@mastra/server 1.79.0-alpha.2 → 1.79.0-alpha.3

package/dist/docs/SKILL.md

@@ -3,7 +3,7 @@ name: mastra-server
 description: Documentation for @mastra/server. Use when working with @mastra/server APIs, configuration, or implementation.
 metadata:
   package: "@mastra/server"
-  version: "1.79.0-alpha.2"
+  version: "1.79.0-alpha.3"
 ---
 
 ## When to use

package/dist/docs/assets/SOURCE_MAP.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.79.0-alpha.2",
+  "version": "1.79.0-alpha.3",
   "package": "@mastra/server",
   "exports": {},
   "modules": {}

package/dist/server/handlers/agent-builder.cjs

@@ -30,7 +30,7 @@ var agent_builder_exports = /* @__PURE__ */ require_rolldown_runtime.__exportAll
 });
 let agentBuilderWorkflowsPromise;
 async function loadAgentBuilderWorkflows() {
-	agentBuilderWorkflowsPromise ??= Promise.resolve().then(() => require("../../dist-CKHUMrWI.cjs")).then((mod) => mod.agentBuilderWorkflows);
+	agentBuilderWorkflowsPromise ??= Promise.resolve().then(() => require("../../dist-CWqDEEO3.cjs")).then((mod) => mod.agentBuilderWorkflows);
 	return agentBuilderWorkflowsPromise;
 }
 async function registerAgentBuilderWorkflows(mastra) {

package/dist/server/handlers/agent-builder.js

@@ -29,7 +29,7 @@ var agent_builder_exports = /* @__PURE__ */ __exportAll({
 });
 let agentBuilderWorkflowsPromise;
 async function loadAgentBuilderWorkflows() {
-	agentBuilderWorkflowsPromise ??= import("../../dist-hfFDNas-.js").then((mod) => mod.agentBuilderWorkflows);
+	agentBuilderWorkflowsPromise ??= import("../../dist-B07TBQpE.js").then((mod) => mod.agentBuilderWorkflows);
 	return agentBuilderWorkflowsPromise;
 }
 async function registerAgentBuilderWorkflows(mastra) {

package/dist/server/handlers/agent-controller.cjs

@@ -161,7 +161,16 @@ const steerBodySchema = zod_v4.z.object({
 const toolApprovalBodySchema = zod_v4.z.object({
 	toolCallId: zod_v4.z.string(),
 	approved: zod_v4.z.boolean(),
+	/**
+	* Grants the gated tool's category to the thread that owns the call, then
+	* approves — the same "always allow" the in-process TUI offers. Requires
+	* `approved: true`.
+	*/
+	alwaysAllowCategory: zod_v4.z.boolean().optional(),
 	requestContext: bodyRequestContextSchema
+}).refine((body) => !body.alwaysAllowCategory || body.approved, {
+	message: "alwaysAllowCategory requires approved: true",
+	path: ["alwaysAllowCategory"]
 });
 const toolSuspensionBodySchema = zod_v4.z.object({
 	toolCallId: zod_v4.z.string().min(1),
@@ -663,13 +672,13 @@ const AGENT_CONTROLLER_TOOL_APPROVAL_ROUTE = require_route_builder.createRoute({
 	tags: ["AgentController"],
 	requiresAuth: true,
 	requiresPermission: "agent-controller:execute",
-	handler: async ({ mastra, controllerId, resourceId, sessionScope, toolCallId, approved, requestContext }) => {
+	handler: async ({ mastra, controllerId, resourceId, sessionScope, toolCallId, approved, alwaysAllowCategory, requestContext }) => {
 		try {
 			const session = await getSession(getAgentControllerOrThrow(mastra, controllerId), resourceId, { scope: sessionScope }, requestContext);
 			if ((toolCallId ? session.approval.isArmed({ toolCallId }) : session.approval.isArmed()) || !toolCallId) {
 				const result = session.respondToToolApproval({
 					toolCallId,
-					decision: approved ? "approve" : "decline",
+					decision: !approved ? "decline" : alwaysAllowCategory ? "always_allow_category" : "approve",
 					requestContext
 				});
 				if (!result.accepted) return {
@@ -689,6 +698,7 @@ const AGENT_CONTROLLER_TOOL_APPROVAL_ROUTE = require_route_builder.createRoute({
 					work: session.respondToPersistedToolApproval({
 						toolCallId,
 						approved,
+						alwaysAllowCategory,
 						requestContext
 					}).finally(() => session.releaseToolResponse(toolCallId)),
 					session,