@mastra/code-sdk 1.15.0-alpha.1 → 1.15.0-alpha.10

package/dist/utils/wake-session.d.ts

@@ -0,0 +1,44 @@
+import type { AgentController, Session } from '@mastra/core/agent-controller';
+import type { LeaseProvider } from '@mastra/core/events';
+/** A session here serves the thread's resource, but the thread belongs to another project. */
+export declare const FOREIGN_THREAD: unique symbol;
+/** The session a wake runs as, and the dispatch lease that covers the thread. */
+export type WakeSession<TState> = {
+    session: Session<TState>;
+    /**
+     * The thread's scope (`threadScopeKey`) when it carries the session's whole
+     * scope: only the process holding that scope's dispatch lease delivers it.
+     * Unset for a thread with no scope, which the resource's lease covers.
+     */
+    scope?: string;
+};
+/** A stable key for a session's thread scope, or `undefined` when it has none. */
+export declare function threadScopeKey(scope: Record<string, string>): string | undefined;
+/**
+ * The session a wake for `threadId` should run as, or `FOREIGN_THREAD` when
+ * this process serves the resource but not the thread.
+ *
+ * A resource is not a project: processes in different directories can share
+ * one resource id (to share recall, say), and each then has a live session for
+ * it. Picking by resource alone runs the thread in whichever process asked,
+ * with that process's workspace, tools and cwd. The thread's scope tags (the
+ * ones `thread.create()` stamps, such as `projectPath`) say which session it
+ * belongs to. A thread with no scope tags, or with tags no session here
+ * contradicts, keeps going to the resource's session.
+ *
+ * A session that has the thread open always owns it. When the thread belongs to
+ * another project, that session delivers it under a lease for this one thread
+ * (`openThreadScope`), and the thread's own project yields it while another
+ * process holds that lease (`leases`), so only one process runs it and the
+ * project's other threads stay with the project.
+ */
+export declare function findWakeSession<TState>(controller: Pick<AgentController<TState>, 'getSession'>, liveSessions: Iterable<Session<TState>>, { resourceId, threadId }: {
+    resourceId: string;
+    threadId: string;
+}, leases?: Pick<LeaseProvider, 'getLeaseOwner'>): Promise<WakeSession<TState> | typeof FOREIGN_THREAD | undefined>;
+/**
+ * The dispatch lease scopes a session needs: its own, plus a lease for its open
+ * thread alone when that thread belongs to another project (`findWakeSession`).
+ */
+export declare function sessionLeaseScopes<TState>(session: Session<TState>): Promise<Array<string | undefined>>;
+//# sourceMappingURL=wake-session.d.ts.map

package/dist/utils/wake-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wake-session.d.ts","sourceRoot":"","sources":["../../src/utils/wake-session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAKzD,8FAA8F;AAC9F,eAAO,MAAM,cAAc,eAA2B,CAAC;AAEvD,iFAAiF;AACjF,MAAM,MAAM,WAAW,CAAC,MAAM,IAAI;IAChC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACzB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,kFAAkF;AAClF,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,GAAG,SAAS,CAGhF;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,eAAe,CAAC,MAAM,EAC1C,UAAU,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,EACvD,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EACvC,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EAClE,MAAM,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,GAC5C,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,OAAO,cAAc,GAAG,SAAS,CAAC,CA+BlE;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAW7G"}

package/dist/utils/wake-session.js

@@ -0,0 +1,86 @@
+import { findSessionForThread } from "../agents/background-completion.js";
+import { notificationDispatchLeaseKey } from "./signals-pubsub.js";
+//#region src/utils/wake-session.ts
+/** A session here serves the thread's resource, but the thread belongs to another project. */
+const FOREIGN_THREAD = Symbol("foreign-thread");
+/** A stable key for a session's thread scope, or `undefined` when it has none. */
+function threadScopeKey(scope) {
+	const entries = Object.entries(scope).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0);
+	return entries.length > 0 ? JSON.stringify(entries) : void 0;
+}
+/**
+* The session a wake for `threadId` should run as, or `FOREIGN_THREAD` when
+* this process serves the resource but not the thread.
+*
+* A resource is not a project: processes in different directories can share
+* one resource id (to share recall, say), and each then has a live session for
+* it. Picking by resource alone runs the thread in whichever process asked,
+* with that process's workspace, tools and cwd. The thread's scope tags (the
+* ones `thread.create()` stamps, such as `projectPath`) say which session it
+* belongs to. A thread with no scope tags, or with tags no session here
+* contradicts, keeps going to the resource's session.
+*
+* A session that has the thread open always owns it. When the thread belongs to
+* another project, that session delivers it under a lease for this one thread
+* (`openThreadScope`), and the thread's own project yields it while another
+* process holds that lease (`leases`), so only one process runs it and the
+* project's other threads stay with the project.
+*/
+async function findWakeSession(controller, liveSessions, { resourceId, threadId }, leases) {
+	const first = await findSessionForThread({
+		getSession: (sessionId) => controller.getSession(sessionId),
+		listLiveSessions: () => liveSessions
+	}, {
+		resourceId,
+		threadId
+	});
+	if (!first) return void 0;
+	const thread = await first.thread.getById({ threadId });
+	if (!thread || thread.resourceId !== resourceId) return { session: first };
+	const metadata = thread.metadata ?? {};
+	const candidates = [first, ...[...liveSessions].filter((session) => session !== first && session.identity.getResourceId() === resourceId)];
+	const matchesScope = (session) => Object.entries(session.getThreadScope()).every(([key, value]) => metadata[key] === void 0 || metadata[key] === value);
+	const open = candidates.find((session) => session.thread.getId() === threadId);
+	if (open) return {
+		session: open,
+		scope: matchesScope(open) ? threadLeaseScope(open, metadata) : openThreadScope(threadId)
+	};
+	const owner = candidates.find(matchesScope);
+	if (!owner) return FOREIGN_THREAD;
+	const scope = threadLeaseScope(owner, metadata);
+	if (scope !== void 0 && await leases?.getLeaseOwner(notificationDispatchLeaseKey(resourceId, openThreadScope(threadId)))) return FOREIGN_THREAD;
+	return {
+		session: owner,
+		scope
+	};
+}
+/**
+* The dispatch lease scopes a session needs: its own, plus a lease for its open
+* thread alone when that thread belongs to another project (`findWakeSession`).
+*/
+async function sessionLeaseScopes(session) {
+	const own = threadScopeKey(session.getThreadScope());
+	const threadId = session.thread.getId();
+	if (!threadId) return [own];
+	const thread = await session.thread.getById({ threadId });
+	if (!thread || thread.resourceId !== session.identity.getResourceId()) return [own];
+	const metadata = thread.metadata ?? {};
+	return Object.entries(session.getThreadScope()).some(([key, value]) => metadata[key] !== void 0 && metadata[key] !== value) ? [own, openThreadScope(threadId)] : [own];
+}
+/** The lease scope for one thread a session has open from another project. */
+function openThreadScope(threadId) {
+	return threadScopeKey({ openThread: threadId });
+}
+/**
+* The lease scope covering a thread for `session`: the thread's own values for
+* the session's scope keys, or unset when the thread lacks any of them.
+*/
+function threadLeaseScope(session, metadata = {}) {
+	const keys = Object.keys(session.getThreadScope());
+	if (!keys.every((key) => metadata[key] !== void 0)) return void 0;
+	return threadScopeKey(Object.fromEntries(keys.map((key) => [key, String(metadata[key])])));
+}
+//#endregion
+export { FOREIGN_THREAD, findWakeSession, sessionLeaseScopes, threadScopeKey };
+
+//# sourceMappingURL=wake-session.js.map

package/dist/utils/wake-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wake-session.js","names":[],"sources":["../../src/utils/wake-session.ts"],"sourcesContent":["import type { AgentController, Session } from '@mastra/core/agent-controller';\nimport type { LeaseProvider } from '@mastra/core/events';\n\nimport { findSessionForThread } from '../agents/background-completion.js';\nimport { notificationDispatchLeaseKey } from './signals-pubsub.js';\n\n/** A session here serves the thread's resource, but the thread belongs to another project. */\nexport const FOREIGN_THREAD = Symbol('foreign-thread');\n\n/** The session a wake runs as, and the dispatch lease that covers the thread. */\nexport type WakeSession<TState> = {\n  session: Session<TState>;\n  /**\n   * The thread's scope (`threadScopeKey`) when it carries the session's whole\n   * scope: only the process holding that scope's dispatch lease delivers it.\n   * Unset for a thread with no scope, which the resource's lease covers.\n   */\n  scope?: string;\n};\n\n/** A stable key for a session's thread scope, or `undefined` when it has none. */\nexport function threadScopeKey(scope: Record<string, string>): string | undefined {\n  const entries = Object.entries(scope).sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));\n  return entries.length > 0 ? JSON.stringify(entries) : undefined;\n}\n\n/**\n * The session a wake for `threadId` should run as, or `FOREIGN_THREAD` when\n * this process serves the resource but not the thread.\n *\n * A resource is not a project: processes in different directories can share\n * one resource id (to share recall, say), and each then has a live session for\n * it. Picking by resource alone runs the thread in whichever process asked,\n * with that process's workspace, tools and cwd. The thread's scope tags (the\n * ones `thread.create()` stamps, such as `projectPath`) say which session it\n * belongs to. A thread with no scope tags, or with tags no session here\n * contradicts, keeps going to the resource's session.\n *\n * A session that has the thread open always owns it. When the thread belongs to\n * another project, that session delivers it under a lease for this one thread\n * (`openThreadScope`), and the thread's own project yields it while another\n * process holds that lease (`leases`), so only one process runs it and the\n * project's other threads stay with the project.\n */\nexport async function findWakeSession<TState>(\n  controller: Pick<AgentController<TState>, 'getSession'>,\n  liveSessions: Iterable<Session<TState>>,\n  { resourceId, threadId }: { resourceId: string; threadId: string },\n  leases?: Pick<LeaseProvider, 'getLeaseOwner'>,\n): Promise<WakeSession<TState> | typeof FOREIGN_THREAD | undefined> {\n  const first = await findSessionForThread(\n    { getSession: sessionId => controller.getSession(sessionId), listLiveSessions: () => liveSessions },\n    { resourceId, threadId },\n  );\n  if (!first) return undefined;\n  const thread = await first.thread.getById({ threadId });\n  if (!thread || thread.resourceId !== resourceId) return { session: first };\n  const metadata = (thread.metadata as Record<string, unknown> | undefined) ?? {};\n  const candidates = [\n    first,\n    ...[...liveSessions].filter(session => session !== first && session.identity.getResourceId() === resourceId),\n  ];\n  const matchesScope = (session: Session<TState>) =>\n    Object.entries(session.getThreadScope()).every(\n      ([key, value]) => metadata[key] === undefined || metadata[key] === value,\n    );\n  const open = candidates.find(session => session.thread.getId() === threadId);\n  if (open) {\n    return { session: open, scope: matchesScope(open) ? threadLeaseScope(open, metadata) : openThreadScope(threadId) };\n  }\n  const owner = candidates.find(matchesScope);\n  if (!owner) return FOREIGN_THREAD;\n  const scope = threadLeaseScope(owner, metadata);\n  if (\n    scope !== undefined &&\n    (await leases?.getLeaseOwner(notificationDispatchLeaseKey(resourceId, openThreadScope(threadId))))\n  ) {\n    return FOREIGN_THREAD;\n  }\n  return { session: owner, scope };\n}\n\n/**\n * The dispatch lease scopes a session needs: its own, plus a lease for its open\n * thread alone when that thread belongs to another project (`findWakeSession`).\n */\nexport async function sessionLeaseScopes<TState>(session: Session<TState>): Promise<Array<string | undefined>> {\n  const own = threadScopeKey(session.getThreadScope());\n  const threadId = session.thread.getId();\n  if (!threadId) return [own];\n  const thread = await session.thread.getById({ threadId });\n  if (!thread || thread.resourceId !== session.identity.getResourceId()) return [own];\n  const metadata = (thread.metadata as Record<string, unknown> | undefined) ?? {};\n  const foreign = Object.entries(session.getThreadScope()).some(\n    ([key, value]) => metadata[key] !== undefined && metadata[key] !== value,\n  );\n  return foreign ? [own, openThreadScope(threadId)] : [own];\n}\n\n/** The lease scope for one thread a session has open from another project. */\nfunction openThreadScope(threadId: string): string {\n  return threadScopeKey({ openThread: threadId })!;\n}\n\n/**\n * The lease scope covering a thread for `session`: the thread's own values for\n * the session's scope keys, or unset when the thread lacks any of them.\n */\nfunction threadLeaseScope<TState>(\n  session: Session<TState>,\n  metadata: Record<string, unknown> = {},\n): string | undefined {\n  const keys = Object.keys(session.getThreadScope());\n  if (!keys.every(key => metadata[key] !== undefined)) return undefined;\n  return threadScopeKey(Object.fromEntries(keys.map(key => [key, String(metadata[key])])));\n}\n"],"mappings":";;;;AAOA,MAAa,iBAAiB,OAAO,gBAAgB;;AAcrD,SAAgB,eAAe,OAAmD;CAChF,MAAM,UAAU,OAAO,QAAQ,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAE;CACrF,OAAO,QAAQ,SAAS,IAAI,KAAK,UAAU,OAAO,IAAI,KAAA;AACxD;;;;;;;;;;;;;;;;;;;AAoBA,eAAsB,gBACpB,YACA,cACA,EAAE,YAAY,YACd,QACkE;CAClE,MAAM,QAAQ,MAAM,qBAClB;EAAE,aAAY,cAAa,WAAW,WAAW,SAAS;EAAG,wBAAwB;CAAa,GAClG;EAAE;EAAY;CAAS,CACzB;CACA,IAAI,CAAC,OAAO,OAAO,KAAA;CACnB,MAAM,SAAS,MAAM,MAAM,OAAO,QAAQ,EAAE,SAAS,CAAC;CACtD,IAAI,CAAC,UAAU,OAAO,eAAe,YAAY,OAAO,EAAE,SAAS,MAAM;CACzE,MAAM,WAAY,OAAO,YAAoD,CAAC;CAC9E,MAAM,aAAa,CACjB,OACA,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,QAAO,YAAW,YAAY,SAAS,QAAQ,SAAS,cAAc,MAAM,UAAU,CAC7G;CACA,MAAM,gBAAgB,YACpB,OAAO,QAAQ,QAAQ,eAAe,CAAC,CAAC,CAAC,OACtC,CAAC,KAAK,WAAW,SAAS,SAAS,KAAA,KAAa,SAAS,SAAS,KACrE;CACF,MAAM,OAAO,WAAW,MAAK,YAAW,QAAQ,OAAO,MAAM,MAAM,QAAQ;CAC3E,IAAI,MACF,OAAO;EAAE,SAAS;EAAM,OAAO,aAAa,IAAI,IAAI,iBAAiB,MAAM,QAAQ,IAAI,gBAAgB,QAAQ;CAAE;CAEnH,MAAM,QAAQ,WAAW,KAAK,YAAY;CAC1C,IAAI,CAAC,OAAO,OAAO;CACnB,MAAM,QAAQ,iBAAiB,OAAO,QAAQ;CAC9C,IACE,UAAU,KAAA,KACT,MAAM,QAAQ,cAAc,6BAA6B,YAAY,gBAAgB,QAAQ,CAAC,CAAC,GAEhG,OAAO;CAET,OAAO;EAAE,SAAS;EAAO;CAAM;AACjC;;;;;AAMA,eAAsB,mBAA2B,SAA8D;CAC7G,MAAM,MAAM,eAAe,QAAQ,eAAe,CAAC;CACnD,MAAM,WAAW,QAAQ,OAAO,MAAM;CACtC,IAAI,CAAC,UAAU,OAAO,CAAC,GAAG;CAC1B,MAAM,SAAS,MAAM,QAAQ,OAAO,QAAQ,EAAE,SAAS,CAAC;CACxD,IAAI,CAAC,UAAU,OAAO,eAAe,QAAQ,SAAS,cAAc,GAAG,OAAO,CAAC,GAAG;CAClF,MAAM,WAAY,OAAO,YAAoD,CAAC;CAI9E,OAHgB,OAAO,QAAQ,QAAQ,eAAe,CAAC,CAAC,CAAC,MACtD,CAAC,KAAK,WAAW,SAAS,SAAS,KAAA,KAAa,SAAS,SAAS,KAExD,IAAI,CAAC,KAAK,gBAAgB,QAAQ,CAAC,IAAI,CAAC,GAAG;AAC1D;;AAGA,SAAS,gBAAgB,UAA0B;CACjD,OAAO,eAAe,EAAE,YAAY,SAAS,CAAC;AAChD;;;;;AAMA,SAAS,iBACP,SACA,WAAoC,CAAC,GACjB;CACpB,MAAM,OAAO,OAAO,KAAK,QAAQ,eAAe,CAAC;CACjD,IAAI,CAAC,KAAK,OAAM,QAAO,SAAS,SAAS,KAAA,CAAS,GAAG,OAAO,KAAA;CAC5D,OAAO,eAAe,OAAO,YAAY,KAAK,KAAI,QAAO,CAAC,KAAK,OAAO,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC;AACzF"}

package/dist/workflows/register-primitives.js

@@ -17,7 +17,10 @@ async function registerWorkflowBuilderPrimitives(mastra, options) {
 			basePath: projectPath,
 			allowedPaths: [projectPath, ...allowedPaths]
 		}),
-		sandbox: new LocalSandbox({ workingDirectory: projectPath }),
+		sandbox: new LocalSandbox({
+			workingDirectory: projectPath,
+			timeout: 3e4
+		}),
 		tools: createMastraCodeWorkspaceTools()
 	});
 	const workspaceTools = await createWorkspaceTools(workspace, { workspace });

package/dist/workflows/register-primitives.js.map

@@ -1 +1 @@
-{"version":3,"file":"register-primitives.js","names":[],"sources":["../../src/workflows/register-primitives.ts"],"sourcesContent":["/**\n * Statically register workflow-related primitives on the mastracode Mastra\n * instance so `mastra.listTools()` + `mastra.listAgents()` — and, therefore,\n * the workflow-builder's discovery + the workflow rehydrator — see everything\n * a workflow might want to compose:\n *\n *   - workflow-builder sub-agent (so `create-workflow` can delegate)\n *   - code-agent (as a plain agent, callable via agent steps)\n *   - workspace tools (view/write/edit/find_files/execute_command/etc.)\n *   - configured model-independent web tools so workflows can compose search/extract steps\n *   - notification_inbox\n *   - snapshot of MCP tools from mcpManager\n *\n * Called after `controller.init()` but before `startWorkers()` in both boot\n * paths, so `loadStoredWorkflows()` (inside startWorkers) sees the full\n * registry when rehydrating previously-saved workflows.\n *\n * Tradeoffs:\n *   - MCP tools are snapshotted. Servers added after boot are invisible to\n *     the workflow-builder until restart.\n *   - Provider-native (Anthropic/OpenAI) web\n *     tools are skipped because they'd freeze workflows to one model provider.\n *   - Workflow tool steps get the closed-over workspace + auth (web provider\n *     key, MCP server credentials), not per-request permissions — deliberate; if\n *     the user built + saved the workflow they meant to run it.\n */\nimport type { Agent } from '@mastra/core/agent';\nimport type { Mastra } from '@mastra/core/mastra';\nimport { createNotificationInboxTool } from '@mastra/core/notifications';\nimport { LocalFilesystem, LocalSandbox, Workspace, createWorkspaceTools } from '@mastra/core/workspace';\nimport { createMastraCodeWorkspaceTools } from '../agents/tool-availability.js';\nimport { LazyNotificationsStorage } from '../agents/tools.js';\nimport { workflowBuilderAgent } from '../agents/workflow-builder-agent.js';\nimport type { McpManager } from '../mcp';\nimport { MC_TOOLS } from '../tool-names.js';\nimport { createConfiguredWebTools } from '../tools/web-search.js';\n\nexport interface RegisterWorkflowBuilderPrimitivesOptions {\n  projectPath: string;\n  /**\n   * Extra allowed paths the workspace can read/write. Mastracode normally\n   * collects skill paths + sandboxAllowedPaths per-request; for the workflow\n   * workspace we accept anything the caller wants up-front and trust the\n   * worker process to honour the user's intent.\n   */\n  allowedPaths?: string[];\n  /**\n   * The code-agent Agent instance. Registered as `code-agent` so workflows\n   * can compose it in agent steps. It already has full dynamic tool access\n   * (workspace/MCP/web/etc.) via its own `tools: createDynamicTools(...)`.\n   */\n  codeAgent: Agent;\n  /**\n   * McpManager for snapshotting MCP tools at boot. Omit or pass undefined\n   * if MCP is disabled — workflow-builder will just see fewer tools.\n   */\n  mcpManager?: McpManager;\n}\n\nexport async function registerWorkflowBuilderPrimitives(\n  mastra: Mastra,\n  options: RegisterWorkflowBuilderPrimitivesOptions,\n): Promise<void> {\n  const { projectPath, allowedPaths = [], codeAgent, mcpManager } = options;\n\n  // 1. Agents workflows can compose.\n  mastra.addAgent(workflowBuilderAgent, 'workflow-builder');\n  mastra.addAgent(codeAgent, 'code-agent');\n\n  // 2. Workspace tools — bound to a project-rooted local workspace.\n  const workspace = new Workspace({\n    id: 'workflow-builder-workspace',\n    name: 'Mastra Code Workspace (workflows)',\n    filesystem: new LocalFilesystem({\n      basePath: projectPath,\n      allowedPaths: [projectPath, ...allowedPaths],\n    }),\n    sandbox: new LocalSandbox({ workingDirectory: projectPath }),\n    tools: createMastraCodeWorkspaceTools(),\n  });\n  const workspaceTools = await createWorkspaceTools(workspace, { workspace });\n  for (const [toolId, tool] of Object.entries(workspaceTools)) {\n    mastra.addTool(tool, toolId);\n  }\n\n  // 3. Model-independent web tools. Provider-native web tools (Anthropic/OpenAI)\n  //    are model-locked and would freeze workflows to one provider.\n  const configuredWebTools = createConfiguredWebTools();\n  if (configuredWebTools) {\n    mastra.addTool(configuredWebTools.web_search, 'web-search');\n    mastra.addTool(configuredWebTools.web_extract, 'web-extract');\n  }\n\n  // 4. notification_inbox — LazyNotificationsStorage resolves the notifications\n  //    domain per-call rather than at boot, so it works even when the domain\n  //    isn't fully initialised yet.\n  const storage = mastra.getStorage();\n  if (storage) {\n    const notificationInbox = createNotificationInboxTool({\n      storage: new LazyNotificationsStorage(storage as never),\n    });\n    mastra.addTool(notificationInbox, MC_TOOLS.NOTIFICATION_INBOX);\n  }\n\n  // 5. MCP tools — snapshot the current set. Ids are already server-namespaced\n  //    (`${serverName}_${toolName}`), so the workflow rehydrator's\n  //    `mastra.getTool(id)` resolves them at run time.\n  if (mcpManager) {\n    for (const [toolId, tool] of Object.entries(mcpManager.getTools())) {\n      mastra.addTool(tool, toolId);\n    }\n  }\n}\n"],"mappings":";;;;;;;;AA2DA,eAAsB,kCACpB,QACA,SACe;CACf,MAAM,EAAE,aAAa,eAAe,CAAC,GAAG,WAAW,eAAe;CAGlE,OAAO,SAAS,sBAAsB,kBAAkB;CACxD,OAAO,SAAS,WAAW,YAAY;CAGvC,MAAM,YAAY,IAAI,UAAU;EAC9B,IAAI;EACJ,MAAM;EACN,YAAY,IAAI,gBAAgB;GAC9B,UAAU;GACV,cAAc,CAAC,aAAa,GAAG,YAAY;EAC7C,CAAC;EACD,SAAS,IAAI,aAAa,EAAE,kBAAkB,YAAY,CAAC;EAC3D,OAAO,+BAA+B;CACxC,CAAC;CACD,MAAM,iBAAiB,MAAM,qBAAqB,WAAW,EAAE,UAAU,CAAC;CAC1E,KAAK,MAAM,CAAC,QAAQ,SAAS,OAAO,QAAQ,cAAc,GACxD,OAAO,QAAQ,MAAM,MAAM;CAK7B,MAAM,qBAAqB,yBAAyB;CACpD,IAAI,oBAAoB;EACtB,OAAO,QAAQ,mBAAmB,YAAY,YAAY;EAC1D,OAAO,QAAQ,mBAAmB,aAAa,aAAa;CAC9D;CAKA,MAAM,UAAU,OAAO,WAAW;CAClC,IAAI,SAAS;EACX,MAAM,oBAAoB,4BAA4B,EACpD,SAAS,IAAI,yBAAyB,OAAgB,EACxD,CAAC;EACD,OAAO,QAAQ,mBAAmB,SAAS,kBAAkB;CAC/D;CAKA,IAAI,YACF,KAAK,MAAM,CAAC,QAAQ,SAAS,OAAO,QAAQ,WAAW,SAAS,CAAC,GAC/D,OAAO,QAAQ,MAAM,MAAM;AAGjC"}
+{"version":3,"file":"register-primitives.js","names":[],"sources":["../../src/workflows/register-primitives.ts"],"sourcesContent":["/**\n * Statically register workflow-related primitives on the mastracode Mastra\n * instance so `mastra.listTools()` + `mastra.listAgents()` — and, therefore,\n * the workflow-builder's discovery + the workflow rehydrator — see everything\n * a workflow might want to compose:\n *\n *   - workflow-builder sub-agent (so `create-workflow` can delegate)\n *   - code-agent (as a plain agent, callable via agent steps)\n *   - workspace tools (view/write/edit/find_files/execute_command/etc.)\n *   - configured model-independent web tools so workflows can compose search/extract steps\n *   - notification_inbox\n *   - snapshot of MCP tools from mcpManager\n *\n * Called after `controller.init()` but before `startWorkers()` in both boot\n * paths, so `loadStoredWorkflows()` (inside startWorkers) sees the full\n * registry when rehydrating previously-saved workflows.\n *\n * Tradeoffs:\n *   - MCP tools are snapshotted. Servers added after boot are invisible to\n *     the workflow-builder until restart.\n *   - Provider-native (Anthropic/OpenAI) web\n *     tools are skipped because they'd freeze workflows to one model provider.\n *   - Workflow tool steps get the closed-over workspace + auth (web provider\n *     key, MCP server credentials), not per-request permissions — deliberate; if\n *     the user built + saved the workflow they meant to run it.\n */\nimport type { Agent } from '@mastra/core/agent';\nimport type { Mastra } from '@mastra/core/mastra';\nimport { createNotificationInboxTool } from '@mastra/core/notifications';\nimport { LocalFilesystem, LocalSandbox, Workspace, createWorkspaceTools } from '@mastra/core/workspace';\nimport { createMastraCodeWorkspaceTools } from '../agents/tool-availability.js';\nimport { LazyNotificationsStorage } from '../agents/tools.js';\nimport { workflowBuilderAgent } from '../agents/workflow-builder-agent.js';\nimport type { McpManager } from '../mcp';\nimport { MC_TOOLS } from '../tool-names.js';\nimport { createConfiguredWebTools } from '../tools/web-search.js';\n\nexport interface RegisterWorkflowBuilderPrimitivesOptions {\n  projectPath: string;\n  /**\n   * Extra allowed paths the workspace can read/write. Mastracode normally\n   * collects skill paths + sandboxAllowedPaths per-request; for the workflow\n   * workspace we accept anything the caller wants up-front and trust the\n   * worker process to honour the user's intent.\n   */\n  allowedPaths?: string[];\n  /**\n   * The code-agent Agent instance. Registered as `code-agent` so workflows\n   * can compose it in agent steps. It already has full dynamic tool access\n   * (workspace/MCP/web/etc.) via its own `tools: createDynamicTools(...)`.\n   */\n  codeAgent: Agent;\n  /**\n   * McpManager for snapshotting MCP tools at boot. Omit or pass undefined\n   * if MCP is disabled — workflow-builder will just see fewer tools.\n   */\n  mcpManager?: McpManager;\n}\n\nexport async function registerWorkflowBuilderPrimitives(\n  mastra: Mastra,\n  options: RegisterWorkflowBuilderPrimitivesOptions,\n): Promise<void> {\n  const { projectPath, allowedPaths = [], codeAgent, mcpManager } = options;\n\n  // 1. Agents workflows can compose.\n  mastra.addAgent(workflowBuilderAgent, 'workflow-builder');\n  mastra.addAgent(codeAgent, 'code-agent');\n\n  // 2. Workspace tools — bound to a project-rooted local workspace.\n  const workspace = new Workspace({\n    id: 'workflow-builder-workspace',\n    name: 'Mastra Code Workspace (workflows)',\n    filesystem: new LocalFilesystem({\n      basePath: projectPath,\n      allowedPaths: [projectPath, ...allowedPaths],\n    }),\n    sandbox: new LocalSandbox({ workingDirectory: projectPath, timeout: 30_000 }),\n    tools: createMastraCodeWorkspaceTools(),\n  });\n  const workspaceTools = await createWorkspaceTools(workspace, { workspace });\n  for (const [toolId, tool] of Object.entries(workspaceTools)) {\n    mastra.addTool(tool, toolId);\n  }\n\n  // 3. Model-independent web tools. Provider-native web tools (Anthropic/OpenAI)\n  //    are model-locked and would freeze workflows to one provider.\n  const configuredWebTools = createConfiguredWebTools();\n  if (configuredWebTools) {\n    mastra.addTool(configuredWebTools.web_search, 'web-search');\n    mastra.addTool(configuredWebTools.web_extract, 'web-extract');\n  }\n\n  // 4. notification_inbox — LazyNotificationsStorage resolves the notifications\n  //    domain per-call rather than at boot, so it works even when the domain\n  //    isn't fully initialised yet.\n  const storage = mastra.getStorage();\n  if (storage) {\n    const notificationInbox = createNotificationInboxTool({\n      storage: new LazyNotificationsStorage(storage as never),\n    });\n    mastra.addTool(notificationInbox, MC_TOOLS.NOTIFICATION_INBOX);\n  }\n\n  // 5. MCP tools — snapshot the current set. Ids are already server-namespaced\n  //    (`${serverName}_${toolName}`), so the workflow rehydrator's\n  //    `mastra.getTool(id)` resolves them at run time.\n  if (mcpManager) {\n    for (const [toolId, tool] of Object.entries(mcpManager.getTools())) {\n      mastra.addTool(tool, toolId);\n    }\n  }\n}\n"],"mappings":";;;;;;;;AA2DA,eAAsB,kCACpB,QACA,SACe;CACf,MAAM,EAAE,aAAa,eAAe,CAAC,GAAG,WAAW,eAAe;CAGlE,OAAO,SAAS,sBAAsB,kBAAkB;CACxD,OAAO,SAAS,WAAW,YAAY;CAGvC,MAAM,YAAY,IAAI,UAAU;EAC9B,IAAI;EACJ,MAAM;EACN,YAAY,IAAI,gBAAgB;GAC9B,UAAU;GACV,cAAc,CAAC,aAAa,GAAG,YAAY;EAC7C,CAAC;EACD,SAAS,IAAI,aAAa;GAAE,kBAAkB;GAAa,SAAS;EAAO,CAAC;EAC5E,OAAO,+BAA+B;CACxC,CAAC;CACD,MAAM,iBAAiB,MAAM,qBAAqB,WAAW,EAAE,UAAU,CAAC;CAC1E,KAAK,MAAM,CAAC,QAAQ,SAAS,OAAO,QAAQ,cAAc,GACxD,OAAO,QAAQ,MAAM,MAAM;CAK7B,MAAM,qBAAqB,yBAAyB;CACpD,IAAI,oBAAoB;EACtB,OAAO,QAAQ,mBAAmB,YAAY,YAAY;EAC1D,OAAO,QAAQ,mBAAmB,aAAa,aAAa;CAC9D;CAKA,MAAM,UAAU,OAAO,WAAW;CAClC,IAAI,SAAS;EACX,MAAM,oBAAoB,4BAA4B,EACpD,SAAS,IAAI,yBAAyB,OAAgB,EACxD,CAAC;EACD,OAAO,QAAQ,mBAAmB,SAAS,kBAAkB;CAC/D;CAKA,IAAI,YACF,KAAK,MAAM,CAAC,QAAQ,SAAS,OAAO,QAAQ,WAAW,SAAS,CAAC,GAC/D,OAAO,QAAQ,MAAM,MAAM;AAGjC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mastra/code-sdk",
-  "version": "1.15.0-alpha.1",
+  "version": "1.15.0-alpha.10",
   "description": "Mastra Code SDK: the agent core behind Mastra Code (everything except the TUI) — build your own UIs and surfaces on top of it",
   "type": "module",
   "publishConfig": {
@@ -46,13 +46,13 @@
   },
   "dependencies": {
     "@agentclientprotocol/sdk": "^0.21.0",
-    "@ai-sdk/amazon-bedrock": "^3.0.111",
-    "@ai-sdk/anthropic": "^3.0.103",
-    "@ai-sdk/openai": "^3.0.88",
-    "@ai-sdk/openai-compatible": "^2.0.62",
+    "@ai-sdk/amazon-bedrock": "^3.0.140",
+    "@ai-sdk/anthropic": "^3.0.133",
+    "@ai-sdk/openai": "^3.0.130",
+    "@ai-sdk/openai-compatible": "^2.0.85",
     "@ast-grep/napi": "^0.42.0",
     "@aws-sdk/credential-providers": "^3.1095.0",
-    "ai": "^6.0.236",
+    "ai": "^6.0.309",
     "execa": "^9.6.1",
     "libsql": "^0.5.29",
     "posthog-node": "^5.46.1",
@@ -61,34 +61,34 @@
     "vscode-jsonrpc": "^8.2.1",
     "vscode-languageserver-protocol": "^3.17.5",
     "yaml": "^2.7.1",
-    "zod": "^4.6.4",
+    "zod": "^4.6.7",
     "@mastra/agent-browser": "0.5.4-alpha.0",
-    "@mastra/core": "1.79.0-alpha.1",
-    "@mastra/duckdb": "1.15.0-alpha.1",
+    "@mastra/core": "1.79.0-alpha.9",
+    "@mastra/client-js": "1.56.0-alpha.9",
+    "@mastra/duckdb": "1.15.0-alpha.5",
+    "@mastra/fastembed": "1.3.4-alpha.2",
+    "@mastra/libsql": "1.27.0-alpha.3",
+    "@mastra/mcp": "2.5.0-alpha.1",
+    "@mastra/observability": "1.21.0-alpha.2",
+    "@mastra/memory": "1.39.0-alpha.6",
     "@mastra/github-signals": "0.5.2-alpha.0",
-    "@mastra/fastembed": "1.3.4-alpha.0",
-    "@mastra/mcp": "2.4.2-alpha.0",
-    "@mastra/memory": "1.39.0-alpha.0",
-    "@mastra/parallel": "0.1.3-alpha.0",
-    "@mastra/observability": "1.21.0-alpha.1",
-    "@mastra/libsql": "1.27.0-alpha.1",
-    "@mastra/pg": "1.32.0-alpha.1",
-    "@mastra/tavily": "1.1.3-alpha.0",
+    "@mastra/parallel": "0.1.3-alpha.1",
+    "@mastra/pg": "1.32.0-alpha.5",
     "@mastra/schema-compat": "1.3.16-alpha.0",
+    "@mastra/tavily": "1.1.3-alpha.1",
     "@mastra/stagehand": "0.3.6-alpha.0"
   },
   "devDependencies": {
+    "@copilotkit/aimock": "^1.29.0",
     "@libsql/client": "^0.18.0",
     "@types/node": "22.20.1",
-    "eslint": "^10.7.0",
     "tsdown": "0.22.9",
     "tsx": "^4.23.1",
     "typescript": "^6.0.3",
-    "typescript-eslint": "^8.57.0",
     "vitest": "4.1.11",
-    "@internal/lint": "0.0.144",
     "@internal/types-builder": "0.0.119",
-    "@internal/workspace-test-utils": "0.0.88"
+    "@internal/workspace-test-utils": "0.0.88",
+    "@internal/lint": "0.0.144"
   },
   "engines": {
     "node": ">=22.19.0"
@@ -98,8 +98,8 @@
     "check": "tsc --noEmit",
     "test": "vitest run",
     "test:acp": "vitest run --config vitest.acp.config.ts",
-    "lint": "oxlint . && eslint .",
-    "lint:fix": "oxlint --fix . && eslint --fix .",
+    "lint": "oxlint --type-aware .",
+    "lint:fix": "oxlint --type-aware --fix .",
     "build:acp:dev": "node scripts/build-acp-dev.mjs",
     "test:acp:conformance": "node scripts/run-acp-conformance.mjs",
     "check:acp": "tsc --noEmit -p tsconfig.acp.json"