fix(mothership): store the recovery authoring marker only while Projects are on

Earlier builds parse recovery config strictly and skip recovery on an unknown
key. Only Project authoring reads the marker, so flag-off turns no longer
write it and stay recoverable across a rollback.

Author: waleedlatif1

apps/sim/lib/mothership/chat/post.ts

@@ -85,7 +85,7 @@ import { TraceAttr } from '@/lib/mothership/generated/trace-attributes-v1'
 import { TraceSpan } from '@/lib/mothership/generated/trace-spans-v1'
 import { resolveMothershipModelSettings } from '@/lib/mothership/model-options'
 import { createBadRequestResponse, createUnauthorizedResponse } from '@/lib/mothership/request/http'
-import { RESOURCE_AUTHORING_VERSION } from '@/lib/mothership/request/lifecycle/recovery-config'
+import { durableResourceAuthoringVersion } from '@/lib/mothership/request/lifecycle/recovery-config'
 import { createSSEStream, SSE_RESPONSE_HEADERS } from '@/lib/mothership/request/lifecycle/start'
 import { startCopilotOtelRoot, withCopilotSpan } from '@/lib/mothership/request/otel'
 import {
@@ -1406,6 +1406,9 @@ export async function handleUnifiedChatPost(req: NextRequest) {
         if (!lease || !sendClaim?.claimToken || sendClaim.storageMethod !== 'database') {
           throw new Error('Chat admission requires its controller and durable send claim')
         }
+        const resourceAuthoringVersion = await durableResourceAuthoringVersion(
+          executionContext.copilotResourceAdmission !== undefined
+        )
         admittedRun = await admitChatTurn.execute({
           principal: {
             kind: 'session',
@@ -1429,7 +1432,7 @@ export async function handleUnifiedChatPost(req: NextRequest) {
             },
             recovery: {
               kind: 'interactive_stream',
-              resourceAuthoringVersion: RESOURCE_AUTHORING_VERSION,
+              resourceAuthoringVersion,
               request: { ...requestPayload, messageId: userMessageId, chatId: actualChatId },
               goRoute: branch.goRoute,
               clientToolPickupExpected,

apps/sim/lib/mothership/request/lifecycle/recovery-config.test.ts

@@ -1,5 +1,12 @@
-import { describe, expect, it } from 'vitest'
-import { StreamRecoveryConfigSchema } from '@/lib/mothership/request/lifecycle/recovery-config'
+import { featureFlagsMock, featureFlagsMockFns } from '@sim/testing/mocks/feature-flags.mock'
+import { describe, expect, it, vi } from 'vitest'
+import { createCopilotResourceAdmission } from '@/lib/mothership/auth/application-delegation'
+import {
+  StreamRecoveryConfigSchema,
+  streamRecoveryConfig,
+} from '@/lib/mothership/request/lifecycle/recovery-config'
+
+vi.mock('@/lib/core/config/feature-flags', () => featureFlagsMock)
 
 const identity = {
   userId: 'actor',
@@ -84,3 +91,28 @@ it('preserves the explicit Plan wire mode on recovery', () => {
       .mode
   ).toBe('plan')
 })
+
+describe('recovery marker written by an admitted turn', () => {
+  const options = {
+    interactive: true,
+    userId: identity.userId,
+    chatId: identity.chatId,
+    goRoute: '/api/mothership',
+    copilotResourceAdmission: createCopilotResourceAdmission({
+      userId: identity.userId,
+      invocation: { kind: 'chat', chatId: identity.chatId },
+    }),
+  }
+
+  it('stays off a recovery config older builds must still parse while Projects are off', async () => {
+    featureFlagsMockFns.mockIsFeatureEnabled.mockResolvedValue(false)
+    const recovery = await streamRecoveryConfig(options, workspaceRequest)
+    expect(recovery).not.toHaveProperty('resourceAuthoringVersion')
+  })
+
+  it('restores authoring admission on recovery while Projects are on', async () => {
+    featureFlagsMockFns.mockIsFeatureEnabled.mockImplementation(async (flag) => flag === 'projects')
+    const recovery = await streamRecoveryConfig(options, workspaceRequest)
+    expect(recovery?.resourceAuthoringVersion).toBe(1)
+  })
+})

apps/sim/lib/mothership/request/lifecycle/recovery-config.ts

@@ -3,6 +3,7 @@ import { hasCopilotResourceAdmission } from '@/lib/mothership/auth/application-d
 import { COPILOT_REQUEST_MODES } from '@/lib/mothership/constants'
 import { ChatPayloadSchema } from '@/lib/mothership/generated/protocol'
 import type { CopilotLifecycleOptions } from '@/lib/mothership/request/lifecycle/run'
+import { isProjectsEnabled } from '@/lib/projects/rollout.server'
 
 export const BillingAdmissionSchema = z
   .object({
@@ -26,6 +27,17 @@ export const DurableChatRequestSchema = ChatPayloadSchema.safeExtend({
  */
 export const RESOURCE_AUTHORING_VERSION = 1
 
+/**
+ * The marker an admitted turn stores for recovery. Builds before it parse recovery strictly and
+ * would refuse to recover the run, and only Project authoring reads it, so it is written only
+ * while Projects are on.
+ */
+export async function durableResourceAuthoringVersion(
+  admitted: boolean
+): Promise<typeof RESOURCE_AUTHORING_VERSION | undefined> {
+  return admitted && (await isProjectsEnabled()) ? RESOURCE_AUTHORING_VERSION : undefined
+}
+
 export const StreamRecoveryConfigSchema = z
   .object({
     kind: z.literal('interactive_stream'),
@@ -49,26 +61,27 @@ export const StreamRecoveryConfigSchema = z
     }
   )
 
-export function streamRecoveryConfig(
+export async function streamRecoveryConfig(
   options: CopilotLifecycleOptions,
   request: Record<string, unknown>
 ) {
   if (options.interactive !== true) return undefined
+  const resourceAuthoringVersion = await durableResourceAuthoringVersion(
+    hasCopilotResourceAdmission({
+      ...options,
+      ...options.executionContext,
+      copilotToolExecution: true,
+      copilotResourceAdmission:
+        options.executionContext?.copilotResourceAdmission ?? options.copilotResourceAdmission,
+    })
+  )
   return StreamRecoveryConfigSchema.parse({
     kind: 'interactive_stream',
     request,
     goRoute: options.goRoute ?? '/api/copilot',
     clientToolPickupExpected: options.clientToolPickupExpected ?? true,
     userTimezone: options.executionContext?.userTimezone,
     requestMode: options.executionContext?.requestMode,
-    resourceAuthoringVersion: hasCopilotResourceAdmission({
-      ...options,
-      ...options.executionContext,
-      copilotToolExecution: true,
-      copilotResourceAdmission:
-        options.executionContext?.copilotResourceAdmission ?? options.copilotResourceAdmission,
-    })
-      ? RESOURCE_AUTHORING_VERSION
-      : undefined,
+    ...(resourceAuthoringVersion ? { resourceAuthoringVersion } : {}),
   })
 }

apps/sim/lib/mothership/request/lifecycle/start.ts

@@ -339,7 +339,7 @@ export function createSSEStream(params: StreamingOrchestrationParams): ReadableS
             ...(params.admittedRun?.requestContext ?? {}),
             requestId,
             controllerToken: lease?.value,
-            recovery: streamRecoveryConfig(orchestrateOptions, requestPayload),
+            recovery: await streamRecoveryConfig(orchestrateOptions, requestPayload),
           }
           try {
             if (chatId && !orchestrateOptions.recovery) {