@mastra/code-sdk 1.15.0-alpha.11 → 1.15.0-alpha.12

package/dist/agents/memory.js.map

@@ -1 +1 @@
-{"version":3,"file":"memory.js","names":[],"sources":["../../src/agents/memory.ts"],"sourcesContent":["import type { AgentControllerRequestContext } from '@mastra/core/agent-controller';\nimport type { Knowledge } from '@mastra/core/knowledge';\nimport type { RequestContext } from '@mastra/core/request-context';\nimport type { MastraCompositeStore } from '@mastra/core/storage';\nimport type { MastraVector } from '@mastra/core/vector';\nimport { fastembed } from '@mastra/fastembed';\nimport { Memory, Subconscious } from '@mastra/memory';\nimport { DEFAULT_OBS_THRESHOLD, DEFAULT_REF_THRESHOLD } from '../constants.js';\nimport { LOCAL_KNOWLEDGE_ORG_ID, resolveKnowledgeScopeIdentity } from '../knowledge-scope.js';\nimport { MASTRACODE_AUTO_OM_MODELS, resolveAutoOMModelId } from '../onboarding/packs.js';\nimport { loadSettings } from '../onboarding/settings.js';\nimport { ANTHROPIC_PROMPT_CACHE_TTL } from '../providers/anthropic-prompt-cache.js';\nimport type { MastraCodeState } from '../schema.js';\nimport { getOmScope } from '../utils/project.js';\nimport { canUseProvider, getActiveMemoryRoute, resolveModel } from './model.js';\n\n/** Route-backed OM fallback entry. */\ntype MemoryModelRouteEntry = { id: string; model: ReturnType<typeof resolveModel> };\n\n/**\n * Resolve the active model route's memory models, starting at a same-thread\n * pending fallback hop. Returns `'auto'` when the route's first memory model is\n * Auto, and `undefined` when the route sets no memory model.\n */\nfunction resolveRouteMemoryModels(\n  state: MastraCodeState | undefined,\n  threadId: string | null | undefined,\n  resolve: (modelId: string) => ReturnType<typeof resolveModel>,\n): MemoryModelRouteEntry[] | 'auto' | undefined {\n  const memoryRoute = getActiveMemoryRoute(state, threadId);\n  if (memoryRoute[0]?.memoryModelId === 'auto') return 'auto';\n  const seenModelIds = new Set<string>();\n  const appearances = new Map<string, number>();\n  const entries: MemoryModelRouteEntry[] = [];\n  for (const entry of memoryRoute) {\n    if (!entry.memoryModelId || entry.memoryModelId === 'auto' || seenModelIds.has(entry.memoryModelId)) continue;\n    seenModelIds.add(entry.memoryModelId);\n    const occurrence = (appearances.get(entry.id) ?? 0) + 1;\n    appearances.set(entry.id, occurrence);\n    try {\n      entries.push({\n        id: `${entry.id}:memory${occurrence === 1 ? '' : `#${occurrence}`}`,\n        model: resolve(entry.memoryModelId),\n      });\n    } catch {\n      break;\n    }\n  }\n  return entries.length > 0 ? entries : undefined;\n}\n\n/**\n * The authoritative per-caller Factory memory-settings row, placed on the request\n * context before Factory's model-dependent processors run. `null` means the row\n * exists but is empty (every role auto). An unavailable sentinel or a missing\n * value on a Factory-owned session falls back to Auto roles and default\n * thresholds/attachments, so memory keeps working while Factory reports the error.\n */\ninterface FactoryMemorySettings {\n  observerModelId: string | null;\n  reflectorModelId: string | null;\n  observationThreshold: number | null;\n  reflectionThreshold: number | null;\n  observeAttachments: 'auto' | boolean | null;\n}\n\ntype FactoryMemorySettingsContext =\n  | FactoryMemorySettings\n  | null\n  | { status: 'unavailable'; reason: string }\n  | undefined;\n\nfunction getFactoryMemorySettingsContext(requestContext: RequestContext): FactoryMemorySettingsContext {\n  return requestContext.get('mastra__factoryMemorySettings') as FactoryMemorySettingsContext;\n}\n\nfunction isFactoryMemorySettingsUnavailable(\n  settings: FactoryMemorySettingsContext,\n): settings is { status: 'unavailable'; reason: string } {\n  return settings !== null && typeof settings === 'object' && 'status' in settings && settings.status === 'unavailable';\n}\n\nfunction getMainModelId(requestContext: RequestContext): string | undefined {\n  const controller = requestContext.get('controller') as AgentControllerRequestContext<MastraCodeState> | undefined;\n  return controller?.session.modelId || (controller?.getState()?.currentModelId as string | undefined);\n}\n\n/**\n * Resolve one OM role's model for this invocation. Returns `'auto'` for Memory's\n * auto policy, or a concrete model. Factory's DB row is authoritative for\n * Factory sessions (an unreadable row falls back to auto). Otherwise the active\n * model route's memory models win, then the per-role selection, then legacy\n * concrete settings.\n */\nfunction resolveOmRoleModelForRequest(\n  role: 'observer' | 'reflector',\n  requestContext: RequestContext,\n  settingsPath?: string,\n  options?: { disableSettingsOmSeed?: boolean },\n): 'auto' | ReturnType<typeof resolveModel> | MemoryModelRouteEntry[] {\n  const controller = requestContext.get('controller') as AgentControllerRequestContext<MastraCodeState> | undefined;\n  const state = controller?.getState() as MastraCodeState | undefined;\n  const resolveOptions = { remapForCodexOAuth: true, requestContext, anthropicPromptCacheScope: 'system' } as const;\n  const factorySettingsContext = getFactoryMemorySettingsContext(requestContext);\n  const isFactory = typeof state?.factoryProjectId === 'string';\n\n  const useModel = (modelId: string) => {\n    requestContext.set(`om.${role}.selectionMode`, 'model');\n    requestContext.set(`om.${role}.effectiveModelId`, modelId);\n    return resolveModel(modelId, resolveOptions);\n  };\n  const useAuto = () => {\n    requestContext.set(`om.${role}.selectionMode`, 'auto');\n    // These two keys are declared in the span-context allowlist\n    // (`mastracode/sdk/src/index.ts`), so traces can report intent separately from\n    // the effective concrete model without either being mistaken for a model ID.\n    requestContext.set(\n      `om.${role}.effectiveModelId`,\n      resolveAutoOMModelId(getMainModelId(requestContext), providerId =>\n        canUseProvider(providerId, { requestContext }),\n      ),\n    );\n    return 'auto' as const;\n  };\n\n  if (\n    isFactoryMemorySettingsUnavailable(factorySettingsContext) ||\n    (factorySettingsContext === undefined && isFactory)\n  ) {\n    return useAuto();\n  }\n  if (factorySettingsContext !== undefined) {\n    const factoryModelId = factorySettingsContext?.[`${role}ModelId`];\n    return factoryModelId ? useModel(factoryModelId) : useAuto();\n  }\n\n  // The configured settings file, not the default one: a caller that points the\n  // agent at another settings path must get the same override resolution for\n  // observational memory as it does for the main model. Hosts that disable the\n  // settings seed never read it.\n  const settings = options?.disableSettingsOmSeed ? undefined : loadSettings(settingsPath);\n  const routeMemory = resolveRouteMemoryModels(state, controller?.threadId, modelId =>\n    resolveModel(modelId, resolveOptions),\n  );\n  if (routeMemory === 'auto') return useAuto();\n  if (routeMemory) {\n    requestContext.set(`om.${role}.selectionMode`, 'model');\n    requestContext.set(`om.${role}.effectiveModelId`, routeMemory[0]?.model.modelId);\n    return routeMemory.length === 1 ? routeMemory[0]!.model : routeMemory;\n  }\n\n  const selection: unknown = state?.[`${role}ModelSelection`];\n  if (selection === 'auto') return useAuto();\n  if (typeof selection === 'string' && selection) return useModel(selection);\n  if (\n    selection &&\n    typeof selection === 'object' &&\n    'modelId' in selection &&\n    typeof selection.modelId === 'string' &&\n    selection.modelId\n  ) {\n    return useModel(selection.modelId);\n  }\n\n  const roleOverride =\n    role === 'observer' ? settings?.models?.observerModelOverride : settings?.models?.reflectorModelOverride;\n  if (roleOverride) return useModel(roleOverride);\n  const legacyModelId = state?.[`${role}ModelId`];\n  if (typeof legacyModelId === 'string' && legacyModelId) return useModel(legacyModelId);\n  return useAuto();\n}\n\nconst DYNAMIC_AGENTS_MD_INSTRUCTION =\n  'Messages wrapped in <system-reminder type=\"dynamic-agents-md\" ...>...</system-reminder> are ephemeral project-context instructions injected from files on disk. Do NOT observe or extract information from these messages — they are reloaded automatically when needed and should not be stored in memory.';\n\n// Derived from https://github.com/JuliusBrussee/caveman and adapted for OM use with fixed full-level compression.\nconst CAVEMAN_OM_INSTRUCTION = `Respond terse like smart caveman. All technical substance stay. Only fluff die.\n\nUse full caveman compression style.\n\nDrop: articles (a/an/the), filler (just/really/basically/actually/simply), pleasantries (sure/certainly/of course/happy to), hedging. Fragments OK. Short synonyms (big not extensive, fix not \"implement a solution for\"). Technical terms exact. Code blocks unchanged. Errors quoted exact. Leave out the words \"agent\" and \"assistant\" at the start of each observation line, it is assumed each line is referring to the assistant unless it specifically says it was about the user. Leave out parenthesis and other text characters like * that would not contribute to understanding the observations.\n\nPattern: \\`[thing] [action] [reason]. [next step]\\`\n\nNot: \"Sure! I'd be happy to help you with that. The issue you're experiencing is likely caused by...\"\nYes: \"Bug in auth middleware. Token expiry check use < not <=. Fix:\"\n\nExample 1\n🔴 14:31 user asks why React component rerenders\n🟡 14:32 saw inline object prop create new ref each render, cause rerender\n✅ 14:34 fixed render issue by wrap object in useMemo\n\nExample 2\n🟡 15:10 explained pool reuse DB connections, skip repeat handshake overhead\n\nDon't say \"Agent did x\", say \"did x\". It will be assumed the agent did what was observed. The who should only be specified for the user or other third parties: \"user asked x\"\n\nDrop caveman for: security warnings, irreversible action confirmations, multi-step sequences where fragment order risks misread, user asks to clarify or repeats question, and anything that requires remembering verbatim content. Resume caveman after clear part done`;\n\nexport { LOCAL_KNOWLEDGE_ORG_ID };\n\n// One error per session, not per memory resolution. Keyed on the session id\n// rather than the controller object: the controller is read off the request\n// context on every resolution, so it is a fresh object per request and would\n// dedupe nothing. Bounded so a long-running Factory process cannot grow this\n// without limit — refusing sessions are rare, and losing the oldest ids only\n// costs one extra log line.\nconst REPORTED_ORG_UNRESOLVED_LIMIT = 500;\nconst reportedOrgUnresolved = new Set<string>();\n\nfunction reportOrgUnresolved(\n  controller: AgentControllerRequestContext<MastraCodeState> | undefined,\n  factoryProjectId: string | undefined,\n  reason?: string,\n) {\n  const sessionId = controller?.session?.id;\n  if (sessionId) {\n    if (reportedOrgUnresolved.has(sessionId)) return;\n    if (reportedOrgUnresolved.size >= REPORTED_ORG_UNRESOLVED_LIMIT) {\n      reportedOrgUnresolved.delete(reportedOrgUnresolved.values().next().value as string);\n    }\n    reportedOrgUnresolved.add(sessionId);\n  }\n  const session = controller?.session;\n  console.error(\n    `[Subconscious] Knowledge curation disabled: no organization resolved for session ${session?.id ?? 'unknown'} (project ${factoryProjectId ?? 'none'})${reason ? `: ${reason}` : ''}. Knowledge is not written rather than written where it cannot be read.`,\n  );\n}\n\n/**\n * Whether the experimental subconscious (knowledge graph + reminder sidekick)\n * is switched on for this process: it needs a vector store and the opt-in flag.\n */\nexport function isSubconsciousEnabled(vector: MastraVector | undefined): boolean {\n  return Boolean(vector) && process.env.MASTRACODE_EXPERIMENTAL_SUBCONSCIOUS === '1';\n}\n\n/**\n * Whether the subconscious tools (`knowledge_*`, `ask_memory`) are registered\n * for a given session. Beyond the process-level switch, a Factory-owned\n * session that cannot resolve its org refuses the subconscious entirely (see\n * `getDynamicMemory`, which applies the same two checks inline because it also\n * needs the resolved identity). The system prompt's tool guidance calls here so\n * it never advertises tools that `getDynamicMemory` did not register.\n */\nexport function hasSubconsciousTools(vector: MastraVector | undefined, state: MastraCodeState | undefined): boolean {\n  return isSubconsciousEnabled(vector) && resolveKnowledgeScopeIdentity(state).resolved;\n}\n\n/**\n * Dynamic memory factory function.\n * Reads OM thresholds from controller state via requestContext.\n * Model functions also read from requestContext (no mutable bridge needed).\n */\nexport function getDynamicMemory(\n  storage: MastraCompositeStore,\n  vector?: MastraVector,\n  settingsPath?: string,\n  options?: { disableSettingsOmSeed?: boolean },\n  knowledge?: Knowledge,\n) {\n  // Cache is scoped per storage instance (per getDynamicMemory call) so a\n  // Memory bound to one storage is never reused after storage changes.\n  let cachedMemory: Memory | null = null;\n  let cachedMemoryKey: string | null = null;\n  // Instances replaced by a config change may still have background work in flight.\n  const retiredMemories = new Set<Memory>();\n\n  // Observer/reflector model functions — read the current model ID from\n  // controller state via requestContext (propagated by OM's agent.generate).\n  // Bound here so the configured settings path reaches role overrides and pack\n  // memory-model resolution.\n  const getObserverModel = ({ requestContext }: { requestContext: RequestContext }) =>\n    resolveOmRoleModelForRequest('observer', requestContext, settingsPath, options);\n  const getReflectorModel = ({ requestContext }: { requestContext: RequestContext }) =>\n    resolveOmRoleModelForRequest('reflector', requestContext, settingsPath, options);\n  // Routes the concrete model Memory's `'auto'` picks through Mastra Code's\n  // credential-aware resolver, like every other Mastra Code model.\n  const resolveMemoryModel = (modelId: string, { requestContext }: { requestContext?: RequestContext }) =>\n    resolveModel(modelId, { remapForCodexOAuth: true, requestContext, anthropicPromptCacheScope: 'system' });\n\n  const resolveMemory = ({ requestContext }: { requestContext: RequestContext }) => {\n    const controller = requestContext.get('controller') as AgentControllerRequestContext<MastraCodeState> | undefined;\n    const state = controller?.getState() as MastraCodeState | undefined;\n    const subconsciousEnabled = isSubconsciousEnabled(vector);\n    const factoryProjectId = state?.factoryProjectId;\n    const isFactory = typeof factoryProjectId === 'string' && factoryProjectId.trim().length > 0;\n\n    // A Factory-owned session that could not resolve its org refuses to curate:\n    // writing under a substituted identity produces knowledge the fail-closed\n    // read path can never see.\n    let orgUnresolvedRefusal = false;\n\n    if (subconsciousEnabled) {\n      const identity = resolveKnowledgeScopeIdentity(state);\n      if (identity.resolved) {\n        requestContext.set('organizationId', identity.organizationId);\n      } else {\n        orgUnresolvedRefusal = true;\n        reportOrgUnresolved(controller, identity.knowledgeResourceId, identity.reason);\n      }\n      if (identity.knowledgeResourceId) {\n        requestContext.set('knowledgeResourceId', identity.knowledgeResourceId);\n      }\n    }\n\n    const subconsciousAvailable = subconsciousEnabled && !orgUnresolvedRefusal;\n\n    // Factory sessions share a memory resource across a Factory's runs and a\n    // user's sessions, so their scope is fixed to thread: one shared record would\n    // hand every run the others' work and invalidate their prompt caches. Recall\n    // search still reaches the whole resource. Neither session state, the env\n    // var, nor a repository's database.json can switch it.\n    const omScope = isFactory ? 'thread' : (state?.omScope ?? getOmScope(state?.projectPath));\n\n    // The Factory row is authoritative and read per invocation, so a stored\n    // threshold/attachment change reaches the running Memory without a session.\n    const factorySettingsContext = getFactoryMemorySettingsContext(requestContext);\n    const factorySettingsUnavailable =\n      isFactoryMemorySettingsUnavailable(factorySettingsContext) || (factorySettingsContext === undefined && isFactory);\n    const factorySettings = factorySettingsUnavailable ? null : factorySettingsContext;\n    const obsThreshold =\n      factorySettings !== undefined\n        ? (factorySettings?.observationThreshold ?? DEFAULT_OBS_THRESHOLD)\n        : (state?.observationThreshold ?? DEFAULT_OBS_THRESHOLD);\n    const refThreshold =\n      factorySettings !== undefined\n        ? (factorySettings?.reflectionThreshold ?? DEFAULT_REF_THRESHOLD)\n        : (state?.reflectionThreshold ?? DEFAULT_REF_THRESHOLD);\n    const caveman = state?.cavemanObservations ?? false;\n\n    const observerPreviousObservationTokens = 1000;\n    // The row is authoritative: an absent value means the user left it on Auto,\n    // which the config API reports as 'auto' and Memory resolves by model\n    // capability.\n    const observeAttachments =\n      factorySettings !== undefined ? (factorySettings?.observeAttachments ?? 'auto') : state?.observeAttachments;\n    // Factory sessions get a factory-only Subconscious config, so the cache key\n    // carries Factory presence and settings availability to keep those configs\n    // from cross-serving.\n    const cacheKey = `${obsThreshold}:${refThreshold}:${omScope}:${observerPreviousObservationTokens}:${caveman ? 1 : 0}:${observeAttachments}:${isFactory ? 1 : 0}:${subconsciousAvailable ? 1 : 0}`;\n    if (cachedMemory && cachedMemoryKey === cacheKey) {\n      return cachedMemory;\n    }\n\n    // Async buffering is not supported with resource scope — disable it\n    const isResourceScope = omScope === 'resource';\n\n    const observerInstruction = caveman\n      ? `${DYNAMIC_AGENTS_MD_INSTRUCTION}\\n\\n${CAVEMAN_OM_INSTRUCTION}`\n      : DYNAMIC_AGENTS_MD_INSTRUCTION;\n    const reflectionInstruction = caveman ? CAVEMAN_OM_INSTRUCTION : undefined;\n\n    if (cachedMemory) {\n      const retired = cachedMemory;\n      retiredMemories.add(retired);\n      // settled() rejects if the instance's OM engine failed to start; that must not surface as\n      // an unhandled rejection from a background retirement.\n      void retired\n        .settled()\n        .catch(() => {})\n        .finally(() => retiredMemories.delete(retired));\n    }\n\n    cachedMemory = new Memory({\n      storage,\n      ...(knowledge ? { knowledge } : {}),\n      vector: vector || false,\n      embedder: vector ? fastembed.small : undefined,\n      options: {\n        // Generate a durable title from the first user message. Every client uses\n        // the same title in its thread list and active-session chrome. Title\n        // generation takes the primary OM model only — its model field does not\n        // accept fallback arrays.\n        generateTitle:\n          process.env.MASTRACODE_DISABLE_TITLE_GENERATION === '1'\n            ? false\n            : {\n                model: ({ requestContext }) => {\n                  const resolved = getObserverModel({ requestContext });\n                  if (resolved === 'auto') {\n                    return resolveMemoryModel(\n                      resolveAutoOMModelId(getMainModelId(requestContext), providerId =>\n                        canUseProvider(providerId, { requestContext }),\n                      ),\n                      { requestContext },\n                    );\n                  }\n                  return Array.isArray(resolved) ? resolved[0]!.model : resolved;\n                },\n              },\n        observationalMemory:\n          process.env.MASTRACODE_DISABLE_OBSERVATIONAL_MEMORY === '1'\n            ? false\n            : {\n                enabled: true,\n                autoModels: MASTRACODE_AUTO_OM_MODELS,\n                canUseProvider,\n                resolveModel: resolveMemoryModel,\n                temporalMarkers: true,\n                retrieval: vector ? { vector: true } : true,\n                experimental_subconscious: subconsciousAvailable\n                  ? new Subconscious({\n                      defaultScope: 'resource',\n                      pins: true,\n                      ...(isFactory ? { maxSteps: 25 } : {}),\n                    })\n                  : undefined,\n                scope: omScope,\n                // The main agent writes Anthropic cache entries with this TTL; 'auto' can't see it.\n                activateAfterIdle: { default: 'auto', anthropic: ANTHROPIC_PROMPT_CACHE_TTL },\n                activateOnProviderChange: true,\n                observation: {\n                  bufferTokens: isResourceScope ? false : 1 / 5,\n                  bufferActivation: isResourceScope ? undefined : 2000,\n                  model: getObserverModel,\n                  messageTokens: obsThreshold,\n                  blockAfter: 2,\n                  previousObserverTokens: observerPreviousObservationTokens,\n                  threadTitle: true,\n                  instruction: observerInstruction,\n                  observeAttachments,\n                },\n                reflection: {\n                  bufferActivation: isResourceScope ? undefined : 1 / 2,\n                  blockAfter: 1.1,\n                  model: getReflectorModel,\n                  observationTokens: refThreshold,\n                  instruction: reflectionInstruction,\n                },\n              },\n      },\n    });\n    cachedMemoryKey = cacheKey;\n\n    return cachedMemory;\n  };\n\n  return Object.assign(resolveMemory, {\n    /**\n     * Wait for background memory work (buffered observations, reflections, indexing) in every\n     * instance this factory created. Await before closing storage.\n     */\n    async settled(): Promise<void> {\n      // Drain every instance even if one rejects, so teardown can still close storage.\n      await Promise.allSettled([cachedMemory?.settled(), ...[...retiredMemories].map(memory => memory.settled())]);\n    },\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;AAwBA,SAAS,yBACP,OACA,UACA,SAC8C;CAC9C,MAAM,cAAc,qBAAqB,OAAO,QAAQ;CACxD,IAAI,YAAY,EAAE,EAAE,kBAAkB,QAAQ,OAAO;CACrD,MAAM,+BAAe,IAAI,IAAY;CACrC,MAAM,8BAAc,IAAI,IAAoB;CAC5C,MAAM,UAAmC,CAAC;CAC1C,KAAK,MAAM,SAAS,aAAa;EAC/B,IAAI,CAAC,MAAM,iBAAiB,MAAM,kBAAkB,UAAU,aAAa,IAAI,MAAM,aAAa,GAAG;EACrG,aAAa,IAAI,MAAM,aAAa;EACpC,MAAM,cAAc,YAAY,IAAI,MAAM,EAAE,KAAK,KAAK;EACtD,YAAY,IAAI,MAAM,IAAI,UAAU;EACpC,IAAI;GACF,QAAQ,KAAK;IACX,IAAI,GAAG,MAAM,GAAG,SAAS,eAAe,IAAI,KAAK,IAAI;IACrD,OAAO,QAAQ,MAAM,aAAa;GACpC,CAAC;EACH,QAAQ;GACN;EACF;CACF;CACA,OAAO,QAAQ,SAAS,IAAI,UAAU,KAAA;AACxC;AAuBA,SAAS,gCAAgC,gBAA8D;CACrG,OAAO,eAAe,IAAI,+BAA+B;AAC3D;AAEA,SAAS,mCACP,UACuD;CACvD,OAAO,aAAa,QAAQ,OAAO,aAAa,YAAY,YAAY,YAAY,SAAS,WAAW;AAC1G;AAEA,SAAS,eAAe,gBAAoD;CAC1E,MAAM,aAAa,eAAe,IAAI,YAAY;CAClD,OAAO,YAAY,QAAQ,WAAY,YAAY,SAAS,CAAC,EAAE;AACjE;;;;;;;;AASA,SAAS,6BACP,MACA,gBACA,cACA,SACoE;CACpE,MAAM,aAAa,eAAe,IAAI,YAAY;CAClD,MAAM,QAAQ,YAAY,SAAS;CACnC,MAAM,iBAAiB;EAAE,oBAAoB;EAAM;EAAgB,2BAA2B;CAAS;CACvG,MAAM,yBAAyB,gCAAgC,cAAc;CAC7E,MAAM,YAAY,OAAO,OAAO,qBAAqB;CAErD,MAAM,YAAY,YAAoB;EACpC,eAAe,IAAI,MAAM,KAAK,iBAAiB,OAAO;EACtD,eAAe,IAAI,MAAM,KAAK,oBAAoB,OAAO;EACzD,OAAO,aAAa,SAAS,cAAc;CAC7C;CACA,MAAM,gBAAgB;EACpB,eAAe,IAAI,MAAM,KAAK,iBAAiB,MAAM;EAIrD,eAAe,IACb,MAAM,KAAK,oBACX,qBAAqB,eAAe,cAAc,IAAG,eACnD,eAAe,YAAY,EAAE,eAAe,CAAC,CAC/C,CACF;EACA,OAAO;CACT;CAEA,IACE,mCAAmC,sBAAsB,KACxD,2BAA2B,KAAA,KAAa,WAEzC,OAAO,QAAQ;CAEjB,IAAI,2BAA2B,KAAA,GAAW;EACxC,MAAM,iBAAiB,yBAAyB,GAAG,KAAK;EACxD,OAAO,iBAAiB,SAAS,cAAc,IAAI,QAAQ;CAC7D;CAMA,MAAM,WAAW,SAAS,wBAAwB,KAAA,IAAY,aAAa,YAAY;CACvF,MAAM,cAAc,yBAAyB,OAAO,YAAY,WAAU,YACxE,aAAa,SAAS,cAAc,CACtC;CACA,IAAI,gBAAgB,QAAQ,OAAO,QAAQ;CAC3C,IAAI,aAAa;EACf,eAAe,IAAI,MAAM,KAAK,iBAAiB,OAAO;EACtD,eAAe,IAAI,MAAM,KAAK,oBAAoB,YAAY,EAAE,EAAE,MAAM,OAAO;EAC/E,OAAO,YAAY,WAAW,IAAI,YAAY,EAAE,CAAE,QAAQ;CAC5D;CAEA,MAAM,YAAqB,QAAQ,GAAG,KAAK;CAC3C,IAAI,cAAc,QAAQ,OAAO,QAAQ;CACzC,IAAI,OAAO,cAAc,YAAY,WAAW,OAAO,SAAS,SAAS;CACzE,IACE,aACA,OAAO,cAAc,YACrB,aAAa,aACb,OAAO,UAAU,YAAY,YAC7B,UAAU,SAEV,OAAO,SAAS,UAAU,OAAO;CAGnC,MAAM,eACJ,SAAS,aAAa,UAAU,QAAQ,wBAAwB,UAAU,QAAQ;CACpF,IAAI,cAAc,OAAO,SAAS,YAAY;CAC9C,MAAM,gBAAgB,QAAQ,GAAG,KAAK;CACtC,IAAI,OAAO,kBAAkB,YAAY,eAAe,OAAO,SAAS,aAAa;CACrF,OAAO,QAAQ;AACjB;AAEA,MAAM,gCACJ;AAGF,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;AA+B/B,MAAM,gCAAgC;AACtC,MAAM,wCAAwB,IAAI,IAAY;AAE9C,SAAS,oBACP,YACA,kBACA,QACA;CACA,MAAM,YAAY,YAAY,SAAS;CACvC,IAAI,WAAW;EACb,IAAI,sBAAsB,IAAI,SAAS,GAAG;EAC1C,IAAI,sBAAsB,QAAQ,+BAChC,sBAAsB,OAAO,sBAAsB,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAe;EAEpF,sBAAsB,IAAI,SAAS;CACrC;CACA,MAAM,UAAU,YAAY;CAC5B,QAAQ,MACN,oFAAoF,SAAS,MAAM,UAAU,YAAY,oBAAoB,OAAO,GAAG,SAAS,KAAK,WAAW,GAAG,wEACrL;AACF;;;;;AAMA,SAAgB,sBAAsB,QAA2C;CAC/E,OAAO,QAAQ,MAAM,KAAK,QAAQ,IAAI,yCAAyC;AACjF;;;;;;;;;AAUA,SAAgB,qBAAqB,QAAkC,OAA6C;CAClH,OAAO,sBAAsB,MAAM,KAAK,8BAA8B,KAAK,CAAC,CAAC;AAC/E;;;;;;AAOA,SAAgB,iBACd,SACA,QACA,cACA,SACA,WACA;CAGA,IAAI,eAA8B;CAClC,IAAI,kBAAiC;CAErC,MAAM,kCAAkB,IAAI,IAAY;CAMxC,MAAM,oBAAoB,EAAE,qBAC1B,6BAA6B,YAAY,gBAAgB,cAAc,OAAO;CAChF,MAAM,qBAAqB,EAAE,qBAC3B,6BAA6B,aAAa,gBAAgB,cAAc,OAAO;CAGjF,MAAM,sBAAsB,SAAiB,EAAE,qBAC7C,aAAa,SAAS;EAAE,oBAAoB;EAAM;EAAgB,2BAA2B;CAAS,CAAC;CAEzG,MAAM,iBAAiB,EAAE,qBAAyD;EAChF,MAAM,aAAa,eAAe,IAAI,YAAY;EAClD,MAAM,QAAQ,YAAY,SAAS;EACnC,MAAM,sBAAsB,sBAAsB,MAAM;EACxD,MAAM,mBAAmB,OAAO;EAChC,MAAM,YAAY,OAAO,qBAAqB,YAAY,iBAAiB,KAAK,CAAC,CAAC,SAAS;EAK3F,IAAI,uBAAuB;EAE3B,IAAI,qBAAqB;GACvB,MAAM,WAAW,8BAA8B,KAAK;GACpD,IAAI,SAAS,UACX,eAAe,IAAI,kBAAkB,SAAS,cAAc;QACvD;IACL,uBAAuB;IACvB,oBAAoB,YAAY,SAAS,qBAAqB,SAAS,MAAM;GAC/E;GACA,IAAI,SAAS,qBACX,eAAe,IAAI,uBAAuB,SAAS,mBAAmB;EAE1E;EAEA,MAAM,wBAAwB,uBAAuB,CAAC;EAOtD,MAAM,UAAU,YAAY,WAAY,OAAO,WAAW,WAAW,OAAO,WAAW;EAIvF,MAAM,yBAAyB,gCAAgC,cAAc;EAG7E,MAAM,kBADJ,mCAAmC,sBAAsB,KAAM,2BAA2B,KAAA,KAAa,YACpD,OAAO;EAC5D,MAAM,eACJ,oBAAoB,KAAA,IACf,iBAAiB,wBAAA,MACjB,OAAO,wBAAA;EACd,MAAM,eACJ,oBAAoB,KAAA,IACf,iBAAiB,uBAAA,MACjB,OAAO,uBAAA;EACd,MAAM,UAAU,OAAO,uBAAuB;EAE9C,MAAM,oCAAoC;EAI1C,MAAM,qBACJ,oBAAoB,KAAA,IAAa,iBAAiB,sBAAsB,SAAU,OAAO;EAI3F,MAAM,WAAW,GAAG,aAAa,GAAG,aAAa,GAAG,QAAQ,GAAG,kCAAkC,GAAG,UAAU,IAAI,EAAE,GAAG,mBAAmB,GAAG,YAAY,IAAI,EAAE,GAAG,wBAAwB,IAAI;EAC9L,IAAI,gBAAgB,oBAAoB,UACtC,OAAO;EAIT,MAAM,kBAAkB,YAAY;EAEpC,MAAM,sBAAsB,UACxB,GAAG,8BAA8B,MAAM,2BACvC;EACJ,MAAM,wBAAwB,UAAU,yBAAyB,KAAA;EAEjE,IAAI,cAAc;GAChB,MAAM,UAAU;GAChB,gBAAgB,IAAI,OAAO;GAG3B,QACG,QAAQ,CAAC,CACT,YAAY,CAAC,CAAC,CAAC,CACf,cAAc,gBAAgB,OAAO,OAAO,CAAC;EAClD;EAEA,eAAe,IAAI,OAAO;GACxB;GACA,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;GACjC,QAAQ,UAAU;GAClB,UAAU,SAAS,UAAU,QAAQ,KAAA;GACrC,SAAS;IAKP,eACE,QAAQ,IAAI,wCAAwC,MAChD,QACA,EACE,QAAQ,EAAE,qBAAqB;KAC7B,MAAM,WAAW,iBAAiB,EAAE,eAAe,CAAC;KACpD,IAAI,aAAa,QACf,OAAO,mBACL,qBAAqB,eAAe,cAAc,IAAG,eACnD,eAAe,YAAY,EAAE,eAAe,CAAC,CAC/C,GACA,EAAE,eAAe,CACnB;KAEF,OAAO,MAAM,QAAQ,QAAQ,IAAI,SAAS,EAAE,CAAE,QAAQ;IACxD,EACF;IACN,qBACE,QAAQ,IAAI,4CAA4C,MACpD,QACA;KACE,SAAS;KACT,YAAY;KACZ;KACA,cAAc;KACd,iBAAiB;KACjB,WAAW,SAAS,EAAE,QAAQ,KAAK,IAAI;KACvC,2BAA2B,wBACvB,IAAI,aAAa;MACf,cAAc;MACd,MAAM;MACN,GAAI,YAAY,EAAE,UAAU,GAAG,IAAI,CAAC;KACtC,CAAC,IACD,KAAA;KACJ,OAAO;KAEP,mBAAmB;MAAE,SAAS;MAAQ,WAAA;KAAsC;KAC5E,0BAA0B;KAC1B,aAAa;MACX,cAAc,kBAAkB,QAAQ,IAAI;MAC5C,kBAAkB,kBAAkB,KAAA,IAAY;MAChD,OAAO;MACP,eAAe;MACf,YAAY;MACZ,wBAAwB;MACxB,aAAa;MACb,aAAa;MACb;KACF;KACA,YAAY;MACV,kBAAkB,kBAAkB,KAAA,IAAY,IAAI;MACpD,YAAY;MACZ,OAAO;MACP,mBAAmB;MACnB,aAAa;KACf;IACF;GACR;EACF,CAAC;EACD,kBAAkB;EAElB,OAAO;CACT;CAEA,OAAO,OAAO,OAAO,eAAe;;;;;AAKlC,MAAM,UAAyB;EAE7B,MAAM,QAAQ,WAAW,CAAC,cAAc,QAAQ,GAAG,GAAG,CAAC,GAAG,eAAe,CAAC,CAAC,KAAI,WAAU,OAAO,QAAQ,CAAC,CAAC,CAAC;CAC7G,EACF,CAAC;AACH"}
+{"version":3,"file":"memory.js","names":[],"sources":["../../src/agents/memory.ts"],"sourcesContent":["import type { AgentControllerRequestContext } from '@mastra/core/agent-controller';\nimport type { Knowledge } from '@mastra/core/knowledge';\nimport type { RequestContext } from '@mastra/core/request-context';\nimport type { MastraCompositeStore } from '@mastra/core/storage';\nimport type { MastraVector } from '@mastra/core/vector';\nimport type { fastembed } from '@mastra/fastembed';\nimport { Memory, Subconscious } from '@mastra/memory';\nimport { DEFAULT_OBS_THRESHOLD, DEFAULT_REF_THRESHOLD } from '../constants.js';\nimport { LOCAL_KNOWLEDGE_ORG_ID, resolveKnowledgeScopeIdentity } from '../knowledge-scope.js';\nimport { MASTRACODE_AUTO_OM_MODELS, resolveAutoOMModelId } from '../onboarding/packs.js';\nimport { loadSettings } from '../onboarding/settings.js';\nimport { ANTHROPIC_PROMPT_CACHE_TTL } from '../providers/anthropic-prompt-cache.js';\nimport type { MastraCodeState } from '../schema.js';\nimport { getOmScope } from '../utils/project.js';\nimport { canUseProvider, getActiveMemoryRoute, resolveModel } from './model.js';\n\n/**\n * `fastembed.small`, loaded on the first embedding. Importing `@mastra/fastembed` up front loads ONNX\n * Runtime and a native tokenizer (~11 MB) into every session, including ones that never embed.\n */\nconst lazyFastembedSmall: typeof fastembed.small = {\n  specificationVersion: 'v3',\n  provider: 'fastembed',\n  modelId: 'bge-small-en-v1.5',\n  maxEmbeddingsPerCall: 256,\n  supportsParallelCalls: true,\n  async doEmbed(options) {\n    const { fastembed } = await import('@mastra/fastembed');\n    return fastembed.small.doEmbed(options);\n  },\n};\n\n/** Route-backed OM fallback entry. */\ntype MemoryModelRouteEntry = { id: string; model: ReturnType<typeof resolveModel> };\n\n/**\n * Resolve the active model route's memory models, starting at a same-thread\n * pending fallback hop. Returns `'auto'` when the route's first memory model is\n * Auto, and `undefined` when the route sets no memory model.\n */\nfunction resolveRouteMemoryModels(\n  state: MastraCodeState | undefined,\n  threadId: string | null | undefined,\n  resolve: (modelId: string) => ReturnType<typeof resolveModel>,\n): MemoryModelRouteEntry[] | 'auto' | undefined {\n  const memoryRoute = getActiveMemoryRoute(state, threadId);\n  if (memoryRoute[0]?.memoryModelId === 'auto') return 'auto';\n  const seenModelIds = new Set<string>();\n  const appearances = new Map<string, number>();\n  const entries: MemoryModelRouteEntry[] = [];\n  for (const entry of memoryRoute) {\n    if (!entry.memoryModelId || entry.memoryModelId === 'auto' || seenModelIds.has(entry.memoryModelId)) continue;\n    seenModelIds.add(entry.memoryModelId);\n    const occurrence = (appearances.get(entry.id) ?? 0) + 1;\n    appearances.set(entry.id, occurrence);\n    try {\n      entries.push({\n        id: `${entry.id}:memory${occurrence === 1 ? '' : `#${occurrence}`}`,\n        model: resolve(entry.memoryModelId),\n      });\n    } catch {\n      break;\n    }\n  }\n  return entries.length > 0 ? entries : undefined;\n}\n\n/**\n * The authoritative per-caller Factory memory-settings row, placed on the request\n * context before Factory's model-dependent processors run. `null` means the row\n * exists but is empty (every role auto). An unavailable sentinel or a missing\n * value on a Factory-owned session falls back to Auto roles and default\n * thresholds/attachments, so memory keeps working while Factory reports the error.\n */\ninterface FactoryMemorySettings {\n  observerModelId: string | null;\n  reflectorModelId: string | null;\n  observationThreshold: number | null;\n  reflectionThreshold: number | null;\n  observeAttachments: 'auto' | boolean | null;\n}\n\ntype FactoryMemorySettingsContext =\n  | FactoryMemorySettings\n  | null\n  | { status: 'unavailable'; reason: string }\n  | undefined;\n\nfunction getFactoryMemorySettingsContext(requestContext: RequestContext): FactoryMemorySettingsContext {\n  return requestContext.get('mastra__factoryMemorySettings') as FactoryMemorySettingsContext;\n}\n\nfunction isFactoryMemorySettingsUnavailable(\n  settings: FactoryMemorySettingsContext,\n): settings is { status: 'unavailable'; reason: string } {\n  return settings !== null && typeof settings === 'object' && 'status' in settings && settings.status === 'unavailable';\n}\n\nfunction getMainModelId(requestContext: RequestContext): string | undefined {\n  const controller = requestContext.get('controller') as AgentControllerRequestContext<MastraCodeState> | undefined;\n  return controller?.session.modelId || (controller?.getState()?.currentModelId as string | undefined);\n}\n\n/**\n * Resolve one OM role's model for this invocation. Returns `'auto'` for Memory's\n * auto policy, or a concrete model. Factory's DB row is authoritative for\n * Factory sessions (an unreadable row falls back to auto). Otherwise the active\n * model route's memory models win, then the per-role selection, then legacy\n * concrete settings.\n */\nfunction resolveOmRoleModelForRequest(\n  role: 'observer' | 'reflector',\n  requestContext: RequestContext,\n  settingsPath?: string,\n  options?: { disableSettingsOmSeed?: boolean },\n): 'auto' | ReturnType<typeof resolveModel> | MemoryModelRouteEntry[] {\n  const controller = requestContext.get('controller') as AgentControllerRequestContext<MastraCodeState> | undefined;\n  const state = controller?.getState() as MastraCodeState | undefined;\n  const resolveOptions = { remapForCodexOAuth: true, requestContext, anthropicPromptCacheScope: 'system' } as const;\n  const factorySettingsContext = getFactoryMemorySettingsContext(requestContext);\n  const isFactory = typeof state?.factoryProjectId === 'string';\n\n  const useModel = (modelId: string) => {\n    requestContext.set(`om.${role}.selectionMode`, 'model');\n    requestContext.set(`om.${role}.effectiveModelId`, modelId);\n    return resolveModel(modelId, resolveOptions);\n  };\n  const useAuto = () => {\n    requestContext.set(`om.${role}.selectionMode`, 'auto');\n    // These two keys are declared in the span-context allowlist\n    // (`mastracode/sdk/src/index.ts`), so traces can report intent separately from\n    // the effective concrete model without either being mistaken for a model ID.\n    requestContext.set(\n      `om.${role}.effectiveModelId`,\n      resolveAutoOMModelId(getMainModelId(requestContext), providerId =>\n        canUseProvider(providerId, { requestContext }),\n      ),\n    );\n    return 'auto' as const;\n  };\n\n  if (\n    isFactoryMemorySettingsUnavailable(factorySettingsContext) ||\n    (factorySettingsContext === undefined && isFactory)\n  ) {\n    return useAuto();\n  }\n  if (factorySettingsContext !== undefined) {\n    const factoryModelId = factorySettingsContext?.[`${role}ModelId`];\n    return factoryModelId ? useModel(factoryModelId) : useAuto();\n  }\n\n  // The configured settings file, not the default one: a caller that points the\n  // agent at another settings path must get the same override resolution for\n  // observational memory as it does for the main model. Hosts that disable the\n  // settings seed never read it.\n  const settings = options?.disableSettingsOmSeed ? undefined : loadSettings(settingsPath);\n  const routeMemory = resolveRouteMemoryModels(state, controller?.threadId, modelId =>\n    resolveModel(modelId, resolveOptions),\n  );\n  if (routeMemory === 'auto') return useAuto();\n  if (routeMemory) {\n    requestContext.set(`om.${role}.selectionMode`, 'model');\n    requestContext.set(`om.${role}.effectiveModelId`, routeMemory[0]?.model.modelId);\n    return routeMemory.length === 1 ? routeMemory[0]!.model : routeMemory;\n  }\n\n  const selection: unknown = state?.[`${role}ModelSelection`];\n  if (selection === 'auto') return useAuto();\n  if (typeof selection === 'string' && selection) return useModel(selection);\n  if (\n    selection &&\n    typeof selection === 'object' &&\n    'modelId' in selection &&\n    typeof selection.modelId === 'string' &&\n    selection.modelId\n  ) {\n    return useModel(selection.modelId);\n  }\n\n  const roleOverride =\n    role === 'observer' ? settings?.models?.observerModelOverride : settings?.models?.reflectorModelOverride;\n  if (roleOverride) return useModel(roleOverride);\n  const legacyModelId = state?.[`${role}ModelId`];\n  if (typeof legacyModelId === 'string' && legacyModelId) return useModel(legacyModelId);\n  return useAuto();\n}\n\nconst DYNAMIC_AGENTS_MD_INSTRUCTION =\n  'Messages wrapped in <system-reminder type=\"dynamic-agents-md\" ...>...</system-reminder> are ephemeral project-context instructions injected from files on disk. Do NOT observe or extract information from these messages — they are reloaded automatically when needed and should not be stored in memory.';\n\n// Derived from https://github.com/JuliusBrussee/caveman and adapted for OM use with fixed full-level compression.\nconst CAVEMAN_OM_INSTRUCTION = `Respond terse like smart caveman. All technical substance stay. Only fluff die.\n\nUse full caveman compression style.\n\nDrop: articles (a/an/the), filler (just/really/basically/actually/simply), pleasantries (sure/certainly/of course/happy to), hedging. Fragments OK. Short synonyms (big not extensive, fix not \"implement a solution for\"). Technical terms exact. Code blocks unchanged. Errors quoted exact. Leave out the words \"agent\" and \"assistant\" at the start of each observation line, it is assumed each line is referring to the assistant unless it specifically says it was about the user. Leave out parenthesis and other text characters like * that would not contribute to understanding the observations.\n\nPattern: \\`[thing] [action] [reason]. [next step]\\`\n\nNot: \"Sure! I'd be happy to help you with that. The issue you're experiencing is likely caused by...\"\nYes: \"Bug in auth middleware. Token expiry check use < not <=. Fix:\"\n\nExample 1\n🔴 14:31 user asks why React component rerenders\n🟡 14:32 saw inline object prop create new ref each render, cause rerender\n✅ 14:34 fixed render issue by wrap object in useMemo\n\nExample 2\n🟡 15:10 explained pool reuse DB connections, skip repeat handshake overhead\n\nDon't say \"Agent did x\", say \"did x\". It will be assumed the agent did what was observed. The who should only be specified for the user or other third parties: \"user asked x\"\n\nDrop caveman for: security warnings, irreversible action confirmations, multi-step sequences where fragment order risks misread, user asks to clarify or repeats question, and anything that requires remembering verbatim content. Resume caveman after clear part done`;\n\nexport { LOCAL_KNOWLEDGE_ORG_ID };\n\n// One error per session, not per memory resolution. Keyed on the session id\n// rather than the controller object: the controller is read off the request\n// context on every resolution, so it is a fresh object per request and would\n// dedupe nothing. Bounded so a long-running Factory process cannot grow this\n// without limit — refusing sessions are rare, and losing the oldest ids only\n// costs one extra log line.\nconst REPORTED_ORG_UNRESOLVED_LIMIT = 500;\nconst reportedOrgUnresolved = new Set<string>();\n\nfunction reportOrgUnresolved(\n  controller: AgentControllerRequestContext<MastraCodeState> | undefined,\n  factoryProjectId: string | undefined,\n  reason?: string,\n) {\n  const sessionId = controller?.session?.id;\n  if (sessionId) {\n    if (reportedOrgUnresolved.has(sessionId)) return;\n    if (reportedOrgUnresolved.size >= REPORTED_ORG_UNRESOLVED_LIMIT) {\n      reportedOrgUnresolved.delete(reportedOrgUnresolved.values().next().value as string);\n    }\n    reportedOrgUnresolved.add(sessionId);\n  }\n  const session = controller?.session;\n  console.error(\n    `[Subconscious] Knowledge curation disabled: no organization resolved for session ${session?.id ?? 'unknown'} (project ${factoryProjectId ?? 'none'})${reason ? `: ${reason}` : ''}. Knowledge is not written rather than written where it cannot be read.`,\n  );\n}\n\n/**\n * Whether the experimental subconscious (knowledge graph + reminder sidekick)\n * is switched on for this process: it needs a vector store and the opt-in flag.\n */\nexport function isSubconsciousEnabled(vector: MastraVector | undefined): boolean {\n  return Boolean(vector) && process.env.MASTRACODE_EXPERIMENTAL_SUBCONSCIOUS === '1';\n}\n\n/**\n * Whether the subconscious tools (`knowledge_*`, `ask_memory`) are registered\n * for a given session. Beyond the process-level switch, a Factory-owned\n * session that cannot resolve its org refuses the subconscious entirely (see\n * `getDynamicMemory`, which applies the same two checks inline because it also\n * needs the resolved identity). The system prompt's tool guidance calls here so\n * it never advertises tools that `getDynamicMemory` did not register.\n */\nexport function hasSubconsciousTools(vector: MastraVector | undefined, state: MastraCodeState | undefined): boolean {\n  return isSubconsciousEnabled(vector) && resolveKnowledgeScopeIdentity(state).resolved;\n}\n\n/**\n * Dynamic memory factory function.\n * Reads OM thresholds from controller state via requestContext.\n * Model functions also read from requestContext (no mutable bridge needed).\n */\nexport function getDynamicMemory(\n  storage: MastraCompositeStore,\n  vector?: MastraVector,\n  settingsPath?: string,\n  options?: { disableSettingsOmSeed?: boolean },\n  knowledge?: Knowledge,\n) {\n  // Cache is scoped per storage instance (per getDynamicMemory call) so a\n  // Memory bound to one storage is never reused after storage changes.\n  let cachedMemory: Memory | null = null;\n  let cachedMemoryKey: string | null = null;\n  // Instances replaced by a config change may still have background work in flight.\n  const retiredMemories = new Set<Memory>();\n\n  // Observer/reflector model functions — read the current model ID from\n  // controller state via requestContext (propagated by OM's agent.generate).\n  // Bound here so the configured settings path reaches role overrides and pack\n  // memory-model resolution.\n  const getObserverModel = ({ requestContext }: { requestContext: RequestContext }) =>\n    resolveOmRoleModelForRequest('observer', requestContext, settingsPath, options);\n  const getReflectorModel = ({ requestContext }: { requestContext: RequestContext }) =>\n    resolveOmRoleModelForRequest('reflector', requestContext, settingsPath, options);\n  // Routes the concrete model Memory's `'auto'` picks through Mastra Code's\n  // credential-aware resolver, like every other Mastra Code model.\n  const resolveMemoryModel = (modelId: string, { requestContext }: { requestContext?: RequestContext }) =>\n    resolveModel(modelId, { remapForCodexOAuth: true, requestContext, anthropicPromptCacheScope: 'system' });\n\n  const resolveMemory = ({ requestContext }: { requestContext: RequestContext }) => {\n    const controller = requestContext.get('controller') as AgentControllerRequestContext<MastraCodeState> | undefined;\n    const state = controller?.getState() as MastraCodeState | undefined;\n    const subconsciousEnabled = isSubconsciousEnabled(vector);\n    const factoryProjectId = state?.factoryProjectId;\n    const isFactory = typeof factoryProjectId === 'string' && factoryProjectId.trim().length > 0;\n\n    // A Factory-owned session that could not resolve its org refuses to curate:\n    // writing under a substituted identity produces knowledge the fail-closed\n    // read path can never see.\n    let orgUnresolvedRefusal = false;\n\n    if (subconsciousEnabled) {\n      const identity = resolveKnowledgeScopeIdentity(state);\n      if (identity.resolved) {\n        requestContext.set('organizationId', identity.organizationId);\n      } else {\n        orgUnresolvedRefusal = true;\n        reportOrgUnresolved(controller, identity.knowledgeResourceId, identity.reason);\n      }\n      if (identity.knowledgeResourceId) {\n        requestContext.set('knowledgeResourceId', identity.knowledgeResourceId);\n      }\n    }\n\n    const subconsciousAvailable = subconsciousEnabled && !orgUnresolvedRefusal;\n\n    // Factory sessions share a memory resource across a Factory's runs and a\n    // user's sessions, so their scope is fixed to thread: one shared record would\n    // hand every run the others' work and invalidate their prompt caches. Recall\n    // search still reaches the whole resource. Neither session state, the env\n    // var, nor a repository's database.json can switch it.\n    const omScope = isFactory ? 'thread' : (state?.omScope ?? getOmScope(state?.projectPath));\n\n    // The Factory row is authoritative and read per invocation, so a stored\n    // threshold/attachment change reaches the running Memory without a session.\n    const factorySettingsContext = getFactoryMemorySettingsContext(requestContext);\n    const factorySettingsUnavailable =\n      isFactoryMemorySettingsUnavailable(factorySettingsContext) || (factorySettingsContext === undefined && isFactory);\n    const factorySettings = factorySettingsUnavailable ? null : factorySettingsContext;\n    const obsThreshold =\n      factorySettings !== undefined\n        ? (factorySettings?.observationThreshold ?? DEFAULT_OBS_THRESHOLD)\n        : (state?.observationThreshold ?? DEFAULT_OBS_THRESHOLD);\n    const refThreshold =\n      factorySettings !== undefined\n        ? (factorySettings?.reflectionThreshold ?? DEFAULT_REF_THRESHOLD)\n        : (state?.reflectionThreshold ?? DEFAULT_REF_THRESHOLD);\n    const caveman = state?.cavemanObservations ?? false;\n\n    const observerPreviousObservationTokens = 1000;\n    // The row is authoritative: an absent value means the user left it on Auto,\n    // which the config API reports as 'auto' and Memory resolves by model\n    // capability.\n    const observeAttachments =\n      factorySettings !== undefined ? (factorySettings?.observeAttachments ?? 'auto') : state?.observeAttachments;\n    // Factory sessions get a factory-only Subconscious config, so the cache key\n    // carries Factory presence and settings availability to keep those configs\n    // from cross-serving.\n    const cacheKey = `${obsThreshold}:${refThreshold}:${omScope}:${observerPreviousObservationTokens}:${caveman ? 1 : 0}:${observeAttachments}:${isFactory ? 1 : 0}:${subconsciousAvailable ? 1 : 0}`;\n    if (cachedMemory && cachedMemoryKey === cacheKey) {\n      return cachedMemory;\n    }\n\n    // Async buffering is not supported with resource scope — disable it\n    const isResourceScope = omScope === 'resource';\n\n    const observerInstruction = caveman\n      ? `${DYNAMIC_AGENTS_MD_INSTRUCTION}\\n\\n${CAVEMAN_OM_INSTRUCTION}`\n      : DYNAMIC_AGENTS_MD_INSTRUCTION;\n    const reflectionInstruction = caveman ? CAVEMAN_OM_INSTRUCTION : undefined;\n\n    if (cachedMemory) {\n      const retired = cachedMemory;\n      retiredMemories.add(retired);\n      // settled() rejects if the instance's OM engine failed to start; that must not surface as\n      // an unhandled rejection from a background retirement.\n      void retired\n        .settled()\n        .catch(() => {})\n        .finally(() => retiredMemories.delete(retired));\n    }\n\n    cachedMemory = new Memory({\n      storage,\n      ...(knowledge ? { knowledge } : {}),\n      vector: vector || false,\n      embedder: vector ? lazyFastembedSmall : undefined,\n      options: {\n        // Generate a durable title from the first user message. Every client uses\n        // the same title in its thread list and active-session chrome. Title\n        // generation takes the primary OM model only — its model field does not\n        // accept fallback arrays.\n        generateTitle:\n          process.env.MASTRACODE_DISABLE_TITLE_GENERATION === '1'\n            ? false\n            : {\n                model: ({ requestContext }) => {\n                  const resolved = getObserverModel({ requestContext });\n                  if (resolved === 'auto') {\n                    return resolveMemoryModel(\n                      resolveAutoOMModelId(getMainModelId(requestContext), providerId =>\n                        canUseProvider(providerId, { requestContext }),\n                      ),\n                      { requestContext },\n                    );\n                  }\n                  return Array.isArray(resolved) ? resolved[0]!.model : resolved;\n                },\n              },\n        observationalMemory:\n          process.env.MASTRACODE_DISABLE_OBSERVATIONAL_MEMORY === '1'\n            ? false\n            : {\n                enabled: true,\n                autoModels: MASTRACODE_AUTO_OM_MODELS,\n                canUseProvider,\n                resolveModel: resolveMemoryModel,\n                temporalMarkers: true,\n                retrieval: vector ? { vector: true } : true,\n                experimental_subconscious: subconsciousAvailable\n                  ? new Subconscious({\n                      defaultScope: 'resource',\n                      pins: true,\n                      ...(isFactory ? { maxSteps: 25 } : {}),\n                    })\n                  : undefined,\n                scope: omScope,\n                // The main agent writes Anthropic cache entries with this TTL; 'auto' can't see it.\n                activateAfterIdle: { default: 'auto', anthropic: ANTHROPIC_PROMPT_CACHE_TTL },\n                activateOnProviderChange: true,\n                observation: {\n                  bufferTokens: isResourceScope ? false : 1 / 5,\n                  bufferActivation: isResourceScope ? undefined : 2000,\n                  model: getObserverModel,\n                  messageTokens: obsThreshold,\n                  blockAfter: 2,\n                  previousObserverTokens: observerPreviousObservationTokens,\n                  threadTitle: true,\n                  instruction: observerInstruction,\n                  observeAttachments,\n                },\n                reflection: {\n                  bufferActivation: isResourceScope ? undefined : 1 / 2,\n                  blockAfter: 1.1,\n                  model: getReflectorModel,\n                  observationTokens: refThreshold,\n                  instruction: reflectionInstruction,\n                },\n              },\n      },\n    });\n    cachedMemoryKey = cacheKey;\n\n    return cachedMemory;\n  };\n\n  return Object.assign(resolveMemory, {\n    /**\n     * Wait for background memory work (buffered observations, reflections, indexing) in every\n     * instance this factory created. Await before closing storage.\n     */\n    async settled(): Promise<void> {\n      // Drain every instance even if one rejects, so teardown can still close storage.\n      await Promise.allSettled([cachedMemory?.settled(), ...[...retiredMemories].map(memory => memory.settled())]);\n    },\n  });\n}\n"],"mappings":";;;;;;;;;;;;;AAoBA,MAAM,qBAA6C;CACjD,sBAAsB;CACtB,UAAU;CACV,SAAS;CACT,sBAAsB;CACtB,uBAAuB;CACvB,MAAM,QAAQ,SAAS;EACrB,MAAM,EAAE,cAAc,MAAM,OAAO;EACnC,OAAO,UAAU,MAAM,QAAQ,OAAO;CACxC;AACF;;;;;;AAUA,SAAS,yBACP,OACA,UACA,SAC8C;CAC9C,MAAM,cAAc,qBAAqB,OAAO,QAAQ;CACxD,IAAI,YAAY,EAAE,EAAE,kBAAkB,QAAQ,OAAO;CACrD,MAAM,+BAAe,IAAI,IAAY;CACrC,MAAM,8BAAc,IAAI,IAAoB;CAC5C,MAAM,UAAmC,CAAC;CAC1C,KAAK,MAAM,SAAS,aAAa;EAC/B,IAAI,CAAC,MAAM,iBAAiB,MAAM,kBAAkB,UAAU,aAAa,IAAI,MAAM,aAAa,GAAG;EACrG,aAAa,IAAI,MAAM,aAAa;EACpC,MAAM,cAAc,YAAY,IAAI,MAAM,EAAE,KAAK,KAAK;EACtD,YAAY,IAAI,MAAM,IAAI,UAAU;EACpC,IAAI;GACF,QAAQ,KAAK;IACX,IAAI,GAAG,MAAM,GAAG,SAAS,eAAe,IAAI,KAAK,IAAI;IACrD,OAAO,QAAQ,MAAM,aAAa;GACpC,CAAC;EACH,QAAQ;GACN;EACF;CACF;CACA,OAAO,QAAQ,SAAS,IAAI,UAAU,KAAA;AACxC;AAuBA,SAAS,gCAAgC,gBAA8D;CACrG,OAAO,eAAe,IAAI,+BAA+B;AAC3D;AAEA,SAAS,mCACP,UACuD;CACvD,OAAO,aAAa,QAAQ,OAAO,aAAa,YAAY,YAAY,YAAY,SAAS,WAAW;AAC1G;AAEA,SAAS,eAAe,gBAAoD;CAC1E,MAAM,aAAa,eAAe,IAAI,YAAY;CAClD,OAAO,YAAY,QAAQ,WAAY,YAAY,SAAS,CAAC,EAAE;AACjE;;;;;;;;AASA,SAAS,6BACP,MACA,gBACA,cACA,SACoE;CACpE,MAAM,aAAa,eAAe,IAAI,YAAY;CAClD,MAAM,QAAQ,YAAY,SAAS;CACnC,MAAM,iBAAiB;EAAE,oBAAoB;EAAM;EAAgB,2BAA2B;CAAS;CACvG,MAAM,yBAAyB,gCAAgC,cAAc;CAC7E,MAAM,YAAY,OAAO,OAAO,qBAAqB;CAErD,MAAM,YAAY,YAAoB;EACpC,eAAe,IAAI,MAAM,KAAK,iBAAiB,OAAO;EACtD,eAAe,IAAI,MAAM,KAAK,oBAAoB,OAAO;EACzD,OAAO,aAAa,SAAS,cAAc;CAC7C;CACA,MAAM,gBAAgB;EACpB,eAAe,IAAI,MAAM,KAAK,iBAAiB,MAAM;EAIrD,eAAe,IACb,MAAM,KAAK,oBACX,qBAAqB,eAAe,cAAc,IAAG,eACnD,eAAe,YAAY,EAAE,eAAe,CAAC,CAC/C,CACF;EACA,OAAO;CACT;CAEA,IACE,mCAAmC,sBAAsB,KACxD,2BAA2B,KAAA,KAAa,WAEzC,OAAO,QAAQ;CAEjB,IAAI,2BAA2B,KAAA,GAAW;EACxC,MAAM,iBAAiB,yBAAyB,GAAG,KAAK;EACxD,OAAO,iBAAiB,SAAS,cAAc,IAAI,QAAQ;CAC7D;CAMA,MAAM,WAAW,SAAS,wBAAwB,KAAA,IAAY,aAAa,YAAY;CACvF,MAAM,cAAc,yBAAyB,OAAO,YAAY,WAAU,YACxE,aAAa,SAAS,cAAc,CACtC;CACA,IAAI,gBAAgB,QAAQ,OAAO,QAAQ;CAC3C,IAAI,aAAa;EACf,eAAe,IAAI,MAAM,KAAK,iBAAiB,OAAO;EACtD,eAAe,IAAI,MAAM,KAAK,oBAAoB,YAAY,EAAE,EAAE,MAAM,OAAO;EAC/E,OAAO,YAAY,WAAW,IAAI,YAAY,EAAE,CAAE,QAAQ;CAC5D;CAEA,MAAM,YAAqB,QAAQ,GAAG,KAAK;CAC3C,IAAI,cAAc,QAAQ,OAAO,QAAQ;CACzC,IAAI,OAAO,cAAc,YAAY,WAAW,OAAO,SAAS,SAAS;CACzE,IACE,aACA,OAAO,cAAc,YACrB,aAAa,aACb,OAAO,UAAU,YAAY,YAC7B,UAAU,SAEV,OAAO,SAAS,UAAU,OAAO;CAGnC,MAAM,eACJ,SAAS,aAAa,UAAU,QAAQ,wBAAwB,UAAU,QAAQ;CACpF,IAAI,cAAc,OAAO,SAAS,YAAY;CAC9C,MAAM,gBAAgB,QAAQ,GAAG,KAAK;CACtC,IAAI,OAAO,kBAAkB,YAAY,eAAe,OAAO,SAAS,aAAa;CACrF,OAAO,QAAQ;AACjB;AAEA,MAAM,gCACJ;AAGF,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;AA+B/B,MAAM,gCAAgC;AACtC,MAAM,wCAAwB,IAAI,IAAY;AAE9C,SAAS,oBACP,YACA,kBACA,QACA;CACA,MAAM,YAAY,YAAY,SAAS;CACvC,IAAI,WAAW;EACb,IAAI,sBAAsB,IAAI,SAAS,GAAG;EAC1C,IAAI,sBAAsB,QAAQ,+BAChC,sBAAsB,OAAO,sBAAsB,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAe;EAEpF,sBAAsB,IAAI,SAAS;CACrC;CACA,MAAM,UAAU,YAAY;CAC5B,QAAQ,MACN,oFAAoF,SAAS,MAAM,UAAU,YAAY,oBAAoB,OAAO,GAAG,SAAS,KAAK,WAAW,GAAG,wEACrL;AACF;;;;;AAMA,SAAgB,sBAAsB,QAA2C;CAC/E,OAAO,QAAQ,MAAM,KAAK,QAAQ,IAAI,yCAAyC;AACjF;;;;;;;;;AAUA,SAAgB,qBAAqB,QAAkC,OAA6C;CAClH,OAAO,sBAAsB,MAAM,KAAK,8BAA8B,KAAK,CAAC,CAAC;AAC/E;;;;;;AAOA,SAAgB,iBACd,SACA,QACA,cACA,SACA,WACA;CAGA,IAAI,eAA8B;CAClC,IAAI,kBAAiC;CAErC,MAAM,kCAAkB,IAAI,IAAY;CAMxC,MAAM,oBAAoB,EAAE,qBAC1B,6BAA6B,YAAY,gBAAgB,cAAc,OAAO;CAChF,MAAM,qBAAqB,EAAE,qBAC3B,6BAA6B,aAAa,gBAAgB,cAAc,OAAO;CAGjF,MAAM,sBAAsB,SAAiB,EAAE,qBAC7C,aAAa,SAAS;EAAE,oBAAoB;EAAM;EAAgB,2BAA2B;CAAS,CAAC;CAEzG,MAAM,iBAAiB,EAAE,qBAAyD;EAChF,MAAM,aAAa,eAAe,IAAI,YAAY;EAClD,MAAM,QAAQ,YAAY,SAAS;EACnC,MAAM,sBAAsB,sBAAsB,MAAM;EACxD,MAAM,mBAAmB,OAAO;EAChC,MAAM,YAAY,OAAO,qBAAqB,YAAY,iBAAiB,KAAK,CAAC,CAAC,SAAS;EAK3F,IAAI,uBAAuB;EAE3B,IAAI,qBAAqB;GACvB,MAAM,WAAW,8BAA8B,KAAK;GACpD,IAAI,SAAS,UACX,eAAe,IAAI,kBAAkB,SAAS,cAAc;QACvD;IACL,uBAAuB;IACvB,oBAAoB,YAAY,SAAS,qBAAqB,SAAS,MAAM;GAC/E;GACA,IAAI,SAAS,qBACX,eAAe,IAAI,uBAAuB,SAAS,mBAAmB;EAE1E;EAEA,MAAM,wBAAwB,uBAAuB,CAAC;EAOtD,MAAM,UAAU,YAAY,WAAY,OAAO,WAAW,WAAW,OAAO,WAAW;EAIvF,MAAM,yBAAyB,gCAAgC,cAAc;EAG7E,MAAM,kBADJ,mCAAmC,sBAAsB,KAAM,2BAA2B,KAAA,KAAa,YACpD,OAAO;EAC5D,MAAM,eACJ,oBAAoB,KAAA,IACf,iBAAiB,wBAAA,MACjB,OAAO,wBAAA;EACd,MAAM,eACJ,oBAAoB,KAAA,IACf,iBAAiB,uBAAA,MACjB,OAAO,uBAAA;EACd,MAAM,UAAU,OAAO,uBAAuB;EAE9C,MAAM,oCAAoC;EAI1C,MAAM,qBACJ,oBAAoB,KAAA,IAAa,iBAAiB,sBAAsB,SAAU,OAAO;EAI3F,MAAM,WAAW,GAAG,aAAa,GAAG,aAAa,GAAG,QAAQ,GAAG,kCAAkC,GAAG,UAAU,IAAI,EAAE,GAAG,mBAAmB,GAAG,YAAY,IAAI,EAAE,GAAG,wBAAwB,IAAI;EAC9L,IAAI,gBAAgB,oBAAoB,UACtC,OAAO;EAIT,MAAM,kBAAkB,YAAY;EAEpC,MAAM,sBAAsB,UACxB,GAAG,8BAA8B,MAAM,2BACvC;EACJ,MAAM,wBAAwB,UAAU,yBAAyB,KAAA;EAEjE,IAAI,cAAc;GAChB,MAAM,UAAU;GAChB,gBAAgB,IAAI,OAAO;GAG3B,QACG,QAAQ,CAAC,CACT,YAAY,CAAC,CAAC,CAAC,CACf,cAAc,gBAAgB,OAAO,OAAO,CAAC;EAClD;EAEA,eAAe,IAAI,OAAO;GACxB;GACA,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;GACjC,QAAQ,UAAU;GAClB,UAAU,SAAS,qBAAqB,KAAA;GACxC,SAAS;IAKP,eACE,QAAQ,IAAI,wCAAwC,MAChD,QACA,EACE,QAAQ,EAAE,qBAAqB;KAC7B,MAAM,WAAW,iBAAiB,EAAE,eAAe,CAAC;KACpD,IAAI,aAAa,QACf,OAAO,mBACL,qBAAqB,eAAe,cAAc,IAAG,eACnD,eAAe,YAAY,EAAE,eAAe,CAAC,CAC/C,GACA,EAAE,eAAe,CACnB;KAEF,OAAO,MAAM,QAAQ,QAAQ,IAAI,SAAS,EAAE,CAAE,QAAQ;IACxD,EACF;IACN,qBACE,QAAQ,IAAI,4CAA4C,MACpD,QACA;KACE,SAAS;KACT,YAAY;KACZ;KACA,cAAc;KACd,iBAAiB;KACjB,WAAW,SAAS,EAAE,QAAQ,KAAK,IAAI;KACvC,2BAA2B,wBACvB,IAAI,aAAa;MACf,cAAc;MACd,MAAM;MACN,GAAI,YAAY,EAAE,UAAU,GAAG,IAAI,CAAC;KACtC,CAAC,IACD,KAAA;KACJ,OAAO;KAEP,mBAAmB;MAAE,SAAS;MAAQ,WAAA;KAAsC;KAC5E,0BAA0B;KAC1B,aAAa;MACX,cAAc,kBAAkB,QAAQ,IAAI;MAC5C,kBAAkB,kBAAkB,KAAA,IAAY;MAChD,OAAO;MACP,eAAe;MACf,YAAY;MACZ,wBAAwB;MACxB,aAAa;MACb,aAAa;MACb;KACF;KACA,YAAY;MACV,kBAAkB,kBAAkB,KAAA,IAAY,IAAI;MACpD,YAAY;MACZ,OAAO;MACP,mBAAmB;MACnB,aAAa;KACf;IACF;GACR;EACF,CAAC;EACD,kBAAkB;EAElB,OAAO;CACT;CAEA,OAAO,OAAO,OAAO,eAAe;;;;;AAKlC,MAAM,UAAyB;EAE7B,MAAM,QAAQ,WAAW,CAAC,cAAc,QAAQ,GAAG,GAAG,CAAC,GAAG,eAAe,CAAC,CAAC,KAAI,WAAU,OAAO,QAAQ,CAAC,CAAC,CAAC;CAC7G,EACF,CAAC;AACH"}

package/dist/agents/prompts/agent-instructions.js

@@ -72,7 +72,7 @@ function createGitRefInstructionReader(projectPath, ref) {
 					"pipe",
 					"ignore"
 				],
-				maxBuffer: 1024 * 1024
+				maxBuffer: 1048576
 			});
 		} catch {}
 		return null;

package/dist/agents/prompts/agent-instructions.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-instructions.js","names":[],"sources":["../../../src/agents/prompts/agent-instructions.ts"],"sourcesContent":["/**\n * Load project and global agent instruction files (AGENTS.md, CLAUDE.md).\n * Prefers AGENTS.md over CLAUDE.md when multiple exist at the same location.\n */\n\nimport { execFileSync } from 'node:child_process';\nimport { existsSync, readFileSync, realpathSync, statSync } from 'node:fs';\nimport { homedir } from 'node:os';\nimport { dirname, isAbsolute, join, normalize, relative, resolve, sep } from 'node:path';\nimport { DEFAULT_CONFIG_DIR } from '../../constants.js';\n\n// Filenames to check, in order of preference\nconst INSTRUCTION_FILES = ['AGENTS.md', 'CLAUDE.md'];\n\n// Locations to scan (relative to project root or home)\nconst PROJECT_LOCATIONS = [\n  '', // project root\n  '.claude',\n  '.mastracode',\n];\n\nconst GLOBAL_LOCATIONS = ['.claude', '.mastracode', '.config/claude', '.config/mastracode'];\n\nexport interface InstructionSource {\n  path: string;\n  content: string;\n  scope: 'global' | 'project';\n  /** Git ref the content was read from, when not read off the working tree. */\n  ref?: string;\n}\n\n/**\n * Reads project-scope instruction files. The default implementation reads the\n * working tree via `fs`; alternative readers can serve content from another\n * source (e.g. a trusted git ref) while keeping working-tree paths as the\n * addressing scheme.\n */\nexport interface InstructionFileReader {\n  exists(path: string): boolean;\n  read(path: string): string;\n  /** Git ref backing this reader, recorded on the loaded sources. */\n  ref?: string;\n}\n\nconst fsInstructionReader: InstructionFileReader = {\n  exists: path => existsSync(path),\n  read: path => readFileSync(path, 'utf-8'),\n};\n\nfunction realpathOrResolved(path: string): string {\n  try {\n    return realpathSync(path);\n  } catch {\n    return resolve(path);\n  }\n}\n\nfunction createProjectPathResolver(projectPath: string): (path: string) => string | null {\n  const canonicalRoot = realpathOrResolved(projectPath);\n  return path => {\n    const rel = relative(projectPath, path);\n    if (rel !== '..' && !rel.startsWith(`..${sep}`) && !isAbsolute(rel)) return rel.split(sep).join('/');\n\n    // Match an alias of the project root, not the target of a checkout-controlled\n    // descendant symlink. Missing descendants must still resolve against the ref.\n    let ancestor = resolve(path);\n    let projectRelativePath: string | null = null;\n    while (true) {\n      if (realpathOrResolved(ancestor) === canonicalRoot) {\n        projectRelativePath = relative(ancestor, path).split(sep).join('/');\n      }\n      const parent = dirname(ancestor);\n      if (parent === ancestor) return projectRelativePath;\n      ancestor = parent;\n    }\n  };\n}\n\n/**\n * Create a reader that serves instruction files from a git ref instead of the\n * working tree. Paths are still addressed as working-tree paths under\n * `projectPath`; content comes from `git show <ref>:<relpath>` so an untrusted\n * checkout (e.g. a PR branch under review) cannot influence what is loaded.\n * Tries `origin/<ref>` first (remote truth), then the local ref. Any git\n * failure (missing ref, missing file, no repo) reports the file as absent.\n */\nexport function createGitRefInstructionReader(projectPath: string, ref: string): InstructionFileReader {\n  const toRelative = createProjectPathResolver(projectPath);\n  const show = (path: string): string | null => {\n    const rel = toRelative(path);\n    if (!rel) return null;\n    for (const candidate of [`origin/${ref}`, ref]) {\n      try {\n        return execFileSync('git', ['-C', projectPath, 'show', `${candidate}:${rel}`], {\n          encoding: 'utf-8',\n          stdio: ['ignore', 'pipe', 'ignore'],\n          maxBuffer: 1024 * 1024,\n        });\n      } catch {\n        // Ref or file missing at this candidate — try the next one.\n      }\n    }\n    return null;\n  };\n  return {\n    ref,\n    exists: path => show(path) !== null,\n    read: path => {\n      const content = show(path);\n      if (content === null) throw new Error(`Not found at ref ${ref}: ${path}`);\n      return content;\n    },\n  };\n}\n\n/**\n * Reader for the reactive reminder channel (AgentsMDInjector) that serves\n * paths under `projectPath` from a trusted git ref. Paths outside the project\n * fall back to the operator machine's filesystem (those are trusted); paths\n * inside the project are only ever resolved against the ref, never the\n * working tree, so an untrusted checkout cannot feed content in.\n */\nexport function createGitRefReminderReader(\n  projectPath: string,\n  ref: string,\n): {\n  pathExists: (path: string) => boolean;\n  isDirectory: (path: string) => boolean;\n  readFile: (path: string) => string;\n  getPathIdentity: (path: string) => string;\n} {\n  const gitReader = createGitRefInstructionReader(projectPath, ref);\n  const toRelative = createProjectPathResolver(projectPath);\n  const canonicalRoot = realpathOrResolved(projectPath);\n  const objectType = (rel: string): string | null => {\n    if (rel === '') return 'tree'; // project root\n    for (const candidate of [`origin/${ref}`, ref]) {\n      try {\n        return execFileSync('git', ['-C', projectPath, 'cat-file', '-t', `${candidate}:${rel}`], {\n          encoding: 'utf-8',\n          stdio: ['ignore', 'pipe', 'ignore'],\n        }).trim();\n      } catch {\n        // Ref or object missing at this candidate — try the next one.\n      }\n    }\n    return null;\n  };\n  return {\n    pathExists: path => {\n      const rel = toRelative(path);\n      if (rel === null) return existsSync(path);\n      return objectType(rel) !== null;\n    },\n    isDirectory: path => {\n      const rel = toRelative(path);\n      if (rel === null) {\n        try {\n          return statSync(path).isDirectory();\n        } catch {\n          return false;\n        }\n      }\n      return objectType(rel) === 'tree';\n    },\n    readFile: path => {\n      const rel = toRelative(path);\n      if (rel === null) return readFileSync(path, 'utf-8');\n      return gitReader.read(path);\n    },\n    getPathIdentity: path => {\n      const rel = toRelative(path);\n      // Only canonicalize the project root: checkout symlinks do not define\n      // file identity in the trusted ref, including files missing on disk.\n      return rel === null ? realpathOrResolved(path) : join(canonicalRoot, rel);\n    },\n  };\n}\n\n/**\n * Find the first existing instruction file at a given base path.\n * Prefers AGENTS.md over CLAUDE.md.\n */\nfunction findInstructionFile(basePath: string, reader: InstructionFileReader = fsInstructionReader): string | null {\n  for (const filename of INSTRUCTION_FILES) {\n    const fullPath = join(basePath, filename);\n    if (reader.exists(fullPath)) {\n      return fullPath;\n    }\n  }\n  return null;\n}\n\n/**\n * Load all agent instruction files from global and project locations.\n * Returns an array of instruction sources, with global ones first.\n *\n * `projectReader` controls where project-scope content comes from (defaults to\n * the working tree). Global instructions read the operator machine's\n * filesystem, unless `skipGlobal` keeps them out entirely.\n */\nexport function loadAgentInstructions(\n  projectPath: string,\n  configDirName = DEFAULT_CONFIG_DIR,\n  projectReader: InstructionFileReader = fsInstructionReader,\n  { skipGlobal = false }: { skipGlobal?: boolean } = {},\n): InstructionSource[] {\n  const sources: InstructionSource[] = [];\n  const home = homedir();\n\n  // Derive location arrays from the base constants, substituting the config dir name\n  const projectLocations = PROJECT_LOCATIONS.map(loc => (loc === '.mastracode' ? configDirName : loc));\n  const globalLocations = skipGlobal\n    ? []\n    : GLOBAL_LOCATIONS.map(loc => {\n        if (loc === '.mastracode') return configDirName;\n        // XDG-style path (~/.config/<name>): strip the leading dot since the\n        // .config/ prefix already signals a hidden/config directory.\n        if (loc === '.config/mastracode') return '.config/' + configDirName.replace(/^\\./, '');\n        return loc;\n      });\n\n  // Load global instructions first\n  for (const location of globalLocations) {\n    const basePath = join(home, location);\n    const filePath = findInstructionFile(basePath);\n    if (filePath) {\n      try {\n        const content = readFileSync(filePath, 'utf-8').trim();\n        if (content) {\n          sources.push({ path: filePath, content, scope: 'global' });\n          break; // Only use first found global instruction file\n        }\n      } catch {\n        // Skip unreadable files\n      }\n    }\n  }\n\n  // Load project instructions\n  for (const location of projectLocations) {\n    const basePath = location ? join(projectPath, location) : projectPath;\n    const filePath = findInstructionFile(basePath, projectReader);\n    if (filePath) {\n      try {\n        const content = projectReader.read(filePath).trim();\n        if (content) {\n          sources.push({\n            path: filePath,\n            content,\n            scope: 'project',\n            ...(projectReader.ref ? { ref: projectReader.ref } : {}),\n          });\n          break; // Only use first found project instruction file\n        }\n      } catch {\n        // Skip unreadable files\n      }\n    }\n  }\n\n  return sources;\n}\n\nexport function getStaticallyLoadedInstructionPaths(\n  projectPath: string,\n  configDirName = DEFAULT_CONFIG_DIR,\n  projectReader?: InstructionFileReader,\n): string[] {\n  return instructionSourcePaths(loadAgentInstructions(projectPath, configDirName, projectReader), [projectPath]);\n}\n\n/**\n * Directories a session's project instructions load from: the host's\n * `instructionRoots` (resolved against the working directory, the session's\n * own checkout first) when it sets any, else the working directory itself.\n */\nexport function sessionInstructionRoots(workingDir: string, instructionRoots?: readonly string[]): string[] {\n  if (!instructionRoots?.length) return [workingDir];\n  return [...new Set(instructionRoots.map(root => resolve(workingDir, root)))];\n}\n\n/**\n * The instruction files a session's system prompt carries. Global files load\n * once (unless `skipGlobal`), then each instruction root's project files, in\n * root order. An untrusted checkout never reads project files off the working\n * tree: with a `baseRef` the first root (the session's own checkout) is served\n * from that ref and the other roots are skipped; without one no project files\n * load.\n */\nexport function loadSessionInstructions({\n  workingDir,\n  instructionRoots,\n  configDir,\n  untrustedCheckout = false,\n  baseRef,\n  skipGlobal = false,\n}: {\n  workingDir: string;\n  instructionRoots?: readonly string[];\n  configDir?: string;\n  untrustedCheckout?: boolean;\n  baseRef?: string;\n  skipGlobal?: boolean;\n}): InstructionSource[] {\n  const [primary, ...others] = sessionInstructionRoots(workingDir, instructionRoots);\n  const primaryReader = untrustedCheckout\n    ? baseRef\n      ? createGitRefInstructionReader(primary!, baseRef)\n      : { exists: () => false, read: () => '' }\n    : undefined;\n  const sources = loadAgentInstructions(primary!, configDir, primaryReader, { skipGlobal });\n  if (untrustedCheckout) return sources;\n  for (const root of others) {\n    sources.push(...loadAgentInstructions(root, configDir, undefined, { skipGlobal: true }));\n  }\n  return sources;\n}\n\n/**\n * Paths of loaded instruction sources, each project source also under its\n * root's canonical path, so reactive reminders never repeat a file the\n * system prompt already carries.\n */\nexport function instructionSourcePaths(sources: InstructionSource[], roots: readonly string[]): string[] {\n  return sources.flatMap(source => {\n    const path = normalize(source.path);\n    if (source.scope !== 'project') return [path];\n    const root = roots.find(candidate => {\n      const rel = relative(candidate, path);\n      return rel !== '..' && !rel.startsWith(`..${sep}`) && !isAbsolute(rel);\n    });\n    if (!root) return [path];\n    const canonicalPath = join(realpathOrResolved(root), relative(root, path));\n    return path === canonicalPath ? [path] : [path, canonicalPath];\n  });\n}\n\n/** Heading the agent-instructions block is introduced by in the system prompt. */\nexport const AGENT_INSTRUCTIONS_HEADING = '# Agent Instructions';\n\n/**\n * Format a single instruction source as it appears in the system prompt.\n *\n * Exported so callers that attribute prompt cost per source (the `/context`\n * audit) measure the exact block that is sent rather than reconstructing it.\n */\nexport function formatInstructionSource(source: InstructionSource): string {\n  const label = source.scope === 'global' ? 'Global' : 'Project';\n  const origin = source.ref ? `${source.path} (at ref ${source.ref})` : source.path;\n  return `<!-- ${label} instructions from ${origin} -->\\n${source.content}`;\n}\n\n/**\n * Format loaded instructions into a string for the system prompt.\n */\nexport function formatAgentInstructions(sources: InstructionSource[]): string {\n  if (sources.length === 0) return '';\n\n  const sections = sources.map(formatInstructionSource);\n\n  return `\\n${AGENT_INSTRUCTIONS_HEADING}\\n\\n${sections.join('\\n\\n')}\\n`;\n}\n"],"mappings":";;;;;;;;;;AAYA,MAAM,oBAAoB,CAAC,aAAa,WAAW;AAGnD,MAAM,oBAAoB;CACxB;CACA;CACA;AACF;AAEA,MAAM,mBAAmB;CAAC;CAAW;CAAe;CAAkB;AAAoB;AAuB1F,MAAM,sBAA6C;CACjD,SAAQ,SAAQ,WAAW,IAAI;CAC/B,OAAM,SAAQ,aAAa,MAAM,OAAO;AAC1C;AAEA,SAAS,mBAAmB,MAAsB;CAChD,IAAI;EACF,OAAO,aAAa,IAAI;CAC1B,QAAQ;EACN,OAAO,QAAQ,IAAI;CACrB;AACF;AAEA,SAAS,0BAA0B,aAAsD;CACvF,MAAM,gBAAgB,mBAAmB,WAAW;CACpD,QAAO,SAAQ;EACb,MAAM,MAAM,SAAS,aAAa,IAAI;EACtC,IAAI,QAAQ,QAAQ,CAAC,IAAI,WAAW,KAAK,KAAK,KAAK,CAAC,WAAW,GAAG,GAAG,OAAO,IAAI,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG;EAInG,IAAI,WAAW,QAAQ,IAAI;EAC3B,IAAI,sBAAqC;EACzC,OAAO,MAAM;GACX,IAAI,mBAAmB,QAAQ,MAAM,eACnC,sBAAsB,SAAS,UAAU,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG;GAEpE,MAAM,SAAS,QAAQ,QAAQ;GAC/B,IAAI,WAAW,UAAU,OAAO;GAChC,WAAW;EACb;CACF;AACF;;;;;;;;;AAUA,SAAgB,8BAA8B,aAAqB,KAAoC;CACrG,MAAM,aAAa,0BAA0B,WAAW;CACxD,MAAM,QAAQ,SAAgC;EAC5C,MAAM,MAAM,WAAW,IAAI;EAC3B,IAAI,CAAC,KAAK,OAAO;EACjB,KAAK,MAAM,aAAa,CAAC,UAAU,OAAO,GAAG,GAC3C,IAAI;GACF,OAAO,aAAa,OAAO;IAAC;IAAM;IAAa;IAAQ,GAAG,UAAU,GAAG;GAAK,GAAG;IAC7E,UAAU;IACV,OAAO;KAAC;KAAU;KAAQ;IAAQ;IAClC,WAAW,OAAO;GACpB,CAAC;EACH,QAAQ,CAER;EAEF,OAAO;CACT;CACA,OAAO;EACL;EACA,SAAQ,SAAQ,KAAK,IAAI,MAAM;EAC/B,OAAM,SAAQ;GACZ,MAAM,UAAU,KAAK,IAAI;GACzB,IAAI,YAAY,MAAM,MAAM,IAAI,MAAM,oBAAoB,IAAI,IAAI,MAAM;GACxE,OAAO;EACT;CACF;AACF;;;;;;;;AASA,SAAgB,2BACd,aACA,KAMA;CACA,MAAM,YAAY,8BAA8B,aAAa,GAAG;CAChE,MAAM,aAAa,0BAA0B,WAAW;CACxD,MAAM,gBAAgB,mBAAmB,WAAW;CACpD,MAAM,cAAc,QAA+B;EACjD,IAAI,QAAQ,IAAI,OAAO;EACvB,KAAK,MAAM,aAAa,CAAC,UAAU,OAAO,GAAG,GAC3C,IAAI;GACF,OAAO,aAAa,OAAO;IAAC;IAAM;IAAa;IAAY;IAAM,GAAG,UAAU,GAAG;GAAK,GAAG;IACvF,UAAU;IACV,OAAO;KAAC;KAAU;KAAQ;IAAQ;GACpC,CAAC,CAAC,CAAC,KAAK;EACV,QAAQ,CAER;EAEF,OAAO;CACT;CACA,OAAO;EACL,aAAY,SAAQ;GAClB,MAAM,MAAM,WAAW,IAAI;GAC3B,IAAI,QAAQ,MAAM,OAAO,WAAW,IAAI;GACxC,OAAO,WAAW,GAAG,MAAM;EAC7B;EACA,cAAa,SAAQ;GACnB,MAAM,MAAM,WAAW,IAAI;GAC3B,IAAI,QAAQ,MACV,IAAI;IACF,OAAO,SAAS,IAAI,CAAC,CAAC,YAAY;GACpC,QAAQ;IACN,OAAO;GACT;GAEF,OAAO,WAAW,GAAG,MAAM;EAC7B;EACA,WAAU,SAAQ;GAEhB,IADY,WAAW,IACjB,MAAM,MAAM,OAAO,aAAa,MAAM,OAAO;GACnD,OAAO,UAAU,KAAK,IAAI;EAC5B;EACA,kBAAiB,SAAQ;GACvB,MAAM,MAAM,WAAW,IAAI;GAG3B,OAAO,QAAQ,OAAO,mBAAmB,IAAI,IAAI,KAAK,eAAe,GAAG;EAC1E;CACF;AACF;;;;;AAMA,SAAS,oBAAoB,UAAkB,SAAgC,qBAAoC;CACjH,KAAK,MAAM,YAAY,mBAAmB;EACxC,MAAM,WAAW,KAAK,UAAU,QAAQ;EACxC,IAAI,OAAO,OAAO,QAAQ,GACxB,OAAO;CAEX;CACA,OAAO;AACT;;;;;;;;;AAUA,SAAgB,sBACd,aACA,gBAAgB,oBAChB,gBAAuC,qBACvC,EAAE,aAAa,UAAoC,CAAC,GAC/B;CACrB,MAAM,UAA+B,CAAC;CACtC,MAAM,OAAO,QAAQ;CAGrB,MAAM,mBAAmB,kBAAkB,KAAI,QAAQ,QAAQ,gBAAgB,gBAAgB,GAAI;CACnG,MAAM,kBAAkB,aACpB,CAAC,IACD,iBAAiB,KAAI,QAAO;EAC1B,IAAI,QAAQ,eAAe,OAAO;EAGlC,IAAI,QAAQ,sBAAsB,OAAO,aAAa,cAAc,QAAQ,OAAO,EAAE;EACrF,OAAO;CACT,CAAC;CAGL,KAAK,MAAM,YAAY,iBAAiB;EAEtC,MAAM,WAAW,oBADA,KAAK,MAAM,QACgB,CAAC;EAC7C,IAAI,UACF,IAAI;GACF,MAAM,UAAU,aAAa,UAAU,OAAO,CAAC,CAAC,KAAK;GACrD,IAAI,SAAS;IACX,QAAQ,KAAK;KAAE,MAAM;KAAU;KAAS,OAAO;IAAS,CAAC;IACzD;GACF;EACF,QAAQ,CAER;CAEJ;CAGA,KAAK,MAAM,YAAY,kBAAkB;EAEvC,MAAM,WAAW,oBADA,WAAW,KAAK,aAAa,QAAQ,IAAI,aACX,aAAa;EAC5D,IAAI,UACF,IAAI;GACF,MAAM,UAAU,cAAc,KAAK,QAAQ,CAAC,CAAC,KAAK;GAClD,IAAI,SAAS;IACX,QAAQ,KAAK;KACX,MAAM;KACN;KACA,OAAO;KACP,GAAI,cAAc,MAAM,EAAE,KAAK,cAAc,IAAI,IAAI,CAAC;IACxD,CAAC;IACD;GACF;EACF,QAAQ,CAER;CAEJ;CAEA,OAAO;AACT;AAEA,SAAgB,oCACd,aACA,gBAAgB,oBAChB,eACU;CACV,OAAO,uBAAuB,sBAAsB,aAAa,eAAe,aAAa,GAAG,CAAC,WAAW,CAAC;AAC/G;;;;;;AAOA,SAAgB,wBAAwB,YAAoB,kBAAgD;CAC1G,IAAI,CAAC,kBAAkB,QAAQ,OAAO,CAAC,UAAU;CACjD,OAAO,CAAC,GAAG,IAAI,IAAI,iBAAiB,KAAI,SAAQ,QAAQ,YAAY,IAAI,CAAC,CAAC,CAAC;AAC7E;;;;;;;;;AAUA,SAAgB,wBAAwB,EACtC,YACA,kBACA,WACA,oBAAoB,OACpB,SACA,aAAa,SAQS;CACtB,MAAM,CAAC,SAAS,GAAG,UAAU,wBAAwB,YAAY,gBAAgB;CAMjF,MAAM,UAAU,sBAAsB,SAAU,WAL1B,oBAClB,UACE,8BAA8B,SAAU,OAAO,IAC/C;EAAE,cAAc;EAAO,YAAY;CAAG,IACxC,KAAA,GACsE,EAAE,WAAW,CAAC;CACxF,IAAI,mBAAmB,OAAO;CAC9B,KAAK,MAAM,QAAQ,QACjB,QAAQ,KAAK,GAAG,sBAAsB,MAAM,WAAW,KAAA,GAAW,EAAE,YAAY,KAAK,CAAC,CAAC;CAEzF,OAAO;AACT;;;;;;AAOA,SAAgB,uBAAuB,SAA8B,OAAoC;CACvG,OAAO,QAAQ,SAAQ,WAAU;EAC/B,MAAM,OAAO,UAAU,OAAO,IAAI;EAClC,IAAI,OAAO,UAAU,WAAW,OAAO,CAAC,IAAI;EAC5C,MAAM,OAAO,MAAM,MAAK,cAAa;GACnC,MAAM,MAAM,SAAS,WAAW,IAAI;GACpC,OAAO,QAAQ,QAAQ,CAAC,IAAI,WAAW,KAAK,KAAK,KAAK,CAAC,WAAW,GAAG;EACvE,CAAC;EACD,IAAI,CAAC,MAAM,OAAO,CAAC,IAAI;EACvB,MAAM,gBAAgB,KAAK,mBAAmB,IAAI,GAAG,SAAS,MAAM,IAAI,CAAC;EACzE,OAAO,SAAS,gBAAgB,CAAC,IAAI,IAAI,CAAC,MAAM,aAAa;CAC/D,CAAC;AACH;;AAGA,MAAa,6BAA6B;;;;;;;AAQ1C,SAAgB,wBAAwB,QAAmC;CAGzE,OAAO,QAFO,OAAO,UAAU,WAAW,WAAW,UAEhC,qBADN,OAAO,MAAM,GAAG,OAAO,KAAK,WAAW,OAAO,IAAI,KAAK,OAAO,KAC5B,QAAQ,OAAO;AAClE;;;;AAKA,SAAgB,wBAAwB,SAAsC;CAC5E,IAAI,QAAQ,WAAW,GAAG,OAAO;CAEjC,MAAM,WAAW,QAAQ,IAAI,uBAAuB;CAEpD,OAAO,KAAK,2BAA2B,MAAM,SAAS,KAAK,MAAM,EAAE;AACrE"}
+{"version":3,"file":"agent-instructions.js","names":[],"sources":["../../../src/agents/prompts/agent-instructions.ts"],"sourcesContent":["/**\n * Load project and global agent instruction files (AGENTS.md, CLAUDE.md).\n * Prefers AGENTS.md over CLAUDE.md when multiple exist at the same location.\n */\n\nimport { execFileSync } from 'node:child_process';\nimport { existsSync, readFileSync, realpathSync, statSync } from 'node:fs';\nimport { homedir } from 'node:os';\nimport { dirname, isAbsolute, join, normalize, relative, resolve, sep } from 'node:path';\nimport { DEFAULT_CONFIG_DIR } from '../../constants.js';\n\n// Filenames to check, in order of preference\nconst INSTRUCTION_FILES = ['AGENTS.md', 'CLAUDE.md'];\n\n// Locations to scan (relative to project root or home)\nconst PROJECT_LOCATIONS = [\n  '', // project root\n  '.claude',\n  '.mastracode',\n];\n\nconst GLOBAL_LOCATIONS = ['.claude', '.mastracode', '.config/claude', '.config/mastracode'];\n\nexport interface InstructionSource {\n  path: string;\n  content: string;\n  scope: 'global' | 'project';\n  /** Git ref the content was read from, when not read off the working tree. */\n  ref?: string;\n}\n\n/**\n * Reads project-scope instruction files. The default implementation reads the\n * working tree via `fs`; alternative readers can serve content from another\n * source (e.g. a trusted git ref) while keeping working-tree paths as the\n * addressing scheme.\n */\nexport interface InstructionFileReader {\n  exists(path: string): boolean;\n  read(path: string): string;\n  /** Git ref backing this reader, recorded on the loaded sources. */\n  ref?: string;\n}\n\nconst fsInstructionReader: InstructionFileReader = {\n  exists: path => existsSync(path),\n  read: path => readFileSync(path, 'utf-8'),\n};\n\nfunction realpathOrResolved(path: string): string {\n  try {\n    return realpathSync(path);\n  } catch {\n    return resolve(path);\n  }\n}\n\nfunction createProjectPathResolver(projectPath: string): (path: string) => string | null {\n  const canonicalRoot = realpathOrResolved(projectPath);\n  return path => {\n    const rel = relative(projectPath, path);\n    if (rel !== '..' && !rel.startsWith(`..${sep}`) && !isAbsolute(rel)) return rel.split(sep).join('/');\n\n    // Match an alias of the project root, not the target of a checkout-controlled\n    // descendant symlink. Missing descendants must still resolve against the ref.\n    let ancestor = resolve(path);\n    let projectRelativePath: string | null = null;\n    while (true) {\n      if (realpathOrResolved(ancestor) === canonicalRoot) {\n        projectRelativePath = relative(ancestor, path).split(sep).join('/');\n      }\n      const parent = dirname(ancestor);\n      if (parent === ancestor) return projectRelativePath;\n      ancestor = parent;\n    }\n  };\n}\n\n/**\n * Create a reader that serves instruction files from a git ref instead of the\n * working tree. Paths are still addressed as working-tree paths under\n * `projectPath`; content comes from `git show <ref>:<relpath>` so an untrusted\n * checkout (e.g. a PR branch under review) cannot influence what is loaded.\n * Tries `origin/<ref>` first (remote truth), then the local ref. Any git\n * failure (missing ref, missing file, no repo) reports the file as absent.\n */\nexport function createGitRefInstructionReader(projectPath: string, ref: string): InstructionFileReader {\n  const toRelative = createProjectPathResolver(projectPath);\n  const show = (path: string): string | null => {\n    const rel = toRelative(path);\n    if (!rel) return null;\n    for (const candidate of [`origin/${ref}`, ref]) {\n      try {\n        return execFileSync('git', ['-C', projectPath, 'show', `${candidate}:${rel}`], {\n          encoding: 'utf-8',\n          stdio: ['ignore', 'pipe', 'ignore'],\n          maxBuffer: 1024 * 1024,\n        });\n      } catch {\n        // Ref or file missing at this candidate — try the next one.\n      }\n    }\n    return null;\n  };\n  return {\n    ref,\n    exists: path => show(path) !== null,\n    read: path => {\n      const content = show(path);\n      if (content === null) throw new Error(`Not found at ref ${ref}: ${path}`);\n      return content;\n    },\n  };\n}\n\n/**\n * Reader for the reactive reminder channel (AgentsMDInjector) that serves\n * paths under `projectPath` from a trusted git ref. Paths outside the project\n * fall back to the operator machine's filesystem (those are trusted); paths\n * inside the project are only ever resolved against the ref, never the\n * working tree, so an untrusted checkout cannot feed content in.\n */\nexport function createGitRefReminderReader(\n  projectPath: string,\n  ref: string,\n): {\n  pathExists: (path: string) => boolean;\n  isDirectory: (path: string) => boolean;\n  readFile: (path: string) => string;\n  getPathIdentity: (path: string) => string;\n} {\n  const gitReader = createGitRefInstructionReader(projectPath, ref);\n  const toRelative = createProjectPathResolver(projectPath);\n  const canonicalRoot = realpathOrResolved(projectPath);\n  const objectType = (rel: string): string | null => {\n    if (rel === '') return 'tree'; // project root\n    for (const candidate of [`origin/${ref}`, ref]) {\n      try {\n        return execFileSync('git', ['-C', projectPath, 'cat-file', '-t', `${candidate}:${rel}`], {\n          encoding: 'utf-8',\n          stdio: ['ignore', 'pipe', 'ignore'],\n        }).trim();\n      } catch {\n        // Ref or object missing at this candidate — try the next one.\n      }\n    }\n    return null;\n  };\n  return {\n    pathExists: path => {\n      const rel = toRelative(path);\n      if (rel === null) return existsSync(path);\n      return objectType(rel) !== null;\n    },\n    isDirectory: path => {\n      const rel = toRelative(path);\n      if (rel === null) {\n        try {\n          return statSync(path).isDirectory();\n        } catch {\n          return false;\n        }\n      }\n      return objectType(rel) === 'tree';\n    },\n    readFile: path => {\n      const rel = toRelative(path);\n      if (rel === null) return readFileSync(path, 'utf-8');\n      return gitReader.read(path);\n    },\n    getPathIdentity: path => {\n      const rel = toRelative(path);\n      // Only canonicalize the project root: checkout symlinks do not define\n      // file identity in the trusted ref, including files missing on disk.\n      return rel === null ? realpathOrResolved(path) : join(canonicalRoot, rel);\n    },\n  };\n}\n\n/**\n * Find the first existing instruction file at a given base path.\n * Prefers AGENTS.md over CLAUDE.md.\n */\nfunction findInstructionFile(basePath: string, reader: InstructionFileReader = fsInstructionReader): string | null {\n  for (const filename of INSTRUCTION_FILES) {\n    const fullPath = join(basePath, filename);\n    if (reader.exists(fullPath)) {\n      return fullPath;\n    }\n  }\n  return null;\n}\n\n/**\n * Load all agent instruction files from global and project locations.\n * Returns an array of instruction sources, with global ones first.\n *\n * `projectReader` controls where project-scope content comes from (defaults to\n * the working tree). Global instructions read the operator machine's\n * filesystem, unless `skipGlobal` keeps them out entirely.\n */\nexport function loadAgentInstructions(\n  projectPath: string,\n  configDirName = DEFAULT_CONFIG_DIR,\n  projectReader: InstructionFileReader = fsInstructionReader,\n  { skipGlobal = false }: { skipGlobal?: boolean } = {},\n): InstructionSource[] {\n  const sources: InstructionSource[] = [];\n  const home = homedir();\n\n  // Derive location arrays from the base constants, substituting the config dir name\n  const projectLocations = PROJECT_LOCATIONS.map(loc => (loc === '.mastracode' ? configDirName : loc));\n  const globalLocations = skipGlobal\n    ? []\n    : GLOBAL_LOCATIONS.map(loc => {\n        if (loc === '.mastracode') return configDirName;\n        // XDG-style path (~/.config/<name>): strip the leading dot since the\n        // .config/ prefix already signals a hidden/config directory.\n        if (loc === '.config/mastracode') return '.config/' + configDirName.replace(/^\\./, '');\n        return loc;\n      });\n\n  // Load global instructions first\n  for (const location of globalLocations) {\n    const basePath = join(home, location);\n    const filePath = findInstructionFile(basePath);\n    if (filePath) {\n      try {\n        const content = readFileSync(filePath, 'utf-8').trim();\n        if (content) {\n          sources.push({ path: filePath, content, scope: 'global' });\n          break; // Only use first found global instruction file\n        }\n      } catch {\n        // Skip unreadable files\n      }\n    }\n  }\n\n  // Load project instructions\n  for (const location of projectLocations) {\n    const basePath = location ? join(projectPath, location) : projectPath;\n    const filePath = findInstructionFile(basePath, projectReader);\n    if (filePath) {\n      try {\n        const content = projectReader.read(filePath).trim();\n        if (content) {\n          sources.push({\n            path: filePath,\n            content,\n            scope: 'project',\n            ...(projectReader.ref ? { ref: projectReader.ref } : {}),\n          });\n          break; // Only use first found project instruction file\n        }\n      } catch {\n        // Skip unreadable files\n      }\n    }\n  }\n\n  return sources;\n}\n\nexport function getStaticallyLoadedInstructionPaths(\n  projectPath: string,\n  configDirName = DEFAULT_CONFIG_DIR,\n  projectReader?: InstructionFileReader,\n): string[] {\n  return instructionSourcePaths(loadAgentInstructions(projectPath, configDirName, projectReader), [projectPath]);\n}\n\n/**\n * Directories a session's project instructions load from: the host's\n * `instructionRoots` (resolved against the working directory, the session's\n * own checkout first) when it sets any, else the working directory itself.\n */\nexport function sessionInstructionRoots(workingDir: string, instructionRoots?: readonly string[]): string[] {\n  if (!instructionRoots?.length) return [workingDir];\n  return [...new Set(instructionRoots.map(root => resolve(workingDir, root)))];\n}\n\n/**\n * The instruction files a session's system prompt carries. Global files load\n * once (unless `skipGlobal`), then each instruction root's project files, in\n * root order. An untrusted checkout never reads project files off the working\n * tree: with a `baseRef` the first root (the session's own checkout) is served\n * from that ref and the other roots are skipped; without one no project files\n * load.\n */\nexport function loadSessionInstructions({\n  workingDir,\n  instructionRoots,\n  configDir,\n  untrustedCheckout = false,\n  baseRef,\n  skipGlobal = false,\n}: {\n  workingDir: string;\n  instructionRoots?: readonly string[];\n  configDir?: string;\n  untrustedCheckout?: boolean;\n  baseRef?: string;\n  skipGlobal?: boolean;\n}): InstructionSource[] {\n  const [primary, ...others] = sessionInstructionRoots(workingDir, instructionRoots);\n  const primaryReader = untrustedCheckout\n    ? baseRef\n      ? createGitRefInstructionReader(primary!, baseRef)\n      : { exists: () => false, read: () => '' }\n    : undefined;\n  const sources = loadAgentInstructions(primary!, configDir, primaryReader, { skipGlobal });\n  if (untrustedCheckout) return sources;\n  for (const root of others) {\n    sources.push(...loadAgentInstructions(root, configDir, undefined, { skipGlobal: true }));\n  }\n  return sources;\n}\n\n/**\n * Paths of loaded instruction sources, each project source also under its\n * root's canonical path, so reactive reminders never repeat a file the\n * system prompt already carries.\n */\nexport function instructionSourcePaths(sources: InstructionSource[], roots: readonly string[]): string[] {\n  return sources.flatMap(source => {\n    const path = normalize(source.path);\n    if (source.scope !== 'project') return [path];\n    const root = roots.find(candidate => {\n      const rel = relative(candidate, path);\n      return rel !== '..' && !rel.startsWith(`..${sep}`) && !isAbsolute(rel);\n    });\n    if (!root) return [path];\n    const canonicalPath = join(realpathOrResolved(root), relative(root, path));\n    return path === canonicalPath ? [path] : [path, canonicalPath];\n  });\n}\n\n/** Heading the agent-instructions block is introduced by in the system prompt. */\nexport const AGENT_INSTRUCTIONS_HEADING = '# Agent Instructions';\n\n/**\n * Format a single instruction source as it appears in the system prompt.\n *\n * Exported so callers that attribute prompt cost per source (the `/context`\n * audit) measure the exact block that is sent rather than reconstructing it.\n */\nexport function formatInstructionSource(source: InstructionSource): string {\n  const label = source.scope === 'global' ? 'Global' : 'Project';\n  const origin = source.ref ? `${source.path} (at ref ${source.ref})` : source.path;\n  return `<!-- ${label} instructions from ${origin} -->\\n${source.content}`;\n}\n\n/**\n * Format loaded instructions into a string for the system prompt.\n */\nexport function formatAgentInstructions(sources: InstructionSource[]): string {\n  if (sources.length === 0) return '';\n\n  const sections = sources.map(formatInstructionSource);\n\n  return `\\n${AGENT_INSTRUCTIONS_HEADING}\\n\\n${sections.join('\\n\\n')}\\n`;\n}\n"],"mappings":";;;;;;;;;;AAYA,MAAM,oBAAoB,CAAC,aAAa,WAAW;AAGnD,MAAM,oBAAoB;CACxB;CACA;CACA;AACF;AAEA,MAAM,mBAAmB;CAAC;CAAW;CAAe;CAAkB;AAAoB;AAuB1F,MAAM,sBAA6C;CACjD,SAAQ,SAAQ,WAAW,IAAI;CAC/B,OAAM,SAAQ,aAAa,MAAM,OAAO;AAC1C;AAEA,SAAS,mBAAmB,MAAsB;CAChD,IAAI;EACF,OAAO,aAAa,IAAI;CAC1B,QAAQ;EACN,OAAO,QAAQ,IAAI;CACrB;AACF;AAEA,SAAS,0BAA0B,aAAsD;CACvF,MAAM,gBAAgB,mBAAmB,WAAW;CACpD,QAAO,SAAQ;EACb,MAAM,MAAM,SAAS,aAAa,IAAI;EACtC,IAAI,QAAQ,QAAQ,CAAC,IAAI,WAAW,KAAK,KAAK,KAAK,CAAC,WAAW,GAAG,GAAG,OAAO,IAAI,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG;EAInG,IAAI,WAAW,QAAQ,IAAI;EAC3B,IAAI,sBAAqC;EACzC,OAAO,MAAM;GACX,IAAI,mBAAmB,QAAQ,MAAM,eACnC,sBAAsB,SAAS,UAAU,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG;GAEpE,MAAM,SAAS,QAAQ,QAAQ;GAC/B,IAAI,WAAW,UAAU,OAAO;GAChC,WAAW;EACb;CACF;AACF;;;;;;;;;AAUA,SAAgB,8BAA8B,aAAqB,KAAoC;CACrG,MAAM,aAAa,0BAA0B,WAAW;CACxD,MAAM,QAAQ,SAAgC;EAC5C,MAAM,MAAM,WAAW,IAAI;EAC3B,IAAI,CAAC,KAAK,OAAO;EACjB,KAAK,MAAM,aAAa,CAAC,UAAU,OAAO,GAAG,GAC3C,IAAI;GACF,OAAO,aAAa,OAAO;IAAC;IAAM;IAAa;IAAQ,GAAG,UAAU,GAAG;GAAK,GAAG;IAC7E,UAAU;IACV,OAAO;KAAC;KAAU;KAAQ;IAAQ;IAClC,WAAW;GACb,CAAC;EACH,QAAQ,CAER;EAEF,OAAO;CACT;CACA,OAAO;EACL;EACA,SAAQ,SAAQ,KAAK,IAAI,MAAM;EAC/B,OAAM,SAAQ;GACZ,MAAM,UAAU,KAAK,IAAI;GACzB,IAAI,YAAY,MAAM,MAAM,IAAI,MAAM,oBAAoB,IAAI,IAAI,MAAM;GACxE,OAAO;EACT;CACF;AACF;;;;;;;;AASA,SAAgB,2BACd,aACA,KAMA;CACA,MAAM,YAAY,8BAA8B,aAAa,GAAG;CAChE,MAAM,aAAa,0BAA0B,WAAW;CACxD,MAAM,gBAAgB,mBAAmB,WAAW;CACpD,MAAM,cAAc,QAA+B;EACjD,IAAI,QAAQ,IAAI,OAAO;EACvB,KAAK,MAAM,aAAa,CAAC,UAAU,OAAO,GAAG,GAC3C,IAAI;GACF,OAAO,aAAa,OAAO;IAAC;IAAM;IAAa;IAAY;IAAM,GAAG,UAAU,GAAG;GAAK,GAAG;IACvF,UAAU;IACV,OAAO;KAAC;KAAU;KAAQ;IAAQ;GACpC,CAAC,CAAC,CAAC,KAAK;EACV,QAAQ,CAER;EAEF,OAAO;CACT;CACA,OAAO;EACL,aAAY,SAAQ;GAClB,MAAM,MAAM,WAAW,IAAI;GAC3B,IAAI,QAAQ,MAAM,OAAO,WAAW,IAAI;GACxC,OAAO,WAAW,GAAG,MAAM;EAC7B;EACA,cAAa,SAAQ;GACnB,MAAM,MAAM,WAAW,IAAI;GAC3B,IAAI,QAAQ,MACV,IAAI;IACF,OAAO,SAAS,IAAI,CAAC,CAAC,YAAY;GACpC,QAAQ;IACN,OAAO;GACT;GAEF,OAAO,WAAW,GAAG,MAAM;EAC7B;EACA,WAAU,SAAQ;GAEhB,IADY,WAAW,IACjB,MAAM,MAAM,OAAO,aAAa,MAAM,OAAO;GACnD,OAAO,UAAU,KAAK,IAAI;EAC5B;EACA,kBAAiB,SAAQ;GACvB,MAAM,MAAM,WAAW,IAAI;GAG3B,OAAO,QAAQ,OAAO,mBAAmB,IAAI,IAAI,KAAK,eAAe,GAAG;EAC1E;CACF;AACF;;;;;AAMA,SAAS,oBAAoB,UAAkB,SAAgC,qBAAoC;CACjH,KAAK,MAAM,YAAY,mBAAmB;EACxC,MAAM,WAAW,KAAK,UAAU,QAAQ;EACxC,IAAI,OAAO,OAAO,QAAQ,GACxB,OAAO;CAEX;CACA,OAAO;AACT;;;;;;;;;AAUA,SAAgB,sBACd,aACA,gBAAgB,oBAChB,gBAAuC,qBACvC,EAAE,aAAa,UAAoC,CAAC,GAC/B;CACrB,MAAM,UAA+B,CAAC;CACtC,MAAM,OAAO,QAAQ;CAGrB,MAAM,mBAAmB,kBAAkB,KAAI,QAAQ,QAAQ,gBAAgB,gBAAgB,GAAI;CACnG,MAAM,kBAAkB,aACpB,CAAC,IACD,iBAAiB,KAAI,QAAO;EAC1B,IAAI,QAAQ,eAAe,OAAO;EAGlC,IAAI,QAAQ,sBAAsB,OAAO,aAAa,cAAc,QAAQ,OAAO,EAAE;EACrF,OAAO;CACT,CAAC;CAGL,KAAK,MAAM,YAAY,iBAAiB;EAEtC,MAAM,WAAW,oBADA,KAAK,MAAM,QACgB,CAAC;EAC7C,IAAI,UACF,IAAI;GACF,MAAM,UAAU,aAAa,UAAU,OAAO,CAAC,CAAC,KAAK;GACrD,IAAI,SAAS;IACX,QAAQ,KAAK;KAAE,MAAM;KAAU;KAAS,OAAO;IAAS,CAAC;IACzD;GACF;EACF,QAAQ,CAER;CAEJ;CAGA,KAAK,MAAM,YAAY,kBAAkB;EAEvC,MAAM,WAAW,oBADA,WAAW,KAAK,aAAa,QAAQ,IAAI,aACX,aAAa;EAC5D,IAAI,UACF,IAAI;GACF,MAAM,UAAU,cAAc,KAAK,QAAQ,CAAC,CAAC,KAAK;GAClD,IAAI,SAAS;IACX,QAAQ,KAAK;KACX,MAAM;KACN;KACA,OAAO;KACP,GAAI,cAAc,MAAM,EAAE,KAAK,cAAc,IAAI,IAAI,CAAC;IACxD,CAAC;IACD;GACF;EACF,QAAQ,CAER;CAEJ;CAEA,OAAO;AACT;AAEA,SAAgB,oCACd,aACA,gBAAgB,oBAChB,eACU;CACV,OAAO,uBAAuB,sBAAsB,aAAa,eAAe,aAAa,GAAG,CAAC,WAAW,CAAC;AAC/G;;;;;;AAOA,SAAgB,wBAAwB,YAAoB,kBAAgD;CAC1G,IAAI,CAAC,kBAAkB,QAAQ,OAAO,CAAC,UAAU;CACjD,OAAO,CAAC,GAAG,IAAI,IAAI,iBAAiB,KAAI,SAAQ,QAAQ,YAAY,IAAI,CAAC,CAAC,CAAC;AAC7E;;;;;;;;;AAUA,SAAgB,wBAAwB,EACtC,YACA,kBACA,WACA,oBAAoB,OACpB,SACA,aAAa,SAQS;CACtB,MAAM,CAAC,SAAS,GAAG,UAAU,wBAAwB,YAAY,gBAAgB;CAMjF,MAAM,UAAU,sBAAsB,SAAU,WAL1B,oBAClB,UACE,8BAA8B,SAAU,OAAO,IAC/C;EAAE,cAAc;EAAO,YAAY;CAAG,IACxC,KAAA,GACsE,EAAE,WAAW,CAAC;CACxF,IAAI,mBAAmB,OAAO;CAC9B,KAAK,MAAM,QAAQ,QACjB,QAAQ,KAAK,GAAG,sBAAsB,MAAM,WAAW,KAAA,GAAW,EAAE,YAAY,KAAK,CAAC,CAAC;CAEzF,OAAO;AACT;;;;;;AAOA,SAAgB,uBAAuB,SAA8B,OAAoC;CACvG,OAAO,QAAQ,SAAQ,WAAU;EAC/B,MAAM,OAAO,UAAU,OAAO,IAAI;EAClC,IAAI,OAAO,UAAU,WAAW,OAAO,CAAC,IAAI;EAC5C,MAAM,OAAO,MAAM,MAAK,cAAa;GACnC,MAAM,MAAM,SAAS,WAAW,IAAI;GACpC,OAAO,QAAQ,QAAQ,CAAC,IAAI,WAAW,KAAK,KAAK,KAAK,CAAC,WAAW,GAAG;EACvE,CAAC;EACD,IAAI,CAAC,MAAM,OAAO,CAAC,IAAI;EACvB,MAAM,gBAAgB,KAAK,mBAAmB,IAAI,GAAG,SAAS,MAAM,IAAI,CAAC;EACzE,OAAO,SAAS,gBAAgB,CAAC,IAAI,IAAI,CAAC,MAAM,aAAa;CAC/D,CAAC;AACH;;AAGA,MAAa,6BAA6B;;;;;;;AAQ1C,SAAgB,wBAAwB,QAAmC;CAGzE,OAAO,QAFO,OAAO,UAAU,WAAW,WAAW,UAEhC,qBADN,OAAO,MAAM,GAAG,OAAO,KAAK,WAAW,OAAO,IAAI,KAAK,OAAO,KAC5B,QAAQ,OAAO;AAClE;;;;AAKA,SAAgB,wBAAwB,SAAsC;CAC5E,IAAI,QAAQ,WAAW,GAAG,OAAO;CAEjC,MAAM,WAAW,QAAQ,IAAI,uBAAuB;CAEpD,OAAO,KAAK,2BAA2B,MAAM,SAAS,KAAK,MAAM,EAAE;AACrE"}

package/dist/agents/prompts/index.js

@@ -49,7 +49,7 @@ function buildFullPromptSections(ctx) {
 		deniedTools,
 		plansDir: getLocalPlansRelativeDir({ factoryProjectId })
 	});
-	const base = buildBasePrompt({
+	const baseCtx = {
 		projectPath: ctx.workingDir || "(no workspace attached)",
 		projectName: ctx.projectName || "unknown",
 		gitBranch: ctx.gitBranch,
@@ -63,7 +63,8 @@ function buildFullPromptSections(ctx) {
 		activePlan: ctx.state?.activePlan,
 		hasSubagents: ctx.hasSubagents !== false && !deniedTools.has("subagent"),
 		toolGuidance
-	});
+	};
+	const base = buildBasePrompt(baseCtx);
 	const entry = modePrompts[ctx.modeId] || modePrompts.build;
 	const modeSpecific = (typeof entry === "function" ? entry({
 		...ctx,

package/dist/agents/prompts/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../src/agents/prompts/index.ts"],"sourcesContent":["/**\n * Prompt system — exports the prompt builder and mode-specific prompts.\n */\n\nexport { buildModePrompt, buildModePromptFn } from './build.js';\nexport { planModePrompt } from './plan.js';\nexport { fastModePrompt } from './fast.js';\n\nimport { buildBasePrompt } from '@mastra/core/coding-agent';\nimport type { PromptContext as BasePromptContext } from '@mastra/core/coding-agent';\nimport { loadSettings, resolveLspSetting } from '../../onboarding/settings.js';\nimport { MC_TOOLS } from '../../tool-names.js';\nimport { hasParallelKey, hasTavilyKey } from '../../tools/index.js';\nimport { getLocalPlansRelativeDir } from '../../utils/plans.js';\nimport { loadSessionInstructions, formatInstructionSource, AGENT_INSTRUCTIONS_HEADING } from './agent-instructions.js';\nimport { buildModePromptFn } from './build.js';\nimport { fastModePrompt } from './fast.js';\nimport { modelSpecificPrompts } from './model.js';\nimport { planModePrompt } from './plan.js';\nimport { buildToolGuidance } from './tool-guidance.js';\n\n// Extended prompt context that includes runtime information\nexport interface PromptContext extends Omit<BasePromptContext, 'toolGuidance'> {\n  modeId: string;\n  state?: any;\n  /** The subconscious knowledge tools are registered on the agent. */\n  hasSubconscious?: boolean;\n  hostInstructions?: string;\n  /** Controller built-in tools removed via `disableBuiltinTools`; treated as denied. */\n  disabledBuiltinTools?: readonly string[];\n  /** Resolved in `buildFullPromptSections`; false when `submit_plan` is denied or disabled. */\n  submitPlanAvailable?: boolean;\n  currentDate: string;\n  workingDir: string;\n}\n\nconst modePrompts: Record<string, string | ((ctx: PromptContext) => string)> = {\n  build: buildModePromptFn,\n  plan: planModePrompt,\n  fast: fastModePrompt,\n};\n\n/**\n * One labeled piece of the assembled system prompt.\n *\n * The system prompt is a single string by the time it reaches the model, which\n * makes it impossible to say which configuration source is responsible for\n * which share of the context window. Building it as labeled sections and\n * joining them at the end keeps that attribution available to the `/context`\n * audit while guaranteeing the audit measures the exact text that is sent —\n * a parallel \"describe the prompt\" path would drift and report numbers for a\n * prompt that is no longer assembled this way.\n */\nexport interface PromptSection {\n  /** Stable identifier, unique within a single build. */\n  id: string;\n  /** Human-readable label for display. */\n  label: string;\n  /** Optional provenance (e.g. the instruction file path). */\n  detail?: string;\n  /** The exact text contributed to the prompt. */\n  content: string;\n}\n\n/** Join prompt sections into the final system prompt string. */\nexport function joinPromptSections(sections: PromptSection[]): string {\n  return sections\n    .map(section => section.content)\n    .filter(Boolean)\n    .join('\\n\\n');\n}\n\n/**\n * Build the full system prompt for a given mode and context.\n * Combines the base prompt with mode-specific instructions.\n */\nexport function buildFullPrompt(ctx: PromptContext): string {\n  return joinPromptSections(buildFullPromptSections(ctx));\n}\n\n/**\n * Build the system prompt as labeled sections. `buildFullPrompt` is the join of\n * these, so the two can never disagree about what the model receives.\n */\nexport function buildFullPromptSections(ctx: PromptContext): PromptSection[] {\n  // Determine whether web search tools are available\n  const modelId = ctx.modelId;\n  const hasWebSearch =\n    hasParallelKey() ||\n    hasTavilyKey() ||\n    (!!modelId && (modelId.startsWith('anthropic/') || modelId.startsWith('openai/')));\n\n  // Collect per-tool deny rules so guidance omits denied tools\n  const deniedTools = new Set<string>();\n  const permRules = ctx.state?.permissionRules as { tools?: Record<string, string> } | undefined;\n  if (permRules?.tools) {\n    for (const [name, policy] of Object.entries(permRules.tools)) {\n      if (policy === 'deny') deniedTools.add(name);\n    }\n  }\n\n  // Disabled built-ins are never registered, so they are denied for guidance too.\n  for (const name of ctx.disabledBuiltinTools ?? []) deniedTools.add(name);\n\n  // LSP is opt-in — when it is off the tool is never registered, so its\n  // guidance must not be advertised either.\n  if (resolveLspSetting(loadSettings().lsp) === false) deniedTools.add(MC_TOOLS.LSP_INSPECT);\n\n  // Build mode-aware tool guidance\n  const factoryProjectId = typeof ctx.state?.factoryProjectId === 'string' ? ctx.state.factoryProjectId : undefined;\n  const toolGuidance = buildToolGuidance(ctx.modeId, {\n    hasWebSearch,\n    hasSubconscious: ctx.hasSubconscious === true,\n    hasSubagents: ctx.hasSubagents,\n    deniedTools,\n    plansDir: getLocalPlansRelativeDir({ factoryProjectId }),\n  });\n\n  // Map new context to base context\n  const baseCtx: BasePromptContext = {\n    projectPath: ctx.workingDir || '(no workspace attached)',\n    projectName: ctx.projectName || 'unknown',\n    gitBranch: ctx.gitBranch,\n    platform: process.platform,\n    commonBinaries: ctx.commonBinaries,\n    date: ctx.currentDate,\n    mode: ctx.modeId,\n    modelId: ctx.modelId,\n    coAuthorName: ctx.coAuthorName,\n    coAuthorEmail: ctx.coAuthorEmail,\n    activePlan: ctx.state?.activePlan,\n    hasSubagents: ctx.hasSubagents !== false && !deniedTools.has('subagent'),\n    toolGuidance,\n  };\n\n  const base = buildBasePrompt(baseCtx);\n  const entry = modePrompts[ctx.modeId] || modePrompts.build;\n  const modeSpecific =\n    (typeof entry === 'function' ? entry({ ...ctx, submitPlanAvailable: !deniedTools.has('submit_plan') }) : entry) ??\n    '';\n  const modelSpecific = ctx.modelId\n    ? (modelSpecificPrompts[ctx.modelId as keyof typeof modelSpecificPrompts] ?? '')\n    : '';\n\n  // The current task list is carried on the agent state-signal lane (see\n  // TaskStateProcessor) rather than injected into the cached system prompt. This\n  // keeps the prompt prefix stable across task updates (preserving prompt cache)\n  // while still surviving observational-memory truncation.\n\n  // Load and inject agent instructions from AGENTS.md/CLAUDE.md files.\n  // Untrusted checkouts (e.g. a PR branch under review) never read\n  // project-scope files off the working tree: their AGENTS.md is\n  // attacker-writable and would otherwise land in the system prompt as\n  // trusted configuration. When the session carries a trusted base ref, the\n  // project instructions are served from that ref instead (`git show`);\n  // without one, project-scope files are skipped entirely. Home-directory\n  // (global) instructions belong to whoever owns the machine, so hosts that\n  // run sessions for someone else opt out of them entirely.\n  // A host booting several checkouts under one working directory names them\n  // as `instructionRoots`, so each checkout's own files load.\n  const configDir = ctx.state?.configDir as string | undefined;\n  const baseRef = typeof ctx.state?.baseRef === 'string' ? ctx.state.baseRef : undefined;\n  const instructionRoots = Array.isArray(ctx.state?.instructionRoots)\n    ? (ctx.state.instructionRoots as string[])\n    : undefined;\n  // No working directory means a hosted session with no project attached:\n  // load NO instruction files at all — project locations would resolve\n  // against the server's own cwd, and global locations against the server's\n  // homedir. Neither belongs in a hosted session's prompt.\n  const instructionSources = ctx.workingDir\n    ? loadSessionInstructions({\n        workingDir: ctx.workingDir,\n        instructionRoots,\n        configDir,\n        untrustedCheckout: ctx.state?.untrustedCheckout === true,\n        baseRef,\n        skipGlobal: ctx.state?.skipGlobalInstructions === true,\n      })\n    : [];\n  // Emitted per source so each AGENTS.md/CLAUDE.md can be costed individually.\n  // The heading rides on the first source's section, which is exactly how\n  // `formatAgentInstructions` lays the block out, so joining the sections\n  // reproduces its output byte for byte.\n  const instructionSections: PromptSection[] = instructionSources.map((source, index) => {\n    const isFirst = index === 0;\n    const isLast = index === instructionSources.length - 1;\n    let content = formatInstructionSource(source);\n    if (isFirst) content = `${AGENT_INSTRUCTIONS_HEADING}\\n\\n${content}`;\n    // The block as a whole used to be trimmed, which only ever affected the\n    // trailing whitespace of the final source's content.\n    if (isLast) content = content.trimEnd();\n    return {\n      id: `agent-instructions:${source.path}:${index}`,\n      label: `${source.scope === 'global' ? 'Global' : 'Project'} instructions`,\n      detail: source.ref ? `${source.path} (at ref ${source.ref})` : source.path,\n      content,\n    };\n  });\n\n  const hostInstructions = ctx.hostInstructions?.trim() ?? '';\n\n  return [\n    { id: 'base-prompt', label: 'Base system prompt', content: base },\n    { id: 'host-instructions', label: 'Host instructions', content: hostInstructions },\n    ...instructionSections,\n    { id: 'model-prompt', label: 'Model-specific prompt', detail: ctx.modelId, content: modelSpecific.trim() },\n    { id: 'mode-prompt', label: 'Mode prompt', detail: ctx.modeId, content: modeSpecific.trim() },\n  ].filter(section => Boolean(section.content));\n}\n"],"mappings":";;;;;;;;;;;;;AAoCA,MAAM,cAAyE;CAC7E,OAAO;CACP,MAAM;CACN,MAAM;AACR;;AAyBA,SAAgB,mBAAmB,UAAmC;CACpE,OAAO,SACJ,KAAI,YAAW,QAAQ,OAAO,CAAC,CAC/B,OAAO,OAAO,CAAC,CACf,KAAK,MAAM;AAChB;;;;;AAMA,SAAgB,gBAAgB,KAA4B;CAC1D,OAAO,mBAAmB,wBAAwB,GAAG,CAAC;AACxD;;;;;AAMA,SAAgB,wBAAwB,KAAqC;CAE3E,MAAM,UAAU,IAAI;CACpB,MAAM,eACJ,eAAe,KACf,aAAa,KACZ,CAAC,CAAC,YAAY,QAAQ,WAAW,YAAY,KAAK,QAAQ,WAAW,SAAS;CAGjF,MAAM,8BAAc,IAAI,IAAY;CACpC,MAAM,YAAY,IAAI,OAAO;CAC7B,IAAI,WAAW,OACR;OAAA,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,UAAU,KAAK,GACzD,IAAI,WAAW,QAAQ,YAAY,IAAI,IAAI;CAAA;CAK/C,KAAK,MAAM,QAAQ,IAAI,wBAAwB,CAAC,GAAG,YAAY,IAAI,IAAI;CAIvE,IAAI,kBAAkB,aAAa,CAAC,CAAC,GAAG,MAAM,OAAO,YAAY,IAAI,SAAS,WAAW;CAGzF,MAAM,mBAAmB,OAAO,IAAI,OAAO,qBAAqB,WAAW,IAAI,MAAM,mBAAmB,KAAA;CACxG,MAAM,eAAe,kBAAkB,IAAI,QAAQ;EACjD;EACA,iBAAiB,IAAI,oBAAoB;EACzC,cAAc,IAAI;EAClB;EACA,UAAU,yBAAyB,EAAE,iBAAiB,CAAC;CACzD,CAAC;CAmBD,MAAM,OAAO,gBAAgB;EAf3B,aAAa,IAAI,cAAc;EAC/B,aAAa,IAAI,eAAe;EAChC,WAAW,IAAI;EACf,UAAU,QAAQ;EAClB,gBAAgB,IAAI;EACpB,MAAM,IAAI;EACV,MAAM,IAAI;EACV,SAAS,IAAI;EACb,cAAc,IAAI;EAClB,eAAe,IAAI;EACnB,YAAY,IAAI,OAAO;EACvB,cAAc,IAAI,iBAAiB,SAAS,CAAC,YAAY,IAAI,UAAU;EACvE;CAGiC,CAAC;CACpC,MAAM,QAAQ,YAAY,IAAI,WAAW,YAAY;CACrD,MAAM,gBACH,OAAO,UAAU,aAAa,MAAM;EAAE,GAAG;EAAK,qBAAqB,CAAC,YAAY,IAAI,aAAa;CAAE,CAAC,IAAI,UACzG;CACF,MAAM,gBAAgB,IAAI,UACrB,qBAAqB,IAAI,YAAiD,KAC3E;CAkBJ,MAAM,YAAY,IAAI,OAAO;CAC7B,MAAM,UAAU,OAAO,IAAI,OAAO,YAAY,WAAW,IAAI,MAAM,UAAU,KAAA;CAC7E,MAAM,mBAAmB,MAAM,QAAQ,IAAI,OAAO,gBAAgB,IAC7D,IAAI,MAAM,mBACX,KAAA;CAKJ,MAAM,qBAAqB,IAAI,aAC3B,wBAAwB;EACtB,YAAY,IAAI;EAChB;EACA;EACA,mBAAmB,IAAI,OAAO,sBAAsB;EACpD;EACA,YAAY,IAAI,OAAO,2BAA2B;CACpD,CAAC,IACD,CAAC;CAKL,MAAM,sBAAuC,mBAAmB,KAAK,QAAQ,UAAU;EACrF,MAAM,UAAU,UAAU;EAC1B,MAAM,SAAS,UAAU,mBAAmB,SAAS;EACrD,IAAI,UAAU,wBAAwB,MAAM;EAC5C,IAAI,SAAS,UAAU,GAAG,2BAA2B,MAAM;EAG3D,IAAI,QAAQ,UAAU,QAAQ,QAAQ;EACtC,OAAO;GACL,IAAI,sBAAsB,OAAO,KAAK,GAAG;GACzC,OAAO,GAAG,OAAO,UAAU,WAAW,WAAW,UAAU;GAC3D,QAAQ,OAAO,MAAM,GAAG,OAAO,KAAK,WAAW,OAAO,IAAI,KAAK,OAAO;GACtE;EACF;CACF,CAAC;CAED,MAAM,mBAAmB,IAAI,kBAAkB,KAAK,KAAK;CAEzD,OAAO;EACL;GAAE,IAAI;GAAe,OAAO;GAAsB,SAAS;EAAK;EAChE;GAAE,IAAI;GAAqB,OAAO;GAAqB,SAAS;EAAiB;EACjF,GAAG;EACH;GAAE,IAAI;GAAgB,OAAO;GAAyB,QAAQ,IAAI;GAAS,SAAS,cAAc,KAAK;EAAE;EACzG;GAAE,IAAI;GAAe,OAAO;GAAe,QAAQ,IAAI;GAAQ,SAAS,aAAa,KAAK;EAAE;CAC9F,CAAC,CAAC,QAAO,YAAW,QAAQ,QAAQ,OAAO,CAAC;AAC9C"}
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/agents/prompts/index.ts"],"sourcesContent":["/**\n * Prompt system — exports the prompt builder and mode-specific prompts.\n */\n\nexport { buildModePrompt, buildModePromptFn } from './build.js';\nexport { planModePrompt } from './plan.js';\nexport { fastModePrompt } from './fast.js';\n\nimport { buildBasePrompt } from '@mastra/core/coding-agent';\nimport type { PromptContext as BasePromptContext } from '@mastra/core/coding-agent';\nimport { loadSettings, resolveLspSetting } from '../../onboarding/settings.js';\nimport { MC_TOOLS } from '../../tool-names.js';\nimport { hasParallelKey, hasTavilyKey } from '../../tools/index.js';\nimport { getLocalPlansRelativeDir } from '../../utils/plans.js';\nimport { loadSessionInstructions, formatInstructionSource, AGENT_INSTRUCTIONS_HEADING } from './agent-instructions.js';\nimport { buildModePromptFn } from './build.js';\nimport { fastModePrompt } from './fast.js';\nimport { modelSpecificPrompts } from './model.js';\nimport { planModePrompt } from './plan.js';\nimport { buildToolGuidance } from './tool-guidance.js';\n\n// Extended prompt context that includes runtime information\nexport interface PromptContext extends Omit<BasePromptContext, 'toolGuidance'> {\n  modeId: string;\n  state?: any;\n  /** The subconscious knowledge tools are registered on the agent. */\n  hasSubconscious?: boolean;\n  hostInstructions?: string;\n  /** Controller built-in tools removed via `disableBuiltinTools`; treated as denied. */\n  disabledBuiltinTools?: readonly string[];\n  /** Resolved in `buildFullPromptSections`; false when `submit_plan` is denied or disabled. */\n  submitPlanAvailable?: boolean;\n  currentDate: string;\n  workingDir: string;\n}\n\nconst modePrompts: Record<string, string | ((ctx: PromptContext) => string)> = {\n  build: buildModePromptFn,\n  plan: planModePrompt,\n  fast: fastModePrompt,\n};\n\n/**\n * One labeled piece of the assembled system prompt.\n *\n * The system prompt is a single string by the time it reaches the model, which\n * makes it impossible to say which configuration source is responsible for\n * which share of the context window. Building it as labeled sections and\n * joining them at the end keeps that attribution available to the `/context`\n * audit while guaranteeing the audit measures the exact text that is sent —\n * a parallel \"describe the prompt\" path would drift and report numbers for a\n * prompt that is no longer assembled this way.\n */\nexport interface PromptSection {\n  /** Stable identifier, unique within a single build. */\n  id: string;\n  /** Human-readable label for display. */\n  label: string;\n  /** Optional provenance (e.g. the instruction file path). */\n  detail?: string;\n  /** The exact text contributed to the prompt. */\n  content: string;\n}\n\n/** Join prompt sections into the final system prompt string. */\nexport function joinPromptSections(sections: PromptSection[]): string {\n  return sections\n    .map(section => section.content)\n    .filter(Boolean)\n    .join('\\n\\n');\n}\n\n/**\n * Build the full system prompt for a given mode and context.\n * Combines the base prompt with mode-specific instructions.\n */\nexport function buildFullPrompt(ctx: PromptContext): string {\n  return joinPromptSections(buildFullPromptSections(ctx));\n}\n\n/**\n * Build the system prompt as labeled sections. `buildFullPrompt` is the join of\n * these, so the two can never disagree about what the model receives.\n */\nexport function buildFullPromptSections(ctx: PromptContext): PromptSection[] {\n  // Determine whether web search tools are available\n  const modelId = ctx.modelId;\n  const hasWebSearch =\n    hasParallelKey() ||\n    hasTavilyKey() ||\n    (!!modelId && (modelId.startsWith('anthropic/') || modelId.startsWith('openai/')));\n\n  // Collect per-tool deny rules so guidance omits denied tools\n  const deniedTools = new Set<string>();\n  const permRules = ctx.state?.permissionRules as { tools?: Record<string, string> } | undefined;\n  if (permRules?.tools) {\n    for (const [name, policy] of Object.entries(permRules.tools)) {\n      if (policy === 'deny') deniedTools.add(name);\n    }\n  }\n\n  // Disabled built-ins are never registered, so they are denied for guidance too.\n  for (const name of ctx.disabledBuiltinTools ?? []) deniedTools.add(name);\n\n  // LSP is opt-in — when it is off the tool is never registered, so its\n  // guidance must not be advertised either.\n  if (resolveLspSetting(loadSettings().lsp) === false) deniedTools.add(MC_TOOLS.LSP_INSPECT);\n\n  // Build mode-aware tool guidance\n  const factoryProjectId = typeof ctx.state?.factoryProjectId === 'string' ? ctx.state.factoryProjectId : undefined;\n  const toolGuidance = buildToolGuidance(ctx.modeId, {\n    hasWebSearch,\n    hasSubconscious: ctx.hasSubconscious === true,\n    hasSubagents: ctx.hasSubagents,\n    deniedTools,\n    plansDir: getLocalPlansRelativeDir({ factoryProjectId }),\n  });\n\n  // Map new context to base context\n  const baseCtx: BasePromptContext = {\n    projectPath: ctx.workingDir || '(no workspace attached)',\n    projectName: ctx.projectName || 'unknown',\n    gitBranch: ctx.gitBranch,\n    platform: process.platform,\n    commonBinaries: ctx.commonBinaries,\n    date: ctx.currentDate,\n    mode: ctx.modeId,\n    modelId: ctx.modelId,\n    coAuthorName: ctx.coAuthorName,\n    coAuthorEmail: ctx.coAuthorEmail,\n    activePlan: ctx.state?.activePlan,\n    hasSubagents: ctx.hasSubagents !== false && !deniedTools.has('subagent'),\n    toolGuidance,\n  };\n\n  const base = buildBasePrompt(baseCtx);\n  const entry = modePrompts[ctx.modeId] || modePrompts.build;\n  const modeSpecific =\n    (typeof entry === 'function' ? entry({ ...ctx, submitPlanAvailable: !deniedTools.has('submit_plan') }) : entry) ??\n    '';\n  const modelSpecific = ctx.modelId\n    ? (modelSpecificPrompts[ctx.modelId as keyof typeof modelSpecificPrompts] ?? '')\n    : '';\n\n  // The current task list is carried on the agent state-signal lane (see\n  // TaskStateProcessor) rather than injected into the cached system prompt. This\n  // keeps the prompt prefix stable across task updates (preserving prompt cache)\n  // while still surviving observational-memory truncation.\n\n  // Load and inject agent instructions from AGENTS.md/CLAUDE.md files.\n  // Untrusted checkouts (e.g. a PR branch under review) never read\n  // project-scope files off the working tree: their AGENTS.md is\n  // attacker-writable and would otherwise land in the system prompt as\n  // trusted configuration. When the session carries a trusted base ref, the\n  // project instructions are served from that ref instead (`git show`);\n  // without one, project-scope files are skipped entirely. Home-directory\n  // (global) instructions belong to whoever owns the machine, so hosts that\n  // run sessions for someone else opt out of them entirely.\n  // A host booting several checkouts under one working directory names them\n  // as `instructionRoots`, so each checkout's own files load.\n  const configDir = ctx.state?.configDir as string | undefined;\n  const baseRef = typeof ctx.state?.baseRef === 'string' ? ctx.state.baseRef : undefined;\n  const instructionRoots = Array.isArray(ctx.state?.instructionRoots)\n    ? (ctx.state.instructionRoots as string[])\n    : undefined;\n  // No working directory means a hosted session with no project attached:\n  // load NO instruction files at all — project locations would resolve\n  // against the server's own cwd, and global locations against the server's\n  // homedir. Neither belongs in a hosted session's prompt.\n  const instructionSources = ctx.workingDir\n    ? loadSessionInstructions({\n        workingDir: ctx.workingDir,\n        instructionRoots,\n        configDir,\n        untrustedCheckout: ctx.state?.untrustedCheckout === true,\n        baseRef,\n        skipGlobal: ctx.state?.skipGlobalInstructions === true,\n      })\n    : [];\n  // Emitted per source so each AGENTS.md/CLAUDE.md can be costed individually.\n  // The heading rides on the first source's section, which is exactly how\n  // `formatAgentInstructions` lays the block out, so joining the sections\n  // reproduces its output byte for byte.\n  const instructionSections: PromptSection[] = instructionSources.map((source, index) => {\n    const isFirst = index === 0;\n    const isLast = index === instructionSources.length - 1;\n    let content = formatInstructionSource(source);\n    if (isFirst) content = `${AGENT_INSTRUCTIONS_HEADING}\\n\\n${content}`;\n    // The block as a whole used to be trimmed, which only ever affected the\n    // trailing whitespace of the final source's content.\n    if (isLast) content = content.trimEnd();\n    return {\n      id: `agent-instructions:${source.path}:${index}`,\n      label: `${source.scope === 'global' ? 'Global' : 'Project'} instructions`,\n      detail: source.ref ? `${source.path} (at ref ${source.ref})` : source.path,\n      content,\n    };\n  });\n\n  const hostInstructions = ctx.hostInstructions?.trim() ?? '';\n\n  return [\n    { id: 'base-prompt', label: 'Base system prompt', content: base },\n    { id: 'host-instructions', label: 'Host instructions', content: hostInstructions },\n    ...instructionSections,\n    { id: 'model-prompt', label: 'Model-specific prompt', detail: ctx.modelId, content: modelSpecific.trim() },\n    { id: 'mode-prompt', label: 'Mode prompt', detail: ctx.modeId, content: modeSpecific.trim() },\n  ].filter(section => Boolean(section.content));\n}\n"],"mappings":";;;;;;;;;;;;;AAoCA,MAAM,cAAyE;CAC7E,OAAO;CACP,MAAM;CACN,MAAM;AACR;;AAyBA,SAAgB,mBAAmB,UAAmC;CACpE,OAAO,SACJ,KAAI,YAAW,QAAQ,OAAO,CAAC,CAC/B,OAAO,OAAO,CAAC,CACf,KAAK,MAAM;AAChB;;;;;AAMA,SAAgB,gBAAgB,KAA4B;CAC1D,OAAO,mBAAmB,wBAAwB,GAAG,CAAC;AACxD;;;;;AAMA,SAAgB,wBAAwB,KAAqC;CAE3E,MAAM,UAAU,IAAI;CACpB,MAAM,eACJ,eAAe,KACf,aAAa,KACZ,CAAC,CAAC,YAAY,QAAQ,WAAW,YAAY,KAAK,QAAQ,WAAW,SAAS;CAGjF,MAAM,8BAAc,IAAI,IAAY;CACpC,MAAM,YAAY,IAAI,OAAO;CAC7B,IAAI,WAAW,OACR;OAAA,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,UAAU,KAAK,GACzD,IAAI,WAAW,QAAQ,YAAY,IAAI,IAAI;CAAA;CAK/C,KAAK,MAAM,QAAQ,IAAI,wBAAwB,CAAC,GAAG,YAAY,IAAI,IAAI;CAIvE,IAAI,kBAAkB,aAAa,CAAC,CAAC,GAAG,MAAM,OAAO,YAAY,IAAI,SAAS,WAAW;CAGzF,MAAM,mBAAmB,OAAO,IAAI,OAAO,qBAAqB,WAAW,IAAI,MAAM,mBAAmB,KAAA;CACxG,MAAM,eAAe,kBAAkB,IAAI,QAAQ;EACjD;EACA,iBAAiB,IAAI,oBAAoB;EACzC,cAAc,IAAI;EAClB;EACA,UAAU,yBAAyB,EAAE,iBAAiB,CAAC;CACzD,CAAC;CAGD,MAAM,UAA6B;EACjC,aAAa,IAAI,cAAc;EAC/B,aAAa,IAAI,eAAe;EAChC,WAAW,IAAI;EACf,UAAU,QAAQ;EAClB,gBAAgB,IAAI;EACpB,MAAM,IAAI;EACV,MAAM,IAAI;EACV,SAAS,IAAI;EACb,cAAc,IAAI;EAClB,eAAe,IAAI;EACnB,YAAY,IAAI,OAAO;EACvB,cAAc,IAAI,iBAAiB,SAAS,CAAC,YAAY,IAAI,UAAU;EACvE;CACF;CAEA,MAAM,OAAO,gBAAgB,OAAO;CACpC,MAAM,QAAQ,YAAY,IAAI,WAAW,YAAY;CACrD,MAAM,gBACH,OAAO,UAAU,aAAa,MAAM;EAAE,GAAG;EAAK,qBAAqB,CAAC,YAAY,IAAI,aAAa;CAAE,CAAC,IAAI,UACzG;CACF,MAAM,gBAAgB,IAAI,UACrB,qBAAqB,IAAI,YAAiD,KAC3E;CAkBJ,MAAM,YAAY,IAAI,OAAO;CAC7B,MAAM,UAAU,OAAO,IAAI,OAAO,YAAY,WAAW,IAAI,MAAM,UAAU,KAAA;CAC7E,MAAM,mBAAmB,MAAM,QAAQ,IAAI,OAAO,gBAAgB,IAC7D,IAAI,MAAM,mBACX,KAAA;CAKJ,MAAM,qBAAqB,IAAI,aAC3B,wBAAwB;EACtB,YAAY,IAAI;EAChB;EACA;EACA,mBAAmB,IAAI,OAAO,sBAAsB;EACpD;EACA,YAAY,IAAI,OAAO,2BAA2B;CACpD,CAAC,IACD,CAAC;CAKL,MAAM,sBAAuC,mBAAmB,KAAK,QAAQ,UAAU;EACrF,MAAM,UAAU,UAAU;EAC1B,MAAM,SAAS,UAAU,mBAAmB,SAAS;EACrD,IAAI,UAAU,wBAAwB,MAAM;EAC5C,IAAI,SAAS,UAAU,GAAG,2BAA2B,MAAM;EAG3D,IAAI,QAAQ,UAAU,QAAQ,QAAQ;EACtC,OAAO;GACL,IAAI,sBAAsB,OAAO,KAAK,GAAG;GACzC,OAAO,GAAG,OAAO,UAAU,WAAW,WAAW,UAAU;GAC3D,QAAQ,OAAO,MAAM,GAAG,OAAO,KAAK,WAAW,OAAO,IAAI,KAAK,OAAO;GACtE;EACF;CACF,CAAC;CAED,MAAM,mBAAmB,IAAI,kBAAkB,KAAK,KAAK;CAEzD,OAAO;EACL;GAAE,IAAI;GAAe,OAAO;GAAsB,SAAS;EAAK;EAChE;GAAE,IAAI;GAAqB,OAAO;GAAqB,SAAS;EAAiB;EACjF,GAAG;EACH;GAAE,IAAI;GAAgB,OAAO;GAAyB,QAAQ,IAAI;GAAS,SAAS,cAAc,KAAK;EAAE;EACzG;GAAE,IAAI;GAAe,OAAO;GAAe,QAAQ,IAAI;GAAQ,SAAS,aAAa,KAAK;EAAE;CAC9F,CAAC,CAAC,QAAO,YAAW,QAAQ,QAAQ,OAAO,CAAC;AAC9C"}

package/dist/agents/prompts/plan.js

@@ -4,7 +4,8 @@ import { getLocalPlansRelativeDir } from "../../utils/plans.js";
 * Plan mode prompt — read-only exploration and planning.
 */
 function planModePrompt(ctx) {
-	const plansDir = getLocalPlansRelativeDir({ factoryProjectId: typeof ctx.state?.factoryProjectId === "string" ? ctx.state.factoryProjectId : void 0 });
+	const factoryProjectId = typeof ctx.state?.factoryProjectId === "string" ? ctx.state.factoryProjectId : void 0;
+	const plansDir = getLocalPlansRelativeDir({ factoryProjectId });
 	const examplePath = `${plansDir}/add-dark-mode.md`;
 	const submitPlanAvailable = ctx.submitPlanAvailable !== false;
 	return `

package/dist/agents/prompts/plan.js.map

@@ -1 +1 @@
-{"version":3,"file":"plan.js","names":[],"sources":["../../../src/agents/prompts/plan.ts"],"sourcesContent":["/**\n * Plan mode prompt — read-only exploration and planning.\n */\nimport { getLocalPlansRelativeDir } from '../../utils/plans.js';\n\ninterface PlanPromptContext {\n  state?: Record<string, unknown>;\n  /** False when the host disabled or denied `submit_plan`; defaults to available. */\n  submitPlanAvailable?: boolean;\n}\n\nexport function planModePrompt(ctx: PlanPromptContext): string {\n  const factoryProjectId = typeof ctx.state?.factoryProjectId === 'string' ? ctx.state.factoryProjectId : undefined;\n  const plansDir = getLocalPlansRelativeDir({ factoryProjectId });\n  const examplePath = `${plansDir}/add-dark-mode.md`;\n  const submitPlanAvailable = ctx.submitPlanAvailable !== false;\n\n  return `\n# Plan Mode — READ-ONLY (except plan files)\n\nYou are in PLAN mode. Your job is to explore the codebase and design an implementation plan — NOT to make changes to the project.\n\n## CRITICAL: Read-Only Mode (project files)\n\nThis mode is **read-only for project files**. You must NOT modify the project.\n\n- Do NOT modify, create, or delete project files\n- Do NOT run commands that change state (no git commit, no npm install, no file creation)\n- Do NOT run build commands, tests, or scripts that have side effects\n\nThe ONE exception is plan files: you CAN create and edit markdown files inside \\`${plansDir}/\\` (e.g. \\`${examplePath}\\`). You may NOT write anywhere else.\n\nIf the user asks you to make changes while in Plan mode, explain that you're in read-only mode and they should switch to Build mode (\\`/mode build\\`) first.\n\n## Exploration Strategy\n\nBefore writing any plan, build a mental model of the codebase:\n1. Start with the directory structure (\\`view\\` on the project root or relevant subdirectory).\n2. Find the relevant entry points and core files using \\`search_content\\` and \\`find_files\\`.\n3. Read the actual code — don't assume based on file names alone.\n4. Trace data flow: where does input come from, how is it transformed, where does it go?\n5. Identify existing patterns the codebase uses (naming, structure, error handling, testing).\n\n${submitPlanAvailable ? GOAL_READY_SECTION : ''}## Your Plan Output\n\nProduce a clear, step-by-step plan with this structure:\n\n### Overview\nOne paragraph: what the change does and why.\n\n### Complexity Estimate\n- **Size**: Small (1-2 files) / Medium (3-5 files) / Large (6+ files)\n- **Risk**: Low (additive, no breaking changes) / Medium (modifies existing behavior) / High (architectural, affects many consumers)\n- **Dependencies**: List any new packages, external services, or migration steps needed.\n\n### Steps\nFor each step:\n1. **File**: path to create or modify\n2. **Change**: what to add/modify/remove, with enough specificity to implement directly\n3. **Why**: brief rationale connecting this step to the overall goal\n\n### Verification\n- What tests to run\n- What to check manually\n- What could go wrong\n\n## Plan File Workflow\n\nWrite each plan to its own markdown file under \\`${plansDir}/\\` (e.g. \\`${examplePath}\\`). Start the file with a \\`# Title\\` heading describing the plan.\n\n1. **${submitPlanAvailable ? 'First submission' : 'Writing'}**: Write your plan to a file under \\`${plansDir}/\\` using \\`write_file\\`${submitPlanAvailable ? ', then call \\`submit_plan\\` with the \\`path\\` to that file' : ''}.\n2. **Reading**: Use \\`view\\` to read a plan file.\n3. **Editing**: Use \\`string_replace_lsp\\` for targeted edits to specific sections.\n\n**Reuse the same file while you keep iterating on the same plan.** Only create a NEW file when you're starting a genuinely different plan — that keeps each plan available to look back at and keeps revision diffs meaningful.\n\n${submitPlanAvailable ? submitPlanSection(plansDir, examplePath) : planFileOnlySection(plansDir)}Do NOT start implementing until the plan is approved.\n`;\n}\n\nconst GOAL_READY_SECTION = `## Goal-Ready Plans\n\nThe submit_plan approval UI can let the user approve the plan normally or start it as a persistent goal. Write plans so they can be carried out as a goal if the user chooses that option:\n- Make the desired outcome explicit and verifiable.\n- Break work into ordered, actionable steps that can be executed autonomously.\n- Include constraints, risks, blockers, and decision points that may require user input.\n- Include concrete verification criteria so the goal judge can tell when the work is done.\n\n`;\n\nfunction submitPlanSection(plansDir: string, examplePath: string): string {\n  return `## IMMEDIATE ACTION: Write plan file, then call submit_plan\n\nAs soon as your plan is complete:\n1. Write it to a file under \\`${plansDir}/\\` using \\`write_file\\`\n2. Call \\`submit_plan\\` with the \\`path\\` to that file\n\n**CRITICAL:** Do NOT generate a long text response describing your plan. The plan content belongs in the plan file, not in your text output or the \\`submit_plan\\` arguments.\n\n\\`\\`\\`javascript\nsubmit_plan({\n  path: \"${examplePath}\"\n})\n\\`\\`\\`\n\nThe user will see the plan rendered inline and can:\n- **Approve** — automatically switches to Build mode for implementation\n- **Start as goal** — approves the plan and enters goal mode so the agent keeps working toward the plan until judged complete, paused, or waiting for user input\n- **Request changes** — rejects the plan; the agent stops immediately and the user provides revision feedback in their next chat message\n\n## Revision Workflow\n\nIf the user requests changes, you will be stopped immediately. Wait for their next message — it will contain their revision feedback. When you receive it:\n1. Use \\`view\\` to read the SAME plan file\n2. Use \\`string_replace_lsp\\` to make targeted edits based on feedback\n3. Use \\`view\\` to re-read the updated file\n4. Call \\`submit_plan\\` again with the same \\`path\\` — editing the file alone does NOT resubmit it\n\nThe user will see a diff of what changed between the previous and revised plan. Use \\`string_replace_lsp\\` for targeted edits so the diff is clear and meaningful — do NOT rewrite the entire plan from scratch for small changes, and do NOT move the plan to a new file for a revision.\n\n`;\n}\n\nfunction planFileOnlySection(plansDir: string): string {\n  return `## When the plan is complete\n\nPlan approval is not available in this session — there is no \\`submit_plan\\` tool. As soon as your plan is complete:\n1. Write it to a file under \\`${plansDir}/\\` using \\`write_file\\`\n2. Follow any host or session instructions for handing the plan off; otherwise reply with a brief summary and the plan file path\n\n**CRITICAL:** Do NOT generate a long text response describing your plan. The plan content belongs in the plan file.\n\nWhen you receive revision feedback, edit the SAME plan file with \\`string_replace_lsp\\` rather than rewriting it or moving it to a new file.\n\n`;\n}\n"],"mappings":";;;;;AAWA,SAAgB,eAAe,KAAgC;CAE7D,MAAM,WAAW,yBAAyB,EAAE,kBADnB,OAAO,IAAI,OAAO,qBAAqB,WAAW,IAAI,MAAM,mBAAmB,KAAA,EAC3C,CAAC;CAC9D,MAAM,cAAc,GAAG,SAAS;CAChC,MAAM,sBAAsB,IAAI,wBAAwB;CAExD,OAAO;;;;;;;;;;;;;mFAa0E,SAAS,cAAc,YAAY;;;;;;;;;;;;;EAapH,sBAAsB,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;mDAyBG,SAAS,cAAc,YAAY;;OAE/E,sBAAsB,qBAAqB,UAAU,wCAAwC,SAAS,0BAA0B,sBAAsB,2DAA+D,GAAG;;;;;;EAM7N,sBAAsB,kBAAkB,UAAU,WAAW,IAAI,oBAAoB,QAAQ,EAAE;;AAEjG;AAEA,MAAM,qBAAqB;;;;;;;;;AAU3B,SAAS,kBAAkB,UAAkB,aAA6B;CACxE,OAAO;;;gCAGuB,SAAS;;;;;;;WAO9B,YAAY;;;;;;;;;;;;;;;;;;;;AAoBvB;AAEA,SAAS,oBAAoB,UAA0B;CACrD,OAAO;;;gCAGuB,SAAS;;;;;;;;AAQzC"}
+{"version":3,"file":"plan.js","names":[],"sources":["../../../src/agents/prompts/plan.ts"],"sourcesContent":["/**\n * Plan mode prompt — read-only exploration and planning.\n */\nimport { getLocalPlansRelativeDir } from '../../utils/plans.js';\n\ninterface PlanPromptContext {\n  state?: Record<string, unknown>;\n  /** False when the host disabled or denied `submit_plan`; defaults to available. */\n  submitPlanAvailable?: boolean;\n}\n\nexport function planModePrompt(ctx: PlanPromptContext): string {\n  const factoryProjectId = typeof ctx.state?.factoryProjectId === 'string' ? ctx.state.factoryProjectId : undefined;\n  const plansDir = getLocalPlansRelativeDir({ factoryProjectId });\n  const examplePath = `${plansDir}/add-dark-mode.md`;\n  const submitPlanAvailable = ctx.submitPlanAvailable !== false;\n\n  return `\n# Plan Mode — READ-ONLY (except plan files)\n\nYou are in PLAN mode. Your job is to explore the codebase and design an implementation plan — NOT to make changes to the project.\n\n## CRITICAL: Read-Only Mode (project files)\n\nThis mode is **read-only for project files**. You must NOT modify the project.\n\n- Do NOT modify, create, or delete project files\n- Do NOT run commands that change state (no git commit, no npm install, no file creation)\n- Do NOT run build commands, tests, or scripts that have side effects\n\nThe ONE exception is plan files: you CAN create and edit markdown files inside \\`${plansDir}/\\` (e.g. \\`${examplePath}\\`). You may NOT write anywhere else.\n\nIf the user asks you to make changes while in Plan mode, explain that you're in read-only mode and they should switch to Build mode (\\`/mode build\\`) first.\n\n## Exploration Strategy\n\nBefore writing any plan, build a mental model of the codebase:\n1. Start with the directory structure (\\`view\\` on the project root or relevant subdirectory).\n2. Find the relevant entry points and core files using \\`search_content\\` and \\`find_files\\`.\n3. Read the actual code — don't assume based on file names alone.\n4. Trace data flow: where does input come from, how is it transformed, where does it go?\n5. Identify existing patterns the codebase uses (naming, structure, error handling, testing).\n\n${submitPlanAvailable ? GOAL_READY_SECTION : ''}## Your Plan Output\n\nProduce a clear, step-by-step plan with this structure:\n\n### Overview\nOne paragraph: what the change does and why.\n\n### Complexity Estimate\n- **Size**: Small (1-2 files) / Medium (3-5 files) / Large (6+ files)\n- **Risk**: Low (additive, no breaking changes) / Medium (modifies existing behavior) / High (architectural, affects many consumers)\n- **Dependencies**: List any new packages, external services, or migration steps needed.\n\n### Steps\nFor each step:\n1. **File**: path to create or modify\n2. **Change**: what to add/modify/remove, with enough specificity to implement directly\n3. **Why**: brief rationale connecting this step to the overall goal\n\n### Verification\n- What tests to run\n- What to check manually\n- What could go wrong\n\n## Plan File Workflow\n\nWrite each plan to its own markdown file under \\`${plansDir}/\\` (e.g. \\`${examplePath}\\`). Start the file with a \\`# Title\\` heading describing the plan.\n\n1. **${submitPlanAvailable ? 'First submission' : 'Writing'}**: Write your plan to a file under \\`${plansDir}/\\` using \\`write_file\\`${submitPlanAvailable ? ', then call \\`submit_plan\\` with the \\`path\\` to that file' : ''}.\n2. **Reading**: Use \\`view\\` to read a plan file.\n3. **Editing**: Use \\`string_replace_lsp\\` for targeted edits to specific sections.\n\n**Reuse the same file while you keep iterating on the same plan.** Only create a NEW file when you're starting a genuinely different plan — that keeps each plan available to look back at and keeps revision diffs meaningful.\n\n${submitPlanAvailable ? submitPlanSection(plansDir, examplePath) : planFileOnlySection(plansDir)}Do NOT start implementing until the plan is approved.\n`;\n}\n\nconst GOAL_READY_SECTION = `## Goal-Ready Plans\n\nThe submit_plan approval UI can let the user approve the plan normally or start it as a persistent goal. Write plans so they can be carried out as a goal if the user chooses that option:\n- Make the desired outcome explicit and verifiable.\n- Break work into ordered, actionable steps that can be executed autonomously.\n- Include constraints, risks, blockers, and decision points that may require user input.\n- Include concrete verification criteria so the goal judge can tell when the work is done.\n\n`;\n\nfunction submitPlanSection(plansDir: string, examplePath: string): string {\n  return `## IMMEDIATE ACTION: Write plan file, then call submit_plan\n\nAs soon as your plan is complete:\n1. Write it to a file under \\`${plansDir}/\\` using \\`write_file\\`\n2. Call \\`submit_plan\\` with the \\`path\\` to that file\n\n**CRITICAL:** Do NOT generate a long text response describing your plan. The plan content belongs in the plan file, not in your text output or the \\`submit_plan\\` arguments.\n\n\\`\\`\\`javascript\nsubmit_plan({\n  path: \"${examplePath}\"\n})\n\\`\\`\\`\n\nThe user will see the plan rendered inline and can:\n- **Approve** — automatically switches to Build mode for implementation\n- **Start as goal** — approves the plan and enters goal mode so the agent keeps working toward the plan until judged complete, paused, or waiting for user input\n- **Request changes** — rejects the plan; the agent stops immediately and the user provides revision feedback in their next chat message\n\n## Revision Workflow\n\nIf the user requests changes, you will be stopped immediately. Wait for their next message — it will contain their revision feedback. When you receive it:\n1. Use \\`view\\` to read the SAME plan file\n2. Use \\`string_replace_lsp\\` to make targeted edits based on feedback\n3. Use \\`view\\` to re-read the updated file\n4. Call \\`submit_plan\\` again with the same \\`path\\` — editing the file alone does NOT resubmit it\n\nThe user will see a diff of what changed between the previous and revised plan. Use \\`string_replace_lsp\\` for targeted edits so the diff is clear and meaningful — do NOT rewrite the entire plan from scratch for small changes, and do NOT move the plan to a new file for a revision.\n\n`;\n}\n\nfunction planFileOnlySection(plansDir: string): string {\n  return `## When the plan is complete\n\nPlan approval is not available in this session — there is no \\`submit_plan\\` tool. As soon as your plan is complete:\n1. Write it to a file under \\`${plansDir}/\\` using \\`write_file\\`\n2. Follow any host or session instructions for handing the plan off; otherwise reply with a brief summary and the plan file path\n\n**CRITICAL:** Do NOT generate a long text response describing your plan. The plan content belongs in the plan file.\n\nWhen you receive revision feedback, edit the SAME plan file with \\`string_replace_lsp\\` rather than rewriting it or moving it to a new file.\n\n`;\n}\n"],"mappings":";;;;;AAWA,SAAgB,eAAe,KAAgC;CAC7D,MAAM,mBAAmB,OAAO,IAAI,OAAO,qBAAqB,WAAW,IAAI,MAAM,mBAAmB,KAAA;CACxG,MAAM,WAAW,yBAAyB,EAAE,iBAAiB,CAAC;CAC9D,MAAM,cAAc,GAAG,SAAS;CAChC,MAAM,sBAAsB,IAAI,wBAAwB;CAExD,OAAO;;;;;;;;;;;;;mFAa0E,SAAS,cAAc,YAAY;;;;;;;;;;;;;EAapH,sBAAsB,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;mDAyBG,SAAS,cAAc,YAAY;;OAE/E,sBAAsB,qBAAqB,UAAU,wCAAwC,SAAS,0BAA0B,sBAAsB,2DAA+D,GAAG;;;;;;EAM7N,sBAAsB,kBAAkB,UAAU,WAAW,IAAI,oBAAoB,QAAQ,EAAE;;AAEjG;AAEA,MAAM,qBAAqB;;;;;;;;;AAU3B,SAAS,kBAAkB,UAAkB,aAA6B;CACxE,OAAO;;;gCAGuB,SAAS;;;;;;;WAO9B,YAAY;;;;;;;;;;;;;;;;;;;;AAoBvB;AAEA,SAAS,oBAAoB,UAA0B;CACrD,OAAO;;;gCAGuB,SAAS;;;;;;;;AAQzC"}

package/dist/agents/sandbox-filesystem.d.ts

@@ -5,6 +5,9 @@
  * (e.g. a Railway VM) rather than on the server host. File operations are
  * implemented by shelling out through the sandbox's `executeCommand`, so the
  * agent's file tools and command tools share one VM and one view of the repo.
+ * When the sandbox exposes its own `filesystem`, file operations use it
+ * instead, which takes one round trip rather than several commands; grep and
+ * walks still run as shell commands.
  *
  * Paths are workspace-relative (`/src/foo.ts`) and resolve under the sandbox
  * working directory (`basePath`). A traversal guard rejects any path that
@@ -22,6 +25,11 @@ export interface SandboxCommandResult {
 /** Minimal sandbox surface the filesystem needs. */
 export interface SandboxExec {
     readonly id: string;
+    /**
+     * The sandbox's own file API, when it has one (`WorkspaceSandbox.filesystem`).
+     * File operations go through it instead of shell commands.
+     */
+    readonly filesystem?: WorkspaceFilesystem;
     executeCommand(command: string, args?: string[], options?: {
         timeout?: number;
         maxRetainedBytes?: number;
@@ -40,6 +48,16 @@ export interface SandboxFilesystemOptions {
     workdir: string | (() => Promise<string> | string);
     /** Optional stable id; defaults to a sandbox-derived id. */
     id?: string;
+    /**
+     * Check that symlinks don't lead outside the workdir when using the
+     * sandbox's native filesystem. Off by default: native file APIs follow
+     * symlinks, and inside a sandbox the agent can read anything with a command
+     * anyway. Turn it on when files are served to someone other than the agent.
+     *
+     * Each path is checked once per instance, so keep such instances
+     * short-lived. Without a native filesystem the shell path always checks.
+     */
+    verifySymlinks?: boolean;
 }
 export declare class SandboxFilesystem implements WorkspaceFilesystem {
     readonly id: string;
@@ -50,6 +68,9 @@ export declare class SandboxFilesystem implements WorkspaceFilesystem {
     private readonly workdirSource;
     private resolvedBase?;
     private resolvingBase?;
+    private readonly verifySymlinks;
+    /** `check:absolutePath` keys that passed while the entry existed. */
+    private readonly verified;
     constructor(options: SandboxFilesystemOptions);
     /** The resolved workspace root; empty until a lazy workdir first resolves. */
     get basePath(): string;
@@ -92,6 +113,13 @@ export declare class SandboxFilesystem implements WorkspaceFilesystem {
      * escape vector (e.g. `link -> /etc` then writing `link/passwd`).
      */
     private assertContainedDest;
+    /**
+     * Before a native filesystem call, run the containment check the shell path
+     * runs for that operation, when `verifySymlinks` is on. A pass is remembered
+     * only for an entry that exists: a missing path may later appear as a
+     * symlink that leads outside the workdir.
+     */
+    private verifyNative;
     private execOk;
     readFile(path: string, options?: ReadOptions): Promise<string | Buffer>;
     writeFile(path: string, content: FileContent, options?: WriteOptions): Promise<void>;

package/dist/agents/sandbox-filesystem.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-filesystem.d.ts","sourceRoot":"","sources":["../../src/agents/sandbox-filesystem.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EACV,WAAW,EACX,WAAW,EACX,SAAS,EACT,QAAQ,EAER,qBAAqB,EACrB,oBAAoB,EACpB,cAAc,EACd,WAAW,EACX,cAAc,EACd,WAAW,EACX,aAAa,EACb,SAAS,EACT,WAAW,EACX,mBAAmB,EACnB,YAAY,EACb,MAAM,wBAAwB,CAAC;AAmBhC,iDAAiD;AACjD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,oDAAoD;AACpD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,cAAc,CACZ,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,EAAE,EACf,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAAE,GACxD,OAAO,CAAC,oBAAoB,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,wBAAwB;IACvC,uCAAuC;IACvC,OAAO,EAAE,WAAW,CAAC;IACrB;;;;;;OAMG;IACH,OAAO,EAAE,MAAM,GAAG,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC;IACnD,4DAA4D;IAC5D,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAkGD,qBAAa,iBAAkB,YAAW,mBAAmB;IAC3D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,uBAAuB;IACpC,QAAQ,CAAC,QAAQ,aAAa;IAC9B,MAAM,EAAE,cAAc,CAAW;IAEjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IACtC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA4C;IAC1E,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,aAAa,CAAC,CAAkB;gBAE5B,OAAO,EAAE,wBAAwB;IAc7C,8EAA8E;IAC9E,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED,6EAA6E;YAC/D,IAAI;IAkBlB;;;;OAIG;YACW,YAAY;IAI1B;;;;;;;;OAQG;IACH,OAAO,CAAC,cAAc;IAkBtB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;YAS5C,IAAI;IASlB;;;;;;;;;OASG;YACW,uBAAuB;IA0BrC;;;;;;OAMG;YACW,mBAAmB;YAWnB,MAAM;IAUd,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;IAoBvE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBpF,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAU7D,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBhE,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IA2CzE,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAqCzE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAOrE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAgB3D,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAuBxE,OAAO,CAAC,eAAe;IAevB,OAAO,CAAC,eAAe;IAgBvB,OAAO,CAAC,gBAAgB;IAQxB;;;;;;OAMG;IACG,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IA6DrE;;;;;;;;;;;OAWG;IACG,IAAI,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAS3E,OAAO,CAAC,UAAU,CAAmC;IAErD,OAAO,CAAC,WAAW;YAoBL,eAAe;IAgC7B,OAAO,CAAC,gBAAgB;IA4BxB;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAA+C;IAEtF;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAyC;IAEjF,wGAAwG;IACxG,OAAO,CAAC,MAAM,CAAC,SAAS;IAkBxB;;;;;;;;;OASG;YACW,eAAe;YAqFf,iBAAiB;IAoD/B,OAAO,CAAC,aAAa;IAgBf,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAMtC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IA+BrC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAIrB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAIxB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC;IAKjC,OAAO,IAAI,cAAc;IAUzB,eAAe,IAAI,MAAM;CAG1B"}
+{"version":3,"file":"sandbox-filesystem.d.ts","sourceRoot":"","sources":["../../src/agents/sandbox-filesystem.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,KAAK,EACV,WAAW,EACX,WAAW,EACX,SAAS,EACT,QAAQ,EAER,qBAAqB,EACrB,oBAAoB,EACpB,cAAc,EACd,WAAW,EACX,cAAc,EACd,WAAW,EACX,aAAa,EACb,SAAS,EACT,WAAW,EACX,mBAAmB,EACnB,YAAY,EACb,MAAM,wBAAwB,CAAC;AAmBhC,iDAAiD;AACjD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,oDAAoD;AACpD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAC1C,cAAc,CACZ,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,EAAE,EACf,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAAE,GACxD,OAAO,CAAC,oBAAoB,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,wBAAwB;IACvC,uCAAuC;IACvC,OAAO,EAAE,WAAW,CAAC;IACrB;;;;;;OAMG;IACH,OAAO,EAAE,MAAM,GAAG,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC;IACnD,4DAA4D;IAC5D,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAoGD,qBAAa,iBAAkB,YAAW,mBAAmB;IAC3D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,uBAAuB;IACpC,QAAQ,CAAC,QAAQ,aAAa;IAC9B,MAAM,EAAE,cAAc,CAAW;IAEjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IACtC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA4C;IAC1E,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,aAAa,CAAC,CAAkB;IACxC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;IACzC,qEAAqE;IACrE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;gBAElC,OAAO,EAAE,wBAAwB;IAe7C,8EAA8E;IAC9E,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED,6EAA6E;YAC/D,IAAI;IAkBlB;;;;OAIG;YACW,YAAY;IAI1B;;;;;;;;OAQG;IACH,OAAO,CAAC,cAAc;IAkBtB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;YAS5C,IAAI;IASlB;;;;;;;;;OASG;YACW,uBAAuB;IA2BrC;;;;;;OAMG;YACW,mBAAmB;IAYjC;;;;;OAKG;YACW,YAAY;YAWZ,MAAM;IAUd,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;IAyBvE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IA0BpF,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAe7D,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IA0BhE,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAiDzE,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IA2CzE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAYrE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAqB3D,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IA4BxE,OAAO,CAAC,eAAe;IAevB,OAAO,CAAC,eAAe;IAgBvB,OAAO,CAAC,gBAAgB;IAQxB;;;;;;OAMG;IACG,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IA6DrE;;;;;;;;;;;OAWG;IACG,IAAI,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAS3E,OAAO,CAAC,UAAU,CAAmC;IAErD,OAAO,CAAC,WAAW;YAoBL,eAAe;IAgC7B,OAAO,CAAC,gBAAgB;IA4BxB;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAA+C;IAEtF;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAyC;IAEjF,wGAAwG;IACxG,OAAO,CAAC,MAAM,CAAC,SAAS;IAkBxB;;;;;;;;;OASG;YACW,eAAe;YAqFf,iBAAiB;IAoD/B,OAAO,CAAC,aAAa;IAgBf,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQtC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAqCrC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAIrB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAIxB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC;IAKjC,OAAO,IAAI,cAAc;IAUzB,eAAe,IAAI,MAAM;CAG1B"}