@mastra/factory 0.25.0-alpha.4 → 0.25.0-alpha.6

package/dist/sandbox/materialization.js

@@ -1,4 +1,4 @@
-//#region src/sandbox/materialization.ts
+// src/sandbox/materialization.ts
 /**
 * Narrow a sandbox to one that can run commands, or fail saying which
 * capability is missing.
@@ -12,7 +12,6 @@ function requireExec(sandbox) {
 	if (typeof sandbox.executeCommand !== "function") throw new Error(`Sandbox provider '${sandbox.provider}' does not support executeCommand, which is required to run git and filesystem operations in a session.`);
 	return sandbox;
 }
-//#endregion
 export { requireExec };
 
 //# sourceMappingURL=materialization.js.map

package/dist/sandbox/session-retirement.js

@@ -3,7 +3,7 @@ import { requireExec } from "./materialization.js";
 import { clearFailedSetupCommands, evictSessionSandbox, peekSessionSandbox } from "./session-sandbox.js";
 import { peekSessionEnvironmentTeardown } from "../session/environment-state-processor.js";
 import { destroyDetachedSessionSandbox, releaseSessionSandbox } from "../integrations/github/sandbox-release.js";
-//#region src/sandbox/session-retirement.ts
+// src/sandbox/session-retirement.ts
 const DEFAULT_DESTROY_TIMEOUT_MS = 3e4;
 /**
 * A provider error meaning the VM is already gone: 410, or a 404 the proxy
@@ -322,7 +322,6 @@ var SessionRetirementCoordinator = class {
 		}
 	}
 };
-//#endregion
 export { SessionRetirementCoordinator };
 
 //# sourceMappingURL=session-retirement.js.map

package/dist/sandbox/session-sandbox.js

@@ -2,7 +2,7 @@ import { timedPhase } from "../timing.js";
 import { SETUP_FAILED_MARKER_PATH, SETUP_MARKER_PATH, WORKSPACE_SETUP_MARKER_PATH, repoSetupMarkerPath, setupMarkerContent } from "../packages/_internals/workspace/dist/index.js";
 import { deriveLocalWorkdir, deriveRemoteRepoDir, repoDirUnder, repositoryDirectoryName } from "./workdir.js";
 import path from "path";
-//#region src/sandbox/session-sandbox.ts
+// src/sandbox/session-sandbox.ts
 const sessionSandboxes = /* @__PURE__ */ new Map();
 /** The layout of a memoized session, `undefined` until its workdir resolved. */
 function sessionLayout(entry) {
@@ -246,7 +246,6 @@ function createEnvironmentSetupHook(run, sessionId, repoFullName, environment) {
 		});
 	};
 }
-//#endregion
 export { __clearSessionSandboxesForTests, clearFailedSetupCommands, createEnvironmentSetupHook, createSessionSetupHook, evictSessionSandbox, getSessionSandbox, hasFailedSetupCommand, peekSessionSandbox, recordFailedSetupCommand, resolveSessionWorkdir, sessionLayout };
 
 //# sourceMappingURL=session-sandbox.js.map

package/dist/sandbox/workdir.js

@@ -1,5 +1,5 @@
 import * as path$1 from "path";
-//#region src/sandbox/workdir.ts
+// src/sandbox/workdir.ts
 /**
 * Session workdir derivation. Workdirs are never persisted or trusted from
 * storage or client input — the stale-workdir class of production bugs came
@@ -58,7 +58,6 @@ function resolveContainedLocalWorkdir(root, ...segments) {
 	if (resolved !== resolvedRoot && resolved.startsWith(`${resolvedRoot}${path$1.sep}`)) return resolved;
 	throw new Error(`Refusing to use local sandbox path outside configured root: ${resolved}`);
 }
-//#endregion
 export { deriveLocalWorkdir, deriveRemoteRepoDir, repoDirUnder, repositoryDirectoryName, resolveContainedLocalWorkdir, sanitizeSegment };
 
 //# sourceMappingURL=workdir.js.map

package/dist/secret-encryption.js

@@ -1,5 +1,5 @@
 import { createCipheriv, createDecipheriv } from "crypto";
-//#region src/secret-encryption.ts
+// src/secret-encryption.ts
 const ENVELOPE_PREFIX = "mastra:factory-secret:v1:";
 const ALGORITHM = "aes-256-gcm";
 const IV_BYTES = 12;
@@ -141,7 +141,6 @@ function createPlaintextFactorySecretEncryption() {
 		}
 	};
 }
-//#endregion
 export { createFactorySecretEncryption, createPlaintextFactorySecretEncryption };
 
 //# sourceMappingURL=secret-encryption.js.map

package/dist/server-error.js

@@ -1,5 +1,5 @@
 import { HTTPException } from "hono/http-exception";
-//#region src/server-error.ts
+// src/server-error.ts
 /** Handle a route error: log full detail server-side, return structured JSON. */
 function handleServerError(err, c) {
 	if (err instanceof HTTPException) return c.json({ error: err.message }, err.status);
@@ -10,7 +10,6 @@ function handleServerError(err, c) {
 		message: err instanceof Error ? err.message : String(err)
 	}, 500);
 }
-//#endregion
 export { handleServerError };
 
 //# sourceMappingURL=server-error.js.map

package/dist/session/credential-policy.js

@@ -2,7 +2,7 @@ import { tenantOrgId } from "../routes/provider-credentials.js";
 import { effectiveModelScope } from "../storage/domains/projects/base.js";
 import { UUID_PATTERN } from "../routes/contracts.js";
 import { resolveAuthenticatedCredentialTenant } from "@mastra/code-sdk/agents/credential-resolver";
-//#region src/session/credential-policy.ts
+// src/session/credential-policy.ts
 const FACTORY_PROJECT_ID = new RegExp(UUID_PATTERN);
 /** Resolve billing authority from authenticated identity and durable bindings, never session state. */
 async function resolveFactoryCredentialTenant(requestContext, deps) {
@@ -60,7 +60,6 @@ async function routedPersonalDefaults(tenant, modelDefaults) {
 		userId: tenant.userId
 	});
 }
-//#endregion
 export { resolveFactoryCredentialTenant, resolveFactoryModelPolicy, routedPersonalDefaults };
 
 //# sourceMappingURL=credential-policy.js.map

package/dist/session/default-model-hydration.js

@@ -1,6 +1,6 @@
 import { primeTenantCredentialsForTenant, resolveTenantProviderDefaultModel } from "../routes/tenant-credentials.js";
 import { effectiveModelScope } from "../storage/domains/projects/base.js";
-//#region src/session/default-model-hydration.ts
+// src/session/default-model-hydration.ts
 async function applyDefaultModel(session, modelId) {
 	await session.model.switch(modelId);
 	for (const agentType of [
@@ -86,7 +86,6 @@ async function hydrateSessionDefaultModel(session, { sourceControl, projects, wo
 		console.warn("[Factory default-model hydration] Unable to apply the scoped default model.", error);
 	}
 }
-//#endregion
 export { hydrateSessionDefaultModel };
 
 //# sourceMappingURL=default-model-hydration.js.map

package/dist/session/environment-repositories.js

@@ -1,4 +1,4 @@
-//#region src/session/environment-repositories.ts
+// src/session/environment-repositories.ts
 /**
 * The `inEnvironment` links of a factory in position order, resolved to their
 * repository and connection rows, for the integration the handle belongs to.
@@ -83,7 +83,6 @@ function findEnvironmentRepository(repositories, slug) {
 function environmentSlugs(repositories) {
 	return repositories.map((candidate) => candidate.repository.slug);
 }
-//#endregion
 export { environmentSlugs, findEnvironmentRepository, resolveEnvironmentRepositories, resolveSessionRepositories };
 
 //# sourceMappingURL=environment-repositories.js.map

package/dist/session/environment-state-processor.d.ts

@@ -8,7 +8,6 @@ export interface SessionEnvironmentRepositoryState {
     /** The branch the checkout ended on after boot; `null` when it stays detached. */
     branch: string | null;
     defaultBranch: string;
-    position: number;
     /** `ok` ran or was already set up, `failed` exited non-zero, `skipped` has no setup command. */
     setupStatus: EnvironmentRepositorySetupStatus;
     /** The change request this session opened in the repository, once it has. */

package/dist/session/environment-state-processor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"environment-state-processor.d.ts","sourceRoot":"","sources":["../../src/session/environment-state-processor.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAK3G,MAAM,MAAM,gCAAgC,GAAG,IAAI,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE3E,4GAA4G;AAC5G,MAAM,WAAW,iCAAiC;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,GAAG,EAAE,MAAM,CAAC;IACZ,kFAAkF;IAClF,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,gGAAgG;IAChG,WAAW,EAAE,gCAAgC,CAAC;IAC9C,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACtC,wFAAwF;IACxF,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,iCAAiC,EAAE,CAAC;IAClD,+FAA+F;IAC/F,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAQD,2GAA2G;AAC3G,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,uBAAuB,EAC9B,QAAQ,GAAE,0BAA0B,EAAO,GAC1C,IAAI,CAEN;AAED;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAChD,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAE,GACpD,IAAI,CAaN;AAED,wGAAwG;AACxG,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAKtF;AAED,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAE/D;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,uBAAuB,GAAG,SAAS,CAE7F;AAED,sEAAsE;AACtE,wBAAgB,8BAA8B,CAAC,SAAS,EAAE,MAAM,GAAG,0BAA0B,EAAE,CAE9F;AAED,wBAAgB,kCAAkC,IAAI,IAAI,CAEzD;AAmBD;;;;;GAKG;AACH,qBAAa,gCAAiC,YAAW,SAAS,CAAC,qBAAqB,CAAC;IACvF,QAAQ,CAAC,EAAE,yBAAY;IACvB,QAAQ,CAAC,OAAO,yBAAY;IAEtB,kBAAkB,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAiC1F"}
+{"version":3,"file":"environment-state-processor.d.ts","sourceRoot":"","sources":["../../src/session/environment-state-processor.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAK3G,MAAM,MAAM,gCAAgC,GAAG,IAAI,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE3E,4GAA4G;AAC5G,MAAM,WAAW,iCAAiC;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,GAAG,EAAE,MAAM,CAAC;IACZ,kFAAkF;IAClF,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,gGAAgG;IAChG,WAAW,EAAE,gCAAgC,CAAC;IAC9C,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACtC,wFAAwF;IACxF,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,iCAAiC,EAAE,CAAC;IAClD,+FAA+F;IAC/F,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAQD,2GAA2G;AAC3G,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,uBAAuB,EAC9B,QAAQ,GAAE,0BAA0B,EAAO,GAC1C,IAAI,CAEN;AAED;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAChD,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAE,GACpD,IAAI,CAaN;AAED,wGAAwG;AACxG,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAKtF;AAED,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAE/D;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,uBAAuB,GAAG,SAAS,CAE7F;AAED,sEAAsE;AACtE,wBAAgB,8BAA8B,CAAC,SAAS,EAAE,MAAM,GAAG,0BAA0B,EAAE,CAE9F;AAED,wBAAgB,kCAAkC,IAAI,IAAI,CAEzD;AAmBD;;;;;GAKG;AACH,qBAAa,gCAAiC,YAAW,SAAS,CAAC,qBAAqB,CAAC;IACvF,QAAQ,CAAC,EAAE,yBAAY;IACvB,QAAQ,CAAC,OAAO,yBAAY;IAEtB,kBAAkB,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAiC1F"}

package/dist/session/environment-state-processor.js

@@ -1,5 +1,5 @@
 import { createHash } from "crypto";
-//#region src/session/environment-state-processor.ts
+// src/session/environment-state-processor.ts
 const STATE_ID = "factory-environment";
 const environments = /* @__PURE__ */ new Map();
 function recordSessionEnvironment(sessionId, state, teardown = []) {
@@ -81,7 +81,7 @@ var FactoryEnvironmentStateProcessor = class {
 		if (!state) return;
 		const cacheKey = environmentCacheKey(state);
 		if (Boolean(args.lastSnapshot) && args.contextWindow.hasSnapshot && (args.tracking?.currentCacheKey ?? args.lastSnapshot?.metadata?.state?.cacheKey) === cacheKey) return;
-		const lines = state.repositories.map((repo) => `${repo.position}. ${escapeText(repo.slug)} at ${escapeText(repo.dir)} on ${escapeText(repo.branch ?? "(detached)")} (default ${escapeText(repo.defaultBranch)}, setup ${repo.setupStatus})` + (repo.changeRequestUrl ? `, change request ${escapeText(repo.changeRequestUrl)}` : ""));
+		const lines = state.repositories.map((repo, index) => `${index + 1}. ${escapeText(repo.slug)} at ${escapeText(repo.dir)} on ${escapeText(repo.branch ?? "(detached)")} (default ${escapeText(repo.defaultBranch)}, setup ${repo.setupStatus})` + (repo.changeRequestUrl ? `, change request ${escapeText(repo.changeRequestUrl)}` : ""));
 		const only = state.repositories.length === 1 ? state.repositories[0] : void 0;
 		const contents = (only ? `Factory environment: 1 repository, ${escapeText(only.slug)} at ${escapeText(only.dir)}, your working directory.\n` : `Factory environment: ${state.repositories.length} repositories under ${escapeText(state.workingDirectory)}, your working directory.\n`) + lines.join("\n") + (only ? "" : "\nRun git and project commands inside the repository directory they belong to.") + (state.note ? `\n${escapeText(state.note)}` : "");
 		return {
@@ -99,7 +99,6 @@ var FactoryEnvironmentStateProcessor = class {
 		};
 	}
 };
-//#endregion
 export { FactoryEnvironmentStateProcessor, __clearSessionEnvironmentsForTests, clearSessionEnvironment, peekSessionEnvironment, peekSessionEnvironmentTeardown, recordSessionEnvironment, setSessionEnvironmentNote, updateSessionEnvironmentRepository };
 
 //# sourceMappingURL=environment-state-processor.js.map

package/dist/session/environment-state-processor.js.map

@@ -1 +1 @@
-{"version":3,"file":"environment-state-processor.js","names":[],"sources":["../../src/session/environment-state-processor.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\nimport type { ComputeStateSignalArgs, ComputeStateSignalResult, Processor } from '@mastra/core/processors';\nimport type { RequestContext } from '@mastra/core/request-context';\n\nconst STATE_ID = 'factory-environment';\n\nexport type EnvironmentRepositorySetupStatus = 'ok' | 'failed' | 'skipped';\n\n/** One repository of the booted environment as the agent is told about it: never a token or a clone URL. */\nexport interface SessionEnvironmentRepositoryState {\n  slug: string;\n  /** Absolute directory of the checkout under the workspace root. */\n  dir: string;\n  /** The branch the checkout ended on after boot; `null` when it stays detached. */\n  branch: string | null;\n  defaultBranch: string;\n  position: number;\n  /** `ok` ran or was already set up, `failed` exited non-zero, `skipped` has no setup command. */\n  setupStatus: EnvironmentRepositorySetupStatus;\n  /** The change request this session opened in the repository, once it has. */\n  changeRequestUrl?: string;\n}\n\nexport interface SessionEnvironmentState {\n  /** The workspace root, the session's working directory; repositories sit beneath it. */\n  workingDirectory: string;\n  repositories: SessionEnvironmentRepositoryState[];\n  /** One free-form line the boot wants the agent to know (never a credential), rendered last. */\n  note?: string;\n}\n\n// The boot records what it materialized, keyed by the factory session id (the\n// agent's resource id); the processor reads it on the next model step. Boot\n// runs on every sandbox start, so a replacement process re-learns the state\n// the first time the session's sandbox starts again.\nconst environments = new Map<string, { state: SessionEnvironmentState; teardown: SessionEnvironmentTeardown[] }>();\n\n/** A repository's teardown command and the directory it runs in; kept beside the state, never rendered. */\nexport interface SessionEnvironmentTeardown {\n  slug: string;\n  dir: string;\n  command: string;\n}\n\nexport function recordSessionEnvironment(\n  sessionId: string,\n  state: SessionEnvironmentState,\n  teardown: SessionEnvironmentTeardown[] = [],\n): void {\n  environments.set(sessionId, { state, teardown });\n}\n\n/**\n * Record what a source-control tool did in one environment repository (the\n * branch it pushed, the change request it opened) so the next signal snapshot\n * tells the agent. A no-op when the session's environment is not recorded in\n * this process or the slug is not part of it.\n */\nexport function updateSessionEnvironmentRepository(\n  sessionId: string,\n  slug: string,\n  patch: { branch?: string; changeRequestUrl?: string },\n): void {\n  const entry = environments.get(sessionId);\n  if (!entry) return;\n  const wanted = slug.toLowerCase();\n  const repositories = entry.state.repositories.map(repo => {\n    if (repo.slug.toLowerCase() !== wanted) return repo;\n    return {\n      ...repo,\n      ...(patch.branch !== undefined ? { branch: patch.branch } : {}),\n      ...(patch.changeRequestUrl !== undefined ? { changeRequestUrl: patch.changeRequestUrl } : {}),\n    };\n  });\n  entry.state = { ...entry.state, repositories };\n}\n\n/** Set or clear the environment's note; a no-op when the session's environment is not recorded here. */\nexport function setSessionEnvironmentNote(sessionId: string, note: string | null): void {\n  const entry = environments.get(sessionId);\n  if (!entry) return;\n  const { note: _previous, ...rest } = entry.state;\n  entry.state = note ? { ...rest, note } : rest;\n}\n\nexport function clearSessionEnvironment(sessionId: string): void {\n  environments.delete(sessionId);\n}\n\nexport function peekSessionEnvironment(sessionId: string): SessionEnvironmentState | undefined {\n  return environments.get(sessionId)?.state;\n}\n\n/** Teardown commands of the booted environment, in position order. */\nexport function peekSessionEnvironmentTeardown(sessionId: string): SessionEnvironmentTeardown[] {\n  return environments.get(sessionId)?.teardown ?? [];\n}\n\nexport function __clearSessionEnvironmentsForTests(): void {\n  environments.clear();\n}\n\nfunction escapeText(value: string): string {\n  return value.replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;');\n}\n\n// Unlike factory runs, a user session carries no `factoryProjectId` in its\n// controller state, and the environment is recorded for both, so only the\n// session id is required.\nfunction sessionIdFromContext(requestContext: RequestContext | undefined): string | null {\n  if (!requestContext || typeof requestContext.get !== 'function') return null;\n  const controller = requestContext.get('controller') as { sessionId?: unknown } | undefined;\n  return typeof controller?.sessionId === 'string' && controller.sessionId ? controller.sessionId : null;\n}\n\nfunction environmentCacheKey(state: SessionEnvironmentState): string {\n  return `environment:${createHash('sha256').update(JSON.stringify(state)).digest('hex').slice(0, 16)}`;\n}\n\n/**\n * Tells the agent which repositories its sandbox holds and where: the\n * workspace root is the session's working directory and every environment\n * repository is a directory beneath it. Snapshot mode only; a new snapshot\n * is emitted when the booted set changes (a start after an environment edit).\n */\nexport class FactoryEnvironmentStateProcessor implements Processor<'factory-environment'> {\n  readonly id = STATE_ID;\n  readonly stateId = STATE_ID;\n\n  async computeStateSignal(args: ComputeStateSignalArgs): Promise<ComputeStateSignalResult> {\n    const sessionId = sessionIdFromContext(args.requestContext);\n    if (!sessionId) return;\n    const state = environments.get(sessionId)?.state;\n    if (!state) return;\n    const cacheKey = environmentCacheKey(state);\n    const hasBase = Boolean(args.lastSnapshot) && args.contextWindow.hasSnapshot;\n    if (hasBase && (args.tracking?.currentCacheKey ?? args.lastSnapshot?.metadata?.state?.cacheKey) === cacheKey)\n      return;\n    const lines = state.repositories.map(\n      repo =>\n        `${repo.position}. ${escapeText(repo.slug)} at ${escapeText(repo.dir)} on ${escapeText(repo.branch ?? '(detached)')} (default ${escapeText(repo.defaultBranch)}, setup ${repo.setupStatus})` +\n        (repo.changeRequestUrl ? `, change request ${escapeText(repo.changeRequestUrl)}` : ''),\n    );\n    const only = state.repositories.length === 1 ? state.repositories[0] : undefined;\n    const contents =\n      (only\n        ? `Factory environment: 1 repository, ${escapeText(only.slug)} at ${escapeText(only.dir)}, your working directory.\\n`\n        : `Factory environment: ${state.repositories.length} repositories under ${escapeText(state.workingDirectory)}, your working directory.\\n`) +\n      lines.join('\\n') +\n      (only ? '' : '\\nRun git and project commands inside the repository directory they belong to.') +\n      (state.note ? `\\n${escapeText(state.note)}` : '');\n    return {\n      id: STATE_ID,\n      cacheKey,\n      mode: 'snapshot',\n      tagName: 'factory-environment',\n      contents,\n      value: { environment: state },\n      attributes: { workingDirectory: only?.dir ?? state.workingDirectory, repositories: state.repositories.length },\n      metadata: { value: { environment: state } },\n    };\n  }\n}\n"],"mappings":";;AAIA,MAAM,WAAW;AA+BjB,MAAM,+BAAe,IAAI,IAAwF;AASjH,SAAgB,yBACd,WACA,OACA,WAAyC,CAAC,GACpC;CACN,aAAa,IAAI,WAAW;EAAE;EAAO;CAAS,CAAC;AACjD;;;;;;;AAQA,SAAgB,mCACd,WACA,MACA,OACM;CACN,MAAM,QAAQ,aAAa,IAAI,SAAS;CACxC,IAAI,CAAC,OAAO;CACZ,MAAM,SAAS,KAAK,YAAY;CAChC,MAAM,eAAe,MAAM,MAAM,aAAa,KAAI,SAAQ;EACxD,IAAI,KAAK,KAAK,YAAY,MAAM,QAAQ,OAAO;EAC/C,OAAO;GACL,GAAG;GACH,GAAI,MAAM,WAAW,KAAA,IAAY,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;GAC7D,GAAI,MAAM,qBAAqB,KAAA,IAAY,EAAE,kBAAkB,MAAM,iBAAiB,IAAI,CAAC;EAC7F;CACF,CAAC;CACD,MAAM,QAAQ;EAAE,GAAG,MAAM;EAAO;CAAa;AAC/C;;AAGA,SAAgB,0BAA0B,WAAmB,MAA2B;CACtF,MAAM,QAAQ,aAAa,IAAI,SAAS;CACxC,IAAI,CAAC,OAAO;CACZ,MAAM,EAAE,MAAM,WAAW,GAAG,SAAS,MAAM;CAC3C,MAAM,QAAQ,OAAO;EAAE,GAAG;EAAM;CAAK,IAAI;AAC3C;AAEA,SAAgB,wBAAwB,WAAyB;CAC/D,aAAa,OAAO,SAAS;AAC/B;AAEA,SAAgB,uBAAuB,WAAwD;CAC7F,OAAO,aAAa,IAAI,SAAS,CAAC,EAAE;AACtC;;AAGA,SAAgB,+BAA+B,WAAiD;CAC9F,OAAO,aAAa,IAAI,SAAS,CAAC,EAAE,YAAY,CAAC;AACnD;AAEA,SAAgB,qCAA2C;CACzD,aAAa,MAAM;AACrB;AAEA,SAAS,WAAW,OAAuB;CACzC,OAAO,MAAM,WAAW,KAAK,OAAO,CAAC,CAAC,WAAW,KAAK,MAAM,CAAC,CAAC,WAAW,KAAK,MAAM;AACtF;AAKA,SAAS,qBAAqB,gBAA2D;CACvF,IAAI,CAAC,kBAAkB,OAAO,eAAe,QAAQ,YAAY,OAAO;CACxE,MAAM,aAAa,eAAe,IAAI,YAAY;CAClD,OAAO,OAAO,YAAY,cAAc,YAAY,WAAW,YAAY,WAAW,YAAY;AACpG;AAEA,SAAS,oBAAoB,OAAwC;CACnE,OAAO,eAAe,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,UAAU,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;AACpG;;;;;;;AAQA,IAAa,mCAAb,MAA0F;CACxF,KAAc;CACd,UAAmB;CAEnB,MAAM,mBAAmB,MAAiE;EACxF,MAAM,YAAY,qBAAqB,KAAK,cAAc;EAC1D,IAAI,CAAC,WAAW;EAChB,MAAM,QAAQ,aAAa,IAAI,SAAS,CAAC,EAAE;EAC3C,IAAI,CAAC,OAAO;EACZ,MAAM,WAAW,oBAAoB,KAAK;EAE1C,IADgB,QAAQ,KAAK,YAAY,KAAK,KAAK,cAAc,gBACjD,KAAK,UAAU,mBAAmB,KAAK,cAAc,UAAU,OAAO,cAAc,UAClG;EACF,MAAM,QAAQ,MAAM,aAAa,KAC/B,SACE,GAAG,KAAK,SAAS,IAAI,WAAW,KAAK,IAAI,EAAE,MAAM,WAAW,KAAK,GAAG,EAAE,MAAM,WAAW,KAAK,UAAU,YAAY,EAAE,YAAY,WAAW,KAAK,aAAa,EAAE,UAAU,KAAK,YAAY,MACzL,KAAK,mBAAmB,oBAAoB,WAAW,KAAK,gBAAgB,MAAM,GACvF;EACA,MAAM,OAAO,MAAM,aAAa,WAAW,IAAI,MAAM,aAAa,KAAK,KAAA;EACvE,MAAM,YACH,OACG,sCAAsC,WAAW,KAAK,IAAI,EAAE,MAAM,WAAW,KAAK,GAAG,EAAE,+BACvF,wBAAwB,MAAM,aAAa,OAAO,sBAAsB,WAAW,MAAM,gBAAgB,EAAE,gCAC/G,MAAM,KAAK,IAAI,KACd,OAAO,KAAK,qFACZ,MAAM,OAAO,KAAK,WAAW,MAAM,IAAI,MAAM;EAChD,OAAO;GACL,IAAI;GACJ;GACA,MAAM;GACN,SAAS;GACT;GACA,OAAO,EAAE,aAAa,MAAM;GAC5B,YAAY;IAAE,kBAAkB,MAAM,OAAO,MAAM;IAAkB,cAAc,MAAM,aAAa;GAAO;GAC7G,UAAU,EAAE,OAAO,EAAE,aAAa,MAAM,EAAE;EAC5C;CACF;AACF"}
+{"version":3,"file":"environment-state-processor.js","names":[],"sources":["../../src/session/environment-state-processor.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\nimport type { ComputeStateSignalArgs, ComputeStateSignalResult, Processor } from '@mastra/core/processors';\nimport type { RequestContext } from '@mastra/core/request-context';\n\nconst STATE_ID = 'factory-environment';\n\nexport type EnvironmentRepositorySetupStatus = 'ok' | 'failed' | 'skipped';\n\n/** One repository of the booted environment as the agent is told about it: never a token or a clone URL. */\nexport interface SessionEnvironmentRepositoryState {\n  slug: string;\n  /** Absolute directory of the checkout under the workspace root. */\n  dir: string;\n  /** The branch the checkout ended on after boot; `null` when it stays detached. */\n  branch: string | null;\n  defaultBranch: string;\n  /** `ok` ran or was already set up, `failed` exited non-zero, `skipped` has no setup command. */\n  setupStatus: EnvironmentRepositorySetupStatus;\n  /** The change request this session opened in the repository, once it has. */\n  changeRequestUrl?: string;\n}\n\nexport interface SessionEnvironmentState {\n  /** The workspace root, the session's working directory; repositories sit beneath it. */\n  workingDirectory: string;\n  repositories: SessionEnvironmentRepositoryState[];\n  /** One free-form line the boot wants the agent to know (never a credential), rendered last. */\n  note?: string;\n}\n\n// The boot records what it materialized, keyed by the factory session id (the\n// agent's resource id); the processor reads it on the next model step. Boot\n// runs on every sandbox start, so a replacement process re-learns the state\n// the first time the session's sandbox starts again.\nconst environments = new Map<string, { state: SessionEnvironmentState; teardown: SessionEnvironmentTeardown[] }>();\n\n/** A repository's teardown command and the directory it runs in; kept beside the state, never rendered. */\nexport interface SessionEnvironmentTeardown {\n  slug: string;\n  dir: string;\n  command: string;\n}\n\nexport function recordSessionEnvironment(\n  sessionId: string,\n  state: SessionEnvironmentState,\n  teardown: SessionEnvironmentTeardown[] = [],\n): void {\n  environments.set(sessionId, { state, teardown });\n}\n\n/**\n * Record what a source-control tool did in one environment repository (the\n * branch it pushed, the change request it opened) so the next signal snapshot\n * tells the agent. A no-op when the session's environment is not recorded in\n * this process or the slug is not part of it.\n */\nexport function updateSessionEnvironmentRepository(\n  sessionId: string,\n  slug: string,\n  patch: { branch?: string; changeRequestUrl?: string },\n): void {\n  const entry = environments.get(sessionId);\n  if (!entry) return;\n  const wanted = slug.toLowerCase();\n  const repositories = entry.state.repositories.map(repo => {\n    if (repo.slug.toLowerCase() !== wanted) return repo;\n    return {\n      ...repo,\n      ...(patch.branch !== undefined ? { branch: patch.branch } : {}),\n      ...(patch.changeRequestUrl !== undefined ? { changeRequestUrl: patch.changeRequestUrl } : {}),\n    };\n  });\n  entry.state = { ...entry.state, repositories };\n}\n\n/** Set or clear the environment's note; a no-op when the session's environment is not recorded here. */\nexport function setSessionEnvironmentNote(sessionId: string, note: string | null): void {\n  const entry = environments.get(sessionId);\n  if (!entry) return;\n  const { note: _previous, ...rest } = entry.state;\n  entry.state = note ? { ...rest, note } : rest;\n}\n\nexport function clearSessionEnvironment(sessionId: string): void {\n  environments.delete(sessionId);\n}\n\nexport function peekSessionEnvironment(sessionId: string): SessionEnvironmentState | undefined {\n  return environments.get(sessionId)?.state;\n}\n\n/** Teardown commands of the booted environment, in position order. */\nexport function peekSessionEnvironmentTeardown(sessionId: string): SessionEnvironmentTeardown[] {\n  return environments.get(sessionId)?.teardown ?? [];\n}\n\nexport function __clearSessionEnvironmentsForTests(): void {\n  environments.clear();\n}\n\nfunction escapeText(value: string): string {\n  return value.replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;');\n}\n\n// Unlike factory runs, a user session carries no `factoryProjectId` in its\n// controller state, and the environment is recorded for both, so only the\n// session id is required.\nfunction sessionIdFromContext(requestContext: RequestContext | undefined): string | null {\n  if (!requestContext || typeof requestContext.get !== 'function') return null;\n  const controller = requestContext.get('controller') as { sessionId?: unknown } | undefined;\n  return typeof controller?.sessionId === 'string' && controller.sessionId ? controller.sessionId : null;\n}\n\nfunction environmentCacheKey(state: SessionEnvironmentState): string {\n  return `environment:${createHash('sha256').update(JSON.stringify(state)).digest('hex').slice(0, 16)}`;\n}\n\n/**\n * Tells the agent which repositories its sandbox holds and where: the\n * workspace root is the session's working directory and every environment\n * repository is a directory beneath it. Snapshot mode only; a new snapshot\n * is emitted when the booted set changes (a start after an environment edit).\n */\nexport class FactoryEnvironmentStateProcessor implements Processor<'factory-environment'> {\n  readonly id = STATE_ID;\n  readonly stateId = STATE_ID;\n\n  async computeStateSignal(args: ComputeStateSignalArgs): Promise<ComputeStateSignalResult> {\n    const sessionId = sessionIdFromContext(args.requestContext);\n    if (!sessionId) return;\n    const state = environments.get(sessionId)?.state;\n    if (!state) return;\n    const cacheKey = environmentCacheKey(state);\n    const hasBase = Boolean(args.lastSnapshot) && args.contextWindow.hasSnapshot;\n    if (hasBase && (args.tracking?.currentCacheKey ?? args.lastSnapshot?.metadata?.state?.cacheKey) === cacheKey)\n      return;\n    const lines = state.repositories.map(\n      (repo, index) =>\n        `${index + 1}. ${escapeText(repo.slug)} at ${escapeText(repo.dir)} on ${escapeText(repo.branch ?? '(detached)')} (default ${escapeText(repo.defaultBranch)}, setup ${repo.setupStatus})` +\n        (repo.changeRequestUrl ? `, change request ${escapeText(repo.changeRequestUrl)}` : ''),\n    );\n    const only = state.repositories.length === 1 ? state.repositories[0] : undefined;\n    const contents =\n      (only\n        ? `Factory environment: 1 repository, ${escapeText(only.slug)} at ${escapeText(only.dir)}, your working directory.\\n`\n        : `Factory environment: ${state.repositories.length} repositories under ${escapeText(state.workingDirectory)}, your working directory.\\n`) +\n      lines.join('\\n') +\n      (only ? '' : '\\nRun git and project commands inside the repository directory they belong to.') +\n      (state.note ? `\\n${escapeText(state.note)}` : '');\n    return {\n      id: STATE_ID,\n      cacheKey,\n      mode: 'snapshot',\n      tagName: 'factory-environment',\n      contents,\n      value: { environment: state },\n      attributes: { workingDirectory: only?.dir ?? state.workingDirectory, repositories: state.repositories.length },\n      metadata: { value: { environment: state } },\n    };\n  }\n}\n"],"mappings":";;AAIA,MAAM,WAAW;AA8BjB,MAAM,+BAAe,IAAI,IAAwF;AASjH,SAAgB,yBACd,WACA,OACA,WAAyC,CAAC,GACpC;CACN,aAAa,IAAI,WAAW;EAAE;EAAO;CAAS,CAAC;AACjD;;;;;;;AAQA,SAAgB,mCACd,WACA,MACA,OACM;CACN,MAAM,QAAQ,aAAa,IAAI,SAAS;CACxC,IAAI,CAAC,OAAO;CACZ,MAAM,SAAS,KAAK,YAAY;CAChC,MAAM,eAAe,MAAM,MAAM,aAAa,KAAI,SAAQ;EACxD,IAAI,KAAK,KAAK,YAAY,MAAM,QAAQ,OAAO;EAC/C,OAAO;GACL,GAAG;GACH,GAAI,MAAM,WAAW,KAAA,IAAY,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;GAC7D,GAAI,MAAM,qBAAqB,KAAA,IAAY,EAAE,kBAAkB,MAAM,iBAAiB,IAAI,CAAC;EAC7F;CACF,CAAC;CACD,MAAM,QAAQ;EAAE,GAAG,MAAM;EAAO;CAAa;AAC/C;;AAGA,SAAgB,0BAA0B,WAAmB,MAA2B;CACtF,MAAM,QAAQ,aAAa,IAAI,SAAS;CACxC,IAAI,CAAC,OAAO;CACZ,MAAM,EAAE,MAAM,WAAW,GAAG,SAAS,MAAM;CAC3C,MAAM,QAAQ,OAAO;EAAE,GAAG;EAAM;CAAK,IAAI;AAC3C;AAEA,SAAgB,wBAAwB,WAAyB;CAC/D,aAAa,OAAO,SAAS;AAC/B;AAEA,SAAgB,uBAAuB,WAAwD;CAC7F,OAAO,aAAa,IAAI,SAAS,CAAC,EAAE;AACtC;;AAGA,SAAgB,+BAA+B,WAAiD;CAC9F,OAAO,aAAa,IAAI,SAAS,CAAC,EAAE,YAAY,CAAC;AACnD;AAEA,SAAgB,qCAA2C;CACzD,aAAa,MAAM;AACrB;AAEA,SAAS,WAAW,OAAuB;CACzC,OAAO,MAAM,WAAW,KAAK,OAAO,CAAC,CAAC,WAAW,KAAK,MAAM,CAAC,CAAC,WAAW,KAAK,MAAM;AACtF;AAKA,SAAS,qBAAqB,gBAA2D;CACvF,IAAI,CAAC,kBAAkB,OAAO,eAAe,QAAQ,YAAY,OAAO;CACxE,MAAM,aAAa,eAAe,IAAI,YAAY;CAClD,OAAO,OAAO,YAAY,cAAc,YAAY,WAAW,YAAY,WAAW,YAAY;AACpG;AAEA,SAAS,oBAAoB,OAAwC;CACnE,OAAO,eAAe,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,UAAU,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;AACpG;;;;;;;AAQA,IAAa,mCAAb,MAA0F;CACxF,KAAc;CACd,UAAmB;CAEnB,MAAM,mBAAmB,MAAiE;EACxF,MAAM,YAAY,qBAAqB,KAAK,cAAc;EAC1D,IAAI,CAAC,WAAW;EAChB,MAAM,QAAQ,aAAa,IAAI,SAAS,CAAC,EAAE;EAC3C,IAAI,CAAC,OAAO;EACZ,MAAM,WAAW,oBAAoB,KAAK;EAE1C,IADgB,QAAQ,KAAK,YAAY,KAAK,KAAK,cAAc,gBACjD,KAAK,UAAU,mBAAmB,KAAK,cAAc,UAAU,OAAO,cAAc,UAClG;EACF,MAAM,QAAQ,MAAM,aAAa,KAC9B,MAAM,UACL,GAAG,QAAQ,EAAE,IAAI,WAAW,KAAK,IAAI,EAAE,MAAM,WAAW,KAAK,GAAG,EAAE,MAAM,WAAW,KAAK,UAAU,YAAY,EAAE,YAAY,WAAW,KAAK,aAAa,EAAE,UAAU,KAAK,YAAY,MACrL,KAAK,mBAAmB,oBAAoB,WAAW,KAAK,gBAAgB,MAAM,GACvF;EACA,MAAM,OAAO,MAAM,aAAa,WAAW,IAAI,MAAM,aAAa,KAAK,KAAA;EACvE,MAAM,YACH,OACG,sCAAsC,WAAW,KAAK,IAAI,EAAE,MAAM,WAAW,KAAK,GAAG,EAAE,+BACvF,wBAAwB,MAAM,aAAa,OAAO,sBAAsB,WAAW,MAAM,gBAAgB,EAAE,gCAC/G,MAAM,KAAK,IAAI,KACd,OAAO,KAAK,qFACZ,MAAM,OAAO,KAAK,WAAW,MAAM,IAAI,MAAM;EAChD,OAAO;GACL,IAAI;GACJ;GACA,MAAM;GACN,SAAS;GACT;GACA,OAAO,EAAE,aAAa,MAAM;GAC5B,YAAY;IAAE,kBAAkB,MAAM,OAAO,MAAM;IAAkB,cAAc,MAAM,aAAa;GAAO;GAC7G,UAAU,EAAE,OAAO,EAAE,aAAa,MAAM,EAAE;EAC5C;CACF;AACF"}

package/dist/session/factory-session.js

@@ -4,7 +4,7 @@ import { resolveTenantProviderDefaultModel } from "../routes/tenant-credentials.
 import { seedSessionOrg } from "./org-seed.js";
 import { effectiveModelScope } from "../storage/domains/projects/base.js";
 import { SourceControlConnectionNotFoundError } from "../storage/domains/source-control/base.js";
-//#region src/session/factory-session.ts
+// src/session/factory-session.ts
 var FactorySourceControlConflictError = class extends Error {};
 /** Resolve the model and exclusive credential scope for a Factory session. */
 async function resolveFactorySessionModel(args) {
@@ -250,7 +250,6 @@ async function hydrateFactorySession(session, args) {
 	}
 	return switched ? selectedModelId : void 0;
 }
-//#endregion
 export { FactorySourceControlConflictError, FactorySourceSessionResolutionError, createSourceControlSessionLookup, ensureFactorySourceSession, hydrateFactorySession, resolveFactorySessionModel, resolveFactorySourceControl, resolvePrimaryEnvironmentRepository };
 
 //# sourceMappingURL=factory-session.js.map

package/dist/session/filesystem-capture.js

@@ -1,7 +1,7 @@
 import { peekSessionSandbox, sessionLayout } from "../sandbox/session-sandbox.js";
 import { peekSessionEnvironment } from "./environment-state-processor.js";
 import { isMeaningfulToolName } from "./first-exec-capture.js";
-//#region src/session/filesystem-capture.ts
+// src/session/filesystem-capture.ts
 /** Exit code of `GIT_CHANGED_FILES_SCRIPT` when the checkout is not there: the repository is skipped, not failed. */
 const CHECKOUT_MISSING_EXIT_CODE = 3;
 const GIT_CHANGED_FILES_SCRIPT = `
@@ -189,7 +189,7 @@ function observeSessionFilesystem(session, dependencies) {
 				suspended.delete(event.toolCallId);
 				if (event.isError || event.denied) return;
 				if (isMeaningfulToolName(toolName)) workspaceTouched = true;
-				return;
+				break;
 			}
 		}
 	});
@@ -224,7 +224,6 @@ function observeSessionFilesystem(session, dependencies) {
 		unsubscribeEnd();
 	};
 }
-//#endregion
 export { ROOT_FILES_LIST_COMMAND, captureSessionFilesystem, observeSessionFilesystem, parseFilesystemCaptureFiles, touchStamp, waitForPendingFilesystemCapture };
 
 //# sourceMappingURL=filesystem-capture.js.map

package/dist/session/filesystem-capture.js.map

@@ -1 +1 @@
-{"version":3,"file":"filesystem-capture.js","names":[],"sources":["../../src/session/filesystem-capture.ts"],"sourcesContent":["import type { AgentControllerEvent, SessionBeforeAgentEndListener } from '@mastra/core/agent-controller';\nimport type { WorkspaceSandbox } from '@mastra/core/workspace';\nimport { peekSessionSandbox, sessionLayout } from '../sandbox/session-sandbox.js';\nimport type { SessionLayoutRepository } from '../sandbox/session-sandbox.js';\n\nimport type { FilesystemFile, FilesystemStorage } from '../storage/domains/filesystem/base.js';\nimport type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\nimport { peekSessionEnvironment } from './environment-state-processor.js';\nimport { isMeaningfulToolName } from './first-exec-capture.js';\n\n/** Exit code of `GIT_CHANGED_FILES_SCRIPT` when the checkout is not there: the repository is skipped, not failed. */\nconst CHECKOUT_MISSING_EXIT_CODE = 3;\nconst GIT_CHANGED_FILES_SCRIPT = `\nset -e\nworkdir=$1\nbase_branch=$2\ntest -d \"$workdir\" || exit ${CHECKOUT_MISSING_EXIT_CODE}\nbase=HEAD\nif merge_base=$(git -C \"$workdir\" merge-base HEAD \"origin/$base_branch\" 2>/dev/null); then\n  base=$merge_base\nfi\ngit -C \"$workdir\" diff --name-only -z --find-renames --diff-filter=ACMRTUXB \"$base\"\ngit -C \"$workdir\" ls-files --others --exclude-standard -z\n`;\nconst ARTIFACTS_LIST_COMMAND = 'cd \"$1\" && test -d .artifacts && find .artifacts -type f -print0 || true';\n/**\n * Regular files directly under the workspace root written since the session\n * was created ($2 is a UTC `touch -t` stamp, `YYYYMMDDhhmm.SS`), such as the\n * agent's notes. Files the template shipped with predate the session and stay\n * out; the checkouts are covered by git. Dotfiles are never listed: a listed\n * path becomes readable through the thread's file route, and the root is where\n * setup leaves `.env`, `.pgpass`, `.netrc` and other credential files.\n * `touch -t` plus `-newer` works on GNU and BSD find alike; `-newermt\n * \"@epoch\"` is GNU only.\n */\nexport const ROOT_FILES_LIST_COMMAND = [\n  'cd \"$1\" && ref=$(mktemp) && TZ=UTC touch -t \"$2\" \"$ref\"',\n  '&& find . -mindepth 1 -maxdepth 1 -type f ! -name \\'.*\\' -newer \"$ref\" -print0',\n  '; status=$?; rm -f \"$ref\"; exit $status',\n].join(' ');\n\n/** `touch -t` stamp of a moment, in UTC. */\nexport function touchStamp(date: Date): string {\n  const two = (value: number) => String(value).padStart(2, '0');\n  return (\n    `${date.getUTCFullYear()}${two(date.getUTCMonth() + 1)}${two(date.getUTCDate())}` +\n    `${two(date.getUTCHours())}${two(date.getUTCMinutes())}.${two(date.getUTCSeconds())}`\n  );\n}\n\nexport interface FilesystemCaptureSession {\n  readonly identity: { getId(): string };\n  readonly thread: { requireId(): string };\n  getWorkspace(): { sandbox?: Pick<WorkspaceSandbox, 'executeCommand'> } | undefined;\n  onBeforeAgentEnd(listener: SessionBeforeAgentEndListener): () => void;\n  subscribe(listener: (event: AgentControllerEvent) => void): () => void;\n}\n\nexport interface FilesystemCaptureDependencies {\n  filesystem: Pick<FilesystemStorage, 'replaceFiles'>;\n  sourceControl: {\n    sessions: Pick<SourceControlStorageHandle['sessions'], 'getBySessionId'>;\n  };\n}\n\nexport function parseFilesystemCaptureFiles(output: string): FilesystemFile[] {\n  const files = new Map<string, FilesystemFile>();\n  for (const record of output.split('\\0')) {\n    if (!record) continue;\n    const path = record.replace(/^\\.\\//, '');\n    if (path) files.set(path, { path });\n  }\n\n  return [...files.values()].toSorted((a, b) => a.path.localeCompare(b.path));\n}\n\nexport async function captureSessionFilesystem(\n  session: FilesystemCaptureSession,\n  { filesystem, sourceControl }: FilesystemCaptureDependencies,\n  ids?: { sessionId: string; threadId: string },\n): Promise<void> {\n  try {\n    // Scheduled captures pass ids read at schedule time: a session deleted\n    // before the queued capture runs has already cleared its thread.\n    const sessionId = ids?.sessionId ?? session.identity.getId();\n    const threadId = ids?.threadId ?? session.thread.requireId();\n    const sourceSession = await sourceControl.sessions.getBySessionId(sessionId);\n    // Chat-only sessions run without a workspace; there is nothing to capture.\n    const sandbox = session.getWorkspace()?.sandbox;\n    if (!sourceSession || !sandbox?.executeCommand) return;\n    // The live workdir comes from the per-process memo (the deterministic\n    // truth) ONLY — never the persisted observability column, which a row\n    // written under a previous provider can point at a workdir that no\n    // longer exists (the stale-workdir incident class). No memo entry means\n    // no live sandbox worth capturing in this replica; capture is\n    // best-effort telemetry, so skip.\n    const entry = peekSessionSandbox(sourceSession.id);\n    if (!entry) return;\n    // Telemetry must never provision a VM: executeCommand lazily starts the\n    // sandbox via ensureRunning, so a chat turn that never touched the\n    // workspace would otherwise boot (and clone into) a fresh VM just to\n    // capture an empty git status. Only capture when the turn already has a\n    // running sandbox.\n    if (entry.sandbox.status !== 'running') return;\n    // Running-but-unresolved should not happen (the start hook resolves the\n    // workdir), but capture is best-effort: skip rather than guess.\n    const layout = sessionLayout(entry);\n    if (!layout) return;\n\n    // One git pass per checkout, in parallel so three repositories stay well\n    // inside the 10 s readers wait for a pending capture. The session's own\n    // repository compares against the session base branch; the others sit on\n    // their default branch and compare against that. A repository whose\n    // checkout is missing (exit 3) is skipped: it has nothing to list and\n    // must not block the others. Any other failure is treated as transient\n    // and leaves the previous listing in place.\n    const multiRepo = layout.repos.length > 1;\n    const environment = multiRepo ? peekSessionEnvironment(sourceSession.sessionId) : undefined;\n    const ownRepo = entry.ownRepo.toLowerCase();\n    // The boot records the state at its end, after every setup command; until\n    // then a secondary checkout compares against its own `origin/HEAD`.\n    const baseBranchFor = (repo: SessionLayoutRepository): string => {\n      if (repo.slug.toLowerCase() === ownRepo) return sourceSession.baseBranch;\n      const state = environment?.repositories.find(\n        candidate => candidate.slug.toLowerCase() === repo.slug.toLowerCase(),\n      );\n      return state?.defaultBranch ?? 'HEAD';\n    };\n    const targets = layout.repos.map(repo => ({ repo, baseBranch: baseBranchFor(repo) }));\n    const executeCommand = sandbox.executeCommand.bind(sandbox);\n    const results = await Promise.all(\n      targets.map(({ repo, baseBranch }) =>\n        executeCommand('sh', ['-c', GIT_CHANGED_FILES_SCRIPT, 'mastracode-changed-files', repo.dir, baseBranch], {\n          timeout: 30_000,\n        }),\n      ),\n    );\n    const files = new Map<string, FilesystemFile>();\n    let captured = 0;\n    for (const [index, result] of results.entries()) {\n      if (result.exitCode === CHECKOUT_MISSING_EXIT_CODE) continue;\n      if (result.exitCode !== 0) {\n        console.warn('[Factory filesystem capture] Unable to inspect Git changes.', result.stderr);\n        return;\n      }\n      captured += 1;\n      const prefix = targets[index]!.repo.prefix;\n      for (const file of parseFilesystemCaptureFiles(result.stdout)) {\n        files.set(`${prefix}${file.path}`, { path: `${prefix}${file.path}` });\n      }\n    }\n    if (captured === 0) return;\n\n    const artifacts = await executeCommand('sh', ['-c', ARTIFACTS_LIST_COMMAND, 'sh', layout.root], {\n      timeout: 30_000,\n    });\n    if (artifacts.exitCode !== 0) {\n      console.warn('[Factory filesystem capture] Unable to list workspace artifacts.', artifacts.stderr);\n      return;\n    }\n    for (const path of artifacts.stdout.split('\\0')) {\n      const normalizedPath = path.replace(/^\\.\\//, '');\n      if (normalizedPath) {\n        files.set(normalizedPath, { path: normalizedPath });\n      }\n    }\n\n    // With several checkouts the root is a plain directory nothing else lists.\n    // A failed listing is logged and the git and artifact results still land.\n    if (multiRepo) {\n      const since = touchStamp(sourceSession.createdAt);\n      const rootFiles = await executeCommand('sh', ['-c', ROOT_FILES_LIST_COMMAND, 'sh', layout.root, since], {\n        timeout: 30_000,\n      });\n      if (rootFiles.exitCode !== 0) {\n        console.warn('[Factory filesystem capture] Unable to list workspace root files.', rootFiles.stderr);\n      } else {\n        for (const path of rootFiles.stdout.split('\\0')) {\n          const normalizedPath = path.replace(/^\\.\\//, '');\n          if (normalizedPath && !normalizedPath.startsWith('.')) {\n            files.set(normalizedPath, { path: normalizedPath });\n          }\n        }\n      }\n    }\n\n    // The listing describes the session's workspace, not its memory resource,\n    // which the session shares with others: rows are keyed by the session id.\n    await filesystem.replaceFiles({\n      resourceId: sessionId,\n      threadId,\n      files: [...files.values()].toSorted((a, b) => a.path.localeCompare(b.path)),\n    });\n  } catch (error) {\n    console.warn('[Factory filesystem capture] Unable to persist files.', error);\n  }\n}\n\n/**\n * In-flight capture chains keyed by session id. Serves two purposes: readers\n * of the persisted file listing (the /web/workspace routes) await the capture\n * for the turn that just ended instead of racing it, and captures for the same\n * session stay sequential (last write wins). In-process only: the factory\n * server that runs the session controller also serves those routes.\n */\nconst pendingCaptures = new Map<string, Promise<void>>();\n\n/**\n * Resolve once the session's in-flight filesystem capture (if any) has\n * persisted, or after `timeoutMs` so a reader that arrives mid-capture is\n * never blocked by the execs' worst-case 30s timeouts. Never rejects: the\n * capture body is fully try/catch contained.\n */\nexport async function waitForPendingFilesystemCapture(sessionId: string, timeoutMs = 10_000): Promise<void> {\n  let pending = pendingCaptures.get(sessionId);\n  if (!pending) return;\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  let timedOut = false;\n  const deadline = new Promise<void>(resolve => {\n    timer = setTimeout(() => {\n      timedOut = true;\n      resolve();\n    }, timeoutMs);\n  });\n  try {\n    // A turn that ends while we wait chains a successor capture; keep waiting\n    // until the latest chain settles so the final snapshot is not lost.\n    while (pending && !timedOut) {\n      await Promise.race([pending, deadline]);\n      const next = pendingCaptures.get(sessionId);\n      pending = next === pending ? undefined : next;\n    }\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nexport function observeSessionFilesystem(\n  session: FilesystemCaptureSession,\n  dependencies: FilesystemCaptureDependencies,\n): () => void {\n  let fallbackChain = Promise.resolve();\n  // Capture only runs after a turn that actually touched the workspace: a\n  // successful workspace tool call both proves the sandbox is awake and is\n  // the only way the listing can have changed. Without this gate every chat\n  // turn would run two sandbox execs — and since executeCommand resumes an\n  // idle VM, a pure-chat turn would keep waking a sandbox it never used.\n  // Same bookkeeping as first-exec capture: tool names resolve at tool_end\n  // via the tool_start map, and suspended calls survive agent_end so a\n  // resumed run's eventual completion still counts for that turn.\n  let workspaceTouched = false;\n  const toolNames = new Map<string, string>();\n  const suspended = new Set<string>();\n  const unsubscribeEvents = session.subscribe(event => {\n    switch (event.type) {\n      case 'tool_start': {\n        toolNames.set(event.toolCallId, event.toolName);\n        return;\n      }\n      case 'tool_suspended': {\n        suspended.add(event.toolCallId);\n        return;\n      }\n      case 'tool_suspension_cancelled': {\n        toolNames.delete(event.toolCallId);\n        suspended.delete(event.toolCallId);\n        return;\n      }\n      case 'agent_end': {\n        for (const id of toolNames.keys()) {\n          if (!suspended.has(id)) toolNames.delete(id);\n        }\n        return;\n      }\n      case 'tool_end': {\n        const toolName = toolNames.get(event.toolCallId);\n        toolNames.delete(event.toolCallId);\n        suspended.delete(event.toolCallId);\n        if (event.isError || event.denied) return;\n        if (isMeaningfulToolName(toolName)) workspaceTouched = true;\n        return;\n      }\n    }\n  });\n  const unsubscribeEnd = session.onBeforeAgentEnd(() => {\n    // onBeforeAgentEnd fires before agent_end is emitted, so every tool_end\n    // of the finishing run has already been observed; read then reset.\n    if (!workspaceTouched) return;\n    workspaceTouched = false;\n    // Chain so captures stay sequential (last write wins), but do NOT return\n    // the chain: finishAgentRun awaits every listener before emitting\n    // agent_end, and the capture's sandbox execs (git status + artifacts\n    // find, 30s timeouts each) must not gate turn completion. Readers that\n    // need the fresh listing await the pending capture through\n    // waitForPendingFilesystemCapture instead. The un-returned chain cannot\n    // leak an unhandled rejection: captureSessionFilesystem's entire body\n    // runs inside its own try/catch, and disposal of this listener does not\n    // cancel an in-flight chain, so a final turn's capture still persists.\n    let sessionId: string;\n    try {\n      sessionId = session.identity.getId();\n    } catch {\n      // No identity means no route can address this session's listing; keep\n      // a per-observer chain so captures still run sequentially.\n      fallbackChain = fallbackChain.then(() => captureSessionFilesystem(session, dependencies));\n      return;\n    }\n    let threadId: string;\n    try {\n      threadId = session.thread.requireId();\n    } catch {\n      return;\n    }\n    const ids = { sessionId, threadId };\n    const chain = (pendingCaptures.get(sessionId) ?? Promise.resolve()).then(() =>\n      captureSessionFilesystem(session, dependencies, ids),\n    );\n    pendingCaptures.set(sessionId, chain);\n    void chain.finally(() => {\n      if (pendingCaptures.get(sessionId) === chain) {\n        pendingCaptures.delete(sessionId);\n      }\n    });\n  });\n  return () => {\n    unsubscribeEvents();\n    unsubscribeEnd();\n  };\n}\n"],"mappings":";;;;;AAWA,MAAM,6BAA6B;AACnC,MAAM,2BAA2B;;;;6BAIJ,2BAA2B;;;;;;;;AAQxD,MAAM,yBAAyB;;;;;;;;;;;AAW/B,MAAa,0BAA0B;CACrC;CACA;CACA;AACF,CAAC,CAAC,KAAK,GAAG;;AAGV,SAAgB,WAAW,MAAoB;CAC7C,MAAM,OAAO,UAAkB,OAAO,KAAK,CAAC,CAAC,SAAS,GAAG,GAAG;CAC5D,OACE,GAAG,KAAK,eAAe,IAAI,IAAI,KAAK,YAAY,IAAI,CAAC,IAAI,IAAI,KAAK,WAAW,CAAC,IAC3E,IAAI,KAAK,YAAY,CAAC,IAAI,IAAI,KAAK,cAAc,CAAC,EAAE,GAAG,IAAI,KAAK,cAAc,CAAC;AAEtF;AAiBA,SAAgB,4BAA4B,QAAkC;CAC5E,MAAM,wBAAQ,IAAI,IAA4B;CAC9C,KAAK,MAAM,UAAU,OAAO,MAAM,IAAI,GAAG;EACvC,IAAI,CAAC,QAAQ;EACb,MAAM,OAAO,OAAO,QAAQ,SAAS,EAAE;EACvC,IAAI,MAAM,MAAM,IAAI,MAAM,EAAE,KAAK,CAAC;CACpC;CAEA,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,UAAU,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAC5E;AAEA,eAAsB,yBACpB,SACA,EAAE,YAAY,iBACd,KACe;CACf,IAAI;EAGF,MAAM,YAAY,KAAK,aAAa,QAAQ,SAAS,MAAM;EAC3D,MAAM,WAAW,KAAK,YAAY,QAAQ,OAAO,UAAU;EAC3D,MAAM,gBAAgB,MAAM,cAAc,SAAS,eAAe,SAAS;EAE3E,MAAM,UAAU,QAAQ,aAAa,CAAC,EAAE;EACxC,IAAI,CAAC,iBAAiB,CAAC,SAAS,gBAAgB;EAOhD,MAAM,QAAQ,mBAAmB,cAAc,EAAE;EACjD,IAAI,CAAC,OAAO;EAMZ,IAAI,MAAM,QAAQ,WAAW,WAAW;EAGxC,MAAM,SAAS,cAAc,KAAK;EAClC,IAAI,CAAC,QAAQ;EASb,MAAM,YAAY,OAAO,MAAM,SAAS;EACxC,MAAM,cAAc,YAAY,uBAAuB,cAAc,SAAS,IAAI,KAAA;EAClF,MAAM,UAAU,MAAM,QAAQ,YAAY;EAG1C,MAAM,iBAAiB,SAA0C;GAC/D,IAAI,KAAK,KAAK,YAAY,MAAM,SAAS,OAAO,cAAc;GAI9D,QAHc,aAAa,aAAa,MACtC,cAAa,UAAU,KAAK,YAAY,MAAM,KAAK,KAAK,YAAY,CACtE,EAAA,EACc,iBAAiB;EACjC;EACA,MAAM,UAAU,OAAO,MAAM,KAAI,UAAS;GAAE;GAAM,YAAY,cAAc,IAAI;EAAE,EAAE;EACpF,MAAM,iBAAiB,QAAQ,eAAe,KAAK,OAAO;EAC1D,MAAM,UAAU,MAAM,QAAQ,IAC5B,QAAQ,KAAK,EAAE,MAAM,iBACnB,eAAe,MAAM;GAAC;GAAM;GAA0B;GAA4B,KAAK;GAAK;EAAU,GAAG,EACvG,SAAS,IACX,CAAC,CACH,CACF;EACA,MAAM,wBAAQ,IAAI,IAA4B;EAC9C,IAAI,WAAW;EACf,KAAK,MAAM,CAAC,OAAO,WAAW,QAAQ,QAAQ,GAAG;GAC/C,IAAI,OAAO,aAAa,4BAA4B;GACpD,IAAI,OAAO,aAAa,GAAG;IACzB,QAAQ,KAAK,+DAA+D,OAAO,MAAM;IACzF;GACF;GACA,YAAY;GACZ,MAAM,SAAS,QAAQ,MAAM,CAAE,KAAK;GACpC,KAAK,MAAM,QAAQ,4BAA4B,OAAO,MAAM,GAC1D,MAAM,IAAI,GAAG,SAAS,KAAK,QAAQ,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC;EAExE;EACA,IAAI,aAAa,GAAG;EAEpB,MAAM,YAAY,MAAM,eAAe,MAAM;GAAC;GAAM;GAAwB;GAAM,OAAO;EAAI,GAAG,EAC9F,SAAS,IACX,CAAC;EACD,IAAI,UAAU,aAAa,GAAG;GAC5B,QAAQ,KAAK,oEAAoE,UAAU,MAAM;GACjG;EACF;EACA,KAAK,MAAM,QAAQ,UAAU,OAAO,MAAM,IAAI,GAAG;GAC/C,MAAM,iBAAiB,KAAK,QAAQ,SAAS,EAAE;GAC/C,IAAI,gBACF,MAAM,IAAI,gBAAgB,EAAE,MAAM,eAAe,CAAC;EAEtD;EAIA,IAAI,WAAW;GACb,MAAM,QAAQ,WAAW,cAAc,SAAS;GAChD,MAAM,YAAY,MAAM,eAAe,MAAM;IAAC;IAAM;IAAyB;IAAM,OAAO;IAAM;GAAK,GAAG,EACtG,SAAS,IACX,CAAC;GACD,IAAI,UAAU,aAAa,GACzB,QAAQ,KAAK,qEAAqE,UAAU,MAAM;QAElG,KAAK,MAAM,QAAQ,UAAU,OAAO,MAAM,IAAI,GAAG;IAC/C,MAAM,iBAAiB,KAAK,QAAQ,SAAS,EAAE;IAC/C,IAAI,kBAAkB,CAAC,eAAe,WAAW,GAAG,GAClD,MAAM,IAAI,gBAAgB,EAAE,MAAM,eAAe,CAAC;GAEtD;EAEJ;EAIA,MAAM,WAAW,aAAa;GAC5B,YAAY;GACZ;GACA,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,UAAU,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;EAC5E,CAAC;CACH,SAAS,OAAO;EACd,QAAQ,KAAK,yDAAyD,KAAK;CAC7E;AACF;;;;;;;;AASA,MAAM,kCAAkB,IAAI,IAA2B;;;;;;;AAQvD,eAAsB,gCAAgC,WAAmB,YAAY,KAAuB;CAC1G,IAAI,UAAU,gBAAgB,IAAI,SAAS;CAC3C,IAAI,CAAC,SAAS;CACd,IAAI;CACJ,IAAI,WAAW;CACf,MAAM,WAAW,IAAI,SAAc,YAAW;EAC5C,QAAQ,iBAAiB;GACvB,WAAW;GACX,QAAQ;EACV,GAAG,SAAS;CACd,CAAC;CACD,IAAI;EAGF,OAAO,WAAW,CAAC,UAAU;GAC3B,MAAM,QAAQ,KAAK,CAAC,SAAS,QAAQ,CAAC;GACtC,MAAM,OAAO,gBAAgB,IAAI,SAAS;GAC1C,UAAU,SAAS,UAAU,KAAA,IAAY;EAC3C;CACF,UAAU;EACR,aAAa,KAAK;CACpB;AACF;AAEA,SAAgB,yBACd,SACA,cACY;CACZ,IAAI,gBAAgB,QAAQ,QAAQ;CASpC,IAAI,mBAAmB;CACvB,MAAM,4BAAY,IAAI,IAAoB;CAC1C,MAAM,4BAAY,IAAI,IAAY;CAClC,MAAM,oBAAoB,QAAQ,WAAU,UAAS;EACnD,QAAQ,MAAM,MAAd;GACE,KAAK;IACH,UAAU,IAAI,MAAM,YAAY,MAAM,QAAQ;IAC9C;GAEF,KAAK;IACH,UAAU,IAAI,MAAM,UAAU;IAC9B;GAEF,KAAK;IACH,UAAU,OAAO,MAAM,UAAU;IACjC,UAAU,OAAO,MAAM,UAAU;IACjC;GAEF,KAAK;IACH,KAAK,MAAM,MAAM,UAAU,KAAK,GAC9B,IAAI,CAAC,UAAU,IAAI,EAAE,GAAG,UAAU,OAAO,EAAE;IAE7C;GAEF,KAAK,YAAY;IACf,MAAM,WAAW,UAAU,IAAI,MAAM,UAAU;IAC/C,UAAU,OAAO,MAAM,UAAU;IACjC,UAAU,OAAO,MAAM,UAAU;IACjC,IAAI,MAAM,WAAW,MAAM,QAAQ;IACnC,IAAI,qBAAqB,QAAQ,GAAG,mBAAmB;IACvD;GACF;EACF;CACF,CAAC;CACD,MAAM,iBAAiB,QAAQ,uBAAuB;EAGpD,IAAI,CAAC,kBAAkB;EACvB,mBAAmB;EAUnB,IAAI;EACJ,IAAI;GACF,YAAY,QAAQ,SAAS,MAAM;EACrC,QAAQ;GAGN,gBAAgB,cAAc,WAAW,yBAAyB,SAAS,YAAY,CAAC;GACxF;EACF;EACA,IAAI;EACJ,IAAI;GACF,WAAW,QAAQ,OAAO,UAAU;EACtC,QAAQ;GACN;EACF;EACA,MAAM,MAAM;GAAE;GAAW;EAAS;EAClC,MAAM,SAAS,gBAAgB,IAAI,SAAS,KAAK,QAAQ,QAAQ,EAAA,CAAG,WAClE,yBAAyB,SAAS,cAAc,GAAG,CACrD;EACA,gBAAgB,IAAI,WAAW,KAAK;EACpC,MAAW,cAAc;GACvB,IAAI,gBAAgB,IAAI,SAAS,MAAM,OACrC,gBAAgB,OAAO,SAAS;EAEpC,CAAC;CACH,CAAC;CACD,aAAa;EACX,kBAAkB;EAClB,eAAe;CACjB;AACF"}
+{"version":3,"file":"filesystem-capture.js","names":[],"sources":["../../src/session/filesystem-capture.ts"],"sourcesContent":["import type { AgentControllerEvent, SessionBeforeAgentEndListener } from '@mastra/core/agent-controller';\nimport type { WorkspaceSandbox } from '@mastra/core/workspace';\nimport { peekSessionSandbox, sessionLayout } from '../sandbox/session-sandbox.js';\nimport type { SessionLayoutRepository } from '../sandbox/session-sandbox.js';\n\nimport type { FilesystemFile, FilesystemStorage } from '../storage/domains/filesystem/base.js';\nimport type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\nimport { peekSessionEnvironment } from './environment-state-processor.js';\nimport { isMeaningfulToolName } from './first-exec-capture.js';\n\n/** Exit code of `GIT_CHANGED_FILES_SCRIPT` when the checkout is not there: the repository is skipped, not failed. */\nconst CHECKOUT_MISSING_EXIT_CODE = 3;\nconst GIT_CHANGED_FILES_SCRIPT = `\nset -e\nworkdir=$1\nbase_branch=$2\ntest -d \"$workdir\" || exit ${CHECKOUT_MISSING_EXIT_CODE}\nbase=HEAD\nif merge_base=$(git -C \"$workdir\" merge-base HEAD \"origin/$base_branch\" 2>/dev/null); then\n  base=$merge_base\nfi\ngit -C \"$workdir\" diff --name-only -z --find-renames --diff-filter=ACMRTUXB \"$base\"\ngit -C \"$workdir\" ls-files --others --exclude-standard -z\n`;\nconst ARTIFACTS_LIST_COMMAND = 'cd \"$1\" && test -d .artifacts && find .artifacts -type f -print0 || true';\n/**\n * Regular files directly under the workspace root written since the session\n * was created ($2 is a UTC `touch -t` stamp, `YYYYMMDDhhmm.SS`), such as the\n * agent's notes. Files the template shipped with predate the session and stay\n * out; the checkouts are covered by git. Dotfiles are never listed: a listed\n * path becomes readable through the thread's file route, and the root is where\n * setup leaves `.env`, `.pgpass`, `.netrc` and other credential files.\n * `touch -t` plus `-newer` works on GNU and BSD find alike; `-newermt\n * \"@epoch\"` is GNU only.\n */\nexport const ROOT_FILES_LIST_COMMAND = [\n  'cd \"$1\" && ref=$(mktemp) && TZ=UTC touch -t \"$2\" \"$ref\"',\n  '&& find . -mindepth 1 -maxdepth 1 -type f ! -name \\'.*\\' -newer \"$ref\" -print0',\n  '; status=$?; rm -f \"$ref\"; exit $status',\n].join(' ');\n\n/** `touch -t` stamp of a moment, in UTC. */\nexport function touchStamp(date: Date): string {\n  const two = (value: number) => String(value).padStart(2, '0');\n  return (\n    `${date.getUTCFullYear()}${two(date.getUTCMonth() + 1)}${two(date.getUTCDate())}` +\n    `${two(date.getUTCHours())}${two(date.getUTCMinutes())}.${two(date.getUTCSeconds())}`\n  );\n}\n\nexport interface FilesystemCaptureSession {\n  readonly identity: { getId(): string };\n  readonly thread: { requireId(): string };\n  getWorkspace(): { sandbox?: Pick<WorkspaceSandbox, 'executeCommand'> } | undefined;\n  onBeforeAgentEnd(listener: SessionBeforeAgentEndListener): () => void;\n  subscribe(listener: (event: AgentControllerEvent) => void): () => void;\n}\n\nexport interface FilesystemCaptureDependencies {\n  filesystem: Pick<FilesystemStorage, 'replaceFiles'>;\n  sourceControl: {\n    sessions: Pick<SourceControlStorageHandle['sessions'], 'getBySessionId'>;\n  };\n}\n\nexport function parseFilesystemCaptureFiles(output: string): FilesystemFile[] {\n  const files = new Map<string, FilesystemFile>();\n  for (const record of output.split('\\0')) {\n    if (!record) continue;\n    const path = record.replace(/^\\.\\//, '');\n    if (path) files.set(path, { path });\n  }\n\n  return [...files.values()].toSorted((a, b) => a.path.localeCompare(b.path));\n}\n\nexport async function captureSessionFilesystem(\n  session: FilesystemCaptureSession,\n  { filesystem, sourceControl }: FilesystemCaptureDependencies,\n  ids?: { sessionId: string; threadId: string },\n): Promise<void> {\n  try {\n    // Scheduled captures pass ids read at schedule time: a session deleted\n    // before the queued capture runs has already cleared its thread.\n    const sessionId = ids?.sessionId ?? session.identity.getId();\n    const threadId = ids?.threadId ?? session.thread.requireId();\n    const sourceSession = await sourceControl.sessions.getBySessionId(sessionId);\n    // Chat-only sessions run without a workspace; there is nothing to capture.\n    const sandbox = session.getWorkspace()?.sandbox;\n    if (!sourceSession || !sandbox?.executeCommand) return;\n    // The live workdir comes from the per-process memo (the deterministic\n    // truth) ONLY — never the persisted observability column, which a row\n    // written under a previous provider can point at a workdir that no\n    // longer exists (the stale-workdir incident class). No memo entry means\n    // no live sandbox worth capturing in this replica; capture is\n    // best-effort telemetry, so skip.\n    const entry = peekSessionSandbox(sourceSession.id);\n    if (!entry) return;\n    // Telemetry must never provision a VM: executeCommand lazily starts the\n    // sandbox via ensureRunning, so a chat turn that never touched the\n    // workspace would otherwise boot (and clone into) a fresh VM just to\n    // capture an empty git status. Only capture when the turn already has a\n    // running sandbox.\n    if (entry.sandbox.status !== 'running') return;\n    // Running-but-unresolved should not happen (the start hook resolves the\n    // workdir), but capture is best-effort: skip rather than guess.\n    const layout = sessionLayout(entry);\n    if (!layout) return;\n\n    // One git pass per checkout, in parallel so three repositories stay well\n    // inside the 10 s readers wait for a pending capture. The session's own\n    // repository compares against the session base branch; the others sit on\n    // their default branch and compare against that. A repository whose\n    // checkout is missing (exit 3) is skipped: it has nothing to list and\n    // must not block the others. Any other failure is treated as transient\n    // and leaves the previous listing in place.\n    const multiRepo = layout.repos.length > 1;\n    const environment = multiRepo ? peekSessionEnvironment(sourceSession.sessionId) : undefined;\n    const ownRepo = entry.ownRepo.toLowerCase();\n    // The boot records the state at its end, after every setup command; until\n    // then a secondary checkout compares against its own `origin/HEAD`.\n    const baseBranchFor = (repo: SessionLayoutRepository): string => {\n      if (repo.slug.toLowerCase() === ownRepo) return sourceSession.baseBranch;\n      const state = environment?.repositories.find(\n        candidate => candidate.slug.toLowerCase() === repo.slug.toLowerCase(),\n      );\n      return state?.defaultBranch ?? 'HEAD';\n    };\n    const targets = layout.repos.map(repo => ({ repo, baseBranch: baseBranchFor(repo) }));\n    const executeCommand = sandbox.executeCommand.bind(sandbox);\n    const results = await Promise.all(\n      targets.map(({ repo, baseBranch }) =>\n        executeCommand('sh', ['-c', GIT_CHANGED_FILES_SCRIPT, 'mastracode-changed-files', repo.dir, baseBranch], {\n          timeout: 30_000,\n        }),\n      ),\n    );\n    const files = new Map<string, FilesystemFile>();\n    let captured = 0;\n    for (const [index, result] of results.entries()) {\n      if (result.exitCode === CHECKOUT_MISSING_EXIT_CODE) continue;\n      if (result.exitCode !== 0) {\n        console.warn('[Factory filesystem capture] Unable to inspect Git changes.', result.stderr);\n        return;\n      }\n      captured += 1;\n      const prefix = targets[index]!.repo.prefix;\n      for (const file of parseFilesystemCaptureFiles(result.stdout)) {\n        files.set(`${prefix}${file.path}`, { path: `${prefix}${file.path}` });\n      }\n    }\n    if (captured === 0) return;\n\n    const artifacts = await executeCommand('sh', ['-c', ARTIFACTS_LIST_COMMAND, 'sh', layout.root], {\n      timeout: 30_000,\n    });\n    if (artifacts.exitCode !== 0) {\n      console.warn('[Factory filesystem capture] Unable to list workspace artifacts.', artifacts.stderr);\n      return;\n    }\n    for (const path of artifacts.stdout.split('\\0')) {\n      const normalizedPath = path.replace(/^\\.\\//, '');\n      if (normalizedPath) {\n        files.set(normalizedPath, { path: normalizedPath });\n      }\n    }\n\n    // With several checkouts the root is a plain directory nothing else lists.\n    // A failed listing is logged and the git and artifact results still land.\n    if (multiRepo) {\n      const since = touchStamp(sourceSession.createdAt);\n      const rootFiles = await executeCommand('sh', ['-c', ROOT_FILES_LIST_COMMAND, 'sh', layout.root, since], {\n        timeout: 30_000,\n      });\n      if (rootFiles.exitCode !== 0) {\n        console.warn('[Factory filesystem capture] Unable to list workspace root files.', rootFiles.stderr);\n      } else {\n        for (const path of rootFiles.stdout.split('\\0')) {\n          const normalizedPath = path.replace(/^\\.\\//, '');\n          if (normalizedPath && !normalizedPath.startsWith('.')) {\n            files.set(normalizedPath, { path: normalizedPath });\n          }\n        }\n      }\n    }\n\n    // The listing describes the session's workspace, not its memory resource,\n    // which the session shares with others: rows are keyed by the session id.\n    await filesystem.replaceFiles({\n      resourceId: sessionId,\n      threadId,\n      files: [...files.values()].toSorted((a, b) => a.path.localeCompare(b.path)),\n    });\n  } catch (error) {\n    console.warn('[Factory filesystem capture] Unable to persist files.', error);\n  }\n}\n\n/**\n * In-flight capture chains keyed by session id. Serves two purposes: readers\n * of the persisted file listing (the /web/workspace routes) await the capture\n * for the turn that just ended instead of racing it, and captures for the same\n * session stay sequential (last write wins). In-process only: the factory\n * server that runs the session controller also serves those routes.\n */\nconst pendingCaptures = new Map<string, Promise<void>>();\n\n/**\n * Resolve once the session's in-flight filesystem capture (if any) has\n * persisted, or after `timeoutMs` so a reader that arrives mid-capture is\n * never blocked by the execs' worst-case 30s timeouts. Never rejects: the\n * capture body is fully try/catch contained.\n */\nexport async function waitForPendingFilesystemCapture(sessionId: string, timeoutMs = 10_000): Promise<void> {\n  let pending = pendingCaptures.get(sessionId);\n  if (!pending) return;\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  let timedOut = false;\n  const deadline = new Promise<void>(resolve => {\n    timer = setTimeout(() => {\n      timedOut = true;\n      resolve();\n    }, timeoutMs);\n  });\n  try {\n    // A turn that ends while we wait chains a successor capture; keep waiting\n    // until the latest chain settles so the final snapshot is not lost.\n    while (pending && !timedOut) {\n      await Promise.race([pending, deadline]);\n      const next = pendingCaptures.get(sessionId);\n      pending = next === pending ? undefined : next;\n    }\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nexport function observeSessionFilesystem(\n  session: FilesystemCaptureSession,\n  dependencies: FilesystemCaptureDependencies,\n): () => void {\n  let fallbackChain = Promise.resolve();\n  // Capture only runs after a turn that actually touched the workspace: a\n  // successful workspace tool call both proves the sandbox is awake and is\n  // the only way the listing can have changed. Without this gate every chat\n  // turn would run two sandbox execs — and since executeCommand resumes an\n  // idle VM, a pure-chat turn would keep waking a sandbox it never used.\n  // Same bookkeeping as first-exec capture: tool names resolve at tool_end\n  // via the tool_start map, and suspended calls survive agent_end so a\n  // resumed run's eventual completion still counts for that turn.\n  let workspaceTouched = false;\n  const toolNames = new Map<string, string>();\n  const suspended = new Set<string>();\n  const unsubscribeEvents = session.subscribe(event => {\n    switch (event.type) {\n      case 'tool_start': {\n        toolNames.set(event.toolCallId, event.toolName);\n        return;\n      }\n      case 'tool_suspended': {\n        suspended.add(event.toolCallId);\n        return;\n      }\n      case 'tool_suspension_cancelled': {\n        toolNames.delete(event.toolCallId);\n        suspended.delete(event.toolCallId);\n        return;\n      }\n      case 'agent_end': {\n        for (const id of toolNames.keys()) {\n          if (!suspended.has(id)) toolNames.delete(id);\n        }\n        return;\n      }\n      case 'tool_end': {\n        const toolName = toolNames.get(event.toolCallId);\n        toolNames.delete(event.toolCallId);\n        suspended.delete(event.toolCallId);\n        if (event.isError || event.denied) return;\n        if (isMeaningfulToolName(toolName)) workspaceTouched = true;\n        break;\n      }\n    }\n  });\n  const unsubscribeEnd = session.onBeforeAgentEnd(() => {\n    // onBeforeAgentEnd fires before agent_end is emitted, so every tool_end\n    // of the finishing run has already been observed; read then reset.\n    if (!workspaceTouched) return;\n    workspaceTouched = false;\n    // Chain so captures stay sequential (last write wins), but do NOT return\n    // the chain: finishAgentRun awaits every listener before emitting\n    // agent_end, and the capture's sandbox execs (git status + artifacts\n    // find, 30s timeouts each) must not gate turn completion. Readers that\n    // need the fresh listing await the pending capture through\n    // waitForPendingFilesystemCapture instead. The un-returned chain cannot\n    // leak an unhandled rejection: captureSessionFilesystem's entire body\n    // runs inside its own try/catch, and disposal of this listener does not\n    // cancel an in-flight chain, so a final turn's capture still persists.\n    let sessionId: string;\n    try {\n      sessionId = session.identity.getId();\n    } catch {\n      // No identity means no route can address this session's listing; keep\n      // a per-observer chain so captures still run sequentially.\n      fallbackChain = fallbackChain.then(() => captureSessionFilesystem(session, dependencies));\n      return;\n    }\n    let threadId: string;\n    try {\n      threadId = session.thread.requireId();\n    } catch {\n      return;\n    }\n    const ids = { sessionId, threadId };\n    const chain = (pendingCaptures.get(sessionId) ?? Promise.resolve()).then(() =>\n      captureSessionFilesystem(session, dependencies, ids),\n    );\n    pendingCaptures.set(sessionId, chain);\n    void chain.finally(() => {\n      if (pendingCaptures.get(sessionId) === chain) {\n        pendingCaptures.delete(sessionId);\n      }\n    });\n  });\n  return () => {\n    unsubscribeEvents();\n    unsubscribeEnd();\n  };\n}\n"],"mappings":";;;;;AAWA,MAAM,6BAA6B;AACnC,MAAM,2BAA2B;;;;6BAIJ,2BAA2B;;;;;;;;AAQxD,MAAM,yBAAyB;;;;;;;;;;;AAW/B,MAAa,0BAA0B;CACrC;CACA;CACA;AACF,CAAC,CAAC,KAAK,GAAG;;AAGV,SAAgB,WAAW,MAAoB;CAC7C,MAAM,OAAO,UAAkB,OAAO,KAAK,CAAC,CAAC,SAAS,GAAG,GAAG;CAC5D,OACE,GAAG,KAAK,eAAe,IAAI,IAAI,KAAK,YAAY,IAAI,CAAC,IAAI,IAAI,KAAK,WAAW,CAAC,IAC3E,IAAI,KAAK,YAAY,CAAC,IAAI,IAAI,KAAK,cAAc,CAAC,EAAE,GAAG,IAAI,KAAK,cAAc,CAAC;AAEtF;AAiBA,SAAgB,4BAA4B,QAAkC;CAC5E,MAAM,wBAAQ,IAAI,IAA4B;CAC9C,KAAK,MAAM,UAAU,OAAO,MAAM,IAAI,GAAG;EACvC,IAAI,CAAC,QAAQ;EACb,MAAM,OAAO,OAAO,QAAQ,SAAS,EAAE;EACvC,IAAI,MAAM,MAAM,IAAI,MAAM,EAAE,KAAK,CAAC;CACpC;CAEA,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,UAAU,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAC5E;AAEA,eAAsB,yBACpB,SACA,EAAE,YAAY,iBACd,KACe;CACf,IAAI;EAGF,MAAM,YAAY,KAAK,aAAa,QAAQ,SAAS,MAAM;EAC3D,MAAM,WAAW,KAAK,YAAY,QAAQ,OAAO,UAAU;EAC3D,MAAM,gBAAgB,MAAM,cAAc,SAAS,eAAe,SAAS;EAE3E,MAAM,UAAU,QAAQ,aAAa,CAAC,EAAE;EACxC,IAAI,CAAC,iBAAiB,CAAC,SAAS,gBAAgB;EAOhD,MAAM,QAAQ,mBAAmB,cAAc,EAAE;EACjD,IAAI,CAAC,OAAO;EAMZ,IAAI,MAAM,QAAQ,WAAW,WAAW;EAGxC,MAAM,SAAS,cAAc,KAAK;EAClC,IAAI,CAAC,QAAQ;EASb,MAAM,YAAY,OAAO,MAAM,SAAS;EACxC,MAAM,cAAc,YAAY,uBAAuB,cAAc,SAAS,IAAI,KAAA;EAClF,MAAM,UAAU,MAAM,QAAQ,YAAY;EAG1C,MAAM,iBAAiB,SAA0C;GAC/D,IAAI,KAAK,KAAK,YAAY,MAAM,SAAS,OAAO,cAAc;GAI9D,QAHc,aAAa,aAAa,MACtC,cAAa,UAAU,KAAK,YAAY,MAAM,KAAK,KAAK,YAAY,CACtE,EAAA,EACc,iBAAiB;EACjC;EACA,MAAM,UAAU,OAAO,MAAM,KAAI,UAAS;GAAE;GAAM,YAAY,cAAc,IAAI;EAAE,EAAE;EACpF,MAAM,iBAAiB,QAAQ,eAAe,KAAK,OAAO;EAC1D,MAAM,UAAU,MAAM,QAAQ,IAC5B,QAAQ,KAAK,EAAE,MAAM,iBACnB,eAAe,MAAM;GAAC;GAAM;GAA0B;GAA4B,KAAK;GAAK;EAAU,GAAG,EACvG,SAAS,IACX,CAAC,CACH,CACF;EACA,MAAM,wBAAQ,IAAI,IAA4B;EAC9C,IAAI,WAAW;EACf,KAAK,MAAM,CAAC,OAAO,WAAW,QAAQ,QAAQ,GAAG;GAC/C,IAAI,OAAO,aAAa,4BAA4B;GACpD,IAAI,OAAO,aAAa,GAAG;IACzB,QAAQ,KAAK,+DAA+D,OAAO,MAAM;IACzF;GACF;GACA,YAAY;GACZ,MAAM,SAAS,QAAQ,MAAM,CAAE,KAAK;GACpC,KAAK,MAAM,QAAQ,4BAA4B,OAAO,MAAM,GAC1D,MAAM,IAAI,GAAG,SAAS,KAAK,QAAQ,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC;EAExE;EACA,IAAI,aAAa,GAAG;EAEpB,MAAM,YAAY,MAAM,eAAe,MAAM;GAAC;GAAM;GAAwB;GAAM,OAAO;EAAI,GAAG,EAC9F,SAAS,IACX,CAAC;EACD,IAAI,UAAU,aAAa,GAAG;GAC5B,QAAQ,KAAK,oEAAoE,UAAU,MAAM;GACjG;EACF;EACA,KAAK,MAAM,QAAQ,UAAU,OAAO,MAAM,IAAI,GAAG;GAC/C,MAAM,iBAAiB,KAAK,QAAQ,SAAS,EAAE;GAC/C,IAAI,gBACF,MAAM,IAAI,gBAAgB,EAAE,MAAM,eAAe,CAAC;EAEtD;EAIA,IAAI,WAAW;GACb,MAAM,QAAQ,WAAW,cAAc,SAAS;GAChD,MAAM,YAAY,MAAM,eAAe,MAAM;IAAC;IAAM;IAAyB;IAAM,OAAO;IAAM;GAAK,GAAG,EACtG,SAAS,IACX,CAAC;GACD,IAAI,UAAU,aAAa,GACzB,QAAQ,KAAK,qEAAqE,UAAU,MAAM;QAElG,KAAK,MAAM,QAAQ,UAAU,OAAO,MAAM,IAAI,GAAG;IAC/C,MAAM,iBAAiB,KAAK,QAAQ,SAAS,EAAE;IAC/C,IAAI,kBAAkB,CAAC,eAAe,WAAW,GAAG,GAClD,MAAM,IAAI,gBAAgB,EAAE,MAAM,eAAe,CAAC;GAEtD;EAEJ;EAIA,MAAM,WAAW,aAAa;GAC5B,YAAY;GACZ;GACA,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,UAAU,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;EAC5E,CAAC;CACH,SAAS,OAAO;EACd,QAAQ,KAAK,yDAAyD,KAAK;CAC7E;AACF;;;;;;;;AASA,MAAM,kCAAkB,IAAI,IAA2B;;;;;;;AAQvD,eAAsB,gCAAgC,WAAmB,YAAY,KAAuB;CAC1G,IAAI,UAAU,gBAAgB,IAAI,SAAS;CAC3C,IAAI,CAAC,SAAS;CACd,IAAI;CACJ,IAAI,WAAW;CACf,MAAM,WAAW,IAAI,SAAc,YAAW;EAC5C,QAAQ,iBAAiB;GACvB,WAAW;GACX,QAAQ;EACV,GAAG,SAAS;CACd,CAAC;CACD,IAAI;EAGF,OAAO,WAAW,CAAC,UAAU;GAC3B,MAAM,QAAQ,KAAK,CAAC,SAAS,QAAQ,CAAC;GACtC,MAAM,OAAO,gBAAgB,IAAI,SAAS;GAC1C,UAAU,SAAS,UAAU,KAAA,IAAY;EAC3C;CACF,UAAU;EACR,aAAa,KAAK;CACpB;AACF;AAEA,SAAgB,yBACd,SACA,cACY;CACZ,IAAI,gBAAgB,QAAQ,QAAQ;CASpC,IAAI,mBAAmB;CACvB,MAAM,4BAAY,IAAI,IAAoB;CAC1C,MAAM,4BAAY,IAAI,IAAY;CAClC,MAAM,oBAAoB,QAAQ,WAAU,UAAS;EACnD,QAAQ,MAAM,MAAd;GACE,KAAK;IACH,UAAU,IAAI,MAAM,YAAY,MAAM,QAAQ;IAC9C;GAEF,KAAK;IACH,UAAU,IAAI,MAAM,UAAU;IAC9B;GAEF,KAAK;IACH,UAAU,OAAO,MAAM,UAAU;IACjC,UAAU,OAAO,MAAM,UAAU;IACjC;GAEF,KAAK;IACH,KAAK,MAAM,MAAM,UAAU,KAAK,GAC9B,IAAI,CAAC,UAAU,IAAI,EAAE,GAAG,UAAU,OAAO,EAAE;IAE7C;GAEF,KAAK,YAAY;IACf,MAAM,WAAW,UAAU,IAAI,MAAM,UAAU;IAC/C,UAAU,OAAO,MAAM,UAAU;IACjC,UAAU,OAAO,MAAM,UAAU;IACjC,IAAI,MAAM,WAAW,MAAM,QAAQ;IACnC,IAAI,qBAAqB,QAAQ,GAAG,mBAAmB;IACvD;GACF;EACF;CACF,CAAC;CACD,MAAM,iBAAiB,QAAQ,uBAAuB;EAGpD,IAAI,CAAC,kBAAkB;EACvB,mBAAmB;EAUnB,IAAI;EACJ,IAAI;GACF,YAAY,QAAQ,SAAS,MAAM;EACrC,QAAQ;GAGN,gBAAgB,cAAc,WAAW,yBAAyB,SAAS,YAAY,CAAC;GACxF;EACF;EACA,IAAI;EACJ,IAAI;GACF,WAAW,QAAQ,OAAO,UAAU;EACtC,QAAQ;GACN;EACF;EACA,MAAM,MAAM;GAAE;GAAW;EAAS;EAClC,MAAM,SAAS,gBAAgB,IAAI,SAAS,KAAK,QAAQ,QAAQ,EAAA,CAAG,WAClE,yBAAyB,SAAS,cAAc,GAAG,CACrD;EACA,gBAAgB,IAAI,WAAW,KAAK;EACpC,MAAW,cAAc;GACvB,IAAI,gBAAgB,IAAI,SAAS,MAAM,OACrC,gBAAgB,OAAO,SAAS;EAEpC,CAAC;CACH,CAAC;CACD,aAAa;EACX,kBAAkB;EAClB,eAAe;CACjB;AACF"}

package/dist/session/first-exec-capture.js

@@ -1,5 +1,5 @@
 import { WORKSPACE_TOOLS_PREFIX } from "@mastra/core/workspace";
-//#region src/session/first-exec-capture.ts
+// src/session/first-exec-capture.ts
 /**
 * Tool names that count as "meaningful exec" independent of the workspace
 * prefix. The workspace tools get remapped from `mastra_workspace_*` to
@@ -79,13 +79,12 @@ function observeSessionFirstExec(session, { sourceControl }) {
 				seen = true;
 				unsubscribe();
 				sourceControl.sessions.markFirstMeaningfulExec({ sessionId: session.identity.getId() }).catch((error) => console.warn("[Factory first-exec capture] Unable to persist first exec time.", error));
-				return;
+				break;
 			}
 		}
 	});
 	return unsubscribe;
 }
-//#endregion
 export { isMeaningfulToolName, observeSessionFirstExec };
 
 //# sourceMappingURL=first-exec-capture.js.map

package/dist/session/first-exec-capture.js.map

@@ -1 +1 @@
-{"version":3,"file":"first-exec-capture.js","names":[],"sources":["../../src/session/first-exec-capture.ts"],"sourcesContent":["import type { AgentControllerEvent } from '@mastra/core/agent-controller';\nimport { WORKSPACE_TOOLS_PREFIX } from '@mastra/core/workspace';\n\nimport type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\n\nexport interface FirstExecCaptureSession {\n  readonly identity: { getId(): string };\n  subscribe(listener: (event: AgentControllerEvent) => void): () => void;\n}\n\nexport interface FirstExecCaptureDependencies {\n  sourceControl: {\n    sessions: Pick<SourceControlStorageHandle['sessions'], 'markFirstMeaningfulExec'>;\n  };\n}\n\n/**\n * Tool names that count as \"meaningful exec\" independent of the workspace\n * prefix. The workspace tools get remapped from `mastra_workspace_*` to\n * mastracode-friendly names (see `mastracode/sdk/src/tool-names.ts`), and\n * this listener runs on the emitted tool name after remap, so both spellings\n * need to match.\n */\nconst MEANINGFUL_TOOL_NAMES: ReadonlySet<string> = new Set([\n  // Filesystem (post-remap)\n  'view',\n  'write_file',\n  'string_replace_lsp',\n  'find_files',\n  'delete_file',\n  'file_stat',\n  'mkdir',\n  // Search\n  'search_content',\n  // Code intelligence\n  'ast_smart_edit',\n  'lsp_inspect',\n  // Sandbox\n  'execute_command',\n  'get_process_output',\n  'kill_process',\n]);\n\nexport function isMeaningfulToolName(name: string | undefined): boolean {\n  if (!name) return false;\n  if (name.startsWith(`${WORKSPACE_TOOLS_PREFIX}_`)) return true;\n  return MEANINGFUL_TOOL_NAMES.has(name);\n}\n\n/**\n * Record when a session's agent completed its first successful meaningful\n * tool call (the TTFME anchor — \"time to first meaningful exec\").\n *\n * Meaningful = a workspace tool the agent invoked itself (filesystem,\n * search, code intelligence, sandbox exec, process control). We accept any\n * tool whose name starts with the workspace prefix `mastra_workspace_` or\n * matches the post-remap mastracode tool names. Non-workspace tools (memory,\n * notification inbox, subagent, etc.) and skill-loader / preflight /\n * materializer `sandbox.executeCommand()` calls that never flow through the\n * tool layer are intentionally excluded.\n *\n * Failed tool calls (`isError === true`) don't count. Approval-denied and\n * abort-while-parked tool completions (`denied === true`) also don't count:\n * the run-engine emits `tool_end` with `isError: false` for those paths\n * because the tool didn't fail, but it also never ran, so treating them as\n * \"meaningful exec\" would re-introduce the same contamination this fix is\n * removing on the message side. The listener stays subscribed until a\n * successful qualifying end, then unsubscribes. The storage write is guarded\n * (`first_meaningful_exec_at IS NULL`), so restarts, re-materialized\n * sessions, and sessions without a source-control row are no-ops.\n */\nexport function observeSessionFirstExec(\n  session: FirstExecCaptureSession,\n  { sourceControl }: FirstExecCaptureDependencies,\n): () => void {\n  let seen = false;\n  // toolCallId -> toolName. Populated on `tool_start`, consumed on `tool_end`.\n  // Suspended entries survive `agent_end` so the resumed run can still resolve\n  // its tool name when the eventual `tool_end` arrives.\n  const toolNames = new Map<string, string>();\n  const suspended = new Set<string>();\n  const unsubscribe = session.subscribe(event => {\n    if (seen) return;\n    switch (event.type) {\n      case 'tool_start': {\n        toolNames.set(event.toolCallId, event.toolName);\n        return;\n      }\n      case 'tool_suspended': {\n        suspended.add(event.toolCallId);\n        return;\n      }\n      case 'tool_suspension_cancelled': {\n        toolNames.delete(event.toolCallId);\n        suspended.delete(event.toolCallId);\n        return;\n      }\n      case 'agent_end': {\n        // Drop any in-flight starts that will never see a matching `tool_end`\n        // on this run. Genuinely suspended calls stay so their eventual\n        // resume-time `tool_end` can still map back to a tool name. Without\n        // this, sessions that repeatedly abort or error before a qualifying\n        // completion would accumulate stale entries for the entire lifetime\n        // of the subscription.\n        for (const id of toolNames.keys()) {\n          if (!suspended.has(id)) toolNames.delete(id);\n        }\n        return;\n      }\n      case 'tool_end': {\n        const toolName = toolNames.get(event.toolCallId);\n        toolNames.delete(event.toolCallId);\n        suspended.delete(event.toolCallId);\n        if (event.isError) return;\n        if (event.denied) return;\n        if (!isMeaningfulToolName(toolName)) return;\n        seen = true;\n        unsubscribe();\n        void sourceControl.sessions\n          .markFirstMeaningfulExec({ sessionId: session.identity.getId() })\n          .catch(error => console.warn('[Factory first-exec capture] Unable to persist first exec time.', error));\n        return;\n      }\n    }\n  });\n  return unsubscribe;\n}\n"],"mappings":";;;;;;;;;AAuBA,MAAM,wCAA6C,IAAI,IAAI;CAEzD;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CAEA;CACA;CAEA;CACA;CACA;AACF,CAAC;AAED,SAAgB,qBAAqB,MAAmC;CACtE,IAAI,CAAC,MAAM,OAAO;CAClB,IAAI,KAAK,WAAW,GAAG,uBAAuB,EAAE,GAAG,OAAO;CAC1D,OAAO,sBAAsB,IAAI,IAAI;AACvC;;;;;;;;;;;;;;;;;;;;;;;AAwBA,SAAgB,wBACd,SACA,EAAE,iBACU;CACZ,IAAI,OAAO;CAIX,MAAM,4BAAY,IAAI,IAAoB;CAC1C,MAAM,4BAAY,IAAI,IAAY;CAClC,MAAM,cAAc,QAAQ,WAAU,UAAS;EAC7C,IAAI,MAAM;EACV,QAAQ,MAAM,MAAd;GACE,KAAK;IACH,UAAU,IAAI,MAAM,YAAY,MAAM,QAAQ;IAC9C;GAEF,KAAK;IACH,UAAU,IAAI,MAAM,UAAU;IAC9B;GAEF,KAAK;IACH,UAAU,OAAO,MAAM,UAAU;IACjC,UAAU,OAAO,MAAM,UAAU;IACjC;GAEF,KAAK;IAOH,KAAK,MAAM,MAAM,UAAU,KAAK,GAC9B,IAAI,CAAC,UAAU,IAAI,EAAE,GAAG,UAAU,OAAO,EAAE;IAE7C;GAEF,KAAK,YAAY;IACf,MAAM,WAAW,UAAU,IAAI,MAAM,UAAU;IAC/C,UAAU,OAAO,MAAM,UAAU;IACjC,UAAU,OAAO,MAAM,UAAU;IACjC,IAAI,MAAM,SAAS;IACnB,IAAI,MAAM,QAAQ;IAClB,IAAI,CAAC,qBAAqB,QAAQ,GAAG;IACrC,OAAO;IACP,YAAY;IACZ,cAAmB,SAChB,wBAAwB,EAAE,WAAW,QAAQ,SAAS,MAAM,EAAE,CAAC,CAAC,CAChE,OAAM,UAAS,QAAQ,KAAK,mEAAmE,KAAK,CAAC;IACxG;GACF;EACF;CACF,CAAC;CACD,OAAO;AACT"}
+{"version":3,"file":"first-exec-capture.js","names":[],"sources":["../../src/session/first-exec-capture.ts"],"sourcesContent":["import type { AgentControllerEvent } from '@mastra/core/agent-controller';\nimport { WORKSPACE_TOOLS_PREFIX } from '@mastra/core/workspace';\n\nimport type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\n\nexport interface FirstExecCaptureSession {\n  readonly identity: { getId(): string };\n  subscribe(listener: (event: AgentControllerEvent) => void): () => void;\n}\n\nexport interface FirstExecCaptureDependencies {\n  sourceControl: {\n    sessions: Pick<SourceControlStorageHandle['sessions'], 'markFirstMeaningfulExec'>;\n  };\n}\n\n/**\n * Tool names that count as \"meaningful exec\" independent of the workspace\n * prefix. The workspace tools get remapped from `mastra_workspace_*` to\n * mastracode-friendly names (see `mastracode/sdk/src/tool-names.ts`), and\n * this listener runs on the emitted tool name after remap, so both spellings\n * need to match.\n */\nconst MEANINGFUL_TOOL_NAMES: ReadonlySet<string> = new Set([\n  // Filesystem (post-remap)\n  'view',\n  'write_file',\n  'string_replace_lsp',\n  'find_files',\n  'delete_file',\n  'file_stat',\n  'mkdir',\n  // Search\n  'search_content',\n  // Code intelligence\n  'ast_smart_edit',\n  'lsp_inspect',\n  // Sandbox\n  'execute_command',\n  'get_process_output',\n  'kill_process',\n]);\n\nexport function isMeaningfulToolName(name: string | undefined): boolean {\n  if (!name) return false;\n  if (name.startsWith(`${WORKSPACE_TOOLS_PREFIX}_`)) return true;\n  return MEANINGFUL_TOOL_NAMES.has(name);\n}\n\n/**\n * Record when a session's agent completed its first successful meaningful\n * tool call (the TTFME anchor — \"time to first meaningful exec\").\n *\n * Meaningful = a workspace tool the agent invoked itself (filesystem,\n * search, code intelligence, sandbox exec, process control). We accept any\n * tool whose name starts with the workspace prefix `mastra_workspace_` or\n * matches the post-remap mastracode tool names. Non-workspace tools (memory,\n * notification inbox, subagent, etc.) and skill-loader / preflight /\n * materializer `sandbox.executeCommand()` calls that never flow through the\n * tool layer are intentionally excluded.\n *\n * Failed tool calls (`isError === true`) don't count. Approval-denied and\n * abort-while-parked tool completions (`denied === true`) also don't count:\n * the run-engine emits `tool_end` with `isError: false` for those paths\n * because the tool didn't fail, but it also never ran, so treating them as\n * \"meaningful exec\" would re-introduce the same contamination this fix is\n * removing on the message side. The listener stays subscribed until a\n * successful qualifying end, then unsubscribes. The storage write is guarded\n * (`first_meaningful_exec_at IS NULL`), so restarts, re-materialized\n * sessions, and sessions without a source-control row are no-ops.\n */\nexport function observeSessionFirstExec(\n  session: FirstExecCaptureSession,\n  { sourceControl }: FirstExecCaptureDependencies,\n): () => void {\n  let seen = false;\n  // toolCallId -> toolName. Populated on `tool_start`, consumed on `tool_end`.\n  // Suspended entries survive `agent_end` so the resumed run can still resolve\n  // its tool name when the eventual `tool_end` arrives.\n  const toolNames = new Map<string, string>();\n  const suspended = new Set<string>();\n  const unsubscribe = session.subscribe(event => {\n    if (seen) return;\n    switch (event.type) {\n      case 'tool_start': {\n        toolNames.set(event.toolCallId, event.toolName);\n        return;\n      }\n      case 'tool_suspended': {\n        suspended.add(event.toolCallId);\n        return;\n      }\n      case 'tool_suspension_cancelled': {\n        toolNames.delete(event.toolCallId);\n        suspended.delete(event.toolCallId);\n        return;\n      }\n      case 'agent_end': {\n        // Drop any in-flight starts that will never see a matching `tool_end`\n        // on this run. Genuinely suspended calls stay so their eventual\n        // resume-time `tool_end` can still map back to a tool name. Without\n        // this, sessions that repeatedly abort or error before a qualifying\n        // completion would accumulate stale entries for the entire lifetime\n        // of the subscription.\n        for (const id of toolNames.keys()) {\n          if (!suspended.has(id)) toolNames.delete(id);\n        }\n        return;\n      }\n      case 'tool_end': {\n        const toolName = toolNames.get(event.toolCallId);\n        toolNames.delete(event.toolCallId);\n        suspended.delete(event.toolCallId);\n        if (event.isError) return;\n        if (event.denied) return;\n        if (!isMeaningfulToolName(toolName)) return;\n        seen = true;\n        unsubscribe();\n        void sourceControl.sessions\n          .markFirstMeaningfulExec({ sessionId: session.identity.getId() })\n          .catch(error => console.warn('[Factory first-exec capture] Unable to persist first exec time.', error));\n        break;\n      }\n    }\n  });\n  return unsubscribe;\n}\n"],"mappings":";;;;;;;;;AAuBA,MAAM,wCAA6C,IAAI,IAAI;CAEzD;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CAEA;CACA;CAEA;CACA;CACA;AACF,CAAC;AAED,SAAgB,qBAAqB,MAAmC;CACtE,IAAI,CAAC,MAAM,OAAO;CAClB,IAAI,KAAK,WAAW,GAAG,uBAAuB,EAAE,GAAG,OAAO;CAC1D,OAAO,sBAAsB,IAAI,IAAI;AACvC;;;;;;;;;;;;;;;;;;;;;;;AAwBA,SAAgB,wBACd,SACA,EAAE,iBACU;CACZ,IAAI,OAAO;CAIX,MAAM,4BAAY,IAAI,IAAoB;CAC1C,MAAM,4BAAY,IAAI,IAAY;CAClC,MAAM,cAAc,QAAQ,WAAU,UAAS;EAC7C,IAAI,MAAM;EACV,QAAQ,MAAM,MAAd;GACE,KAAK;IACH,UAAU,IAAI,MAAM,YAAY,MAAM,QAAQ;IAC9C;GAEF,KAAK;IACH,UAAU,IAAI,MAAM,UAAU;IAC9B;GAEF,KAAK;IACH,UAAU,OAAO,MAAM,UAAU;IACjC,UAAU,OAAO,MAAM,UAAU;IACjC;GAEF,KAAK;IAOH,KAAK,MAAM,MAAM,UAAU,KAAK,GAC9B,IAAI,CAAC,UAAU,IAAI,EAAE,GAAG,UAAU,OAAO,EAAE;IAE7C;GAEF,KAAK,YAAY;IACf,MAAM,WAAW,UAAU,IAAI,MAAM,UAAU;IAC/C,UAAU,OAAO,MAAM,UAAU;IACjC,UAAU,OAAO,MAAM,UAAU;IACjC,IAAI,MAAM,SAAS;IACnB,IAAI,MAAM,QAAQ;IAClB,IAAI,CAAC,qBAAqB,QAAQ,GAAG;IACrC,OAAO;IACP,YAAY;IACZ,cAAmB,SAChB,wBAAwB,EAAE,WAAW,QAAQ,SAAS,MAAM,EAAE,CAAC,CAAC,CAChE,OAAM,UAAS,QAAQ,KAAK,mEAAmE,KAAK,CAAC;IACxG;GACF;EACF;CACF,CAAC;CACD,OAAO;AACT"}

package/dist/session/first-message-capture.js

@@ -1,4 +1,4 @@
-//#region src/session/first-message-capture.ts
+// src/session/first-message-capture.ts
 /**
 * Record when a session's agent first produced an actual conversational
 * message (the TTFI anchor — "time to first interaction").
@@ -29,7 +29,6 @@ function observeSessionFirstMessage(session, { sourceControl }) {
 	});
 	return unsubscribe;
 }
-//#endregion
 export { observeSessionFirstMessage };
 
 //# sourceMappingURL=first-message-capture.js.map

package/dist/session/live-sessions.js

@@ -1,4 +1,4 @@
-//#region src/session/live-sessions.ts
+// src/session/live-sessions.ts
 /**
 * The sessions this process has materialized, by session id.
 *
@@ -84,7 +84,6 @@ var LiveSessions = class {
 		return () => this.#parkedListeners.delete(listener);
 	}
 };
-//#endregion
 export { LiveSessions };
 
 //# sourceMappingURL=live-sessions.js.map

package/dist/session/memory-settings-hydration.js

@@ -1,5 +1,5 @@
 import { hasResolvedOrg, seedSessionOrg } from "./org-seed.js";
-//#region src/session/memory-settings-hydration.ts
+// src/session/memory-settings-hydration.ts
 /** Default thresholds mirror the TUI `/om` fallbacks. */
 const DEFAULT_OBSERVATION_THRESHOLD = 3e4;
 const DEFAULT_REFLECTION_THRESHOLD = 4e4;
@@ -20,7 +20,6 @@ async function hydrateSessionMemorySettings(session, { sourceControl }) {
 		if (!session.state.get()?.factoryOrgId) await seedSessionOrg(session, void 0);
 	}
 }
-//#endregion
 export { DEFAULT_OBSERVATION_THRESHOLD, DEFAULT_REFLECTION_THRESHOLD, hydrateSessionMemorySettings };
 
 //# sourceMappingURL=memory-settings-hydration.js.map

package/dist/session/org-seed.js

@@ -1,4 +1,4 @@
-//#region src/session/org-seed.ts
+// src/session/org-seed.ts
 /** Read the tenant org off a request context's `user` key, if there is one. */
 function readRequestContextOrgId(requestContext) {
 	if (!requestContext) return void 0;
@@ -47,7 +47,6 @@ async function seedSessionOrg(session, orgId) {
 		console.warn("[Factory org seed] Unable to record the session organization.", error);
 	}
 }
-//#endregion
 export { hasResolvedOrg, readRequestContextOrgId, seedSessionOrg };
 
 //# sourceMappingURL=org-seed.js.map

package/dist/session/reply-credential-processor.js

@@ -1,7 +1,7 @@
 import { credentialLabel, getAuthProviderId } from "../routes/provider-credentials.js";
 import { resolveCredentialStore, resolveTenantFromRequestContext } from "@mastra/code-sdk/agents/credential-resolver";
 import { normalizeLegacyProviderId } from "@mastra/code-sdk/providers/model-ids";
-//#region src/session/reply-credential-processor.ts
+// src/session/reply-credential-processor.ts
 /**
 * Stamps each assistant reply with the credential that answered it, as
 * `content.metadata.credentialLabel` ("Claude Pro/Max", "Anthropic API key")
@@ -32,7 +32,6 @@ var FactoryReplyCredentialProcessor = class {
 		return messageList;
 	}
 };
-//#endregion
 export { FactoryReplyCredentialProcessor };
 
 //# sourceMappingURL=reply-credential-processor.js.map

package/dist/session/resource-migration.js

@@ -1,6 +1,6 @@
 import { externallyAuthoredWorkItem } from "../rules/types.js";
 import { sessionStampCounts } from "./session-threads.js";
-//#region src/session/resource-migration.ts
+// src/session/resource-migration.ts
 /** Slack-started sessions live on a `slack/<thread>` branch (see `threadBranch` in the Slack integration). */
 const SLACK_SESSION_BRANCH_PREFIX = "slack/";
 /**
@@ -189,7 +189,6 @@ async function moveThread(deps, thread, resourceId) {
 		}
 	});
 }
-//#endregion
 export { migrateSessionResources, privatizeOwnerResourceSessions, sessionMemoryResource };
 
 //# sourceMappingURL=resource-migration.js.map

package/dist/session/run-audit.js

@@ -1,5 +1,5 @@
 import { z } from "zod";
-//#region src/session/run-audit.ts
+// src/session/run-audit.ts
 const FACTORY_OPEN_RUNS_SETTING = "factoryOpenRuns";
 const factoryOpenRunSchema = z.object({
 	kickoffId: z.string(),
@@ -209,7 +209,6 @@ function observeSessionRunEnd(session, { audit }) {
 		serializeRunAudit(session, () => recordRunEnds(session, audit, event.reason, void 0, turn));
 	});
 }
-//#endregion
 export { FACTORY_OPEN_RUNS_SETTING, FACTORY_OPEN_RUN_STALE_MS, FACTORY_RUN_USAGE_STEPS_JSON_BUDGET, heartbeatSessionOpenRun, isOpenRunLiveElsewhere, listSessionOpenRuns, observeSessionRunEnd, recordSessionRunStart, waitForSessionRunAudit };
 
 //# sourceMappingURL=run-audit.js.map

package/dist/session/session-threads.js

@@ -1,4 +1,4 @@
-//#region src/session/session-threads.ts
+// src/session/session-threads.ts
 /**
 * The one memory resource a Factory session runs under. A Slack session uses
 * its Factory's, or its sender's for a DM; a side session uses its Factory's,
@@ -91,7 +91,6 @@ async function listFactorySessionThreads(controller, session, runs) {
 	for (const thread of [...owned, ...legacy]) threads.set(thread.id, thread);
 	return [...threads.values()];
 }
-//#endregion
 export { isRunBound, isWorkerSession, listFactorySessionThreads, memoryResourceOf, sessionMemoryResourceId, sessionStampCounts, sessionThreadsToMove, userSessionResourceFor };
 
 //# sourceMappingURL=session-threads.js.map

package/dist/session/session-title.js

@@ -1,4 +1,4 @@
-//#region src/session/session-title.ts
+// src/session/session-title.ts
 const MAX_SESSION_TITLE_LENGTH = 80;
 /**
 * The one shape a session row's title may take, wherever it comes from — typed
@@ -8,7 +8,6 @@ const MAX_SESSION_TITLE_LENGTH = 80;
 function normalizeSessionTitle(title) {
 	return [...title.replace(/\s+/g, " ").trim()].slice(0, MAX_SESSION_TITLE_LENGTH).join("").trimEnd() || null;
 }
-//#endregion
 export { normalizeSessionTitle };
 
 //# sourceMappingURL=session-title.js.map

package/dist/session/shell-commands.js

@@ -1,4 +1,4 @@
-//#region src/session/shell-commands.ts
+// src/session/shell-commands.ts
 /** Two tool observers read the same `gh pr create`, so the reading lives here rather than once per observer. */
 const GH_PR_CREATE_RE = /(?:^|\n|;|&&|\|\|)\s*gh\s+pr\s+create(?:\s|$)/;
 /** Heredoc bodies dropped, so prose inside a document never reads as a command. */
@@ -19,7 +19,6 @@ function executableCommand(command) {
 function runsPullRequestCreate(command) {
 	return GH_PR_CREATE_RE.test(executableCommand(command));
 }
-//#endregion
 export { executableCommand, runsPullRequestCreate };
 
 //# sourceMappingURL=shell-commands.js.map