Mastra 1.59.0 makes automatic agent runs opt-in and renames CostGuard to TokenCostControl with per-user and per-org cost scopes

GitHub (mastra-ai/mastra)·medium signalXBlueskyLinkedInCopy link

Mastra (27,240 stars) shipped @mastra/core 1.59.0 on Aug 16, 2026 with two breaking changes: Factory automatic agent runs now default to off (autoRunEnabled), with rule-proposed runs parked as 'proposed' decisions until approved, and CostGuardProcessor becomes TokenCostControl with warnAtPercent, per-request maxCost functions, and user/organization/session cost scopes. It also adds Agent.listActiveThreadRuns() for cheap in-flight run introspection and an indexed redaction style ([APIKEY_1] instead of a blanket [REDACTED]). Defaulting autonomous runs to off is the notable signal — a framework walking back an auto-execute default.