@mastra/factory 0.24.0-alpha.9 → 0.24.0

package/dist/session/environment-state-processor.js.map

@@ -1 +1 @@
-{"version":3,"file":"environment-state-processor.js","names":[],"sources":["../../src/session/environment-state-processor.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\nimport type { ComputeStateSignalArgs, ComputeStateSignalResult, Processor } from '@mastra/core/processors';\nimport type { RequestContext } from '@mastra/core/request-context';\n\nconst STATE_ID = 'factory-environment';\n\nexport type EnvironmentRepositorySetupStatus = 'ok' | 'failed' | 'skipped';\n\n/** One repository of the booted environment as the agent is told about it: never a token or a clone URL. */\nexport interface SessionEnvironmentRepositoryState {\n  slug: string;\n  /** Absolute directory of the checkout under the workspace root. */\n  dir: string;\n  /** The branch the checkout ended on after boot; `null` when it stays detached. */\n  branch: string | null;\n  defaultBranch: string;\n  position: number;\n  /** `ok` ran or was already set up, `failed` exited non-zero, `skipped` has no setup command. */\n  setupStatus: EnvironmentRepositorySetupStatus;\n  /** The change request this session opened in the repository, once it has. */\n  changeRequestUrl?: string;\n}\n\nexport interface SessionEnvironmentState {\n  /** The workspace root, the session's working directory; repositories sit beneath it. */\n  workingDirectory: string;\n  repositories: SessionEnvironmentRepositoryState[];\n  /** One free-form line the boot wants the agent to know (never a credential), rendered last. */\n  note?: string;\n}\n\n// The boot records what it materialized, keyed by the factory session id (the\n// agent's resource id); the processor reads it on the next model step. Boot\n// runs on every sandbox start, so a replacement process re-learns the state\n// the first time the session's sandbox starts again.\nconst environments = new Map<string, { state: SessionEnvironmentState; teardown: SessionEnvironmentTeardown[] }>();\n\n/** A repository's teardown command and the directory it runs in; kept beside the state, never rendered. */\nexport interface SessionEnvironmentTeardown {\n  slug: string;\n  dir: string;\n  command: string;\n}\n\nexport function recordSessionEnvironment(\n  sessionId: string,\n  state: SessionEnvironmentState,\n  teardown: SessionEnvironmentTeardown[] = [],\n): void {\n  environments.set(sessionId, { state, teardown });\n}\n\n/**\n * Record what a source-control tool did in one environment repository (the\n * branch it pushed, the change request it opened) so the next signal snapshot\n * tells the agent. A no-op when the session's environment is not recorded in\n * this process or the slug is not part of it.\n */\nexport function updateSessionEnvironmentRepository(\n  sessionId: string,\n  slug: string,\n  patch: { branch?: string; changeRequestUrl?: string },\n): void {\n  const entry = environments.get(sessionId);\n  if (!entry) return;\n  const wanted = slug.toLowerCase();\n  const repositories = entry.state.repositories.map(repo => {\n    if (repo.slug.toLowerCase() !== wanted) return repo;\n    return {\n      ...repo,\n      ...(patch.branch !== undefined ? { branch: patch.branch } : {}),\n      ...(patch.changeRequestUrl !== undefined ? { changeRequestUrl: patch.changeRequestUrl } : {}),\n    };\n  });\n  entry.state = { ...entry.state, repositories };\n}\n\n/** Set or clear the environment's note; a no-op when the session's environment is not recorded here. */\nexport function setSessionEnvironmentNote(sessionId: string, note: string | null): void {\n  const entry = environments.get(sessionId);\n  if (!entry) return;\n  const { note: _previous, ...rest } = entry.state;\n  entry.state = note ? { ...rest, note } : rest;\n}\n\nexport function clearSessionEnvironment(sessionId: string): void {\n  environments.delete(sessionId);\n}\n\nexport function peekSessionEnvironment(sessionId: string): SessionEnvironmentState | undefined {\n  return environments.get(sessionId)?.state;\n}\n\n/** Teardown commands of the booted environment, in position order. */\nexport function peekSessionEnvironmentTeardown(sessionId: string): SessionEnvironmentTeardown[] {\n  return environments.get(sessionId)?.teardown ?? [];\n}\n\nexport function __clearSessionEnvironmentsForTests(): void {\n  environments.clear();\n}\n\nfunction escapeText(value: string): string {\n  return value.replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;');\n}\n\n// The session id is the controller's resource id. Unlike factory runs, a user\n// session carries no `factoryProjectId` in its controller state, and the\n// environment is recorded for both, so only the resource id is required.\nfunction sessionIdFromContext(requestContext: RequestContext | undefined): string | null {\n  if (!requestContext || typeof requestContext.get !== 'function') return null;\n  const controller = requestContext.get('controller') as { resourceId?: unknown } | undefined;\n  return typeof controller?.resourceId === 'string' && controller.resourceId ? controller.resourceId : null;\n}\n\nfunction environmentCacheKey(state: SessionEnvironmentState): string {\n  return `environment:${createHash('sha256').update(JSON.stringify(state)).digest('hex').slice(0, 16)}`;\n}\n\n/**\n * Tells the agent which repositories its sandbox holds and where: the\n * workspace root is the session's working directory and every environment\n * repository is a directory beneath it. Snapshot mode only; a new snapshot\n * is emitted when the booted set changes (a start after an environment edit).\n */\nexport class FactoryEnvironmentStateProcessor implements Processor<'factory-environment'> {\n  readonly id = STATE_ID;\n  readonly stateId = STATE_ID;\n\n  async computeStateSignal(args: ComputeStateSignalArgs): Promise<ComputeStateSignalResult> {\n    const sessionId = sessionIdFromContext(args.requestContext);\n    if (!sessionId) return;\n    const state = environments.get(sessionId)?.state;\n    if (!state) return;\n    const cacheKey = environmentCacheKey(state);\n    const hasBase = Boolean(args.lastSnapshot) && args.contextWindow.hasSnapshot;\n    if (hasBase && (args.tracking?.currentCacheKey ?? args.lastSnapshot?.metadata?.state?.cacheKey) === cacheKey)\n      return;\n    const lines = state.repositories.map(\n      repo =>\n        `${repo.position}. ${escapeText(repo.slug)} at ${escapeText(repo.dir)} on ${escapeText(repo.branch ?? '(detached)')} (default ${escapeText(repo.defaultBranch)}, setup ${repo.setupStatus})` +\n        (repo.changeRequestUrl ? `, change request ${escapeText(repo.changeRequestUrl)}` : ''),\n    );\n    const only = state.repositories.length === 1 ? state.repositories[0] : undefined;\n    const contents =\n      (only\n        ? `Factory environment: 1 repository, ${escapeText(only.slug)} at ${escapeText(only.dir)}, your working directory.\\n`\n        : `Factory environment: ${state.repositories.length} repositories under ${escapeText(state.workingDirectory)}, your working directory.\\n`) +\n      lines.join('\\n') +\n      (only ? '' : '\\nRun git and project commands inside the repository directory they belong to.') +\n      (state.note ? `\\n${escapeText(state.note)}` : '');\n    return {\n      id: STATE_ID,\n      cacheKey,\n      mode: 'snapshot',\n      tagName: 'factory-environment',\n      contents,\n      value: { environment: state },\n      attributes: { workingDirectory: only?.dir ?? state.workingDirectory, repositories: state.repositories.length },\n      metadata: { value: { environment: state } },\n    };\n  }\n}\n"],"mappings":";;AAIA,MAAM,WAAW;AA+BjB,MAAM,+BAAe,IAAI,IAAwF;AASjH,SAAgB,yBACd,WACA,OACA,WAAyC,CAAC,GACpC;CACN,aAAa,IAAI,WAAW;EAAE;EAAO;CAAS,CAAC;AACjD;;;;;;;AAQA,SAAgB,mCACd,WACA,MACA,OACM;CACN,MAAM,QAAQ,aAAa,IAAI,SAAS;CACxC,IAAI,CAAC,OAAO;CACZ,MAAM,SAAS,KAAK,YAAY;CAChC,MAAM,eAAe,MAAM,MAAM,aAAa,KAAI,SAAQ;EACxD,IAAI,KAAK,KAAK,YAAY,MAAM,QAAQ,OAAO;EAC/C,OAAO;GACL,GAAG;GACH,GAAI,MAAM,WAAW,KAAA,IAAY,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;GAC7D,GAAI,MAAM,qBAAqB,KAAA,IAAY,EAAE,kBAAkB,MAAM,iBAAiB,IAAI,CAAC;EAC7F;CACF,CAAC;CACD,MAAM,QAAQ;EAAE,GAAG,MAAM;EAAO;CAAa;AAC/C;;AAGA,SAAgB,0BAA0B,WAAmB,MAA2B;CACtF,MAAM,QAAQ,aAAa,IAAI,SAAS;CACxC,IAAI,CAAC,OAAO;CACZ,MAAM,EAAE,MAAM,WAAW,GAAG,SAAS,MAAM;CAC3C,MAAM,QAAQ,OAAO;EAAE,GAAG;EAAM;CAAK,IAAI;AAC3C;AAEA,SAAgB,wBAAwB,WAAyB;CAC/D,aAAa,OAAO,SAAS;AAC/B;AAEA,SAAgB,uBAAuB,WAAwD;CAC7F,OAAO,aAAa,IAAI,SAAS,CAAC,EAAE;AACtC;;AAGA,SAAgB,+BAA+B,WAAiD;CAC9F,OAAO,aAAa,IAAI,SAAS,CAAC,EAAE,YAAY,CAAC;AACnD;AAEA,SAAgB,qCAA2C;CACzD,aAAa,MAAM;AACrB;AAEA,SAAS,WAAW,OAAuB;CACzC,OAAO,MAAM,WAAW,KAAK,OAAO,CAAC,CAAC,WAAW,KAAK,MAAM,CAAC,CAAC,WAAW,KAAK,MAAM;AACtF;AAKA,SAAS,qBAAqB,gBAA2D;CACvF,IAAI,CAAC,kBAAkB,OAAO,eAAe,QAAQ,YAAY,OAAO;CACxE,MAAM,aAAa,eAAe,IAAI,YAAY;CAClD,OAAO,OAAO,YAAY,eAAe,YAAY,WAAW,aAAa,WAAW,aAAa;AACvG;AAEA,SAAS,oBAAoB,OAAwC;CACnE,OAAO,eAAe,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,UAAU,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;AACpG;;;;;;;AAQA,IAAa,mCAAb,MAA0F;CACxF,KAAc;CACd,UAAmB;CAEnB,MAAM,mBAAmB,MAAiE;EACxF,MAAM,YAAY,qBAAqB,KAAK,cAAc;EAC1D,IAAI,CAAC,WAAW;EAChB,MAAM,QAAQ,aAAa,IAAI,SAAS,CAAC,EAAE;EAC3C,IAAI,CAAC,OAAO;EACZ,MAAM,WAAW,oBAAoB,KAAK;EAE1C,IADgB,QAAQ,KAAK,YAAY,KAAK,KAAK,cAAc,gBACjD,KAAK,UAAU,mBAAmB,KAAK,cAAc,UAAU,OAAO,cAAc,UAClG;EACF,MAAM,QAAQ,MAAM,aAAa,KAC/B,SACE,GAAG,KAAK,SAAS,IAAI,WAAW,KAAK,IAAI,EAAE,MAAM,WAAW,KAAK,GAAG,EAAE,MAAM,WAAW,KAAK,UAAU,YAAY,EAAE,YAAY,WAAW,KAAK,aAAa,EAAE,UAAU,KAAK,YAAY,MACzL,KAAK,mBAAmB,oBAAoB,WAAW,KAAK,gBAAgB,MAAM,GACvF;EACA,MAAM,OAAO,MAAM,aAAa,WAAW,IAAI,MAAM,aAAa,KAAK,KAAA;EACvE,MAAM,YACH,OACG,sCAAsC,WAAW,KAAK,IAAI,EAAE,MAAM,WAAW,KAAK,GAAG,EAAE,+BACvF,wBAAwB,MAAM,aAAa,OAAO,sBAAsB,WAAW,MAAM,gBAAgB,EAAE,gCAC/G,MAAM,KAAK,IAAI,KACd,OAAO,KAAK,qFACZ,MAAM,OAAO,KAAK,WAAW,MAAM,IAAI,MAAM;EAChD,OAAO;GACL,IAAI;GACJ;GACA,MAAM;GACN,SAAS;GACT;GACA,OAAO,EAAE,aAAa,MAAM;GAC5B,YAAY;IAAE,kBAAkB,MAAM,OAAO,MAAM;IAAkB,cAAc,MAAM,aAAa;GAAO;GAC7G,UAAU,EAAE,OAAO,EAAE,aAAa,MAAM,EAAE;EAC5C;CACF;AACF"}
+{"version":3,"file":"environment-state-processor.js","names":[],"sources":["../../src/session/environment-state-processor.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\nimport type { ComputeStateSignalArgs, ComputeStateSignalResult, Processor } from '@mastra/core/processors';\nimport type { RequestContext } from '@mastra/core/request-context';\n\nconst STATE_ID = 'factory-environment';\n\nexport type EnvironmentRepositorySetupStatus = 'ok' | 'failed' | 'skipped';\n\n/** One repository of the booted environment as the agent is told about it: never a token or a clone URL. */\nexport interface SessionEnvironmentRepositoryState {\n  slug: string;\n  /** Absolute directory of the checkout under the workspace root. */\n  dir: string;\n  /** The branch the checkout ended on after boot; `null` when it stays detached. */\n  branch: string | null;\n  defaultBranch: string;\n  position: number;\n  /** `ok` ran or was already set up, `failed` exited non-zero, `skipped` has no setup command. */\n  setupStatus: EnvironmentRepositorySetupStatus;\n  /** The change request this session opened in the repository, once it has. */\n  changeRequestUrl?: string;\n}\n\nexport interface SessionEnvironmentState {\n  /** The workspace root, the session's working directory; repositories sit beneath it. */\n  workingDirectory: string;\n  repositories: SessionEnvironmentRepositoryState[];\n  /** One free-form line the boot wants the agent to know (never a credential), rendered last. */\n  note?: string;\n}\n\n// The boot records what it materialized, keyed by the factory session id (the\n// agent's resource id); the processor reads it on the next model step. Boot\n// runs on every sandbox start, so a replacement process re-learns the state\n// the first time the session's sandbox starts again.\nconst environments = new Map<string, { state: SessionEnvironmentState; teardown: SessionEnvironmentTeardown[] }>();\n\n/** A repository's teardown command and the directory it runs in; kept beside the state, never rendered. */\nexport interface SessionEnvironmentTeardown {\n  slug: string;\n  dir: string;\n  command: string;\n}\n\nexport function recordSessionEnvironment(\n  sessionId: string,\n  state: SessionEnvironmentState,\n  teardown: SessionEnvironmentTeardown[] = [],\n): void {\n  environments.set(sessionId, { state, teardown });\n}\n\n/**\n * Record what a source-control tool did in one environment repository (the\n * branch it pushed, the change request it opened) so the next signal snapshot\n * tells the agent. A no-op when the session's environment is not recorded in\n * this process or the slug is not part of it.\n */\nexport function updateSessionEnvironmentRepository(\n  sessionId: string,\n  slug: string,\n  patch: { branch?: string; changeRequestUrl?: string },\n): void {\n  const entry = environments.get(sessionId);\n  if (!entry) return;\n  const wanted = slug.toLowerCase();\n  const repositories = entry.state.repositories.map(repo => {\n    if (repo.slug.toLowerCase() !== wanted) return repo;\n    return {\n      ...repo,\n      ...(patch.branch !== undefined ? { branch: patch.branch } : {}),\n      ...(patch.changeRequestUrl !== undefined ? { changeRequestUrl: patch.changeRequestUrl } : {}),\n    };\n  });\n  entry.state = { ...entry.state, repositories };\n}\n\n/** Set or clear the environment's note; a no-op when the session's environment is not recorded here. */\nexport function setSessionEnvironmentNote(sessionId: string, note: string | null): void {\n  const entry = environments.get(sessionId);\n  if (!entry) return;\n  const { note: _previous, ...rest } = entry.state;\n  entry.state = note ? { ...rest, note } : rest;\n}\n\nexport function clearSessionEnvironment(sessionId: string): void {\n  environments.delete(sessionId);\n}\n\nexport function peekSessionEnvironment(sessionId: string): SessionEnvironmentState | undefined {\n  return environments.get(sessionId)?.state;\n}\n\n/** Teardown commands of the booted environment, in position order. */\nexport function peekSessionEnvironmentTeardown(sessionId: string): SessionEnvironmentTeardown[] {\n  return environments.get(sessionId)?.teardown ?? [];\n}\n\nexport function __clearSessionEnvironmentsForTests(): void {\n  environments.clear();\n}\n\nfunction escapeText(value: string): string {\n  return value.replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;');\n}\n\n// Unlike factory runs, a user session carries no `factoryProjectId` in its\n// controller state, and the environment is recorded for both, so only the\n// session id is required.\nfunction sessionIdFromContext(requestContext: RequestContext | undefined): string | null {\n  if (!requestContext || typeof requestContext.get !== 'function') return null;\n  const controller = requestContext.get('controller') as { sessionId?: unknown } | undefined;\n  return typeof controller?.sessionId === 'string' && controller.sessionId ? controller.sessionId : null;\n}\n\nfunction environmentCacheKey(state: SessionEnvironmentState): string {\n  return `environment:${createHash('sha256').update(JSON.stringify(state)).digest('hex').slice(0, 16)}`;\n}\n\n/**\n * Tells the agent which repositories its sandbox holds and where: the\n * workspace root is the session's working directory and every environment\n * repository is a directory beneath it. Snapshot mode only; a new snapshot\n * is emitted when the booted set changes (a start after an environment edit).\n */\nexport class FactoryEnvironmentStateProcessor implements Processor<'factory-environment'> {\n  readonly id = STATE_ID;\n  readonly stateId = STATE_ID;\n\n  async computeStateSignal(args: ComputeStateSignalArgs): Promise<ComputeStateSignalResult> {\n    const sessionId = sessionIdFromContext(args.requestContext);\n    if (!sessionId) return;\n    const state = environments.get(sessionId)?.state;\n    if (!state) return;\n    const cacheKey = environmentCacheKey(state);\n    const hasBase = Boolean(args.lastSnapshot) && args.contextWindow.hasSnapshot;\n    if (hasBase && (args.tracking?.currentCacheKey ?? args.lastSnapshot?.metadata?.state?.cacheKey) === cacheKey)\n      return;\n    const lines = state.repositories.map(\n      repo =>\n        `${repo.position}. ${escapeText(repo.slug)} at ${escapeText(repo.dir)} on ${escapeText(repo.branch ?? '(detached)')} (default ${escapeText(repo.defaultBranch)}, setup ${repo.setupStatus})` +\n        (repo.changeRequestUrl ? `, change request ${escapeText(repo.changeRequestUrl)}` : ''),\n    );\n    const only = state.repositories.length === 1 ? state.repositories[0] : undefined;\n    const contents =\n      (only\n        ? `Factory environment: 1 repository, ${escapeText(only.slug)} at ${escapeText(only.dir)}, your working directory.\\n`\n        : `Factory environment: ${state.repositories.length} repositories under ${escapeText(state.workingDirectory)}, your working directory.\\n`) +\n      lines.join('\\n') +\n      (only ? '' : '\\nRun git and project commands inside the repository directory they belong to.') +\n      (state.note ? `\\n${escapeText(state.note)}` : '');\n    return {\n      id: STATE_ID,\n      cacheKey,\n      mode: 'snapshot',\n      tagName: 'factory-environment',\n      contents,\n      value: { environment: state },\n      attributes: { workingDirectory: only?.dir ?? state.workingDirectory, repositories: state.repositories.length },\n      metadata: { value: { environment: state } },\n    };\n  }\n}\n"],"mappings":";;AAIA,MAAM,WAAW;AA+BjB,MAAM,+BAAe,IAAI,IAAwF;AASjH,SAAgB,yBACd,WACA,OACA,WAAyC,CAAC,GACpC;CACN,aAAa,IAAI,WAAW;EAAE;EAAO;CAAS,CAAC;AACjD;;;;;;;AAQA,SAAgB,mCACd,WACA,MACA,OACM;CACN,MAAM,QAAQ,aAAa,IAAI,SAAS;CACxC,IAAI,CAAC,OAAO;CACZ,MAAM,SAAS,KAAK,YAAY;CAChC,MAAM,eAAe,MAAM,MAAM,aAAa,KAAI,SAAQ;EACxD,IAAI,KAAK,KAAK,YAAY,MAAM,QAAQ,OAAO;EAC/C,OAAO;GACL,GAAG;GACH,GAAI,MAAM,WAAW,KAAA,IAAY,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;GAC7D,GAAI,MAAM,qBAAqB,KAAA,IAAY,EAAE,kBAAkB,MAAM,iBAAiB,IAAI,CAAC;EAC7F;CACF,CAAC;CACD,MAAM,QAAQ;EAAE,GAAG,MAAM;EAAO;CAAa;AAC/C;;AAGA,SAAgB,0BAA0B,WAAmB,MAA2B;CACtF,MAAM,QAAQ,aAAa,IAAI,SAAS;CACxC,IAAI,CAAC,OAAO;CACZ,MAAM,EAAE,MAAM,WAAW,GAAG,SAAS,MAAM;CAC3C,MAAM,QAAQ,OAAO;EAAE,GAAG;EAAM;CAAK,IAAI;AAC3C;AAEA,SAAgB,wBAAwB,WAAyB;CAC/D,aAAa,OAAO,SAAS;AAC/B;AAEA,SAAgB,uBAAuB,WAAwD;CAC7F,OAAO,aAAa,IAAI,SAAS,CAAC,EAAE;AACtC;;AAGA,SAAgB,+BAA+B,WAAiD;CAC9F,OAAO,aAAa,IAAI,SAAS,CAAC,EAAE,YAAY,CAAC;AACnD;AAEA,SAAgB,qCAA2C;CACzD,aAAa,MAAM;AACrB;AAEA,SAAS,WAAW,OAAuB;CACzC,OAAO,MAAM,WAAW,KAAK,OAAO,CAAC,CAAC,WAAW,KAAK,MAAM,CAAC,CAAC,WAAW,KAAK,MAAM;AACtF;AAKA,SAAS,qBAAqB,gBAA2D;CACvF,IAAI,CAAC,kBAAkB,OAAO,eAAe,QAAQ,YAAY,OAAO;CACxE,MAAM,aAAa,eAAe,IAAI,YAAY;CAClD,OAAO,OAAO,YAAY,cAAc,YAAY,WAAW,YAAY,WAAW,YAAY;AACpG;AAEA,SAAS,oBAAoB,OAAwC;CACnE,OAAO,eAAe,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,UAAU,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;AACpG;;;;;;;AAQA,IAAa,mCAAb,MAA0F;CACxF,KAAc;CACd,UAAmB;CAEnB,MAAM,mBAAmB,MAAiE;EACxF,MAAM,YAAY,qBAAqB,KAAK,cAAc;EAC1D,IAAI,CAAC,WAAW;EAChB,MAAM,QAAQ,aAAa,IAAI,SAAS,CAAC,EAAE;EAC3C,IAAI,CAAC,OAAO;EACZ,MAAM,WAAW,oBAAoB,KAAK;EAE1C,IADgB,QAAQ,KAAK,YAAY,KAAK,KAAK,cAAc,gBACjD,KAAK,UAAU,mBAAmB,KAAK,cAAc,UAAU,OAAO,cAAc,UAClG;EACF,MAAM,QAAQ,MAAM,aAAa,KAC/B,SACE,GAAG,KAAK,SAAS,IAAI,WAAW,KAAK,IAAI,EAAE,MAAM,WAAW,KAAK,GAAG,EAAE,MAAM,WAAW,KAAK,UAAU,YAAY,EAAE,YAAY,WAAW,KAAK,aAAa,EAAE,UAAU,KAAK,YAAY,MACzL,KAAK,mBAAmB,oBAAoB,WAAW,KAAK,gBAAgB,MAAM,GACvF;EACA,MAAM,OAAO,MAAM,aAAa,WAAW,IAAI,MAAM,aAAa,KAAK,KAAA;EACvE,MAAM,YACH,OACG,sCAAsC,WAAW,KAAK,IAAI,EAAE,MAAM,WAAW,KAAK,GAAG,EAAE,+BACvF,wBAAwB,MAAM,aAAa,OAAO,sBAAsB,WAAW,MAAM,gBAAgB,EAAE,gCAC/G,MAAM,KAAK,IAAI,KACd,OAAO,KAAK,qFACZ,MAAM,OAAO,KAAK,WAAW,MAAM,IAAI,MAAM;EAChD,OAAO;GACL,IAAI;GACJ;GACA,MAAM;GACN,SAAS;GACT;GACA,OAAO,EAAE,aAAa,MAAM;GAC5B,YAAY;IAAE,kBAAkB,MAAM,OAAO,MAAM;IAAkB,cAAc,MAAM,aAAa;GAAO;GAC7G,UAAU,EAAE,OAAO,EAAE,aAAa,MAAM,EAAE;EAC5C;CACF;AACF"}

package/dist/session/filesystem-capture.d.ts

@@ -17,7 +17,7 @@ export declare const ROOT_FILES_LIST_COMMAND: string;
 export declare function touchStamp(date: Date): string;
 export interface FilesystemCaptureSession {
     readonly identity: {
-        getResourceId(): string;
+        getId(): string;
     };
     readonly thread: {
         requireId(): string;
@@ -36,7 +36,7 @@ export interface FilesystemCaptureDependencies {
 }
 export declare function parseFilesystemCaptureFiles(output: string): FilesystemFile[];
 export declare function captureSessionFilesystem(session: FilesystemCaptureSession, { filesystem, sourceControl }: FilesystemCaptureDependencies, ids?: {
-    resourceId: string;
+    sessionId: string;
     threadId: string;
 }): Promise<void>;
 /**
@@ -45,6 +45,6 @@ export declare function captureSessionFilesystem(session: FilesystemCaptureSessi
  * never blocked by the execs' worst-case 30s timeouts. Never rejects: the
  * capture body is fully try/catch contained.
  */
-export declare function waitForPendingFilesystemCapture(resourceId: string, timeoutMs?: number): Promise<void>;
+export declare function waitForPendingFilesystemCapture(sessionId: string, timeoutMs?: number): Promise<void>;
 export declare function observeSessionFilesystem(session: FilesystemCaptureSession, dependencies: FilesystemCaptureDependencies): () => void;
 //# sourceMappingURL=filesystem-capture.d.ts.map

package/dist/session/filesystem-capture.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"filesystem-capture.d.ts","sourceRoot":"","sources":["../../src/session/filesystem-capture.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AACzG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAI/D,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AAmB5F;;;;;;;;;GASG;AACH,eAAO,MAAM,uBAAuB,QAIzB,CAAC;AAEZ,4CAA4C;AAC5C,wBAAgB,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAM7C;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE;QAAE,aAAa,IAAI,MAAM,CAAA;KAAE,CAAC;IAC/C,QAAQ,CAAC,MAAM,EAAE;QAAE,SAAS,IAAI,MAAM,CAAA;KAAE,CAAC;IACzC,YAAY,IAAI;QAAE,OAAO,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAA;KAAE,GAAG,SAAS,CAAC;IACnF,gBAAgB,CAAC,QAAQ,EAAE,6BAA6B,GAAG,MAAM,IAAI,CAAC;IACtE,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CACxE;AAED,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,IAAI,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC;IACpD,aAAa,EAAE;QACb,QAAQ,EAAE,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,CAAC;KAC1E,CAAC;CACH;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,EAAE,CAS5E;AAED,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,wBAAwB,EACjC,EAAE,UAAU,EAAE,aAAa,EAAE,EAAE,6BAA6B,EAC5D,GAAG,CAAC,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC7C,OAAO,CAAC,IAAI,CAAC,CAkHf;AAYD;;;;;GAKG;AACH,wBAAsB,+BAA+B,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAsB3G;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,wBAAwB,EACjC,YAAY,EAAE,6BAA6B,GAC1C,MAAM,IAAI,CA2FZ"}
+{"version":3,"file":"filesystem-capture.d.ts","sourceRoot":"","sources":["../../src/session/filesystem-capture.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AACzG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAI/D,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AAmB5F;;;;;;;;;GASG;AACH,eAAO,MAAM,uBAAuB,QAIzB,CAAC;AAEZ,4CAA4C;AAC5C,wBAAgB,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAM7C;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE;QAAE,KAAK,IAAI,MAAM,CAAA;KAAE,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE;QAAE,SAAS,IAAI,MAAM,CAAA;KAAE,CAAC;IACzC,YAAY,IAAI;QAAE,OAAO,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAA;KAAE,GAAG,SAAS,CAAC;IACnF,gBAAgB,CAAC,QAAQ,EAAE,6BAA6B,GAAG,MAAM,IAAI,CAAC;IACtE,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CACxE;AAED,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,IAAI,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC;IACpD,aAAa,EAAE;QACb,QAAQ,EAAE,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,CAAC;KAC1E,CAAC;CACH;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,EAAE,CAS5E;AAED,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,wBAAwB,EACjC,EAAE,UAAU,EAAE,aAAa,EAAE,EAAE,6BAA6B,EAC5D,GAAG,CAAC,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC5C,OAAO,CAAC,IAAI,CAAC,CAoHf;AAWD;;;;;GAKG;AACH,wBAAsB,+BAA+B,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAsB1G;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,wBAAwB,EACjC,YAAY,EAAE,6BAA6B,GAC1C,MAAM,IAAI,CAwFZ"}

package/dist/session/filesystem-capture.js

@@ -48,9 +48,9 @@ function parseFilesystemCaptureFiles(output) {
 }
 async function captureSessionFilesystem(session, { filesystem, sourceControl }, ids) {
 	try {
-		const resourceId = ids?.resourceId ?? session.identity.getResourceId();
+		const sessionId = ids?.sessionId ?? session.identity.getId();
 		const threadId = ids?.threadId ?? session.thread.requireId();
-		const sourceSession = await sourceControl.sessions.getBySessionId(resourceId);
+		const sourceSession = await sourceControl.sessions.getBySessionId(sessionId);
 		const sandbox = session.getWorkspace()?.sandbox;
 		if (!sourceSession || !sandbox?.executeCommand) return;
 		const entry = peekSessionSandbox(sourceSession.id);
@@ -120,7 +120,7 @@ async function captureSessionFilesystem(session, { filesystem, sourceControl },
 			}
 		}
 		await filesystem.replaceFiles({
-			resourceId,
+			resourceId: sessionId,
 			threadId,
 			files: [...files.values()].toSorted((a, b) => a.path.localeCompare(b.path))
 		});
@@ -129,11 +129,10 @@ async function captureSessionFilesystem(session, { filesystem, sourceControl },
 	}
 }
 /**
-* In-flight capture chains keyed by session resource id. Serves two purposes:
-* readers of the persisted file listing (the /web/workspace routes) await the
-* capture for the turn that just ended instead of racing it, and captures for
-* the same resource stay sequential (last write wins) even when multiple
-* scoped sessions observe the same resource id. In-process only: the factory
+* In-flight capture chains keyed by session id. Serves two purposes: readers
+* of the persisted file listing (the /web/workspace routes) await the capture
+* for the turn that just ended instead of racing it, and captures for the same
+* session stay sequential (last write wins). In-process only: the factory
 * server that runs the session controller also serves those routes.
 */
 const pendingCaptures = /* @__PURE__ */ new Map();
@@ -143,8 +142,8 @@ const pendingCaptures = /* @__PURE__ */ new Map();
 * never blocked by the execs' worst-case 30s timeouts. Never rejects: the
 * capture body is fully try/catch contained.
 */
-async function waitForPendingFilesystemCapture(resourceId, timeoutMs = 1e4) {
-	let pending = pendingCaptures.get(resourceId);
+async function waitForPendingFilesystemCapture(sessionId, timeoutMs = 1e4) {
+	let pending = pendingCaptures.get(sessionId);
 	if (!pending) return;
 	let timer;
 	let timedOut = false;
@@ -157,7 +156,7 @@ async function waitForPendingFilesystemCapture(resourceId, timeoutMs = 1e4) {
 	try {
 		while (pending && !timedOut) {
 			await Promise.race([pending, deadline]);
-			const next = pendingCaptures.get(resourceId);
+			const next = pendingCaptures.get(sessionId);
 			pending = next === pending ? void 0 : next;
 		}
 	} finally {
@@ -197,9 +196,9 @@ function observeSessionFilesystem(session, dependencies) {
 	const unsubscribeEnd = session.onBeforeAgentEnd(() => {
 		if (!workspaceTouched) return;
 		workspaceTouched = false;
-		let resourceId;
+		let sessionId;
 		try {
-			resourceId = session.identity.getResourceId();
+			sessionId = session.identity.getId();
 		} catch {
 			fallbackChain = fallbackChain.then(() => captureSessionFilesystem(session, dependencies));
 			return;
@@ -211,13 +210,13 @@ function observeSessionFilesystem(session, dependencies) {
 			return;
 		}
 		const ids = {
-			resourceId,
+			sessionId,
 			threadId
 		};
-		const chain = (pendingCaptures.get(resourceId) ?? Promise.resolve()).then(() => captureSessionFilesystem(session, dependencies, ids));
-		pendingCaptures.set(resourceId, chain);
+		const chain = (pendingCaptures.get(sessionId) ?? Promise.resolve()).then(() => captureSessionFilesystem(session, dependencies, ids));
+		pendingCaptures.set(sessionId, chain);
 		chain.finally(() => {
-			if (pendingCaptures.get(resourceId) === chain) pendingCaptures.delete(resourceId);
+			if (pendingCaptures.get(sessionId) === chain) pendingCaptures.delete(sessionId);
 		});
 	});
 	return () => {

package/dist/session/filesystem-capture.js.map

@@ -1 +1 @@
-{"version":3,"file":"filesystem-capture.js","names":[],"sources":["../../src/session/filesystem-capture.ts"],"sourcesContent":["import type { AgentControllerEvent, SessionBeforeAgentEndListener } from '@mastra/core/agent-controller';\nimport type { WorkspaceSandbox } from '@mastra/core/workspace';\nimport { peekSessionSandbox, sessionLayout } from '../sandbox/session-sandbox.js';\nimport type { SessionLayoutRepository } from '../sandbox/session-sandbox.js';\n\nimport type { FilesystemFile, FilesystemStorage } from '../storage/domains/filesystem/base.js';\nimport type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\nimport { peekSessionEnvironment } from './environment-state-processor.js';\nimport { isMeaningfulToolName } from './first-exec-capture.js';\n\n/** Exit code of `GIT_CHANGED_FILES_SCRIPT` when the checkout is not there: the repository is skipped, not failed. */\nconst CHECKOUT_MISSING_EXIT_CODE = 3;\nconst GIT_CHANGED_FILES_SCRIPT = `\nset -e\nworkdir=$1\nbase_branch=$2\ntest -d \"$workdir\" || exit ${CHECKOUT_MISSING_EXIT_CODE}\nbase=HEAD\nif merge_base=$(git -C \"$workdir\" merge-base HEAD \"origin/$base_branch\" 2>/dev/null); then\n  base=$merge_base\nfi\ngit -C \"$workdir\" diff --name-only -z --find-renames --diff-filter=ACMRTUXB \"$base\"\ngit -C \"$workdir\" ls-files --others --exclude-standard -z\n`;\nconst ARTIFACTS_LIST_COMMAND = 'cd \"$1\" && test -d .artifacts && find .artifacts -type f -print0 || true';\n/**\n * Regular files directly under the workspace root written since the session\n * was created ($2 is a UTC `touch -t` stamp, `YYYYMMDDhhmm.SS`), such as the\n * agent's notes. Files the template shipped with predate the session and stay\n * out; the checkouts are covered by git. Dotfiles are never listed: a listed\n * path becomes readable through the thread's file route, and the root is where\n * setup leaves `.env`, `.pgpass`, `.netrc` and other credential files.\n * `touch -t` plus `-newer` works on GNU and BSD find alike; `-newermt\n * \"@epoch\"` is GNU only.\n */\nexport const ROOT_FILES_LIST_COMMAND = [\n  'cd \"$1\" && ref=$(mktemp) && TZ=UTC touch -t \"$2\" \"$ref\"',\n  '&& find . -mindepth 1 -maxdepth 1 -type f ! -name \\'.*\\' -newer \"$ref\" -print0',\n  '; status=$?; rm -f \"$ref\"; exit $status',\n].join(' ');\n\n/** `touch -t` stamp of a moment, in UTC. */\nexport function touchStamp(date: Date): string {\n  const two = (value: number) => String(value).padStart(2, '0');\n  return (\n    `${date.getUTCFullYear()}${two(date.getUTCMonth() + 1)}${two(date.getUTCDate())}` +\n    `${two(date.getUTCHours())}${two(date.getUTCMinutes())}.${two(date.getUTCSeconds())}`\n  );\n}\n\nexport interface FilesystemCaptureSession {\n  readonly identity: { getResourceId(): string };\n  readonly thread: { requireId(): string };\n  getWorkspace(): { sandbox?: Pick<WorkspaceSandbox, 'executeCommand'> } | undefined;\n  onBeforeAgentEnd(listener: SessionBeforeAgentEndListener): () => void;\n  subscribe(listener: (event: AgentControllerEvent) => void): () => void;\n}\n\nexport interface FilesystemCaptureDependencies {\n  filesystem: Pick<FilesystemStorage, 'replaceFiles'>;\n  sourceControl: {\n    sessions: Pick<SourceControlStorageHandle['sessions'], 'getBySessionId'>;\n  };\n}\n\nexport function parseFilesystemCaptureFiles(output: string): FilesystemFile[] {\n  const files = new Map<string, FilesystemFile>();\n  for (const record of output.split('\\0')) {\n    if (!record) continue;\n    const path = record.replace(/^\\.\\//, '');\n    if (path) files.set(path, { path });\n  }\n\n  return [...files.values()].toSorted((a, b) => a.path.localeCompare(b.path));\n}\n\nexport async function captureSessionFilesystem(\n  session: FilesystemCaptureSession,\n  { filesystem, sourceControl }: FilesystemCaptureDependencies,\n  ids?: { resourceId: string; threadId: string },\n): Promise<void> {\n  try {\n    // Scheduled captures pass ids read at schedule time: a session deleted\n    // before the queued capture runs has already cleared its thread.\n    const resourceId = ids?.resourceId ?? session.identity.getResourceId();\n    const threadId = ids?.threadId ?? session.thread.requireId();\n    const sourceSession = await sourceControl.sessions.getBySessionId(resourceId);\n    // Chat-only sessions run without a workspace; there is nothing to capture.\n    const sandbox = session.getWorkspace()?.sandbox;\n    if (!sourceSession || !sandbox?.executeCommand) return;\n    // The live workdir comes from the per-process memo (the deterministic\n    // truth) ONLY — never the persisted observability column, which a row\n    // written under a previous provider can point at a workdir that no\n    // longer exists (the stale-workdir incident class). No memo entry means\n    // no live sandbox worth capturing in this replica; capture is\n    // best-effort telemetry, so skip.\n    const entry = peekSessionSandbox(sourceSession.id);\n    if (!entry) return;\n    // Telemetry must never provision a VM: executeCommand lazily starts the\n    // sandbox via ensureRunning, so a chat turn that never touched the\n    // workspace would otherwise boot (and clone into) a fresh VM just to\n    // capture an empty git status. Only capture when the turn already has a\n    // running sandbox.\n    if (entry.sandbox.status !== 'running') return;\n    // Running-but-unresolved should not happen (the start hook resolves the\n    // workdir), but capture is best-effort: skip rather than guess.\n    const layout = sessionLayout(entry);\n    if (!layout) return;\n\n    // One git pass per checkout, in parallel so three repositories stay well\n    // inside the 10 s readers wait for a pending capture. The session's own\n    // repository compares against the session base branch; the others sit on\n    // their default branch and compare against that. A repository whose\n    // checkout is missing (exit 3) is skipped: it has nothing to list and\n    // must not block the others. Any other failure is treated as transient\n    // and leaves the previous listing in place.\n    const multiRepo = layout.repos.length > 1;\n    const environment = multiRepo ? peekSessionEnvironment(sourceSession.sessionId) : undefined;\n    const ownRepo = entry.ownRepo.toLowerCase();\n    // The boot records the state at its end, after every setup command; until\n    // then a secondary checkout compares against its own `origin/HEAD`.\n    const baseBranchFor = (repo: SessionLayoutRepository): string => {\n      if (repo.slug.toLowerCase() === ownRepo) return sourceSession.baseBranch;\n      const state = environment?.repositories.find(\n        candidate => candidate.slug.toLowerCase() === repo.slug.toLowerCase(),\n      );\n      return state?.defaultBranch ?? 'HEAD';\n    };\n    const targets = layout.repos.map(repo => ({ repo, baseBranch: baseBranchFor(repo) }));\n    const executeCommand = sandbox.executeCommand.bind(sandbox);\n    const results = await Promise.all(\n      targets.map(({ repo, baseBranch }) =>\n        executeCommand('sh', ['-c', GIT_CHANGED_FILES_SCRIPT, 'mastracode-changed-files', repo.dir, baseBranch], {\n          timeout: 30_000,\n        }),\n      ),\n    );\n    const files = new Map<string, FilesystemFile>();\n    let captured = 0;\n    for (const [index, result] of results.entries()) {\n      if (result.exitCode === CHECKOUT_MISSING_EXIT_CODE) continue;\n      if (result.exitCode !== 0) {\n        console.warn('[Factory filesystem capture] Unable to inspect Git changes.', result.stderr);\n        return;\n      }\n      captured += 1;\n      const prefix = targets[index]!.repo.prefix;\n      for (const file of parseFilesystemCaptureFiles(result.stdout)) {\n        files.set(`${prefix}${file.path}`, { path: `${prefix}${file.path}` });\n      }\n    }\n    if (captured === 0) return;\n\n    const artifacts = await executeCommand('sh', ['-c', ARTIFACTS_LIST_COMMAND, 'sh', layout.root], {\n      timeout: 30_000,\n    });\n    if (artifacts.exitCode !== 0) {\n      console.warn('[Factory filesystem capture] Unable to list workspace artifacts.', artifacts.stderr);\n      return;\n    }\n    for (const path of artifacts.stdout.split('\\0')) {\n      const normalizedPath = path.replace(/^\\.\\//, '');\n      if (normalizedPath) {\n        files.set(normalizedPath, { path: normalizedPath });\n      }\n    }\n\n    // With several checkouts the root is a plain directory nothing else lists.\n    // A failed listing is logged and the git and artifact results still land.\n    if (multiRepo) {\n      const since = touchStamp(sourceSession.createdAt);\n      const rootFiles = await executeCommand('sh', ['-c', ROOT_FILES_LIST_COMMAND, 'sh', layout.root, since], {\n        timeout: 30_000,\n      });\n      if (rootFiles.exitCode !== 0) {\n        console.warn('[Factory filesystem capture] Unable to list workspace root files.', rootFiles.stderr);\n      } else {\n        for (const path of rootFiles.stdout.split('\\0')) {\n          const normalizedPath = path.replace(/^\\.\\//, '');\n          if (normalizedPath && !normalizedPath.startsWith('.')) {\n            files.set(normalizedPath, { path: normalizedPath });\n          }\n        }\n      }\n    }\n\n    await filesystem.replaceFiles({\n      resourceId,\n      threadId,\n      files: [...files.values()].toSorted((a, b) => a.path.localeCompare(b.path)),\n    });\n  } catch (error) {\n    console.warn('[Factory filesystem capture] Unable to persist files.', error);\n  }\n}\n\n/**\n * In-flight capture chains keyed by session resource id. Serves two purposes:\n * readers of the persisted file listing (the /web/workspace routes) await the\n * capture for the turn that just ended instead of racing it, and captures for\n * the same resource stay sequential (last write wins) even when multiple\n * scoped sessions observe the same resource id. In-process only: the factory\n * server that runs the session controller also serves those routes.\n */\nconst pendingCaptures = new Map<string, Promise<void>>();\n\n/**\n * Resolve once the session's in-flight filesystem capture (if any) has\n * persisted, or after `timeoutMs` so a reader that arrives mid-capture is\n * never blocked by the execs' worst-case 30s timeouts. Never rejects: the\n * capture body is fully try/catch contained.\n */\nexport async function waitForPendingFilesystemCapture(resourceId: string, timeoutMs = 10_000): Promise<void> {\n  let pending = pendingCaptures.get(resourceId);\n  if (!pending) return;\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  let timedOut = false;\n  const deadline = new Promise<void>(resolve => {\n    timer = setTimeout(() => {\n      timedOut = true;\n      resolve();\n    }, timeoutMs);\n  });\n  try {\n    // A turn that ends while we wait chains a successor capture; keep waiting\n    // until the latest chain settles so the final snapshot is not lost.\n    while (pending && !timedOut) {\n      await Promise.race([pending, deadline]);\n      const next = pendingCaptures.get(resourceId);\n      pending = next === pending ? undefined : next;\n    }\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nexport function observeSessionFilesystem(\n  session: FilesystemCaptureSession,\n  dependencies: FilesystemCaptureDependencies,\n): () => void {\n  let fallbackChain = Promise.resolve();\n  // Capture only runs after a turn that actually touched the workspace: a\n  // successful workspace tool call both proves the sandbox is awake and is\n  // the only way the listing can have changed. Without this gate every chat\n  // turn would run two sandbox execs — and since executeCommand resumes an\n  // idle VM, a pure-chat turn would keep waking a sandbox it never used.\n  // Same bookkeeping as first-exec capture: tool names resolve at tool_end\n  // via the tool_start map, and suspended calls survive agent_end so a\n  // resumed run's eventual completion still counts for that turn.\n  let workspaceTouched = false;\n  const toolNames = new Map<string, string>();\n  const suspended = new Set<string>();\n  const unsubscribeEvents = session.subscribe(event => {\n    switch (event.type) {\n      case 'tool_start': {\n        toolNames.set(event.toolCallId, event.toolName);\n        return;\n      }\n      case 'tool_suspended': {\n        suspended.add(event.toolCallId);\n        return;\n      }\n      case 'tool_suspension_cancelled': {\n        toolNames.delete(event.toolCallId);\n        suspended.delete(event.toolCallId);\n        return;\n      }\n      case 'agent_end': {\n        for (const id of toolNames.keys()) {\n          if (!suspended.has(id)) toolNames.delete(id);\n        }\n        return;\n      }\n      case 'tool_end': {\n        const toolName = toolNames.get(event.toolCallId);\n        toolNames.delete(event.toolCallId);\n        suspended.delete(event.toolCallId);\n        if (event.isError || event.denied) return;\n        if (isMeaningfulToolName(toolName)) workspaceTouched = true;\n        return;\n      }\n    }\n  });\n  const unsubscribeEnd = session.onBeforeAgentEnd(() => {\n    // onBeforeAgentEnd fires before agent_end is emitted, so every tool_end\n    // of the finishing run has already been observed; read then reset.\n    if (!workspaceTouched) return;\n    workspaceTouched = false;\n    // Chain so captures stay sequential (last write wins), but do NOT return\n    // the chain: finishAgentRun awaits every listener before emitting\n    // agent_end, and the capture's sandbox execs (git status + artifacts\n    // find, 30s timeouts each) must not gate turn completion. Readers that\n    // need the fresh listing await the pending capture through\n    // waitForPendingFilesystemCapture instead. The un-returned chain cannot\n    // leak an unhandled rejection: captureSessionFilesystem's entire body\n    // runs inside its own try/catch, and disposal of this listener does not\n    // cancel an in-flight chain, so a final turn's capture still persists.\n    let resourceId: string | undefined;\n    try {\n      resourceId = session.identity.getResourceId();\n    } catch {\n      // No resource id means no route can address this session's listing;\n      // keep a per-observer chain so captures still run sequentially.\n      fallbackChain = fallbackChain.then(() => captureSessionFilesystem(session, dependencies));\n      return;\n    }\n    // Extend the resource-level chain rather than a per-session one: sessions\n    // are deduplicated by (resourceId, scope), so multiple scoped sessions can\n    // observe the same resource, and their captures must not interleave.\n    let threadId: string;\n    try {\n      threadId = session.thread.requireId();\n    } catch {\n      return;\n    }\n    const ids = { resourceId, threadId };\n    const chain = (pendingCaptures.get(resourceId) ?? Promise.resolve()).then(() =>\n      captureSessionFilesystem(session, dependencies, ids),\n    );\n    pendingCaptures.set(resourceId, chain);\n    void chain.finally(() => {\n      if (pendingCaptures.get(resourceId) === chain) {\n        pendingCaptures.delete(resourceId);\n      }\n    });\n  });\n  return () => {\n    unsubscribeEvents();\n    unsubscribeEnd();\n  };\n}\n"],"mappings":";;;;;AAWA,MAAM,6BAA6B;AACnC,MAAM,2BAA2B;;;;6BAIJ,2BAA2B;;;;;;;;AAQxD,MAAM,yBAAyB;;;;;;;;;;;AAW/B,MAAa,0BAA0B;CACrC;CACA;CACA;AACF,CAAC,CAAC,KAAK,GAAG;;AAGV,SAAgB,WAAW,MAAoB;CAC7C,MAAM,OAAO,UAAkB,OAAO,KAAK,CAAC,CAAC,SAAS,GAAG,GAAG;CAC5D,OACE,GAAG,KAAK,eAAe,IAAI,IAAI,KAAK,YAAY,IAAI,CAAC,IAAI,IAAI,KAAK,WAAW,CAAC,IAC3E,IAAI,KAAK,YAAY,CAAC,IAAI,IAAI,KAAK,cAAc,CAAC,EAAE,GAAG,IAAI,KAAK,cAAc,CAAC;AAEtF;AAiBA,SAAgB,4BAA4B,QAAkC;CAC5E,MAAM,wBAAQ,IAAI,IAA4B;CAC9C,KAAK,MAAM,UAAU,OAAO,MAAM,IAAI,GAAG;EACvC,IAAI,CAAC,QAAQ;EACb,MAAM,OAAO,OAAO,QAAQ,SAAS,EAAE;EACvC,IAAI,MAAM,MAAM,IAAI,MAAM,EAAE,KAAK,CAAC;CACpC;CAEA,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,UAAU,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAC5E;AAEA,eAAsB,yBACpB,SACA,EAAE,YAAY,iBACd,KACe;CACf,IAAI;EAGF,MAAM,aAAa,KAAK,cAAc,QAAQ,SAAS,cAAc;EACrE,MAAM,WAAW,KAAK,YAAY,QAAQ,OAAO,UAAU;EAC3D,MAAM,gBAAgB,MAAM,cAAc,SAAS,eAAe,UAAU;EAE5E,MAAM,UAAU,QAAQ,aAAa,CAAC,EAAE;EACxC,IAAI,CAAC,iBAAiB,CAAC,SAAS,gBAAgB;EAOhD,MAAM,QAAQ,mBAAmB,cAAc,EAAE;EACjD,IAAI,CAAC,OAAO;EAMZ,IAAI,MAAM,QAAQ,WAAW,WAAW;EAGxC,MAAM,SAAS,cAAc,KAAK;EAClC,IAAI,CAAC,QAAQ;EASb,MAAM,YAAY,OAAO,MAAM,SAAS;EACxC,MAAM,cAAc,YAAY,uBAAuB,cAAc,SAAS,IAAI,KAAA;EAClF,MAAM,UAAU,MAAM,QAAQ,YAAY;EAG1C,MAAM,iBAAiB,SAA0C;GAC/D,IAAI,KAAK,KAAK,YAAY,MAAM,SAAS,OAAO,cAAc;GAI9D,QAHc,aAAa,aAAa,MACtC,cAAa,UAAU,KAAK,YAAY,MAAM,KAAK,KAAK,YAAY,CACtE,EAAA,EACc,iBAAiB;EACjC;EACA,MAAM,UAAU,OAAO,MAAM,KAAI,UAAS;GAAE;GAAM,YAAY,cAAc,IAAI;EAAE,EAAE;EACpF,MAAM,iBAAiB,QAAQ,eAAe,KAAK,OAAO;EAC1D,MAAM,UAAU,MAAM,QAAQ,IAC5B,QAAQ,KAAK,EAAE,MAAM,iBACnB,eAAe,MAAM;GAAC;GAAM;GAA0B;GAA4B,KAAK;GAAK;EAAU,GAAG,EACvG,SAAS,IACX,CAAC,CACH,CACF;EACA,MAAM,wBAAQ,IAAI,IAA4B;EAC9C,IAAI,WAAW;EACf,KAAK,MAAM,CAAC,OAAO,WAAW,QAAQ,QAAQ,GAAG;GAC/C,IAAI,OAAO,aAAa,4BAA4B;GACpD,IAAI,OAAO,aAAa,GAAG;IACzB,QAAQ,KAAK,+DAA+D,OAAO,MAAM;IACzF;GACF;GACA,YAAY;GACZ,MAAM,SAAS,QAAQ,MAAM,CAAE,KAAK;GACpC,KAAK,MAAM,QAAQ,4BAA4B,OAAO,MAAM,GAC1D,MAAM,IAAI,GAAG,SAAS,KAAK,QAAQ,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC;EAExE;EACA,IAAI,aAAa,GAAG;EAEpB,MAAM,YAAY,MAAM,eAAe,MAAM;GAAC;GAAM;GAAwB;GAAM,OAAO;EAAI,GAAG,EAC9F,SAAS,IACX,CAAC;EACD,IAAI,UAAU,aAAa,GAAG;GAC5B,QAAQ,KAAK,oEAAoE,UAAU,MAAM;GACjG;EACF;EACA,KAAK,MAAM,QAAQ,UAAU,OAAO,MAAM,IAAI,GAAG;GAC/C,MAAM,iBAAiB,KAAK,QAAQ,SAAS,EAAE;GAC/C,IAAI,gBACF,MAAM,IAAI,gBAAgB,EAAE,MAAM,eAAe,CAAC;EAEtD;EAIA,IAAI,WAAW;GACb,MAAM,QAAQ,WAAW,cAAc,SAAS;GAChD,MAAM,YAAY,MAAM,eAAe,MAAM;IAAC;IAAM;IAAyB;IAAM,OAAO;IAAM;GAAK,GAAG,EACtG,SAAS,IACX,CAAC;GACD,IAAI,UAAU,aAAa,GACzB,QAAQ,KAAK,qEAAqE,UAAU,MAAM;QAElG,KAAK,MAAM,QAAQ,UAAU,OAAO,MAAM,IAAI,GAAG;IAC/C,MAAM,iBAAiB,KAAK,QAAQ,SAAS,EAAE;IAC/C,IAAI,kBAAkB,CAAC,eAAe,WAAW,GAAG,GAClD,MAAM,IAAI,gBAAgB,EAAE,MAAM,eAAe,CAAC;GAEtD;EAEJ;EAEA,MAAM,WAAW,aAAa;GAC5B;GACA;GACA,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,UAAU,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;EAC5E,CAAC;CACH,SAAS,OAAO;EACd,QAAQ,KAAK,yDAAyD,KAAK;CAC7E;AACF;;;;;;;;;AAUA,MAAM,kCAAkB,IAAI,IAA2B;;;;;;;AAQvD,eAAsB,gCAAgC,YAAoB,YAAY,KAAuB;CAC3G,IAAI,UAAU,gBAAgB,IAAI,UAAU;CAC5C,IAAI,CAAC,SAAS;CACd,IAAI;CACJ,IAAI,WAAW;CACf,MAAM,WAAW,IAAI,SAAc,YAAW;EAC5C,QAAQ,iBAAiB;GACvB,WAAW;GACX,QAAQ;EACV,GAAG,SAAS;CACd,CAAC;CACD,IAAI;EAGF,OAAO,WAAW,CAAC,UAAU;GAC3B,MAAM,QAAQ,KAAK,CAAC,SAAS,QAAQ,CAAC;GACtC,MAAM,OAAO,gBAAgB,IAAI,UAAU;GAC3C,UAAU,SAAS,UAAU,KAAA,IAAY;EAC3C;CACF,UAAU;EACR,aAAa,KAAK;CACpB;AACF;AAEA,SAAgB,yBACd,SACA,cACY;CACZ,IAAI,gBAAgB,QAAQ,QAAQ;CASpC,IAAI,mBAAmB;CACvB,MAAM,4BAAY,IAAI,IAAoB;CAC1C,MAAM,4BAAY,IAAI,IAAY;CAClC,MAAM,oBAAoB,QAAQ,WAAU,UAAS;EACnD,QAAQ,MAAM,MAAd;GACE,KAAK;IACH,UAAU,IAAI,MAAM,YAAY,MAAM,QAAQ;IAC9C;GAEF,KAAK;IACH,UAAU,IAAI,MAAM,UAAU;IAC9B;GAEF,KAAK;IACH,UAAU,OAAO,MAAM,UAAU;IACjC,UAAU,OAAO,MAAM,UAAU;IACjC;GAEF,KAAK;IACH,KAAK,MAAM,MAAM,UAAU,KAAK,GAC9B,IAAI,CAAC,UAAU,IAAI,EAAE,GAAG,UAAU,OAAO,EAAE;IAE7C;GAEF,KAAK,YAAY;IACf,MAAM,WAAW,UAAU,IAAI,MAAM,UAAU;IAC/C,UAAU,OAAO,MAAM,UAAU;IACjC,UAAU,OAAO,MAAM,UAAU;IACjC,IAAI,MAAM,WAAW,MAAM,QAAQ;IACnC,IAAI,qBAAqB,QAAQ,GAAG,mBAAmB;IACvD;GACF;EACF;CACF,CAAC;CACD,MAAM,iBAAiB,QAAQ,uBAAuB;EAGpD,IAAI,CAAC,kBAAkB;EACvB,mBAAmB;EAUnB,IAAI;EACJ,IAAI;GACF,aAAa,QAAQ,SAAS,cAAc;EAC9C,QAAQ;GAGN,gBAAgB,cAAc,WAAW,yBAAyB,SAAS,YAAY,CAAC;GACxF;EACF;EAIA,IAAI;EACJ,IAAI;GACF,WAAW,QAAQ,OAAO,UAAU;EACtC,QAAQ;GACN;EACF;EACA,MAAM,MAAM;GAAE;GAAY;EAAS;EACnC,MAAM,SAAS,gBAAgB,IAAI,UAAU,KAAK,QAAQ,QAAQ,EAAA,CAAG,WACnE,yBAAyB,SAAS,cAAc,GAAG,CACrD;EACA,gBAAgB,IAAI,YAAY,KAAK;EACrC,MAAW,cAAc;GACvB,IAAI,gBAAgB,IAAI,UAAU,MAAM,OACtC,gBAAgB,OAAO,UAAU;EAErC,CAAC;CACH,CAAC;CACD,aAAa;EACX,kBAAkB;EAClB,eAAe;CACjB;AACF"}
+{"version":3,"file":"filesystem-capture.js","names":[],"sources":["../../src/session/filesystem-capture.ts"],"sourcesContent":["import type { AgentControllerEvent, SessionBeforeAgentEndListener } from '@mastra/core/agent-controller';\nimport type { WorkspaceSandbox } from '@mastra/core/workspace';\nimport { peekSessionSandbox, sessionLayout } from '../sandbox/session-sandbox.js';\nimport type { SessionLayoutRepository } from '../sandbox/session-sandbox.js';\n\nimport type { FilesystemFile, FilesystemStorage } from '../storage/domains/filesystem/base.js';\nimport type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\nimport { peekSessionEnvironment } from './environment-state-processor.js';\nimport { isMeaningfulToolName } from './first-exec-capture.js';\n\n/** Exit code of `GIT_CHANGED_FILES_SCRIPT` when the checkout is not there: the repository is skipped, not failed. */\nconst CHECKOUT_MISSING_EXIT_CODE = 3;\nconst GIT_CHANGED_FILES_SCRIPT = `\nset -e\nworkdir=$1\nbase_branch=$2\ntest -d \"$workdir\" || exit ${CHECKOUT_MISSING_EXIT_CODE}\nbase=HEAD\nif merge_base=$(git -C \"$workdir\" merge-base HEAD \"origin/$base_branch\" 2>/dev/null); then\n  base=$merge_base\nfi\ngit -C \"$workdir\" diff --name-only -z --find-renames --diff-filter=ACMRTUXB \"$base\"\ngit -C \"$workdir\" ls-files --others --exclude-standard -z\n`;\nconst ARTIFACTS_LIST_COMMAND = 'cd \"$1\" && test -d .artifacts && find .artifacts -type f -print0 || true';\n/**\n * Regular files directly under the workspace root written since the session\n * was created ($2 is a UTC `touch -t` stamp, `YYYYMMDDhhmm.SS`), such as the\n * agent's notes. Files the template shipped with predate the session and stay\n * out; the checkouts are covered by git. Dotfiles are never listed: a listed\n * path becomes readable through the thread's file route, and the root is where\n * setup leaves `.env`, `.pgpass`, `.netrc` and other credential files.\n * `touch -t` plus `-newer` works on GNU and BSD find alike; `-newermt\n * \"@epoch\"` is GNU only.\n */\nexport const ROOT_FILES_LIST_COMMAND = [\n  'cd \"$1\" && ref=$(mktemp) && TZ=UTC touch -t \"$2\" \"$ref\"',\n  '&& find . -mindepth 1 -maxdepth 1 -type f ! -name \\'.*\\' -newer \"$ref\" -print0',\n  '; status=$?; rm -f \"$ref\"; exit $status',\n].join(' ');\n\n/** `touch -t` stamp of a moment, in UTC. */\nexport function touchStamp(date: Date): string {\n  const two = (value: number) => String(value).padStart(2, '0');\n  return (\n    `${date.getUTCFullYear()}${two(date.getUTCMonth() + 1)}${two(date.getUTCDate())}` +\n    `${two(date.getUTCHours())}${two(date.getUTCMinutes())}.${two(date.getUTCSeconds())}`\n  );\n}\n\nexport interface FilesystemCaptureSession {\n  readonly identity: { getId(): string };\n  readonly thread: { requireId(): string };\n  getWorkspace(): { sandbox?: Pick<WorkspaceSandbox, 'executeCommand'> } | undefined;\n  onBeforeAgentEnd(listener: SessionBeforeAgentEndListener): () => void;\n  subscribe(listener: (event: AgentControllerEvent) => void): () => void;\n}\n\nexport interface FilesystemCaptureDependencies {\n  filesystem: Pick<FilesystemStorage, 'replaceFiles'>;\n  sourceControl: {\n    sessions: Pick<SourceControlStorageHandle['sessions'], 'getBySessionId'>;\n  };\n}\n\nexport function parseFilesystemCaptureFiles(output: string): FilesystemFile[] {\n  const files = new Map<string, FilesystemFile>();\n  for (const record of output.split('\\0')) {\n    if (!record) continue;\n    const path = record.replace(/^\\.\\//, '');\n    if (path) files.set(path, { path });\n  }\n\n  return [...files.values()].toSorted((a, b) => a.path.localeCompare(b.path));\n}\n\nexport async function captureSessionFilesystem(\n  session: FilesystemCaptureSession,\n  { filesystem, sourceControl }: FilesystemCaptureDependencies,\n  ids?: { sessionId: string; threadId: string },\n): Promise<void> {\n  try {\n    // Scheduled captures pass ids read at schedule time: a session deleted\n    // before the queued capture runs has already cleared its thread.\n    const sessionId = ids?.sessionId ?? session.identity.getId();\n    const threadId = ids?.threadId ?? session.thread.requireId();\n    const sourceSession = await sourceControl.sessions.getBySessionId(sessionId);\n    // Chat-only sessions run without a workspace; there is nothing to capture.\n    const sandbox = session.getWorkspace()?.sandbox;\n    if (!sourceSession || !sandbox?.executeCommand) return;\n    // The live workdir comes from the per-process memo (the deterministic\n    // truth) ONLY — never the persisted observability column, which a row\n    // written under a previous provider can point at a workdir that no\n    // longer exists (the stale-workdir incident class). No memo entry means\n    // no live sandbox worth capturing in this replica; capture is\n    // best-effort telemetry, so skip.\n    const entry = peekSessionSandbox(sourceSession.id);\n    if (!entry) return;\n    // Telemetry must never provision a VM: executeCommand lazily starts the\n    // sandbox via ensureRunning, so a chat turn that never touched the\n    // workspace would otherwise boot (and clone into) a fresh VM just to\n    // capture an empty git status. Only capture when the turn already has a\n    // running sandbox.\n    if (entry.sandbox.status !== 'running') return;\n    // Running-but-unresolved should not happen (the start hook resolves the\n    // workdir), but capture is best-effort: skip rather than guess.\n    const layout = sessionLayout(entry);\n    if (!layout) return;\n\n    // One git pass per checkout, in parallel so three repositories stay well\n    // inside the 10 s readers wait for a pending capture. The session's own\n    // repository compares against the session base branch; the others sit on\n    // their default branch and compare against that. A repository whose\n    // checkout is missing (exit 3) is skipped: it has nothing to list and\n    // must not block the others. Any other failure is treated as transient\n    // and leaves the previous listing in place.\n    const multiRepo = layout.repos.length > 1;\n    const environment = multiRepo ? peekSessionEnvironment(sourceSession.sessionId) : undefined;\n    const ownRepo = entry.ownRepo.toLowerCase();\n    // The boot records the state at its end, after every setup command; until\n    // then a secondary checkout compares against its own `origin/HEAD`.\n    const baseBranchFor = (repo: SessionLayoutRepository): string => {\n      if (repo.slug.toLowerCase() === ownRepo) return sourceSession.baseBranch;\n      const state = environment?.repositories.find(\n        candidate => candidate.slug.toLowerCase() === repo.slug.toLowerCase(),\n      );\n      return state?.defaultBranch ?? 'HEAD';\n    };\n    const targets = layout.repos.map(repo => ({ repo, baseBranch: baseBranchFor(repo) }));\n    const executeCommand = sandbox.executeCommand.bind(sandbox);\n    const results = await Promise.all(\n      targets.map(({ repo, baseBranch }) =>\n        executeCommand('sh', ['-c', GIT_CHANGED_FILES_SCRIPT, 'mastracode-changed-files', repo.dir, baseBranch], {\n          timeout: 30_000,\n        }),\n      ),\n    );\n    const files = new Map<string, FilesystemFile>();\n    let captured = 0;\n    for (const [index, result] of results.entries()) {\n      if (result.exitCode === CHECKOUT_MISSING_EXIT_CODE) continue;\n      if (result.exitCode !== 0) {\n        console.warn('[Factory filesystem capture] Unable to inspect Git changes.', result.stderr);\n        return;\n      }\n      captured += 1;\n      const prefix = targets[index]!.repo.prefix;\n      for (const file of parseFilesystemCaptureFiles(result.stdout)) {\n        files.set(`${prefix}${file.path}`, { path: `${prefix}${file.path}` });\n      }\n    }\n    if (captured === 0) return;\n\n    const artifacts = await executeCommand('sh', ['-c', ARTIFACTS_LIST_COMMAND, 'sh', layout.root], {\n      timeout: 30_000,\n    });\n    if (artifacts.exitCode !== 0) {\n      console.warn('[Factory filesystem capture] Unable to list workspace artifacts.', artifacts.stderr);\n      return;\n    }\n    for (const path of artifacts.stdout.split('\\0')) {\n      const normalizedPath = path.replace(/^\\.\\//, '');\n      if (normalizedPath) {\n        files.set(normalizedPath, { path: normalizedPath });\n      }\n    }\n\n    // With several checkouts the root is a plain directory nothing else lists.\n    // A failed listing is logged and the git and artifact results still land.\n    if (multiRepo) {\n      const since = touchStamp(sourceSession.createdAt);\n      const rootFiles = await executeCommand('sh', ['-c', ROOT_FILES_LIST_COMMAND, 'sh', layout.root, since], {\n        timeout: 30_000,\n      });\n      if (rootFiles.exitCode !== 0) {\n        console.warn('[Factory filesystem capture] Unable to list workspace root files.', rootFiles.stderr);\n      } else {\n        for (const path of rootFiles.stdout.split('\\0')) {\n          const normalizedPath = path.replace(/^\\.\\//, '');\n          if (normalizedPath && !normalizedPath.startsWith('.')) {\n            files.set(normalizedPath, { path: normalizedPath });\n          }\n        }\n      }\n    }\n\n    // The listing describes the session's workspace, not its memory resource,\n    // which the session shares with others: rows are keyed by the session id.\n    await filesystem.replaceFiles({\n      resourceId: sessionId,\n      threadId,\n      files: [...files.values()].toSorted((a, b) => a.path.localeCompare(b.path)),\n    });\n  } catch (error) {\n    console.warn('[Factory filesystem capture] Unable to persist files.', error);\n  }\n}\n\n/**\n * In-flight capture chains keyed by session id. Serves two purposes: readers\n * of the persisted file listing (the /web/workspace routes) await the capture\n * for the turn that just ended instead of racing it, and captures for the same\n * session stay sequential (last write wins). In-process only: the factory\n * server that runs the session controller also serves those routes.\n */\nconst pendingCaptures = new Map<string, Promise<void>>();\n\n/**\n * Resolve once the session's in-flight filesystem capture (if any) has\n * persisted, or after `timeoutMs` so a reader that arrives mid-capture is\n * never blocked by the execs' worst-case 30s timeouts. Never rejects: the\n * capture body is fully try/catch contained.\n */\nexport async function waitForPendingFilesystemCapture(sessionId: string, timeoutMs = 10_000): Promise<void> {\n  let pending = pendingCaptures.get(sessionId);\n  if (!pending) return;\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  let timedOut = false;\n  const deadline = new Promise<void>(resolve => {\n    timer = setTimeout(() => {\n      timedOut = true;\n      resolve();\n    }, timeoutMs);\n  });\n  try {\n    // A turn that ends while we wait chains a successor capture; keep waiting\n    // until the latest chain settles so the final snapshot is not lost.\n    while (pending && !timedOut) {\n      await Promise.race([pending, deadline]);\n      const next = pendingCaptures.get(sessionId);\n      pending = next === pending ? undefined : next;\n    }\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nexport function observeSessionFilesystem(\n  session: FilesystemCaptureSession,\n  dependencies: FilesystemCaptureDependencies,\n): () => void {\n  let fallbackChain = Promise.resolve();\n  // Capture only runs after a turn that actually touched the workspace: a\n  // successful workspace tool call both proves the sandbox is awake and is\n  // the only way the listing can have changed. Without this gate every chat\n  // turn would run two sandbox execs — and since executeCommand resumes an\n  // idle VM, a pure-chat turn would keep waking a sandbox it never used.\n  // Same bookkeeping as first-exec capture: tool names resolve at tool_end\n  // via the tool_start map, and suspended calls survive agent_end so a\n  // resumed run's eventual completion still counts for that turn.\n  let workspaceTouched = false;\n  const toolNames = new Map<string, string>();\n  const suspended = new Set<string>();\n  const unsubscribeEvents = session.subscribe(event => {\n    switch (event.type) {\n      case 'tool_start': {\n        toolNames.set(event.toolCallId, event.toolName);\n        return;\n      }\n      case 'tool_suspended': {\n        suspended.add(event.toolCallId);\n        return;\n      }\n      case 'tool_suspension_cancelled': {\n        toolNames.delete(event.toolCallId);\n        suspended.delete(event.toolCallId);\n        return;\n      }\n      case 'agent_end': {\n        for (const id of toolNames.keys()) {\n          if (!suspended.has(id)) toolNames.delete(id);\n        }\n        return;\n      }\n      case 'tool_end': {\n        const toolName = toolNames.get(event.toolCallId);\n        toolNames.delete(event.toolCallId);\n        suspended.delete(event.toolCallId);\n        if (event.isError || event.denied) return;\n        if (isMeaningfulToolName(toolName)) workspaceTouched = true;\n        return;\n      }\n    }\n  });\n  const unsubscribeEnd = session.onBeforeAgentEnd(() => {\n    // onBeforeAgentEnd fires before agent_end is emitted, so every tool_end\n    // of the finishing run has already been observed; read then reset.\n    if (!workspaceTouched) return;\n    workspaceTouched = false;\n    // Chain so captures stay sequential (last write wins), but do NOT return\n    // the chain: finishAgentRun awaits every listener before emitting\n    // agent_end, and the capture's sandbox execs (git status + artifacts\n    // find, 30s timeouts each) must not gate turn completion. Readers that\n    // need the fresh listing await the pending capture through\n    // waitForPendingFilesystemCapture instead. The un-returned chain cannot\n    // leak an unhandled rejection: captureSessionFilesystem's entire body\n    // runs inside its own try/catch, and disposal of this listener does not\n    // cancel an in-flight chain, so a final turn's capture still persists.\n    let sessionId: string;\n    try {\n      sessionId = session.identity.getId();\n    } catch {\n      // No identity means no route can address this session's listing; keep\n      // a per-observer chain so captures still run sequentially.\n      fallbackChain = fallbackChain.then(() => captureSessionFilesystem(session, dependencies));\n      return;\n    }\n    let threadId: string;\n    try {\n      threadId = session.thread.requireId();\n    } catch {\n      return;\n    }\n    const ids = { sessionId, threadId };\n    const chain = (pendingCaptures.get(sessionId) ?? Promise.resolve()).then(() =>\n      captureSessionFilesystem(session, dependencies, ids),\n    );\n    pendingCaptures.set(sessionId, chain);\n    void chain.finally(() => {\n      if (pendingCaptures.get(sessionId) === chain) {\n        pendingCaptures.delete(sessionId);\n      }\n    });\n  });\n  return () => {\n    unsubscribeEvents();\n    unsubscribeEnd();\n  };\n}\n"],"mappings":";;;;;AAWA,MAAM,6BAA6B;AACnC,MAAM,2BAA2B;;;;6BAIJ,2BAA2B;;;;;;;;AAQxD,MAAM,yBAAyB;;;;;;;;;;;AAW/B,MAAa,0BAA0B;CACrC;CACA;CACA;AACF,CAAC,CAAC,KAAK,GAAG;;AAGV,SAAgB,WAAW,MAAoB;CAC7C,MAAM,OAAO,UAAkB,OAAO,KAAK,CAAC,CAAC,SAAS,GAAG,GAAG;CAC5D,OACE,GAAG,KAAK,eAAe,IAAI,IAAI,KAAK,YAAY,IAAI,CAAC,IAAI,IAAI,KAAK,WAAW,CAAC,IAC3E,IAAI,KAAK,YAAY,CAAC,IAAI,IAAI,KAAK,cAAc,CAAC,EAAE,GAAG,IAAI,KAAK,cAAc,CAAC;AAEtF;AAiBA,SAAgB,4BAA4B,QAAkC;CAC5E,MAAM,wBAAQ,IAAI,IAA4B;CAC9C,KAAK,MAAM,UAAU,OAAO,MAAM,IAAI,GAAG;EACvC,IAAI,CAAC,QAAQ;EACb,MAAM,OAAO,OAAO,QAAQ,SAAS,EAAE;EACvC,IAAI,MAAM,MAAM,IAAI,MAAM,EAAE,KAAK,CAAC;CACpC;CAEA,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,UAAU,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAC5E;AAEA,eAAsB,yBACpB,SACA,EAAE,YAAY,iBACd,KACe;CACf,IAAI;EAGF,MAAM,YAAY,KAAK,aAAa,QAAQ,SAAS,MAAM;EAC3D,MAAM,WAAW,KAAK,YAAY,QAAQ,OAAO,UAAU;EAC3D,MAAM,gBAAgB,MAAM,cAAc,SAAS,eAAe,SAAS;EAE3E,MAAM,UAAU,QAAQ,aAAa,CAAC,EAAE;EACxC,IAAI,CAAC,iBAAiB,CAAC,SAAS,gBAAgB;EAOhD,MAAM,QAAQ,mBAAmB,cAAc,EAAE;EACjD,IAAI,CAAC,OAAO;EAMZ,IAAI,MAAM,QAAQ,WAAW,WAAW;EAGxC,MAAM,SAAS,cAAc,KAAK;EAClC,IAAI,CAAC,QAAQ;EASb,MAAM,YAAY,OAAO,MAAM,SAAS;EACxC,MAAM,cAAc,YAAY,uBAAuB,cAAc,SAAS,IAAI,KAAA;EAClF,MAAM,UAAU,MAAM,QAAQ,YAAY;EAG1C,MAAM,iBAAiB,SAA0C;GAC/D,IAAI,KAAK,KAAK,YAAY,MAAM,SAAS,OAAO,cAAc;GAI9D,QAHc,aAAa,aAAa,MACtC,cAAa,UAAU,KAAK,YAAY,MAAM,KAAK,KAAK,YAAY,CACtE,EAAA,EACc,iBAAiB;EACjC;EACA,MAAM,UAAU,OAAO,MAAM,KAAI,UAAS;GAAE;GAAM,YAAY,cAAc,IAAI;EAAE,EAAE;EACpF,MAAM,iBAAiB,QAAQ,eAAe,KAAK,OAAO;EAC1D,MAAM,UAAU,MAAM,QAAQ,IAC5B,QAAQ,KAAK,EAAE,MAAM,iBACnB,eAAe,MAAM;GAAC;GAAM;GAA0B;GAA4B,KAAK;GAAK;EAAU,GAAG,EACvG,SAAS,IACX,CAAC,CACH,CACF;EACA,MAAM,wBAAQ,IAAI,IAA4B;EAC9C,IAAI,WAAW;EACf,KAAK,MAAM,CAAC,OAAO,WAAW,QAAQ,QAAQ,GAAG;GAC/C,IAAI,OAAO,aAAa,4BAA4B;GACpD,IAAI,OAAO,aAAa,GAAG;IACzB,QAAQ,KAAK,+DAA+D,OAAO,MAAM;IACzF;GACF;GACA,YAAY;GACZ,MAAM,SAAS,QAAQ,MAAM,CAAE,KAAK;GACpC,KAAK,MAAM,QAAQ,4BAA4B,OAAO,MAAM,GAC1D,MAAM,IAAI,GAAG,SAAS,KAAK,QAAQ,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC;EAExE;EACA,IAAI,aAAa,GAAG;EAEpB,MAAM,YAAY,MAAM,eAAe,MAAM;GAAC;GAAM;GAAwB;GAAM,OAAO;EAAI,GAAG,EAC9F,SAAS,IACX,CAAC;EACD,IAAI,UAAU,aAAa,GAAG;GAC5B,QAAQ,KAAK,oEAAoE,UAAU,MAAM;GACjG;EACF;EACA,KAAK,MAAM,QAAQ,UAAU,OAAO,MAAM,IAAI,GAAG;GAC/C,MAAM,iBAAiB,KAAK,QAAQ,SAAS,EAAE;GAC/C,IAAI,gBACF,MAAM,IAAI,gBAAgB,EAAE,MAAM,eAAe,CAAC;EAEtD;EAIA,IAAI,WAAW;GACb,MAAM,QAAQ,WAAW,cAAc,SAAS;GAChD,MAAM,YAAY,MAAM,eAAe,MAAM;IAAC;IAAM;IAAyB;IAAM,OAAO;IAAM;GAAK,GAAG,EACtG,SAAS,IACX,CAAC;GACD,IAAI,UAAU,aAAa,GACzB,QAAQ,KAAK,qEAAqE,UAAU,MAAM;QAElG,KAAK,MAAM,QAAQ,UAAU,OAAO,MAAM,IAAI,GAAG;IAC/C,MAAM,iBAAiB,KAAK,QAAQ,SAAS,EAAE;IAC/C,IAAI,kBAAkB,CAAC,eAAe,WAAW,GAAG,GAClD,MAAM,IAAI,gBAAgB,EAAE,MAAM,eAAe,CAAC;GAEtD;EAEJ;EAIA,MAAM,WAAW,aAAa;GAC5B,YAAY;GACZ;GACA,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,UAAU,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;EAC5E,CAAC;CACH,SAAS,OAAO;EACd,QAAQ,KAAK,yDAAyD,KAAK;CAC7E;AACF;;;;;;;;AASA,MAAM,kCAAkB,IAAI,IAA2B;;;;;;;AAQvD,eAAsB,gCAAgC,WAAmB,YAAY,KAAuB;CAC1G,IAAI,UAAU,gBAAgB,IAAI,SAAS;CAC3C,IAAI,CAAC,SAAS;CACd,IAAI;CACJ,IAAI,WAAW;CACf,MAAM,WAAW,IAAI,SAAc,YAAW;EAC5C,QAAQ,iBAAiB;GACvB,WAAW;GACX,QAAQ;EACV,GAAG,SAAS;CACd,CAAC;CACD,IAAI;EAGF,OAAO,WAAW,CAAC,UAAU;GAC3B,MAAM,QAAQ,KAAK,CAAC,SAAS,QAAQ,CAAC;GACtC,MAAM,OAAO,gBAAgB,IAAI,SAAS;GAC1C,UAAU,SAAS,UAAU,KAAA,IAAY;EAC3C;CACF,UAAU;EACR,aAAa,KAAK;CACpB;AACF;AAEA,SAAgB,yBACd,SACA,cACY;CACZ,IAAI,gBAAgB,QAAQ,QAAQ;CASpC,IAAI,mBAAmB;CACvB,MAAM,4BAAY,IAAI,IAAoB;CAC1C,MAAM,4BAAY,IAAI,IAAY;CAClC,MAAM,oBAAoB,QAAQ,WAAU,UAAS;EACnD,QAAQ,MAAM,MAAd;GACE,KAAK;IACH,UAAU,IAAI,MAAM,YAAY,MAAM,QAAQ;IAC9C;GAEF,KAAK;IACH,UAAU,IAAI,MAAM,UAAU;IAC9B;GAEF,KAAK;IACH,UAAU,OAAO,MAAM,UAAU;IACjC,UAAU,OAAO,MAAM,UAAU;IACjC;GAEF,KAAK;IACH,KAAK,MAAM,MAAM,UAAU,KAAK,GAC9B,IAAI,CAAC,UAAU,IAAI,EAAE,GAAG,UAAU,OAAO,EAAE;IAE7C;GAEF,KAAK,YAAY;IACf,MAAM,WAAW,UAAU,IAAI,MAAM,UAAU;IAC/C,UAAU,OAAO,MAAM,UAAU;IACjC,UAAU,OAAO,MAAM,UAAU;IACjC,IAAI,MAAM,WAAW,MAAM,QAAQ;IACnC,IAAI,qBAAqB,QAAQ,GAAG,mBAAmB;IACvD;GACF;EACF;CACF,CAAC;CACD,MAAM,iBAAiB,QAAQ,uBAAuB;EAGpD,IAAI,CAAC,kBAAkB;EACvB,mBAAmB;EAUnB,IAAI;EACJ,IAAI;GACF,YAAY,QAAQ,SAAS,MAAM;EACrC,QAAQ;GAGN,gBAAgB,cAAc,WAAW,yBAAyB,SAAS,YAAY,CAAC;GACxF;EACF;EACA,IAAI;EACJ,IAAI;GACF,WAAW,QAAQ,OAAO,UAAU;EACtC,QAAQ;GACN;EACF;EACA,MAAM,MAAM;GAAE;GAAW;EAAS;EAClC,MAAM,SAAS,gBAAgB,IAAI,SAAS,KAAK,QAAQ,QAAQ,EAAA,CAAG,WAClE,yBAAyB,SAAS,cAAc,GAAG,CACrD;EACA,gBAAgB,IAAI,WAAW,KAAK;EACpC,MAAW,cAAc;GACvB,IAAI,gBAAgB,IAAI,SAAS,MAAM,OACrC,gBAAgB,OAAO,SAAS;EAEpC,CAAC;CACH,CAAC;CACD,aAAa;EACX,kBAAkB;EAClB,eAAe;CACjB;AACF"}

package/dist/session/first-exec-capture.d.ts

@@ -2,7 +2,7 @@ import type { AgentControllerEvent } from '@mastra/core/agent-controller';
 import type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';
 export interface FirstExecCaptureSession {
     readonly identity: {
-        getResourceId(): string;
+        getId(): string;
     };
     subscribe(listener: (event: AgentControllerEvent) => void): () => void;
 }

package/dist/session/first-exec-capture.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"first-exec-capture.d.ts","sourceRoot":"","sources":["../../src/session/first-exec-capture.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAG1E,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AAE5F,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE;QAAE,aAAa,IAAI,MAAM,CAAA;KAAE,CAAC;IAC/C,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CACxE;AAED,MAAM,WAAW,4BAA4B;IAC3C,aAAa,EAAE;QACb,QAAQ,EAAE,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,yBAAyB,CAAC,CAAC;KACnF,CAAC;CACH;AA6BD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAItE;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,uBAAuB,EAChC,EAAE,aAAa,EAAE,EAAE,4BAA4B,GAC9C,MAAM,IAAI,CAoDZ"}
+{"version":3,"file":"first-exec-capture.d.ts","sourceRoot":"","sources":["../../src/session/first-exec-capture.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAG1E,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AAE5F,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE;QAAE,KAAK,IAAI,MAAM,CAAA;KAAE,CAAC;IACvC,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CACxE;AAED,MAAM,WAAW,4BAA4B;IAC3C,aAAa,EAAE;QACb,QAAQ,EAAE,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,yBAAyB,CAAC,CAAC;KACnF,CAAC;CACH;AA6BD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAItE;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,uBAAuB,EAChC,EAAE,aAAa,EAAE,EAAE,4BAA4B,GAC9C,MAAM,IAAI,CAoDZ"}

package/dist/session/first-exec-capture.js

@@ -78,7 +78,7 @@ function observeSessionFirstExec(session, { sourceControl }) {
 				if (!isMeaningfulToolName(toolName)) return;
 				seen = true;
 				unsubscribe();
-				sourceControl.sessions.markFirstMeaningfulExec({ sessionId: session.identity.getResourceId() }).catch((error) => console.warn("[Factory first-exec capture] Unable to persist first exec time.", error));
+				sourceControl.sessions.markFirstMeaningfulExec({ sessionId: session.identity.getId() }).catch((error) => console.warn("[Factory first-exec capture] Unable to persist first exec time.", error));
 				return;
 			}
 		}

package/dist/session/first-exec-capture.js.map

@@ -1 +1 @@
-{"version":3,"file":"first-exec-capture.js","names":[],"sources":["../../src/session/first-exec-capture.ts"],"sourcesContent":["import type { AgentControllerEvent } from '@mastra/core/agent-controller';\nimport { WORKSPACE_TOOLS_PREFIX } from '@mastra/core/workspace';\n\nimport type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\n\nexport interface FirstExecCaptureSession {\n  readonly identity: { getResourceId(): string };\n  subscribe(listener: (event: AgentControllerEvent) => void): () => void;\n}\n\nexport interface FirstExecCaptureDependencies {\n  sourceControl: {\n    sessions: Pick<SourceControlStorageHandle['sessions'], 'markFirstMeaningfulExec'>;\n  };\n}\n\n/**\n * Tool names that count as \"meaningful exec\" independent of the workspace\n * prefix. The workspace tools get remapped from `mastra_workspace_*` to\n * mastracode-friendly names (see `mastracode/sdk/src/tool-names.ts`), and\n * this listener runs on the emitted tool name after remap, so both spellings\n * need to match.\n */\nconst MEANINGFUL_TOOL_NAMES: ReadonlySet<string> = new Set([\n  // Filesystem (post-remap)\n  'view',\n  'write_file',\n  'string_replace_lsp',\n  'find_files',\n  'delete_file',\n  'file_stat',\n  'mkdir',\n  // Search\n  'search_content',\n  // Code intelligence\n  'ast_smart_edit',\n  'lsp_inspect',\n  // Sandbox\n  'execute_command',\n  'get_process_output',\n  'kill_process',\n]);\n\nexport function isMeaningfulToolName(name: string | undefined): boolean {\n  if (!name) return false;\n  if (name.startsWith(`${WORKSPACE_TOOLS_PREFIX}_`)) return true;\n  return MEANINGFUL_TOOL_NAMES.has(name);\n}\n\n/**\n * Record when a session's agent completed its first successful meaningful\n * tool call (the TTFME anchor — \"time to first meaningful exec\").\n *\n * Meaningful = a workspace tool the agent invoked itself (filesystem,\n * search, code intelligence, sandbox exec, process control). We accept any\n * tool whose name starts with the workspace prefix `mastra_workspace_` or\n * matches the post-remap mastracode tool names. Non-workspace tools (memory,\n * notification inbox, subagent, etc.) and skill-loader / preflight /\n * materializer `sandbox.executeCommand()` calls that never flow through the\n * tool layer are intentionally excluded.\n *\n * Failed tool calls (`isError === true`) don't count. Approval-denied and\n * abort-while-parked tool completions (`denied === true`) also don't count:\n * the run-engine emits `tool_end` with `isError: false` for those paths\n * because the tool didn't fail, but it also never ran, so treating them as\n * \"meaningful exec\" would re-introduce the same contamination this fix is\n * removing on the message side. The listener stays subscribed until a\n * successful qualifying end, then unsubscribes. The storage write is guarded\n * (`first_meaningful_exec_at IS NULL`), so restarts, re-materialized\n * sessions, and sessions without a source-control row are no-ops.\n */\nexport function observeSessionFirstExec(\n  session: FirstExecCaptureSession,\n  { sourceControl }: FirstExecCaptureDependencies,\n): () => void {\n  let seen = false;\n  // toolCallId -> toolName. Populated on `tool_start`, consumed on `tool_end`.\n  // Suspended entries survive `agent_end` so the resumed run can still resolve\n  // its tool name when the eventual `tool_end` arrives.\n  const toolNames = new Map<string, string>();\n  const suspended = new Set<string>();\n  const unsubscribe = session.subscribe(event => {\n    if (seen) return;\n    switch (event.type) {\n      case 'tool_start': {\n        toolNames.set(event.toolCallId, event.toolName);\n        return;\n      }\n      case 'tool_suspended': {\n        suspended.add(event.toolCallId);\n        return;\n      }\n      case 'tool_suspension_cancelled': {\n        toolNames.delete(event.toolCallId);\n        suspended.delete(event.toolCallId);\n        return;\n      }\n      case 'agent_end': {\n        // Drop any in-flight starts that will never see a matching `tool_end`\n        // on this run. Genuinely suspended calls stay so their eventual\n        // resume-time `tool_end` can still map back to a tool name. Without\n        // this, sessions that repeatedly abort or error before a qualifying\n        // completion would accumulate stale entries for the entire lifetime\n        // of the subscription.\n        for (const id of toolNames.keys()) {\n          if (!suspended.has(id)) toolNames.delete(id);\n        }\n        return;\n      }\n      case 'tool_end': {\n        const toolName = toolNames.get(event.toolCallId);\n        toolNames.delete(event.toolCallId);\n        suspended.delete(event.toolCallId);\n        if (event.isError) return;\n        if (event.denied) return;\n        if (!isMeaningfulToolName(toolName)) return;\n        seen = true;\n        unsubscribe();\n        void sourceControl.sessions\n          .markFirstMeaningfulExec({ sessionId: session.identity.getResourceId() })\n          .catch(error => console.warn('[Factory first-exec capture] Unable to persist first exec time.', error));\n        return;\n      }\n    }\n  });\n  return unsubscribe;\n}\n"],"mappings":";;;;;;;;;AAuBA,MAAM,wCAA6C,IAAI,IAAI;CAEzD;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CAEA;CACA;CAEA;CACA;CACA;AACF,CAAC;AAED,SAAgB,qBAAqB,MAAmC;CACtE,IAAI,CAAC,MAAM,OAAO;CAClB,IAAI,KAAK,WAAW,GAAG,uBAAuB,EAAE,GAAG,OAAO;CAC1D,OAAO,sBAAsB,IAAI,IAAI;AACvC;;;;;;;;;;;;;;;;;;;;;;;AAwBA,SAAgB,wBACd,SACA,EAAE,iBACU;CACZ,IAAI,OAAO;CAIX,MAAM,4BAAY,IAAI,IAAoB;CAC1C,MAAM,4BAAY,IAAI,IAAY;CAClC,MAAM,cAAc,QAAQ,WAAU,UAAS;EAC7C,IAAI,MAAM;EACV,QAAQ,MAAM,MAAd;GACE,KAAK;IACH,UAAU,IAAI,MAAM,YAAY,MAAM,QAAQ;IAC9C;GAEF,KAAK;IACH,UAAU,IAAI,MAAM,UAAU;IAC9B;GAEF,KAAK;IACH,UAAU,OAAO,MAAM,UAAU;IACjC,UAAU,OAAO,MAAM,UAAU;IACjC;GAEF,KAAK;IAOH,KAAK,MAAM,MAAM,UAAU,KAAK,GAC9B,IAAI,CAAC,UAAU,IAAI,EAAE,GAAG,UAAU,OAAO,EAAE;IAE7C;GAEF,KAAK,YAAY;IACf,MAAM,WAAW,UAAU,IAAI,MAAM,UAAU;IAC/C,UAAU,OAAO,MAAM,UAAU;IACjC,UAAU,OAAO,MAAM,UAAU;IACjC,IAAI,MAAM,SAAS;IACnB,IAAI,MAAM,QAAQ;IAClB,IAAI,CAAC,qBAAqB,QAAQ,GAAG;IACrC,OAAO;IACP,YAAY;IACZ,cAAmB,SAChB,wBAAwB,EAAE,WAAW,QAAQ,SAAS,cAAc,EAAE,CAAC,CAAC,CACxE,OAAM,UAAS,QAAQ,KAAK,mEAAmE,KAAK,CAAC;IACxG;GACF;EACF;CACF,CAAC;CACD,OAAO;AACT"}
+{"version":3,"file":"first-exec-capture.js","names":[],"sources":["../../src/session/first-exec-capture.ts"],"sourcesContent":["import type { AgentControllerEvent } from '@mastra/core/agent-controller';\nimport { WORKSPACE_TOOLS_PREFIX } from '@mastra/core/workspace';\n\nimport type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\n\nexport interface FirstExecCaptureSession {\n  readonly identity: { getId(): string };\n  subscribe(listener: (event: AgentControllerEvent) => void): () => void;\n}\n\nexport interface FirstExecCaptureDependencies {\n  sourceControl: {\n    sessions: Pick<SourceControlStorageHandle['sessions'], 'markFirstMeaningfulExec'>;\n  };\n}\n\n/**\n * Tool names that count as \"meaningful exec\" independent of the workspace\n * prefix. The workspace tools get remapped from `mastra_workspace_*` to\n * mastracode-friendly names (see `mastracode/sdk/src/tool-names.ts`), and\n * this listener runs on the emitted tool name after remap, so both spellings\n * need to match.\n */\nconst MEANINGFUL_TOOL_NAMES: ReadonlySet<string> = new Set([\n  // Filesystem (post-remap)\n  'view',\n  'write_file',\n  'string_replace_lsp',\n  'find_files',\n  'delete_file',\n  'file_stat',\n  'mkdir',\n  // Search\n  'search_content',\n  // Code intelligence\n  'ast_smart_edit',\n  'lsp_inspect',\n  // Sandbox\n  'execute_command',\n  'get_process_output',\n  'kill_process',\n]);\n\nexport function isMeaningfulToolName(name: string | undefined): boolean {\n  if (!name) return false;\n  if (name.startsWith(`${WORKSPACE_TOOLS_PREFIX}_`)) return true;\n  return MEANINGFUL_TOOL_NAMES.has(name);\n}\n\n/**\n * Record when a session's agent completed its first successful meaningful\n * tool call (the TTFME anchor — \"time to first meaningful exec\").\n *\n * Meaningful = a workspace tool the agent invoked itself (filesystem,\n * search, code intelligence, sandbox exec, process control). We accept any\n * tool whose name starts with the workspace prefix `mastra_workspace_` or\n * matches the post-remap mastracode tool names. Non-workspace tools (memory,\n * notification inbox, subagent, etc.) and skill-loader / preflight /\n * materializer `sandbox.executeCommand()` calls that never flow through the\n * tool layer are intentionally excluded.\n *\n * Failed tool calls (`isError === true`) don't count. Approval-denied and\n * abort-while-parked tool completions (`denied === true`) also don't count:\n * the run-engine emits `tool_end` with `isError: false` for those paths\n * because the tool didn't fail, but it also never ran, so treating them as\n * \"meaningful exec\" would re-introduce the same contamination this fix is\n * removing on the message side. The listener stays subscribed until a\n * successful qualifying end, then unsubscribes. The storage write is guarded\n * (`first_meaningful_exec_at IS NULL`), so restarts, re-materialized\n * sessions, and sessions without a source-control row are no-ops.\n */\nexport function observeSessionFirstExec(\n  session: FirstExecCaptureSession,\n  { sourceControl }: FirstExecCaptureDependencies,\n): () => void {\n  let seen = false;\n  // toolCallId -> toolName. Populated on `tool_start`, consumed on `tool_end`.\n  // Suspended entries survive `agent_end` so the resumed run can still resolve\n  // its tool name when the eventual `tool_end` arrives.\n  const toolNames = new Map<string, string>();\n  const suspended = new Set<string>();\n  const unsubscribe = session.subscribe(event => {\n    if (seen) return;\n    switch (event.type) {\n      case 'tool_start': {\n        toolNames.set(event.toolCallId, event.toolName);\n        return;\n      }\n      case 'tool_suspended': {\n        suspended.add(event.toolCallId);\n        return;\n      }\n      case 'tool_suspension_cancelled': {\n        toolNames.delete(event.toolCallId);\n        suspended.delete(event.toolCallId);\n        return;\n      }\n      case 'agent_end': {\n        // Drop any in-flight starts that will never see a matching `tool_end`\n        // on this run. Genuinely suspended calls stay so their eventual\n        // resume-time `tool_end` can still map back to a tool name. Without\n        // this, sessions that repeatedly abort or error before a qualifying\n        // completion would accumulate stale entries for the entire lifetime\n        // of the subscription.\n        for (const id of toolNames.keys()) {\n          if (!suspended.has(id)) toolNames.delete(id);\n        }\n        return;\n      }\n      case 'tool_end': {\n        const toolName = toolNames.get(event.toolCallId);\n        toolNames.delete(event.toolCallId);\n        suspended.delete(event.toolCallId);\n        if (event.isError) return;\n        if (event.denied) return;\n        if (!isMeaningfulToolName(toolName)) return;\n        seen = true;\n        unsubscribe();\n        void sourceControl.sessions\n          .markFirstMeaningfulExec({ sessionId: session.identity.getId() })\n          .catch(error => console.warn('[Factory first-exec capture] Unable to persist first exec time.', error));\n        return;\n      }\n    }\n  });\n  return unsubscribe;\n}\n"],"mappings":";;;;;;;;;AAuBA,MAAM,wCAA6C,IAAI,IAAI;CAEzD;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CAEA;CACA;CAEA;CACA;CACA;AACF,CAAC;AAED,SAAgB,qBAAqB,MAAmC;CACtE,IAAI,CAAC,MAAM,OAAO;CAClB,IAAI,KAAK,WAAW,GAAG,uBAAuB,EAAE,GAAG,OAAO;CAC1D,OAAO,sBAAsB,IAAI,IAAI;AACvC;;;;;;;;;;;;;;;;;;;;;;;AAwBA,SAAgB,wBACd,SACA,EAAE,iBACU;CACZ,IAAI,OAAO;CAIX,MAAM,4BAAY,IAAI,IAAoB;CAC1C,MAAM,4BAAY,IAAI,IAAY;CAClC,MAAM,cAAc,QAAQ,WAAU,UAAS;EAC7C,IAAI,MAAM;EACV,QAAQ,MAAM,MAAd;GACE,KAAK;IACH,UAAU,IAAI,MAAM,YAAY,MAAM,QAAQ;IAC9C;GAEF,KAAK;IACH,UAAU,IAAI,MAAM,UAAU;IAC9B;GAEF,KAAK;IACH,UAAU,OAAO,MAAM,UAAU;IACjC,UAAU,OAAO,MAAM,UAAU;IACjC;GAEF,KAAK;IAOH,KAAK,MAAM,MAAM,UAAU,KAAK,GAC9B,IAAI,CAAC,UAAU,IAAI,EAAE,GAAG,UAAU,OAAO,EAAE;IAE7C;GAEF,KAAK,YAAY;IACf,MAAM,WAAW,UAAU,IAAI,MAAM,UAAU;IAC/C,UAAU,OAAO,MAAM,UAAU;IACjC,UAAU,OAAO,MAAM,UAAU;IACjC,IAAI,MAAM,SAAS;IACnB,IAAI,MAAM,QAAQ;IAClB,IAAI,CAAC,qBAAqB,QAAQ,GAAG;IACrC,OAAO;IACP,YAAY;IACZ,cAAmB,SAChB,wBAAwB,EAAE,WAAW,QAAQ,SAAS,MAAM,EAAE,CAAC,CAAC,CAChE,OAAM,UAAS,QAAQ,KAAK,mEAAmE,KAAK,CAAC;IACxG;GACF;EACF;CACF,CAAC;CACD,OAAO;AACT"}

package/dist/session/first-message-capture.d.ts

@@ -2,7 +2,7 @@ import type { AgentControllerEvent } from '@mastra/core/agent-controller';
 import type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';
 export interface FirstMessageCaptureSession {
     readonly identity: {
-        getResourceId(): string;
+        getId(): string;
     };
     subscribe(listener: (event: AgentControllerEvent) => void): () => void;
 }

package/dist/session/first-message-capture.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"first-message-capture.d.ts","sourceRoot":"","sources":["../../src/session/first-message-capture.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAE1E,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AAE5F,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE;QAAE,aAAa,IAAI,MAAM,CAAA;KAAE,CAAC;IAC/C,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CACxE;AAED,MAAM,WAAW,+BAA+B;IAC9C,aAAa,EAAE;QACb,QAAQ,EAAE,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,kBAAkB,CAAC,CAAC;KAC5E,CAAC;CACH;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,0BAA0B,EACnC,EAAE,aAAa,EAAE,EAAE,+BAA+B,GACjD,MAAM,IAAI,CAaZ"}
+{"version":3,"file":"first-message-capture.d.ts","sourceRoot":"","sources":["../../src/session/first-message-capture.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAE1E,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AAE5F,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE;QAAE,KAAK,IAAI,MAAM,CAAA;KAAE,CAAC;IACvC,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CACxE;AAED,MAAM,WAAW,+BAA+B;IAC9C,aAAa,EAAE;QACb,QAAQ,EAAE,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,kBAAkB,CAAC,CAAC;KAC5E,CAAC;CACH;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,0BAA0B,EACnC,EAAE,aAAa,EAAE,EAAE,+BAA+B,GACjD,MAAM,IAAI,CAaZ"}

package/dist/session/first-message-capture.js

@@ -25,7 +25,7 @@ function observeSessionFirstMessage(session, { sourceControl }) {
 		if (role !== "user" && role !== "assistant") return;
 		seen = true;
 		unsubscribe();
-		sourceControl.sessions.markFirstMessage({ sessionId: session.identity.getResourceId() }).catch((error) => console.warn("[Factory first-message capture] Unable to persist first message time.", error));
+		sourceControl.sessions.markFirstMessage({ sessionId: session.identity.getId() }).catch((error) => console.warn("[Factory first-message capture] Unable to persist first message time.", error));
 	});
 	return unsubscribe;
 }

package/dist/session/first-message-capture.js.map

@@ -1 +1 @@
-{"version":3,"file":"first-message-capture.js","names":[],"sources":["../../src/session/first-message-capture.ts"],"sourcesContent":["import type { AgentControllerEvent } from '@mastra/core/agent-controller';\n\nimport type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\n\nexport interface FirstMessageCaptureSession {\n  readonly identity: { getResourceId(): string };\n  subscribe(listener: (event: AgentControllerEvent) => void): () => void;\n}\n\nexport interface FirstMessageCaptureDependencies {\n  sourceControl: {\n    sessions: Pick<SourceControlStorageHandle['sessions'], 'markFirstMessage'>;\n  };\n}\n\n/**\n * Record when a session's agent first produced an actual conversational\n * message (the TTFI anchor — \"time to first interaction\").\n *\n * We stamp on the first `message_start` whose role is `user` or `assistant`.\n * The coordinator writes `role='signal'` rows into the thread (skill loads,\n * phase markers, memory reminders) before the model is ever invoked; those\n * signals used to trigger a stamp via `agent_start`, giving every session —\n * including zero-message model-init failures — a false TTFI of a few seconds.\n * Gating on real conversational roles keeps the TTFI column honest: sessions\n * that never produced a user or assistant message stay NULL and drop out of\n * TTFI percentiles instead of contaminating them.\n *\n * The listener unsubscribes after the first qualifying message; the storage\n * write is guarded (`first_message_at IS NULL`), so restarts, re-materialized\n * sessions, and sessions without a source-control row (chat-only channels)\n * are no-ops.\n */\nexport function observeSessionFirstMessage(\n  session: FirstMessageCaptureSession,\n  { sourceControl }: FirstMessageCaptureDependencies,\n): () => void {\n  let seen = false;\n  const unsubscribe = session.subscribe(event => {\n    if (seen || event.type !== 'message_start') return;\n    const role = event.message.role;\n    if (role !== 'user' && role !== 'assistant') return;\n    seen = true;\n    unsubscribe();\n    void sourceControl.sessions\n      .markFirstMessage({ sessionId: session.identity.getResourceId() })\n      .catch(error => console.warn('[Factory first-message capture] Unable to persist first message time.', error));\n  });\n  return unsubscribe;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAiCA,SAAgB,2BACd,SACA,EAAE,iBACU;CACZ,IAAI,OAAO;CACX,MAAM,cAAc,QAAQ,WAAU,UAAS;EAC7C,IAAI,QAAQ,MAAM,SAAS,iBAAiB;EAC5C,MAAM,OAAO,MAAM,QAAQ;EAC3B,IAAI,SAAS,UAAU,SAAS,aAAa;EAC7C,OAAO;EACP,YAAY;EACZ,cAAmB,SAChB,iBAAiB,EAAE,WAAW,QAAQ,SAAS,cAAc,EAAE,CAAC,CAAC,CACjE,OAAM,UAAS,QAAQ,KAAK,yEAAyE,KAAK,CAAC;CAChH,CAAC;CACD,OAAO;AACT"}
+{"version":3,"file":"first-message-capture.js","names":[],"sources":["../../src/session/first-message-capture.ts"],"sourcesContent":["import type { AgentControllerEvent } from '@mastra/core/agent-controller';\n\nimport type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\n\nexport interface FirstMessageCaptureSession {\n  readonly identity: { getId(): string };\n  subscribe(listener: (event: AgentControllerEvent) => void): () => void;\n}\n\nexport interface FirstMessageCaptureDependencies {\n  sourceControl: {\n    sessions: Pick<SourceControlStorageHandle['sessions'], 'markFirstMessage'>;\n  };\n}\n\n/**\n * Record when a session's agent first produced an actual conversational\n * message (the TTFI anchor — \"time to first interaction\").\n *\n * We stamp on the first `message_start` whose role is `user` or `assistant`.\n * The coordinator writes `role='signal'` rows into the thread (skill loads,\n * phase markers, memory reminders) before the model is ever invoked; those\n * signals used to trigger a stamp via `agent_start`, giving every session —\n * including zero-message model-init failures — a false TTFI of a few seconds.\n * Gating on real conversational roles keeps the TTFI column honest: sessions\n * that never produced a user or assistant message stay NULL and drop out of\n * TTFI percentiles instead of contaminating them.\n *\n * The listener unsubscribes after the first qualifying message; the storage\n * write is guarded (`first_message_at IS NULL`), so restarts, re-materialized\n * sessions, and sessions without a source-control row (chat-only channels)\n * are no-ops.\n */\nexport function observeSessionFirstMessage(\n  session: FirstMessageCaptureSession,\n  { sourceControl }: FirstMessageCaptureDependencies,\n): () => void {\n  let seen = false;\n  const unsubscribe = session.subscribe(event => {\n    if (seen || event.type !== 'message_start') return;\n    const role = event.message.role;\n    if (role !== 'user' && role !== 'assistant') return;\n    seen = true;\n    unsubscribe();\n    void sourceControl.sessions\n      .markFirstMessage({ sessionId: session.identity.getId() })\n      .catch(error => console.warn('[Factory first-message capture] Unable to persist first message time.', error));\n  });\n  return unsubscribe;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAiCA,SAAgB,2BACd,SACA,EAAE,iBACU;CACZ,IAAI,OAAO;CACX,MAAM,cAAc,QAAQ,WAAU,UAAS;EAC7C,IAAI,QAAQ,MAAM,SAAS,iBAAiB;EAC5C,MAAM,OAAO,MAAM,QAAQ;EAC3B,IAAI,SAAS,UAAU,SAAS,aAAa;EAC7C,OAAO;EACP,YAAY;EACZ,cAAmB,SAChB,iBAAiB,EAAE,WAAW,QAAQ,SAAS,MAAM,EAAE,CAAC,CAAC,CACzD,OAAM,UAAS,QAAQ,KAAK,yEAAyE,KAAK,CAAC;CAChH,CAAC;CACD,OAAO;AACT"}

package/dist/session/live-sessions.d.ts

@@ -35,7 +35,7 @@ export interface ParkedRun {
  * The sessions this process has materialized, by session id.
  *
  * Membership comes from the controller's notifications rather than
- * `getSessionByResource`, which hands back the pending creation — awaiting it
+ * `getSession`, which hands back the pending creation — awaiting it
  * from a request blocks for as long as the session takes to materialize its
  * sandbox, minutes on a cold clone. Notifications only fire once a session
  * exists, so a read never waits.

package/dist/session/live-sessions.js

@@ -3,7 +3,7 @@
 * The sessions this process has materialized, by session id.
 *
 * Membership comes from the controller's notifications rather than
-* `getSessionByResource`, which hands back the pending creation — awaiting it
+* `getSession`, which hands back the pending creation — awaiting it
 * from a request blocks for as long as the session takes to materialize its
 * sandbox, minutes on a cold clone. Notifications only fire once a session
 * exists, so a read never waits.

package/dist/session/live-sessions.js.map

@@ -1 +1 @@
-{"version":3,"file":"live-sessions.js","names":["#byId","#parkedListeners","#track","#lastParkStamp","#nextParkStamp"],"sources":["../../src/session/live-sessions.ts"],"sourcesContent":["import type { AgentControllerEvent } from '@mastra/core/agent-controller';\n\n/** The slice of a live session this registry needs: its id, its run, its parked tools, and who it works for. */\nexport interface LiveSession {\n  readonly identity: { getId(): string };\n  readonly run: { isRunning(): boolean };\n  readonly state: { get(): Readonly<{ factoryOrgId?: string; factoryProjectId?: string }> };\n  readonly displayState: { get(): { pendingSuspensions: ReadonlyMap<string, { toolName: string }> } };\n  subscribe(listener: (event: AgentControllerEvent) => void): () => void;\n}\n\ninterface SessionNotifier {\n  onSessionCreated(listener: (session: LiveSession) => void): () => void;\n  onSessionDeleted(listener: (session: LiveSession) => void): () => void;\n}\n\n/** The tool a session has waited on longest, and since when (epoch ms). */\nexport interface ParkedRun {\n  toolName: string;\n  suspendedAt: number;\n}\n\ninterface TrackedSession {\n  session: LiveSession;\n  seenAt: number;\n  suspendedAt: Map<string, number>;\n  unsubscribe: () => void;\n}\n\n/**\n * The sessions this process has materialized, by session id.\n *\n * Membership comes from the controller's notifications rather than\n * `getSessionByResource`, which hands back the pending creation — awaiting it\n * from a request blocks for as long as the session takes to materialize its\n * sandbox, minutes on a cold clone. Notifications only fire once a session\n * exists, so a read never waits.\n *\n * Whether a session is *running* or *parked* is read from the session itself,\n * never tracked here: no missed run event can leave the answer stuck. Only the\n * moment each suspension arrived is kept, since the session does not date them.\n */\nexport class LiveSessions {\n  readonly #byId = new Map<string, TrackedSession>();\n  readonly #parkedListeners = new Set<(session: LiveSession) => void>();\n  /** A park stamp doubles as the receipt key, so two suspensions in one millisecond must not share one. */\n  #lastParkStamp = 0;\n\n  constructor(controller: SessionNotifier) {\n    controller.onSessionCreated(session => this.#track(session));\n    controller.onSessionDeleted(session => {\n      const id = session.identity.getId();\n      const wasParked = this.parked(id) !== undefined;\n      this.#byId.get(id)?.unsubscribe();\n      this.#byId.delete(id);\n      if (wasParked) for (const listener of this.#parkedListeners) listener(session);\n    });\n  }\n\n  #nextParkStamp(): number {\n    this.#lastParkStamp = Math.max(Date.now(), this.#lastParkStamp + 1);\n    return this.#lastParkStamp;\n  }\n\n  #track(session: LiveSession): void {\n    const suspendedAt = new Map<string, number>();\n    const unsubscribe = session.subscribe(event => {\n      if (event.type === 'tool_suspended') suspendedAt.set(event.toolCallId, this.#nextParkStamp());\n      else if (event.type === 'tool_suspension_cancelled') suspendedAt.delete(event.toolCallId);\n      else if (event.type === 'agent_end' && event.reason !== 'suspended') suspendedAt.clear();\n      else return;\n      for (const listener of this.#parkedListeners) listener(session);\n    });\n    this.#byId.set(session.identity.getId(), { session, seenAt: Date.now(), suspendedAt, unsubscribe });\n  }\n\n  /** Whether the session has an agent run in flight right now. */\n  isRunning(sessionId: string): boolean {\n    return this.#byId.get(sessionId)?.session.run.isRunning() ?? false;\n  }\n\n  /** The tool the session is parked on, oldest first, or nothing when no answer is owed. */\n  parked(sessionId: string): ParkedRun | undefined {\n    const tracked = this.#byId.get(sessionId);\n    if (!tracked) return undefined;\n    let oldest: ParkedRun | undefined;\n    for (const [toolCallId, { toolName }] of tracked.session.displayState.get().pendingSuspensions) {\n      const suspendedAt = tracked.suspendedAt.get(toolCallId) ?? tracked.seenAt;\n      if (!oldest || suspendedAt < oldest.suspendedAt) oldest = { toolName, suspendedAt };\n    }\n    return oldest;\n  }\n\n  /** Every parked session of a project, so the inbox reads no card when nothing waits. */\n  parkedIn(factoryProjectId: string): Array<{ sessionId: string; run: ParkedRun }> {\n    const parked: Array<{ sessionId: string; run: ParkedRun }> = [];\n    for (const [sessionId, tracked] of this.#byId) {\n      if (tracked.session.state.get().factoryProjectId !== factoryProjectId) continue;\n      const run = this.parked(sessionId);\n      if (run) parked.push({ sessionId, run });\n    }\n    return parked;\n  }\n\n  /** Fires when a session parks, is answered, or finishes a turn: whoever shows parked runs re-reads. */\n  onParkedChanged(listener: (session: LiveSession) => void): () => void {\n    this.#parkedListeners.add(listener);\n    return () => this.#parkedListeners.delete(listener);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AA0CA,IAAa,eAAb,MAA0B;CACxB,wBAAiB,IAAI,IAA4B;CACjD,mCAA4B,IAAI,IAAoC;;CAEpE,iBAAiB;CAEjB,YAAY,YAA6B;EACvC,WAAW,kBAAiB,YAAW,KAAKE,OAAO,OAAO,CAAC;EAC3D,WAAW,kBAAiB,YAAW;GACrC,MAAM,KAAK,QAAQ,SAAS,MAAM;GAClC,MAAM,YAAY,KAAK,OAAO,EAAE,MAAM,KAAA;GACtC,KAAKF,MAAM,IAAI,EAAE,CAAC,EAAE,YAAY;GAChC,KAAKA,MAAM,OAAO,EAAE;GACpB,IAAI,WAAW,KAAK,MAAM,YAAY,KAAKC,kBAAkB,SAAS,OAAO;EAC/E,CAAC;CACH;CAEA,iBAAyB;EACvB,KAAKE,iBAAiB,KAAK,IAAI,KAAK,IAAI,GAAG,KAAKA,iBAAiB,CAAC;EAClE,OAAO,KAAKA;CACd;CAEA,OAAO,SAA4B;EACjC,MAAM,8BAAc,IAAI,IAAoB;EAC5C,MAAM,cAAc,QAAQ,WAAU,UAAS;GAC7C,IAAI,MAAM,SAAS,kBAAkB,YAAY,IAAI,MAAM,YAAY,KAAKC,eAAe,CAAC;QACvF,IAAI,MAAM,SAAS,6BAA6B,YAAY,OAAO,MAAM,UAAU;QACnF,IAAI,MAAM,SAAS,eAAe,MAAM,WAAW,aAAa,YAAY,MAAM;QAClF;GACL,KAAK,MAAM,YAAY,KAAKH,kBAAkB,SAAS,OAAO;EAChE,CAAC;EACD,KAAKD,MAAM,IAAI,QAAQ,SAAS,MAAM,GAAG;GAAE;GAAS,QAAQ,KAAK,IAAI;GAAG;GAAa;EAAY,CAAC;CACpG;;CAGA,UAAU,WAA4B;EACpC,OAAO,KAAKA,MAAM,IAAI,SAAS,CAAC,EAAE,QAAQ,IAAI,UAAU,KAAK;CAC/D;;CAGA,OAAO,WAA0C;EAC/C,MAAM,UAAU,KAAKA,MAAM,IAAI,SAAS;EACxC,IAAI,CAAC,SAAS,OAAO,KAAA;EACrB,IAAI;EACJ,KAAK,MAAM,CAAC,YAAY,EAAE,eAAe,QAAQ,QAAQ,aAAa,IAAI,CAAC,CAAC,oBAAoB;GAC9F,MAAM,cAAc,QAAQ,YAAY,IAAI,UAAU,KAAK,QAAQ;GACnE,IAAI,CAAC,UAAU,cAAc,OAAO,aAAa,SAAS;IAAE;IAAU;GAAY;EACpF;EACA,OAAO;CACT;;CAGA,SAAS,kBAAwE;EAC/E,MAAM,SAAuD,CAAC;EAC9D,KAAK,MAAM,CAAC,WAAW,YAAY,KAAKA,OAAO;GAC7C,IAAI,QAAQ,QAAQ,MAAM,IAAI,CAAC,CAAC,qBAAqB,kBAAkB;GACvE,MAAM,MAAM,KAAK,OAAO,SAAS;GACjC,IAAI,KAAK,OAAO,KAAK;IAAE;IAAW;GAAI,CAAC;EACzC;EACA,OAAO;CACT;;CAGA,gBAAgB,UAAsD;EACpE,KAAKC,iBAAiB,IAAI,QAAQ;EAClC,aAAa,KAAKA,iBAAiB,OAAO,QAAQ;CACpD;AACF"}
+{"version":3,"file":"live-sessions.js","names":[],"sources":["../../src/session/live-sessions.ts"],"sourcesContent":["import type { AgentControllerEvent } from '@mastra/core/agent-controller';\n\n/** The slice of a live session this registry needs: its id, its run, its parked tools, and who it works for. */\nexport interface LiveSession {\n  readonly identity: { getId(): string };\n  readonly run: { isRunning(): boolean };\n  readonly state: { get(): Readonly<{ factoryOrgId?: string; factoryProjectId?: string }> };\n  readonly displayState: { get(): { pendingSuspensions: ReadonlyMap<string, { toolName: string }> } };\n  subscribe(listener: (event: AgentControllerEvent) => void): () => void;\n}\n\ninterface SessionNotifier {\n  onSessionCreated(listener: (session: LiveSession) => void): () => void;\n  onSessionDeleted(listener: (session: LiveSession) => void): () => void;\n}\n\n/** The tool a session has waited on longest, and since when (epoch ms). */\nexport interface ParkedRun {\n  toolName: string;\n  suspendedAt: number;\n}\n\ninterface TrackedSession {\n  session: LiveSession;\n  seenAt: number;\n  suspendedAt: Map<string, number>;\n  unsubscribe: () => void;\n}\n\n/**\n * The sessions this process has materialized, by session id.\n *\n * Membership comes from the controller's notifications rather than\n * `getSession`, which hands back the pending creation — awaiting it\n * from a request blocks for as long as the session takes to materialize its\n * sandbox, minutes on a cold clone. Notifications only fire once a session\n * exists, so a read never waits.\n *\n * Whether a session is *running* or *parked* is read from the session itself,\n * never tracked here: no missed run event can leave the answer stuck. Only the\n * moment each suspension arrived is kept, since the session does not date them.\n */\nexport class LiveSessions {\n  readonly #byId = new Map<string, TrackedSession>();\n  readonly #parkedListeners = new Set<(session: LiveSession) => void>();\n  /** A park stamp doubles as the receipt key, so two suspensions in one millisecond must not share one. */\n  #lastParkStamp = 0;\n\n  constructor(controller: SessionNotifier) {\n    controller.onSessionCreated(session => this.#track(session));\n    controller.onSessionDeleted(session => {\n      const id = session.identity.getId();\n      const wasParked = this.parked(id) !== undefined;\n      this.#byId.get(id)?.unsubscribe();\n      this.#byId.delete(id);\n      if (wasParked) for (const listener of this.#parkedListeners) listener(session);\n    });\n  }\n\n  #nextParkStamp(): number {\n    this.#lastParkStamp = Math.max(Date.now(), this.#lastParkStamp + 1);\n    return this.#lastParkStamp;\n  }\n\n  #track(session: LiveSession): void {\n    const suspendedAt = new Map<string, number>();\n    const unsubscribe = session.subscribe(event => {\n      if (event.type === 'tool_suspended') suspendedAt.set(event.toolCallId, this.#nextParkStamp());\n      else if (event.type === 'tool_suspension_cancelled') suspendedAt.delete(event.toolCallId);\n      else if (event.type === 'agent_end' && event.reason !== 'suspended') suspendedAt.clear();\n      else return;\n      for (const listener of this.#parkedListeners) listener(session);\n    });\n    this.#byId.set(session.identity.getId(), { session, seenAt: Date.now(), suspendedAt, unsubscribe });\n  }\n\n  /** Whether the session has an agent run in flight right now. */\n  isRunning(sessionId: string): boolean {\n    return this.#byId.get(sessionId)?.session.run.isRunning() ?? false;\n  }\n\n  /** The tool the session is parked on, oldest first, or nothing when no answer is owed. */\n  parked(sessionId: string): ParkedRun | undefined {\n    const tracked = this.#byId.get(sessionId);\n    if (!tracked) return undefined;\n    let oldest: ParkedRun | undefined;\n    for (const [toolCallId, { toolName }] of tracked.session.displayState.get().pendingSuspensions) {\n      const suspendedAt = tracked.suspendedAt.get(toolCallId) ?? tracked.seenAt;\n      if (!oldest || suspendedAt < oldest.suspendedAt) oldest = { toolName, suspendedAt };\n    }\n    return oldest;\n  }\n\n  /** Every parked session of a project, so the inbox reads no card when nothing waits. */\n  parkedIn(factoryProjectId: string): Array<{ sessionId: string; run: ParkedRun }> {\n    const parked: Array<{ sessionId: string; run: ParkedRun }> = [];\n    for (const [sessionId, tracked] of this.#byId) {\n      if (tracked.session.state.get().factoryProjectId !== factoryProjectId) continue;\n      const run = this.parked(sessionId);\n      if (run) parked.push({ sessionId, run });\n    }\n    return parked;\n  }\n\n  /** Fires when a session parks, is answered, or finishes a turn: whoever shows parked runs re-reads. */\n  onParkedChanged(listener: (session: LiveSession) => void): () => void {\n    this.#parkedListeners.add(listener);\n    return () => this.#parkedListeners.delete(listener);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AA0CA,IAAa,eAAb,MAA0B;CACxB,wBAAiB,IAAI,IAA4B;CACjD,mCAA4B,IAAI,IAAoC;;CAEpE,iBAAiB;CAEjB,YAAY,YAA6B;EACvC,WAAW,kBAAiB,YAAW,KAAK,OAAO,OAAO,CAAC;EAC3D,WAAW,kBAAiB,YAAW;GACrC,MAAM,KAAK,QAAQ,SAAS,MAAM;GAClC,MAAM,YAAY,KAAK,OAAO,EAAE,MAAM,KAAA;GACtC,KAAK,MAAM,IAAI,EAAE,CAAC,EAAE,YAAY;GAChC,KAAK,MAAM,OAAO,EAAE;GACpB,IAAI,WAAW,KAAK,MAAM,YAAY,KAAK,kBAAkB,SAAS,OAAO;EAC/E,CAAC;CACH;CAEA,iBAAyB;EACvB,KAAK,iBAAiB,KAAK,IAAI,KAAK,IAAI,GAAG,KAAK,iBAAiB,CAAC;EAClE,OAAO,KAAK;CACd;CAEA,OAAO,SAA4B;EACjC,MAAM,8BAAc,IAAI,IAAoB;EAC5C,MAAM,cAAc,QAAQ,WAAU,UAAS;GAC7C,IAAI,MAAM,SAAS,kBAAkB,YAAY,IAAI,MAAM,YAAY,KAAK,eAAe,CAAC;QACvF,IAAI,MAAM,SAAS,6BAA6B,YAAY,OAAO,MAAM,UAAU;QACnF,IAAI,MAAM,SAAS,eAAe,MAAM,WAAW,aAAa,YAAY,MAAM;QAClF;GACL,KAAK,MAAM,YAAY,KAAK,kBAAkB,SAAS,OAAO;EAChE,CAAC;EACD,KAAK,MAAM,IAAI,QAAQ,SAAS,MAAM,GAAG;GAAE;GAAS,QAAQ,KAAK,IAAI;GAAG;GAAa;EAAY,CAAC;CACpG;;CAGA,UAAU,WAA4B;EACpC,OAAO,KAAK,MAAM,IAAI,SAAS,CAAC,EAAE,QAAQ,IAAI,UAAU,KAAK;CAC/D;;CAGA,OAAO,WAA0C;EAC/C,MAAM,UAAU,KAAK,MAAM,IAAI,SAAS;EACxC,IAAI,CAAC,SAAS,OAAO,KAAA;EACrB,IAAI;EACJ,KAAK,MAAM,CAAC,YAAY,EAAE,eAAe,QAAQ,QAAQ,aAAa,IAAI,CAAC,CAAC,oBAAoB;GAC9F,MAAM,cAAc,QAAQ,YAAY,IAAI,UAAU,KAAK,QAAQ;GACnE,IAAI,CAAC,UAAU,cAAc,OAAO,aAAa,SAAS;IAAE;IAAU;GAAY;EACpF;EACA,OAAO;CACT;;CAGA,SAAS,kBAAwE;EAC/E,MAAM,SAAuD,CAAC;EAC9D,KAAK,MAAM,CAAC,WAAW,YAAY,KAAK,OAAO;GAC7C,IAAI,QAAQ,QAAQ,MAAM,IAAI,CAAC,CAAC,qBAAqB,kBAAkB;GACvE,MAAM,MAAM,KAAK,OAAO,SAAS;GACjC,IAAI,KAAK,OAAO,KAAK;IAAE;IAAW;GAAI,CAAC;EACzC;EACA,OAAO;CACT;;CAGA,gBAAgB,UAAsD;EACpE,KAAK,iBAAiB,IAAI,QAAQ;EAClC,aAAa,KAAK,iBAAiB,OAAO,QAAQ;CACpD;AACF"}

package/dist/session/memory-settings-hydration.d.ts

@@ -13,7 +13,7 @@ export declare const DEFAULT_REFLECTION_THRESHOLD = 40000;
 export declare function layerPersonalMemorySettings(project: MemorySettingsRecord | null, personal: MemorySettingsRecord | null): MemorySettingsRecord | null;
 export interface MemorySettingsHydrationSession {
     readonly identity: {
-        getResourceId(): string;
+        getId(): string;
     };
     state: {
         get: () => MastraCodeState | undefined;

package/dist/session/memory-settings-hydration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory-settings-hydration.d.ts","sourceRoot":"","sources":["../../src/session/memory-settings-hydration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE/D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AACvF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AAG5F,yDAAyD;AACzD,eAAO,MAAM,6BAA6B,QAAS,CAAC;AACpD,eAAO,MAAM,4BAA4B,QAAS,CAAC;AAEnD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,oBAAoB,GAAG,IAAI,EACpC,QAAQ,EAAE,oBAAoB,GAAG,IAAI,GACpC,oBAAoB,GAAG,IAAI,CAW7B;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,QAAQ,EAAE;QAAE,aAAa,IAAI,MAAM,CAAA;KAAE,CAAC;IAC/C,KAAK,EAAE;QACL,GAAG,EAAE,MAAM,eAAe,GAAG,SAAS,CAAC;QACvC,GAAG,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,eAAe,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;KAClE,CAAC;CACH;AAED,MAAM,WAAW,mCAAmC;IAClD,4FAA4F;IAC5F,aAAa,EAAE;QACb,QAAQ,EAAE,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,CAAC;KAC1E,CAAC;CACH;AAED;;;;;GAKG;AACH,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,8BAA8B,EACvC,EAAE,aAAa,EAAE,EAAE,mCAAmC,GACrD,OAAO,CAAC,IAAI,CAAC,CAYf"}
+{"version":3,"file":"memory-settings-hydration.d.ts","sourceRoot":"","sources":["../../src/session/memory-settings-hydration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE/D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AACvF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AAG5F,yDAAyD;AACzD,eAAO,MAAM,6BAA6B,QAAS,CAAC;AACpD,eAAO,MAAM,4BAA4B,QAAS,CAAC;AAEnD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,oBAAoB,GAAG,IAAI,EACpC,QAAQ,EAAE,oBAAoB,GAAG,IAAI,GACpC,oBAAoB,GAAG,IAAI,CAW7B;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,QAAQ,EAAE;QAAE,KAAK,IAAI,MAAM,CAAA;KAAE,CAAC;IACvC,KAAK,EAAE;QACL,GAAG,EAAE,MAAM,eAAe,GAAG,SAAS,CAAC;QACvC,GAAG,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,eAAe,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;KAClE,CAAC;CACH;AAED,MAAM,WAAW,mCAAmC;IAClD,4FAA4F;IAC5F,aAAa,EAAE;QACb,QAAQ,EAAE,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,CAAC;KAC1E,CAAC;CACH;AAED;;;;;GAKG;AACH,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,8BAA8B,EACvC,EAAE,aAAa,EAAE,EAAE,mCAAmC,GACrD,OAAO,CAAC,IAAI,CAAC,CAYf"}

package/dist/session/memory-settings-hydration.js

@@ -31,7 +31,8 @@ async function hydrateSessionMemorySettings(session, { sourceControl }) {
 	const state = session.state.get() ?? {};
 	if (Boolean(state.factoryProjectId) && hasResolvedOrg(state.factoryOrgId)) return;
 	try {
-		await seedSessionOrg(session, (await sourceControl.sessions.getBySessionId(session.identity.getResourceId()))?.orgId);
+		const record = await sourceControl.sessions.getBySessionId(session.identity.getId());
+		await seedSessionOrg(session, record?.orgId);
 	} catch (error) {
 		console.warn("[Factory session hydration] Unable to resolve the session organization.", error);
 		if (!session.state.get()?.factoryOrgId) await seedSessionOrg(session, void 0);

package/dist/session/memory-settings-hydration.js.map

@@ -1 +1 @@
-{"version":3,"file":"memory-settings-hydration.js","names":[],"sources":["../../src/session/memory-settings-hydration.ts"],"sourcesContent":["import type { MastraCodeState } from '@mastra/code-sdk/schema';\n\nimport type { MemorySettingsRecord } from '../storage/domains/memory-settings/base.js';\nimport type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\nimport { hasResolvedOrg, seedSessionOrg } from './org-seed.js';\n\n/** Default thresholds mirror the TUI `/om` fallbacks. */\nexport const DEFAULT_OBSERVATION_THRESHOLD = 30_000;\nexport const DEFAULT_REFLECTION_THRESHOLD = 40_000;\n\n/**\n * Layer a channel sender's own row over the project's shared row. The sender\n * wins only for knobs they saved; an unsaved (`null`) knob keeps the project's\n * value rather than resetting to Auto or the built-in default, because the\n * project's choice may be the only credentialed one.\n */\nexport function layerPersonalMemorySettings(\n  project: MemorySettingsRecord | null,\n  personal: MemorySettingsRecord | null,\n): MemorySettingsRecord | null {\n  if (!personal) return project;\n  if (!project) return personal;\n  return {\n    ...project,\n    observerModelId: personal.observerModelId ?? project.observerModelId,\n    reflectorModelId: personal.reflectorModelId ?? project.reflectorModelId,\n    observationThreshold: personal.observationThreshold ?? project.observationThreshold,\n    reflectionThreshold: personal.reflectionThreshold ?? project.reflectionThreshold,\n    observeAttachments: personal.observeAttachments ?? project.observeAttachments,\n  };\n}\n\nexport interface MemorySettingsHydrationSession {\n  readonly identity: { getResourceId(): string };\n  state: {\n    get: () => MastraCodeState | undefined;\n    set: (updates: Partial<MastraCodeState>) => Promise<void> | void;\n  };\n}\n\nexport interface MemorySettingsHydrationDependencies {\n  /** GitHub-integration source-control rows — the only creator of web user sessions today. */\n  sourceControl: {\n    sessions: Pick<SourceControlStorageHandle['sessions'], 'getBySessionId'>;\n  };\n}\n\n/**\n * Seed a freshly created controller session's tenant org from its source-control\n * row. Memory settings remain DB-authoritative and are loaded into request\n * context for each invocation instead of being copied into mutable session\n * state.\n */\nexport async function hydrateSessionMemorySettings(\n  session: MemorySettingsHydrationSession,\n  { sourceControl }: MemorySettingsHydrationDependencies,\n): Promise<void> {\n  const state: Partial<MastraCodeState> = session.state.get() ?? {};\n  const isFactoryRun = Boolean(state.factoryProjectId);\n  if (isFactoryRun && hasResolvedOrg(state.factoryOrgId)) return;\n\n  try {\n    const record = await sourceControl.sessions.getBySessionId(session.identity.getResourceId());\n    await seedSessionOrg(session, record?.orgId);\n  } catch (error) {\n    console.warn('[Factory session hydration] Unable to resolve the session organization.', error);\n    if (!session.state.get()?.factoryOrgId) await seedSessionOrg(session, undefined);\n  }\n}\n"],"mappings":";;;AAOA,MAAa,gCAAgC;AAC7C,MAAa,+BAA+B;;;;;;;AAQ5C,SAAgB,4BACd,SACA,UAC6B;CAC7B,IAAI,CAAC,UAAU,OAAO;CACtB,IAAI,CAAC,SAAS,OAAO;CACrB,OAAO;EACL,GAAG;EACH,iBAAiB,SAAS,mBAAmB,QAAQ;EACrD,kBAAkB,SAAS,oBAAoB,QAAQ;EACvD,sBAAsB,SAAS,wBAAwB,QAAQ;EAC/D,qBAAqB,SAAS,uBAAuB,QAAQ;EAC7D,oBAAoB,SAAS,sBAAsB,QAAQ;CAC7D;AACF;;;;;;;AAuBA,eAAsB,6BACpB,SACA,EAAE,iBACa;CACf,MAAM,QAAkC,QAAQ,MAAM,IAAI,KAAK,CAAC;CAEhE,IADqB,QAAQ,MAAM,gBACpB,KAAK,eAAe,MAAM,YAAY,GAAG;CAExD,IAAI;EAEF,MAAM,eAAe,UAAS,MADT,cAAc,SAAS,eAAe,QAAQ,SAAS,cAAc,CAAC,EAAA,EACrD,KAAK;CAC7C,SAAS,OAAO;EACd,QAAQ,KAAK,2EAA2E,KAAK;EAC7F,IAAI,CAAC,QAAQ,MAAM,IAAI,CAAC,EAAE,cAAc,MAAM,eAAe,SAAS,KAAA,CAAS;CACjF;AACF"}
+{"version":3,"file":"memory-settings-hydration.js","names":[],"sources":["../../src/session/memory-settings-hydration.ts"],"sourcesContent":["import type { MastraCodeState } from '@mastra/code-sdk/schema';\n\nimport type { MemorySettingsRecord } from '../storage/domains/memory-settings/base.js';\nimport type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\nimport { hasResolvedOrg, seedSessionOrg } from './org-seed.js';\n\n/** Default thresholds mirror the TUI `/om` fallbacks. */\nexport const DEFAULT_OBSERVATION_THRESHOLD = 30_000;\nexport const DEFAULT_REFLECTION_THRESHOLD = 40_000;\n\n/**\n * Layer a channel sender's own row over the project's shared row. The sender\n * wins only for knobs they saved; an unsaved (`null`) knob keeps the project's\n * value rather than resetting to Auto or the built-in default, because the\n * project's choice may be the only credentialed one.\n */\nexport function layerPersonalMemorySettings(\n  project: MemorySettingsRecord | null,\n  personal: MemorySettingsRecord | null,\n): MemorySettingsRecord | null {\n  if (!personal) return project;\n  if (!project) return personal;\n  return {\n    ...project,\n    observerModelId: personal.observerModelId ?? project.observerModelId,\n    reflectorModelId: personal.reflectorModelId ?? project.reflectorModelId,\n    observationThreshold: personal.observationThreshold ?? project.observationThreshold,\n    reflectionThreshold: personal.reflectionThreshold ?? project.reflectionThreshold,\n    observeAttachments: personal.observeAttachments ?? project.observeAttachments,\n  };\n}\n\nexport interface MemorySettingsHydrationSession {\n  readonly identity: { getId(): string };\n  state: {\n    get: () => MastraCodeState | undefined;\n    set: (updates: Partial<MastraCodeState>) => Promise<void> | void;\n  };\n}\n\nexport interface MemorySettingsHydrationDependencies {\n  /** GitHub-integration source-control rows — the only creator of web user sessions today. */\n  sourceControl: {\n    sessions: Pick<SourceControlStorageHandle['sessions'], 'getBySessionId'>;\n  };\n}\n\n/**\n * Seed a freshly created controller session's tenant org from its source-control\n * row. Memory settings remain DB-authoritative and are loaded into request\n * context for each invocation instead of being copied into mutable session\n * state.\n */\nexport async function hydrateSessionMemorySettings(\n  session: MemorySettingsHydrationSession,\n  { sourceControl }: MemorySettingsHydrationDependencies,\n): Promise<void> {\n  const state: Partial<MastraCodeState> = session.state.get() ?? {};\n  const isFactoryRun = Boolean(state.factoryProjectId);\n  if (isFactoryRun && hasResolvedOrg(state.factoryOrgId)) return;\n\n  try {\n    const record = await sourceControl.sessions.getBySessionId(session.identity.getId());\n    await seedSessionOrg(session, record?.orgId);\n  } catch (error) {\n    console.warn('[Factory session hydration] Unable to resolve the session organization.', error);\n    if (!session.state.get()?.factoryOrgId) await seedSessionOrg(session, undefined);\n  }\n}\n"],"mappings":";;;AAOA,MAAa,gCAAgC;AAC7C,MAAa,+BAA+B;;;;;;;AAQ5C,SAAgB,4BACd,SACA,UAC6B;CAC7B,IAAI,CAAC,UAAU,OAAO;CACtB,IAAI,CAAC,SAAS,OAAO;CACrB,OAAO;EACL,GAAG;EACH,iBAAiB,SAAS,mBAAmB,QAAQ;EACrD,kBAAkB,SAAS,oBAAoB,QAAQ;EACvD,sBAAsB,SAAS,wBAAwB,QAAQ;EAC/D,qBAAqB,SAAS,uBAAuB,QAAQ;EAC7D,oBAAoB,SAAS,sBAAsB,QAAQ;CAC7D;AACF;;;;;;;AAuBA,eAAsB,6BACpB,SACA,EAAE,iBACa;CACf,MAAM,QAAkC,QAAQ,MAAM,IAAI,KAAK,CAAC;CAEhE,IADqB,QAAQ,MAAM,gBACpB,KAAK,eAAe,MAAM,YAAY,GAAG;CAExD,IAAI;EACF,MAAM,SAAS,MAAM,cAAc,SAAS,eAAe,QAAQ,SAAS,MAAM,CAAC;EACnF,MAAM,eAAe,SAAS,QAAQ,KAAK;CAC7C,SAAS,OAAO;EACd,QAAQ,KAAK,2EAA2E,KAAK;EAC7F,IAAI,CAAC,QAAQ,MAAM,IAAI,CAAC,EAAE,cAAc,MAAM,eAAe,SAAS,KAAA,CAAS;CACjF;AACF"}

package/dist/session/resource-migration.d.ts

@@ -0,0 +1,105 @@
+import type { StorageThreadType } from '@mastra/core/memory';
+import type { MemoryStorage } from '@mastra/core/storage';
+import type { SourceControlSession } from '../storage/domains/source-control/base.js';
+import type { WorkItemRow } from '../storage/domains/work-items/base.js';
+export interface SessionResourceMigrationDeps {
+    sessions: {
+        listSessionsAwaitingResourceMigration(): Promise<SourceControlSession[]>;
+        markResourcesMigrated(sessionId: string): Promise<void>;
+    };
+    workItems: {
+        listRunBoundItems(sessionId: string): Promise<(Pick<WorkItemRow, 'externalSource' | 'metadata'> | null)[]>;
+        moveRunBindingsToResource(input: {
+            sessionId: string;
+            resourceId: string;
+        }): Promise<number>;
+    };
+    /** Absent when the integrations domain is not ready; subscriptions then stay where they are. */
+    integrations?: {
+        moveSubscriptionsToResource(input: {
+            fromResourceId: string;
+            toResourceId: string;
+        }): Promise<number>;
+    };
+    memory: Pick<MemoryStorage, 'listThreads' | 'patchThread' | 'getObservationalMemory' | 'supportsObservationalMemory'>;
+    /**
+     * Moves a thread with everything keyed by its resource, such as observation vectors. Pass the
+     * sessions' `Memory`; the bare memory store only moves the thread and its messages.
+     */
+    threads: {
+        updateThreadResourceId(input: {
+            threadId: string;
+            resourceId: string;
+        }): Promise<StorageThreadType>;
+    };
+}
+export interface SessionResourceMigrationReport {
+    sessions: number;
+    factorySessions: number;
+    userSessions: number;
+    /** Runs on untrusted content; they keep their own resource. */
+    isolatedSessions: number;
+    /** Factory-owned sessions with no Factory to move them onto; left untouched. */
+    skipped: string[];
+    /** Sessions whose move threw; the next startup retries them. */
+    failed: string[];
+    /**
+     * Moved sessions whose subscriptions couldn't move because the integrations
+     * domain wasn't ready; left unmarked so a later startup moves them.
+     */
+    subscriptionsPending: string[];
+    threads: number;
+    runBindings: number;
+    subscriptions: number;
+    /** Moved sessions whose resource-scoped observational memory stays under their old resource. */
+    resourceObservationsLeft: string[];
+}
+/**
+ * The memory resource a session belongs to: its Factory for runs, side
+ * sessions and Slack channel threads, its owner for sessions a person opened,
+ * private side sessions and Slack DMs. A run on untrusted content (a pull request, or a card
+ * written outside the write-access circle) keeps its own resource, like a new
+ * run would; so does a run whose work item no longer loads, since nothing then
+ * shows its content was trusted. `null` when a Factory-owned session has no
+ * Factory recorded — guessing would merge it into the wrong resource.
+ */
+export declare function sessionMemoryResource(session: SourceControlSession, boundItems: (Pick<WorkItemRow, 'externalSource' | 'metadata'> | null)[]): {
+    owner: 'factory' | 'user' | 'isolated';
+    resourceId: string | null;
+};
+/**
+ * Move sessions stored under the legacy `resourceId = sessionId` onto their
+ * Factory or user resource. Threads keep their id (`threadId === sessionId`)
+ * and get `factorySessionId` so per-session listings still find them.
+ *
+ * Threads move through the sessions' `Memory`, so their observation vectors
+ * follow them and recall search finds their past observations under the new
+ * resource. Every write only touches values still equal to the session id, so
+ * a rerun is a no-op and a crash leaves a state the next run resumes from. A
+ * session is marked once moved, so later starts only read sessions that are not
+ * (new sessions are created marked).
+ * Nothing is deleted. Thread-scoped observational memory is keyed by thread id
+ * and keeps working. Resource-scoped observational memory written under
+ * `resource:<sessionId>` stays under that key and is no longer read: several
+ * sessions merge into one resource, and their records cannot be merged.
+ */
+export declare function migrateSessionResources(deps: SessionResourceMigrationDeps): Promise<SessionResourceMigrationReport>;
+export interface SessionVisibilityBackfillDeps {
+    sessions: {
+        listSessionsAwaitingVisibilityCheck(): Promise<SourceControlSession[]>;
+        markVisibilityChecked(sessionId: string, options: {
+            makePrivate: boolean;
+        }): Promise<void>;
+    };
+    workItems: Pick<SessionResourceMigrationDeps['workItems'], 'listRunBoundItems'>;
+    memory: Pick<MemoryStorage, 'getThreadById'>;
+}
+/**
+ * Mark shared user sessions private when their conversation lives on their owner's resource.
+ * The resource already keeps teammates out of such a session; this makes lists agree, so they
+ * stop seeing a session they can't open. Sessions shared onto their Factory, runs, Slack threads
+ * and side sessions are left alone. Each session is checked once: new sessions start checked,
+ * and a session that throws stays unchecked so the next start retries it.
+ */
+export declare function privatizeOwnerResourceSessions(deps: SessionVisibilityBackfillDeps): Promise<number>;
+//# sourceMappingURL=resource-migration.d.ts.map

package/dist/session/resource-migration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-migration.d.ts","sourceRoot":"","sources":["../../src/session/resource-migration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAG1D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAC;AAezE,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,EAAE;QACR,qCAAqC,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;QACzE,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KACzD,CAAC;IACF,SAAS,EAAE;QACT,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,GAAG,UAAU,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3G,yBAAyB,CAAC,KAAK,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;KAC9F,CAAC;IACF,gGAAgG;IAChG,YAAY,CAAC,EAAE;QACb,2BAA2B,CAAC,KAAK,EAAE;YAAE,cAAc,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;KACvG,CAAC;IACF,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,aAAa,GAAG,aAAa,GAAG,wBAAwB,GAAG,6BAA6B,CAAC,CAAC;IACtH;;;OAGG;IACH,OAAO,EAAE;QAAE,sBAAsB,CAAC,KAAK,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;KAAE,CAAC;CAClH;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,+DAA+D;IAC/D,gBAAgB,EAAE,MAAM,CAAC;IACzB,gFAAgF;IAChF,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,gEAAgE;IAChE,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB;;;OAGG;IACH,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,gGAAgG;IAChG,wBAAwB,EAAE,MAAM,EAAE,CAAC;CACpC;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,oBAAoB,EAC7B,UAAU,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,GAAG,UAAU,CAAC,GAAG,IAAI,CAAC,EAAE,GACtE;IAAE,KAAK,EAAE,SAAS,GAAG,MAAM,GAAG,UAAU,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAYvE;AAMD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,4BAA4B,GACjC,OAAO,CAAC,8BAA8B,CAAC,CAsHzC;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,EAAE;QACR,mCAAmC,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;QACvE,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE;YAAE,WAAW,EAAE,OAAO,CAAA;SAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAC5F,CAAC;IACF,SAAS,EAAE,IAAI,CAAC,4BAA4B,CAAC,WAAW,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAChF,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;CAC9C;AAED;;;;;;GAMG;AACH,wBAAsB,8BAA8B,CAAC,IAAI,EAAE,6BAA6B,GAAG,OAAO,CAAC,MAAM,CAAC,CAsBzG"}