@mastra/deployer 1.50.0-alpha.0 → 1.50.0-alpha.2

package/CHANGELOG.md

@@ -1,5 +1,36 @@
 # @mastra/deployer
 
+## 1.50.0-alpha.2
+
+### Minor Changes
+
+- Added file-system-routed workflows support. Workflows placed in `workflows/*.ts` under the mastra directory are now auto-discovered and registered during `mastra dev` / `mastra build`, matching the existing file-based agents convention. Code-registered workflows win on name collisions. ([#18883](https://github.com/mastra-ai/mastra/pull/18883))
+
+  ```ts
+  // src/mastra/workflows/onboarding.ts
+  import { createWorkflow } from '@mastra/core/workflows';
+
+  export default createWorkflow({ id: 'onboarding' /* ...steps */ });
+  ```
+
+### Patch Changes
+
+- Updated dependencies [[`a51c63d`](https://github.com/mastra-ai/mastra/commit/a51c63d8ee639e4daeba2a0be093efa6a1b5e52f), [`02705fd`](https://github.com/mastra-ai/mastra/commit/02705fd2f5a9062210d64ea061adeeb10dc9452e)]:
+  - @mastra/core@1.50.0-alpha.2
+  - @mastra/server@1.50.0-alpha.2
+
+## 1.50.0-alpha.1
+
+### Patch Changes
+
+- Fixed Studio HTML config injection so platform environment values are escaped before they are embedded in served or deployed `index.html` files. This keeps organization IDs, project IDs, observability endpoints and telemetry flags intact when they contain quotes, angle brackets, newlines or `$` sequences, and exposes `escapeStudioHtmlValue` from `@mastra/deployer/build` for the shared injection paths. ([#18812](https://github.com/mastra-ai/mastra/pull/18812))
+
+- Hardened several string-parsing code paths against regular-expression denial of service (ReDoS). Path normalization, URL trimming, LLM token stripping, and observation parsing now use linear-time string scanning instead of regexes that could back-track polynomially on adversarial input. No behavior changes. ([#18801](https://github.com/mastra-ai/mastra/pull/18801))
+
+- Updated dependencies [[`3ffb8b7`](https://github.com/mastra-ai/mastra/commit/3ffb8b720e90f5e6977129ec1f6707d43c2bebe0), [`5ea76a7`](https://github.com/mastra-ai/mastra/commit/5ea76a723d966c72da9aa3ab30ae20276e049765), [`6445560`](https://github.com/mastra-ai/mastra/commit/6445560327045d20b239585fc63fed72e9ce36ec), [`a2ba369`](https://github.com/mastra-ai/mastra/commit/a2ba369e796dfab610f41c6875965b488272fa55), [`ae51e81`](https://github.com/mastra-ai/mastra/commit/ae51e818825582d42500338dfc1929a082eff0ba), [`6f304ef`](https://github.com/mastra-ai/mastra/commit/6f304ef319e99725e884bdb8d3193c001b6e5964)]:
+  - @mastra/core@1.50.0-alpha.1
+  - @mastra/server@1.50.0-alpha.1
+
 ## 1.50.0-alpha.0
 
 ### Patch Changes

package/dist/build/analyze.cjs

@@ -1,12 +1,12 @@
 'use strict';
 
-var chunkIMPHNLMW_cjs = require('../chunk-IMPHNLMW.cjs');
+var chunkYWKYOGOS_cjs = require('../chunk-YWKYOGOS.cjs');
 
 
 
 Object.defineProperty(exports, "analyzeBundle", {
   enumerable: true,
-  get: function () { return chunkIMPHNLMW_cjs.analyzeBundle; }
+  get: function () { return chunkYWKYOGOS_cjs.analyzeBundle; }
 });
 //# sourceMappingURL=analyze.cjs.map
 //# sourceMappingURL=analyze.cjs.map

package/dist/build/analyze.js

@@ -1,3 +1,3 @@
-export { analyzeBundle } from '../chunk-4MVAT24Z.js';
+export { analyzeBundle } from '../chunk-LJBNHINW.js';
 //# sourceMappingURL=analyze.js.map
 //# sourceMappingURL=analyze.js.map

package/dist/build/bundler.cjs

@@ -1,24 +1,24 @@
 'use strict';
 
-var chunkN5CQWHN3_cjs = require('../chunk-N5CQWHN3.cjs');
+var chunk2GJY6H6M_cjs = require('../chunk-2GJY6H6M.cjs');
 
 
 
 Object.defineProperty(exports, "createBundler", {
   enumerable: true,
-  get: function () { return chunkN5CQWHN3_cjs.createBundler; }
+  get: function () { return chunk2GJY6H6M_cjs.createBundler; }
 });
 Object.defineProperty(exports, "getInputOptions", {
   enumerable: true,
-  get: function () { return chunkN5CQWHN3_cjs.getInputOptions; }
+  get: function () { return chunk2GJY6H6M_cjs.getInputOptions; }
 });
 Object.defineProperty(exports, "mastraInternalAliasPlugin", {
   enumerable: true,
-  get: function () { return chunkN5CQWHN3_cjs.mastraInternalAliasPlugin; }
+  get: function () { return chunk2GJY6H6M_cjs.mastraInternalAliasPlugin; }
 });
 Object.defineProperty(exports, "mastraToolsAliasPlugin", {
   enumerable: true,
-  get: function () { return chunkN5CQWHN3_cjs.mastraToolsAliasPlugin; }
+  get: function () { return chunk2GJY6H6M_cjs.mastraToolsAliasPlugin; }
 });
 //# sourceMappingURL=bundler.cjs.map
 //# sourceMappingURL=bundler.cjs.map

package/dist/build/bundler.js

@@ -1,3 +1,3 @@
-export { createBundler, getInputOptions, mastraInternalAliasPlugin, mastraToolsAliasPlugin } from '../chunk-FHLWDI5H.js';
+export { createBundler, getInputOptions, mastraInternalAliasPlugin, mastraToolsAliasPlugin } from '../chunk-6ARGMWNC.js';
 //# sourceMappingURL=bundler.js.map
 //# sourceMappingURL=bundler.js.map

package/dist/build/fs-routing/codegen.d.ts

@@ -1,4 +1,4 @@
-import type { DiscoveredFsAgent } from './discover.js';
+import type { DiscoveredFsAgent, DiscoveredFsWorkflow } from './discover.js';
 /**
  * Generate the source of a wrapper module that:
  * 1. imports the user's real Mastra entry,
@@ -18,5 +18,19 @@ import type { DiscoveredFsAgent } from './discover.js';
  * @param userEntry slash-normalized absolute path to the user's mastra entry.
  * @param agents discovered fs-routed agents (absolute, slash-normalized paths).
  */
-export declare function generateFsAgentsModule(userEntry: string, agents: DiscoveredFsAgent[]): Promise<string>;
+export declare function generateFsAgentsModule(userEntry: string, agents: DiscoveredFsAgent[], options?: {
+    workflows?: DiscoveredFsWorkflow[];
+}): Promise<string>;
+/**
+ * Generate the workflow-registration lines to splice into the generated wrapper
+ * module. Emits import statements for each discovered workflow module and a
+ * registration block that calls `__registerFsWorkflows` on the user's mastra.
+ *
+ * Returns `{ importLines, registrationLines }` so the caller can place them at
+ * the correct positions in the wrapper source.
+ */
+export declare function generateFsWorkflowsCodegen(workflows: DiscoveredFsWorkflow[]): {
+    importLines: string[];
+    registrationLines: string[];
+};
 //# sourceMappingURL=codegen.d.ts.map

package/dist/build/fs-routing/codegen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codegen.d.ts","sourceRoot":"","sources":["../../../src/build/fs-routing/codegen.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AA0HpD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAoD5G"}
+{"version":3,"file":"codegen.d.ts","sourceRoot":"","sources":["../../../src/build/fs-routing/codegen.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AA0H1E;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,iBAAiB,EAAE,EAC3B,OAAO,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,oBAAoB,EAAE,CAAA;CAAE,GAC/C,OAAO,CAAC,MAAM,CAAC,CAwEjB;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,oBAAoB,EAAE,GAAG;IAC7E,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B,CAsBA"}

package/dist/build/fs-routing/discover.d.ts

@@ -68,4 +68,24 @@ export type DiscoveredFsSkill = {
  * evaluation — only filesystem inspection.
  */
 export declare function discoverFsAgents(mastraDir: string, onWarn?: (message: string) => void): Promise<DiscoveredFsAgent[]>;
+/**
+ * A file-system routed workflow file discovered under `<mastraDir>/workflows/`.
+ * All paths are absolute and slash-normalized so they can be embedded into
+ * generated module source on any platform.
+ */
+export interface DiscoveredFsWorkflow {
+    /** Workflow key derived from the filename (without extension). */
+    key: string;
+    /** Absolute, slash-normalized path to the workflow module. */
+    path: string;
+}
+/**
+ * Scan `<mastraDir>/workflows/` for file-system routed workflow modules. Only
+ * files whose source contains an `export default` are treated as fs-routed
+ * workflows — this convention distinguishes them from workflow files that are
+ * manually imported and registered programmatically. Returns descriptors with
+ * absolute, slash-normalized paths ready for codegen. Performs no module
+ * evaluation — only filesystem and source-text inspection.
+ */
+export declare function discoverFsWorkflows(mastraDir: string): Promise<DiscoveredFsWorkflow[]>;
 //# sourceMappingURL=discover.d.ts.map

package/dist/build/fs-routing/discover.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"discover.d.ts","sourceRoot":"","sources":["../../../src/build/fs-routing/discover.ts"],"names":[],"mappings":"AAMA;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,GAAG,EAAE,MAAM,CAAC;IACZ,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kEAAkE;IAClE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iEAAiE;IACjE,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACvC,mEAAmE;IACnE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B;;;;;OAKG;IACH,SAAS,EAAE,iBAAiB,EAAE,CAAC;CAChC;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,iBAAiB,GACzB;IACE,IAAI,EAAE,QAAQ,CAAC;IACf,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;CACd,GACD;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC,CAAC;AA4RN;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GACjC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CA0B9B"}
+{"version":3,"file":"discover.d.ts","sourceRoot":"","sources":["../../../src/build/fs-routing/discover.ts"],"names":[],"mappings":"AAMA;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,GAAG,EAAE,MAAM,CAAC;IACZ,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kEAAkE;IAClE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iEAAiE;IACjE,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACvC,mEAAmE;IACnE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B;;;;;OAKG;IACH,SAAS,EAAE,iBAAiB,EAAE,CAAC;CAChC;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,iBAAiB,GACzB;IACE,IAAI,EAAE,QAAQ,CAAC;IACf,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;CACd,GACD;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC,CAAC;AA4RN;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GACjC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CA0B9B;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,kEAAkE;IAClE,GAAG,EAAE,MAAM,CAAC;IACZ,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAoC5F"}

package/dist/build/fs-routing/prepare.d.ts

@@ -1,8 +1,9 @@
 export interface PrepareFsAgentsEntryResult {
     /**
      * The entry file that should be fed to the bundler/analyzer. When fs-routed
-     * agents are found this is a generated wrapper module that registers them onto
-     * the user's mastra instance; otherwise it is the original entry unchanged.
+     * primitives (agents, workflows) are found this is a generated wrapper module
+     * that registers them onto the user's mastra instance; otherwise it is the
+     * original entry unchanged.
      */
     entryFile: string;
     /**
@@ -12,26 +13,28 @@ export interface PrepareFsAgentsEntryResult {
     toolPaths: string[];
     /** Number of fs-routed agents discovered. */
     agentCount: number;
+    /** Number of fs-routed workflows discovered. */
+    workflowCount: number;
     /**
      * Generated wrapper source to write to {@link entryFile}, or `undefined` when
-     * there are no fs-routed agents. The write is deferred so callers can run it
-     * *after* `bundler.prepare()` empties the output directory — otherwise the
+     * there are no fs-routed primitives. The write is deferred so callers can run
+     * it *after* `bundler.prepare()` empties the output directory — otherwise the
      * wrapper is wiped before the bundler reads it.
      */
     moduleSource?: string;
 }
 /**
- * Discover fs-routed agents under `<mastraDir>/agents/*` and, if any exist,
- * generate a wrapper entry module that registers them onto the user's mastra
- * instance. Returns the entry the bundler should use plus extra tool glob paths
- * so `agents/*\/tools` are bundled.
+ * Discover fs-routed agents under `<mastraDir>/agents/*` and workflows under
+ * `<mastraDir>/workflows/`. When any are found, generate a wrapper entry module
+ * that registers them onto the user's mastra instance. Returns the entry the
+ * bundler should use plus extra tool glob paths so `agents/*\/tools` are bundled.
  *
  * This does NOT write the wrapper to disk; call {@link writeFsAgentsEntry} with
  * the result after `bundler.prepare()` so the generated file is not wiped when
  * the output directory is emptied.
  *
- * When no fs-routed agents are present the original entry is returned unchanged,
- * so existing code-only projects are completely unaffected.
+ * When no fs-routed primitives are present the original entry is returned
+ * unchanged, so existing code-only projects are completely unaffected.
  */
 export declare function prepareFsAgentsEntry(mastraDir: string, entryFile: string, outputDirectory: string): Promise<PrepareFsAgentsEntryResult>;
 /**

package/dist/build/fs-routing/prepare.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prepare.d.ts","sourceRoot":"","sources":["../../../src/build/fs-routing/prepare.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,6CAA6C;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,0BAA0B,CAAC,CAkBrC;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAO1F"}
+{"version":3,"file":"prepare.d.ts","sourceRoot":"","sources":["../../../src/build/fs-routing/prepare.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,0BAA0B;IACzC;;;;;OAKG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,6CAA6C;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,gDAAgD;IAChD,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,0BAA0B,CAAC,CA2BrC;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAO1F"}

package/dist/build/index.cjs

@@ -1,61 +1,69 @@
 'use strict';
 
-var chunkEU74XSTG_cjs = require('../chunk-EU74XSTG.cjs');
-var chunkVNJLLLQN_cjs = require('../chunk-VNJLLLQN.cjs');
-var chunkIMPHNLMW_cjs = require('../chunk-IMPHNLMW.cjs');
-var chunkN5CQWHN3_cjs = require('../chunk-N5CQWHN3.cjs');
+var chunkXSAPBEYT_cjs = require('../chunk-XSAPBEYT.cjs');
+var chunkILNCPWNL_cjs = require('../chunk-ILNCPWNL.cjs');
+var chunkYWKYOGOS_cjs = require('../chunk-YWKYOGOS.cjs');
+var chunk2GJY6H6M_cjs = require('../chunk-2GJY6H6M.cjs');
 var chunkVKAFARW6_cjs = require('../chunk-VKAFARW6.cjs');
-var chunk7YI2AEFO_cjs = require('../chunk-7YI2AEFO.cjs');
+var chunkJZRFRUGM_cjs = require('../chunk-JZRFRUGM.cjs');
 
 
 
 Object.defineProperty(exports, "createWatcher", {
   enumerable: true,
-  get: function () { return chunkEU74XSTG_cjs.createWatcher; }
+  get: function () { return chunkXSAPBEYT_cjs.createWatcher; }
 });
 Object.defineProperty(exports, "discoverFsAgents", {
   enumerable: true,
-  get: function () { return chunkEU74XSTG_cjs.discoverFsAgents; }
+  get: function () { return chunkXSAPBEYT_cjs.discoverFsAgents; }
+});
+Object.defineProperty(exports, "discoverFsWorkflows", {
+  enumerable: true,
+  get: function () { return chunkXSAPBEYT_cjs.discoverFsWorkflows; }
 });
 Object.defineProperty(exports, "generateFsAgentsModule", {
   enumerable: true,
-  get: function () { return chunkEU74XSTG_cjs.generateFsAgentsModule; }
+  get: function () { return chunkXSAPBEYT_cjs.generateFsAgentsModule; }
+});
+Object.defineProperty(exports, "generateFsWorkflowsCodegen", {
+  enumerable: true,
+  get: function () { return chunkXSAPBEYT_cjs.generateFsWorkflowsCodegen; }
 });
 Object.defineProperty(exports, "getServerOptions", {
   enumerable: true,
-  get: function () { return chunkEU74XSTG_cjs.getServerOptions; }
+  get: function () { return chunkXSAPBEYT_cjs.getServerOptions; }
 });
 Object.defineProperty(exports, "getWatcherInputOptions", {
   enumerable: true,
-  get: function () { return chunkEU74XSTG_cjs.getInputOptions; }
+  get: function () { return chunkXSAPBEYT_cjs.getInputOptions; }
 });
 Object.defineProperty(exports, "mirrorFsAgentWorkspaces", {
   enumerable: true,
-  get: function () { return chunkEU74XSTG_cjs.mirrorFsAgentWorkspaces; }
+  get: function () { return chunkXSAPBEYT_cjs.mirrorFsAgentWorkspaces; }
 });
 Object.defineProperty(exports, "prepareFsAgentsEntry", {
   enumerable: true,
-  get: function () { return chunkEU74XSTG_cjs.prepareFsAgentsEntry; }
+  get: function () { return chunkXSAPBEYT_cjs.prepareFsAgentsEntry; }
 });
 Object.defineProperty(exports, "writeFsAgentsEntry", {
   enumerable: true,
-  get: function () { return chunkEU74XSTG_cjs.writeFsAgentsEntry; }
+  get: function () { return chunkXSAPBEYT_cjs.writeFsAgentsEntry; }
 });
 Object.defineProperty(exports, "getBundlerOptions", {
   enumerable: true,
-  get: function () { return chunkVNJLLLQN_cjs.getBundlerOptions; }
+  get: function () { return chunkILNCPWNL_cjs.getBundlerOptions; }
 });
 Object.defineProperty(exports, "analyzeBundle", {
   enumerable: true,
-  get: function () { return chunkIMPHNLMW_cjs.analyzeBundle; }
+  get: function () { return chunkYWKYOGOS_cjs.analyzeBundle; }
 });
 Object.defineProperty(exports, "createBundler", {
   enumerable: true,
-  get: function () { return chunkN5CQWHN3_cjs.createBundler; }
+  get: function () { return chunk2GJY6H6M_cjs.createBundler; }
 });
 Object.defineProperty(exports, "getBundlerInputOptions", {
   enumerable: true,
-  get: function () { return chunkN5CQWHN3_cjs.getInputOptions; }
+  get: function () { return chunk2GJY6H6M_cjs.getInputOptions; }
 });
 Object.defineProperty(exports, "Deps", {
   enumerable: true,
@@ -67,15 +75,19 @@ Object.defineProperty(exports, "FileService", {
 });
 Object.defineProperty(exports, "detectRuntime", {
   enumerable: true,
-  get: function () { return chunk7YI2AEFO_cjs.detectRuntime; }
+  get: function () { return chunkJZRFRUGM_cjs.detectRuntime; }
+});
+Object.defineProperty(exports, "escapeStudioHtmlValue", {
+  enumerable: true,
+  get: function () { return chunkJZRFRUGM_cjs.escapeStudioHtmlValue; }
 });
 Object.defineProperty(exports, "injectStudioHtmlConfig", {
   enumerable: true,
-  get: function () { return chunk7YI2AEFO_cjs.injectStudioHtmlConfig; }
+  get: function () { return chunkJZRFRUGM_cjs.injectStudioHtmlConfig; }
 });
 Object.defineProperty(exports, "normalizeStudioBase", {
   enumerable: true,
-  get: function () { return chunk7YI2AEFO_cjs.normalizeStudioBase; }
+  get: function () { return chunkJZRFRUGM_cjs.normalizeStudioBase; }
 });
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map

package/dist/build/index.d.ts

@@ -5,11 +5,11 @@ export { FileService } from '../services/fs.js';
 export { Deps } from '../services/deps.js';
 export { getServerOptions } from './serverOptions.js';
 export { getBundlerOptions } from './bundlerOptions.js';
-export { normalizeStudioBase, detectRuntime, injectStudioHtmlConfig } from './utils.js';
+export { normalizeStudioBase, detectRuntime, injectStudioHtmlConfig, escapeStudioHtmlValue } from './utils.js';
 export type { RuntimePlatform, BundlerPlatform, StudioInjectionConfig } from './utils.js';
-export { discoverFsAgents } from './fs-routing/discover.js';
-export type { DiscoveredFsAgent } from './fs-routing/discover.js';
-export { generateFsAgentsModule } from './fs-routing/codegen.js';
+export { discoverFsAgents, discoverFsWorkflows } from './fs-routing/discover.js';
+export type { DiscoveredFsAgent, DiscoveredFsWorkflow } from './fs-routing/discover.js';
+export { generateFsAgentsModule, generateFsWorkflowsCodegen } from './fs-routing/codegen.js';
 export { prepareFsAgentsEntry, writeFsAgentsEntry } from './fs-routing/prepare.js';
 export type { PrepareFsAgentsEntryResult } from './fs-routing/prepare.js';
 export { mirrorFsAgentWorkspaces } from './fs-routing/mirror.js';

package/dist/build/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/build/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,eAAe,IAAI,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,eAAe,IAAI,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AACrF,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,YAAY,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAChF,YAAY,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/build/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,eAAe,IAAI,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,eAAe,IAAI,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAC5G,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC9E,YAAY,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AACrF,OAAO,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAC1F,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAChF,YAAY,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/build/index.js

@@ -1,8 +1,8 @@
-export { createWatcher, discoverFsAgents, generateFsAgentsModule, getServerOptions, getInputOptions as getWatcherInputOptions, mirrorFsAgentWorkspaces, prepareFsAgentsEntry, writeFsAgentsEntry } from '../chunk-YG455MPH.js';
-export { getBundlerOptions } from '../chunk-CCBU3OII.js';
-export { analyzeBundle } from '../chunk-4MVAT24Z.js';
-export { createBundler, getInputOptions as getBundlerInputOptions } from '../chunk-FHLWDI5H.js';
+export { createWatcher, discoverFsAgents, discoverFsWorkflows, generateFsAgentsModule, generateFsWorkflowsCodegen, getServerOptions, getInputOptions as getWatcherInputOptions, mirrorFsAgentWorkspaces, prepareFsAgentsEntry, writeFsAgentsEntry } from '../chunk-UBCDMTQL.js';
+export { getBundlerOptions } from '../chunk-UA2DJWFT.js';
+export { analyzeBundle } from '../chunk-LJBNHINW.js';
+export { createBundler, getInputOptions as getBundlerInputOptions } from '../chunk-6ARGMWNC.js';
 export { Deps, FileService } from '../chunk-ZL66GDLP.js';
-export { detectRuntime, injectStudioHtmlConfig, normalizeStudioBase } from '../chunk-ANDDGKY5.js';
+export { detectRuntime, escapeStudioHtmlValue, injectStudioHtmlConfig, normalizeStudioBase } from '../chunk-WP65JQAT.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/build/utils.d.ts

@@ -128,6 +128,13 @@ export interface StudioInjectionConfig {
  * source HTML) with the provided expression verbatim.
  */
 export declare function injectStudioHtmlConfig(html: string, config: StudioInjectionConfig): string;
+/**
+ * Escape a dynamic value for embedding inside a single-quoted JavaScript
+ * string literal in the Studio `index.html` (e.g. `window.X = '<value>'`).
+ * Without it, an env-derived value containing `'` or `</script>` breaks out
+ * of the literal and corrupts (or injects into) the served page.
+ */
+export declare function escapeStudioHtmlValue(value: string): string;
 /**
  * Check if a module is a Node.js builtin module
  * @param specifier - Module specifier

package/dist/build/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/build/utils.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAE5E,kDAAkD;AAClD,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,KAAK,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;AAE7D;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,eAAe,GAAG,wBAAwB,CAYzF;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,IAAI,eAAe,CAK/C;AAED,wBAAgB,eAAe,CAAC,EAAE,GAAmB,EAAE,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,QAOxE;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,WAMzE;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,sBAQxC;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAO5D;AAID;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,WAAW,GAAE,SAAS,MAAM,EAAyC,GACpE,OAAO,CAMT;AAUD;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,UAE5E;AAED;;;;;;;GAOG;AACH,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,UAQjC;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,UAU3D;AAcD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAqB/E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CA2B9D;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,6BAA6B,EAAE,MAAM,CAAC;IACtC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,GAAG,MAAM,CA+B1F;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAM1D;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAkBhE"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/build/utils.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAE5E,kDAAkD;AAClD,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,KAAK,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;AAE7D;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,eAAe,GAAG,wBAAwB,CAYzF;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,IAAI,eAAe,CAK/C;AAED,wBAAgB,eAAe,CAAC,EAAE,GAAmB,EAAE,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,QAOxE;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,WAMzE;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,sBAQxC;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAO5D;AAID;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,WAAW,GAAE,SAAS,MAAM,EAAyC,GACpE,OAAO,CAMT;AAUD;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,UAE5E;AAED;;;;;;;GAOG;AACH,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,UAQjC;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,UAU3D;AAcD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAqB/E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CA2B9D;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,6BAA6B,EAAE,MAAM,CAAC;IACtC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,GAAG,MAAM,CA+B1F;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAU3D;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAM1D;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAkBhE"}

package/dist/bundler/index.cjs

@@ -1,16 +1,16 @@
 'use strict';
 
-var chunk3GTT2N4V_cjs = require('../chunk-3GTT2N4V.cjs');
+var chunkFR6IK3FQ_cjs = require('../chunk-FR6IK3FQ.cjs');
 
 
 
 Object.defineProperty(exports, "Bundler", {
   enumerable: true,
-  get: function () { return chunk3GTT2N4V_cjs.Bundler; }
+  get: function () { return chunkFR6IK3FQ_cjs.Bundler; }
 });
 Object.defineProperty(exports, "IS_DEFAULT", {
   enumerable: true,
-  get: function () { return chunk3GTT2N4V_cjs.IS_DEFAULT; }
+  get: function () { return chunkFR6IK3FQ_cjs.IS_DEFAULT; }
 });
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map

package/dist/bundler/index.js

@@ -1,3 +1,3 @@
-export { Bundler, IS_DEFAULT } from '../chunk-ULWJZHTN.js';
+export { Bundler, IS_DEFAULT } from '../chunk-I7PL3OZ7.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/{chunk-N5CQWHN3.cjs → chunk-2GJY6H6M.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunk7YI2AEFO_cjs = require('./chunk-7YI2AEFO.cjs');
+var chunkJZRFRUGM_cjs = require('./chunk-JZRFRUGM.cjs');
 var path = require('path');
 var url = require('url');
 var rollupPlugin = require('@optimize-lodash/rollup-plugin');
@@ -171,7 +171,7 @@ async function readPackageMetadata(rootPath, requestedPackageName) {
   }
 }
 async function getPackageMetadata(packageName, parentPath) {
-  const requestedPackageName = chunk7YI2AEFO_cjs.getPackageName(packageName);
+  const requestedPackageName = chunkJZRFRUGM_cjs.getPackageName(packageName);
   const packageNames = [...new Set([packageName, requestedPackageName].filter(Boolean))];
   let firstRootPath = null;
   for (const name of packageNames) {
@@ -202,7 +202,7 @@ function nodeModulesExtensionResolver() {
   return {
     name: "node-modules-extension-resolver",
     async resolveId(id, importer, options) {
-      if (!importer || !chunk7YI2AEFO_cjs.isBareModuleSpecifier(id) || chunk7YI2AEFO_cjs.isExternalProtocolImport(id) || path.isAbsolute(id)) {
+      if (!importer || !chunkJZRFRUGM_cjs.isBareModuleSpecifier(id) || chunkJZRFRUGM_cjs.isExternalProtocolImport(id) || path.isAbsolute(id)) {
         return null;
       }
       const parts = id.split("/");
@@ -210,7 +210,7 @@ function nodeModulesExtensionResolver() {
       if (isScoped && parts.length === 2 || !isScoped && parts.length === 1) {
         return null;
       }
-      const pkgName = chunk7YI2AEFO_cjs.getPackageName(id);
+      const pkgName = chunkJZRFRUGM_cjs.getPackageName(id);
       if (!pkgName) {
         return null;
       }
@@ -246,7 +246,7 @@ function protocolExternalResolver({ exclude = ["node:"] } = {}) {
   return {
     name: "protocol-external-resolver",
     resolveId(id) {
-      if (!chunk7YI2AEFO_cjs.isExternalProtocolImport(id, exclude)) {
+      if (!chunkJZRFRUGM_cjs.isExternalProtocolImport(id, exclude)) {
         return null;
       }
       return {
@@ -360,7 +360,7 @@ function subpathExternalsResolver(externals) {
       if (id.startsWith(".") || id.startsWith("/")) {
         return null;
       }
-      const isPartOfExternals = externals.some((external) => chunk7YI2AEFO_cjs.isDependencyPartOfPackage(id, external));
+      const isPartOfExternals = externals.some((external) => chunkJZRFRUGM_cjs.isDependencyPartOfPackage(id, external));
       if (isPartOfExternals) {
         return {
           id,
@@ -531,12 +531,12 @@ function tsConfigPaths({ tsConfigPath, respectCoreModule, localResolve } = {}) {
 
 // src/build/bundler.ts
 function mastraInternalAliasPlugin(entryFile) {
-  const normalizedEntryFile = chunk7YI2AEFO_cjs.slash(entryFile);
+  const normalizedEntryFile = chunkJZRFRUGM_cjs.slash(entryFile);
   return alias__default.default({
     entries: [
       {
         find: /^\#server$/,
-        replacement: chunk7YI2AEFO_cjs.slash(url.fileURLToPath(undefined("@mastra/deployer/server")))
+        replacement: chunkJZRFRUGM_cjs.slash(url.fileURLToPath(undefined("@mastra/deployer/server")))
       },
       {
         find: /^\@mastra\/server\/(.*)/,
@@ -574,7 +574,7 @@ async function getInputOptions(entryFile, analyzedBundleInfo, platform, env = {
   enableEsmShim = true,
   externalsPreset = false
 }) {
-  const nodeResolvePlugin = nodeResolve__default.default(chunk7YI2AEFO_cjs.getNodeResolveOptions(platform));
+  const nodeResolvePlugin = nodeResolve__default.default(chunkJZRFRUGM_cjs.getNodeResolveOptions(platform));
   const externalsCopy = new Set(analyzedBundleInfo.externalDependencies.keys());
   const externals = externalsPreset ? [] : Array.from(externalsCopy);
   return {
@@ -679,5 +679,5 @@ exports.protocolExternalResolver = protocolExternalResolver;
 exports.removeDeployer = removeDeployer2;
 exports.subpathExternalsResolver = subpathExternalsResolver;
 exports.tsConfigPaths = tsConfigPaths;
-//# sourceMappingURL=chunk-N5CQWHN3.cjs.map
-//# sourceMappingURL=chunk-N5CQWHN3.cjs.map
+//# sourceMappingURL=chunk-2GJY6H6M.cjs.map
+//# sourceMappingURL=chunk-2GJY6H6M.cjs.map