@mastra/core 1.55.0-alpha.2 → 1.55.0-alpha.3

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @mastra/core
 
+## 1.55.0-alpha.3
+
+### Patch Changes
+
+- Review sessions now load project AGENTS.md/CLAUDE.md from the pull request's trusted base branch instead of skipping them entirely. The working-tree copies on an untrusted checkout remain excluded from the system prompt and reminder injection; content is served from the base ref via git, and sessions without a known base ref still skip project instruction files. ([#20372](https://github.com/mastra-ai/mastra/pull/20372))
+
+- Review sessions no longer ingest AGENTS.md or CLAUDE.md from the checked-out pull request branch. A PR branch is third-party content, so its instruction files are treated as content under review instead of trusted configuration — closing a prompt-injection path into the reviewer agent. The reviewer also runs the PR's install/build/test commands with GitHub tokens stripped from the environment. ([#20372](https://github.com/mastra-ai/mastra/pull/20372))
+
+- Added an option to the instruction-file reminder processor that lets hosts disable injection entirely for a request, so instruction files from untrusted checkouts are never surfaced as reminders. ([#20372](https://github.com/mastra-ai/mastra/pull/20372))
+
 ## 1.55.0-alpha.2
 
 ### Minor Changes

package/dist/agent/durable/index.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_observability = require("../../observability-Dc_G1cXD.cjs");
-const require_create_durable_agent = require("../../create-durable-agent-DmTTvoGi.cjs");
+const require_create_durable_agent = require("../../create-durable-agent-n8DHsn6m.cjs");
 //#region src/agent/durable/workflows/shared/execute-tool-calls.ts
 /**
 * Execute tool calls durably with optional hooks for observability and streaming.

package/dist/agent/durable/index.js

@@ -1,5 +1,5 @@
 import { i as createObservabilityContext } from "../../observability-BAAGGqGN.js";
-import { A as emitFinishEvent, B as serializeDurableState, C as baseIterationStateSchema, D as createDurableAgentStream, E as modelListEntrySchema, F as RunRegistry, G as AGENT_STREAM_TOPIC, H as serializeToolsMetadata, I as globalRunRegistry, J as DurableStepIds, K as AgentStreamEventTypes, L as prepareForDurableExecution, M as emitStepStartEvent, N as emitSuspendedEvent, O as emitChunkEvent, P as ExtendedRunRegistry, R as createWorkflowInput, S as baseDurableAgenticInputSchema, T as modelConfigSchema, U as runDurableStreamUntilIdle, V as serializeModelConfig, W as runResumeDurableStreamUntilIdle, _ as resolveDurableToolCallConcurrency, a as DurableAgent, b as createBaseIterationStateUpdate, c as createDurableToolCallStep, d as resolveInternalState, f as resolveModel, g as createDurableBackgroundTaskCheckStep, h as toolRequiresApproval, i as isLocalDurableAgent, j as emitStepFinishEvent, k as emitErrorEvent, l as createDurableLLMExecutionStep, m as resolveTool, o as createDurableAgenticWorkflow, p as resolveRuntimeDependencies, q as DurableAgentDefaults, r as isDurableAgent, s as createDurableLLMMappingStep, t as createDurableAgent, u as rebuildRunToolsFromMastra, v as buildStepRecord, w as durableAgenticOutputSchema, x as accumulatedUsageSchema, y as calculateAccumulatedUsage, z as serializeDurableOptions } from "../../create-durable-agent-Bd4Bm5FV.js";
+import { A as emitFinishEvent, B as serializeDurableState, C as baseIterationStateSchema, D as createDurableAgentStream, E as modelListEntrySchema, F as RunRegistry, G as AGENT_STREAM_TOPIC, H as serializeToolsMetadata, I as globalRunRegistry, J as DurableStepIds, K as AgentStreamEventTypes, L as prepareForDurableExecution, M as emitStepStartEvent, N as emitSuspendedEvent, O as emitChunkEvent, P as ExtendedRunRegistry, R as createWorkflowInput, S as baseDurableAgenticInputSchema, T as modelConfigSchema, U as runDurableStreamUntilIdle, V as serializeModelConfig, W as runResumeDurableStreamUntilIdle, _ as resolveDurableToolCallConcurrency, a as DurableAgent, b as createBaseIterationStateUpdate, c as createDurableToolCallStep, d as resolveInternalState, f as resolveModel, g as createDurableBackgroundTaskCheckStep, h as toolRequiresApproval, i as isLocalDurableAgent, j as emitStepFinishEvent, k as emitErrorEvent, l as createDurableLLMExecutionStep, m as resolveTool, o as createDurableAgenticWorkflow, p as resolveRuntimeDependencies, q as DurableAgentDefaults, r as isDurableAgent, s as createDurableLLMMappingStep, t as createDurableAgent, u as rebuildRunToolsFromMastra, v as buildStepRecord, w as durableAgenticOutputSchema, x as accumulatedUsageSchema, y as calculateAccumulatedUsage, z as serializeDurableOptions } from "../../create-durable-agent-CaCDVdBf.js";
 //#region src/agent/durable/workflows/shared/execute-tool-calls.ts
 /**
 * Execute tool calls durably with optional hooks for observability and streaming.

package/dist/agent/index.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_trip_wire = require("../trip-wire-BNzxirr0.cjs");
-const require_agent = require("../agent-CwUYflGG.cjs");
+const require_trip_wire = require("../trip-wire-B_XWSSts.cjs");
+const require_agent = require("../agent-BzVvDOSz.cjs");
 const require_signals = require("../signals-BnC2UJth.cjs");
 const require_message_list = require("../message-list-CvuPcMsx.cjs");
 const require_signal_provider = require("../signal-provider-cWozsCPk.cjs");

package/dist/agent/index.js

@@ -1,5 +1,5 @@
-import { C as tryGenerateWithJsonFallback, S as supportedLanguageModelSpecifications, b as isSupportedLanguageModel, t as TripWire, w as tryStreamWithJsonFallback, x as resolveThreadIdFromArgs } from "../trip-wire-Cj0cJivR.js";
-import { Ft as MAX_FS_SUBAGENT_DEPTH, It as agentConfig, Jn as isAgentCompatible, Lt as assembleAgentFromFsEntry, Qn as isDurableAgentLike, Xn as getGoalActivityDurationMs, t as Agent } from "../agent-BvRfRKIt.js";
+import { C as tryGenerateWithJsonFallback, S as supportedLanguageModelSpecifications, b as isSupportedLanguageModel, t as TripWire, w as tryStreamWithJsonFallback, x as resolveThreadIdFromArgs } from "../trip-wire-BVg5rmBR.js";
+import { Ft as MAX_FS_SUBAGENT_DEPTH, It as agentConfig, Jn as isAgentCompatible, Lt as assembleAgentFromFsEntry, Qn as isDurableAgentLike, Xn as getGoalActivityDurationMs, t as Agent } from "../agent-C9842hRl.js";
 import { a as isMastraSignalMessage, c as signalToDataPartFormat, d as signalToXmlMarkup, i as isCreatedAgentSignal, l as signalToMastraDBMessage, n as createSignal, o as mastraDBMessageToSignal, r as dataPartToSignal, s as resolveDeliveryAttributes, t as createMessageSignal, u as signalToMessage } from "../signals-vqgKmkJu.js";
 import { c as aiV5ModelMessageToV2PromptMessage, k as TypeDetector, n as MessageList, t as convertMessages } from "../message-list-D-0IY45i.js";
 import { i as isSignalProvider, n as WebhookSignalProvider, r as SignalProvider } from "../signal-provider-H33uLbIV.js";

package/dist/{agent-CwUYflGG.cjs → agent-BzVvDOSz.cjs}

@@ -7,24 +7,24 @@ const require_observability = require("./observability-Dc_G1cXD.cjs");
 const require_utils = require("./utils-tMAiLKfb.cjs");
 require("./tracing-lPEd0a_y.cjs");
 const require_request_context = require("./request-context-C6X9IcNF.cjs");
-const require_llm = require("./llm-Bjt2hZ3f.cjs");
+const require_llm = require("./llm-L7vwOFRH.cjs");
 const require_tool = require("./tool-Ch0RJiLS.cjs");
 const require_ee_C8o0LZ3r = require("./ee-C8o0LZ3r-D6EDXh8B.cjs");
-const require_background_tasks = require("./background-tasks-Chpan7PB.cjs");
+const require_background_tasks = require("./background-tasks-_xUT_Cie.cjs");
 const require_toolchecks = require("./toolchecks-D843gAZS.cjs");
 const require_types = require("./types-CepZ83u8.cjs");
-const require_utils$1 = require("./utils-BoQofieM.cjs");
+const require_utils$1 = require("./utils-DFyXwV7_.cjs");
 const require_deep_equal = require("./deep-equal-BvQBG8wE.cjs");
 const require_utils_safe_stringify = require("./utils/safe-stringify.cjs");
-const require_trip_wire = require("./trip-wire-BNzxirr0.cjs");
+const require_trip_wire = require("./trip-wire-B_XWSSts.cjs");
 const require_payload_transform = require("./payload-transform-DJzDdfpE.cjs");
 const require_signals = require("./signals-BnC2UJth.cjs");
 const require_message_list = require("./message-list-CvuPcMsx.cjs");
 const require_dist = require("./dist-DZhmZ2Ix.cjs");
-const require_stream = require("./stream-tlVjYkAO.cjs");
+const require_stream = require("./stream-DAD2JVzk.cjs");
 const require_types$1 = require("./types-CkUC9wkJ.cjs");
-const require_provider_registry = require("./provider-registry-BFknh6Fu.cjs");
-const require_model = require("./model-DMVq6nAS.cjs");
+const require_provider_registry = require("./provider-registry-CepgHPVr.cjs");
+const require_model = require("./model-DboBdeDA.cjs");
 const require_signal_provider = require("./signal-provider-cWozsCPk.cjs");
 const require_schedules = require("./schedules-dsrvt_6g.cjs");
 const require_task_state_processor = require("./task-state-processor-Dh_GxiNX.cjs");
@@ -16669,6 +16669,8 @@ var AgentsMDInjector = class {
 	isDirectory;
 	readFile;
 	getIgnoredInstructionPaths;
+	isEnabled;
+	getReader;
 	constructor(options) {
 		this.reminderText = options.reminderText;
 		this.maxTokens = options.maxTokens ?? 1e3;
@@ -16682,14 +16684,22 @@ var AgentsMDInjector = class {
 		});
 		this.readFile = options.readFile ?? ((path$2) => (0, fs.readFileSync)(path$2, "utf-8"));
 		this.getIgnoredInstructionPaths = options.getIgnoredInstructionPaths;
+		this.isEnabled = options.isEnabled;
+		this.getReader = options.getReader;
 	}
 	async processInputStep(args) {
 		const { messageList } = args;
+		if (this.isEnabled && !this.isEnabled(args)) return messageList;
+		const reader = this.getReader?.(args) ?? {
+			pathExists: this.pathExists,
+			isDirectory: this.isDirectory,
+			readFile: this.readFile
+		};
 		const messages = messageList.get.all.db();
 		const completedToolCalls = getCompletedToolCalls(getCurrentStepResponseMessages(messageList));
-		const instructionPath = this.findReferencedInstructionPath(completedToolCalls);
+		const instructionPath = this.findReferencedInstructionPath(completedToolCalls, reader);
 		if (!instructionPath || this.isIgnoredInstructionPath(args, instructionPath)) return messageList;
-		const reminderText = this.getReminderText(instructionPath);
+		const reminderText = this.getReminderText(instructionPath, reader);
 		if (!reminderText) return messageList;
 		const reminderMarkup = getReminderMarkup(reminderText, instructionPath);
 		if (this.hasReminderAlready(messages, reminderMarkup)) return messageList;
@@ -16705,9 +16715,9 @@ var AgentsMDInjector = class {
 		});
 		return messageList;
 	}
-	getReminderText(instructionPath) {
+	getReminderText(instructionPath, reader) {
 		try {
-			const content = this.readFile(instructionPath).trim();
+			const content = reader.readFile(instructionPath).trim();
 			if (content.length > 0) return truncateToTokenLimit(content, this.maxTokens);
 		} catch {}
 		return this.reminderText?.trim() || void 0;
@@ -16717,21 +16727,21 @@ var AgentsMDInjector = class {
 		const normalizedInstructionPath = toAbsolutePath(instructionPath);
 		return ignoredPaths.some((path$3) => toAbsolutePath(path$3) === normalizedInstructionPath);
 	}
-	findReferencedInstructionPath(toolCalls) {
+	findReferencedInstructionPath(toolCalls, reader) {
 		if (!Array.isArray(toolCalls)) return;
 		for (const toolCall of toolCalls) {
-			const path$4 = this.findInstructionPathInInvocation(toolCall);
+			const path$4 = this.findInstructionPathInInvocation(toolCall, reader);
 			if (path$4) return path$4;
 		}
 	}
-	findInstructionPathInInvocation(invocation) {
+	findInstructionPathInInvocation(invocation, reader) {
 		if (!isRecord$2(invocation)) return;
 		const args = parseInvocationArgs(invocation.args);
 		if (!args) return;
 		for (const field of PATH_FIELDS) {
 			const value = args[field];
 			if (typeof value !== "string" || value.trim().length === 0) continue;
-			const instructionPath = findInstructionFileForPath(value, this.pathExists, this.isDirectory);
+			const instructionPath = findInstructionFileForPath(value, reader.pathExists, reader.isDirectory);
 			if (instructionPath) return instructionPath;
 		}
 	}
@@ -33129,7 +33139,7 @@ var Agent = class Agent extends require_base.MastraBase {
 		if (!this.#durable) return void 0;
 		if (this.#mastra) return void 0;
 		if (this.#standaloneDurable) return this.#standaloneDurable;
-		const { createDurableAgent } = await Promise.resolve().then(() => require("./create-durable-agent-DmTTvoGi.cjs")).then((n) => n.create_durable_agent_exports);
+		const { createDurableAgent } = await Promise.resolve().then(() => require("./create-durable-agent-n8DHsn6m.cjs")).then((n) => n.create_durable_agent_exports);
 		const opts = this.#durable === true ? {} : this.#durable;
 		const wrapper = createDurableAgent({
 			agent: this,
@@ -39049,4 +39059,4 @@ Object.defineProperty(exports, "waitForSuspendedSnapshot", {
 	}
 });
 
-//# sourceMappingURL=agent-CwUYflGG.cjs.map
+//# sourceMappingURL=agent-BzVvDOSz.cjs.map