@mastra/server 1.79.0-alpha.3 → 1.79.0-alpha.4

package/dist/server/handlers/agent-controller.js

@@ -1,8 +1,8 @@
 import { t as HTTPException } from "../../http-exception-CyfxZB6W.js";
-import { n as createRoute } from "../../route-builder-lBil8Cvo.js";
+import { n as createRoute } from "../../route-builder-DzUGCSQT.js";
 import { l as MASTRA_USER_KEY } from "../../constants-DazK_RZj.js";
 import { handleError } from "./error.js";
-import { h as MastraFGAPermissions, t as enforceThreadAccess } from "../../utils-D5DHrO3K.js";
+import { g as MastraFGAPermissions, n as enforceThreadAccess } from "../../utils-BBJlS81s.js";
 import { E as includeSchema, F as messageOrderBySchema, h as filterSchema } from "../../memory-B58Q2LgU.js";
 import { z } from "zod/v4";
 //#region src/server/handlers/agent-controller.ts
@@ -61,7 +61,11 @@ function getAgentControllerOrThrow(mastra, controllerId) {
 	if (!controller) throw new HTTPException(404, { message: `agent controller "${controllerId}" not found` });
 	return controller;
 }
-async function getSession(controller, resourceId, options, requestContext) {
+/**
+* Get-or-create a session. Only the create-session route calls this: it is the one request that carries the
+* tags and exact thread a conversation starts on.
+*/
+async function startSession(controller, resourceId, options, requestContext) {
 	await controller.init();
 	const { tags, scope, threadId } = options ?? {};
 	const id = threadId ?? (scope ? `${resourceId}::${scope}` : resourceId);
@@ -75,6 +79,32 @@ async function getSession(controller, resourceId, options, requestContext) {
 		requestContext
 	});
 }
+/**
+* Resolve the session every other route acts on: the live one, or a lost one (e.g. after a restart) rebuilt on
+* its most recent stored thread. Never starts a conversation, so a write that arrives before the session was
+* started fails instead of landing on a thread nobody reads.
+*/
+async function getSession(controller, resourceId, options, requestContext) {
+	await controller.init();
+	const scope = options?.scope;
+	const id = scope ? `${resourceId}::${scope}` : resourceId;
+	try {
+		return await controller.createSession({
+			resourceId,
+			id,
+			ownerId: controller.id,
+			scope,
+			resumeOnly: true,
+			requestContext
+		});
+	} catch (error) {
+		if (error instanceof Error && error.code === "SESSION_NOT_STARTED") throw new HTTPException(404, {
+			message: `No session has been started for resource "${resourceId}". Create it with POST /agent-controller/:controllerId/sessions first.`,
+			cause: error
+		});
+		throw error;
+	}
+}
 async function getExistingSession(controller, resourceId, scope, requestContext) {
 	await controller.init();
 	const session = await controller.getSessionByResource(resourceId, scope, requestContext);
@@ -462,7 +492,7 @@ const CREATE_AGENT_CONTROLLER_SESSION_ROUTE = createRoute({
 	bodySchema: createSessionBodySchema,
 	responseSchema: createSessionResponseSchema,
 	summary: "Create or resume a controller session",
-	description: "Creates a session for the given resourceId, or returns the existing one (get-or-create), so reconnects resume the conversation.",
+	description: "Creates a session for the given resourceId, or returns the existing one (get-or-create), so reconnects resume the conversation. Every other session route requires a started session and returns 404 until one exists or can be recovered from a stored thread.",
 	tags: ["AgentController"],
 	requiresAuth: true,
 	requiresPermission: "agent-controller:execute",
@@ -471,7 +501,7 @@ const CREATE_AGENT_CONTROLLER_SESSION_ROUTE = createRoute({
 			return {
 				controllerId,
 				resourceId,
-				threadId: (await getSession(getAgentControllerOrThrow(mastra, controllerId), resourceId, {
+				threadId: (await startSession(getAgentControllerOrThrow(mastra, controllerId), resourceId, {
 					tags,
 					scope: sessionScope,
 					threadId