@mastra/code-sdk 1.0.3-alpha.0 → 1.1.0-alpha.2

package/dist/agents/sandbox-filesystem.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/agents/sandbox-filesystem.ts"],"sourcesContent":["/**\n * SandboxFilesystem\n *\n * A `WorkspaceFilesystem` that stores files inside a remote `MastraSandbox`\n * (e.g. a Railway VM) rather than on the server host. File operations are\n * implemented by shelling out through the sandbox's `executeCommand`, so the\n * agent's file tools and command tools share one VM and one view of the repo.\n *\n * Paths are workspace-relative (`/src/foo.ts`) and resolve under the sandbox\n * working directory (`basePath`). A traversal guard rejects any path that\n * escapes the workdir, mirroring `LocalFilesystem`'s contained mode.\n *\n * Reads/writes use base64 over the wire so binary content survives the shell.\n */\n\nimport { posix as posixPath } from 'node:path';\nimport type {\n  CopyOptions,\n  FileContent,\n  FileEntry,\n  FileStat,\n  FilesystemInfo,\n  ListOptions,\n  ProviderStatus,\n  ReadOptions,\n  RemoveOptions,\n  WorkspaceFilesystem,\n  WriteOptions,\n} from '@mastra/core/workspace';\n\n/** Minimal command result shape we depend on. */\nexport interface SandboxCommandResult {\n  exitCode: number;\n  stdout: string;\n  stderr: string;\n}\n\n/** Minimal sandbox surface the filesystem needs. */\nexport interface SandboxExec {\n  readonly id: string;\n  executeCommand(command: string, args?: string[], options?: { timeout?: number }): Promise<SandboxCommandResult>;\n}\n\nexport interface SandboxFilesystemOptions {\n  /** Live sandbox to run commands in. */\n  sandbox: SandboxExec;\n  /** Absolute path inside the sandbox that is the workspace root. */\n  workdir: string;\n  /** Optional stable id; defaults to a sandbox-derived id. */\n  id?: string;\n}\n\n/** Default per-command deadline so a hung sandbox can't block file tools forever. */\nconst COMMAND_TIMEOUT_MS = 30_000;\n\n/** Single-quote a string for safe POSIX shell interpolation. */\nfunction shellQuote(value: string): string {\n  return `'${value.replace(/'/g, `'\\\\''`)}'`;\n}\n\nfunction isFileContentString(content: FileContent): content is string {\n  return typeof content === 'string';\n}\n\nfunction toBuffer(content: FileContent): Buffer {\n  if (isFileContentString(content)) return Buffer.from(content, 'utf8');\n  return Buffer.from(content);\n}\n\nexport class SandboxFilesystem implements WorkspaceFilesystem {\n  readonly id: string;\n  readonly name = 'SandboxFilesystem';\n  readonly provider = 'sandbox';\n  readonly basePath: string;\n  status: ProviderStatus = 'ready';\n\n  private readonly sandbox: SandboxExec;\n\n  constructor(options: SandboxFilesystemOptions) {\n    this.sandbox = options.sandbox;\n    this.basePath = options.workdir;\n    this.id = options.id ?? `sandbox-fs:${options.sandbox.id}`;\n  }\n\n  // ── Path handling ──────────────────────────────────────────────────────\n\n  /**\n   * Resolve a workspace path to an absolute path inside the sandbox, enforcing\n   * that it stays within the workdir.\n   */\n  private resolve(inputPath: string): string {\n    const rel = inputPath.startsWith('/') ? inputPath.slice(1) : inputPath;\n    const resolved = posixPath.normalize(posixPath.join(this.basePath, rel));\n    const root = posixPath.normalize(this.basePath);\n    if (resolved !== root && !resolved.startsWith(`${root}/`)) {\n      throw new Error(`Path escapes workspace root: ${inputPath}`);\n    }\n    return resolved;\n  }\n\n  resolveAbsolutePath(inputPath: string): string | undefined {\n    return this.resolve(inputPath);\n  }\n\n  // ── Command helper ─────────────────────────────────────────────────────\n\n  private async exec(script: string): Promise<SandboxCommandResult> {\n    return this.sandbox.executeCommand('sh', ['-c', script], { timeout: COMMAND_TIMEOUT_MS });\n  }\n\n  /**\n   * Lexical guard catches `..` traversal, but a symlink inside the workdir can\n   * still point outside it. After resolving a path that refers to an existing\n   * entry, verify its realpath is still contained in the workdir.\n   */\n  private async assertContainedRealpath(abs: string, inputPath: string): Promise<void> {\n    const result = await this.exec(`readlink -f -- ${shellQuote(abs)} 2>/dev/null`);\n    const real = result.stdout.trim();\n    // If readlink couldn't resolve (path doesn't exist yet), nothing to check.\n    if (result.exitCode !== 0 || !real) return;\n    const root = posixPath.normalize(this.basePath);\n    if (real !== root && !real.startsWith(`${root}/`)) {\n      throw new Error(`Path escapes workspace root (symlink): ${inputPath}`);\n    }\n  }\n\n  /**\n   * Guard for write destinations. The lexical guard catches `..`, but a symlink\n   * inside the workdir can redirect a write outside it. For an existing target\n   * we check its realpath; for a not-yet-existing target we check the realpath\n   * of its nearest existing ancestor directory, since a symlinked parent is the\n   * escape vector (e.g. `link -> /etc` then writing `link/passwd`).\n   */\n  private async assertContainedDest(abs: string, inputPath: string): Promise<void> {\n    // First check the target itself (covers overwriting an existing symlink).\n    await this.assertContainedRealpath(abs, inputPath);\n    // Then check the parent directory's realpath; readlink -f resolves the\n    // nearest existing ancestor when the leaf doesn't exist yet.\n    const parent = posixPath.dirname(abs);\n    if (parent && parent !== abs) {\n      await this.assertContainedRealpath(parent, inputPath);\n    }\n  }\n\n  private async execOk(script: string, context: string): Promise<SandboxCommandResult> {\n    const result = await this.exec(script);\n    if (result.exitCode !== 0) {\n      throw new Error(`${context} failed (exit ${result.exitCode}): ${result.stderr.trim() || result.stdout.trim()}`);\n    }\n    return result;\n  }\n\n  // ── File operations ────────────────────────────────────────────────────\n\n  async readFile(path: string, options?: ReadOptions): Promise<string | Buffer> {\n    const abs = this.resolve(path);\n    await this.assertContainedRealpath(abs, path);\n    const result = await this.exec(`base64 < ${shellQuote(abs)}`);\n    if (result.exitCode !== 0) {\n      throw new Error(`File not found: ${path}`);\n    }\n    const buffer = Buffer.from(result.stdout.replace(/\\s/g, ''), 'base64');\n    if (options?.encoding) {\n      return buffer.toString(options.encoding);\n    }\n    return buffer;\n  }\n\n  async writeFile(path: string, content: FileContent, options?: WriteOptions): Promise<void> {\n    const abs = this.resolve(path);\n    await this.assertContainedDest(abs, path);\n    const b64 = toBuffer(content).toString('base64');\n    const dir = posixPath.dirname(abs);\n    const mkdir = options?.recursive === false ? '' : `mkdir -p ${shellQuote(dir)} && `;\n    if (options?.overwrite === false) {\n      const exists = await this.exists(path);\n      if (exists) throw new Error(`File already exists: ${path}`);\n    }\n    await this.execOk(`${mkdir}printf %s ${shellQuote(b64)} | base64 -d > ${shellQuote(abs)}`, `writeFile ${path}`);\n  }\n\n  async appendFile(path: string, content: FileContent): Promise<void> {\n    const abs = this.resolve(path);\n    await this.assertContainedDest(abs, path);\n    const b64 = toBuffer(content).toString('base64');\n    await this.execOk(\n      `mkdir -p ${shellQuote(posixPath.dirname(abs))} && printf %s ${shellQuote(b64)} | base64 -d >> ${shellQuote(abs)}`,\n      `appendFile ${path}`,\n    );\n  }\n\n  async deleteFile(path: string, options?: RemoveOptions): Promise<void> {\n    const abs = this.resolve(path);\n    const force = options?.force ? '-f ' : '';\n    const result = await this.exec(`rm ${force}${shellQuote(abs)}`);\n    if (result.exitCode !== 0 && !options?.force) {\n      throw new Error(`File not found: ${path}`);\n    }\n  }\n\n  async copyFile(src: string, dest: string, options?: CopyOptions): Promise<void> {\n    const srcAbs = this.resolve(src);\n    const destAbs = this.resolve(dest);\n    await this.assertContainedRealpath(srcAbs, src);\n    await this.assertContainedDest(destAbs, dest);\n    const recursive = options?.recursive ? '-r ' : '';\n    if (options?.overwrite === false) {\n      const exists = await this.exists(dest);\n      if (exists) throw new Error(`Destination exists: ${dest}`);\n    }\n    await this.execOk(`cp ${recursive}${shellQuote(srcAbs)} ${shellQuote(destAbs)}`, `copyFile ${src} -> ${dest}`);\n  }\n\n  async moveFile(src: string, dest: string, options?: CopyOptions): Promise<void> {\n    const srcAbs = this.resolve(src);\n    const destAbs = this.resolve(dest);\n    await this.assertContainedRealpath(srcAbs, src);\n    await this.assertContainedDest(destAbs, dest);\n    if (options?.overwrite === false) {\n      const exists = await this.exists(dest);\n      if (exists) throw new Error(`Destination exists: ${dest}`);\n    }\n    await this.execOk(`mv ${shellQuote(srcAbs)} ${shellQuote(destAbs)}`, `moveFile ${src} -> ${dest}`);\n  }\n\n  // ── Directory operations ───────────────────────────────────────────────\n\n  async mkdir(path: string, options?: { recursive?: boolean }): Promise<void> {\n    const abs = this.resolve(path);\n    await this.assertContainedDest(abs, path);\n    const flag = options?.recursive === false ? '' : '-p ';\n    await this.execOk(`mkdir ${flag}${shellQuote(abs)}`, `mkdir ${path}`);\n  }\n\n  async rmdir(path: string, options?: RemoveOptions): Promise<void> {\n    const abs = this.resolve(path);\n    if (options?.recursive) {\n      const force = options?.force ? '-f ' : '';\n      await this.execOk(`rm -r ${force}${shellQuote(abs)}`, `rmdir ${path}`);\n      return;\n    }\n    const result = await this.exec(`rmdir ${shellQuote(abs)}`);\n    if (result.exitCode !== 0 && !options?.force) {\n      throw new Error(`Directory not empty or not found: ${path}`);\n    }\n  }\n\n  async readdir(path: string, options?: ListOptions): Promise<FileEntry[]> {\n    const abs = this.resolve(path);\n    await this.assertContainedRealpath(abs, path);\n    if (options?.recursive) {\n      // Use find for recursive listings; emit \"type\\tpath\".\n      const result = await this.exec(\n        `find ${shellQuote(abs)} -mindepth 1 ${options.maxDepth ? `-maxdepth ${Number(options.maxDepth)} ` : ''}-printf '%y\\\\t%p\\\\n' 2>/dev/null`,\n      );\n      if (result.exitCode !== 0) throw new Error(`Directory not found: ${path}`);\n      return this.parseFindOutput(result.stdout, abs, options);\n    }\n    // Non-recursive: list with name + type via a portable loop.\n    const result = await this.exec(\n      `cd ${shellQuote(abs)} 2>/dev/null && for f in * .[!.]*; do [ -e \"$f\" ] || continue; if [ -d \"$f\" ]; then echo \"d\\t$f\"; else echo \"f\\t$f\"; fi; done`,\n    );\n    if (result.exitCode !== 0) throw new Error(`Directory not found: ${path}`);\n    return this.parseListOutput(result.stdout, options);\n  }\n\n  private parseListOutput(stdout: string, options?: ListOptions): FileEntry[] {\n    const entries: FileEntry[] = [];\n    for (const line of stdout.split('\\n')) {\n      if (!line) continue;\n      const tab = line.indexOf('\\t');\n      if (tab < 0) continue;\n      const type = line.slice(0, tab) === 'd' ? 'directory' : 'file';\n      const name = line.slice(tab + 1);\n      if (!name || name === '.' || name === '..') continue;\n      if (type === 'file' && !this.matchesExtension(name, options?.extension)) continue;\n      entries.push({ name, type });\n    }\n    return entries;\n  }\n\n  private parseFindOutput(stdout: string, base: string, options?: ListOptions): FileEntry[] {\n    const entries: FileEntry[] = [];\n    for (const line of stdout.split('\\n')) {\n      if (!line) continue;\n      const tab = line.indexOf('\\t');\n      if (tab < 0) continue;\n      const type = line.slice(0, tab) === 'd' ? 'directory' : 'file';\n      const fullPath = line.slice(tab + 1);\n      const name = posixPath.relative(base, fullPath);\n      if (!name) continue;\n      if (type === 'file' && !this.matchesExtension(name, options?.extension)) continue;\n      entries.push({ name, type });\n    }\n    return entries;\n  }\n\n  private matchesExtension(name: string, extension?: string | string[]): boolean {\n    if (!extension) return true;\n    const exts = Array.isArray(extension) ? extension : [extension];\n    return exts.some(ext => name.endsWith(ext));\n  }\n\n  // ── Path / metadata ────────────────────────────────────────────────────\n\n  async exists(path: string): Promise<boolean> {\n    const abs = this.resolve(path);\n    const result = await this.exec(`test -e ${shellQuote(abs)}`);\n    return result.exitCode === 0;\n  }\n\n  async stat(path: string): Promise<FileStat> {\n    const abs = this.resolve(path);\n    await this.assertContainedRealpath(abs, path);\n    // %F=type, %s=size, %X=atime, %Y=mtime (epoch seconds), %W=birth (or -1).\n    const result = await this.exec(`stat -c '%F\\\\t%s\\\\t%Y\\\\t%W' ${shellQuote(abs)}`);\n    if (result.exitCode !== 0) {\n      throw new Error(`Path not found: ${path}`);\n    }\n    const [kind, sizeStr, mtimeStr, ctimeStr] = result.stdout.trim().split('\\t');\n    const type = kind && kind.includes('directory') ? 'directory' : 'file';\n    const size = Number(sizeStr) || 0;\n    const mtime = Number(mtimeStr) || 0;\n    const ctime = Number(ctimeStr);\n    return {\n      name: posixPath.basename(abs),\n      path: `/${posixPath.relative(this.basePath, abs)}`,\n      type,\n      size: type === 'directory' ? 0 : size,\n      modifiedAt: new Date(mtime * 1000),\n      createdAt: new Date((ctime > 0 ? ctime : mtime) * 1000),\n    };\n  }\n\n  // ── Lifecycle ──────────────────────────────────────────────────────────\n\n  async init(): Promise<void> {\n    await this.execOk(`mkdir -p ${shellQuote(this.basePath)}`, 'init workdir');\n  }\n\n  async destroy(): Promise<void> {\n    // The sandbox lifecycle is owned by the caller; nothing to tear down here.\n  }\n\n  async isReady(): Promise<boolean> {\n    const result = await this.exec(`test -d ${shellQuote(this.basePath)}`);\n    return result.exitCode === 0;\n  }\n\n  getInfo(): FilesystemInfo {\n    return {\n      id: this.id,\n      name: this.name,\n      provider: this.provider,\n      metadata: { basePath: this.basePath, sandboxId: this.sandbox.id },\n    };\n  }\n\n  getInstructions(): string {\n    return `Files are stored in a remote sandbox at ${this.basePath}. Use absolute workspace paths like /src/index.ts. All reads, writes and commands run inside the same sandbox.`;\n  }\n}\n"],"mappings":"AAeA,SAAS,SAAS,iBAAiB;AAsCnC,MAAM,qBAAqB;AAG3B,SAAS,WAAW,OAAuB;AACzC,SAAO,IAAI,MAAM,QAAQ,MAAM,OAAO,CAAC;AACzC;AAEA,SAAS,oBAAoB,SAAyC;AACpE,SAAO,OAAO,YAAY;AAC5B;AAEA,SAAS,SAAS,SAA8B;AAC9C,MAAI,oBAAoB,OAAO,EAAG,QAAO,OAAO,KAAK,SAAS,MAAM;AACpE,SAAO,OAAO,KAAK,OAAO;AAC5B;AAEO,MAAM,kBAAiD;AAAA,EACnD;AAAA,EACA,OAAO;AAAA,EACP,WAAW;AAAA,EACX;AAAA,EACT,SAAyB;AAAA,EAER;AAAA,EAEjB,YAAY,SAAmC;AAC7C,SAAK,UAAU,QAAQ;AACvB,SAAK,WAAW,QAAQ;AACxB,SAAK,KAAK,QAAQ,MAAM,cAAc,QAAQ,QAAQ,EAAE;AAAA,EAC1D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,QAAQ,WAA2B;AACzC,UAAM,MAAM,UAAU,WAAW,GAAG,IAAI,UAAU,MAAM,CAAC,IAAI;AAC7D,UAAM,WAAW,UAAU,UAAU,UAAU,KAAK,KAAK,UAAU,GAAG,CAAC;AACvE,UAAM,OAAO,UAAU,UAAU,KAAK,QAAQ;AAC9C,QAAI,aAAa,QAAQ,CAAC,SAAS,WAAW,GAAG,IAAI,GAAG,GAAG;AACzD,YAAM,IAAI,MAAM,gCAAgC,SAAS,EAAE;AAAA,IAC7D;AACA,WAAO;AAAA,EACT;AAAA,EAEA,oBAAoB,WAAuC;AACzD,WAAO,KAAK,QAAQ,SAAS;AAAA,EAC/B;AAAA;AAAA,EAIA,MAAc,KAAK,QAA+C;AAChE,WAAO,KAAK,QAAQ,eAAe,MAAM,CAAC,MAAM,MAAM,GAAG,EAAE,SAAS,mBAAmB,CAAC;AAAA,EAC1F;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,wBAAwB,KAAa,WAAkC;AACnF,UAAM,SAAS,MAAM,KAAK,KAAK,kBAAkB,WAAW,GAAG,CAAC,cAAc;AAC9E,UAAM,OAAO,OAAO,OAAO,KAAK;AAEhC,QAAI,OAAO,aAAa,KAAK,CAAC,KAAM;AACpC,UAAM,OAAO,UAAU,UAAU,KAAK,QAAQ;AAC9C,QAAI,SAAS,QAAQ,CAAC,KAAK,WAAW,GAAG,IAAI,GAAG,GAAG;AACjD,YAAM,IAAI,MAAM,0CAA0C,SAAS,EAAE;AAAA,IACvE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAc,oBAAoB,KAAa,WAAkC;AAE/E,UAAM,KAAK,wBAAwB,KAAK,SAAS;AAGjD,UAAM,SAAS,UAAU,QAAQ,GAAG;AACpC,QAAI,UAAU,WAAW,KAAK;AAC5B,YAAM,KAAK,wBAAwB,QAAQ,SAAS;AAAA,IACtD;AAAA,EACF;AAAA,EAEA,MAAc,OAAO,QAAgB,SAAgD;AACnF,UAAM,SAAS,MAAM,KAAK,KAAK,MAAM;AACrC,QAAI,OAAO,aAAa,GAAG;AACzB,YAAM,IAAI,MAAM,GAAG,OAAO,iBAAiB,OAAO,QAAQ,MAAM,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,CAAC,EAAE;AAAA,IAChH;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAIA,MAAM,SAAS,MAAc,SAAiD;AAC5E,UAAM,MAAM,KAAK,QAAQ,IAAI;AAC7B,UAAM,KAAK,wBAAwB,KAAK,IAAI;AAC5C,UAAM,SAAS,MAAM,KAAK,KAAK,YAAY,WAAW,GAAG,CAAC,EAAE;AAC5D,QAAI,OAAO,aAAa,GAAG;AACzB,YAAM,IAAI,MAAM,mBAAmB,IAAI,EAAE;AAAA,IAC3C;AACA,UAAM,SAAS,OAAO,KAAK,OAAO,OAAO,QAAQ,OAAO,EAAE,GAAG,QAAQ;AACrE,QAAI,SAAS,UAAU;AACrB,aAAO,OAAO,SAAS,QAAQ,QAAQ;AAAA,IACzC;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,UAAU,MAAc,SAAsB,SAAuC;AACzF,UAAM,MAAM,KAAK,QAAQ,IAAI;AAC7B,UAAM,KAAK,oBAAoB,KAAK,IAAI;AACxC,UAAM,MAAM,SAAS,OAAO,EAAE,SAAS,QAAQ;AAC/C,UAAM,MAAM,UAAU,QAAQ,GAAG;AACjC,UAAM,QAAQ,SAAS,cAAc,QAAQ,KAAK,YAAY,WAAW,GAAG,CAAC;AAC7E,QAAI,SAAS,cAAc,OAAO;AAChC,YAAM,SAAS,MAAM,KAAK,OAAO,IAAI;AACrC,UAAI,OAAQ,OAAM,IAAI,MAAM,wBAAwB,IAAI,EAAE;AAAA,IAC5D;AACA,UAAM,KAAK,OAAO,GAAG,KAAK,aAAa,WAAW,GAAG,CAAC,kBAAkB,WAAW,GAAG,CAAC,IAAI,aAAa,IAAI,EAAE;AAAA,EAChH;AAAA,EAEA,MAAM,WAAW,MAAc,SAAqC;AAClE,UAAM,MAAM,KAAK,QAAQ,IAAI;AAC7B,UAAM,KAAK,oBAAoB,KAAK,IAAI;AACxC,UAAM,MAAM,SAAS,OAAO,EAAE,SAAS,QAAQ;AAC/C,UAAM,KAAK;AAAA,MACT,YAAY,WAAW,UAAU,QAAQ,GAAG,CAAC,CAAC,iBAAiB,WAAW,GAAG,CAAC,mBAAmB,WAAW,GAAG,CAAC;AAAA,MAChH,cAAc,IAAI;AAAA,IACpB;AAAA,EACF;AAAA,EAEA,MAAM,WAAW,MAAc,SAAwC;AACrE,UAAM,MAAM,KAAK,QAAQ,IAAI;AAC7B,UAAM,QAAQ,SAAS,QAAQ,QAAQ;AACvC,UAAM,SAAS,MAAM,KAAK,KAAK,MAAM,KAAK,GAAG,WAAW,GAAG,CAAC,EAAE;AAC9D,QAAI,OAAO,aAAa,KAAK,CAAC,SAAS,OAAO;AAC5C,YAAM,IAAI,MAAM,mBAAmB,IAAI,EAAE;AAAA,IAC3C;AAAA,EACF;AAAA,EAEA,MAAM,SAAS,KAAa,MAAc,SAAsC;AAC9E,UAAM,SAAS,KAAK,QAAQ,GAAG;AAC/B,UAAM,UAAU,KAAK,QAAQ,IAAI;AACjC,UAAM,KAAK,wBAAwB,QAAQ,GAAG;AAC9C,UAAM,KAAK,oBAAoB,SAAS,IAAI;AAC5C,UAAM,YAAY,SAAS,YAAY,QAAQ;AAC/C,QAAI,SAAS,cAAc,OAAO;AAChC,YAAM,SAAS,MAAM,KAAK,OAAO,IAAI;AACrC,UAAI,OAAQ,OAAM,IAAI,MAAM,uBAAuB,IAAI,EAAE;AAAA,IAC3D;AACA,UAAM,KAAK,OAAO,MAAM,SAAS,GAAG,WAAW,MAAM,CAAC,IAAI,WAAW,OAAO,CAAC,IAAI,YAAY,GAAG,OAAO,IAAI,EAAE;AAAA,EAC/G;AAAA,EAEA,MAAM,SAAS,KAAa,MAAc,SAAsC;AAC9E,UAAM,SAAS,KAAK,QAAQ,GAAG;AAC/B,UAAM,UAAU,KAAK,QAAQ,IAAI;AACjC,UAAM,KAAK,wBAAwB,QAAQ,GAAG;AAC9C,UAAM,KAAK,oBAAoB,SAAS,IAAI;AAC5C,QAAI,SAAS,cAAc,OAAO;AAChC,YAAM,SAAS,MAAM,KAAK,OAAO,IAAI;AACrC,UAAI,OAAQ,OAAM,IAAI,MAAM,uBAAuB,IAAI,EAAE;AAAA,IAC3D;AACA,UAAM,KAAK,OAAO,MAAM,WAAW,MAAM,CAAC,IAAI,WAAW,OAAO,CAAC,IAAI,YAAY,GAAG,OAAO,IAAI,EAAE;AAAA,EACnG;AAAA;AAAA,EAIA,MAAM,MAAM,MAAc,SAAkD;AAC1E,UAAM,MAAM,KAAK,QAAQ,IAAI;AAC7B,UAAM,KAAK,oBAAoB,KAAK,IAAI;AACxC,UAAM,OAAO,SAAS,cAAc,QAAQ,KAAK;AACjD,UAAM,KAAK,OAAO,SAAS,IAAI,GAAG,WAAW,GAAG,CAAC,IAAI,SAAS,IAAI,EAAE;AAAA,EACtE;AAAA,EAEA,MAAM,MAAM,MAAc,SAAwC;AAChE,UAAM,MAAM,KAAK,QAAQ,IAAI;AAC7B,QAAI,SAAS,WAAW;AACtB,YAAM,QAAQ,SAAS,QAAQ,QAAQ;AACvC,YAAM,KAAK,OAAO,SAAS,KAAK,GAAG,WAAW,GAAG,CAAC,IAAI,SAAS,IAAI,EAAE;AACrE;AAAA,IACF;AACA,UAAM,SAAS,MAAM,KAAK,KAAK,SAAS,WAAW,GAAG,CAAC,EAAE;AACzD,QAAI,OAAO,aAAa,KAAK,CAAC,SAAS,OAAO;AAC5C,YAAM,IAAI,MAAM,qCAAqC,IAAI,EAAE;AAAA,IAC7D;AAAA,EACF;AAAA,EAEA,MAAM,QAAQ,MAAc,SAA6C;AACvE,UAAM,MAAM,KAAK,QAAQ,IAAI;AAC7B,UAAM,KAAK,wBAAwB,KAAK,IAAI;AAC5C,QAAI,SAAS,WAAW;AAEtB,YAAMA,UAAS,MAAM,KAAK;AAAA,QACxB,QAAQ,WAAW,GAAG,CAAC,gBAAgB,QAAQ,WAAW,aAAa,OAAO,QAAQ,QAAQ,CAAC,MAAM,EAAE;AAAA,MACzG;AACA,UAAIA,QAAO,aAAa,EAAG,OAAM,IAAI,MAAM,wBAAwB,IAAI,EAAE;AACzE,aAAO,KAAK,gBAAgBA,QAAO,QAAQ,KAAK,OAAO;AAAA,IACzD;AAEA,UAAM,SAAS,MAAM,KAAK;AAAA,MACxB,MAAM,WAAW,GAAG,CAAC;AAAA,IACvB;AACA,QAAI,OAAO,aAAa,EAAG,OAAM,IAAI,MAAM,wBAAwB,IAAI,EAAE;AACzE,WAAO,KAAK,gBAAgB,OAAO,QAAQ,OAAO;AAAA,EACpD;AAAA,EAEQ,gBAAgB,QAAgB,SAAoC;AAC1E,UAAM,UAAuB,CAAC;AAC9B,eAAW,QAAQ,OAAO,MAAM,IAAI,GAAG;AACrC,UAAI,CAAC,KAAM;AACX,YAAM,MAAM,KAAK,QAAQ,GAAI;AAC7B,UAAI,MAAM,EAAG;AACb,YAAM,OAAO,KAAK,MAAM,GAAG,GAAG,MAAM,MAAM,cAAc;AACxD,YAAM,OAAO,KAAK,MAAM,MAAM,CAAC;AAC/B,UAAI,CAAC,QAAQ,SAAS,OAAO,SAAS,KAAM;AAC5C,UAAI,SAAS,UAAU,CAAC,KAAK,iBAAiB,MAAM,SAAS,SAAS,EAAG;AACzE,cAAQ,KAAK,EAAE,MAAM,KAAK,CAAC;AAAA,IAC7B;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,gBAAgB,QAAgB,MAAc,SAAoC;AACxF,UAAM,UAAuB,CAAC;AAC9B,eAAW,QAAQ,OAAO,MAAM,IAAI,GAAG;AACrC,UAAI,CAAC,KAAM;AACX,YAAM,MAAM,KAAK,QAAQ,GAAI;AAC7B,UAAI,MAAM,EAAG;AACb,YAAM,OAAO,KAAK,MAAM,GAAG,GAAG,MAAM,MAAM,cAAc;AACxD,YAAM,WAAW,KAAK,MAAM,MAAM,CAAC;AACnC,YAAM,OAAO,UAAU,SAAS,MAAM,QAAQ;AAC9C,UAAI,CAAC,KAAM;AACX,UAAI,SAAS,UAAU,CAAC,KAAK,iBAAiB,MAAM,SAAS,SAAS,EAAG;AACzE,cAAQ,KAAK,EAAE,MAAM,KAAK,CAAC;AAAA,IAC7B;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,iBAAiB,MAAc,WAAwC;AAC7E,QAAI,CAAC,UAAW,QAAO;AACvB,UAAM,OAAO,MAAM,QAAQ,SAAS,IAAI,YAAY,CAAC,SAAS;AAC9D,WAAO,KAAK,KAAK,SAAO,KAAK,SAAS,GAAG,CAAC;AAAA,EAC5C;AAAA;AAAA,EAIA,MAAM,OAAO,MAAgC;AAC3C,UAAM,MAAM,KAAK,QAAQ,IAAI;AAC7B,UAAM,SAAS,MAAM,KAAK,KAAK,WAAW,WAAW,GAAG,CAAC,EAAE;AAC3D,WAAO,OAAO,aAAa;AAAA,EAC7B;AAAA,EAEA,MAAM,KAAK,MAAiC;AAC1C,UAAM,MAAM,KAAK,QAAQ,IAAI;AAC7B,UAAM,KAAK,wBAAwB,KAAK,IAAI;AAE5C,UAAM,SAAS,MAAM,KAAK,KAAK,+BAA+B,WAAW,GAAG,CAAC,EAAE;AAC/E,QAAI,OAAO,aAAa,GAAG;AACzB,YAAM,IAAI,MAAM,mBAAmB,IAAI,EAAE;AAAA,IAC3C;AACA,UAAM,CAAC,MAAM,SAAS,UAAU,QAAQ,IAAI,OAAO,OAAO,KAAK,EAAE,MAAM,GAAI;AAC3E,UAAM,OAAO,QAAQ,KAAK,SAAS,WAAW,IAAI,cAAc;AAChE,UAAM,OAAO,OAAO,OAAO,KAAK;AAChC,UAAM,QAAQ,OAAO,QAAQ,KAAK;AAClC,UAAM,QAAQ,OAAO,QAAQ;AAC7B,WAAO;AAAA,MACL,MAAM,UAAU,SAAS,GAAG;AAAA,MAC5B,MAAM,IAAI,UAAU,SAAS,KAAK,UAAU,GAAG,CAAC;AAAA,MAChD;AAAA,MACA,MAAM,SAAS,cAAc,IAAI;AAAA,MACjC,YAAY,IAAI,KAAK,QAAQ,GAAI;AAAA,MACjC,WAAW,IAAI,MAAM,QAAQ,IAAI,QAAQ,SAAS,GAAI;AAAA,IACxD;AAAA,EACF;AAAA;AAAA,EAIA,MAAM,OAAsB;AAC1B,UAAM,KAAK,OAAO,YAAY,WAAW,KAAK,QAAQ,CAAC,IAAI,cAAc;AAAA,EAC3E;AAAA,EAEA,MAAM,UAAyB;AAAA,EAE/B;AAAA,EAEA,MAAM,UAA4B;AAChC,UAAM,SAAS,MAAM,KAAK,KAAK,WAAW,WAAW,KAAK,QAAQ,CAAC,EAAE;AACrE,WAAO,OAAO,aAAa;AAAA,EAC7B;AAAA,EAEA,UAA0B;AACxB,WAAO;AAAA,MACL,IAAI,KAAK;AAAA,MACT,MAAM,KAAK;AAAA,MACX,UAAU,KAAK;AAAA,MACf,UAAU,EAAE,UAAU,KAAK,UAAU,WAAW,KAAK,QAAQ,GAAG;AAAA,IAClE;AAAA,EACF;AAAA,EAEA,kBAA0B;AACxB,WAAO,2CAA2C,KAAK,QAAQ;AAAA,EACjE;AACF;","names":["result"]}
+{"version":3,"file":"sandbox-filesystem.js","names":["posixPath"],"sources":["../../src/agents/sandbox-filesystem.ts"],"sourcesContent":["/**\n * SandboxFilesystem\n *\n * A `WorkspaceFilesystem` that stores files inside a remote `MastraSandbox`\n * (e.g. a Railway VM) rather than on the server host. File operations are\n * implemented by shelling out through the sandbox's `executeCommand`, so the\n * agent's file tools and command tools share one VM and one view of the repo.\n *\n * Paths are workspace-relative (`/src/foo.ts`) and resolve under the sandbox\n * working directory (`basePath`). A traversal guard rejects any path that\n * escapes the workdir, mirroring `LocalFilesystem`'s contained mode.\n *\n * Reads/writes use base64 over the wire so binary content survives the shell.\n */\n\nimport { posix as posixPath } from 'node:path';\nimport type {\n  CopyOptions,\n  FileContent,\n  FileEntry,\n  FileStat,\n  FilesystemInfo,\n  ListOptions,\n  ProviderStatus,\n  ReadOptions,\n  RemoveOptions,\n  WorkspaceFilesystem,\n  WriteOptions,\n} from '@mastra/core/workspace';\n\n/** Minimal command result shape we depend on. */\nexport interface SandboxCommandResult {\n  exitCode: number;\n  stdout: string;\n  stderr: string;\n}\n\n/** Minimal sandbox surface the filesystem needs. */\nexport interface SandboxExec {\n  readonly id: string;\n  executeCommand(command: string, args?: string[], options?: { timeout?: number }): Promise<SandboxCommandResult>;\n}\n\nexport interface SandboxFilesystemOptions {\n  /** Live sandbox to run commands in. */\n  sandbox: SandboxExec;\n  /** Absolute path inside the sandbox that is the workspace root. */\n  workdir: string;\n  /** Optional stable id; defaults to a sandbox-derived id. */\n  id?: string;\n}\n\n/** Default per-command deadline so a hung sandbox can't block file tools forever. */\nconst COMMAND_TIMEOUT_MS = 30_000;\n\n/** Single-quote a string for safe POSIX shell interpolation. */\nfunction shellQuote(value: string): string {\n  return `'${value.replace(/'/g, `'\\\\''`)}'`;\n}\n\nfunction isFileContentString(content: FileContent): content is string {\n  return typeof content === 'string';\n}\n\nfunction toBuffer(content: FileContent): Buffer {\n  if (isFileContentString(content)) return Buffer.from(content, 'utf8');\n  return Buffer.from(content);\n}\n\nexport class SandboxFilesystem implements WorkspaceFilesystem {\n  readonly id: string;\n  readonly name = 'SandboxFilesystem';\n  readonly provider = 'sandbox';\n  readonly basePath: string;\n  status: ProviderStatus = 'ready';\n\n  private readonly sandbox: SandboxExec;\n\n  constructor(options: SandboxFilesystemOptions) {\n    this.sandbox = options.sandbox;\n    this.basePath = options.workdir;\n    this.id = options.id ?? `sandbox-fs:${options.sandbox.id}`;\n  }\n\n  // ── Path handling ──────────────────────────────────────────────────────\n\n  /**\n   * Resolve a workspace path to an absolute path inside the sandbox, enforcing\n   * that it stays within the workdir.\n   */\n  private resolve(inputPath: string): string {\n    const rel = inputPath.startsWith('/') ? inputPath.slice(1) : inputPath;\n    const resolved = posixPath.normalize(posixPath.join(this.basePath, rel));\n    const root = posixPath.normalize(this.basePath);\n    if (resolved !== root && !resolved.startsWith(`${root}/`)) {\n      throw new Error(`Path escapes workspace root: ${inputPath}`);\n    }\n    return resolved;\n  }\n\n  resolveAbsolutePath(inputPath: string): string | undefined {\n    return this.resolve(inputPath);\n  }\n\n  // ── Command helper ─────────────────────────────────────────────────────\n\n  private async exec(script: string): Promise<SandboxCommandResult> {\n    return this.sandbox.executeCommand('sh', ['-c', script], { timeout: COMMAND_TIMEOUT_MS });\n  }\n\n  /**\n   * Lexical guard catches `..` traversal, but a symlink inside the workdir can\n   * still point outside it. After resolving a path that refers to an existing\n   * entry, verify its realpath is still contained in the workdir.\n   */\n  private async assertContainedRealpath(abs: string, inputPath: string): Promise<void> {\n    const result = await this.exec(`readlink -f -- ${shellQuote(abs)} 2>/dev/null`);\n    const real = result.stdout.trim();\n    // If readlink couldn't resolve (path doesn't exist yet), nothing to check.\n    if (result.exitCode !== 0 || !real) return;\n    const root = posixPath.normalize(this.basePath);\n    if (real !== root && !real.startsWith(`${root}/`)) {\n      throw new Error(`Path escapes workspace root (symlink): ${inputPath}`);\n    }\n  }\n\n  /**\n   * Guard for write destinations. The lexical guard catches `..`, but a symlink\n   * inside the workdir can redirect a write outside it. For an existing target\n   * we check its realpath; for a not-yet-existing target we check the realpath\n   * of its nearest existing ancestor directory, since a symlinked parent is the\n   * escape vector (e.g. `link -> /etc` then writing `link/passwd`).\n   */\n  private async assertContainedDest(abs: string, inputPath: string): Promise<void> {\n    // First check the target itself (covers overwriting an existing symlink).\n    await this.assertContainedRealpath(abs, inputPath);\n    // Then check the parent directory's realpath; readlink -f resolves the\n    // nearest existing ancestor when the leaf doesn't exist yet.\n    const parent = posixPath.dirname(abs);\n    if (parent && parent !== abs) {\n      await this.assertContainedRealpath(parent, inputPath);\n    }\n  }\n\n  private async execOk(script: string, context: string): Promise<SandboxCommandResult> {\n    const result = await this.exec(script);\n    if (result.exitCode !== 0) {\n      throw new Error(`${context} failed (exit ${result.exitCode}): ${result.stderr.trim() || result.stdout.trim()}`);\n    }\n    return result;\n  }\n\n  // ── File operations ────────────────────────────────────────────────────\n\n  async readFile(path: string, options?: ReadOptions): Promise<string | Buffer> {\n    const abs = this.resolve(path);\n    await this.assertContainedRealpath(abs, path);\n    const result = await this.exec(`base64 < ${shellQuote(abs)}`);\n    if (result.exitCode !== 0) {\n      throw new Error(`File not found: ${path}`);\n    }\n    const buffer = Buffer.from(result.stdout.replace(/\\s/g, ''), 'base64');\n    if (options?.encoding) {\n      return buffer.toString(options.encoding);\n    }\n    return buffer;\n  }\n\n  async writeFile(path: string, content: FileContent, options?: WriteOptions): Promise<void> {\n    const abs = this.resolve(path);\n    await this.assertContainedDest(abs, path);\n    const b64 = toBuffer(content).toString('base64');\n    const dir = posixPath.dirname(abs);\n    const mkdir = options?.recursive === false ? '' : `mkdir -p ${shellQuote(dir)} && `;\n    if (options?.overwrite === false) {\n      const exists = await this.exists(path);\n      if (exists) throw new Error(`File already exists: ${path}`);\n    }\n    await this.execOk(`${mkdir}printf %s ${shellQuote(b64)} | base64 -d > ${shellQuote(abs)}`, `writeFile ${path}`);\n  }\n\n  async appendFile(path: string, content: FileContent): Promise<void> {\n    const abs = this.resolve(path);\n    await this.assertContainedDest(abs, path);\n    const b64 = toBuffer(content).toString('base64');\n    await this.execOk(\n      `mkdir -p ${shellQuote(posixPath.dirname(abs))} && printf %s ${shellQuote(b64)} | base64 -d >> ${shellQuote(abs)}`,\n      `appendFile ${path}`,\n    );\n  }\n\n  async deleteFile(path: string, options?: RemoveOptions): Promise<void> {\n    const abs = this.resolve(path);\n    const force = options?.force ? '-f ' : '';\n    const result = await this.exec(`rm ${force}${shellQuote(abs)}`);\n    if (result.exitCode !== 0 && !options?.force) {\n      throw new Error(`File not found: ${path}`);\n    }\n  }\n\n  async copyFile(src: string, dest: string, options?: CopyOptions): Promise<void> {\n    const srcAbs = this.resolve(src);\n    const destAbs = this.resolve(dest);\n    await this.assertContainedRealpath(srcAbs, src);\n    await this.assertContainedDest(destAbs, dest);\n    const recursive = options?.recursive ? '-r ' : '';\n    if (options?.overwrite === false) {\n      const exists = await this.exists(dest);\n      if (exists) throw new Error(`Destination exists: ${dest}`);\n    }\n    await this.execOk(`cp ${recursive}${shellQuote(srcAbs)} ${shellQuote(destAbs)}`, `copyFile ${src} -> ${dest}`);\n  }\n\n  async moveFile(src: string, dest: string, options?: CopyOptions): Promise<void> {\n    const srcAbs = this.resolve(src);\n    const destAbs = this.resolve(dest);\n    await this.assertContainedRealpath(srcAbs, src);\n    await this.assertContainedDest(destAbs, dest);\n    if (options?.overwrite === false) {\n      const exists = await this.exists(dest);\n      if (exists) throw new Error(`Destination exists: ${dest}`);\n    }\n    await this.execOk(`mv ${shellQuote(srcAbs)} ${shellQuote(destAbs)}`, `moveFile ${src} -> ${dest}`);\n  }\n\n  // ── Directory operations ───────────────────────────────────────────────\n\n  async mkdir(path: string, options?: { recursive?: boolean }): Promise<void> {\n    const abs = this.resolve(path);\n    await this.assertContainedDest(abs, path);\n    const flag = options?.recursive === false ? '' : '-p ';\n    await this.execOk(`mkdir ${flag}${shellQuote(abs)}`, `mkdir ${path}`);\n  }\n\n  async rmdir(path: string, options?: RemoveOptions): Promise<void> {\n    const abs = this.resolve(path);\n    if (options?.recursive) {\n      const force = options?.force ? '-f ' : '';\n      await this.execOk(`rm -r ${force}${shellQuote(abs)}`, `rmdir ${path}`);\n      return;\n    }\n    const result = await this.exec(`rmdir ${shellQuote(abs)}`);\n    if (result.exitCode !== 0 && !options?.force) {\n      throw new Error(`Directory not empty or not found: ${path}`);\n    }\n  }\n\n  async readdir(path: string, options?: ListOptions): Promise<FileEntry[]> {\n    const abs = this.resolve(path);\n    await this.assertContainedRealpath(abs, path);\n    if (options?.recursive) {\n      // Use find for recursive listings; emit \"type\\tpath\".\n      const result = await this.exec(\n        `find ${shellQuote(abs)} -mindepth 1 ${options.maxDepth ? `-maxdepth ${Number(options.maxDepth)} ` : ''}-printf '%y\\\\t%p\\\\n' 2>/dev/null`,\n      );\n      if (result.exitCode !== 0) throw new Error(`Directory not found: ${path}`);\n      return this.parseFindOutput(result.stdout, abs, options);\n    }\n    // Non-recursive: list with name + type via a portable loop.\n    const result = await this.exec(\n      `cd ${shellQuote(abs)} 2>/dev/null && for f in * .[!.]*; do [ -e \"$f\" ] || continue; if [ -d \"$f\" ]; then echo \"d\\t$f\"; else echo \"f\\t$f\"; fi; done`,\n    );\n    if (result.exitCode !== 0) throw new Error(`Directory not found: ${path}`);\n    return this.parseListOutput(result.stdout, options);\n  }\n\n  private parseListOutput(stdout: string, options?: ListOptions): FileEntry[] {\n    const entries: FileEntry[] = [];\n    for (const line of stdout.split('\\n')) {\n      if (!line) continue;\n      const tab = line.indexOf('\\t');\n      if (tab < 0) continue;\n      const type = line.slice(0, tab) === 'd' ? 'directory' : 'file';\n      const name = line.slice(tab + 1);\n      if (!name || name === '.' || name === '..') continue;\n      if (type === 'file' && !this.matchesExtension(name, options?.extension)) continue;\n      entries.push({ name, type });\n    }\n    return entries;\n  }\n\n  private parseFindOutput(stdout: string, base: string, options?: ListOptions): FileEntry[] {\n    const entries: FileEntry[] = [];\n    for (const line of stdout.split('\\n')) {\n      if (!line) continue;\n      const tab = line.indexOf('\\t');\n      if (tab < 0) continue;\n      const type = line.slice(0, tab) === 'd' ? 'directory' : 'file';\n      const fullPath = line.slice(tab + 1);\n      const name = posixPath.relative(base, fullPath);\n      if (!name) continue;\n      if (type === 'file' && !this.matchesExtension(name, options?.extension)) continue;\n      entries.push({ name, type });\n    }\n    return entries;\n  }\n\n  private matchesExtension(name: string, extension?: string | string[]): boolean {\n    if (!extension) return true;\n    const exts = Array.isArray(extension) ? extension : [extension];\n    return exts.some(ext => name.endsWith(ext));\n  }\n\n  // ── Path / metadata ────────────────────────────────────────────────────\n\n  async exists(path: string): Promise<boolean> {\n    const abs = this.resolve(path);\n    const result = await this.exec(`test -e ${shellQuote(abs)}`);\n    return result.exitCode === 0;\n  }\n\n  async stat(path: string): Promise<FileStat> {\n    const abs = this.resolve(path);\n    await this.assertContainedRealpath(abs, path);\n    // %F=type, %s=size, %X=atime, %Y=mtime (epoch seconds), %W=birth (or -1).\n    const result = await this.exec(`stat -c '%F\\\\t%s\\\\t%Y\\\\t%W' ${shellQuote(abs)}`);\n    if (result.exitCode !== 0) {\n      throw new Error(`Path not found: ${path}`);\n    }\n    const [kind, sizeStr, mtimeStr, ctimeStr] = result.stdout.trim().split('\\t');\n    const type = kind && kind.includes('directory') ? 'directory' : 'file';\n    const size = Number(sizeStr) || 0;\n    const mtime = Number(mtimeStr) || 0;\n    const ctime = Number(ctimeStr);\n    return {\n      name: posixPath.basename(abs),\n      path: `/${posixPath.relative(this.basePath, abs)}`,\n      type,\n      size: type === 'directory' ? 0 : size,\n      modifiedAt: new Date(mtime * 1000),\n      createdAt: new Date((ctime > 0 ? ctime : mtime) * 1000),\n    };\n  }\n\n  // ── Lifecycle ──────────────────────────────────────────────────────────\n\n  async init(): Promise<void> {\n    await this.execOk(`mkdir -p ${shellQuote(this.basePath)}`, 'init workdir');\n  }\n\n  async destroy(): Promise<void> {\n    // The sandbox lifecycle is owned by the caller; nothing to tear down here.\n  }\n\n  async isReady(): Promise<boolean> {\n    const result = await this.exec(`test -d ${shellQuote(this.basePath)}`);\n    return result.exitCode === 0;\n  }\n\n  getInfo(): FilesystemInfo {\n    return {\n      id: this.id,\n      name: this.name,\n      provider: this.provider,\n      metadata: { basePath: this.basePath, sandboxId: this.sandbox.id },\n    };\n  }\n\n  getInstructions(): string {\n    return `Files are stored in a remote sandbox at ${this.basePath}. Use absolute workspace paths like /src/index.ts. All reads, writes and commands run inside the same sandbox.`;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAqDA,MAAM,qBAAqB;;AAG3B,SAAS,WAAW,OAAuB;CACzC,OAAO,IAAI,MAAM,QAAQ,MAAM,OAAO,EAAE;AAC1C;AAEA,SAAS,oBAAoB,SAAyC;CACpE,OAAO,OAAO,YAAY;AAC5B;AAEA,SAAS,SAAS,SAA8B;CAC9C,IAAI,oBAAoB,OAAO,GAAG,OAAO,OAAO,KAAK,SAAS,MAAM;CACpE,OAAO,OAAO,KAAK,OAAO;AAC5B;AAEA,IAAa,oBAAb,MAA8D;CAC5D;CACA,OAAgB;CAChB,WAAoB;CACpB;CACA,SAAyB;CAEzB;CAEA,YAAY,SAAmC;EAC7C,KAAK,UAAU,QAAQ;EACvB,KAAK,WAAW,QAAQ;EACxB,KAAK,KAAK,QAAQ,MAAM,cAAc,QAAQ,QAAQ;CACxD;;;;;CAQA,QAAgB,WAA2B;EACzC,MAAM,MAAM,UAAU,WAAW,GAAG,IAAI,UAAU,MAAM,CAAC,IAAI;EAC7D,MAAM,WAAWA,MAAU,UAAUA,MAAU,KAAK,KAAK,UAAU,GAAG,CAAC;EACvE,MAAM,OAAOA,MAAU,UAAU,KAAK,QAAQ;EAC9C,IAAI,aAAa,QAAQ,CAAC,SAAS,WAAW,GAAG,KAAK,EAAE,GACtD,MAAM,IAAI,MAAM,gCAAgC,WAAW;EAE7D,OAAO;CACT;CAEA,oBAAoB,WAAuC;EACzD,OAAO,KAAK,QAAQ,SAAS;CAC/B;CAIA,MAAc,KAAK,QAA+C;EAChE,OAAO,KAAK,QAAQ,eAAe,MAAM,CAAC,MAAM,MAAM,GAAG,EAAE,SAAS,mBAAmB,CAAC;CAC1F;;;;;;CAOA,MAAc,wBAAwB,KAAa,WAAkC;EACnF,MAAM,SAAS,MAAM,KAAK,KAAK,kBAAkB,WAAW,GAAG,EAAE,aAAa;EAC9E,MAAM,OAAO,OAAO,OAAO,KAAK;EAEhC,IAAI,OAAO,aAAa,KAAK,CAAC,MAAM;EACpC,MAAM,OAAOA,MAAU,UAAU,KAAK,QAAQ;EAC9C,IAAI,SAAS,QAAQ,CAAC,KAAK,WAAW,GAAG,KAAK,EAAE,GAC9C,MAAM,IAAI,MAAM,0CAA0C,WAAW;CAEzE;;;;;;;;CASA,MAAc,oBAAoB,KAAa,WAAkC;EAE/E,MAAM,KAAK,wBAAwB,KAAK,SAAS;EAGjD,MAAM,SAASA,MAAU,QAAQ,GAAG;EACpC,IAAI,UAAU,WAAW,KACvB,MAAM,KAAK,wBAAwB,QAAQ,SAAS;CAExD;CAEA,MAAc,OAAO,QAAgB,SAAgD;EACnF,MAAM,SAAS,MAAM,KAAK,KAAK,MAAM;EACrC,IAAI,OAAO,aAAa,GACtB,MAAM,IAAI,MAAM,GAAG,QAAQ,gBAAgB,OAAO,SAAS,KAAK,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,GAAG;EAEhH,OAAO;CACT;CAIA,MAAM,SAAS,MAAc,SAAiD;EAC5E,MAAM,MAAM,KAAK,QAAQ,IAAI;EAC7B,MAAM,KAAK,wBAAwB,KAAK,IAAI;EAC5C,MAAM,SAAS,MAAM,KAAK,KAAK,YAAY,WAAW,GAAG,GAAG;EAC5D,IAAI,OAAO,aAAa,GACtB,MAAM,IAAI,MAAM,mBAAmB,MAAM;EAE3C,MAAM,SAAS,OAAO,KAAK,OAAO,OAAO,QAAQ,OAAO,EAAE,GAAG,QAAQ;EACrE,IAAI,SAAS,UACX,OAAO,OAAO,SAAS,QAAQ,QAAQ;EAEzC,OAAO;CACT;CAEA,MAAM,UAAU,MAAc,SAAsB,SAAuC;EACzF,MAAM,MAAM,KAAK,QAAQ,IAAI;EAC7B,MAAM,KAAK,oBAAoB,KAAK,IAAI;EACxC,MAAM,MAAM,SAAS,OAAO,CAAC,CAAC,SAAS,QAAQ;EAC/C,MAAM,MAAMA,MAAU,QAAQ,GAAG;EACjC,MAAM,QAAQ,SAAS,cAAc,QAAQ,KAAK,YAAY,WAAW,GAAG,EAAE;EAC9E,IAAI,SAAS,cAAc,OAErB;OAAA,MADiB,KAAK,OAAO,IAAI,GACzB,MAAM,IAAI,MAAM,wBAAwB,MAAM;EAAA;EAE5D,MAAM,KAAK,OAAO,GAAG,MAAM,YAAY,WAAW,GAAG,EAAE,iBAAiB,WAAW,GAAG,KAAK,aAAa,MAAM;CAChH;CAEA,MAAM,WAAW,MAAc,SAAqC;EAClE,MAAM,MAAM,KAAK,QAAQ,IAAI;EAC7B,MAAM,KAAK,oBAAoB,KAAK,IAAI;EACxC,MAAM,MAAM,SAAS,OAAO,CAAC,CAAC,SAAS,QAAQ;EAC/C,MAAM,KAAK,OACT,YAAY,WAAWA,MAAU,QAAQ,GAAG,CAAC,EAAE,gBAAgB,WAAW,GAAG,EAAE,kBAAkB,WAAW,GAAG,KAC/G,cAAc,MAChB;CACF;CAEA,MAAM,WAAW,MAAc,SAAwC;EACrE,MAAM,MAAM,KAAK,QAAQ,IAAI;EAC7B,MAAM,QAAQ,SAAS,QAAQ,QAAQ;EAEvC,KAAI,MADiB,KAAK,KAAK,MAAM,QAAQ,WAAW,GAAG,GAAG,EAAA,CACnD,aAAa,KAAK,CAAC,SAAS,OACrC,MAAM,IAAI,MAAM,mBAAmB,MAAM;CAE7C;CAEA,MAAM,SAAS,KAAa,MAAc,SAAsC;EAC9E,MAAM,SAAS,KAAK,QAAQ,GAAG;EAC/B,MAAM,UAAU,KAAK,QAAQ,IAAI;EACjC,MAAM,KAAK,wBAAwB,QAAQ,GAAG;EAC9C,MAAM,KAAK,oBAAoB,SAAS,IAAI;EAC5C,MAAM,YAAY,SAAS,YAAY,QAAQ;EAC/C,IAAI,SAAS,cAAc,OAErB;OAAA,MADiB,KAAK,OAAO,IAAI,GACzB,MAAM,IAAI,MAAM,uBAAuB,MAAM;EAAA;EAE3D,MAAM,KAAK,OAAO,MAAM,YAAY,WAAW,MAAM,EAAE,GAAG,WAAW,OAAO,KAAK,YAAY,IAAI,MAAM,MAAM;CAC/G;CAEA,MAAM,SAAS,KAAa,MAAc,SAAsC;EAC9E,MAAM,SAAS,KAAK,QAAQ,GAAG;EAC/B,MAAM,UAAU,KAAK,QAAQ,IAAI;EACjC,MAAM,KAAK,wBAAwB,QAAQ,GAAG;EAC9C,MAAM,KAAK,oBAAoB,SAAS,IAAI;EAC5C,IAAI,SAAS,cAAc,OAErB;OAAA,MADiB,KAAK,OAAO,IAAI,GACzB,MAAM,IAAI,MAAM,uBAAuB,MAAM;EAAA;EAE3D,MAAM,KAAK,OAAO,MAAM,WAAW,MAAM,EAAE,GAAG,WAAW,OAAO,KAAK,YAAY,IAAI,MAAM,MAAM;CACnG;CAIA,MAAM,MAAM,MAAc,SAAkD;EAC1E,MAAM,MAAM,KAAK,QAAQ,IAAI;EAC7B,MAAM,KAAK,oBAAoB,KAAK,IAAI;EACxC,MAAM,OAAO,SAAS,cAAc,QAAQ,KAAK;EACjD,MAAM,KAAK,OAAO,SAAS,OAAO,WAAW,GAAG,KAAK,SAAS,MAAM;CACtE;CAEA,MAAM,MAAM,MAAc,SAAwC;EAChE,MAAM,MAAM,KAAK,QAAQ,IAAI;EAC7B,IAAI,SAAS,WAAW;GACtB,MAAM,QAAQ,SAAS,QAAQ,QAAQ;GACvC,MAAM,KAAK,OAAO,SAAS,QAAQ,WAAW,GAAG,KAAK,SAAS,MAAM;GACrE;EACF;EAEA,KAAI,MADiB,KAAK,KAAK,SAAS,WAAW,GAAG,GAAG,EAAA,CAC9C,aAAa,KAAK,CAAC,SAAS,OACrC,MAAM,IAAI,MAAM,qCAAqC,MAAM;CAE/D;CAEA,MAAM,QAAQ,MAAc,SAA6C;EACvE,MAAM,MAAM,KAAK,QAAQ,IAAI;EAC7B,MAAM,KAAK,wBAAwB,KAAK,IAAI;EAC5C,IAAI,SAAS,WAAW;GAEtB,MAAM,SAAS,MAAM,KAAK,KACxB,QAAQ,WAAW,GAAG,EAAE,eAAe,QAAQ,WAAW,aAAa,OAAO,QAAQ,QAAQ,EAAE,KAAK,GAAG,iCAC1G;GACA,IAAI,OAAO,aAAa,GAAG,MAAM,IAAI,MAAM,wBAAwB,MAAM;GACzE,OAAO,KAAK,gBAAgB,OAAO,QAAQ,KAAK,OAAO;EACzD;EAEA,MAAM,SAAS,MAAM,KAAK,KACxB,MAAM,WAAW,GAAG,EAAE,8HACxB;EACA,IAAI,OAAO,aAAa,GAAG,MAAM,IAAI,MAAM,wBAAwB,MAAM;EACzE,OAAO,KAAK,gBAAgB,OAAO,QAAQ,OAAO;CACpD;CAEA,gBAAwB,QAAgB,SAAoC;EAC1E,MAAM,UAAuB,CAAC;EAC9B,KAAK,MAAM,QAAQ,OAAO,MAAM,IAAI,GAAG;GACrC,IAAI,CAAC,MAAM;GACX,MAAM,MAAM,KAAK,QAAQ,GAAI;GAC7B,IAAI,MAAM,GAAG;GACb,MAAM,OAAO,KAAK,MAAM,GAAG,GAAG,MAAM,MAAM,cAAc;GACxD,MAAM,OAAO,KAAK,MAAM,MAAM,CAAC;GAC/B,IAAI,CAAC,QAAQ,SAAS,OAAO,SAAS,MAAM;GAC5C,IAAI,SAAS,UAAU,CAAC,KAAK,iBAAiB,MAAM,SAAS,SAAS,GAAG;GACzE,QAAQ,KAAK;IAAE;IAAM;GAAK,CAAC;EAC7B;EACA,OAAO;CACT;CAEA,gBAAwB,QAAgB,MAAc,SAAoC;EACxF,MAAM,UAAuB,CAAC;EAC9B,KAAK,MAAM,QAAQ,OAAO,MAAM,IAAI,GAAG;GACrC,IAAI,CAAC,MAAM;GACX,MAAM,MAAM,KAAK,QAAQ,GAAI;GAC7B,IAAI,MAAM,GAAG;GACb,MAAM,OAAO,KAAK,MAAM,GAAG,GAAG,MAAM,MAAM,cAAc;GACxD,MAAM,WAAW,KAAK,MAAM,MAAM,CAAC;GACnC,MAAM,OAAOA,MAAU,SAAS,MAAM,QAAQ;GAC9C,IAAI,CAAC,MAAM;GACX,IAAI,SAAS,UAAU,CAAC,KAAK,iBAAiB,MAAM,SAAS,SAAS,GAAG;GACzE,QAAQ,KAAK;IAAE;IAAM;GAAK,CAAC;EAC7B;EACA,OAAO;CACT;CAEA,iBAAyB,MAAc,WAAwC;EAC7E,IAAI,CAAC,WAAW,OAAO;EAEvB,QADa,MAAM,QAAQ,SAAS,IAAI,YAAY,CAAC,SAAS,EAAA,CAClD,MAAK,QAAO,KAAK,SAAS,GAAG,CAAC;CAC5C;CAIA,MAAM,OAAO,MAAgC;EAC3C,MAAM,MAAM,KAAK,QAAQ,IAAI;EAE7B,QAAO,MADc,KAAK,KAAK,WAAW,WAAW,GAAG,GAAG,EAAA,CAC7C,aAAa;CAC7B;CAEA,MAAM,KAAK,MAAiC;EAC1C,MAAM,MAAM,KAAK,QAAQ,IAAI;EAC7B,MAAM,KAAK,wBAAwB,KAAK,IAAI;EAE5C,MAAM,SAAS,MAAM,KAAK,KAAK,+BAA+B,WAAW,GAAG,GAAG;EAC/E,IAAI,OAAO,aAAa,GACtB,MAAM,IAAI,MAAM,mBAAmB,MAAM;EAE3C,MAAM,CAAC,MAAM,SAAS,UAAU,YAAY,OAAO,OAAO,KAAK,CAAC,CAAC,MAAM,GAAI;EAC3E,MAAM,OAAO,QAAQ,KAAK,SAAS,WAAW,IAAI,cAAc;EAChE,MAAM,OAAO,OAAO,OAAO,KAAK;EAChC,MAAM,QAAQ,OAAO,QAAQ,KAAK;EAClC,MAAM,QAAQ,OAAO,QAAQ;EAC7B,OAAO;GACL,MAAMA,MAAU,SAAS,GAAG;GAC5B,MAAM,IAAIA,MAAU,SAAS,KAAK,UAAU,GAAG;GAC/C;GACA,MAAM,SAAS,cAAc,IAAI;GACjC,4BAAY,IAAI,KAAK,QAAQ,GAAI;GACjC,2BAAW,IAAI,MAAM,QAAQ,IAAI,QAAQ,SAAS,GAAI;EACxD;CACF;CAIA,MAAM,OAAsB;EAC1B,MAAM,KAAK,OAAO,YAAY,WAAW,KAAK,QAAQ,KAAK,cAAc;CAC3E;CAEA,MAAM,UAAyB,CAE/B;CAEA,MAAM,UAA4B;EAEhC,QAAO,MADc,KAAK,KAAK,WAAW,WAAW,KAAK,QAAQ,GAAG,EAAA,CACvD,aAAa;CAC7B;CAEA,UAA0B;EACxB,OAAO;GACL,IAAI,KAAK;GACT,MAAM,KAAK;GACX,UAAU,KAAK;GACf,UAAU;IAAE,UAAU,KAAK;IAAU,WAAW,KAAK,QAAQ;GAAG;EAClE;CACF;CAEA,kBAA0B;EACxB,OAAO,2CAA2C,KAAK,SAAS;CAClE;AACF"}

package/dist/agents/sandbox-reattach.js

@@ -1,17 +1,15 @@
+//#region src/agents/sandbox-reattach.ts
 let reattachFn;
+/** Register the sandbox reattach implementation (called by the web surface at startup). */
 function registerSandboxReattach(fn) {
-  reattachFn = fn;
+	reattachFn = fn;
 }
+/** Reattach to an already-provisioned sandbox by provider id. */
 async function reattachProjectSandbox(providerSandboxId) {
-  if (!reattachFn) {
-    throw new Error(
-      "No sandbox reattach implementation registered. Sandbox-backed workspaces are only available when the web surface has called registerSandboxReattach()."
-    );
-  }
-  return reattachFn(providerSandboxId);
+	if (!reattachFn) throw new Error("No sandbox reattach implementation registered. Sandbox-backed workspaces are only available when the web surface has called registerSandboxReattach().");
+	return reattachFn(providerSandboxId);
 }
-export {
-  reattachProjectSandbox,
-  registerSandboxReattach
-};
+//#endregion
+export { reattachProjectSandbox, registerSandboxReattach };
+
 //# sourceMappingURL=sandbox-reattach.js.map

package/dist/agents/sandbox-reattach.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/agents/sandbox-reattach.ts"],"sourcesContent":["/**\n * Seam between the core workspace wiring and the web surface's sandbox\n * provisioning. GitHub/cloud-sandbox projects are only reachable through the\n * web tenant server, which owns the sandbox provider factory and its DB-backed\n * bookkeeping. The web package registers its `reattachProjectSandbox`\n * implementation here at startup so `getDynamicWorkspace` can reattach\n * sandboxes without core depending on the web stack.\n */\nimport type { SandboxExec } from './sandbox-filesystem.js';\n\n/** Minimal sandbox surface the workspace seam needs after reattach. */\nexport interface ReattachedSandbox extends SandboxExec {\n  start(): Promise<void>;\n}\n\nexport type SandboxReattachFn = (providerSandboxId: string) => Promise<ReattachedSandbox>;\n\nlet reattachFn: SandboxReattachFn | undefined;\n\n/** Register the sandbox reattach implementation (called by the web surface at startup). */\nexport function registerSandboxReattach(fn: SandboxReattachFn): void {\n  reattachFn = fn;\n}\n\n/** Reattach to an already-provisioned sandbox by provider id. */\nexport async function reattachProjectSandbox(providerSandboxId: string): Promise<ReattachedSandbox> {\n  if (!reattachFn) {\n    throw new Error(\n      'No sandbox reattach implementation registered. Sandbox-backed workspaces are only available when the web surface has called registerSandboxReattach().',\n    );\n  }\n  return reattachFn(providerSandboxId);\n}\n"],"mappings":"AAiBA,IAAI;AAGG,SAAS,wBAAwB,IAA6B;AACnE,eAAa;AACf;AAGA,eAAsB,uBAAuB,mBAAuD;AAClG,MAAI,CAAC,YAAY;AACf,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,SAAO,WAAW,iBAAiB;AACrC;","names":[]}
+{"version":3,"file":"sandbox-reattach.js","names":[],"sources":["../../src/agents/sandbox-reattach.ts"],"sourcesContent":["/**\n * Seam between the core workspace wiring and the web surface's sandbox\n * provisioning. GitHub/cloud-sandbox projects are only reachable through the\n * web tenant server, which owns the sandbox provider factory and its DB-backed\n * bookkeeping. The web package registers its `reattachProjectSandbox`\n * implementation here at startup so `getDynamicWorkspace` can reattach\n * sandboxes without core depending on the web stack.\n */\nimport type { SandboxExec } from './sandbox-filesystem.js';\n\n/** Minimal sandbox surface the workspace seam needs after reattach. */\nexport interface ReattachedSandbox extends SandboxExec {\n  start(): Promise<void>;\n}\n\nexport type SandboxReattachFn = (providerSandboxId: string) => Promise<ReattachedSandbox>;\n\nlet reattachFn: SandboxReattachFn | undefined;\n\n/** Register the sandbox reattach implementation (called by the web surface at startup). */\nexport function registerSandboxReattach(fn: SandboxReattachFn): void {\n  reattachFn = fn;\n}\n\n/** Reattach to an already-provisioned sandbox by provider id. */\nexport async function reattachProjectSandbox(providerSandboxId: string): Promise<ReattachedSandbox> {\n  if (!reattachFn) {\n    throw new Error(\n      'No sandbox reattach implementation registered. Sandbox-backed workspaces are only available when the web surface has called registerSandboxReattach().',\n    );\n  }\n  return reattachFn(providerSandboxId);\n}\n"],"mappings":";AAiBA,IAAI;;AAGJ,SAAgB,wBAAwB,IAA6B;CACnE,aAAa;AACf;;AAGA,eAAsB,uBAAuB,mBAAuD;CAClG,IAAI,CAAC,YACH,MAAM,IAAI,MACR,wJACF;CAEF,OAAO,WAAW,iBAAiB;AACrC"}

package/dist/agents/thread-caveman-state.js

@@ -1,96 +1,107 @@
+//#region src/agents/thread-caveman-state.ts
 const THREAD_STATE_SETTINGS = [
-  {
-    key: "cavemanObservations",
-    isValid: (value) => typeof value === "boolean",
-    seedMissingFromCurrentState: true
-  },
-  {
-    key: "observeAttachments",
-    isValid: (value) => value === "auto" || typeof value === "boolean",
-    seedMissingFromCurrentState: true
-  },
-  {
-    key: "sandboxAllowedPaths",
-    isValid: (value) => Array.isArray(value) && value.every((item) => typeof item === "string"),
-    clearValueWhenMissing: []
-  }
+	{
+		key: "cavemanObservations",
+		isValid: (value) => typeof value === "boolean",
+		seedMissingFromCurrentState: true
+	},
+	{
+		key: "observeAttachments",
+		isValid: (value) => value === "auto" || typeof value === "boolean",
+		seedMissingFromCurrentState: true
+	},
+	{
+		key: "sandboxAllowedPaths",
+		isValid: (value) => Array.isArray(value) && value.every((item) => typeof item === "string"),
+		clearValueWhenMissing: []
+	}
 ];
 function getStateValue(session, setting) {
-  const value = session.state.get()[setting.key];
-  return setting.isValid(value) ? value : void 0;
+	const value = session.state.get()[setting.key];
+	return setting.isValid(value) ? value : void 0;
 }
 function stateValuesEqual(left, right) {
-  if (Array.isArray(left) && Array.isArray(right)) {
-    return left.length === right.length && left.every((item, index) => item === right[index]);
-  }
-  return left === right;
+	if (Array.isArray(left) && Array.isArray(right)) return left.length === right.length && left.every((item, index) => item === right[index]);
+	return left === right;
 }
 async function findThread(session, threadId) {
-  const threads = await session.thread.list({ allResources: true });
-  return threads.find((t) => t.id === threadId);
+	return (await session.thread.list({ allResources: true })).find((t) => t.id === threadId);
 }
+/**
+* Restores MastraCode-owned per-thread state for the given thread:
+* - If the thread already has a valid value in metadata, mirror it into controller state.
+* - Otherwise, persist the current session.state value to the thread so future
+*   sessions see the user's last-selected setting.
+*/
 async function restoreSettingsForThread(session, threadId) {
-  const thread = await findThread(session, threadId);
-  if (session.thread.getId() !== threadId) return;
-  const updates = {};
-  const settingsToSeed = [];
-  for (const setting of THREAD_STATE_SETTINGS) {
-    const persisted = thread?.metadata?.[setting.key];
-    if (setting.isValid(persisted)) {
-      if (getStateValue(session, setting) !== persisted) {
-        updates[setting.key] = persisted;
-      }
-      continue;
-    }
-    if (setting.clearValueWhenMissing !== void 0) {
-      const current = getStateValue(session, setting);
-      if (current !== void 0 && !stateValuesEqual(current, setting.clearValueWhenMissing)) {
-        updates[setting.key] = setting.clearValueWhenMissing;
-      }
-      continue;
-    }
-    if (setting.seedMissingFromCurrentState) {
-      const current = getStateValue(session, setting);
-      if (current !== void 0) {
-        settingsToSeed.push({ key: setting.key, value: current });
-      }
-    }
-  }
-  if (Object.keys(updates).length > 0) {
-    if (session.thread.getId() !== threadId) return;
-    await session.state.set(updates);
-  }
-  for (const setting of settingsToSeed) {
-    if (session.thread.getId() !== threadId) return;
-    await session.thread.setSetting(setting);
-  }
+	const thread = await findThread(session, threadId);
+	if (session.thread.getId() !== threadId) return;
+	const updates = {};
+	const settingsToSeed = [];
+	for (const setting of THREAD_STATE_SETTINGS) {
+		const persisted = thread?.metadata?.[setting.key];
+		if (setting.isValid(persisted)) {
+			if (getStateValue(session, setting) !== persisted) updates[setting.key] = persisted;
+			continue;
+		}
+		if (setting.clearValueWhenMissing !== void 0) {
+			const current = getStateValue(session, setting);
+			if (current !== void 0 && !stateValuesEqual(current, setting.clearValueWhenMissing)) updates[setting.key] = setting.clearValueWhenMissing;
+			continue;
+		}
+		if (setting.seedMissingFromCurrentState) {
+			const current = getStateValue(session, setting);
+			if (current !== void 0) settingsToSeed.push({
+				key: setting.key,
+				value: current
+			});
+		}
+	}
+	if (Object.keys(updates).length > 0) {
+		if (session.thread.getId() !== threadId) return;
+		await session.state.set(updates);
+	}
+	for (const setting of settingsToSeed) {
+		if (session.thread.getId() !== threadId) return;
+		await session.thread.setSetting(setting);
+	}
 }
+/**
+* Wires MastraCode-owned state into controller thread events so it persists
+* per-thread and new threads inherit the most recent value.
+*
+* This is intentionally implemented in mastracode rather than core: these
+* settings are mastracode-specific concepts, so persistence stays scoped to
+* the host.
+*/
 function attachOMThreadStatePersistence(session) {
-  session.subscribe((event) => {
-    if (event.type === "thread_changed" || event.type === "thread_created") {
-      const threadId = event.type === "thread_changed" ? event.threadId : event.thread.id;
-      void restoreSettingsForThread(session, threadId).catch(() => {
-      });
-      return;
-    }
-    if (event.type === "state_changed") {
-      for (const setting of THREAD_STATE_SETTINGS) {
-        if (!event.changedKeys.includes(setting.key)) continue;
-        const value = event.state[setting.key];
-        if (!setting.isValid(value)) continue;
-        void session.thread.setSetting({ key: setting.key, value }).catch(() => {
-        });
-      }
-    }
-  });
+	session.subscribe((event) => {
+		if (event.type === "thread_changed" || event.type === "thread_created") {
+			restoreSettingsForThread(session, event.type === "thread_changed" ? event.threadId : event.thread.id).catch(() => {});
+			return;
+		}
+		if (event.type === "state_changed") for (const setting of THREAD_STATE_SETTINGS) {
+			if (!event.changedKeys.includes(setting.key)) continue;
+			const value = event.state[setting.key];
+			if (!setting.isValid(value)) continue;
+			session.thread.setSetting({
+				key: setting.key,
+				value
+			}).catch(() => {});
+		}
+	});
 }
+/**
+* Eagerly restores MastraCode-owned OM settings for the currently-selected
+* thread. Called once at TUI startup after the initial thread is selected,
+* since the subscription set up later misses the startup `thread_changed` event.
+*/
 async function restoreOMThreadStateForCurrentThread(session) {
-  const threadId = session.thread.getId();
-  if (!threadId) return;
-  await restoreSettingsForThread(session, threadId);
+	const threadId = session.thread.getId();
+	if (!threadId) return;
+	await restoreSettingsForThread(session, threadId);
 }
-export {
-  attachOMThreadStatePersistence,
-  restoreOMThreadStateForCurrentThread
-};
+//#endregion
+export { attachOMThreadStatePersistence, restoreOMThreadStateForCurrentThread };
+
 //# sourceMappingURL=thread-caveman-state.js.map

package/dist/agents/thread-caveman-state.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/agents/thread-caveman-state.ts"],"sourcesContent":["import type { AgentControllerThread, Session } from '@mastra/core/agent-controller';\n\ninterface ThreadStateSetting {\n  key: string;\n  isValid(value: unknown): boolean;\n  seedMissingFromCurrentState?: boolean;\n  clearValueWhenMissing?: unknown;\n}\n\nconst THREAD_STATE_SETTINGS: ThreadStateSetting[] = [\n  {\n    key: 'cavemanObservations',\n    isValid: (value: unknown): value is boolean => typeof value === 'boolean',\n    seedMissingFromCurrentState: true,\n  },\n  {\n    key: 'observeAttachments',\n    isValid: (value: unknown): value is 'auto' | boolean => value === 'auto' || typeof value === 'boolean',\n    seedMissingFromCurrentState: true,\n  },\n  {\n    key: 'sandboxAllowedPaths',\n    isValid: (value: unknown): value is string[] =>\n      Array.isArray(value) && value.every(item => typeof item === 'string'),\n    clearValueWhenMissing: [],\n  },\n];\n\nfunction getStateValue(session: Session<Record<string, unknown>>, setting: ThreadStateSetting): unknown {\n  const value = session.state.get()[setting.key];\n  return setting.isValid(value) ? value : undefined;\n}\n\nfunction stateValuesEqual(left: unknown, right: unknown): boolean {\n  if (Array.isArray(left) && Array.isArray(right)) {\n    return left.length === right.length && left.every((item, index) => item === right[index]);\n  }\n  return left === right;\n}\n\nasync function findThread(\n  session: Session<Record<string, unknown>>,\n  threadId: string,\n): Promise<AgentControllerThread | undefined> {\n  const threads = await session.thread.list({ allResources: true });\n  return threads.find(t => t.id === threadId);\n}\n\n/**\n * Restores MastraCode-owned per-thread state for the given thread:\n * - If the thread already has a valid value in metadata, mirror it into controller state.\n * - Otherwise, persist the current session.state value to the thread so future\n *   sessions see the user's last-selected setting.\n */\nasync function restoreSettingsForThread(session: Session<Record<string, unknown>>, threadId: string): Promise<void> {\n  const thread = await findThread(session, threadId);\n  if (session.thread.getId() !== threadId) return;\n\n  const updates: Record<string, unknown> = {};\n  const settingsToSeed: Array<{ key: string; value: unknown }> = [];\n\n  for (const setting of THREAD_STATE_SETTINGS) {\n    const persisted = thread?.metadata?.[setting.key];\n\n    if (setting.isValid(persisted)) {\n      if (getStateValue(session, setting) !== persisted) {\n        updates[setting.key] = persisted;\n      }\n      continue;\n    }\n\n    if (setting.clearValueWhenMissing !== undefined) {\n      const current = getStateValue(session, setting);\n      if (current !== undefined && !stateValuesEqual(current, setting.clearValueWhenMissing)) {\n        updates[setting.key] = setting.clearValueWhenMissing;\n      }\n      continue;\n    }\n\n    if (setting.seedMissingFromCurrentState) {\n      const current = getStateValue(session, setting);\n      if (current !== undefined) {\n        settingsToSeed.push({ key: setting.key, value: current });\n      }\n    }\n  }\n\n  if (Object.keys(updates).length > 0) {\n    if (session.thread.getId() !== threadId) return;\n    await session.state.set(updates);\n  }\n\n  for (const setting of settingsToSeed) {\n    if (session.thread.getId() !== threadId) return;\n    await session.thread.setSetting(setting);\n  }\n}\n\n/**\n * Wires MastraCode-owned state into controller thread events so it persists\n * per-thread and new threads inherit the most recent value.\n *\n * This is intentionally implemented in mastracode rather than core: these\n * settings are mastracode-specific concepts, so persistence stays scoped to\n * the host.\n */\nexport function attachOMThreadStatePersistence(session: Session<Record<string, unknown>>): void {\n  session.subscribe(event => {\n    if (event.type === 'thread_changed' || event.type === 'thread_created') {\n      const threadId = event.type === 'thread_changed' ? event.threadId : event.thread.id;\n      void restoreSettingsForThread(session, threadId).catch(() => {\n        // Persistence is best-effort; don't crash the TUI if storage hiccups.\n      });\n      return;\n    }\n\n    if (event.type === 'state_changed') {\n      for (const setting of THREAD_STATE_SETTINGS) {\n        if (!event.changedKeys.includes(setting.key)) continue;\n        const value = event.state[setting.key];\n        if (!setting.isValid(value)) continue;\n        void session.thread.setSetting({ key: setting.key, value }).catch(() => {\n          // Persistence is best-effort; don't crash the TUI if storage hiccups.\n        });\n      }\n    }\n  });\n}\n\n/**\n * Eagerly restores MastraCode-owned OM settings for the currently-selected\n * thread. Called once at TUI startup after the initial thread is selected,\n * since the subscription set up later misses the startup `thread_changed` event.\n */\nexport async function restoreOMThreadStateForCurrentThread(session: Session<Record<string, unknown>>): Promise<void> {\n  const threadId = session.thread.getId();\n  if (!threadId) return;\n  await restoreSettingsForThread(session, threadId);\n}\n"],"mappings":"AASA,MAAM,wBAA8C;AAAA,EAClD;AAAA,IACE,KAAK;AAAA,IACL,SAAS,CAAC,UAAqC,OAAO,UAAU;AAAA,IAChE,6BAA6B;AAAA,EAC/B;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,SAAS,CAAC,UAA8C,UAAU,UAAU,OAAO,UAAU;AAAA,IAC7F,6BAA6B;AAAA,EAC/B;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,SAAS,CAAC,UACR,MAAM,QAAQ,KAAK,KAAK,MAAM,MAAM,UAAQ,OAAO,SAAS,QAAQ;AAAA,IACtE,uBAAuB,CAAC;AAAA,EAC1B;AACF;AAEA,SAAS,cAAc,SAA2C,SAAsC;AACtG,QAAM,QAAQ,QAAQ,MAAM,IAAI,EAAE,QAAQ,GAAG;AAC7C,SAAO,QAAQ,QAAQ,KAAK,IAAI,QAAQ;AAC1C;AAEA,SAAS,iBAAiB,MAAe,OAAyB;AAChE,MAAI,MAAM,QAAQ,IAAI,KAAK,MAAM,QAAQ,KAAK,GAAG;AAC/C,WAAO,KAAK,WAAW,MAAM,UAAU,KAAK,MAAM,CAAC,MAAM,UAAU,SAAS,MAAM,KAAK,CAAC;AAAA,EAC1F;AACA,SAAO,SAAS;AAClB;AAEA,eAAe,WACb,SACA,UAC4C;AAC5C,QAAM,UAAU,MAAM,QAAQ,OAAO,KAAK,EAAE,cAAc,KAAK,CAAC;AAChE,SAAO,QAAQ,KAAK,OAAK,EAAE,OAAO,QAAQ;AAC5C;AAQA,eAAe,yBAAyB,SAA2C,UAAiC;AAClH,QAAM,SAAS,MAAM,WAAW,SAAS,QAAQ;AACjD,MAAI,QAAQ,OAAO,MAAM,MAAM,SAAU;AAEzC,QAAM,UAAmC,CAAC;AAC1C,QAAM,iBAAyD,CAAC;AAEhE,aAAW,WAAW,uBAAuB;AAC3C,UAAM,YAAY,QAAQ,WAAW,QAAQ,GAAG;AAEhD,QAAI,QAAQ,QAAQ,SAAS,GAAG;AAC9B,UAAI,cAAc,SAAS,OAAO,MAAM,WAAW;AACjD,gBAAQ,QAAQ,GAAG,IAAI;AAAA,MACzB;AACA;AAAA,IACF;AAEA,QAAI,QAAQ,0BAA0B,QAAW;AAC/C,YAAM,UAAU,cAAc,SAAS,OAAO;AAC9C,UAAI,YAAY,UAAa,CAAC,iBAAiB,SAAS,QAAQ,qBAAqB,GAAG;AACtF,gBAAQ,QAAQ,GAAG,IAAI,QAAQ;AAAA,MACjC;AACA;AAAA,IACF;AAEA,QAAI,QAAQ,6BAA6B;AACvC,YAAM,UAAU,cAAc,SAAS,OAAO;AAC9C,UAAI,YAAY,QAAW;AACzB,uBAAe,KAAK,EAAE,KAAK,QAAQ,KAAK,OAAO,QAAQ,CAAC;AAAA,MAC1D;AAAA,IACF;AAAA,EACF;AAEA,MAAI,OAAO,KAAK,OAAO,EAAE,SAAS,GAAG;AACnC,QAAI,QAAQ,OAAO,MAAM,MAAM,SAAU;AACzC,UAAM,QAAQ,MAAM,IAAI,OAAO;AAAA,EACjC;AAEA,aAAW,WAAW,gBAAgB;AACpC,QAAI,QAAQ,OAAO,MAAM,MAAM,SAAU;AACzC,UAAM,QAAQ,OAAO,WAAW,OAAO;AAAA,EACzC;AACF;AAUO,SAAS,+BAA+B,SAAiD;AAC9F,UAAQ,UAAU,WAAS;AACzB,QAAI,MAAM,SAAS,oBAAoB,MAAM,SAAS,kBAAkB;AACtE,YAAM,WAAW,MAAM,SAAS,mBAAmB,MAAM,WAAW,MAAM,OAAO;AACjF,WAAK,yBAAyB,SAAS,QAAQ,EAAE,MAAM,MAAM;AAAA,MAE7D,CAAC;AACD;AAAA,IACF;AAEA,QAAI,MAAM,SAAS,iBAAiB;AAClC,iBAAW,WAAW,uBAAuB;AAC3C,YAAI,CAAC,MAAM,YAAY,SAAS,QAAQ,GAAG,EAAG;AAC9C,cAAM,QAAQ,MAAM,MAAM,QAAQ,GAAG;AACrC,YAAI,CAAC,QAAQ,QAAQ,KAAK,EAAG;AAC7B,aAAK,QAAQ,OAAO,WAAW,EAAE,KAAK,QAAQ,KAAK,MAAM,CAAC,EAAE,MAAM,MAAM;AAAA,QAExE,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAOA,eAAsB,qCAAqC,SAA0D;AACnH,QAAM,WAAW,QAAQ,OAAO,MAAM;AACtC,MAAI,CAAC,SAAU;AACf,QAAM,yBAAyB,SAAS,QAAQ;AAClD;","names":[]}
+{"version":3,"file":"thread-caveman-state.js","names":[],"sources":["../../src/agents/thread-caveman-state.ts"],"sourcesContent":["import type { AgentControllerThread, Session } from '@mastra/core/agent-controller';\n\ninterface ThreadStateSetting {\n  key: string;\n  isValid(value: unknown): boolean;\n  seedMissingFromCurrentState?: boolean;\n  clearValueWhenMissing?: unknown;\n}\n\nconst THREAD_STATE_SETTINGS: ThreadStateSetting[] = [\n  {\n    key: 'cavemanObservations',\n    isValid: (value: unknown): value is boolean => typeof value === 'boolean',\n    seedMissingFromCurrentState: true,\n  },\n  {\n    key: 'observeAttachments',\n    isValid: (value: unknown): value is 'auto' | boolean => value === 'auto' || typeof value === 'boolean',\n    seedMissingFromCurrentState: true,\n  },\n  {\n    key: 'sandboxAllowedPaths',\n    isValid: (value: unknown): value is string[] =>\n      Array.isArray(value) && value.every(item => typeof item === 'string'),\n    clearValueWhenMissing: [],\n  },\n];\n\nfunction getStateValue(session: Session<Record<string, unknown>>, setting: ThreadStateSetting): unknown {\n  const value = session.state.get()[setting.key];\n  return setting.isValid(value) ? value : undefined;\n}\n\nfunction stateValuesEqual(left: unknown, right: unknown): boolean {\n  if (Array.isArray(left) && Array.isArray(right)) {\n    return left.length === right.length && left.every((item, index) => item === right[index]);\n  }\n  return left === right;\n}\n\nasync function findThread(\n  session: Session<Record<string, unknown>>,\n  threadId: string,\n): Promise<AgentControllerThread | undefined> {\n  const threads = await session.thread.list({ allResources: true });\n  return threads.find(t => t.id === threadId);\n}\n\n/**\n * Restores MastraCode-owned per-thread state for the given thread:\n * - If the thread already has a valid value in metadata, mirror it into controller state.\n * - Otherwise, persist the current session.state value to the thread so future\n *   sessions see the user's last-selected setting.\n */\nasync function restoreSettingsForThread(session: Session<Record<string, unknown>>, threadId: string): Promise<void> {\n  const thread = await findThread(session, threadId);\n  if (session.thread.getId() !== threadId) return;\n\n  const updates: Record<string, unknown> = {};\n  const settingsToSeed: Array<{ key: string; value: unknown }> = [];\n\n  for (const setting of THREAD_STATE_SETTINGS) {\n    const persisted = thread?.metadata?.[setting.key];\n\n    if (setting.isValid(persisted)) {\n      if (getStateValue(session, setting) !== persisted) {\n        updates[setting.key] = persisted;\n      }\n      continue;\n    }\n\n    if (setting.clearValueWhenMissing !== undefined) {\n      const current = getStateValue(session, setting);\n      if (current !== undefined && !stateValuesEqual(current, setting.clearValueWhenMissing)) {\n        updates[setting.key] = setting.clearValueWhenMissing;\n      }\n      continue;\n    }\n\n    if (setting.seedMissingFromCurrentState) {\n      const current = getStateValue(session, setting);\n      if (current !== undefined) {\n        settingsToSeed.push({ key: setting.key, value: current });\n      }\n    }\n  }\n\n  if (Object.keys(updates).length > 0) {\n    if (session.thread.getId() !== threadId) return;\n    await session.state.set(updates);\n  }\n\n  for (const setting of settingsToSeed) {\n    if (session.thread.getId() !== threadId) return;\n    await session.thread.setSetting(setting);\n  }\n}\n\n/**\n * Wires MastraCode-owned state into controller thread events so it persists\n * per-thread and new threads inherit the most recent value.\n *\n * This is intentionally implemented in mastracode rather than core: these\n * settings are mastracode-specific concepts, so persistence stays scoped to\n * the host.\n */\nexport function attachOMThreadStatePersistence(session: Session<Record<string, unknown>>): void {\n  session.subscribe(event => {\n    if (event.type === 'thread_changed' || event.type === 'thread_created') {\n      const threadId = event.type === 'thread_changed' ? event.threadId : event.thread.id;\n      void restoreSettingsForThread(session, threadId).catch(() => {\n        // Persistence is best-effort; don't crash the TUI if storage hiccups.\n      });\n      return;\n    }\n\n    if (event.type === 'state_changed') {\n      for (const setting of THREAD_STATE_SETTINGS) {\n        if (!event.changedKeys.includes(setting.key)) continue;\n        const value = event.state[setting.key];\n        if (!setting.isValid(value)) continue;\n        void session.thread.setSetting({ key: setting.key, value }).catch(() => {\n          // Persistence is best-effort; don't crash the TUI if storage hiccups.\n        });\n      }\n    }\n  });\n}\n\n/**\n * Eagerly restores MastraCode-owned OM settings for the currently-selected\n * thread. Called once at TUI startup after the initial thread is selected,\n * since the subscription set up later misses the startup `thread_changed` event.\n */\nexport async function restoreOMThreadStateForCurrentThread(session: Session<Record<string, unknown>>): Promise<void> {\n  const threadId = session.thread.getId();\n  if (!threadId) return;\n  await restoreSettingsForThread(session, threadId);\n}\n"],"mappings":";AASA,MAAM,wBAA8C;CAClD;EACE,KAAK;EACL,UAAU,UAAqC,OAAO,UAAU;EAChE,6BAA6B;CAC/B;CACA;EACE,KAAK;EACL,UAAU,UAA8C,UAAU,UAAU,OAAO,UAAU;EAC7F,6BAA6B;CAC/B;CACA;EACE,KAAK;EACL,UAAU,UACR,MAAM,QAAQ,KAAK,KAAK,MAAM,OAAM,SAAQ,OAAO,SAAS,QAAQ;EACtE,uBAAuB,CAAC;CAC1B;AACF;AAEA,SAAS,cAAc,SAA2C,SAAsC;CACtG,MAAM,QAAQ,QAAQ,MAAM,IAAI,CAAC,CAAC,QAAQ;CAC1C,OAAO,QAAQ,QAAQ,KAAK,IAAI,QAAQ,KAAA;AAC1C;AAEA,SAAS,iBAAiB,MAAe,OAAyB;CAChE,IAAI,MAAM,QAAQ,IAAI,KAAK,MAAM,QAAQ,KAAK,GAC5C,OAAO,KAAK,WAAW,MAAM,UAAU,KAAK,OAAO,MAAM,UAAU,SAAS,MAAM,MAAM;CAE1F,OAAO,SAAS;AAClB;AAEA,eAAe,WACb,SACA,UAC4C;CAE5C,QAAO,MADe,QAAQ,OAAO,KAAK,EAAE,cAAc,KAAK,CAAC,EAAA,CACjD,MAAK,MAAK,EAAE,OAAO,QAAQ;AAC5C;;;;;;;AAQA,eAAe,yBAAyB,SAA2C,UAAiC;CAClH,MAAM,SAAS,MAAM,WAAW,SAAS,QAAQ;CACjD,IAAI,QAAQ,OAAO,MAAM,MAAM,UAAU;CAEzC,MAAM,UAAmC,CAAC;CAC1C,MAAM,iBAAyD,CAAC;CAEhE,KAAK,MAAM,WAAW,uBAAuB;EAC3C,MAAM,YAAY,QAAQ,WAAW,QAAQ;EAE7C,IAAI,QAAQ,QAAQ,SAAS,GAAG;GAC9B,IAAI,cAAc,SAAS,OAAO,MAAM,WACtC,QAAQ,QAAQ,OAAO;GAEzB;EACF;EAEA,IAAI,QAAQ,0BAA0B,KAAA,GAAW;GAC/C,MAAM,UAAU,cAAc,SAAS,OAAO;GAC9C,IAAI,YAAY,KAAA,KAAa,CAAC,iBAAiB,SAAS,QAAQ,qBAAqB,GACnF,QAAQ,QAAQ,OAAO,QAAQ;GAEjC;EACF;EAEA,IAAI,QAAQ,6BAA6B;GACvC,MAAM,UAAU,cAAc,SAAS,OAAO;GAC9C,IAAI,YAAY,KAAA,GACd,eAAe,KAAK;IAAE,KAAK,QAAQ;IAAK,OAAO;GAAQ,CAAC;EAE5D;CACF;CAEA,IAAI,OAAO,KAAK,OAAO,CAAC,CAAC,SAAS,GAAG;EACnC,IAAI,QAAQ,OAAO,MAAM,MAAM,UAAU;EACzC,MAAM,QAAQ,MAAM,IAAI,OAAO;CACjC;CAEA,KAAK,MAAM,WAAW,gBAAgB;EACpC,IAAI,QAAQ,OAAO,MAAM,MAAM,UAAU;EACzC,MAAM,QAAQ,OAAO,WAAW,OAAO;CACzC;AACF;;;;;;;;;AAUA,SAAgB,+BAA+B,SAAiD;CAC9F,QAAQ,WAAU,UAAS;EACzB,IAAI,MAAM,SAAS,oBAAoB,MAAM,SAAS,kBAAkB;GAEtE,yBAA8B,SADb,MAAM,SAAS,mBAAmB,MAAM,WAAW,MAAM,OAAO,EAClC,CAAC,CAAC,YAAY,CAE7D,CAAC;GACD;EACF;EAEA,IAAI,MAAM,SAAS,iBACjB,KAAK,MAAM,WAAW,uBAAuB;GAC3C,IAAI,CAAC,MAAM,YAAY,SAAS,QAAQ,GAAG,GAAG;GAC9C,MAAM,QAAQ,MAAM,MAAM,QAAQ;GAClC,IAAI,CAAC,QAAQ,QAAQ,KAAK,GAAG;GAC7B,QAAa,OAAO,WAAW;IAAE,KAAK,QAAQ;IAAK;GAAM,CAAC,CAAC,CAAC,YAAY,CAExE,CAAC;EACH;CAEJ,CAAC;AACH;;;;;;AAOA,eAAsB,qCAAqC,SAA0D;CACnH,MAAM,WAAW,QAAQ,OAAO,MAAM;CACtC,IAAI,CAAC,UAAU;CACf,MAAM,yBAAyB,SAAS,QAAQ;AAClD"}

package/dist/agents/tool-availability.js

@@ -1,105 +1,87 @@
-import { WORKSPACE_TOOLS } from "@mastra/core/workspace";
-import { MC_TOOLS, TOOL_NAME_OVERRIDES } from "../tool-names.js";
 import { getLocalPlansRelativeDir, isPlanFilePath } from "../utils/plans.js";
-const PLAN_MODE_WRITE_TOOL_NAMES = /* @__PURE__ */ new Set([
-  WORKSPACE_TOOLS.FILESYSTEM.WRITE_FILE,
-  WORKSPACE_TOOLS.FILESYSTEM.EDIT_FILE
-]);
+import { MC_TOOLS, TOOL_NAME_OVERRIDES } from "../tool-names.js";
+import { WORKSPACE_TOOLS } from "@mastra/core/workspace";
+//#region src/agents/tool-availability.ts
+const PLAN_MODE_WRITE_TOOL_NAMES = /* @__PURE__ */ new Set([WORKSPACE_TOOLS.FILESYSTEM.WRITE_FILE, WORKSPACE_TOOLS.FILESYSTEM.EDIT_FILE]);
 function getRequestContextValue(requestContext, key) {
-  if (!requestContext) return void 0;
-  if (typeof requestContext.get === "function") {
-    return requestContext.get(key);
-  }
-  return requestContext[key];
+	if (!requestContext) return void 0;
+	if (typeof requestContext.get === "function") return requestContext.get(key);
+	return requestContext[key];
 }
 function getHarnessContext(context) {
-  const requestContext = context?.requestContext;
-  const harness = getRequestContextValue(requestContext, "harness");
-  return harness && typeof harness === "object" ? harness : void 0;
+	const requestContext = context?.requestContext;
+	const harness = getRequestContextValue(requestContext, "harness");
+	return harness && typeof harness === "object" ? harness : void 0;
 }
 function getHarnessState(harness) {
-  const state = harness?.session?.state?.get?.();
-  return state && typeof state === "object" ? state : void 0;
+	const state = harness?.session?.state?.get?.();
+	return state && typeof state === "object" ? state : void 0;
 }
 function getHarnessModeId(harness) {
-  const modeId = harness?.session?.modeId ?? getHarnessState(harness)?.modeId;
-  return typeof modeId === "string" ? modeId : void 0;
+	const modeId = harness?.session?.modeId ?? getHarnessState(harness)?.modeId;
+	return typeof modeId === "string" ? modeId : void 0;
 }
 function getHarnessProjectPath(harness) {
-  const projectPath = getHarnessState(harness)?.projectPath;
-  return typeof projectPath === "string" ? projectPath : void 0;
+	const projectPath = getHarnessState(harness)?.projectPath;
+	return typeof projectPath === "string" ? projectPath : void 0;
 }
 function getToolInputPath(input) {
-  const toolPath = input?.path;
-  return typeof toolPath === "string" ? toolPath : void 0;
+	const toolPath = input?.path;
+	return typeof toolPath === "string" ? toolPath : void 0;
 }
 const PLAN_DIR_HINT = `${getLocalPlansRelativeDir()}/`;
 function guardPlanModePlanFileWrites({ workspaceToolName, input, context }) {
-  if (!PLAN_MODE_WRITE_TOOL_NAMES.has(workspaceToolName)) return;
-  const harness = getHarnessContext(context);
-  if (getHarnessModeId(harness) !== "plan") return;
-  const projectPath = getHarnessProjectPath(harness);
-  const inputPath = getToolInputPath(input);
-  if (!projectPath || !inputPath) {
-    return {
-      proceed: false,
-      output: `Plan mode can only write plan files inside ${PLAN_DIR_HINT}.`
-    };
-  }
-  if (isPlanFilePath(projectPath, inputPath)) return;
-  return {
-    proceed: false,
-    output: `Plan mode can only write plan files inside ${PLAN_DIR_HINT}. Refusing to edit ${inputPath}.`
-  };
+	if (!PLAN_MODE_WRITE_TOOL_NAMES.has(workspaceToolName)) return;
+	const harness = getHarnessContext(context);
+	if (getHarnessModeId(harness) !== "plan") return;
+	const projectPath = getHarnessProjectPath(harness);
+	const inputPath = getToolInputPath(input);
+	if (!projectPath || !inputPath) return {
+		proceed: false,
+		output: `Plan mode can only write plan files inside ${PLAN_DIR_HINT}.`
+	};
+	if (isPlanFilePath(projectPath, inputPath)) return;
+	return {
+		proceed: false,
+		output: `Plan mode can only write plan files inside ${PLAN_DIR_HINT}. Refusing to edit ${inputPath}.`
+	};
 }
 const MASTRACODE_WORKSPACE_TOOLS = {
-  ...TOOL_NAME_OVERRIDES,
-  hooks: {
-    beforeToolCall: guardPlanModePlanFileWrites
-  }
+	...TOOL_NAME_OVERRIDES,
+	hooks: { beforeToolCall: guardPlanModePlanFileWrites }
 };
 const PLAN_MODE_AVAILABLE_TOOLS = [
-  // Read-only exploration tools
-  MC_TOOLS.VIEW,
-  MC_TOOLS.FIND_FILES,
-  MC_TOOLS.SEARCH_CONTENT,
-  MC_TOOLS.FILE_STAT,
-  MC_TOOLS.LSP_INSPECT,
-  // Plan file writing. Tool hooks enforce that these can only write `.md`
-  // files inside `.mastracode/plans/` while the session is in plan mode.
-  MC_TOOLS.WRITE_FILE,
-  MC_TOOLS.STRING_REPLACE_LSP,
-  // Plan delivery tools
-  "ask_user",
-  "submit_plan",
-  // Task tools for plan-stage tracking
-  "task_write",
-  "task_update",
-  "task_complete",
-  "task_check",
-  // Notification access
-  MC_TOOLS.NOTIFICATION_INBOX
+	MC_TOOLS.VIEW,
+	MC_TOOLS.FIND_FILES,
+	MC_TOOLS.SEARCH_CONTENT,
+	MC_TOOLS.FILE_STAT,
+	MC_TOOLS.LSP_INSPECT,
+	MC_TOOLS.WRITE_FILE,
+	MC_TOOLS.STRING_REPLACE_LSP,
+	"ask_user",
+	"submit_plan",
+	"task_write",
+	"task_update",
+	"task_complete",
+	"task_check",
+	MC_TOOLS.NOTIFICATION_INBOX
 ];
 const EXPLORE_MODE_AVAILABLE_TOOLS = [
-  MC_TOOLS.VIEW,
-  MC_TOOLS.FIND_FILES,
-  MC_TOOLS.SEARCH_CONTENT,
-  MC_TOOLS.FILE_STAT,
-  MC_TOOLS.LSP_INSPECT,
-  "ask_user"
+	MC_TOOLS.VIEW,
+	MC_TOOLS.FIND_FILES,
+	MC_TOOLS.SEARCH_CONTENT,
+	MC_TOOLS.FILE_STAT,
+	MC_TOOLS.LSP_INSPECT,
+	"ask_user"
 ];
 const GOAL_JUDGE_READONLY_TOOLS = [
-  MC_TOOLS.VIEW,
-  MC_TOOLS.SEARCH_CONTENT,
-  MC_TOOLS.FIND_FILES,
-  MC_TOOLS.FILE_STAT,
-  MC_TOOLS.LSP_INSPECT
+	MC_TOOLS.VIEW,
+	MC_TOOLS.SEARCH_CONTENT,
+	MC_TOOLS.FIND_FILES,
+	MC_TOOLS.FILE_STAT,
+	MC_TOOLS.LSP_INSPECT
 ];
-export {
-  EXPLORE_MODE_AVAILABLE_TOOLS,
-  GOAL_JUDGE_READONLY_TOOLS,
-  MASTRACODE_WORKSPACE_TOOLS,
-  PLAN_MODE_AVAILABLE_TOOLS,
-  guardPlanModePlanFileWrites
-};
+//#endregion
+export { EXPLORE_MODE_AVAILABLE_TOOLS, GOAL_JUDGE_READONLY_TOOLS, MASTRACODE_WORKSPACE_TOOLS, PLAN_MODE_AVAILABLE_TOOLS, guardPlanModePlanFileWrites };
+
 //# sourceMappingURL=tool-availability.js.map

package/dist/agents/tool-availability.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/agents/tool-availability.ts"],"sourcesContent":["import { WORKSPACE_TOOLS } from '@mastra/core/workspace';\nimport type { WorkspaceToolHookContext, WorkspaceToolsConfig } from '@mastra/core/workspace';\nimport { MC_TOOLS, TOOL_NAME_OVERRIDES } from '../tool-names.js';\nimport { getLocalPlansRelativeDir, isPlanFilePath } from '../utils/plans.js';\n\nconst PLAN_MODE_WRITE_TOOL_NAMES = new Set<string>([\n  WORKSPACE_TOOLS.FILESYSTEM.WRITE_FILE,\n  WORKSPACE_TOOLS.FILESYSTEM.EDIT_FILE,\n]);\n\nfunction getRequestContextValue(requestContext: unknown, key: string): unknown {\n  if (!requestContext) return undefined;\n  if (typeof (requestContext as { get?: unknown }).get === 'function') {\n    return (requestContext as { get: (key: string) => unknown }).get(key);\n  }\n  return (requestContext as Record<string, unknown>)[key];\n}\n\n/**\n * Subset of the real `HarnessRequestContext` shape (see\n * packages/core/src/harness/types.ts). The mode is a string property\n * (`session.modeId`) and live state is read via `session.state.get()`.\n */\ninterface PlanModeGuardHarness {\n  session?: {\n    modeId?: unknown;\n    state?: { get?: () => unknown };\n  };\n}\n\nfunction getHarnessContext(context: unknown): PlanModeGuardHarness | undefined {\n  const requestContext = (context as { requestContext?: unknown } | undefined)?.requestContext;\n  const harness = getRequestContextValue(requestContext, 'harness');\n  return harness && typeof harness === 'object' ? (harness as PlanModeGuardHarness) : undefined;\n}\n\nfunction getHarnessState(harness: PlanModeGuardHarness | undefined): Record<string, unknown> | undefined {\n  const state = harness?.session?.state?.get?.();\n  return state && typeof state === 'object' ? (state as Record<string, unknown>) : undefined;\n}\n\nfunction getHarnessModeId(harness: PlanModeGuardHarness | undefined): string | undefined {\n  const modeId = harness?.session?.modeId ?? getHarnessState(harness)?.modeId;\n  return typeof modeId === 'string' ? modeId : undefined;\n}\n\nfunction getHarnessProjectPath(harness: PlanModeGuardHarness | undefined): string | undefined {\n  const projectPath = getHarnessState(harness)?.projectPath;\n  return typeof projectPath === 'string' ? projectPath : undefined;\n}\n\nfunction getToolInputPath(input: unknown): string | undefined {\n  const toolPath = (input as { path?: unknown } | undefined)?.path;\n  return typeof toolPath === 'string' ? toolPath : undefined;\n}\n\nconst PLAN_DIR_HINT = `${getLocalPlansRelativeDir()}/`;\n\nexport function guardPlanModePlanFileWrites({ workspaceToolName, input, context }: WorkspaceToolHookContext) {\n  if (!PLAN_MODE_WRITE_TOOL_NAMES.has(workspaceToolName)) return;\n\n  const harness = getHarnessContext(context);\n  if (getHarnessModeId(harness) !== 'plan') return;\n\n  const projectPath = getHarnessProjectPath(harness);\n  const inputPath = getToolInputPath(input);\n  if (!projectPath || !inputPath) {\n    return {\n      proceed: false as const,\n      output: `Plan mode can only write plan files inside ${PLAN_DIR_HINT}.`,\n    };\n  }\n\n  // Plan mode may write any `.md` file directly inside `.mastracode/plans/`, but\n  // nothing else in the project.\n  if (isPlanFilePath(projectPath, inputPath)) return;\n\n  return {\n    proceed: false as const,\n    output: `Plan mode can only write plan files inside ${PLAN_DIR_HINT}. Refusing to edit ${inputPath}.`,\n  };\n}\n\nexport const MASTRACODE_WORKSPACE_TOOLS: WorkspaceToolsConfig = {\n  ...TOOL_NAME_OVERRIDES,\n  hooks: {\n    beforeToolCall: guardPlanModePlanFileWrites,\n  },\n};\n\nexport const PLAN_MODE_AVAILABLE_TOOLS: readonly string[] = [\n  // Read-only exploration tools\n  MC_TOOLS.VIEW,\n  MC_TOOLS.FIND_FILES,\n  MC_TOOLS.SEARCH_CONTENT,\n  MC_TOOLS.FILE_STAT,\n  MC_TOOLS.LSP_INSPECT,\n  // Plan file writing. Tool hooks enforce that these can only write `.md`\n  // files inside `.mastracode/plans/` while the session is in plan mode.\n  MC_TOOLS.WRITE_FILE,\n  MC_TOOLS.STRING_REPLACE_LSP,\n  // Plan delivery tools\n  'ask_user',\n  'submit_plan',\n  // Task tools for plan-stage tracking\n  'task_write',\n  'task_update',\n  'task_complete',\n  'task_check',\n  // Notification access\n  MC_TOOLS.NOTIFICATION_INBOX,\n];\n\nexport const EXPLORE_MODE_AVAILABLE_TOOLS: readonly string[] = [\n  MC_TOOLS.VIEW,\n  MC_TOOLS.FIND_FILES,\n  MC_TOOLS.SEARCH_CONTENT,\n  MC_TOOLS.FILE_STAT,\n  MC_TOOLS.LSP_INSPECT,\n  'ask_user',\n];\n\nexport const GOAL_JUDGE_READONLY_TOOLS: readonly string[] = [\n  MC_TOOLS.VIEW,\n  MC_TOOLS.SEARCH_CONTENT,\n  MC_TOOLS.FIND_FILES,\n  MC_TOOLS.FILE_STAT,\n  MC_TOOLS.LSP_INSPECT,\n];\n"],"mappings":"AAAA,SAAS,uBAAuB;AAEhC,SAAS,UAAU,2BAA2B;AAC9C,SAAS,0BAA0B,sBAAsB;AAEzD,MAAM,6BAA6B,oBAAI,IAAY;AAAA,EACjD,gBAAgB,WAAW;AAAA,EAC3B,gBAAgB,WAAW;AAC7B,CAAC;AAED,SAAS,uBAAuB,gBAAyB,KAAsB;AAC7E,MAAI,CAAC,eAAgB,QAAO;AAC5B,MAAI,OAAQ,eAAqC,QAAQ,YAAY;AACnE,WAAQ,eAAqD,IAAI,GAAG;AAAA,EACtE;AACA,SAAQ,eAA2C,GAAG;AACxD;AAcA,SAAS,kBAAkB,SAAoD;AAC7E,QAAM,iBAAkB,SAAsD;AAC9E,QAAM,UAAU,uBAAuB,gBAAgB,SAAS;AAChE,SAAO,WAAW,OAAO,YAAY,WAAY,UAAmC;AACtF;AAEA,SAAS,gBAAgB,SAAgF;AACvG,QAAM,QAAQ,SAAS,SAAS,OAAO,MAAM;AAC7C,SAAO,SAAS,OAAO,UAAU,WAAY,QAAoC;AACnF;AAEA,SAAS,iBAAiB,SAA+D;AACvF,QAAM,SAAS,SAAS,SAAS,UAAU,gBAAgB,OAAO,GAAG;AACrE,SAAO,OAAO,WAAW,WAAW,SAAS;AAC/C;AAEA,SAAS,sBAAsB,SAA+D;AAC5F,QAAM,cAAc,gBAAgB,OAAO,GAAG;AAC9C,SAAO,OAAO,gBAAgB,WAAW,cAAc;AACzD;AAEA,SAAS,iBAAiB,OAAoC;AAC5D,QAAM,WAAY,OAA0C;AAC5D,SAAO,OAAO,aAAa,WAAW,WAAW;AACnD;AAEA,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AAE5C,SAAS,4BAA4B,EAAE,mBAAmB,OAAO,QAAQ,GAA6B;AAC3G,MAAI,CAAC,2BAA2B,IAAI,iBAAiB,EAAG;AAExD,QAAM,UAAU,kBAAkB,OAAO;AACzC,MAAI,iBAAiB,OAAO,MAAM,OAAQ;AAE1C,QAAM,cAAc,sBAAsB,OAAO;AACjD,QAAM,YAAY,iBAAiB,KAAK;AACxC,MAAI,CAAC,eAAe,CAAC,WAAW;AAC9B,WAAO;AAAA,MACL,SAAS;AAAA,MACT,QAAQ,8CAA8C,aAAa;AAAA,IACrE;AAAA,EACF;AAIA,MAAI,eAAe,aAAa,SAAS,EAAG;AAE5C,SAAO;AAAA,IACL,SAAS;AAAA,IACT,QAAQ,8CAA8C,aAAa,sBAAsB,SAAS;AAAA,EACpG;AACF;AAEO,MAAM,6BAAmD;AAAA,EAC9D,GAAG;AAAA,EACH,OAAO;AAAA,IACL,gBAAgB;AAAA,EAClB;AACF;AAEO,MAAM,4BAA+C;AAAA;AAAA,EAE1D,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA;AAAA;AAAA,EAGT,SAAS;AAAA,EACT,SAAS;AAAA;AAAA,EAET;AAAA,EACA;AAAA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA,SAAS;AACX;AAEO,MAAM,+BAAkD;AAAA,EAC7D,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT;AACF;AAEO,MAAM,4BAA+C;AAAA,EAC1D,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AACX;","names":[]}
+{"version":3,"file":"tool-availability.js","names":[],"sources":["../../src/agents/tool-availability.ts"],"sourcesContent":["import { WORKSPACE_TOOLS } from '@mastra/core/workspace';\nimport type { WorkspaceToolHookContext, WorkspaceToolsConfig } from '@mastra/core/workspace';\nimport { MC_TOOLS, TOOL_NAME_OVERRIDES } from '../tool-names.js';\nimport { getLocalPlansRelativeDir, isPlanFilePath } from '../utils/plans.js';\n\nconst PLAN_MODE_WRITE_TOOL_NAMES = new Set<string>([\n  WORKSPACE_TOOLS.FILESYSTEM.WRITE_FILE,\n  WORKSPACE_TOOLS.FILESYSTEM.EDIT_FILE,\n]);\n\nfunction getRequestContextValue(requestContext: unknown, key: string): unknown {\n  if (!requestContext) return undefined;\n  if (typeof (requestContext as { get?: unknown }).get === 'function') {\n    return (requestContext as { get: (key: string) => unknown }).get(key);\n  }\n  return (requestContext as Record<string, unknown>)[key];\n}\n\n/**\n * Subset of the real `HarnessRequestContext` shape (see\n * packages/core/src/harness/types.ts). The mode is a string property\n * (`session.modeId`) and live state is read via `session.state.get()`.\n */\ninterface PlanModeGuardHarness {\n  session?: {\n    modeId?: unknown;\n    state?: { get?: () => unknown };\n  };\n}\n\nfunction getHarnessContext(context: unknown): PlanModeGuardHarness | undefined {\n  const requestContext = (context as { requestContext?: unknown } | undefined)?.requestContext;\n  const harness = getRequestContextValue(requestContext, 'harness');\n  return harness && typeof harness === 'object' ? (harness as PlanModeGuardHarness) : undefined;\n}\n\nfunction getHarnessState(harness: PlanModeGuardHarness | undefined): Record<string, unknown> | undefined {\n  const state = harness?.session?.state?.get?.();\n  return state && typeof state === 'object' ? (state as Record<string, unknown>) : undefined;\n}\n\nfunction getHarnessModeId(harness: PlanModeGuardHarness | undefined): string | undefined {\n  const modeId = harness?.session?.modeId ?? getHarnessState(harness)?.modeId;\n  return typeof modeId === 'string' ? modeId : undefined;\n}\n\nfunction getHarnessProjectPath(harness: PlanModeGuardHarness | undefined): string | undefined {\n  const projectPath = getHarnessState(harness)?.projectPath;\n  return typeof projectPath === 'string' ? projectPath : undefined;\n}\n\nfunction getToolInputPath(input: unknown): string | undefined {\n  const toolPath = (input as { path?: unknown } | undefined)?.path;\n  return typeof toolPath === 'string' ? toolPath : undefined;\n}\n\nconst PLAN_DIR_HINT = `${getLocalPlansRelativeDir()}/`;\n\nexport function guardPlanModePlanFileWrites({ workspaceToolName, input, context }: WorkspaceToolHookContext) {\n  if (!PLAN_MODE_WRITE_TOOL_NAMES.has(workspaceToolName)) return;\n\n  const harness = getHarnessContext(context);\n  if (getHarnessModeId(harness) !== 'plan') return;\n\n  const projectPath = getHarnessProjectPath(harness);\n  const inputPath = getToolInputPath(input);\n  if (!projectPath || !inputPath) {\n    return {\n      proceed: false as const,\n      output: `Plan mode can only write plan files inside ${PLAN_DIR_HINT}.`,\n    };\n  }\n\n  // Plan mode may write any `.md` file directly inside `.mastracode/plans/`, but\n  // nothing else in the project.\n  if (isPlanFilePath(projectPath, inputPath)) return;\n\n  return {\n    proceed: false as const,\n    output: `Plan mode can only write plan files inside ${PLAN_DIR_HINT}. Refusing to edit ${inputPath}.`,\n  };\n}\n\nexport const MASTRACODE_WORKSPACE_TOOLS: WorkspaceToolsConfig = {\n  ...TOOL_NAME_OVERRIDES,\n  hooks: {\n    beforeToolCall: guardPlanModePlanFileWrites,\n  },\n};\n\nexport const PLAN_MODE_AVAILABLE_TOOLS: readonly string[] = [\n  // Read-only exploration tools\n  MC_TOOLS.VIEW,\n  MC_TOOLS.FIND_FILES,\n  MC_TOOLS.SEARCH_CONTENT,\n  MC_TOOLS.FILE_STAT,\n  MC_TOOLS.LSP_INSPECT,\n  // Plan file writing. Tool hooks enforce that these can only write `.md`\n  // files inside `.mastracode/plans/` while the session is in plan mode.\n  MC_TOOLS.WRITE_FILE,\n  MC_TOOLS.STRING_REPLACE_LSP,\n  // Plan delivery tools\n  'ask_user',\n  'submit_plan',\n  // Task tools for plan-stage tracking\n  'task_write',\n  'task_update',\n  'task_complete',\n  'task_check',\n  // Notification access\n  MC_TOOLS.NOTIFICATION_INBOX,\n];\n\nexport const EXPLORE_MODE_AVAILABLE_TOOLS: readonly string[] = [\n  MC_TOOLS.VIEW,\n  MC_TOOLS.FIND_FILES,\n  MC_TOOLS.SEARCH_CONTENT,\n  MC_TOOLS.FILE_STAT,\n  MC_TOOLS.LSP_INSPECT,\n  'ask_user',\n];\n\nexport const GOAL_JUDGE_READONLY_TOOLS: readonly string[] = [\n  MC_TOOLS.VIEW,\n  MC_TOOLS.SEARCH_CONTENT,\n  MC_TOOLS.FIND_FILES,\n  MC_TOOLS.FILE_STAT,\n  MC_TOOLS.LSP_INSPECT,\n];\n"],"mappings":";;;;AAKA,MAAM,6CAA6B,IAAI,IAAY,CACjD,gBAAgB,WAAW,YAC3B,gBAAgB,WAAW,SAC7B,CAAC;AAED,SAAS,uBAAuB,gBAAyB,KAAsB;CAC7E,IAAI,CAAC,gBAAgB,OAAO,KAAA;CAC5B,IAAI,OAAQ,eAAqC,QAAQ,YACvD,OAAQ,eAAqD,IAAI,GAAG;CAEtE,OAAQ,eAA2C;AACrD;AAcA,SAAS,kBAAkB,SAAoD;CAC7E,MAAM,iBAAkB,SAAsD;CAC9E,MAAM,UAAU,uBAAuB,gBAAgB,SAAS;CAChE,OAAO,WAAW,OAAO,YAAY,WAAY,UAAmC,KAAA;AACtF;AAEA,SAAS,gBAAgB,SAAgF;CACvG,MAAM,QAAQ,SAAS,SAAS,OAAO,MAAM;CAC7C,OAAO,SAAS,OAAO,UAAU,WAAY,QAAoC,KAAA;AACnF;AAEA,SAAS,iBAAiB,SAA+D;CACvF,MAAM,SAAS,SAAS,SAAS,UAAU,gBAAgB,OAAO,CAAC,EAAE;CACrE,OAAO,OAAO,WAAW,WAAW,SAAS,KAAA;AAC/C;AAEA,SAAS,sBAAsB,SAA+D;CAC5F,MAAM,cAAc,gBAAgB,OAAO,CAAC,EAAE;CAC9C,OAAO,OAAO,gBAAgB,WAAW,cAAc,KAAA;AACzD;AAEA,SAAS,iBAAiB,OAAoC;CAC5D,MAAM,WAAY,OAA0C;CAC5D,OAAO,OAAO,aAAa,WAAW,WAAW,KAAA;AACnD;AAEA,MAAM,gBAAgB,GAAG,yBAAyB,EAAE;AAEpD,SAAgB,4BAA4B,EAAE,mBAAmB,OAAO,WAAqC;CAC3G,IAAI,CAAC,2BAA2B,IAAI,iBAAiB,GAAG;CAExD,MAAM,UAAU,kBAAkB,OAAO;CACzC,IAAI,iBAAiB,OAAO,MAAM,QAAQ;CAE1C,MAAM,cAAc,sBAAsB,OAAO;CACjD,MAAM,YAAY,iBAAiB,KAAK;CACxC,IAAI,CAAC,eAAe,CAAC,WACnB,OAAO;EACL,SAAS;EACT,QAAQ,8CAA8C,cAAc;CACtE;CAKF,IAAI,eAAe,aAAa,SAAS,GAAG;CAE5C,OAAO;EACL,SAAS;EACT,QAAQ,8CAA8C,cAAc,qBAAqB,UAAU;CACrG;AACF;AAEA,MAAa,6BAAmD;CAC9D,GAAG;CACH,OAAO,EACL,gBAAgB,4BAClB;AACF;AAEA,MAAa,4BAA+C;CAE1D,SAAS;CACT,SAAS;CACT,SAAS;CACT,SAAS;CACT,SAAS;CAGT,SAAS;CACT,SAAS;CAET;CACA;CAEA;CACA;CACA;CACA;CAEA,SAAS;AACX;AAEA,MAAa,+BAAkD;CAC7D,SAAS;CACT,SAAS;CACT,SAAS;CACT,SAAS;CACT,SAAS;CACT;AACF;AAEA,MAAa,4BAA+C;CAC1D,SAAS;CACT,SAAS;CACT,SAAS;CACT,SAAS;CACT,SAAS;AACX"}