@mastra/memory 1.26.1-alpha.3 → 1.26.1-alpha.6

package/dist/{src-CTQrRb5X.cjs → src-B2WSEEmS.cjs}

@@ -51,8 +51,8 @@ let tokenx = require("tokenx");
 let crypto$1 = require("crypto");
 let _mastra_core_storage = require("@mastra/core/storage");
 let async_hooks = require("async_hooks");
-let image_size = require("image-size");
-image_size = __toESM$1(image_size, 1);
+let probe_image_size_sync_js = require("probe-image-size/sync.js");
+probe_image_size_sync_js = __toESM$1(probe_image_size_sync_js, 1);
 let _mastra_core_tools = require("@mastra/core/tools");
 let _mastra_core_schema = require("@mastra/core/schema");
 let _mastra_core_error = require("@mastra/core/error");
@@ -15635,6 +15635,16 @@ function sanitizeToolResultValue(value, seen = /* @__PURE__ */ new WeakMap()) {
 	}
 	return sanitizedObject;
 }
+/**
+* Serializes a tool result without truncating it.
+*
+* Token accounting must see the full result: the truncation applied by
+* {@link formatToolResultForObserver} exists to bound what the Observer LLM reads,
+* not to describe what the agent's provider context actually holds.
+*/
+function serializeToolResultForTokenCounting(value) {
+	return stringifyToolResult(value);
+}
 function stringifyToolResult(value) {
 	if (typeof value === "string") return value;
 	const sanitized = sanitizeToolResultValue(value);
@@ -17356,6 +17366,42 @@ var ObserverRunner = class {
 	}
 };
 //#endregion
+//#region src/processors/observational-memory/measure-image-buffer.ts
+/**
+* Synchronous image dimension lookup for in-memory image buffers.
+*
+* Uses `probe-image-size`'s sync parsers rather than `image-size`, which has unfixed
+* denial-of-service advisories (GHSA-w3rx-r6r6-pgpr / CVE-2025-71330 and
+* GHSA-5p2g-fcmc-qvqq) affecting every published version, on an archived repository
+* with no fixed release coming. A malformed 32-byte ICNS buffer was enough to hang the
+* parse loop and exhaust the heap, and image bytes reaching agent memory are untrusted.
+*
+* `probe-image-size` covers the formats models actually accept (PNG, JPEG, WebP, GIF,
+* AVIF, BMP, ICO, PSD, SVG, TIFF). Anything else returns `undefined`, which callers
+* already handle as "dimensions unknown".
+*/
+const probeBuffer = probe_image_size_sync_js.default;
+/**
+* Read the pixel dimensions of an image buffer.
+*
+* @returns The dimensions, or `undefined` if the buffer isn't a recognized image.
+*/
+function measureImageBuffer(buffer) {
+	let probed;
+	try {
+		probed = probeBuffer(buffer);
+	} catch {
+		return;
+	}
+	if (!probed) return;
+	const { width, height } = probed;
+	if (typeof width !== "number" || !Number.isFinite(width) || typeof height !== "number" || !Number.isFinite(height)) return;
+	return {
+		width,
+		height
+	};
+}
+//#endregion
 //#region src/processors/observational-memory/token-counter.ts
 const IMAGE_FILE_EXTENSIONS = /* @__PURE__ */ new Set([
 	"png",
@@ -17662,26 +17708,23 @@ function resolveImageDimensions(part) {
 		width,
 		height
 	};
-	try {
-		const measured = (0, image_size.default)(buffer);
-		const measuredWidth = getFiniteNumber(measured.width);
-		const measuredHeight = getFiniteNumber(measured.height);
-		if (!measuredWidth || !measuredHeight) return {
-			width,
-			height
-		};
-		const resolved = {
-			width: width ?? measuredWidth,
-			height: height ?? measuredHeight
-		};
-		persistImageDimensions(part, resolved);
-		return resolved;
-	} catch {
-		return {
-			width,
-			height
-		};
-	}
+	const measured = measureImageBuffer(buffer);
+	if (!measured) return {
+		width,
+		height
+	};
+	const measuredWidth = getFiniteNumber(measured.width);
+	const measuredHeight = getFiniteNumber(measured.height);
+	if (!measuredWidth || !measuredHeight) return {
+		width,
+		height
+	};
+	const resolved = {
+		width: width ?? measuredWidth,
+		height: height ?? measuredHeight
+	};
+	persistImageDimensions(part, resolved);
+	return resolved;
 }
 function getBase64Size(base64) {
 	const sanitized = base64.replace(/\s+/g, "");
@@ -18240,7 +18283,7 @@ var TokenCounter = class TokenCounter {
 		let tokens = 0;
 		const cacheParts = [];
 		const countJsonContentPart = (contentPart) => {
-			const formatted = formatToolResultForObserver(contentPart);
+			const formatted = serializeToolResultForTokenCounting(contentPart);
 			tokens += this.countString(formatted);
 			cacheParts.push({
 				type: "json",
@@ -18603,7 +18646,7 @@ var TokenCounter = class TokenCounter {
 					const contentTokens = this.countMultimodalToolResultContent(part, resultForCounting);
 					if (contentTokens !== void 0) tokens += contentTokens;
 					else {
-						const formattedResult = formatToolResultForObserver(resultForCounting);
+						const formattedResult = serializeToolResultForTokenCounting(resultForCounting);
 						tokens += this.readOrPersistPartEstimate(part, usingStoredModelOutput ? "tool-result-model-output-json" : "tool-result-json", formattedResult);
 					}
 					if (typeof resultForCounting !== "string") overheadDelta -= 12;
@@ -21392,7 +21435,7 @@ var SyncObservationStrategy = class extends ObservationStrategy {
 			});
 			await this.storage.updateThread({
 				id: threadId,
-				title: shouldUpdateThreadTitle ? newTitle : thread.title ?? "",
+				...shouldUpdateThreadTitle ? { title: newTitle } : {},
 				metadata: newMetadata
 			});
 			if (shouldUpdateThreadTitle) threadUpdateMarker = createThreadUpdateMarker({
@@ -21584,7 +21627,7 @@ var AsyncBufferObservationStrategy = class extends ObservationStrategy {
 				});
 				await this.storage.updateThread({
 					id: threadId,
-					title: shouldUpdateThreadTitle ? newTitle : thread.title ?? "",
+					...shouldUpdateThreadTitle ? { title: newTitle } : {},
 					metadata: newMetadata
 				});
 				if (shouldUpdateThreadTitle) {
@@ -21929,7 +21972,7 @@ var ResourceScopedObservationStrategy = class extends ObservationStrategy {
 				});
 				await this.storage.updateThread({
 					id: update.threadId,
-					title: shouldUpdateThreadTitle ? newTitle : thread.title ?? "",
+					...shouldUpdateThreadTitle ? { title: newTitle } : {},
 					metadata: newMetadata
 				});
 				if (shouldUpdateThreadTitle) threadUpdateMarkers.push(createThreadUpdateMarker({
@@ -22872,7 +22915,6 @@ async function persistThreadExtractedValues(storage, extractors, threadId, value
 	});
 	await storage.updateThread({
 		id: threadId,
-		title: thread.title ?? "",
 		metadata: newMetadata
 	});
 }
@@ -25844,7 +25886,7 @@ ${formattedMessages}
 				const shouldUpdateThreadTitle = !!newTitle && newTitle.length >= 3 && newTitle !== oldTitle;
 				await this.storage.updateThread({
 					id: threadId,
-					title: shouldUpdateThreadTitle ? newTitle : thread.title ?? "",
+					...shouldUpdateThreadTitle ? { title: newTitle } : {},
 					metadata: newMetadata
 				});
 			}
@@ -26062,7 +26104,6 @@ ${formattedMessages}
 				});
 				await this.storage.updateThread({
 					id: threadId,
-					title: thread.title ?? "",
 					metadata: newMetadata
 				});
 			}
@@ -27208,7 +27249,6 @@ var Memory = class extends _mastra_core_memory.MastraMemory {
 					if (!thread) throw new Error(`Thread ${threadId} not found`);
 					await memoryStore.updateThread({
 						id: threadId,
-						title: thread.title || "",
 						metadata: {
 							...thread.metadata,
 							workingMemory
@@ -27297,7 +27337,6 @@ ${workingMemory}`;
 				if (!thread) throw new Error(`Thread ${threadId} not found`);
 				await memoryStore.updateThread({
 					id: threadId,
-					title: thread.title || "",
 					metadata: {
 						...thread.metadata,
 						workingMemory
@@ -28867,4 +28906,4 @@ Object.defineProperty(exports, "wrapInObservationGroup", {
 	}
 });
 
-//# sourceMappingURL=src-CTQrRb5X.cjs.map
+//# sourceMappingURL=src-B2WSEEmS.cjs.map