@mastra/editor 0.15.4 → 0.15.5-alpha.1

package/dist/ee/index.cjs

@@ -167,18 +167,27 @@ const workspace = new _mastra_core_workspace.Workspace({
 *   (anthropic tool-id format, cerebras reasoning-content strip, anthropic
 *   foreign-reasoning strip) so model swaps don't break history.
 *
+* Same three processors, same order, as the shared stability defaults in
+* `@mastra/core/processors`. `createBuilderAgent` passes this list explicitly
+* rather than relying on the framework defaults: the peer range allows older
+* cores that have no defaults, and bumping the range would be a breaking
+* change, so the builder brings its own stack and behaves the same on every
+* core version.
+*
 * Exported so callers can compose a custom processor list that keeps the
-* subset they want (e.g. `[...DEFAULT_BUILDER_ERROR_PROCESSORS.filter(p => p.id !== 'stream-error-retry-processor'), myCustom]`).
+* subset they want. Pass it with `errorProcessorDefaults: false`, or the
+* builder merges the omitted defaults back in:
+* `createBuilderAgent({ errorProcessors: [...DEFAULT_BUILDER_ERROR_PROCESSORS.filter(p => p.id !== 'stream-error-retry-processor'), myCustom], errorProcessorDefaults: false })`.
 */
 const DEFAULT_BUILDER_ERROR_PROCESSORS = [
-	new _mastra_core_processors.StreamErrorRetryProcessor(),
+	new _mastra_core_processors.ProviderHistoryCompat(),
 	new _mastra_core_processors.PrefillErrorHandler(),
-	new _mastra_core_processors.ProviderHistoryCompat()
+	new _mastra_core_processors.StreamErrorRetryProcessor()
 ];
 function createBuilderAgent(args) {
 	const memory = new _mastra_memory.Memory();
 	const callerErrorProcessors = args?.errorProcessors;
-	const errorProcessors = Array.isArray(callerErrorProcessors) ? [...DEFAULT_BUILDER_ERROR_PROCESSORS, ...callerErrorProcessors] : callerErrorProcessors ?? DEFAULT_BUILDER_ERROR_PROCESSORS;
+	const errorProcessors = args?.errorProcessorDefaults === false ? callerErrorProcessors : Array.isArray(callerErrorProcessors) ? [...DEFAULT_BUILDER_ERROR_PROCESSORS.map((processor) => callerErrorProcessors.find((caller) => caller.id === processor.id) ?? processor), ...callerErrorProcessors.filter((caller) => !DEFAULT_BUILDER_ERROR_PROCESSORS.some((processor) => processor.id === caller.id))] : callerErrorProcessors ?? DEFAULT_BUILDER_ERROR_PROCESSORS;
 	return new _mastra_core_agent.Agent({
 		instructions: `You are the Agent Builder.
 

package/dist/ee/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["__filename","__dirname","Workspace","LocalFilesystem","StreamErrorRetryProcessor","PrefillErrorHandler","ProviderHistoryCompat","Memory","Agent","Memory"],"sources":["../../src/ee/agent-builder.ts","../../src/ee/agent-builder-agent.ts","../../src/ee/workflow-builder.ts"],"sourcesContent":["import type { AgentBuilderOptions, AgentFeatures, IAgentBuilder } from '@mastra/core/agent-builder/ee';\nimport { isBuilderModelPolicyActive, isModelAllowed, resolveAgentFeatures } from '@mastra/core/agent-builder/ee';\n\n/**\n * Concrete implementation of the Agent Builder EE feature.\n * Instantiated by MastraEditor.resolveBuilder() when builder config is enabled.\n *\n * The constructor performs fail-fast validation of the admin's model policy\n * (Phase 4) so misconfiguration is caught at boot, not at first request.\n *\n * Feature toggles use **default-on semantics**: omitted keys resolve to\n * `true`. Admins opt out by setting a key to `false`. The resolved features\n * are computed once in the constructor (after validation) and returned\n * verbatim by {@link getFeatures} so all downstream consumers (server route,\n * UI hooks, policy derivation) see the same effective values.\n */\nexport class EditorAgentBuilder implements IAgentBuilder {\n  private readonly options: AgentBuilderOptions;\n  private readonly modelPolicyWarnings: string[] = [];\n\n  /** Non-fatal warnings for browser config issues (surfaced alongside model policy warnings). */\n  private readonly browserConfigWarnings: string[] = [];\n\n  /**\n   * Resolved (default-on normalized) features. Computed once in the\n   * constructor; `undefined` only if the builder was constructed with\n   * `enabled: false` (we still allocate features for the OFF path so callers\n   * can introspect, but we keep the field optional to preserve the existing\n   * API contract where `getFeatures()` may legitimately return `undefined`\n   * if no `features` was provided AND no defaults could be applied).\n   *\n   * In practice this is always populated: `resolveAgentFeatures` returns a\n   * fully-populated object regardless of input.\n   */\n  private readonly resolvedFeatures: AgentBuilderOptions['features'];\n\n  constructor(options?: AgentBuilderOptions) {\n    // Shallow-clone the paths the validators mutate so we never leak side\n    // effects into the caller's `MastraEditorConfig.builder` object.\n    // `validateBrowserConfig` writes to `features.agent.browser`; nothing\n    // else is mutated, so `configuration` and `registries` stay aliased.\n    const source = options ?? {};\n    this.options = {\n      ...source,\n      features: source.features\n        ? {\n            ...source.features,\n            agent: source.features.agent ? { ...source.features.agent } : undefined,\n          }\n        : undefined,\n    };\n    this.validateModelPolicy();\n    this.validateBrowserConfig();\n    // Resolve features AFTER browser-config validation so that an explicit\n    // `browser: true` with bad config is already mutated to `false` on\n    // `this.options.features.agent.browser`. The resolver then sees the\n    // downgraded value and returns it as-is.\n    this.resolvedFeatures = {\n      agent: resolveAgentFeatures(this.options.features?.agent, {\n        hasBrowserConfig: this.hasValidBrowserConfig(),\n      }),\n    };\n  }\n\n  get enabled(): boolean {\n    return this.options.enabled !== false;\n  }\n\n  getFeatures(): AgentBuilderOptions['features'] {\n    return this.resolvedFeatures;\n  }\n\n  getConfiguration(): AgentBuilderOptions['configuration'] {\n    return this.options.configuration;\n  }\n\n  getRegistries(): AgentBuilderOptions['registries'] {\n    return this.options.registries;\n  }\n\n  getModelPolicyWarnings(): string[] {\n    return [...this.modelPolicyWarnings, ...this.browserConfigWarnings];\n  }\n\n  /**\n   * True when `configuration.agent.browser` declares a provider. The\n   * EditorAgentBuilder does NOT verify the provider is registered with the\n   * Mastra instance — that cross-validation lives in `MastraEditor.resolveBuilder`\n   * because only the editor knows the registered browser providers.\n   */\n  private hasValidBrowserConfig(): boolean {\n    const browserConfig = this.options.configuration?.agent?.browser;\n    return Boolean(browserConfig?.config?.provider);\n  }\n\n  /**\n   * Browser config validation only runs for **explicit** `browser: true`.\n   * With default-on semantics, an omitted `browser` no longer means \"admin\n   * opted in\" — it means \"admin didn't opt out\". The default-on path is\n   * resolved later by `resolveAgentFeatures`, which already gates `browser`\n   * on `hasValidBrowserConfig`. We don't want to spam every default-config\n   * deployment with warnings.\n   */\n  private validateBrowserConfig(): void {\n    const explicitBrowser = this.options.features?.agent?.browser;\n    if (explicitBrowser !== true) return;\n\n    const browserConfig = this.options.configuration?.agent?.browser;\n    if (!browserConfig) {\n      const warning =\n        'Agent Builder browser feature is enabled but no default browser config was provided. ' +\n        'Set `editor.builder.configuration.agent.browser` to a valid browser config ' +\n        '(e.g. `{ type: \"inline\", config: { provider: \"stagehand\" } }`). ' +\n        'The browser toggle will be hidden until a default is configured.';\n      this.browserConfigWarnings.push(warning);\n      // eslint-disable-next-line no-console\n      console.warn(`[mastra:editor:builder] ${warning}`);\n      // Downgrade so the resolved feature ends up `false`.\n      if (this.options.features?.agent) {\n        this.options.features.agent.browser = false;\n      }\n      return;\n    }\n\n    if (!browserConfig.config?.provider) {\n      const warning =\n        'Agent Builder browser config is missing a `provider` field. ' +\n        'Set `editor.builder.configuration.agent.browser.config.provider` ' +\n        '(e.g. `\"stagehand\"`). The browser toggle will be hidden until a provider is configured.';\n      this.browserConfigWarnings.push(warning);\n      // eslint-disable-next-line no-console\n      console.warn(`[mastra:editor:builder] ${warning}`);\n      if (this.options.features?.agent) {\n        this.options.features.agent.browser = false;\n      }\n    }\n  }\n\n  private validateModelPolicy(): void {\n    const enabled = this.options.enabled !== false;\n    // Locked-mode is only triggered by an explicit `model: false` from the\n    // admin. With default-on semantics, an omitted `model` resolves to\n    // `true` (picker visible), which is open mode and has no\n    // locked-mode-default invariant.\n    const explicitModel = this.options.features?.agent?.model;\n    const pickerVisible = explicitModel !== false;\n    const models = this.options.configuration?.agent?.models;\n    const allowed = models?.allowed;\n    const defaultModel = models?.default;\n\n    const active = isBuilderModelPolicyActive({\n      enabled,\n      pickerVisible,\n      allowed,\n      default: defaultModel,\n    });\n\n    if (!active) return;\n\n    // Locked mode (picker hidden) requires an admin-pinned default. Phase 3's\n    // create-path decision matrix relies on this invariant: a locked policy\n    // without a default is unreachable. Only fires when the admin has\n    // explicitly opted out of the picker.\n    if (explicitModel === false && defaultModel === undefined) {\n      throw new Error(\n        'Agent Builder model policy is active in locked mode but no default was set. ' +\n          'Set `editor.builder.configuration.agent.models.default`, or remove ' +\n          '`editor.builder.features.agent.model = false` to allow end-users to pick a model.',\n      );\n    }\n\n    // When an allowlist is set, the default (if any) must satisfy it. An\n    // empty `allowed: []` means \"unrestricted\" so we skip this check.\n    if (defaultModel !== undefined && allowed !== undefined && allowed.length > 0) {\n      if (!isModelAllowed(allowed, defaultModel)) {\n        throw new Error(\n          'Agent Builder default model is not in the allowlist. ' +\n            'Either add it to `editor.builder.configuration.agent.models.allowed` ' +\n            'or change `editor.builder.configuration.agent.models.default`.',\n        );\n      }\n    }\n  }\n}\n\n// AgentFeatures imported for documentation reference in this file's jsdoc.\nexport type { AgentFeatures };\n","import { Agent } from '@mastra/core/agent';\nimport type { AgentConfig } from '@mastra/core/agent';\nimport { Memory } from '@mastra/memory';\nimport { PrefillErrorHandler, ProviderHistoryCompat, StreamErrorRetryProcessor } from '@mastra/core/processors';\nimport { Workspace, LocalFilesystem } from '@mastra/core/workspace';\n\nimport path from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = path.dirname(__filename);\n\nconst workspacePath = path.join(__dirname, 'workspace');\n\nconst workspace = new Workspace({\n  filesystem: new LocalFilesystem({\n    basePath: workspacePath,\n  }),\n  skills: ['skills'],\n});\n\n/**\n * Agent Builder Agent\n *\n * Audience: non-technical users (Product, founders, operators, business stakeholders).\n * Goal: turn a plain-language description of a desired outcome into a fully\n * configured, production-quality agent — name, description, model, capabilities,\n * and system prompt — without asking the user follow-up questions.\n *\n * Capability tools the playground UI injects as client tools:\n * - set-agent-name, set-agent-description, set-agent-instructions, set-agent-workspace-id (always on)\n * - set-agent-tools (gated by features.tools)\n * - set-agent-skills (gated by features.skills + skills available)\n * - set-agent-model (gated by features.model + models available)\n * - set-agent-browser-enabled (gated by features.browser)\n * - createSkillTool (gated by features.skills) — only when a needed capability does not exist\n */\n\n/**\n * Default error processors wired into every builder agent. These each fix a\n * class of provider-side correctness bug that builder workloads tend to hit:\n *\n * - `StreamErrorRetryProcessor` — retries OpenAI's transient stream errors\n *   (`server_error`, `rate_limit`, `internal_error`, `timeout`, `overloaded`,\n *   etc.) that surface on long, tool-heavy turns.\n * - `PrefillErrorHandler` — recovers from Anthropic's\n *   `does not support assistant message prefill` 400 by appending a\n *   `system-reminder` continue message and retrying.\n * - `ProviderHistoryCompat` — applies provider-history-shape fixes\n *   (anthropic tool-id format, cerebras reasoning-content strip, anthropic\n *   foreign-reasoning strip) so model swaps don't break history.\n *\n * Exported so callers can compose a custom processor list that keeps the\n * subset they want (e.g. `[...DEFAULT_BUILDER_ERROR_PROCESSORS.filter(p => p.id !== 'stream-error-retry-processor'), myCustom]`).\n */\nexport const DEFAULT_BUILDER_ERROR_PROCESSORS = [\n  new StreamErrorRetryProcessor(),\n  new PrefillErrorHandler(),\n  new ProviderHistoryCompat(),\n];\n\nexport function createBuilderAgent(args?: Partial<AgentConfig<'builder-agent'>>): Agent<'builder-agent'> {\n  const memory = new Memory();\n\n  // Merge defaults with any caller-supplied processors. Caller processors run\n  // after defaults so they can observe/extend retries the defaults trigger.\n  // A function-typed override (DynamicArgument) is passed through unchanged —\n  // callers using the dynamic form are assumed to manage the full list.\n  const callerErrorProcessors = args?.errorProcessors;\n  const errorProcessors = Array.isArray(callerErrorProcessors)\n    ? [...DEFAULT_BUILDER_ERROR_PROCESSORS, ...callerErrorProcessors]\n    : (callerErrorProcessors ?? DEFAULT_BUILDER_ERROR_PROCESSORS);\n\n  const config: AgentConfig<'builder-agent'> = {\n    instructions: `You are the Agent Builder.\n\nYour job: turn a non-technical user's plain-language request into a fully configured, production-quality agent in a single turn.\n\n# Non-negotiables\n\n- Never ask the user follow-up questions. Make the most reasonable assumption and move forward.\n- Never expose internal names, tool ids, file paths, schemas, code, or jargon to the user.\n- Speak only in user-facing capability terms.\n- Always finish the build in the same turn as the request — configure the agent end-to-end and deliver a short summary.\n- Always define the new agent's name, description, model, and system prompt yourself. Do not ask the user for any of these.\n\nExamples of communication style:\n- Bad: \"Added weatherTool to agent-yzx capabilities.\"\n- Good: \"Your new agent can now check the weather for you.\"\n- Bad: \"Calling set-agent-tools with [weatherTool].\"\n- Good: \"Checking what capabilities to bring to your agent…\"\n- Bad: \"Agent created with weatherTool and recipeWorkflow attached.\"\n- Good: \"Your agent can check the weather and suggest recipes that match the day's conditions.\"\n\n# Form snapshot\n\nA \"Current agent configuration (authoritative)\" block is injected into your context every turn. It lists every form field with its current value AND a directive telling you exactly which setter to call (or skip) for that field. Treat the snapshot as the single source of truth for what is and isn't already set — do not try to infer state from anywhere else, and do not re-call setters for fields whose directive says \"already set\".\n\n# Authoring loop\n\nFollow these five steps in order, every time:\n\n## Step A — Understand the real outcome\n\nAnalyze what the user actually wants to achieve. Focus on the final result, not just the literal wording of the request.\n\nAsk yourself:\n- What should the agent help the user accomplish?\n- Who will use this agent?\n- What decisions should the agent make on its own?\n- What kind of output should the agent produce?\n- What recurring tasks, reasoning, or actions does the agent need to perform?\n\n## Step B — Define the agent's identity\n\nDecide on:\n- Agent name: short, memorable, anchored to the outcome. Never \"Agent X\" or generic labels.\n- Description: exactly one sentence in plain user-facing language explaining what the agent helps with.\n\nThe snapshot will tell you whether to call \\`set-agent-name\\` and \\`set-agent-description\\` or skip them.\n\n## Step C — Decide capabilities\n\nThe form snapshot lists what's currently attached. Use it together with the available tools, agents, workflows, stored skills, and models listed in the corresponding tool descriptions to decide:\n\n- Pick the *minimum* set of existing tools/agents/workflows/stored skills that satisfies the outcome. Adding irrelevant capabilities makes the agent worse, not better.\n- Prefer existing tools, workflows, agents, and stored skills before creating anything new.\n- \\`set-agent-skills\\` attaches user-available stored skills.\n- Only call \\`createSkillTool\\` when (a) no existing stored skill matches reusable operating instructions the produced agent needs, AND (b) that operating instruction is genuinely needed for the outcome. Do not use stored skills as a substitute for missing integrations or tools.\n- If a specific external connection is required (e.g. a sheet tool for a spreadsheet-driven outcome) and none is available, the new agent's system prompt must instruct it to refuse cleanly and explain what the user needs to connect.\n\n## Step D — Synthesize concise operating instructions\n\nBefore calling \\`set-agent-instructions\\`, privately write a concrete run contract for the produced agent. The system prompt must instantiate each item, but keep each item brief:\n\n1. **Trigger / input** — what user request, schedule, event, file, row, ticket, or message starts a run.\n2. **Owned outcome** — the exact result the produced agent is responsible for finishing.\n3. **Available capabilities** — only capabilities actually attached or already available from the form snapshot, described in user-facing outcome terms.\n4. **Missing-capability fallback** — what the produced agent does when a required integration, workspace, credential, or source is absent.\n5. **Done criteria** — verifiable conditions that prove the job is finished, including tool confirmation or an explicit \"not run\" reason when verification is impossible.\n6. **Final response format** — the receipt, summary, draft, diff summary, report, or confirmation the user receives.\n\nWrite the final system prompt as 2–4 short paragraphs or compact bullet groups. Target 1,200–2,000 characters and stay under 2,500 characters. Do not include worked examples, FAQs, long edge-case lists, or exhaustive policies unless the user's request explicitly requires them. Prefer one clear default over several branches.\n\n## Step E — Write the agent\n\nRead the per-field directives in the form snapshot. Call only the setters the snapshot tells you to call, each at most once, with the final value. Skip every field marked \"already set\" or \"no setter\". Skip any field that isn't listed at all (its feature is disabled).\n\nBefore calling \\`set-agent-instructions\\`, self-audit the draft. It must pass every check:\n- No placeholders remain (no \\`<...>\\`, \"TBD\", \"TODO\", \"your tool\", or generic policy gaps).\n- No internal tool ids, file paths, schemas, or builder-only terms appear.\n- No generic \"helpful assistant\" identity remains.\n- No unsupported capabilities are promised.\n- Completion criteria are concrete.\n- Missing-access fallback is included when relevant.\n- Final response expectations are clear.\n- The prompt is specific to the agent's outcome and under 2,500 characters.\n\n## Step F — Confirm the agent configuration to the user\n\nEnd your turn with one short, friendly paragraph confirming that the agent has been configured and is ready to use.\n\nUse this shape:\n\n\"Your agent, [Agent Name], has been configured with its initial parameters. It can now [plain-language outcome]. You can adjust its instructions, inputs, or connected capabilities whenever your needs change.\"\n\nDo not mention internal capability names, tools, workflows, skills, or configuration steps.\n\nGood:\n\"Your agent, Sales Drop Watcher, has been configured with its initial parameters. It can now review your weekly sales sheet, flag accounts that dropped more than 10%, and prepare follow-up drafts for each one. You can adjust its instructions, thresholds, or connected data sources whenever your needs change.\"\n\nBad:\n\"Agent created with sheetsTool, scoringWorkflow, and emailSkill attached.\"\n\nBad:\n\"I configured the sheets integration and called set-agent-instructions.\"\n\n# Quality bar for the produced agent's system prompt\n\nThe system prompt written into \\`set-agent-instructions\\` MUST be short, concrete, and useful. It should cover all of the following, but each item should usually be one sentence or a compact bullet:\n\n1. **Role and outcome.** Define what the agent is and the concrete result it owns.\n2. **Trigger and input.** Define what starts a run and what input the agent expects.\n3. **Decision rules.** Explain how the agent resolves ambiguity, what defaults it should apply, and what it should skip without asking the user.\n4. **Capability awareness.** Describe only the tools, integrations, workspaces, or data sources the agent actually has, phrased in terms of what they let the agent accomplish.\n5. **Missing-capability fallback.** Explain what the agent should do when a required integration, credential, permission, workspace, or source is unavailable.\n6. **Completion criteria.** Define exactly when the task is done in observable, verifiable terms.\n7. **Final response format.** Specify the shape of the agent's final answer, report, draft, receipt, or confirmation.\n8. **Communication style.** Require plain language, short answers, no jargon, and structure only when useful.\n9. **Refusal rules.** State what the agent must refuse and how it should explain the refusal clearly.\n\nKeep this to 2–4 focused paragraphs or compact bullet groups. Do not include worked examples, FAQs, or exhaustive edge-case lists by default.\n\n# Hard rules\n\n- If the user's request requires CLI or local-machine actions and no workspace is connected, refuse in plain language and tell the user they need to connect a workspace first.\n- Never reveal that you are calling configuration tools. Describe progress only in terms of the user's intended outcome.\n- Never produce a system prompt without explicit completion criteria.\n- Never attach a capability \"just in case.\" Every tool, agent, workflow, or skill must directly support the requested outcome.\n- The final message to the user must be concise, friendly, and focused on what the configured agent can now do.\n- The final message should make clear that the agent starts with initial parameters and can be adjusted later.`,\n    model: 'openai/gpt-5.5',\n    memory,\n    workspace,\n    ...(args || {}),\n    errorProcessors,\n    id: 'builder-agent',\n    name: 'Agent Builder Agent',\n    description: 'An agent that can build agents',\n  };\n\n  return new Agent<'builder-agent'>(config);\n}\n","import type { Mastra } from '@mastra/core';\nimport type { Agent } from '@mastra/core/agent';\nimport type { IWorkflowBuilder, WorkflowBuilderOptions } from '@mastra/core/editor';\nimport type { MastraModelConfig } from '@mastra/core/llm';\nimport { createWorkflowBuilderAgent as createSharedWorkflowBuilderAgent } from '@mastra/core/workflows/builder';\nimport { Memory } from '@mastra/memory';\n\nexport const DEFAULT_WORKFLOW_BUILDER_MODEL = 'openai/gpt-5.5';\n\n/**\n * Authoring turns are tool-heavy: a single request can persist dozens of\n * inspection and submission records. The memory default of 10 evicts the user's\n * original request long before the workflow is finished, which reads as the\n * agent forgetting what it was asked to build.\n */\nexport const DEFAULT_WORKFLOW_BUILDER_LAST_MESSAGES = 100;\n\nexport function createWorkflowBuilderAgent(\n  model?: MastraModelConfig,\n  lastMessages: number = DEFAULT_WORKFLOW_BUILDER_LAST_MESSAGES,\n): Agent<'workflow-builder-agent'> {\n  return createSharedWorkflowBuilderAgent({\n    id: 'workflow-builder-agent',\n    name: 'Workflow Builder',\n    description: 'Builds persisted workflow definitions through constrained client tools',\n    model: model ?? DEFAULT_WORKFLOW_BUILDER_MODEL,\n    memory: new Memory({ options: { lastMessages } }),\n    surfaceInstructions: `# Studio authoring policy\n\nTurn the user's request into a complete canonical workflow definition using the registered agent, tool, and workflow catalogs. Treat the current unsaved authoring state, accepted definition, candidate definition, and validation issues injected in each turn as authoritative. Never describe schemas, mapping form, graph shape, lifecycle, or persistence state from memory—read the authoritative Studio state and catalogs first.\n\nThe three shared listing tools behave here as the shared playbook describes, with one Studio specific: \\`list-available-workflows\\` reports \\`catalog-unavailable\\` when this user lacks workflow read permission. Agents and tools stay listable in that case, so compose without nested workflow references rather than treating discovery as blocked.\n\n# Studio execution and response protocol\n\n1. Complete discovery, composition, and the shared pre-action check before calling \\`submit-workflow-draft\\`.\n2. Call \\`submit-workflow-draft\\` with one complete canonical definition. Do not submit incremental fragments, speculative alternatives, or parallel attempts.\n   When the definition nests helper workflows that the catalog does not have yet, put those complete helper definitions in the same submission's \\`dependencies\\` array. Never submit a helper on its own turn or in a separate call — the whole set travels as one submission, goes Ready as one unit, and the user's Save persists it as one unit. Only add a helper the composition genuinely requires, give it a real id and description because the user will see it as its own workflow, and tell the user in your summary which helpers Save will create.\n3. Wait for the submission result before deciding what to do next. A successful submission makes the returned accepted definition the authoritative Ready draft. Stop calling tools after success and never resubmit that Ready definition in the same turn.\n4. If the submission is rejected with validation diagnostics, do not claim success. Correct every returned issue against authoritative inspection, rerun the shared pre-action check, and make one sequential corrected complete submission.\n5. If the result is \\`already-ready\\`, the returned accepted definition is authoritative. Do not retry or replace it in the same turn; summarize it and wait for a new user turn.\n6. If the result is \\`superseded\\`, an earlier submission in the turn won. Do not apologize, retry, or claim the workflow is broken. Inspect the authoritative state before making any claim.\n7. Ready is not persisted. Never persist directly, never call a server-side \\`save-workflow\\` tool, and never claim persistence. Only the user's explicit Studio Save action may persist the finalized draft.\n8. After Ready success, follow the shared summary rules and end by telling the user to review the authoritative draft and use the explicit Studio Save action.`,\n  });\n}\n\nexport class EditorWorkflowBuilder implements IWorkflowBuilder {\n  readonly enabled: boolean;\n  private readonly agent;\n  private readonly modelPolicy: WorkflowBuilderOptions['modelPolicy'];\n\n  constructor(options: WorkflowBuilderOptions = {}, mastra?: Mastra) {\n    this.enabled = options.enabled !== false;\n    this.modelPolicy = options.modelPolicy;\n    this.agent = createWorkflowBuilderAgent(options.model, options.lastMessages);\n    if (mastra) {\n      this.agent.__registerMastra(mastra);\n      this.agent.__registerPrimitives({ logger: mastra.getLogger(), storage: mastra.getStorage() });\n    }\n  }\n\n  getAgent() {\n    return this.agent;\n  }\n\n  getModelPolicy() {\n    return this.modelPolicy;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBA,IAAa,qBAAb,MAAyD;CAoBvD,YAAY,SAA+B;EAlBM,KAAA,sBAAA,CAAC;EAGC,KAAA,wBAAA,CAAC;EAoBlD,MAAM,SAAS,WAAW,CAAC;EAC3B,KAAK,UAAU;GACb,GAAG;GACH,UAAU,OAAO,WACb;IACE,GAAG,OAAO;IACV,OAAO,OAAO,SAAS,QAAQ,EAAE,GAAG,OAAO,SAAS,MAAM,IAAI,KAAA;GAChE,IACA,KAAA;EACN;EACA,KAAK,oBAAoB;EACzB,KAAK,sBAAsB;EAK3B,KAAK,mBAAmB,EACtB,QAAA,GAAA,8BAAA,qBAAA,CAA4B,KAAK,QAAQ,UAAU,OAAO,EACxD,kBAAkB,KAAK,sBAAsB,EAC/C,CAAC,EACH;CACF;CAEA,IAAI,UAAmB;EACrB,OAAO,KAAK,QAAQ,YAAY;CAClC;CAEA,cAA+C;EAC7C,OAAO,KAAK;CACd;CAEA,mBAAyD;EACvD,OAAO,KAAK,QAAQ;CACtB;CAEA,gBAAmD;EACjD,OAAO,KAAK,QAAQ;CACtB;CAEA,yBAAmC;EACjC,OAAO,CAAC,GAAG,KAAK,qBAAqB,GAAG,KAAK,qBAAqB;CACpE;;;;;;;CAQA,wBAAyC;EACvC,MAAM,gBAAgB,KAAK,QAAQ,eAAe,OAAO;EACzD,OAAO,QAAQ,eAAe,QAAQ,QAAQ;CAChD;;;;;;;;;CAUA,wBAAsC;EAEpC,IADwB,KAAK,QAAQ,UAAU,OAAO,YAC9B,MAAM;EAE9B,MAAM,gBAAgB,KAAK,QAAQ,eAAe,OAAO;EACzD,IAAI,CAAC,eAAe;GAClB,MAAM,UACJ;GAIF,KAAK,sBAAsB,KAAK,OAAO;GAEvC,QAAQ,KAAK,2BAA2B,SAAS;GAEjD,IAAI,KAAK,QAAQ,UAAU,OACzB,KAAK,QAAQ,SAAS,MAAM,UAAU;GAExC;EACF;EAEA,IAAI,CAAC,cAAc,QAAQ,UAAU;GACnC,MAAM,UACJ;GAGF,KAAK,sBAAsB,KAAK,OAAO;GAEvC,QAAQ,KAAK,2BAA2B,SAAS;GACjD,IAAI,KAAK,QAAQ,UAAU,OACzB,KAAK,QAAQ,SAAS,MAAM,UAAU;EAE1C;CACF;CAEA,sBAAoC;EAClC,MAAM,UAAU,KAAK,QAAQ,YAAY;EAKzC,MAAM,gBAAgB,KAAK,QAAQ,UAAU,OAAO;EACpD,MAAM,gBAAgB,kBAAkB;EACxC,MAAM,SAAS,KAAK,QAAQ,eAAe,OAAO;EAClD,MAAM,UAAU,QAAQ;EACxB,MAAM,eAAe,QAAQ;EAS7B,IAAI,EAAA,GAAA,8BAAA,2BAAA,CAPsC;GACxC;GACA;GACA;GACA,SAAS;EACX,CAEU,GAAG;EAMb,IAAI,kBAAkB,SAAS,iBAAiB,KAAA,GAC9C,MAAM,IAAI,MACR,kOAGF;EAKF,IAAI,iBAAiB,KAAA,KAAa,YAAY,KAAA,KAAa,QAAQ,SAAS,GACtE;OAAA,EAAA,GAAA,8BAAA,eAAA,CAAgB,SAAS,YAAY,GACvC,MAAM,IAAI,MACR,0LAGF;EAAA;CAGN;AACF;;;AC9KA,MAAMA,gBAAAA,GAAAA,IAAAA,cAAAA,CAAAA,QAAAA,KAAAA,CAAAA,CAAAA,cAAAA,UAAAA,CAAAA,CAAAA,IAA0C;AAChD,MAAMC,cAAY,KAAA,QAAK,QAAQD,YAAU;AAIzC,MAAM,YAAY,IAAIE,uBAAAA,UAAU;CAC9B,YAAY,IAAIC,uBAAAA,gBAAgB,EAC9B,UAJkB,KAAA,QAAK,KAAKF,aAAW,WAIjB,EACxB,CAAC;CACD,QAAQ,CAAC,QAAQ;AACnB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCD,MAAa,mCAAmC;CAC9C,IAAIG,wBAAAA,0BAA0B;CAC9B,IAAIC,wBAAAA,oBAAoB;CACxB,IAAIC,wBAAAA,sBAAsB;AAC5B;AAEA,SAAgB,mBAAmB,MAAsE;CACvG,MAAM,SAAS,IAAIC,eAAAA,OAAO;CAM1B,MAAM,wBAAwB,MAAM;CACpC,MAAM,kBAAkB,MAAM,QAAQ,qBAAqB,IACvD,CAAC,GAAG,kCAAkC,GAAG,qBAAqB,IAC7D,yBAAyB;CA4I9B,OAAO,IAAIC,mBAAAA,MAAuB;EAzIhC,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+Hd,OAAO;EACP;EACA;EACA,GAAI,QAAQ,CAAC;EACb;EACA,IAAI;EACJ,MAAM;EACN,aAAa;CAGwB,CAAC;AAC1C;ACnMA,SAAgB,2BACd,OACA,eAAA,KACiC;CACjC,QAAA,GAAA,+BAAA,2BAAA,CAAwC;EACtC,IAAI;EACJ,MAAM;EACN,aAAa;EACb,OAAO,SAAA;EACP,QAAQ,IAAIC,eAAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;EAChD,qBAAqB;;;;;;;;;;;;;;;;;CAiBvB,CAAC;AACH;AAEA,IAAa,wBAAb,MAA+D;CAK7D,YAAY,UAAkC,CAAC,GAAG,QAAiB;EACjE,KAAK,UAAU,QAAQ,YAAY;EACnC,KAAK,cAAc,QAAQ;EAC3B,KAAK,QAAQ,2BAA2B,QAAQ,OAAO,QAAQ,YAAY;EAC3E,IAAI,QAAQ;GACV,KAAK,MAAM,iBAAiB,MAAM;GAClC,KAAK,MAAM,qBAAqB;IAAE,QAAQ,OAAO,UAAU;IAAG,SAAS,OAAO,WAAW;GAAE,CAAC;EAC9F;CACF;CAEA,WAAW;EACT,OAAO,KAAK;CACd;CAEA,iBAAiB;EACf,OAAO,KAAK;CACd;AACF"}
+{"version":3,"file":"index.cjs","names":["__filename","__dirname","Workspace","LocalFilesystem","ProviderHistoryCompat","PrefillErrorHandler","StreamErrorRetryProcessor","Memory","Agent","Memory"],"sources":["../../src/ee/agent-builder.ts","../../src/ee/agent-builder-agent.ts","../../src/ee/workflow-builder.ts"],"sourcesContent":["import type { AgentBuilderOptions, AgentFeatures, IAgentBuilder } from '@mastra/core/agent-builder/ee';\nimport { isBuilderModelPolicyActive, isModelAllowed, resolveAgentFeatures } from '@mastra/core/agent-builder/ee';\n\n/**\n * Concrete implementation of the Agent Builder EE feature.\n * Instantiated by MastraEditor.resolveBuilder() when builder config is enabled.\n *\n * The constructor performs fail-fast validation of the admin's model policy\n * (Phase 4) so misconfiguration is caught at boot, not at first request.\n *\n * Feature toggles use **default-on semantics**: omitted keys resolve to\n * `true`. Admins opt out by setting a key to `false`. The resolved features\n * are computed once in the constructor (after validation) and returned\n * verbatim by {@link getFeatures} so all downstream consumers (server route,\n * UI hooks, policy derivation) see the same effective values.\n */\nexport class EditorAgentBuilder implements IAgentBuilder {\n  private readonly options: AgentBuilderOptions;\n  private readonly modelPolicyWarnings: string[] = [];\n\n  /** Non-fatal warnings for browser config issues (surfaced alongside model policy warnings). */\n  private readonly browserConfigWarnings: string[] = [];\n\n  /**\n   * Resolved (default-on normalized) features. Computed once in the\n   * constructor; `undefined` only if the builder was constructed with\n   * `enabled: false` (we still allocate features for the OFF path so callers\n   * can introspect, but we keep the field optional to preserve the existing\n   * API contract where `getFeatures()` may legitimately return `undefined`\n   * if no `features` was provided AND no defaults could be applied).\n   *\n   * In practice this is always populated: `resolveAgentFeatures` returns a\n   * fully-populated object regardless of input.\n   */\n  private readonly resolvedFeatures: AgentBuilderOptions['features'];\n\n  constructor(options?: AgentBuilderOptions) {\n    // Shallow-clone the paths the validators mutate so we never leak side\n    // effects into the caller's `MastraEditorConfig.builder` object.\n    // `validateBrowserConfig` writes to `features.agent.browser`; nothing\n    // else is mutated, so `configuration` and `registries` stay aliased.\n    const source = options ?? {};\n    this.options = {\n      ...source,\n      features: source.features\n        ? {\n            ...source.features,\n            agent: source.features.agent ? { ...source.features.agent } : undefined,\n          }\n        : undefined,\n    };\n    this.validateModelPolicy();\n    this.validateBrowserConfig();\n    // Resolve features AFTER browser-config validation so that an explicit\n    // `browser: true` with bad config is already mutated to `false` on\n    // `this.options.features.agent.browser`. The resolver then sees the\n    // downgraded value and returns it as-is.\n    this.resolvedFeatures = {\n      agent: resolveAgentFeatures(this.options.features?.agent, {\n        hasBrowserConfig: this.hasValidBrowserConfig(),\n      }),\n    };\n  }\n\n  get enabled(): boolean {\n    return this.options.enabled !== false;\n  }\n\n  getFeatures(): AgentBuilderOptions['features'] {\n    return this.resolvedFeatures;\n  }\n\n  getConfiguration(): AgentBuilderOptions['configuration'] {\n    return this.options.configuration;\n  }\n\n  getRegistries(): AgentBuilderOptions['registries'] {\n    return this.options.registries;\n  }\n\n  getModelPolicyWarnings(): string[] {\n    return [...this.modelPolicyWarnings, ...this.browserConfigWarnings];\n  }\n\n  /**\n   * True when `configuration.agent.browser` declares a provider. The\n   * EditorAgentBuilder does NOT verify the provider is registered with the\n   * Mastra instance — that cross-validation lives in `MastraEditor.resolveBuilder`\n   * because only the editor knows the registered browser providers.\n   */\n  private hasValidBrowserConfig(): boolean {\n    const browserConfig = this.options.configuration?.agent?.browser;\n    return Boolean(browserConfig?.config?.provider);\n  }\n\n  /**\n   * Browser config validation only runs for **explicit** `browser: true`.\n   * With default-on semantics, an omitted `browser` no longer means \"admin\n   * opted in\" — it means \"admin didn't opt out\". The default-on path is\n   * resolved later by `resolveAgentFeatures`, which already gates `browser`\n   * on `hasValidBrowserConfig`. We don't want to spam every default-config\n   * deployment with warnings.\n   */\n  private validateBrowserConfig(): void {\n    const explicitBrowser = this.options.features?.agent?.browser;\n    if (explicitBrowser !== true) return;\n\n    const browserConfig = this.options.configuration?.agent?.browser;\n    if (!browserConfig) {\n      const warning =\n        'Agent Builder browser feature is enabled but no default browser config was provided. ' +\n        'Set `editor.builder.configuration.agent.browser` to a valid browser config ' +\n        '(e.g. `{ type: \"inline\", config: { provider: \"stagehand\" } }`). ' +\n        'The browser toggle will be hidden until a default is configured.';\n      this.browserConfigWarnings.push(warning);\n      // eslint-disable-next-line no-console\n      console.warn(`[mastra:editor:builder] ${warning}`);\n      // Downgrade so the resolved feature ends up `false`.\n      if (this.options.features?.agent) {\n        this.options.features.agent.browser = false;\n      }\n      return;\n    }\n\n    if (!browserConfig.config?.provider) {\n      const warning =\n        'Agent Builder browser config is missing a `provider` field. ' +\n        'Set `editor.builder.configuration.agent.browser.config.provider` ' +\n        '(e.g. `\"stagehand\"`). The browser toggle will be hidden until a provider is configured.';\n      this.browserConfigWarnings.push(warning);\n      // eslint-disable-next-line no-console\n      console.warn(`[mastra:editor:builder] ${warning}`);\n      if (this.options.features?.agent) {\n        this.options.features.agent.browser = false;\n      }\n    }\n  }\n\n  private validateModelPolicy(): void {\n    const enabled = this.options.enabled !== false;\n    // Locked-mode is only triggered by an explicit `model: false` from the\n    // admin. With default-on semantics, an omitted `model` resolves to\n    // `true` (picker visible), which is open mode and has no\n    // locked-mode-default invariant.\n    const explicitModel = this.options.features?.agent?.model;\n    const pickerVisible = explicitModel !== false;\n    const models = this.options.configuration?.agent?.models;\n    const allowed = models?.allowed;\n    const defaultModel = models?.default;\n\n    const active = isBuilderModelPolicyActive({\n      enabled,\n      pickerVisible,\n      allowed,\n      default: defaultModel,\n    });\n\n    if (!active) return;\n\n    // Locked mode (picker hidden) requires an admin-pinned default. Phase 3's\n    // create-path decision matrix relies on this invariant: a locked policy\n    // without a default is unreachable. Only fires when the admin has\n    // explicitly opted out of the picker.\n    if (explicitModel === false && defaultModel === undefined) {\n      throw new Error(\n        'Agent Builder model policy is active in locked mode but no default was set. ' +\n          'Set `editor.builder.configuration.agent.models.default`, or remove ' +\n          '`editor.builder.features.agent.model = false` to allow end-users to pick a model.',\n      );\n    }\n\n    // When an allowlist is set, the default (if any) must satisfy it. An\n    // empty `allowed: []` means \"unrestricted\" so we skip this check.\n    if (defaultModel !== undefined && allowed !== undefined && allowed.length > 0) {\n      if (!isModelAllowed(allowed, defaultModel)) {\n        throw new Error(\n          'Agent Builder default model is not in the allowlist. ' +\n            'Either add it to `editor.builder.configuration.agent.models.allowed` ' +\n            'or change `editor.builder.configuration.agent.models.default`.',\n        );\n      }\n    }\n  }\n}\n\n// AgentFeatures imported for documentation reference in this file's jsdoc.\nexport type { AgentFeatures };\n","import { Agent } from '@mastra/core/agent';\nimport type { AgentConfig } from '@mastra/core/agent';\nimport { Memory } from '@mastra/memory';\nimport { PrefillErrorHandler, ProviderHistoryCompat, StreamErrorRetryProcessor } from '@mastra/core/processors';\nimport { Workspace, LocalFilesystem } from '@mastra/core/workspace';\n\nimport path from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = path.dirname(__filename);\n\nconst workspacePath = path.join(__dirname, 'workspace');\n\nconst workspace = new Workspace({\n  filesystem: new LocalFilesystem({\n    basePath: workspacePath,\n  }),\n  skills: ['skills'],\n});\n\n/**\n * Agent Builder Agent\n *\n * Audience: non-technical users (Product, founders, operators, business stakeholders).\n * Goal: turn a plain-language description of a desired outcome into a fully\n * configured, production-quality agent — name, description, model, capabilities,\n * and system prompt — without asking the user follow-up questions.\n *\n * Capability tools the playground UI injects as client tools:\n * - set-agent-name, set-agent-description, set-agent-instructions, set-agent-workspace-id (always on)\n * - set-agent-tools (gated by features.tools)\n * - set-agent-skills (gated by features.skills + skills available)\n * - set-agent-model (gated by features.model + models available)\n * - set-agent-browser-enabled (gated by features.browser)\n * - createSkillTool (gated by features.skills) — only when a needed capability does not exist\n */\n\n/**\n * Default error processors wired into every builder agent. These each fix a\n * class of provider-side correctness bug that builder workloads tend to hit:\n *\n * - `StreamErrorRetryProcessor` — retries OpenAI's transient stream errors\n *   (`server_error`, `rate_limit`, `internal_error`, `timeout`, `overloaded`,\n *   etc.) that surface on long, tool-heavy turns.\n * - `PrefillErrorHandler` — recovers from Anthropic's\n *   `does not support assistant message prefill` 400 by appending a\n *   `system-reminder` continue message and retrying.\n * - `ProviderHistoryCompat` — applies provider-history-shape fixes\n *   (anthropic tool-id format, cerebras reasoning-content strip, anthropic\n *   foreign-reasoning strip) so model swaps don't break history.\n *\n * Same three processors, same order, as the shared stability defaults in\n * `@mastra/core/processors`. `createBuilderAgent` passes this list explicitly\n * rather than relying on the framework defaults: the peer range allows older\n * cores that have no defaults, and bumping the range would be a breaking\n * change, so the builder brings its own stack and behaves the same on every\n * core version.\n *\n * Exported so callers can compose a custom processor list that keeps the\n * subset they want. Pass it with `errorProcessorDefaults: false`, or the\n * builder merges the omitted defaults back in:\n * `createBuilderAgent({ errorProcessors: [...DEFAULT_BUILDER_ERROR_PROCESSORS.filter(p => p.id !== 'stream-error-retry-processor'), myCustom], errorProcessorDefaults: false })`.\n */\nexport const DEFAULT_BUILDER_ERROR_PROCESSORS = [\n  new ProviderHistoryCompat(),\n  new PrefillErrorHandler(),\n  new StreamErrorRetryProcessor(),\n];\n\nexport function createBuilderAgent(args?: Partial<AgentConfig<'builder-agent'>>): Agent<'builder-agent'> {\n  const memory = new Memory();\n\n  // Merge the builder's stability processors with any caller-supplied list:\n  // the peer range allows cores that predate the framework defaults, so\n  // relying on the resolver to add them would silently drop this stack on\n  // older cores. A caller instance with a default's id replaces that default\n  // at its position, so repairs keep running ahead of retries; caller\n  // processors with other ids run after the defaults so they can observe or\n  // extend retries the defaults trigger. An empty array merges like any other,\n  // matching core; `errorProcessorDefaults: false` is the only opt-out and\n  // passes the caller's list through as given (the flag is also forwarded, so\n  // newer cores add nothing either). A function-typed override\n  // (DynamicArgument) is passed through unchanged — callers using the dynamic\n  // form manage the full list.\n  const callerErrorProcessors = args?.errorProcessors;\n  const errorProcessors =\n    args?.errorProcessorDefaults === false\n      ? callerErrorProcessors\n      : Array.isArray(callerErrorProcessors)\n        ? [\n            ...DEFAULT_BUILDER_ERROR_PROCESSORS.map(\n              processor => callerErrorProcessors.find(caller => caller.id === processor.id) ?? processor,\n            ),\n            ...callerErrorProcessors.filter(\n              caller => !DEFAULT_BUILDER_ERROR_PROCESSORS.some(processor => processor.id === caller.id),\n            ),\n          ]\n        : (callerErrorProcessors ?? DEFAULT_BUILDER_ERROR_PROCESSORS);\n\n  const config: AgentConfig<'builder-agent'> = {\n    instructions: `You are the Agent Builder.\n\nYour job: turn a non-technical user's plain-language request into a fully configured, production-quality agent in a single turn.\n\n# Non-negotiables\n\n- Never ask the user follow-up questions. Make the most reasonable assumption and move forward.\n- Never expose internal names, tool ids, file paths, schemas, code, or jargon to the user.\n- Speak only in user-facing capability terms.\n- Always finish the build in the same turn as the request — configure the agent end-to-end and deliver a short summary.\n- Always define the new agent's name, description, model, and system prompt yourself. Do not ask the user for any of these.\n\nExamples of communication style:\n- Bad: \"Added weatherTool to agent-yzx capabilities.\"\n- Good: \"Your new agent can now check the weather for you.\"\n- Bad: \"Calling set-agent-tools with [weatherTool].\"\n- Good: \"Checking what capabilities to bring to your agent…\"\n- Bad: \"Agent created with weatherTool and recipeWorkflow attached.\"\n- Good: \"Your agent can check the weather and suggest recipes that match the day's conditions.\"\n\n# Form snapshot\n\nA \"Current agent configuration (authoritative)\" block is injected into your context every turn. It lists every form field with its current value AND a directive telling you exactly which setter to call (or skip) for that field. Treat the snapshot as the single source of truth for what is and isn't already set — do not try to infer state from anywhere else, and do not re-call setters for fields whose directive says \"already set\".\n\n# Authoring loop\n\nFollow these five steps in order, every time:\n\n## Step A — Understand the real outcome\n\nAnalyze what the user actually wants to achieve. Focus on the final result, not just the literal wording of the request.\n\nAsk yourself:\n- What should the agent help the user accomplish?\n- Who will use this agent?\n- What decisions should the agent make on its own?\n- What kind of output should the agent produce?\n- What recurring tasks, reasoning, or actions does the agent need to perform?\n\n## Step B — Define the agent's identity\n\nDecide on:\n- Agent name: short, memorable, anchored to the outcome. Never \"Agent X\" or generic labels.\n- Description: exactly one sentence in plain user-facing language explaining what the agent helps with.\n\nThe snapshot will tell you whether to call \\`set-agent-name\\` and \\`set-agent-description\\` or skip them.\n\n## Step C — Decide capabilities\n\nThe form snapshot lists what's currently attached. Use it together with the available tools, agents, workflows, stored skills, and models listed in the corresponding tool descriptions to decide:\n\n- Pick the *minimum* set of existing tools/agents/workflows/stored skills that satisfies the outcome. Adding irrelevant capabilities makes the agent worse, not better.\n- Prefer existing tools, workflows, agents, and stored skills before creating anything new.\n- \\`set-agent-skills\\` attaches user-available stored skills.\n- Only call \\`createSkillTool\\` when (a) no existing stored skill matches reusable operating instructions the produced agent needs, AND (b) that operating instruction is genuinely needed for the outcome. Do not use stored skills as a substitute for missing integrations or tools.\n- If a specific external connection is required (e.g. a sheet tool for a spreadsheet-driven outcome) and none is available, the new agent's system prompt must instruct it to refuse cleanly and explain what the user needs to connect.\n\n## Step D — Synthesize concise operating instructions\n\nBefore calling \\`set-agent-instructions\\`, privately write a concrete run contract for the produced agent. The system prompt must instantiate each item, but keep each item brief:\n\n1. **Trigger / input** — what user request, schedule, event, file, row, ticket, or message starts a run.\n2. **Owned outcome** — the exact result the produced agent is responsible for finishing.\n3. **Available capabilities** — only capabilities actually attached or already available from the form snapshot, described in user-facing outcome terms.\n4. **Missing-capability fallback** — what the produced agent does when a required integration, workspace, credential, or source is absent.\n5. **Done criteria** — verifiable conditions that prove the job is finished, including tool confirmation or an explicit \"not run\" reason when verification is impossible.\n6. **Final response format** — the receipt, summary, draft, diff summary, report, or confirmation the user receives.\n\nWrite the final system prompt as 2–4 short paragraphs or compact bullet groups. Target 1,200–2,000 characters and stay under 2,500 characters. Do not include worked examples, FAQs, long edge-case lists, or exhaustive policies unless the user's request explicitly requires them. Prefer one clear default over several branches.\n\n## Step E — Write the agent\n\nRead the per-field directives in the form snapshot. Call only the setters the snapshot tells you to call, each at most once, with the final value. Skip every field marked \"already set\" or \"no setter\". Skip any field that isn't listed at all (its feature is disabled).\n\nBefore calling \\`set-agent-instructions\\`, self-audit the draft. It must pass every check:\n- No placeholders remain (no \\`<...>\\`, \"TBD\", \"TODO\", \"your tool\", or generic policy gaps).\n- No internal tool ids, file paths, schemas, or builder-only terms appear.\n- No generic \"helpful assistant\" identity remains.\n- No unsupported capabilities are promised.\n- Completion criteria are concrete.\n- Missing-access fallback is included when relevant.\n- Final response expectations are clear.\n- The prompt is specific to the agent's outcome and under 2,500 characters.\n\n## Step F — Confirm the agent configuration to the user\n\nEnd your turn with one short, friendly paragraph confirming that the agent has been configured and is ready to use.\n\nUse this shape:\n\n\"Your agent, [Agent Name], has been configured with its initial parameters. It can now [plain-language outcome]. You can adjust its instructions, inputs, or connected capabilities whenever your needs change.\"\n\nDo not mention internal capability names, tools, workflows, skills, or configuration steps.\n\nGood:\n\"Your agent, Sales Drop Watcher, has been configured with its initial parameters. It can now review your weekly sales sheet, flag accounts that dropped more than 10%, and prepare follow-up drafts for each one. You can adjust its instructions, thresholds, or connected data sources whenever your needs change.\"\n\nBad:\n\"Agent created with sheetsTool, scoringWorkflow, and emailSkill attached.\"\n\nBad:\n\"I configured the sheets integration and called set-agent-instructions.\"\n\n# Quality bar for the produced agent's system prompt\n\nThe system prompt written into \\`set-agent-instructions\\` MUST be short, concrete, and useful. It should cover all of the following, but each item should usually be one sentence or a compact bullet:\n\n1. **Role and outcome.** Define what the agent is and the concrete result it owns.\n2. **Trigger and input.** Define what starts a run and what input the agent expects.\n3. **Decision rules.** Explain how the agent resolves ambiguity, what defaults it should apply, and what it should skip without asking the user.\n4. **Capability awareness.** Describe only the tools, integrations, workspaces, or data sources the agent actually has, phrased in terms of what they let the agent accomplish.\n5. **Missing-capability fallback.** Explain what the agent should do when a required integration, credential, permission, workspace, or source is unavailable.\n6. **Completion criteria.** Define exactly when the task is done in observable, verifiable terms.\n7. **Final response format.** Specify the shape of the agent's final answer, report, draft, receipt, or confirmation.\n8. **Communication style.** Require plain language, short answers, no jargon, and structure only when useful.\n9. **Refusal rules.** State what the agent must refuse and how it should explain the refusal clearly.\n\nKeep this to 2–4 focused paragraphs or compact bullet groups. Do not include worked examples, FAQs, or exhaustive edge-case lists by default.\n\n# Hard rules\n\n- If the user's request requires CLI or local-machine actions and no workspace is connected, refuse in plain language and tell the user they need to connect a workspace first.\n- Never reveal that you are calling configuration tools. Describe progress only in terms of the user's intended outcome.\n- Never produce a system prompt without explicit completion criteria.\n- Never attach a capability \"just in case.\" Every tool, agent, workflow, or skill must directly support the requested outcome.\n- The final message to the user must be concise, friendly, and focused on what the configured agent can now do.\n- The final message should make clear that the agent starts with initial parameters and can be adjusted later.`,\n    model: 'openai/gpt-5.5',\n    memory,\n    workspace,\n    // Newer cores warn once per agent because this list has no explicit\n    // retry budget; that warning is accurate, and setting\n    // `maxProcessorRetries` just to silence it would also convert\n    // input/output processor `abort({ retry: true })` from abort into retry,\n    // so the warning stays.\n    ...(args || {}),\n    errorProcessors,\n    id: 'builder-agent',\n    name: 'Agent Builder Agent',\n    description: 'An agent that can build agents',\n  };\n\n  return new Agent<'builder-agent'>(config);\n}\n","import type { Mastra } from '@mastra/core';\nimport type { Agent } from '@mastra/core/agent';\nimport type { IWorkflowBuilder, WorkflowBuilderOptions } from '@mastra/core/editor';\nimport type { MastraModelConfig } from '@mastra/core/llm';\nimport { createWorkflowBuilderAgent as createSharedWorkflowBuilderAgent } from '@mastra/core/workflows/builder';\nimport { Memory } from '@mastra/memory';\n\nexport const DEFAULT_WORKFLOW_BUILDER_MODEL = 'openai/gpt-5.5';\n\n/**\n * Authoring turns are tool-heavy: a single request can persist dozens of\n * inspection and submission records. The memory default of 10 evicts the user's\n * original request long before the workflow is finished, which reads as the\n * agent forgetting what it was asked to build.\n */\nexport const DEFAULT_WORKFLOW_BUILDER_LAST_MESSAGES = 100;\n\nexport function createWorkflowBuilderAgent(\n  model?: MastraModelConfig,\n  lastMessages: number = DEFAULT_WORKFLOW_BUILDER_LAST_MESSAGES,\n): Agent<'workflow-builder-agent'> {\n  return createSharedWorkflowBuilderAgent({\n    id: 'workflow-builder-agent',\n    name: 'Workflow Builder',\n    description: 'Builds persisted workflow definitions through constrained client tools',\n    model: model ?? DEFAULT_WORKFLOW_BUILDER_MODEL,\n    memory: new Memory({ options: { lastMessages } }),\n    surfaceInstructions: `# Studio authoring policy\n\nTurn the user's request into a complete canonical workflow definition using the registered agent, tool, and workflow catalogs. Treat the current unsaved authoring state, accepted definition, candidate definition, and validation issues injected in each turn as authoritative. Never describe schemas, mapping form, graph shape, lifecycle, or persistence state from memory—read the authoritative Studio state and catalogs first.\n\nThe three shared listing tools behave here as the shared playbook describes, with one Studio specific: \\`list-available-workflows\\` reports \\`catalog-unavailable\\` when this user lacks workflow read permission. Agents and tools stay listable in that case, so compose without nested workflow references rather than treating discovery as blocked.\n\n# Studio execution and response protocol\n\n1. Complete discovery, composition, and the shared pre-action check before calling \\`submit-workflow-draft\\`.\n2. Call \\`submit-workflow-draft\\` with one complete canonical definition. Do not submit incremental fragments, speculative alternatives, or parallel attempts.\n   When the definition nests helper workflows that the catalog does not have yet, put those complete helper definitions in the same submission's \\`dependencies\\` array. Never submit a helper on its own turn or in a separate call — the whole set travels as one submission, goes Ready as one unit, and the user's Save persists it as one unit. Only add a helper the composition genuinely requires, give it a real id and description because the user will see it as its own workflow, and tell the user in your summary which helpers Save will create.\n3. Wait for the submission result before deciding what to do next. A successful submission makes the returned accepted definition the authoritative Ready draft. Stop calling tools after success and never resubmit that Ready definition in the same turn.\n4. If the submission is rejected with validation diagnostics, do not claim success. Correct every returned issue against authoritative inspection, rerun the shared pre-action check, and make one sequential corrected complete submission.\n5. If the result is \\`already-ready\\`, the returned accepted definition is authoritative. Do not retry or replace it in the same turn; summarize it and wait for a new user turn.\n6. If the result is \\`superseded\\`, an earlier submission in the turn won. Do not apologize, retry, or claim the workflow is broken. Inspect the authoritative state before making any claim.\n7. Ready is not persisted. Never persist directly, never call a server-side \\`save-workflow\\` tool, and never claim persistence. Only the user's explicit Studio Save action may persist the finalized draft.\n8. After Ready success, follow the shared summary rules and end by telling the user to review the authoritative draft and use the explicit Studio Save action.`,\n  });\n}\n\nexport class EditorWorkflowBuilder implements IWorkflowBuilder {\n  readonly enabled: boolean;\n  private readonly agent;\n  private readonly modelPolicy: WorkflowBuilderOptions['modelPolicy'];\n\n  constructor(options: WorkflowBuilderOptions = {}, mastra?: Mastra) {\n    this.enabled = options.enabled !== false;\n    this.modelPolicy = options.modelPolicy;\n    this.agent = createWorkflowBuilderAgent(options.model, options.lastMessages);\n    if (mastra) {\n      this.agent.__registerMastra(mastra);\n      this.agent.__registerPrimitives({ logger: mastra.getLogger(), storage: mastra.getStorage() });\n    }\n  }\n\n  getAgent() {\n    return this.agent;\n  }\n\n  getModelPolicy() {\n    return this.modelPolicy;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBA,IAAa,qBAAb,MAAyD;CAoBvD,YAAY,SAA+B;EAlBM,KAAA,sBAAA,CAAC;EAGC,KAAA,wBAAA,CAAC;EAoBlD,MAAM,SAAS,WAAW,CAAC;EAC3B,KAAK,UAAU;GACb,GAAG;GACH,UAAU,OAAO,WACb;IACE,GAAG,OAAO;IACV,OAAO,OAAO,SAAS,QAAQ,EAAE,GAAG,OAAO,SAAS,MAAM,IAAI,KAAA;GAChE,IACA,KAAA;EACN;EACA,KAAK,oBAAoB;EACzB,KAAK,sBAAsB;EAK3B,KAAK,mBAAmB,EACtB,QAAA,GAAA,8BAAA,qBAAA,CAA4B,KAAK,QAAQ,UAAU,OAAO,EACxD,kBAAkB,KAAK,sBAAsB,EAC/C,CAAC,EACH;CACF;CAEA,IAAI,UAAmB;EACrB,OAAO,KAAK,QAAQ,YAAY;CAClC;CAEA,cAA+C;EAC7C,OAAO,KAAK;CACd;CAEA,mBAAyD;EACvD,OAAO,KAAK,QAAQ;CACtB;CAEA,gBAAmD;EACjD,OAAO,KAAK,QAAQ;CACtB;CAEA,yBAAmC;EACjC,OAAO,CAAC,GAAG,KAAK,qBAAqB,GAAG,KAAK,qBAAqB;CACpE;;;;;;;CAQA,wBAAyC;EACvC,MAAM,gBAAgB,KAAK,QAAQ,eAAe,OAAO;EACzD,OAAO,QAAQ,eAAe,QAAQ,QAAQ;CAChD;;;;;;;;;CAUA,wBAAsC;EAEpC,IADwB,KAAK,QAAQ,UAAU,OAAO,YAC9B,MAAM;EAE9B,MAAM,gBAAgB,KAAK,QAAQ,eAAe,OAAO;EACzD,IAAI,CAAC,eAAe;GAClB,MAAM,UACJ;GAIF,KAAK,sBAAsB,KAAK,OAAO;GAEvC,QAAQ,KAAK,2BAA2B,SAAS;GAEjD,IAAI,KAAK,QAAQ,UAAU,OACzB,KAAK,QAAQ,SAAS,MAAM,UAAU;GAExC;EACF;EAEA,IAAI,CAAC,cAAc,QAAQ,UAAU;GACnC,MAAM,UACJ;GAGF,KAAK,sBAAsB,KAAK,OAAO;GAEvC,QAAQ,KAAK,2BAA2B,SAAS;GACjD,IAAI,KAAK,QAAQ,UAAU,OACzB,KAAK,QAAQ,SAAS,MAAM,UAAU;EAE1C;CACF;CAEA,sBAAoC;EAClC,MAAM,UAAU,KAAK,QAAQ,YAAY;EAKzC,MAAM,gBAAgB,KAAK,QAAQ,UAAU,OAAO;EACpD,MAAM,gBAAgB,kBAAkB;EACxC,MAAM,SAAS,KAAK,QAAQ,eAAe,OAAO;EAClD,MAAM,UAAU,QAAQ;EACxB,MAAM,eAAe,QAAQ;EAS7B,IAAI,EAAA,GAAA,8BAAA,2BAAA,CAPsC;GACxC;GACA;GACA;GACA,SAAS;EACX,CAEU,GAAG;EAMb,IAAI,kBAAkB,SAAS,iBAAiB,KAAA,GAC9C,MAAM,IAAI,MACR,kOAGF;EAKF,IAAI,iBAAiB,KAAA,KAAa,YAAY,KAAA,KAAa,QAAQ,SAAS,GACtE;OAAA,EAAA,GAAA,8BAAA,eAAA,CAAgB,SAAS,YAAY,GACvC,MAAM,IAAI,MACR,0LAGF;EAAA;CAGN;AACF;;;AC9KA,MAAMA,gBAAAA,GAAAA,IAAAA,cAAAA,CAAAA,QAAAA,KAAAA,CAAAA,CAAAA,cAAAA,UAAAA,CAAAA,CAAAA,IAA0C;AAChD,MAAMC,cAAY,KAAA,QAAK,QAAQD,YAAU;AAIzC,MAAM,YAAY,IAAIE,uBAAAA,UAAU;CAC9B,YAAY,IAAIC,uBAAAA,gBAAgB,EAC9B,UAJkB,KAAA,QAAK,KAAKF,aAAW,WAIjB,EACxB,CAAC;CACD,QAAQ,CAAC,QAAQ;AACnB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6CD,MAAa,mCAAmC;CAC9C,IAAIG,wBAAAA,sBAAsB;CAC1B,IAAIC,wBAAAA,oBAAoB;CACxB,IAAIC,wBAAAA,0BAA0B;AAChC;AAEA,SAAgB,mBAAmB,MAAsE;CACvG,MAAM,SAAS,IAAIC,eAAAA,OAAO;CAc1B,MAAM,wBAAwB,MAAM;CACpC,MAAM,kBACJ,MAAM,2BAA2B,QAC7B,wBACA,MAAM,QAAQ,qBAAqB,IACjC,CACE,GAAG,iCAAiC,KAClC,cAAa,sBAAsB,MAAK,WAAU,OAAO,OAAO,UAAU,EAAE,KAAK,SACnF,GACA,GAAG,sBAAsB,QACvB,WAAU,CAAC,iCAAiC,MAAK,cAAa,UAAU,OAAO,OAAO,EAAE,CAC1F,CACF,IACC,yBAAyB;CAiJlC,OAAO,IAAIC,mBAAAA,MAAuB;EA9IhC,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+Hd,OAAO;EACP;EACA;EAMA,GAAI,QAAQ,CAAC;EACb;EACA,IAAI;EACJ,MAAM;EACN,aAAa;CAGwB,CAAC;AAC1C;ACnOA,SAAgB,2BACd,OACA,eAAA,KACiC;CACjC,QAAA,GAAA,+BAAA,2BAAA,CAAwC;EACtC,IAAI;EACJ,MAAM;EACN,aAAa;EACb,OAAO,SAAA;EACP,QAAQ,IAAIC,eAAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;EAChD,qBAAqB;;;;;;;;;;;;;;;;;CAiBvB,CAAC;AACH;AAEA,IAAa,wBAAb,MAA+D;CAK7D,YAAY,UAAkC,CAAC,GAAG,QAAiB;EACjE,KAAK,UAAU,QAAQ,YAAY;EACnC,KAAK,cAAc,QAAQ;EAC3B,KAAK,QAAQ,2BAA2B,QAAQ,OAAO,QAAQ,YAAY;EAC3E,IAAI,QAAQ;GACV,KAAK,MAAM,iBAAiB,MAAM;GAClC,KAAK,MAAM,qBAAqB;IAAE,QAAQ,OAAO,UAAU;IAAG,SAAS,OAAO,WAAW;GAAE,CAAC;EAC9F;CACF;CAEA,WAAW;EACT,OAAO,KAAK;CACd;CAEA,iBAAiB;EACf,OAAO,KAAK;CACd;AACF"}

package/dist/ee/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.cts","names":[],"sources":["../../src/ee/agent-builder.ts","../../src/ee/agent-builder-agent.ts","../../src/ee/workflow-builder.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;cAgBa,8BAA8B;mBACxB;mBACA;;mBAGA;;;;;;;;;;;;mBAaA;EAEjB,YAAY,UAAU;MA4BlB;EAIJ,eAAe;EAIf,oBAAoB;EAIpB,iBAAiB;EAIjB;;;;;;;UAUQ;;;;;;;;;UAaA;UAmCA;;;;iBC7EM,mBAAmB,OAAO,QAAQ,gCAAgC;;;iBC5ClE,2BACd,QAAQ,mBACR,wBACC;cA2BU,iCAAiC;WACnC;mBACQ;mBACA;EAEjB,YAAY,UAAS,wBAA6B,SAAS;EAU3D,YAAQ,6DAAA,yDAAA;EAIR,0DAAc"}
+{"version":3,"file":"index.d.cts","names":[],"sources":["../../src/ee/agent-builder.ts","../../src/ee/agent-builder-agent.ts","../../src/ee/workflow-builder.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;cAgBa,8BAA8B;mBACxB;mBACA;;mBAGA;;;;;;;;;;;;mBAaA;EAEjB,YAAY,UAAU;MA4BlB;EAIJ,eAAe;EAIf,oBAAoB;EAIpB,iBAAiB;EAIjB;;;;;;;UAUQ;;;;;;;;;UAaA;UAmCA;;;;iBCpEM,mBAAmB,OAAO,QAAQ,gCAAgC;;;iBCrDlE,2BACd,QAAQ,mBACR,wBACC;cA2BU,iCAAiC;WACnC;mBACQ;mBACA;EAEjB,YAAY,UAAS,wBAA6B,SAAS;EAU3D,YAAQ,6DAAA,yDAAA;EAIR,0DAAc"}

package/dist/ee/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/ee/agent-builder.ts","../../src/ee/agent-builder-agent.ts","../../src/ee/workflow-builder.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;cAgBa,8BAA8B;mBACxB;mBACA;;mBAGA;;;;;;;;;;;;mBAaA;EAEjB,YAAY,UAAU;MA4BlB;EAIJ,eAAe;EAIf,oBAAoB;EAIpB,iBAAiB;EAIjB;;;;;;;UAUQ;;;;;;;;;UAaA;UAmCA;;;;iBC7EM,mBAAmB,OAAO,QAAQ,gCAAgC;;;iBC5ClE,2BACd,QAAQ,mBACR,wBACC;cA2BU,iCAAiC;WACnC;mBACQ;mBACA;EAEjB,YAAY,UAAS,wBAA6B,SAAS;EAU3D,YAAQ,6DAAA,yDAAA;EAIR,0DAAc"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/ee/agent-builder.ts","../../src/ee/agent-builder-agent.ts","../../src/ee/workflow-builder.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;cAgBa,8BAA8B;mBACxB;mBACA;;mBAGA;;;;;;;;;;;;mBAaA;EAEjB,YAAY,UAAU;MA4BlB;EAIJ,eAAe;EAIf,oBAAoB;EAIpB,iBAAiB;EAIjB;;;;;;;UAUQ;;;;;;;;;UAaA;UAmCA;;;;iBCpEM,mBAAmB,OAAO,QAAQ,gCAAgC;;;iBCrDlE,2BACd,QAAQ,mBACR,wBACC;cA2BU,iCAAiC;WACnC;mBACQ;mBACA;EAEjB,YAAY,UAAS,wBAA6B,SAAS;EAU3D,YAAQ,6DAAA,yDAAA;EAIR,0DAAc"}

package/dist/ee/index.js

@@ -143,18 +143,27 @@ const workspace = new Workspace({
 *   (anthropic tool-id format, cerebras reasoning-content strip, anthropic
 *   foreign-reasoning strip) so model swaps don't break history.
 *
+* Same three processors, same order, as the shared stability defaults in
+* `@mastra/core/processors`. `createBuilderAgent` passes this list explicitly
+* rather than relying on the framework defaults: the peer range allows older
+* cores that have no defaults, and bumping the range would be a breaking
+* change, so the builder brings its own stack and behaves the same on every
+* core version.
+*
 * Exported so callers can compose a custom processor list that keeps the
-* subset they want (e.g. `[...DEFAULT_BUILDER_ERROR_PROCESSORS.filter(p => p.id !== 'stream-error-retry-processor'), myCustom]`).
+* subset they want. Pass it with `errorProcessorDefaults: false`, or the
+* builder merges the omitted defaults back in:
+* `createBuilderAgent({ errorProcessors: [...DEFAULT_BUILDER_ERROR_PROCESSORS.filter(p => p.id !== 'stream-error-retry-processor'), myCustom], errorProcessorDefaults: false })`.
 */
 const DEFAULT_BUILDER_ERROR_PROCESSORS = [
-	new StreamErrorRetryProcessor(),
+	new ProviderHistoryCompat(),
 	new PrefillErrorHandler(),
-	new ProviderHistoryCompat()
+	new StreamErrorRetryProcessor()
 ];
 function createBuilderAgent(args) {
 	const memory = new Memory();
 	const callerErrorProcessors = args?.errorProcessors;
-	const errorProcessors = Array.isArray(callerErrorProcessors) ? [...DEFAULT_BUILDER_ERROR_PROCESSORS, ...callerErrorProcessors] : callerErrorProcessors ?? DEFAULT_BUILDER_ERROR_PROCESSORS;
+	const errorProcessors = args?.errorProcessorDefaults === false ? callerErrorProcessors : Array.isArray(callerErrorProcessors) ? [...DEFAULT_BUILDER_ERROR_PROCESSORS.map((processor) => callerErrorProcessors.find((caller) => caller.id === processor.id) ?? processor), ...callerErrorProcessors.filter((caller) => !DEFAULT_BUILDER_ERROR_PROCESSORS.some((processor) => processor.id === caller.id))] : callerErrorProcessors ?? DEFAULT_BUILDER_ERROR_PROCESSORS;
 	return new Agent({
 		instructions: `You are the Agent Builder.
 

package/dist/ee/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["createSharedWorkflowBuilderAgent"],"sources":["../../src/ee/agent-builder.ts","../../src/ee/agent-builder-agent.ts","../../src/ee/workflow-builder.ts"],"sourcesContent":["import type { AgentBuilderOptions, AgentFeatures, IAgentBuilder } from '@mastra/core/agent-builder/ee';\nimport { isBuilderModelPolicyActive, isModelAllowed, resolveAgentFeatures } from '@mastra/core/agent-builder/ee';\n\n/**\n * Concrete implementation of the Agent Builder EE feature.\n * Instantiated by MastraEditor.resolveBuilder() when builder config is enabled.\n *\n * The constructor performs fail-fast validation of the admin's model policy\n * (Phase 4) so misconfiguration is caught at boot, not at first request.\n *\n * Feature toggles use **default-on semantics**: omitted keys resolve to\n * `true`. Admins opt out by setting a key to `false`. The resolved features\n * are computed once in the constructor (after validation) and returned\n * verbatim by {@link getFeatures} so all downstream consumers (server route,\n * UI hooks, policy derivation) see the same effective values.\n */\nexport class EditorAgentBuilder implements IAgentBuilder {\n  private readonly options: AgentBuilderOptions;\n  private readonly modelPolicyWarnings: string[] = [];\n\n  /** Non-fatal warnings for browser config issues (surfaced alongside model policy warnings). */\n  private readonly browserConfigWarnings: string[] = [];\n\n  /**\n   * Resolved (default-on normalized) features. Computed once in the\n   * constructor; `undefined` only if the builder was constructed with\n   * `enabled: false` (we still allocate features for the OFF path so callers\n   * can introspect, but we keep the field optional to preserve the existing\n   * API contract where `getFeatures()` may legitimately return `undefined`\n   * if no `features` was provided AND no defaults could be applied).\n   *\n   * In practice this is always populated: `resolveAgentFeatures` returns a\n   * fully-populated object regardless of input.\n   */\n  private readonly resolvedFeatures: AgentBuilderOptions['features'];\n\n  constructor(options?: AgentBuilderOptions) {\n    // Shallow-clone the paths the validators mutate so we never leak side\n    // effects into the caller's `MastraEditorConfig.builder` object.\n    // `validateBrowserConfig` writes to `features.agent.browser`; nothing\n    // else is mutated, so `configuration` and `registries` stay aliased.\n    const source = options ?? {};\n    this.options = {\n      ...source,\n      features: source.features\n        ? {\n            ...source.features,\n            agent: source.features.agent ? { ...source.features.agent } : undefined,\n          }\n        : undefined,\n    };\n    this.validateModelPolicy();\n    this.validateBrowserConfig();\n    // Resolve features AFTER browser-config validation so that an explicit\n    // `browser: true` with bad config is already mutated to `false` on\n    // `this.options.features.agent.browser`. The resolver then sees the\n    // downgraded value and returns it as-is.\n    this.resolvedFeatures = {\n      agent: resolveAgentFeatures(this.options.features?.agent, {\n        hasBrowserConfig: this.hasValidBrowserConfig(),\n      }),\n    };\n  }\n\n  get enabled(): boolean {\n    return this.options.enabled !== false;\n  }\n\n  getFeatures(): AgentBuilderOptions['features'] {\n    return this.resolvedFeatures;\n  }\n\n  getConfiguration(): AgentBuilderOptions['configuration'] {\n    return this.options.configuration;\n  }\n\n  getRegistries(): AgentBuilderOptions['registries'] {\n    return this.options.registries;\n  }\n\n  getModelPolicyWarnings(): string[] {\n    return [...this.modelPolicyWarnings, ...this.browserConfigWarnings];\n  }\n\n  /**\n   * True when `configuration.agent.browser` declares a provider. The\n   * EditorAgentBuilder does NOT verify the provider is registered with the\n   * Mastra instance — that cross-validation lives in `MastraEditor.resolveBuilder`\n   * because only the editor knows the registered browser providers.\n   */\n  private hasValidBrowserConfig(): boolean {\n    const browserConfig = this.options.configuration?.agent?.browser;\n    return Boolean(browserConfig?.config?.provider);\n  }\n\n  /**\n   * Browser config validation only runs for **explicit** `browser: true`.\n   * With default-on semantics, an omitted `browser` no longer means \"admin\n   * opted in\" — it means \"admin didn't opt out\". The default-on path is\n   * resolved later by `resolveAgentFeatures`, which already gates `browser`\n   * on `hasValidBrowserConfig`. We don't want to spam every default-config\n   * deployment with warnings.\n   */\n  private validateBrowserConfig(): void {\n    const explicitBrowser = this.options.features?.agent?.browser;\n    if (explicitBrowser !== true) return;\n\n    const browserConfig = this.options.configuration?.agent?.browser;\n    if (!browserConfig) {\n      const warning =\n        'Agent Builder browser feature is enabled but no default browser config was provided. ' +\n        'Set `editor.builder.configuration.agent.browser` to a valid browser config ' +\n        '(e.g. `{ type: \"inline\", config: { provider: \"stagehand\" } }`). ' +\n        'The browser toggle will be hidden until a default is configured.';\n      this.browserConfigWarnings.push(warning);\n      // eslint-disable-next-line no-console\n      console.warn(`[mastra:editor:builder] ${warning}`);\n      // Downgrade so the resolved feature ends up `false`.\n      if (this.options.features?.agent) {\n        this.options.features.agent.browser = false;\n      }\n      return;\n    }\n\n    if (!browserConfig.config?.provider) {\n      const warning =\n        'Agent Builder browser config is missing a `provider` field. ' +\n        'Set `editor.builder.configuration.agent.browser.config.provider` ' +\n        '(e.g. `\"stagehand\"`). The browser toggle will be hidden until a provider is configured.';\n      this.browserConfigWarnings.push(warning);\n      // eslint-disable-next-line no-console\n      console.warn(`[mastra:editor:builder] ${warning}`);\n      if (this.options.features?.agent) {\n        this.options.features.agent.browser = false;\n      }\n    }\n  }\n\n  private validateModelPolicy(): void {\n    const enabled = this.options.enabled !== false;\n    // Locked-mode is only triggered by an explicit `model: false` from the\n    // admin. With default-on semantics, an omitted `model` resolves to\n    // `true` (picker visible), which is open mode and has no\n    // locked-mode-default invariant.\n    const explicitModel = this.options.features?.agent?.model;\n    const pickerVisible = explicitModel !== false;\n    const models = this.options.configuration?.agent?.models;\n    const allowed = models?.allowed;\n    const defaultModel = models?.default;\n\n    const active = isBuilderModelPolicyActive({\n      enabled,\n      pickerVisible,\n      allowed,\n      default: defaultModel,\n    });\n\n    if (!active) return;\n\n    // Locked mode (picker hidden) requires an admin-pinned default. Phase 3's\n    // create-path decision matrix relies on this invariant: a locked policy\n    // without a default is unreachable. Only fires when the admin has\n    // explicitly opted out of the picker.\n    if (explicitModel === false && defaultModel === undefined) {\n      throw new Error(\n        'Agent Builder model policy is active in locked mode but no default was set. ' +\n          'Set `editor.builder.configuration.agent.models.default`, or remove ' +\n          '`editor.builder.features.agent.model = false` to allow end-users to pick a model.',\n      );\n    }\n\n    // When an allowlist is set, the default (if any) must satisfy it. An\n    // empty `allowed: []` means \"unrestricted\" so we skip this check.\n    if (defaultModel !== undefined && allowed !== undefined && allowed.length > 0) {\n      if (!isModelAllowed(allowed, defaultModel)) {\n        throw new Error(\n          'Agent Builder default model is not in the allowlist. ' +\n            'Either add it to `editor.builder.configuration.agent.models.allowed` ' +\n            'or change `editor.builder.configuration.agent.models.default`.',\n        );\n      }\n    }\n  }\n}\n\n// AgentFeatures imported for documentation reference in this file's jsdoc.\nexport type { AgentFeatures };\n","import { Agent } from '@mastra/core/agent';\nimport type { AgentConfig } from '@mastra/core/agent';\nimport { Memory } from '@mastra/memory';\nimport { PrefillErrorHandler, ProviderHistoryCompat, StreamErrorRetryProcessor } from '@mastra/core/processors';\nimport { Workspace, LocalFilesystem } from '@mastra/core/workspace';\n\nimport path from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = path.dirname(__filename);\n\nconst workspacePath = path.join(__dirname, 'workspace');\n\nconst workspace = new Workspace({\n  filesystem: new LocalFilesystem({\n    basePath: workspacePath,\n  }),\n  skills: ['skills'],\n});\n\n/**\n * Agent Builder Agent\n *\n * Audience: non-technical users (Product, founders, operators, business stakeholders).\n * Goal: turn a plain-language description of a desired outcome into a fully\n * configured, production-quality agent — name, description, model, capabilities,\n * and system prompt — without asking the user follow-up questions.\n *\n * Capability tools the playground UI injects as client tools:\n * - set-agent-name, set-agent-description, set-agent-instructions, set-agent-workspace-id (always on)\n * - set-agent-tools (gated by features.tools)\n * - set-agent-skills (gated by features.skills + skills available)\n * - set-agent-model (gated by features.model + models available)\n * - set-agent-browser-enabled (gated by features.browser)\n * - createSkillTool (gated by features.skills) — only when a needed capability does not exist\n */\n\n/**\n * Default error processors wired into every builder agent. These each fix a\n * class of provider-side correctness bug that builder workloads tend to hit:\n *\n * - `StreamErrorRetryProcessor` — retries OpenAI's transient stream errors\n *   (`server_error`, `rate_limit`, `internal_error`, `timeout`, `overloaded`,\n *   etc.) that surface on long, tool-heavy turns.\n * - `PrefillErrorHandler` — recovers from Anthropic's\n *   `does not support assistant message prefill` 400 by appending a\n *   `system-reminder` continue message and retrying.\n * - `ProviderHistoryCompat` — applies provider-history-shape fixes\n *   (anthropic tool-id format, cerebras reasoning-content strip, anthropic\n *   foreign-reasoning strip) so model swaps don't break history.\n *\n * Exported so callers can compose a custom processor list that keeps the\n * subset they want (e.g. `[...DEFAULT_BUILDER_ERROR_PROCESSORS.filter(p => p.id !== 'stream-error-retry-processor'), myCustom]`).\n */\nexport const DEFAULT_BUILDER_ERROR_PROCESSORS = [\n  new StreamErrorRetryProcessor(),\n  new PrefillErrorHandler(),\n  new ProviderHistoryCompat(),\n];\n\nexport function createBuilderAgent(args?: Partial<AgentConfig<'builder-agent'>>): Agent<'builder-agent'> {\n  const memory = new Memory();\n\n  // Merge defaults with any caller-supplied processors. Caller processors run\n  // after defaults so they can observe/extend retries the defaults trigger.\n  // A function-typed override (DynamicArgument) is passed through unchanged —\n  // callers using the dynamic form are assumed to manage the full list.\n  const callerErrorProcessors = args?.errorProcessors;\n  const errorProcessors = Array.isArray(callerErrorProcessors)\n    ? [...DEFAULT_BUILDER_ERROR_PROCESSORS, ...callerErrorProcessors]\n    : (callerErrorProcessors ?? DEFAULT_BUILDER_ERROR_PROCESSORS);\n\n  const config: AgentConfig<'builder-agent'> = {\n    instructions: `You are the Agent Builder.\n\nYour job: turn a non-technical user's plain-language request into a fully configured, production-quality agent in a single turn.\n\n# Non-negotiables\n\n- Never ask the user follow-up questions. Make the most reasonable assumption and move forward.\n- Never expose internal names, tool ids, file paths, schemas, code, or jargon to the user.\n- Speak only in user-facing capability terms.\n- Always finish the build in the same turn as the request — configure the agent end-to-end and deliver a short summary.\n- Always define the new agent's name, description, model, and system prompt yourself. Do not ask the user for any of these.\n\nExamples of communication style:\n- Bad: \"Added weatherTool to agent-yzx capabilities.\"\n- Good: \"Your new agent can now check the weather for you.\"\n- Bad: \"Calling set-agent-tools with [weatherTool].\"\n- Good: \"Checking what capabilities to bring to your agent…\"\n- Bad: \"Agent created with weatherTool and recipeWorkflow attached.\"\n- Good: \"Your agent can check the weather and suggest recipes that match the day's conditions.\"\n\n# Form snapshot\n\nA \"Current agent configuration (authoritative)\" block is injected into your context every turn. It lists every form field with its current value AND a directive telling you exactly which setter to call (or skip) for that field. Treat the snapshot as the single source of truth for what is and isn't already set — do not try to infer state from anywhere else, and do not re-call setters for fields whose directive says \"already set\".\n\n# Authoring loop\n\nFollow these five steps in order, every time:\n\n## Step A — Understand the real outcome\n\nAnalyze what the user actually wants to achieve. Focus on the final result, not just the literal wording of the request.\n\nAsk yourself:\n- What should the agent help the user accomplish?\n- Who will use this agent?\n- What decisions should the agent make on its own?\n- What kind of output should the agent produce?\n- What recurring tasks, reasoning, or actions does the agent need to perform?\n\n## Step B — Define the agent's identity\n\nDecide on:\n- Agent name: short, memorable, anchored to the outcome. Never \"Agent X\" or generic labels.\n- Description: exactly one sentence in plain user-facing language explaining what the agent helps with.\n\nThe snapshot will tell you whether to call \\`set-agent-name\\` and \\`set-agent-description\\` or skip them.\n\n## Step C — Decide capabilities\n\nThe form snapshot lists what's currently attached. Use it together with the available tools, agents, workflows, stored skills, and models listed in the corresponding tool descriptions to decide:\n\n- Pick the *minimum* set of existing tools/agents/workflows/stored skills that satisfies the outcome. Adding irrelevant capabilities makes the agent worse, not better.\n- Prefer existing tools, workflows, agents, and stored skills before creating anything new.\n- \\`set-agent-skills\\` attaches user-available stored skills.\n- Only call \\`createSkillTool\\` when (a) no existing stored skill matches reusable operating instructions the produced agent needs, AND (b) that operating instruction is genuinely needed for the outcome. Do not use stored skills as a substitute for missing integrations or tools.\n- If a specific external connection is required (e.g. a sheet tool for a spreadsheet-driven outcome) and none is available, the new agent's system prompt must instruct it to refuse cleanly and explain what the user needs to connect.\n\n## Step D — Synthesize concise operating instructions\n\nBefore calling \\`set-agent-instructions\\`, privately write a concrete run contract for the produced agent. The system prompt must instantiate each item, but keep each item brief:\n\n1. **Trigger / input** — what user request, schedule, event, file, row, ticket, or message starts a run.\n2. **Owned outcome** — the exact result the produced agent is responsible for finishing.\n3. **Available capabilities** — only capabilities actually attached or already available from the form snapshot, described in user-facing outcome terms.\n4. **Missing-capability fallback** — what the produced agent does when a required integration, workspace, credential, or source is absent.\n5. **Done criteria** — verifiable conditions that prove the job is finished, including tool confirmation or an explicit \"not run\" reason when verification is impossible.\n6. **Final response format** — the receipt, summary, draft, diff summary, report, or confirmation the user receives.\n\nWrite the final system prompt as 2–4 short paragraphs or compact bullet groups. Target 1,200–2,000 characters and stay under 2,500 characters. Do not include worked examples, FAQs, long edge-case lists, or exhaustive policies unless the user's request explicitly requires them. Prefer one clear default over several branches.\n\n## Step E — Write the agent\n\nRead the per-field directives in the form snapshot. Call only the setters the snapshot tells you to call, each at most once, with the final value. Skip every field marked \"already set\" or \"no setter\". Skip any field that isn't listed at all (its feature is disabled).\n\nBefore calling \\`set-agent-instructions\\`, self-audit the draft. It must pass every check:\n- No placeholders remain (no \\`<...>\\`, \"TBD\", \"TODO\", \"your tool\", or generic policy gaps).\n- No internal tool ids, file paths, schemas, or builder-only terms appear.\n- No generic \"helpful assistant\" identity remains.\n- No unsupported capabilities are promised.\n- Completion criteria are concrete.\n- Missing-access fallback is included when relevant.\n- Final response expectations are clear.\n- The prompt is specific to the agent's outcome and under 2,500 characters.\n\n## Step F — Confirm the agent configuration to the user\n\nEnd your turn with one short, friendly paragraph confirming that the agent has been configured and is ready to use.\n\nUse this shape:\n\n\"Your agent, [Agent Name], has been configured with its initial parameters. It can now [plain-language outcome]. You can adjust its instructions, inputs, or connected capabilities whenever your needs change.\"\n\nDo not mention internal capability names, tools, workflows, skills, or configuration steps.\n\nGood:\n\"Your agent, Sales Drop Watcher, has been configured with its initial parameters. It can now review your weekly sales sheet, flag accounts that dropped more than 10%, and prepare follow-up drafts for each one. You can adjust its instructions, thresholds, or connected data sources whenever your needs change.\"\n\nBad:\n\"Agent created with sheetsTool, scoringWorkflow, and emailSkill attached.\"\n\nBad:\n\"I configured the sheets integration and called set-agent-instructions.\"\n\n# Quality bar for the produced agent's system prompt\n\nThe system prompt written into \\`set-agent-instructions\\` MUST be short, concrete, and useful. It should cover all of the following, but each item should usually be one sentence or a compact bullet:\n\n1. **Role and outcome.** Define what the agent is and the concrete result it owns.\n2. **Trigger and input.** Define what starts a run and what input the agent expects.\n3. **Decision rules.** Explain how the agent resolves ambiguity, what defaults it should apply, and what it should skip without asking the user.\n4. **Capability awareness.** Describe only the tools, integrations, workspaces, or data sources the agent actually has, phrased in terms of what they let the agent accomplish.\n5. **Missing-capability fallback.** Explain what the agent should do when a required integration, credential, permission, workspace, or source is unavailable.\n6. **Completion criteria.** Define exactly when the task is done in observable, verifiable terms.\n7. **Final response format.** Specify the shape of the agent's final answer, report, draft, receipt, or confirmation.\n8. **Communication style.** Require plain language, short answers, no jargon, and structure only when useful.\n9. **Refusal rules.** State what the agent must refuse and how it should explain the refusal clearly.\n\nKeep this to 2–4 focused paragraphs or compact bullet groups. Do not include worked examples, FAQs, or exhaustive edge-case lists by default.\n\n# Hard rules\n\n- If the user's request requires CLI or local-machine actions and no workspace is connected, refuse in plain language and tell the user they need to connect a workspace first.\n- Never reveal that you are calling configuration tools. Describe progress only in terms of the user's intended outcome.\n- Never produce a system prompt without explicit completion criteria.\n- Never attach a capability \"just in case.\" Every tool, agent, workflow, or skill must directly support the requested outcome.\n- The final message to the user must be concise, friendly, and focused on what the configured agent can now do.\n- The final message should make clear that the agent starts with initial parameters and can be adjusted later.`,\n    model: 'openai/gpt-5.5',\n    memory,\n    workspace,\n    ...(args || {}),\n    errorProcessors,\n    id: 'builder-agent',\n    name: 'Agent Builder Agent',\n    description: 'An agent that can build agents',\n  };\n\n  return new Agent<'builder-agent'>(config);\n}\n","import type { Mastra } from '@mastra/core';\nimport type { Agent } from '@mastra/core/agent';\nimport type { IWorkflowBuilder, WorkflowBuilderOptions } from '@mastra/core/editor';\nimport type { MastraModelConfig } from '@mastra/core/llm';\nimport { createWorkflowBuilderAgent as createSharedWorkflowBuilderAgent } from '@mastra/core/workflows/builder';\nimport { Memory } from '@mastra/memory';\n\nexport const DEFAULT_WORKFLOW_BUILDER_MODEL = 'openai/gpt-5.5';\n\n/**\n * Authoring turns are tool-heavy: a single request can persist dozens of\n * inspection and submission records. The memory default of 10 evicts the user's\n * original request long before the workflow is finished, which reads as the\n * agent forgetting what it was asked to build.\n */\nexport const DEFAULT_WORKFLOW_BUILDER_LAST_MESSAGES = 100;\n\nexport function createWorkflowBuilderAgent(\n  model?: MastraModelConfig,\n  lastMessages: number = DEFAULT_WORKFLOW_BUILDER_LAST_MESSAGES,\n): Agent<'workflow-builder-agent'> {\n  return createSharedWorkflowBuilderAgent({\n    id: 'workflow-builder-agent',\n    name: 'Workflow Builder',\n    description: 'Builds persisted workflow definitions through constrained client tools',\n    model: model ?? DEFAULT_WORKFLOW_BUILDER_MODEL,\n    memory: new Memory({ options: { lastMessages } }),\n    surfaceInstructions: `# Studio authoring policy\n\nTurn the user's request into a complete canonical workflow definition using the registered agent, tool, and workflow catalogs. Treat the current unsaved authoring state, accepted definition, candidate definition, and validation issues injected in each turn as authoritative. Never describe schemas, mapping form, graph shape, lifecycle, or persistence state from memory—read the authoritative Studio state and catalogs first.\n\nThe three shared listing tools behave here as the shared playbook describes, with one Studio specific: \\`list-available-workflows\\` reports \\`catalog-unavailable\\` when this user lacks workflow read permission. Agents and tools stay listable in that case, so compose without nested workflow references rather than treating discovery as blocked.\n\n# Studio execution and response protocol\n\n1. Complete discovery, composition, and the shared pre-action check before calling \\`submit-workflow-draft\\`.\n2. Call \\`submit-workflow-draft\\` with one complete canonical definition. Do not submit incremental fragments, speculative alternatives, or parallel attempts.\n   When the definition nests helper workflows that the catalog does not have yet, put those complete helper definitions in the same submission's \\`dependencies\\` array. Never submit a helper on its own turn or in a separate call — the whole set travels as one submission, goes Ready as one unit, and the user's Save persists it as one unit. Only add a helper the composition genuinely requires, give it a real id and description because the user will see it as its own workflow, and tell the user in your summary which helpers Save will create.\n3. Wait for the submission result before deciding what to do next. A successful submission makes the returned accepted definition the authoritative Ready draft. Stop calling tools after success and never resubmit that Ready definition in the same turn.\n4. If the submission is rejected with validation diagnostics, do not claim success. Correct every returned issue against authoritative inspection, rerun the shared pre-action check, and make one sequential corrected complete submission.\n5. If the result is \\`already-ready\\`, the returned accepted definition is authoritative. Do not retry or replace it in the same turn; summarize it and wait for a new user turn.\n6. If the result is \\`superseded\\`, an earlier submission in the turn won. Do not apologize, retry, or claim the workflow is broken. Inspect the authoritative state before making any claim.\n7. Ready is not persisted. Never persist directly, never call a server-side \\`save-workflow\\` tool, and never claim persistence. Only the user's explicit Studio Save action may persist the finalized draft.\n8. After Ready success, follow the shared summary rules and end by telling the user to review the authoritative draft and use the explicit Studio Save action.`,\n  });\n}\n\nexport class EditorWorkflowBuilder implements IWorkflowBuilder {\n  readonly enabled: boolean;\n  private readonly agent;\n  private readonly modelPolicy: WorkflowBuilderOptions['modelPolicy'];\n\n  constructor(options: WorkflowBuilderOptions = {}, mastra?: Mastra) {\n    this.enabled = options.enabled !== false;\n    this.modelPolicy = options.modelPolicy;\n    this.agent = createWorkflowBuilderAgent(options.model, options.lastMessages);\n    if (mastra) {\n      this.agent.__registerMastra(mastra);\n      this.agent.__registerPrimitives({ logger: mastra.getLogger(), storage: mastra.getStorage() });\n    }\n  }\n\n  getAgent() {\n    return this.agent;\n  }\n\n  getModelPolicy() {\n    return this.modelPolicy;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAgBA,IAAa,qBAAb,MAAyD;CAoBvD,YAAY,SAA+B;EAlBM,KAAA,sBAAA,CAAC;EAGC,KAAA,wBAAA,CAAC;EAoBlD,MAAM,SAAS,WAAW,CAAC;EAC3B,KAAK,UAAU;GACb,GAAG;GACH,UAAU,OAAO,WACb;IACE,GAAG,OAAO;IACV,OAAO,OAAO,SAAS,QAAQ,EAAE,GAAG,OAAO,SAAS,MAAM,IAAI,KAAA;GAChE,IACA,KAAA;EACN;EACA,KAAK,oBAAoB;EACzB,KAAK,sBAAsB;EAK3B,KAAK,mBAAmB,EACtB,OAAO,qBAAqB,KAAK,QAAQ,UAAU,OAAO,EACxD,kBAAkB,KAAK,sBAAsB,EAC/C,CAAC,EACH;CACF;CAEA,IAAI,UAAmB;EACrB,OAAO,KAAK,QAAQ,YAAY;CAClC;CAEA,cAA+C;EAC7C,OAAO,KAAK;CACd;CAEA,mBAAyD;EACvD,OAAO,KAAK,QAAQ;CACtB;CAEA,gBAAmD;EACjD,OAAO,KAAK,QAAQ;CACtB;CAEA,yBAAmC;EACjC,OAAO,CAAC,GAAG,KAAK,qBAAqB,GAAG,KAAK,qBAAqB;CACpE;;;;;;;CAQA,wBAAyC;EACvC,MAAM,gBAAgB,KAAK,QAAQ,eAAe,OAAO;EACzD,OAAO,QAAQ,eAAe,QAAQ,QAAQ;CAChD;;;;;;;;;CAUA,wBAAsC;EAEpC,IADwB,KAAK,QAAQ,UAAU,OAAO,YAC9B,MAAM;EAE9B,MAAM,gBAAgB,KAAK,QAAQ,eAAe,OAAO;EACzD,IAAI,CAAC,eAAe;GAClB,MAAM,UACJ;GAIF,KAAK,sBAAsB,KAAK,OAAO;GAEvC,QAAQ,KAAK,2BAA2B,SAAS;GAEjD,IAAI,KAAK,QAAQ,UAAU,OACzB,KAAK,QAAQ,SAAS,MAAM,UAAU;GAExC;EACF;EAEA,IAAI,CAAC,cAAc,QAAQ,UAAU;GACnC,MAAM,UACJ;GAGF,KAAK,sBAAsB,KAAK,OAAO;GAEvC,QAAQ,KAAK,2BAA2B,SAAS;GACjD,IAAI,KAAK,QAAQ,UAAU,OACzB,KAAK,QAAQ,SAAS,MAAM,UAAU;EAE1C;CACF;CAEA,sBAAoC;EAClC,MAAM,UAAU,KAAK,QAAQ,YAAY;EAKzC,MAAM,gBAAgB,KAAK,QAAQ,UAAU,OAAO;EACpD,MAAM,gBAAgB,kBAAkB;EACxC,MAAM,SAAS,KAAK,QAAQ,eAAe,OAAO;EAClD,MAAM,UAAU,QAAQ;EACxB,MAAM,eAAe,QAAQ;EAS7B,IAAI,CAPW,2BAA2B;GACxC;GACA;GACA;GACA,SAAS;EACX,CAEU,GAAG;EAMb,IAAI,kBAAkB,SAAS,iBAAiB,KAAA,GAC9C,MAAM,IAAI,MACR,kOAGF;EAKF,IAAI,iBAAiB,KAAA,KAAa,YAAY,KAAA,KAAa,QAAQ,SAAS,GACtE;OAAA,CAAC,eAAe,SAAS,YAAY,GACvC,MAAM,IAAI,MACR,0LAGF;EAAA;CAGN;AACF;;;AC9KA,MAAM,aAAa,cAAc,OAAO,KAAK,GAAG;AAChD,MAAM,YAAY,KAAK,QAAQ,UAAU;AAIzC,MAAM,YAAY,IAAI,UAAU;CAC9B,YAAY,IAAI,gBAAgB,EAC9B,UAJkB,KAAK,KAAK,WAAW,WAIjB,EACxB,CAAC;CACD,QAAQ,CAAC,QAAQ;AACnB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCD,MAAa,mCAAmC;CAC9C,IAAI,0BAA0B;CAC9B,IAAI,oBAAoB;CACxB,IAAI,sBAAsB;AAC5B;AAEA,SAAgB,mBAAmB,MAAsE;CACvG,MAAM,SAAS,IAAI,OAAO;CAM1B,MAAM,wBAAwB,MAAM;CACpC,MAAM,kBAAkB,MAAM,QAAQ,qBAAqB,IACvD,CAAC,GAAG,kCAAkC,GAAG,qBAAqB,IAC7D,yBAAyB;CA4I9B,OAAO,IAAI,MAAuB;EAzIhC,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+Hd,OAAO;EACP;EACA;EACA,GAAI,QAAQ,CAAC;EACb;EACA,IAAI;EACJ,MAAM;EACN,aAAa;CAGwB,CAAC;AAC1C;ACnMA,SAAgB,2BACd,OACA,eAAA,KACiC;CACjC,OAAOA,6BAAiC;EACtC,IAAI;EACJ,MAAM;EACN,aAAa;EACb,OAAO,SAAA;EACP,QAAQ,IAAI,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;EAChD,qBAAqB;;;;;;;;;;;;;;;;;CAiBvB,CAAC;AACH;AAEA,IAAa,wBAAb,MAA+D;CAK7D,YAAY,UAAkC,CAAC,GAAG,QAAiB;EACjE,KAAK,UAAU,QAAQ,YAAY;EACnC,KAAK,cAAc,QAAQ;EAC3B,KAAK,QAAQ,2BAA2B,QAAQ,OAAO,QAAQ,YAAY;EAC3E,IAAI,QAAQ;GACV,KAAK,MAAM,iBAAiB,MAAM;GAClC,KAAK,MAAM,qBAAqB;IAAE,QAAQ,OAAO,UAAU;IAAG,SAAS,OAAO,WAAW;GAAE,CAAC;EAC9F;CACF;CAEA,WAAW;EACT,OAAO,KAAK;CACd;CAEA,iBAAiB;EACf,OAAO,KAAK;CACd;AACF"}
+{"version":3,"file":"index.js","names":["createSharedWorkflowBuilderAgent"],"sources":["../../src/ee/agent-builder.ts","../../src/ee/agent-builder-agent.ts","../../src/ee/workflow-builder.ts"],"sourcesContent":["import type { AgentBuilderOptions, AgentFeatures, IAgentBuilder } from '@mastra/core/agent-builder/ee';\nimport { isBuilderModelPolicyActive, isModelAllowed, resolveAgentFeatures } from '@mastra/core/agent-builder/ee';\n\n/**\n * Concrete implementation of the Agent Builder EE feature.\n * Instantiated by MastraEditor.resolveBuilder() when builder config is enabled.\n *\n * The constructor performs fail-fast validation of the admin's model policy\n * (Phase 4) so misconfiguration is caught at boot, not at first request.\n *\n * Feature toggles use **default-on semantics**: omitted keys resolve to\n * `true`. Admins opt out by setting a key to `false`. The resolved features\n * are computed once in the constructor (after validation) and returned\n * verbatim by {@link getFeatures} so all downstream consumers (server route,\n * UI hooks, policy derivation) see the same effective values.\n */\nexport class EditorAgentBuilder implements IAgentBuilder {\n  private readonly options: AgentBuilderOptions;\n  private readonly modelPolicyWarnings: string[] = [];\n\n  /** Non-fatal warnings for browser config issues (surfaced alongside model policy warnings). */\n  private readonly browserConfigWarnings: string[] = [];\n\n  /**\n   * Resolved (default-on normalized) features. Computed once in the\n   * constructor; `undefined` only if the builder was constructed with\n   * `enabled: false` (we still allocate features for the OFF path so callers\n   * can introspect, but we keep the field optional to preserve the existing\n   * API contract where `getFeatures()` may legitimately return `undefined`\n   * if no `features` was provided AND no defaults could be applied).\n   *\n   * In practice this is always populated: `resolveAgentFeatures` returns a\n   * fully-populated object regardless of input.\n   */\n  private readonly resolvedFeatures: AgentBuilderOptions['features'];\n\n  constructor(options?: AgentBuilderOptions) {\n    // Shallow-clone the paths the validators mutate so we never leak side\n    // effects into the caller's `MastraEditorConfig.builder` object.\n    // `validateBrowserConfig` writes to `features.agent.browser`; nothing\n    // else is mutated, so `configuration` and `registries` stay aliased.\n    const source = options ?? {};\n    this.options = {\n      ...source,\n      features: source.features\n        ? {\n            ...source.features,\n            agent: source.features.agent ? { ...source.features.agent } : undefined,\n          }\n        : undefined,\n    };\n    this.validateModelPolicy();\n    this.validateBrowserConfig();\n    // Resolve features AFTER browser-config validation so that an explicit\n    // `browser: true` with bad config is already mutated to `false` on\n    // `this.options.features.agent.browser`. The resolver then sees the\n    // downgraded value and returns it as-is.\n    this.resolvedFeatures = {\n      agent: resolveAgentFeatures(this.options.features?.agent, {\n        hasBrowserConfig: this.hasValidBrowserConfig(),\n      }),\n    };\n  }\n\n  get enabled(): boolean {\n    return this.options.enabled !== false;\n  }\n\n  getFeatures(): AgentBuilderOptions['features'] {\n    return this.resolvedFeatures;\n  }\n\n  getConfiguration(): AgentBuilderOptions['configuration'] {\n    return this.options.configuration;\n  }\n\n  getRegistries(): AgentBuilderOptions['registries'] {\n    return this.options.registries;\n  }\n\n  getModelPolicyWarnings(): string[] {\n    return [...this.modelPolicyWarnings, ...this.browserConfigWarnings];\n  }\n\n  /**\n   * True when `configuration.agent.browser` declares a provider. The\n   * EditorAgentBuilder does NOT verify the provider is registered with the\n   * Mastra instance — that cross-validation lives in `MastraEditor.resolveBuilder`\n   * because only the editor knows the registered browser providers.\n   */\n  private hasValidBrowserConfig(): boolean {\n    const browserConfig = this.options.configuration?.agent?.browser;\n    return Boolean(browserConfig?.config?.provider);\n  }\n\n  /**\n   * Browser config validation only runs for **explicit** `browser: true`.\n   * With default-on semantics, an omitted `browser` no longer means \"admin\n   * opted in\" — it means \"admin didn't opt out\". The default-on path is\n   * resolved later by `resolveAgentFeatures`, which already gates `browser`\n   * on `hasValidBrowserConfig`. We don't want to spam every default-config\n   * deployment with warnings.\n   */\n  private validateBrowserConfig(): void {\n    const explicitBrowser = this.options.features?.agent?.browser;\n    if (explicitBrowser !== true) return;\n\n    const browserConfig = this.options.configuration?.agent?.browser;\n    if (!browserConfig) {\n      const warning =\n        'Agent Builder browser feature is enabled but no default browser config was provided. ' +\n        'Set `editor.builder.configuration.agent.browser` to a valid browser config ' +\n        '(e.g. `{ type: \"inline\", config: { provider: \"stagehand\" } }`). ' +\n        'The browser toggle will be hidden until a default is configured.';\n      this.browserConfigWarnings.push(warning);\n      // eslint-disable-next-line no-console\n      console.warn(`[mastra:editor:builder] ${warning}`);\n      // Downgrade so the resolved feature ends up `false`.\n      if (this.options.features?.agent) {\n        this.options.features.agent.browser = false;\n      }\n      return;\n    }\n\n    if (!browserConfig.config?.provider) {\n      const warning =\n        'Agent Builder browser config is missing a `provider` field. ' +\n        'Set `editor.builder.configuration.agent.browser.config.provider` ' +\n        '(e.g. `\"stagehand\"`). The browser toggle will be hidden until a provider is configured.';\n      this.browserConfigWarnings.push(warning);\n      // eslint-disable-next-line no-console\n      console.warn(`[mastra:editor:builder] ${warning}`);\n      if (this.options.features?.agent) {\n        this.options.features.agent.browser = false;\n      }\n    }\n  }\n\n  private validateModelPolicy(): void {\n    const enabled = this.options.enabled !== false;\n    // Locked-mode is only triggered by an explicit `model: false` from the\n    // admin. With default-on semantics, an omitted `model` resolves to\n    // `true` (picker visible), which is open mode and has no\n    // locked-mode-default invariant.\n    const explicitModel = this.options.features?.agent?.model;\n    const pickerVisible = explicitModel !== false;\n    const models = this.options.configuration?.agent?.models;\n    const allowed = models?.allowed;\n    const defaultModel = models?.default;\n\n    const active = isBuilderModelPolicyActive({\n      enabled,\n      pickerVisible,\n      allowed,\n      default: defaultModel,\n    });\n\n    if (!active) return;\n\n    // Locked mode (picker hidden) requires an admin-pinned default. Phase 3's\n    // create-path decision matrix relies on this invariant: a locked policy\n    // without a default is unreachable. Only fires when the admin has\n    // explicitly opted out of the picker.\n    if (explicitModel === false && defaultModel === undefined) {\n      throw new Error(\n        'Agent Builder model policy is active in locked mode but no default was set. ' +\n          'Set `editor.builder.configuration.agent.models.default`, or remove ' +\n          '`editor.builder.features.agent.model = false` to allow end-users to pick a model.',\n      );\n    }\n\n    // When an allowlist is set, the default (if any) must satisfy it. An\n    // empty `allowed: []` means \"unrestricted\" so we skip this check.\n    if (defaultModel !== undefined && allowed !== undefined && allowed.length > 0) {\n      if (!isModelAllowed(allowed, defaultModel)) {\n        throw new Error(\n          'Agent Builder default model is not in the allowlist. ' +\n            'Either add it to `editor.builder.configuration.agent.models.allowed` ' +\n            'or change `editor.builder.configuration.agent.models.default`.',\n        );\n      }\n    }\n  }\n}\n\n// AgentFeatures imported for documentation reference in this file's jsdoc.\nexport type { AgentFeatures };\n","import { Agent } from '@mastra/core/agent';\nimport type { AgentConfig } from '@mastra/core/agent';\nimport { Memory } from '@mastra/memory';\nimport { PrefillErrorHandler, ProviderHistoryCompat, StreamErrorRetryProcessor } from '@mastra/core/processors';\nimport { Workspace, LocalFilesystem } from '@mastra/core/workspace';\n\nimport path from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = path.dirname(__filename);\n\nconst workspacePath = path.join(__dirname, 'workspace');\n\nconst workspace = new Workspace({\n  filesystem: new LocalFilesystem({\n    basePath: workspacePath,\n  }),\n  skills: ['skills'],\n});\n\n/**\n * Agent Builder Agent\n *\n * Audience: non-technical users (Product, founders, operators, business stakeholders).\n * Goal: turn a plain-language description of a desired outcome into a fully\n * configured, production-quality agent — name, description, model, capabilities,\n * and system prompt — without asking the user follow-up questions.\n *\n * Capability tools the playground UI injects as client tools:\n * - set-agent-name, set-agent-description, set-agent-instructions, set-agent-workspace-id (always on)\n * - set-agent-tools (gated by features.tools)\n * - set-agent-skills (gated by features.skills + skills available)\n * - set-agent-model (gated by features.model + models available)\n * - set-agent-browser-enabled (gated by features.browser)\n * - createSkillTool (gated by features.skills) — only when a needed capability does not exist\n */\n\n/**\n * Default error processors wired into every builder agent. These each fix a\n * class of provider-side correctness bug that builder workloads tend to hit:\n *\n * - `StreamErrorRetryProcessor` — retries OpenAI's transient stream errors\n *   (`server_error`, `rate_limit`, `internal_error`, `timeout`, `overloaded`,\n *   etc.) that surface on long, tool-heavy turns.\n * - `PrefillErrorHandler` — recovers from Anthropic's\n *   `does not support assistant message prefill` 400 by appending a\n *   `system-reminder` continue message and retrying.\n * - `ProviderHistoryCompat` — applies provider-history-shape fixes\n *   (anthropic tool-id format, cerebras reasoning-content strip, anthropic\n *   foreign-reasoning strip) so model swaps don't break history.\n *\n * Same three processors, same order, as the shared stability defaults in\n * `@mastra/core/processors`. `createBuilderAgent` passes this list explicitly\n * rather than relying on the framework defaults: the peer range allows older\n * cores that have no defaults, and bumping the range would be a breaking\n * change, so the builder brings its own stack and behaves the same on every\n * core version.\n *\n * Exported so callers can compose a custom processor list that keeps the\n * subset they want. Pass it with `errorProcessorDefaults: false`, or the\n * builder merges the omitted defaults back in:\n * `createBuilderAgent({ errorProcessors: [...DEFAULT_BUILDER_ERROR_PROCESSORS.filter(p => p.id !== 'stream-error-retry-processor'), myCustom], errorProcessorDefaults: false })`.\n */\nexport const DEFAULT_BUILDER_ERROR_PROCESSORS = [\n  new ProviderHistoryCompat(),\n  new PrefillErrorHandler(),\n  new StreamErrorRetryProcessor(),\n];\n\nexport function createBuilderAgent(args?: Partial<AgentConfig<'builder-agent'>>): Agent<'builder-agent'> {\n  const memory = new Memory();\n\n  // Merge the builder's stability processors with any caller-supplied list:\n  // the peer range allows cores that predate the framework defaults, so\n  // relying on the resolver to add them would silently drop this stack on\n  // older cores. A caller instance with a default's id replaces that default\n  // at its position, so repairs keep running ahead of retries; caller\n  // processors with other ids run after the defaults so they can observe or\n  // extend retries the defaults trigger. An empty array merges like any other,\n  // matching core; `errorProcessorDefaults: false` is the only opt-out and\n  // passes the caller's list through as given (the flag is also forwarded, so\n  // newer cores add nothing either). A function-typed override\n  // (DynamicArgument) is passed through unchanged — callers using the dynamic\n  // form manage the full list.\n  const callerErrorProcessors = args?.errorProcessors;\n  const errorProcessors =\n    args?.errorProcessorDefaults === false\n      ? callerErrorProcessors\n      : Array.isArray(callerErrorProcessors)\n        ? [\n            ...DEFAULT_BUILDER_ERROR_PROCESSORS.map(\n              processor => callerErrorProcessors.find(caller => caller.id === processor.id) ?? processor,\n            ),\n            ...callerErrorProcessors.filter(\n              caller => !DEFAULT_BUILDER_ERROR_PROCESSORS.some(processor => processor.id === caller.id),\n            ),\n          ]\n        : (callerErrorProcessors ?? DEFAULT_BUILDER_ERROR_PROCESSORS);\n\n  const config: AgentConfig<'builder-agent'> = {\n    instructions: `You are the Agent Builder.\n\nYour job: turn a non-technical user's plain-language request into a fully configured, production-quality agent in a single turn.\n\n# Non-negotiables\n\n- Never ask the user follow-up questions. Make the most reasonable assumption and move forward.\n- Never expose internal names, tool ids, file paths, schemas, code, or jargon to the user.\n- Speak only in user-facing capability terms.\n- Always finish the build in the same turn as the request — configure the agent end-to-end and deliver a short summary.\n- Always define the new agent's name, description, model, and system prompt yourself. Do not ask the user for any of these.\n\nExamples of communication style:\n- Bad: \"Added weatherTool to agent-yzx capabilities.\"\n- Good: \"Your new agent can now check the weather for you.\"\n- Bad: \"Calling set-agent-tools with [weatherTool].\"\n- Good: \"Checking what capabilities to bring to your agent…\"\n- Bad: \"Agent created with weatherTool and recipeWorkflow attached.\"\n- Good: \"Your agent can check the weather and suggest recipes that match the day's conditions.\"\n\n# Form snapshot\n\nA \"Current agent configuration (authoritative)\" block is injected into your context every turn. It lists every form field with its current value AND a directive telling you exactly which setter to call (or skip) for that field. Treat the snapshot as the single source of truth for what is and isn't already set — do not try to infer state from anywhere else, and do not re-call setters for fields whose directive says \"already set\".\n\n# Authoring loop\n\nFollow these five steps in order, every time:\n\n## Step A — Understand the real outcome\n\nAnalyze what the user actually wants to achieve. Focus on the final result, not just the literal wording of the request.\n\nAsk yourself:\n- What should the agent help the user accomplish?\n- Who will use this agent?\n- What decisions should the agent make on its own?\n- What kind of output should the agent produce?\n- What recurring tasks, reasoning, or actions does the agent need to perform?\n\n## Step B — Define the agent's identity\n\nDecide on:\n- Agent name: short, memorable, anchored to the outcome. Never \"Agent X\" or generic labels.\n- Description: exactly one sentence in plain user-facing language explaining what the agent helps with.\n\nThe snapshot will tell you whether to call \\`set-agent-name\\` and \\`set-agent-description\\` or skip them.\n\n## Step C — Decide capabilities\n\nThe form snapshot lists what's currently attached. Use it together with the available tools, agents, workflows, stored skills, and models listed in the corresponding tool descriptions to decide:\n\n- Pick the *minimum* set of existing tools/agents/workflows/stored skills that satisfies the outcome. Adding irrelevant capabilities makes the agent worse, not better.\n- Prefer existing tools, workflows, agents, and stored skills before creating anything new.\n- \\`set-agent-skills\\` attaches user-available stored skills.\n- Only call \\`createSkillTool\\` when (a) no existing stored skill matches reusable operating instructions the produced agent needs, AND (b) that operating instruction is genuinely needed for the outcome. Do not use stored skills as a substitute for missing integrations or tools.\n- If a specific external connection is required (e.g. a sheet tool for a spreadsheet-driven outcome) and none is available, the new agent's system prompt must instruct it to refuse cleanly and explain what the user needs to connect.\n\n## Step D — Synthesize concise operating instructions\n\nBefore calling \\`set-agent-instructions\\`, privately write a concrete run contract for the produced agent. The system prompt must instantiate each item, but keep each item brief:\n\n1. **Trigger / input** — what user request, schedule, event, file, row, ticket, or message starts a run.\n2. **Owned outcome** — the exact result the produced agent is responsible for finishing.\n3. **Available capabilities** — only capabilities actually attached or already available from the form snapshot, described in user-facing outcome terms.\n4. **Missing-capability fallback** — what the produced agent does when a required integration, workspace, credential, or source is absent.\n5. **Done criteria** — verifiable conditions that prove the job is finished, including tool confirmation or an explicit \"not run\" reason when verification is impossible.\n6. **Final response format** — the receipt, summary, draft, diff summary, report, or confirmation the user receives.\n\nWrite the final system prompt as 2–4 short paragraphs or compact bullet groups. Target 1,200–2,000 characters and stay under 2,500 characters. Do not include worked examples, FAQs, long edge-case lists, or exhaustive policies unless the user's request explicitly requires them. Prefer one clear default over several branches.\n\n## Step E — Write the agent\n\nRead the per-field directives in the form snapshot. Call only the setters the snapshot tells you to call, each at most once, with the final value. Skip every field marked \"already set\" or \"no setter\". Skip any field that isn't listed at all (its feature is disabled).\n\nBefore calling \\`set-agent-instructions\\`, self-audit the draft. It must pass every check:\n- No placeholders remain (no \\`<...>\\`, \"TBD\", \"TODO\", \"your tool\", or generic policy gaps).\n- No internal tool ids, file paths, schemas, or builder-only terms appear.\n- No generic \"helpful assistant\" identity remains.\n- No unsupported capabilities are promised.\n- Completion criteria are concrete.\n- Missing-access fallback is included when relevant.\n- Final response expectations are clear.\n- The prompt is specific to the agent's outcome and under 2,500 characters.\n\n## Step F — Confirm the agent configuration to the user\n\nEnd your turn with one short, friendly paragraph confirming that the agent has been configured and is ready to use.\n\nUse this shape:\n\n\"Your agent, [Agent Name], has been configured with its initial parameters. It can now [plain-language outcome]. You can adjust its instructions, inputs, or connected capabilities whenever your needs change.\"\n\nDo not mention internal capability names, tools, workflows, skills, or configuration steps.\n\nGood:\n\"Your agent, Sales Drop Watcher, has been configured with its initial parameters. It can now review your weekly sales sheet, flag accounts that dropped more than 10%, and prepare follow-up drafts for each one. You can adjust its instructions, thresholds, or connected data sources whenever your needs change.\"\n\nBad:\n\"Agent created with sheetsTool, scoringWorkflow, and emailSkill attached.\"\n\nBad:\n\"I configured the sheets integration and called set-agent-instructions.\"\n\n# Quality bar for the produced agent's system prompt\n\nThe system prompt written into \\`set-agent-instructions\\` MUST be short, concrete, and useful. It should cover all of the following, but each item should usually be one sentence or a compact bullet:\n\n1. **Role and outcome.** Define what the agent is and the concrete result it owns.\n2. **Trigger and input.** Define what starts a run and what input the agent expects.\n3. **Decision rules.** Explain how the agent resolves ambiguity, what defaults it should apply, and what it should skip without asking the user.\n4. **Capability awareness.** Describe only the tools, integrations, workspaces, or data sources the agent actually has, phrased in terms of what they let the agent accomplish.\n5. **Missing-capability fallback.** Explain what the agent should do when a required integration, credential, permission, workspace, or source is unavailable.\n6. **Completion criteria.** Define exactly when the task is done in observable, verifiable terms.\n7. **Final response format.** Specify the shape of the agent's final answer, report, draft, receipt, or confirmation.\n8. **Communication style.** Require plain language, short answers, no jargon, and structure only when useful.\n9. **Refusal rules.** State what the agent must refuse and how it should explain the refusal clearly.\n\nKeep this to 2–4 focused paragraphs or compact bullet groups. Do not include worked examples, FAQs, or exhaustive edge-case lists by default.\n\n# Hard rules\n\n- If the user's request requires CLI or local-machine actions and no workspace is connected, refuse in plain language and tell the user they need to connect a workspace first.\n- Never reveal that you are calling configuration tools. Describe progress only in terms of the user's intended outcome.\n- Never produce a system prompt without explicit completion criteria.\n- Never attach a capability \"just in case.\" Every tool, agent, workflow, or skill must directly support the requested outcome.\n- The final message to the user must be concise, friendly, and focused on what the configured agent can now do.\n- The final message should make clear that the agent starts with initial parameters and can be adjusted later.`,\n    model: 'openai/gpt-5.5',\n    memory,\n    workspace,\n    // Newer cores warn once per agent because this list has no explicit\n    // retry budget; that warning is accurate, and setting\n    // `maxProcessorRetries` just to silence it would also convert\n    // input/output processor `abort({ retry: true })` from abort into retry,\n    // so the warning stays.\n    ...(args || {}),\n    errorProcessors,\n    id: 'builder-agent',\n    name: 'Agent Builder Agent',\n    description: 'An agent that can build agents',\n  };\n\n  return new Agent<'builder-agent'>(config);\n}\n","import type { Mastra } from '@mastra/core';\nimport type { Agent } from '@mastra/core/agent';\nimport type { IWorkflowBuilder, WorkflowBuilderOptions } from '@mastra/core/editor';\nimport type { MastraModelConfig } from '@mastra/core/llm';\nimport { createWorkflowBuilderAgent as createSharedWorkflowBuilderAgent } from '@mastra/core/workflows/builder';\nimport { Memory } from '@mastra/memory';\n\nexport const DEFAULT_WORKFLOW_BUILDER_MODEL = 'openai/gpt-5.5';\n\n/**\n * Authoring turns are tool-heavy: a single request can persist dozens of\n * inspection and submission records. The memory default of 10 evicts the user's\n * original request long before the workflow is finished, which reads as the\n * agent forgetting what it was asked to build.\n */\nexport const DEFAULT_WORKFLOW_BUILDER_LAST_MESSAGES = 100;\n\nexport function createWorkflowBuilderAgent(\n  model?: MastraModelConfig,\n  lastMessages: number = DEFAULT_WORKFLOW_BUILDER_LAST_MESSAGES,\n): Agent<'workflow-builder-agent'> {\n  return createSharedWorkflowBuilderAgent({\n    id: 'workflow-builder-agent',\n    name: 'Workflow Builder',\n    description: 'Builds persisted workflow definitions through constrained client tools',\n    model: model ?? DEFAULT_WORKFLOW_BUILDER_MODEL,\n    memory: new Memory({ options: { lastMessages } }),\n    surfaceInstructions: `# Studio authoring policy\n\nTurn the user's request into a complete canonical workflow definition using the registered agent, tool, and workflow catalogs. Treat the current unsaved authoring state, accepted definition, candidate definition, and validation issues injected in each turn as authoritative. Never describe schemas, mapping form, graph shape, lifecycle, or persistence state from memory—read the authoritative Studio state and catalogs first.\n\nThe three shared listing tools behave here as the shared playbook describes, with one Studio specific: \\`list-available-workflows\\` reports \\`catalog-unavailable\\` when this user lacks workflow read permission. Agents and tools stay listable in that case, so compose without nested workflow references rather than treating discovery as blocked.\n\n# Studio execution and response protocol\n\n1. Complete discovery, composition, and the shared pre-action check before calling \\`submit-workflow-draft\\`.\n2. Call \\`submit-workflow-draft\\` with one complete canonical definition. Do not submit incremental fragments, speculative alternatives, or parallel attempts.\n   When the definition nests helper workflows that the catalog does not have yet, put those complete helper definitions in the same submission's \\`dependencies\\` array. Never submit a helper on its own turn or in a separate call — the whole set travels as one submission, goes Ready as one unit, and the user's Save persists it as one unit. Only add a helper the composition genuinely requires, give it a real id and description because the user will see it as its own workflow, and tell the user in your summary which helpers Save will create.\n3. Wait for the submission result before deciding what to do next. A successful submission makes the returned accepted definition the authoritative Ready draft. Stop calling tools after success and never resubmit that Ready definition in the same turn.\n4. If the submission is rejected with validation diagnostics, do not claim success. Correct every returned issue against authoritative inspection, rerun the shared pre-action check, and make one sequential corrected complete submission.\n5. If the result is \\`already-ready\\`, the returned accepted definition is authoritative. Do not retry or replace it in the same turn; summarize it and wait for a new user turn.\n6. If the result is \\`superseded\\`, an earlier submission in the turn won. Do not apologize, retry, or claim the workflow is broken. Inspect the authoritative state before making any claim.\n7. Ready is not persisted. Never persist directly, never call a server-side \\`save-workflow\\` tool, and never claim persistence. Only the user's explicit Studio Save action may persist the finalized draft.\n8. After Ready success, follow the shared summary rules and end by telling the user to review the authoritative draft and use the explicit Studio Save action.`,\n  });\n}\n\nexport class EditorWorkflowBuilder implements IWorkflowBuilder {\n  readonly enabled: boolean;\n  private readonly agent;\n  private readonly modelPolicy: WorkflowBuilderOptions['modelPolicy'];\n\n  constructor(options: WorkflowBuilderOptions = {}, mastra?: Mastra) {\n    this.enabled = options.enabled !== false;\n    this.modelPolicy = options.modelPolicy;\n    this.agent = createWorkflowBuilderAgent(options.model, options.lastMessages);\n    if (mastra) {\n      this.agent.__registerMastra(mastra);\n      this.agent.__registerPrimitives({ logger: mastra.getLogger(), storage: mastra.getStorage() });\n    }\n  }\n\n  getAgent() {\n    return this.agent;\n  }\n\n  getModelPolicy() {\n    return this.modelPolicy;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAgBA,IAAa,qBAAb,MAAyD;CAoBvD,YAAY,SAA+B;EAlBM,KAAA,sBAAA,CAAC;EAGC,KAAA,wBAAA,CAAC;EAoBlD,MAAM,SAAS,WAAW,CAAC;EAC3B,KAAK,UAAU;GACb,GAAG;GACH,UAAU,OAAO,WACb;IACE,GAAG,OAAO;IACV,OAAO,OAAO,SAAS,QAAQ,EAAE,GAAG,OAAO,SAAS,MAAM,IAAI,KAAA;GAChE,IACA,KAAA;EACN;EACA,KAAK,oBAAoB;EACzB,KAAK,sBAAsB;EAK3B,KAAK,mBAAmB,EACtB,OAAO,qBAAqB,KAAK,QAAQ,UAAU,OAAO,EACxD,kBAAkB,KAAK,sBAAsB,EAC/C,CAAC,EACH;CACF;CAEA,IAAI,UAAmB;EACrB,OAAO,KAAK,QAAQ,YAAY;CAClC;CAEA,cAA+C;EAC7C,OAAO,KAAK;CACd;CAEA,mBAAyD;EACvD,OAAO,KAAK,QAAQ;CACtB;CAEA,gBAAmD;EACjD,OAAO,KAAK,QAAQ;CACtB;CAEA,yBAAmC;EACjC,OAAO,CAAC,GAAG,KAAK,qBAAqB,GAAG,KAAK,qBAAqB;CACpE;;;;;;;CAQA,wBAAyC;EACvC,MAAM,gBAAgB,KAAK,QAAQ,eAAe,OAAO;EACzD,OAAO,QAAQ,eAAe,QAAQ,QAAQ;CAChD;;;;;;;;;CAUA,wBAAsC;EAEpC,IADwB,KAAK,QAAQ,UAAU,OAAO,YAC9B,MAAM;EAE9B,MAAM,gBAAgB,KAAK,QAAQ,eAAe,OAAO;EACzD,IAAI,CAAC,eAAe;GAClB,MAAM,UACJ;GAIF,KAAK,sBAAsB,KAAK,OAAO;GAEvC,QAAQ,KAAK,2BAA2B,SAAS;GAEjD,IAAI,KAAK,QAAQ,UAAU,OACzB,KAAK,QAAQ,SAAS,MAAM,UAAU;GAExC;EACF;EAEA,IAAI,CAAC,cAAc,QAAQ,UAAU;GACnC,MAAM,UACJ;GAGF,KAAK,sBAAsB,KAAK,OAAO;GAEvC,QAAQ,KAAK,2BAA2B,SAAS;GACjD,IAAI,KAAK,QAAQ,UAAU,OACzB,KAAK,QAAQ,SAAS,MAAM,UAAU;EAE1C;CACF;CAEA,sBAAoC;EAClC,MAAM,UAAU,KAAK,QAAQ,YAAY;EAKzC,MAAM,gBAAgB,KAAK,QAAQ,UAAU,OAAO;EACpD,MAAM,gBAAgB,kBAAkB;EACxC,MAAM,SAAS,KAAK,QAAQ,eAAe,OAAO;EAClD,MAAM,UAAU,QAAQ;EACxB,MAAM,eAAe,QAAQ;EAS7B,IAAI,CAPW,2BAA2B;GACxC;GACA;GACA;GACA,SAAS;EACX,CAEU,GAAG;EAMb,IAAI,kBAAkB,SAAS,iBAAiB,KAAA,GAC9C,MAAM,IAAI,MACR,kOAGF;EAKF,IAAI,iBAAiB,KAAA,KAAa,YAAY,KAAA,KAAa,QAAQ,SAAS,GACtE;OAAA,CAAC,eAAe,SAAS,YAAY,GACvC,MAAM,IAAI,MACR,0LAGF;EAAA;CAGN;AACF;;;AC9KA,MAAM,aAAa,cAAc,OAAO,KAAK,GAAG;AAChD,MAAM,YAAY,KAAK,QAAQ,UAAU;AAIzC,MAAM,YAAY,IAAI,UAAU;CAC9B,YAAY,IAAI,gBAAgB,EAC9B,UAJkB,KAAK,KAAK,WAAW,WAIjB,EACxB,CAAC;CACD,QAAQ,CAAC,QAAQ;AACnB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6CD,MAAa,mCAAmC;CAC9C,IAAI,sBAAsB;CAC1B,IAAI,oBAAoB;CACxB,IAAI,0BAA0B;AAChC;AAEA,SAAgB,mBAAmB,MAAsE;CACvG,MAAM,SAAS,IAAI,OAAO;CAc1B,MAAM,wBAAwB,MAAM;CACpC,MAAM,kBACJ,MAAM,2BAA2B,QAC7B,wBACA,MAAM,QAAQ,qBAAqB,IACjC,CACE,GAAG,iCAAiC,KAClC,cAAa,sBAAsB,MAAK,WAAU,OAAO,OAAO,UAAU,EAAE,KAAK,SACnF,GACA,GAAG,sBAAsB,QACvB,WAAU,CAAC,iCAAiC,MAAK,cAAa,UAAU,OAAO,OAAO,EAAE,CAC1F,CACF,IACC,yBAAyB;CAiJlC,OAAO,IAAI,MAAuB;EA9IhC,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+Hd,OAAO;EACP;EACA;EAMA,GAAI,QAAQ,CAAC;EACb;EACA,IAAI;EACJ,MAAM;EACN,aAAa;CAGwB,CAAC;AAC1C;ACnOA,SAAgB,2BACd,OACA,eAAA,KACiC;CACjC,OAAOA,6BAAiC;EACtC,IAAI;EACJ,MAAM;EACN,aAAa;EACb,OAAO,SAAA;EACP,QAAQ,IAAI,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;EAChD,qBAAqB;;;;;;;;;;;;;;;;;CAiBvB,CAAC;AACH;AAEA,IAAa,wBAAb,MAA+D;CAK7D,YAAY,UAAkC,CAAC,GAAG,QAAiB;EACjE,KAAK,UAAU,QAAQ,YAAY;EACnC,KAAK,cAAc,QAAQ;EAC3B,KAAK,QAAQ,2BAA2B,QAAQ,OAAO,QAAQ,YAAY;EAC3E,IAAI,QAAQ;GACV,KAAK,MAAM,iBAAiB,MAAM;GAClC,KAAK,MAAM,qBAAqB;IAAE,QAAQ,OAAO,UAAU;IAAG,SAAS,OAAO,WAAW;GAAE,CAAC;EAC9F;CACF;CAEA,WAAW;EACT,OAAO,KAAK;CACd;CAEA,iBAAiB;EACf,OAAO,KAAK;CACd;AACF"}

package/dist/index.cjs

@@ -2013,9 +2013,19 @@ var EditorPromptNamespace = class extends CrudEditorNamespace {
 //#endregion
 //#region src/namespaces/scorer.ts
 var EditorScorerNamespace = class extends CrudEditorNamespace {
+	constructor(..._args) {
+		super(..._args);
+		this._registeredStoredScorerIds = /* @__PURE__ */ new Set();
+	}
 	onCacheEvict(id) {
+		this._registeredStoredScorerIds.delete(id);
 		if (this.mastra?.listScorers()?.[id]?.source === "stored") this.mastra.removeScorer(id);
 	}
+	clearCache(id) {
+		super.clearCache(id);
+		if (id) return;
+		for (const registeredId of Array.from(this._registeredStoredScorerIds)) this.onCacheEvict(registeredId);
+	}
 	/**
 	* Hydrate a stored scorer definition into a runtime MastraScorer instance
 	* and register it on the Mastra instance so it can be discovered via
@@ -2023,7 +2033,10 @@ var EditorScorerNamespace = class extends CrudEditorNamespace {
 	*/
 	async hydrate(storedScorer) {
 		const scorer = this.resolve(storedScorer);
-		if (scorer && this.mastra) this.mastra.addScorer(scorer, storedScorer.id, { source: "stored" });
+		if (scorer && this.mastra) {
+			this.mastra.addScorer(scorer, storedScorer.id, { source: "stored" });
+			this._registeredStoredScorerIds.add(storedScorer.id);
+		}
 		return storedScorer;
 	}
 	async getStorageAdapter() {