@mastra/factory 0.24.0-alpha.9 → 0.25.0-alpha.0

package/dist/session/resource-migration.js

@@ -0,0 +1,195 @@
+import { externallyAuthoredWorkItem } from "../rules/types.js";
+import { sessionStampCounts } from "./session-threads.js";
+//#region src/session/resource-migration.ts
+/** Slack-started sessions live on a `slack/<thread>` branch (see `threadBranch` in the Slack integration). */
+const SLACK_SESSION_BRANCH_PREFIX = "slack/";
+/**
+* Set on a thread while it moves and turned off once the move, vectors included, is done. A
+* crash in between leaves the thread moved in storage but no longer listed under its
+* session id, so the next start finds it by this flag and its session stamp and finishes the move.
+*/
+const MOVE_PENDING_KEY = "factoryResourceMovePending";
+/** How often a long resource migration reports how far it got. */
+const PROGRESS_LOG_INTERVAL_MS = 1e4;
+/**
+* The memory resource a session belongs to: its Factory for runs, side
+* sessions and Slack channel threads, its owner for sessions a person opened,
+* private side sessions and Slack DMs. A run on untrusted content (a pull request, or a card
+* written outside the write-access circle) keeps its own resource, like a new
+* run would; so does a run whose work item no longer loads, since nothing then
+* shows its content was trusted. `null` when a Factory-owned session has no
+* Factory recorded — guessing would merge it into the wrong resource.
+*/
+function sessionMemoryResource(session, boundItems) {
+	if (boundItems.some((item) => item === null || untrustedWorkItem(item))) return {
+		owner: "isolated",
+		resourceId: session.sessionId
+	};
+	const sharedWithOrg = session.visibility !== "private" && (session.originSessionId !== null || session.branch.startsWith(SLACK_SESSION_BRANCH_PREFIX));
+	return boundItems.length > 0 || sharedWithOrg ? {
+		owner: "factory",
+		resourceId: session.factoryProjectId
+	} : {
+		owner: "user",
+		resourceId: session.userId
+	};
+}
+function untrustedWorkItem(item) {
+	return item.externalSource?.type === "pull-request" || externallyAuthoredWorkItem(item);
+}
+/**
+* Move sessions stored under the legacy `resourceId = sessionId` onto their
+* Factory or user resource. Threads keep their id (`threadId === sessionId`)
+* and get `factorySessionId` so per-session listings still find them.
+*
+* Threads move through the sessions' `Memory`, so their observation vectors
+* follow them and recall search finds their past observations under the new
+* resource. Every write only touches values still equal to the session id, so
+* a rerun is a no-op and a crash leaves a state the next run resumes from. A
+* session is marked once moved, so later starts only read sessions that are not
+* (new sessions are created marked).
+* Nothing is deleted. Thread-scoped observational memory is keyed by thread id
+* and keeps working. Resource-scoped observational memory written under
+* `resource:<sessionId>` stays under that key and is no longer read: several
+* sessions merge into one resource, and their records cannot be merged.
+*/
+async function migrateSessionResources(deps) {
+	const report = {
+		sessions: 0,
+		factorySessions: 0,
+		userSessions: 0,
+		isolatedSessions: 0,
+		skipped: [],
+		failed: [],
+		subscriptionsPending: [],
+		threads: 0,
+		runBindings: 0,
+		subscriptions: 0,
+		resourceObservationsLeft: []
+	};
+	const sessions = await deps.sessions.listSessionsAwaitingResourceMigration();
+	if (sessions.length > 0) console.info(`[factory] session resource migration: moving ${sessions.length} sessions in the background`);
+	let lastProgressAt = Date.now();
+	for (const session of sessions) {
+		report.sessions += 1;
+		const { sessionId } = session;
+		try {
+			const { owner, resourceId } = sessionMemoryResource(session, await deps.workItems.listRunBoundItems(sessionId));
+			if (!resourceId) {
+				report.skipped.push(sessionId);
+				continue;
+			}
+			if (owner === "factory") report.factorySessions += 1;
+			else if (owner === "isolated") report.isolatedSessions += 1;
+			else report.userSessions += 1;
+			if (resourceId === sessionId) {
+				await deps.sessions.markResourcesMigrated(sessionId);
+				continue;
+			}
+			const { threads: interrupted } = await deps.memory.listThreads({
+				filter: {
+					resourceId,
+					metadata: {
+						factorySessionId: sessionId,
+						[MOVE_PENDING_KEY]: true
+					}
+				},
+				perPage: false
+			});
+			for (const thread of interrupted) {
+				if (thread.resourceId === sessionId) continue;
+				await moveThread(deps, thread, thread.resourceId);
+				report.threads += 1;
+			}
+			const { threads } = await deps.memory.listThreads({
+				filter: { resourceId: sessionId },
+				perPage: false
+			});
+			const stampsCount = sessionStampCounts(session, resourceId);
+			for (const thread of threads) {
+				if (!stampsCount && thread.id !== sessionId) continue;
+				const metadata = {
+					...thread.metadata,
+					factorySessionId: sessionId,
+					[MOVE_PENDING_KEY]: true
+				};
+				await deps.memory.patchThread({
+					id: thread.id,
+					metadata
+				});
+				await moveThread(deps, {
+					...thread,
+					metadata
+				}, resourceId);
+				report.threads += 1;
+			}
+			report.runBindings += await deps.workItems.moveRunBindingsToResource({
+				sessionId,
+				resourceId
+			});
+			if (deps.integrations) report.subscriptions += await deps.integrations.moveSubscriptionsToResource({
+				fromResourceId: sessionId,
+				toResourceId: resourceId
+			});
+			if (threads.length > 0 && deps.memory.supportsObservationalMemory && await deps.memory.getObservationalMemory(null, sessionId)) {
+				report.resourceObservationsLeft.push(sessionId);
+				console.warn(`[factory] session resource migration: session ${sessionId} has resource-scoped observational memory; it stays under resource ${sessionId} and is not carried into ${resourceId}`);
+			}
+			if (!deps.integrations) {
+				report.subscriptionsPending.push(sessionId);
+				continue;
+			}
+			await deps.sessions.markResourcesMigrated(sessionId);
+		} catch (error) {
+			report.failed.push(sessionId);
+			console.warn(`[factory] session resource migration: session ${sessionId} not moved: ${error instanceof Error ? error.message : error}`);
+		} finally {
+			if (report.sessions < sessions.length && Date.now() - lastProgressAt >= PROGRESS_LOG_INTERVAL_MS) {
+				lastProgressAt = Date.now();
+				console.info(`[factory] session resource migration: ${report.sessions}/${sessions.length} sessions checked, ${report.threads} threads moved`);
+			}
+		}
+	}
+	if (report.threads + report.runBindings + report.subscriptions + report.skipped.length + report.failed.length + report.subscriptionsPending.length > 0) console.info(`[factory] session resource migration: ${report.threads} threads, ${report.runBindings} run bindings, ${report.subscriptions} subscriptions moved; ${report.skipped.length} Factory sessions without a Factory skipped; ${report.failed.length} sessions failed; ${report.subscriptionsPending.length} sessions wait for integrations to move their subscriptions`);
+	return report;
+}
+/**
+* Mark shared user sessions private when their conversation lives on their owner's resource.
+* The resource already keeps teammates out of such a session; this makes lists agree, so they
+* stop seeing a session they can't open. Sessions shared onto their Factory, runs, Slack threads
+* and side sessions are left alone. Each session is checked once: new sessions start checked,
+* and a session that throws stays unchecked so the next start retries it.
+*/
+async function privatizeOwnerResourceSessions(deps) {
+	let privatized = 0;
+	for (const session of await deps.sessions.listSessionsAwaitingVisibilityCheck()) try {
+		let makePrivate = false;
+		if (session.visibility !== "private") {
+			const { owner } = sessionMemoryResource(session, await deps.workItems.listRunBoundItems(session.sessionId));
+			makePrivate = (owner === "user" ? await deps.memory.getThreadById({ threadId: session.sessionId }) : null)?.resourceId === session.userId;
+		}
+		await deps.sessions.markVisibilityChecked(session.sessionId, { makePrivate });
+		if (makePrivate) privatized += 1;
+	} catch (error) {
+		console.warn(`[factory] session visibility check: session ${session.sessionId} not checked: ${error instanceof Error ? error.message : error}`);
+	}
+	if (privatized > 0) console.info(`[factory] session visibility check: ${privatized} sessions on their owner's memory made private`);
+	return privatized;
+}
+async function moveThread(deps, thread, resourceId) {
+	await deps.threads.updateThreadResourceId({
+		threadId: thread.id,
+		resourceId
+	});
+	await deps.memory.patchThread({
+		id: thread.id,
+		metadata: {
+			...thread.metadata,
+			[MOVE_PENDING_KEY]: false
+		}
+	});
+}
+//#endregion
+export { migrateSessionResources, privatizeOwnerResourceSessions, sessionMemoryResource };
+
+//# sourceMappingURL=resource-migration.js.map

package/dist/session/resource-migration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-migration.js","names":[],"sources":["../../src/session/resource-migration.ts"],"sourcesContent":["import type { StorageThreadType } from '@mastra/core/memory';\nimport type { MemoryStorage } from '@mastra/core/storage';\n\nimport { externallyAuthoredWorkItem } from '../rules/types.js';\nimport type { SourceControlSession } from '../storage/domains/source-control/base.js';\nimport type { WorkItemRow } from '../storage/domains/work-items/base.js';\nimport { sessionStampCounts } from './session-threads.js';\n\n/** Slack-started sessions live on a `slack/<thread>` branch (see `threadBranch` in the Slack integration). */\nconst SLACK_SESSION_BRANCH_PREFIX = 'slack/';\n\n/**\n * Set on a thread while it moves and turned off once the move, vectors included, is done. A\n * crash in between leaves the thread moved in storage but no longer listed under its\n * session id, so the next start finds it by this flag and its session stamp and finishes the move.\n */\nconst MOVE_PENDING_KEY = 'factoryResourceMovePending';\n/** How often a long resource migration reports how far it got. */\nconst PROGRESS_LOG_INTERVAL_MS = 10_000;\n\nexport interface SessionResourceMigrationDeps {\n  sessions: {\n    listSessionsAwaitingResourceMigration(): Promise<SourceControlSession[]>;\n    markResourcesMigrated(sessionId: string): Promise<void>;\n  };\n  workItems: {\n    listRunBoundItems(sessionId: string): Promise<(Pick<WorkItemRow, 'externalSource' | 'metadata'> | null)[]>;\n    moveRunBindingsToResource(input: { sessionId: string; resourceId: string }): Promise<number>;\n  };\n  /** Absent when the integrations domain is not ready; subscriptions then stay where they are. */\n  integrations?: {\n    moveSubscriptionsToResource(input: { fromResourceId: string; toResourceId: string }): Promise<number>;\n  };\n  memory: Pick<MemoryStorage, 'listThreads' | 'patchThread' | 'getObservationalMemory' | 'supportsObservationalMemory'>;\n  /**\n   * Moves a thread with everything keyed by its resource, such as observation vectors. Pass the\n   * sessions' `Memory`; the bare memory store only moves the thread and its messages.\n   */\n  threads: { updateThreadResourceId(input: { threadId: string; resourceId: string }): Promise<StorageThreadType> };\n}\n\nexport interface SessionResourceMigrationReport {\n  sessions: number;\n  factorySessions: number;\n  userSessions: number;\n  /** Runs on untrusted content; they keep their own resource. */\n  isolatedSessions: number;\n  /** Factory-owned sessions with no Factory to move them onto; left untouched. */\n  skipped: string[];\n  /** Sessions whose move threw; the next startup retries them. */\n  failed: string[];\n  /**\n   * Moved sessions whose subscriptions couldn't move because the integrations\n   * domain wasn't ready; left unmarked so a later startup moves them.\n   */\n  subscriptionsPending: string[];\n  threads: number;\n  runBindings: number;\n  subscriptions: number;\n  /** Moved sessions whose resource-scoped observational memory stays under their old resource. */\n  resourceObservationsLeft: string[];\n}\n\n/**\n * The memory resource a session belongs to: its Factory for runs, side\n * sessions and Slack channel threads, its owner for sessions a person opened,\n * private side sessions and Slack DMs. A run on untrusted content (a pull request, or a card\n * written outside the write-access circle) keeps its own resource, like a new\n * run would; so does a run whose work item no longer loads, since nothing then\n * shows its content was trusted. `null` when a Factory-owned session has no\n * Factory recorded — guessing would merge it into the wrong resource.\n */\nexport function sessionMemoryResource(\n  session: SourceControlSession,\n  boundItems: (Pick<WorkItemRow, 'externalSource' | 'metadata'> | null)[],\n): { owner: 'factory' | 'user' | 'isolated'; resourceId: string | null } {\n  if (boundItems.some(item => item === null || untrustedWorkItem(item))) {\n    return { owner: 'isolated', resourceId: session.sessionId };\n  }\n  // A Slack DM or private side session is its owner's, so it belongs with their own sessions.\n  const sharedWithOrg =\n    session.visibility !== 'private' &&\n    (session.originSessionId !== null || session.branch.startsWith(SLACK_SESSION_BRANCH_PREFIX));\n  const factoryOwned = boundItems.length > 0 || sharedWithOrg;\n  return factoryOwned\n    ? { owner: 'factory', resourceId: session.factoryProjectId }\n    : { owner: 'user', resourceId: session.userId };\n}\n\nfunction untrustedWorkItem(item: Pick<WorkItemRow, 'externalSource' | 'metadata'>): boolean {\n  return item.externalSource?.type === 'pull-request' || externallyAuthoredWorkItem(item);\n}\n\n/**\n * Move sessions stored under the legacy `resourceId = sessionId` onto their\n * Factory or user resource. Threads keep their id (`threadId === sessionId`)\n * and get `factorySessionId` so per-session listings still find them.\n *\n * Threads move through the sessions' `Memory`, so their observation vectors\n * follow them and recall search finds their past observations under the new\n * resource. Every write only touches values still equal to the session id, so\n * a rerun is a no-op and a crash leaves a state the next run resumes from. A\n * session is marked once moved, so later starts only read sessions that are not\n * (new sessions are created marked).\n * Nothing is deleted. Thread-scoped observational memory is keyed by thread id\n * and keeps working. Resource-scoped observational memory written under\n * `resource:<sessionId>` stays under that key and is no longer read: several\n * sessions merge into one resource, and their records cannot be merged.\n */\nexport async function migrateSessionResources(\n  deps: SessionResourceMigrationDeps,\n): Promise<SessionResourceMigrationReport> {\n  const report: SessionResourceMigrationReport = {\n    sessions: 0,\n    factorySessions: 0,\n    userSessions: 0,\n    isolatedSessions: 0,\n    skipped: [],\n    failed: [],\n    subscriptionsPending: [],\n    threads: 0,\n    runBindings: 0,\n    subscriptions: 0,\n    resourceObservationsLeft: [],\n  };\n  const sessions = await deps.sessions.listSessionsAwaitingResourceMigration();\n  // This pass can take minutes against a remote database, so say what it is doing and\n  // how far it got.\n  if (sessions.length > 0) {\n    console.info(`[factory] session resource migration: moving ${sessions.length} sessions in the background`);\n  }\n  let lastProgressAt = Date.now();\n\n  for (const session of sessions) {\n    report.sessions += 1;\n    const { sessionId } = session;\n    try {\n      const { owner, resourceId } = sessionMemoryResource(session, await deps.workItems.listRunBoundItems(sessionId));\n      if (!resourceId) {\n        report.skipped.push(sessionId);\n        continue;\n      }\n      if (owner === 'factory') report.factorySessions += 1;\n      else if (owner === 'isolated') report.isolatedSessions += 1;\n      else report.userSessions += 1;\n      if (resourceId === sessionId) {\n        await deps.sessions.markResourcesMigrated(sessionId);\n        continue;\n      }\n\n      // Finish moves a crash interrupted after storage moved the thread.\n      const { threads: interrupted } = await deps.memory.listThreads({\n        filter: { resourceId, metadata: { factorySessionId: sessionId, [MOVE_PENDING_KEY]: true } },\n        perPage: false,\n      });\n      for (const thread of interrupted) {\n        if (thread.resourceId === sessionId) continue; // listed under the session id below\n        await moveThread(deps, thread, thread.resourceId);\n        report.threads += 1;\n      }\n      const { threads } = await deps.memory.listThreads({ filter: { resourceId: sessionId }, perPage: false });\n      // A private session's stamps don't count under its Factory, so only its own\n      // thread moves there; its other threads stay listed under its id.\n      const stampsCount = sessionStampCounts(session, resourceId);\n      for (const thread of threads) {\n        if (!stampsCount && thread.id !== sessionId) continue;\n        // Tag before moving: once moved, the thread is no longer found under the session id.\n        const metadata = { ...thread.metadata, factorySessionId: sessionId, [MOVE_PENDING_KEY]: true };\n        await deps.memory.patchThread({ id: thread.id, metadata });\n        await moveThread(deps, { ...thread, metadata }, resourceId);\n        report.threads += 1;\n      }\n      report.runBindings += await deps.workItems.moveRunBindingsToResource({ sessionId, resourceId });\n      if (deps.integrations) {\n        report.subscriptions += await deps.integrations.moveSubscriptionsToResource({\n          fromResourceId: sessionId,\n          toResourceId: resourceId,\n        });\n      }\n      // Reported once, on the run that moves the session's threads.\n      if (\n        threads.length > 0 &&\n        deps.memory.supportsObservationalMemory &&\n        (await deps.memory.getObservationalMemory(null, sessionId))\n      ) {\n        report.resourceObservationsLeft.push(sessionId);\n        console.warn(\n          `[factory] session resource migration: session ${sessionId} has resource-scoped observational memory; ` +\n            `it stays under resource ${sessionId} and is not carried into ${resourceId}`,\n        );\n      }\n      if (!deps.integrations) {\n        report.subscriptionsPending.push(sessionId);\n        continue;\n      }\n      await deps.sessions.markResourcesMigrated(sessionId);\n    } catch (error) {\n      report.failed.push(sessionId);\n      console.warn(\n        `[factory] session resource migration: session ${sessionId} not moved: ${error instanceof Error ? error.message : error}`,\n      );\n    } finally {\n      if (report.sessions < sessions.length && Date.now() - lastProgressAt >= PROGRESS_LOG_INTERVAL_MS) {\n        lastProgressAt = Date.now();\n        console.info(\n          `[factory] session resource migration: ${report.sessions}/${sessions.length} sessions checked, ` +\n            `${report.threads} threads moved`,\n        );\n      }\n    }\n  }\n\n  if (\n    report.threads +\n      report.runBindings +\n      report.subscriptions +\n      report.skipped.length +\n      report.failed.length +\n      report.subscriptionsPending.length >\n    0\n  ) {\n    console.info(\n      `[factory] session resource migration: ${report.threads} threads, ${report.runBindings} run bindings, ` +\n        `${report.subscriptions} subscriptions moved; ${report.skipped.length} Factory sessions without a Factory skipped; ` +\n        `${report.failed.length} sessions failed; ${report.subscriptionsPending.length} sessions wait for integrations ` +\n        `to move their subscriptions`,\n    );\n  }\n  return report;\n}\n\nexport interface SessionVisibilityBackfillDeps {\n  sessions: {\n    listSessionsAwaitingVisibilityCheck(): Promise<SourceControlSession[]>;\n    markVisibilityChecked(sessionId: string, options: { makePrivate: boolean }): Promise<void>;\n  };\n  workItems: Pick<SessionResourceMigrationDeps['workItems'], 'listRunBoundItems'>;\n  memory: Pick<MemoryStorage, 'getThreadById'>;\n}\n\n/**\n * Mark shared user sessions private when their conversation lives on their owner's resource.\n * The resource already keeps teammates out of such a session; this makes lists agree, so they\n * stop seeing a session they can't open. Sessions shared onto their Factory, runs, Slack threads\n * and side sessions are left alone. Each session is checked once: new sessions start checked,\n * and a session that throws stays unchecked so the next start retries it.\n */\nexport async function privatizeOwnerResourceSessions(deps: SessionVisibilityBackfillDeps): Promise<number> {\n  let privatized = 0;\n  for (const session of await deps.sessions.listSessionsAwaitingVisibilityCheck()) {\n    try {\n      let makePrivate = false;\n      if (session.visibility !== 'private') {\n        const { owner } = sessionMemoryResource(session, await deps.workItems.listRunBoundItems(session.sessionId));\n        const thread = owner === 'user' ? await deps.memory.getThreadById({ threadId: session.sessionId }) : null;\n        makePrivate = thread?.resourceId === session.userId;\n      }\n      await deps.sessions.markVisibilityChecked(session.sessionId, { makePrivate });\n      if (makePrivate) privatized += 1;\n    } catch (error) {\n      console.warn(\n        `[factory] session visibility check: session ${session.sessionId} not checked: ${error instanceof Error ? error.message : error}`,\n      );\n    }\n  }\n  if (privatized > 0) {\n    console.info(`[factory] session visibility check: ${privatized} sessions on their owner's memory made private`);\n  }\n  return privatized;\n}\n\nasync function moveThread(\n  deps: SessionResourceMigrationDeps,\n  thread: StorageThreadType,\n  resourceId: string,\n): Promise<void> {\n  await deps.threads.updateThreadResourceId({ threadId: thread.id, resourceId });\n  // Stores merge thread metadata, so the flag is switched off rather than removed.\n  await deps.memory.patchThread({ id: thread.id, metadata: { ...thread.metadata, [MOVE_PENDING_KEY]: false } });\n}\n"],"mappings":";;;;AASA,MAAM,8BAA8B;;;;;;AAOpC,MAAM,mBAAmB;;AAEzB,MAAM,2BAA2B;;;;;;;;;;AAsDjC,SAAgB,sBACd,SACA,YACuE;CACvE,IAAI,WAAW,MAAK,SAAQ,SAAS,QAAQ,kBAAkB,IAAI,CAAC,GAClE,OAAO;EAAE,OAAO;EAAY,YAAY,QAAQ;CAAU;CAG5D,MAAM,gBACJ,QAAQ,eAAe,cACtB,QAAQ,oBAAoB,QAAQ,QAAQ,OAAO,WAAW,2BAA2B;CAE5F,OADqB,WAAW,SAAS,KAAK,gBAE1C;EAAE,OAAO;EAAW,YAAY,QAAQ;CAAiB,IACzD;EAAE,OAAO;EAAQ,YAAY,QAAQ;CAAO;AAClD;AAEA,SAAS,kBAAkB,MAAiE;CAC1F,OAAO,KAAK,gBAAgB,SAAS,kBAAkB,2BAA2B,IAAI;AACxF;;;;;;;;;;;;;;;;;AAkBA,eAAsB,wBACpB,MACyC;CACzC,MAAM,SAAyC;EAC7C,UAAU;EACV,iBAAiB;EACjB,cAAc;EACd,kBAAkB;EAClB,SAAS,CAAC;EACV,QAAQ,CAAC;EACT,sBAAsB,CAAC;EACvB,SAAS;EACT,aAAa;EACb,eAAe;EACf,0BAA0B,CAAC;CAC7B;CACA,MAAM,WAAW,MAAM,KAAK,SAAS,sCAAsC;CAG3E,IAAI,SAAS,SAAS,GACpB,QAAQ,KAAK,gDAAgD,SAAS,OAAO,4BAA4B;CAE3G,IAAI,iBAAiB,KAAK,IAAI;CAE9B,KAAK,MAAM,WAAW,UAAU;EAC9B,OAAO,YAAY;EACnB,MAAM,EAAE,cAAc;EACtB,IAAI;GACF,MAAM,EAAE,OAAO,eAAe,sBAAsB,SAAS,MAAM,KAAK,UAAU,kBAAkB,SAAS,CAAC;GAC9G,IAAI,CAAC,YAAY;IACf,OAAO,QAAQ,KAAK,SAAS;IAC7B;GACF;GACA,IAAI,UAAU,WAAW,OAAO,mBAAmB;QAC9C,IAAI,UAAU,YAAY,OAAO,oBAAoB;QACrD,OAAO,gBAAgB;GAC5B,IAAI,eAAe,WAAW;IAC5B,MAAM,KAAK,SAAS,sBAAsB,SAAS;IACnD;GACF;GAGA,MAAM,EAAE,SAAS,gBAAgB,MAAM,KAAK,OAAO,YAAY;IAC7D,QAAQ;KAAE;KAAY,UAAU;MAAE,kBAAkB;OAAY,mBAAmB;KAAK;IAAE;IAC1F,SAAS;GACX,CAAC;GACD,KAAK,MAAM,UAAU,aAAa;IAChC,IAAI,OAAO,eAAe,WAAW;IACrC,MAAM,WAAW,MAAM,QAAQ,OAAO,UAAU;IAChD,OAAO,WAAW;GACpB;GACA,MAAM,EAAE,YAAY,MAAM,KAAK,OAAO,YAAY;IAAE,QAAQ,EAAE,YAAY,UAAU;IAAG,SAAS;GAAM,CAAC;GAGvG,MAAM,cAAc,mBAAmB,SAAS,UAAU;GAC1D,KAAK,MAAM,UAAU,SAAS;IAC5B,IAAI,CAAC,eAAe,OAAO,OAAO,WAAW;IAE7C,MAAM,WAAW;KAAE,GAAG,OAAO;KAAU,kBAAkB;MAAY,mBAAmB;IAAK;IAC7F,MAAM,KAAK,OAAO,YAAY;KAAE,IAAI,OAAO;KAAI;IAAS,CAAC;IACzD,MAAM,WAAW,MAAM;KAAE,GAAG;KAAQ;IAAS,GAAG,UAAU;IAC1D,OAAO,WAAW;GACpB;GACA,OAAO,eAAe,MAAM,KAAK,UAAU,0BAA0B;IAAE;IAAW;GAAW,CAAC;GAC9F,IAAI,KAAK,cACP,OAAO,iBAAiB,MAAM,KAAK,aAAa,4BAA4B;IAC1E,gBAAgB;IAChB,cAAc;GAChB,CAAC;GAGH,IACE,QAAQ,SAAS,KACjB,KAAK,OAAO,+BACX,MAAM,KAAK,OAAO,uBAAuB,MAAM,SAAS,GACzD;IACA,OAAO,yBAAyB,KAAK,SAAS;IAC9C,QAAQ,KACN,iDAAiD,UAAU,qEAC9B,UAAU,2BAA2B,YACpE;GACF;GACA,IAAI,CAAC,KAAK,cAAc;IACtB,OAAO,qBAAqB,KAAK,SAAS;IAC1C;GACF;GACA,MAAM,KAAK,SAAS,sBAAsB,SAAS;EACrD,SAAS,OAAO;GACd,OAAO,OAAO,KAAK,SAAS;GAC5B,QAAQ,KACN,iDAAiD,UAAU,cAAc,iBAAiB,QAAQ,MAAM,UAAU,OACpH;EACF,UAAU;GACR,IAAI,OAAO,WAAW,SAAS,UAAU,KAAK,IAAI,IAAI,kBAAkB,0BAA0B;IAChG,iBAAiB,KAAK,IAAI;IAC1B,QAAQ,KACN,yCAAyC,OAAO,SAAS,GAAG,SAAS,OAAO,qBACvE,OAAO,QAAQ,eACtB;GACF;EACF;CACF;CAEA,IACE,OAAO,UACL,OAAO,cACP,OAAO,gBACP,OAAO,QAAQ,SACf,OAAO,OAAO,SACd,OAAO,qBAAqB,SAC9B,GAEA,QAAQ,KACN,yCAAyC,OAAO,QAAQ,YAAY,OAAO,YAAY,iBAClF,OAAO,cAAc,wBAAwB,OAAO,QAAQ,OAAO,+CACnE,OAAO,OAAO,OAAO,oBAAoB,OAAO,qBAAqB,OAAO,4DAEnF;CAEF,OAAO;AACT;;;;;;;;AAkBA,eAAsB,+BAA+B,MAAsD;CACzG,IAAI,aAAa;CACjB,KAAK,MAAM,WAAW,MAAM,KAAK,SAAS,oCAAoC,GAC5E,IAAI;EACF,IAAI,cAAc;EAClB,IAAI,QAAQ,eAAe,WAAW;GACpC,MAAM,EAAE,UAAU,sBAAsB,SAAS,MAAM,KAAK,UAAU,kBAAkB,QAAQ,SAAS,CAAC;GAE1G,eADe,UAAU,SAAS,MAAM,KAAK,OAAO,cAAc,EAAE,UAAU,QAAQ,UAAU,CAAC,IAAI,KAAA,EAC/E,eAAe,QAAQ;EAC/C;EACA,MAAM,KAAK,SAAS,sBAAsB,QAAQ,WAAW,EAAE,YAAY,CAAC;EAC5E,IAAI,aAAa,cAAc;CACjC,SAAS,OAAO;EACd,QAAQ,KACN,+CAA+C,QAAQ,UAAU,gBAAgB,iBAAiB,QAAQ,MAAM,UAAU,OAC5H;CACF;CAEF,IAAI,aAAa,GACf,QAAQ,KAAK,uCAAuC,WAAW,+CAA+C;CAEhH,OAAO;AACT;AAEA,eAAe,WACb,MACA,QACA,YACe;CACf,MAAM,KAAK,QAAQ,uBAAuB;EAAE,UAAU,OAAO;EAAI;CAAW,CAAC;CAE7E,MAAM,KAAK,OAAO,YAAY;EAAE,IAAI,OAAO;EAAI,UAAU;GAAE,GAAG,OAAO;IAAW,mBAAmB;EAAM;CAAE,CAAC;AAC9G"}

package/dist/session/run-audit.d.ts

@@ -17,6 +17,7 @@ declare const factoryOpenRunSchema: z.ZodObject<{
     branch: z.ZodString;
     ownerId: z.ZodOptional<z.ZodString>;
     heartbeatAt: z.ZodOptional<z.ZodNumber>;
+    startedAt: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;
 export type FactoryOpenRun = z.infer<typeof factoryOpenRunSchema>;
 /** A heartbeat older than this means the owner is gone; nothing renews it once the run's dispatcher dies. */

package/dist/session/run-audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-audit.d.ts","sourceRoot":"","sources":["../../src/session/run-audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AAExE,eAAO,MAAM,yBAAyB,oBAAoB,CAAC;AAE3D,QAAA,MAAM,oBAAoB;;;;;;;;;;;;;;iBAqBxB,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,6GAA6G;AAC7G,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAEhD,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,OAAO,CAOtG;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE;QACf,UAAU,CAAC,IAAI,EAAE;YAAE,GAAG,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QACpD,UAAU,CAAC,IAAI,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,OAAO,CAAA;SAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAClE,CAAC;IACF,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CACxE;AAED,KAAK,YAAY,GAAG,OAAO,CAAC,oBAAoB,EAAE;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;AAInF;;;;GAIG;AACH,eAAO,MAAM,mCAAmC,OAAO,CAAC;AAExD,QAAA,MAAM,YAAY,8LASR,CAAC;AAEX,KAAK,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAE1E;;;;GAIG;AACH,MAAM,MAAM,eAAe,GACvB;IACE,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kGAAkG;IAClG,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;CACjC,GACD;IAAE,MAAM,EAAE,YAAY,CAAA;CAAE,CAAC;AAoE7B,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAGlG;AAED,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEzF;AAsED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,oBAAoB,EAC7B,EACE,KAAK,EACL,GAAG,EACH,SAAS,EACT,WAAW,GACZ,EAAE;IACD,KAAK,EAAE,aAAa,CAAC;IACrB,GAAG,EAAE,cAAc,CAAC;IACpB,SAAS,EAAE,cAAc,CAAC;IAC1B,WAAW,EAAE,MAAM,YAAY,CAAC;CACjC,GACA,OAAO,CAAC,IAAI,CAAC,CAcf;AAED,4FAA4F;AAC5F,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,oBAAoB,EAC7B,SAAS,EAAE,MAAM,EACjB,EAAE,SAAa,GACd,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,oBAAoB,EAAE,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,aAAa,CAAA;CAAE,GAAG,MAAM,IAAI,CAcnH"}
+{"version":3,"file":"run-audit.d.ts","sourceRoot":"","sources":["../../src/session/run-audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AAExE,eAAO,MAAM,yBAAyB,oBAAoB,CAAC;AAE3D,QAAA,MAAM,oBAAoB;;;;;;;;;;;;;;;iBAuBxB,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,6GAA6G;AAC7G,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAEhD,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,OAAO,CAOtG;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE;QACf,UAAU,CAAC,IAAI,EAAE;YAAE,GAAG,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QACpD,UAAU,CAAC,IAAI,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,OAAO,CAAA;SAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAClE,CAAC;IACF,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CACxE;AAED,KAAK,YAAY,GAAG,OAAO,CAAC,oBAAoB,EAAE;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;AAInF;;;;GAIG;AACH,eAAO,MAAM,mCAAmC,OAAO,CAAC;AAExD,QAAA,MAAM,YAAY,8LASR,CAAC;AAEX,KAAK,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAE1E;;;;GAIG;AACH,MAAM,MAAM,eAAe,GACvB;IACE,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kGAAkG;IAClG,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;CACjC,GACD;IAAE,MAAM,EAAE,YAAY,CAAA;CAAE,CAAC;AAoE7B,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAGlG;AAED,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEzF;AAsED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,oBAAoB,EAC7B,EACE,KAAK,EACL,GAAG,EACH,SAAS,EACT,WAAW,GACZ,EAAE;IACD,KAAK,EAAE,aAAa,CAAC;IACrB,GAAG,EAAE,cAAc,CAAC;IACpB,SAAS,EAAE,cAAc,CAAC;IAC1B,WAAW,EAAE,MAAM,YAAY,CAAC;CACjC,GACA,OAAO,CAAC,IAAI,CAAC,CAiBf;AAED,4FAA4F;AAC5F,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,oBAAoB,EAC7B,SAAS,EAAE,MAAM,EACjB,EAAE,SAAa,GACd,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,oBAAoB,EAAE,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,aAAa,CAAA;CAAE,GAAG,MAAM,IAAI,CAcnH"}

package/dist/session/run-audit.js

@@ -21,7 +21,9 @@ const factoryOpenRunSchema = z.object({
 	* was recorded; those read as stale.
 	*/
 	ownerId: z.string().optional(),
-	heartbeatAt: z.number().optional()
+	heartbeatAt: z.number().optional(),
+	/** When the kickoff was accepted (epoch ms), so the run's end record spans the whole run. Absent on older entries. */
+	startedAt: z.number().optional()
 });
 /** A heartbeat older than this means the owner is gone; nothing renews it once the run's dispatcher dies. */
 const FACTORY_OPEN_RUN_STALE_MS = 3e4;
@@ -162,7 +164,10 @@ function recordSessionRunStart(session, { audit, run, actorType, observedEnd })
 		const runs = await listSessionOpenRuns(session);
 		if (!runs.some((existing) => existing.kickoffId === run.kickoffId)) await session.thread.setSetting({
 			key: FACTORY_OPEN_RUNS_SETTING,
-			value: [...runs, run]
+			value: [...runs, {
+				startedAt: Date.now(),
+				...run
+			}]
 		});
 		await audit.record({
 			...runAuditInput(run),

package/dist/session/run-audit.js.map

@@ -1 +1 @@
-{"version":3,"file":"run-audit.js","names":[],"sources":["../../src/session/run-audit.ts"],"sourcesContent":["import type { AgentControllerEvent } from '@mastra/core/agent-controller';\nimport { z } from 'zod';\n\nimport type { AuditActorType } from '../storage/domains/audit/base.js';\nimport type { AuditRecorder } from '../storage/domains/audit/domain.js';\n\nexport const FACTORY_OPEN_RUNS_SETTING = 'factoryOpenRuns';\n\nconst factoryOpenRunSchema = z.object({\n  kickoffId: z.string(),\n  bindingId: z.string(),\n  role: z.string(),\n  startedBy: z.string(),\n  orgId: z.string(),\n  factoryProjectId: z.string(),\n  workItemId: z.string(),\n  workItemName: z.string().optional(),\n  sessionId: z.string(),\n  threadId: z.string(),\n  branch: z.string(),\n  /**\n   * Which dispatcher process is watching this run, and when it last said so\n   * (epoch ms). The ledger is a thread setting shared by every replica, so a\n   * remote reader needs these to tell a run that is live elsewhere from one\n   * that died with its process. Absent on entries written before ownership\n   * was recorded; those read as stale.\n   */\n  ownerId: z.string().optional(),\n  heartbeatAt: z.number().optional(),\n});\n\nexport type FactoryOpenRun = z.infer<typeof factoryOpenRunSchema>;\n\n/** A heartbeat older than this means the owner is gone; nothing renews it once the run's dispatcher dies. */\nexport const FACTORY_OPEN_RUN_STALE_MS = 30_000;\n\nexport function isOpenRunLiveElsewhere(run: FactoryOpenRun, ownerId: string, now = Date.now()): boolean {\n  return (\n    run.ownerId !== undefined &&\n    run.ownerId !== ownerId &&\n    run.heartbeatAt !== undefined &&\n    now - run.heartbeatAt < FACTORY_OPEN_RUN_STALE_MS\n  );\n}\n\nexport interface RunEndCaptureSession {\n  readonly thread: {\n    getSetting(args: { key: string }): Promise<unknown>;\n    setSetting(args: { key: string; value: unknown }): Promise<void>;\n  };\n  subscribe(listener: (event: AgentControllerEvent) => void): () => void;\n}\n\ntype RunEndReason = Extract<AgentControllerEvent, { type: 'agent_end' }>['reason'];\ntype StepUsage = Extract<AgentControllerEvent, { type: 'usage_update' }>['usage'];\nconst pendingWrites = new WeakMap<RunEndCaptureSession, Promise<void>>();\n\n/**\n * JSON budget for the per-step entries on a run's audit record. Audit metadata\n * is capped at 4 KB as a whole and an oversized record loses all of it, so\n * later steps are dropped (and counted) instead; totals always cover every step.\n */\nexport const FACTORY_RUN_USAGE_STEPS_JSON_BUDGET = 2400;\n\nconst USAGE_FIELDS = [\n  'promptTokens',\n  'completionTokens',\n  'totalTokens',\n  'reasoningTokens',\n  'cachedInputTokens',\n  'cacheCreationInputTokens',\n  'cacheCreationInputTokens5m',\n  'cacheCreationInputTokens1h',\n] as const;\n\ntype UsageCounts = Partial<Record<(typeof USAGE_FIELDS)[number], number>>;\n\n/**\n * Token usage attached to a run's `factory.run.ended` audit record.\n * `unreported` means this process saw no usage for the run (it ran elsewhere,\n * the process restarted, or the model reported none). It is never zero spend.\n */\nexport type FactoryRunUsage =\n  | {\n      status: 'recorded';\n      stepCount: number;\n      totals: UsageCounts;\n      steps: UsageCounts[];\n      stepsTruncated?: number;\n      /** Other runs that ended in the same agent turn; the turn's usage can't be split between them. */\n      sharedWithKickoffIds?: string[];\n    }\n  | { status: 'unreported' };\n\nfunction usageCounts(usage: StepUsage): UsageCounts {\n  const counts: UsageCounts = {};\n  for (const field of USAGE_FIELDS) {\n    const value = usage[field];\n    if (typeof value === 'number') counts[field] = value;\n  }\n  return counts;\n}\n\nfunction runUsage(steps: UsageCounts[]): FactoryRunUsage {\n  if (steps.length === 0) return { status: 'unreported' };\n  const totals: UsageCounts = {};\n  for (const step of steps) {\n    for (const field of USAGE_FIELDS) {\n      if (step[field] !== undefined) totals[field] = (totals[field] ?? 0) + step[field];\n    }\n  }\n  const kept: UsageCounts[] = [];\n  let length = 2;\n  for (const step of steps) {\n    length += JSON.stringify(step).length + 1;\n    if (length > FACTORY_RUN_USAGE_STEPS_JSON_BUDGET) break;\n    kept.push(step);\n  }\n  return {\n    status: 'recorded',\n    stepCount: steps.length,\n    totals,\n    steps: kept,\n    ...(steps.length > kept.length ? { stepsTruncated: steps.length - kept.length } : {}),\n  };\n}\n\ninterface EndedTurn {\n  steps: UsageCounts[];\n  claimed: boolean;\n}\n\ninterface SessionUsage {\n  /** Steps of the turn in progress; a suspended turn keeps accumulating into its resume. */\n  current: UsageCounts[];\n  /** The most recently ended turn, which a run whose ledger entry lands after that end may still claim. */\n  lastTurn?: EndedTurn;\n  /** Usage of runs whose end record failed to persist, kept for the retry. */\n  held: Map<string, FactoryRunUsage>;\n}\n\nconst sessionUsage = new WeakMap<RunEndCaptureSession, SessionUsage>();\n\nfunction usageFor(session: RunEndCaptureSession): SessionUsage {\n  let usage = sessionUsage.get(session);\n  if (!usage) {\n    usage = { current: [], held: new Map() };\n    sessionUsage.set(session, usage);\n  }\n  return usage;\n}\n\nfunction serializeRunAudit(session: RunEndCaptureSession, write: () => Promise<void>): Promise<void> {\n  const pending = (pendingWrites.get(session) ?? Promise.resolve())\n    .then(write)\n    .catch(error => console.warn('[Factory run audit] Unable to record run lifecycle.', error));\n  pendingWrites.set(session, pending);\n  return pending;\n}\n\nexport async function listSessionOpenRuns(session: RunEndCaptureSession): Promise<FactoryOpenRun[]> {\n  const stored = await session.thread.getSetting({ key: FACTORY_OPEN_RUNS_SETTING });\n  return z.array(factoryOpenRunSchema).parse(stored ?? []);\n}\n\nexport async function waitForSessionRunAudit(session: RunEndCaptureSession): Promise<void> {\n  await (pendingWrites.get(session) ?? Promise.resolve());\n}\n\nfunction runAuditInput(run: FactoryOpenRun) {\n  // Ownership fields are dispatcher bookkeeping, not part of the run's audit record.\n  const { orgId, factoryProjectId, workItemId, workItemName, ownerId, heartbeatAt, ...metadata } = run;\n  void ownerId;\n  void heartbeatAt;\n  return {\n    orgId,\n    factoryProjectId,\n    idempotencyKey: run.kickoffId,\n    targets: [{ type: 'work_item', id: workItemId, ...(workItemName ? { name: workItemName } : {}) }],\n    metadata,\n  };\n}\n\nasync function recordRunEnds(\n  session: RunEndCaptureSession,\n  audit: AuditRecorder,\n  reason: RunEndReason,\n  kickoffId?: string,\n  endedTurn?: EndedTurn,\n): Promise<void> {\n  if (!reason || reason === 'suspended') return;\n  const usage = usageFor(session);\n  const runs = await listSessionOpenRuns(session);\n  if (runs.length === 0) return;\n  const ending = runs.filter(run => !kickoffId || run.kickoffId === kickoffId);\n  // An end event bills the turn it closed. A run whose ledger entry lands after its turn ended\n  // bills the latest ended turn, unless an open run already claimed it.\n  const turn = endedTurn ?? usage.lastTurn;\n  const steps = turn && !turn.claimed ? turn.steps : [];\n  if (turn && ending.length > 0) turn.claimed = true;\n  const turnUsage = runUsage(steps);\n  const remaining = [];\n  for (const run of runs) {\n    if (!ending.includes(run)) {\n      remaining.push(run);\n      continue;\n    }\n    let runUsageRecord = usage.held.get(run.kickoffId);\n    if (!runUsageRecord) {\n      const shared = ending.filter(other => other !== run).map(other => other.kickoffId);\n      runUsageRecord =\n        turnUsage.status === 'recorded' && shared.length > 0\n          ? { ...turnUsage, sharedWithKickoffIds: shared }\n          : turnUsage;\n      usage.held.set(run.kickoffId, runUsageRecord);\n    }\n    const input = runAuditInput(run);\n    const recorded = await audit.record({\n      ...input,\n      actorId: `agent:${run.threadId}`,\n      actorType: 'agent',\n      action: 'factory.run.ended',\n      metadata: { ...input.metadata, reason, usage: runUsageRecord },\n    });\n    if (recorded) {\n      usage.held.delete(run.kickoffId);\n    } else {\n      console.warn(\n        `[Factory run audit] Token usage for run ${run.kickoffId} (${run.role}) was not persisted; keeping it for the next attempt.`,\n        runUsageRecord,\n      );\n      remaining.push(run);\n    }\n  }\n  await session.thread.setSetting({ key: FACTORY_OPEN_RUNS_SETTING, value: remaining });\n}\n\nexport function recordSessionRunStart(\n  session: RunEndCaptureSession,\n  {\n    audit,\n    run,\n    actorType,\n    observedEnd,\n  }: {\n    audit: AuditRecorder;\n    run: FactoryOpenRun;\n    actorType: AuditActorType;\n    observedEnd: () => RunEndReason;\n  },\n): Promise<void> {\n  return serializeRunAudit(session, async () => {\n    const runs = await listSessionOpenRuns(session);\n    if (!runs.some(existing => existing.kickoffId === run.kickoffId)) {\n      await session.thread.setSetting({ key: FACTORY_OPEN_RUNS_SETTING, value: [...runs, run] });\n    }\n    await audit.record({\n      ...runAuditInput(run),\n      actorId: run.startedBy,\n      actorType,\n      action: 'factory.run.started',\n    });\n    await recordRunEnds(session, audit, observedEnd(), run.kickoffId);\n  });\n}\n\n/** Renew this process's claim on an open run so other replicas keep treating it as live. */\nexport function heartbeatSessionOpenRun(\n  session: RunEndCaptureSession,\n  kickoffId: string,\n  at = Date.now(),\n): Promise<void> {\n  return serializeRunAudit(session, async () => {\n    const runs = await listSessionOpenRuns(session);\n    if (!runs.some(run => run.kickoffId === kickoffId)) return;\n    await session.thread.setSetting({\n      key: FACTORY_OPEN_RUNS_SETTING,\n      value: runs.map(run => (run.kickoffId === kickoffId ? { ...run, heartbeatAt: at } : run)),\n    });\n  });\n}\n\nexport function observeSessionRunEnd(session: RunEndCaptureSession, { audit }: { audit: AuditRecorder }): () => void {\n  const usage = usageFor(session);\n  return session.subscribe(event => {\n    if (event.type === 'usage_update') {\n      usage.current.push(usageCounts(event.usage));\n      return;\n    }\n    if (event.type !== 'agent_end' || !event.reason || event.reason === 'suspended') return;\n    // Close the turn now so a following turn's steps never land in this run.\n    const turn: EndedTurn = { steps: usage.current, claimed: false };\n    usage.current = [];\n    usage.lastTurn = turn;\n    void serializeRunAudit(session, () => recordRunEnds(session, audit, event.reason, undefined, turn));\n  });\n}\n"],"mappings":";;AAMA,MAAa,4BAA4B;AAEzC,MAAM,uBAAuB,EAAE,OAAO;CACpC,WAAW,EAAE,OAAO;CACpB,WAAW,EAAE,OAAO;CACpB,MAAM,EAAE,OAAO;CACf,WAAW,EAAE,OAAO;CACpB,OAAO,EAAE,OAAO;CAChB,kBAAkB,EAAE,OAAO;CAC3B,YAAY,EAAE,OAAO;CACrB,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS;CAClC,WAAW,EAAE,OAAO;CACpB,UAAU,EAAE,OAAO;CACnB,QAAQ,EAAE,OAAO;;;;;;;;CAQjB,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;AACnC,CAAC;;AAKD,MAAa,4BAA4B;AAEzC,SAAgB,uBAAuB,KAAqB,SAAiB,MAAM,KAAK,IAAI,GAAY;CACtG,OACE,IAAI,YAAY,KAAA,KAChB,IAAI,YAAY,WAChB,IAAI,gBAAgB,KAAA,KACpB,MAAM,IAAI,cAAA;AAEd;AAYA,MAAM,gCAAgB,IAAI,QAA6C;;;;;;AAOvE,MAAa,sCAAsC;AAEnD,MAAM,eAAe;CACnB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAqBA,SAAS,YAAY,OAA+B;CAClD,MAAM,SAAsB,CAAC;CAC7B,KAAK,MAAM,SAAS,cAAc;EAChC,MAAM,QAAQ,MAAM;EACpB,IAAI,OAAO,UAAU,UAAU,OAAO,SAAS;CACjD;CACA,OAAO;AACT;AAEA,SAAS,SAAS,OAAuC;CACvD,IAAI,MAAM,WAAW,GAAG,OAAO,EAAE,QAAQ,aAAa;CACtD,MAAM,SAAsB,CAAC;CAC7B,KAAK,MAAM,QAAQ,OACjB,KAAK,MAAM,SAAS,cAClB,IAAI,KAAK,WAAW,KAAA,GAAW,OAAO,UAAU,OAAO,UAAU,KAAK,KAAK;CAG/E,MAAM,OAAsB,CAAC;CAC7B,IAAI,SAAS;CACb,KAAK,MAAM,QAAQ,OAAO;EACxB,UAAU,KAAK,UAAU,IAAI,CAAC,CAAC,SAAS;EACxC,IAAI,SAAA,MAA8C;EAClD,KAAK,KAAK,IAAI;CAChB;CACA,OAAO;EACL,QAAQ;EACR,WAAW,MAAM;EACjB;EACA,OAAO;EACP,GAAI,MAAM,SAAS,KAAK,SAAS,EAAE,gBAAgB,MAAM,SAAS,KAAK,OAAO,IAAI,CAAC;CACrF;AACF;AAgBA,MAAM,+BAAe,IAAI,QAA4C;AAErE,SAAS,SAAS,SAA6C;CAC7D,IAAI,QAAQ,aAAa,IAAI,OAAO;CACpC,IAAI,CAAC,OAAO;EACV,QAAQ;GAAE,SAAS,CAAC;GAAG,sBAAM,IAAI,IAAI;EAAE;EACvC,aAAa,IAAI,SAAS,KAAK;CACjC;CACA,OAAO;AACT;AAEA,SAAS,kBAAkB,SAA+B,OAA2C;CACnG,MAAM,WAAW,cAAc,IAAI,OAAO,KAAK,QAAQ,QAAQ,EAAA,CAC5D,KAAK,KAAK,CAAC,CACX,OAAM,UAAS,QAAQ,KAAK,uDAAuD,KAAK,CAAC;CAC5F,cAAc,IAAI,SAAS,OAAO;CAClC,OAAO;AACT;AAEA,eAAsB,oBAAoB,SAA0D;CAClG,MAAM,SAAS,MAAM,QAAQ,OAAO,WAAW,EAAE,KAAK,0BAA0B,CAAC;CACjF,OAAO,EAAE,MAAM,oBAAoB,CAAC,CAAC,MAAM,UAAU,CAAC,CAAC;AACzD;AAEA,eAAsB,uBAAuB,SAA8C;CACzF,OAAO,cAAc,IAAI,OAAO,KAAK,QAAQ,QAAQ;AACvD;AAEA,SAAS,cAAc,KAAqB;CAE1C,MAAM,EAAE,OAAO,kBAAkB,YAAY,cAAc,SAAS,aAAa,GAAG,aAAa;CAGjG,OAAO;EACL;EACA;EACA,gBAAgB,IAAI;EACpB,SAAS,CAAC;GAAE,MAAM;GAAa,IAAI;GAAY,GAAI,eAAe,EAAE,MAAM,aAAa,IAAI,CAAC;EAAG,CAAC;EAChG;CACF;AACF;AAEA,eAAe,cACb,SACA,OACA,QACA,WACA,WACe;CACf,IAAI,CAAC,UAAU,WAAW,aAAa;CACvC,MAAM,QAAQ,SAAS,OAAO;CAC9B,MAAM,OAAO,MAAM,oBAAoB,OAAO;CAC9C,IAAI,KAAK,WAAW,GAAG;CACvB,MAAM,SAAS,KAAK,QAAO,QAAO,CAAC,aAAa,IAAI,cAAc,SAAS;CAG3E,MAAM,OAAO,aAAa,MAAM;CAChC,MAAM,QAAQ,QAAQ,CAAC,KAAK,UAAU,KAAK,QAAQ,CAAC;CACpD,IAAI,QAAQ,OAAO,SAAS,GAAG,KAAK,UAAU;CAC9C,MAAM,YAAY,SAAS,KAAK;CAChC,MAAM,YAAY,CAAC;CACnB,KAAK,MAAM,OAAO,MAAM;EACtB,IAAI,CAAC,OAAO,SAAS,GAAG,GAAG;GACzB,UAAU,KAAK,GAAG;GAClB;EACF;EACA,IAAI,iBAAiB,MAAM,KAAK,IAAI,IAAI,SAAS;EACjD,IAAI,CAAC,gBAAgB;GACnB,MAAM,SAAS,OAAO,QAAO,UAAS,UAAU,GAAG,CAAC,CAAC,KAAI,UAAS,MAAM,SAAS;GACjF,iBACE,UAAU,WAAW,cAAc,OAAO,SAAS,IAC/C;IAAE,GAAG;IAAW,sBAAsB;GAAO,IAC7C;GACN,MAAM,KAAK,IAAI,IAAI,WAAW,cAAc;EAC9C;EACA,MAAM,QAAQ,cAAc,GAAG;EAQ/B,IAAI,MAPmB,MAAM,OAAO;GAClC,GAAG;GACH,SAAS,SAAS,IAAI;GACtB,WAAW;GACX,QAAQ;GACR,UAAU;IAAE,GAAG,MAAM;IAAU;IAAQ,OAAO;GAAe;EAC/D,CAAC,GAEC,MAAM,KAAK,OAAO,IAAI,SAAS;OAC1B;GACL,QAAQ,KACN,2CAA2C,IAAI,UAAU,IAAI,IAAI,KAAK,wDACtE,cACF;GACA,UAAU,KAAK,GAAG;EACpB;CACF;CACA,MAAM,QAAQ,OAAO,WAAW;EAAE,KAAK;EAA2B,OAAO;CAAU,CAAC;AACtF;AAEA,SAAgB,sBACd,SACA,EACE,OACA,KACA,WACA,eAOa;CACf,OAAO,kBAAkB,SAAS,YAAY;EAC5C,MAAM,OAAO,MAAM,oBAAoB,OAAO;EAC9C,IAAI,CAAC,KAAK,MAAK,aAAY,SAAS,cAAc,IAAI,SAAS,GAC7D,MAAM,QAAQ,OAAO,WAAW;GAAE,KAAK;GAA2B,OAAO,CAAC,GAAG,MAAM,GAAG;EAAE,CAAC;EAE3F,MAAM,MAAM,OAAO;GACjB,GAAG,cAAc,GAAG;GACpB,SAAS,IAAI;GACb;GACA,QAAQ;EACV,CAAC;EACD,MAAM,cAAc,SAAS,OAAO,YAAY,GAAG,IAAI,SAAS;CAClE,CAAC;AACH;;AAGA,SAAgB,wBACd,SACA,WACA,KAAK,KAAK,IAAI,GACC;CACf,OAAO,kBAAkB,SAAS,YAAY;EAC5C,MAAM,OAAO,MAAM,oBAAoB,OAAO;EAC9C,IAAI,CAAC,KAAK,MAAK,QAAO,IAAI,cAAc,SAAS,GAAG;EACpD,MAAM,QAAQ,OAAO,WAAW;GAC9B,KAAK;GACL,OAAO,KAAK,KAAI,QAAQ,IAAI,cAAc,YAAY;IAAE,GAAG;IAAK,aAAa;GAAG,IAAI,GAAI;EAC1F,CAAC;CACH,CAAC;AACH;AAEA,SAAgB,qBAAqB,SAA+B,EAAE,SAA+C;CACnH,MAAM,QAAQ,SAAS,OAAO;CAC9B,OAAO,QAAQ,WAAU,UAAS;EAChC,IAAI,MAAM,SAAS,gBAAgB;GACjC,MAAM,QAAQ,KAAK,YAAY,MAAM,KAAK,CAAC;GAC3C;EACF;EACA,IAAI,MAAM,SAAS,eAAe,CAAC,MAAM,UAAU,MAAM,WAAW,aAAa;EAEjF,MAAM,OAAkB;GAAE,OAAO,MAAM;GAAS,SAAS;EAAM;EAC/D,MAAM,UAAU,CAAC;EACjB,MAAM,WAAW;EACjB,kBAAuB,eAAe,cAAc,SAAS,OAAO,MAAM,QAAQ,KAAA,GAAW,IAAI,CAAC;CACpG,CAAC;AACH"}
+{"version":3,"file":"run-audit.js","names":[],"sources":["../../src/session/run-audit.ts"],"sourcesContent":["import type { AgentControllerEvent } from '@mastra/core/agent-controller';\nimport { z } from 'zod';\n\nimport type { AuditActorType } from '../storage/domains/audit/base.js';\nimport type { AuditRecorder } from '../storage/domains/audit/domain.js';\n\nexport const FACTORY_OPEN_RUNS_SETTING = 'factoryOpenRuns';\n\nconst factoryOpenRunSchema = z.object({\n  kickoffId: z.string(),\n  bindingId: z.string(),\n  role: z.string(),\n  startedBy: z.string(),\n  orgId: z.string(),\n  factoryProjectId: z.string(),\n  workItemId: z.string(),\n  workItemName: z.string().optional(),\n  sessionId: z.string(),\n  threadId: z.string(),\n  branch: z.string(),\n  /**\n   * Which dispatcher process is watching this run, and when it last said so\n   * (epoch ms). The ledger is a thread setting shared by every replica, so a\n   * remote reader needs these to tell a run that is live elsewhere from one\n   * that died with its process. Absent on entries written before ownership\n   * was recorded; those read as stale.\n   */\n  ownerId: z.string().optional(),\n  heartbeatAt: z.number().optional(),\n  /** When the kickoff was accepted (epoch ms), so the run's end record spans the whole run. Absent on older entries. */\n  startedAt: z.number().optional(),\n});\n\nexport type FactoryOpenRun = z.infer<typeof factoryOpenRunSchema>;\n\n/** A heartbeat older than this means the owner is gone; nothing renews it once the run's dispatcher dies. */\nexport const FACTORY_OPEN_RUN_STALE_MS = 30_000;\n\nexport function isOpenRunLiveElsewhere(run: FactoryOpenRun, ownerId: string, now = Date.now()): boolean {\n  return (\n    run.ownerId !== undefined &&\n    run.ownerId !== ownerId &&\n    run.heartbeatAt !== undefined &&\n    now - run.heartbeatAt < FACTORY_OPEN_RUN_STALE_MS\n  );\n}\n\nexport interface RunEndCaptureSession {\n  readonly thread: {\n    getSetting(args: { key: string }): Promise<unknown>;\n    setSetting(args: { key: string; value: unknown }): Promise<void>;\n  };\n  subscribe(listener: (event: AgentControllerEvent) => void): () => void;\n}\n\ntype RunEndReason = Extract<AgentControllerEvent, { type: 'agent_end' }>['reason'];\ntype StepUsage = Extract<AgentControllerEvent, { type: 'usage_update' }>['usage'];\nconst pendingWrites = new WeakMap<RunEndCaptureSession, Promise<void>>();\n\n/**\n * JSON budget for the per-step entries on a run's audit record. Audit metadata\n * is capped at 4 KB as a whole and an oversized record loses all of it, so\n * later steps are dropped (and counted) instead; totals always cover every step.\n */\nexport const FACTORY_RUN_USAGE_STEPS_JSON_BUDGET = 2400;\n\nconst USAGE_FIELDS = [\n  'promptTokens',\n  'completionTokens',\n  'totalTokens',\n  'reasoningTokens',\n  'cachedInputTokens',\n  'cacheCreationInputTokens',\n  'cacheCreationInputTokens5m',\n  'cacheCreationInputTokens1h',\n] as const;\n\ntype UsageCounts = Partial<Record<(typeof USAGE_FIELDS)[number], number>>;\n\n/**\n * Token usage attached to a run's `factory.run.ended` audit record.\n * `unreported` means this process saw no usage for the run (it ran elsewhere,\n * the process restarted, or the model reported none). It is never zero spend.\n */\nexport type FactoryRunUsage =\n  | {\n      status: 'recorded';\n      stepCount: number;\n      totals: UsageCounts;\n      steps: UsageCounts[];\n      stepsTruncated?: number;\n      /** Other runs that ended in the same agent turn; the turn's usage can't be split between them. */\n      sharedWithKickoffIds?: string[];\n    }\n  | { status: 'unreported' };\n\nfunction usageCounts(usage: StepUsage): UsageCounts {\n  const counts: UsageCounts = {};\n  for (const field of USAGE_FIELDS) {\n    const value = usage[field];\n    if (typeof value === 'number') counts[field] = value;\n  }\n  return counts;\n}\n\nfunction runUsage(steps: UsageCounts[]): FactoryRunUsage {\n  if (steps.length === 0) return { status: 'unreported' };\n  const totals: UsageCounts = {};\n  for (const step of steps) {\n    for (const field of USAGE_FIELDS) {\n      if (step[field] !== undefined) totals[field] = (totals[field] ?? 0) + step[field];\n    }\n  }\n  const kept: UsageCounts[] = [];\n  let length = 2;\n  for (const step of steps) {\n    length += JSON.stringify(step).length + 1;\n    if (length > FACTORY_RUN_USAGE_STEPS_JSON_BUDGET) break;\n    kept.push(step);\n  }\n  return {\n    status: 'recorded',\n    stepCount: steps.length,\n    totals,\n    steps: kept,\n    ...(steps.length > kept.length ? { stepsTruncated: steps.length - kept.length } : {}),\n  };\n}\n\ninterface EndedTurn {\n  steps: UsageCounts[];\n  claimed: boolean;\n}\n\ninterface SessionUsage {\n  /** Steps of the turn in progress; a suspended turn keeps accumulating into its resume. */\n  current: UsageCounts[];\n  /** The most recently ended turn, which a run whose ledger entry lands after that end may still claim. */\n  lastTurn?: EndedTurn;\n  /** Usage of runs whose end record failed to persist, kept for the retry. */\n  held: Map<string, FactoryRunUsage>;\n}\n\nconst sessionUsage = new WeakMap<RunEndCaptureSession, SessionUsage>();\n\nfunction usageFor(session: RunEndCaptureSession): SessionUsage {\n  let usage = sessionUsage.get(session);\n  if (!usage) {\n    usage = { current: [], held: new Map() };\n    sessionUsage.set(session, usage);\n  }\n  return usage;\n}\n\nfunction serializeRunAudit(session: RunEndCaptureSession, write: () => Promise<void>): Promise<void> {\n  const pending = (pendingWrites.get(session) ?? Promise.resolve())\n    .then(write)\n    .catch(error => console.warn('[Factory run audit] Unable to record run lifecycle.', error));\n  pendingWrites.set(session, pending);\n  return pending;\n}\n\nexport async function listSessionOpenRuns(session: RunEndCaptureSession): Promise<FactoryOpenRun[]> {\n  const stored = await session.thread.getSetting({ key: FACTORY_OPEN_RUNS_SETTING });\n  return z.array(factoryOpenRunSchema).parse(stored ?? []);\n}\n\nexport async function waitForSessionRunAudit(session: RunEndCaptureSession): Promise<void> {\n  await (pendingWrites.get(session) ?? Promise.resolve());\n}\n\nfunction runAuditInput(run: FactoryOpenRun) {\n  // Ownership fields are dispatcher bookkeeping, not part of the run's audit record.\n  const { orgId, factoryProjectId, workItemId, workItemName, ownerId, heartbeatAt, ...metadata } = run;\n  void ownerId;\n  void heartbeatAt;\n  return {\n    orgId,\n    factoryProjectId,\n    idempotencyKey: run.kickoffId,\n    targets: [{ type: 'work_item', id: workItemId, ...(workItemName ? { name: workItemName } : {}) }],\n    metadata,\n  };\n}\n\nasync function recordRunEnds(\n  session: RunEndCaptureSession,\n  audit: AuditRecorder,\n  reason: RunEndReason,\n  kickoffId?: string,\n  endedTurn?: EndedTurn,\n): Promise<void> {\n  if (!reason || reason === 'suspended') return;\n  const usage = usageFor(session);\n  const runs = await listSessionOpenRuns(session);\n  if (runs.length === 0) return;\n  const ending = runs.filter(run => !kickoffId || run.kickoffId === kickoffId);\n  // An end event bills the turn it closed. A run whose ledger entry lands after its turn ended\n  // bills the latest ended turn, unless an open run already claimed it.\n  const turn = endedTurn ?? usage.lastTurn;\n  const steps = turn && !turn.claimed ? turn.steps : [];\n  if (turn && ending.length > 0) turn.claimed = true;\n  const turnUsage = runUsage(steps);\n  const remaining = [];\n  for (const run of runs) {\n    if (!ending.includes(run)) {\n      remaining.push(run);\n      continue;\n    }\n    let runUsageRecord = usage.held.get(run.kickoffId);\n    if (!runUsageRecord) {\n      const shared = ending.filter(other => other !== run).map(other => other.kickoffId);\n      runUsageRecord =\n        turnUsage.status === 'recorded' && shared.length > 0\n          ? { ...turnUsage, sharedWithKickoffIds: shared }\n          : turnUsage;\n      usage.held.set(run.kickoffId, runUsageRecord);\n    }\n    const input = runAuditInput(run);\n    const recorded = await audit.record({\n      ...input,\n      actorId: `agent:${run.threadId}`,\n      actorType: 'agent',\n      action: 'factory.run.ended',\n      metadata: { ...input.metadata, reason, usage: runUsageRecord },\n    });\n    if (recorded) {\n      usage.held.delete(run.kickoffId);\n    } else {\n      console.warn(\n        `[Factory run audit] Token usage for run ${run.kickoffId} (${run.role}) was not persisted; keeping it for the next attempt.`,\n        runUsageRecord,\n      );\n      remaining.push(run);\n    }\n  }\n  await session.thread.setSetting({ key: FACTORY_OPEN_RUNS_SETTING, value: remaining });\n}\n\nexport function recordSessionRunStart(\n  session: RunEndCaptureSession,\n  {\n    audit,\n    run,\n    actorType,\n    observedEnd,\n  }: {\n    audit: AuditRecorder;\n    run: FactoryOpenRun;\n    actorType: AuditActorType;\n    observedEnd: () => RunEndReason;\n  },\n): Promise<void> {\n  return serializeRunAudit(session, async () => {\n    const runs = await listSessionOpenRuns(session);\n    if (!runs.some(existing => existing.kickoffId === run.kickoffId)) {\n      await session.thread.setSetting({\n        key: FACTORY_OPEN_RUNS_SETTING,\n        value: [...runs, { startedAt: Date.now(), ...run }],\n      });\n    }\n    await audit.record({\n      ...runAuditInput(run),\n      actorId: run.startedBy,\n      actorType,\n      action: 'factory.run.started',\n    });\n    await recordRunEnds(session, audit, observedEnd(), run.kickoffId);\n  });\n}\n\n/** Renew this process's claim on an open run so other replicas keep treating it as live. */\nexport function heartbeatSessionOpenRun(\n  session: RunEndCaptureSession,\n  kickoffId: string,\n  at = Date.now(),\n): Promise<void> {\n  return serializeRunAudit(session, async () => {\n    const runs = await listSessionOpenRuns(session);\n    if (!runs.some(run => run.kickoffId === kickoffId)) return;\n    await session.thread.setSetting({\n      key: FACTORY_OPEN_RUNS_SETTING,\n      value: runs.map(run => (run.kickoffId === kickoffId ? { ...run, heartbeatAt: at } : run)),\n    });\n  });\n}\n\nexport function observeSessionRunEnd(session: RunEndCaptureSession, { audit }: { audit: AuditRecorder }): () => void {\n  const usage = usageFor(session);\n  return session.subscribe(event => {\n    if (event.type === 'usage_update') {\n      usage.current.push(usageCounts(event.usage));\n      return;\n    }\n    if (event.type !== 'agent_end' || !event.reason || event.reason === 'suspended') return;\n    // Close the turn now so a following turn's steps never land in this run.\n    const turn: EndedTurn = { steps: usage.current, claimed: false };\n    usage.current = [];\n    usage.lastTurn = turn;\n    void serializeRunAudit(session, () => recordRunEnds(session, audit, event.reason, undefined, turn));\n  });\n}\n"],"mappings":";;AAMA,MAAa,4BAA4B;AAEzC,MAAM,uBAAuB,EAAE,OAAO;CACpC,WAAW,EAAE,OAAO;CACpB,WAAW,EAAE,OAAO;CACpB,MAAM,EAAE,OAAO;CACf,WAAW,EAAE,OAAO;CACpB,OAAO,EAAE,OAAO;CAChB,kBAAkB,EAAE,OAAO;CAC3B,YAAY,EAAE,OAAO;CACrB,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS;CAClC,WAAW,EAAE,OAAO;CACpB,UAAU,EAAE,OAAO;CACnB,QAAQ,EAAE,OAAO;;;;;;;;CAQjB,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;;CAEjC,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;AACjC,CAAC;;AAKD,MAAa,4BAA4B;AAEzC,SAAgB,uBAAuB,KAAqB,SAAiB,MAAM,KAAK,IAAI,GAAY;CACtG,OACE,IAAI,YAAY,KAAA,KAChB,IAAI,YAAY,WAChB,IAAI,gBAAgB,KAAA,KACpB,MAAM,IAAI,cAAA;AAEd;AAYA,MAAM,gCAAgB,IAAI,QAA6C;;;;;;AAOvE,MAAa,sCAAsC;AAEnD,MAAM,eAAe;CACnB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAqBA,SAAS,YAAY,OAA+B;CAClD,MAAM,SAAsB,CAAC;CAC7B,KAAK,MAAM,SAAS,cAAc;EAChC,MAAM,QAAQ,MAAM;EACpB,IAAI,OAAO,UAAU,UAAU,OAAO,SAAS;CACjD;CACA,OAAO;AACT;AAEA,SAAS,SAAS,OAAuC;CACvD,IAAI,MAAM,WAAW,GAAG,OAAO,EAAE,QAAQ,aAAa;CACtD,MAAM,SAAsB,CAAC;CAC7B,KAAK,MAAM,QAAQ,OACjB,KAAK,MAAM,SAAS,cAClB,IAAI,KAAK,WAAW,KAAA,GAAW,OAAO,UAAU,OAAO,UAAU,KAAK,KAAK;CAG/E,MAAM,OAAsB,CAAC;CAC7B,IAAI,SAAS;CACb,KAAK,MAAM,QAAQ,OAAO;EACxB,UAAU,KAAK,UAAU,IAAI,CAAC,CAAC,SAAS;EACxC,IAAI,SAAA,MAA8C;EAClD,KAAK,KAAK,IAAI;CAChB;CACA,OAAO;EACL,QAAQ;EACR,WAAW,MAAM;EACjB;EACA,OAAO;EACP,GAAI,MAAM,SAAS,KAAK,SAAS,EAAE,gBAAgB,MAAM,SAAS,KAAK,OAAO,IAAI,CAAC;CACrF;AACF;AAgBA,MAAM,+BAAe,IAAI,QAA4C;AAErE,SAAS,SAAS,SAA6C;CAC7D,IAAI,QAAQ,aAAa,IAAI,OAAO;CACpC,IAAI,CAAC,OAAO;EACV,QAAQ;GAAE,SAAS,CAAC;GAAG,sBAAM,IAAI,IAAI;EAAE;EACvC,aAAa,IAAI,SAAS,KAAK;CACjC;CACA,OAAO;AACT;AAEA,SAAS,kBAAkB,SAA+B,OAA2C;CACnG,MAAM,WAAW,cAAc,IAAI,OAAO,KAAK,QAAQ,QAAQ,EAAA,CAC5D,KAAK,KAAK,CAAC,CACX,OAAM,UAAS,QAAQ,KAAK,uDAAuD,KAAK,CAAC;CAC5F,cAAc,IAAI,SAAS,OAAO;CAClC,OAAO;AACT;AAEA,eAAsB,oBAAoB,SAA0D;CAClG,MAAM,SAAS,MAAM,QAAQ,OAAO,WAAW,EAAE,KAAK,0BAA0B,CAAC;CACjF,OAAO,EAAE,MAAM,oBAAoB,CAAC,CAAC,MAAM,UAAU,CAAC,CAAC;AACzD;AAEA,eAAsB,uBAAuB,SAA8C;CACzF,OAAO,cAAc,IAAI,OAAO,KAAK,QAAQ,QAAQ;AACvD;AAEA,SAAS,cAAc,KAAqB;CAE1C,MAAM,EAAE,OAAO,kBAAkB,YAAY,cAAc,SAAS,aAAa,GAAG,aAAa;CAGjG,OAAO;EACL;EACA;EACA,gBAAgB,IAAI;EACpB,SAAS,CAAC;GAAE,MAAM;GAAa,IAAI;GAAY,GAAI,eAAe,EAAE,MAAM,aAAa,IAAI,CAAC;EAAG,CAAC;EAChG;CACF;AACF;AAEA,eAAe,cACb,SACA,OACA,QACA,WACA,WACe;CACf,IAAI,CAAC,UAAU,WAAW,aAAa;CACvC,MAAM,QAAQ,SAAS,OAAO;CAC9B,MAAM,OAAO,MAAM,oBAAoB,OAAO;CAC9C,IAAI,KAAK,WAAW,GAAG;CACvB,MAAM,SAAS,KAAK,QAAO,QAAO,CAAC,aAAa,IAAI,cAAc,SAAS;CAG3E,MAAM,OAAO,aAAa,MAAM;CAChC,MAAM,QAAQ,QAAQ,CAAC,KAAK,UAAU,KAAK,QAAQ,CAAC;CACpD,IAAI,QAAQ,OAAO,SAAS,GAAG,KAAK,UAAU;CAC9C,MAAM,YAAY,SAAS,KAAK;CAChC,MAAM,YAAY,CAAC;CACnB,KAAK,MAAM,OAAO,MAAM;EACtB,IAAI,CAAC,OAAO,SAAS,GAAG,GAAG;GACzB,UAAU,KAAK,GAAG;GAClB;EACF;EACA,IAAI,iBAAiB,MAAM,KAAK,IAAI,IAAI,SAAS;EACjD,IAAI,CAAC,gBAAgB;GACnB,MAAM,SAAS,OAAO,QAAO,UAAS,UAAU,GAAG,CAAC,CAAC,KAAI,UAAS,MAAM,SAAS;GACjF,iBACE,UAAU,WAAW,cAAc,OAAO,SAAS,IAC/C;IAAE,GAAG;IAAW,sBAAsB;GAAO,IAC7C;GACN,MAAM,KAAK,IAAI,IAAI,WAAW,cAAc;EAC9C;EACA,MAAM,QAAQ,cAAc,GAAG;EAQ/B,IAAI,MAPmB,MAAM,OAAO;GAClC,GAAG;GACH,SAAS,SAAS,IAAI;GACtB,WAAW;GACX,QAAQ;GACR,UAAU;IAAE,GAAG,MAAM;IAAU;IAAQ,OAAO;GAAe;EAC/D,CAAC,GAEC,MAAM,KAAK,OAAO,IAAI,SAAS;OAC1B;GACL,QAAQ,KACN,2CAA2C,IAAI,UAAU,IAAI,IAAI,KAAK,wDACtE,cACF;GACA,UAAU,KAAK,GAAG;EACpB;CACF;CACA,MAAM,QAAQ,OAAO,WAAW;EAAE,KAAK;EAA2B,OAAO;CAAU,CAAC;AACtF;AAEA,SAAgB,sBACd,SACA,EACE,OACA,KACA,WACA,eAOa;CACf,OAAO,kBAAkB,SAAS,YAAY;EAC5C,MAAM,OAAO,MAAM,oBAAoB,OAAO;EAC9C,IAAI,CAAC,KAAK,MAAK,aAAY,SAAS,cAAc,IAAI,SAAS,GAC7D,MAAM,QAAQ,OAAO,WAAW;GAC9B,KAAK;GACL,OAAO,CAAC,GAAG,MAAM;IAAE,WAAW,KAAK,IAAI;IAAG,GAAG;GAAI,CAAC;EACpD,CAAC;EAEH,MAAM,MAAM,OAAO;GACjB,GAAG,cAAc,GAAG;GACpB,SAAS,IAAI;GACb;GACA,QAAQ;EACV,CAAC;EACD,MAAM,cAAc,SAAS,OAAO,YAAY,GAAG,IAAI,SAAS;CAClE,CAAC;AACH;;AAGA,SAAgB,wBACd,SACA,WACA,KAAK,KAAK,IAAI,GACC;CACf,OAAO,kBAAkB,SAAS,YAAY;EAC5C,MAAM,OAAO,MAAM,oBAAoB,OAAO;EAC9C,IAAI,CAAC,KAAK,MAAK,QAAO,IAAI,cAAc,SAAS,GAAG;EACpD,MAAM,QAAQ,OAAO,WAAW;GAC9B,KAAK;GACL,OAAO,KAAK,KAAI,QAAQ,IAAI,cAAc,YAAY;IAAE,GAAG;IAAK,aAAa;GAAG,IAAI,GAAI;EAC1F,CAAC;CACH,CAAC;AACH;AAEA,SAAgB,qBAAqB,SAA+B,EAAE,SAA+C;CACnH,MAAM,QAAQ,SAAS,OAAO;CAC9B,OAAO,QAAQ,WAAU,UAAS;EAChC,IAAI,MAAM,SAAS,gBAAgB;GACjC,MAAM,QAAQ,KAAK,YAAY,MAAM,KAAK,CAAC;GAC3C;EACF;EACA,IAAI,MAAM,SAAS,eAAe,CAAC,MAAM,UAAU,MAAM,WAAW,aAAa;EAEjF,MAAM,OAAkB;GAAE,OAAO,MAAM;GAAS,SAAS;EAAM;EAC/D,MAAM,UAAU,CAAC;EACjB,MAAM,WAAW;EACjB,kBAAuB,eAAe,cAAc,SAAS,OAAO,MAAM,QAAQ,KAAA,GAAW,IAAI,CAAC;CACpG,CAAC;AACH"}

package/dist/session/session-threads.d.ts

@@ -0,0 +1,63 @@
+import type { AgentController, AgentControllerThread } from '@mastra/core/agent-controller';
+import type { WorkItemsStorage } from '../storage/domains/work-items/base.js';
+/** The Factory session row fields that say which memory resource it uses. */
+export interface FactorySessionOwnership {
+    sessionId: string;
+    userId: string;
+    orgId?: string;
+    factoryProjectId?: string | null;
+    branch?: string;
+    visibility?: string;
+    originSessionId?: string | null;
+}
+/** Run bindings: the server-side record that a session runs work for its Factory. */
+export type SessionRunBindings = Pick<WorkItemsStorage, 'hasRunBindingForSession'>;
+type ThreadLookup = Pick<AgentController<any>, 'queryThreadById'>;
+/**
+ * The one memory resource a Factory session runs under. A Slack session uses
+ * its Factory's, or its sender's for a DM; a side session uses its Factory's,
+ * or its owner's when private; any other session uses its owner's. A session's own thread can say otherwise
+ * only within what the server recorded for it: its own id (created before
+ * resources were shared, or a run kept on its own resource), and the Factory's
+ * only for a session with a run binding. A client can create a thread under the
+ * session's id, so the thread alone never makes a session the Factory's.
+ */
+export declare function sessionMemoryResourceId(controller: ThreadLookup | undefined, session: FactorySessionOwnership, runs: SessionRunBindings | undefined): Promise<string>;
+export declare function isRunBound(session: FactorySessionOwnership, runs: SessionRunBindings | undefined): Promise<boolean>;
+/**
+ * A side session works for the session that started it. Otherwise any binding,
+ * active or revoked, on any thread: a session that ever ran a role stays a worker.
+ */
+export declare function isWorkerSession(session: FactorySessionOwnership, runs: SessionRunBindings | undefined): Promise<boolean>;
+/** {@link sessionMemoryResourceId} for a caller that already loaded the session's own thread. */
+export declare function memoryResourceOf(session: FactorySessionOwnership, own: {
+    resourceId?: string | null;
+} | null | undefined, runBound: boolean): string;
+/** The resource a person's session belongs on for a visibility: its Factory's once shared, its owner's while private. */
+export declare function userSessionResourceFor(session: Pick<FactorySessionOwnership, 'userId' | 'factoryProjectId'>, visibility: 'org' | 'private'): string;
+/**
+ * The threads to move when a person's session changes visibility and so moves
+ * onto `resourceId`: its own thread and the threads stamped with its id that
+ * sit on its owner's or Factory's resource. Threads under the session's own id
+ * (from before resources were shared) stay where they are.
+ */
+export declare function sessionThreadsToMove(controller: Pick<AgentController<any>, 'queryThreads' | 'queryThreadById'>, session: FactorySessionOwnership, resourceId: string): Promise<string[]>;
+/**
+ * Whether a `factorySessionId` stamp naming this session counts on a thread
+ * under `resourceId`. Any org member can write a stamped thread under the
+ * Factory's resource, so a private session's stamp never counts there: only
+ * its own thread (`thread.id === sessionId`) does.
+ */
+export declare function sessionStampCounts(session: FactorySessionOwnership, resourceId: string | null | undefined): boolean;
+/**
+ * The threads of one Factory session. Sessions share their Factory's or user's
+ * resource, so listing by resource would return every session's threads. A
+ * session's own thread carries its id, threads it opens are stamped with
+ * `factorySessionId`, and a session created before resources were shared keeps
+ * its threads under its own id as the resource. Thread ids and stamps are
+ * client-writable, so the own and stamped threads only count under the
+ * session's memory resource.
+ */
+export declare function listFactorySessionThreads(controller: Pick<AgentController<any>, 'queryThreads' | 'queryThreadById'>, session: FactorySessionOwnership, runs: SessionRunBindings | undefined): Promise<AgentControllerThread[]>;
+export {};
+//# sourceMappingURL=session-threads.d.ts.map

package/dist/session/session-threads.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-threads.d.ts","sourceRoot":"","sources":["../../src/session/session-threads.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAE5F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAE9E,6EAA6E;AAC7E,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,qFAAqF;AACrF,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,gBAAgB,EAAE,yBAAyB,CAAC,CAAC;AAEnF,KAAK,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,iBAAiB,CAAC,CAAC;AAElE;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,UAAU,EAAE,YAAY,GAAG,SAAS,EACpC,OAAO,EAAE,uBAAuB,EAChC,IAAI,EAAE,kBAAkB,GAAG,SAAS,GACnC,OAAO,CAAC,MAAM,CAAC,CAMjB;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE,uBAAuB,EAAE,IAAI,EAAE,kBAAkB,GAAG,SAAS,oBAOtG;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,uBAAuB,EAAE,IAAI,EAAE,kBAAkB,GAAG,SAAS,oBAE3G;AAED,iGAAiG;AACjG,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,uBAAuB,EAChC,GAAG,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,EACtD,QAAQ,EAAE,OAAO,UA4BlB;AAED,yHAAyH;AACzH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,IAAI,CAAC,uBAAuB,EAAE,QAAQ,GAAG,kBAAkB,CAAC,EACrE,UAAU,EAAE,KAAK,GAAG,SAAS,GAC5B,MAAM,CAER;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,cAAc,GAAG,iBAAiB,CAAC,EAC1E,OAAO,EAAE,uBAAuB,EAChC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,EAAE,CAAC,CAUnB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,uBAAuB,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAEnH;AAED;;;;;;;;GAQG;AACH,wBAAsB,yBAAyB,CAC7C,UAAU,EAAE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,cAAc,GAAG,iBAAiB,CAAC,EAC1E,OAAO,EAAE,uBAAuB,EAChC,IAAI,EAAE,kBAAkB,GAAG,SAAS,GACnC,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAgBlC"}

package/dist/session/session-threads.js

@@ -0,0 +1,97 @@
+//#region src/session/session-threads.ts
+/**
+* The one memory resource a Factory session runs under. A Slack session uses
+* its Factory's, or its sender's for a DM; a side session uses its Factory's,
+* or its owner's when private; any other session uses its owner's. A session's own thread can say otherwise
+* only within what the server recorded for it: its own id (created before
+* resources were shared, or a run kept on its own resource), and the Factory's
+* only for a session with a run binding. A client can create a thread under the
+* session's id, so the thread alone never makes a session the Factory's.
+*/
+async function sessionMemoryResourceId(controller, session, runs) {
+	const [own, runBound] = await Promise.all([controller?.queryThreadById({ threadId: session.sessionId }), isRunBound(session, runs)]);
+	return memoryResourceOf(session, own, runBound);
+}
+async function isRunBound(session, runs) {
+	if (!runs || !session.orgId || !session.factoryProjectId) return false;
+	return runs.hasRunBindingForSession({
+		orgId: session.orgId,
+		factoryProjectId: session.factoryProjectId,
+		sessionId: session.sessionId
+	});
+}
+/**
+* A side session works for the session that started it. Otherwise any binding,
+* active or revoked, on any thread: a session that ever ran a role stays a worker.
+*/
+async function isWorkerSession(session, runs) {
+	return Boolean(session.originSessionId) || isRunBound(session, runs);
+}
+/** {@link sessionMemoryResourceId} for a caller that already loaded the session's own thread. */
+function memoryResourceOf(session, own, runBound) {
+	const factoryProjectId = session.factoryProjectId ?? void 0;
+	const shared = (session.branch?.startsWith("slack/") ?? false) || session.originSessionId ? session.visibility === "private" ? session.userId : factoryProjectId : void 0;
+	if (shared) {
+		if (own?.resourceId && [session.sessionId, shared].includes(own.resourceId)) return own.resourceId;
+		return shared;
+	}
+	const allowed = [
+		session.sessionId,
+		session.userId,
+		...(runBound || session.visibility === "org") && factoryProjectId ? [factoryProjectId] : []
+	];
+	if (own?.resourceId && allowed.includes(own.resourceId)) return own.resourceId;
+	return userSessionResourceFor(session, session.visibility === "org" ? "org" : "private");
+}
+/** The resource a person's session belongs on for a visibility: its Factory's once shared, its owner's while private. */
+function userSessionResourceFor(session, visibility) {
+	return visibility === "org" && session.factoryProjectId ? session.factoryProjectId : session.userId;
+}
+/**
+* The threads to move when a person's session changes visibility and so moves
+* onto `resourceId`: its own thread and the threads stamped with its id that
+* sit on its owner's or Factory's resource. Threads under the session's own id
+* (from before resources were shared) stay where they are.
+*/
+async function sessionThreadsToMove(controller, session, resourceId) {
+	const movable = /* @__PURE__ */ new Set([session.userId, ...session.factoryProjectId ? [session.factoryProjectId] : []]);
+	const [own, stamped] = await Promise.all([controller.queryThreadById({ threadId: session.sessionId }), controller.queryThreads({ metadata: { factorySessionId: session.sessionId } })]);
+	const threads = [...own ? [own] : [], ...stamped].filter((thread) => thread.resourceId !== resourceId && movable.has(thread.resourceId));
+	return [...new Set(threads.map((thread) => thread.id))];
+}
+/**
+* Whether a `factorySessionId` stamp naming this session counts on a thread
+* under `resourceId`. Any org member can write a stamped thread under the
+* Factory's resource, so a private session's stamp never counts there: only
+* its own thread (`thread.id === sessionId`) does.
+*/
+function sessionStampCounts(session, resourceId) {
+	return !(session.visibility === "private" && !!session.factoryProjectId && resourceId === session.factoryProjectId);
+}
+/**
+* The threads of one Factory session. Sessions share their Factory's or user's
+* resource, so listing by resource would return every session's threads. A
+* session's own thread carries its id, threads it opens are stamped with
+* `factorySessionId`, and a session created before resources were shared keeps
+* its threads under its own id as the resource. Thread ids and stamps are
+* client-writable, so the own and stamped threads only count under the
+* session's memory resource.
+*/
+async function listFactorySessionThreads(controller, session, runs) {
+	const { sessionId } = session;
+	const [own, runBound, stamped, legacy] = await Promise.all([
+		controller.queryThreadById({ threadId: sessionId }),
+		isRunBound(session, runs),
+		controller.queryThreads({ metadata: { factorySessionId: sessionId } }),
+		controller.queryThreads({ resourceId: sessionId })
+	]);
+	const resourceId = memoryResourceOf(session, own, runBound);
+	const threads = /* @__PURE__ */ new Map();
+	const owned = [...own?.resourceId === resourceId ? [own] : [], ...sessionStampCounts(session, resourceId) ? stamped.filter((thread) => thread.resourceId === resourceId) : []];
+	for (const thread of [...owned, ...legacy]) threads.set(thread.id, thread);
+	return [...threads.values()];
+}
+//#endregion
+export { isRunBound, isWorkerSession, listFactorySessionThreads, memoryResourceOf, sessionMemoryResourceId, sessionStampCounts, sessionThreadsToMove, userSessionResourceFor };
+
+//# sourceMappingURL=session-threads.js.map

package/dist/session/session-threads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-threads.js","names":[],"sources":["../../src/session/session-threads.ts"],"sourcesContent":["import type { AgentController, AgentControllerThread } from '@mastra/core/agent-controller';\n\nimport type { WorkItemsStorage } from '../storage/domains/work-items/base.js';\n\n/** The Factory session row fields that say which memory resource it uses. */\nexport interface FactorySessionOwnership {\n  sessionId: string;\n  userId: string;\n  orgId?: string;\n  factoryProjectId?: string | null;\n  branch?: string;\n  visibility?: string;\n  originSessionId?: string | null;\n}\n\n/** Run bindings: the server-side record that a session runs work for its Factory. */\nexport type SessionRunBindings = Pick<WorkItemsStorage, 'hasRunBindingForSession'>;\n\ntype ThreadLookup = Pick<AgentController<any>, 'queryThreadById'>;\n\n/**\n * The one memory resource a Factory session runs under. A Slack session uses\n * its Factory's, or its sender's for a DM; a side session uses its Factory's,\n * or its owner's when private; any other session uses its owner's. A session's own thread can say otherwise\n * only within what the server recorded for it: its own id (created before\n * resources were shared, or a run kept on its own resource), and the Factory's\n * only for a session with a run binding. A client can create a thread under the\n * session's id, so the thread alone never makes a session the Factory's.\n */\nexport async function sessionMemoryResourceId(\n  controller: ThreadLookup | undefined,\n  session: FactorySessionOwnership,\n  runs: SessionRunBindings | undefined,\n): Promise<string> {\n  const [own, runBound] = await Promise.all([\n    controller?.queryThreadById({ threadId: session.sessionId }),\n    isRunBound(session, runs),\n  ]);\n  return memoryResourceOf(session, own, runBound);\n}\n\nexport async function isRunBound(session: FactorySessionOwnership, runs: SessionRunBindings | undefined) {\n  if (!runs || !session.orgId || !session.factoryProjectId) return false;\n  return runs.hasRunBindingForSession({\n    orgId: session.orgId,\n    factoryProjectId: session.factoryProjectId,\n    sessionId: session.sessionId,\n  });\n}\n\n/**\n * A side session works for the session that started it. Otherwise any binding,\n * active or revoked, on any thread: a session that ever ran a role stays a worker.\n */\nexport async function isWorkerSession(session: FactorySessionOwnership, runs: SessionRunBindings | undefined) {\n  return Boolean(session.originSessionId) || isRunBound(session, runs);\n}\n\n/** {@link sessionMemoryResourceId} for a caller that already loaded the session's own thread. */\nexport function memoryResourceOf(\n  session: FactorySessionOwnership,\n  own: { resourceId?: string | null } | null | undefined,\n  runBound: boolean,\n) {\n  const factoryProjectId = session.factoryProjectId ?? undefined;\n  const slack = session.branch?.startsWith('slack/') ?? false;\n  // A private Slack DM or side session stays with its owner.\n  const shared =\n    slack || session.originSessionId\n      ? session.visibility === 'private'\n        ? session.userId\n        : factoryProjectId\n      : undefined;\n  if (shared) {\n    if (own?.resourceId && [session.sessionId, shared].includes(own.resourceId)) return own.resourceId;\n    return shared;\n  }\n  // A session a person started runs on their resource while private and its\n  // Factory's once its owner shares it, which moves its threads there. Its own\n  // thread says where it is; a client cannot make a private session the\n  // Factory's by writing that thread, since the Factory is only allowed for a\n  // shared or run-bound session.\n  const allowed = [\n    session.sessionId,\n    session.userId,\n    ...((runBound || session.visibility === 'org') && factoryProjectId ? [factoryProjectId] : []),\n  ];\n  if (own?.resourceId && allowed.includes(own.resourceId)) return own.resourceId;\n  // No thread yet: where a session with this visibility starts.\n  return userSessionResourceFor(session, session.visibility === 'org' ? 'org' : 'private');\n}\n\n/** The resource a person's session belongs on for a visibility: its Factory's once shared, its owner's while private. */\nexport function userSessionResourceFor(\n  session: Pick<FactorySessionOwnership, 'userId' | 'factoryProjectId'>,\n  visibility: 'org' | 'private',\n): string {\n  return visibility === 'org' && session.factoryProjectId ? session.factoryProjectId : session.userId;\n}\n\n/**\n * The threads to move when a person's session changes visibility and so moves\n * onto `resourceId`: its own thread and the threads stamped with its id that\n * sit on its owner's or Factory's resource. Threads under the session's own id\n * (from before resources were shared) stay where they are.\n */\nexport async function sessionThreadsToMove(\n  controller: Pick<AgentController<any>, 'queryThreads' | 'queryThreadById'>,\n  session: FactorySessionOwnership,\n  resourceId: string,\n): Promise<string[]> {\n  const movable = new Set([session.userId, ...(session.factoryProjectId ? [session.factoryProjectId] : [])]);\n  const [own, stamped] = await Promise.all([\n    controller.queryThreadById({ threadId: session.sessionId }),\n    controller.queryThreads({ metadata: { factorySessionId: session.sessionId } }),\n  ]);\n  const threads = [...(own ? [own] : []), ...stamped].filter(\n    thread => thread.resourceId !== resourceId && movable.has(thread.resourceId),\n  );\n  return [...new Set(threads.map(thread => thread.id))];\n}\n\n/**\n * Whether a `factorySessionId` stamp naming this session counts on a thread\n * under `resourceId`. Any org member can write a stamped thread under the\n * Factory's resource, so a private session's stamp never counts there: only\n * its own thread (`thread.id === sessionId`) does.\n */\nexport function sessionStampCounts(session: FactorySessionOwnership, resourceId: string | null | undefined): boolean {\n  return !(session.visibility === 'private' && !!session.factoryProjectId && resourceId === session.factoryProjectId);\n}\n\n/**\n * The threads of one Factory session. Sessions share their Factory's or user's\n * resource, so listing by resource would return every session's threads. A\n * session's own thread carries its id, threads it opens are stamped with\n * `factorySessionId`, and a session created before resources were shared keeps\n * its threads under its own id as the resource. Thread ids and stamps are\n * client-writable, so the own and stamped threads only count under the\n * session's memory resource.\n */\nexport async function listFactorySessionThreads(\n  controller: Pick<AgentController<any>, 'queryThreads' | 'queryThreadById'>,\n  session: FactorySessionOwnership,\n  runs: SessionRunBindings | undefined,\n): Promise<AgentControllerThread[]> {\n  const { sessionId } = session;\n  const [own, runBound, stamped, legacy] = await Promise.all([\n    controller.queryThreadById({ threadId: sessionId }),\n    isRunBound(session, runs),\n    controller.queryThreads({ metadata: { factorySessionId: sessionId } }),\n    controller.queryThreads({ resourceId: sessionId }),\n  ]);\n  const resourceId = memoryResourceOf(session, own, runBound);\n  const threads = new Map<string, AgentControllerThread>();\n  const owned = [\n    ...(own?.resourceId === resourceId ? [own] : []),\n    ...(sessionStampCounts(session, resourceId) ? stamped.filter(thread => thread.resourceId === resourceId) : []),\n  ];\n  for (const thread of [...owned, ...legacy]) threads.set(thread.id, thread);\n  return [...threads.values()];\n}\n"],"mappings":";;;;;;;;;;AA6BA,eAAsB,wBACpB,YACA,SACA,MACiB;CACjB,MAAM,CAAC,KAAK,YAAY,MAAM,QAAQ,IAAI,CACxC,YAAY,gBAAgB,EAAE,UAAU,QAAQ,UAAU,CAAC,GAC3D,WAAW,SAAS,IAAI,CAC1B,CAAC;CACD,OAAO,iBAAiB,SAAS,KAAK,QAAQ;AAChD;AAEA,eAAsB,WAAW,SAAkC,MAAsC;CACvG,IAAI,CAAC,QAAQ,CAAC,QAAQ,SAAS,CAAC,QAAQ,kBAAkB,OAAO;CACjE,OAAO,KAAK,wBAAwB;EAClC,OAAO,QAAQ;EACf,kBAAkB,QAAQ;EAC1B,WAAW,QAAQ;CACrB,CAAC;AACH;;;;;AAMA,eAAsB,gBAAgB,SAAkC,MAAsC;CAC5G,OAAO,QAAQ,QAAQ,eAAe,KAAK,WAAW,SAAS,IAAI;AACrE;;AAGA,SAAgB,iBACd,SACA,KACA,UACA;CACA,MAAM,mBAAmB,QAAQ,oBAAoB,KAAA;CAGrD,MAAM,UAFQ,QAAQ,QAAQ,WAAW,QAAQ,KAAK,UAG3C,QAAQ,kBACb,QAAQ,eAAe,YACrB,QAAQ,SACR,mBACF,KAAA;CACN,IAAI,QAAQ;EACV,IAAI,KAAK,cAAc,CAAC,QAAQ,WAAW,MAAM,CAAC,CAAC,SAAS,IAAI,UAAU,GAAG,OAAO,IAAI;EACxF,OAAO;CACT;CAMA,MAAM,UAAU;EACd,QAAQ;EACR,QAAQ;EACR,IAAK,YAAY,QAAQ,eAAe,UAAU,mBAAmB,CAAC,gBAAgB,IAAI,CAAC;CAC7F;CACA,IAAI,KAAK,cAAc,QAAQ,SAAS,IAAI,UAAU,GAAG,OAAO,IAAI;CAEpE,OAAO,uBAAuB,SAAS,QAAQ,eAAe,QAAQ,QAAQ,SAAS;AACzF;;AAGA,SAAgB,uBACd,SACA,YACQ;CACR,OAAO,eAAe,SAAS,QAAQ,mBAAmB,QAAQ,mBAAmB,QAAQ;AAC/F;;;;;;;AAQA,eAAsB,qBACpB,YACA,SACA,YACmB;CACnB,MAAM,0BAAU,IAAI,IAAI,CAAC,QAAQ,QAAQ,GAAI,QAAQ,mBAAmB,CAAC,QAAQ,gBAAgB,IAAI,CAAC,CAAE,CAAC;CACzG,MAAM,CAAC,KAAK,WAAW,MAAM,QAAQ,IAAI,CACvC,WAAW,gBAAgB,EAAE,UAAU,QAAQ,UAAU,CAAC,GAC1D,WAAW,aAAa,EAAE,UAAU,EAAE,kBAAkB,QAAQ,UAAU,EAAE,CAAC,CAC/E,CAAC;CACD,MAAM,UAAU,CAAC,GAAI,MAAM,CAAC,GAAG,IAAI,CAAC,GAAI,GAAG,OAAO,CAAC,CAAC,QAClD,WAAU,OAAO,eAAe,cAAc,QAAQ,IAAI,OAAO,UAAU,CAC7E;CACA,OAAO,CAAC,GAAG,IAAI,IAAI,QAAQ,KAAI,WAAU,OAAO,EAAE,CAAC,CAAC;AACtD;;;;;;;AAQA,SAAgB,mBAAmB,SAAkC,YAAgD;CACnH,OAAO,EAAE,QAAQ,eAAe,aAAa,CAAC,CAAC,QAAQ,oBAAoB,eAAe,QAAQ;AACpG;;;;;;;;;;AAWA,eAAsB,0BACpB,YACA,SACA,MACkC;CAClC,MAAM,EAAE,cAAc;CACtB,MAAM,CAAC,KAAK,UAAU,SAAS,UAAU,MAAM,QAAQ,IAAI;EACzD,WAAW,gBAAgB,EAAE,UAAU,UAAU,CAAC;EAClD,WAAW,SAAS,IAAI;EACxB,WAAW,aAAa,EAAE,UAAU,EAAE,kBAAkB,UAAU,EAAE,CAAC;EACrE,WAAW,aAAa,EAAE,YAAY,UAAU,CAAC;CACnD,CAAC;CACD,MAAM,aAAa,iBAAiB,SAAS,KAAK,QAAQ;CAC1D,MAAM,0BAAU,IAAI,IAAmC;CACvD,MAAM,QAAQ,CACZ,GAAI,KAAK,eAAe,aAAa,CAAC,GAAG,IAAI,CAAC,GAC9C,GAAI,mBAAmB,SAAS,UAAU,IAAI,QAAQ,QAAO,WAAU,OAAO,eAAe,UAAU,IAAI,CAAC,CAC9G;CACA,KAAK,MAAM,UAAU,CAAC,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,IAAI,OAAO,IAAI,MAAM;CACzE,OAAO,CAAC,GAAG,QAAQ,OAAO,CAAC;AAC7B"}

package/dist/session/source-control-tools.js

@@ -36,10 +36,10 @@ function authIdentity(requestContext) {
 		userId: getFactoryAuthUserId(user)
 	};
 }
-async function resolveProviderSession(resourceId, providers) {
+async function resolveProviderSession(sessionId, providers) {
 	const matches = (await Promise.all(providers.map(async (provider) => ({
 		provider,
-		session: await provider.storage.sessions.getBySessionId(resourceId)
+		session: await provider.storage.sessions.getBySessionId(sessionId)
 	})))).filter((match) => match.session !== null);
 	if (matches.length !== 1) throw new Error(matches.length === 0 ? "The active session is not backed by a source-control repository." : "The active session is ambiguous across source-control providers.");
 	return matches[0];
@@ -47,8 +47,8 @@ async function resolveProviderSession(resourceId, providers) {
 async function resolveSessionTarget(requestContext, providers, options = {}) {
 	const context = requestContext.get("controller");
 	const { orgId, userId } = authIdentity(requestContext);
-	if (!context?.resourceId || !orgId || !userId) throw new Error("Source-control tools require an authenticated repository session.");
-	const { provider, session } = await resolveProviderSession(context.resourceId, providers);
+	if (!context?.sessionId || !orgId || !userId) throw new Error("Source-control tools require an authenticated repository session.");
+	const { provider, session } = await resolveProviderSession(context.sessionId, providers);
 	if (session.orgId !== orgId || session.visibility === "private" && session.userId !== userId) throw new Error("The active source-control session is not available to the authenticated user.");
 	const ownRepository = session.projectRepositoryId ? await provider.storage.projectRepositories.get({
 		orgId,
@@ -102,9 +102,9 @@ async function resolveSessionTarget(requestContext, providers, options = {}) {
 * descriptions. `undefined` when the session cannot be resolved; the tools
 * then describe the default without naming it.
 */
-async function describeSessionRepositories(resourceId, providers) {
+async function describeSessionRepositories(sessionId, providers) {
 	try {
-		const { provider, session } = await resolveProviderSession(resourceId, providers);
+		const { provider, session } = await resolveProviderSession(sessionId, providers);
 		const repositories = await resolveSessionRepositories({
 			sourceControl: provider.storage,
 			session
@@ -152,8 +152,8 @@ async function createSourceControlTools({ requestContext, providers, audit, test
 	if (!requestContext || typeof requestContext.get !== "function") return {};
 	const controller = requestContext.get("controller");
 	const identity = authIdentity(requestContext);
-	if (!controller?.resourceId || !identity.orgId || !identity.userId || providers.length === 0) return {};
-	const repositoryArgument = repositoryArgumentDescription(await describeSessionRepositories(controller.resourceId, providers));
+	if (!controller?.sessionId || !identity.orgId || !identity.userId || providers.length === 0) return {};
+	const repositoryArgument = repositoryArgumentDescription(await describeSessionRepositories(controller.sessionId, providers));
 	const withTarget = (options) => resolveSessionTarget(requestContext, providers, options);
 	const targetFor = (input) => withTarget(input.repository !== void 0 ? { repository: input.repository } : void 0);
 	const reference = async (target) => ({