@mastra/factory 0.0.0-aggregate-trace-20261015182851

package/dist/session/credential-policy.d.ts

@@ -0,0 +1,20 @@
+import { type CredentialTenant } from '@mastra/code-sdk/agents/credential-resolver';
+import type { RequestContext } from '@mastra/core/request-context';
+import type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';
+import type { WorkItemsStorage } from '../storage/domains/work-items/base.js';
+import type { SourceControlSessionLookup } from './factory-session.js';
+interface FactoryModelPolicyDependencies {
+    projects: Pick<FactoryProjectsStorage, 'getById'>;
+    sourceControl: Pick<SourceControlSessionLookup, 'getBySessionId'>;
+    workItems: Pick<WorkItemsStorage, 'findRunBindingByThread'>;
+}
+/** Resolve billing authority from authenticated identity and durable bindings, never session state. */
+export declare function resolveFactoryCredentialTenant(requestContext: RequestContext, deps: FactoryModelPolicyDependencies): Promise<CredentialTenant | undefined>;
+/** Shared invocation and model-picker policy; no client-supplied owner or scope is trusted. */
+export declare function resolveFactoryModelPolicy(requestContext: RequestContext, deps: FactoryModelPolicyDependencies): Promise<{
+    tenant: CredentialTenant;
+    factoryProjectId?: string;
+    factoryDefaultModelId?: string | null;
+} | undefined>;
+export {};
+//# sourceMappingURL=credential-policy.d.ts.map

package/dist/session/credential-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-policy.d.ts","sourceRoot":"","sources":["../../src/session/credential-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,6CAA6C,CAAC;AAErD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAInE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAE9E,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAIvE,UAAU,8BAA8B;IACtC,QAAQ,EAAE,IAAI,CAAC,sBAAsB,EAAE,SAAS,CAAC,CAAC;IAClD,aAAa,EAAE,IAAI,CAAC,0BAA0B,EAAE,gBAAgB,CAAC,CAAC;IAClE,SAAS,EAAE,IAAI,CAAC,gBAAgB,EAAE,wBAAwB,CAAC,CAAC;CAC7D;AAED,uGAAuG;AACvG,wBAAsB,8BAA8B,CAClD,cAAc,EAAE,cAAc,EAC9B,IAAI,EAAE,8BAA8B,GACnC,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAEvC;AAED,+FAA+F;AAC/F,wBAAsB,yBAAyB,CAC7C,cAAc,EAAE,cAAc,EAC9B,IAAI,EAAE,8BAA8B,GACnC,OAAO,CAAC;IAAE,MAAM,EAAE,gBAAgB,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,SAAS,CAAC,CAsErH"}

package/dist/session/credential-policy.js

@@ -0,0 +1,70 @@
+import { effectiveModelScope } from "../storage/domains/projects/base.js";
+import { parseSupervisorResourceId } from "../supervisor/session.js";
+import { UUID_PATTERN } from "../routes/contracts.js";
+import { resolveAuthenticatedCredentialTenant } from "@mastra/code-sdk/agents/credential-resolver";
+//#region src/session/credential-policy.ts
+const FACTORY_PROJECT_ID = new RegExp(UUID_PATTERN);
+/** Resolve billing authority from authenticated identity and durable bindings, never session state. */
+async function resolveFactoryCredentialTenant(requestContext, deps) {
+	return (await resolveFactoryModelPolicy(requestContext, deps))?.tenant;
+}
+/** Shared invocation and model-picker policy; no client-supplied owner or scope is trusted. */
+async function resolveFactoryModelPolicy(requestContext, deps) {
+	const principal = resolveAuthenticatedCredentialTenant(requestContext);
+	if (!principal) return void 0;
+	const controller = requestContext.get("controller");
+	if (!controller?.resourceId) return { tenant: principal };
+	const supervisorProjectId = parseSupervisorResourceId(controller.resourceId);
+	if (supervisorProjectId) {
+		const project = await deps.projects.getById({ id: supervisorProjectId });
+		if (!project || project.orgId !== principal.orgId) throw new Error("Factory model policy is unavailable.");
+		return {
+			factoryProjectId: project.id,
+			factoryDefaultModelId: project.defaultModelId,
+			tenant: {
+				orgId: project.orgId,
+				userId: project.createdBy,
+				credentialScope: effectiveModelScope(project.modelScope, "run")
+			}
+		};
+	}
+	const sourceSession = await deps.sourceControl.getBySessionId(controller.resourceId);
+	const binding = principal.orgId && controller.threadId ? await deps.workItems.findRunBindingByThread({
+		orgId: principal.orgId,
+		resourceId: controller.resourceId,
+		sessionId: controller.resourceId,
+		threadId: controller.threadId,
+		rejectAmbiguous: true
+	}) : null;
+	if (!sourceSession) {
+		if (!binding && (controller.resourceId === principal.userId || controller.resourceId.startsWith("channel:"))) return { tenant: principal };
+		const factoryProject = !binding && FACTORY_PROJECT_ID.test(controller.resourceId) ? await deps.projects.getById({ id: controller.resourceId }) : null;
+		if (factoryProject && factoryProject.orgId === principal.orgId) return {
+			factoryProjectId: factoryProject.id,
+			factoryDefaultModelId: factoryProject.defaultModelId,
+			tenant: {
+				...principal,
+				credentialScope: effectiveModelScope(factoryProject.modelScope, "session")
+			}
+		};
+		throw new Error("Factory session ownership is unavailable.");
+	}
+	if (sourceSession.orgId !== principal.orgId || sourceSession.visibility === "private" && sourceSession.userId !== principal.userId) throw new Error("Factory session is not available to the current user.");
+	if (!sourceSession.factoryProjectId) throw new Error("Factory session ownership is unavailable.");
+	const projectId = binding?.factoryProjectId ?? sourceSession.factoryProjectId;
+	const project = await deps.projects.getById({ id: projectId });
+	if (!project || project.orgId !== sourceSession.orgId) throw new Error("Factory model policy is unavailable.");
+	return {
+		factoryProjectId: project.id,
+		factoryDefaultModelId: project.defaultModelId,
+		tenant: {
+			orgId: project.orgId,
+			userId: sourceSession.userId,
+			credentialScope: effectiveModelScope(project.modelScope, binding ? "run" : "session")
+		}
+	};
+}
+//#endregion
+export { resolveFactoryCredentialTenant, resolveFactoryModelPolicy };
+
+//# sourceMappingURL=credential-policy.js.map

package/dist/session/credential-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-policy.js","names":[],"sources":["../../src/session/credential-policy.ts"],"sourcesContent":["import {\n  resolveAuthenticatedCredentialTenant,\n  type CredentialTenant,\n} from '@mastra/code-sdk/agents/credential-resolver';\nimport type { AgentControllerRequestContext } from '@mastra/core/agent-controller';\nimport type { RequestContext } from '@mastra/core/request-context';\n\nimport { UUID_PATTERN } from '../routes/contracts.js';\nimport { effectiveModelScope } from '../storage/domains/projects/base.js';\nimport type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';\nimport type { WorkItemsStorage } from '../storage/domains/work-items/base.js';\nimport { parseSupervisorResourceId } from '../supervisor/session.js';\nimport type { SourceControlSessionLookup } from './factory-session.js';\n\nconst FACTORY_PROJECT_ID = new RegExp(UUID_PATTERN);\n\ninterface FactoryModelPolicyDependencies {\n  projects: Pick<FactoryProjectsStorage, 'getById'>;\n  sourceControl: Pick<SourceControlSessionLookup, 'getBySessionId'>;\n  workItems: Pick<WorkItemsStorage, 'findRunBindingByThread'>;\n}\n\n/** Resolve billing authority from authenticated identity and durable bindings, never session state. */\nexport async function resolveFactoryCredentialTenant(\n  requestContext: RequestContext,\n  deps: FactoryModelPolicyDependencies,\n): Promise<CredentialTenant | undefined> {\n  return (await resolveFactoryModelPolicy(requestContext, deps))?.tenant;\n}\n\n/** Shared invocation and model-picker policy; no client-supplied owner or scope is trusted. */\nexport async function resolveFactoryModelPolicy(\n  requestContext: RequestContext,\n  deps: FactoryModelPolicyDependencies,\n): Promise<{ tenant: CredentialTenant; factoryProjectId?: string; factoryDefaultModelId?: string | null } | undefined> {\n  const principal = resolveAuthenticatedCredentialTenant(requestContext);\n  if (!principal) return undefined;\n  const controller = requestContext.get('controller') as AgentControllerRequestContext | undefined;\n  if (!controller?.resourceId) return { tenant: principal };\n\n  const supervisorProjectId = parseSupervisorResourceId(controller.resourceId);\n  if (supervisorProjectId) {\n    const project = await deps.projects.getById({ id: supervisorProjectId });\n    if (!project || project.orgId !== principal.orgId) throw new Error('Factory model policy is unavailable.');\n    // Supervisor turns are Factory-owned automation, so a hybrid Factory bills them as runs.\n    return {\n      factoryProjectId: project.id,\n      factoryDefaultModelId: project.defaultModelId,\n      tenant: {\n        orgId: project.orgId,\n        userId: project.createdBy,\n        credentialScope: effectiveModelScope(project.modelScope, 'run'),\n      },\n    };\n  }\n\n  const sourceSession = await deps.sourceControl.getBySessionId(controller.resourceId);\n  const binding =\n    principal.orgId && controller.threadId\n      ? await deps.workItems.findRunBindingByThread({\n          orgId: principal.orgId,\n          resourceId: controller.resourceId,\n          sessionId: controller.resourceId,\n          threadId: controller.threadId,\n          rejectAmbiguous: true,\n        })\n      : null;\n  if (!sourceSession) {\n    if (!binding && (controller.resourceId === principal.userId || controller.resourceId.startsWith('channel:')))\n      return { tenant: principal };\n    // Session-less Factory pages address the Factory itself: the resourceId is the project id.\n    const factoryProject =\n      !binding && FACTORY_PROJECT_ID.test(controller.resourceId)\n        ? await deps.projects.getById({ id: controller.resourceId })\n        : null;\n    if (factoryProject && factoryProject.orgId === principal.orgId) {\n      return {\n        factoryProjectId: factoryProject.id,\n        factoryDefaultModelId: factoryProject.defaultModelId,\n        tenant: { ...principal, credentialScope: effectiveModelScope(factoryProject.modelScope, 'session') },\n      };\n    }\n    throw new Error('Factory session ownership is unavailable.');\n  }\n  if (\n    sourceSession.orgId !== principal.orgId ||\n    (sourceSession.visibility === 'private' && sourceSession.userId !== principal.userId)\n  ) {\n    throw new Error('Factory session is not available to the current user.');\n  }\n  if (!sourceSession.factoryProjectId) throw new Error('Factory session ownership is unavailable.');\n  const projectId = binding?.factoryProjectId ?? sourceSession.factoryProjectId;\n  const project = await deps.projects.getById({ id: projectId });\n  if (!project || project.orgId !== sourceSession.orgId) throw new Error('Factory model policy is unavailable.');\n  // Work-item threads keep their billing scope after revocation; history never restores run authority.\n  return {\n    factoryProjectId: project.id,\n    factoryDefaultModelId: project.defaultModelId,\n    tenant: {\n      orgId: project.orgId,\n      userId: sourceSession.userId,\n      credentialScope: effectiveModelScope(project.modelScope, binding ? 'run' : 'session'),\n    },\n  };\n}\n"],"mappings":";;;;;AAcA,MAAM,qBAAqB,IAAI,OAAO,YAAY;;AASlD,eAAsB,+BACpB,gBACA,MACuC;CACvC,QAAQ,MAAM,0BAA0B,gBAAgB,IAAI,EAAA,EAAI;AAClE;;AAGA,eAAsB,0BACpB,gBACA,MACqH;CACrH,MAAM,YAAY,qCAAqC,cAAc;CACrE,IAAI,CAAC,WAAW,OAAO,KAAA;CACvB,MAAM,aAAa,eAAe,IAAI,YAAY;CAClD,IAAI,CAAC,YAAY,YAAY,OAAO,EAAE,QAAQ,UAAU;CAExD,MAAM,sBAAsB,0BAA0B,WAAW,UAAU;CAC3E,IAAI,qBAAqB;EACvB,MAAM,UAAU,MAAM,KAAK,SAAS,QAAQ,EAAE,IAAI,oBAAoB,CAAC;EACvE,IAAI,CAAC,WAAW,QAAQ,UAAU,UAAU,OAAO,MAAM,IAAI,MAAM,sCAAsC;EAEzG,OAAO;GACL,kBAAkB,QAAQ;GAC1B,uBAAuB,QAAQ;GAC/B,QAAQ;IACN,OAAO,QAAQ;IACf,QAAQ,QAAQ;IAChB,iBAAiB,oBAAoB,QAAQ,YAAY,KAAK;GAChE;EACF;CACF;CAEA,MAAM,gBAAgB,MAAM,KAAK,cAAc,eAAe,WAAW,UAAU;CACnF,MAAM,UACJ,UAAU,SAAS,WAAW,WAC1B,MAAM,KAAK,UAAU,uBAAuB;EAC1C,OAAO,UAAU;EACjB,YAAY,WAAW;EACvB,WAAW,WAAW;EACtB,UAAU,WAAW;EACrB,iBAAiB;CACnB,CAAC,IACD;CACN,IAAI,CAAC,eAAe;EAClB,IAAI,CAAC,YAAY,WAAW,eAAe,UAAU,UAAU,WAAW,WAAW,WAAW,UAAU,IACxG,OAAO,EAAE,QAAQ,UAAU;EAE7B,MAAM,iBACJ,CAAC,WAAW,mBAAmB,KAAK,WAAW,UAAU,IACrD,MAAM,KAAK,SAAS,QAAQ,EAAE,IAAI,WAAW,WAAW,CAAC,IACzD;EACN,IAAI,kBAAkB,eAAe,UAAU,UAAU,OACvD,OAAO;GACL,kBAAkB,eAAe;GACjC,uBAAuB,eAAe;GACtC,QAAQ;IAAE,GAAG;IAAW,iBAAiB,oBAAoB,eAAe,YAAY,SAAS;GAAE;EACrG;EAEF,MAAM,IAAI,MAAM,2CAA2C;CAC7D;CACA,IACE,cAAc,UAAU,UAAU,SACjC,cAAc,eAAe,aAAa,cAAc,WAAW,UAAU,QAE9E,MAAM,IAAI,MAAM,uDAAuD;CAEzE,IAAI,CAAC,cAAc,kBAAkB,MAAM,IAAI,MAAM,2CAA2C;CAChG,MAAM,YAAY,SAAS,oBAAoB,cAAc;CAC7D,MAAM,UAAU,MAAM,KAAK,SAAS,QAAQ,EAAE,IAAI,UAAU,CAAC;CAC7D,IAAI,CAAC,WAAW,QAAQ,UAAU,cAAc,OAAO,MAAM,IAAI,MAAM,sCAAsC;CAE7G,OAAO;EACL,kBAAkB,QAAQ;EAC1B,uBAAuB,QAAQ;EAC/B,QAAQ;GACN,OAAO,QAAQ;GACf,QAAQ,cAAc;GACtB,iBAAiB,oBAAoB,QAAQ,YAAY,UAAU,QAAQ,SAAS;EACtF;CACF;AACF"}

package/dist/session/default-model-hydration.d.ts

@@ -0,0 +1,46 @@
+import type { ModelDefaultsStorage } from '../storage/domains/model-defaults/base.js';
+import type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';
+import type { WorkItemsStorage } from '../storage/domains/work-items/base.js';
+import type { SourceControlSessionLookup } from './factory-session.js';
+export interface DefaultModelApplicableSession {
+    model: {
+        switch(modelId: string): Promise<unknown>;
+    };
+    subagents: {
+        model: {
+            set(args: {
+                modelId: string;
+                agentType: string;
+            }): Promise<unknown>;
+        };
+    };
+}
+export interface DefaultModelHydrationSession extends DefaultModelApplicableSession {
+    readonly identity: {
+        getResourceId(): string;
+    };
+    model: DefaultModelApplicableSession['model'] & {
+        setDefault(args: {
+            modelId: string;
+        }): void;
+    };
+    state: {
+        get(): Record<string, unknown> | undefined;
+        set(updates: Record<string, unknown>): Promise<unknown>;
+    };
+    thread: {
+        getId(): string | null | undefined;
+        firstUserMessage(args: {
+            threadId: string;
+        }): Promise<unknown>;
+    };
+}
+export interface DefaultModelHydrationDependencies {
+    sourceControl: Pick<SourceControlSessionLookup, 'getBySessionId'>;
+    projects: Pick<FactoryProjectsStorage, 'getById'>;
+    workItems: Pick<WorkItemsStorage, 'findRunBindingByThread'>;
+    modelDefaults: Pick<ModelDefaultsStorage, 'get'>;
+}
+/** Seed a new chat's scoped default model; a chat with a user message keeps its model. */
+export declare function hydrateSessionDefaultModel(session: DefaultModelHydrationSession, { sourceControl, projects, workItems, modelDefaults }: DefaultModelHydrationDependencies): Promise<void>;
+//# sourceMappingURL=default-model-hydration.d.ts.map

package/dist/session/default-model-hydration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-model-hydration.d.ts","sourceRoot":"","sources":["../../src/session/default-model-hydration.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEtF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAEvE,MAAM,WAAW,6BAA6B;IAC5C,KAAK,EAAE;QAAE,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC;IACrD,SAAS,EAAE;QAAE,KAAK,EAAE;YAAE,GAAG,CAAC,IAAI,EAAE;gBAAE,OAAO,EAAE,MAAM,CAAC;gBAAC,SAAS,EAAE,MAAM,CAAA;aAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;SAAE,CAAA;KAAE,CAAC;CAC/F;AAED,MAAM,WAAW,4BAA6B,SAAQ,6BAA6B;IACjF,QAAQ,CAAC,QAAQ,EAAE;QAAE,aAAa,IAAI,MAAM,CAAA;KAAE,CAAC;IAC/C,KAAK,EAAE,6BAA6B,CAAC,OAAO,CAAC,GAAG;QAAE,UAAU,CAAC,IAAI,EAAE;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAA;KAAE,CAAC;IAChG,KAAK,EAAE;QACL,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;QAC3C,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;KACzD,CAAC;IACF,MAAM,EAAE;QACN,KAAK,IAAI,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;QACnC,gBAAgB,CAAC,IAAI,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;KAChE,CAAC;CACH;AAUD,MAAM,WAAW,iCAAiC;IAChD,aAAa,EAAE,IAAI,CAAC,0BAA0B,EAAE,gBAAgB,CAAC,CAAC;IAClE,QAAQ,EAAE,IAAI,CAAC,sBAAsB,EAAE,SAAS,CAAC,CAAC;IAClD,SAAS,EAAE,IAAI,CAAC,gBAAgB,EAAE,wBAAwB,CAAC,CAAC;IAC5D,aAAa,EAAE,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;CAClD;AAED,0FAA0F;AAC1F,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,4BAA4B,EACrC,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,iCAAiC,GACvF,OAAO,CAAC,IAAI,CAAC,CAsEf"}

package/dist/session/default-model-hydration.js

@@ -0,0 +1,85 @@
+import { primeTenantCredentialsForTenant } from "../routes/tenant-credentials.js";
+import { effectiveModelScope } from "../storage/domains/projects/base.js";
+//#region src/session/default-model-hydration.ts
+async function applyDefaultModel(session, modelId) {
+	await session.model.switch(modelId);
+	for (const agentType of [
+		"explore",
+		"plan",
+		"execute"
+	]) await session.subagents.model.set({
+		modelId,
+		agentType
+	});
+}
+/** Seed a new chat's scoped default model; a chat with a user message keeps its model. */
+async function hydrateSessionDefaultModel(session, { sourceControl, projects, workItems, modelDefaults }) {
+	const resourceId = session.identity.getResourceId();
+	const initialState = session.state.get() ?? {};
+	if (initialState.factoryProjectId || typeof session.thread.firstUserMessage !== "function") return;
+	const hadFactoryIdentity = initialState.factoryModelScope === "factory" || initialState.factoryModelScope === "user";
+	const clearFactoryIdentity = () => session.state.set({
+		factoryOrgId: void 0,
+		factoryModelScope: void 0,
+		factoryOwnerUserId: void 0
+	});
+	const failClosedWithoutIdentity = () => session.state.set({
+		factoryModelScope: "user",
+		factoryOwnerUserId: void 0
+	});
+	let identityResolved = false;
+	try {
+		const sourceSession = await sourceControl.getBySessionId(resourceId);
+		if (!sourceSession) {
+			await clearFactoryIdentity();
+			return;
+		}
+		if (!sourceSession.factoryProjectId) {
+			await clearFactoryIdentity();
+			return;
+		}
+		const threadId = session.thread.getId();
+		const binding = threadId ? await workItems.findRunBindingByThread({
+			orgId: sourceSession.orgId,
+			threadId,
+			resourceId,
+			sessionId: resourceId,
+			rejectAmbiguous: true
+		}) : null;
+		const project = await projects.getById({ id: binding?.factoryProjectId ?? sourceSession.factoryProjectId });
+		if (!project || project.orgId !== sourceSession.orgId) {
+			await clearFactoryIdentity();
+			return;
+		}
+		const modelScope = effectiveModelScope(project.modelScope, binding ? "run" : "session");
+		await session.state.set({
+			factoryOrgId: sourceSession.orgId,
+			factoryModelScope: modelScope,
+			factoryOwnerUserId: sourceSession.userId
+		});
+		identityResolved = true;
+		await primeTenantCredentialsForTenant({
+			orgId: sourceSession.orgId,
+			userId: sourceSession.userId,
+			credentialScope: modelScope
+		});
+		if (binding) return;
+		if (threadId && await session.thread.firstUserMessage({ threadId })) return;
+		const scopedModelId = modelScope === "factory" ? project.defaultModelId : (await modelDefaults.get({
+			orgId: sourceSession.orgId,
+			userId: sourceSession.userId
+		}))?.modelId;
+		if (!scopedModelId) return;
+		session.model.setDefault({ modelId: scopedModelId });
+		await applyDefaultModel(session, scopedModelId);
+	} catch (error) {
+		if (!identityResolved && !hadFactoryIdentity) try {
+			await failClosedWithoutIdentity();
+		} catch {}
+		console.warn("[Factory default-model hydration] Unable to apply the scoped default model.", error);
+	}
+}
+//#endregion
+export { hydrateSessionDefaultModel };
+
+//# sourceMappingURL=default-model-hydration.js.map

package/dist/session/default-model-hydration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-model-hydration.js","names":[],"sources":["../../src/session/default-model-hydration.ts"],"sourcesContent":["import { primeTenantCredentialsForTenant } from '../routes/tenant-credentials.js';\nimport type { ModelDefaultsStorage } from '../storage/domains/model-defaults/base.js';\nimport { effectiveModelScope } from '../storage/domains/projects/base.js';\nimport type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';\nimport type { WorkItemsStorage } from '../storage/domains/work-items/base.js';\nimport type { SourceControlSessionLookup } from './factory-session.js';\n\nexport interface DefaultModelApplicableSession {\n  model: { switch(modelId: string): Promise<unknown> };\n  subagents: { model: { set(args: { modelId: string; agentType: string }): Promise<unknown> } };\n}\n\nexport interface DefaultModelHydrationSession extends DefaultModelApplicableSession {\n  readonly identity: { getResourceId(): string };\n  model: DefaultModelApplicableSession['model'] & { setDefault(args: { modelId: string }): void };\n  state: {\n    get(): Record<string, unknown> | undefined;\n    set(updates: Record<string, unknown>): Promise<unknown>;\n  };\n  thread: {\n    getId(): string | null | undefined;\n    firstUserMessage(args: { threadId: string }): Promise<unknown>;\n  };\n}\n\nasync function applyDefaultModel(session: DefaultModelApplicableSession, modelId: string): Promise<void> {\n  await session.model.switch(modelId);\n\n  for (const agentType of ['explore', 'plan', 'execute']) {\n    await session.subagents.model.set({ modelId, agentType });\n  }\n}\n\nexport interface DefaultModelHydrationDependencies {\n  sourceControl: Pick<SourceControlSessionLookup, 'getBySessionId'>;\n  projects: Pick<FactoryProjectsStorage, 'getById'>;\n  workItems: Pick<WorkItemsStorage, 'findRunBindingByThread'>;\n  modelDefaults: Pick<ModelDefaultsStorage, 'get'>;\n}\n\n/** Seed a new chat's scoped default model; a chat with a user message keeps its model. */\nexport async function hydrateSessionDefaultModel(\n  session: DefaultModelHydrationSession,\n  { sourceControl, projects, workItems, modelDefaults }: DefaultModelHydrationDependencies,\n): Promise<void> {\n  const resourceId = session.identity.getResourceId();\n  const initialState = session.state.get() ?? {};\n  if (initialState.factoryProjectId || typeof session.thread.firstUserMessage !== 'function') return;\n  const hadFactoryIdentity = initialState.factoryModelScope === 'factory' || initialState.factoryModelScope === 'user';\n  const clearFactoryIdentity = () =>\n    session.state.set({ factoryOrgId: undefined, factoryModelScope: undefined, factoryOwnerUserId: undefined });\n  const failClosedWithoutIdentity = () =>\n    session.state.set({ factoryModelScope: 'user', factoryOwnerUserId: undefined });\n  let identityResolved = false;\n  try {\n    const sourceSession = await sourceControl.getBySessionId(resourceId);\n    if (!sourceSession) {\n      await clearFactoryIdentity();\n      return;\n    }\n    if (!sourceSession.factoryProjectId) {\n      await clearFactoryIdentity();\n      return;\n    }\n    // Historical thread membership keeps completed work items on Factory billing in hybrid scope.\n    const threadId = session.thread.getId();\n    const binding = threadId\n      ? await workItems.findRunBindingByThread({\n          orgId: sourceSession.orgId,\n          threadId,\n          resourceId,\n          sessionId: resourceId,\n          rejectAmbiguous: true,\n        })\n      : null;\n    const project = await projects.getById({ id: binding?.factoryProjectId ?? sourceSession.factoryProjectId });\n    if (!project || project.orgId !== sourceSession.orgId) {\n      await clearFactoryIdentity();\n      return;\n    }\n    const modelScope = effectiveModelScope(project.modelScope, binding ? 'run' : 'session');\n    await session.state.set({\n      factoryOrgId: sourceSession.orgId,\n      factoryModelScope: modelScope,\n      factoryOwnerUserId: sourceSession.userId,\n    });\n    identityResolved = true;\n    await primeTenantCredentialsForTenant({\n      orgId: sourceSession.orgId,\n      userId: sourceSession.userId,\n      credentialScope: modelScope,\n    });\n\n    if (binding) return;\n    if (threadId && (await session.thread.firstUserMessage({ threadId }))) return;\n\n    const scopedModelId =\n      modelScope === 'factory'\n        ? project.defaultModelId\n        : (await modelDefaults.get({ orgId: sourceSession.orgId, userId: sourceSession.userId }))?.modelId;\n    if (!scopedModelId) return;\n    // A thread the session creates later (the UI binding its conventional\n    // thread after a thread-agnostic request opened the session) starts from\n    // the session default, not from the thread hydrated here.\n    session.model.setDefault({ modelId: scopedModelId });\n    await applyDefaultModel(session, scopedModelId);\n  } catch (error) {\n    if (!identityResolved && !hadFactoryIdentity) {\n      try {\n        await failClosedWithoutIdentity();\n      } catch {}\n    }\n    console.warn('[Factory default-model hydration] Unable to apply the scoped default model.', error);\n  }\n}\n"],"mappings":";;;AAyBA,eAAe,kBAAkB,SAAwC,SAAgC;CACvG,MAAM,QAAQ,MAAM,OAAO,OAAO;CAElC,KAAK,MAAM,aAAa;EAAC;EAAW;EAAQ;CAAS,GACnD,MAAM,QAAQ,UAAU,MAAM,IAAI;EAAE;EAAS;CAAU,CAAC;AAE5D;;AAUA,eAAsB,2BACpB,SACA,EAAE,eAAe,UAAU,WAAW,iBACvB;CACf,MAAM,aAAa,QAAQ,SAAS,cAAc;CAClD,MAAM,eAAe,QAAQ,MAAM,IAAI,KAAK,CAAC;CAC7C,IAAI,aAAa,oBAAoB,OAAO,QAAQ,OAAO,qBAAqB,YAAY;CAC5F,MAAM,qBAAqB,aAAa,sBAAsB,aAAa,aAAa,sBAAsB;CAC9G,MAAM,6BACJ,QAAQ,MAAM,IAAI;EAAE,cAAc,KAAA;EAAW,mBAAmB,KAAA;EAAW,oBAAoB,KAAA;CAAU,CAAC;CAC5G,MAAM,kCACJ,QAAQ,MAAM,IAAI;EAAE,mBAAmB;EAAQ,oBAAoB,KAAA;CAAU,CAAC;CAChF,IAAI,mBAAmB;CACvB,IAAI;EACF,MAAM,gBAAgB,MAAM,cAAc,eAAe,UAAU;EACnE,IAAI,CAAC,eAAe;GAClB,MAAM,qBAAqB;GAC3B;EACF;EACA,IAAI,CAAC,cAAc,kBAAkB;GACnC,MAAM,qBAAqB;GAC3B;EACF;EAEA,MAAM,WAAW,QAAQ,OAAO,MAAM;EACtC,MAAM,UAAU,WACZ,MAAM,UAAU,uBAAuB;GACrC,OAAO,cAAc;GACrB;GACA;GACA,WAAW;GACX,iBAAiB;EACnB,CAAC,IACD;EACJ,MAAM,UAAU,MAAM,SAAS,QAAQ,EAAE,IAAI,SAAS,oBAAoB,cAAc,iBAAiB,CAAC;EAC1G,IAAI,CAAC,WAAW,QAAQ,UAAU,cAAc,OAAO;GACrD,MAAM,qBAAqB;GAC3B;EACF;EACA,MAAM,aAAa,oBAAoB,QAAQ,YAAY,UAAU,QAAQ,SAAS;EACtF,MAAM,QAAQ,MAAM,IAAI;GACtB,cAAc,cAAc;GAC5B,mBAAmB;GACnB,oBAAoB,cAAc;EACpC,CAAC;EACD,mBAAmB;EACnB,MAAM,gCAAgC;GACpC,OAAO,cAAc;GACrB,QAAQ,cAAc;GACtB,iBAAiB;EACnB,CAAC;EAED,IAAI,SAAS;EACb,IAAI,YAAa,MAAM,QAAQ,OAAO,iBAAiB,EAAE,SAAS,CAAC,GAAI;EAEvE,MAAM,gBACJ,eAAe,YACX,QAAQ,kBACP,MAAM,cAAc,IAAI;GAAE,OAAO,cAAc;GAAO,QAAQ,cAAc;EAAO,CAAC,EAAA,EAAI;EAC/F,IAAI,CAAC,eAAe;EAIpB,QAAQ,MAAM,WAAW,EAAE,SAAS,cAAc,CAAC;EACnD,MAAM,kBAAkB,SAAS,aAAa;CAChD,SAAS,OAAO;EACd,IAAI,CAAC,oBAAoB,CAAC,oBACxB,IAAI;GACF,MAAM,0BAA0B;EAClC,QAAQ,CAAC;EAEX,QAAQ,KAAK,+EAA+E,KAAK;CACnG;AACF"}

package/dist/session/environment-repositories.d.ts

@@ -0,0 +1,31 @@
+import type { ProjectRepository, ProjectSourceControlConnection, SourceControlRepository, SourceControlSession, SourceControlStorageHandle } from '../storage/domains/source-control/base.js';
+/** One repository of a factory environment, fully resolved: the link, its repository row and its connection. */
+export interface EnvironmentRepository {
+    link: ProjectRepository;
+    repository: SourceControlRepository;
+    connection: ProjectSourceControlConnection;
+}
+/**
+ * The `inEnvironment` links of a factory in position order, resolved to their
+ * repository and connection rows, for the integration the handle belongs to.
+ * A link whose connection or repository row is missing (an uninstalled app,
+ * a link left behind by a reinstall) is skipped with one warning, ids only.
+ */
+export declare function resolveEnvironmentRepositories(args: {
+    sourceControl: SourceControlStorageHandle;
+    orgId: string;
+    factoryProjectId: string;
+}): Promise<EnvironmentRepository[]>;
+/**
+ * The repositories a session may target: the environment list plus, when the
+ * session is filed under a link that is no longer in the environment (a work
+ * item's repository toggled out after dispatch), that own link appended last.
+ * A session can always target the repository it was filed under.
+ */
+export declare function resolveSessionRepositories(args: {
+    sourceControl: SourceControlStorageHandle;
+    session: Pick<SourceControlSession, 'orgId' | 'factoryProjectId' | 'projectRepositoryId'>;
+}): Promise<EnvironmentRepository[]>;
+export declare function findEnvironmentRepository(repositories: EnvironmentRepository[], slug: string): EnvironmentRepository | undefined;
+export declare function environmentSlugs(repositories: EnvironmentRepository[]): string[];
+//# sourceMappingURL=environment-repositories.d.ts.map

package/dist/session/environment-repositories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment-repositories.d.ts","sourceRoot":"","sources":["../../src/session/environment-repositories.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,8BAA8B,EAC9B,uBAAuB,EACvB,oBAAoB,EACpB,0BAA0B,EAC3B,MAAM,2CAA2C,CAAC;AAEnD,gHAAgH;AAChH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,iBAAiB,CAAC;IACxB,UAAU,EAAE,uBAAuB,CAAC;IACpC,UAAU,EAAE,8BAA8B,CAAC;CAC5C;AAED;;;;;GAKG;AACH,wBAAsB,8BAA8B,CAAC,IAAI,EAAE;IACzD,aAAa,EAAE,0BAA0B,CAAC;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,CAAC;CAC1B,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,CA2BnC;AAED;;;;;GAKG;AACH,wBAAsB,0BAA0B,CAAC,IAAI,EAAE;IACrD,aAAa,EAAE,0BAA0B,CAAC;IAC1C,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,OAAO,GAAG,kBAAkB,GAAG,qBAAqB,CAAC,CAAC;CAC3F,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAcnC;AAED,wBAAgB,yBAAyB,CACvC,YAAY,EAAE,qBAAqB,EAAE,EACrC,IAAI,EAAE,MAAM,GACX,qBAAqB,GAAG,SAAS,CAGnC;AAED,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,qBAAqB,EAAE,GAAG,MAAM,EAAE,CAEhF"}

package/dist/session/environment-repositories.js

@@ -0,0 +1,89 @@
+//#region src/session/environment-repositories.ts
+/**
+* The `inEnvironment` links of a factory in position order, resolved to their
+* repository and connection rows, for the integration the handle belongs to.
+* A link whose connection or repository row is missing (an uninstalled app,
+* a link left behind by a reinstall) is skipped with one warning, ids only.
+*/
+async function resolveEnvironmentRepositories(args) {
+	const { sourceControl, orgId, factoryProjectId } = args;
+	const connections = await sourceControl.connections.list({
+		orgId,
+		factoryProjectId
+	});
+	const connectionById = new Map(connections.filter((connection) => connection.integrationId === sourceControl.integrationId).map((connection) => [connection.id, connection]));
+	const links = (await sourceControl.projectRepositories.listByProject({
+		orgId,
+		factoryProjectId
+	})).filter((link) => link.inEnvironment).sort((a, b) => a.position - b.position || a.createdAt.getTime() - b.createdAt.getTime());
+	const resolved = [];
+	for (const link of links) {
+		const connection = connectionById.get(link.connectionId);
+		const repository = connection ? await sourceControl.repositories.get({
+			orgId,
+			id: link.repositoryId
+		}) : null;
+		if (!connection || !repository) {
+			console.warn("[Mastra Factory] Environment repository link cannot be resolved; skipping it", {
+				orgId,
+				factoryProjectId,
+				projectRepositoryId: link.id,
+				reason: connection ? "repository" : "connection"
+			});
+			continue;
+		}
+		resolved.push({
+			link,
+			repository,
+			connection
+		});
+	}
+	return resolved;
+}
+/**
+* The repositories a session may target: the environment list plus, when the
+* session is filed under a link that is no longer in the environment (a work
+* item's repository toggled out after dispatch), that own link appended last.
+* A session can always target the repository it was filed under.
+*/
+async function resolveSessionRepositories(args) {
+	const { sourceControl, session } = args;
+	const orgId = session.orgId;
+	const repositories = session.factoryProjectId ? await resolveEnvironmentRepositories({
+		sourceControl,
+		orgId,
+		factoryProjectId: session.factoryProjectId
+	}) : [];
+	const ownId = session.projectRepositoryId;
+	if (!ownId || repositories.some((candidate) => candidate.link.id === ownId)) return repositories;
+	const link = await sourceControl.projectRepositories.get({
+		orgId,
+		id: ownId
+	});
+	if (!link) return repositories;
+	const connection = await sourceControl.connections.get({
+		orgId,
+		id: link.connectionId
+	});
+	const repository = connection ? await sourceControl.repositories.get({
+		orgId,
+		id: link.repositoryId
+	}) : null;
+	if (!connection || !repository) return repositories;
+	return [...repositories, {
+		link,
+		repository,
+		connection
+	}];
+}
+function findEnvironmentRepository(repositories, slug) {
+	const wanted = slug.trim().toLowerCase();
+	return repositories.find((candidate) => candidate.repository.slug.toLowerCase() === wanted);
+}
+function environmentSlugs(repositories) {
+	return repositories.map((candidate) => candidate.repository.slug);
+}
+//#endregion
+export { environmentSlugs, findEnvironmentRepository, resolveEnvironmentRepositories, resolveSessionRepositories };
+
+//# sourceMappingURL=environment-repositories.js.map

package/dist/session/environment-repositories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment-repositories.js","names":[],"sources":["../../src/session/environment-repositories.ts"],"sourcesContent":["import type {\n  ProjectRepository,\n  ProjectSourceControlConnection,\n  SourceControlRepository,\n  SourceControlSession,\n  SourceControlStorageHandle,\n} from '../storage/domains/source-control/base.js';\n\n/** One repository of a factory environment, fully resolved: the link, its repository row and its connection. */\nexport interface EnvironmentRepository {\n  link: ProjectRepository;\n  repository: SourceControlRepository;\n  connection: ProjectSourceControlConnection;\n}\n\n/**\n * The `inEnvironment` links of a factory in position order, resolved to their\n * repository and connection rows, for the integration the handle belongs to.\n * A link whose connection or repository row is missing (an uninstalled app,\n * a link left behind by a reinstall) is skipped with one warning, ids only.\n */\nexport async function resolveEnvironmentRepositories(args: {\n  sourceControl: SourceControlStorageHandle;\n  orgId: string;\n  factoryProjectId: string;\n}): Promise<EnvironmentRepository[]> {\n  const { sourceControl, orgId, factoryProjectId } = args;\n  const connections = await sourceControl.connections.list({ orgId, factoryProjectId });\n  const connectionById = new Map(\n    connections\n      .filter(connection => connection.integrationId === sourceControl.integrationId)\n      .map(connection => [connection.id, connection] as const),\n  );\n  const links = (await sourceControl.projectRepositories.listByProject({ orgId, factoryProjectId }))\n    .filter(link => link.inEnvironment)\n    .sort((a, b) => a.position - b.position || a.createdAt.getTime() - b.createdAt.getTime());\n  const resolved: EnvironmentRepository[] = [];\n  for (const link of links) {\n    const connection = connectionById.get(link.connectionId);\n    const repository = connection ? await sourceControl.repositories.get({ orgId, id: link.repositoryId }) : null;\n    if (!connection || !repository) {\n      console.warn('[Mastra Factory] Environment repository link cannot be resolved; skipping it', {\n        orgId,\n        factoryProjectId,\n        projectRepositoryId: link.id,\n        reason: connection ? 'repository' : 'connection',\n      });\n      continue;\n    }\n    resolved.push({ link, repository, connection });\n  }\n  return resolved;\n}\n\n/**\n * The repositories a session may target: the environment list plus, when the\n * session is filed under a link that is no longer in the environment (a work\n * item's repository toggled out after dispatch), that own link appended last.\n * A session can always target the repository it was filed under.\n */\nexport async function resolveSessionRepositories(args: {\n  sourceControl: SourceControlStorageHandle;\n  session: Pick<SourceControlSession, 'orgId' | 'factoryProjectId' | 'projectRepositoryId'>;\n}): Promise<EnvironmentRepository[]> {\n  const { sourceControl, session } = args;\n  const orgId = session.orgId;\n  const repositories = session.factoryProjectId\n    ? await resolveEnvironmentRepositories({ sourceControl, orgId, factoryProjectId: session.factoryProjectId })\n    : [];\n  const ownId = session.projectRepositoryId;\n  if (!ownId || repositories.some(candidate => candidate.link.id === ownId)) return repositories;\n  const link = await sourceControl.projectRepositories.get({ orgId, id: ownId });\n  if (!link) return repositories;\n  const connection = await sourceControl.connections.get({ orgId, id: link.connectionId });\n  const repository = connection ? await sourceControl.repositories.get({ orgId, id: link.repositoryId }) : null;\n  if (!connection || !repository) return repositories;\n  return [...repositories, { link, repository, connection }];\n}\n\nexport function findEnvironmentRepository(\n  repositories: EnvironmentRepository[],\n  slug: string,\n): EnvironmentRepository | undefined {\n  const wanted = slug.trim().toLowerCase();\n  return repositories.find(candidate => candidate.repository.slug.toLowerCase() === wanted);\n}\n\nexport function environmentSlugs(repositories: EnvironmentRepository[]): string[] {\n  return repositories.map(candidate => candidate.repository.slug);\n}\n"],"mappings":";;;;;;;AAqBA,eAAsB,+BAA+B,MAIhB;CACnC,MAAM,EAAE,eAAe,OAAO,qBAAqB;CACnD,MAAM,cAAc,MAAM,cAAc,YAAY,KAAK;EAAE;EAAO;CAAiB,CAAC;CACpF,MAAM,iBAAiB,IAAI,IACzB,YACG,QAAO,eAAc,WAAW,kBAAkB,cAAc,aAAa,CAAC,CAC9E,KAAI,eAAc,CAAC,WAAW,IAAI,UAAU,CAAU,CAC3D;CACA,MAAM,SAAS,MAAM,cAAc,oBAAoB,cAAc;EAAE;EAAO;CAAiB,CAAC,EAAA,CAC7F,QAAO,SAAQ,KAAK,aAAa,CAAC,CAClC,MAAM,GAAG,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,QAAQ,IAAI,EAAE,UAAU,QAAQ,CAAC;CAC1F,MAAM,WAAoC,CAAC;CAC3C,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,aAAa,eAAe,IAAI,KAAK,YAAY;EACvD,MAAM,aAAa,aAAa,MAAM,cAAc,aAAa,IAAI;GAAE;GAAO,IAAI,KAAK;EAAa,CAAC,IAAI;EACzG,IAAI,CAAC,cAAc,CAAC,YAAY;GAC9B,QAAQ,KAAK,gFAAgF;IAC3F;IACA;IACA,qBAAqB,KAAK;IAC1B,QAAQ,aAAa,eAAe;GACtC,CAAC;GACD;EACF;EACA,SAAS,KAAK;GAAE;GAAM;GAAY;EAAW,CAAC;CAChD;CACA,OAAO;AACT;;;;;;;AAQA,eAAsB,2BAA2B,MAGZ;CACnC,MAAM,EAAE,eAAe,YAAY;CACnC,MAAM,QAAQ,QAAQ;CACtB,MAAM,eAAe,QAAQ,mBACzB,MAAM,+BAA+B;EAAE;EAAe;EAAO,kBAAkB,QAAQ;CAAiB,CAAC,IACzG,CAAC;CACL,MAAM,QAAQ,QAAQ;CACtB,IAAI,CAAC,SAAS,aAAa,MAAK,cAAa,UAAU,KAAK,OAAO,KAAK,GAAG,OAAO;CAClF,MAAM,OAAO,MAAM,cAAc,oBAAoB,IAAI;EAAE;EAAO,IAAI;CAAM,CAAC;CAC7E,IAAI,CAAC,MAAM,OAAO;CAClB,MAAM,aAAa,MAAM,cAAc,YAAY,IAAI;EAAE;EAAO,IAAI,KAAK;CAAa,CAAC;CACvF,MAAM,aAAa,aAAa,MAAM,cAAc,aAAa,IAAI;EAAE;EAAO,IAAI,KAAK;CAAa,CAAC,IAAI;CACzG,IAAI,CAAC,cAAc,CAAC,YAAY,OAAO;CACvC,OAAO,CAAC,GAAG,cAAc;EAAE;EAAM;EAAY;CAAW,CAAC;AAC3D;AAEA,SAAgB,0BACd,cACA,MACmC;CACnC,MAAM,SAAS,KAAK,KAAK,CAAC,CAAC,YAAY;CACvC,OAAO,aAAa,MAAK,cAAa,UAAU,WAAW,KAAK,YAAY,MAAM,MAAM;AAC1F;AAEA,SAAgB,iBAAiB,cAAiD;CAChF,OAAO,aAAa,KAAI,cAAa,UAAU,WAAW,IAAI;AAChE"}

package/dist/session/environment-state-processor.d.ts

@@ -0,0 +1,59 @@
+import type { ComputeStateSignalArgs, ComputeStateSignalResult, Processor } from '@mastra/core/processors';
+export type EnvironmentRepositorySetupStatus = 'ok' | 'failed' | 'skipped';
+/** One repository of the booted environment as the agent is told about it: never a token or a clone URL. */
+export interface SessionEnvironmentRepositoryState {
+    slug: string;
+    /** Absolute directory of the checkout under the workspace root. */
+    dir: string;
+    /** The branch the checkout ended on after boot; `null` when it stays detached. */
+    branch: string | null;
+    defaultBranch: string;
+    position: number;
+    /** `ok` ran or was already set up, `failed` exited non-zero, `skipped` has no setup command. */
+    setupStatus: EnvironmentRepositorySetupStatus;
+    /** The change request this session opened in the repository, once it has. */
+    changeRequestUrl?: string;
+}
+export interface SessionEnvironmentState {
+    /** The workspace root, the session's working directory; repositories sit beneath it. */
+    workingDirectory: string;
+    repositories: SessionEnvironmentRepositoryState[];
+    /** One free-form line the boot wants the agent to know (never a credential), rendered last. */
+    note?: string;
+}
+/** A repository's teardown command and the directory it runs in; kept beside the state, never rendered. */
+export interface SessionEnvironmentTeardown {
+    slug: string;
+    dir: string;
+    command: string;
+}
+export declare function recordSessionEnvironment(sessionId: string, state: SessionEnvironmentState, teardown?: SessionEnvironmentTeardown[]): void;
+/**
+ * Record what a source-control tool did in one environment repository (the
+ * branch it pushed, the change request it opened) so the next signal snapshot
+ * tells the agent. A no-op when the session's environment is not recorded in
+ * this process or the slug is not part of it.
+ */
+export declare function updateSessionEnvironmentRepository(sessionId: string, slug: string, patch: {
+    branch?: string;
+    changeRequestUrl?: string;
+}): void;
+/** Set or clear the environment's note; a no-op when the session's environment is not recorded here. */
+export declare function setSessionEnvironmentNote(sessionId: string, note: string | null): void;
+export declare function clearSessionEnvironment(sessionId: string): void;
+export declare function peekSessionEnvironment(sessionId: string): SessionEnvironmentState | undefined;
+/** Teardown commands of the booted environment, in position order. */
+export declare function peekSessionEnvironmentTeardown(sessionId: string): SessionEnvironmentTeardown[];
+export declare function __clearSessionEnvironmentsForTests(): void;
+/**
+ * Tells the agent which repositories its sandbox holds and where: the
+ * workspace root is the session's working directory and every environment
+ * repository is a directory beneath it. Snapshot mode only; a new snapshot
+ * is emitted when the booted set changes (a start after an environment edit).
+ */
+export declare class FactoryEnvironmentStateProcessor implements Processor<'factory-environment'> {
+    readonly id = "factory-environment";
+    readonly stateId = "factory-environment";
+    computeStateSignal(args: ComputeStateSignalArgs): Promise<ComputeStateSignalResult>;
+}
+//# sourceMappingURL=environment-state-processor.d.ts.map

package/dist/session/environment-state-processor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment-state-processor.d.ts","sourceRoot":"","sources":["../../src/session/environment-state-processor.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAK3G,MAAM,MAAM,gCAAgC,GAAG,IAAI,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE3E,4GAA4G;AAC5G,MAAM,WAAW,iCAAiC;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,GAAG,EAAE,MAAM,CAAC;IACZ,kFAAkF;IAClF,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,gGAAgG;IAChG,WAAW,EAAE,gCAAgC,CAAC;IAC9C,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACtC,wFAAwF;IACxF,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,iCAAiC,EAAE,CAAC;IAClD,+FAA+F;IAC/F,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAQD,2GAA2G;AAC3G,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,uBAAuB,EAC9B,QAAQ,GAAE,0BAA0B,EAAO,GAC1C,IAAI,CAEN;AAED;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAChD,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAE,GACpD,IAAI,CAaN;AAED,wGAAwG;AACxG,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAKtF;AAED,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAE/D;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,uBAAuB,GAAG,SAAS,CAE7F;AAED,sEAAsE;AACtE,wBAAgB,8BAA8B,CAAC,SAAS,EAAE,MAAM,GAAG,0BAA0B,EAAE,CAE9F;AAED,wBAAgB,kCAAkC,IAAI,IAAI,CAEzD;AAmBD;;;;;GAKG;AACH,qBAAa,gCAAiC,YAAW,SAAS,CAAC,qBAAqB,CAAC;IACvF,QAAQ,CAAC,EAAE,yBAAY;IACvB,QAAQ,CAAC,OAAO,yBAAY;IAEtB,kBAAkB,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAiC1F"}

package/dist/session/environment-state-processor.js

@@ -0,0 +1,105 @@
+import { createHash } from "crypto";
+//#region src/session/environment-state-processor.ts
+const STATE_ID = "factory-environment";
+const environments = /* @__PURE__ */ new Map();
+function recordSessionEnvironment(sessionId, state, teardown = []) {
+	environments.set(sessionId, {
+		state,
+		teardown
+	});
+}
+/**
+* Record what a source-control tool did in one environment repository (the
+* branch it pushed, the change request it opened) so the next signal snapshot
+* tells the agent. A no-op when the session's environment is not recorded in
+* this process or the slug is not part of it.
+*/
+function updateSessionEnvironmentRepository(sessionId, slug, patch) {
+	const entry = environments.get(sessionId);
+	if (!entry) return;
+	const wanted = slug.toLowerCase();
+	const repositories = entry.state.repositories.map((repo) => {
+		if (repo.slug.toLowerCase() !== wanted) return repo;
+		return {
+			...repo,
+			...patch.branch !== void 0 ? { branch: patch.branch } : {},
+			...patch.changeRequestUrl !== void 0 ? { changeRequestUrl: patch.changeRequestUrl } : {}
+		};
+	});
+	entry.state = {
+		...entry.state,
+		repositories
+	};
+}
+/** Set or clear the environment's note; a no-op when the session's environment is not recorded here. */
+function setSessionEnvironmentNote(sessionId, note) {
+	const entry = environments.get(sessionId);
+	if (!entry) return;
+	const { note: _previous, ...rest } = entry.state;
+	entry.state = note ? {
+		...rest,
+		note
+	} : rest;
+}
+function clearSessionEnvironment(sessionId) {
+	environments.delete(sessionId);
+}
+function peekSessionEnvironment(sessionId) {
+	return environments.get(sessionId)?.state;
+}
+/** Teardown commands of the booted environment, in position order. */
+function peekSessionEnvironmentTeardown(sessionId) {
+	return environments.get(sessionId)?.teardown ?? [];
+}
+function __clearSessionEnvironmentsForTests() {
+	environments.clear();
+}
+function escapeText(value) {
+	return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
+}
+function sessionIdFromContext(requestContext) {
+	if (!requestContext || typeof requestContext.get !== "function") return null;
+	const controller = requestContext.get("controller");
+	return typeof controller?.resourceId === "string" && controller.resourceId ? controller.resourceId : null;
+}
+function environmentCacheKey(state) {
+	return `environment:${createHash("sha256").update(JSON.stringify(state)).digest("hex").slice(0, 16)}`;
+}
+/**
+* Tells the agent which repositories its sandbox holds and where: the
+* workspace root is the session's working directory and every environment
+* repository is a directory beneath it. Snapshot mode only; a new snapshot
+* is emitted when the booted set changes (a start after an environment edit).
+*/
+var FactoryEnvironmentStateProcessor = class {
+	id = STATE_ID;
+	stateId = STATE_ID;
+	async computeStateSignal(args) {
+		const sessionId = sessionIdFromContext(args.requestContext);
+		if (!sessionId) return;
+		const state = environments.get(sessionId)?.state;
+		if (!state) return;
+		const cacheKey = environmentCacheKey(state);
+		if (Boolean(args.lastSnapshot) && args.contextWindow.hasSnapshot && (args.tracking?.currentCacheKey ?? args.lastSnapshot?.metadata?.state?.cacheKey) === cacheKey) return;
+		const lines = state.repositories.map((repo) => `${repo.position}. ${escapeText(repo.slug)} at ${escapeText(repo.dir)} on ${escapeText(repo.branch ?? "(detached)")} (default ${escapeText(repo.defaultBranch)}, setup ${repo.setupStatus})` + (repo.changeRequestUrl ? `, change request ${escapeText(repo.changeRequestUrl)}` : ""));
+		const only = state.repositories.length === 1 ? state.repositories[0] : void 0;
+		const contents = (only ? `Factory environment: 1 repository, ${escapeText(only.slug)} at ${escapeText(only.dir)}, your working directory.\n` : `Factory environment: ${state.repositories.length} repositories under ${escapeText(state.workingDirectory)}, your working directory.\n`) + lines.join("\n") + (only ? "" : "\nRun git and project commands inside the repository directory they belong to.") + (state.note ? `\n${escapeText(state.note)}` : "");
+		return {
+			id: STATE_ID,
+			cacheKey,
+			mode: "snapshot",
+			tagName: "factory-environment",
+			contents,
+			value: { environment: state },
+			attributes: {
+				workingDirectory: only?.dir ?? state.workingDirectory,
+				repositories: state.repositories.length
+			},
+			metadata: { value: { environment: state } }
+		};
+	}
+};
+//#endregion
+export { FactoryEnvironmentStateProcessor, __clearSessionEnvironmentsForTests, clearSessionEnvironment, peekSessionEnvironment, peekSessionEnvironmentTeardown, recordSessionEnvironment, setSessionEnvironmentNote, updateSessionEnvironmentRepository };
+
+//# sourceMappingURL=environment-state-processor.js.map

package/dist/session/environment-state-processor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment-state-processor.js","names":[],"sources":["../../src/session/environment-state-processor.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\nimport type { ComputeStateSignalArgs, ComputeStateSignalResult, Processor } from '@mastra/core/processors';\nimport type { RequestContext } from '@mastra/core/request-context';\n\nconst STATE_ID = 'factory-environment';\n\nexport type EnvironmentRepositorySetupStatus = 'ok' | 'failed' | 'skipped';\n\n/** One repository of the booted environment as the agent is told about it: never a token or a clone URL. */\nexport interface SessionEnvironmentRepositoryState {\n  slug: string;\n  /** Absolute directory of the checkout under the workspace root. */\n  dir: string;\n  /** The branch the checkout ended on after boot; `null` when it stays detached. */\n  branch: string | null;\n  defaultBranch: string;\n  position: number;\n  /** `ok` ran or was already set up, `failed` exited non-zero, `skipped` has no setup command. */\n  setupStatus: EnvironmentRepositorySetupStatus;\n  /** The change request this session opened in the repository, once it has. */\n  changeRequestUrl?: string;\n}\n\nexport interface SessionEnvironmentState {\n  /** The workspace root, the session's working directory; repositories sit beneath it. */\n  workingDirectory: string;\n  repositories: SessionEnvironmentRepositoryState[];\n  /** One free-form line the boot wants the agent to know (never a credential), rendered last. */\n  note?: string;\n}\n\n// The boot records what it materialized, keyed by the factory session id (the\n// agent's resource id); the processor reads it on the next model step. Boot\n// runs on every sandbox start, so a replacement process re-learns the state\n// the first time the session's sandbox starts again.\nconst environments = new Map<string, { state: SessionEnvironmentState; teardown: SessionEnvironmentTeardown[] }>();\n\n/** A repository's teardown command and the directory it runs in; kept beside the state, never rendered. */\nexport interface SessionEnvironmentTeardown {\n  slug: string;\n  dir: string;\n  command: string;\n}\n\nexport function recordSessionEnvironment(\n  sessionId: string,\n  state: SessionEnvironmentState,\n  teardown: SessionEnvironmentTeardown[] = [],\n): void {\n  environments.set(sessionId, { state, teardown });\n}\n\n/**\n * Record what a source-control tool did in one environment repository (the\n * branch it pushed, the change request it opened) so the next signal snapshot\n * tells the agent. A no-op when the session's environment is not recorded in\n * this process or the slug is not part of it.\n */\nexport function updateSessionEnvironmentRepository(\n  sessionId: string,\n  slug: string,\n  patch: { branch?: string; changeRequestUrl?: string },\n): void {\n  const entry = environments.get(sessionId);\n  if (!entry) return;\n  const wanted = slug.toLowerCase();\n  const repositories = entry.state.repositories.map(repo => {\n    if (repo.slug.toLowerCase() !== wanted) return repo;\n    return {\n      ...repo,\n      ...(patch.branch !== undefined ? { branch: patch.branch } : {}),\n      ...(patch.changeRequestUrl !== undefined ? { changeRequestUrl: patch.changeRequestUrl } : {}),\n    };\n  });\n  entry.state = { ...entry.state, repositories };\n}\n\n/** Set or clear the environment's note; a no-op when the session's environment is not recorded here. */\nexport function setSessionEnvironmentNote(sessionId: string, note: string | null): void {\n  const entry = environments.get(sessionId);\n  if (!entry) return;\n  const { note: _previous, ...rest } = entry.state;\n  entry.state = note ? { ...rest, note } : rest;\n}\n\nexport function clearSessionEnvironment(sessionId: string): void {\n  environments.delete(sessionId);\n}\n\nexport function peekSessionEnvironment(sessionId: string): SessionEnvironmentState | undefined {\n  return environments.get(sessionId)?.state;\n}\n\n/** Teardown commands of the booted environment, in position order. */\nexport function peekSessionEnvironmentTeardown(sessionId: string): SessionEnvironmentTeardown[] {\n  return environments.get(sessionId)?.teardown ?? [];\n}\n\nexport function __clearSessionEnvironmentsForTests(): void {\n  environments.clear();\n}\n\nfunction escapeText(value: string): string {\n  return value.replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;');\n}\n\n// The session id is the controller's resource id. Unlike factory runs, a user\n// session carries no `factoryProjectId` in its controller state, and the\n// environment is recorded for both, so only the resource id is required.\nfunction sessionIdFromContext(requestContext: RequestContext | undefined): string | null {\n  if (!requestContext || typeof requestContext.get !== 'function') return null;\n  const controller = requestContext.get('controller') as { resourceId?: unknown } | undefined;\n  return typeof controller?.resourceId === 'string' && controller.resourceId ? controller.resourceId : null;\n}\n\nfunction environmentCacheKey(state: SessionEnvironmentState): string {\n  return `environment:${createHash('sha256').update(JSON.stringify(state)).digest('hex').slice(0, 16)}`;\n}\n\n/**\n * Tells the agent which repositories its sandbox holds and where: the\n * workspace root is the session's working directory and every environment\n * repository is a directory beneath it. Snapshot mode only; a new snapshot\n * is emitted when the booted set changes (a start after an environment edit).\n */\nexport class FactoryEnvironmentStateProcessor implements Processor<'factory-environment'> {\n  readonly id = STATE_ID;\n  readonly stateId = STATE_ID;\n\n  async computeStateSignal(args: ComputeStateSignalArgs): Promise<ComputeStateSignalResult> {\n    const sessionId = sessionIdFromContext(args.requestContext);\n    if (!sessionId) return;\n    const state = environments.get(sessionId)?.state;\n    if (!state) return;\n    const cacheKey = environmentCacheKey(state);\n    const hasBase = Boolean(args.lastSnapshot) && args.contextWindow.hasSnapshot;\n    if (hasBase && (args.tracking?.currentCacheKey ?? args.lastSnapshot?.metadata?.state?.cacheKey) === cacheKey)\n      return;\n    const lines = state.repositories.map(\n      repo =>\n        `${repo.position}. ${escapeText(repo.slug)} at ${escapeText(repo.dir)} on ${escapeText(repo.branch ?? '(detached)')} (default ${escapeText(repo.defaultBranch)}, setup ${repo.setupStatus})` +\n        (repo.changeRequestUrl ? `, change request ${escapeText(repo.changeRequestUrl)}` : ''),\n    );\n    const only = state.repositories.length === 1 ? state.repositories[0] : undefined;\n    const contents =\n      (only\n        ? `Factory environment: 1 repository, ${escapeText(only.slug)} at ${escapeText(only.dir)}, your working directory.\\n`\n        : `Factory environment: ${state.repositories.length} repositories under ${escapeText(state.workingDirectory)}, your working directory.\\n`) +\n      lines.join('\\n') +\n      (only ? '' : '\\nRun git and project commands inside the repository directory they belong to.') +\n      (state.note ? `\\n${escapeText(state.note)}` : '');\n    return {\n      id: STATE_ID,\n      cacheKey,\n      mode: 'snapshot',\n      tagName: 'factory-environment',\n      contents,\n      value: { environment: state },\n      attributes: { workingDirectory: only?.dir ?? state.workingDirectory, repositories: state.repositories.length },\n      metadata: { value: { environment: state } },\n    };\n  }\n}\n"],"mappings":";;AAIA,MAAM,WAAW;AA+BjB,MAAM,+BAAe,IAAI,IAAwF;AASjH,SAAgB,yBACd,WACA,OACA,WAAyC,CAAC,GACpC;CACN,aAAa,IAAI,WAAW;EAAE;EAAO;CAAS,CAAC;AACjD;;;;;;;AAQA,SAAgB,mCACd,WACA,MACA,OACM;CACN,MAAM,QAAQ,aAAa,IAAI,SAAS;CACxC,IAAI,CAAC,OAAO;CACZ,MAAM,SAAS,KAAK,YAAY;CAChC,MAAM,eAAe,MAAM,MAAM,aAAa,KAAI,SAAQ;EACxD,IAAI,KAAK,KAAK,YAAY,MAAM,QAAQ,OAAO;EAC/C,OAAO;GACL,GAAG;GACH,GAAI,MAAM,WAAW,KAAA,IAAY,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;GAC7D,GAAI,MAAM,qBAAqB,KAAA,IAAY,EAAE,kBAAkB,MAAM,iBAAiB,IAAI,CAAC;EAC7F;CACF,CAAC;CACD,MAAM,QAAQ;EAAE,GAAG,MAAM;EAAO;CAAa;AAC/C;;AAGA,SAAgB,0BAA0B,WAAmB,MAA2B;CACtF,MAAM,QAAQ,aAAa,IAAI,SAAS;CACxC,IAAI,CAAC,OAAO;CACZ,MAAM,EAAE,MAAM,WAAW,GAAG,SAAS,MAAM;CAC3C,MAAM,QAAQ,OAAO;EAAE,GAAG;EAAM;CAAK,IAAI;AAC3C;AAEA,SAAgB,wBAAwB,WAAyB;CAC/D,aAAa,OAAO,SAAS;AAC/B;AAEA,SAAgB,uBAAuB,WAAwD;CAC7F,OAAO,aAAa,IAAI,SAAS,CAAC,EAAE;AACtC;;AAGA,SAAgB,+BAA+B,WAAiD;CAC9F,OAAO,aAAa,IAAI,SAAS,CAAC,EAAE,YAAY,CAAC;AACnD;AAEA,SAAgB,qCAA2C;CACzD,aAAa,MAAM;AACrB;AAEA,SAAS,WAAW,OAAuB;CACzC,OAAO,MAAM,WAAW,KAAK,OAAO,CAAC,CAAC,WAAW,KAAK,MAAM,CAAC,CAAC,WAAW,KAAK,MAAM;AACtF;AAKA,SAAS,qBAAqB,gBAA2D;CACvF,IAAI,CAAC,kBAAkB,OAAO,eAAe,QAAQ,YAAY,OAAO;CACxE,MAAM,aAAa,eAAe,IAAI,YAAY;CAClD,OAAO,OAAO,YAAY,eAAe,YAAY,WAAW,aAAa,WAAW,aAAa;AACvG;AAEA,SAAS,oBAAoB,OAAwC;CACnE,OAAO,eAAe,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,UAAU,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;AACpG;;;;;;;AAQA,IAAa,mCAAb,MAA0F;CACxF,KAAc;CACd,UAAmB;CAEnB,MAAM,mBAAmB,MAAiE;EACxF,MAAM,YAAY,qBAAqB,KAAK,cAAc;EAC1D,IAAI,CAAC,WAAW;EAChB,MAAM,QAAQ,aAAa,IAAI,SAAS,CAAC,EAAE;EAC3C,IAAI,CAAC,OAAO;EACZ,MAAM,WAAW,oBAAoB,KAAK;EAE1C,IADgB,QAAQ,KAAK,YAAY,KAAK,KAAK,cAAc,gBACjD,KAAK,UAAU,mBAAmB,KAAK,cAAc,UAAU,OAAO,cAAc,UAClG;EACF,MAAM,QAAQ,MAAM,aAAa,KAC/B,SACE,GAAG,KAAK,SAAS,IAAI,WAAW,KAAK,IAAI,EAAE,MAAM,WAAW,KAAK,GAAG,EAAE,MAAM,WAAW,KAAK,UAAU,YAAY,EAAE,YAAY,WAAW,KAAK,aAAa,EAAE,UAAU,KAAK,YAAY,MACzL,KAAK,mBAAmB,oBAAoB,WAAW,KAAK,gBAAgB,MAAM,GACvF;EACA,MAAM,OAAO,MAAM,aAAa,WAAW,IAAI,MAAM,aAAa,KAAK,KAAA;EACvE,MAAM,YACH,OACG,sCAAsC,WAAW,KAAK,IAAI,EAAE,MAAM,WAAW,KAAK,GAAG,EAAE,+BACvF,wBAAwB,MAAM,aAAa,OAAO,sBAAsB,WAAW,MAAM,gBAAgB,EAAE,gCAC/G,MAAM,KAAK,IAAI,KACd,OAAO,KAAK,qFACZ,MAAM,OAAO,KAAK,WAAW,MAAM,IAAI,MAAM;EAChD,OAAO;GACL,IAAI;GACJ;GACA,MAAM;GACN,SAAS;GACT;GACA,OAAO,EAAE,aAAa,MAAM;GAC5B,YAAY;IAAE,kBAAkB,MAAM,OAAO,MAAM;IAAkB,cAAc,MAAM,aAAa;GAAO;GAC7G,UAAU,EAAE,OAAO,EAAE,aAAa,MAAM,EAAE;EAC5C;CACF;AACF"}