@mastra/factory 0.11.1 → 0.12.0-alpha.1

package/CHANGELOG.md

@@ -1,5 +1,64 @@
 # @mastra/factory
 
+## 0.12.0-alpha.1
+
+### Minor Changes
+
+- Attention now rides the project feed stream: an automation failure, a proposal parked for approval, an approval, a dismissal, a retry, a supersede or a work-item deletion reaches every open page as it happens, and the attention list falls back to polling only while its stream is down. ([#22604](https://github.com/mastra-ai/mastra/pull/22604))
+
+  Marking your own list read stays local — a read receipt changes nobody else's view, so it is not broadcast.
+
+- Commenting on a work item now notifies everyone already in that discussion, not just the people it names. Participants land in a separate `activity` tier of `GET /web/factory/projects/:id/attention`, counted apart under `activityUnreadCount` so the notification badge and sound stay reserved for mentions and failures. The attention inbox also refreshes while open now: comment-driven entries arrive over the feed stream, and the list polls every 5s for the rest. The sidebar popover asks the server for the badge tier (`?tier=badge`), so busy discussions can no longer crowd mentions and failures out of its five slots. ([#22571](https://github.com/mastra-ai/mastra/pull/22571))
+
+- Work item comment feeds now update live instead of on a five-second poll: while a browser holds its feed stream, a new comment shows up the moment it lands, and a browser whose stream dropped falls back to the old poll until it reconnects. ([#22570](https://github.com/mastra-ai/mastra/pull/22570))
+
+  Delivery rides the factory's `pubsub`, so reaching browsers across replicas takes a shared broker — the in-process default only serves readers held by the replica that took the write:
+
+  ```ts
+  import { MastraFactory } from '@mastra/factory';
+  import { RedisStreamsPubSub } from '@mastra/redis-streams';
+
+  export const factory = new MastraFactory({
+    pubsub: new RedisStreamsPubSub({ url: process.env.REDIS_URL }),
+  });
+  ```
+
+### Patch Changes
+
+- The completion chime is lower and longer. It swells into a soft tail that rings out over about two and a half seconds, instead of the short ding that stopped dead almost as soon as it started. ([#22566](https://github.com/mastra-ai/mastra/pull/22566))
+
+  It is also much louder than the chime it replaces. If you leave the completion sound on, check your volume after this release.
+
+## 0.12.0-alpha.0
+
+### Minor Changes
+
+- **BREAKING: `sandbox` is now a callback that constructs the session's sandbox** ([#22065](https://github.com/mastra-ai/mastra/pull/22065))
+
+  ```ts
+  // Before — no longer accepted
+  sandbox: { machine: new RailwaySandbox({ apiToken }), workdir: '/workspace', maxSandboxes: 4 }
+
+  // After
+  sandbox: ctx => new E2BSandbox({ id: ctx.sessionId })
+  ```
+
+  A factory still configured with the old options object fails at `prepare()` with a message showing the replacement: `machine` becomes the provider instance you construct inside the callback, `workdir` is gone (remote providers clone into the VM's home directory, local providers use their own `workingDirectory`), and `maxSandboxes` is gone with the fleet. Omit `sandbox` entirely to run without sandboxes. `ctx.getRepositoryAccess` resolves the session repository's clone URL plus a fresh short-lived credential (`undefined` when the session has no repository), so providers can authenticate work such as private-repo template builds.
+
+  Session sandboxes now boot lazily at the first real command instead of being provisioned up front. The sandbox fleet (pooling, budgets, reattach/revival, base checkpoints) is deleted, and the `/ensure` endpoint and the session UI's "preparing sandbox" step go with it — opening a thread provisions nothing. To check whether a sandbox is configured, read `sandboxEnabled` from `GET /web/github/status`.
+
+  A failing setup command no longer wedges the session. The first failure surfaces loudly in the tool result that triggered it, then later starts skip the known-bad command — the clone and branch checkout still run, so the agent can repair or rerun setup itself. Infrastructure failures (clone, checkout, transport) keep failing hard and retry in full.
+
+  Existing databases keep the fleet-era tables and columns as untouched orphans; dropping them is a manual operation.
+
+### Patch Changes
+
+- Hosted sessions no longer leak the host process's environment into the system prompt. The dynamic instructions builder drops its `process.cwd()` fallback: a session without a `projectPath` gets no working directory, no host git-branch probe, and loads no instruction files at all (project locations would resolve against the server's cwd and global locations against the server's homedir). Factory additionally blanks the SDK's default project identity seed (`projectPath`/`projectName`/`gitBranch` from the host's own checkout) so chat-only sessions show "(no workspace attached)" instead of the server's repo and branch; repo-backed sessions keep getting their real session workdir pinned by workspace resolution. ([#22065](https://github.com/mastra-ai/mastra/pull/22065))
+
+- Updated dependencies [[`3910c77`](https://github.com/mastra-ai/mastra/commit/3910c77413a3058ab270c6dbc74a59bc3cdf67ea), [`c80547a`](https://github.com/mastra-ai/mastra/commit/c80547aa7ef33adbb08435ff847e77fa404bafbf), [`c80547a`](https://github.com/mastra-ai/mastra/commit/c80547aa7ef33adbb08435ff847e77fa404bafbf), [`c80547a`](https://github.com/mastra-ai/mastra/commit/c80547aa7ef33adbb08435ff847e77fa404bafbf)]:
+  - @mastra/core@1.63.3-alpha.0
+  - @mastra/code-sdk@1.6.0-alpha.0
+
 ## 0.11.1
 
 ### Patch Changes

package/dist/factory.d.ts

@@ -22,9 +22,9 @@ import type { Mastra } from '@mastra/core/mastra';
 import type { IMastraAuthProvider } from '@mastra/core/server';
 import type { FactoryStorage } from '@mastra/core/storage';
 import type { MastraVector } from '@mastra/core/vector';
-import type { WorkspaceSandbox } from '@mastra/core/workspace';
 import type { FactoryIntegration } from './integrations/base.js';
 import type { FactoryRules } from './rules/types.js';
+import type { MastraFactorySandboxConfig } from './sandbox/session-sandbox.js';
 import type { FactorySecretEncryption } from './secret-encryption.js';
 /** Constructor args for the `new Mastra(...)` literal in the deploy entry. */
 export type MastraArgs = NonNullable<ConstructorParameters<typeof Mastra>[0]>;
@@ -121,27 +121,7 @@ export interface MastraFactoryConfig {
         githubAppSlug?: string;
     };
 }
-export interface MastraFactorySandboxConfig {
-    /**
-     * Template machine — `RailwaySandbox` (`@mastra/railway`), core
-     * `LocalSandbox` (`@mastra/core/workspace`), or any `WorkspaceSandbox` that
-     * implements `clone()`. Each project-repository execution environment gets
-     * its own sandbox cloned from this machine; the machine itself is never
-     * started. `prepare()` fails fast when the instance lacks `clone()`.
-     */
-    machine: WorkspaceSandbox;
-    /**
-     * In-sandbox base directory repos check out under (nested `owner/name` per
-     * repo). Default: the machine's own `workingDirectory` when it exposes one
-     * (core `LocalSandbox` does), else `/workspace`.
-     */
-    workdir?: string;
-    /**
-     * Per-replica cap on concurrently provisioned sandboxes. `0`/omitted means
-     * unlimited. A lightweight per-process budget, not a cross-replica scheduler.
-     */
-    maxSandboxes?: number;
-}
+export type { MastraFactorySandboxConfig } from './sandbox/session-sandbox.js';
 /**
  * Per-process cap on concurrent background Factory dispatches. Omitted means
  * the dispatcher default; this is a local replica budget, not a global queue

package/dist/factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../src/factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAGlD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAS/D,OAAO,KAAK,EAAE,kBAAkB,EAAgD,MAAM,wBAAwB,CAAC;AAwB/G,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AASrD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAkCtE,8EAA8E;AAC9E,MAAM,MAAM,UAAU,GAAG,WAAW,CAAC,qBAAqB,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE9E,MAAM,WAAW,mBAAmB;IAClC;;;;;;;;;;;;;;OAcG;IACH,IAAI,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAClC;;;;;;;OAOG;IACH,OAAO,EAAE,cAAc,CAAC;IACxB;;;;OAIG;IACH,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,0EAA0E;IAC1E,OAAO,CAAC,EAAE,0BAA0B,CAAC;IACrC,mDAAmD;IACnD,UAAU,CAAC,EAAE,6BAA6B,CAAC;IAC3C;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAC3C;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACpC;;;;;OAKG;IACH,KAAK,CAAC,EAAE,YAAY,CAAC;IAErB;;;OAGG;IACH,QAAQ,CAAC,EAAE;QACT,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;AAED,MAAM,WAAW,0BAA0B;IACzC;;;;;;OAMG;IACH,OAAO,EAAE,gBAAgB,CAAC;IAC1B;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,MAAM,WAAW,6BAA6B;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AA2FD,qBAAa,aAAa;;gBAOZ,MAAM,EAAE,mBAAmB;IAWvC;;;;OAIG;IACG,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC;IAqsBpC;;;;OAIG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAY/B,iFAAiF;IAC3E,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAGhC"}
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../src/factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAMH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAGlD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAWxD,OAAO,KAAK,EAAE,kBAAkB,EAAgD,MAAM,wBAAwB,CAAC;AAwB/G,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAGrD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAkCtE,8EAA8E;AAC9E,MAAM,MAAM,UAAU,GAAG,WAAW,CAAC,qBAAqB,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE9E,MAAM,WAAW,mBAAmB;IAClC;;;;;;;;;;;;;;OAcG;IACH,IAAI,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAClC;;;;;;;OAOG;IACH,OAAO,EAAE,cAAc,CAAC;IACxB;;;;OAIG;IACH,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,0EAA0E;IAC1E,OAAO,CAAC,EAAE,0BAA0B,CAAC;IACrC,mDAAmD;IACnD,UAAU,CAAC,EAAE,6BAA6B,CAAC;IAC3C;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAC3C;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACpC;;;;;OAKG;IACH,KAAK,CAAC,EAAE,YAAY,CAAC;IAErB;;;OAGG;IACH,QAAQ,CAAC,EAAE;QACT,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;AAED,YAAY,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAE/E;;;;GAIG;AACH,MAAM,WAAW,6BAA6B;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAyED,qBAAa,aAAa;;gBAOZ,MAAM,EAAE,mBAAmB;IAWvC;;;;OAIG;IACG,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC;IAmrBpC;;;;OAIG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAY/B,iFAAiF;IAC3E,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAGhC"}

package/dist/factory.js

@@ -1,9 +1,7 @@
 import { timedPhase } from "./timing.js";
 import { buildAuthRoutes, createFactoryAuthGate, createFactoryRouteAuth, getFactoryAuthOrgId, getFactoryAuthUserFromContext, getFactoryAuthUserId } from "./auth.js";
+import { touchFeed } from "./feed-events.js";
 import { recordFactoryPullRequestProvenance, resolveFactoryPullRequestParentWorkItemId } from "./integrations/github/provenance.js";
-import { SandboxFleet } from "./sandbox/fleet.js";
-import { BaseCheckpointBuilder } from "./sandbox/base-checkpoint.js";
-import { createBaseCheckpointTriggers } from "./sandbox/base-checkpoint-triggers.js";
 import { assertFactoryRules } from "./rules/validation.js";
 import { WorkItemsStorage } from "./storage/domains/work-items/base.js";
 import { PlatformGithubIntegration } from "./integrations/platform/github/integration.js";
@@ -16,6 +14,7 @@ import { FactoryFeedReader } from "./storage/domains/comments/feed-context.js";
 import { FactoryTransitionService } from "./rules/transition-service.js";
 import { SourceControlStorage } from "./storage/domains/source-control/base.js";
 import { hydrateSessionModelPack } from "./session/model-pack-hydration.js";
+import { observeSessionFirstExec } from "./session/first-exec-capture.js";
 import { observeSessionFilesystem } from "./session/filesystem-capture.js";
 import { createPlaintextFactorySecretEncryption } from "./secret-encryption.js";
 import { ModelCredentialsStorage } from "./storage/domains/credentials/base.js";
@@ -28,11 +27,9 @@ import { FactoryDecisionDispatcher } from "./rules/dispatcher.js";
 import { FactoryPhaseStateProcessor } from "./rules/processor.js";
 import { createTerminalStageCleanup } from "./rules/terminal-cleanup.js";
 import { createFactoryTransitionTools } from "./rules/tools.js";
-import { registerSandboxReattach } from "./sandbox/reattach.js";
 import { SessionRetirementCoordinator } from "./sandbox/session-retirement.js";
 import { handleServerError } from "./server-error.js";
 import { observeSessionCheckpoint } from "./session/checkpoint-capture.js";
-import { observeSessionFirstExec } from "./session/first-exec-capture.js";
 import { observeSessionFirstMessage } from "./session/first-message-capture.js";
 import { observeSessionThreadTitle } from "./session/thread-title-mirror.js";
 import { createSpaStaticMiddleware, resolveUiDistDir } from "./spa-static.js";
@@ -53,6 +50,7 @@ import { hasAuthInit, isUserProvider } from "@mastra/core/server";
 import { MastraAuthStudio } from "@mastra/auth-studio";
 import { prepareAgentControllerMount } from "@mastra/code-sdk";
 import { AgentControllerChannels } from "@mastra/core/channels";
+import { EventEmitterPubSub } from "@mastra/core/events";
 //#region src/factory.ts
 /**
 * `MastraFactory` — the single entry point to the whole Mastra Software Factory.
@@ -78,20 +76,6 @@ function hasPlatformCredentials() {
 	return Boolean(process.env.MASTRA_PLATFORM_ACCESS_TOKEN?.trim() || process.env.MASTRA_PLATFORM_SECRET_KEY?.trim());
 }
 /**
-* The template sandbox's own working directory, when it exposes one as a
-* string (core `LocalSandbox` does; remote providers generally don't).
-* Used as the default checkout base so a local template rooted at a host
-* directory checks repos out under that same root.
-*/
-function templateWorkingDirectory(sandbox) {
-	const wd = sandbox.workingDirectory;
-	return typeof wd === "string" && wd.length > 0 ? wd : void 0;
-}
-function resolveSandboxWorkdirBase(machine, configuredWorkdir) {
-	const machineWorkdir = templateWorkingDirectory(machine);
-	return ((configuredWorkdir === "/workspace" && machineWorkdir ? machineWorkdir : configuredWorkdir ?? machineWorkdir) ?? "/workspace").replace(/\/+$/, "");
-}
-/**
 * Default auth provider — `MastraAuthStudio`, which proxies identity to the
 * shared Mastra platform API. `MastraAuthStudio` resolves `MASTRA_SHARED_API_URL`,
 * `MASTRA_ORGANIZATION_ID`, and `MASTRA_COOKIE_DOMAIN` from env on its own —
@@ -164,6 +148,7 @@ var MastraFactory = class {
 		const storage = this.#config.storage;
 		const vector = this.#config.vector;
 		const pubsub = this.#config.pubsub;
+		const eventBus = pubsub ?? new EventEmitterPubSub();
 		const configuredAuth = this.#config.auth;
 		const auth = configuredAuth === null ? void 0 : configuredAuth ?? buildDefaultStudioAuth(publicOrigin);
 		if (auth && !this.#config.secretEncryption) console.warn("[factory] auth is enabled but 'secretEncryption' is not configured. Persisted model credentials, custom-provider API keys, and integration secrets will be stored as plaintext. Provide 'secretEncryption' (e.g. via FACTORY_CREDENTIAL_ENCRYPTION_KEY) to encrypt them at rest.");
@@ -184,6 +169,7 @@ var MastraFactory = class {
 		const intakeStorage = storage.registerDomain(new IntakeStorage());
 		const auditStorage = storage.registerDomain(new AuditStorage());
 		const workItemsStorage = storage.registerDomain(new WorkItemsStorage());
+		workItemsStorage.onAttentionChanged((scope) => touchFeed(eventBus, scope));
 		const modelCredentialsStorage = storage.registerDomain(new ModelCredentialsStorage(secretEncryption));
 		const modelPacksStorage = storage.registerDomain(new ModelPacksStorage());
 		const memorySettingsStorage = storage.registerDomain(new MemorySettingsStorage());
@@ -208,7 +194,6 @@ var MastraFactory = class {
 			channelIdentity: channelIdentityStorage,
 			comments: workItemCommentsStorage
 		};
-		let baseCheckpoints;
 		const auditDomain = new AuditDomain({
 			auth: routeAuth,
 			audit: auditStorage,
@@ -229,17 +214,14 @@ var MastraFactory = class {
 			workItems: workItemsStorage,
 			projects: factoryProjectsStorage,
 			channelIdentity: channelIdentityStorage,
-			audit: auditDomain
+			audit: auditDomain,
+			pubsub: eventBus
 		});
 		const sandboxConfig = this.#config.sandbox;
-		const machine = sandboxConfig?.machine;
-		if (machine && typeof machine.clone !== "function") throw new Error(`MastraFactory: the configured sandbox machine (provider '${machine.provider}') does not implement clone(). Project repositories each get their own sandbox cloned from the configured machine. Pass a machine that implements clone() — e.g. RailwaySandbox (@mastra/railway) or LocalSandbox (@mastra/core/workspace) — or omit 'sandbox' to disable sandboxes.`);
-		const fleet = new SandboxFleet(machine ? {
-			machine,
-			workdirBase: resolveSandboxWorkdirBase(machine, sandboxConfig?.workdir),
-			maxSandboxes: sandboxConfig?.maxSandboxes
-		} : void 0);
-		registerSandboxReattach(fleet);
+		if (sandboxConfig !== void 0 && typeof sandboxConfig !== "function") {
+			if (typeof sandboxConfig === "object" && sandboxConfig !== null) throw new Error("MastraFactory: 'sandbox' is now a callback, not an options object. It receives a FactorySandboxContext and returns a MastraSandbox, so the host chooses the provider per session:\n  sandbox: ctx => new E2BSandbox({ id: ctx.sessionId })\nThe old options map three ways: 'machine' becomes the provider instance you construct inside the callback (one per session instead of one cloned template); 'workdir' is gone — remote providers clone into the VM's home directory and local providers check out under their own workingDirectory; 'maxSandboxes' is gone with the sandbox fleet — there is one sandbox per session and no pool to cap. Omit 'sandbox' entirely to disable sandboxes.");
+			throw new Error(`MastraFactory: 'sandbox' must be a function constructing a MastraSandbox from a FactorySandboxContext.`);
+		}
 		const workspaceRegistry = new FactoryWorkspaceRegistry();
 		const stateSigner = createStateSigner(this.#config.stateSecret);
 		if (auth && hasAuthInit(auth)) await timedPhase("prepare.auth.init", () => auth.init({
@@ -279,26 +261,8 @@ var MastraFactory = class {
 		const factoryReady = storage.isDomainReady("projects") && storage.isDomainReady("work-items");
 		const knowledgeEnabled = process.env.MASTRACODE_EXPERIMENTAL_SUBCONSCIOUS === "1";
 		const githubIntegration = integrations.find((integration) => integration.id === "github");
-		if (githubIntegration && fleet.enabled && storage.isDomainReady("source-control")) {
-			const checkpointLogger = { warn: (message) => console.warn(`[factory] ${message}`) };
-			baseCheckpoints = createBaseCheckpointTriggers({
-				builder: new BaseCheckpointBuilder({
-					fleet,
-					logger: checkpointLogger
-				}),
-				fleet,
-				github: {
-					sourceControlStorage: sourceControlStorage.forIntegration("github"),
-					...githubIntegration.versionControl ? { versionControl: githubIntegration.versionControl } : {}
-				},
-				logger: checkpointLogger
-			});
-		}
 		const workItemsReady = storage.isDomainReady("work-items");
-		const sessionRetirement = machine && storage.isDomainReady("source-control") ? new SessionRetirementCoordinator({
-			fleet,
-			invalidateSession: (sessionId) => workspaceRegistry.invalidateSession(sessionId)
-		}) : void 0;
+		const sessionRetirement = sandboxConfig && storage.isDomainReady("source-control") ? new SessionRetirementCoordinator({ invalidateSession: (sessionId) => workspaceRegistry.invalidateSession(sessionId) }) : void 0;
 		const retireTerminalSessions = sessionRetirement && githubIntegration && workItemsReady ? async ({ orgId, workItemId }) => sessionRetirement.retireWorkItemSessions({
 			workItems: workItemsStorage,
 			sourceControl: sourceControlStorage.forIntegration(githubIntegration.id),
@@ -323,8 +287,7 @@ var MastraFactory = class {
 			sourceControl: sourceControlStorage,
 			versionControlIntegrationIds: integrations.filter((integration) => integration.versionControl).map((integration) => integration.id),
 			...sessionRetirement ? { sessionRetirement } : {},
-			...workItemsReady ? { workItems: workItemsStorage } : {},
-			onProjectRepositoryLinked: (args) => baseCheckpoints?.onProjectRepositoryLinked(args)
+			...workItemsReady ? { workItems: workItemsStorage } : {}
 		});
 		const factoryProcessor = workItemsReady ? new FactoryPhaseStateProcessor({
 			rules,
@@ -350,17 +313,19 @@ var MastraFactory = class {
 		const prepared = await timedPhase("prepare.controllerMount", () => prepareAgentControllerMount({
 			controllerId: CONTROLLER_ID,
 			workspace: createWorkspaceFactory({
-				...this.#config.sandbox ? { sandbox: this.#config.sandbox } : {},
+				...sandboxConfig ? { sandbox: sandboxConfig } : {},
 				...githubIntegration ? { github: githubIntegration } : {},
 				...workItemsStorage ? { workItems: workItemsStorage } : {},
-				fleet,
 				workspaceRegistry
 			}),
 			disableGithubSignals: true,
 			disableSettingsOmSeed: true,
 			initialState: {
 				skipGlobalInstructions: true,
-				factoryOrgUnresolved: true
+				factoryOrgUnresolved: true,
+				projectPath: "",
+				projectName: "",
+				gitBranch: ""
 			},
 			storage: storage.getMastraStorage(),
 			...mastraStorageBackend ? { storageBackend: mastraStorageBackend } : {},
@@ -430,8 +395,7 @@ var MastraFactory = class {
 					audit: auditDomain,
 					publicOrigin,
 					stateSigner,
-					fleet,
-					...baseCheckpoints ? { baseCheckpoints } : {},
+					sandbox: sandboxConfig,
 					sessionRetirement,
 					factoryStorage: storage,
 					integrationStorage,
@@ -546,8 +510,7 @@ var MastraFactory = class {
 			publicOrigin,
 			auth: routeAuth,
 			stateSigner,
-			fleet,
-			...baseCheckpoints ? { baseCheckpoints } : {},
+			sandbox: sandboxConfig,
 			factoryStorage: storage,
 			integrationStorage,
 			sourceControlStorage,
@@ -561,8 +524,7 @@ var MastraFactory = class {
 			publicOrigin,
 			auth: routeAuth,
 			stateSigner,
-			fleet,
-			...baseCheckpoints ? { baseCheckpoints } : {},
+			sandbox: sandboxConfig,
 			factoryStorage: storage,
 			integrationStorage,
 			sourceControlStorage,