chore(deps): bump @mastra/core from 1.55.0 to 1.59.0

[dependabot]

Bumps @mastra/core from 1.55.0 to 1.59.0.

Release notes

Sourced from @​mastra/core's releases.

August 14, 2026

Highlights

TokenCostControl (renamed from CostGuard) with richer budgeting

CostGuardProcessor is now TokenCostControl (id: 'token-cost-control') with better diagnostics/reliability and new budgeting options like warnAtPercent, per-request maxCost functions, new cost scopes (user/organization/session), and optional per-model/provider breakdowns.

Active run introspection for agents/controllers (core, server, client-js)

New Agent.listActiveThreadRuns() / AgentController.listActiveThreadRuns() plus corresponding Server + JS client APIs let you cheaply list in-flight runs from in-memory tracking—ideal for polling activity indicators without creating sessions.

Observability fixes: external-parent traces now show up as trace roots in Studio

Tracing bridges (OTel + Datadog) now mark whether a span’s parent is external vs Mastra, fixing missing traces when runs start under an external parent so they correctly appear as trace roots in Mastra Studio.

Safer/more useful redaction with indexed tokens

SensitiveDataFilter gains redactionStyle: 'indexed', producing stable per-value tokens (e.g. [APIKEY_1]) instead of collapsing all sensitive values to [REDACTED], improving debugging while preserving secrecy.

Memory recall continuation for oversized message parts

The Observational Memory recall tool now supports continuation via nextCharOffset, allowing large message parts to be retrieved across multiple calls instead of repeatedly returning the same truncated prefix.

Breaking Changes

• Factory: automatic agent runs are now opt-in per Factory (autoRunEnabled defaults off on upgrade); rules proposing runs now park them as proposed decisions until approved.
• CostGuardProcessor renamed to TokenCostControl (deprecated aliases remain for now, but will be removed in a future major version).

Changelog

@​mastra/core@1.59.0

Minor Changes

• Fixed traces that start under an external parent span not appearing in Mastra Studio. Resumed agent and workflow runs keep their link to the suspended run's trace. (#20499)

• Renamed CostGuardProcessor to TokenCostControl, improved its reliability and diagnostics, and added new budgeting options. (#21372)

  Rename

  • CostGuardProcessor is now TokenCostControl with processor id 'token-cost-control'. The CostGuardProcessor export (and the CostGuardOptions, CostGuardUsage, CostGuardBreakdownEntry, CostGuardTripwireMetadata, and CostGuardViolationDetail types) remains available as a deprecated alias for the same class and will be removed in a future major version.

  Improvements

  • Each cost check now issues fewer queries against observability storage.
  • Diagnostics now go through the Mastra logger, and failed cost queries now log diagnostics and allow the request to continue instead of failing silently.
  • With the warn strategy, warnings and the onViolation callback now fire at most once per request instead of on every step.
  • Violation messages no longer contain float precision artifacts (e.g. 0.30000000000000004 now renders as 0.3).

  New options

  • warnAtPercent: soft threshold that warns (without blocking) when cost reaches a percentage of the limit.
  • maxCost now also accepts a function of RequestContext for per-tier or per-user budgets.
  • New scopes user, organization, and session track cumulative cost per userId, organizationId, and sessionId (read from the matching RequestContext keys; traces must carry the matching span metadata).
  • includeBreakdown: attaches a per-provider/model cost breakdown to violations.

... (truncated)

Commits

• c5702d3 chore: version - exit prerelease mode
• 7dafa4f fix(core): ship .d.ts for @​mastra/core/test-utils/llm-mock (#21427)
• 32e1b5f chore: version packages (alpha) (#21455)
• a40f915 fix(core): preserve actionable API errors (#21449)
• 59d8898 fix(core): allow file-based agents to disable the default workspace (#21378)
• 7961b8e chore: version packages (alpha) (#21418)
• 79dd7c2 fix(core): release completed foreground processes (#21438)
• cac7b19 chore: regenerate providers and docs [skip ci]
• b9a28ec feat(platform-workspace): send acting user header (#20754)
• be31796 fix(factory): keep workspace activity synchronized (#21353)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #61.