@mastra/code-sdk 0.0.0-client-tool-results-20260912062135

package/dist/agents/workspace.d.ts

@@ -0,0 +1,32 @@
+import type { ToolsInput } from '@mastra/core/agent';
+import type { Mastra } from '@mastra/core/mastra';
+import type { RequestContext } from '@mastra/core/request-context';
+import { Workspace, LocalFilesystem, LocalSandbox } from '@mastra/core/workspace';
+import type { SkillSource } from '@mastra/core/workspace';
+export declare function buildSkillPaths(projectPath: string, configDir: string, homeDir?: string, pluginSkillPaths?: string[]): string[];
+export interface WorkspaceSkillExtension {
+    /** Distinguishes extended workspaces from the default resolver cache. */
+    id: string;
+    /** Additional read-only skill roots prepended to normal project/global skill roots. */
+    paths: string[];
+    /** Compose the additional roots with the workspace's normal skill source. */
+    createSource: (fallback: SkillSource, fallbackSkillRoots: string[]) => SkillSource;
+}
+export declare function getDynamicWorkspace({ requestContext, mastra, skillExtension, }: {
+    requestContext: RequestContext;
+    mastra?: Mastra;
+    skillExtension?: WorkspaceSkillExtension;
+}): Promise<Workspace<LocalFilesystem, LocalSandbox, undefined>>;
+/**
+ * Resolver for the agent's `goal.tools` config. Builds the request's workspace
+ * (same per-request resolution as the agent's own tools) and returns only the
+ * read-only verification subset, remapped to mastracode's tool names (`view`,
+ * `search_content`, etc.). Returns `undefined` when no workspace can be resolved
+ * (e.g. no project path), keeping the default judge text-only rather than
+ * throwing inside the goal step.
+ */
+export declare function getGoalJudgeTools({ requestContext, mastra, }: {
+    requestContext: RequestContext;
+    mastra?: Mastra;
+}): Promise<ToolsInput | undefined>;
+//# sourceMappingURL=workspace.d.ts.map

package/dist/agents/workspace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../../src/agents/workspace.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAwB,MAAM,wBAAwB,CAAC;AACxG,OAAO,KAAK,EAAa,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAyGrE,wBAAgB,eAAe,CAC7B,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,OAAO,SAAe,EACtB,gBAAgB,GAAE,MAAM,EAAO,GAC9B,MAAM,EAAE,CA0BV;AAED,MAAM,WAAW,uBAAuB;IACtC,yEAAyE;IACzE,EAAE,EAAE,MAAM,CAAC;IACX,uFAAuF;IACvF,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,6EAA6E;IAC7E,YAAY,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,EAAE,KAAK,WAAW,CAAC;CACpF;AA2BD,wBAAsB,mBAAmB,CAAC,EACxC,cAAc,EACd,MAAM,EACN,cAAc,GACf,EAAE;IACD,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,uBAAuB,CAAC;CAC1C,gEA0EA;AAED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CAAC,EACtC,cAAc,EACd,MAAM,GACP,EAAE;IACD,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAclC"}

package/dist/agents/workspace.js

@@ -0,0 +1,208 @@
+import "../constants.js";
+import { loadSettings, resolveLspSetting } from "../onboarding/settings.js";
+import { getPlansDir } from "../utils/plans.js";
+import { isPathWithinRoot } from "../utils/path-security.js";
+import { GOAL_JUDGE_READONLY_TOOLS, MASTRACODE_WORKSPACE_TOOLS } from "./tool-availability.js";
+import fs, { existsSync } from "fs";
+import os from "os";
+import path, { dirname, join } from "path";
+import { fileURLToPath } from "url";
+import { LocalFilesystem, LocalSandbox, Workspace, createWorkspaceTools } from "@mastra/core/workspace";
+//#region src/agents/workspace.ts
+function buildSandboxEnv() {
+	return {
+		...process.env,
+		FORCE_COLOR: "1",
+		CLICOLOR_FORCE: "1",
+		TERM: process.env.TERM || "xterm-256color",
+		CI: "true",
+		NONINTERACTIVE: "1",
+		DEBIAN_FRONTEND: "noninteractive"
+	};
+}
+function collectSkillPaths(skillsDirs, allowedRoot) {
+	const paths = [];
+	const seen = /* @__PURE__ */ new Set();
+	let realAllowedRoot;
+	if (allowedRoot) try {
+		realAllowedRoot = fs.realpathSync(allowedRoot);
+	} catch {
+		return [];
+	}
+	for (const skillsDir of skillsDirs) {
+		const skillsDirExists = fs.existsSync(skillsDir);
+		if (skillsDirExists && realAllowedRoot) try {
+			if (!isPathWithinRoot(fs.realpathSync(skillsDir), realAllowedRoot)) continue;
+		} catch {
+			continue;
+		}
+		const resolved = path.resolve(skillsDir);
+		if (!seen.has(resolved)) {
+			seen.add(resolved);
+			paths.push(skillsDir);
+		}
+		if (!skillsDirExists) continue;
+		try {
+			const entries = fs.readdirSync(skillsDir, { withFileTypes: true });
+			for (const entry of entries) if (entry.isSymbolicLink()) try {
+				const linkPath = path.join(skillsDir, entry.name);
+				const realPath = fs.realpathSync(linkPath);
+				if (realAllowedRoot && !isPathWithinRoot(realPath, realAllowedRoot)) continue;
+				if (fs.statSync(realPath).isDirectory()) {
+					const realParent = path.dirname(realPath);
+					if (realAllowedRoot && !isPathWithinRoot(realParent, realAllowedRoot)) continue;
+					if (!seen.has(realParent)) {
+						seen.add(realParent);
+						paths.push(realParent);
+					}
+				}
+			} catch {
+				continue;
+			}
+		} catch {}
+	}
+	return paths;
+}
+function buildSkillPaths(projectPath, configDir, homeDir = os.homedir(), pluginSkillPaths = []) {
+	const mastraCodeLocalSkillsPath = path.join(projectPath, configDir, "skills");
+	const claudeLocalSkillsPath = path.join(projectPath, ".claude", "skills");
+	const agentSkillsLocalPath = path.join(projectPath, ".agents", "skills");
+	const mastraCodeGlobalSkillsPath = path.join(homeDir, configDir, "skills");
+	const claudeGlobalSkillsPath = path.join(homeDir, ".claude", "skills");
+	const agentSkillsGlobalPath = path.join(homeDir, ".agents", "skills");
+	const paths = [
+		...collectSkillPaths([
+			mastraCodeLocalSkillsPath,
+			claudeLocalSkillsPath,
+			agentSkillsLocalPath
+		], projectPath),
+		...collectSkillPaths([
+			mastraCodeGlobalSkillsPath,
+			claudeGlobalSkillsPath,
+			agentSkillsGlobalPath
+		]),
+		...pluginSkillPaths.flatMap((pluginSkillPath) => collectSkillPaths([pluginSkillPath], pluginSkillPath))
+	];
+	const seenPaths = /* @__PURE__ */ new Set();
+	return paths.filter((skillPath) => {
+		let resolved;
+		try {
+			resolved = fs.realpathSync(skillPath);
+		} catch {
+			resolved = path.resolve(skillPath);
+		}
+		if (seenPaths.has(resolved)) return false;
+		seenPaths.add(resolved);
+		return true;
+	});
+}
+/**
+* Paths the agent is always allowed to access (in addition to the project root
+* and any per-thread sandboxAllowedPaths). The OS temp directory is included
+* so the agent can use it as a scratchpad without requesting access every time.
+*/
+const DEFAULT_ALLOWED_PATHS = [
+	os.tmpdir(),
+	"/tmp",
+	getPlansDir()
+].reduce((acc, p) => {
+	const resolved = path.resolve(p);
+	if (!acc.includes(resolved)) acc.push(resolved);
+	return acc;
+}, []);
+const WORKSPACE_ID_PREFIX = "mastra-code-workspace";
+/**
+* Detect the project's package runner from lock files.
+* Used as a fallback packageRunner for LSP when no binary is found locally or on PATH.
+*/
+function detectPackageRunner(projectPath) {
+	if (existsSync(join(projectPath, "pnpm-lock.yaml"))) return "pnpm dlx";
+	if (existsSync(join(projectPath, "bun.lockb")) || existsSync(join(projectPath, "bun.lock"))) return "bunx";
+	if (existsSync(join(projectPath, "yarn.lock"))) return "yarn dlx";
+	if (existsSync(join(projectPath, "package-lock.json"))) return "npx --yes";
+	return "npx --yes";
+}
+async function getDynamicWorkspace({ requestContext, mastra, skillExtension }) {
+	const state = requestContext.get("controller")?.getState();
+	const rawProjectPath = state?.projectPath;
+	if (!rawProjectPath) throw new Error("Project path is required");
+	const projectPath = path.resolve(rawProjectPath);
+	const projectSkillPaths = buildSkillPaths(projectPath, state?.configDir ?? ".mastracode", state?.homeDir, state?.pluginSkillPaths ?? []);
+	const skillPaths = [...skillExtension?.paths ?? [], ...projectSkillPaths];
+	const extensionId = skillExtension ? `-${skillExtension.id}` : "";
+	const workspaceId = `${WORKSPACE_ID_PREFIX}-${projectPath}${extensionId}`;
+	const sandboxPaths = state?.sandboxAllowedPaths ?? [];
+	const allowedPaths = [
+		...projectSkillPaths,
+		...DEFAULT_ALLOWED_PATHS,
+		...sandboxPaths.map((p) => path.resolve(p))
+	];
+	const workspaceTools = MASTRACODE_WORKSPACE_TOOLS;
+	let existing;
+	try {
+		existing = mastra?.getWorkspaceById(workspaceId);
+	} catch {}
+	if (existing) {
+		existing.filesystem.setAllowedPaths(allowedPaths);
+		existing.setToolsConfig(workspaceTools);
+		return existing;
+	}
+	const userLsp = resolveLspSetting(loadSettings().lsp);
+	let lspConfig = false;
+	if (userLsp !== false) {
+		const mcModulePath = join(dirname(fileURLToPath(import.meta.url)), "..");
+		lspConfig = {
+			maxOpenClients: 4,
+			...userLsp,
+			packageRunner: userLsp.packageRunner || detectPackageRunner(projectPath),
+			searchPaths: [mcModulePath, ...userLsp.searchPaths ?? []]
+		};
+	}
+	const filesystem = new LocalFilesystem({
+		basePath: projectPath,
+		allowedPaths
+	});
+	return new Workspace({
+		id: workspaceId,
+		name: "Mastra Code Workspace",
+		filesystem,
+		sandbox: new LocalSandbox({
+			workingDirectory: projectPath,
+			env: buildSandboxEnv()
+		}),
+		tools: workspaceTools,
+		skills: skillPaths,
+		...skillExtension ? { skillSource: skillExtension.createSource(filesystem, projectSkillPaths) } : {},
+		lsp: lspConfig
+	});
+}
+/**
+* Resolver for the agent's `goal.tools` config. Builds the request's workspace
+* (same per-request resolution as the agent's own tools) and returns only the
+* read-only verification subset, remapped to mastracode's tool names (`view`,
+* `search_content`, etc.). Returns `undefined` when no workspace can be resolved
+* (e.g. no project path), keeping the default judge text-only rather than
+* throwing inside the goal step.
+*/
+async function getGoalJudgeTools({ requestContext, mastra }) {
+	let workspace;
+	try {
+		workspace = await getDynamicWorkspace({
+			requestContext,
+			mastra
+		});
+	} catch {
+		return;
+	}
+	const allTools = await createWorkspaceTools(workspace, {
+		requestContext,
+		workspace
+	});
+	const readonly = {};
+	for (const name of GOAL_JUDGE_READONLY_TOOLS) if (allTools[name]) readonly[name] = allTools[name];
+	return Object.keys(readonly).length > 0 ? readonly : void 0;
+}
+//#endregion
+export { buildSkillPaths, getDynamicWorkspace, getGoalJudgeTools };
+
+//# sourceMappingURL=workspace.js.map

package/dist/agents/workspace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace.js","names":[],"sources":["../../src/agents/workspace.ts"],"sourcesContent":["import fs, { existsSync } from 'node:fs';\nimport os from 'node:os';\nimport path, { dirname, join } from 'node:path';\nimport { fileURLToPath } from 'node:url';\nimport type { ToolsInput } from '@mastra/core/agent';\nimport type { AgentControllerRequestContext } from '@mastra/core/agent-controller';\nimport type { Mastra } from '@mastra/core/mastra';\nimport type { RequestContext } from '@mastra/core/request-context';\nimport { Workspace, LocalFilesystem, LocalSandbox, createWorkspaceTools } from '@mastra/core/workspace';\nimport type { LSPConfig, SkillSource } from '@mastra/core/workspace';\nimport { DEFAULT_CONFIG_DIR } from '../constants.js';\nimport { loadSettings, resolveLspSetting } from '../onboarding/settings.js';\nimport type { MastraCodeState } from '../schema.js';\nimport { isPathWithinRoot } from '../utils/path-security.js';\nimport { getPlansDir } from '../utils/plans.js';\n\nimport { GOAL_JUDGE_READONLY_TOOLS, MASTRACODE_WORKSPACE_TOOLS } from './tool-availability.js';\n\n// =============================================================================\n// Sandbox Environment\n// =============================================================================\n\nfunction buildSandboxEnv(): NodeJS.ProcessEnv {\n  return {\n    ...process.env,\n    // Explicit overrides for non-interactive subprocess execution\n    FORCE_COLOR: '1',\n    CLICOLOR_FORCE: '1',\n    TERM: process.env.TERM || 'xterm-256color',\n    CI: 'true',\n    NONINTERACTIVE: '1',\n    DEBIAN_FRONTEND: 'noninteractive',\n  };\n}\n\n// =============================================================================\n// Create Workspace with Skills\n// =============================================================================\n\n// We support multiple skill locations for compatibility:\n// 1. Project-local: <configDir>/skills (project-specific mastracode skills)\n// 2. Project-local: .claude/skills (Claude Code compatible skills)\n// 3. Project-local: .agents/skills (Agent Skills spec compatible)\n// 4. Global: ~/<configDir>/skills (user-wide mastracode skills)\n// 5. Global: ~/.claude/skills (user-wide Claude Code skills)\n// 6. Global: ~/.agents/skills (user-wide Agent Skills spec compatible)\n\n// Mastra's LocalSkillSource.readdir uses Node's Dirent.isDirectory() which\n// returns false for symlinks. Tools like `npx skills add` install skills as\n// symlinks, so we need to resolve them. For each symlinked skill directory,\n// we add the real (resolved) parent path as an additional skill scan path.\nfunction collectSkillPaths(skillsDirs: string[], allowedRoot?: string): string[] {\n  const paths: string[] = [];\n  const seen = new Set<string>();\n  let realAllowedRoot: string | undefined;\n\n  if (allowedRoot) {\n    try {\n      realAllowedRoot = fs.realpathSync(allowedRoot);\n    } catch {\n      return [];\n    }\n  }\n\n  for (const skillsDir of skillsDirs) {\n    const skillsDirExists = fs.existsSync(skillsDir);\n    if (skillsDirExists && realAllowedRoot) {\n      try {\n        const realSkillsDir = fs.realpathSync(skillsDir);\n        if (!isPathWithinRoot(realSkillsDir, realAllowedRoot)) continue;\n      } catch {\n        continue;\n      }\n    }\n\n    const resolved = path.resolve(skillsDir);\n    if (!seen.has(resolved)) {\n      seen.add(resolved);\n      paths.push(skillsDir);\n    }\n\n    if (!skillsDirExists) continue;\n\n    try {\n      const entries = fs.readdirSync(skillsDir, { withFileTypes: true });\n      for (const entry of entries) {\n        if (entry.isSymbolicLink()) {\n          try {\n            const linkPath = path.join(skillsDir, entry.name);\n            const realPath = fs.realpathSync(linkPath);\n            if (realAllowedRoot && !isPathWithinRoot(realPath, realAllowedRoot)) continue;\n            const stat = fs.statSync(realPath);\n            if (stat.isDirectory()) {\n              const realParent = path.dirname(realPath);\n              if (realAllowedRoot && !isPathWithinRoot(realParent, realAllowedRoot)) continue;\n              if (!seen.has(realParent)) {\n                seen.add(realParent);\n                paths.push(realParent);\n              }\n            }\n          } catch {\n            continue;\n          }\n        }\n      }\n    } catch {\n      // Ignore errors during symlink resolution\n    }\n  }\n\n  return paths;\n}\n\n// Build skill paths dynamically based on configDir and projectPath\nexport function buildSkillPaths(\n  projectPath: string,\n  configDir: string,\n  homeDir = os.homedir(),\n  pluginSkillPaths: string[] = [],\n): string[] {\n  const mastraCodeLocalSkillsPath = path.join(projectPath, configDir, 'skills');\n  const claudeLocalSkillsPath = path.join(projectPath, '.claude', 'skills');\n  const agentSkillsLocalPath = path.join(projectPath, '.agents', 'skills');\n  const mastraCodeGlobalSkillsPath = path.join(homeDir, configDir, 'skills');\n  const claudeGlobalSkillsPath = path.join(homeDir, '.claude', 'skills');\n  const agentSkillsGlobalPath = path.join(homeDir, '.agents', 'skills');\n\n  const paths = [\n    ...collectSkillPaths([mastraCodeLocalSkillsPath, claudeLocalSkillsPath, agentSkillsLocalPath], projectPath),\n    ...collectSkillPaths([mastraCodeGlobalSkillsPath, claudeGlobalSkillsPath, agentSkillsGlobalPath]),\n    ...pluginSkillPaths.flatMap(pluginSkillPath => collectSkillPaths([pluginSkillPath], pluginSkillPath)),\n  ];\n\n  const seenPaths = new Set<string>();\n  return paths.filter(skillPath => {\n    let resolved: string;\n    try {\n      resolved = fs.realpathSync(skillPath);\n    } catch {\n      resolved = path.resolve(skillPath);\n    }\n    if (seenPaths.has(resolved)) return false;\n    seenPaths.add(resolved);\n    return true;\n  });\n}\n\nexport interface WorkspaceSkillExtension {\n  /** Distinguishes extended workspaces from the default resolver cache. */\n  id: string;\n  /** Additional read-only skill roots prepended to normal project/global skill roots. */\n  paths: string[];\n  /** Compose the additional roots with the workspace's normal skill source. */\n  createSource: (fallback: SkillSource, fallbackSkillRoots: string[]) => SkillSource;\n}\n\n/**\n * Paths the agent is always allowed to access (in addition to the project root\n * and any per-thread sandboxAllowedPaths). The OS temp directory is included\n * so the agent can use it as a scratchpad without requesting access every time.\n */\nconst DEFAULT_ALLOWED_PATHS: string[] = [os.tmpdir(), '/tmp', getPlansDir()].reduce<string[]>((acc, p) => {\n  const resolved = path.resolve(p);\n  if (!acc.includes(resolved)) acc.push(resolved);\n  return acc;\n}, []);\n\nconst WORKSPACE_ID_PREFIX = 'mastra-code-workspace';\n\n/**\n * Detect the project's package runner from lock files.\n * Used as a fallback packageRunner for LSP when no binary is found locally or on PATH.\n */\nfunction detectPackageRunner(projectPath: string): string | undefined {\n  if (existsSync(join(projectPath, 'pnpm-lock.yaml'))) return 'pnpm dlx';\n  if (existsSync(join(projectPath, 'bun.lockb')) || existsSync(join(projectPath, 'bun.lock'))) return 'bunx';\n  if (existsSync(join(projectPath, 'yarn.lock'))) return 'yarn dlx';\n  if (existsSync(join(projectPath, 'package-lock.json'))) return 'npx --yes';\n  return 'npx --yes';\n}\n\nexport async function getDynamicWorkspace({\n  requestContext,\n  mastra,\n  skillExtension,\n}: {\n  requestContext: RequestContext;\n  mastra?: Mastra;\n  skillExtension?: WorkspaceSkillExtension;\n}) {\n  const ctx = requestContext.get('controller') as AgentControllerRequestContext<MastraCodeState> | undefined;\n  const state = ctx?.getState();\n\n  const rawProjectPath = state?.projectPath;\n\n  if (!rawProjectPath) {\n    throw new Error('Project path is required');\n  }\n\n  const projectPath = path.resolve(rawProjectPath);\n  const configDir = state?.configDir ?? DEFAULT_CONFIG_DIR;\n  const projectSkillPaths = buildSkillPaths(projectPath, configDir, state?.homeDir, state?.pluginSkillPaths ?? []);\n  const skillPaths = [...(skillExtension?.paths ?? []), ...projectSkillPaths];\n  const extensionId = skillExtension ? `-${skillExtension.id}` : '';\n  const workspaceId = `${WORKSPACE_ID_PREFIX}-${projectPath}${extensionId}`;\n  const sandboxPaths = state?.sandboxAllowedPaths ?? [];\n  const allowedPaths = [\n    ...projectSkillPaths,\n    ...DEFAULT_ALLOWED_PATHS,\n    ...sandboxPaths.map((p: string) => path.resolve(p)),\n  ];\n\n  // All modes share the same workspace tool configuration.  Per-mode tool\n  // visibility is enforced at LLM-call time via `availableTools` /\n  // `activeTools` on the AgentController, not by mutating workspace capabilities.\n  const workspaceTools = MASTRACODE_WORKSPACE_TOOLS;\n\n  // Reuse existing workspace if already registered (preserves ProcessManager state)\n  let existing: Workspace<LocalFilesystem, LocalSandbox> | undefined;\n  try {\n    existing = mastra?.getWorkspaceById(workspaceId) as Workspace<LocalFilesystem, LocalSandbox>;\n  } catch {\n    // Not registered yet\n  }\n\n  if (existing) {\n    existing.filesystem.setAllowedPaths(allowedPaths);\n    existing.setToolsConfig(workspaceTools);\n    return existing;\n  }\n\n  // LSP is opt-in. When disabled we pass `false` so core skips the dependency\n  // check, the LSP manager, and the `lsp_inspect` tool entirely.\n  const userLsp = resolveLspSetting(loadSettings().lsp);\n  let lspConfig: LSPConfig | false = false;\n  if (userLsp !== false) {\n    const mcModulePath = join(dirname(fileURLToPath(import.meta.url)), '..');\n    lspConfig = {\n      maxOpenClients: 4,\n      ...userLsp,\n      packageRunner: userLsp.packageRunner || detectPackageRunner(projectPath), // Detected runner is the fallback — user's packageRunner always wins\n      searchPaths: [mcModulePath, ...(userLsp.searchPaths ?? [])],\n    };\n  }\n\n  // First call for this project — create the workspace\n  const filesystem = new LocalFilesystem({\n    basePath: projectPath,\n    allowedPaths,\n  });\n  return new Workspace({\n    id: workspaceId,\n    name: 'Mastra Code Workspace',\n    filesystem,\n    sandbox: new LocalSandbox({\n      workingDirectory: projectPath,\n      env: buildSandboxEnv(),\n    }),\n    tools: workspaceTools,\n    skills: skillPaths,\n    ...(skillExtension ? { skillSource: skillExtension.createSource(filesystem, projectSkillPaths) } : {}),\n    lsp: lspConfig,\n  });\n}\n\n/**\n * Resolver for the agent's `goal.tools` config. Builds the request's workspace\n * (same per-request resolution as the agent's own tools) and returns only the\n * read-only verification subset, remapped to mastracode's tool names (`view`,\n * `search_content`, etc.). Returns `undefined` when no workspace can be resolved\n * (e.g. no project path), keeping the default judge text-only rather than\n * throwing inside the goal step.\n */\nexport async function getGoalJudgeTools({\n  requestContext,\n  mastra,\n}: {\n  requestContext: RequestContext;\n  mastra?: Mastra;\n}): Promise<ToolsInput | undefined> {\n  let workspace: Workspace;\n  try {\n    workspace = await getDynamicWorkspace({ requestContext, mastra });\n  } catch {\n    return undefined;\n  }\n\n  const allTools = await createWorkspaceTools(workspace, { requestContext, workspace });\n  const readonly: ToolsInput = {};\n  for (const name of GOAL_JUDGE_READONLY_TOOLS) {\n    if (allTools[name]) readonly[name] = allTools[name];\n  }\n  return Object.keys(readonly).length > 0 ? readonly : undefined;\n}\n"],"mappings":";;;;;;;;;;;AAsBA,SAAS,kBAAqC;CAC5C,OAAO;EACL,GAAG,QAAQ;EAEX,aAAa;EACb,gBAAgB;EAChB,MAAM,QAAQ,IAAI,QAAQ;EAC1B,IAAI;EACJ,gBAAgB;EAChB,iBAAiB;CACnB;AACF;AAkBA,SAAS,kBAAkB,YAAsB,aAAgC;CAC/E,MAAM,QAAkB,CAAC;CACzB,MAAM,uBAAO,IAAI,IAAY;CAC7B,IAAI;CAEJ,IAAI,aACF,IAAI;EACF,kBAAkB,GAAG,aAAa,WAAW;CAC/C,QAAQ;EACN,OAAO,CAAC;CACV;CAGF,KAAK,MAAM,aAAa,YAAY;EAClC,MAAM,kBAAkB,GAAG,WAAW,SAAS;EAC/C,IAAI,mBAAmB,iBACrB,IAAI;GAEF,IAAI,CAAC,iBADiB,GAAG,aAAa,SACJ,GAAG,eAAe,GAAG;EACzD,QAAQ;GACN;EACF;EAGF,MAAM,WAAW,KAAK,QAAQ,SAAS;EACvC,IAAI,CAAC,KAAK,IAAI,QAAQ,GAAG;GACvB,KAAK,IAAI,QAAQ;GACjB,MAAM,KAAK,SAAS;EACtB;EAEA,IAAI,CAAC,iBAAiB;EAEtB,IAAI;GACF,MAAM,UAAU,GAAG,YAAY,WAAW,EAAE,eAAe,KAAK,CAAC;GACjE,KAAK,MAAM,SAAS,SAClB,IAAI,MAAM,eAAe,GACvB,IAAI;IACF,MAAM,WAAW,KAAK,KAAK,WAAW,MAAM,IAAI;IAChD,MAAM,WAAW,GAAG,aAAa,QAAQ;IACzC,IAAI,mBAAmB,CAAC,iBAAiB,UAAU,eAAe,GAAG;IAErE,IADa,GAAG,SAAS,QAClB,CAAC,CAAC,YAAY,GAAG;KACtB,MAAM,aAAa,KAAK,QAAQ,QAAQ;KACxC,IAAI,mBAAmB,CAAC,iBAAiB,YAAY,eAAe,GAAG;KACvE,IAAI,CAAC,KAAK,IAAI,UAAU,GAAG;MACzB,KAAK,IAAI,UAAU;MACnB,MAAM,KAAK,UAAU;KACvB;IACF;GACF,QAAQ;IACN;GACF;EAGN,QAAQ,CAER;CACF;CAEA,OAAO;AACT;AAGA,SAAgB,gBACd,aACA,WACA,UAAU,GAAG,QAAQ,GACrB,mBAA6B,CAAC,GACpB;CACV,MAAM,4BAA4B,KAAK,KAAK,aAAa,WAAW,QAAQ;CAC5E,MAAM,wBAAwB,KAAK,KAAK,aAAa,WAAW,QAAQ;CACxE,MAAM,uBAAuB,KAAK,KAAK,aAAa,WAAW,QAAQ;CACvE,MAAM,6BAA6B,KAAK,KAAK,SAAS,WAAW,QAAQ;CACzE,MAAM,yBAAyB,KAAK,KAAK,SAAS,WAAW,QAAQ;CACrE,MAAM,wBAAwB,KAAK,KAAK,SAAS,WAAW,QAAQ;CAEpE,MAAM,QAAQ;EACZ,GAAG,kBAAkB;GAAC;GAA2B;GAAuB;EAAoB,GAAG,WAAW;EAC1G,GAAG,kBAAkB;GAAC;GAA4B;GAAwB;EAAqB,CAAC;EAChG,GAAG,iBAAiB,SAAQ,oBAAmB,kBAAkB,CAAC,eAAe,GAAG,eAAe,CAAC;CACtG;CAEA,MAAM,4BAAY,IAAI,IAAY;CAClC,OAAO,MAAM,QAAO,cAAa;EAC/B,IAAI;EACJ,IAAI;GACF,WAAW,GAAG,aAAa,SAAS;EACtC,QAAQ;GACN,WAAW,KAAK,QAAQ,SAAS;EACnC;EACA,IAAI,UAAU,IAAI,QAAQ,GAAG,OAAO;EACpC,UAAU,IAAI,QAAQ;EACtB,OAAO;CACT,CAAC;AACH;;;;;;AAgBA,MAAM,wBAAkC;CAAC,GAAG,OAAO;CAAG;CAAQ,YAAY;AAAC,CAAC,CAAC,QAAkB,KAAK,MAAM;CACxG,MAAM,WAAW,KAAK,QAAQ,CAAC;CAC/B,IAAI,CAAC,IAAI,SAAS,QAAQ,GAAG,IAAI,KAAK,QAAQ;CAC9C,OAAO;AACT,GAAG,CAAC,CAAC;AAEL,MAAM,sBAAsB;;;;;AAM5B,SAAS,oBAAoB,aAAyC;CACpE,IAAI,WAAW,KAAK,aAAa,gBAAgB,CAAC,GAAG,OAAO;CAC5D,IAAI,WAAW,KAAK,aAAa,WAAW,CAAC,KAAK,WAAW,KAAK,aAAa,UAAU,CAAC,GAAG,OAAO;CACpG,IAAI,WAAW,KAAK,aAAa,WAAW,CAAC,GAAG,OAAO;CACvD,IAAI,WAAW,KAAK,aAAa,mBAAmB,CAAC,GAAG,OAAO;CAC/D,OAAO;AACT;AAEA,eAAsB,oBAAoB,EACxC,gBACA,QACA,kBAKC;CAED,MAAM,QADM,eAAe,IAAI,YACf,CAAC,EAAE,SAAS;CAE5B,MAAM,iBAAiB,OAAO;CAE9B,IAAI,CAAC,gBACH,MAAM,IAAI,MAAM,0BAA0B;CAG5C,MAAM,cAAc,KAAK,QAAQ,cAAc;CAE/C,MAAM,oBAAoB,gBAAgB,aADxB,OAAO,aAAA,eACyC,OAAO,SAAS,OAAO,oBAAoB,CAAC,CAAC;CAC/G,MAAM,aAAa,CAAC,GAAI,gBAAgB,SAAS,CAAC,GAAI,GAAG,iBAAiB;CAC1E,MAAM,cAAc,iBAAiB,IAAI,eAAe,OAAO;CAC/D,MAAM,cAAc,GAAG,oBAAoB,GAAG,cAAc;CAC5D,MAAM,eAAe,OAAO,uBAAuB,CAAC;CACpD,MAAM,eAAe;EACnB,GAAG;EACH,GAAG;EACH,GAAG,aAAa,KAAK,MAAc,KAAK,QAAQ,CAAC,CAAC;CACpD;CAKA,MAAM,iBAAiB;CAGvB,IAAI;CACJ,IAAI;EACF,WAAW,QAAQ,iBAAiB,WAAW;CACjD,QAAQ,CAER;CAEA,IAAI,UAAU;EACZ,SAAS,WAAW,gBAAgB,YAAY;EAChD,SAAS,eAAe,cAAc;EACtC,OAAO;CACT;CAIA,MAAM,UAAU,kBAAkB,aAAa,CAAC,CAAC,GAAG;CACpD,IAAI,YAA+B;CACnC,IAAI,YAAY,OAAO;EACrB,MAAM,eAAe,KAAK,QAAQ,cAAc,OAAO,KAAK,GAAG,CAAC,GAAG,IAAI;EACvE,YAAY;GACV,gBAAgB;GAChB,GAAG;GACH,eAAe,QAAQ,iBAAiB,oBAAoB,WAAW;GACvE,aAAa,CAAC,cAAc,GAAI,QAAQ,eAAe,CAAC,CAAE;EAC5D;CACF;CAGA,MAAM,aAAa,IAAI,gBAAgB;EACrC,UAAU;EACV;CACF,CAAC;CACD,OAAO,IAAI,UAAU;EACnB,IAAI;EACJ,MAAM;EACN;EACA,SAAS,IAAI,aAAa;GACxB,kBAAkB;GAClB,KAAK,gBAAgB;EACvB,CAAC;EACD,OAAO;EACP,QAAQ;EACR,GAAI,iBAAiB,EAAE,aAAa,eAAe,aAAa,YAAY,iBAAiB,EAAE,IAAI,CAAC;EACpG,KAAK;CACP,CAAC;AACH;;;;;;;;;AAUA,eAAsB,kBAAkB,EACtC,gBACA,UAIkC;CAClC,IAAI;CACJ,IAAI;EACF,YAAY,MAAM,oBAAoB;GAAE;GAAgB;EAAO,CAAC;CAClE,QAAQ;EACN;CACF;CAEA,MAAM,WAAW,MAAM,qBAAqB,WAAW;EAAE;EAAgB;CAAU,CAAC;CACpF,MAAM,WAAuB,CAAC;CAC9B,KAAK,MAAM,QAAQ,2BACjB,IAAI,SAAS,OAAO,SAAS,QAAQ,SAAS;CAEhD,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,SAAS,IAAI,WAAW,KAAA;AACvD"}

package/dist/analytics.d.ts

@@ -0,0 +1,18 @@
+export declare function getMastraAnalyticsDistinctId(configPath?: string): string;
+export type MastraCodeAnalyticsEvent = 'mastracode_session_started' | 'mastracode_prompt_submitted' | 'mastracode_thread_changed' | 'mastracode_model_changed' | 'mastracode_command_used' | 'mastracode_interactive_prompt_shown';
+export interface MastraCodeAnalytics {
+    capture(event: MastraCodeAnalyticsEvent, properties?: Record<string, unknown>): void;
+    trackCommand(command: string, properties?: Record<string, unknown>): void;
+    trackInteractivePrompt(promptType: string, properties?: Record<string, unknown>): void;
+    shutdown(): Promise<void>;
+    isEnabled(): boolean;
+}
+interface MastraCodeAnalyticsOptions {
+    version: string;
+    host?: string;
+    apiKey?: string;
+}
+export declare function isTelemetryDisabled(env?: NodeJS.ProcessEnv): boolean;
+export declare function createMastraCodeAnalytics(options: MastraCodeAnalyticsOptions): MastraCodeAnalytics;
+export {};
+//# sourceMappingURL=analytics.d.ts.map

package/dist/analytics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics.d.ts","sourceRoot":"","sources":["../src/analytics.ts"],"names":[],"mappings":"AAsCA,wBAAgB,4BAA4B,CAAC,UAAU,SAAwB,GAAG,MAAM,CAmBvF;AAeD,MAAM,MAAM,wBAAwB,GAChC,4BAA4B,GAC5B,6BAA6B,GAC7B,2BAA2B,GAC3B,0BAA0B,GAC1B,yBAAyB,GACzB,qCAAqC,CAAC;AAE1C,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,KAAK,EAAE,wBAAwB,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACrF,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC1E,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACvF,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,SAAS,IAAI,OAAO,CAAC;CACtB;AAED,UAAU,0BAA0B;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AA8FD,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAOjF;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,0BAA0B,GAAG,mBAAmB,CAOlG"}

package/dist/analytics.js

@@ -0,0 +1,163 @@
+import { randomUUID } from "crypto";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
+import os from "os";
+import path from "path";
+import { PostHog } from "posthog-node";
+//#region src/analytics.ts
+const POSTHOG_API_KEY = "phc_SBLpZVAB6jmHOct9CABq3PF0Yn5FU3G2FgT4xUr2XrT";
+const POSTHOG_HOST = "https://us.posthog.com";
+const MASTRA_SOURCE = "mastracode";
+const TRUTHY_DISABLED_VALUES = /* @__PURE__ */ new Set([
+	"1",
+	"true",
+	"yes",
+	"on"
+]);
+const ANALYTICS_CONFIG_PATH = path.join(os.homedir(), ".mastracode", "analytics.json");
+function createMastraAnalyticsDistinctId() {
+	return `mastra-${randomUUID()}`;
+}
+function isHostnameDerivedDistinctId(distinctId, hostname = os.hostname()) {
+	return distinctId === `mastra-${hostname}`;
+}
+function isValidMastraAnalyticsDistinctId(distinctId) {
+	return /^mastra-[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(distinctId);
+}
+function writeAnalyticsConfig(distinctId, configPath = ANALYTICS_CONFIG_PATH) {
+	try {
+		mkdirSync(path.dirname(configPath), { recursive: true });
+		writeFileSync(configPath, JSON.stringify({ distinctId }));
+	} catch {}
+}
+function getMastraAnalyticsDistinctId(configPath = ANALYTICS_CONFIG_PATH) {
+	try {
+		if (existsSync(configPath)) {
+			const config = JSON.parse(readFileSync(configPath, "utf-8"));
+			if (config.distinctId && isValidMastraAnalyticsDistinctId(config.distinctId) && !isHostnameDerivedDistinctId(config.distinctId)) return config.distinctId;
+		}
+	} catch {}
+	const distinctId = createMastraAnalyticsDistinctId();
+	writeAnalyticsConfig(distinctId, configPath);
+	return distinctId;
+}
+function isAnalyticsDebugEnabled() {
+	return TRUTHY_DISABLED_VALUES.has(process.env.MASTRACODE_ANALYTICS_DEBUG?.trim().toLowerCase() ?? "");
+}
+function debugAnalytics(message, properties) {
+	if (!isAnalyticsDebugEnabled()) return;
+	const suffix = properties ? ` ${JSON.stringify(properties)}` : "";
+	process.stderr.write(`[mastracode analytics] ${message}${suffix}\n`);
+}
+var NoopMastraCodeAnalytics = class {
+	capture(event) {
+		debugAnalytics("capture skipped: telemetry disabled", { event });
+	}
+	trackCommand(command) {
+		debugAnalytics("command skipped: telemetry disabled", { command });
+	}
+	trackInteractivePrompt(promptType) {
+		debugAnalytics("interactive prompt skipped: telemetry disabled", { promptType });
+	}
+	async shutdown() {
+		debugAnalytics("shutdown skipped: telemetry disabled");
+	}
+	isEnabled() {
+		return false;
+	}
+};
+var PostHogMastraCodeAnalytics = class {
+	client;
+	distinctId;
+	sessionId = randomUUID();
+	version;
+	constructor({ version, apiKey = POSTHOG_API_KEY, host = POSTHOG_HOST }) {
+		this.version = version;
+		this.distinctId = getMastraAnalyticsDistinctId();
+		this.client = new PostHog(apiKey, {
+			host,
+			flushAt: 1,
+			flushInterval: 0,
+			disableGeoip: false
+		});
+		this.client.register({ mastraSource: MASTRA_SOURCE });
+		debugAnalytics("enabled", {
+			host,
+			distinctId: this.distinctId,
+			version
+		});
+	}
+	capture(event, properties) {
+		try {
+			const eventProperties = {
+				...this.getBaseProperties(),
+				...properties
+			};
+			debugAnalytics("capture", {
+				event,
+				properties: eventProperties
+			});
+			this.client.capture({
+				distinctId: this.distinctId,
+				event,
+				properties: eventProperties
+			});
+		} catch (error) {
+			debugAnalytics("capture failed", {
+				event,
+				error: error instanceof Error ? error.message : String(error)
+			});
+		}
+	}
+	trackCommand(command, properties) {
+		this.capture("mastracode_command_used", {
+			command,
+			...properties
+		});
+	}
+	trackInteractivePrompt(promptType, properties) {
+		this.capture("mastracode_interactive_prompt_shown", {
+			promptType,
+			...properties
+		});
+	}
+	async shutdown() {
+		try {
+			debugAnalytics("shutdown start");
+			await this.client.shutdown();
+			debugAnalytics("shutdown complete");
+		} catch (error) {
+			debugAnalytics("shutdown failed", { error: error instanceof Error ? error.message : String(error) });
+		}
+	}
+	isEnabled() {
+		return true;
+	}
+	getBaseProperties() {
+		return {
+			mastraSource: MASTRA_SOURCE,
+			sessionId: this.sessionId,
+			version: this.version,
+			os: process.platform,
+			osVersion: os.release(),
+			nodeVersion: process.version,
+			platform: process.arch,
+			machineId: os.hostname()
+		};
+	}
+};
+function isTelemetryDisabled(env = process.env) {
+	const value = env.MASTRA_TELEMETRY_DISABLED;
+	if (!value) return false;
+	return TRUTHY_DISABLED_VALUES.has(value.trim().toLowerCase());
+}
+function createMastraCodeAnalytics(options) {
+	if (isTelemetryDisabled()) {
+		debugAnalytics("disabled by MASTRA_TELEMETRY_DISABLED", { value: process.env.MASTRA_TELEMETRY_DISABLED });
+		return new NoopMastraCodeAnalytics();
+	}
+	return new PostHogMastraCodeAnalytics(options);
+}
+//#endregion
+export { createMastraCodeAnalytics, getMastraAnalyticsDistinctId, isTelemetryDisabled };
+
+//# sourceMappingURL=analytics.js.map

package/dist/analytics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics.js","names":[],"sources":["../src/analytics.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';\nimport os from 'node:os';\nimport path from 'node:path';\n\nimport { PostHog } from 'posthog-node';\n\nconst POSTHOG_API_KEY = 'phc_SBLpZVAB6jmHOct9CABq3PF0Yn5FU3G2FgT4xUr2XrT';\nconst POSTHOG_HOST = 'https://us.posthog.com';\nconst MASTRA_SOURCE = 'mastracode';\nconst TRUTHY_DISABLED_VALUES = new Set(['1', 'true', 'yes', 'on']);\nconst ANALYTICS_CONFIG_PATH = path.join(os.homedir(), '.mastracode', 'analytics.json');\n\ninterface AnalyticsConfig {\n  distinctId?: string;\n}\n\nfunction createMastraAnalyticsDistinctId(): string {\n  return `mastra-${randomUUID()}`;\n}\n\nfunction isHostnameDerivedDistinctId(distinctId: string, hostname = os.hostname()): boolean {\n  return distinctId === `mastra-${hostname}`;\n}\n\nfunction isValidMastraAnalyticsDistinctId(distinctId: string): boolean {\n  return /^mastra-[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(distinctId);\n}\n\nfunction writeAnalyticsConfig(distinctId: string, configPath = ANALYTICS_CONFIG_PATH): void {\n  try {\n    mkdirSync(path.dirname(configPath), { recursive: true });\n    writeFileSync(configPath, JSON.stringify({ distinctId }));\n  } catch {\n    // swallow analytics persistence errors\n  }\n}\n\nexport function getMastraAnalyticsDistinctId(configPath = ANALYTICS_CONFIG_PATH): string {\n  try {\n    if (existsSync(configPath)) {\n      const config = JSON.parse(readFileSync(configPath, 'utf-8')) as AnalyticsConfig;\n      if (\n        config.distinctId &&\n        isValidMastraAnalyticsDistinctId(config.distinctId) &&\n        !isHostnameDerivedDistinctId(config.distinctId)\n      ) {\n        return config.distinctId;\n      }\n    }\n  } catch {\n    // regenerate below\n  }\n\n  const distinctId = createMastraAnalyticsDistinctId();\n  writeAnalyticsConfig(distinctId, configPath);\n  return distinctId;\n}\n\nfunction isAnalyticsDebugEnabled(): boolean {\n  return TRUTHY_DISABLED_VALUES.has(process.env.MASTRACODE_ANALYTICS_DEBUG?.trim().toLowerCase() ?? '');\n}\n\nfunction debugAnalytics(message: string, properties?: Record<string, unknown>): void {\n  if (!isAnalyticsDebugEnabled()) {\n    return;\n  }\n\n  const suffix = properties ? ` ${JSON.stringify(properties)}` : '';\n  process.stderr.write(`[mastracode analytics] ${message}${suffix}\\n`);\n}\n\nexport type MastraCodeAnalyticsEvent =\n  | 'mastracode_session_started'\n  | 'mastracode_prompt_submitted'\n  | 'mastracode_thread_changed'\n  | 'mastracode_model_changed'\n  | 'mastracode_command_used'\n  | 'mastracode_interactive_prompt_shown';\n\nexport interface MastraCodeAnalytics {\n  capture(event: MastraCodeAnalyticsEvent, properties?: Record<string, unknown>): void;\n  trackCommand(command: string, properties?: Record<string, unknown>): void;\n  trackInteractivePrompt(promptType: string, properties?: Record<string, unknown>): void;\n  shutdown(): Promise<void>;\n  isEnabled(): boolean;\n}\n\ninterface MastraCodeAnalyticsOptions {\n  version: string;\n  host?: string;\n  apiKey?: string;\n}\n\nclass NoopMastraCodeAnalytics implements MastraCodeAnalytics {\n  capture(event: MastraCodeAnalyticsEvent): void {\n    debugAnalytics('capture skipped: telemetry disabled', { event });\n  }\n  trackCommand(command: string): void {\n    debugAnalytics('command skipped: telemetry disabled', { command });\n  }\n  trackInteractivePrompt(promptType: string): void {\n    debugAnalytics('interactive prompt skipped: telemetry disabled', { promptType });\n  }\n  async shutdown(): Promise<void> {\n    debugAnalytics('shutdown skipped: telemetry disabled');\n  }\n  isEnabled(): boolean {\n    return false;\n  }\n}\n\nclass PostHogMastraCodeAnalytics implements MastraCodeAnalytics {\n  private readonly client: PostHog;\n  private readonly distinctId: string;\n  private readonly sessionId = randomUUID();\n  private readonly version: string;\n\n  constructor({ version, apiKey = POSTHOG_API_KEY, host = POSTHOG_HOST }: MastraCodeAnalyticsOptions) {\n    this.version = version;\n    this.distinctId = getMastraAnalyticsDistinctId();\n    this.client = new PostHog(apiKey, {\n      host,\n      flushAt: 1,\n      flushInterval: 0,\n      disableGeoip: false,\n    });\n    this.client.register({ mastraSource: MASTRA_SOURCE });\n    debugAnalytics('enabled', { host, distinctId: this.distinctId, version });\n  }\n\n  capture(event: MastraCodeAnalyticsEvent, properties?: Record<string, unknown>): void {\n    try {\n      const eventProperties = {\n        ...this.getBaseProperties(),\n        ...properties,\n      };\n      debugAnalytics('capture', { event, properties: eventProperties });\n      this.client.capture({\n        distinctId: this.distinctId,\n        event,\n        properties: eventProperties,\n      });\n    } catch (error) {\n      debugAnalytics('capture failed', { event, error: error instanceof Error ? error.message : String(error) });\n      // swallow analytics errors\n    }\n  }\n\n  trackCommand(command: string, properties?: Record<string, unknown>): void {\n    this.capture('mastracode_command_used', { command, ...properties });\n  }\n\n  trackInteractivePrompt(promptType: string, properties?: Record<string, unknown>): void {\n    this.capture('mastracode_interactive_prompt_shown', { promptType, ...properties });\n  }\n\n  async shutdown(): Promise<void> {\n    try {\n      debugAnalytics('shutdown start');\n      await this.client.shutdown();\n      debugAnalytics('shutdown complete');\n    } catch (error) {\n      debugAnalytics('shutdown failed', { error: error instanceof Error ? error.message : String(error) });\n      // swallow analytics errors\n    }\n  }\n\n  isEnabled(): boolean {\n    return true;\n  }\n\n  private getBaseProperties(): Record<string, unknown> {\n    return {\n      mastraSource: MASTRA_SOURCE,\n      sessionId: this.sessionId,\n      version: this.version,\n      os: process.platform,\n      osVersion: os.release(),\n      nodeVersion: process.version,\n      platform: process.arch,\n      machineId: os.hostname(),\n    };\n  }\n}\n\nexport function isTelemetryDisabled(env: NodeJS.ProcessEnv = process.env): boolean {\n  const value = env.MASTRA_TELEMETRY_DISABLED;\n  if (!value) {\n    return false;\n  }\n\n  return TRUTHY_DISABLED_VALUES.has(value.trim().toLowerCase());\n}\n\nexport function createMastraCodeAnalytics(options: MastraCodeAnalyticsOptions): MastraCodeAnalytics {\n  if (isTelemetryDisabled()) {\n    debugAnalytics('disabled by MASTRA_TELEMETRY_DISABLED', { value: process.env.MASTRA_TELEMETRY_DISABLED });\n    return new NoopMastraCodeAnalytics();\n  }\n\n  return new PostHogMastraCodeAnalytics(options);\n}\n"],"mappings":";;;;;;AAOA,MAAM,kBAAkB;AACxB,MAAM,eAAe;AACrB,MAAM,gBAAgB;AACtB,MAAM,yCAAyB,IAAI,IAAI;CAAC;CAAK;CAAQ;CAAO;AAAI,CAAC;AACjE,MAAM,wBAAwB,KAAK,KAAK,GAAG,QAAQ,GAAG,eAAe,gBAAgB;AAMrF,SAAS,kCAA0C;CACjD,OAAO,UAAU,WAAW;AAC9B;AAEA,SAAS,4BAA4B,YAAoB,WAAW,GAAG,SAAS,GAAY;CAC1F,OAAO,eAAe,UAAU;AAClC;AAEA,SAAS,iCAAiC,YAA6B;CACrE,OAAO,yEAAyE,KAAK,UAAU;AACjG;AAEA,SAAS,qBAAqB,YAAoB,aAAa,uBAA6B;CAC1F,IAAI;EACF,UAAU,KAAK,QAAQ,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;EACvD,cAAc,YAAY,KAAK,UAAU,EAAE,WAAW,CAAC,CAAC;CAC1D,QAAQ,CAER;AACF;AAEA,SAAgB,6BAA6B,aAAa,uBAA+B;CACvF,IAAI;EACF,IAAI,WAAW,UAAU,GAAG;GAC1B,MAAM,SAAS,KAAK,MAAM,aAAa,YAAY,OAAO,CAAC;GAC3D,IACE,OAAO,cACP,iCAAiC,OAAO,UAAU,KAClD,CAAC,4BAA4B,OAAO,UAAU,GAE9C,OAAO,OAAO;EAElB;CACF,QAAQ,CAER;CAEA,MAAM,aAAa,gCAAgC;CACnD,qBAAqB,YAAY,UAAU;CAC3C,OAAO;AACT;AAEA,SAAS,0BAAmC;CAC1C,OAAO,uBAAuB,IAAI,QAAQ,IAAI,4BAA4B,KAAK,CAAC,CAAC,YAAY,KAAK,EAAE;AACtG;AAEA,SAAS,eAAe,SAAiB,YAA4C;CACnF,IAAI,CAAC,wBAAwB,GAC3B;CAGF,MAAM,SAAS,aAAa,IAAI,KAAK,UAAU,UAAU,MAAM;CAC/D,QAAQ,OAAO,MAAM,0BAA0B,UAAU,OAAO,GAAG;AACrE;AAwBA,IAAM,0BAAN,MAA6D;CAC3D,QAAQ,OAAuC;EAC7C,eAAe,uCAAuC,EAAE,MAAM,CAAC;CACjE;CACA,aAAa,SAAuB;EAClC,eAAe,uCAAuC,EAAE,QAAQ,CAAC;CACnE;CACA,uBAAuB,YAA0B;EAC/C,eAAe,kDAAkD,EAAE,WAAW,CAAC;CACjF;CACA,MAAM,WAA0B;EAC9B,eAAe,sCAAsC;CACvD;CACA,YAAqB;EACnB,OAAO;CACT;AACF;AAEA,IAAM,6BAAN,MAAgE;CAC9D;CACA;CACA,YAA6B,WAAW;CACxC;CAEA,YAAY,EAAE,SAAS,SAAS,iBAAiB,OAAO,gBAA4C;EAClG,KAAK,UAAU;EACf,KAAK,aAAa,6BAA6B;EAC/C,KAAK,SAAS,IAAI,QAAQ,QAAQ;GAChC;GACA,SAAS;GACT,eAAe;GACf,cAAc;EAChB,CAAC;EACD,KAAK,OAAO,SAAS,EAAE,cAAc,cAAc,CAAC;EACpD,eAAe,WAAW;GAAE;GAAM,YAAY,KAAK;GAAY;EAAQ,CAAC;CAC1E;CAEA,QAAQ,OAAiC,YAA4C;EACnF,IAAI;GACF,MAAM,kBAAkB;IACtB,GAAG,KAAK,kBAAkB;IAC1B,GAAG;GACL;GACA,eAAe,WAAW;IAAE;IAAO,YAAY;GAAgB,CAAC;GAChE,KAAK,OAAO,QAAQ;IAClB,YAAY,KAAK;IACjB;IACA,YAAY;GACd,CAAC;EACH,SAAS,OAAO;GACd,eAAe,kBAAkB;IAAE;IAAO,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GAAE,CAAC;EAE3G;CACF;CAEA,aAAa,SAAiB,YAA4C;EACxE,KAAK,QAAQ,2BAA2B;GAAE;GAAS,GAAG;EAAW,CAAC;CACpE;CAEA,uBAAuB,YAAoB,YAA4C;EACrF,KAAK,QAAQ,uCAAuC;GAAE;GAAY,GAAG;EAAW,CAAC;CACnF;CAEA,MAAM,WAA0B;EAC9B,IAAI;GACF,eAAe,gBAAgB;GAC/B,MAAM,KAAK,OAAO,SAAS;GAC3B,eAAe,mBAAmB;EACpC,SAAS,OAAO;GACd,eAAe,mBAAmB,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;EAErG;CACF;CAEA,YAAqB;EACnB,OAAO;CACT;CAEA,oBAAqD;EACnD,OAAO;GACL,cAAc;GACd,WAAW,KAAK;GAChB,SAAS,KAAK;GACd,IAAI,QAAQ;GACZ,WAAW,GAAG,QAAQ;GACtB,aAAa,QAAQ;GACrB,UAAU,QAAQ;GAClB,WAAW,GAAG,SAAS;EACzB;CACF;AACF;AAEA,SAAgB,oBAAoB,MAAyB,QAAQ,KAAc;CACjF,MAAM,QAAQ,IAAI;CAClB,IAAI,CAAC,OACH,OAAO;CAGT,OAAO,uBAAuB,IAAI,MAAM,KAAK,CAAC,CAAC,YAAY,CAAC;AAC9D;AAEA,SAAgB,0BAA0B,SAA0D;CAClG,IAAI,oBAAoB,GAAG;EACzB,eAAe,yCAAyC,EAAE,OAAO,QAAQ,IAAI,0BAA0B,CAAC;EACxG,OAAO,IAAI,wBAAwB;CACrC;CAEA,OAAO,IAAI,2BAA2B,OAAO;AAC/C"}

package/dist/auth/authorization-input.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Forgiving parser for user-pasted OAuth authorization input.
+ *
+ * Accepts, in order of preference:
+ *   - a full redirect URL (`https://.../callback?code=...&state=...`)
+ *   - the `code#state` form shown on Anthropic's hosted callback page
+ *   - a raw query string (`code=...&state=...`)
+ *   - a bare authorization code
+ *
+ * Ported from pi-mono's `parseAuthorizationInput`.
+ */
+export declare function parseAuthorizationInput(input: string): {
+    code?: string;
+    state?: string;
+};
+//# sourceMappingURL=authorization-input.d.ts.map

package/dist/auth/authorization-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-input.d.ts","sourceRoot":"","sources":["../../src/auth/authorization-input.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG;IACtD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CA4BA"}

package/dist/auth/authorization-input.js

@@ -0,0 +1,42 @@
+//#region src/auth/authorization-input.ts
+/**
+* Forgiving parser for user-pasted OAuth authorization input.
+*
+* Accepts, in order of preference:
+*   - a full redirect URL (`https://.../callback?code=...&state=...`)
+*   - the `code#state` form shown on Anthropic's hosted callback page
+*   - a raw query string (`code=...&state=...`)
+*   - a bare authorization code
+*
+* Ported from pi-mono's `parseAuthorizationInput`.
+*/
+function parseAuthorizationInput(input) {
+	const value = input.trim();
+	if (!value) return {};
+	try {
+		const url = new URL(value);
+		return {
+			code: url.searchParams.get("code") ?? void 0,
+			state: url.searchParams.get("state") ?? void 0
+		};
+	} catch {}
+	if (value.includes("#")) {
+		const [code, state] = value.split("#", 2);
+		return {
+			code,
+			state
+		};
+	}
+	if (value.includes("code=")) {
+		const params = new URLSearchParams(value);
+		return {
+			code: params.get("code") ?? void 0,
+			state: params.get("state") ?? void 0
+		};
+	}
+	return { code: value };
+}
+//#endregion
+export { parseAuthorizationInput };
+
+//# sourceMappingURL=authorization-input.js.map

package/dist/auth/authorization-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-input.js","names":[],"sources":["../../src/auth/authorization-input.ts"],"sourcesContent":["/**\n * Forgiving parser for user-pasted OAuth authorization input.\n *\n * Accepts, in order of preference:\n *   - a full redirect URL (`https://.../callback?code=...&state=...`)\n *   - the `code#state` form shown on Anthropic's hosted callback page\n *   - a raw query string (`code=...&state=...`)\n *   - a bare authorization code\n *\n * Ported from pi-mono's `parseAuthorizationInput`.\n */\nexport function parseAuthorizationInput(input: string): {\n  code?: string;\n  state?: string;\n} {\n  const value = input.trim();\n  if (!value) return {};\n\n  try {\n    const url = new URL(value);\n    return {\n      code: url.searchParams.get('code') ?? undefined,\n      state: url.searchParams.get('state') ?? undefined,\n    };\n  } catch {\n    // not a URL\n  }\n\n  if (value.includes('#')) {\n    const [code, state] = value.split('#', 2);\n    return { code, state };\n  }\n\n  if (value.includes('code=')) {\n    const params = new URLSearchParams(value);\n    return {\n      code: params.get('code') ?? undefined,\n      state: params.get('state') ?? undefined,\n    };\n  }\n\n  return { code: value };\n}\n"],"mappings":";;;;;;;;;;;;AAWA,SAAgB,wBAAwB,OAGtC;CACA,MAAM,QAAQ,MAAM,KAAK;CACzB,IAAI,CAAC,OAAO,OAAO,CAAC;CAEpB,IAAI;EACF,MAAM,MAAM,IAAI,IAAI,KAAK;EACzB,OAAO;GACL,MAAM,IAAI,aAAa,IAAI,MAAM,KAAK,KAAA;GACtC,OAAO,IAAI,aAAa,IAAI,OAAO,KAAK,KAAA;EAC1C;CACF,QAAQ,CAER;CAEA,IAAI,MAAM,SAAS,GAAG,GAAG;EACvB,MAAM,CAAC,MAAM,SAAS,MAAM,MAAM,KAAK,CAAC;EACxC,OAAO;GAAE;GAAM;EAAM;CACvB;CAEA,IAAI,MAAM,SAAS,OAAO,GAAG;EAC3B,MAAM,SAAS,IAAI,gBAAgB,KAAK;EACxC,OAAO;GACL,MAAM,OAAO,IAAI,MAAM,KAAK,KAAA;GAC5B,OAAO,OAAO,IAAI,OAAO,KAAK,KAAA;EAChC;CACF;CAEA,OAAO,EAAE,MAAM,MAAM;AACvB"}

package/dist/auth/device-code.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Generic RFC 8628 (OAuth 2.0 Device Authorization Grant) polling helpers.
+ *
+ * Ported from pi-mono's device-code utility, restructured as a single-step
+ * API so the same poll semantics can be driven two ways:
+ *   - `pollDeviceCodeUntilComplete()` — blocking loop for TUI flows.
+ *   - `stepDeviceCodePoll()` — exactly one upstream poll per call, with a
+ *     JSON-serializable `DeviceCodePollState` so web routes can persist the
+ *     state between HTTP requests (any replica can continue the poll).
+ *
+ * Inspired by pi-mono:
+ * https://github.com/badlogic/pi-mono/blob/main/packages/ai/src/utils/oauth/device-code.ts
+ */
+/**
+ * Serializable poll-loop state. Safe to round-trip through JSON (e.g. a
+ * `pending jsonb` column) so device-code polling can span HTTP requests.
+ */
+export interface DeviceCodePollState {
+    /** ms epoch after which the device authorization is considered expired. */
+    deadlineAt: number;
+    /** Current base poll interval in ms (grows on slow_down responses). */
+    intervalMs: number;
+    /** Number of slow_down responses observed so far. */
+    slowDownResponses: number;
+}
+export declare function createDeviceCodePollState(options: {
+    /** Poll interval suggested by the server, in seconds. Defaults to 5 (RFC 8628). */
+    intervalSeconds?: number;
+    /** Lifetime of the device code, in seconds. */
+    expiresInSeconds: number;
+    /** Override "now" for tests. */
+    now?: number;
+}): DeviceCodePollState;
+/**
+ * Classified result of one upstream token-endpoint poll. Providers implement
+ * the HTTP request and map their response shape onto this union.
+ */
+export type DeviceCodePollOutcome<T> = {
+    status: 'complete';
+    result: T;
+} | {
+    status: 'pending';
+    intervalSeconds?: number;
+} | {
+    status: 'slow_down';
+    intervalSeconds?: number;
+} | {
+    status: 'failed';
+    error: string;
+};
+export type DeviceCodeStepResult<T> = {
+    status: 'complete';
+    result: T;
+    state: DeviceCodePollState;
+} | {
+    status: 'pending';
+    nextPollMs: number;
+    state: DeviceCodePollState;
+} | {
+    status: 'slow_down';
+    nextPollMs: number;
+    state: DeviceCodePollState;
+} | {
+    status: 'failed';
+    error: string;
+    state: DeviceCodePollState;
+};
+/**
+ * Delay to wait before the next poll, honoring slow_down growth and clamped
+ * to the remaining lifetime of the device code.
+ */
+export declare function nextPollDelayMs(state: DeviceCodePollState, now?: number): number;
+/**
+ * Perform exactly one upstream poll and fold the outcome into the poll state.
+ * Never throws for flow-level conditions — timeouts and provider errors are
+ * reported as `{ status: 'failed' }` so callers can persist/report them.
+ */
+export declare function stepDeviceCodePoll<T>(state: DeviceCodePollState, pollOnce: () => Promise<DeviceCodePollOutcome<T>>, now?: number): Promise<DeviceCodeStepResult<T>>;
+/** Sleep that can be interrupted by an AbortSignal. */
+export declare function abortableSleep(ms: number, signal?: AbortSignal): Promise<void>;
+/**
+ * Blocking poll loop for TUI flows: waits the appropriate interval between
+ * polls, honors slow_down growth, aborts on the signal, and throws on
+ * failure/timeout (with a clock-drift hint after slow_down responses).
+ */
+export declare function pollDeviceCodeUntilComplete<T>(options: {
+    state: DeviceCodePollState;
+    pollOnce: () => Promise<DeviceCodePollOutcome<T>>;
+    signal?: AbortSignal;
+    /** Override the sleep implementation for tests. */
+    sleep?: (ms: number, signal?: AbortSignal) => Promise<void>;
+}): Promise<T>;
+//# sourceMappingURL=device-code.d.ts.map

package/dist/auth/device-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-code.d.ts","sourceRoot":"","sources":["../../src/auth/device-code.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,2EAA2E;IAC3E,UAAU,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAC;IACnB,qDAAqD;IACrD,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE;IACjD,mFAAmF;IACnF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+CAA+C;IAC/C,gBAAgB,EAAE,MAAM,CAAC;IACzB,gCAAgC;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,mBAAmB,CAWtB;AAED;;;GAGG;AACH,MAAM,MAAM,qBAAqB,CAAC,CAAC,IAC/B;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,CAAC,CAAA;CAAE,GACjC;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAExC,MAAM,MAAM,oBAAoB,CAAC,CAAC,IAC9B;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,CAAC,CAAC;IAAC,KAAK,EAAE,mBAAmB,CAAA;CAAE,GAC7D;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,mBAAmB,CAAA;CAAE,GACrE;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,mBAAmB,CAAA;CAAE,GACvE;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,mBAAmB,CAAA;CAAE,CAAC;AAWpE;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,mBAAmB,EAAE,GAAG,GAAE,MAAmB,GAAG,MAAM,CAK5F;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,EACxC,KAAK,EAAE,mBAAmB,EAC1B,QAAQ,EAAE,MAAM,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,EACjD,GAAG,GAAE,MAAmB,GACvB,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAiClC;AAED,uDAAuD;AACvD,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAoB9E;AAED;;;;GAIG;AACH,wBAAsB,2BAA2B,CAAC,CAAC,EAAE,OAAO,EAAE;IAC5D,KAAK,EAAE,mBAAmB,CAAC;IAC3B,QAAQ,EAAE,MAAM,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,mDAAmD;IACnD,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7D,GAAG,OAAO,CAAC,CAAC,CAAC,CAwBb"}