@mastra/server 1.75.0 → 1.76.0-alpha.1

package/dist/server/handlers/conversations.cjs

@@ -5,7 +5,7 @@ const require_route_builder = require("../../route-builder-2yrD15TL.cjs");
 const require_server_handlers_error = require("./error.cjs");
 const require_utils = require("../../utils-HqDZJwRc.cjs");
 const require_server_handlers_agents = require("./agents.cjs");
-const require_conversations = require("../../conversations-DX7ATgEB.cjs");
+const require_conversations = require("../../conversations-Bj5TLNqF.cjs");
 const require_server_handlers_responses_adapter = require("./responses.adapter.cjs");
 const require_server_handlers_responses_storage = require("./responses.storage.cjs");
 //#region src/server/handlers/conversations.ts
@@ -64,6 +64,7 @@ const CREATE_CONVERSATION_ROUTE = require_route_builder.createRoute({
 			})) throw new require_http_exception.HTTPException(400, { message: `Memory storage is not configured for agent "${agent.id}"` });
 			const threadId = conversation_id ?? globalThis.crypto.randomUUID();
 			const resourceId = require_utils.getEffectiveResourceId(requestContext, resource_id) ?? threadId;
+			if (conversation_id) await require_utils.validateThreadOwnership(await memory.getThreadById({ threadId }), require_utils.getEffectiveResourceId(requestContext, void 0));
 			return buildConversationObject({ thread: await memory.createThread({
 				threadId,
 				resourceId,

package/dist/server/handlers/conversations.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"conversations.cjs","names":["createRoute","createConversationBodySchema","conversationObjectSchema","MastraFGAPermissions","HTTPException","getAgentFromSystem","getAgentMemoryStore","getEffectiveResourceId","handleError","conversationIdPathParams","findConversationThreadAcrossAgents","conversationItemsListSchema","mapMastraMessagesToConversationItems","conversationDeletedSchema"],"sources":["../../../src/server/handlers/conversations.ts"],"sourcesContent":["import { MastraFGAPermissions } from '../fga-permissions';\nimport { HTTPException } from '../http-exception';\nimport {\n  conversationDeletedSchema,\n  conversationIdPathParams,\n  conversationItemsListSchema,\n  conversationObjectSchema,\n  createConversationBodySchema,\n} from '../schemas/conversations';\nimport type { ConversationDeleted, ConversationItemsList, ConversationObject } from '../schemas/conversations';\nimport { createRoute } from '../server-adapter/routes/route-builder';\nimport { getAgentFromSystem } from './agents';\nimport { handleError } from './error';\nimport { mapMastraMessagesToConversationItems } from './responses.adapter';\nimport { findConversationThreadAcrossAgents, getAgentMemoryStore } from './responses.storage';\nimport { getEffectiveResourceId } from './utils';\n\nfunction buildConversationObject({ thread }: { thread: ConversationObject['thread'] }): ConversationObject {\n  return {\n    id: thread.id,\n    object: 'conversation',\n    thread,\n  };\n}\n\nfunction buildConversationItemsList(items: ConversationItemsList['data']): ConversationItemsList {\n  return {\n    object: 'list',\n    data: items,\n    first_id: items[0]?.id ?? null,\n    last_id: items.at(-1)?.id ?? null,\n    has_more: false,\n  };\n}\n\nfunction buildConversationDeleted(conversationId: string): ConversationDeleted {\n  return {\n    id: conversationId,\n    object: 'conversation.deleted',\n    deleted: true,\n  };\n}\n\nexport const CREATE_CONVERSATION_ROUTE = createRoute({\n  method: 'POST',\n  path: '/v1/conversations',\n  responseType: 'json',\n  bodySchema: createConversationBodySchema,\n  responseSchema: conversationObjectSchema,\n  summary: 'Create a conversation',\n  description: 'Creates a new thread-backed conversation for agent-backed Responses API requests',\n  tags: ['Responses'],\n  requiresAuth: true,\n  requiresPermission: MastraFGAPermissions.AGENTS_CREATE,\n  handler: async ({ mastra, requestContext, agent_id, conversation_id, resource_id, title, metadata }) => {\n    try {\n      if (!mastra) {\n        throw new HTTPException(500, { message: 'Mastra instance is required for conversations' });\n      }\n\n      const agent = await getAgentFromSystem({ mastra, agentId: agent_id });\n      const memory = await agent.getMemory({ requestContext });\n      if (!memory) {\n        throw new HTTPException(400, { message: `Agent \"${agent.id}\" does not have memory configured` });\n      }\n      if (!(await getAgentMemoryStore({ agent, requestContext }))) {\n        throw new HTTPException(400, { message: `Memory storage is not configured for agent \"${agent.id}\"` });\n      }\n\n      const threadId = conversation_id ?? globalThis.crypto.randomUUID();\n      const resourceId = getEffectiveResourceId(requestContext, resource_id) ?? threadId;\n      const thread = await memory.createThread({\n        threadId,\n        resourceId,\n        title,\n        metadata,\n      });\n\n      return buildConversationObject({ thread });\n    } catch (error) {\n      return handleError(error, 'Error creating conversation');\n    }\n  },\n});\n\nexport const GET_CONVERSATION_ROUTE = createRoute({\n  method: 'GET',\n  path: '/v1/conversations/:conversationId',\n  responseType: 'json',\n  pathParamSchema: conversationIdPathParams,\n  responseSchema: conversationObjectSchema,\n  summary: 'Retrieve a conversation',\n  description: 'Returns a conversation object backed by a Mastra memory thread',\n  tags: ['Responses'],\n  requiresAuth: true,\n  requiresPermission: MastraFGAPermissions.AGENTS_READ,\n  handler: async ({ mastra, requestContext, conversationId }) => {\n    try {\n      const match = await findConversationThreadAcrossAgents({ mastra, conversationId, requestContext });\n      if (!match) {\n        throw new HTTPException(404, { message: `Conversation ${conversationId} was not found` });\n      }\n\n      return buildConversationObject({ thread: match.thread });\n    } catch (error) {\n      return handleError(error, 'Error retrieving conversation');\n    }\n  },\n});\n\nexport const GET_CONVERSATION_ITEMS_ROUTE = createRoute({\n  method: 'GET',\n  path: '/v1/conversations/:conversationId/items',\n  responseType: 'json',\n  pathParamSchema: conversationIdPathParams,\n  responseSchema: conversationItemsListSchema,\n  summary: 'List conversation items',\n  description: 'Returns OpenAI-style conversation items derived from the stored thread messages',\n  tags: ['Responses'],\n  requiresAuth: true,\n  requiresPermission: MastraFGAPermissions.AGENTS_READ,\n  handler: async ({ mastra, requestContext, conversationId }) => {\n    try {\n      const match = await findConversationThreadAcrossAgents({ mastra, conversationId, requestContext });\n      if (!match) {\n        throw new HTTPException(404, { message: `Conversation ${conversationId} was not found` });\n      }\n\n      const { messages } = await match.memoryStore.listMessages({\n        threadId: conversationId,\n        page: 0,\n        perPage: 1000,\n      });\n\n      return buildConversationItemsList(mapMastraMessagesToConversationItems(messages));\n    } catch (error) {\n      return handleError(error, 'Error retrieving conversation');\n    }\n  },\n});\n\nexport const DELETE_CONVERSATION_ROUTE = createRoute({\n  method: 'DELETE',\n  path: '/v1/conversations/:conversationId',\n  responseType: 'json',\n  pathParamSchema: conversationIdPathParams,\n  responseSchema: conversationDeletedSchema,\n  summary: 'Delete a conversation',\n  description: 'Deletes a thread-backed conversation and its stored items',\n  tags: ['Responses'],\n  requiresAuth: true,\n  requiresPermission: MastraFGAPermissions.AGENTS_DELETE,\n  handler: async ({ mastra, requestContext, conversationId }) => {\n    try {\n      const match = await findConversationThreadAcrossAgents({ mastra, conversationId, requestContext });\n      if (!match) {\n        throw new HTTPException(404, { message: `Conversation ${conversationId} was not found` });\n      }\n\n      await match.memoryStore.deleteThread({ threadId: conversationId });\n\n      return buildConversationDeleted(conversationId);\n    } catch (error) {\n      return handleError(error, 'Error deleting conversation');\n    }\n  },\n});\n"],"mappings":";;;;;;;;;;;;;;;;;AAiBA,SAAS,wBAAwB,EAAE,UAAwE;CACzG,OAAO;EACL,IAAI,OAAO;EACX,QAAQ;EACR;CACF;AACF;AAEA,SAAS,2BAA2B,OAA6D;CAC/F,OAAO;EACL,QAAQ;EACR,MAAM;EACN,UAAU,MAAM,EAAE,EAAE,MAAM;EAC1B,SAAS,MAAM,GAAG,EAAE,CAAC,EAAE,MAAM;EAC7B,UAAU;CACZ;AACF;AAEA,SAAS,yBAAyB,gBAA6C;CAC7E,OAAO;EACL,IAAI;EACJ,QAAQ;EACR,SAAS;CACX;AACF;AAEA,MAAa,4BAA4BA,sBAAAA,YAAY;CACnD,QAAQ;CACR,MAAM;CACN,cAAc;CACd,YAAYC,sBAAAA;CACZ,gBAAgBC,sBAAAA;CAChB,SAAS;CACT,aAAa;CACb,MAAM,CAAC,WAAW;CAClB,cAAc;CACd,oBAAoBC,cAAAA,qBAAqB;CACzC,SAAS,OAAO,EAAE,QAAQ,gBAAgB,UAAU,iBAAiB,aAAa,OAAO,eAAe;EACtG,IAAI;GACF,IAAI,CAAC,QACH,MAAM,IAAIC,uBAAAA,cAAc,KAAK,EAAE,SAAS,gDAAgD,CAAC;GAG3F,MAAM,QAAQ,MAAMC,+BAAAA,mBAAmB;IAAE;IAAQ,SAAS;GAAS,CAAC;GACpE,MAAM,SAAS,MAAM,MAAM,UAAU,EAAE,eAAe,CAAC;GACvD,IAAI,CAAC,QACH,MAAM,IAAID,uBAAAA,cAAc,KAAK,EAAE,SAAS,UAAU,MAAM,GAAG,mCAAmC,CAAC;GAEjG,IAAI,CAAE,MAAME,0CAAAA,oBAAoB;IAAE;IAAO;GAAe,CAAC,GACvD,MAAM,IAAIF,uBAAAA,cAAc,KAAK,EAAE,SAAS,+CAA+C,MAAM,GAAG,GAAG,CAAC;GAGtG,MAAM,WAAW,mBAAmB,WAAW,OAAO,WAAW;GACjE,MAAM,aAAaG,cAAAA,uBAAuB,gBAAgB,WAAW,KAAK;GAQ1E,OAAO,wBAAwB,EAAE,QAAA,MAPZ,OAAO,aAAa;IACvC;IACA;IACA;IACA;GACF,CAAC,EAEuC,CAAC;EAC3C,SAAS,OAAO;GACd,OAAOC,8BAAAA,YAAY,OAAO,6BAA6B;EACzD;CACF;AACF,CAAC;AAED,MAAa,yBAAyBR,sBAAAA,YAAY;CAChD,QAAQ;CACR,MAAM;CACN,cAAc;CACd,iBAAiBS,sBAAAA;CACjB,gBAAgBP,sBAAAA;CAChB,SAAS;CACT,aAAa;CACb,MAAM,CAAC,WAAW;CAClB,cAAc;CACd,oBAAoBC,cAAAA,qBAAqB;CACzC,SAAS,OAAO,EAAE,QAAQ,gBAAgB,qBAAqB;EAC7D,IAAI;GACF,MAAM,QAAQ,MAAMO,0CAAAA,mCAAmC;IAAE;IAAQ;IAAgB;GAAe,CAAC;GACjG,IAAI,CAAC,OACH,MAAM,IAAIN,uBAAAA,cAAc,KAAK,EAAE,SAAS,gBAAgB,eAAe,gBAAgB,CAAC;GAG1F,OAAO,wBAAwB,EAAE,QAAQ,MAAM,OAAO,CAAC;EACzD,SAAS,OAAO;GACd,OAAOI,8BAAAA,YAAY,OAAO,+BAA+B;EAC3D;CACF;AACF,CAAC;AAED,MAAa,+BAA+BR,sBAAAA,YAAY;CACtD,QAAQ;CACR,MAAM;CACN,cAAc;CACd,iBAAiBS,sBAAAA;CACjB,gBAAgBE,sBAAAA;CAChB,SAAS;CACT,aAAa;CACb,MAAM,CAAC,WAAW;CAClB,cAAc;CACd,oBAAoBR,cAAAA,qBAAqB;CACzC,SAAS,OAAO,EAAE,QAAQ,gBAAgB,qBAAqB;EAC7D,IAAI;GACF,MAAM,QAAQ,MAAMO,0CAAAA,mCAAmC;IAAE;IAAQ;IAAgB;GAAe,CAAC;GACjG,IAAI,CAAC,OACH,MAAM,IAAIN,uBAAAA,cAAc,KAAK,EAAE,SAAS,gBAAgB,eAAe,gBAAgB,CAAC;GAG1F,MAAM,EAAE,aAAa,MAAM,MAAM,YAAY,aAAa;IACxD,UAAU;IACV,MAAM;IACN,SAAS;GACX,CAAC;GAED,OAAO,2BAA2BQ,0CAAAA,qCAAqC,QAAQ,CAAC;EAClF,SAAS,OAAO;GACd,OAAOJ,8BAAAA,YAAY,OAAO,+BAA+B;EAC3D;CACF;AACF,CAAC;AAED,MAAa,4BAA4BR,sBAAAA,YAAY;CACnD,QAAQ;CACR,MAAM;CACN,cAAc;CACd,iBAAiBS,sBAAAA;CACjB,gBAAgBI,sBAAAA;CAChB,SAAS;CACT,aAAa;CACb,MAAM,CAAC,WAAW;CAClB,cAAc;CACd,oBAAoBV,cAAAA,qBAAqB;CACzC,SAAS,OAAO,EAAE,QAAQ,gBAAgB,qBAAqB;EAC7D,IAAI;GACF,MAAM,QAAQ,MAAMO,0CAAAA,mCAAmC;IAAE;IAAQ;IAAgB;GAAe,CAAC;GACjG,IAAI,CAAC,OACH,MAAM,IAAIN,uBAAAA,cAAc,KAAK,EAAE,SAAS,gBAAgB,eAAe,gBAAgB,CAAC;GAG1F,MAAM,MAAM,YAAY,aAAa,EAAE,UAAU,eAAe,CAAC;GAEjE,OAAO,yBAAyB,cAAc;EAChD,SAAS,OAAO;GACd,OAAOI,8BAAAA,YAAY,OAAO,6BAA6B;EACzD;CACF;AACF,CAAC"}
+{"version":3,"file":"conversations.cjs","names":["createRoute","createConversationBodySchema","conversationObjectSchema","MastraFGAPermissions","HTTPException","getAgentFromSystem","getAgentMemoryStore","getEffectiveResourceId","validateThreadOwnership","handleError","conversationIdPathParams","findConversationThreadAcrossAgents","conversationItemsListSchema","mapMastraMessagesToConversationItems","conversationDeletedSchema"],"sources":["../../../src/server/handlers/conversations.ts"],"sourcesContent":["import { MastraFGAPermissions } from '../fga-permissions';\nimport { HTTPException } from '../http-exception';\nimport {\n  conversationDeletedSchema,\n  conversationIdPathParams,\n  conversationItemsListSchema,\n  conversationObjectSchema,\n  createConversationBodySchema,\n} from '../schemas/conversations';\nimport type { ConversationDeleted, ConversationItemsList, ConversationObject } from '../schemas/conversations';\nimport { createRoute } from '../server-adapter/routes/route-builder';\nimport { getAgentFromSystem } from './agents';\nimport { handleError } from './error';\nimport { mapMastraMessagesToConversationItems } from './responses.adapter';\nimport { findConversationThreadAcrossAgents, getAgentMemoryStore } from './responses.storage';\nimport { getEffectiveResourceId, validateThreadOwnership } from './utils';\n\nfunction buildConversationObject({ thread }: { thread: ConversationObject['thread'] }): ConversationObject {\n  return {\n    id: thread.id,\n    object: 'conversation',\n    thread,\n  };\n}\n\nfunction buildConversationItemsList(items: ConversationItemsList['data']): ConversationItemsList {\n  return {\n    object: 'list',\n    data: items,\n    first_id: items[0]?.id ?? null,\n    last_id: items.at(-1)?.id ?? null,\n    has_more: false,\n  };\n}\n\nfunction buildConversationDeleted(conversationId: string): ConversationDeleted {\n  return {\n    id: conversationId,\n    object: 'conversation.deleted',\n    deleted: true,\n  };\n}\n\nexport const CREATE_CONVERSATION_ROUTE = createRoute({\n  method: 'POST',\n  path: '/v1/conversations',\n  responseType: 'json',\n  bodySchema: createConversationBodySchema,\n  responseSchema: conversationObjectSchema,\n  summary: 'Create a conversation',\n  description: 'Creates a new thread-backed conversation for agent-backed Responses API requests',\n  tags: ['Responses'],\n  requiresAuth: true,\n  requiresPermission: MastraFGAPermissions.AGENTS_CREATE,\n  handler: async ({ mastra, requestContext, agent_id, conversation_id, resource_id, title, metadata }) => {\n    try {\n      if (!mastra) {\n        throw new HTTPException(500, { message: 'Mastra instance is required for conversations' });\n      }\n\n      const agent = await getAgentFromSystem({ mastra, agentId: agent_id });\n      const memory = await agent.getMemory({ requestContext });\n      if (!memory) {\n        throw new HTTPException(400, { message: `Agent \"${agent.id}\" does not have memory configured` });\n      }\n      if (!(await getAgentMemoryStore({ agent, requestContext }))) {\n        throw new HTTPException(400, { message: `Memory storage is not configured for agent \"${agent.id}\"` });\n      }\n\n      const threadId = conversation_id ?? globalThis.crypto.randomUUID();\n      const resourceId = getEffectiveResourceId(requestContext, resource_id) ?? threadId;\n\n      // Creating with an existing id upserts the thread, so validate ownership of any existing thread first\n      if (conversation_id) {\n        const existing = await memory.getThreadById({ threadId });\n        await validateThreadOwnership(existing, getEffectiveResourceId(requestContext, undefined));\n      }\n\n      const thread = await memory.createThread({\n        threadId,\n        resourceId,\n        title,\n        metadata,\n      });\n\n      return buildConversationObject({ thread });\n    } catch (error) {\n      return handleError(error, 'Error creating conversation');\n    }\n  },\n});\n\nexport const GET_CONVERSATION_ROUTE = createRoute({\n  method: 'GET',\n  path: '/v1/conversations/:conversationId',\n  responseType: 'json',\n  pathParamSchema: conversationIdPathParams,\n  responseSchema: conversationObjectSchema,\n  summary: 'Retrieve a conversation',\n  description: 'Returns a conversation object backed by a Mastra memory thread',\n  tags: ['Responses'],\n  requiresAuth: true,\n  requiresPermission: MastraFGAPermissions.AGENTS_READ,\n  handler: async ({ mastra, requestContext, conversationId }) => {\n    try {\n      const match = await findConversationThreadAcrossAgents({ mastra, conversationId, requestContext });\n      if (!match) {\n        throw new HTTPException(404, { message: `Conversation ${conversationId} was not found` });\n      }\n\n      return buildConversationObject({ thread: match.thread });\n    } catch (error) {\n      return handleError(error, 'Error retrieving conversation');\n    }\n  },\n});\n\nexport const GET_CONVERSATION_ITEMS_ROUTE = createRoute({\n  method: 'GET',\n  path: '/v1/conversations/:conversationId/items',\n  responseType: 'json',\n  pathParamSchema: conversationIdPathParams,\n  responseSchema: conversationItemsListSchema,\n  summary: 'List conversation items',\n  description: 'Returns OpenAI-style conversation items derived from the stored thread messages',\n  tags: ['Responses'],\n  requiresAuth: true,\n  requiresPermission: MastraFGAPermissions.AGENTS_READ,\n  handler: async ({ mastra, requestContext, conversationId }) => {\n    try {\n      const match = await findConversationThreadAcrossAgents({ mastra, conversationId, requestContext });\n      if (!match) {\n        throw new HTTPException(404, { message: `Conversation ${conversationId} was not found` });\n      }\n\n      const { messages } = await match.memoryStore.listMessages({\n        threadId: conversationId,\n        page: 0,\n        perPage: 1000,\n      });\n\n      return buildConversationItemsList(mapMastraMessagesToConversationItems(messages));\n    } catch (error) {\n      return handleError(error, 'Error retrieving conversation');\n    }\n  },\n});\n\nexport const DELETE_CONVERSATION_ROUTE = createRoute({\n  method: 'DELETE',\n  path: '/v1/conversations/:conversationId',\n  responseType: 'json',\n  pathParamSchema: conversationIdPathParams,\n  responseSchema: conversationDeletedSchema,\n  summary: 'Delete a conversation',\n  description: 'Deletes a thread-backed conversation and its stored items',\n  tags: ['Responses'],\n  requiresAuth: true,\n  requiresPermission: MastraFGAPermissions.AGENTS_DELETE,\n  handler: async ({ mastra, requestContext, conversationId }) => {\n    try {\n      const match = await findConversationThreadAcrossAgents({ mastra, conversationId, requestContext });\n      if (!match) {\n        throw new HTTPException(404, { message: `Conversation ${conversationId} was not found` });\n      }\n\n      await match.memoryStore.deleteThread({ threadId: conversationId });\n\n      return buildConversationDeleted(conversationId);\n    } catch (error) {\n      return handleError(error, 'Error deleting conversation');\n    }\n  },\n});\n"],"mappings":";;;;;;;;;;;;;;;;;AAiBA,SAAS,wBAAwB,EAAE,UAAwE;CACzG,OAAO;EACL,IAAI,OAAO;EACX,QAAQ;EACR;CACF;AACF;AAEA,SAAS,2BAA2B,OAA6D;CAC/F,OAAO;EACL,QAAQ;EACR,MAAM;EACN,UAAU,MAAM,EAAE,EAAE,MAAM;EAC1B,SAAS,MAAM,GAAG,EAAE,CAAC,EAAE,MAAM;EAC7B,UAAU;CACZ;AACF;AAEA,SAAS,yBAAyB,gBAA6C;CAC7E,OAAO;EACL,IAAI;EACJ,QAAQ;EACR,SAAS;CACX;AACF;AAEA,MAAa,4BAA4BA,sBAAAA,YAAY;CACnD,QAAQ;CACR,MAAM;CACN,cAAc;CACd,YAAYC,sBAAAA;CACZ,gBAAgBC,sBAAAA;CAChB,SAAS;CACT,aAAa;CACb,MAAM,CAAC,WAAW;CAClB,cAAc;CACd,oBAAoBC,cAAAA,qBAAqB;CACzC,SAAS,OAAO,EAAE,QAAQ,gBAAgB,UAAU,iBAAiB,aAAa,OAAO,eAAe;EACtG,IAAI;GACF,IAAI,CAAC,QACH,MAAM,IAAIC,uBAAAA,cAAc,KAAK,EAAE,SAAS,gDAAgD,CAAC;GAG3F,MAAM,QAAQ,MAAMC,+BAAAA,mBAAmB;IAAE;IAAQ,SAAS;GAAS,CAAC;GACpE,MAAM,SAAS,MAAM,MAAM,UAAU,EAAE,eAAe,CAAC;GACvD,IAAI,CAAC,QACH,MAAM,IAAID,uBAAAA,cAAc,KAAK,EAAE,SAAS,UAAU,MAAM,GAAG,mCAAmC,CAAC;GAEjG,IAAI,CAAE,MAAME,0CAAAA,oBAAoB;IAAE;IAAO;GAAe,CAAC,GACvD,MAAM,IAAIF,uBAAAA,cAAc,KAAK,EAAE,SAAS,+CAA+C,MAAM,GAAG,GAAG,CAAC;GAGtG,MAAM,WAAW,mBAAmB,WAAW,OAAO,WAAW;GACjE,MAAM,aAAaG,cAAAA,uBAAuB,gBAAgB,WAAW,KAAK;GAG1E,IAAI,iBAEF,MAAMC,cAAAA,wBAAwB,MADP,OAAO,cAAc,EAAE,SAAS,CAAC,GAChBD,cAAAA,uBAAuB,gBAAgB,KAAA,CAAS,CAAC;GAU3F,OAAO,wBAAwB,EAAE,QAAA,MAPZ,OAAO,aAAa;IACvC;IACA;IACA;IACA;GACF,CAAC,EAEuC,CAAC;EAC3C,SAAS,OAAO;GACd,OAAOE,8BAAAA,YAAY,OAAO,6BAA6B;EACzD;CACF;AACF,CAAC;AAED,MAAa,yBAAyBT,sBAAAA,YAAY;CAChD,QAAQ;CACR,MAAM;CACN,cAAc;CACd,iBAAiBU,sBAAAA;CACjB,gBAAgBR,sBAAAA;CAChB,SAAS;CACT,aAAa;CACb,MAAM,CAAC,WAAW;CAClB,cAAc;CACd,oBAAoBC,cAAAA,qBAAqB;CACzC,SAAS,OAAO,EAAE,QAAQ,gBAAgB,qBAAqB;EAC7D,IAAI;GACF,MAAM,QAAQ,MAAMQ,0CAAAA,mCAAmC;IAAE;IAAQ;IAAgB;GAAe,CAAC;GACjG,IAAI,CAAC,OACH,MAAM,IAAIP,uBAAAA,cAAc,KAAK,EAAE,SAAS,gBAAgB,eAAe,gBAAgB,CAAC;GAG1F,OAAO,wBAAwB,EAAE,QAAQ,MAAM,OAAO,CAAC;EACzD,SAAS,OAAO;GACd,OAAOK,8BAAAA,YAAY,OAAO,+BAA+B;EAC3D;CACF;AACF,CAAC;AAED,MAAa,+BAA+BT,sBAAAA,YAAY;CACtD,QAAQ;CACR,MAAM;CACN,cAAc;CACd,iBAAiBU,sBAAAA;CACjB,gBAAgBE,sBAAAA;CAChB,SAAS;CACT,aAAa;CACb,MAAM,CAAC,WAAW;CAClB,cAAc;CACd,oBAAoBT,cAAAA,qBAAqB;CACzC,SAAS,OAAO,EAAE,QAAQ,gBAAgB,qBAAqB;EAC7D,IAAI;GACF,MAAM,QAAQ,MAAMQ,0CAAAA,mCAAmC;IAAE;IAAQ;IAAgB;GAAe,CAAC;GACjG,IAAI,CAAC,OACH,MAAM,IAAIP,uBAAAA,cAAc,KAAK,EAAE,SAAS,gBAAgB,eAAe,gBAAgB,CAAC;GAG1F,MAAM,EAAE,aAAa,MAAM,MAAM,YAAY,aAAa;IACxD,UAAU;IACV,MAAM;IACN,SAAS;GACX,CAAC;GAED,OAAO,2BAA2BS,0CAAAA,qCAAqC,QAAQ,CAAC;EAClF,SAAS,OAAO;GACd,OAAOJ,8BAAAA,YAAY,OAAO,+BAA+B;EAC3D;CACF;AACF,CAAC;AAED,MAAa,4BAA4BT,sBAAAA,YAAY;CACnD,QAAQ;CACR,MAAM;CACN,cAAc;CACd,iBAAiBU,sBAAAA;CACjB,gBAAgBI,sBAAAA;CAChB,SAAS;CACT,aAAa;CACb,MAAM,CAAC,WAAW;CAClB,cAAc;CACd,oBAAoBX,cAAAA,qBAAqB;CACzC,SAAS,OAAO,EAAE,QAAQ,gBAAgB,qBAAqB;EAC7D,IAAI;GACF,MAAM,QAAQ,MAAMQ,0CAAAA,mCAAmC;IAAE;IAAQ;IAAgB;GAAe,CAAC;GACjG,IAAI,CAAC,OACH,MAAM,IAAIP,uBAAAA,cAAc,KAAK,EAAE,SAAS,gBAAgB,eAAe,gBAAgB,CAAC;GAG1F,MAAM,MAAM,YAAY,aAAa,EAAE,UAAU,eAAe,CAAC;GAEjE,OAAO,yBAAyB,cAAc;EAChD,SAAS,OAAO;GACd,OAAOK,8BAAAA,YAAY,OAAO,6BAA6B;EACzD;CACF;AACF,CAAC"}

package/dist/server/handlers/conversations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"conversations.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/conversations.ts"],"names":[],"mappings":"AA2CA,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwCpC,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuBjC,CAAC;AAEH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BvC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyBpC,CAAC"}
+{"version":3,"file":"conversations.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/conversations.ts"],"names":[],"mappings":"AA2CA,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+CpC,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuBjC,CAAC;AAEH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BvC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyBpC,CAAC"}

package/dist/server/handlers/conversations.js

@@ -2,9 +2,9 @@ import { r as __exportAll } from "../../rolldown-runtime-maW3aOIk.js";
 import { t as HTTPException } from "../../http-exception-CyfxZB6W.js";
 import { n as createRoute } from "../../route-builder-lBil8Cvo.js";
 import { handleError } from "./error.js";
-import { m as MastraFGAPermissions, r as getEffectiveResourceId } from "../../utils-KcHk7C0D.js";
+import { m as MastraFGAPermissions, p as validateThreadOwnership, r as getEffectiveResourceId } from "../../utils-KcHk7C0D.js";
 import { getAgentFromSystem } from "./agents.js";
-import { a as createConversationBodySchema, i as conversationObjectSchema, n as conversationIdPathParams, r as conversationItemsListSchema, t as conversationDeletedSchema } from "../../conversations-U3fod5tw.js";
+import { a as createConversationBodySchema, i as conversationObjectSchema, n as conversationIdPathParams, r as conversationItemsListSchema, t as conversationDeletedSchema } from "../../conversations-BzBHVFYe.js";
 import { mapMastraMessagesToConversationItems } from "./responses.adapter.js";
 import { findConversationThreadAcrossAgents, getAgentMemoryStore } from "./responses.storage.js";
 //#region src/server/handlers/conversations.ts
@@ -63,6 +63,7 @@ const CREATE_CONVERSATION_ROUTE = createRoute({
 			})) throw new HTTPException(400, { message: `Memory storage is not configured for agent "${agent.id}"` });
 			const threadId = conversation_id ?? globalThis.crypto.randomUUID();
 			const resourceId = getEffectiveResourceId(requestContext, resource_id) ?? threadId;
+			if (conversation_id) await validateThreadOwnership(await memory.getThreadById({ threadId }), getEffectiveResourceId(requestContext, void 0));
 			return buildConversationObject({ thread: await memory.createThread({
 				threadId,
 				resourceId,

package/dist/server/handlers/conversations.js.map

@@ -1 +1 @@
-{"version":3,"file":"conversations.js","names":[],"sources":["../../../src/server/handlers/conversations.ts"],"sourcesContent":["import { MastraFGAPermissions } from '../fga-permissions';\nimport { HTTPException } from '../http-exception';\nimport {\n  conversationDeletedSchema,\n  conversationIdPathParams,\n  conversationItemsListSchema,\n  conversationObjectSchema,\n  createConversationBodySchema,\n} from '../schemas/conversations';\nimport type { ConversationDeleted, ConversationItemsList, ConversationObject } from '../schemas/conversations';\nimport { createRoute } from '../server-adapter/routes/route-builder';\nimport { getAgentFromSystem } from './agents';\nimport { handleError } from './error';\nimport { mapMastraMessagesToConversationItems } from './responses.adapter';\nimport { findConversationThreadAcrossAgents, getAgentMemoryStore } from './responses.storage';\nimport { getEffectiveResourceId } from './utils';\n\nfunction buildConversationObject({ thread }: { thread: ConversationObject['thread'] }): ConversationObject {\n  return {\n    id: thread.id,\n    object: 'conversation',\n    thread,\n  };\n}\n\nfunction buildConversationItemsList(items: ConversationItemsList['data']): ConversationItemsList {\n  return {\n    object: 'list',\n    data: items,\n    first_id: items[0]?.id ?? null,\n    last_id: items.at(-1)?.id ?? null,\n    has_more: false,\n  };\n}\n\nfunction buildConversationDeleted(conversationId: string): ConversationDeleted {\n  return {\n    id: conversationId,\n    object: 'conversation.deleted',\n    deleted: true,\n  };\n}\n\nexport const CREATE_CONVERSATION_ROUTE = createRoute({\n  method: 'POST',\n  path: '/v1/conversations',\n  responseType: 'json',\n  bodySchema: createConversationBodySchema,\n  responseSchema: conversationObjectSchema,\n  summary: 'Create a conversation',\n  description: 'Creates a new thread-backed conversation for agent-backed Responses API requests',\n  tags: ['Responses'],\n  requiresAuth: true,\n  requiresPermission: MastraFGAPermissions.AGENTS_CREATE,\n  handler: async ({ mastra, requestContext, agent_id, conversation_id, resource_id, title, metadata }) => {\n    try {\n      if (!mastra) {\n        throw new HTTPException(500, { message: 'Mastra instance is required for conversations' });\n      }\n\n      const agent = await getAgentFromSystem({ mastra, agentId: agent_id });\n      const memory = await agent.getMemory({ requestContext });\n      if (!memory) {\n        throw new HTTPException(400, { message: `Agent \"${agent.id}\" does not have memory configured` });\n      }\n      if (!(await getAgentMemoryStore({ agent, requestContext }))) {\n        throw new HTTPException(400, { message: `Memory storage is not configured for agent \"${agent.id}\"` });\n      }\n\n      const threadId = conversation_id ?? globalThis.crypto.randomUUID();\n      const resourceId = getEffectiveResourceId(requestContext, resource_id) ?? threadId;\n      const thread = await memory.createThread({\n        threadId,\n        resourceId,\n        title,\n        metadata,\n      });\n\n      return buildConversationObject({ thread });\n    } catch (error) {\n      return handleError(error, 'Error creating conversation');\n    }\n  },\n});\n\nexport const GET_CONVERSATION_ROUTE = createRoute({\n  method: 'GET',\n  path: '/v1/conversations/:conversationId',\n  responseType: 'json',\n  pathParamSchema: conversationIdPathParams,\n  responseSchema: conversationObjectSchema,\n  summary: 'Retrieve a conversation',\n  description: 'Returns a conversation object backed by a Mastra memory thread',\n  tags: ['Responses'],\n  requiresAuth: true,\n  requiresPermission: MastraFGAPermissions.AGENTS_READ,\n  handler: async ({ mastra, requestContext, conversationId }) => {\n    try {\n      const match = await findConversationThreadAcrossAgents({ mastra, conversationId, requestContext });\n      if (!match) {\n        throw new HTTPException(404, { message: `Conversation ${conversationId} was not found` });\n      }\n\n      return buildConversationObject({ thread: match.thread });\n    } catch (error) {\n      return handleError(error, 'Error retrieving conversation');\n    }\n  },\n});\n\nexport const GET_CONVERSATION_ITEMS_ROUTE = createRoute({\n  method: 'GET',\n  path: '/v1/conversations/:conversationId/items',\n  responseType: 'json',\n  pathParamSchema: conversationIdPathParams,\n  responseSchema: conversationItemsListSchema,\n  summary: 'List conversation items',\n  description: 'Returns OpenAI-style conversation items derived from the stored thread messages',\n  tags: ['Responses'],\n  requiresAuth: true,\n  requiresPermission: MastraFGAPermissions.AGENTS_READ,\n  handler: async ({ mastra, requestContext, conversationId }) => {\n    try {\n      const match = await findConversationThreadAcrossAgents({ mastra, conversationId, requestContext });\n      if (!match) {\n        throw new HTTPException(404, { message: `Conversation ${conversationId} was not found` });\n      }\n\n      const { messages } = await match.memoryStore.listMessages({\n        threadId: conversationId,\n        page: 0,\n        perPage: 1000,\n      });\n\n      return buildConversationItemsList(mapMastraMessagesToConversationItems(messages));\n    } catch (error) {\n      return handleError(error, 'Error retrieving conversation');\n    }\n  },\n});\n\nexport const DELETE_CONVERSATION_ROUTE = createRoute({\n  method: 'DELETE',\n  path: '/v1/conversations/:conversationId',\n  responseType: 'json',\n  pathParamSchema: conversationIdPathParams,\n  responseSchema: conversationDeletedSchema,\n  summary: 'Delete a conversation',\n  description: 'Deletes a thread-backed conversation and its stored items',\n  tags: ['Responses'],\n  requiresAuth: true,\n  requiresPermission: MastraFGAPermissions.AGENTS_DELETE,\n  handler: async ({ mastra, requestContext, conversationId }) => {\n    try {\n      const match = await findConversationThreadAcrossAgents({ mastra, conversationId, requestContext });\n      if (!match) {\n        throw new HTTPException(404, { message: `Conversation ${conversationId} was not found` });\n      }\n\n      await match.memoryStore.deleteThread({ threadId: conversationId });\n\n      return buildConversationDeleted(conversationId);\n    } catch (error) {\n      return handleError(error, 'Error deleting conversation');\n    }\n  },\n});\n"],"mappings":";;;;;;;;;;;;;;;;AAiBA,SAAS,wBAAwB,EAAE,UAAwE;CACzG,OAAO;EACL,IAAI,OAAO;EACX,QAAQ;EACR;CACF;AACF;AAEA,SAAS,2BAA2B,OAA6D;CAC/F,OAAO;EACL,QAAQ;EACR,MAAM;EACN,UAAU,MAAM,EAAE,EAAE,MAAM;EAC1B,SAAS,MAAM,GAAG,EAAE,CAAC,EAAE,MAAM;EAC7B,UAAU;CACZ;AACF;AAEA,SAAS,yBAAyB,gBAA6C;CAC7E,OAAO;EACL,IAAI;EACJ,QAAQ;EACR,SAAS;CACX;AACF;AAEA,MAAa,4BAA4B,YAAY;CACnD,QAAQ;CACR,MAAM;CACN,cAAc;CACd,YAAY;CACZ,gBAAgB;CAChB,SAAS;CACT,aAAa;CACb,MAAM,CAAC,WAAW;CAClB,cAAc;CACd,oBAAoB,qBAAqB;CACzC,SAAS,OAAO,EAAE,QAAQ,gBAAgB,UAAU,iBAAiB,aAAa,OAAO,eAAe;EACtG,IAAI;GACF,IAAI,CAAC,QACH,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,gDAAgD,CAAC;GAG3F,MAAM,QAAQ,MAAM,mBAAmB;IAAE;IAAQ,SAAS;GAAS,CAAC;GACpE,MAAM,SAAS,MAAM,MAAM,UAAU,EAAE,eAAe,CAAC;GACvD,IAAI,CAAC,QACH,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,UAAU,MAAM,GAAG,mCAAmC,CAAC;GAEjG,IAAI,CAAE,MAAM,oBAAoB;IAAE;IAAO;GAAe,CAAC,GACvD,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,+CAA+C,MAAM,GAAG,GAAG,CAAC;GAGtG,MAAM,WAAW,mBAAmB,WAAW,OAAO,WAAW;GACjE,MAAM,aAAa,uBAAuB,gBAAgB,WAAW,KAAK;GAQ1E,OAAO,wBAAwB,EAAE,QAAA,MAPZ,OAAO,aAAa;IACvC;IACA;IACA;IACA;GACF,CAAC,EAEuC,CAAC;EAC3C,SAAS,OAAO;GACd,OAAO,YAAY,OAAO,6BAA6B;EACzD;CACF;AACF,CAAC;AAED,MAAa,yBAAyB,YAAY;CAChD,QAAQ;CACR,MAAM;CACN,cAAc;CACd,iBAAiB;CACjB,gBAAgB;CAChB,SAAS;CACT,aAAa;CACb,MAAM,CAAC,WAAW;CAClB,cAAc;CACd,oBAAoB,qBAAqB;CACzC,SAAS,OAAO,EAAE,QAAQ,gBAAgB,qBAAqB;EAC7D,IAAI;GACF,MAAM,QAAQ,MAAM,mCAAmC;IAAE;IAAQ;IAAgB;GAAe,CAAC;GACjG,IAAI,CAAC,OACH,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,gBAAgB,eAAe,gBAAgB,CAAC;GAG1F,OAAO,wBAAwB,EAAE,QAAQ,MAAM,OAAO,CAAC;EACzD,SAAS,OAAO;GACd,OAAO,YAAY,OAAO,+BAA+B;EAC3D;CACF;AACF,CAAC;AAED,MAAa,+BAA+B,YAAY;CACtD,QAAQ;CACR,MAAM;CACN,cAAc;CACd,iBAAiB;CACjB,gBAAgB;CAChB,SAAS;CACT,aAAa;CACb,MAAM,CAAC,WAAW;CAClB,cAAc;CACd,oBAAoB,qBAAqB;CACzC,SAAS,OAAO,EAAE,QAAQ,gBAAgB,qBAAqB;EAC7D,IAAI;GACF,MAAM,QAAQ,MAAM,mCAAmC;IAAE;IAAQ;IAAgB;GAAe,CAAC;GACjG,IAAI,CAAC,OACH,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,gBAAgB,eAAe,gBAAgB,CAAC;GAG1F,MAAM,EAAE,aAAa,MAAM,MAAM,YAAY,aAAa;IACxD,UAAU;IACV,MAAM;IACN,SAAS;GACX,CAAC;GAED,OAAO,2BAA2B,qCAAqC,QAAQ,CAAC;EAClF,SAAS,OAAO;GACd,OAAO,YAAY,OAAO,+BAA+B;EAC3D;CACF;AACF,CAAC;AAED,MAAa,4BAA4B,YAAY;CACnD,QAAQ;CACR,MAAM;CACN,cAAc;CACd,iBAAiB;CACjB,gBAAgB;CAChB,SAAS;CACT,aAAa;CACb,MAAM,CAAC,WAAW;CAClB,cAAc;CACd,oBAAoB,qBAAqB;CACzC,SAAS,OAAO,EAAE,QAAQ,gBAAgB,qBAAqB;EAC7D,IAAI;GACF,MAAM,QAAQ,MAAM,mCAAmC;IAAE;IAAQ;IAAgB;GAAe,CAAC;GACjG,IAAI,CAAC,OACH,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,gBAAgB,eAAe,gBAAgB,CAAC;GAG1F,MAAM,MAAM,YAAY,aAAa,EAAE,UAAU,eAAe,CAAC;GAEjE,OAAO,yBAAyB,cAAc;EAChD,SAAS,OAAO;GACd,OAAO,YAAY,OAAO,6BAA6B;EACzD;CACF;AACF,CAAC"}
+{"version":3,"file":"conversations.js","names":[],"sources":["../../../src/server/handlers/conversations.ts"],"sourcesContent":["import { MastraFGAPermissions } from '../fga-permissions';\nimport { HTTPException } from '../http-exception';\nimport {\n  conversationDeletedSchema,\n  conversationIdPathParams,\n  conversationItemsListSchema,\n  conversationObjectSchema,\n  createConversationBodySchema,\n} from '../schemas/conversations';\nimport type { ConversationDeleted, ConversationItemsList, ConversationObject } from '../schemas/conversations';\nimport { createRoute } from '../server-adapter/routes/route-builder';\nimport { getAgentFromSystem } from './agents';\nimport { handleError } from './error';\nimport { mapMastraMessagesToConversationItems } from './responses.adapter';\nimport { findConversationThreadAcrossAgents, getAgentMemoryStore } from './responses.storage';\nimport { getEffectiveResourceId, validateThreadOwnership } from './utils';\n\nfunction buildConversationObject({ thread }: { thread: ConversationObject['thread'] }): ConversationObject {\n  return {\n    id: thread.id,\n    object: 'conversation',\n    thread,\n  };\n}\n\nfunction buildConversationItemsList(items: ConversationItemsList['data']): ConversationItemsList {\n  return {\n    object: 'list',\n    data: items,\n    first_id: items[0]?.id ?? null,\n    last_id: items.at(-1)?.id ?? null,\n    has_more: false,\n  };\n}\n\nfunction buildConversationDeleted(conversationId: string): ConversationDeleted {\n  return {\n    id: conversationId,\n    object: 'conversation.deleted',\n    deleted: true,\n  };\n}\n\nexport const CREATE_CONVERSATION_ROUTE = createRoute({\n  method: 'POST',\n  path: '/v1/conversations',\n  responseType: 'json',\n  bodySchema: createConversationBodySchema,\n  responseSchema: conversationObjectSchema,\n  summary: 'Create a conversation',\n  description: 'Creates a new thread-backed conversation for agent-backed Responses API requests',\n  tags: ['Responses'],\n  requiresAuth: true,\n  requiresPermission: MastraFGAPermissions.AGENTS_CREATE,\n  handler: async ({ mastra, requestContext, agent_id, conversation_id, resource_id, title, metadata }) => {\n    try {\n      if (!mastra) {\n        throw new HTTPException(500, { message: 'Mastra instance is required for conversations' });\n      }\n\n      const agent = await getAgentFromSystem({ mastra, agentId: agent_id });\n      const memory = await agent.getMemory({ requestContext });\n      if (!memory) {\n        throw new HTTPException(400, { message: `Agent \"${agent.id}\" does not have memory configured` });\n      }\n      if (!(await getAgentMemoryStore({ agent, requestContext }))) {\n        throw new HTTPException(400, { message: `Memory storage is not configured for agent \"${agent.id}\"` });\n      }\n\n      const threadId = conversation_id ?? globalThis.crypto.randomUUID();\n      const resourceId = getEffectiveResourceId(requestContext, resource_id) ?? threadId;\n\n      // Creating with an existing id upserts the thread, so validate ownership of any existing thread first\n      if (conversation_id) {\n        const existing = await memory.getThreadById({ threadId });\n        await validateThreadOwnership(existing, getEffectiveResourceId(requestContext, undefined));\n      }\n\n      const thread = await memory.createThread({\n        threadId,\n        resourceId,\n        title,\n        metadata,\n      });\n\n      return buildConversationObject({ thread });\n    } catch (error) {\n      return handleError(error, 'Error creating conversation');\n    }\n  },\n});\n\nexport const GET_CONVERSATION_ROUTE = createRoute({\n  method: 'GET',\n  path: '/v1/conversations/:conversationId',\n  responseType: 'json',\n  pathParamSchema: conversationIdPathParams,\n  responseSchema: conversationObjectSchema,\n  summary: 'Retrieve a conversation',\n  description: 'Returns a conversation object backed by a Mastra memory thread',\n  tags: ['Responses'],\n  requiresAuth: true,\n  requiresPermission: MastraFGAPermissions.AGENTS_READ,\n  handler: async ({ mastra, requestContext, conversationId }) => {\n    try {\n      const match = await findConversationThreadAcrossAgents({ mastra, conversationId, requestContext });\n      if (!match) {\n        throw new HTTPException(404, { message: `Conversation ${conversationId} was not found` });\n      }\n\n      return buildConversationObject({ thread: match.thread });\n    } catch (error) {\n      return handleError(error, 'Error retrieving conversation');\n    }\n  },\n});\n\nexport const GET_CONVERSATION_ITEMS_ROUTE = createRoute({\n  method: 'GET',\n  path: '/v1/conversations/:conversationId/items',\n  responseType: 'json',\n  pathParamSchema: conversationIdPathParams,\n  responseSchema: conversationItemsListSchema,\n  summary: 'List conversation items',\n  description: 'Returns OpenAI-style conversation items derived from the stored thread messages',\n  tags: ['Responses'],\n  requiresAuth: true,\n  requiresPermission: MastraFGAPermissions.AGENTS_READ,\n  handler: async ({ mastra, requestContext, conversationId }) => {\n    try {\n      const match = await findConversationThreadAcrossAgents({ mastra, conversationId, requestContext });\n      if (!match) {\n        throw new HTTPException(404, { message: `Conversation ${conversationId} was not found` });\n      }\n\n      const { messages } = await match.memoryStore.listMessages({\n        threadId: conversationId,\n        page: 0,\n        perPage: 1000,\n      });\n\n      return buildConversationItemsList(mapMastraMessagesToConversationItems(messages));\n    } catch (error) {\n      return handleError(error, 'Error retrieving conversation');\n    }\n  },\n});\n\nexport const DELETE_CONVERSATION_ROUTE = createRoute({\n  method: 'DELETE',\n  path: '/v1/conversations/:conversationId',\n  responseType: 'json',\n  pathParamSchema: conversationIdPathParams,\n  responseSchema: conversationDeletedSchema,\n  summary: 'Delete a conversation',\n  description: 'Deletes a thread-backed conversation and its stored items',\n  tags: ['Responses'],\n  requiresAuth: true,\n  requiresPermission: MastraFGAPermissions.AGENTS_DELETE,\n  handler: async ({ mastra, requestContext, conversationId }) => {\n    try {\n      const match = await findConversationThreadAcrossAgents({ mastra, conversationId, requestContext });\n      if (!match) {\n        throw new HTTPException(404, { message: `Conversation ${conversationId} was not found` });\n      }\n\n      await match.memoryStore.deleteThread({ threadId: conversationId });\n\n      return buildConversationDeleted(conversationId);\n    } catch (error) {\n      return handleError(error, 'Error deleting conversation');\n    }\n  },\n});\n"],"mappings":";;;;;;;;;;;;;;;;AAiBA,SAAS,wBAAwB,EAAE,UAAwE;CACzG,OAAO;EACL,IAAI,OAAO;EACX,QAAQ;EACR;CACF;AACF;AAEA,SAAS,2BAA2B,OAA6D;CAC/F,OAAO;EACL,QAAQ;EACR,MAAM;EACN,UAAU,MAAM,EAAE,EAAE,MAAM;EAC1B,SAAS,MAAM,GAAG,EAAE,CAAC,EAAE,MAAM;EAC7B,UAAU;CACZ;AACF;AAEA,SAAS,yBAAyB,gBAA6C;CAC7E,OAAO;EACL,IAAI;EACJ,QAAQ;EACR,SAAS;CACX;AACF;AAEA,MAAa,4BAA4B,YAAY;CACnD,QAAQ;CACR,MAAM;CACN,cAAc;CACd,YAAY;CACZ,gBAAgB;CAChB,SAAS;CACT,aAAa;CACb,MAAM,CAAC,WAAW;CAClB,cAAc;CACd,oBAAoB,qBAAqB;CACzC,SAAS,OAAO,EAAE,QAAQ,gBAAgB,UAAU,iBAAiB,aAAa,OAAO,eAAe;EACtG,IAAI;GACF,IAAI,CAAC,QACH,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,gDAAgD,CAAC;GAG3F,MAAM,QAAQ,MAAM,mBAAmB;IAAE;IAAQ,SAAS;GAAS,CAAC;GACpE,MAAM,SAAS,MAAM,MAAM,UAAU,EAAE,eAAe,CAAC;GACvD,IAAI,CAAC,QACH,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,UAAU,MAAM,GAAG,mCAAmC,CAAC;GAEjG,IAAI,CAAE,MAAM,oBAAoB;IAAE;IAAO;GAAe,CAAC,GACvD,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,+CAA+C,MAAM,GAAG,GAAG,CAAC;GAGtG,MAAM,WAAW,mBAAmB,WAAW,OAAO,WAAW;GACjE,MAAM,aAAa,uBAAuB,gBAAgB,WAAW,KAAK;GAG1E,IAAI,iBAEF,MAAM,wBAAwB,MADP,OAAO,cAAc,EAAE,SAAS,CAAC,GAChB,uBAAuB,gBAAgB,KAAA,CAAS,CAAC;GAU3F,OAAO,wBAAwB,EAAE,QAAA,MAPZ,OAAO,aAAa;IACvC;IACA;IACA;IACA;GACF,CAAC,EAEuC,CAAC;EAC3C,SAAS,OAAO;GACd,OAAO,YAAY,OAAO,6BAA6B;EACzD;CACF;AACF,CAAC;AAED,MAAa,yBAAyB,YAAY;CAChD,QAAQ;CACR,MAAM;CACN,cAAc;CACd,iBAAiB;CACjB,gBAAgB;CAChB,SAAS;CACT,aAAa;CACb,MAAM,CAAC,WAAW;CAClB,cAAc;CACd,oBAAoB,qBAAqB;CACzC,SAAS,OAAO,EAAE,QAAQ,gBAAgB,qBAAqB;EAC7D,IAAI;GACF,MAAM,QAAQ,MAAM,mCAAmC;IAAE;IAAQ;IAAgB;GAAe,CAAC;GACjG,IAAI,CAAC,OACH,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,gBAAgB,eAAe,gBAAgB,CAAC;GAG1F,OAAO,wBAAwB,EAAE,QAAQ,MAAM,OAAO,CAAC;EACzD,SAAS,OAAO;GACd,OAAO,YAAY,OAAO,+BAA+B;EAC3D;CACF;AACF,CAAC;AAED,MAAa,+BAA+B,YAAY;CACtD,QAAQ;CACR,MAAM;CACN,cAAc;CACd,iBAAiB;CACjB,gBAAgB;CAChB,SAAS;CACT,aAAa;CACb,MAAM,CAAC,WAAW;CAClB,cAAc;CACd,oBAAoB,qBAAqB;CACzC,SAAS,OAAO,EAAE,QAAQ,gBAAgB,qBAAqB;EAC7D,IAAI;GACF,MAAM,QAAQ,MAAM,mCAAmC;IAAE;IAAQ;IAAgB;GAAe,CAAC;GACjG,IAAI,CAAC,OACH,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,gBAAgB,eAAe,gBAAgB,CAAC;GAG1F,MAAM,EAAE,aAAa,MAAM,MAAM,YAAY,aAAa;IACxD,UAAU;IACV,MAAM;IACN,SAAS;GACX,CAAC;GAED,OAAO,2BAA2B,qCAAqC,QAAQ,CAAC;EAClF,SAAS,OAAO;GACd,OAAO,YAAY,OAAO,+BAA+B;EAC3D;CACF;AACF,CAAC;AAED,MAAa,4BAA4B,YAAY;CACnD,QAAQ;CACR,MAAM;CACN,cAAc;CACd,iBAAiB;CACjB,gBAAgB;CAChB,SAAS;CACT,aAAa;CACb,MAAM,CAAC,WAAW;CAClB,cAAc;CACd,oBAAoB,qBAAqB;CACzC,SAAS,OAAO,EAAE,QAAQ,gBAAgB,qBAAqB;EAC7D,IAAI;GACF,MAAM,QAAQ,MAAM,mCAAmC;IAAE;IAAQ;IAAgB;GAAe,CAAC;GACjG,IAAI,CAAC,OACH,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,gBAAgB,eAAe,gBAAgB,CAAC;GAG1F,MAAM,MAAM,YAAY,aAAa,EAAE,UAAU,eAAe,CAAC;GAEjE,OAAO,yBAAyB,cAAc;EAChD,SAAS,OAAO;GACd,OAAO,YAAY,OAAO,6BAA6B;EACzD;CACF;AACF,CAAC"}

package/dist/server/handlers/datasets.cjs

@@ -1,11 +1,11 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../rolldown-runtime-Bd6kNlEP.cjs");
 const require_http_exception = require("../../http-exception-CKDHupKw.cjs");
-const require_common = require("../../common-BkgcoK-2.cjs");
+const require_common = require("../../common-DhKNoXGp.cjs");
 const require_route_builder = require("../../route-builder-2yrD15TL.cjs");
 const require_constants = require("../../constants-4IJp_uzj.cjs");
 const require_server_handlers_error = require("./error.cjs");
-const require_datasets = require("../../datasets-Bz7SKu-q.cjs");
+const require_datasets = require("../../datasets-C2aXB8At.cjs");
 let zod = require("zod");
 let _mastra_core_agent = require("@mastra/core/agent");
 let _mastra_core_error = require("@mastra/core/error");

package/dist/server/handlers/datasets.js

@@ -1,9 +1,9 @@
 import { t as HTTPException } from "../../http-exception-CyfxZB6W.js";
-import { f as successResponseSchema } from "../../common-tSamNYpt.js";
+import { f as successResponseSchema } from "../../common-Y30XtCyr.js";
 import { n as createRoute } from "../../route-builder-lBil8Cvo.js";
 import { p as isReservedRequestContextKey } from "../../constants-0jFCWoex.js";
 import { handleError } from "./error.js";
-import { A as listDatasetsQuerySchema, B as reviewSummaryResponseSchema, E as generateItemsResponseSchema, F as listExperimentsResponseSchema, G as tenancyQuerySchema, H as runExperimentItemResponseSchema, I as listItemVersionsResponseSchema, J as updateExperimentBodySchema, K as triggerExperimentBodySchema, L as listItemsQuerySchema, M as listExperimentResultsQuerySchema, N as listExperimentResultsResponseSchema, P as listExperimentsQuerySchema, R as listItemsResponseSchema, S as experimentResultResponseSchema, T as generateItemsBodySchema, V as runExperimentItemBodySchema, W as submitExperimentResultBodySchema, X as updateItemBodySchema, Y as updateExperimentResultBodySchema, _ as datasetResponseSchema, a as batchInsertItemsResponseSchema, b as experimentResponseSchema, c as compareExperimentsBodySchema, d as datasetAndExperimentIdPathParams, f as datasetAndItemIdPathParams, g as datasetItemVersionPathParams, h as datasetItemResponseSchema, i as batchInsertItemsBodySchema, j as listDatasetsResponseSchema, k as listDatasetVersionsResponseSchema, l as comparisonResponseSchema, m as datasetIdPathParams, n as batchDeleteItemsBodySchema, o as clusterFailuresBodySchema, p as datasetExperimentAndItemIdPathParams, q as updateDatasetBodySchema, r as batchDeleteItemsResponseSchema, s as clusterFailuresResponseSchema, t as addItemBodySchema, u as createDatasetBodySchema, w as experimentSummaryResponseSchema, x as experimentResultIdPathParams, y as experimentIdPathParams, z as paginationQuerySchema } from "../../datasets-CgNMo16l.js";
+import { A as listDatasetsQuerySchema, B as reviewSummaryResponseSchema, E as generateItemsResponseSchema, F as listExperimentsResponseSchema, G as tenancyQuerySchema, H as runExperimentItemResponseSchema, I as listItemVersionsResponseSchema, J as updateExperimentBodySchema, K as triggerExperimentBodySchema, L as listItemsQuerySchema, M as listExperimentResultsQuerySchema, N as listExperimentResultsResponseSchema, P as listExperimentsQuerySchema, R as listItemsResponseSchema, S as experimentResultResponseSchema, T as generateItemsBodySchema, V as runExperimentItemBodySchema, W as submitExperimentResultBodySchema, X as updateItemBodySchema, Y as updateExperimentResultBodySchema, _ as datasetResponseSchema, a as batchInsertItemsResponseSchema, b as experimentResponseSchema, c as compareExperimentsBodySchema, d as datasetAndExperimentIdPathParams, f as datasetAndItemIdPathParams, g as datasetItemVersionPathParams, h as datasetItemResponseSchema, i as batchInsertItemsBodySchema, j as listDatasetsResponseSchema, k as listDatasetVersionsResponseSchema, l as comparisonResponseSchema, m as datasetIdPathParams, n as batchDeleteItemsBodySchema, o as clusterFailuresBodySchema, p as datasetExperimentAndItemIdPathParams, q as updateDatasetBodySchema, r as batchDeleteItemsResponseSchema, s as clusterFailuresResponseSchema, t as addItemBodySchema, u as createDatasetBodySchema, w as experimentSummaryResponseSchema, x as experimentResultIdPathParams, y as experimentIdPathParams, z as paginationQuerySchema } from "../../datasets-CDQDQxos.js";
 import { z as z$1 } from "zod";
 import { Agent } from "@mastra/core/agent";
 import { MastraError } from "@mastra/core/error";

package/dist/server/handlers/editor-builder.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../rolldown-runtime-Bd6kNlEP.cjs");
-const require_editor_builder = require("../../editor-builder-DRlsFCN0.cjs");
+const require_editor_builder = require("../../editor-builder-CmUsqdZq.cjs");
 exports.GET_EDITOR_BUILDER_AVAILABLE_MODELS_ROUTE = require_editor_builder.GET_EDITOR_BUILDER_AVAILABLE_MODELS_ROUTE;
 exports.GET_EDITOR_BUILDER_SETTINGS_ROUTE = require_editor_builder.GET_EDITOR_BUILDER_SETTINGS_ROUTE;
 exports.GET_INFRASTRUCTURE_STATUS_ROUTE = require_editor_builder.GET_INFRASTRUCTURE_STATUS_ROUTE;

package/dist/server/handlers/editor-builder.js

@@ -1,2 +1,2 @@
-import { a as requireBuilderFeature, i as isBuilderFeatureEnabled, n as GET_EDITOR_BUILDER_SETTINGS_ROUTE, r as GET_INFRASTRUCTURE_STATUS_ROUTE, t as GET_EDITOR_BUILDER_AVAILABLE_MODELS_ROUTE } from "../../editor-builder-DU3y5Ant.js";
+import { a as requireBuilderFeature, i as isBuilderFeatureEnabled, n as GET_EDITOR_BUILDER_SETTINGS_ROUTE, r as GET_INFRASTRUCTURE_STATUS_ROUTE, t as GET_EDITOR_BUILDER_AVAILABLE_MODELS_ROUTE } from "../../editor-builder-DHXbVwxu.js";
 export { GET_EDITOR_BUILDER_AVAILABLE_MODELS_ROUTE, GET_EDITOR_BUILDER_SETTINGS_ROUTE, GET_INFRASTRUCTURE_STATUS_ROUTE, isBuilderFeatureEnabled, requireBuilderFeature };

package/dist/server/handlers/favorites-enrichment.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../rolldown-runtime-Bd6kNlEP.cjs");
 const require_server_handlers_authorship = require("./authorship.cjs");
-const require_editor_builder = require("../../editor-builder-DRlsFCN0.cjs");
+const require_editor_builder = require("../../editor-builder-CmUsqdZq.cjs");
 //#region src/server/handlers/favorites-enrichment.ts
 /**
 * Resolve the EE feature flag plus the caller's favorited set for a list of

package/dist/server/handlers/favorites-enrichment.js

@@ -1,5 +1,5 @@
 import { getCallerAuthorId } from "./authorship.js";
-import { i as isBuilderFeatureEnabled } from "../../editor-builder-DU3y5Ant.js";
+import { i as isBuilderFeatureEnabled } from "../../editor-builder-DHXbVwxu.js";
 //#region src/server/handlers/favorites-enrichment.ts
 /**
 * Resolve the EE feature flag plus the caller's favorited set for a list of

package/dist/server/handlers/logs.cjs

@@ -1,10 +1,10 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_rolldown_runtime = require("../../rolldown-runtime-Bd6kNlEP.cjs");
-const require_common = require("../../common-BkgcoK-2.cjs");
+const require_common = require("../../common-DhKNoXGp.cjs");
 const require_route_builder = require("../../route-builder-2yrD15TL.cjs");
 const require_server_handlers_error = require("./error.cjs");
 const require_utils = require("../../utils-HqDZJwRc.cjs");
-const require_logs = require("../../logs-B0037Tlj.cjs");
+const require_logs = require("../../logs-CY8AGOCO.cjs");
 //#region src/server/handlers/logs.ts
 var logs_exports = /* @__PURE__ */ require_rolldown_runtime.__exportAll({
 	LIST_LOGS_BY_RUN_ID_ROUTE: () => LIST_LOGS_BY_RUN_ID_ROUTE,

package/dist/server/handlers/logs.js

@@ -1,9 +1,9 @@
 import { r as __exportAll } from "../../rolldown-runtime-maW3aOIk.js";
-import { u as runIdSchema } from "../../common-tSamNYpt.js";
+import { u as runIdSchema } from "../../common-Y30XtCyr.js";
 import { n as createRoute } from "../../route-builder-lBil8Cvo.js";
 import { handleError } from "./error.js";
 import { d as validateBody, o as parseFilters } from "../../utils-KcHk7C0D.js";
-import { n as listLogsQuerySchema, r as listLogsResponseSchema, t as listLogTransportsResponseSchema } from "../../logs-B2Nd15Oe.js";
+import { n as listLogsQuerySchema, r as listLogsResponseSchema, t as listLogTransportsResponseSchema } from "../../logs-Bd_xpsYw.js";
 //#region src/server/handlers/logs.ts
 var logs_exports = /* @__PURE__ */ __exportAll({
 	LIST_LOGS_BY_RUN_ID_ROUTE: () => LIST_LOGS_BY_RUN_ID_ROUTE,

package/dist/server/handlers/mcp-client-versions.cjs

@@ -5,7 +5,7 @@ const require_route_builder = require("../../route-builder-2yrD15TL.cjs");
 const require_utils = require("../../utils-DFQixxkO.cjs");
 const require_server_handlers_error = require("./error.cjs");
 const require_server_handlers_version_helpers = require("./version-helpers.cjs");
-const require_mcp_client_versions = require("../../mcp-client-versions-Zkez3ruO.cjs");
+const require_mcp_client_versions = require("../../mcp-client-versions-Cq97zXiK.cjs");
 //#region src/server/handlers/mcp-client-versions.ts
 /**
 * GET /stored/mcp-clients/:mcpClientId/versions - List all versions for an MCP client

package/dist/server/handlers/mcp-client-versions.js

@@ -3,7 +3,7 @@ import { n as createRoute } from "../../route-builder-lBil8Cvo.js";
 import { i as getStoredResourceScope, n as assertStoredResourceScope } from "../../utils-BJm0ZYnM.js";
 import { handleError } from "./error.js";
 import { MCP_CLIENT_SNAPSHOT_CONFIG_FIELDS, calculateChangedFields, computeVersionDiffs, createVersionWithRetry, enforceRetentionLimit, extractConfigFromVersion } from "./version-helpers.js";
-import { a as createMCPClientVersionResponseSchema, c as listMCPClientVersionsQuerySchema, d as mcpClientVersionPathParams, i as createMCPClientVersionBodySchema, l as listMCPClientVersionsResponseSchema, n as compareMCPClientVersionsQuerySchema, o as deleteMCPClientVersionResponseSchema, p as restoreMCPClientVersionResponseSchema, r as compareMCPClientVersionsResponseSchema, s as getMCPClientVersionResponseSchema, t as activateMCPClientVersionResponseSchema, u as mcpClientVersionIdPathParams } from "../../mcp-client-versions-Df5bgWm1.js";
+import { a as createMCPClientVersionResponseSchema, c as listMCPClientVersionsQuerySchema, d as mcpClientVersionPathParams, i as createMCPClientVersionBodySchema, l as listMCPClientVersionsResponseSchema, n as compareMCPClientVersionsQuerySchema, o as deleteMCPClientVersionResponseSchema, p as restoreMCPClientVersionResponseSchema, r as compareMCPClientVersionsResponseSchema, s as getMCPClientVersionResponseSchema, t as activateMCPClientVersionResponseSchema, u as mcpClientVersionIdPathParams } from "../../mcp-client-versions-DxBkzcYH.js";
 //#region src/server/handlers/mcp-client-versions.ts
 /**
 * GET /stored/mcp-clients/:mcpClientId/versions - List all versions for an MCP client

package/dist/server/handlers/mcp.cjs

@@ -2,7 +2,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_rolldown_runtime = require("../../rolldown-runtime-Bd6kNlEP.cjs");
 const require_http_exception = require("../../http-exception-CKDHupKw.cjs");
 const require_route_builder = require("../../route-builder-2yrD15TL.cjs");
-const require_mcp = require("../../mcp-Jus386Vq.cjs");
+const require_mcp = require("../../mcp-ShaKO7gA.cjs");
 let _mastra_core_error = require("@mastra/core/error");
 //#region src/server/handlers/mcp.ts
 var mcp_exports = /* @__PURE__ */ require_rolldown_runtime.__exportAll({

package/dist/server/handlers/mcp.js

@@ -1,7 +1,7 @@
 import { r as __exportAll } from "../../rolldown-runtime-maW3aOIk.js";
 import { t as HTTPException } from "../../http-exception-CyfxZB6W.js";
 import { n as createRoute } from "../../route-builder-lBil8Cvo.js";
-import { a as listMcpServerToolsResponseSchema, c as listResourcesResponseSchema, d as mcpServerResourcePathParams, f as mcpServerToolPathParams, g as serverDetailSchema, h as readResourceResponseSchema, l as mcpServerDetailPathParams, m as readResourceBodySchema, n as executeToolResponseSchema, o as listMcpServersQuerySchema, p as mcpToolInfoSchema, r as getMcpServerDetailQuerySchema, s as listMcpServersResponseSchema, t as executeToolBodySchema, u as mcpServerIdPathParams } from "../../mcp-BK6cmwww.js";
+import { a as listMcpServerToolsResponseSchema, c as listResourcesResponseSchema, d as mcpServerResourcePathParams, f as mcpServerToolPathParams, g as serverDetailSchema, h as readResourceResponseSchema, l as mcpServerDetailPathParams, m as readResourceBodySchema, n as executeToolResponseSchema, o as listMcpServersQuerySchema, p as mcpToolInfoSchema, r as getMcpServerDetailQuerySchema, s as listMcpServersResponseSchema, t as executeToolBodySchema, u as mcpServerIdPathParams } from "../../mcp-DzpwLXEY.js";
 import { MastraError } from "@mastra/core/error";
 //#region src/server/handlers/mcp.ts
 var mcp_exports = /* @__PURE__ */ __exportAll({

package/dist/server/handlers/memory.cjs

@@ -4,9 +4,10 @@ const require_http_exception = require("../../http-exception-CKDHupKw.cjs");
 const require_route_builder = require("../../route-builder-2yrD15TL.cjs");
 const require_server_handlers_error = require("./error.cjs");
 const require_utils = require("../../utils-HqDZJwRc.cjs");
-const require_memory = require("../../memory-C3j3i6iS.cjs");
+const require_memory = require("../../memory-CizEIbl1.cjs");
 const require_server_handlers_gateway_memory_client = require("./gateway-memory-client.cjs");
 let _mastra_core_agent = require("@mastra/core/agent");
+let _mastra_core_error = require("@mastra/core/error");
 let _mastra_core_utils = require("@mastra/core/utils");
 //#region src/server/handlers/memory.ts
 var memory_exports = /* @__PURE__ */ require_rolldown_runtime.__exportAll({
@@ -993,13 +994,6 @@ const CREATE_THREAD_ROUTE = require_route_builder.createRoute({
 			const effectiveResourceId = require_utils.getEffectiveResourceId(requestContext, resourceId);
 			const effectiveThreadId = threadId ?? mastra.generateId();
 			require_utils.validateBody({ resourceId: effectiveResourceId });
-			await require_utils.enforceThreadAccess({
-				mastra,
-				requestContext,
-				threadId: effectiveThreadId,
-				effectiveResourceId,
-				permission: require_utils.MastraFGAPermissions.MEMORY_WRITE
-			});
 			const agent = await getAgentFromContext({
 				mastra,
 				agentId,
@@ -1007,12 +1001,23 @@ const CREATE_THREAD_ROUTE = require_route_builder.createRoute({
 			});
 			if (agent && await require_server_handlers_gateway_memory_client.isGatewayAgentAsync(agent)) {
 				const gwClient = require_server_handlers_gateway_memory_client.getGatewayClient();
-				if (gwClient) return require_server_handlers_gateway_memory_client.toLocalThread((await gwClient.createThread({
-					id: effectiveThreadId,
-					resourceId: effectiveResourceId,
-					title,
-					metadata
-				})).thread);
+				if (gwClient) {
+					const existing = threadId ? await gwClient.getThread(effectiveThreadId) : null;
+					await require_utils.enforceThreadAccess({
+						mastra,
+						requestContext,
+						threadId: effectiveThreadId,
+						thread: existing ? require_server_handlers_gateway_memory_client.toLocalThread(existing.thread) : null,
+						effectiveResourceId,
+						permission: require_utils.MastraFGAPermissions.MEMORY_WRITE
+					});
+					return require_server_handlers_gateway_memory_client.toLocalThread((await gwClient.createThread({
+						id: effectiveThreadId,
+						resourceId: effectiveResourceId,
+						title,
+						metadata
+					})).thread);
+				}
 			}
 			const memory = await getMemoryFromContext({
 				mastra,
@@ -1020,6 +1025,14 @@ const CREATE_THREAD_ROUTE = require_route_builder.createRoute({
 				requestContext
 			});
 			if (!memory) throw new require_http_exception.HTTPException(400, { message: "Memory is not initialized" });
+			await require_utils.enforceThreadAccess({
+				mastra,
+				requestContext,
+				threadId: effectiveThreadId,
+				thread: threadId ? await memory.getThreadById({ threadId: effectiveThreadId }) : null,
+				effectiveResourceId,
+				permission: require_utils.MastraFGAPermissions.MEMORY_WRITE
+			});
 			return await memory.createThread({
 				resourceId: effectiveResourceId,
 				title,
@@ -1293,7 +1306,7 @@ const UPDATE_WORKING_MEMORY_ROUTE = require_route_builder.createRoute({
 	description: "Updates the working memory state for a thread",
 	tags: ["Memory"],
 	requiresAuth: true,
-	handler: async ({ mastra, agentId, threadId, resourceId, memoryConfig, workingMemory, requestContext }) => {
+	handler: async ({ mastra, agentId, threadId, resourceId, memoryConfig, workingMemory, mode, requestContext }) => {
 		try {
 			const effectiveThreadId = require_utils.getEffectiveThreadId(requestContext, threadId);
 			const effectiveResourceId = require_utils.getEffectiveResourceId(requestContext, resourceId);
@@ -1323,6 +1336,21 @@ const UPDATE_WORKING_MEMORY_ROUTE = require_route_builder.createRoute({
 				effectiveResourceId,
 				permission: require_utils.MastraFGAPermissions.MEMORY_WRITE
 			});
+			if (mode === "merge") {
+				if (!await memory.supportsAtomicWorkingMemoryMerge()) throw new require_http_exception.HTTPException(400, { message: "Working memory merge is not supported by the configured storage adapter" });
+				try {
+					await memory.mergeWorkingMemory({
+						threadId: effectiveThreadId,
+						resourceId: effectiveResourceId,
+						workingMemory,
+						memoryConfig
+					});
+				} catch (error) {
+					if (error instanceof _mastra_core_error.MastraError && error.category === _mastra_core_error.ErrorCategory.USER) throw new require_http_exception.HTTPException(400, { message: error.message });
+					throw error;
+				}
+				return { success: true };
+			}
 			await memory.updateWorkingMemory({
 				threadId: effectiveThreadId,
 				resourceId: effectiveResourceId,