/server").ApiRoute, "path" | "method" | "handler" | "createHandler" | "openapi"> & {
+    method: "GET";
+    path: "/auth/capabilities";
+    responseType: "json";
+    streamFormat?: "sse" | "stream";
+    sseFlushOnConnect?: boolean;
+    handler(params: import("../server-adapter").ServerContext): Promise<{
+        enabled: boolean;
+        login: {
+            type: "credentials" | "sso" | "both";
+            sso?: {
+                provider: string;
+                text: string;
+                url: string;
+                icon?: string | undefined;
+                description?: string | undefined;
+            } | undefined;
+            signUpEnabled?: boolean | undefined;
             description?: string | undefined;
-        } | undefined;
-        signUpEnabled?: boolean | undefined;
-        description?: string | undefined;
-    } | null;
-} | {
-    enabled: boolean;
-    login: {
-        type: "credentials" | "sso" | "both";
-        sso?: {
-            provider: string;
-            text: string;
-            url: string;
-            icon?: string | undefined;
+        } | null;
+    } | {
+        enabled: boolean;
+        login: {
+            type: "credentials" | "sso" | "both";
+            sso?: {
+                provider: string;
+                text: string;
+                url: string;
+                icon?: string | undefined;
+                description?: string | undefined;
+            } | undefined;
+            signUpEnabled?: boolean | undefined;
             description?: string | undefined;
-        } | undefined;
-        signUpEnabled?: boolean | undefined;
-        description?: string | undefined;
-    } | null;
-    user: {
+        } | null;
+        user: {
+            id: string;
+            email?: string | undefined;
+            name?: string | undefined;
+            avatarUrl?: string | undefined;
+        };
+        capabilities: {
+            user: boolean;
+            session: boolean;
+            sso: boolean;
+            rbac: boolean;
+            acl: boolean;
+        };
+        access: {
+            roles: string[];
+            permissions: string[];
+        } | null;
+    }>;
+    pathParamSchema?: z.ZodType;
+    queryParamSchema?: z.ZodType;
+    bodySchema?: z.ZodType;
+    responseSchema?: z.ZodType;
+    openapi?: import("../server-adapter/openapi-utils").OpenAPIRoute;
+    maxBodySize?: number;
+    deprecated?: boolean;
+    requiresPermission?: import("@mastra/core/auth").MastraFGAPermissionInput | import("@mastra/core/auth").MastraFGAPermissionInput[];
+    fga?: import("@mastra/core/auth").FGARouteConfig;
+    onValidationError?: import("@mastra/core/server").ValidationErrorHook;
+    readonly __schemas?: import("../server-adapter").RouteSchemas<undefined, undefined, undefined, z.ZodUnion<readonly [z.ZodObject<{
+        enabled: z.ZodBoolean;
+        login: z.ZodNullable<z.ZodObject<{
+            type: z.ZodEnum<{
+                credentials: "credentials";
+                sso: "sso";
+                both: "both";
+            }>;
+            sso: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                text: z.ZodString;
+                icon: z.ZodOptional<z.ZodString>;
+                description: z.ZodOptional<z.ZodString>;
+                url: z.ZodString;
+            }, z.core.$strip>>;
+            signUpEnabled: z.ZodOptional<z.ZodBoolean>;
+            description: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        user: z.ZodObject<{
+            id: z.ZodString;
+            email: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+            avatarUrl: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        capabilities: z.ZodObject<{
+            user: z.ZodBoolean;
+            session: z.ZodBoolean;
+            sso: z.ZodBoolean;
+            rbac: z.ZodBoolean;
+            acl: z.ZodBoolean;
+        }, z.core.$strip>;
+        access: z.ZodNullable<z.ZodObject<{
+            roles: z.ZodArray<z.ZodString>;
+            permissions: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        enabled: z.ZodBoolean;
+        login: z.ZodNullable<z.ZodObject<{
+            type: z.ZodEnum<{
+                credentials: "credentials";
+                sso: "sso";
+                both: "both";
+            }>;
+            sso: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                text: z.ZodString;
+                icon: z.ZodOptional<z.ZodString>;
+                description: z.ZodOptional<z.ZodString>;
+                url: z.ZodString;
+            }, z.core.$strip>>;
+            signUpEnabled: z.ZodOptional<z.ZodBoolean>;
+            description: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>]>> | undefined;
+} & {
+    readonly _mastraSchemaRoute: true;
+}, Omit<import("@mastra/core/server").ApiRoute, "path" | "method" | "handler" | "createHandler" | "openapi"> & {
+    method: "GET";
+    path: "/auth/me";
+    responseType: "json";
+    streamFormat?: "sse" | "stream";
+    sseFlushOnConnect?: boolean;
+    handler(params: import("../server-adapter").ServerContext): Promise<{
         id: string;
         email?: string | undefined;
         name?: string | undefined;
         avatarUrl?: string | undefined;
-    };
-    capabilities: {
-        user: boolean;
-        session: boolean;
-        sso: boolean;
-        rbac: boolean;
-        acl: boolean;
-    };
-    access: {
-        roles: string[];
-        permissions: string[];
-    } | null;
-}, "json", import("../server-adapter").RouteSchemas<undefined, undefined, undefined, z.ZodUnion<readonly [z.ZodObject<{
-    enabled: z.ZodBoolean;
-    login: z.ZodNullable<z.ZodObject<{
-        type: z.ZodEnum<{
-            credentials: "credentials";
-            sso: "sso";
-            both: "both";
-        }>;
-        sso: z.ZodOptional<z.ZodObject<{
-            provider: z.ZodString;
-            text: z.ZodString;
-            icon: z.ZodOptional<z.ZodString>;
-            description: z.ZodOptional<z.ZodString>;
-            url: z.ZodString;
-        }, z.core.$strip>>;
-        signUpEnabled: z.ZodOptional<z.ZodBoolean>;
-        description: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>;
-    user: z.ZodObject<{
+        roles?: string[] | undefined;
+        permissions?: string[] | undefined;
+    } | null>;
+    pathParamSchema?: z.ZodType;
+    queryParamSchema?: z.ZodType;
+    bodySchema?: z.ZodType;
+    responseSchema?: z.ZodType;
+    openapi?: import("../server-adapter/openapi-utils").OpenAPIRoute;
+    maxBodySize?: number;
+    deprecated?: boolean;
+    requiresPermission?: import("@mastra/core/auth").MastraFGAPermissionInput | import("@mastra/core/auth").MastraFGAPermissionInput[];
+    fga?: import("@mastra/core/auth").FGARouteConfig;
+    onValidationError?: import("@mastra/core/server").ValidationErrorHook;
+    readonly __schemas?: import("../server-adapter").RouteSchemas<undefined, undefined, undefined, z.ZodNullable<z.ZodObject<{
         id: z.ZodString;
         email: z.ZodOptional<z.ZodString>;
         name: z.ZodOptional<z.ZodString>;
         avatarUrl: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>;
-    capabilities: z.ZodObject<{
-        user: z.ZodBoolean;
-        session: z.ZodBoolean;
-        sso: z.ZodBoolean;
-        rbac: z.ZodBoolean;
-        acl: z.ZodBoolean;
-    }, z.core.$strip>;
-    access: z.ZodNullable<z.ZodObject<{
-        roles: z.ZodArray<z.ZodString>;
+        roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        permissions: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>> | undefined;
+} & {
+    readonly _mastraSchemaRoute: true;
+}, Omit<import("@mastra/core/server").ApiRoute, "path" | "method" | "handler" | "createHandler" | "openapi"> & {
+    method: "GET";
+    path: "/auth/sso/login";
+    responseType: "datastream-response";
+    streamFormat?: "sse" | "stream";
+    sseFlushOnConnect?: boolean;
+    handler(params: {
+        redirect_uri?: string | undefined;
+    } & import("../server-adapter").ServerContext): Promise<Response>;
+    pathParamSchema?: z.ZodType;
+    queryParamSchema?: z.ZodType;
+    bodySchema?: z.ZodType;
+    responseSchema?: z.ZodType;
+    openapi?: import("../server-adapter/openapi-utils").OpenAPIRoute;
+    maxBodySize?: number;
+    deprecated?: boolean;
+    requiresPermission?: import("@mastra/core/auth").MastraFGAPermissionInput | import("@mastra/core/auth").MastraFGAPermissionInput[];
+    fga?: import("@mastra/core/auth").FGARouteConfig;
+    onValidationError?: import("@mastra/core/server").ValidationErrorHook;
+    readonly __schemas?: import("../server-adapter").RouteSchemas<undefined, z.ZodObject<{
+        redirect_uri: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, undefined, undefined> | undefined;
+} & {
+    readonly _mastraSchemaRoute: true;
+}, Omit<import("@mastra/core/server").ApiRoute, "path" | "method" | "handler" | "createHandler" | "openapi"> & {
+    method: "GET";
+    path: "/auth/sso/callback";
+    responseType: "datastream-response";
+    streamFormat?: "sse" | "stream";
+    sseFlushOnConnect?: boolean;
+    handler(params: {
+        code: string;
+        state?: string | undefined;
+    } & import("../server-adapter").ServerContext): Promise<Response>;
+    pathParamSchema?: z.ZodType;
+    queryParamSchema?: z.ZodType;
+    bodySchema?: z.ZodType;
+    responseSchema?: z.ZodType;
+    openapi?: import("../server-adapter/openapi-utils").OpenAPIRoute;
+    maxBodySize?: number;
+    deprecated?: boolean;
+    requiresPermission?: import("@mastra/core/auth").MastraFGAPermissionInput | import("@mastra/core/auth").MastraFGAPermissionInput[];
+    fga?: import("@mastra/core/auth").FGARouteConfig;
+    onValidationError?: import("@mastra/core/server").ValidationErrorHook;
+    readonly __schemas?: import("../server-adapter").RouteSchemas<undefined, z.ZodObject<{
+        code: z.ZodString;
+        state: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, undefined, undefined> | undefined;
+} & {
+    readonly _mastraSchemaRoute: true;
+}, Omit<import("@mastra/core/server").ApiRoute, "path" | "method" | "handler" | "createHandler" | "openapi"> & {
+    method: "POST";
+    path: "/auth/logout";
+    responseType: "datastream-response";
+    streamFormat?: "sse" | "stream";
+    sseFlushOnConnect?: boolean;
+    handler(params: import("../server-adapter").ServerContext): Promise<Response>;
+    pathParamSchema?: z.ZodType;
+    queryParamSchema?: z.ZodType;
+    bodySchema?: z.ZodType;
+    responseSchema?: z.ZodType;
+    openapi?: import("../server-adapter/openapi-utils").OpenAPIRoute;
+    maxBodySize?: number;
+    deprecated?: boolean;
+    requiresPermission?: import("@mastra/core/auth").MastraFGAPermissionInput | import("@mastra/core/auth").MastraFGAPermissionInput[];
+    fga?: import("@mastra/core/auth").FGARouteConfig;
+    onValidationError?: import("@mastra/core/server").ValidationErrorHook;
+    readonly __schemas?: import("../server-adapter").RouteSchemas<undefined, undefined, undefined, undefined> | undefined;
+} & {
+    readonly _mastraSchemaRoute: true;
+}, Omit<import("@mastra/core/server").ApiRoute, "path" | "method" | "handler" | "createHandler" | "openapi"> & {
+    method: "POST";
+    path: "/auth/refresh";
+    responseType: "datastream-response";
+    streamFormat?: "sse" | "stream";
+    sseFlushOnConnect?: boolean;
+    handler(params: import("../server-adapter").ServerContext): Promise<Response>;
+    pathParamSchema?: z.ZodType;
+    queryParamSchema?: z.ZodType;
+    bodySchema?: z.ZodType;
+    responseSchema?: z.ZodType;
+    openapi?: import("../server-adapter/openapi-utils").OpenAPIRoute;
+    maxBodySize?: number;
+    deprecated?: boolean;
+    requiresPermission?: import("@mastra/core/auth").MastraFGAPermissionInput | import("@mastra/core/auth").MastraFGAPermissionInput[];
+    fga?: import("@mastra/core/auth").FGARouteConfig;
+    onValidationError?: import("@mastra/core/server").ValidationErrorHook;
+    readonly __schemas?: import("../server-adapter").RouteSchemas<undefined, undefined, undefined, z.ZodObject<{
+        success: z.ZodBoolean;
+    }, z.core.$strip>> | undefined;
+} & {
+    readonly _mastraSchemaRoute: true;
+}, Omit<import("@mastra/core/server").ApiRoute, "path" | "method" | "handler" | "createHandler" | "openapi"> & {
+    method: "POST";
+    path: "/auth/credentials/sign-in";
+    responseType: "datastream-response";
+    streamFormat?: "sse" | "stream";
+    sseFlushOnConnect?: boolean;
+    handler(params: {
+        email: string;
+        password: string;
+    } & import("../server-adapter").ServerContext): Promise<Response>;
+    pathParamSchema?: z.ZodType;
+    queryParamSchema?: z.ZodType;
+    bodySchema?: z.ZodType;
+    responseSchema?: z.ZodType;
+    openapi?: import("../server-adapter/openapi-utils").OpenAPIRoute;
+    maxBodySize?: number;
+    deprecated?: boolean;
+    requiresPermission?: import("@mastra/core/auth").MastraFGAPermissionInput | import("@mastra/core/auth").MastraFGAPermissionInput[];
+    fga?: import("@mastra/core/auth").FGARouteConfig;
+    onValidationError?: import("@mastra/core/server").ValidationErrorHook;
+    readonly __schemas?: import("../server-adapter").RouteSchemas<undefined, undefined, z.ZodObject<{
+        email: z.ZodString;
+        password: z.ZodString;
+    }, z.core.$strip>, undefined> | undefined;
+} & {
+    readonly _mastraSchemaRoute: true;
+}, Omit<import("@mastra/core/server").ApiRoute, "path" | "method" | "handler" | "createHandler" | "openapi"> & {
+    method: "POST";
+    path: "/auth/credentials/sign-up";
+    responseType: "datastream-response";
+    streamFormat?: "sse" | "stream";
+    sseFlushOnConnect?: boolean;
+    handler(params: {
+        email: string;
+        password: string;
+        name?: string | undefined;
+    } & import("../server-adapter").ServerContext): Promise<Response>;
+    pathParamSchema?: z.ZodType;
+    queryParamSchema?: z.ZodType;
+    bodySchema?: z.ZodType;
+    responseSchema?: z.ZodType;
+    openapi?: import("../server-adapter/openapi-utils").OpenAPIRoute;
+    maxBodySize?: number;
+    deprecated?: boolean;
+    requiresPermission?: import("@mastra/core/auth").MastraFGAPermissionInput | import("@mastra/core/auth").MastraFGAPermissionInput[];
+    fga?: import("@mastra/core/auth").FGARouteConfig;
+    onValidationError?: import("@mastra/core/server").ValidationErrorHook;
+    readonly __schemas?: import("../server-adapter").RouteSchemas<undefined, undefined, z.ZodObject<{
+        email: z.ZodString;
+        password: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, undefined> | undefined;
+} & {
+    readonly _mastraSchemaRoute: true;
+}, Omit<import("@mastra/core/server").ApiRoute, "path" | "method" | "handler" | "createHandler" | "openapi"> & {
+    method: "GET";
+    path: "/auth/roles/:roleId/permissions";
+    responseType: "json";
+    streamFormat?: "sse" | "stream";
+    sseFlushOnConnect?: boolean;
+    handler(params: {
+        roleId: string;
+    } & import("../server-adapter").ServerContext): Promise<{
+        roleId: string;
+        permissions: string[];
+    }>;
+    pathParamSchema?: z.ZodType;
+    queryParamSchema?: z.ZodType;
+    bodySchema?: z.ZodType;
+    responseSchema?: z.ZodType;
+    openapi?: import("../server-adapter/openapi-utils").OpenAPIRoute;
+    maxBodySize?: number;
+    deprecated?: boolean;
+    requiresPermission?: import("@mastra/core/auth").MastraFGAPermissionInput | import("@mastra/core/auth").MastraFGAPermissionInput[];
+    fga?: import("@mastra/core/auth").FGARouteConfig;
+    onValidationError?: import("@mastra/core/server").ValidationErrorHook;
+    readonly __schemas?: import("../server-adapter").RouteSchemas<z.ZodObject<{
+        roleId: z.ZodString;
+    }, z.core.$strip>, undefined, undefined, z.ZodObject<{
+        roleId: z.ZodString;
         permissions: z.ZodArray<z.ZodString>;
-    }, z.core.$strip>>;
-}, z.core.$strip>, z.ZodObject<{
-    enabled: z.ZodBoolean;
-    login: z.ZodNullable<z.ZodObject<{
-        type: z.ZodEnum<{
-            credentials: "credentials";
-            sso: "sso";
-            both: "both";
-        }>;
-        sso: z.ZodOptional<z.ZodObject<{
-            provider: z.ZodString;
-            text: z.ZodString;
-            icon: z.ZodOptional<z.ZodString>;
-            description: z.ZodOptional<z.ZodString>;
-            url: z.ZodString;
-        }, z.core.$strip>>;
-        signUpEnabled: z.ZodOptional<z.ZodBoolean>;
-        description: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>;
-}, z.core.$strip>]>>, "GET", "/auth/capabilities">, import("../server-adapter").ServerRoute<{}, {
-    id: string;
-    email?: string | undefined;
-    name?: string | undefined;
-    avatarUrl?: string | undefined;
-    roles?: string[] | undefined;
-    permissions?: string[] | undefined;
-} | null, "json", import("../server-adapter").RouteSchemas<undefined, undefined, undefined, z.ZodNullable<z.ZodObject<{
-    id: z.ZodString;
-    email: z.ZodOptional<z.ZodString>;
-    name: z.ZodOptional<z.ZodString>;
-    avatarUrl: z.ZodOptional<z.ZodString>;
-    roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    permissions: z.ZodOptional<z.ZodArray<z.ZodString>>;
-}, z.core.$strip>>>, "GET", "/auth/me">, import("../server-adapter").ServerRoute<{
-    redirect_uri?: string | undefined;
-}, unknown, "datastream-response", import("../server-adapter").RouteSchemas<undefined, z.ZodObject<{
-    redirect_uri: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>, undefined, undefined>, "GET", "/auth/sso/login">, import("../server-adapter").ServerRoute<{
-    code: string;
-    state?: string | undefined;
-}, unknown, "datastream-response", import("../server-adapter").RouteSchemas<undefined, z.ZodObject<{
-    code: z.ZodString;
-    state: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>, undefined, undefined>, "GET", "/auth/sso/callback">, import("../server-adapter").ServerRoute<{}, unknown, "datastream-response", import("../server-adapter").RouteSchemas<undefined, undefined, undefined, undefined>, "POST", "/auth/logout">, import("../server-adapter").ServerRoute<{}, {
-    success: boolean;
-}, "datastream-response", import("../server-adapter").RouteSchemas<undefined, undefined, undefined, z.ZodObject<{
-    success: z.ZodBoolean;
-}, z.core.$strip>>, "POST", "/auth/refresh">, import("../server-adapter").ServerRoute<{
-    email: string;
-    password: string;
-}, unknown, "datastream-response", import("../server-adapter").RouteSchemas<undefined, undefined, z.ZodObject<{
-    email: z.ZodString;
-    password: z.ZodString;
-}, z.core.$strip>, undefined>, "POST", "/auth/credentials/sign-in">, import("../server-adapter").ServerRoute<{
-    email: string;
-    password: string;
-    name?: string | undefined;
-}, unknown, "datastream-response", import("../server-adapter").RouteSchemas<undefined, undefined, z.ZodObject<{
-    email: z.ZodString;
-    password: z.ZodString;
-    name: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>, undefined>, "POST", "/auth/credentials/sign-up">, import("../server-adapter").ServerRoute<{
-    roleId: string;
-}, {
-    roleId: string;
-    permissions: string[];
-}, "json", import("../server-adapter").RouteSchemas<z.ZodObject<{
-    roleId: z.ZodString;
-}, z.core.$strip>, undefined, undefined, z.ZodObject<{
-    roleId: z.ZodString;
-    permissions: z.ZodArray<z.ZodString>;
-}, z.core.$strip>>, "GET", "/auth/roles/:roleId/permissions">, import("../server-adapter").ServerRoute<{}, {
-    patterns: string[];
-}, "json", import("../server-adapter").RouteSchemas<undefined, undefined, undefined, z.ZodObject<{
-    patterns: z.ZodArray<z.ZodString>;
-}, z.core.$strip>>, "GET", "/auth/permission-patterns">];
+    }, z.core.$strip>> | undefined;
+} & {
+    readonly _mastraSchemaRoute: true;
+}, Omit<import("@mastra/core/server").ApiRoute, "path" | "method" | "handler" | "createHandler" | "openapi"> & {
+    method: "GET";
+    path: "/auth/permission-patterns";
+    responseType: "json";
+    streamFormat?: "sse" | "stream";
+    sseFlushOnConnect?: boolean;
+    handler(params: import("../server-adapter").ServerContext): Promise<{
+        patterns: string[];
+    }>;
+    pathParamSchema?: z.ZodType;
+    queryParamSchema?: z.ZodType;
+    bodySchema?: z.ZodType;
+    responseSchema?: z.ZodType;
+    openapi?: import("../server-adapter/openapi-utils").OpenAPIRoute;
+    maxBodySize?: number;
+    deprecated?: boolean;
+    requiresPermission?: import("@mastra/core/auth").MastraFGAPermissionInput | import("@mastra/core/auth").MastraFGAPermissionInput[];
+    fga?: import("@mastra/core/auth").FGARouteConfig;
+    onValidationError?: import("@mastra/core/server").ValidationErrorHook;
+    readonly __schemas?: import("../server-adapter").RouteSchemas<undefined, undefined, undefined, z.ZodObject<{
+        patterns: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>> | undefined;
+} & {
+    readonly _mastraSchemaRoute: true;
+}];
 //# sourceMappingURL=auth.d.ts.map