@mastra/factory 0.25.0-alpha.4 → 0.25.0-alpha.5

package/dist/session/filesystem-capture.js.map

@@ -1 +1 @@
-{"version":3,"file":"filesystem-capture.js","names":[],"sources":["../../src/session/filesystem-capture.ts"],"sourcesContent":["import type { AgentControllerEvent, SessionBeforeAgentEndListener } from '@mastra/core/agent-controller';\nimport type { WorkspaceSandbox } from '@mastra/core/workspace';\nimport { peekSessionSandbox, sessionLayout } from '../sandbox/session-sandbox.js';\nimport type { SessionLayoutRepository } from '../sandbox/session-sandbox.js';\n\nimport type { FilesystemFile, FilesystemStorage } from '../storage/domains/filesystem/base.js';\nimport type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\nimport { peekSessionEnvironment } from './environment-state-processor.js';\nimport { isMeaningfulToolName } from './first-exec-capture.js';\n\n/** Exit code of `GIT_CHANGED_FILES_SCRIPT` when the checkout is not there: the repository is skipped, not failed. */\nconst CHECKOUT_MISSING_EXIT_CODE = 3;\nconst GIT_CHANGED_FILES_SCRIPT = `\nset -e\nworkdir=$1\nbase_branch=$2\ntest -d \"$workdir\" || exit ${CHECKOUT_MISSING_EXIT_CODE}\nbase=HEAD\nif merge_base=$(git -C \"$workdir\" merge-base HEAD \"origin/$base_branch\" 2>/dev/null); then\n  base=$merge_base\nfi\ngit -C \"$workdir\" diff --name-only -z --find-renames --diff-filter=ACMRTUXB \"$base\"\ngit -C \"$workdir\" ls-files --others --exclude-standard -z\n`;\nconst ARTIFACTS_LIST_COMMAND = 'cd \"$1\" && test -d .artifacts && find .artifacts -type f -print0 || true';\n/**\n * Regular files directly under the workspace root written since the session\n * was created ($2 is a UTC `touch -t` stamp, `YYYYMMDDhhmm.SS`), such as the\n * agent's notes. Files the template shipped with predate the session and stay\n * out; the checkouts are covered by git. Dotfiles are never listed: a listed\n * path becomes readable through the thread's file route, and the root is where\n * setup leaves `.env`, `.pgpass`, `.netrc` and other credential files.\n * `touch -t` plus `-newer` works on GNU and BSD find alike; `-newermt\n * \"@epoch\"` is GNU only.\n */\nexport const ROOT_FILES_LIST_COMMAND = [\n  'cd \"$1\" && ref=$(mktemp) && TZ=UTC touch -t \"$2\" \"$ref\"',\n  '&& find . -mindepth 1 -maxdepth 1 -type f ! -name \\'.*\\' -newer \"$ref\" -print0',\n  '; status=$?; rm -f \"$ref\"; exit $status',\n].join(' ');\n\n/** `touch -t` stamp of a moment, in UTC. */\nexport function touchStamp(date: Date): string {\n  const two = (value: number) => String(value).padStart(2, '0');\n  return (\n    `${date.getUTCFullYear()}${two(date.getUTCMonth() + 1)}${two(date.getUTCDate())}` +\n    `${two(date.getUTCHours())}${two(date.getUTCMinutes())}.${two(date.getUTCSeconds())}`\n  );\n}\n\nexport interface FilesystemCaptureSession {\n  readonly identity: { getId(): string };\n  readonly thread: { requireId(): string };\n  getWorkspace(): { sandbox?: Pick<WorkspaceSandbox, 'executeCommand'> } | undefined;\n  onBeforeAgentEnd(listener: SessionBeforeAgentEndListener): () => void;\n  subscribe(listener: (event: AgentControllerEvent) => void): () => void;\n}\n\nexport interface FilesystemCaptureDependencies {\n  filesystem: Pick<FilesystemStorage, 'replaceFiles'>;\n  sourceControl: {\n    sessions: Pick<SourceControlStorageHandle['sessions'], 'getBySessionId'>;\n  };\n}\n\nexport function parseFilesystemCaptureFiles(output: string): FilesystemFile[] {\n  const files = new Map<string, FilesystemFile>();\n  for (const record of output.split('\\0')) {\n    if (!record) continue;\n    const path = record.replace(/^\\.\\//, '');\n    if (path) files.set(path, { path });\n  }\n\n  return [...files.values()].toSorted((a, b) => a.path.localeCompare(b.path));\n}\n\nexport async function captureSessionFilesystem(\n  session: FilesystemCaptureSession,\n  { filesystem, sourceControl }: FilesystemCaptureDependencies,\n  ids?: { sessionId: string; threadId: string },\n): Promise<void> {\n  try {\n    // Scheduled captures pass ids read at schedule time: a session deleted\n    // before the queued capture runs has already cleared its thread.\n    const sessionId = ids?.sessionId ?? session.identity.getId();\n    const threadId = ids?.threadId ?? session.thread.requireId();\n    const sourceSession = await sourceControl.sessions.getBySessionId(sessionId);\n    // Chat-only sessions run without a workspace; there is nothing to capture.\n    const sandbox = session.getWorkspace()?.sandbox;\n    if (!sourceSession || !sandbox?.executeCommand) return;\n    // The live workdir comes from the per-process memo (the deterministic\n    // truth) ONLY — never the persisted observability column, which a row\n    // written under a previous provider can point at a workdir that no\n    // longer exists (the stale-workdir incident class). No memo entry means\n    // no live sandbox worth capturing in this replica; capture is\n    // best-effort telemetry, so skip.\n    const entry = peekSessionSandbox(sourceSession.id);\n    if (!entry) return;\n    // Telemetry must never provision a VM: executeCommand lazily starts the\n    // sandbox via ensureRunning, so a chat turn that never touched the\n    // workspace would otherwise boot (and clone into) a fresh VM just to\n    // capture an empty git status. Only capture when the turn already has a\n    // running sandbox.\n    if (entry.sandbox.status !== 'running') return;\n    // Running-but-unresolved should not happen (the start hook resolves the\n    // workdir), but capture is best-effort: skip rather than guess.\n    const layout = sessionLayout(entry);\n    if (!layout) return;\n\n    // One git pass per checkout, in parallel so three repositories stay well\n    // inside the 10 s readers wait for a pending capture. The session's own\n    // repository compares against the session base branch; the others sit on\n    // their default branch and compare against that. A repository whose\n    // checkout is missing (exit 3) is skipped: it has nothing to list and\n    // must not block the others. Any other failure is treated as transient\n    // and leaves the previous listing in place.\n    const multiRepo = layout.repos.length > 1;\n    const environment = multiRepo ? peekSessionEnvironment(sourceSession.sessionId) : undefined;\n    const ownRepo = entry.ownRepo.toLowerCase();\n    // The boot records the state at its end, after every setup command; until\n    // then a secondary checkout compares against its own `origin/HEAD`.\n    const baseBranchFor = (repo: SessionLayoutRepository): string => {\n      if (repo.slug.toLowerCase() === ownRepo) return sourceSession.baseBranch;\n      const state = environment?.repositories.find(\n        candidate => candidate.slug.toLowerCase() === repo.slug.toLowerCase(),\n      );\n      return state?.defaultBranch ?? 'HEAD';\n    };\n    const targets = layout.repos.map(repo => ({ repo, baseBranch: baseBranchFor(repo) }));\n    const executeCommand = sandbox.executeCommand.bind(sandbox);\n    const results = await Promise.all(\n      targets.map(({ repo, baseBranch }) =>\n        executeCommand('sh', ['-c', GIT_CHANGED_FILES_SCRIPT, 'mastracode-changed-files', repo.dir, baseBranch], {\n          timeout: 30_000,\n        }),\n      ),\n    );\n    const files = new Map<string, FilesystemFile>();\n    let captured = 0;\n    for (const [index, result] of results.entries()) {\n      if (result.exitCode === CHECKOUT_MISSING_EXIT_CODE) continue;\n      if (result.exitCode !== 0) {\n        console.warn('[Factory filesystem capture] Unable to inspect Git changes.', result.stderr);\n        return;\n      }\n      captured += 1;\n      const prefix = targets[index]!.repo.prefix;\n      for (const file of parseFilesystemCaptureFiles(result.stdout)) {\n        files.set(`${prefix}${file.path}`, { path: `${prefix}${file.path}` });\n      }\n    }\n    if (captured === 0) return;\n\n    const artifacts = await executeCommand('sh', ['-c', ARTIFACTS_LIST_COMMAND, 'sh', layout.root], {\n      timeout: 30_000,\n    });\n    if (artifacts.exitCode !== 0) {\n      console.warn('[Factory filesystem capture] Unable to list workspace artifacts.', artifacts.stderr);\n      return;\n    }\n    for (const path of artifacts.stdout.split('\\0')) {\n      const normalizedPath = path.replace(/^\\.\\//, '');\n      if (normalizedPath) {\n        files.set(normalizedPath, { path: normalizedPath });\n      }\n    }\n\n    // With several checkouts the root is a plain directory nothing else lists.\n    // A failed listing is logged and the git and artifact results still land.\n    if (multiRepo) {\n      const since = touchStamp(sourceSession.createdAt);\n      const rootFiles = await executeCommand('sh', ['-c', ROOT_FILES_LIST_COMMAND, 'sh', layout.root, since], {\n        timeout: 30_000,\n      });\n      if (rootFiles.exitCode !== 0) {\n        console.warn('[Factory filesystem capture] Unable to list workspace root files.', rootFiles.stderr);\n      } else {\n        for (const path of rootFiles.stdout.split('\\0')) {\n          const normalizedPath = path.replace(/^\\.\\//, '');\n          if (normalizedPath && !normalizedPath.startsWith('.')) {\n            files.set(normalizedPath, { path: normalizedPath });\n          }\n        }\n      }\n    }\n\n    // The listing describes the session's workspace, not its memory resource,\n    // which the session shares with others: rows are keyed by the session id.\n    await filesystem.replaceFiles({\n      resourceId: sessionId,\n      threadId,\n      files: [...files.values()].toSorted((a, b) => a.path.localeCompare(b.path)),\n    });\n  } catch (error) {\n    console.warn('[Factory filesystem capture] Unable to persist files.', error);\n  }\n}\n\n/**\n * In-flight capture chains keyed by session id. Serves two purposes: readers\n * of the persisted file listing (the /web/workspace routes) await the capture\n * for the turn that just ended instead of racing it, and captures for the same\n * session stay sequential (last write wins). In-process only: the factory\n * server that runs the session controller also serves those routes.\n */\nconst pendingCaptures = new Map<string, Promise<void>>();\n\n/**\n * Resolve once the session's in-flight filesystem capture (if any) has\n * persisted, or after `timeoutMs` so a reader that arrives mid-capture is\n * never blocked by the execs' worst-case 30s timeouts. Never rejects: the\n * capture body is fully try/catch contained.\n */\nexport async function waitForPendingFilesystemCapture(sessionId: string, timeoutMs = 10_000): Promise<void> {\n  let pending = pendingCaptures.get(sessionId);\n  if (!pending) return;\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  let timedOut = false;\n  const deadline = new Promise<void>(resolve => {\n    timer = setTimeout(() => {\n      timedOut = true;\n      resolve();\n    }, timeoutMs);\n  });\n  try {\n    // A turn that ends while we wait chains a successor capture; keep waiting\n    // until the latest chain settles so the final snapshot is not lost.\n    while (pending && !timedOut) {\n      await Promise.race([pending, deadline]);\n      const next = pendingCaptures.get(sessionId);\n      pending = next === pending ? undefined : next;\n    }\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nexport function observeSessionFilesystem(\n  session: FilesystemCaptureSession,\n  dependencies: FilesystemCaptureDependencies,\n): () => void {\n  let fallbackChain = Promise.resolve();\n  // Capture only runs after a turn that actually touched the workspace: a\n  // successful workspace tool call both proves the sandbox is awake and is\n  // the only way the listing can have changed. Without this gate every chat\n  // turn would run two sandbox execs — and since executeCommand resumes an\n  // idle VM, a pure-chat turn would keep waking a sandbox it never used.\n  // Same bookkeeping as first-exec capture: tool names resolve at tool_end\n  // via the tool_start map, and suspended calls survive agent_end so a\n  // resumed run's eventual completion still counts for that turn.\n  let workspaceTouched = false;\n  const toolNames = new Map<string, string>();\n  const suspended = new Set<string>();\n  const unsubscribeEvents = session.subscribe(event => {\n    switch (event.type) {\n      case 'tool_start': {\n        toolNames.set(event.toolCallId, event.toolName);\n        return;\n      }\n      case 'tool_suspended': {\n        suspended.add(event.toolCallId);\n        return;\n      }\n      case 'tool_suspension_cancelled': {\n        toolNames.delete(event.toolCallId);\n        suspended.delete(event.toolCallId);\n        return;\n      }\n      case 'agent_end': {\n        for (const id of toolNames.keys()) {\n          if (!suspended.has(id)) toolNames.delete(id);\n        }\n        return;\n      }\n      case 'tool_end': {\n        const toolName = toolNames.get(event.toolCallId);\n        toolNames.delete(event.toolCallId);\n        suspended.delete(event.toolCallId);\n        if (event.isError || event.denied) return;\n        if (isMeaningfulToolName(toolName)) workspaceTouched = true;\n        return;\n      }\n    }\n  });\n  const unsubscribeEnd = session.onBeforeAgentEnd(() => {\n    // onBeforeAgentEnd fires before agent_end is emitted, so every tool_end\n    // of the finishing run has already been observed; read then reset.\n    if (!workspaceTouched) return;\n    workspaceTouched = false;\n    // Chain so captures stay sequential (last write wins), but do NOT return\n    // the chain: finishAgentRun awaits every listener before emitting\n    // agent_end, and the capture's sandbox execs (git status + artifacts\n    // find, 30s timeouts each) must not gate turn completion. Readers that\n    // need the fresh listing await the pending capture through\n    // waitForPendingFilesystemCapture instead. The un-returned chain cannot\n    // leak an unhandled rejection: captureSessionFilesystem's entire body\n    // runs inside its own try/catch, and disposal of this listener does not\n    // cancel an in-flight chain, so a final turn's capture still persists.\n    let sessionId: string;\n    try {\n      sessionId = session.identity.getId();\n    } catch {\n      // No identity means no route can address this session's listing; keep\n      // a per-observer chain so captures still run sequentially.\n      fallbackChain = fallbackChain.then(() => captureSessionFilesystem(session, dependencies));\n      return;\n    }\n    let threadId: string;\n    try {\n      threadId = session.thread.requireId();\n    } catch {\n      return;\n    }\n    const ids = { sessionId, threadId };\n    const chain = (pendingCaptures.get(sessionId) ?? Promise.resolve()).then(() =>\n      captureSessionFilesystem(session, dependencies, ids),\n    );\n    pendingCaptures.set(sessionId, chain);\n    void chain.finally(() => {\n      if (pendingCaptures.get(sessionId) === chain) {\n        pendingCaptures.delete(sessionId);\n      }\n    });\n  });\n  return () => {\n    unsubscribeEvents();\n    unsubscribeEnd();\n  };\n}\n"],"mappings":";;;;;AAWA,MAAM,6BAA6B;AACnC,MAAM,2BAA2B;;;;6BAIJ,2BAA2B;;;;;;;;AAQxD,MAAM,yBAAyB;;;;;;;;;;;AAW/B,MAAa,0BAA0B;CACrC;CACA;CACA;AACF,CAAC,CAAC,KAAK,GAAG;;AAGV,SAAgB,WAAW,MAAoB;CAC7C,MAAM,OAAO,UAAkB,OAAO,KAAK,CAAC,CAAC,SAAS,GAAG,GAAG;CAC5D,OACE,GAAG,KAAK,eAAe,IAAI,IAAI,KAAK,YAAY,IAAI,CAAC,IAAI,IAAI,KAAK,WAAW,CAAC,IAC3E,IAAI,KAAK,YAAY,CAAC,IAAI,IAAI,KAAK,cAAc,CAAC,EAAE,GAAG,IAAI,KAAK,cAAc,CAAC;AAEtF;AAiBA,SAAgB,4BAA4B,QAAkC;CAC5E,MAAM,wBAAQ,IAAI,IAA4B;CAC9C,KAAK,MAAM,UAAU,OAAO,MAAM,IAAI,GAAG;EACvC,IAAI,CAAC,QAAQ;EACb,MAAM,OAAO,OAAO,QAAQ,SAAS,EAAE;EACvC,IAAI,MAAM,MAAM,IAAI,MAAM,EAAE,KAAK,CAAC;CACpC;CAEA,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,UAAU,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAC5E;AAEA,eAAsB,yBACpB,SACA,EAAE,YAAY,iBACd,KACe;CACf,IAAI;EAGF,MAAM,YAAY,KAAK,aAAa,QAAQ,SAAS,MAAM;EAC3D,MAAM,WAAW,KAAK,YAAY,QAAQ,OAAO,UAAU;EAC3D,MAAM,gBAAgB,MAAM,cAAc,SAAS,eAAe,SAAS;EAE3E,MAAM,UAAU,QAAQ,aAAa,CAAC,EAAE;EACxC,IAAI,CAAC,iBAAiB,CAAC,SAAS,gBAAgB;EAOhD,MAAM,QAAQ,mBAAmB,cAAc,EAAE;EACjD,IAAI,CAAC,OAAO;EAMZ,IAAI,MAAM,QAAQ,WAAW,WAAW;EAGxC,MAAM,SAAS,cAAc,KAAK;EAClC,IAAI,CAAC,QAAQ;EASb,MAAM,YAAY,OAAO,MAAM,SAAS;EACxC,MAAM,cAAc,YAAY,uBAAuB,cAAc,SAAS,IAAI,KAAA;EAClF,MAAM,UAAU,MAAM,QAAQ,YAAY;EAG1C,MAAM,iBAAiB,SAA0C;GAC/D,IAAI,KAAK,KAAK,YAAY,MAAM,SAAS,OAAO,cAAc;GAI9D,QAHc,aAAa,aAAa,MACtC,cAAa,UAAU,KAAK,YAAY,MAAM,KAAK,KAAK,YAAY,CACtE,EAAA,EACc,iBAAiB;EACjC;EACA,MAAM,UAAU,OAAO,MAAM,KAAI,UAAS;GAAE;GAAM,YAAY,cAAc,IAAI;EAAE,EAAE;EACpF,MAAM,iBAAiB,QAAQ,eAAe,KAAK,OAAO;EAC1D,MAAM,UAAU,MAAM,QAAQ,IAC5B,QAAQ,KAAK,EAAE,MAAM,iBACnB,eAAe,MAAM;GAAC;GAAM;GAA0B;GAA4B,KAAK;GAAK;EAAU,GAAG,EACvG,SAAS,IACX,CAAC,CACH,CACF;EACA,MAAM,wBAAQ,IAAI,IAA4B;EAC9C,IAAI,WAAW;EACf,KAAK,MAAM,CAAC,OAAO,WAAW,QAAQ,QAAQ,GAAG;GAC/C,IAAI,OAAO,aAAa,4BAA4B;GACpD,IAAI,OAAO,aAAa,GAAG;IACzB,QAAQ,KAAK,+DAA+D,OAAO,MAAM;IACzF;GACF;GACA,YAAY;GACZ,MAAM,SAAS,QAAQ,MAAM,CAAE,KAAK;GACpC,KAAK,MAAM,QAAQ,4BAA4B,OAAO,MAAM,GAC1D,MAAM,IAAI,GAAG,SAAS,KAAK,QAAQ,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC;EAExE;EACA,IAAI,aAAa,GAAG;EAEpB,MAAM,YAAY,MAAM,eAAe,MAAM;GAAC;GAAM;GAAwB;GAAM,OAAO;EAAI,GAAG,EAC9F,SAAS,IACX,CAAC;EACD,IAAI,UAAU,aAAa,GAAG;GAC5B,QAAQ,KAAK,oEAAoE,UAAU,MAAM;GACjG;EACF;EACA,KAAK,MAAM,QAAQ,UAAU,OAAO,MAAM,IAAI,GAAG;GAC/C,MAAM,iBAAiB,KAAK,QAAQ,SAAS,EAAE;GAC/C,IAAI,gBACF,MAAM,IAAI,gBAAgB,EAAE,MAAM,eAAe,CAAC;EAEtD;EAIA,IAAI,WAAW;GACb,MAAM,QAAQ,WAAW,cAAc,SAAS;GAChD,MAAM,YAAY,MAAM,eAAe,MAAM;IAAC;IAAM;IAAyB;IAAM,OAAO;IAAM;GAAK,GAAG,EACtG,SAAS,IACX,CAAC;GACD,IAAI,UAAU,aAAa,GACzB,QAAQ,KAAK,qEAAqE,UAAU,MAAM;QAElG,KAAK,MAAM,QAAQ,UAAU,OAAO,MAAM,IAAI,GAAG;IAC/C,MAAM,iBAAiB,KAAK,QAAQ,SAAS,EAAE;IAC/C,IAAI,kBAAkB,CAAC,eAAe,WAAW,GAAG,GAClD,MAAM,IAAI,gBAAgB,EAAE,MAAM,eAAe,CAAC;GAEtD;EAEJ;EAIA,MAAM,WAAW,aAAa;GAC5B,YAAY;GACZ;GACA,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,UAAU,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;EAC5E,CAAC;CACH,SAAS,OAAO;EACd,QAAQ,KAAK,yDAAyD,KAAK;CAC7E;AACF;;;;;;;;AASA,MAAM,kCAAkB,IAAI,IAA2B;;;;;;;AAQvD,eAAsB,gCAAgC,WAAmB,YAAY,KAAuB;CAC1G,IAAI,UAAU,gBAAgB,IAAI,SAAS;CAC3C,IAAI,CAAC,SAAS;CACd,IAAI;CACJ,IAAI,WAAW;CACf,MAAM,WAAW,IAAI,SAAc,YAAW;EAC5C,QAAQ,iBAAiB;GACvB,WAAW;GACX,QAAQ;EACV,GAAG,SAAS;CACd,CAAC;CACD,IAAI;EAGF,OAAO,WAAW,CAAC,UAAU;GAC3B,MAAM,QAAQ,KAAK,CAAC,SAAS,QAAQ,CAAC;GACtC,MAAM,OAAO,gBAAgB,IAAI,SAAS;GAC1C,UAAU,SAAS,UAAU,KAAA,IAAY;EAC3C;CACF,UAAU;EACR,aAAa,KAAK;CACpB;AACF;AAEA,SAAgB,yBACd,SACA,cACY;CACZ,IAAI,gBAAgB,QAAQ,QAAQ;CASpC,IAAI,mBAAmB;CACvB,MAAM,4BAAY,IAAI,IAAoB;CAC1C,MAAM,4BAAY,IAAI,IAAY;CAClC,MAAM,oBAAoB,QAAQ,WAAU,UAAS;EACnD,QAAQ,MAAM,MAAd;GACE,KAAK;IACH,UAAU,IAAI,MAAM,YAAY,MAAM,QAAQ;IAC9C;GAEF,KAAK;IACH,UAAU,IAAI,MAAM,UAAU;IAC9B;GAEF,KAAK;IACH,UAAU,OAAO,MAAM,UAAU;IACjC,UAAU,OAAO,MAAM,UAAU;IACjC;GAEF,KAAK;IACH,KAAK,MAAM,MAAM,UAAU,KAAK,GAC9B,IAAI,CAAC,UAAU,IAAI,EAAE,GAAG,UAAU,OAAO,EAAE;IAE7C;GAEF,KAAK,YAAY;IACf,MAAM,WAAW,UAAU,IAAI,MAAM,UAAU;IAC/C,UAAU,OAAO,MAAM,UAAU;IACjC,UAAU,OAAO,MAAM,UAAU;IACjC,IAAI,MAAM,WAAW,MAAM,QAAQ;IACnC,IAAI,qBAAqB,QAAQ,GAAG,mBAAmB;IACvD;GACF;EACF;CACF,CAAC;CACD,MAAM,iBAAiB,QAAQ,uBAAuB;EAGpD,IAAI,CAAC,kBAAkB;EACvB,mBAAmB;EAUnB,IAAI;EACJ,IAAI;GACF,YAAY,QAAQ,SAAS,MAAM;EACrC,QAAQ;GAGN,gBAAgB,cAAc,WAAW,yBAAyB,SAAS,YAAY,CAAC;GACxF;EACF;EACA,IAAI;EACJ,IAAI;GACF,WAAW,QAAQ,OAAO,UAAU;EACtC,QAAQ;GACN;EACF;EACA,MAAM,MAAM;GAAE;GAAW;EAAS;EAClC,MAAM,SAAS,gBAAgB,IAAI,SAAS,KAAK,QAAQ,QAAQ,EAAA,CAAG,WAClE,yBAAyB,SAAS,cAAc,GAAG,CACrD;EACA,gBAAgB,IAAI,WAAW,KAAK;EACpC,MAAW,cAAc;GACvB,IAAI,gBAAgB,IAAI,SAAS,MAAM,OACrC,gBAAgB,OAAO,SAAS;EAEpC,CAAC;CACH,CAAC;CACD,aAAa;EACX,kBAAkB;EAClB,eAAe;CACjB;AACF"}
+{"version":3,"file":"filesystem-capture.js","names":[],"sources":["../../src/session/filesystem-capture.ts"],"sourcesContent":["import type { AgentControllerEvent, SessionBeforeAgentEndListener } from '@mastra/core/agent-controller';\nimport type { WorkspaceSandbox } from '@mastra/core/workspace';\nimport { peekSessionSandbox, sessionLayout } from '../sandbox/session-sandbox.js';\nimport type { SessionLayoutRepository } from '../sandbox/session-sandbox.js';\n\nimport type { FilesystemFile, FilesystemStorage } from '../storage/domains/filesystem/base.js';\nimport type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\nimport { peekSessionEnvironment } from './environment-state-processor.js';\nimport { isMeaningfulToolName } from './first-exec-capture.js';\n\n/** Exit code of `GIT_CHANGED_FILES_SCRIPT` when the checkout is not there: the repository is skipped, not failed. */\nconst CHECKOUT_MISSING_EXIT_CODE = 3;\nconst GIT_CHANGED_FILES_SCRIPT = `\nset -e\nworkdir=$1\nbase_branch=$2\ntest -d \"$workdir\" || exit ${CHECKOUT_MISSING_EXIT_CODE}\nbase=HEAD\nif merge_base=$(git -C \"$workdir\" merge-base HEAD \"origin/$base_branch\" 2>/dev/null); then\n  base=$merge_base\nfi\ngit -C \"$workdir\" diff --name-only -z --find-renames --diff-filter=ACMRTUXB \"$base\"\ngit -C \"$workdir\" ls-files --others --exclude-standard -z\n`;\nconst ARTIFACTS_LIST_COMMAND = 'cd \"$1\" && test -d .artifacts && find .artifacts -type f -print0 || true';\n/**\n * Regular files directly under the workspace root written since the session\n * was created ($2 is a UTC `touch -t` stamp, `YYYYMMDDhhmm.SS`), such as the\n * agent's notes. Files the template shipped with predate the session and stay\n * out; the checkouts are covered by git. Dotfiles are never listed: a listed\n * path becomes readable through the thread's file route, and the root is where\n * setup leaves `.env`, `.pgpass`, `.netrc` and other credential files.\n * `touch -t` plus `-newer` works on GNU and BSD find alike; `-newermt\n * \"@epoch\"` is GNU only.\n */\nexport const ROOT_FILES_LIST_COMMAND = [\n  'cd \"$1\" && ref=$(mktemp) && TZ=UTC touch -t \"$2\" \"$ref\"',\n  '&& find . -mindepth 1 -maxdepth 1 -type f ! -name \\'.*\\' -newer \"$ref\" -print0',\n  '; status=$?; rm -f \"$ref\"; exit $status',\n].join(' ');\n\n/** `touch -t` stamp of a moment, in UTC. */\nexport function touchStamp(date: Date): string {\n  const two = (value: number) => String(value).padStart(2, '0');\n  return (\n    `${date.getUTCFullYear()}${two(date.getUTCMonth() + 1)}${two(date.getUTCDate())}` +\n    `${two(date.getUTCHours())}${two(date.getUTCMinutes())}.${two(date.getUTCSeconds())}`\n  );\n}\n\nexport interface FilesystemCaptureSession {\n  readonly identity: { getId(): string };\n  readonly thread: { requireId(): string };\n  getWorkspace(): { sandbox?: Pick<WorkspaceSandbox, 'executeCommand'> } | undefined;\n  onBeforeAgentEnd(listener: SessionBeforeAgentEndListener): () => void;\n  subscribe(listener: (event: AgentControllerEvent) => void): () => void;\n}\n\nexport interface FilesystemCaptureDependencies {\n  filesystem: Pick<FilesystemStorage, 'replaceFiles'>;\n  sourceControl: {\n    sessions: Pick<SourceControlStorageHandle['sessions'], 'getBySessionId'>;\n  };\n}\n\nexport function parseFilesystemCaptureFiles(output: string): FilesystemFile[] {\n  const files = new Map<string, FilesystemFile>();\n  for (const record of output.split('\\0')) {\n    if (!record) continue;\n    const path = record.replace(/^\\.\\//, '');\n    if (path) files.set(path, { path });\n  }\n\n  return [...files.values()].toSorted((a, b) => a.path.localeCompare(b.path));\n}\n\nexport async function captureSessionFilesystem(\n  session: FilesystemCaptureSession,\n  { filesystem, sourceControl }: FilesystemCaptureDependencies,\n  ids?: { sessionId: string; threadId: string },\n): Promise<void> {\n  try {\n    // Scheduled captures pass ids read at schedule time: a session deleted\n    // before the queued capture runs has already cleared its thread.\n    const sessionId = ids?.sessionId ?? session.identity.getId();\n    const threadId = ids?.threadId ?? session.thread.requireId();\n    const sourceSession = await sourceControl.sessions.getBySessionId(sessionId);\n    // Chat-only sessions run without a workspace; there is nothing to capture.\n    const sandbox = session.getWorkspace()?.sandbox;\n    if (!sourceSession || !sandbox?.executeCommand) return;\n    // The live workdir comes from the per-process memo (the deterministic\n    // truth) ONLY — never the persisted observability column, which a row\n    // written under a previous provider can point at a workdir that no\n    // longer exists (the stale-workdir incident class). No memo entry means\n    // no live sandbox worth capturing in this replica; capture is\n    // best-effort telemetry, so skip.\n    const entry = peekSessionSandbox(sourceSession.id);\n    if (!entry) return;\n    // Telemetry must never provision a VM: executeCommand lazily starts the\n    // sandbox via ensureRunning, so a chat turn that never touched the\n    // workspace would otherwise boot (and clone into) a fresh VM just to\n    // capture an empty git status. Only capture when the turn already has a\n    // running sandbox.\n    if (entry.sandbox.status !== 'running') return;\n    // Running-but-unresolved should not happen (the start hook resolves the\n    // workdir), but capture is best-effort: skip rather than guess.\n    const layout = sessionLayout(entry);\n    if (!layout) return;\n\n    // One git pass per checkout, in parallel so three repositories stay well\n    // inside the 10 s readers wait for a pending capture. The session's own\n    // repository compares against the session base branch; the others sit on\n    // their default branch and compare against that. A repository whose\n    // checkout is missing (exit 3) is skipped: it has nothing to list and\n    // must not block the others. Any other failure is treated as transient\n    // and leaves the previous listing in place.\n    const multiRepo = layout.repos.length > 1;\n    const environment = multiRepo ? peekSessionEnvironment(sourceSession.sessionId) : undefined;\n    const ownRepo = entry.ownRepo.toLowerCase();\n    // The boot records the state at its end, after every setup command; until\n    // then a secondary checkout compares against its own `origin/HEAD`.\n    const baseBranchFor = (repo: SessionLayoutRepository): string => {\n      if (repo.slug.toLowerCase() === ownRepo) return sourceSession.baseBranch;\n      const state = environment?.repositories.find(\n        candidate => candidate.slug.toLowerCase() === repo.slug.toLowerCase(),\n      );\n      return state?.defaultBranch ?? 'HEAD';\n    };\n    const targets = layout.repos.map(repo => ({ repo, baseBranch: baseBranchFor(repo) }));\n    const executeCommand = sandbox.executeCommand.bind(sandbox);\n    const results = await Promise.all(\n      targets.map(({ repo, baseBranch }) =>\n        executeCommand('sh', ['-c', GIT_CHANGED_FILES_SCRIPT, 'mastracode-changed-files', repo.dir, baseBranch], {\n          timeout: 30_000,\n        }),\n      ),\n    );\n    const files = new Map<string, FilesystemFile>();\n    let captured = 0;\n    for (const [index, result] of results.entries()) {\n      if (result.exitCode === CHECKOUT_MISSING_EXIT_CODE) continue;\n      if (result.exitCode !== 0) {\n        console.warn('[Factory filesystem capture] Unable to inspect Git changes.', result.stderr);\n        return;\n      }\n      captured += 1;\n      const prefix = targets[index]!.repo.prefix;\n      for (const file of parseFilesystemCaptureFiles(result.stdout)) {\n        files.set(`${prefix}${file.path}`, { path: `${prefix}${file.path}` });\n      }\n    }\n    if (captured === 0) return;\n\n    const artifacts = await executeCommand('sh', ['-c', ARTIFACTS_LIST_COMMAND, 'sh', layout.root], {\n      timeout: 30_000,\n    });\n    if (artifacts.exitCode !== 0) {\n      console.warn('[Factory filesystem capture] Unable to list workspace artifacts.', artifacts.stderr);\n      return;\n    }\n    for (const path of artifacts.stdout.split('\\0')) {\n      const normalizedPath = path.replace(/^\\.\\//, '');\n      if (normalizedPath) {\n        files.set(normalizedPath, { path: normalizedPath });\n      }\n    }\n\n    // With several checkouts the root is a plain directory nothing else lists.\n    // A failed listing is logged and the git and artifact results still land.\n    if (multiRepo) {\n      const since = touchStamp(sourceSession.createdAt);\n      const rootFiles = await executeCommand('sh', ['-c', ROOT_FILES_LIST_COMMAND, 'sh', layout.root, since], {\n        timeout: 30_000,\n      });\n      if (rootFiles.exitCode !== 0) {\n        console.warn('[Factory filesystem capture] Unable to list workspace root files.', rootFiles.stderr);\n      } else {\n        for (const path of rootFiles.stdout.split('\\0')) {\n          const normalizedPath = path.replace(/^\\.\\//, '');\n          if (normalizedPath && !normalizedPath.startsWith('.')) {\n            files.set(normalizedPath, { path: normalizedPath });\n          }\n        }\n      }\n    }\n\n    // The listing describes the session's workspace, not its memory resource,\n    // which the session shares with others: rows are keyed by the session id.\n    await filesystem.replaceFiles({\n      resourceId: sessionId,\n      threadId,\n      files: [...files.values()].toSorted((a, b) => a.path.localeCompare(b.path)),\n    });\n  } catch (error) {\n    console.warn('[Factory filesystem capture] Unable to persist files.', error);\n  }\n}\n\n/**\n * In-flight capture chains keyed by session id. Serves two purposes: readers\n * of the persisted file listing (the /web/workspace routes) await the capture\n * for the turn that just ended instead of racing it, and captures for the same\n * session stay sequential (last write wins). In-process only: the factory\n * server that runs the session controller also serves those routes.\n */\nconst pendingCaptures = new Map<string, Promise<void>>();\n\n/**\n * Resolve once the session's in-flight filesystem capture (if any) has\n * persisted, or after `timeoutMs` so a reader that arrives mid-capture is\n * never blocked by the execs' worst-case 30s timeouts. Never rejects: the\n * capture body is fully try/catch contained.\n */\nexport async function waitForPendingFilesystemCapture(sessionId: string, timeoutMs = 10_000): Promise<void> {\n  let pending = pendingCaptures.get(sessionId);\n  if (!pending) return;\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  let timedOut = false;\n  const deadline = new Promise<void>(resolve => {\n    timer = setTimeout(() => {\n      timedOut = true;\n      resolve();\n    }, timeoutMs);\n  });\n  try {\n    // A turn that ends while we wait chains a successor capture; keep waiting\n    // until the latest chain settles so the final snapshot is not lost.\n    while (pending && !timedOut) {\n      await Promise.race([pending, deadline]);\n      const next = pendingCaptures.get(sessionId);\n      pending = next === pending ? undefined : next;\n    }\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nexport function observeSessionFilesystem(\n  session: FilesystemCaptureSession,\n  dependencies: FilesystemCaptureDependencies,\n): () => void {\n  let fallbackChain = Promise.resolve();\n  // Capture only runs after a turn that actually touched the workspace: a\n  // successful workspace tool call both proves the sandbox is awake and is\n  // the only way the listing can have changed. Without this gate every chat\n  // turn would run two sandbox execs — and since executeCommand resumes an\n  // idle VM, a pure-chat turn would keep waking a sandbox it never used.\n  // Same bookkeeping as first-exec capture: tool names resolve at tool_end\n  // via the tool_start map, and suspended calls survive agent_end so a\n  // resumed run's eventual completion still counts for that turn.\n  let workspaceTouched = false;\n  const toolNames = new Map<string, string>();\n  const suspended = new Set<string>();\n  const unsubscribeEvents = session.subscribe(event => {\n    switch (event.type) {\n      case 'tool_start': {\n        toolNames.set(event.toolCallId, event.toolName);\n        return;\n      }\n      case 'tool_suspended': {\n        suspended.add(event.toolCallId);\n        return;\n      }\n      case 'tool_suspension_cancelled': {\n        toolNames.delete(event.toolCallId);\n        suspended.delete(event.toolCallId);\n        return;\n      }\n      case 'agent_end': {\n        for (const id of toolNames.keys()) {\n          if (!suspended.has(id)) toolNames.delete(id);\n        }\n        return;\n      }\n      case 'tool_end': {\n        const toolName = toolNames.get(event.toolCallId);\n        toolNames.delete(event.toolCallId);\n        suspended.delete(event.toolCallId);\n        if (event.isError || event.denied) return;\n        if (isMeaningfulToolName(toolName)) workspaceTouched = true;\n        break;\n      }\n    }\n  });\n  const unsubscribeEnd = session.onBeforeAgentEnd(() => {\n    // onBeforeAgentEnd fires before agent_end is emitted, so every tool_end\n    // of the finishing run has already been observed; read then reset.\n    if (!workspaceTouched) return;\n    workspaceTouched = false;\n    // Chain so captures stay sequential (last write wins), but do NOT return\n    // the chain: finishAgentRun awaits every listener before emitting\n    // agent_end, and the capture's sandbox execs (git status + artifacts\n    // find, 30s timeouts each) must not gate turn completion. Readers that\n    // need the fresh listing await the pending capture through\n    // waitForPendingFilesystemCapture instead. The un-returned chain cannot\n    // leak an unhandled rejection: captureSessionFilesystem's entire body\n    // runs inside its own try/catch, and disposal of this listener does not\n    // cancel an in-flight chain, so a final turn's capture still persists.\n    let sessionId: string;\n    try {\n      sessionId = session.identity.getId();\n    } catch {\n      // No identity means no route can address this session's listing; keep\n      // a per-observer chain so captures still run sequentially.\n      fallbackChain = fallbackChain.then(() => captureSessionFilesystem(session, dependencies));\n      return;\n    }\n    let threadId: string;\n    try {\n      threadId = session.thread.requireId();\n    } catch {\n      return;\n    }\n    const ids = { sessionId, threadId };\n    const chain = (pendingCaptures.get(sessionId) ?? Promise.resolve()).then(() =>\n      captureSessionFilesystem(session, dependencies, ids),\n    );\n    pendingCaptures.set(sessionId, chain);\n    void chain.finally(() => {\n      if (pendingCaptures.get(sessionId) === chain) {\n        pendingCaptures.delete(sessionId);\n      }\n    });\n  });\n  return () => {\n    unsubscribeEvents();\n    unsubscribeEnd();\n  };\n}\n"],"mappings":";;;;;AAWA,MAAM,6BAA6B;AACnC,MAAM,2BAA2B;;;;6BAIJ,2BAA2B;;;;;;;;AAQxD,MAAM,yBAAyB;;;;;;;;;;;AAW/B,MAAa,0BAA0B;CACrC;CACA;CACA;AACF,CAAC,CAAC,KAAK,GAAG;;AAGV,SAAgB,WAAW,MAAoB;CAC7C,MAAM,OAAO,UAAkB,OAAO,KAAK,CAAC,CAAC,SAAS,GAAG,GAAG;CAC5D,OACE,GAAG,KAAK,eAAe,IAAI,IAAI,KAAK,YAAY,IAAI,CAAC,IAAI,IAAI,KAAK,WAAW,CAAC,IAC3E,IAAI,KAAK,YAAY,CAAC,IAAI,IAAI,KAAK,cAAc,CAAC,EAAE,GAAG,IAAI,KAAK,cAAc,CAAC;AAEtF;AAiBA,SAAgB,4BAA4B,QAAkC;CAC5E,MAAM,wBAAQ,IAAI,IAA4B;CAC9C,KAAK,MAAM,UAAU,OAAO,MAAM,IAAI,GAAG;EACvC,IAAI,CAAC,QAAQ;EACb,MAAM,OAAO,OAAO,QAAQ,SAAS,EAAE;EACvC,IAAI,MAAM,MAAM,IAAI,MAAM,EAAE,KAAK,CAAC;CACpC;CAEA,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,UAAU,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAC5E;AAEA,eAAsB,yBACpB,SACA,EAAE,YAAY,iBACd,KACe;CACf,IAAI;EAGF,MAAM,YAAY,KAAK,aAAa,QAAQ,SAAS,MAAM;EAC3D,MAAM,WAAW,KAAK,YAAY,QAAQ,OAAO,UAAU;EAC3D,MAAM,gBAAgB,MAAM,cAAc,SAAS,eAAe,SAAS;EAE3E,MAAM,UAAU,QAAQ,aAAa,CAAC,EAAE;EACxC,IAAI,CAAC,iBAAiB,CAAC,SAAS,gBAAgB;EAOhD,MAAM,QAAQ,mBAAmB,cAAc,EAAE;EACjD,IAAI,CAAC,OAAO;EAMZ,IAAI,MAAM,QAAQ,WAAW,WAAW;EAGxC,MAAM,SAAS,cAAc,KAAK;EAClC,IAAI,CAAC,QAAQ;EASb,MAAM,YAAY,OAAO,MAAM,SAAS;EACxC,MAAM,cAAc,YAAY,uBAAuB,cAAc,SAAS,IAAI,KAAA;EAClF,MAAM,UAAU,MAAM,QAAQ,YAAY;EAG1C,MAAM,iBAAiB,SAA0C;GAC/D,IAAI,KAAK,KAAK,YAAY,MAAM,SAAS,OAAO,cAAc;GAI9D,QAHc,aAAa,aAAa,MACtC,cAAa,UAAU,KAAK,YAAY,MAAM,KAAK,KAAK,YAAY,CACtE,EAAA,EACc,iBAAiB;EACjC;EACA,MAAM,UAAU,OAAO,MAAM,KAAI,UAAS;GAAE;GAAM,YAAY,cAAc,IAAI;EAAE,EAAE;EACpF,MAAM,iBAAiB,QAAQ,eAAe,KAAK,OAAO;EAC1D,MAAM,UAAU,MAAM,QAAQ,IAC5B,QAAQ,KAAK,EAAE,MAAM,iBACnB,eAAe,MAAM;GAAC;GAAM;GAA0B;GAA4B,KAAK;GAAK;EAAU,GAAG,EACvG,SAAS,IACX,CAAC,CACH,CACF;EACA,MAAM,wBAAQ,IAAI,IAA4B;EAC9C,IAAI,WAAW;EACf,KAAK,MAAM,CAAC,OAAO,WAAW,QAAQ,QAAQ,GAAG;GAC/C,IAAI,OAAO,aAAa,4BAA4B;GACpD,IAAI,OAAO,aAAa,GAAG;IACzB,QAAQ,KAAK,+DAA+D,OAAO,MAAM;IACzF;GACF;GACA,YAAY;GACZ,MAAM,SAAS,QAAQ,MAAM,CAAE,KAAK;GACpC,KAAK,MAAM,QAAQ,4BAA4B,OAAO,MAAM,GAC1D,MAAM,IAAI,GAAG,SAAS,KAAK,QAAQ,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC;EAExE;EACA,IAAI,aAAa,GAAG;EAEpB,MAAM,YAAY,MAAM,eAAe,MAAM;GAAC;GAAM;GAAwB;GAAM,OAAO;EAAI,GAAG,EAC9F,SAAS,IACX,CAAC;EACD,IAAI,UAAU,aAAa,GAAG;GAC5B,QAAQ,KAAK,oEAAoE,UAAU,MAAM;GACjG;EACF;EACA,KAAK,MAAM,QAAQ,UAAU,OAAO,MAAM,IAAI,GAAG;GAC/C,MAAM,iBAAiB,KAAK,QAAQ,SAAS,EAAE;GAC/C,IAAI,gBACF,MAAM,IAAI,gBAAgB,EAAE,MAAM,eAAe,CAAC;EAEtD;EAIA,IAAI,WAAW;GACb,MAAM,QAAQ,WAAW,cAAc,SAAS;GAChD,MAAM,YAAY,MAAM,eAAe,MAAM;IAAC;IAAM;IAAyB;IAAM,OAAO;IAAM;GAAK,GAAG,EACtG,SAAS,IACX,CAAC;GACD,IAAI,UAAU,aAAa,GACzB,QAAQ,KAAK,qEAAqE,UAAU,MAAM;QAElG,KAAK,MAAM,QAAQ,UAAU,OAAO,MAAM,IAAI,GAAG;IAC/C,MAAM,iBAAiB,KAAK,QAAQ,SAAS,EAAE;IAC/C,IAAI,kBAAkB,CAAC,eAAe,WAAW,GAAG,GAClD,MAAM,IAAI,gBAAgB,EAAE,MAAM,eAAe,CAAC;GAEtD;EAEJ;EAIA,MAAM,WAAW,aAAa;GAC5B,YAAY;GACZ;GACA,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,UAAU,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;EAC5E,CAAC;CACH,SAAS,OAAO;EACd,QAAQ,KAAK,yDAAyD,KAAK;CAC7E;AACF;;;;;;;;AASA,MAAM,kCAAkB,IAAI,IAA2B;;;;;;;AAQvD,eAAsB,gCAAgC,WAAmB,YAAY,KAAuB;CAC1G,IAAI,UAAU,gBAAgB,IAAI,SAAS;CAC3C,IAAI,CAAC,SAAS;CACd,IAAI;CACJ,IAAI,WAAW;CACf,MAAM,WAAW,IAAI,SAAc,YAAW;EAC5C,QAAQ,iBAAiB;GACvB,WAAW;GACX,QAAQ;EACV,GAAG,SAAS;CACd,CAAC;CACD,IAAI;EAGF,OAAO,WAAW,CAAC,UAAU;GAC3B,MAAM,QAAQ,KAAK,CAAC,SAAS,QAAQ,CAAC;GACtC,MAAM,OAAO,gBAAgB,IAAI,SAAS;GAC1C,UAAU,SAAS,UAAU,KAAA,IAAY;EAC3C;CACF,UAAU;EACR,aAAa,KAAK;CACpB;AACF;AAEA,SAAgB,yBACd,SACA,cACY;CACZ,IAAI,gBAAgB,QAAQ,QAAQ;CASpC,IAAI,mBAAmB;CACvB,MAAM,4BAAY,IAAI,IAAoB;CAC1C,MAAM,4BAAY,IAAI,IAAY;CAClC,MAAM,oBAAoB,QAAQ,WAAU,UAAS;EACnD,QAAQ,MAAM,MAAd;GACE,KAAK;IACH,UAAU,IAAI,MAAM,YAAY,MAAM,QAAQ;IAC9C;GAEF,KAAK;IACH,UAAU,IAAI,MAAM,UAAU;IAC9B;GAEF,KAAK;IACH,UAAU,OAAO,MAAM,UAAU;IACjC,UAAU,OAAO,MAAM,UAAU;IACjC;GAEF,KAAK;IACH,KAAK,MAAM,MAAM,UAAU,KAAK,GAC9B,IAAI,CAAC,UAAU,IAAI,EAAE,GAAG,UAAU,OAAO,EAAE;IAE7C;GAEF,KAAK,YAAY;IACf,MAAM,WAAW,UAAU,IAAI,MAAM,UAAU;IAC/C,UAAU,OAAO,MAAM,UAAU;IACjC,UAAU,OAAO,MAAM,UAAU;IACjC,IAAI,MAAM,WAAW,MAAM,QAAQ;IACnC,IAAI,qBAAqB,QAAQ,GAAG,mBAAmB;IACvD;GACF;EACF;CACF,CAAC;CACD,MAAM,iBAAiB,QAAQ,uBAAuB;EAGpD,IAAI,CAAC,kBAAkB;EACvB,mBAAmB;EAUnB,IAAI;EACJ,IAAI;GACF,YAAY,QAAQ,SAAS,MAAM;EACrC,QAAQ;GAGN,gBAAgB,cAAc,WAAW,yBAAyB,SAAS,YAAY,CAAC;GACxF;EACF;EACA,IAAI;EACJ,IAAI;GACF,WAAW,QAAQ,OAAO,UAAU;EACtC,QAAQ;GACN;EACF;EACA,MAAM,MAAM;GAAE;GAAW;EAAS;EAClC,MAAM,SAAS,gBAAgB,IAAI,SAAS,KAAK,QAAQ,QAAQ,EAAA,CAAG,WAClE,yBAAyB,SAAS,cAAc,GAAG,CACrD;EACA,gBAAgB,IAAI,WAAW,KAAK;EACpC,MAAW,cAAc;GACvB,IAAI,gBAAgB,IAAI,SAAS,MAAM,OACrC,gBAAgB,OAAO,SAAS;EAEpC,CAAC;CACH,CAAC;CACD,aAAa;EACX,kBAAkB;EAClB,eAAe;CACjB;AACF"}

package/dist/session/first-exec-capture.js

@@ -1,5 +1,5 @@
 import { WORKSPACE_TOOLS_PREFIX } from "@mastra/core/workspace";
-//#region src/session/first-exec-capture.ts
+// src/session/first-exec-capture.ts
 /**
 * Tool names that count as "meaningful exec" independent of the workspace
 * prefix. The workspace tools get remapped from `mastra_workspace_*` to
@@ -79,13 +79,12 @@ function observeSessionFirstExec(session, { sourceControl }) {
 				seen = true;
 				unsubscribe();
 				sourceControl.sessions.markFirstMeaningfulExec({ sessionId: session.identity.getId() }).catch((error) => console.warn("[Factory first-exec capture] Unable to persist first exec time.", error));
-				return;
+				break;
 			}
 		}
 	});
 	return unsubscribe;
 }
-//#endregion
 export { isMeaningfulToolName, observeSessionFirstExec };
 
 //# sourceMappingURL=first-exec-capture.js.map

package/dist/session/first-exec-capture.js.map

@@ -1 +1 @@
-{"version":3,"file":"first-exec-capture.js","names":[],"sources":["../../src/session/first-exec-capture.ts"],"sourcesContent":["import type { AgentControllerEvent } from '@mastra/core/agent-controller';\nimport { WORKSPACE_TOOLS_PREFIX } from '@mastra/core/workspace';\n\nimport type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\n\nexport interface FirstExecCaptureSession {\n  readonly identity: { getId(): string };\n  subscribe(listener: (event: AgentControllerEvent) => void): () => void;\n}\n\nexport interface FirstExecCaptureDependencies {\n  sourceControl: {\n    sessions: Pick<SourceControlStorageHandle['sessions'], 'markFirstMeaningfulExec'>;\n  };\n}\n\n/**\n * Tool names that count as \"meaningful exec\" independent of the workspace\n * prefix. The workspace tools get remapped from `mastra_workspace_*` to\n * mastracode-friendly names (see `mastracode/sdk/src/tool-names.ts`), and\n * this listener runs on the emitted tool name after remap, so both spellings\n * need to match.\n */\nconst MEANINGFUL_TOOL_NAMES: ReadonlySet<string> = new Set([\n  // Filesystem (post-remap)\n  'view',\n  'write_file',\n  'string_replace_lsp',\n  'find_files',\n  'delete_file',\n  'file_stat',\n  'mkdir',\n  // Search\n  'search_content',\n  // Code intelligence\n  'ast_smart_edit',\n  'lsp_inspect',\n  // Sandbox\n  'execute_command',\n  'get_process_output',\n  'kill_process',\n]);\n\nexport function isMeaningfulToolName(name: string | undefined): boolean {\n  if (!name) return false;\n  if (name.startsWith(`${WORKSPACE_TOOLS_PREFIX}_`)) return true;\n  return MEANINGFUL_TOOL_NAMES.has(name);\n}\n\n/**\n * Record when a session's agent completed its first successful meaningful\n * tool call (the TTFME anchor — \"time to first meaningful exec\").\n *\n * Meaningful = a workspace tool the agent invoked itself (filesystem,\n * search, code intelligence, sandbox exec, process control). We accept any\n * tool whose name starts with the workspace prefix `mastra_workspace_` or\n * matches the post-remap mastracode tool names. Non-workspace tools (memory,\n * notification inbox, subagent, etc.) and skill-loader / preflight /\n * materializer `sandbox.executeCommand()` calls that never flow through the\n * tool layer are intentionally excluded.\n *\n * Failed tool calls (`isError === true`) don't count. Approval-denied and\n * abort-while-parked tool completions (`denied === true`) also don't count:\n * the run-engine emits `tool_end` with `isError: false` for those paths\n * because the tool didn't fail, but it also never ran, so treating them as\n * \"meaningful exec\" would re-introduce the same contamination this fix is\n * removing on the message side. The listener stays subscribed until a\n * successful qualifying end, then unsubscribes. The storage write is guarded\n * (`first_meaningful_exec_at IS NULL`), so restarts, re-materialized\n * sessions, and sessions without a source-control row are no-ops.\n */\nexport function observeSessionFirstExec(\n  session: FirstExecCaptureSession,\n  { sourceControl }: FirstExecCaptureDependencies,\n): () => void {\n  let seen = false;\n  // toolCallId -> toolName. Populated on `tool_start`, consumed on `tool_end`.\n  // Suspended entries survive `agent_end` so the resumed run can still resolve\n  // its tool name when the eventual `tool_end` arrives.\n  const toolNames = new Map<string, string>();\n  const suspended = new Set<string>();\n  const unsubscribe = session.subscribe(event => {\n    if (seen) return;\n    switch (event.type) {\n      case 'tool_start': {\n        toolNames.set(event.toolCallId, event.toolName);\n        return;\n      }\n      case 'tool_suspended': {\n        suspended.add(event.toolCallId);\n        return;\n      }\n      case 'tool_suspension_cancelled': {\n        toolNames.delete(event.toolCallId);\n        suspended.delete(event.toolCallId);\n        return;\n      }\n      case 'agent_end': {\n        // Drop any in-flight starts that will never see a matching `tool_end`\n        // on this run. Genuinely suspended calls stay so their eventual\n        // resume-time `tool_end` can still map back to a tool name. Without\n        // this, sessions that repeatedly abort or error before a qualifying\n        // completion would accumulate stale entries for the entire lifetime\n        // of the subscription.\n        for (const id of toolNames.keys()) {\n          if (!suspended.has(id)) toolNames.delete(id);\n        }\n        return;\n      }\n      case 'tool_end': {\n        const toolName = toolNames.get(event.toolCallId);\n        toolNames.delete(event.toolCallId);\n        suspended.delete(event.toolCallId);\n        if (event.isError) return;\n        if (event.denied) return;\n        if (!isMeaningfulToolName(toolName)) return;\n        seen = true;\n        unsubscribe();\n        void sourceControl.sessions\n          .markFirstMeaningfulExec({ sessionId: session.identity.getId() })\n          .catch(error => console.warn('[Factory first-exec capture] Unable to persist first exec time.', error));\n        return;\n      }\n    }\n  });\n  return unsubscribe;\n}\n"],"mappings":";;;;;;;;;AAuBA,MAAM,wCAA6C,IAAI,IAAI;CAEzD;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CAEA;CACA;CAEA;CACA;CACA;AACF,CAAC;AAED,SAAgB,qBAAqB,MAAmC;CACtE,IAAI,CAAC,MAAM,OAAO;CAClB,IAAI,KAAK,WAAW,GAAG,uBAAuB,EAAE,GAAG,OAAO;CAC1D,OAAO,sBAAsB,IAAI,IAAI;AACvC;;;;;;;;;;;;;;;;;;;;;;;AAwBA,SAAgB,wBACd,SACA,EAAE,iBACU;CACZ,IAAI,OAAO;CAIX,MAAM,4BAAY,IAAI,IAAoB;CAC1C,MAAM,4BAAY,IAAI,IAAY;CAClC,MAAM,cAAc,QAAQ,WAAU,UAAS;EAC7C,IAAI,MAAM;EACV,QAAQ,MAAM,MAAd;GACE,KAAK;IACH,UAAU,IAAI,MAAM,YAAY,MAAM,QAAQ;IAC9C;GAEF,KAAK;IACH,UAAU,IAAI,MAAM,UAAU;IAC9B;GAEF,KAAK;IACH,UAAU,OAAO,MAAM,UAAU;IACjC,UAAU,OAAO,MAAM,UAAU;IACjC;GAEF,KAAK;IAOH,KAAK,MAAM,MAAM,UAAU,KAAK,GAC9B,IAAI,CAAC,UAAU,IAAI,EAAE,GAAG,UAAU,OAAO,EAAE;IAE7C;GAEF,KAAK,YAAY;IACf,MAAM,WAAW,UAAU,IAAI,MAAM,UAAU;IAC/C,UAAU,OAAO,MAAM,UAAU;IACjC,UAAU,OAAO,MAAM,UAAU;IACjC,IAAI,MAAM,SAAS;IACnB,IAAI,MAAM,QAAQ;IAClB,IAAI,CAAC,qBAAqB,QAAQ,GAAG;IACrC,OAAO;IACP,YAAY;IACZ,cAAmB,SAChB,wBAAwB,EAAE,WAAW,QAAQ,SAAS,MAAM,EAAE,CAAC,CAAC,CAChE,OAAM,UAAS,QAAQ,KAAK,mEAAmE,KAAK,CAAC;IACxG;GACF;EACF;CACF,CAAC;CACD,OAAO;AACT"}
+{"version":3,"file":"first-exec-capture.js","names":[],"sources":["../../src/session/first-exec-capture.ts"],"sourcesContent":["import type { AgentControllerEvent } from '@mastra/core/agent-controller';\nimport { WORKSPACE_TOOLS_PREFIX } from '@mastra/core/workspace';\n\nimport type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\n\nexport interface FirstExecCaptureSession {\n  readonly identity: { getId(): string };\n  subscribe(listener: (event: AgentControllerEvent) => void): () => void;\n}\n\nexport interface FirstExecCaptureDependencies {\n  sourceControl: {\n    sessions: Pick<SourceControlStorageHandle['sessions'], 'markFirstMeaningfulExec'>;\n  };\n}\n\n/**\n * Tool names that count as \"meaningful exec\" independent of the workspace\n * prefix. The workspace tools get remapped from `mastra_workspace_*` to\n * mastracode-friendly names (see `mastracode/sdk/src/tool-names.ts`), and\n * this listener runs on the emitted tool name after remap, so both spellings\n * need to match.\n */\nconst MEANINGFUL_TOOL_NAMES: ReadonlySet<string> = new Set([\n  // Filesystem (post-remap)\n  'view',\n  'write_file',\n  'string_replace_lsp',\n  'find_files',\n  'delete_file',\n  'file_stat',\n  'mkdir',\n  // Search\n  'search_content',\n  // Code intelligence\n  'ast_smart_edit',\n  'lsp_inspect',\n  // Sandbox\n  'execute_command',\n  'get_process_output',\n  'kill_process',\n]);\n\nexport function isMeaningfulToolName(name: string | undefined): boolean {\n  if (!name) return false;\n  if (name.startsWith(`${WORKSPACE_TOOLS_PREFIX}_`)) return true;\n  return MEANINGFUL_TOOL_NAMES.has(name);\n}\n\n/**\n * Record when a session's agent completed its first successful meaningful\n * tool call (the TTFME anchor — \"time to first meaningful exec\").\n *\n * Meaningful = a workspace tool the agent invoked itself (filesystem,\n * search, code intelligence, sandbox exec, process control). We accept any\n * tool whose name starts with the workspace prefix `mastra_workspace_` or\n * matches the post-remap mastracode tool names. Non-workspace tools (memory,\n * notification inbox, subagent, etc.) and skill-loader / preflight /\n * materializer `sandbox.executeCommand()` calls that never flow through the\n * tool layer are intentionally excluded.\n *\n * Failed tool calls (`isError === true`) don't count. Approval-denied and\n * abort-while-parked tool completions (`denied === true`) also don't count:\n * the run-engine emits `tool_end` with `isError: false` for those paths\n * because the tool didn't fail, but it also never ran, so treating them as\n * \"meaningful exec\" would re-introduce the same contamination this fix is\n * removing on the message side. The listener stays subscribed until a\n * successful qualifying end, then unsubscribes. The storage write is guarded\n * (`first_meaningful_exec_at IS NULL`), so restarts, re-materialized\n * sessions, and sessions without a source-control row are no-ops.\n */\nexport function observeSessionFirstExec(\n  session: FirstExecCaptureSession,\n  { sourceControl }: FirstExecCaptureDependencies,\n): () => void {\n  let seen = false;\n  // toolCallId -> toolName. Populated on `tool_start`, consumed on `tool_end`.\n  // Suspended entries survive `agent_end` so the resumed run can still resolve\n  // its tool name when the eventual `tool_end` arrives.\n  const toolNames = new Map<string, string>();\n  const suspended = new Set<string>();\n  const unsubscribe = session.subscribe(event => {\n    if (seen) return;\n    switch (event.type) {\n      case 'tool_start': {\n        toolNames.set(event.toolCallId, event.toolName);\n        return;\n      }\n      case 'tool_suspended': {\n        suspended.add(event.toolCallId);\n        return;\n      }\n      case 'tool_suspension_cancelled': {\n        toolNames.delete(event.toolCallId);\n        suspended.delete(event.toolCallId);\n        return;\n      }\n      case 'agent_end': {\n        // Drop any in-flight starts that will never see a matching `tool_end`\n        // on this run. Genuinely suspended calls stay so their eventual\n        // resume-time `tool_end` can still map back to a tool name. Without\n        // this, sessions that repeatedly abort or error before a qualifying\n        // completion would accumulate stale entries for the entire lifetime\n        // of the subscription.\n        for (const id of toolNames.keys()) {\n          if (!suspended.has(id)) toolNames.delete(id);\n        }\n        return;\n      }\n      case 'tool_end': {\n        const toolName = toolNames.get(event.toolCallId);\n        toolNames.delete(event.toolCallId);\n        suspended.delete(event.toolCallId);\n        if (event.isError) return;\n        if (event.denied) return;\n        if (!isMeaningfulToolName(toolName)) return;\n        seen = true;\n        unsubscribe();\n        void sourceControl.sessions\n          .markFirstMeaningfulExec({ sessionId: session.identity.getId() })\n          .catch(error => console.warn('[Factory first-exec capture] Unable to persist first exec time.', error));\n        break;\n      }\n    }\n  });\n  return unsubscribe;\n}\n"],"mappings":";;;;;;;;;AAuBA,MAAM,wCAA6C,IAAI,IAAI;CAEzD;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CAEA;CACA;CAEA;CACA;CACA;AACF,CAAC;AAED,SAAgB,qBAAqB,MAAmC;CACtE,IAAI,CAAC,MAAM,OAAO;CAClB,IAAI,KAAK,WAAW,GAAG,uBAAuB,EAAE,GAAG,OAAO;CAC1D,OAAO,sBAAsB,IAAI,IAAI;AACvC;;;;;;;;;;;;;;;;;;;;;;;AAwBA,SAAgB,wBACd,SACA,EAAE,iBACU;CACZ,IAAI,OAAO;CAIX,MAAM,4BAAY,IAAI,IAAoB;CAC1C,MAAM,4BAAY,IAAI,IAAY;CAClC,MAAM,cAAc,QAAQ,WAAU,UAAS;EAC7C,IAAI,MAAM;EACV,QAAQ,MAAM,MAAd;GACE,KAAK;IACH,UAAU,IAAI,MAAM,YAAY,MAAM,QAAQ;IAC9C;GAEF,KAAK;IACH,UAAU,IAAI,MAAM,UAAU;IAC9B;GAEF,KAAK;IACH,UAAU,OAAO,MAAM,UAAU;IACjC,UAAU,OAAO,MAAM,UAAU;IACjC;GAEF,KAAK;IAOH,KAAK,MAAM,MAAM,UAAU,KAAK,GAC9B,IAAI,CAAC,UAAU,IAAI,EAAE,GAAG,UAAU,OAAO,EAAE;IAE7C;GAEF,KAAK,YAAY;IACf,MAAM,WAAW,UAAU,IAAI,MAAM,UAAU;IAC/C,UAAU,OAAO,MAAM,UAAU;IACjC,UAAU,OAAO,MAAM,UAAU;IACjC,IAAI,MAAM,SAAS;IACnB,IAAI,MAAM,QAAQ;IAClB,IAAI,CAAC,qBAAqB,QAAQ,GAAG;IACrC,OAAO;IACP,YAAY;IACZ,cAAmB,SAChB,wBAAwB,EAAE,WAAW,QAAQ,SAAS,MAAM,EAAE,CAAC,CAAC,CAChE,OAAM,UAAS,QAAQ,KAAK,mEAAmE,KAAK,CAAC;IACxG;GACF;EACF;CACF,CAAC;CACD,OAAO;AACT"}

package/dist/session/first-message-capture.js

@@ -1,4 +1,4 @@
-//#region src/session/first-message-capture.ts
+// src/session/first-message-capture.ts
 /**
 * Record when a session's agent first produced an actual conversational
 * message (the TTFI anchor — "time to first interaction").
@@ -29,7 +29,6 @@ function observeSessionFirstMessage(session, { sourceControl }) {
 	});
 	return unsubscribe;
 }
-//#endregion
 export { observeSessionFirstMessage };
 
 //# sourceMappingURL=first-message-capture.js.map

package/dist/session/live-sessions.js

@@ -1,4 +1,4 @@
-//#region src/session/live-sessions.ts
+// src/session/live-sessions.ts
 /**
 * The sessions this process has materialized, by session id.
 *
@@ -84,7 +84,6 @@ var LiveSessions = class {
 		return () => this.#parkedListeners.delete(listener);
 	}
 };
-//#endregion
 export { LiveSessions };
 
 //# sourceMappingURL=live-sessions.js.map

package/dist/session/memory-settings-hydration.js

@@ -1,5 +1,5 @@
 import { hasResolvedOrg, seedSessionOrg } from "./org-seed.js";
-//#region src/session/memory-settings-hydration.ts
+// src/session/memory-settings-hydration.ts
 /** Default thresholds mirror the TUI `/om` fallbacks. */
 const DEFAULT_OBSERVATION_THRESHOLD = 3e4;
 const DEFAULT_REFLECTION_THRESHOLD = 4e4;
@@ -20,7 +20,6 @@ async function hydrateSessionMemorySettings(session, { sourceControl }) {
 		if (!session.state.get()?.factoryOrgId) await seedSessionOrg(session, void 0);
 	}
 }
-//#endregion
 export { DEFAULT_OBSERVATION_THRESHOLD, DEFAULT_REFLECTION_THRESHOLD, hydrateSessionMemorySettings };
 
 //# sourceMappingURL=memory-settings-hydration.js.map

package/dist/session/org-seed.js

@@ -1,4 +1,4 @@
-//#region src/session/org-seed.ts
+// src/session/org-seed.ts
 /** Read the tenant org off a request context's `user` key, if there is one. */
 function readRequestContextOrgId(requestContext) {
 	if (!requestContext) return void 0;
@@ -47,7 +47,6 @@ async function seedSessionOrg(session, orgId) {
 		console.warn("[Factory org seed] Unable to record the session organization.", error);
 	}
 }
-//#endregion
 export { hasResolvedOrg, readRequestContextOrgId, seedSessionOrg };
 
 //# sourceMappingURL=org-seed.js.map

package/dist/session/reply-credential-processor.js

@@ -1,7 +1,7 @@
 import { credentialLabel, getAuthProviderId } from "../routes/provider-credentials.js";
 import { resolveCredentialStore, resolveTenantFromRequestContext } from "@mastra/code-sdk/agents/credential-resolver";
 import { normalizeLegacyProviderId } from "@mastra/code-sdk/providers/model-ids";
-//#region src/session/reply-credential-processor.ts
+// src/session/reply-credential-processor.ts
 /**
 * Stamps each assistant reply with the credential that answered it, as
 * `content.metadata.credentialLabel` ("Claude Pro/Max", "Anthropic API key")
@@ -32,7 +32,6 @@ var FactoryReplyCredentialProcessor = class {
 		return messageList;
 	}
 };
-//#endregion
 export { FactoryReplyCredentialProcessor };
 
 //# sourceMappingURL=reply-credential-processor.js.map

package/dist/session/resource-migration.js

@@ -1,6 +1,6 @@
 import { externallyAuthoredWorkItem } from "../rules/types.js";
 import { sessionStampCounts } from "./session-threads.js";
-//#region src/session/resource-migration.ts
+// src/session/resource-migration.ts
 /** Slack-started sessions live on a `slack/<thread>` branch (see `threadBranch` in the Slack integration). */
 const SLACK_SESSION_BRANCH_PREFIX = "slack/";
 /**
@@ -189,7 +189,6 @@ async function moveThread(deps, thread, resourceId) {
 		}
 	});
 }
-//#endregion
 export { migrateSessionResources, privatizeOwnerResourceSessions, sessionMemoryResource };
 
 //# sourceMappingURL=resource-migration.js.map

package/dist/session/run-audit.js

@@ -1,5 +1,5 @@
 import { z } from "zod";
-//#region src/session/run-audit.ts
+// src/session/run-audit.ts
 const FACTORY_OPEN_RUNS_SETTING = "factoryOpenRuns";
 const factoryOpenRunSchema = z.object({
 	kickoffId: z.string(),
@@ -209,7 +209,6 @@ function observeSessionRunEnd(session, { audit }) {
 		serializeRunAudit(session, () => recordRunEnds(session, audit, event.reason, void 0, turn));
 	});
 }
-//#endregion
 export { FACTORY_OPEN_RUNS_SETTING, FACTORY_OPEN_RUN_STALE_MS, FACTORY_RUN_USAGE_STEPS_JSON_BUDGET, heartbeatSessionOpenRun, isOpenRunLiveElsewhere, listSessionOpenRuns, observeSessionRunEnd, recordSessionRunStart, waitForSessionRunAudit };
 
 //# sourceMappingURL=run-audit.js.map

package/dist/session/session-threads.js

@@ -1,4 +1,4 @@
-//#region src/session/session-threads.ts
+// src/session/session-threads.ts
 /**
 * The one memory resource a Factory session runs under. A Slack session uses
 * its Factory's, or its sender's for a DM; a side session uses its Factory's,
@@ -91,7 +91,6 @@ async function listFactorySessionThreads(controller, session, runs) {
 	for (const thread of [...owned, ...legacy]) threads.set(thread.id, thread);
 	return [...threads.values()];
 }
-//#endregion
 export { isRunBound, isWorkerSession, listFactorySessionThreads, memoryResourceOf, sessionMemoryResourceId, sessionStampCounts, sessionThreadsToMove, userSessionResourceFor };
 
 //# sourceMappingURL=session-threads.js.map

package/dist/session/session-title.js

@@ -1,4 +1,4 @@
-//#region src/session/session-title.ts
+// src/session/session-title.ts
 const MAX_SESSION_TITLE_LENGTH = 80;
 /**
 * The one shape a session row's title may take, wherever it comes from — typed
@@ -8,7 +8,6 @@ const MAX_SESSION_TITLE_LENGTH = 80;
 function normalizeSessionTitle(title) {
 	return [...title.replace(/\s+/g, " ").trim()].slice(0, MAX_SESSION_TITLE_LENGTH).join("").trimEnd() || null;
 }
-//#endregion
 export { normalizeSessionTitle };
 
 //# sourceMappingURL=session-title.js.map

package/dist/session/shell-commands.js

@@ -1,4 +1,4 @@
-//#region src/session/shell-commands.ts
+// src/session/shell-commands.ts
 /** Two tool observers read the same `gh pr create`, so the reading lives here rather than once per observer. */
 const GH_PR_CREATE_RE = /(?:^|\n|;|&&|\|\|)\s*gh\s+pr\s+create(?:\s|$)/;
 /** Heredoc bodies dropped, so prose inside a document never reads as a command. */
@@ -19,7 +19,6 @@ function executableCommand(command) {
 function runsPullRequestCreate(command) {
 	return GH_PR_CREATE_RE.test(executableCommand(command));
 }
-//#endregion
 export { executableCommand, runsPullRequestCreate };
 
 //# sourceMappingURL=shell-commands.js.map

package/dist/session/source-control-tools.js

@@ -3,11 +3,11 @@ import { mergeRequestNumberFromBranch } from "../work-item-branch.js";
 import { ensureLocalBranch, isCheckoutOf, pushRepositoryBranch, refreshMergeRequestCheckout } from "../integrations/github/sandbox.js";
 import { resolveSessionWorkdir } from "../sandbox/session-sandbox.js";
 import { updateSessionEnvironmentRepository } from "./environment-state-processor.js";
-import { environmentSlugs, findEnvironmentRepository, resolveSessionRepositories } from "./environment-repositories.js";
 import { normalizedVerdictLine } from "../review-verdict.js";
+import { environmentSlugs, findEnvironmentRepository, resolveSessionRepositories } from "./environment-repositories.js";
 import { z } from "zod";
 import { createTool } from "@mastra/core/tools";
-//#region src/session/source-control-tools.ts
+// src/session/source-control-tools.ts
 /** Returns why a review's leading `Verdict:` line contradicts the submitted event, if it does. */
 function verdictEventMismatch(event, body) {
 	const match = /^verdict: ?(approve|request changes|changes requested)\b/.exec(normalizedVerdictLine(body) ?? "");
@@ -655,7 +655,6 @@ async function createSourceControlTools({ requestContext, providers, audit, test
 		})
 	};
 }
-//#endregion
 export { FACTORY_TEST_CHECK_NAME, createSourceControlTools, reviewedHeadFromBody, verdictEventMismatch };
 
 //# sourceMappingURL=source-control-tools.js.map

package/dist/session/thinking-default.js

@@ -1,7 +1,7 @@
 import { DEFAULT_FACTORY_THINKING_LEVEL } from "../storage/domains/projects/base.js";
 import { UUID_PATTERN } from "../routes/contracts.js";
 import { resolveFactoryModelPolicy, routedPersonalDefaults } from "./credential-policy.js";
-//#region src/session/thinking-default.ts
+// src/session/thinking-default.ts
 const FACTORY_PROJECT_ID = new RegExp(UUID_PATTERN);
 function sessionlessFactoryProjectId(controller) {
 	const stateProjectId = (controller.getState?.())?.factoryProjectId;
@@ -31,7 +31,6 @@ async function resolveFactoryThinkingLevel(requestContext, deps) {
 		return DEFAULT_FACTORY_THINKING_LEVEL;
 	}
 }
-//#endregion
 export { resolveFactoryThinkingLevel };
 
 //# sourceMappingURL=thinking-default.js.map

package/dist/session/thread-session-stamp.js

@@ -1,4 +1,4 @@
-//#region src/session/thread-session-stamp.ts
+// src/session/thread-session-stamp.ts
 /**
 * Stamp each thread a session creates with `factorySessionId`. Sessions share
 * their Factory's or user's resource, so the stamp is what ties a new thread
@@ -14,7 +14,6 @@ function observeSessionThreadStamp(session) {
 		}).catch((error) => console.warn("[Factory thread stamp] Unable to tie the new thread to its session.", error));
 	});
 }
-//#endregion
 export { observeSessionThreadStamp };
 
 //# sourceMappingURL=thread-session-stamp.js.map

package/dist/session/thread-title-mirror.js

@@ -1,5 +1,5 @@
 import { normalizeSessionTitle } from "./session-title.js";
-//#region src/session/thread-title-mirror.ts
+// src/session/thread-title-mirror.ts
 /**
 * Project the bound thread's title onto its source-control session row, from
 * whichever namer produced it — core on the first turn, the observational-memory
@@ -45,7 +45,6 @@ function observeSessionThreadTitle(session, { sourceControl }) {
 		}
 	});
 }
-//#endregion
 export { observeSessionThreadTitle };
 
 //# sourceMappingURL=thread-title-mirror.js.map

package/dist/session/thread-title-mirror.js.map

@@ -1 +1 @@
-{"version":3,"file":"thread-title-mirror.js","names":[],"sources":["../../src/session/thread-title-mirror.ts"],"sourcesContent":["import type { AgentControllerEvent, AgentControllerThread } from '@mastra/core/agent-controller';\n\nimport type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\nimport { normalizeSessionTitle } from './session-title.js';\n\nexport interface ThreadTitleMirrorSession {\n  readonly identity: { getId(): string };\n  readonly thread: { getById(args: { threadId: string }): Promise<AgentControllerThread | null> };\n  subscribe(listener: (event: AgentControllerEvent) => void): () => void;\n}\n\nexport interface ThreadTitleMirrorDependencies {\n  sourceControl: {\n    sessions: Pick<SourceControlStorageHandle['sessions'], 'getBySessionId' | 'rename'>;\n  };\n}\n\n/**\n * Project the bound thread's title onto its source-control session row, from\n * whichever namer produced it — core on the first turn, the observational-memory\n * observer as the thread grows, or an explicit rename.\n *\n * The factory sidebar reads the session row, which otherwise keeps the raw first\n * prompt (chat sessions) or nothing at all (work sessions, which then show their\n * branch). Binding a thread reconciles the row against the stored title, so a\n * session started before this ran — or one whose rename event was missed — is\n * named the next time it is opened.\n *\n * A session names threads it is no longer showing, and each write reads the row\n * before replacing it. Titles for any other thread are therefore dropped, and\n * writes run one at a time so the last event wins rather than the fastest.\n */\nexport function observeSessionThreadTitle(\n  session: ThreadTitleMirrorSession,\n  { sourceControl }: ThreadTitleMirrorDependencies,\n): () => void {\n  const sessionId = session.identity.getId();\n  let boundThreadId: string | undefined;\n  let writes: Promise<void> = Promise.resolve();\n\n  const project = (threadId: string, rawTitle: string | undefined): void => {\n    // A thread can be named before anything binds one, so the first thread to\n    // surface a title speaks for the row until `thread_changed` rebinds it.\n    boundThreadId ??= threadId;\n    if (threadId !== boundThreadId) return;\n    const title = rawTitle ? normalizeSessionTitle(rawTitle) : null;\n    if (!title) return;\n\n    writes = writes\n      .then(async () => {\n        if (threadId !== boundThreadId) return;\n        const row = await sourceControl.sessions.getBySessionId(sessionId);\n        if (!row || row.title === title) return;\n        await sourceControl.sessions.rename({ sessionId, title });\n      })\n      .catch(error => console.warn('[Factory thread-title mirror] Unable to persist the session title.', error));\n  };\n\n  return session.subscribe(event => {\n    switch (event.type) {\n      case 'thread_title_updated':\n        return project(event.threadId, event.title);\n      case 'om_thread_title_updated':\n        return project(event.threadId, event.newTitle);\n      case 'thread_changed': {\n        boundThreadId = event.threadId;\n        void session.thread\n          .getById({ threadId: event.threadId })\n          .then(thread => project(event.threadId, thread?.title))\n          .catch(error => console.warn('[Factory thread-title mirror] Unable to read the bound thread.', error));\n        return;\n      }\n    }\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAgCA,SAAgB,0BACd,SACA,EAAE,iBACU;CACZ,MAAM,YAAY,QAAQ,SAAS,MAAM;CACzC,IAAI;CACJ,IAAI,SAAwB,QAAQ,QAAQ;CAE5C,MAAM,WAAW,UAAkB,aAAuC;EAGxE,kBAAkB;EAClB,IAAI,aAAa,eAAe;EAChC,MAAM,QAAQ,WAAW,sBAAsB,QAAQ,IAAI;EAC3D,IAAI,CAAC,OAAO;EAEZ,SAAS,OACN,KAAK,YAAY;GAChB,IAAI,aAAa,eAAe;GAChC,MAAM,MAAM,MAAM,cAAc,SAAS,eAAe,SAAS;GACjE,IAAI,CAAC,OAAO,IAAI,UAAU,OAAO;GACjC,MAAM,cAAc,SAAS,OAAO;IAAE;IAAW;GAAM,CAAC;EAC1D,CAAC,CAAC,CACD,OAAM,UAAS,QAAQ,KAAK,sEAAsE,KAAK,CAAC;CAC7G;CAEA,OAAO,QAAQ,WAAU,UAAS;EAChC,QAAQ,MAAM,MAAd;GACE,KAAK,wBACH,OAAO,QAAQ,MAAM,UAAU,MAAM,KAAK;GAC5C,KAAK,2BACH,OAAO,QAAQ,MAAM,UAAU,MAAM,QAAQ;GAC/C,KAAK;IACH,gBAAgB,MAAM;IACtB,QAAa,OACV,QAAQ,EAAE,UAAU,MAAM,SAAS,CAAC,CAAC,CACrC,MAAK,WAAU,QAAQ,MAAM,UAAU,QAAQ,KAAK,CAAC,CAAC,CACtD,OAAM,UAAS,QAAQ,KAAK,kEAAkE,KAAK,CAAC;IACvG;EAEJ;CACF,CAAC;AACH"}
+{"version":3,"file":"thread-title-mirror.js","names":[],"sources":["../../src/session/thread-title-mirror.ts"],"sourcesContent":["import type { AgentControllerEvent, AgentControllerThread } from '@mastra/core/agent-controller';\n\nimport type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\nimport { normalizeSessionTitle } from './session-title.js';\n\nexport interface ThreadTitleMirrorSession {\n  readonly identity: { getId(): string };\n  readonly thread: { getById(args: { threadId: string }): Promise<AgentControllerThread | null> };\n  subscribe(listener: (event: AgentControllerEvent) => void): () => void;\n}\n\nexport interface ThreadTitleMirrorDependencies {\n  sourceControl: {\n    sessions: Pick<SourceControlStorageHandle['sessions'], 'getBySessionId' | 'rename'>;\n  };\n}\n\n/**\n * Project the bound thread's title onto its source-control session row, from\n * whichever namer produced it — core on the first turn, the observational-memory\n * observer as the thread grows, or an explicit rename.\n *\n * The factory sidebar reads the session row, which otherwise keeps the raw first\n * prompt (chat sessions) or nothing at all (work sessions, which then show their\n * branch). Binding a thread reconciles the row against the stored title, so a\n * session started before this ran — or one whose rename event was missed — is\n * named the next time it is opened.\n *\n * A session names threads it is no longer showing, and each write reads the row\n * before replacing it. Titles for any other thread are therefore dropped, and\n * writes run one at a time so the last event wins rather than the fastest.\n */\nexport function observeSessionThreadTitle(\n  session: ThreadTitleMirrorSession,\n  { sourceControl }: ThreadTitleMirrorDependencies,\n): () => void {\n  const sessionId = session.identity.getId();\n  let boundThreadId: string | undefined;\n  let writes: Promise<void> = Promise.resolve();\n\n  const project = (threadId: string, rawTitle: string | undefined): void => {\n    // A thread can be named before anything binds one, so the first thread to\n    // surface a title speaks for the row until `thread_changed` rebinds it.\n    boundThreadId ??= threadId;\n    if (threadId !== boundThreadId) return;\n    const title = rawTitle ? normalizeSessionTitle(rawTitle) : null;\n    if (!title) return;\n\n    writes = writes\n      .then(async () => {\n        if (threadId !== boundThreadId) return;\n        const row = await sourceControl.sessions.getBySessionId(sessionId);\n        if (!row || row.title === title) return;\n        await sourceControl.sessions.rename({ sessionId, title });\n      })\n      .catch(error => console.warn('[Factory thread-title mirror] Unable to persist the session title.', error));\n  };\n\n  return session.subscribe(event => {\n    switch (event.type) {\n      case 'thread_title_updated':\n        return project(event.threadId, event.title);\n      case 'om_thread_title_updated':\n        return project(event.threadId, event.newTitle);\n      case 'thread_changed': {\n        boundThreadId = event.threadId;\n        void session.thread\n          .getById({ threadId: event.threadId })\n          .then(thread => project(event.threadId, thread?.title))\n          .catch(error => console.warn('[Factory thread-title mirror] Unable to read the bound thread.', error));\n        return undefined;\n      }\n    }\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAgCA,SAAgB,0BACd,SACA,EAAE,iBACU;CACZ,MAAM,YAAY,QAAQ,SAAS,MAAM;CACzC,IAAI;CACJ,IAAI,SAAwB,QAAQ,QAAQ;CAE5C,MAAM,WAAW,UAAkB,aAAuC;EAGxE,kBAAkB;EAClB,IAAI,aAAa,eAAe;EAChC,MAAM,QAAQ,WAAW,sBAAsB,QAAQ,IAAI;EAC3D,IAAI,CAAC,OAAO;EAEZ,SAAS,OACN,KAAK,YAAY;GAChB,IAAI,aAAa,eAAe;GAChC,MAAM,MAAM,MAAM,cAAc,SAAS,eAAe,SAAS;GACjE,IAAI,CAAC,OAAO,IAAI,UAAU,OAAO;GACjC,MAAM,cAAc,SAAS,OAAO;IAAE;IAAW;GAAM,CAAC;EAC1D,CAAC,CAAC,CACD,OAAM,UAAS,QAAQ,KAAK,sEAAsE,KAAK,CAAC;CAC7G;CAEA,OAAO,QAAQ,WAAU,UAAS;EAChC,QAAQ,MAAM,MAAd;GACE,KAAK,wBACH,OAAO,QAAQ,MAAM,UAAU,MAAM,KAAK;GAC5C,KAAK,2BACH,OAAO,QAAQ,MAAM,UAAU,MAAM,QAAQ;GAC/C,KAAK;IACH,gBAAgB,MAAM;IACtB,QAAa,OACV,QAAQ,EAAE,UAAU,MAAM,SAAS,CAAC,CAAC,CACrC,MAAK,WAAU,QAAQ,MAAM,UAAU,QAAQ,KAAK,CAAC,CAAC,CACtD,OAAM,UAAS,QAAQ,KAAK,kEAAkE,KAAK,CAAC;IACvG;EAEJ;CACF,CAAC;AACH"}

package/dist/session/work-item-repository.js

@@ -1,5 +1,5 @@
 import { SourceControlConnectionNotFoundError } from "../storage/domains/source-control/base.js";
-//#region src/session/work-item-repository.ts
+// src/session/work-item-repository.ts
 async function listLinkedRepositories(args) {
 	const { sourceControl, orgId, factoryProjectId } = args;
 	const connections = await sourceControl.connections.list({
@@ -107,7 +107,6 @@ async function resolveWorkItemRepository(args) {
 		candidates
 	};
 }
-//#endregion
 export { resolveWorkItemRepository };
 
 //# sourceMappingURL=work-item-repository.js.map

package/dist/session-owner-signal.js

@@ -1,6 +1,5 @@
-//#region src/session-owner-signal.ts
+// src/session-owner-signal.ts
 const SESSION_OWNER_SIGNAL_TAG = "factory-session-owner";
-//#endregion
 export { SESSION_OWNER_SIGNAL_TAG };
 
 //# sourceMappingURL=session-owner-signal.js.map

package/dist/skills/catalog.js

@@ -2,7 +2,7 @@ import { BUNDLED_FACTORY_SKILLS_PATH, FACTORY_SKILL_NAMES, resolveLocalFactorySk
 import { join } from "path";
 import { readFile } from "fs/promises";
 import { validateSkillContent } from "@mastra/core/skills";
-//#region src/skills/catalog.ts
+// src/skills/catalog.ts
 /**
 * Read-only catalog of the Factory skills.
 *
@@ -56,7 +56,6 @@ async function listFactorySkills() {
 	}
 	return skills;
 }
-//#endregion
 export { listFactorySkills };
 
 //# sourceMappingURL=catalog.js.map

package/dist/skills/service.js

@@ -1,6 +1,6 @@
 import { REVIEW_ONLY_FACTORY_SKILLS, rescanFactorySkills } from "../workspace.js";
 import { formatSkillActivation } from "@mastra/core/workspace";
-//#region src/skills/service.ts
+// src/skills/service.ts
 var SkillInvocationError = class extends Error {
 	code;
 	constructor(code, message) {
@@ -72,7 +72,6 @@ async function resolveSkillResumeInvocation(controller, input) {
 		contents
 	};
 }
-//#endregion
 export { SkillInvocationError, formatSkillMessage, resolvePromptInvocation, resolveSkillInvocation, resolveSkillResumeInvocation };
 
 //# sourceMappingURL=service.js.map

package/dist/spa-static.js

@@ -2,7 +2,7 @@ import { existsSync } from "fs";
 import { dirname, extname, join, normalize, resolve, sep } from "path";
 import { fileURLToPath } from "url";
 import { readFile, stat } from "fs/promises";
-//#region src/spa-static.ts
+// src/spa-static.ts
 /**
 * Same-origin SPA serving for production.
 *
@@ -98,7 +98,6 @@ function createSpaStaticMiddleware(uiDist) {
 		return next();
 	};
 }
-//#endregion
 export { createSpaStaticMiddleware, resolveUiDistDir };
 
 //# sourceMappingURL=spa-static.js.map

package/dist/state-signing.js

@@ -1,5 +1,5 @@
 import { createHmac, timingSafeEqual } from "crypto";
-//#region src/state-signing.ts
+// src/state-signing.ts
 /**
 * Shared OAuth/install `state` signing for web integrations.
 *
@@ -77,7 +77,6 @@ function createStateSigner(secret) {
 		}
 	};
 }
-//#endregion
 export { createStateSigner };
 
 //# sourceMappingURL=state-signing.js.map

package/dist/storage/domains/audit/actions.js

@@ -1,4 +1,4 @@
-//#region src/storage/domains/audit/actions.ts
+// src/storage/domains/audit/actions.ts
 /**
 * Every action the trail can hold, by namespace. Register new ones in the
 * WorkOS dashboard under Audit Logs → Events before the mirror accepts them.
@@ -64,7 +64,6 @@ function isAuditAction(value) {
 function auditActionsInNamespaces(namespaces) {
 	return namespaces.flatMap((namespace) => AUDIT_ACTIONS[namespace].map((leaf) => `factory.${namespace}.${leaf}`));
 }
-//#endregion
 export { AUDIT_ACTIONS, auditActionsInNamespaces, auditNamespaces, isAuditAction, isAuditNamespace, parseAuditAction };
 
 //# sourceMappingURL=actions.js.map

package/dist/storage/domains/audit/actors.js

@@ -1,4 +1,4 @@
-//#region src/storage/domains/audit/actors.ts
+// src/storage/domains/audit/actors.ts
 const AUDIT_ACTOR_TYPES = [
 	"human",
 	"agent",
@@ -19,7 +19,6 @@ function isHumanActorId(actorId) {
 	if (!actorId) return false;
 	return !AUTOMATION_ACTORS.has(actorId) && !actorId.startsWith("agent:") && !actorId.startsWith("github:");
 }
-//#endregion
 export { AUDIT_ACTOR_TYPES, isAuditActorType, isHumanActorId };
 
 //# sourceMappingURL=actors.js.map

package/dist/storage/domains/audit/agent-audit.js

@@ -1,5 +1,5 @@
 import { executableCommand, runsPullRequestCreate } from "../../../session/shell-commands.js";
-//#region src/storage/domains/audit/agent-audit.ts
+// src/storage/domains/audit/agent-audit.ts
 /** Match command-start positions while ignoring command text embedded in heredoc bodies. */
 const GIT_COMMIT_RE = /(?:^|\n|;|&&|\|\|)\s*git\s+commit(?:\s|$)/;
 const GIT_PUSH_RE = /(?:^|\n|;|&&|\|\|)\s*git\s+push(?:\s|$)/;
@@ -87,7 +87,6 @@ async function observeAgentGitAction({ audit, toolContext, resolveRepositorySlug
 		console.warn("[Audit] Failed to observe agent git action", { error: err instanceof Error ? err.message : String(err) });
 	}
 }
-//#endregion
 export { observeAgentGitAction };
 
 //# sourceMappingURL=agent-audit.js.map

package/dist/storage/domains/audit/base.js

@@ -1,5 +1,5 @@
 import { FactoryStorageDomain, UniqueViolationError } from "@mastra/core/storage";
-//#region src/storage/domains/audit/base.ts
+// src/storage/domains/audit/base.ts
 /**
 * Factory audit events domain — the append-only "who did what, when" trail
 * behind the software factory.
@@ -218,7 +218,6 @@ var AuditStorage = class extends FactoryStorageDomain {
 		};
 	}
 };
-//#endregion
 export { ACTOR_PROFILE_METADATA_KEY, AUDIT_EVENTS_SCHEMA, AuditStorage, auditActorProfile, auditCursorAt, boundAuditMetadata, clampAuditLimit, decodeAuditAfterCursor, decodeAuditCursor, encodeAuditCursor };
 
 //# sourceMappingURL=base.js.map

package/dist/storage/domains/audit/domain.js

@@ -4,7 +4,7 @@ import { auditActionsInNamespaces, isAuditNamespace } from "./actions.js";
 import { isHumanActorId } from "./actors.js";
 import { toWireAuditEvent } from "./wire.js";
 import { registerApiRoute } from "@mastra/core/server";
-//#region src/storage/domains/audit/domain.ts
+// src/storage/domains/audit/domain.ts
 function readStoredActorProfile(metadata) {
 	if (!metadata) return void 0;
 	const raw = metadata[ACTOR_PROFILE_METADATA_KEY];
@@ -242,7 +242,6 @@ var AuditDomain = class {
 		};
 	}
 };
-//#endregion
 export { AuditDomain, auditRequestContext, auditRequestOrigin };
 
 //# sourceMappingURL=domain.js.map

package/dist/storage/domains/audit/wire.js

@@ -1,4 +1,4 @@
-//#region src/storage/domains/audit/wire.ts
+// src/storage/domains/audit/wire.ts
 function toWireAuditEvent(row) {
 	return {
 		id: row.id,
@@ -10,7 +10,6 @@ function toWireAuditEvent(row) {
 		occurredAt: row.occurredAt.toISOString()
 	};
 }
-//#endregion
 export { toWireAuditEvent };
 
 //# sourceMappingURL=wire.js.map

package/dist/storage/domains/channel-identity/base.js

@@ -1,5 +1,5 @@
 import { FactoryStorageDomain } from "@mastra/core/storage";
-//#region src/storage/domains/channel-identity/base.ts
+// src/storage/domains/channel-identity/base.ts
 const CHANNEL_ACCOUNT_LINKS_SCHEMA = {
 	name: "channel_account_links",
 	columns: {
@@ -158,7 +158,6 @@ var ChannelIdentityStorage = class extends FactoryStorageDomain {
 		}) > 0;
 	}
 };
-//#endregion
 export { CHANNEL_ACCOUNT_LINKS_SCHEMA, ChannelIdentityStorage };
 
 //# sourceMappingURL=base.js.map

package/dist/storage/domains/comments/activity.js

@@ -1,6 +1,6 @@
 import { isMentionableActorId } from "./actor.js";
 import { UniqueViolationError } from "@mastra/core/storage";
-//#region src/storage/domains/comments/activity.ts
+// src/storage/domains/comments/activity.ts
 /** The actor rule-materialized work items are created by; a phantom, never a participant. */
 const RULE_DISPATCHER_ACTOR_ID = "factory-rule-dispatcher";
 /** Ceiling: an author silent for this many comments stops receiving; a real participants table is the upgrade. */
@@ -88,7 +88,6 @@ async function listActivityForUser(ops, { orgId, factoryProjectId, userId, befor
 		...before ? { cursor: { values: [before.occurredAt, before.id] } } : {}
 	})).map(toWorkItemActivity);
 }
-//#endregion
 export { PARTICIPANT_SCAN_LIMIT, fanOutWorkItemActivity, listActivityForUser };
 
 //# sourceMappingURL=activity.js.map