@mastra/server 1.79.0-alpha.10 → 1.79.0-alpha.11

package/dist/server/handlers/tool-schema-overrides.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-require("../../rolldown-runtime-Bd6kNlEP.cjs");
+require("../../rolldown-runtime-BwC_XMyb.cjs");
 //#region src/server/handlers/tool-schema-overrides.ts
 /**
 * Core's `CoreToolBuilder` injects runtime-only override fields into tool input

package/dist/server/handlers/tools.cjs

@@ -1,268 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_rolldown_runtime = require("../../rolldown-runtime-Bd6kNlEP.cjs");
-const require_http_exception = require("../../http-exception-CKDHupKw.cjs");
-const require_common = require("../../common-DhKNoXGp.cjs");
-const require_agents = require("../../agents-DoNMSCMt.cjs");
-const require_schema_e0VHpMt0 = require("../../schema-e0VHpMt0-C0452jOk.cjs");
-const require_route_builder = require("../../route-builder-BNZs643f.cjs");
-require("../../schema-EQanefYq.cjs");
-const require_utils = require("../../utils-DCgeTrq2.cjs");
-const require_server_handlers_error = require("./error.cjs");
-const require_utils$1 = require("../../utils-Du-EpvDs.cjs");
-const require_server_handlers_tool_schema_overrides = require("./tool-schema-overrides.cjs");
-const require_server_handlers_agents = require("./agents.cjs");
-let _mastra_core_tools = require("@mastra/core/tools");
-//#region src/server/handlers/tools.ts
-var tools_exports = /* @__PURE__ */ require_rolldown_runtime.__exportAll({
-	EXECUTE_AGENT_TOOL_ROUTE: () => EXECUTE_AGENT_TOOL_ROUTE,
-	EXECUTE_TOOL_ROUTE: () => EXECUTE_TOOL_ROUTE,
-	GET_AGENT_TOOL_ROUTE: () => GET_AGENT_TOOL_ROUTE,
-	GET_TOOL_BY_ID_ROUTE: () => GET_TOOL_BY_ID_ROUTE,
-	LIST_TOOLS_ROUTE: () => LIST_TOOLS_ROUTE
-});
-/**
-* Resolves a schema that may be a lazy function (e.g. AI SDK provider tools).
-* Recursively resolves until a non-function value is returned.
-* Skips functions that are themselves valid schemas (e.g. ArkType types are
-* callable but also implement StandardSchema via ~standard).
-*/
-function resolveLazySchema(schema) {
-	if (typeof schema === "function" && !("~standard" in schema)) return resolveLazySchema(schema());
-	return schema;
-}
-function schemaToJsonSchema(schema) {
-	if (!schema) return;
-	return require_schema_e0VHpMt0.standardSchemaToJSONSchema(require_schema_e0VHpMt0.toStandardSchema(schema), { target: "draft-2020-12" });
-}
-function serializeSchema(schema, options) {
-	const jsonSchema = schemaToJsonSchema(resolveLazySchema(schema));
-	if (jsonSchema === void 0) return void 0;
-	return require_utils.stringify(options?.stripInjectedOverrides ? require_server_handlers_tool_schema_overrides.stripInjectedToolOverrideFields(jsonSchema) : jsonSchema);
-}
-/**
-* Searches dynamically-resolved agent tools (provided via `toolsResolver` /
-* function-based `tools`) for a tool with the given id. Used as a fallback
-* after the static tool registry (`registeredTools` + `mastra.getToolById`)
-* misses, so global tool routes can resolve tools that only exist on agents.
-*
-* Errors thrown by an individual agent's `listTools()` are logged and
-* skipped so a single broken resolver doesn't take down the whole lookup.
-*/
-async function findToolInAgents(mastra, toolId, requestContext) {
-	const agents = mastra.listAgents() || {};
-	for (const agent of Object.values(agents)) try {
-		const agentTools = await agent.listTools({ requestContext });
-		const found = Object.values(agentTools || {}).find((t) => t.id === toolId);
-		if (found) return found;
-	} catch (error) {
-		mastra.getLogger?.()?.warn?.("Failed to list tools for agent while resolving tool by id", {
-			agentId: agent?.id,
-			toolId,
-			error: error instanceof Error ? error.message : String(error)
-		});
-	}
-}
-/**
-* Serializes a tool for API responses, handling both regular tools (with Zod schemas)
-* and provider-defined tools (with AI SDK lazy schemas).
-*/
-function serializeTool(tool) {
-	if ((0, _mastra_core_tools.isProviderDefinedTool)(tool)) {
-		const resolvedInput = resolveLazySchema(tool.inputSchema);
-		const resolvedOutput = resolveLazySchema(tool.outputSchema);
-		return {
-			...tool,
-			inputSchema: resolvedInput && typeof resolvedInput === "object" && "jsonSchema" in resolvedInput ? require_utils.stringify(resolvedInput.jsonSchema) : void 0,
-			outputSchema: resolvedOutput && typeof resolvedOutput === "object" && "jsonSchema" in resolvedOutput ? require_utils.stringify(resolvedOutput.jsonSchema) : void 0
-		};
-	}
-	return {
-		...tool,
-		inputSchema: serializeSchema(tool.inputSchema, { stripInjectedOverrides: true }),
-		outputSchema: serializeSchema(tool.outputSchema),
-		requestContextSchema: serializeSchema(tool.requestContextSchema)
-	};
-}
-const LIST_TOOLS_ROUTE = require_route_builder.createRoute({
-	method: "GET",
-	path: "/tools",
-	responseType: "json",
-	responseSchema: require_agents.listToolsResponseSchema,
-	summary: "List all tools",
-	description: "Returns a list of all available tools in the system",
-	tags: ["Tools"],
-	requiresAuth: true,
-	handler: async ({ mastra, registeredTools, requestContext }) => {
-		try {
-			const registered = registeredTools && Object.keys(registeredTools).length > 0 ? registeredTools : {};
-			const allTools = {};
-			const seenToolIds = /* @__PURE__ */ new Map();
-			for (const [key, tool] of Object.entries(registered)) {
-				const toolId = typeof tool?.id === "string" ? tool.id : void 0;
-				if (toolId !== void 0) seenToolIds.set(toolId, key);
-				allTools[key] = tool;
-			}
-			for (const [key, tool] of Object.entries(mastra.listTools() ?? {})) {
-				const toolId = typeof tool?.id === "string" ? tool.id : void 0;
-				if (toolId !== void 0 && seenToolIds.has(toolId)) continue;
-				if (toolId !== void 0) seenToolIds.set(toolId, key);
-				allTools[key] = tool;
-			}
-			const serializedTools = Object.entries(allTools).reduce((acc, [id, _tool]) => {
-				acc[id] = serializeTool(_tool);
-				return acc;
-			}, {});
-			const fgaProvider = mastra.getServer?.()?.fga;
-			const user = requestContext?.get("user");
-			if (fgaProvider && user) {
-				const toolList = Object.entries(serializedTools).map(([id, t]) => ({
-					id,
-					...t
-				}));
-				const accessible = await fgaProvider.filterAccessible(user, toolList, "tool", require_utils$1.MastraFGAPermissions.TOOLS_READ);
-				const accessibleSet = new Set(accessible.map((t) => t.id));
-				for (const id of Object.keys(serializedTools)) if (!accessibleSet.has(id)) delete serializedTools[id];
-			}
-			return serializedTools;
-		} catch (error) {
-			return require_server_handlers_error.handleError(error, "Error getting tools");
-		}
-	}
-});
-const GET_TOOL_BY_ID_ROUTE = require_route_builder.createRoute({
-	method: "GET",
-	path: "/tools/:toolId",
-	responseType: "json",
-	pathParamSchema: require_agents.toolIdPathParams,
-	responseSchema: require_agents.serializedToolSchema,
-	summary: "Get tool by ID",
-	description: "Returns details for a specific tool including its schema and configuration",
-	tags: ["Tools"],
-	requiresAuth: true,
-	handler: async ({ mastra, registeredTools, toolId, requestContext }) => {
-		try {
-			let tool;
-			if (registeredTools && Object.keys(registeredTools).length > 0) tool = Object.values(registeredTools).find((t) => t.id === toolId);
-			if (!tool) try {
-				tool = mastra.getToolById(toolId);
-			} catch {}
-			if (!tool) tool = await findToolInAgents(mastra, toolId, requestContext);
-			if (!tool) throw new require_http_exception.HTTPException(404, { message: "Tool not found" });
-			return serializeTool(tool);
-		} catch (error) {
-			return require_server_handlers_error.handleError(error, "Error getting tool");
-		}
-	}
-});
-const EXECUTE_TOOL_ROUTE = require_route_builder.createRoute({
-	method: "POST",
-	path: "/tools/:toolId/execute",
-	responseType: "json",
-	pathParamSchema: require_agents.toolIdPathParams,
-	queryParamSchema: require_common.optionalRunIdSchema,
-	bodySchema: require_agents.executeToolContextBodySchema,
-	responseSchema: require_agents.executeToolResponseSchema,
-	summary: "Execute tool",
-	description: "Executes a specific tool with the provided input data",
-	tags: ["Tools"],
-	requiresAuth: true,
-	handler: async ({ mastra, runId, toolId, registeredTools, requestContext, ...bodyParams }) => {
-		try {
-			if (!toolId) throw new require_http_exception.HTTPException(400, { message: "Tool ID is required" });
-			let tool;
-			if (registeredTools && Object.keys(registeredTools).length > 0) tool = Object.values(registeredTools).find((t) => t.id === toolId);
-			if (!tool) try {
-				tool = mastra.getToolById(toolId);
-			} catch {}
-			if (!tool) tool = await findToolInAgents(mastra, toolId, requestContext);
-			if (!tool) throw new require_http_exception.HTTPException(404, { message: "Tool not found" });
-			if (!tool?.execute) throw new require_http_exception.HTTPException(400, { message: "Tool is not executable" });
-			const { data } = bodyParams;
-			require_utils$1.validateBody({ data });
-			let result;
-			if ((0, _mastra_core_tools.isVercelTool)(tool)) result = await tool.execute(data);
-			else result = await tool.execute(data, {
-				mastra,
-				requestContext,
-				tracingContext: { currentSpan: void 0 },
-				...runId ? { workflow: {
-					runId,
-					suspend: async () => {}
-				} } : {}
-			});
-			return result;
-		} catch (error) {
-			return require_server_handlers_error.handleError(error, "Error executing tool");
-		}
-	}
-});
-const GET_AGENT_TOOL_ROUTE = require_route_builder.createRoute({
-	method: "GET",
-	path: "/agents/:agentId/tools/:toolId",
-	responseType: "json",
-	pathParamSchema: require_agents.agentToolPathParams,
-	responseSchema: require_agents.serializedToolSchema,
-	summary: "Get agent tool",
-	description: "Returns details for a specific tool assigned to the agent",
-	tags: ["Agents", "Tools"],
-	requiresAuth: true,
-	handler: async ({ mastra, agentId, toolId, requestContext }) => {
-		try {
-			if (!agentId) throw new require_http_exception.HTTPException(400, { message: "Agent ID is required" });
-			const agentTools = await (await require_server_handlers_agents.getAgentFromSystem({
-				mastra,
-				agentId
-			})).listTools({ requestContext });
-			const tool = Object.values(agentTools || {}).find((tool) => tool.id === toolId);
-			if (!tool) throw new require_http_exception.HTTPException(404, { message: "Tool not found" });
-			return serializeTool(tool);
-		} catch (error) {
-			return require_server_handlers_error.handleError(error, "Error getting agent tool");
-		}
-	}
-});
-const EXECUTE_AGENT_TOOL_ROUTE = require_route_builder.createRoute({
-	method: "POST",
-	path: "/agents/:agentId/tools/:toolId/execute",
-	responseType: "json",
-	pathParamSchema: require_agents.agentToolPathParams,
-	bodySchema: require_agents.executeToolBodySchema,
-	responseSchema: require_agents.executeToolResponseSchema,
-	summary: "Execute agent tool",
-	description: "Executes a specific tool assigned to the agent with the provided input data",
-	tags: ["Agents", "Tools"],
-	requiresAuth: true,
-	handler: async ({ mastra, agentId, toolId, data, requestContext }) => {
-		try {
-			if (!agentId) throw new require_http_exception.HTTPException(400, { message: "Agent ID is required" });
-			const agentTools = await (await require_server_handlers_agents.getAgentFromSystem({
-				mastra,
-				agentId
-			})).listTools({ requestContext });
-			const tool = Object.values(agentTools || {}).find((tool) => tool.id === toolId);
-			if (!tool) throw new require_http_exception.HTTPException(404, { message: "Tool not found" });
-			if (!tool?.execute) throw new require_http_exception.HTTPException(400, { message: "Tool is not executable" });
-			return await tool.execute(data, {
-				mastra,
-				requestContext,
-				tracingContext: { currentSpan: void 0 }
-			});
-		} catch (error) {
-			return require_server_handlers_error.handleError(error, "Error executing agent tool");
-		}
-	}
-});
-//#endregion
-exports.EXECUTE_AGENT_TOOL_ROUTE = EXECUTE_AGENT_TOOL_ROUTE;
-exports.EXECUTE_TOOL_ROUTE = EXECUTE_TOOL_ROUTE;
-exports.GET_AGENT_TOOL_ROUTE = GET_AGENT_TOOL_ROUTE;
-exports.GET_TOOL_BY_ID_ROUTE = GET_TOOL_BY_ID_ROUTE;
-exports.LIST_TOOLS_ROUTE = LIST_TOOLS_ROUTE;
-Object.defineProperty(exports, "tools_exports", {
-	enumerable: true,
-	get: function() {
-		return tools_exports;
-	}
-});
-
-//# sourceMappingURL=tools.cjs.map
+require("../../rolldown-runtime-BwC_XMyb.cjs");
+const require_tools = require("../../tools-SPJtxG9N.cjs");
+exports.EXECUTE_AGENT_TOOL_ROUTE = require_tools.EXECUTE_AGENT_TOOL_ROUTE;
+exports.EXECUTE_TOOL_ROUTE = require_tools.EXECUTE_TOOL_ROUTE;
+exports.GET_AGENT_TOOL_ROUTE = require_tools.GET_AGENT_TOOL_ROUTE;
+exports.GET_TOOL_BY_ID_ROUTE = require_tools.GET_TOOL_BY_ID_ROUTE;
+exports.LIST_TOOLS_ROUTE = require_tools.LIST_TOOLS_ROUTE;

package/dist/server/handlers/tools.js

@@ -1,257 +1 @@
-import { r as __exportAll } from "../../rolldown-runtime-maW3aOIk.js";
-import { t as HTTPException } from "../../http-exception-CyfxZB6W.js";
-import { o as optionalRunIdSchema } from "../../common-Y30XtCyr.js";
-import { $ as toolIdPathParams, E as listToolsResponseSchema, b as executeToolContextBodySchema, l as agentToolPathParams, q as serializedToolSchema, x as executeToolResponseSchema, y as executeToolBodySchema } from "../../agents-X1E7fW3p.js";
-import { n as standardSchemaToJSONSchema, r as toStandardSchema } from "../../schema-e0VHpMt0-CVP5Hnxy.js";
-import { n as createRoute } from "../../route-builder-BfQYtclb.js";
-import "../../schema-Drf2W04o.js";
-import { l as stringify } from "../../utils-DCAUeb6M.js";
-import { handleError } from "./error.js";
-import { g as MastraFGAPermissions, p as validateBody } from "../../utils-BBJlS81s.js";
-import { stripInjectedToolOverrideFields } from "./tool-schema-overrides.js";
-import { getAgentFromSystem } from "./agents.js";
-import { isProviderDefinedTool, isVercelTool } from "@mastra/core/tools";
-//#region src/server/handlers/tools.ts
-var tools_exports = /* @__PURE__ */ __exportAll({
-	EXECUTE_AGENT_TOOL_ROUTE: () => EXECUTE_AGENT_TOOL_ROUTE,
-	EXECUTE_TOOL_ROUTE: () => EXECUTE_TOOL_ROUTE,
-	GET_AGENT_TOOL_ROUTE: () => GET_AGENT_TOOL_ROUTE,
-	GET_TOOL_BY_ID_ROUTE: () => GET_TOOL_BY_ID_ROUTE,
-	LIST_TOOLS_ROUTE: () => LIST_TOOLS_ROUTE
-});
-/**
-* Resolves a schema that may be a lazy function (e.g. AI SDK provider tools).
-* Recursively resolves until a non-function value is returned.
-* Skips functions that are themselves valid schemas (e.g. ArkType types are
-* callable but also implement StandardSchema via ~standard).
-*/
-function resolveLazySchema(schema) {
-	if (typeof schema === "function" && !("~standard" in schema)) return resolveLazySchema(schema());
-	return schema;
-}
-function schemaToJsonSchema(schema) {
-	if (!schema) return;
-	return standardSchemaToJSONSchema(toStandardSchema(schema), { target: "draft-2020-12" });
-}
-function serializeSchema(schema, options) {
-	const jsonSchema = schemaToJsonSchema(resolveLazySchema(schema));
-	if (jsonSchema === void 0) return void 0;
-	return stringify(options?.stripInjectedOverrides ? stripInjectedToolOverrideFields(jsonSchema) : jsonSchema);
-}
-/**
-* Searches dynamically-resolved agent tools (provided via `toolsResolver` /
-* function-based `tools`) for a tool with the given id. Used as a fallback
-* after the static tool registry (`registeredTools` + `mastra.getToolById`)
-* misses, so global tool routes can resolve tools that only exist on agents.
-*
-* Errors thrown by an individual agent's `listTools()` are logged and
-* skipped so a single broken resolver doesn't take down the whole lookup.
-*/
-async function findToolInAgents(mastra, toolId, requestContext) {
-	const agents = mastra.listAgents() || {};
-	for (const agent of Object.values(agents)) try {
-		const agentTools = await agent.listTools({ requestContext });
-		const found = Object.values(agentTools || {}).find((t) => t.id === toolId);
-		if (found) return found;
-	} catch (error) {
-		mastra.getLogger?.()?.warn?.("Failed to list tools for agent while resolving tool by id", {
-			agentId: agent?.id,
-			toolId,
-			error: error instanceof Error ? error.message : String(error)
-		});
-	}
-}
-/**
-* Serializes a tool for API responses, handling both regular tools (with Zod schemas)
-* and provider-defined tools (with AI SDK lazy schemas).
-*/
-function serializeTool(tool) {
-	if (isProviderDefinedTool(tool)) {
-		const resolvedInput = resolveLazySchema(tool.inputSchema);
-		const resolvedOutput = resolveLazySchema(tool.outputSchema);
-		return {
-			...tool,
-			inputSchema: resolvedInput && typeof resolvedInput === "object" && "jsonSchema" in resolvedInput ? stringify(resolvedInput.jsonSchema) : void 0,
-			outputSchema: resolvedOutput && typeof resolvedOutput === "object" && "jsonSchema" in resolvedOutput ? stringify(resolvedOutput.jsonSchema) : void 0
-		};
-	}
-	return {
-		...tool,
-		inputSchema: serializeSchema(tool.inputSchema, { stripInjectedOverrides: true }),
-		outputSchema: serializeSchema(tool.outputSchema),
-		requestContextSchema: serializeSchema(tool.requestContextSchema)
-	};
-}
-const LIST_TOOLS_ROUTE = createRoute({
-	method: "GET",
-	path: "/tools",
-	responseType: "json",
-	responseSchema: listToolsResponseSchema,
-	summary: "List all tools",
-	description: "Returns a list of all available tools in the system",
-	tags: ["Tools"],
-	requiresAuth: true,
-	handler: async ({ mastra, registeredTools, requestContext }) => {
-		try {
-			const registered = registeredTools && Object.keys(registeredTools).length > 0 ? registeredTools : {};
-			const allTools = {};
-			const seenToolIds = /* @__PURE__ */ new Map();
-			for (const [key, tool] of Object.entries(registered)) {
-				const toolId = typeof tool?.id === "string" ? tool.id : void 0;
-				if (toolId !== void 0) seenToolIds.set(toolId, key);
-				allTools[key] = tool;
-			}
-			for (const [key, tool] of Object.entries(mastra.listTools() ?? {})) {
-				const toolId = typeof tool?.id === "string" ? tool.id : void 0;
-				if (toolId !== void 0 && seenToolIds.has(toolId)) continue;
-				if (toolId !== void 0) seenToolIds.set(toolId, key);
-				allTools[key] = tool;
-			}
-			const serializedTools = Object.entries(allTools).reduce((acc, [id, _tool]) => {
-				acc[id] = serializeTool(_tool);
-				return acc;
-			}, {});
-			const fgaProvider = mastra.getServer?.()?.fga;
-			const user = requestContext?.get("user");
-			if (fgaProvider && user) {
-				const toolList = Object.entries(serializedTools).map(([id, t]) => ({
-					id,
-					...t
-				}));
-				const accessible = await fgaProvider.filterAccessible(user, toolList, "tool", MastraFGAPermissions.TOOLS_READ);
-				const accessibleSet = new Set(accessible.map((t) => t.id));
-				for (const id of Object.keys(serializedTools)) if (!accessibleSet.has(id)) delete serializedTools[id];
-			}
-			return serializedTools;
-		} catch (error) {
-			return handleError(error, "Error getting tools");
-		}
-	}
-});
-const GET_TOOL_BY_ID_ROUTE = createRoute({
-	method: "GET",
-	path: "/tools/:toolId",
-	responseType: "json",
-	pathParamSchema: toolIdPathParams,
-	responseSchema: serializedToolSchema,
-	summary: "Get tool by ID",
-	description: "Returns details for a specific tool including its schema and configuration",
-	tags: ["Tools"],
-	requiresAuth: true,
-	handler: async ({ mastra, registeredTools, toolId, requestContext }) => {
-		try {
-			let tool;
-			if (registeredTools && Object.keys(registeredTools).length > 0) tool = Object.values(registeredTools).find((t) => t.id === toolId);
-			if (!tool) try {
-				tool = mastra.getToolById(toolId);
-			} catch {}
-			if (!tool) tool = await findToolInAgents(mastra, toolId, requestContext);
-			if (!tool) throw new HTTPException(404, { message: "Tool not found" });
-			return serializeTool(tool);
-		} catch (error) {
-			return handleError(error, "Error getting tool");
-		}
-	}
-});
-const EXECUTE_TOOL_ROUTE = createRoute({
-	method: "POST",
-	path: "/tools/:toolId/execute",
-	responseType: "json",
-	pathParamSchema: toolIdPathParams,
-	queryParamSchema: optionalRunIdSchema,
-	bodySchema: executeToolContextBodySchema,
-	responseSchema: executeToolResponseSchema,
-	summary: "Execute tool",
-	description: "Executes a specific tool with the provided input data",
-	tags: ["Tools"],
-	requiresAuth: true,
-	handler: async ({ mastra, runId, toolId, registeredTools, requestContext, ...bodyParams }) => {
-		try {
-			if (!toolId) throw new HTTPException(400, { message: "Tool ID is required" });
-			let tool;
-			if (registeredTools && Object.keys(registeredTools).length > 0) tool = Object.values(registeredTools).find((t) => t.id === toolId);
-			if (!tool) try {
-				tool = mastra.getToolById(toolId);
-			} catch {}
-			if (!tool) tool = await findToolInAgents(mastra, toolId, requestContext);
-			if (!tool) throw new HTTPException(404, { message: "Tool not found" });
-			if (!tool?.execute) throw new HTTPException(400, { message: "Tool is not executable" });
-			const { data } = bodyParams;
-			validateBody({ data });
-			let result;
-			if (isVercelTool(tool)) result = await tool.execute(data);
-			else result = await tool.execute(data, {
-				mastra,
-				requestContext,
-				tracingContext: { currentSpan: void 0 },
-				...runId ? { workflow: {
-					runId,
-					suspend: async () => {}
-				} } : {}
-			});
-			return result;
-		} catch (error) {
-			return handleError(error, "Error executing tool");
-		}
-	}
-});
-const GET_AGENT_TOOL_ROUTE = createRoute({
-	method: "GET",
-	path: "/agents/:agentId/tools/:toolId",
-	responseType: "json",
-	pathParamSchema: agentToolPathParams,
-	responseSchema: serializedToolSchema,
-	summary: "Get agent tool",
-	description: "Returns details for a specific tool assigned to the agent",
-	tags: ["Agents", "Tools"],
-	requiresAuth: true,
-	handler: async ({ mastra, agentId, toolId, requestContext }) => {
-		try {
-			if (!agentId) throw new HTTPException(400, { message: "Agent ID is required" });
-			const agentTools = await (await getAgentFromSystem({
-				mastra,
-				agentId
-			})).listTools({ requestContext });
-			const tool = Object.values(agentTools || {}).find((tool) => tool.id === toolId);
-			if (!tool) throw new HTTPException(404, { message: "Tool not found" });
-			return serializeTool(tool);
-		} catch (error) {
-			return handleError(error, "Error getting agent tool");
-		}
-	}
-});
-const EXECUTE_AGENT_TOOL_ROUTE = createRoute({
-	method: "POST",
-	path: "/agents/:agentId/tools/:toolId/execute",
-	responseType: "json",
-	pathParamSchema: agentToolPathParams,
-	bodySchema: executeToolBodySchema,
-	responseSchema: executeToolResponseSchema,
-	summary: "Execute agent tool",
-	description: "Executes a specific tool assigned to the agent with the provided input data",
-	tags: ["Agents", "Tools"],
-	requiresAuth: true,
-	handler: async ({ mastra, agentId, toolId, data, requestContext }) => {
-		try {
-			if (!agentId) throw new HTTPException(400, { message: "Agent ID is required" });
-			const agentTools = await (await getAgentFromSystem({
-				mastra,
-				agentId
-			})).listTools({ requestContext });
-			const tool = Object.values(agentTools || {}).find((tool) => tool.id === toolId);
-			if (!tool) throw new HTTPException(404, { message: "Tool not found" });
-			if (!tool?.execute) throw new HTTPException(400, { message: "Tool is not executable" });
-			return await tool.execute(data, {
-				mastra,
-				requestContext,
-				tracingContext: { currentSpan: void 0 }
-			});
-		} catch (error) {
-			return handleError(error, "Error executing agent tool");
-		}
-	}
-});
-//#endregion
-export { EXECUTE_AGENT_TOOL_ROUTE, EXECUTE_TOOL_ROUTE, GET_AGENT_TOOL_ROUTE, GET_TOOL_BY_ID_ROUTE, LIST_TOOLS_ROUTE, tools_exports as t };
-
-//# sourceMappingURL=tools.js.map
+export { t as EXECUTE_AGENT_TOOL_ROUTE, n as EXECUTE_TOOL_ROUTE, r as GET_AGENT_TOOL_ROUTE, i as GET_TOOL_BY_ID_ROUTE, a as LIST_TOOLS_ROUTE } from "../../tools-CmFSfDMn.js";

package/dist/server/handlers/utils.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-require("../../rolldown-runtime-Bd6kNlEP.cjs");
-const require_utils = require("../../utils-Du-EpvDs.cjs");
+require("../../rolldown-runtime-BwC_XMyb.cjs");
+const require_utils = require("../../utils-dDLIDg8O.cjs");
 exports.applyEffectiveThreadId = require_utils.applyEffectiveThreadId;
 exports.enforceThreadAccess = require_utils.enforceThreadAccess;
 exports.getContextResourceId = require_utils.getContextResourceId;

package/dist/server/handlers/utils.js

@@ -1,2 +1 @@
-import { a as getEffectiveThreadId, c as parseFilters, d as sanitizeBody, f as stripClientCredentialHeaders, h as validateThreadOwnership, i as getEffectiveResourceId, l as parsePerPage, m as validateRunOwnership, n as enforceThreadAccess, o as getPublicWorkflowById, p as validateBody, r as getContextResourceId, s as mergeBodyRequestContext, t as applyEffectiveThreadId, u as requireEffectiveResourceId } from "../../utils-BBJlS81s.js";
-export { applyEffectiveThreadId, enforceThreadAccess, getContextResourceId, getEffectiveResourceId, getEffectiveThreadId, getPublicWorkflowById, mergeBodyRequestContext, parseFilters, parsePerPage, requireEffectiveResourceId, sanitizeBody, stripClientCredentialHeaders, validateBody, validateRunOwnership, validateThreadOwnership };
+export { t as applyEffectiveThreadId, n as enforceThreadAccess, r as getContextResourceId, i as getEffectiveResourceId, a as getEffectiveThreadId, o as getPublicWorkflowById, s as mergeBodyRequestContext, c as parseFilters, l as parsePerPage, u as requireEffectiveResourceId, d as sanitizeBody, f as stripClientCredentialHeaders, p as validateBody, m as validateRunOwnership, h as validateThreadOwnership } from "../../utils-BBJlS81s.js";

package/dist/server/handlers/validate-agent-instructions.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-require("../../rolldown-runtime-Bd6kNlEP.cjs");
+require("../../rolldown-runtime-BwC_XMyb.cjs");
 const require_http_exception = require("../../http-exception-CKDHupKw.cjs");
-const require_utils = require("../../utils-DCgeTrq2.cjs");
+const require_utils = require("../../utils-CF76qzZR.cjs");
 //#region src/server/handlers/validate-agent-instructions.ts
 const UNPUBLISHED_REFERENCES_MESSAGE = "Unable to use unpublished referenced prompt blocks: {ids}. Publish these prompt blocks and try again.";
 /**

package/dist/server/handlers/validate-agent-instructions.js

@@ -1,5 +1,5 @@
 import { t as HTTPException } from "../../http-exception-CyfxZB6W.js";
-import { i as getStoredResourceScope, n as assertStoredResourceScope } from "../../utils-DCAUeb6M.js";
+import { i as getStoredResourceScope, n as assertStoredResourceScope } from "../../utils-aoLN3Wfi.js";
 //#region src/server/handlers/validate-agent-instructions.ts
 const UNPUBLISHED_REFERENCES_MESSAGE = "Unable to use unpublished referenced prompt blocks: {ids}. Publish these prompt blocks and try again.";
 /**

package/dist/server/handlers/validate-avatar.cjs

@@ -1,8 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-require("../../rolldown-runtime-Bd6kNlEP.cjs");
+require("../../rolldown-runtime-BwC_XMyb.cjs");
 const require_http_exception = require("../../http-exception-CKDHupKw.cjs");
 //#region src/server/handlers/validate-avatar.ts
-const AVATAR_MAX_BYTES = 512 * 1024;
+const AVATAR_MAX_BYTES = 524288;
 /**
 * Validates `metadata.avatarUrl` if present.
 * Ensures it's a well-formed data URL and the decoded payload is ≤ 512 KB.

package/dist/server/handlers/validate-avatar.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"validate-avatar.cjs","names":["HTTPException"],"sources":["../../../src/server/handlers/validate-avatar.ts"],"sourcesContent":["import { HTTPException } from '../http-exception';\n\nconst AVATAR_MAX_BYTES = 512 * 1024; // 512 KB\n\n/**\n * Validates `metadata.avatarUrl` if present.\n * Ensures it's a well-formed data URL and the decoded payload is ≤ 512 KB.\n * No-ops when metadata is absent or doesn't contain avatarUrl.\n */\nexport function validateMetadataAvatarUrl(metadata: Record<string, unknown> | undefined): void {\n  if (!metadata || !('avatarUrl' in metadata) || metadata.avatarUrl === null || metadata.avatarUrl === undefined)\n    return;\n  if (typeof metadata.avatarUrl !== 'string') {\n    throw new HTTPException(400, { message: 'metadata.avatarUrl must be a string' });\n  }\n\n  const dataUrl = metadata.avatarUrl;\n  const match = dataUrl.match(/^data:([^;]+);base64,(.+)$/);\n  if (!match) {\n    throw new HTTPException(400, {\n      message: 'metadata.avatarUrl must be a valid data URL (data:<mime>;base64,<data>)',\n    });\n  }\n\n  // `Buffer.from(..., 'base64')` decodes leniently — it silently ignores\n  // invalid characters and never throws. Validate the payload format strictly\n  // before measuring its byte length so malformed input is rejected.\n  const base64Payload = match[2]!;\n  const isStrictBase64 =\n    base64Payload.length > 0 &&\n    base64Payload.length % 4 === 0 &&\n    /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(base64Payload);\n  if (!isStrictBase64) {\n    throw new HTTPException(400, { message: 'metadata.avatarUrl contains invalid base64' });\n  }\n  const byteLength = Buffer.from(base64Payload, 'base64').byteLength;\n\n  if (byteLength === 0) {\n    throw new HTTPException(400, { message: 'metadata.avatarUrl is empty' });\n  }\n\n  if (byteLength > AVATAR_MAX_BYTES) {\n    throw new HTTPException(413, {\n      message: `metadata.avatarUrl exceeds ${AVATAR_MAX_BYTES}-byte limit (got ${byteLength})`,\n    });\n  }\n}\n"],"mappings":";;;;AAEA,MAAM,mBAAmB,MAAM;;;;;;AAO/B,SAAgB,0BAA0B,UAAqD;CAC7F,IAAI,CAAC,YAAY,EAAE,eAAe,aAAa,SAAS,cAAc,QAAQ,SAAS,cAAc,KAAA,GACnG;CACF,IAAI,OAAO,SAAS,cAAc,UAChC,MAAM,IAAIA,uBAAAA,cAAc,KAAK,EAAE,SAAS,sCAAsC,CAAC;CAIjF,MAAM,QADU,SAAS,UACH,MAAM,4BAA4B;CACxD,IAAI,CAAC,OACH,MAAM,IAAIA,uBAAAA,cAAc,KAAK,EAC3B,SAAS,0EACX,CAAC;CAMH,MAAM,gBAAgB,MAAM;CAK5B,IAAI,EAHF,cAAc,SAAS,KACvB,cAAc,SAAS,MAAM,KAC7B,mEAAmE,KAAK,aAAa,IAErF,MAAM,IAAIA,uBAAAA,cAAc,KAAK,EAAE,SAAS,6CAA6C,CAAC;CAExF,MAAM,aAAa,OAAO,KAAK,eAAe,QAAQ,CAAC,CAAC;CAExD,IAAI,eAAe,GACjB,MAAM,IAAIA,uBAAAA,cAAc,KAAK,EAAE,SAAS,8BAA8B,CAAC;CAGzE,IAAI,aAAa,kBACf,MAAM,IAAIA,uBAAAA,cAAc,KAAK,EAC3B,SAAS,8BAA8B,iBAAiB,mBAAmB,WAAW,GACxF,CAAC;AAEL"}
+{"version":3,"file":"validate-avatar.cjs","names":["HTTPException"],"sources":["../../../src/server/handlers/validate-avatar.ts"],"sourcesContent":["import { HTTPException } from '../http-exception';\n\nconst AVATAR_MAX_BYTES = 512 * 1024; // 512 KB\n\n/**\n * Validates `metadata.avatarUrl` if present.\n * Ensures it's a well-formed data URL and the decoded payload is ≤ 512 KB.\n * No-ops when metadata is absent or doesn't contain avatarUrl.\n */\nexport function validateMetadataAvatarUrl(metadata: Record<string, unknown> | undefined): void {\n  if (!metadata || !('avatarUrl' in metadata) || metadata.avatarUrl === null || metadata.avatarUrl === undefined)\n    return;\n  if (typeof metadata.avatarUrl !== 'string') {\n    throw new HTTPException(400, { message: 'metadata.avatarUrl must be a string' });\n  }\n\n  const dataUrl = metadata.avatarUrl;\n  const match = dataUrl.match(/^data:([^;]+);base64,(.+)$/);\n  if (!match) {\n    throw new HTTPException(400, {\n      message: 'metadata.avatarUrl must be a valid data URL (data:<mime>;base64,<data>)',\n    });\n  }\n\n  // `Buffer.from(..., 'base64')` decodes leniently — it silently ignores\n  // invalid characters and never throws. Validate the payload format strictly\n  // before measuring its byte length so malformed input is rejected.\n  const base64Payload = match[2]!;\n  const isStrictBase64 =\n    base64Payload.length > 0 &&\n    base64Payload.length % 4 === 0 &&\n    /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(base64Payload);\n  if (!isStrictBase64) {\n    throw new HTTPException(400, { message: 'metadata.avatarUrl contains invalid base64' });\n  }\n  const byteLength = Buffer.from(base64Payload, 'base64').byteLength;\n\n  if (byteLength === 0) {\n    throw new HTTPException(400, { message: 'metadata.avatarUrl is empty' });\n  }\n\n  if (byteLength > AVATAR_MAX_BYTES) {\n    throw new HTTPException(413, {\n      message: `metadata.avatarUrl exceeds ${AVATAR_MAX_BYTES}-byte limit (got ${byteLength})`,\n    });\n  }\n}\n"],"mappings":";;;;AAEA,MAAM,mBAAmB;;;;;;AAOzB,SAAgB,0BAA0B,UAAqD;CAC7F,IAAI,CAAC,YAAY,EAAE,eAAe,aAAa,SAAS,cAAc,QAAQ,SAAS,cAAc,KAAA,GACnG;CACF,IAAI,OAAO,SAAS,cAAc,UAChC,MAAM,IAAIA,uBAAAA,cAAc,KAAK,EAAE,SAAS,sCAAsC,CAAC;CAIjF,MAAM,QADU,SAAS,UACH,MAAM,4BAA4B;CACxD,IAAI,CAAC,OACH,MAAM,IAAIA,uBAAAA,cAAc,KAAK,EAC3B,SAAS,0EACX,CAAC;CAMH,MAAM,gBAAgB,MAAM;CAK5B,IAAI,EAHF,cAAc,SAAS,KACvB,cAAc,SAAS,MAAM,KAC7B,mEAAmE,KAAK,aAAa,IAErF,MAAM,IAAIA,uBAAAA,cAAc,KAAK,EAAE,SAAS,6CAA6C,CAAC;CAExF,MAAM,aAAa,OAAO,KAAK,eAAe,QAAQ,CAAC,CAAC;CAExD,IAAI,eAAe,GACjB,MAAM,IAAIA,uBAAAA,cAAc,KAAK,EAAE,SAAS,8BAA8B,CAAC;CAGzE,IAAI,aAAa,kBACf,MAAM,IAAIA,uBAAAA,cAAc,KAAK,EAC3B,SAAS,8BAA8B,iBAAiB,mBAAmB,WAAW,GACxF,CAAC;AAEL"}

package/dist/server/handlers/validate-avatar.js

@@ -1,6 +1,6 @@
 import { t as HTTPException } from "../../http-exception-CyfxZB6W.js";
 //#region src/server/handlers/validate-avatar.ts
-const AVATAR_MAX_BYTES = 512 * 1024;
+const AVATAR_MAX_BYTES = 524288;
 /**
 * Validates `metadata.avatarUrl` if present.
 * Ensures it's a well-formed data URL and the decoded payload is ≤ 512 KB.

package/dist/server/handlers/validate-avatar.js.map

@@ -1 +1 @@
-{"version":3,"file":"validate-avatar.js","names":[],"sources":["../../../src/server/handlers/validate-avatar.ts"],"sourcesContent":["import { HTTPException } from '../http-exception';\n\nconst AVATAR_MAX_BYTES = 512 * 1024; // 512 KB\n\n/**\n * Validates `metadata.avatarUrl` if present.\n * Ensures it's a well-formed data URL and the decoded payload is ≤ 512 KB.\n * No-ops when metadata is absent or doesn't contain avatarUrl.\n */\nexport function validateMetadataAvatarUrl(metadata: Record<string, unknown> | undefined): void {\n  if (!metadata || !('avatarUrl' in metadata) || metadata.avatarUrl === null || metadata.avatarUrl === undefined)\n    return;\n  if (typeof metadata.avatarUrl !== 'string') {\n    throw new HTTPException(400, { message: 'metadata.avatarUrl must be a string' });\n  }\n\n  const dataUrl = metadata.avatarUrl;\n  const match = dataUrl.match(/^data:([^;]+);base64,(.+)$/);\n  if (!match) {\n    throw new HTTPException(400, {\n      message: 'metadata.avatarUrl must be a valid data URL (data:<mime>;base64,<data>)',\n    });\n  }\n\n  // `Buffer.from(..., 'base64')` decodes leniently — it silently ignores\n  // invalid characters and never throws. Validate the payload format strictly\n  // before measuring its byte length so malformed input is rejected.\n  const base64Payload = match[2]!;\n  const isStrictBase64 =\n    base64Payload.length > 0 &&\n    base64Payload.length % 4 === 0 &&\n    /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(base64Payload);\n  if (!isStrictBase64) {\n    throw new HTTPException(400, { message: 'metadata.avatarUrl contains invalid base64' });\n  }\n  const byteLength = Buffer.from(base64Payload, 'base64').byteLength;\n\n  if (byteLength === 0) {\n    throw new HTTPException(400, { message: 'metadata.avatarUrl is empty' });\n  }\n\n  if (byteLength > AVATAR_MAX_BYTES) {\n    throw new HTTPException(413, {\n      message: `metadata.avatarUrl exceeds ${AVATAR_MAX_BYTES}-byte limit (got ${byteLength})`,\n    });\n  }\n}\n"],"mappings":";;AAEA,MAAM,mBAAmB,MAAM;;;;;;AAO/B,SAAgB,0BAA0B,UAAqD;CAC7F,IAAI,CAAC,YAAY,EAAE,eAAe,aAAa,SAAS,cAAc,QAAQ,SAAS,cAAc,KAAA,GACnG;CACF,IAAI,OAAO,SAAS,cAAc,UAChC,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,sCAAsC,CAAC;CAIjF,MAAM,QADU,SAAS,UACH,MAAM,4BAA4B;CACxD,IAAI,CAAC,OACH,MAAM,IAAI,cAAc,KAAK,EAC3B,SAAS,0EACX,CAAC;CAMH,MAAM,gBAAgB,MAAM;CAK5B,IAAI,EAHF,cAAc,SAAS,KACvB,cAAc,SAAS,MAAM,KAC7B,mEAAmE,KAAK,aAAa,IAErF,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,6CAA6C,CAAC;CAExF,MAAM,aAAa,OAAO,KAAK,eAAe,QAAQ,CAAC,CAAC;CAExD,IAAI,eAAe,GACjB,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,8BAA8B,CAAC;CAGzE,IAAI,aAAa,kBACf,MAAM,IAAI,cAAc,KAAK,EAC3B,SAAS,8BAA8B,iBAAiB,mBAAmB,WAAW,GACxF,CAAC;AAEL"}
+{"version":3,"file":"validate-avatar.js","names":[],"sources":["../../../src/server/handlers/validate-avatar.ts"],"sourcesContent":["import { HTTPException } from '../http-exception';\n\nconst AVATAR_MAX_BYTES = 512 * 1024; // 512 KB\n\n/**\n * Validates `metadata.avatarUrl` if present.\n * Ensures it's a well-formed data URL and the decoded payload is ≤ 512 KB.\n * No-ops when metadata is absent or doesn't contain avatarUrl.\n */\nexport function validateMetadataAvatarUrl(metadata: Record<string, unknown> | undefined): void {\n  if (!metadata || !('avatarUrl' in metadata) || metadata.avatarUrl === null || metadata.avatarUrl === undefined)\n    return;\n  if (typeof metadata.avatarUrl !== 'string') {\n    throw new HTTPException(400, { message: 'metadata.avatarUrl must be a string' });\n  }\n\n  const dataUrl = metadata.avatarUrl;\n  const match = dataUrl.match(/^data:([^;]+);base64,(.+)$/);\n  if (!match) {\n    throw new HTTPException(400, {\n      message: 'metadata.avatarUrl must be a valid data URL (data:<mime>;base64,<data>)',\n    });\n  }\n\n  // `Buffer.from(..., 'base64')` decodes leniently — it silently ignores\n  // invalid characters and never throws. Validate the payload format strictly\n  // before measuring its byte length so malformed input is rejected.\n  const base64Payload = match[2]!;\n  const isStrictBase64 =\n    base64Payload.length > 0 &&\n    base64Payload.length % 4 === 0 &&\n    /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(base64Payload);\n  if (!isStrictBase64) {\n    throw new HTTPException(400, { message: 'metadata.avatarUrl contains invalid base64' });\n  }\n  const byteLength = Buffer.from(base64Payload, 'base64').byteLength;\n\n  if (byteLength === 0) {\n    throw new HTTPException(400, { message: 'metadata.avatarUrl is empty' });\n  }\n\n  if (byteLength > AVATAR_MAX_BYTES) {\n    throw new HTTPException(413, {\n      message: `metadata.avatarUrl exceeds ${AVATAR_MAX_BYTES}-byte limit (got ${byteLength})`,\n    });\n  }\n}\n"],"mappings":";;AAEA,MAAM,mBAAmB;;;;;;AAOzB,SAAgB,0BAA0B,UAAqD;CAC7F,IAAI,CAAC,YAAY,EAAE,eAAe,aAAa,SAAS,cAAc,QAAQ,SAAS,cAAc,KAAA,GACnG;CACF,IAAI,OAAO,SAAS,cAAc,UAChC,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,sCAAsC,CAAC;CAIjF,MAAM,QADU,SAAS,UACH,MAAM,4BAA4B;CACxD,IAAI,CAAC,OACH,MAAM,IAAI,cAAc,KAAK,EAC3B,SAAS,0EACX,CAAC;CAMH,MAAM,gBAAgB,MAAM;CAK5B,IAAI,EAHF,cAAc,SAAS,KACvB,cAAc,SAAS,MAAM,KAC7B,mEAAmE,KAAK,aAAa,IAErF,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,6CAA6C,CAAC;CAExF,MAAM,aAAa,OAAO,KAAK,eAAe,QAAQ,CAAC,CAAC;CAExD,IAAI,eAAe,GACjB,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,8BAA8B,CAAC;CAGzE,IAAI,aAAa,kBACf,MAAM,IAAI,cAAc,KAAK,EAC3B,SAAS,8BAA8B,iBAAiB,mBAAmB,WAAW,GACxF,CAAC;AAEL"}