@mastra/server 1.77.0-alpha.2 → 1.77.0-alpha.4

package/dist/server/handlers/error.cjs

@@ -20,9 +20,14 @@ const WORKFLOW_SCHEMA_VALIDATION_FAILED_CODE = "WORKFLOW_SCHEMA_VALIDATION_FAILE
 function isWorkflowSchemaValidationError(error) {
 	return error instanceof Error && error.id === WORKFLOW_SCHEMA_VALIDATION_FAILED_CODE;
 }
-const WORKFLOW_RESUME_ALREADY_CLAIMED_CODE = "WORKFLOW_RESUME_ALREADY_CLAIMED";
-function isWorkflowResumeAlreadyClaimedError(error) {
-	return error instanceof Error && error.id === WORKFLOW_RESUME_ALREADY_CLAIMED_CODE;
+const RESUME_ALREADY_CLAIMED_CODES = /* @__PURE__ */ new Set([
+	"WORKFLOW_RESUME_ALREADY_CLAIMED",
+	"AGENT_RESUME_ALREADY_CLAIMED",
+	"WORKFLOW_RUN_NOT_SUSPENDED",
+	"AGENT_RESUME_RUN_NOT_SUSPENDED"
+]);
+function isResumeAlreadyClaimedError(error) {
+	return error instanceof Error && RESUME_ALREADY_CLAIMED_CODES.has(error.id);
 }
 /**
 * Durable agent errors for a request that conflicts with the run's state:
@@ -100,7 +105,7 @@ function handleError(error, defaultMessage) {
 			cause: error
 		});
 	}
-	if (isWorkflowResumeAlreadyClaimedError(error) || isDurableRunConflictError(error)) throw new require_http_exception.HTTPException(409, {
+	if (isResumeAlreadyClaimedError(error) || isDurableRunConflictError(error)) throw new require_http_exception.HTTPException(409, {
 		message: error.message,
 		stack: error.stack,
 		cause: error

package/dist/server/handlers/error.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"error.cjs","names":["HTTPException"],"sources":["../../../src/server/handlers/error.ts"],"sourcesContent":["import type { ZodError } from 'zod';\n\nimport { HTTPException } from '../http-exception';\nimport type { StatusCode } from '../http-exception';\nimport type { ApiError } from '../types';\n\n/**\n * Duck-typed interface for ZodError-like objects.\n * Note: Zod v4 uses PropertyKey[] (string | number | symbol) for path.\n */\nexport interface ZodErrorLike {\n  issues: Array<{\n    path: PropertyKey[];\n    message: string;\n  }>;\n}\n\n/**\n * Recognition for `ModelNotAllowedError` from `@mastra/core/agent-builder/ee`.\n *\n * Inlined as a duck check rather than imported so that `handleError` (wired\n * into every route) does not force a load-time dependency on the\n * `@mastra/core/agent-builder/ee` subpath. That subpath only ships in\n * `@mastra/core >= 1.34.0`; deploys whose bundled `@mastra/server` resolves\n * against an older core would otherwise crash at startup with\n * `ERR_MODULE_NOT_FOUND` on `@mastra/core/dist/agent-builder/ee/index.js`.\n */\nconst MODEL_NOT_ALLOWED_CODE = 'MODEL_NOT_ALLOWED';\n\ninterface ModelNotAllowedErrorLike extends Error {\n  code: typeof MODEL_NOT_ALLOWED_CODE;\n  allowed?: unknown;\n  attempted?: unknown;\n  offendingLabel?: string;\n}\n\nfunction isModelNotAllowedError(error: unknown): error is ModelNotAllowedErrorLike {\n  return error instanceof Error && (error as { code?: unknown }).code === MODEL_NOT_ALLOWED_CODE;\n}\n\nconst WORKFLOW_SCHEMA_VALIDATION_FAILED_CODE = 'WORKFLOW_SCHEMA_VALIDATION_FAILED';\n\nfunction isWorkflowSchemaValidationError(error: unknown): error is Error {\n  return error instanceof Error && (error as { id?: unknown }).id === WORKFLOW_SCHEMA_VALIDATION_FAILED_CODE;\n}\n\nconst WORKFLOW_RESUME_ALREADY_CLAIMED_CODE = 'WORKFLOW_RESUME_ALREADY_CLAIMED';\n\nfunction isWorkflowResumeAlreadyClaimedError(error: unknown): error is Error {\n  return error instanceof Error && (error as { id?: unknown }).id === WORKFLOW_RESUME_ALREADY_CLAIMED_CODE;\n}\n\n/**\n * Durable agent errors for a request that conflicts with the run's state:\n * another execution owns the run, it is already being recovered, it lost a\n * concurrent claim, or it is suspended (recover). Matched by id, like the\n * other checks here, so the server doesn't depend on core exporting them.\n */\nconst DURABLE_RUN_CONFLICT_CODES = new Set([\n  'DURABLE_AGENT_RUN_ACTIVE',\n  'DURABLE_AGENT_RECOVER_RUN_ACTIVE_LOCALLY',\n  'DURABLE_AGENT_RECOVER_ALREADY_IN_PROGRESS',\n  'DURABLE_AGENT_RECOVER_RUN_SUSPENDED',\n  'DURABLE_AGENT_EXECUTION_CONFLICT',\n]);\n\nfunction isDurableRunConflictError(error: unknown): error is Error {\n  const id = (error as { id?: unknown } | undefined)?.id;\n  return error instanceof Error && typeof id === 'string' && DURABLE_RUN_CONFLICT_CODES.has(id);\n}\n\nconst FEEDBACK_REVIEW_STATUS_CONFLICT_CODE = 'OBSERVABILITY_UPDATE_FEEDBACK_REVIEW_STATUS_CONFLICT';\n\nfunction isFeedbackReviewStatusConflictError(error: unknown): error is Error {\n  return error instanceof Error && (error as { id?: unknown }).id === FEEDBACK_REVIEW_STATUS_CONFLICT_CODE;\n}\n\n/**\n * Matches the `OBSERVABILITY_STORAGE_*_NOT_IMPLEMENTED` MastraError the base\n * observability store throws for every optional method a store doesn't\n * implement. Checked by id (not `instanceof`) so it holds across duplicated\n * `@mastra/core` installs.\n */\nfunction isObservabilityStorageNotImplementedError(error: unknown): error is Error {\n  const id = error && typeof error === 'object' && 'id' in error ? error.id : undefined;\n  return typeof id === 'string' && id.startsWith('OBSERVABILITY_STORAGE_') && id.endsWith('_NOT_IMPLEMENTED');\n}\n\n/**\n * Structural check for ZodError instances.\n *\n * Avoids `instanceof ZodError` because consumers can resolve `'zod'` to a\n * different package instance (e.g. `zod@^3`) than the one a server adapter is\n * bundled with (`zod@^4`). In that case `instanceof` is false and validation\n * errors fall through to a generic response that drops field-path information.\n *\n * See https://github.com/mastra-ai/mastra/issues/17167.\n */\nexport function isZodError(error: unknown): error is ZodError<any> {\n  return (\n    !!error &&\n    typeof error === 'object' &&\n    (error as { name?: unknown }).name === 'ZodError' &&\n    Array.isArray((error as { issues?: unknown }).issues)\n  );\n}\n\n/**\n * Formats a ZodError into a structured validation error response.\n * Returns an object with an error message and an array of field-specific issues.\n */\nexport function formatZodError(\n  error: ZodErrorLike,\n  context: string,\n): { error: string; issues: Array<{ field: string; message: string }> } {\n  const issues = error.issues.map(e => ({\n    field: e.path.length > 0 ? e.path.map(p => String(p)).join('.') : 'root',\n    message: e.message,\n  }));\n\n  return {\n    error: `Invalid ${context}`,\n    issues,\n  };\n}\n\n// Helper to handle errors consistently\nexport function handleError(error: unknown, defaultMessage: string): never {\n  if (isModelNotAllowedError(error)) {\n    const body = {\n      error: {\n        code: error.code,\n        message: error.message,\n        allowed: error.allowed,\n        attempted: error.attempted,\n        offendingLabel: error.offendingLabel,\n      },\n    };\n    const res = new Response(JSON.stringify(body), {\n      status: 422,\n      headers: { 'content-type': 'application/json' },\n    });\n    throw new HTTPException(422, {\n      res,\n      message: error.message,\n      cause: error,\n    });\n  }\n\n  // A losing concurrent resume, or a recover of a run that is live or suspended, is a conflict on\n  // run state, not a malformed request, so it maps to 409 and clients can distinguish it from a\n  // 400/500 and re-read the run.\n  if (isWorkflowResumeAlreadyClaimedError(error) || isDurableRunConflictError(error)) {\n    throw new HTTPException(409, {\n      message: error.message,\n      stack: error.stack,\n      cause: error,\n    });\n  }\n\n  // The feedback row changed under a review-status update, so the caller re-reads and retries;\n  // that is a conflict, not a broken store.\n  if (isFeedbackReviewStatusConflictError(error)) {\n    throw new HTTPException(409, {\n      message: error.message,\n      stack: error.stack,\n      cause: error,\n    });\n  }\n\n  if (isWorkflowSchemaValidationError(error)) {\n    throw new HTTPException(400, {\n      message: error.message,\n      stack: error.stack,\n      cause: error,\n    });\n  }\n\n  // Optional observability APIs (feedback, metrics, logs, scores, ...) throw\n  // `*_NOT_IMPLEMENTED` on stores that don't support them. That's a missing\n  // capability, not a server fault, so it maps to 501 — which server adapters\n  // log as a warning instead of an error. The message is preserved because\n  // clients match on it to detect unsupported operations. Clients should check\n  // `GET /observability/capabilities` before calling optional routes.\n  if (isObservabilityStorageNotImplementedError(error)) {\n    throw new HTTPException(501, {\n      message: error.message,\n      stack: error.stack,\n      cause: error,\n    });\n  }\n\n  const apiError = error as ApiError;\n\n  const apiErrorStatus = apiError.status || apiError.details?.status || 500;\n\n  throw new HTTPException(apiErrorStatus as StatusCode, {\n    message: apiError.message || defaultMessage,\n    stack: apiError.stack,\n    cause: apiError.cause,\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;AA2BA,MAAM,yBAAyB;AAS/B,SAAS,uBAAuB,OAAmD;CACjF,OAAO,iBAAiB,SAAU,MAA6B,SAAS;AAC1E;AAEA,MAAM,yCAAyC;AAE/C,SAAS,gCAAgC,OAAgC;CACvE,OAAO,iBAAiB,SAAU,MAA2B,OAAO;AACtE;AAEA,MAAM,uCAAuC;AAE7C,SAAS,oCAAoC,OAAgC;CAC3E,OAAO,iBAAiB,SAAU,MAA2B,OAAO;AACtE;;;;;;;AAQA,MAAM,6CAA6B,IAAI,IAAI;CACzC;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,SAAS,0BAA0B,OAAgC;CACjE,MAAM,KAAM,OAAwC;CACpD,OAAO,iBAAiB,SAAS,OAAO,OAAO,YAAY,2BAA2B,IAAI,EAAE;AAC9F;AAEA,MAAM,uCAAuC;AAE7C,SAAS,oCAAoC,OAAgC;CAC3E,OAAO,iBAAiB,SAAU,MAA2B,OAAO;AACtE;;;;;;;AAQA,SAAS,0CAA0C,OAAgC;CACjF,MAAM,KAAK,SAAS,OAAO,UAAU,YAAY,QAAQ,QAAQ,MAAM,KAAK,KAAA;CAC5E,OAAO,OAAO,OAAO,YAAY,GAAG,WAAW,wBAAwB,KAAK,GAAG,SAAS,kBAAkB;AAC5G;;;;;;;;;;;AAYA,SAAgB,WAAW,OAAwC;CACjE,OACE,CAAC,CAAC,SACF,OAAO,UAAU,YAChB,MAA6B,SAAS,cACvC,MAAM,QAAS,MAA+B,MAAM;AAExD;;;;;AAMA,SAAgB,eACd,OACA,SACsE;CACtE,MAAM,SAAS,MAAM,OAAO,KAAI,OAAM;EACpC,OAAO,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,KAAI,MAAK,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI;EAClE,SAAS,EAAE;CACb,EAAE;CAEF,OAAO;EACL,OAAO,WAAW;EAClB;CACF;AACF;AAGA,SAAgB,YAAY,OAAgB,gBAA+B;CACzE,IAAI,uBAAuB,KAAK,GAAG;EACjC,MAAM,OAAO,EACX,OAAO;GACL,MAAM,MAAM;GACZ,SAAS,MAAM;GACf,SAAS,MAAM;GACf,WAAW,MAAM;GACjB,gBAAgB,MAAM;EACxB,EACF;EAKA,MAAM,IAAIA,uBAAAA,cAAc,KAAK;GAC3B,KAAA,IALc,SAAS,KAAK,UAAU,IAAI,GAAG;IAC7C,QAAQ;IACR,SAAS,EAAE,gBAAgB,mBAAmB;GAChD,CAEI;GACF,SAAS,MAAM;GACf,OAAO;EACT,CAAC;CACH;CAKA,IAAI,oCAAoC,KAAK,KAAK,0BAA0B,KAAK,GAC/E,MAAM,IAAIA,uBAAAA,cAAc,KAAK;EAC3B,SAAS,MAAM;EACf,OAAO,MAAM;EACb,OAAO;CACT,CAAC;CAKH,IAAI,oCAAoC,KAAK,GAC3C,MAAM,IAAIA,uBAAAA,cAAc,KAAK;EAC3B,SAAS,MAAM;EACf,OAAO,MAAM;EACb,OAAO;CACT,CAAC;CAGH,IAAI,gCAAgC,KAAK,GACvC,MAAM,IAAIA,uBAAAA,cAAc,KAAK;EAC3B,SAAS,MAAM;EACf,OAAO,MAAM;EACb,OAAO;CACT,CAAC;CASH,IAAI,0CAA0C,KAAK,GACjD,MAAM,IAAIA,uBAAAA,cAAc,KAAK;EAC3B,SAAS,MAAM;EACf,OAAO,MAAM;EACb,OAAO;CACT,CAAC;CAGH,MAAM,WAAW;CAIjB,MAAM,IAAIA,uBAAAA,cAFa,SAAS,UAAU,SAAS,SAAS,UAAU,KAEhB;EACpD,SAAS,SAAS,WAAW;EAC7B,OAAO,SAAS;EAChB,OAAO,SAAS;CAClB,CAAC;AACH"}
+{"version":3,"file":"error.cjs","names":["HTTPException"],"sources":["../../../src/server/handlers/error.ts"],"sourcesContent":["import type { ZodError } from 'zod';\n\nimport { HTTPException } from '../http-exception';\nimport type { StatusCode } from '../http-exception';\nimport type { ApiError } from '../types';\n\n/**\n * Duck-typed interface for ZodError-like objects.\n * Note: Zod v4 uses PropertyKey[] (string | number | symbol) for path.\n */\nexport interface ZodErrorLike {\n  issues: Array<{\n    path: PropertyKey[];\n    message: string;\n  }>;\n}\n\n/**\n * Recognition for `ModelNotAllowedError` from `@mastra/core/agent-builder/ee`.\n *\n * Inlined as a duck check rather than imported so that `handleError` (wired\n * into every route) does not force a load-time dependency on the\n * `@mastra/core/agent-builder/ee` subpath. That subpath only ships in\n * `@mastra/core >= 1.34.0`; deploys whose bundled `@mastra/server` resolves\n * against an older core would otherwise crash at startup with\n * `ERR_MODULE_NOT_FOUND` on `@mastra/core/dist/agent-builder/ee/index.js`.\n */\nconst MODEL_NOT_ALLOWED_CODE = 'MODEL_NOT_ALLOWED';\n\ninterface ModelNotAllowedErrorLike extends Error {\n  code: typeof MODEL_NOT_ALLOWED_CODE;\n  allowed?: unknown;\n  attempted?: unknown;\n  offendingLabel?: string;\n}\n\nfunction isModelNotAllowedError(error: unknown): error is ModelNotAllowedErrorLike {\n  return error instanceof Error && (error as { code?: unknown }).code === MODEL_NOT_ALLOWED_CODE;\n}\n\nconst WORKFLOW_SCHEMA_VALIDATION_FAILED_CODE = 'WORKFLOW_SCHEMA_VALIDATION_FAILED';\n\nfunction isWorkflowSchemaValidationError(error: unknown): error is Error {\n  return error instanceof Error && (error as { id?: unknown }).id === WORKFLOW_SCHEMA_VALIDATION_FAILED_CODE;\n}\n\n// A resume the run can't accept: another resume claimed it, or it isn't waiting to be resumed.\nconst RESUME_ALREADY_CLAIMED_CODES = new Set([\n  'WORKFLOW_RESUME_ALREADY_CLAIMED',\n  'AGENT_RESUME_ALREADY_CLAIMED',\n  'WORKFLOW_RUN_NOT_SUSPENDED',\n  'AGENT_RESUME_RUN_NOT_SUSPENDED',\n]);\n\nfunction isResumeAlreadyClaimedError(error: unknown): error is Error {\n  return error instanceof Error && RESUME_ALREADY_CLAIMED_CODES.has((error as { id?: unknown }).id as string);\n}\n\n/**\n * Durable agent errors for a request that conflicts with the run's state:\n * another execution owns the run, it is already being recovered, it lost a\n * concurrent claim, or it is suspended (recover). Matched by id, like the\n * other checks here, so the server doesn't depend on core exporting them.\n */\nconst DURABLE_RUN_CONFLICT_CODES = new Set([\n  'DURABLE_AGENT_RUN_ACTIVE',\n  'DURABLE_AGENT_RECOVER_RUN_ACTIVE_LOCALLY',\n  'DURABLE_AGENT_RECOVER_ALREADY_IN_PROGRESS',\n  'DURABLE_AGENT_RECOVER_RUN_SUSPENDED',\n  'DURABLE_AGENT_EXECUTION_CONFLICT',\n]);\n\nfunction isDurableRunConflictError(error: unknown): error is Error {\n  const id = (error as { id?: unknown } | undefined)?.id;\n  return error instanceof Error && typeof id === 'string' && DURABLE_RUN_CONFLICT_CODES.has(id);\n}\n\nconst FEEDBACK_REVIEW_STATUS_CONFLICT_CODE = 'OBSERVABILITY_UPDATE_FEEDBACK_REVIEW_STATUS_CONFLICT';\n\nfunction isFeedbackReviewStatusConflictError(error: unknown): error is Error {\n  return error instanceof Error && (error as { id?: unknown }).id === FEEDBACK_REVIEW_STATUS_CONFLICT_CODE;\n}\n\n/**\n * Matches the `OBSERVABILITY_STORAGE_*_NOT_IMPLEMENTED` MastraError the base\n * observability store throws for every optional method a store doesn't\n * implement. Checked by id (not `instanceof`) so it holds across duplicated\n * `@mastra/core` installs.\n */\nfunction isObservabilityStorageNotImplementedError(error: unknown): error is Error {\n  const id = error && typeof error === 'object' && 'id' in error ? error.id : undefined;\n  return typeof id === 'string' && id.startsWith('OBSERVABILITY_STORAGE_') && id.endsWith('_NOT_IMPLEMENTED');\n}\n\n/**\n * Structural check for ZodError instances.\n *\n * Avoids `instanceof ZodError` because consumers can resolve `'zod'` to a\n * different package instance (e.g. `zod@^3`) than the one a server adapter is\n * bundled with (`zod@^4`). In that case `instanceof` is false and validation\n * errors fall through to a generic response that drops field-path information.\n *\n * See https://github.com/mastra-ai/mastra/issues/17167.\n */\nexport function isZodError(error: unknown): error is ZodError<any> {\n  return (\n    !!error &&\n    typeof error === 'object' &&\n    (error as { name?: unknown }).name === 'ZodError' &&\n    Array.isArray((error as { issues?: unknown }).issues)\n  );\n}\n\n/**\n * Formats a ZodError into a structured validation error response.\n * Returns an object with an error message and an array of field-specific issues.\n */\nexport function formatZodError(\n  error: ZodErrorLike,\n  context: string,\n): { error: string; issues: Array<{ field: string; message: string }> } {\n  const issues = error.issues.map(e => ({\n    field: e.path.length > 0 ? e.path.map(p => String(p)).join('.') : 'root',\n    message: e.message,\n  }));\n\n  return {\n    error: `Invalid ${context}`,\n    issues,\n  };\n}\n\n// Helper to handle errors consistently\nexport function handleError(error: unknown, defaultMessage: string): never {\n  if (isModelNotAllowedError(error)) {\n    const body = {\n      error: {\n        code: error.code,\n        message: error.message,\n        allowed: error.allowed,\n        attempted: error.attempted,\n        offendingLabel: error.offendingLabel,\n      },\n    };\n    const res = new Response(JSON.stringify(body), {\n      status: 422,\n      headers: { 'content-type': 'application/json' },\n    });\n    throw new HTTPException(422, {\n      res,\n      message: error.message,\n      cause: error,\n    });\n  }\n\n  // A losing concurrent resume, or a recover of a run that is live or suspended, is a conflict on\n  // run state, not a malformed request, so it maps to 409 and clients can distinguish it from a\n  // 400/500 and re-read the run.\n  if (isResumeAlreadyClaimedError(error) || isDurableRunConflictError(error)) {\n    throw new HTTPException(409, {\n      message: error.message,\n      stack: error.stack,\n      cause: error,\n    });\n  }\n\n  // The feedback row changed under a review-status update, so the caller re-reads and retries;\n  // that is a conflict, not a broken store.\n  if (isFeedbackReviewStatusConflictError(error)) {\n    throw new HTTPException(409, {\n      message: error.message,\n      stack: error.stack,\n      cause: error,\n    });\n  }\n\n  if (isWorkflowSchemaValidationError(error)) {\n    throw new HTTPException(400, {\n      message: error.message,\n      stack: error.stack,\n      cause: error,\n    });\n  }\n\n  // Optional observability APIs (feedback, metrics, logs, scores, ...) throw\n  // `*_NOT_IMPLEMENTED` on stores that don't support them. That's a missing\n  // capability, not a server fault, so it maps to 501 — which server adapters\n  // log as a warning instead of an error. The message is preserved because\n  // clients match on it to detect unsupported operations. Clients should check\n  // `GET /observability/capabilities` before calling optional routes.\n  if (isObservabilityStorageNotImplementedError(error)) {\n    throw new HTTPException(501, {\n      message: error.message,\n      stack: error.stack,\n      cause: error,\n    });\n  }\n\n  const apiError = error as ApiError;\n\n  const apiErrorStatus = apiError.status || apiError.details?.status || 500;\n\n  throw new HTTPException(apiErrorStatus as StatusCode, {\n    message: apiError.message || defaultMessage,\n    stack: apiError.stack,\n    cause: apiError.cause,\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;AA2BA,MAAM,yBAAyB;AAS/B,SAAS,uBAAuB,OAAmD;CACjF,OAAO,iBAAiB,SAAU,MAA6B,SAAS;AAC1E;AAEA,MAAM,yCAAyC;AAE/C,SAAS,gCAAgC,OAAgC;CACvE,OAAO,iBAAiB,SAAU,MAA2B,OAAO;AACtE;AAGA,MAAM,+CAA+B,IAAI,IAAI;CAC3C;CACA;CACA;CACA;AACF,CAAC;AAED,SAAS,4BAA4B,OAAgC;CACnE,OAAO,iBAAiB,SAAS,6BAA6B,IAAK,MAA2B,EAAY;AAC5G;;;;;;;AAQA,MAAM,6CAA6B,IAAI,IAAI;CACzC;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,SAAS,0BAA0B,OAAgC;CACjE,MAAM,KAAM,OAAwC;CACpD,OAAO,iBAAiB,SAAS,OAAO,OAAO,YAAY,2BAA2B,IAAI,EAAE;AAC9F;AAEA,MAAM,uCAAuC;AAE7C,SAAS,oCAAoC,OAAgC;CAC3E,OAAO,iBAAiB,SAAU,MAA2B,OAAO;AACtE;;;;;;;AAQA,SAAS,0CAA0C,OAAgC;CACjF,MAAM,KAAK,SAAS,OAAO,UAAU,YAAY,QAAQ,QAAQ,MAAM,KAAK,KAAA;CAC5E,OAAO,OAAO,OAAO,YAAY,GAAG,WAAW,wBAAwB,KAAK,GAAG,SAAS,kBAAkB;AAC5G;;;;;;;;;;;AAYA,SAAgB,WAAW,OAAwC;CACjE,OACE,CAAC,CAAC,SACF,OAAO,UAAU,YAChB,MAA6B,SAAS,cACvC,MAAM,QAAS,MAA+B,MAAM;AAExD;;;;;AAMA,SAAgB,eACd,OACA,SACsE;CACtE,MAAM,SAAS,MAAM,OAAO,KAAI,OAAM;EACpC,OAAO,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,KAAI,MAAK,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI;EAClE,SAAS,EAAE;CACb,EAAE;CAEF,OAAO;EACL,OAAO,WAAW;EAClB;CACF;AACF;AAGA,SAAgB,YAAY,OAAgB,gBAA+B;CACzE,IAAI,uBAAuB,KAAK,GAAG;EACjC,MAAM,OAAO,EACX,OAAO;GACL,MAAM,MAAM;GACZ,SAAS,MAAM;GACf,SAAS,MAAM;GACf,WAAW,MAAM;GACjB,gBAAgB,MAAM;EACxB,EACF;EAKA,MAAM,IAAIA,uBAAAA,cAAc,KAAK;GAC3B,KAAA,IALc,SAAS,KAAK,UAAU,IAAI,GAAG;IAC7C,QAAQ;IACR,SAAS,EAAE,gBAAgB,mBAAmB;GAChD,CAEI;GACF,SAAS,MAAM;GACf,OAAO;EACT,CAAC;CACH;CAKA,IAAI,4BAA4B,KAAK,KAAK,0BAA0B,KAAK,GACvE,MAAM,IAAIA,uBAAAA,cAAc,KAAK;EAC3B,SAAS,MAAM;EACf,OAAO,MAAM;EACb,OAAO;CACT,CAAC;CAKH,IAAI,oCAAoC,KAAK,GAC3C,MAAM,IAAIA,uBAAAA,cAAc,KAAK;EAC3B,SAAS,MAAM;EACf,OAAO,MAAM;EACb,OAAO;CACT,CAAC;CAGH,IAAI,gCAAgC,KAAK,GACvC,MAAM,IAAIA,uBAAAA,cAAc,KAAK;EAC3B,SAAS,MAAM;EACf,OAAO,MAAM;EACb,OAAO;CACT,CAAC;CASH,IAAI,0CAA0C,KAAK,GACjD,MAAM,IAAIA,uBAAAA,cAAc,KAAK;EAC3B,SAAS,MAAM;EACf,OAAO,MAAM;EACb,OAAO;CACT,CAAC;CAGH,MAAM,WAAW;CAIjB,MAAM,IAAIA,uBAAAA,cAFa,SAAS,UAAU,SAAS,SAAS,UAAU,KAEhB;EACpD,SAAS,SAAS,WAAW;EAC7B,OAAO,SAAS;EAChB,OAAO,SAAS;CAClB,CAAC;AACH"}

package/dist/server/handlers/error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/error.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAMpC;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,KAAK,CAAC;QACZ,IAAI,EAAE,WAAW,EAAE,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;CACJ;AAyED;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,QAAQ,CAAC,GAAG,CAAC,CAOjE;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,MAAM,GACd;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAUtE;AAGD,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,GAAG,KAAK,CA0EzE"}
+{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/error.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAMpC;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,KAAK,CAAC;QACZ,IAAI,EAAE,WAAW,EAAE,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;CACJ;AA+ED;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,QAAQ,CAAC,GAAG,CAAC,CAOjE;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,MAAM,GACd;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAUtE;AAGD,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,GAAG,KAAK,CA0EzE"}

package/dist/server/handlers/error.js

@@ -18,9 +18,14 @@ const WORKFLOW_SCHEMA_VALIDATION_FAILED_CODE = "WORKFLOW_SCHEMA_VALIDATION_FAILE
 function isWorkflowSchemaValidationError(error) {
 	return error instanceof Error && error.id === WORKFLOW_SCHEMA_VALIDATION_FAILED_CODE;
 }
-const WORKFLOW_RESUME_ALREADY_CLAIMED_CODE = "WORKFLOW_RESUME_ALREADY_CLAIMED";
-function isWorkflowResumeAlreadyClaimedError(error) {
-	return error instanceof Error && error.id === WORKFLOW_RESUME_ALREADY_CLAIMED_CODE;
+const RESUME_ALREADY_CLAIMED_CODES = /* @__PURE__ */ new Set([
+	"WORKFLOW_RESUME_ALREADY_CLAIMED",
+	"AGENT_RESUME_ALREADY_CLAIMED",
+	"WORKFLOW_RUN_NOT_SUSPENDED",
+	"AGENT_RESUME_RUN_NOT_SUSPENDED"
+]);
+function isResumeAlreadyClaimedError(error) {
+	return error instanceof Error && RESUME_ALREADY_CLAIMED_CODES.has(error.id);
 }
 /**
 * Durable agent errors for a request that conflicts with the run's state:
@@ -98,7 +103,7 @@ function handleError(error, defaultMessage) {
 			cause: error
 		});
 	}
-	if (isWorkflowResumeAlreadyClaimedError(error) || isDurableRunConflictError(error)) throw new HTTPException(409, {
+	if (isResumeAlreadyClaimedError(error) || isDurableRunConflictError(error)) throw new HTTPException(409, {
 		message: error.message,
 		stack: error.stack,
 		cause: error

package/dist/server/handlers/error.js.map

@@ -1 +1 @@
-{"version":3,"file":"error.js","names":[],"sources":["../../../src/server/handlers/error.ts"],"sourcesContent":["import type { ZodError } from 'zod';\n\nimport { HTTPException } from '../http-exception';\nimport type { StatusCode } from '../http-exception';\nimport type { ApiError } from '../types';\n\n/**\n * Duck-typed interface for ZodError-like objects.\n * Note: Zod v4 uses PropertyKey[] (string | number | symbol) for path.\n */\nexport interface ZodErrorLike {\n  issues: Array<{\n    path: PropertyKey[];\n    message: string;\n  }>;\n}\n\n/**\n * Recognition for `ModelNotAllowedError` from `@mastra/core/agent-builder/ee`.\n *\n * Inlined as a duck check rather than imported so that `handleError` (wired\n * into every route) does not force a load-time dependency on the\n * `@mastra/core/agent-builder/ee` subpath. That subpath only ships in\n * `@mastra/core >= 1.34.0`; deploys whose bundled `@mastra/server` resolves\n * against an older core would otherwise crash at startup with\n * `ERR_MODULE_NOT_FOUND` on `@mastra/core/dist/agent-builder/ee/index.js`.\n */\nconst MODEL_NOT_ALLOWED_CODE = 'MODEL_NOT_ALLOWED';\n\ninterface ModelNotAllowedErrorLike extends Error {\n  code: typeof MODEL_NOT_ALLOWED_CODE;\n  allowed?: unknown;\n  attempted?: unknown;\n  offendingLabel?: string;\n}\n\nfunction isModelNotAllowedError(error: unknown): error is ModelNotAllowedErrorLike {\n  return error instanceof Error && (error as { code?: unknown }).code === MODEL_NOT_ALLOWED_CODE;\n}\n\nconst WORKFLOW_SCHEMA_VALIDATION_FAILED_CODE = 'WORKFLOW_SCHEMA_VALIDATION_FAILED';\n\nfunction isWorkflowSchemaValidationError(error: unknown): error is Error {\n  return error instanceof Error && (error as { id?: unknown }).id === WORKFLOW_SCHEMA_VALIDATION_FAILED_CODE;\n}\n\nconst WORKFLOW_RESUME_ALREADY_CLAIMED_CODE = 'WORKFLOW_RESUME_ALREADY_CLAIMED';\n\nfunction isWorkflowResumeAlreadyClaimedError(error: unknown): error is Error {\n  return error instanceof Error && (error as { id?: unknown }).id === WORKFLOW_RESUME_ALREADY_CLAIMED_CODE;\n}\n\n/**\n * Durable agent errors for a request that conflicts with the run's state:\n * another execution owns the run, it is already being recovered, it lost a\n * concurrent claim, or it is suspended (recover). Matched by id, like the\n * other checks here, so the server doesn't depend on core exporting them.\n */\nconst DURABLE_RUN_CONFLICT_CODES = new Set([\n  'DURABLE_AGENT_RUN_ACTIVE',\n  'DURABLE_AGENT_RECOVER_RUN_ACTIVE_LOCALLY',\n  'DURABLE_AGENT_RECOVER_ALREADY_IN_PROGRESS',\n  'DURABLE_AGENT_RECOVER_RUN_SUSPENDED',\n  'DURABLE_AGENT_EXECUTION_CONFLICT',\n]);\n\nfunction isDurableRunConflictError(error: unknown): error is Error {\n  const id = (error as { id?: unknown } | undefined)?.id;\n  return error instanceof Error && typeof id === 'string' && DURABLE_RUN_CONFLICT_CODES.has(id);\n}\n\nconst FEEDBACK_REVIEW_STATUS_CONFLICT_CODE = 'OBSERVABILITY_UPDATE_FEEDBACK_REVIEW_STATUS_CONFLICT';\n\nfunction isFeedbackReviewStatusConflictError(error: unknown): error is Error {\n  return error instanceof Error && (error as { id?: unknown }).id === FEEDBACK_REVIEW_STATUS_CONFLICT_CODE;\n}\n\n/**\n * Matches the `OBSERVABILITY_STORAGE_*_NOT_IMPLEMENTED` MastraError the base\n * observability store throws for every optional method a store doesn't\n * implement. Checked by id (not `instanceof`) so it holds across duplicated\n * `@mastra/core` installs.\n */\nfunction isObservabilityStorageNotImplementedError(error: unknown): error is Error {\n  const id = error && typeof error === 'object' && 'id' in error ? error.id : undefined;\n  return typeof id === 'string' && id.startsWith('OBSERVABILITY_STORAGE_') && id.endsWith('_NOT_IMPLEMENTED');\n}\n\n/**\n * Structural check for ZodError instances.\n *\n * Avoids `instanceof ZodError` because consumers can resolve `'zod'` to a\n * different package instance (e.g. `zod@^3`) than the one a server adapter is\n * bundled with (`zod@^4`). In that case `instanceof` is false and validation\n * errors fall through to a generic response that drops field-path information.\n *\n * See https://github.com/mastra-ai/mastra/issues/17167.\n */\nexport function isZodError(error: unknown): error is ZodError<any> {\n  return (\n    !!error &&\n    typeof error === 'object' &&\n    (error as { name?: unknown }).name === 'ZodError' &&\n    Array.isArray((error as { issues?: unknown }).issues)\n  );\n}\n\n/**\n * Formats a ZodError into a structured validation error response.\n * Returns an object with an error message and an array of field-specific issues.\n */\nexport function formatZodError(\n  error: ZodErrorLike,\n  context: string,\n): { error: string; issues: Array<{ field: string; message: string }> } {\n  const issues = error.issues.map(e => ({\n    field: e.path.length > 0 ? e.path.map(p => String(p)).join('.') : 'root',\n    message: e.message,\n  }));\n\n  return {\n    error: `Invalid ${context}`,\n    issues,\n  };\n}\n\n// Helper to handle errors consistently\nexport function handleError(error: unknown, defaultMessage: string): never {\n  if (isModelNotAllowedError(error)) {\n    const body = {\n      error: {\n        code: error.code,\n        message: error.message,\n        allowed: error.allowed,\n        attempted: error.attempted,\n        offendingLabel: error.offendingLabel,\n      },\n    };\n    const res = new Response(JSON.stringify(body), {\n      status: 422,\n      headers: { 'content-type': 'application/json' },\n    });\n    throw new HTTPException(422, {\n      res,\n      message: error.message,\n      cause: error,\n    });\n  }\n\n  // A losing concurrent resume, or a recover of a run that is live or suspended, is a conflict on\n  // run state, not a malformed request, so it maps to 409 and clients can distinguish it from a\n  // 400/500 and re-read the run.\n  if (isWorkflowResumeAlreadyClaimedError(error) || isDurableRunConflictError(error)) {\n    throw new HTTPException(409, {\n      message: error.message,\n      stack: error.stack,\n      cause: error,\n    });\n  }\n\n  // The feedback row changed under a review-status update, so the caller re-reads and retries;\n  // that is a conflict, not a broken store.\n  if (isFeedbackReviewStatusConflictError(error)) {\n    throw new HTTPException(409, {\n      message: error.message,\n      stack: error.stack,\n      cause: error,\n    });\n  }\n\n  if (isWorkflowSchemaValidationError(error)) {\n    throw new HTTPException(400, {\n      message: error.message,\n      stack: error.stack,\n      cause: error,\n    });\n  }\n\n  // Optional observability APIs (feedback, metrics, logs, scores, ...) throw\n  // `*_NOT_IMPLEMENTED` on stores that don't support them. That's a missing\n  // capability, not a server fault, so it maps to 501 — which server adapters\n  // log as a warning instead of an error. The message is preserved because\n  // clients match on it to detect unsupported operations. Clients should check\n  // `GET /observability/capabilities` before calling optional routes.\n  if (isObservabilityStorageNotImplementedError(error)) {\n    throw new HTTPException(501, {\n      message: error.message,\n      stack: error.stack,\n      cause: error,\n    });\n  }\n\n  const apiError = error as ApiError;\n\n  const apiErrorStatus = apiError.status || apiError.details?.status || 500;\n\n  throw new HTTPException(apiErrorStatus as StatusCode, {\n    message: apiError.message || defaultMessage,\n    stack: apiError.stack,\n    cause: apiError.cause,\n  });\n}\n"],"mappings":";;;;;;;;;;;;AA2BA,MAAM,yBAAyB;AAS/B,SAAS,uBAAuB,OAAmD;CACjF,OAAO,iBAAiB,SAAU,MAA6B,SAAS;AAC1E;AAEA,MAAM,yCAAyC;AAE/C,SAAS,gCAAgC,OAAgC;CACvE,OAAO,iBAAiB,SAAU,MAA2B,OAAO;AACtE;AAEA,MAAM,uCAAuC;AAE7C,SAAS,oCAAoC,OAAgC;CAC3E,OAAO,iBAAiB,SAAU,MAA2B,OAAO;AACtE;;;;;;;AAQA,MAAM,6CAA6B,IAAI,IAAI;CACzC;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,SAAS,0BAA0B,OAAgC;CACjE,MAAM,KAAM,OAAwC;CACpD,OAAO,iBAAiB,SAAS,OAAO,OAAO,YAAY,2BAA2B,IAAI,EAAE;AAC9F;AAEA,MAAM,uCAAuC;AAE7C,SAAS,oCAAoC,OAAgC;CAC3E,OAAO,iBAAiB,SAAU,MAA2B,OAAO;AACtE;;;;;;;AAQA,SAAS,0CAA0C,OAAgC;CACjF,MAAM,KAAK,SAAS,OAAO,UAAU,YAAY,QAAQ,QAAQ,MAAM,KAAK,KAAA;CAC5E,OAAO,OAAO,OAAO,YAAY,GAAG,WAAW,wBAAwB,KAAK,GAAG,SAAS,kBAAkB;AAC5G;;;;;;;;;;;AAYA,SAAgB,WAAW,OAAwC;CACjE,OACE,CAAC,CAAC,SACF,OAAO,UAAU,YAChB,MAA6B,SAAS,cACvC,MAAM,QAAS,MAA+B,MAAM;AAExD;;;;;AAMA,SAAgB,eACd,OACA,SACsE;CACtE,MAAM,SAAS,MAAM,OAAO,KAAI,OAAM;EACpC,OAAO,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,KAAI,MAAK,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI;EAClE,SAAS,EAAE;CACb,EAAE;CAEF,OAAO;EACL,OAAO,WAAW;EAClB;CACF;AACF;AAGA,SAAgB,YAAY,OAAgB,gBAA+B;CACzE,IAAI,uBAAuB,KAAK,GAAG;EACjC,MAAM,OAAO,EACX,OAAO;GACL,MAAM,MAAM;GACZ,SAAS,MAAM;GACf,SAAS,MAAM;GACf,WAAW,MAAM;GACjB,gBAAgB,MAAM;EACxB,EACF;EAKA,MAAM,IAAI,cAAc,KAAK;GAC3B,KAAA,IALc,SAAS,KAAK,UAAU,IAAI,GAAG;IAC7C,QAAQ;IACR,SAAS,EAAE,gBAAgB,mBAAmB;GAChD,CAEI;GACF,SAAS,MAAM;GACf,OAAO;EACT,CAAC;CACH;CAKA,IAAI,oCAAoC,KAAK,KAAK,0BAA0B,KAAK,GAC/E,MAAM,IAAI,cAAc,KAAK;EAC3B,SAAS,MAAM;EACf,OAAO,MAAM;EACb,OAAO;CACT,CAAC;CAKH,IAAI,oCAAoC,KAAK,GAC3C,MAAM,IAAI,cAAc,KAAK;EAC3B,SAAS,MAAM;EACf,OAAO,MAAM;EACb,OAAO;CACT,CAAC;CAGH,IAAI,gCAAgC,KAAK,GACvC,MAAM,IAAI,cAAc,KAAK;EAC3B,SAAS,MAAM;EACf,OAAO,MAAM;EACb,OAAO;CACT,CAAC;CASH,IAAI,0CAA0C,KAAK,GACjD,MAAM,IAAI,cAAc,KAAK;EAC3B,SAAS,MAAM;EACf,OAAO,MAAM;EACb,OAAO;CACT,CAAC;CAGH,MAAM,WAAW;CAIjB,MAAM,IAAI,cAFa,SAAS,UAAU,SAAS,SAAS,UAAU,KAEhB;EACpD,SAAS,SAAS,WAAW;EAC7B,OAAO,SAAS;EAChB,OAAO,SAAS;CAClB,CAAC;AACH"}
+{"version":3,"file":"error.js","names":[],"sources":["../../../src/server/handlers/error.ts"],"sourcesContent":["import type { ZodError } from 'zod';\n\nimport { HTTPException } from '../http-exception';\nimport type { StatusCode } from '../http-exception';\nimport type { ApiError } from '../types';\n\n/**\n * Duck-typed interface for ZodError-like objects.\n * Note: Zod v4 uses PropertyKey[] (string | number | symbol) for path.\n */\nexport interface ZodErrorLike {\n  issues: Array<{\n    path: PropertyKey[];\n    message: string;\n  }>;\n}\n\n/**\n * Recognition for `ModelNotAllowedError` from `@mastra/core/agent-builder/ee`.\n *\n * Inlined as a duck check rather than imported so that `handleError` (wired\n * into every route) does not force a load-time dependency on the\n * `@mastra/core/agent-builder/ee` subpath. That subpath only ships in\n * `@mastra/core >= 1.34.0`; deploys whose bundled `@mastra/server` resolves\n * against an older core would otherwise crash at startup with\n * `ERR_MODULE_NOT_FOUND` on `@mastra/core/dist/agent-builder/ee/index.js`.\n */\nconst MODEL_NOT_ALLOWED_CODE = 'MODEL_NOT_ALLOWED';\n\ninterface ModelNotAllowedErrorLike extends Error {\n  code: typeof MODEL_NOT_ALLOWED_CODE;\n  allowed?: unknown;\n  attempted?: unknown;\n  offendingLabel?: string;\n}\n\nfunction isModelNotAllowedError(error: unknown): error is ModelNotAllowedErrorLike {\n  return error instanceof Error && (error as { code?: unknown }).code === MODEL_NOT_ALLOWED_CODE;\n}\n\nconst WORKFLOW_SCHEMA_VALIDATION_FAILED_CODE = 'WORKFLOW_SCHEMA_VALIDATION_FAILED';\n\nfunction isWorkflowSchemaValidationError(error: unknown): error is Error {\n  return error instanceof Error && (error as { id?: unknown }).id === WORKFLOW_SCHEMA_VALIDATION_FAILED_CODE;\n}\n\n// A resume the run can't accept: another resume claimed it, or it isn't waiting to be resumed.\nconst RESUME_ALREADY_CLAIMED_CODES = new Set([\n  'WORKFLOW_RESUME_ALREADY_CLAIMED',\n  'AGENT_RESUME_ALREADY_CLAIMED',\n  'WORKFLOW_RUN_NOT_SUSPENDED',\n  'AGENT_RESUME_RUN_NOT_SUSPENDED',\n]);\n\nfunction isResumeAlreadyClaimedError(error: unknown): error is Error {\n  return error instanceof Error && RESUME_ALREADY_CLAIMED_CODES.has((error as { id?: unknown }).id as string);\n}\n\n/**\n * Durable agent errors for a request that conflicts with the run's state:\n * another execution owns the run, it is already being recovered, it lost a\n * concurrent claim, or it is suspended (recover). Matched by id, like the\n * other checks here, so the server doesn't depend on core exporting them.\n */\nconst DURABLE_RUN_CONFLICT_CODES = new Set([\n  'DURABLE_AGENT_RUN_ACTIVE',\n  'DURABLE_AGENT_RECOVER_RUN_ACTIVE_LOCALLY',\n  'DURABLE_AGENT_RECOVER_ALREADY_IN_PROGRESS',\n  'DURABLE_AGENT_RECOVER_RUN_SUSPENDED',\n  'DURABLE_AGENT_EXECUTION_CONFLICT',\n]);\n\nfunction isDurableRunConflictError(error: unknown): error is Error {\n  const id = (error as { id?: unknown } | undefined)?.id;\n  return error instanceof Error && typeof id === 'string' && DURABLE_RUN_CONFLICT_CODES.has(id);\n}\n\nconst FEEDBACK_REVIEW_STATUS_CONFLICT_CODE = 'OBSERVABILITY_UPDATE_FEEDBACK_REVIEW_STATUS_CONFLICT';\n\nfunction isFeedbackReviewStatusConflictError(error: unknown): error is Error {\n  return error instanceof Error && (error as { id?: unknown }).id === FEEDBACK_REVIEW_STATUS_CONFLICT_CODE;\n}\n\n/**\n * Matches the `OBSERVABILITY_STORAGE_*_NOT_IMPLEMENTED` MastraError the base\n * observability store throws for every optional method a store doesn't\n * implement. Checked by id (not `instanceof`) so it holds across duplicated\n * `@mastra/core` installs.\n */\nfunction isObservabilityStorageNotImplementedError(error: unknown): error is Error {\n  const id = error && typeof error === 'object' && 'id' in error ? error.id : undefined;\n  return typeof id === 'string' && id.startsWith('OBSERVABILITY_STORAGE_') && id.endsWith('_NOT_IMPLEMENTED');\n}\n\n/**\n * Structural check for ZodError instances.\n *\n * Avoids `instanceof ZodError` because consumers can resolve `'zod'` to a\n * different package instance (e.g. `zod@^3`) than the one a server adapter is\n * bundled with (`zod@^4`). In that case `instanceof` is false and validation\n * errors fall through to a generic response that drops field-path information.\n *\n * See https://github.com/mastra-ai/mastra/issues/17167.\n */\nexport function isZodError(error: unknown): error is ZodError<any> {\n  return (\n    !!error &&\n    typeof error === 'object' &&\n    (error as { name?: unknown }).name === 'ZodError' &&\n    Array.isArray((error as { issues?: unknown }).issues)\n  );\n}\n\n/**\n * Formats a ZodError into a structured validation error response.\n * Returns an object with an error message and an array of field-specific issues.\n */\nexport function formatZodError(\n  error: ZodErrorLike,\n  context: string,\n): { error: string; issues: Array<{ field: string; message: string }> } {\n  const issues = error.issues.map(e => ({\n    field: e.path.length > 0 ? e.path.map(p => String(p)).join('.') : 'root',\n    message: e.message,\n  }));\n\n  return {\n    error: `Invalid ${context}`,\n    issues,\n  };\n}\n\n// Helper to handle errors consistently\nexport function handleError(error: unknown, defaultMessage: string): never {\n  if (isModelNotAllowedError(error)) {\n    const body = {\n      error: {\n        code: error.code,\n        message: error.message,\n        allowed: error.allowed,\n        attempted: error.attempted,\n        offendingLabel: error.offendingLabel,\n      },\n    };\n    const res = new Response(JSON.stringify(body), {\n      status: 422,\n      headers: { 'content-type': 'application/json' },\n    });\n    throw new HTTPException(422, {\n      res,\n      message: error.message,\n      cause: error,\n    });\n  }\n\n  // A losing concurrent resume, or a recover of a run that is live or suspended, is a conflict on\n  // run state, not a malformed request, so it maps to 409 and clients can distinguish it from a\n  // 400/500 and re-read the run.\n  if (isResumeAlreadyClaimedError(error) || isDurableRunConflictError(error)) {\n    throw new HTTPException(409, {\n      message: error.message,\n      stack: error.stack,\n      cause: error,\n    });\n  }\n\n  // The feedback row changed under a review-status update, so the caller re-reads and retries;\n  // that is a conflict, not a broken store.\n  if (isFeedbackReviewStatusConflictError(error)) {\n    throw new HTTPException(409, {\n      message: error.message,\n      stack: error.stack,\n      cause: error,\n    });\n  }\n\n  if (isWorkflowSchemaValidationError(error)) {\n    throw new HTTPException(400, {\n      message: error.message,\n      stack: error.stack,\n      cause: error,\n    });\n  }\n\n  // Optional observability APIs (feedback, metrics, logs, scores, ...) throw\n  // `*_NOT_IMPLEMENTED` on stores that don't support them. That's a missing\n  // capability, not a server fault, so it maps to 501 — which server adapters\n  // log as a warning instead of an error. The message is preserved because\n  // clients match on it to detect unsupported operations. Clients should check\n  // `GET /observability/capabilities` before calling optional routes.\n  if (isObservabilityStorageNotImplementedError(error)) {\n    throw new HTTPException(501, {\n      message: error.message,\n      stack: error.stack,\n      cause: error,\n    });\n  }\n\n  const apiError = error as ApiError;\n\n  const apiErrorStatus = apiError.status || apiError.details?.status || 500;\n\n  throw new HTTPException(apiErrorStatus as StatusCode, {\n    message: apiError.message || defaultMessage,\n    stack: apiError.stack,\n    cause: apiError.cause,\n  });\n}\n"],"mappings":";;;;;;;;;;;;AA2BA,MAAM,yBAAyB;AAS/B,SAAS,uBAAuB,OAAmD;CACjF,OAAO,iBAAiB,SAAU,MAA6B,SAAS;AAC1E;AAEA,MAAM,yCAAyC;AAE/C,SAAS,gCAAgC,OAAgC;CACvE,OAAO,iBAAiB,SAAU,MAA2B,OAAO;AACtE;AAGA,MAAM,+CAA+B,IAAI,IAAI;CAC3C;CACA;CACA;CACA;AACF,CAAC;AAED,SAAS,4BAA4B,OAAgC;CACnE,OAAO,iBAAiB,SAAS,6BAA6B,IAAK,MAA2B,EAAY;AAC5G;;;;;;;AAQA,MAAM,6CAA6B,IAAI,IAAI;CACzC;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,SAAS,0BAA0B,OAAgC;CACjE,MAAM,KAAM,OAAwC;CACpD,OAAO,iBAAiB,SAAS,OAAO,OAAO,YAAY,2BAA2B,IAAI,EAAE;AAC9F;AAEA,MAAM,uCAAuC;AAE7C,SAAS,oCAAoC,OAAgC;CAC3E,OAAO,iBAAiB,SAAU,MAA2B,OAAO;AACtE;;;;;;;AAQA,SAAS,0CAA0C,OAAgC;CACjF,MAAM,KAAK,SAAS,OAAO,UAAU,YAAY,QAAQ,QAAQ,MAAM,KAAK,KAAA;CAC5E,OAAO,OAAO,OAAO,YAAY,GAAG,WAAW,wBAAwB,KAAK,GAAG,SAAS,kBAAkB;AAC5G;;;;;;;;;;;AAYA,SAAgB,WAAW,OAAwC;CACjE,OACE,CAAC,CAAC,SACF,OAAO,UAAU,YAChB,MAA6B,SAAS,cACvC,MAAM,QAAS,MAA+B,MAAM;AAExD;;;;;AAMA,SAAgB,eACd,OACA,SACsE;CACtE,MAAM,SAAS,MAAM,OAAO,KAAI,OAAM;EACpC,OAAO,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,KAAI,MAAK,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI;EAClE,SAAS,EAAE;CACb,EAAE;CAEF,OAAO;EACL,OAAO,WAAW;EAClB;CACF;AACF;AAGA,SAAgB,YAAY,OAAgB,gBAA+B;CACzE,IAAI,uBAAuB,KAAK,GAAG;EACjC,MAAM,OAAO,EACX,OAAO;GACL,MAAM,MAAM;GACZ,SAAS,MAAM;GACf,SAAS,MAAM;GACf,WAAW,MAAM;GACjB,gBAAgB,MAAM;EACxB,EACF;EAKA,MAAM,IAAI,cAAc,KAAK;GAC3B,KAAA,IALc,SAAS,KAAK,UAAU,IAAI,GAAG;IAC7C,QAAQ;IACR,SAAS,EAAE,gBAAgB,mBAAmB;GAChD,CAEI;GACF,SAAS,MAAM;GACf,OAAO;EACT,CAAC;CACH;CAKA,IAAI,4BAA4B,KAAK,KAAK,0BAA0B,KAAK,GACvE,MAAM,IAAI,cAAc,KAAK;EAC3B,SAAS,MAAM;EACf,OAAO,MAAM;EACb,OAAO;CACT,CAAC;CAKH,IAAI,oCAAoC,KAAK,GAC3C,MAAM,IAAI,cAAc,KAAK;EAC3B,SAAS,MAAM;EACf,OAAO,MAAM;EACb,OAAO;CACT,CAAC;CAGH,IAAI,gCAAgC,KAAK,GACvC,MAAM,IAAI,cAAc,KAAK;EAC3B,SAAS,MAAM;EACf,OAAO,MAAM;EACb,OAAO;CACT,CAAC;CASH,IAAI,0CAA0C,KAAK,GACjD,MAAM,IAAI,cAAc,KAAK;EAC3B,SAAS,MAAM;EACf,OAAO,MAAM;EACb,OAAO;CACT,CAAC;CAGH,MAAM,WAAW;CAIjB,MAAM,IAAI,cAFa,SAAS,UAAU,SAAS,SAAS,UAAU,KAEhB;EACpD,SAAS,SAAS,WAAW;EAC7B,OAAO,SAAS;EAChB,OAAO,SAAS;CAClB,CAAC;AACH"}

package/dist/server/handlers/logs.cjs

@@ -3,7 +3,7 @@ const require_rolldown_runtime = require("../../rolldown-runtime-Bd6kNlEP.cjs");
 const require_common = require("../../common-DhKNoXGp.cjs");
 const require_route_builder = require("../../route-builder-2yrD15TL.cjs");
 const require_server_handlers_error = require("./error.cjs");
-const require_utils = require("../../utils-BQA09BCt.cjs");
+const require_utils = require("../../utils-BD7aRZ1o.cjs");
 const require_logs = require("../../logs-CY8AGOCO.cjs");
 //#region src/server/handlers/logs.ts
 var logs_exports = /* @__PURE__ */ require_rolldown_runtime.__exportAll({

package/dist/server/handlers/logs.js

@@ -2,7 +2,7 @@ import { r as __exportAll } from "../../rolldown-runtime-maW3aOIk.js";
 import { u as runIdSchema } from "../../common-Y30XtCyr.js";
 import { n as createRoute } from "../../route-builder-lBil8Cvo.js";
 import { handleError } from "./error.js";
-import { d as validateBody, o as parseFilters } from "../../utils-kaP2cyIO.js";
+import { f as validateBody, s as parseFilters } from "../../utils-UwDFLi8y.js";
 import { n as listLogsQuerySchema, r as listLogsResponseSchema, t as listLogTransportsResponseSchema } from "../../logs-Bd_xpsYw.js";
 //#region src/server/handlers/logs.ts
 var logs_exports = /* @__PURE__ */ __exportAll({

package/dist/server/handlers/memory.cjs

@@ -3,7 +3,7 @@ const require_rolldown_runtime = require("../../rolldown-runtime-Bd6kNlEP.cjs");
 const require_http_exception = require("../../http-exception-CKDHupKw.cjs");
 const require_route_builder = require("../../route-builder-2yrD15TL.cjs");
 const require_server_handlers_error = require("./error.cjs");
-const require_utils = require("../../utils-BQA09BCt.cjs");
+const require_utils = require("../../utils-BD7aRZ1o.cjs");
 const require_memory = require("../../memory-CizEIbl1.cjs");
 const require_server_handlers_gateway_memory_client = require("./gateway-memory-client.cjs");
 let _mastra_core_agent = require("@mastra/core/agent");

package/dist/server/handlers/memory.js

@@ -2,7 +2,7 @@ import { r as __exportAll } from "../../rolldown-runtime-maW3aOIk.js";
 import { t as HTTPException } from "../../http-exception-CyfxZB6W.js";
 import { n as createRoute } from "../../route-builder-lBil8Cvo.js";
 import { handleError } from "./error.js";
-import { d as validateBody, i as getEffectiveThreadId, m as MastraFGAPermissions, n as getContextResourceId, r as getEffectiveResourceId, t as enforceThreadAccess } from "../../utils-kaP2cyIO.js";
+import { f as validateBody, h as MastraFGAPermissions, i as getEffectiveThreadId, n as getContextResourceId, r as getEffectiveResourceId, t as enforceThreadAccess } from "../../utils-UwDFLi8y.js";
 import { A as listThreadsNetworkQuerySchema, B as searchMemoryQuerySchema, C as getThreadByIdResponseSchema, D as listMessagesNetworkQuerySchema, G as updateThreadBodySchema, H as threadIdPathParams, I as optionalAgentIdQuerySchema, J as updateWorkingMemoryResponseSchema, K as updateThreadNetworkQuerySchema, L as saveMessagesBodySchema, M as listThreadsResponseSchema, N as memoryConfigResponseSchema, O as listMessagesQuerySchema, P as memoryStatusResponseSchema, R as saveMessagesNetworkQuerySchema, S as getThreadByIdQuerySchema, T as getWorkingMemoryResponseSchema, U as transferThreadBodySchema, V as searchMemoryResponseSchema, W as transferThreadResponseSchema, _ as getMemoryStatusNetworkQuerySchema, a as cloneThreadResponseSchema, b as getObservationalMemoryResponseSchema, c as deleteMessagesBodySchema, d as deleteMessagesResponseSchema, f as deleteThreadNetworkQuerySchema, g as getMemoryConfigQuerySchema, i as cloneThreadBodySchema, j as listThreadsQuerySchema, k as listMessagesResponseSchema, l as deleteMessagesNetworkQuerySchema, m as deleteThreadResponseSchema, n as awaitBufferStatusBodySchema, o as createThreadBodySchema, p as deleteThreadQuerySchema, q as updateWorkingMemoryBodySchema, r as awaitBufferStatusResponseSchema, s as createThreadNetworkQuerySchema, t as agentIdQuerySchema, u as deleteMessagesQuerySchema, v as getMemoryStatusQuerySchema, w as getWorkingMemoryQuerySchema, x as getThreadByIdNetworkQuerySchema, y as getObservationalMemoryQuerySchema, z as saveMessagesResponseSchema } from "../../memory-B58Q2LgU.js";
 import { getGatewayClient, isGatewayAgentAsync, toLocalMessage, toLocalOMRecord, toLocalThread } from "./gateway-memory-client.js";
 import { Agent } from "@mastra/core/agent";

package/dist/server/handlers/plans.cjs

@@ -4,7 +4,7 @@ const require_http_exception = require("../../http-exception-CKDHupKw.cjs");
 const require_agents = require("../../agents-CKSEPpk1.cjs");
 const require_route_builder = require("../../route-builder-2yrD15TL.cjs");
 const require_server_handlers_error = require("./error.cjs");
-const require_utils = require("../../utils-BQA09BCt.cjs");
+const require_utils = require("../../utils-BD7aRZ1o.cjs");
 const require_server_handlers_agents = require("./agents.cjs");
 let _mastra_core_tools = require("@mastra/core/tools");
 //#region src/server/handlers/plans.ts

package/dist/server/handlers/plans.js

@@ -3,7 +3,7 @@ import { t as HTTPException } from "../../http-exception-CyfxZB6W.js";
 import { a as agentIdPathParams, o as agentPlanQuerySchema, s as agentPlanResponseSchema } from "../../agents-CW_JJZOf.js";
 import { n as createRoute } from "../../route-builder-lBil8Cvo.js";
 import { handleError } from "./error.js";
-import { m as MastraFGAPermissions } from "../../utils-kaP2cyIO.js";
+import { h as MastraFGAPermissions } from "../../utils-UwDFLi8y.js";
 import { getAgentFromSystem } from "./agents.js";
 import { submitPlanTool } from "@mastra/core/tools";
 //#region src/server/handlers/plans.ts

package/dist/server/handlers/responses.cjs

@@ -3,7 +3,7 @@ const require_rolldown_runtime = require("../../rolldown-runtime-Bd6kNlEP.cjs");
 const require_http_exception = require("../../http-exception-CKDHupKw.cjs");
 const require_route_builder = require("../../route-builder-2yrD15TL.cjs");
 const require_server_handlers_error = require("./error.cjs");
-const require_utils = require("../../utils-BQA09BCt.cjs");
+const require_utils = require("../../utils-BD7aRZ1o.cjs");
 const require_server_handlers_agents = require("./agents.cjs");
 const require_responses = require("../../responses-CKNdSRkS.cjs");
 const require_server_handlers_responses_adapter = require("./responses.adapter.cjs");

package/dist/server/handlers/responses.js

@@ -2,7 +2,7 @@ import { r as __exportAll } from "../../rolldown-runtime-maW3aOIk.js";
 import { t as HTTPException } from "../../http-exception-CyfxZB6W.js";
 import { n as createRoute } from "../../route-builder-lBil8Cvo.js";
 import { handleError } from "./error.js";
-import { i as getEffectiveThreadId, m as MastraFGAPermissions, r as getEffectiveResourceId, t as enforceThreadAccess } from "../../utils-kaP2cyIO.js";
+import { h as MastraFGAPermissions, i as getEffectiveThreadId, r as getEffectiveResourceId, t as enforceThreadAccess } from "../../utils-UwDFLi8y.js";
 import { getAgentFromSystem } from "./agents.js";
 import { a as deleteResponseSchema, i as createResponseBodySchema, o as responseIdPathParams, u as responseObjectSchema } from "../../responses-DJNJgCTg.js";
 import { buildCompletedResponse, buildInProgressResponse, createMessageId, createOutputTextPart, createResponseStreamEventTranslator, formatSseEvent, mapMastraToolsToResponseTools, mapResponseInputToExecutionMessages, mapResponseTurnRecordToResponse, toResponseStatus, toResponseUsage } from "./responses.adapter.js";

package/dist/server/handlers/responses.storage.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../rolldown-runtime-Bd6kNlEP.cjs");
 const require_http_exception = require("../../http-exception-CKDHupKw.cjs");
-const require_utils = require("../../utils-BQA09BCt.cjs");
+const require_utils = require("../../utils-BD7aRZ1o.cjs");
 //#region src/server/handlers/responses.storage.ts
 function isPlainObject(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);

package/dist/server/handlers/responses.storage.js

@@ -1,5 +1,5 @@
 import { t as HTTPException } from "../../http-exception-CyfxZB6W.js";
-import { p as validateThreadOwnership, r as getEffectiveResourceId } from "../../utils-kaP2cyIO.js";
+import { m as validateThreadOwnership, r as getEffectiveResourceId } from "../../utils-UwDFLi8y.js";
 //#region src/server/handlers/responses.storage.ts
 function isPlainObject(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);

package/dist/server/handlers/schedules.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../rolldown-runtime-Bd6kNlEP.cjs");
-const require_schedules = require("../../schedules-Buunf_MT.cjs");
+const require_schedules = require("../../schedules-QNH7CUxG.cjs");
 exports.CREATE_SCHEDULE_ROUTE = require_schedules.CREATE_SCHEDULE_ROUTE;
 exports.DELETE_SCHEDULE_ROUTE = require_schedules.DELETE_SCHEDULE_ROUTE;
 exports.GET_SCHEDULE_ROUTE = require_schedules.GET_SCHEDULE_ROUTE;

package/dist/server/handlers/schedules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schedules.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/schedules.ts"],"names":[],"mappings":"AAyFA,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqB/B,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAc7B,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyDhC,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiChC,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAehC,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgB/B,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgBhC,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAe7B,CAAC;AAEH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmCvC,CAAC"}
+{"version":3,"file":"schedules.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/schedules.ts"],"names":[],"mappings":"AA0FA,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqB/B,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAc7B,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiEhC,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiChC,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAehC,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgB/B,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgBhC,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAe7B,CAAC;AAEH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmCvC,CAAC"}

package/dist/server/handlers/schedules.js

@@ -1,2 +1,2 @@
-import { a as LIST_SCHEDULE_TRIGGERS_ROUTE, c as RUN_SCHEDULE_ROUTE, i as LIST_SCHEDULES_ROUTE, l as UPDATE_SCHEDULE_ROUTE, n as DELETE_SCHEDULE_ROUTE, o as PAUSE_SCHEDULE_ROUTE, r as GET_SCHEDULE_ROUTE, s as RESUME_SCHEDULE_ROUTE, t as CREATE_SCHEDULE_ROUTE } from "../../schedules-OiPV0jLY.js";
+import { a as LIST_SCHEDULE_TRIGGERS_ROUTE, c as RUN_SCHEDULE_ROUTE, i as LIST_SCHEDULES_ROUTE, l as UPDATE_SCHEDULE_ROUTE, n as DELETE_SCHEDULE_ROUTE, o as PAUSE_SCHEDULE_ROUTE, r as GET_SCHEDULE_ROUTE, s as RESUME_SCHEDULE_ROUTE, t as CREATE_SCHEDULE_ROUTE } from "../../schedules-C4uNWRwW.js";
 export { CREATE_SCHEDULE_ROUTE, DELETE_SCHEDULE_ROUTE, GET_SCHEDULE_ROUTE, LIST_SCHEDULES_ROUTE, LIST_SCHEDULE_TRIGGERS_ROUTE, PAUSE_SCHEDULE_ROUTE, RESUME_SCHEDULE_ROUTE, RUN_SCHEDULE_ROUTE, UPDATE_SCHEDULE_ROUTE };

package/dist/server/handlers/system.cjs

@@ -90,7 +90,7 @@ const GET_API_SCHEMA_ROUTE = require_route_builder.createRoute({
 	tags: ["System"],
 	requiresAuth: true,
 	handler: async () => {
-		const { buildApiSchemaManifest } = await Promise.resolve().then(() => require("../../api-schema-manifest-D8uhDn9F.cjs"));
+		const { buildApiSchemaManifest } = await Promise.resolve().then(() => require("../../api-schema-manifest-DC45FBI7.cjs"));
 		return buildApiSchemaManifest();
 	}
 });

package/dist/server/handlers/system.js

@@ -88,7 +88,7 @@ const GET_API_SCHEMA_ROUTE = createRoute({
 	tags: ["System"],
 	requiresAuth: true,
 	handler: async () => {
-		const { buildApiSchemaManifest } = await import("../../api-schema-manifest-CJFJVu6Q.js");
+		const { buildApiSchemaManifest } = await import("../../api-schema-manifest-BQOonczJ.js");
 		return buildApiSchemaManifest();
 	}
 });

package/dist/server/handlers/tools.cjs

@@ -8,7 +8,7 @@ const require_route_builder = require("../../route-builder-2yrD15TL.cjs");
 require("../../schema-BVcoNfni.cjs");
 const require_utils = require("../../utils-CfF-SHpC.cjs");
 const require_server_handlers_error = require("./error.cjs");
-const require_utils$1 = require("../../utils-BQA09BCt.cjs");
+const require_utils$1 = require("../../utils-BD7aRZ1o.cjs");
 const require_server_handlers_tool_schema_overrides = require("./tool-schema-overrides.cjs");
 const require_server_handlers_agents = require("./agents.cjs");
 let _mastra_core_tools = require("@mastra/core/tools");

package/dist/server/handlers/tools.js

@@ -7,7 +7,7 @@ import { n as createRoute } from "../../route-builder-lBil8Cvo.js";
 import "../../schema-Xxr5X5Je.js";
 import { l as stringify } from "../../utils-DTgkpEdc.js";
 import { handleError } from "./error.js";
-import { d as validateBody, m as MastraFGAPermissions } from "../../utils-kaP2cyIO.js";
+import { f as validateBody, h as MastraFGAPermissions } from "../../utils-UwDFLi8y.js";
 import { stripInjectedToolOverrideFields } from "./tool-schema-overrides.js";
 import { getAgentFromSystem } from "./agents.js";
 import { isProviderDefinedTool, isVercelTool } from "@mastra/core/tools";

package/dist/server/handlers/utils.cjs

@@ -1,10 +1,11 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../rolldown-runtime-Bd6kNlEP.cjs");
-const require_utils = require("../../utils-BQA09BCt.cjs");
+const require_utils = require("../../utils-BD7aRZ1o.cjs");
 exports.enforceThreadAccess = require_utils.enforceThreadAccess;
 exports.getContextResourceId = require_utils.getContextResourceId;
 exports.getEffectiveResourceId = require_utils.getEffectiveResourceId;
 exports.getEffectiveThreadId = require_utils.getEffectiveThreadId;
+exports.getPublicWorkflowById = require_utils.getPublicWorkflowById;
 exports.mergeBodyRequestContext = require_utils.mergeBodyRequestContext;
 exports.parseFilters = require_utils.parseFilters;
 exports.parsePerPage = require_utils.parsePerPage;

package/dist/server/handlers/utils.d.ts

@@ -1,5 +1,14 @@
+import type { Mastra } from '@mastra/core';
 import type { MastraFGAPermissionInput } from '@mastra/core/auth/ee';
 import type { RequestContext } from '@mastra/core/di';
+import type { Workflow } from '@mastra/core/workflows';
+/**
+ * Resolves a workflow by id or registration key from the set Mastra exposes
+ * publicly. Unlike `mastra.getWorkflowById`, this excludes hidden internal
+ * workflows (e.g. a durable agent's backing loop), which must never be
+ * runnable through HTTP routes.
+ */
+export declare function getPublicWorkflowById(mastra: Mastra, workflowId: string): Workflow | undefined;
 export declare function validateBody(body: Record<string, unknown>): void;
 /**
  * sanitizes the body by removing disallowed keys.

package/dist/server/handlers/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAOtD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,QAWzD;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,QAMnF;AAWD;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,QAUzE;AAED,wBAAgB,YAAY,CAC1B,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,YAAY,GAAE,MAAY,EAC1B,GAAG,GAAE,MAAa,GACjB,MAAM,GAAG,KAAK,CAShB;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAUvG;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,oBAAoB,EAAE,cAAc,EAAE,kBAAkB,EAAE,OAAO,GAAG,IAAI,CAW/G;AAMD;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,cAAc,EAAE,cAAc,GAAG,SAAS,EAC1C,gBAAgB,EAAE,MAAM,GAAG,SAAS,GACnC,MAAM,GAAG,SAAS,CAGpB;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,cAAc,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAEnG;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,mBAAmB,EAAE,MAAM,GAAG,SAAS,GACtC,OAAO,CAAC,mBAAmB,IAAI,MAAM,CAOvC;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,cAAc,GAAG,SAAS,EAC1C,cAAc,EAAE,MAAM,GAAG,SAAS,GACjC,MAAM,GAAG,SAAS,CAGpB;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,EACzD,mBAAmB,EAAE,MAAM,GAAG,SAAS,GACtC,OAAO,CAAC,IAAI,CAAC,CAIf;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,MAAM,EACN,cAAc,EACd,QAAQ,EACR,MAAM,EACN,mBAAmB,EACnB,UAA6C,GAC9C,EAAE;IACD,MAAM,EAAE,GAAG,CAAC;IACZ,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAC/C,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,CAAC,EAAE,wBAAwB,CAAC;CACvC,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBhB;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,EACtD,mBAAmB,EAAE,MAAM,GAAG,SAAS,GACtC,OAAO,CAAC,IAAI,CAAC,CAIf"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEtD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAKvD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAM9F;AAGD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,QAWzD;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,QAMnF;AAWD;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,QAUzE;AAED,wBAAgB,YAAY,CAC1B,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,YAAY,GAAE,MAAY,EAC1B,GAAG,GAAE,MAAa,GACjB,MAAM,GAAG,KAAK,CAShB;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAUvG;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,oBAAoB,EAAE,cAAc,EAAE,kBAAkB,EAAE,OAAO,GAAG,IAAI,CAW/G;AAMD;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,cAAc,EAAE,cAAc,GAAG,SAAS,EAC1C,gBAAgB,EAAE,MAAM,GAAG,SAAS,GACnC,MAAM,GAAG,SAAS,CAGpB;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,cAAc,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAEnG;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,mBAAmB,EAAE,MAAM,GAAG,SAAS,GACtC,OAAO,CAAC,mBAAmB,IAAI,MAAM,CAOvC;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,cAAc,GAAG,SAAS,EAC1C,cAAc,EAAE,MAAM,GAAG,SAAS,GACjC,MAAM,GAAG,SAAS,CAGpB;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,EACzD,mBAAmB,EAAE,MAAM,GAAG,SAAS,GACtC,OAAO,CAAC,IAAI,CAAC,CAIf;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,MAAM,EACN,cAAc,EACd,QAAQ,EACR,MAAM,EACN,mBAAmB,EACnB,UAA6C,GAC9C,EAAE;IACD,MAAM,EAAE,GAAG,CAAC;IACZ,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAC/C,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,CAAC,EAAE,wBAAwB,CAAC;CACvC,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBhB;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,EACtD,mBAAmB,EAAE,MAAM,GAAG,SAAS,GACtC,OAAO,CAAC,IAAI,CAAC,CAIf"}

package/dist/server/handlers/utils.js

@@ -1,2 +1,2 @@
-import { a as mergeBodyRequestContext, c as requireEffectiveResourceId, d as validateBody, f as validateRunOwnership, i as getEffectiveThreadId, l as sanitizeBody, n as getContextResourceId, o as parseFilters, p as validateThreadOwnership, r as getEffectiveResourceId, s as parsePerPage, t as enforceThreadAccess, u as stripClientCredentialHeaders } from "../../utils-kaP2cyIO.js";
-export { enforceThreadAccess, getContextResourceId, getEffectiveResourceId, getEffectiveThreadId, mergeBodyRequestContext, parseFilters, parsePerPage, requireEffectiveResourceId, sanitizeBody, stripClientCredentialHeaders, validateBody, validateRunOwnership, validateThreadOwnership };
+import { a as getPublicWorkflowById, c as parsePerPage, d as stripClientCredentialHeaders, f as validateBody, i as getEffectiveThreadId, l as requireEffectiveResourceId, m as validateThreadOwnership, n as getContextResourceId, o as mergeBodyRequestContext, p as validateRunOwnership, r as getEffectiveResourceId, s as parseFilters, t as enforceThreadAccess, u as sanitizeBody } from "../../utils-UwDFLi8y.js";
+export { enforceThreadAccess, getContextResourceId, getEffectiveResourceId, getEffectiveThreadId, getPublicWorkflowById, mergeBodyRequestContext, parseFilters, parsePerPage, requireEffectiveResourceId, sanitizeBody, stripClientCredentialHeaders, validateBody, validateRunOwnership, validateThreadOwnership };

package/dist/server/handlers/workflow-builder.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../rolldown-runtime-Bd6kNlEP.cjs");
-const require_workflow_builder = require("../../workflow-builder-8Rcql7QH.cjs");
+const require_workflow_builder = require("../../workflow-builder-DPTDL6sn.cjs");
 exports.GET_WORKFLOW_BUILDER_SETTINGS_ROUTE = require_workflow_builder.GET_WORKFLOW_BUILDER_SETTINGS_ROUTE;
 exports.STREAM_WORKFLOW_BUILDER_ROUTE = require_workflow_builder.STREAM_WORKFLOW_BUILDER_ROUTE;

package/dist/server/handlers/workflow-builder.js

@@ -1,2 +1,2 @@
-import { n as STREAM_WORKFLOW_BUILDER_ROUTE, t as GET_WORKFLOW_BUILDER_SETTINGS_ROUTE } from "../../workflow-builder-DMTslavM.js";
+import { n as STREAM_WORKFLOW_BUILDER_ROUTE, t as GET_WORKFLOW_BUILDER_SETTINGS_ROUTE } from "../../workflow-builder-DwApMkS3.js";
 export { GET_WORKFLOW_BUILDER_SETTINGS_ROUTE, STREAM_WORKFLOW_BUILDER_ROUTE };

package/dist/server/handlers/workflows.cjs

@@ -7,7 +7,7 @@ const require_agents = require("../../agents-CKSEPpk1.cjs");
 const require_route_builder = require("../../route-builder-2yrD15TL.cjs");
 const require_utils = require("../../utils-CfF-SHpC.cjs");
 const require_server_handlers_error = require("./error.cjs");
-const require_utils$1 = require("../../utils-BQA09BCt.cjs");
+const require_utils$1 = require("../../utils-BD7aRZ1o.cjs");
 let zod_v4 = require("zod/v4");
 let _mastra_core_stream = require("@mastra/core/stream");
 //#region src/server/handlers/workflows.ts
@@ -95,11 +95,7 @@ async function listWorkflowsFromSystem({ mastra, workflowId }) {
 	if (!workflowId) throw new require_http_exception.HTTPException(400, { message: "Workflow ID is required" });
 	let workflow;
 	workflow = require_utils.WorkflowRegistry.getWorkflow(workflowId);
-	if (!workflow) try {
-		workflow = mastra.getWorkflowById(workflowId);
-	} catch (error) {
-		logger.debug("Error getting workflow, searching agents for workflow", error);
-	}
+	if (!workflow) workflow = require_utils$1.getPublicWorkflowById(mastra, workflowId);
 	if (!workflow) {
 		logger.debug("Workflow not found, searching agents for workflow", { workflowId });
 		const agents = mastra.listAgents();