@mastra/memory 1.26.1-alpha.3 → 1.26.1-alpha.6

package/dist/{src-MScpLVRh.js → src-B_n15_Xg.js}

@@ -19,7 +19,7 @@ import { estimateTokenCount } from "tokenx";
 import { createHash, randomBytes, randomUUID } from "crypto";
 import { InMemoryStore } from "@mastra/core/storage";
 import { AsyncLocalStorage } from "async_hooks";
-import imageSize from "image-size";
+import probeImageSizeSync from "probe-image-size/sync.js";
 import { createTool } from "@mastra/core/tools";
 import { isStandardSchemaWithJSON as isStandardSchemaWithJSON$1, toStandardSchema as toStandardSchema$1 } from "@mastra/core/schema";
 import { ErrorCategory, ErrorDomain, MastraError } from "@mastra/core/error";
@@ -15614,6 +15614,16 @@ function sanitizeToolResultValue(value, seen = /* @__PURE__ */ new WeakMap()) {
 	}
 	return sanitizedObject;
 }
+/**
+* Serializes a tool result without truncating it.
+*
+* Token accounting must see the full result: the truncation applied by
+* {@link formatToolResultForObserver} exists to bound what the Observer LLM reads,
+* not to describe what the agent's provider context actually holds.
+*/
+function serializeToolResultForTokenCounting(value) {
+	return stringifyToolResult(value);
+}
 function stringifyToolResult(value) {
 	if (typeof value === "string") return value;
 	const sanitized = sanitizeToolResultValue(value);
@@ -17335,6 +17345,42 @@ var ObserverRunner = class {
 	}
 };
 //#endregion
+//#region src/processors/observational-memory/measure-image-buffer.ts
+/**
+* Synchronous image dimension lookup for in-memory image buffers.
+*
+* Uses `probe-image-size`'s sync parsers rather than `image-size`, which has unfixed
+* denial-of-service advisories (GHSA-w3rx-r6r6-pgpr / CVE-2025-71330 and
+* GHSA-5p2g-fcmc-qvqq) affecting every published version, on an archived repository
+* with no fixed release coming. A malformed 32-byte ICNS buffer was enough to hang the
+* parse loop and exhaust the heap, and image bytes reaching agent memory are untrusted.
+*
+* `probe-image-size` covers the formats models actually accept (PNG, JPEG, WebP, GIF,
+* AVIF, BMP, ICO, PSD, SVG, TIFF). Anything else returns `undefined`, which callers
+* already handle as "dimensions unknown".
+*/
+const probeBuffer = probeImageSizeSync;
+/**
+* Read the pixel dimensions of an image buffer.
+*
+* @returns The dimensions, or `undefined` if the buffer isn't a recognized image.
+*/
+function measureImageBuffer(buffer) {
+	let probed;
+	try {
+		probed = probeBuffer(buffer);
+	} catch {
+		return;
+	}
+	if (!probed) return;
+	const { width, height } = probed;
+	if (typeof width !== "number" || !Number.isFinite(width) || typeof height !== "number" || !Number.isFinite(height)) return;
+	return {
+		width,
+		height
+	};
+}
+//#endregion
 //#region src/processors/observational-memory/token-counter.ts
 const IMAGE_FILE_EXTENSIONS = /* @__PURE__ */ new Set([
 	"png",
@@ -17641,26 +17687,23 @@ function resolveImageDimensions(part) {
 		width,
 		height
 	};
-	try {
-		const measured = imageSize(buffer);
-		const measuredWidth = getFiniteNumber(measured.width);
-		const measuredHeight = getFiniteNumber(measured.height);
-		if (!measuredWidth || !measuredHeight) return {
-			width,
-			height
-		};
-		const resolved = {
-			width: width ?? measuredWidth,
-			height: height ?? measuredHeight
-		};
-		persistImageDimensions(part, resolved);
-		return resolved;
-	} catch {
-		return {
-			width,
-			height
-		};
-	}
+	const measured = measureImageBuffer(buffer);
+	if (!measured) return {
+		width,
+		height
+	};
+	const measuredWidth = getFiniteNumber(measured.width);
+	const measuredHeight = getFiniteNumber(measured.height);
+	if (!measuredWidth || !measuredHeight) return {
+		width,
+		height
+	};
+	const resolved = {
+		width: width ?? measuredWidth,
+		height: height ?? measuredHeight
+	};
+	persistImageDimensions(part, resolved);
+	return resolved;
 }
 function getBase64Size(base64) {
 	const sanitized = base64.replace(/\s+/g, "");
@@ -18219,7 +18262,7 @@ var TokenCounter = class TokenCounter {
 		let tokens = 0;
 		const cacheParts = [];
 		const countJsonContentPart = (contentPart) => {
-			const formatted = formatToolResultForObserver(contentPart);
+			const formatted = serializeToolResultForTokenCounting(contentPart);
 			tokens += this.countString(formatted);
 			cacheParts.push({
 				type: "json",
@@ -18582,7 +18625,7 @@ var TokenCounter = class TokenCounter {
 					const contentTokens = this.countMultimodalToolResultContent(part, resultForCounting);
 					if (contentTokens !== void 0) tokens += contentTokens;
 					else {
-						const formattedResult = formatToolResultForObserver(resultForCounting);
+						const formattedResult = serializeToolResultForTokenCounting(resultForCounting);
 						tokens += this.readOrPersistPartEstimate(part, usingStoredModelOutput ? "tool-result-model-output-json" : "tool-result-json", formattedResult);
 					}
 					if (typeof resultForCounting !== "string") overheadDelta -= 12;
@@ -21371,7 +21414,7 @@ var SyncObservationStrategy = class extends ObservationStrategy {
 			});
 			await this.storage.updateThread({
 				id: threadId,
-				title: shouldUpdateThreadTitle ? newTitle : thread.title ?? "",
+				...shouldUpdateThreadTitle ? { title: newTitle } : {},
 				metadata: newMetadata
 			});
 			if (shouldUpdateThreadTitle) threadUpdateMarker = createThreadUpdateMarker({
@@ -21563,7 +21606,7 @@ var AsyncBufferObservationStrategy = class extends ObservationStrategy {
 				});
 				await this.storage.updateThread({
 					id: threadId,
-					title: shouldUpdateThreadTitle ? newTitle : thread.title ?? "",
+					...shouldUpdateThreadTitle ? { title: newTitle } : {},
 					metadata: newMetadata
 				});
 				if (shouldUpdateThreadTitle) {
@@ -21908,7 +21951,7 @@ var ResourceScopedObservationStrategy = class extends ObservationStrategy {
 				});
 				await this.storage.updateThread({
 					id: update.threadId,
-					title: shouldUpdateThreadTitle ? newTitle : thread.title ?? "",
+					...shouldUpdateThreadTitle ? { title: newTitle } : {},
 					metadata: newMetadata
 				});
 				if (shouldUpdateThreadTitle) threadUpdateMarkers.push(createThreadUpdateMarker({
@@ -22851,7 +22894,6 @@ async function persistThreadExtractedValues(storage, extractors, threadId, value
 	});
 	await storage.updateThread({
 		id: threadId,
-		title: thread.title ?? "",
 		metadata: newMetadata
 	});
 }
@@ -25823,7 +25865,7 @@ ${formattedMessages}
 				const shouldUpdateThreadTitle = !!newTitle && newTitle.length >= 3 && newTitle !== oldTitle;
 				await this.storage.updateThread({
 					id: threadId,
-					title: shouldUpdateThreadTitle ? newTitle : thread.title ?? "",
+					...shouldUpdateThreadTitle ? { title: newTitle } : {},
 					metadata: newMetadata
 				});
 			}
@@ -26041,7 +26083,6 @@ ${formattedMessages}
 				});
 				await this.storage.updateThread({
 					id: threadId,
-					title: thread.title ?? "",
 					metadata: newMetadata
 				});
 			}
@@ -27187,7 +27228,6 @@ var Memory = class extends MastraMemory {
 					if (!thread) throw new Error(`Thread ${threadId} not found`);
 					await memoryStore.updateThread({
 						id: threadId,
-						title: thread.title || "",
 						metadata: {
 							...thread.metadata,
 							workingMemory
@@ -27276,7 +27316,6 @@ ${workingMemory}`;
 				if (!thread) throw new Error(`Thread ${threadId} not found`);
 				await memoryStore.updateThread({
 					id: threadId,
-					title: thread.title || "",
 					metadata: {
 						...thread.metadata,
 						workingMemory
@@ -28613,4 +28652,4 @@ Notes:
 //#endregion
 export { extractCurrentTask as A, OBSERVATION_CONTEXT_INSTRUCTIONS as B, WorkingMemoryExtractor as C, OBSERVER_SYSTEM_PROMPT as D, TokenCounter as E, injectAnchorIds as F, OBSERVATION_CONTINUATION_HINT as H, parseAnchorId as I, stripEphemeralAnchorIds as L, hasCurrentTaskSection as M, optimizeObservationsForContext as N, buildObserverPrompt as O, parseObserverOutput as P, Extractor as R, deepMergeWorkingMemory as S, summarizeConversation as T, OBSERVATION_CONTEXT_PROMPT as V, reconcileObservationGroupsFromReflection as _, extractWorkingMemoryContent as a, wrapInObservationGroup as b, WORKING_MEMORY_STATE_ID as c, getObservationsAsOf as d, ObservationalMemoryProcessor as f, parseObservationGroups as g, deriveObservationGroupProvenance as h, WorkingMemory as i, formatMessagesForObserver as j, buildObserverSystemPrompt as k, WORKING_MEMORY_STATE_PROCESSOR_ID as l, combineObservationGroupRanges as m, MessageHistory$1 as n, extractWorkingMemoryTags as o, ObservationalMemory as p, SemanticRecall as r, removeWorkingMemoryTags as s, Memory as t, WorkingMemoryStateProcessor as u, renderObservationGroupsForReflection as v, SUMMARIZE_THREAD_DEFAULTS as w, ModelByInputTokens as x, stripObservationGroups as y, OBSERVATIONAL_MEMORY_DEFAULTS as z };
 
-//# sourceMappingURL=src-MScpLVRh.js.map
+//# sourceMappingURL=src-B_n15_Xg.js.map