Sourced from @​mastra/memory's releases.

March 4, 2026

Highlights

Major Workspace & Sandbox upgrades (token-aware output, mounts, process control, LSP resolution)

Workspaces get significant capabilities: workspace tool output is now token-limited, ANSI-stripped for model context, and .gitignore-aware to reduce token usage. Sandbox commands support abortSignal for cancellation, plus background process streaming callbacks (onStdout/onStderr/onExit), and local symlink mounts in LocalSandbox. Tools can be exposed under custom names via WorkspaceToolConfig.name. LSP binary resolution is now configurable (binaryOverrides, searchPaths, packageRunner), making workspace diagnostics work reliably across monorepos, global installs, and custom setups.

End-to-end Auth + RBAC across Server, Studio, and Providers

Mastra now ships a pluggable auth system (@mastra/core/auth) plus server-side auth routes and convention-based route permission enforcement (@mastra/server + all server adapters). New auth provider packages (@mastra/auth-cloud, @mastra/auth-studio, @mastra/auth-workos) add OAuth/SSO, session management, and RBAC—Studio UI also gains permission-gated auth screens/components.

Workflow execution path tracking + concurrent-safe workflow snapshot updates

Workflow results now include stepExecutionPath (also available mid-execution and preserved across resume/restart), and execution logs are smaller by deduping payloads. Storage backends add atomic updateWorkflowResults/updateWorkflowState with a supportsConcurrentUpdates() check—enabling safer concurrent workflow updates (supported in e.g. Postgres/LibSQL/MongoDB/DynamoDB/Upstash; explicitly not supported in some backends like ClickHouse/Cloudflare/Lance).

Breaking Changes

• harness.sendMessage() now uses files instead of images (supports any file type, preserves filenames, and auto-decodes text-based files).

Changelog

@​mastra/core@​1.9.0

Minor Changes

• Added onStepFinish and onError callbacks to NetworkOptions, allowing per-LLM-step progress monitoring and custom error handling during network execution. Closes #13362. (#13370)

  Before: No way to observe per-step progress or handle errors during network execution.

  const stream = await agent.network('Research AI trends', {
    memory: { thread: 'my-thread', resource: 'my-resource' },
  });

  After: onStepFinish and onError are now available in NetworkOptions.

  const stream = await agent.network('Research AI trends', {
    onStepFinish: event => {
      console.log('Step completed:', event.finishReason, event.usage);
    },
    onError: ({ error }) => {
      console.error('Network error:', error);
    },
    memory: { thread: 'my-thread', resource: 'my-resource' },
  });

• Add workflow execution path tracking and optimize execution logs (#11755)

  Workflow results now include a stepExecutionPath array showing the IDs of each step that executed during a workflow run. You can use this to understand exactly which path your workflow took.

... (truncated)

Sourced from @​mastra/memory's changelog.

1.9.0

Minor Changes

• Added experimental retrieval-mode recall tooling for observational memory. (#14437)

  When observationalMemory.retrieval is enabled with scope: 'thread', observation groups store colon-delimited message ranges (startId:endId) pointing back to the raw messages they were derived from. A recall tool is registered that lets agents retrieve those source messages via cursor-based pagination.

  The recall tool supports:

  • Detail levels: detail: 'low' (default) returns truncated text with part indices; detail: 'high' returns full content clamped to one part per call with continuation hints
  • Part-level fetch: partIndex targets a single message part at full detail
  • Pagination flags: hasNextPage and hasPrevPage in results
  • Token limiting: results are capped at a token budget with truncated and tokenOffset reporting
  • Smart range detection: passing a range as a cursor returns a helpful hint explaining how to extract individual IDs

• Added opt-in Observational Memory thread titles. (#14436)

  When enabled, the Observer suggests a short thread title and updates it as the conversation topic changes. Harness consumers can detect these updates via the new om_thread_title_updated event.

  Example

  const memory = new Memory({
    options: {
      observationalMemory: {
        observation: {
          threadTitle: true,
        },
      },
    },
  });

Patch Changes

• Improved observational memory so completed tasks and answered questions are explicitly tracked and retained, reducing repeated follow-up on resolved topics. (#14419)

• Updated dependencies [cb611a1, da93115, b71bce1, 62d1d3c, 9e1a3ed, 8681ecb, 28d0249, cd7b568, 681ee1c, bb0f09d, a579f7a, 5f7e9d0, d7f14c3, 0efe12a]:

  • @​mastra/core@​1.15.0
  • @​mastra/schema-compat@​1.2.6

1.9.0-alpha.2

Minor Changes

• Added experimental retrieval-mode recall tooling for observational memory. (#14437)

  When observationalMemory.retrieval is enabled with scope: 'thread', observation groups store colon-delimited message ranges (startId:endId) pointing back to the raw messages they were derived from. A recall tool is registered that lets agents retrieve those source messages via cursor-based pagination.

  The recall tool supports:

... (truncated)

• 21f5a3e chore: version - exit prerelease mode
• a79e484 chore: version packages
• da93115 feat(memory): add thread-scoped retrieval for observational memory (#14437)
• b558156 fix(memory): improve LLM test skip logic and recording-aware test infrastruct...
• 98fb86f chore: version packages
• 681ee1c feat: generate thread titles in observer (#14436)
• aa664b2 feat: track completed observational tasks (#14419)
• 6dd73cd chore: version packages
• 2303732 chore: version - exit prerelease mode
• 52715cf chore: version packages (alpha) (#14427)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)