@mastra/factory 0.24.0-alpha.12 → 0.24.0-alpha.14

package/dist/routes/fs.d.ts

@@ -1,5 +1,4 @@
 import type { ApiRoute } from '@mastra/core/server';
-import type { FilesystemStorage } from '../storage/domains/filesystem/base.js';
 import type { SourceControlSession } from '../storage/domains/source-control/base.js';
 import type { RouteAuth } from './route.js';
 /**
@@ -58,23 +57,25 @@ export interface WorkspaceFile {
     content?: string;
     truncated?: boolean;
 }
-export interface WorkspaceFilesListing {
-    /** The Factory session resource id. */
+export interface WorkspaceTreeEntry {
+    name: string;
+    /** Path from the session's layout root, the form the file route takes. */
+    path: string;
+    type: 'file' | 'directory';
+    size?: number;
+    /** Set when the entry is a symlink: where it points, as written in the link. */
+    symlinkTarget?: string;
+    /** Set when the entry is a symlink: the tree path of what it resolves to. */
+    linkedPath?: string;
+}
+/** One directory of a session's checkouts, read live from its sandbox. */
+export interface WorkspaceTreeListing {
     workspacePath: string;
-    /** The agent thread whose terminal file list was captured. */
-    threadId: string;
-    files: Array<{
-        path: string;
-    }>;
-    /**
-     * The environment repositories the paths are prefixed by, in position
-     * order. Present only when the session's environment holds two or more
-     * repositories; a one-repository session lists unprefixed paths.
-     */
-    repositories?: Array<{
-        slug: string;
-        prefix: string;
-    }>;
+    /** The listed directory; empty for the top level. */
+    path: string;
+    /** False when this process holds no sandbox for the session, so nothing was read. */
+    available: boolean;
+    entries: WorkspaceTreeEntry[];
 }
 export type WorkspaceChangeStatus = 'modified' | 'added' | 'deleted' | 'renamed' | 'copied' | 'untracked' | 'conflicted';
 export interface WorkspaceChange {
@@ -139,15 +140,22 @@ export interface SessionFsDeps {
     sessions: {
         getBySessionId(sessionId: string): Promise<SourceControlSession | null>;
     };
-    filesystem: Pick<FilesystemStorage, 'listFiles'>;
 }
-export declare function listSessionFilesystemFiles(filesystem: Pick<FilesystemStorage, 'listFiles'>, session: SourceControlSession, threadId: string): Promise<WorkspaceFilesListing>;
 /** List an approved rendered root inside a Factory session's sandbox workdir. */
 export declare function listSessionRenderedPath(session: SourceControlSession, renderedRoot: string): Promise<WorkspaceRenderedListing>;
-/** Read a file inside a session's sandbox. Paths outside rendered roots require a persisted-file allowlist check in the route. */
-export declare function readSessionWorkspaceFile(session: SourceControlSession, path: string, options?: {
-    allowUnapprovedPath?: boolean;
-}): Promise<WorkspaceFile>;
+/**
+ * List one directory of a session's working directory from its sandbox,
+ * without git internals or entries a checkout ignores. Passive like every
+ * session read: a session with no sandbox in this process comes back
+ * `available: false` instead of starting one.
+ */
+export declare function listSessionWorkspaceTree(session: SourceControlSession, path?: string): Promise<WorkspaceTreeListing>;
+/**
+ * Read a file inside a session's sandbox: anything under an approved rendered
+ * root, or anything the tree would list (not git internals, not ignored by its
+ * checkout).
+ */
+export declare function readSessionWorkspaceFile(session: SourceControlSession, path: string): Promise<WorkspaceFile>;
 export declare function parseWorkspaceChanges(output: string): WorkspaceChange[];
 export declare function parseWorkspaceTrackedChanges(output: string): WorkspaceChange[];
 export declare function parseWorkspaceChangeStats(output: string): Map<string, {

package/dist/routes/fs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fs.d.ts","sourceRoot":"","sources":["../../src/routes/fs.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AASpD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,gBAAgB;IAC/B,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,4EAA4E;IAC5E,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC,2CAA2C;IAC3C,aAAa,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,sBAAsB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,aAAa;IAC5B,2CAA2C;IAC3C,aAAa,EAAE,MAAM,CAAC;IACtB,oCAAoC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,aAAa,CAAC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,uCAAuC;IACvC,aAAa,EAAE,MAAM,CAAC;IACtB,8DAA8D;IAC9D,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/B;;;;OAIG;IACH,YAAY,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxD;AAED,MAAM,MAAM,qBAAqB,GAC7B,UAAU,GACV,OAAO,GACP,SAAS,GACT,SAAS,GACT,QAAQ,GACR,WAAW,GACX,YAAY,CAAC;AAEjB,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,qBAAqB,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,uFAAuF;IACvF,MAAM,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,4GAA4G;IAC5G,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,YAAY,CAAC,EAAE,0BAA0B,EAAE,CAAC;CAC7C;AAED,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,aAAa,GAAG,sBAAsB,CAAC;AAEnD,MAAM,WAAW,eAAe;IAC9B,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,aAAa,EAAE,CAAC;CAC1B;AAkDD,2EAA2E;AAC3E,wBAAgB,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAEnD;AA0ED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAuCnG;AAqCD,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,wBAAwB,CAAC,CAkBnC;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CA4CjH;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAOjG;AAUD,iFAAiF;AACjF,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,SAAS,CAAC;IAChB,QAAQ,EAAE;QAAE,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAA;KAAE,CAAC;IACtF,UAAU,EAAE,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;CAClD;AA0BD,wBAAsB,0BAA0B,CAC9C,UAAU,EAAE,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,EAChD,OAAO,EAAE,oBAAoB,EAC7B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,qBAAqB,CAAC,CAkBhC;AAmFD,iFAAiF;AACjF,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,oBAAoB,EAC7B,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,wBAAwB,CAAC,CAuCnC;AAED,kIAAkI;AAClI,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,oBAAoB,EAC7B,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC9C,OAAO,CAAC,aAAa,CAAC,CAyBxB;AAYD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,EAAE,CAoBvE;AACD,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,EAAE,CAiB9E;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM;gBAEV,MAAM;gBAAc,MAAM;aAAW,OAAO;GA+BzF;AA8ED,wBAAsB,2BAA2B,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA4C1G;AAiBD,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,oBAAoB,EAC7B,IAAI,EAAE,MAAM,EACZ,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,aAAa,CAAC,CAyExB;AAED,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,gBAAgB,CAUrE;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,aAAa,CAAA;CAAO,GAAG,QAAQ,EAAE,CA2LpG"}
+{"version":3,"file":"fs.d.ts","sourceRoot":"","sources":["../../src/routes/fs.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAQpD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,gBAAgB;IAC/B,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,4EAA4E;IAC5E,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC,2CAA2C;IAC3C,aAAa,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,sBAAsB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,aAAa;IAC5B,2CAA2C;IAC3C,aAAa,EAAE,MAAM,CAAC;IACtB,oCAAoC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,aAAa,CAAC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gFAAgF;IAChF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,0EAA0E;AAC1E,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,qFAAqF;IACrF,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,kBAAkB,EAAE,CAAC;CAC/B;AAED,MAAM,MAAM,qBAAqB,GAC7B,UAAU,GACV,OAAO,GACP,SAAS,GACT,SAAS,GACT,QAAQ,GACR,WAAW,GACX,YAAY,CAAC;AAEjB,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,qBAAqB,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,uFAAuF;IACvF,MAAM,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,4GAA4G;IAC5G,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,YAAY,CAAC,EAAE,0BAA0B,EAAE,CAAC;CAC7C;AAED,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,aAAa,GAAG,sBAAsB,CAAC;AAEnD,MAAM,WAAW,eAAe;IAC9B,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,aAAa,EAAE,CAAC;CAC1B;AAkDD,2EAA2E;AAC3E,wBAAgB,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAEnD;AA0ED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAuCnG;AAqCD,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,wBAAwB,CAAC,CAkBnC;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CA4CjH;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAOjG;AAUD,iFAAiF;AACjF,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,SAAS,CAAC;IAChB,QAAQ,EAAE;QAAE,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAA;KAAE,CAAC;CACvF;AA2GD,iFAAiF;AACjF,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,oBAAoB,EAC7B,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,wBAAwB,CAAC,CAuCnC;AAuID;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,oBAAoB,EAC7B,IAAI,SAAK,GACR,OAAO,CAAC,oBAAoB,CAAC,CAoD/B;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAAC,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CA2ClH;AAYD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,EAAE,CAoBvE;AACD,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,EAAE,CAiB9E;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM;gBAEV,MAAM;gBAAc,MAAM;aAAW,OAAO;GA+BzF;AA8ED,wBAAsB,2BAA2B,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA4C1G;AAiBD,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,oBAAoB,EAC7B,IAAI,EAAE,MAAM,EACZ,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,aAAa,CAAC,CAyExB;AAED,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,gBAAgB,CAUrE;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,aAAa,CAAA;CAAO,GAAG,QAAQ,EAAE,CA8KpG"}

package/dist/routes/fs.js

@@ -1,7 +1,7 @@
 import { requireExec } from "../sandbox/materialization.js";
+import { SETUP_MARKER_DIR } from "../packages/_internals/workspace/dist/index.js";
 import { peekSessionSandbox, sessionLayout } from "../sandbox/session-sandbox.js";
 import { peekSessionEnvironment } from "../session/environment-state-processor.js";
-import { waitForPendingFilesystemCapture } from "../session/filesystem-capture.js";
 import { registerApiRoute } from "@mastra/core/server";
 import { isAbsolute, join, posix, resolve, sep } from "path";
 import { SandboxFilesystem } from "@mastra/code-sdk/agents/sandbox-filesystem";
@@ -87,11 +87,10 @@ async function realPathWithinRoot(candidate, root) {
 	}
 }
 function assertRelativePath(path, label) {
-	const trimmed = path.trim();
-	if (!trimmed) throw new Error(`Missing required query param: ${label}`);
-	if (isAbsolute(trimmed)) throw new Error(`${label} must be relative`);
-	if (trimmed.split(/[\\/]+/).includes("..")) throw new Error(`${label} escapes workspace`);
-	const normalized = resolve("/", trimmed).slice(1);
+	if (!path.trim()) throw new Error(`Missing required query param: ${label}`);
+	if (isAbsolute(path)) throw new Error(`${label} must be relative`);
+	if (path.split(/[\\/]+/).includes("..")) throw new Error(`${label} escapes workspace`);
+	const normalized = resolve("/", path).slice(1);
 	if (!normalized || normalized === ".." || normalized.startsWith(`..${sep}`)) throw new Error(`${label} escapes workspace`);
 	return normalized;
 }
@@ -275,24 +274,6 @@ async function resolveAuthorizedSession(c, deps, workspacePath) {
 	}
 	return session;
 }
-async function listSessionFilesystemFiles(filesystem, session, threadId) {
-	const safeThreadId = threadId.trim();
-	if (!safeThreadId) throw new Error("Missing required query param: threadId");
-	await waitForPendingFilesystemCapture(session.sessionId);
-	const layout = sessionLayout(peekSessionSandbox(session.id));
-	return {
-		workspacePath: session.sessionId,
-		threadId: safeThreadId,
-		files: await filesystem.listFiles({
-			resourceId: session.sessionId,
-			threadId: safeThreadId
-		}),
-		...layout && layout.repos.length > 1 ? { repositories: layout.repos.map((repo) => ({
-			slug: repo.slug,
-			prefix: repo.prefix
-		})) } : {}
-	};
-}
 /**
 * Resolve the session's sandbox from the per-process memo and wrap the
 * session layout's root in a `SandboxFilesystem`: the checkout for a
@@ -398,26 +379,211 @@ async function listSessionRenderedPath(session, renderedRoot) {
 		entries
 	};
 }
-/** Read a file inside a session's sandbox. Paths outside rendered roots require a persisted-file allowlist check in the route. */
-async function readSessionWorkspaceFile(session, path, options = {}) {
+/**
+* Directory entries the file tree never shows or serves: git internals and the
+* sandbox's own setup markers.
+*/
+const HIDDEN_TREE_ENTRIES = /* @__PURE__ */ new Set([".git", SETUP_MARKER_DIR]);
+/**
+* Where a tree path lives. Inside a checkout: that checkout and the path within
+* it (a bare repository directory resolves to its root). Elsewhere in the
+* working directory (a multi-repository session's root, `.artifacts`): no
+* checkout, so no ignore rules apply.
+*/
+function treeLocation(layout, path) {
+	const safePath = path ? assertRelativePath(path, "path") : "";
+	if (safePath.split("/").some((segment) => HIDDEN_TREE_ENTRIES.has(segment))) throw new Error("Path is not available in this session");
+	if (layout.repos.length === 1) return {
+		repo: layout.repos[0],
+		relative: safePath
+	};
+	const repo = layout.repos.filter((candidate) => `${safePath}/`.startsWith(candidate.prefix)).toSorted((a, b) => b.prefix.length - a.prefix.length)[0];
+	return repo ? {
+		repo,
+		relative: safePath.slice(repo.prefix.length)
+	} : {
+		repo: void 0,
+		relative: safePath
+	};
+}
+/**
+* The checkout-relative paths git ignores, in one `git check-ignore` call.
+* Ignored files (`.env`, build output, `node_modules`) are neither listed nor
+* served: viewers of a session shouldn't read its local secrets. Fails closed
+* when git can't answer.
+*/
+async function ignoredPaths(sandbox, repoDir, paths) {
+	if (paths.length === 0) return /* @__PURE__ */ new Set();
+	const result = await sandbox.executeCommand("sh", [
+		"-c",
+		"cd \"$1\" && shift && printf '%s\\0' \"$@\" | git check-ignore -z --stdin",
+		"sh",
+		repoDir,
+		...paths
+	], {
+		timeout: 3e4,
+		maxRetainedBytes: Infinity
+	});
+	if (result.exitCode === 1) return /* @__PURE__ */ new Set();
+	if (result.exitCode !== 0) throw new Error(`Unable to check ignored files: ${result.stderr.trim() || "git failed"}`);
+	return new Set(result.stdout.split("\0").filter(Boolean));
+}
+/**
+* The real absolute location of each path (relative to `root`), following
+* every symlink, or `''` when it doesn't exist; plus `root`'s own. Paths go in
+* as positional arguments and come back NUL-separated.
+*/
+async function realPaths(sandbox, root, paths) {
+	const result = await sandbox.executeCommand("sh", [
+		"-c",
+		"cd \"$1\" && shift && printf '%s\\0' \"$(pwd -P)\" && for p; do printf '%s\\0' \"$([ -e \"$p\" ] && readlink -f -- \"$p\")\"; done",
+		"sh",
+		root,
+		...paths
+	], {
+		timeout: 3e4,
+		maxRetainedBytes: Infinity
+	});
+	if (result.exitCode !== 0) throw new Error(`Unable to resolve symlinks: ${result.stderr.trim() || "failed"}`);
+	const [physicalRoot = "", ...resolved] = result.stdout.split("\0");
+	return {
+		root: physicalRoot,
+		paths: resolved.slice(0, paths.length)
+	};
+}
+/** The first `bytes` bytes of a file, base64-encoded in the sandbox so binary content survives. */
+async function readFilePrefix(sandbox, path, bytes) {
+	const result = await sandbox.executeCommand("sh", [
+		"-c",
+		"t=$(mktemp) && trap 'rm -f \"$t\"' EXIT && head -c \"$1\" -- \"$2\" >\"$t\" && base64 <\"$t\"",
+		"sh",
+		String(bytes),
+		path
+	], {
+		timeout: 3e4,
+		maxRetainedBytes: Infinity
+	});
+	if (result.exitCode !== 0) throw new Error(`Unable to read file: ${result.stderr.trim() || "failed"}`);
+	return Buffer.from(result.stdout, "base64");
+}
+/**
+* Where a real absolute path sits in the tree, or `undefined` when the tree
+* can't show it: missing, outside the working directory, or inside git
+* internals or setup markers.
+*/
+function treePathOf(layout, physicalRoot, real) {
+	if (!real) return void 0;
+	const relative = posix.relative(physicalRoot, real);
+	if (relative === ".." || relative.startsWith("../") || posix.isAbsolute(relative)) return void 0;
+	try {
+		treeLocation(layout, relative);
+	} catch {
+		return;
+	}
+	return relative;
+}
+/** Which tree paths their checkout ignores: one `git check-ignore` per checkout involved. */
+async function ignoredTreePaths(sandbox, layout, paths) {
+	const byRepo = /* @__PURE__ */ new Map();
+	for (const path of paths) {
+		const { repo, relative } = treeLocation(layout, path);
+		if (!repo || !relative) continue;
+		const inRepo = byRepo.get(repo) ?? /* @__PURE__ */ new Map();
+		inRepo.set(relative, path);
+		byRepo.set(repo, inRepo);
+	}
+	const ignored = /* @__PURE__ */ new Set();
+	for (const [repo, inRepo] of byRepo) for (const relative of await ignoredPaths(sandbox, repo.dir, [...inRepo.keys()])) ignored.add(inRepo.get(relative));
+	return ignored;
+}
+/**
+* List one directory of a session's working directory from its sandbox,
+* without git internals or entries a checkout ignores. Passive like every
+* session read: a session with no sandbox in this process comes back
+* `available: false` instead of starting one.
+*/
+async function listSessionWorkspaceTree(session, path = "") {
+	const requested = path.trim() ? path : "";
+	const handle = await sessionSandbox(session);
+	const listing = {
+		workspacePath: session.sessionId,
+		path: requested
+	};
+	if (!handle) return {
+		...listing,
+		available: false,
+		entries: []
+	};
+	const { layout, sandbox, filesystem } = handle;
+	const location = treeLocation(layout, requested);
+	const dir = (location.repo ? location.repo.prefix + location.relative : location.relative).replace(/\/$/, "");
+	const children = (await filesystem.readdir(dir || ".")).filter((entry) => !HIDDEN_TREE_ENTRIES.has(entry.name));
+	const childPath = (name) => dir ? `${dir}/${name}` : name;
+	const links = children.filter((entry) => entry.isSymlink);
+	const resolve = [...dir ? [dir] : [], ...links.map((entry) => childPath(entry.name))];
+	const real = resolve.length > 0 ? await realPaths(sandbox, layout.root, resolve) : void 0;
+	const linkTargets = real ? real.paths.slice(dir ? 1 : 0) : [];
+	if (dir && real.paths[0] !== posix.join(real.root, dir)) throw new Error("Path is not available in this session");
+	const targets = new Map(links.map((entry, i) => [entry.name, treePathOf(layout, real.root, linkTargets[i])]));
+	const ignored = await ignoredTreePaths(sandbox, layout, [
+		...dir ? [dir] : [],
+		...children.map((entry) => childPath(entry.name)),
+		...[...targets.values()].filter((target) => target !== void 0)
+	]);
+	if (dir && ignored.has(dir)) throw new Error("Path is not available in this session");
+	const entries = children.filter((entry) => {
+		if (ignored.has(childPath(entry.name))) return false;
+		if (!entry.isSymlink) return true;
+		const target = targets.get(entry.name);
+		return target !== void 0 && !ignored.has(target);
+	}).map((entry) => ({
+		name: entry.name,
+		path: childPath(entry.name),
+		type: entry.type,
+		...entry.type === "file" && entry.size !== void 0 && { size: entry.size },
+		...entry.isSymlink && {
+			symlinkTarget: entry.symlinkTarget ?? targets.get(entry.name),
+			linkedPath: targets.get(entry.name)
+		}
+	})).toSorted((a, b) => a.type === b.type ? a.name.localeCompare(b.name) : a.type === "directory" ? -1 : 1);
+	return {
+		...listing,
+		available: true,
+		entries
+	};
+}
+/**
+* Read a file inside a session's sandbox: anything under an approved rendered
+* root, or anything the tree would list (not git internals, not ignored by its
+* checkout).
+*/
+async function readSessionWorkspaceFile(session, path) {
 	const safePath = assertRelativePath(path, "path");
-	if (!options.allowUnapprovedPath) assertApprovedRenderedRoot(safePath.split("/")[0] ?? "");
 	const handle = await sessionSandbox(session);
 	if (!handle) throw new Error("Session workspace is not available");
+	const { layout, sandbox } = handle;
+	treeLocation(layout, safePath);
+	const parent = posix.dirname(safePath);
+	const real = await realPaths(sandbox, layout.root, parent === "." ? [safePath] : [safePath, parent]);
+	const target = treePathOf(layout, real.root, real.paths[0]);
+	const throughLink = parent !== "." && real.paths[1] !== posix.join(real.root, parent);
+	if (target === void 0 || throughLink) throw new Error("Path is not available in this session");
+	const trusted = APPROVED_RENDERED_ROOTS.has(safePath.split("/")[0] ?? "");
+	if ((await ignoredTreePaths(sandbox, layout, [.../* @__PURE__ */ new Set([...trusted ? [] : [safePath], ...target === safePath ? [] : [target]])])).size > 0) throw new Error("Path is not available in this session");
 	const { filesystem } = handle;
 	const info = await filesystem.stat(safePath);
 	if (info.type === "directory") throw new Error("Path is a directory");
-	const buffer = await filesystem.readFile(safePath);
-	const truncated = buffer.length > MAX_TEXT_FILE_BYTES;
+	const truncated = info.size > MAX_TEXT_FILE_BYTES;
+	const buffer = truncated ? await readFilePrefix(sandbox, real.paths[0], MAX_TEXT_FILE_BYTES) : await filesystem.readFile(safePath);
 	const base = {
 		workspacePath: session.sessionId,
 		path: safePath,
 		name: posix.basename(safePath),
-		size: buffer.length,
+		size: info.size,
 		updatedAt: info.modifiedAt.toISOString()
 	};
 	try {
-		const content = TEXT_DECODER.decode(truncated ? buffer.subarray(0, MAX_TEXT_FILE_BYTES) : buffer);
+		const content = TEXT_DECODER.decode(buffer);
 		return {
 			...base,
 			contentType: "text",
@@ -808,57 +974,55 @@ function buildFsRoutes(options = {}) {
 				}
 			}
 		}),
-		registerApiRoute("/web/workspace/files", {
+		registerApiRoute("/web/workspace/changes", {
 			method: "GET",
 			requiresAuth: false,
 			handler: async (c) => {
 				const workspacePath = c.req.query("workspacePath");
-				const threadId = c.req.query("threadId")?.trim();
 				if (!workspacePath) return c.json({ error: "Missing required query param: workspacePath" }, 400);
-				if (!threadId) return c.json({ error: "Missing required query param: threadId" }, 400);
 				try {
 					const session = await resolveAuthorizedSession(loose(c), sessionFs, workspacePath);
-					if (!session || !sessionFs) return c.json({ error: "Session workspace is not available" }, 403);
-					return c.json(await listSessionFilesystemFiles(sessionFs.filesystem, session, threadId));
+					if (!session || !sessionFs) return c.json(unavailableWorkspaceChanges(workspacePath));
+					return c.json(await listSessionWorkspaceChanges(session));
 				} catch (error) {
 					const message = error instanceof Error ? error.message : String(error);
-					const status = message.includes("not available") ? 403 : 500;
-					return c.json({ error: message }, status);
+					return c.json({ error: message }, message.includes("not available") ? 403 : 500);
 				}
 			}
 		}),
-		registerApiRoute("/web/workspace/changes", {
+		registerApiRoute("/web/workspace/changes/diff", {
 			method: "GET",
 			requiresAuth: false,
 			handler: async (c) => {
 				const workspacePath = c.req.query("workspacePath");
+				const path = c.req.query("path");
+				const previousPath = c.req.query("previousPath");
 				if (!workspacePath) return c.json({ error: "Missing required query param: workspacePath" }, 400);
+				if (!path) return c.json({ error: "Missing required query param: path" }, 400);
 				try {
 					const session = await resolveAuthorizedSession(loose(c), sessionFs, workspacePath);
-					if (!session || !sessionFs) return c.json(unavailableWorkspaceChanges(workspacePath));
-					return c.json(await listSessionWorkspaceChanges(session));
+					if (!session || !sessionFs) return c.json({ error: "Session workspace is not available" }, 403);
+					return c.json(await readSessionWorkspaceDiff(session, path, previousPath));
 				} catch (error) {
 					const message = error instanceof Error ? error.message : String(error);
-					return c.json({ error: message }, message.includes("not available") ? 403 : 500);
+					const status = message.includes("relative") || message.includes("escapes") || message.includes("not available") ? 403 : 500;
+					return c.json({ error: message }, status);
 				}
 			}
 		}),
-		registerApiRoute("/web/workspace/changes/diff", {
+		registerApiRoute("/web/workspace/tree", {
 			method: "GET",
 			requiresAuth: false,
 			handler: async (c) => {
 				const workspacePath = c.req.query("workspacePath");
-				const path = c.req.query("path");
-				const previousPath = c.req.query("previousPath");
 				if (!workspacePath) return c.json({ error: "Missing required query param: workspacePath" }, 400);
-				if (!path) return c.json({ error: "Missing required query param: path" }, 400);
 				try {
 					const session = await resolveAuthorizedSession(loose(c), sessionFs, workspacePath);
 					if (!session || !sessionFs) return c.json({ error: "Session workspace is not available" }, 403);
-					return c.json(await readSessionWorkspaceDiff(session, path, previousPath));
+					return c.json(await listSessionWorkspaceTree(session, c.req.query("path") ?? ""));
 				} catch (error) {
 					const message = error instanceof Error ? error.message : String(error);
-					const status = message.includes("relative") || message.includes("escapes") || message.includes("not available") ? 403 : 500;
+					const status = message.includes("relative") || message.includes("escapes") || message.includes("not available") ? 403 : message.includes("not found") ? 404 : 500;
 					return c.json({ error: message }, status);
 				}
 			}
@@ -869,22 +1033,11 @@ function buildFsRoutes(options = {}) {
 			handler: async (c) => {
 				const workspacePath = c.req.query("workspacePath");
 				const path = c.req.query("path");
-				const requestedThreadId = c.req.query("threadId");
-				const threadId = requestedThreadId?.trim();
 				if (!workspacePath) return c.json({ error: "Missing required query param: workspacePath" }, 400);
 				if (!path) return c.json({ error: "Missing required query param: path" }, 400);
-				if (requestedThreadId !== void 0 && !threadId) return c.json({ error: "Missing required query param: threadId" }, 400);
 				try {
 					const session = await resolveAuthorizedSession(loose(c), sessionFs, workspacePath);
-					if (session && sessionFs) {
-						if (threadId) {
-							const safePath = assertRelativePath(path, "path");
-							if (!(await listSessionFilesystemFiles(sessionFs.filesystem, session, threadId)).files.some((file) => file.path === safePath)) return c.json({ error: "Path is not available for this thread" }, 404);
-							return c.json(await readSessionWorkspaceFile(session, safePath, { allowUnapprovedPath: true }));
-						}
-						return c.json(await readSessionWorkspaceFile(session, path));
-					}
-					if (threadId) return c.json({ error: "Session workspace is not available" }, 403);
+					if (session && sessionFs) return c.json(await readSessionWorkspaceFile(session, path));
 					return c.json(await readWorkspaceFile(root, workspacePath, path));
 				} catch (error) {
 					const message = error instanceof Error ? error.message : String(error);
@@ -912,6 +1065,6 @@ function buildFsRoutes(options = {}) {
 	];
 }
 //#endregion
-export { buildFsRoutes, listArtifacts, listDirectory, listSessionFilesystemFiles, listSessionRenderedPath, listSessionWorkspaceChanges, listWorkspaceRenderedPath, parseWorkspaceChangeStats, parseWorkspaceChanges, parseWorkspaceTrackedChanges, readSessionWorkspaceDiff, readSessionWorkspaceFile, readWorkspaceFile, resolveCodebase, resolveFsRoot };
+export { buildFsRoutes, listArtifacts, listDirectory, listSessionRenderedPath, listSessionWorkspaceChanges, listSessionWorkspaceTree, listWorkspaceRenderedPath, parseWorkspaceChangeStats, parseWorkspaceChanges, parseWorkspaceTrackedChanges, readSessionWorkspaceDiff, readSessionWorkspaceFile, readWorkspaceFile, resolveCodebase, resolveFsRoot };
 
 //# sourceMappingURL=fs.js.map