Compile a connector: a real Mastra createTool() call whose execute is
wrapped with the manifest's enforcement. requiresApproval (and the org
write policy) compile to Mastra's native requireApproval so agent runs
pause for approval before execute — but enforcement is the wrapper's
grant check, on every caller: an agent-shaped context is forwardable into
nested and direct calls, and the native approval outcome is not
observable at execute time, so approving a call means minting the grant
(APPROVED_CONNECTORS_CONTEXT_KEY) into the requestContext the resumed
call executes under.
Compile a connector: a real Mastra createTool() call whose execute is wrapped with the manifest's enforcement.
requiresApproval(and the org write policy) compile to Mastra's nativerequireApprovalso agent runs pause for approval before execute — but enforcement is the wrapper's grant check, on every caller: an agent-shaped context is forwardable into nested and direct calls, and the native approval outcome is not observable at execute time, so approving a call means minting the grant (APPROVED_CONNECTORS_CONTEXT_KEY) into the requestContext the resumed call executes under.