@mastra/server 1.82.0-alpha.1 → 1.82.0-alpha.2

package/dist/{agents-NRBk4JAs.js → agents-DPvMjiDf.js}

@@ -1,18 +1,20 @@
 import { r as __exportAll } from "./rolldown-runtime-CQI-hT2b.js";
 import { t as HTTPException } from "./http-exception-CzaWkxMl.js";
-import { $ as toolCallResponseSchema, A as observeAgentBodySchema, B as sendAgentMessageBodySchema, C as generateResponseSchema, E as listSuspendedRunsResponseSchema, F as queueAgentSignalBodySchema, G as serializedAgentSchema, H as sendToolApprovalBodySchema, I as recoverBodySchema, L as reorderAgentModelListBodySchema, N as providersResponseSchema, O as modelConfigIdPathParams, P as queueAgentMessageBodySchema, Q as subscribeAgentThreadBodySchema, R as resumeStreamBodySchema, T as listSuspendedRunsQuerySchema, U as sendToolApprovalResponseSchema, V as sendAgentSignalBodySchema, X as streamResponseSchema, Z as streamUntilIdleBodySchema, _ as declineToolCallBodySchema, a as agentIdPathParams, c as agentRunPathParams, d as agentVersionQuerySchema, f as approveNetworkToolCallBodySchema, g as declineNetworkToolCallBodySchema, h as cancelPendingAgentSignalsResponseSchema, i as agentExecutionLegacyBodySchema, j as observeAgentResponseSchema, k as modelManagementResponseSchema, l as agentSkillPathParams, m as cancelPendingAgentSignalsBodySchema, n as abortAgentThreadResponseSchema, nt as updateAgentModelInModelListBodySchema, p as approveToolCallBodySchema, r as agentExecutionBodySchema, t as abortAgentThreadBodySchema, tt as updateAgentModelBodySchema, v as enhanceInstructionsBodySchema, w as listAgentsResponseSchema, y as enhanceInstructionsResponseSchema, z as resumeStreamUntilIdleBodySchema } from "./agents-B5kq2QEV.js";
+import { $ as toolCallResponseSchema, A as observeAgentBodySchema, B as sendAgentMessageBodySchema, C as generateResponseSchema, E as listSuspendedRunsResponseSchema, F as queueAgentSignalBodySchema, G as serializedAgentSchema, H as sendToolApprovalBodySchema, I as recoverBodySchema, L as reorderAgentModelListBodySchema, N as providersResponseSchema, O as modelConfigIdPathParams, P as queueAgentMessageBodySchema, Q as subscribeAgentThreadBodySchema, R as resumeStreamBodySchema, T as listSuspendedRunsQuerySchema, U as sendToolApprovalResponseSchema, V as sendAgentSignalBodySchema, X as streamResponseSchema, Z as streamUntilIdleBodySchema, _ as declineToolCallBodySchema, a as agentIdPathParams, c as agentRunPathParams, d as agentVersionQuerySchema, f as approveNetworkToolCallBodySchema, g as declineNetworkToolCallBodySchema, h as cancelPendingAgentSignalsResponseSchema, i as agentExecutionLegacyBodySchema, j as observeAgentResponseSchema, k as modelManagementResponseSchema, l as agentSkillPathParams, m as cancelPendingAgentSignalsBodySchema, n as abortAgentThreadResponseSchema, nt as updateAgentModelInModelListBodySchema, p as approveToolCallBodySchema, r as agentExecutionBodySchema, t as abortAgentThreadBodySchema, tt as updateAgentModelBodySchema, v as enhanceInstructionsBodySchema, w as listAgentsResponseSchema, y as enhanceInstructionsResponseSchema, z as resumeStreamUntilIdleBodySchema } from "./agents-BXqMKoOz.js";
 import { n as standardSchemaToJSONSchema, r as toStandardSchema } from "./schema-Bf12g7KC-DBc4NSds.js";
 import { n as createRoute } from "./route-builder-BxPrwNog.js";
-import { c as toSlug, l as stringify } from "./utils-qaBKOShQ.js";
-import { _ as resolveToolConfig, i as MASTRA_IS_STUDIO_KEY, m as WORKSPACE_TOOLS, s as MASTRA_RESOURCE_ID_KEY } from "./constants-CXAvBYcz.js";
+import { c as toSlug, i as getStoredResourceScope, l as stringify, n as assertStoredResourceScope, s as scopeStoredResourceMetadata } from "./utils-qaBKOShQ.js";
+import { _ as resolveToolConfig, d as MASTRA_USER_PERMISSIONS_KEY, i as MASTRA_IS_STUDIO_KEY, m as WORKSPACE_TOOLS, s as MASTRA_RESOURCE_ID_KEY } from "./constants-CXAvBYcz.js";
 import { handleError } from "./server/handlers/error.js";
 import { _ as MastraFGAPermissions, a as getEffectiveThreadId, c as mergeBodyRequestContext, d as requireEffectiveResourceId, f as sanitizeBody, g as validateThreadOwnership, h as validateRunOwnership, i as getEffectiveResourceId, m as validateBody, n as enforceThreadAccess, o as getHandlerFGAProvider, p as stripClientCredentialHeaders, r as getContextResourceId, t as applyEffectiveThreadId } from "./utils-B15w-1hm.js";
-import { r as createStoredAgentResponseSchema } from "./stored-agents-C9zCintA.js";
+import { r as createStoredAgentResponseSchema } from "./stored-agents-DA8Zx6o9.js";
 import { O as skillDisambiguationQuerySchema, h as getAgentSkillResponseSchema } from "./workspace-DBDA3UQl.js";
+import { assertWriteAccess, getCallerAuthorId } from "./server/handlers/authorship.js";
 import { stripInjectedToolOverrideFields } from "./server/handlers/tool-schema-overrides.js";
 import { z } from "zod/v4";
 import { zodToJsonSchema } from "@mastra/core/utils/zod-to-json";
 import { ChunkFrom } from "@mastra/core/stream";
+import { matchesPermission } from "@mastra/core/auth/ee";
 import { Agent, isDurableAgentLike } from "@mastra/core/agent";
 import { AGENT_STREAM_TOPIC, DurableStepIds } from "@mastra/core/agent/durable";
 import { MASTRA_VERSIONS_KEY, mergeVersionOverrides } from "@mastra/core/di";
@@ -177,6 +179,50 @@ function ensureDefaultVersionStatus(ctx, versionOptions) {
 function getIsStudioFromContext(requestContext) {
 	return requestContext.get(MASTRA_IS_STUDIO_KEY) === true;
 }
+function toStoredModelList(modelList) {
+	return modelList.map((model) => ({
+		id: model.id,
+		provider: model.model.provider,
+		modelId: model.model.modelId,
+		enabled: model.enabled,
+		maxRetries: model.maxRetries
+	}));
+}
+async function persistEditorOwnedModelList({ mastra, agent, modelList, requestContext }) {
+	const editorConfig = agent.__getEditorConfig?.();
+	if (!editorConfig || editorConfig.model !== true) return false;
+	const editorAgent = mastra.getEditor?.()?.agent;
+	const agentsStore = await (mastra.getStorage?.())?.getStore("agents");
+	if (!editorAgent || !agentsStore) throw new HTTPException(500, { message: "Editor and agent storage are required for Editor-owned model lists" });
+	const storedModelList = toStoredModelList(modelList);
+	const storedAgent = await agentsStore.getById(agent.id);
+	const scope = await getStoredResourceScope(mastra, requestContext);
+	if (storedAgent) {
+		assertStoredResourceScope(storedAgent, scope);
+		assertWriteAccess({
+			requestContext,
+			resource: "stored-agents",
+			resourceId: agent.id,
+			action: "edit",
+			record: storedAgent
+		});
+		await editorAgent.update({
+			id: agent.id,
+			modelList: storedModelList
+		});
+	} else {
+		const authorId = getCallerAuthorId(requestContext) ?? void 0;
+		await editorAgent.create({
+			id: agent.id,
+			name: agent.name,
+			authorId,
+			visibility: authorId ? "private" : "public",
+			metadata: scopeStoredResourceMetadata(void 0, scope),
+			modelList: storedModelList
+		});
+	}
+	return true;
+}
 function normalizePublicExecutionOptions(options, serverRequestContext) {
 	if (!options || typeof options !== "object" || Array.isArray(options)) return void 0;
 	const { actor: _actor, scopes: _scopes, requestContext, ...normalized } = options;
@@ -666,6 +712,36 @@ async function getAgentFromSystem({ mastra, agentId, versionOptions, requestCont
 	if (!agent) throw new HTTPException(404, { message: `Agent with id ${agentId} not found` });
 	return agent;
 }
+async function getAgentForModelListMutation({ mastra, agentId, requestContext }) {
+	const publishedAgent = await getAgentFromSystem({
+		mastra,
+		agentId,
+		requestContext,
+		versionOptions: { status: "published" }
+	});
+	const editorConfig = publishedAgent.__getEditorConfig?.();
+	if (editorConfig === false || editorConfig?.model !== true) return publishedAgent;
+	const callerPermissions = requestContext.get(MASTRA_USER_PERMISSIONS_KEY);
+	if (Array.isArray(callerPermissions) && !callerPermissions.some((permission) => typeof permission === "string" ? matchesPermission(permission, "stored-agents:write") : false)) throw new HTTPException(403, { message: "Missing required permission: stored-agents:write" });
+	const storedAgent = await (await mastra.getStorage?.()?.getStore("agents"))?.getById(agentId);
+	if (storedAgent) {
+		assertStoredResourceScope(storedAgent, await getStoredResourceScope(mastra, requestContext));
+		assertWriteAccess({
+			requestContext,
+			resource: "stored-agents",
+			resourceId: agentId,
+			action: "edit",
+			record: storedAgent
+		});
+	}
+	const draftAgent = await getAgentFromSystem({
+		mastra,
+		agentId,
+		requestContext,
+		versionOptions: { status: "draft" }
+	});
+	return draftAgent === publishedAgent ? draftAgent.__fork() : draftAgent;
+}
 async function formatAgent({ mastra, agent, requestContext, isStudio }) {
 	const logger = mastra.getLogger();
 	const description = agent.getDescription();
@@ -2747,16 +2823,24 @@ const REORDER_AGENT_MODEL_LIST_ROUTE = createRoute({
 	description: "Reorders the model list for agents with multiple model configurations",
 	tags: ["Agents", "Models"],
 	requiresAuth: true,
-	handler: async ({ mastra, agentId, reorderedModelIds }) => {
+	handler: async ({ mastra, agentId, reorderedModelIds, requestContext }) => {
 		try {
-			const agent = await getAgentFromSystem({
+			const mutableAgent = await getAgentForModelListMutation({
 				mastra,
-				agentId
+				agentId,
+				requestContext
 			});
-			if (typeof agent.model === "function") throw new HTTPException(409, { message: "Agent model list is dynamic (model is a function) and cannot be edited" });
-			const modelList = await agent.getModelList();
+			if (typeof mutableAgent.model === "function") throw new HTTPException(409, { message: "Agent model list is dynamic (model is a function) and cannot be edited" });
+			const modelList = await mutableAgent.getModelList(requestContext);
 			if (!modelList || modelList.length === 0) throw new HTTPException(400, { message: "Agent model list is not found or empty" });
-			if (agent.reorderModels(reorderedModelIds) === false) throw new HTTPException(400, { message: "Agent model list could not be reordered" });
+			if (mutableAgent.reorderModels(reorderedModelIds) === false) throw new HTTPException(400, { message: "Agent model list could not be reordered" });
+			const reorderedModelList = await mutableAgent.getModelList(requestContext);
+			if (reorderedModelList) await persistEditorOwnedModelList({
+				mastra,
+				agent: mutableAgent,
+				modelList: reorderedModelList,
+				requestContext
+			});
 			return { message: "Model list reordered" };
 		} catch (error) {
 			return handleError(error, "error reordering model list");
@@ -2774,14 +2858,15 @@ const UPDATE_AGENT_MODEL_IN_MODEL_LIST_ROUTE = createRoute({
 	description: "Updates a specific model configuration in the agent model list",
 	tags: ["Agents", "Models"],
 	requiresAuth: true,
-	handler: async ({ mastra, agentId, modelConfigId, model: bodyModel, maxRetries, enabled }) => {
+	handler: async ({ mastra, agentId, modelConfigId, model: bodyModel, maxRetries, enabled, requestContext }) => {
 		try {
-			const agent = await getAgentFromSystem({
+			const mutableAgent = await getAgentForModelListMutation({
 				mastra,
-				agentId
+				agentId,
+				requestContext
 			});
-			if (typeof agent.model === "function") throw new HTTPException(409, { message: "Agent model list is dynamic (model is a function) and cannot be edited" });
-			const modelList = await agent.getModelList();
+			if (typeof mutableAgent.model === "function") throw new HTTPException(409, { message: "Agent model list is dynamic (model is a function) and cannot be edited" });
+			const modelList = await mutableAgent.getModelList(requestContext);
 			if (!modelList || modelList.length === 0) throw new HTTPException(400, { message: "Agent model list is not found or empty" });
 			const modelConfig = modelList.find((config) => config.id === modelConfigId);
 			if (!modelConfig) throw new HTTPException(404, { message: `Model config with id ${modelConfigId} not found` });
@@ -2792,7 +2877,14 @@ const UPDATE_AGENT_MODEL_IN_MODEL_LIST_ROUTE = createRoute({
 				...maxRetries !== void 0 ? { maxRetries } : {},
 				...enabled !== void 0 ? { enabled } : {}
 			};
-			if (agent.updateModelInModelList(updated) === false) throw new HTTPException(404, { message: `Model config with id ${modelConfigId} not found` });
+			if (mutableAgent.updateModelInModelList(updated) === false) throw new HTTPException(404, { message: `Model config with id ${modelConfigId} not found` });
+			const updatedModelList = await mutableAgent.getModelList(requestContext);
+			if (updatedModelList) await persistEditorOwnedModelList({
+				mastra,
+				agent: mutableAgent,
+				modelList: updatedModelList,
+				requestContext
+			});
 			return { message: "Model updated in model list" };
 		} catch (error) {
 			return handleError(error, "error updating model in model list");
@@ -2983,4 +3075,4 @@ const GET_AGENT_SKILL_ROUTE = createRoute({
 });
 export { SEND_TOOL_APPROVAL_ROUTE as A, UPDATE_AGENT_MODEL_IN_MODEL_LIST_ROUTE as B, RECOVER_ROUTE as C, RESUME_STREAM_UNTIL_IDLE_ROUTE as D, RESUME_STREAM_ROUTE as E, STREAM_UI_MESSAGE_DEPRECATED_ROUTE as F, getAgentFromSystem as G, agents_exports as H, STREAM_UI_MESSAGE_VNEXT_DEPRECATED_ROUTE as I, getSerializedProcessors as J, getBrowserToolsFromAgent as K, STREAM_UNTIL_IDLE_GENERATE_ROUTE as L, STREAM_GENERATE_ROUTE as M, STREAM_GENERATE_VNEXT_DEPRECATED_ROUTE as N, SEND_AGENT_MESSAGE_ROUTE as O, STREAM_NETWORK_ROUTE as P, STREAM_VNEXT_DEPRECATED_ROUTE as R, QUEUE_AGENT_SIGNAL_ROUTE as S, RESET_AGENT_MODEL_ROUTE as T, buildProvidersList as U, UPDATE_AGENT_MODEL_ROUTE as V, extractVersionOptions as W, getWorkspaceToolsFromAgent as X, getSerializedSkillsFromAgent as Y, isProviderConnected as Z, GET_PROVIDERS_ROUTE as _, APPROVE_TOOL_CALL_ROUTE as a, OBSERVE_AGENT_STREAM_ROUTE as b, DECLINE_NETWORK_TOOL_CALL_ROUTE as c, ENHANCE_INSTRUCTIONS_ROUTE as d, GENERATE_AGENT_ROUTE as f, GET_AGENT_SKILL_ROUTE as g, GET_AGENT_BY_ID_ROUTE as h, APPROVE_TOOL_CALL_GENERATE_ROUTE as i, STREAM_GENERATE_LEGACY_ROUTE as j, SEND_AGENT_SIGNAL_ROUTE as k, DECLINE_TOOL_CALL_GENERATE_ROUTE as l, GENERATE_LEGACY_ROUTE as m, ABORT_AGENT_THREAD_ROUTE as n, CANCEL_AGENT_PENDING_SIGNALS_ROUTE as o, GENERATE_AGENT_VNEXT_ROUTE as p, getSerializedAgentTools as q, APPROVE_NETWORK_TOOL_CALL_ROUTE as r, CLONE_AGENT_ROUTE as s, ABORT_AGENT_RUN_ROUTE as t, DECLINE_TOOL_CALL_ROUTE as u, LIST_AGENTS_ROUTE as v, REORDER_AGENT_MODEL_LIST_ROUTE as w, QUEUE_AGENT_MESSAGE_ROUTE as x, LIST_SUSPENDED_RUNS_ROUTE as y, SUBSCRIBE_AGENT_THREAD_ROUTE as z };
 
-//# sourceMappingURL=agents-NRBk4JAs.js.map
+//# sourceMappingURL=agents-DPvMjiDf.js.map