@mastra/factory 0.12.1-alpha.0 → 0.13.0-alpha.10

package/dist/supervisor/write-tools.js

@@ -0,0 +1,227 @@
+import { FACTORY_RULE_STAGES, factoryRuleStage } from "../rules/types.js";
+import { createTool } from "@mastra/core/tools";
+import { z } from "zod";
+//#region src/supervisor/write-tools.ts
+function createFactorySupervisorWriteTools(deps) {
+	const now = deps.now ?? (() => /* @__PURE__ */ new Date());
+	const audit = async (action, target, metadata = {}) => deps.audit.record({
+		orgId: deps.scope.orgId,
+		actorId: deps.userId,
+		actorType: "human",
+		action,
+		targets: [target],
+		factoryProjectId: deps.scope.factoryProjectId,
+		metadata: {
+			...metadata,
+			cause: "supervisor"
+		},
+		occurredAt: now()
+	});
+	return {
+		factory_retry_decision: createTool({
+			id: "factory_retry_decision",
+			description: "Retry one failed Factory decision after the person confirms the repair.",
+			inputSchema: z.object({ decisionId: z.string().min(1) }),
+			requireApproval: true,
+			execute: async ({ decisionId }) => {
+				const decision = await deps.workItems.retryDeferredDecision(deps.scope.orgId, deps.scope.factoryProjectId, decisionId, now());
+				if (!decision) throw new Error("The decision is not failed, no longer exists, or belongs to another factory.");
+				await audit("factory.run.retry", {
+					type: "rule_decision",
+					id: decisionId
+				}, { workItemId: decision.workItemId });
+				return {
+					decisionId,
+					status: decision.status,
+					workItemId: decision.workItemId
+				};
+			}
+		}),
+		factory_dismiss_decision: createTool({
+			id: "factory_dismiss_decision",
+			description: "Dismiss one parked Factory proposal after the person confirms it is no longer wanted.",
+			inputSchema: z.object({ decisionId: z.string().min(1) }),
+			requireApproval: true,
+			execute: async ({ decisionId }) => {
+				const decision = await deps.workItems.dismissDeferredDecision(deps.scope.orgId, deps.scope.factoryProjectId, decisionId, now());
+				if (!decision) throw new Error("The decision is not proposed, no longer exists, or belongs to another factory.");
+				await audit("factory.run.dismissed", {
+					type: "rule_decision",
+					id: decisionId
+				}, { workItemId: decision.workItemId });
+				return {
+					decisionId,
+					status: decision.status,
+					workItemId: decision.workItemId
+				};
+			}
+		}),
+		factory_resolve_proposal: createTool({
+			id: "factory_resolve_proposal",
+			description: "Approve or dismiss one proposed Factory decision after the person confirms the choice.",
+			inputSchema: z.object({
+				decisionId: z.string().min(1),
+				resolution: z.enum(["approve", "dismiss"])
+			}),
+			requireApproval: true,
+			execute: async ({ decisionId, resolution }) => {
+				const decision = resolution === "approve" ? await deps.workItems.approveDeferredDecision(deps.scope.orgId, deps.scope.factoryProjectId, decisionId, now(), deps.userId) : await deps.workItems.dismissDeferredDecision(deps.scope.orgId, deps.scope.factoryProjectId, decisionId, now());
+				if (!decision) throw new Error("The proposal is no longer open or belongs to another factory.");
+				await audit(resolution === "approve" ? "factory.run.approved" : "factory.run.dismissed", {
+					type: "rule_decision",
+					id: decisionId
+				}, { workItemId: decision.workItemId });
+				return {
+					decisionId,
+					resolution,
+					status: decision.status,
+					workItemId: decision.workItemId
+				};
+			}
+		}),
+		factory_transition_work_item: createTool({
+			id: "factory_transition_work_item",
+			description: "Move or accept one Factory work item after the person confirms the destination stage.",
+			inputSchema: z.object({
+				workItemId: z.string().min(1),
+				stage: z.enum(FACTORY_RULE_STAGES)
+			}),
+			requireApproval: true,
+			execute: async ({ workItemId, stage }) => {
+				const item = await deps.workItems.get({
+					orgId: deps.scope.orgId,
+					id: workItemId
+				});
+				if (!item || item.factoryProjectId !== deps.scope.factoryProjectId) throw new Error("Work item not found.");
+				const from = factoryRuleStage(item.stages);
+				if (!from) throw new Error("The work item does not have one valid Factory stage.");
+				const result = await deps.transitionService.transition({
+					orgId: deps.scope.orgId,
+					factoryProjectId: deps.scope.factoryProjectId,
+					workItemId,
+					board: item.externalSource?.type === "pull-request" ? "review" : "work",
+					stage,
+					expectedRevision: item.revision,
+					actor: {
+						type: "human",
+						id: deps.userId
+					},
+					ingress: {
+						type: "human",
+						identity: `supervisor:${deps.userId}:${workItemId}:${item.revision}:${stage}`
+					},
+					cause: "supervisor"
+				});
+				await audit(result.status === "accepted" ? "factory.work_item.stage_moved" : "factory.work_item.transition_rejected", {
+					type: "work_item",
+					id: workItemId
+				}, result.status === "accepted" ? {
+					from,
+					to: result.stage,
+					revision: result.revision,
+					transitionId: result.transitionId
+				} : {
+					from,
+					to: stage,
+					code: result.code,
+					reason: result.reason,
+					transitionId: result.transitionId
+				});
+				if (result.status !== "accepted") throw new Error(`The transition was rejected (${result.code}): ${result.reason}`);
+				return result;
+			}
+		}),
+		factory_reconcile_labels: createTool({
+			id: "factory_reconcile_labels",
+			description: "Reconcile stale acceptance labels for one accepted work item after the person confirms the repair.",
+			inputSchema: z.object({ workItemId: z.string().min(1) }),
+			requireApproval: true,
+			execute: async ({ workItemId }) => {
+				if (!deps.reconcileAcceptanceLabels) throw new Error("Acceptance-label reconciliation is unavailable.");
+				const item = await deps.workItems.get({
+					orgId: deps.scope.orgId,
+					id: workItemId
+				});
+				if (!item || item.factoryProjectId !== deps.scope.factoryProjectId) throw new Error("Work item not found.");
+				if (!item.acceptedAt) throw new Error("The work item has not been accepted.");
+				await deps.reconcileAcceptanceLabels({
+					...deps.scope,
+					item
+				});
+				await audit("factory.work_item.labels_reconciled", {
+					type: "work_item",
+					id: workItemId
+				});
+				return {
+					workItemId,
+					reconciled: true
+				};
+			}
+		}),
+		factory_revoke_binding: createTool({
+			id: "factory_revoke_binding",
+			description: "Revoke an orphaned or stale run binding after a health finding and person confirmation.",
+			inputSchema: z.object({ bindingId: z.string().min(1) }),
+			requireApproval: true,
+			execute: async ({ bindingId }) => {
+				const binding = await deps.workItems.revokeRunBinding({
+					orgId: deps.scope.orgId,
+					factoryProjectId: deps.scope.factoryProjectId,
+					bindingId,
+					revokedAt: now()
+				});
+				if (!binding) throw new Error("The binding is not active, no longer exists, or belongs to another factory.");
+				await audit("factory.intake.binding_updated", {
+					type: "run_binding",
+					id: bindingId
+				}, {
+					workItemId: binding.workItemId,
+					role: binding.role,
+					status: "revoked"
+				});
+				return {
+					bindingId,
+					status: binding.status,
+					workItemId: binding.workItemId,
+					role: binding.role
+				};
+			}
+		}),
+		factory_signal_session: createTool({
+			id: "factory_signal_session",
+			description: "Send bounded guidance to a worker session after the person confirms the exact message.",
+			inputSchema: z.object({
+				sessionId: z.string().min(1),
+				message: z.string().trim().min(1).max(2e3)
+			}),
+			requireApproval: true,
+			execute: async ({ sessionId, message }) => {
+				if (!deps.signalSession) throw new Error("Worker session signaling is unavailable.");
+				const binding = (await deps.workItems.listRunBindings(deps.scope.orgId, deps.scope.factoryProjectId)).find((row) => row.sessionId === sessionId);
+				if (!binding) throw new Error("The session does not belong to this factory.");
+				await deps.signalSession({
+					sessionId,
+					message,
+					userId: deps.userId
+				});
+				await audit("factory.agent.signaled", {
+					type: "factory_session",
+					id: sessionId
+				}, {
+					workItemId: binding.workItemId,
+					role: binding.role
+				});
+				return {
+					sessionId,
+					delivered: true,
+					workItemId: binding.workItemId,
+					role: binding.role
+				};
+			}
+		})
+	};
+}
+//#endregion
+export { createFactorySupervisorWriteTools };
+
+//# sourceMappingURL=write-tools.js.map

package/dist/supervisor/write-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-tools.js","names":[],"sources":["../../src/supervisor/write-tools.ts"],"sourcesContent":["import { createTool } from '@mastra/core/tools';\nimport { z } from 'zod';\n\nimport type { IntegrationTools } from '../integrations/base.js';\nimport type { FactoryTransitionService } from '../rules/transition-service.js';\nimport { FACTORY_RULE_STAGES, factoryRuleStage } from '../rules/types.js';\nimport type { AuditStorage } from '../storage/domains/audit/base.js';\nimport type { WorkItemRow, WorkItemsStorage } from '../storage/domains/work-items/base.js';\nimport type { SupervisorScope } from './read-tools.js';\n\ninterface SupervisorWriteDependencies {\n  scope: SupervisorScope;\n  userId: string;\n  workItems: WorkItemsStorage;\n  audit: AuditStorage;\n  transitionService: FactoryTransitionService;\n  reconcileAcceptanceLabels?: (input: { orgId: string; factoryProjectId: string; item: WorkItemRow }) => Promise<void>;\n  signalSession?: (input: { sessionId: string; message: string; userId: string }) => Promise<unknown>;\n  now?: () => Date;\n}\n\nexport function createFactorySupervisorWriteTools(deps: SupervisorWriteDependencies): IntegrationTools {\n  const now = deps.now ?? (() => new Date());\n  const audit = async (action: string, target: { type: string; id: string }, metadata: Record<string, unknown> = {}) =>\n    deps.audit.record({\n      orgId: deps.scope.orgId,\n      actorId: deps.userId,\n      actorType: 'human',\n      action,\n      targets: [target],\n      factoryProjectId: deps.scope.factoryProjectId,\n      metadata: { ...metadata, cause: 'supervisor' },\n      occurredAt: now(),\n    });\n\n  return {\n    factory_retry_decision: createTool({\n      id: 'factory_retry_decision',\n      description: 'Retry one failed Factory decision after the person confirms the repair.',\n      inputSchema: z.object({ decisionId: z.string().min(1) }),\n      requireApproval: true,\n      execute: async ({ decisionId }) => {\n        const decision = await deps.workItems.retryDeferredDecision(\n          deps.scope.orgId,\n          deps.scope.factoryProjectId,\n          decisionId,\n          now(),\n        );\n        if (!decision) throw new Error('The decision is not failed, no longer exists, or belongs to another factory.');\n        await audit(\n          'factory.run.retry',\n          { type: 'rule_decision', id: decisionId },\n          { workItemId: decision.workItemId },\n        );\n        return { decisionId, status: decision.status, workItemId: decision.workItemId };\n      },\n    }),\n    factory_dismiss_decision: createTool({\n      id: 'factory_dismiss_decision',\n      description: 'Dismiss one parked Factory proposal after the person confirms it is no longer wanted.',\n      inputSchema: z.object({ decisionId: z.string().min(1) }),\n      requireApproval: true,\n      execute: async ({ decisionId }) => {\n        const decision = await deps.workItems.dismissDeferredDecision(\n          deps.scope.orgId,\n          deps.scope.factoryProjectId,\n          decisionId,\n          now(),\n        );\n        if (!decision)\n          throw new Error('The decision is not proposed, no longer exists, or belongs to another factory.');\n        await audit(\n          'factory.run.dismissed',\n          { type: 'rule_decision', id: decisionId },\n          { workItemId: decision.workItemId },\n        );\n        return { decisionId, status: decision.status, workItemId: decision.workItemId };\n      },\n    }),\n    factory_resolve_proposal: createTool({\n      id: 'factory_resolve_proposal',\n      description: 'Approve or dismiss one proposed Factory decision after the person confirms the choice.',\n      inputSchema: z.object({ decisionId: z.string().min(1), resolution: z.enum(['approve', 'dismiss']) }),\n      requireApproval: true,\n      execute: async ({ decisionId, resolution }) => {\n        const decision =\n          resolution === 'approve'\n            ? await deps.workItems.approveDeferredDecision(\n                deps.scope.orgId,\n                deps.scope.factoryProjectId,\n                decisionId,\n                now(),\n                deps.userId,\n              )\n            : await deps.workItems.dismissDeferredDecision(\n                deps.scope.orgId,\n                deps.scope.factoryProjectId,\n                decisionId,\n                now(),\n              );\n        if (!decision) throw new Error('The proposal is no longer open or belongs to another factory.');\n        await audit(\n          resolution === 'approve' ? 'factory.run.approved' : 'factory.run.dismissed',\n          {\n            type: 'rule_decision',\n            id: decisionId,\n          },\n          { workItemId: decision.workItemId },\n        );\n        return { decisionId, resolution, status: decision.status, workItemId: decision.workItemId };\n      },\n    }),\n    factory_transition_work_item: createTool({\n      id: 'factory_transition_work_item',\n      description: 'Move or accept one Factory work item after the person confirms the destination stage.',\n      inputSchema: z.object({ workItemId: z.string().min(1), stage: z.enum(FACTORY_RULE_STAGES) }),\n      requireApproval: true,\n      execute: async ({ workItemId, stage }) => {\n        const item = await deps.workItems.get({ orgId: deps.scope.orgId, id: workItemId });\n        if (!item || item.factoryProjectId !== deps.scope.factoryProjectId) throw new Error('Work item not found.');\n        const from = factoryRuleStage(item.stages);\n        if (!from) throw new Error('The work item does not have one valid Factory stage.');\n        const result = await deps.transitionService.transition({\n          orgId: deps.scope.orgId,\n          factoryProjectId: deps.scope.factoryProjectId,\n          workItemId,\n          board: item.externalSource?.type === 'pull-request' ? 'review' : 'work',\n          stage,\n          expectedRevision: item.revision,\n          actor: { type: 'human', id: deps.userId },\n          ingress: { type: 'human', identity: `supervisor:${deps.userId}:${workItemId}:${item.revision}:${stage}` },\n          cause: 'supervisor',\n        });\n        await audit(\n          result.status === 'accepted' ? 'factory.work_item.stage_moved' : 'factory.work_item.transition_rejected',\n          { type: 'work_item', id: workItemId },\n          result.status === 'accepted'\n            ? { from, to: result.stage, revision: result.revision, transitionId: result.transitionId }\n            : { from, to: stage, code: result.code, reason: result.reason, transitionId: result.transitionId },\n        );\n        if (result.status !== 'accepted') {\n          throw new Error(`The transition was rejected (${result.code}): ${result.reason}`);\n        }\n        return result;\n      },\n    }),\n    factory_reconcile_labels: createTool({\n      id: 'factory_reconcile_labels',\n      description: 'Reconcile stale acceptance labels for one accepted work item after the person confirms the repair.',\n      inputSchema: z.object({ workItemId: z.string().min(1) }),\n      requireApproval: true,\n      execute: async ({ workItemId }) => {\n        if (!deps.reconcileAcceptanceLabels) throw new Error('Acceptance-label reconciliation is unavailable.');\n        const item = await deps.workItems.get({ orgId: deps.scope.orgId, id: workItemId });\n        if (!item || item.factoryProjectId !== deps.scope.factoryProjectId) throw new Error('Work item not found.');\n        if (!item.acceptedAt) throw new Error('The work item has not been accepted.');\n        await deps.reconcileAcceptanceLabels({ ...deps.scope, item });\n        await audit('factory.work_item.labels_reconciled', { type: 'work_item', id: workItemId });\n        return { workItemId, reconciled: true };\n      },\n    }),\n    factory_revoke_binding: createTool({\n      id: 'factory_revoke_binding',\n      description: 'Revoke an orphaned or stale run binding after a health finding and person confirmation.',\n      inputSchema: z.object({ bindingId: z.string().min(1) }),\n      requireApproval: true,\n      execute: async ({ bindingId }) => {\n        const binding = await deps.workItems.revokeRunBinding({\n          orgId: deps.scope.orgId,\n          factoryProjectId: deps.scope.factoryProjectId,\n          bindingId,\n          revokedAt: now(),\n        });\n        if (!binding) throw new Error('The binding is not active, no longer exists, or belongs to another factory.');\n        await audit(\n          'factory.intake.binding_updated',\n          { type: 'run_binding', id: bindingId },\n          {\n            workItemId: binding.workItemId,\n            role: binding.role,\n            status: 'revoked',\n          },\n        );\n        return { bindingId, status: binding.status, workItemId: binding.workItemId, role: binding.role };\n      },\n    }),\n    factory_signal_session: createTool({\n      id: 'factory_signal_session',\n      description: 'Send bounded guidance to a worker session after the person confirms the exact message.',\n      inputSchema: z.object({ sessionId: z.string().min(1), message: z.string().trim().min(1).max(2000) }),\n      requireApproval: true,\n      execute: async ({ sessionId, message }) => {\n        if (!deps.signalSession) throw new Error('Worker session signaling is unavailable.');\n        const bindings = await deps.workItems.listRunBindings(deps.scope.orgId, deps.scope.factoryProjectId);\n        const binding = bindings.find(row => row.sessionId === sessionId);\n        if (!binding) throw new Error('The session does not belong to this factory.');\n        await deps.signalSession({ sessionId, message, userId: deps.userId });\n        await audit(\n          'factory.agent.signaled',\n          { type: 'factory_session', id: sessionId },\n          {\n            workItemId: binding.workItemId,\n            role: binding.role,\n          },\n        );\n        return { sessionId, delivered: true, workItemId: binding.workItemId, role: binding.role };\n      },\n    }),\n  };\n}\n"],"mappings":";;;;AAqBA,SAAgB,kCAAkC,MAAqD;CACrG,MAAM,MAAM,KAAK,8BAAc,IAAI,KAAK;CACxC,MAAM,QAAQ,OAAO,QAAgB,QAAsC,WAAoC,CAAC,MAC9G,KAAK,MAAM,OAAO;EAChB,OAAO,KAAK,MAAM;EAClB,SAAS,KAAK;EACd,WAAW;EACX;EACA,SAAS,CAAC,MAAM;EAChB,kBAAkB,KAAK,MAAM;EAC7B,UAAU;GAAE,GAAG;GAAU,OAAO;EAAa;EAC7C,YAAY,IAAI;CAClB,CAAC;CAEH,OAAO;EACL,wBAAwB,WAAW;GACjC,IAAI;GACJ,aAAa;GACb,aAAa,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;GACvD,iBAAiB;GACjB,SAAS,OAAO,EAAE,iBAAiB;IACjC,MAAM,WAAW,MAAM,KAAK,UAAU,sBACpC,KAAK,MAAM,OACX,KAAK,MAAM,kBACX,YACA,IAAI,CACN;IACA,IAAI,CAAC,UAAU,MAAM,IAAI,MAAM,8EAA8E;IAC7G,MAAM,MACJ,qBACA;KAAE,MAAM;KAAiB,IAAI;IAAW,GACxC,EAAE,YAAY,SAAS,WAAW,CACpC;IACA,OAAO;KAAE;KAAY,QAAQ,SAAS;KAAQ,YAAY,SAAS;IAAW;GAChF;EACF,CAAC;EACD,0BAA0B,WAAW;GACnC,IAAI;GACJ,aAAa;GACb,aAAa,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;GACvD,iBAAiB;GACjB,SAAS,OAAO,EAAE,iBAAiB;IACjC,MAAM,WAAW,MAAM,KAAK,UAAU,wBACpC,KAAK,MAAM,OACX,KAAK,MAAM,kBACX,YACA,IAAI,CACN;IACA,IAAI,CAAC,UACH,MAAM,IAAI,MAAM,gFAAgF;IAClG,MAAM,MACJ,yBACA;KAAE,MAAM;KAAiB,IAAI;IAAW,GACxC,EAAE,YAAY,SAAS,WAAW,CACpC;IACA,OAAO;KAAE;KAAY,QAAQ,SAAS;KAAQ,YAAY,SAAS;IAAW;GAChF;EACF,CAAC;EACD,0BAA0B,WAAW;GACnC,IAAI;GACJ,aAAa;GACb,aAAa,EAAE,OAAO;IAAE,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;IAAG,YAAY,EAAE,KAAK,CAAC,WAAW,SAAS,CAAC;GAAE,CAAC;GACnG,iBAAiB;GACjB,SAAS,OAAO,EAAE,YAAY,iBAAiB;IAC7C,MAAM,WACJ,eAAe,YACX,MAAM,KAAK,UAAU,wBACnB,KAAK,MAAM,OACX,KAAK,MAAM,kBACX,YACA,IAAI,GACJ,KAAK,MACP,IACA,MAAM,KAAK,UAAU,wBACnB,KAAK,MAAM,OACX,KAAK,MAAM,kBACX,YACA,IAAI,CACN;IACN,IAAI,CAAC,UAAU,MAAM,IAAI,MAAM,+DAA+D;IAC9F,MAAM,MACJ,eAAe,YAAY,yBAAyB,yBACpD;KACE,MAAM;KACN,IAAI;IACN,GACA,EAAE,YAAY,SAAS,WAAW,CACpC;IACA,OAAO;KAAE;KAAY;KAAY,QAAQ,SAAS;KAAQ,YAAY,SAAS;IAAW;GAC5F;EACF,CAAC;EACD,8BAA8B,WAAW;GACvC,IAAI;GACJ,aAAa;GACb,aAAa,EAAE,OAAO;IAAE,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;IAAG,OAAO,EAAE,KAAK,mBAAmB;GAAE,CAAC;GAC3F,iBAAiB;GACjB,SAAS,OAAO,EAAE,YAAY,YAAY;IACxC,MAAM,OAAO,MAAM,KAAK,UAAU,IAAI;KAAE,OAAO,KAAK,MAAM;KAAO,IAAI;IAAW,CAAC;IACjF,IAAI,CAAC,QAAQ,KAAK,qBAAqB,KAAK,MAAM,kBAAkB,MAAM,IAAI,MAAM,sBAAsB;IAC1G,MAAM,OAAO,iBAAiB,KAAK,MAAM;IACzC,IAAI,CAAC,MAAM,MAAM,IAAI,MAAM,sDAAsD;IACjF,MAAM,SAAS,MAAM,KAAK,kBAAkB,WAAW;KACrD,OAAO,KAAK,MAAM;KAClB,kBAAkB,KAAK,MAAM;KAC7B;KACA,OAAO,KAAK,gBAAgB,SAAS,iBAAiB,WAAW;KACjE;KACA,kBAAkB,KAAK;KACvB,OAAO;MAAE,MAAM;MAAS,IAAI,KAAK;KAAO;KACxC,SAAS;MAAE,MAAM;MAAS,UAAU,cAAc,KAAK,OAAO,GAAG,WAAW,GAAG,KAAK,SAAS,GAAG;KAAQ;KACxG,OAAO;IACT,CAAC;IACD,MAAM,MACJ,OAAO,WAAW,aAAa,kCAAkC,yCACjE;KAAE,MAAM;KAAa,IAAI;IAAW,GACpC,OAAO,WAAW,aACd;KAAE;KAAM,IAAI,OAAO;KAAO,UAAU,OAAO;KAAU,cAAc,OAAO;IAAa,IACvF;KAAE;KAAM,IAAI;KAAO,MAAM,OAAO;KAAM,QAAQ,OAAO;KAAQ,cAAc,OAAO;IAAa,CACrG;IACA,IAAI,OAAO,WAAW,YACpB,MAAM,IAAI,MAAM,gCAAgC,OAAO,KAAK,KAAK,OAAO,QAAQ;IAElF,OAAO;GACT;EACF,CAAC;EACD,0BAA0B,WAAW;GACnC,IAAI;GACJ,aAAa;GACb,aAAa,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;GACvD,iBAAiB;GACjB,SAAS,OAAO,EAAE,iBAAiB;IACjC,IAAI,CAAC,KAAK,2BAA2B,MAAM,IAAI,MAAM,iDAAiD;IACtG,MAAM,OAAO,MAAM,KAAK,UAAU,IAAI;KAAE,OAAO,KAAK,MAAM;KAAO,IAAI;IAAW,CAAC;IACjF,IAAI,CAAC,QAAQ,KAAK,qBAAqB,KAAK,MAAM,kBAAkB,MAAM,IAAI,MAAM,sBAAsB;IAC1G,IAAI,CAAC,KAAK,YAAY,MAAM,IAAI,MAAM,sCAAsC;IAC5E,MAAM,KAAK,0BAA0B;KAAE,GAAG,KAAK;KAAO;IAAK,CAAC;IAC5D,MAAM,MAAM,uCAAuC;KAAE,MAAM;KAAa,IAAI;IAAW,CAAC;IACxF,OAAO;KAAE;KAAY,YAAY;IAAK;GACxC;EACF,CAAC;EACD,wBAAwB,WAAW;GACjC,IAAI;GACJ,aAAa;GACb,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;GACtD,iBAAiB;GACjB,SAAS,OAAO,EAAE,gBAAgB;IAChC,MAAM,UAAU,MAAM,KAAK,UAAU,iBAAiB;KACpD,OAAO,KAAK,MAAM;KAClB,kBAAkB,KAAK,MAAM;KAC7B;KACA,WAAW,IAAI;IACjB,CAAC;IACD,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,6EAA6E;IAC3G,MAAM,MACJ,kCACA;KAAE,MAAM;KAAe,IAAI;IAAU,GACrC;KACE,YAAY,QAAQ;KACpB,MAAM,QAAQ;KACd,QAAQ;IACV,CACF;IACA,OAAO;KAAE;KAAW,QAAQ,QAAQ;KAAQ,YAAY,QAAQ;KAAY,MAAM,QAAQ;IAAK;GACjG;EACF,CAAC;EACD,wBAAwB,WAAW;GACjC,IAAI;GACJ,aAAa;GACb,aAAa,EAAE,OAAO;IAAE,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;IAAG,SAAS,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAI;GAAE,CAAC;GACnG,iBAAiB;GACjB,SAAS,OAAO,EAAE,WAAW,cAAc;IACzC,IAAI,CAAC,KAAK,eAAe,MAAM,IAAI,MAAM,0CAA0C;IAEnF,MAAM,WAAU,MADO,KAAK,UAAU,gBAAgB,KAAK,MAAM,OAAO,KAAK,MAAM,gBAAgB,EAAA,CAC1E,MAAK,QAAO,IAAI,cAAc,SAAS;IAChE,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,8CAA8C;IAC5E,MAAM,KAAK,cAAc;KAAE;KAAW;KAAS,QAAQ,KAAK;IAAO,CAAC;IACpE,MAAM,MACJ,0BACA;KAAE,MAAM;KAAmB,IAAI;IAAU,GACzC;KACE,YAAY,QAAQ;KACpB,MAAM,QAAQ;IAChB,CACF;IACA,OAAO;KAAE;KAAW,WAAW;KAAM,YAAY,QAAQ;KAAY,MAAM,QAAQ;IAAK;GAC1F;EACF,CAAC;CACH;AACF"}

package/dist/work-item-branch.d.ts

@@ -12,6 +12,12 @@ export interface WorkItemBranchInput {
 }
 /** Map a stored item's provenance onto the source vocabulary branch naming reads. */
 export declare function workItemBranchSource(externalSource: ExternalWorkItemSource | null | undefined): WorkItemBranchSource;
+/** The provider number a GitHub card carries — the `#12` its runs and thread titles name it by. */
+export declare function workItemNumber(item: Pick<WorkItemBranchInput, 'source' | 'metadata'>): number | undefined;
+/** How a card names its thread: a Linear title already opens with its identifier, a GitHub card gets its number here. */
+export declare function workItemThreadTitle(item: Pick<WorkItemBranchInput, 'source' | 'metadata'> & {
+    title: string;
+}): string;
 /**
  * The git branch an item's runs and sessions share, one grammar for both sides
  * of the wire: the dispatcher names autonomous run branches with it and the

package/dist/work-item-branch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"work-item-branch.d.ts","sourceRoot":"","sources":["../src/work-item-branch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAEnF;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,cAAc,GAAG,WAAW,GAAG,cAAc,GAAG,cAAc,GAAG,QAAQ,CAAC;AAE7G,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,oBAAoB,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC3C;AAED,qFAAqF;AACrF,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAAG,oBAAoB,CAOpH;AAOD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM,CAehE"}
+{"version":3,"file":"work-item-branch.d.ts","sourceRoot":"","sources":["../src/work-item-branch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAEnF;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,cAAc,GAAG,WAAW,GAAG,cAAc,GAAG,cAAc,GAAG,QAAQ,CAAC;AAE7G,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,oBAAoB,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC3C;AAED,qFAAqF;AACrF,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAAG,oBAAoB,CAOpH;AAOD,mGAAmG;AACnG,wBAAgB,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,mBAAmB,EAAE,QAAQ,GAAG,UAAU,CAAC,GAAG,MAAM,GAAG,SAAS,CAKzG;AAED,yHAAyH;AACzH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,IAAI,CAAC,mBAAmB,EAAE,QAAQ,GAAG,UAAU,CAAC,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GACzE,MAAM,CAIR;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM,CAWhE"}

package/dist/work-item-branch.js

@@ -10,6 +10,18 @@ function branchNumber(metadata, key) {
 	const value = metadata[key] ?? metadata.number;
 	return typeof value === "number" && Number.isInteger(value) && value > 0 ? value : void 0;
 }
+/** The provider number a GitHub card carries — the `#12` its runs and thread titles name it by. */
+function workItemNumber(item) {
+	const metadata = item.metadata ?? {};
+	if (item.source === "github-issue") return branchNumber(metadata, "githubIssueNumber");
+	if (item.source === "github-pr") return branchNumber(metadata, "githubPullRequestNumber");
+}
+/** How a card names its thread: a Linear title already opens with its identifier, a GitHub card gets its number here. */
+function workItemThreadTitle(item) {
+	const number = workItemNumber(item);
+	if (number === void 0) return item.title;
+	return `${item.source === "github-pr" ? "PR" : "Issue"} #${number}: ${item.title}`;
+}
 /**
 * The git branch an item's runs and sessions share, one grammar for both sides
 * of the wire: the dispatcher names autonomous run branches with it and the
@@ -19,14 +31,8 @@ function branchNumber(metadata, key) {
 */
 function workItemBranch(item) {
 	const metadata = item.metadata ?? {};
-	if (item.source === "github-issue") {
-		const issueNumber = branchNumber(metadata, "githubIssueNumber");
-		if (issueNumber !== void 0) return `factory/issue-${issueNumber}`;
-	}
-	if (item.source === "github-pr") {
-		const pullRequestNumber = branchNumber(metadata, "githubPullRequestNumber");
-		if (pullRequestNumber !== void 0) return `factory/pr-${pullRequestNumber}`;
-	}
+	const githubNumber = workItemNumber(item);
+	if (githubNumber !== void 0) return item.source === "github-issue" ? `factory/issue-${githubNumber}` : `factory/pr-${githubNumber}`;
 	if (item.source === "linear-issue" && typeof metadata.identifier === "string") {
 		const identifier = metadata.identifier.trim();
 		if (identifier) return `factory/linear-${identifier.toLowerCase()}`;
@@ -34,6 +40,6 @@ function workItemBranch(item) {
 	return `factory/item-${item.id}`;
 }
 //#endregion
-export { workItemBranch, workItemBranchSource };
+export { workItemBranch, workItemBranchSource, workItemNumber, workItemThreadTitle };
 
 //# sourceMappingURL=work-item-branch.js.map

package/dist/work-item-branch.js.map

@@ -1 +1 @@
-{"version":3,"file":"work-item-branch.js","names":[],"sources":["../src/work-item-branch.ts"],"sourcesContent":["import type { ExternalWorkItemSource } from './storage/domains/work-items/base.js';\n\n/**\n * Where a card came from, in the vocabulary branch naming reads. Server rows\n * map their `externalSource` into this with {@link workItemBranchSource}; the\n * board's own `WorkItem['source']` is already this union.\n */\nexport type WorkItemBranchSource = 'github-issue' | 'github-pr' | 'linear-issue' | 'slack-thread' | 'manual';\n\nexport interface WorkItemBranchInput {\n  id: string;\n  source: WorkItemBranchSource;\n  metadata?: Record<string, unknown> | null;\n}\n\n/** Map a stored item's provenance onto the source vocabulary branch naming reads. */\nexport function workItemBranchSource(externalSource: ExternalWorkItemSource | null | undefined): WorkItemBranchSource {\n  if (!externalSource) return 'manual';\n  if (externalSource.integrationId === 'linear') return 'linear-issue';\n  // Only GitHub and Linear carry provider identities; anything else (a Slack\n  // thread, say) is a plain work item rather than a mislabeled GitHub issue.\n  if (externalSource.integrationId !== 'github') return 'manual';\n  return externalSource.type === 'pull-request' ? 'github-pr' : 'github-issue';\n}\n\nfunction branchNumber(metadata: Record<string, unknown>, key: string): number | undefined {\n  const value = metadata[key] ?? metadata.number;\n  return typeof value === 'number' && Number.isInteger(value) && value > 0 ? value : undefined;\n}\n\n/**\n * The git branch an item's runs and sessions share, one grammar for both sides\n * of the wire: the dispatcher names autonomous run branches with it and the\n * board opens card sessions on it, so both converge on one checkout per item.\n * Cards without a provider identity (manual, Slack) and cards whose metadata\n * lost their identifier fall back to the id-derived branch.\n */\nexport function workItemBranch(item: WorkItemBranchInput): string {\n  const metadata = item.metadata ?? {};\n  if (item.source === 'github-issue') {\n    const issueNumber = branchNumber(metadata, 'githubIssueNumber');\n    if (issueNumber !== undefined) return `factory/issue-${issueNumber}`;\n  }\n  if (item.source === 'github-pr') {\n    const pullRequestNumber = branchNumber(metadata, 'githubPullRequestNumber');\n    if (pullRequestNumber !== undefined) return `factory/pr-${pullRequestNumber}`;\n  }\n  if (item.source === 'linear-issue' && typeof metadata.identifier === 'string') {\n    const identifier = metadata.identifier.trim();\n    if (identifier) return `factory/linear-${identifier.toLowerCase()}`;\n  }\n  return `factory/item-${item.id}`;\n}\n"],"mappings":";;AAgBA,SAAgB,qBAAqB,gBAAiF;CACpH,IAAI,CAAC,gBAAgB,OAAO;CAC5B,IAAI,eAAe,kBAAkB,UAAU,OAAO;CAGtD,IAAI,eAAe,kBAAkB,UAAU,OAAO;CACtD,OAAO,eAAe,SAAS,iBAAiB,cAAc;AAChE;AAEA,SAAS,aAAa,UAAmC,KAAiC;CACxF,MAAM,QAAQ,SAAS,QAAQ,SAAS;CACxC,OAAO,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK,KAAK,QAAQ,IAAI,QAAQ,KAAA;AACrF;;;;;;;;AASA,SAAgB,eAAe,MAAmC;CAChE,MAAM,WAAW,KAAK,YAAY,CAAC;CACnC,IAAI,KAAK,WAAW,gBAAgB;EAClC,MAAM,cAAc,aAAa,UAAU,mBAAmB;EAC9D,IAAI,gBAAgB,KAAA,GAAW,OAAO,iBAAiB;CACzD;CACA,IAAI,KAAK,WAAW,aAAa;EAC/B,MAAM,oBAAoB,aAAa,UAAU,yBAAyB;EAC1E,IAAI,sBAAsB,KAAA,GAAW,OAAO,cAAc;CAC5D;CACA,IAAI,KAAK,WAAW,kBAAkB,OAAO,SAAS,eAAe,UAAU;EAC7E,MAAM,aAAa,SAAS,WAAW,KAAK;EAC5C,IAAI,YAAY,OAAO,kBAAkB,WAAW,YAAY;CAClE;CACA,OAAO,gBAAgB,KAAK;AAC9B"}
+{"version":3,"file":"work-item-branch.js","names":[],"sources":["../src/work-item-branch.ts"],"sourcesContent":["import type { ExternalWorkItemSource } from './storage/domains/work-items/base.js';\n\n/**\n * Where a card came from, in the vocabulary branch naming reads. Server rows\n * map their `externalSource` into this with {@link workItemBranchSource}; the\n * board's own `WorkItem['source']` is already this union.\n */\nexport type WorkItemBranchSource = 'github-issue' | 'github-pr' | 'linear-issue' | 'slack-thread' | 'manual';\n\nexport interface WorkItemBranchInput {\n  id: string;\n  source: WorkItemBranchSource;\n  metadata?: Record<string, unknown> | null;\n}\n\n/** Map a stored item's provenance onto the source vocabulary branch naming reads. */\nexport function workItemBranchSource(externalSource: ExternalWorkItemSource | null | undefined): WorkItemBranchSource {\n  if (!externalSource) return 'manual';\n  if (externalSource.integrationId === 'linear') return 'linear-issue';\n  // Only GitHub and Linear carry provider identities; anything else (a Slack\n  // thread, say) is a plain work item rather than a mislabeled GitHub issue.\n  if (externalSource.integrationId !== 'github') return 'manual';\n  return externalSource.type === 'pull-request' ? 'github-pr' : 'github-issue';\n}\n\nfunction branchNumber(metadata: Record<string, unknown>, key: string): number | undefined {\n  const value = metadata[key] ?? metadata.number;\n  return typeof value === 'number' && Number.isInteger(value) && value > 0 ? value : undefined;\n}\n\n/** The provider number a GitHub card carries — the `#12` its runs and thread titles name it by. */\nexport function workItemNumber(item: Pick<WorkItemBranchInput, 'source' | 'metadata'>): number | undefined {\n  const metadata = item.metadata ?? {};\n  if (item.source === 'github-issue') return branchNumber(metadata, 'githubIssueNumber');\n  if (item.source === 'github-pr') return branchNumber(metadata, 'githubPullRequestNumber');\n  return;\n}\n\n/** How a card names its thread: a Linear title already opens with its identifier, a GitHub card gets its number here. */\nexport function workItemThreadTitle(\n  item: Pick<WorkItemBranchInput, 'source' | 'metadata'> & { title: string },\n): string {\n  const number = workItemNumber(item);\n  if (number === undefined) return item.title;\n  return `${item.source === 'github-pr' ? 'PR' : 'Issue'} #${number}: ${item.title}`;\n}\n\n/**\n * The git branch an item's runs and sessions share, one grammar for both sides\n * of the wire: the dispatcher names autonomous run branches with it and the\n * board opens card sessions on it, so both converge on one checkout per item.\n * Cards without a provider identity (manual, Slack) and cards whose metadata\n * lost their identifier fall back to the id-derived branch.\n */\nexport function workItemBranch(item: WorkItemBranchInput): string {\n  const metadata = item.metadata ?? {};\n  const githubNumber = workItemNumber(item);\n  if (githubNumber !== undefined) {\n    return item.source === 'github-issue' ? `factory/issue-${githubNumber}` : `factory/pr-${githubNumber}`;\n  }\n  if (item.source === 'linear-issue' && typeof metadata.identifier === 'string') {\n    const identifier = metadata.identifier.trim();\n    if (identifier) return `factory/linear-${identifier.toLowerCase()}`;\n  }\n  return `factory/item-${item.id}`;\n}\n"],"mappings":";;AAgBA,SAAgB,qBAAqB,gBAAiF;CACpH,IAAI,CAAC,gBAAgB,OAAO;CAC5B,IAAI,eAAe,kBAAkB,UAAU,OAAO;CAGtD,IAAI,eAAe,kBAAkB,UAAU,OAAO;CACtD,OAAO,eAAe,SAAS,iBAAiB,cAAc;AAChE;AAEA,SAAS,aAAa,UAAmC,KAAiC;CACxF,MAAM,QAAQ,SAAS,QAAQ,SAAS;CACxC,OAAO,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK,KAAK,QAAQ,IAAI,QAAQ,KAAA;AACrF;;AAGA,SAAgB,eAAe,MAA4E;CACzG,MAAM,WAAW,KAAK,YAAY,CAAC;CACnC,IAAI,KAAK,WAAW,gBAAgB,OAAO,aAAa,UAAU,mBAAmB;CACrF,IAAI,KAAK,WAAW,aAAa,OAAO,aAAa,UAAU,yBAAyB;AAE1F;;AAGA,SAAgB,oBACd,MACQ;CACR,MAAM,SAAS,eAAe,IAAI;CAClC,IAAI,WAAW,KAAA,GAAW,OAAO,KAAK;CACtC,OAAO,GAAG,KAAK,WAAW,cAAc,OAAO,QAAQ,IAAI,OAAO,IAAI,KAAK;AAC7E;;;;;;;;AASA,SAAgB,eAAe,MAAmC;CAChE,MAAM,WAAW,KAAK,YAAY,CAAC;CACnC,MAAM,eAAe,eAAe,IAAI;CACxC,IAAI,iBAAiB,KAAA,GACnB,OAAO,KAAK,WAAW,iBAAiB,iBAAiB,iBAAiB,cAAc;CAE1F,IAAI,KAAK,WAAW,kBAAkB,OAAO,SAAS,eAAe,UAAU;EAC7E,MAAM,aAAa,SAAS,WAAW,KAAK;EAC5C,IAAI,YAAY,OAAO,kBAAkB,WAAW,YAAY;CAClE;CACA,OAAO,gBAAgB,KAAK;AAC9B"}

package/dist/workspace.d.ts

@@ -4,6 +4,7 @@ import { Workspace } from '@mastra/core/workspace';
 import type { SkillSource, SkillSourceEntry, SkillSourceStat, WorkspaceSandbox } from '@mastra/core/workspace';
 import type { MastraFactorySandboxConfig } from './factory.js';
 import type { GithubIntegration } from './integrations/github/integration.js';
+import type { FactoryProjectsStorage } from './storage/domains/projects/base.js';
 import type { WorkItemsStorage } from './storage/domains/work-items/base.js';
 export declare const BUNDLED_FACTORY_SKILLS_PATH: string;
 /**
@@ -43,6 +44,8 @@ export interface CreateWorkspaceFactoryOptions {
      * review-board sessions get the reviewer PAT as `GH_TOKEN`. Optional —
      * without it every session uses the default (worker) PAT. */
     workItems?: Pick<WorkItemsStorage, 'findRunBindingBySession'>;
+    /** Projects storage used to authorize workspace-free supervisor sessions. */
+    projects?: Pick<FactoryProjectsStorage, 'get'>;
     /** Runtime workspace/token registrations invalidated when a session retires. */
     workspaceRegistry?: FactoryWorkspaceRegistry;
 }

package/dist/workspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../src/workspace.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AAE/E,OAAO,KAAK,EAAE,mBAAmB,EAA2B,MAAM,mCAAmC,CAAC;AAItG,OAAO,EAAoB,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,KAAK,EAEV,WAAW,EACX,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAwB9E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAM7E,eAAO,MAAM,2BAA2B,QAQQ,CAAC;AAEjD;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,GAAE,MAAsB,GAAG,MAAM,GAAG,SAAS,CAS7F;AAED,eAAO,MAAM,mBAAmB,aAO9B,CAAC;AAEH,qBAAa,kBAAmB,YAAW,WAAW;;IAMlD,QAAQ,CAAC,QAAQ,EAAE,WAAW;gBAArB,QAAQ,EAAE,WAAW,EAC9B,kBAAkB,EAAE,MAAM,EAAE,EAC5B,eAAe,GAAE,MAAM,GAAG,SAA2C;IAqBjE,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAO3C,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAMjD,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;IAMrD,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAyB7D,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAI7C;AAuDD,KAAK,uBAAuB,GAAG,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;AAEzE;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,OAAO,CAAC;AAEnD,MAAM,WAAW,6BAA6B;IAC5C,iEAAiE;IACjE,OAAO,CAAC,EAAE,0BAA0B,CAAC;IACrC,4BAA4B;IAC5B,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,gFAAgF;IAChF,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B;;iEAE6D;IAC7D,SAAS,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,yBAAyB,CAAC,CAAC;IAC9D,gFAAgF;IAChF,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;CAC9C;AAED,KAAK,mBAAmB,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAEtD,gFAAgF;AAChF,qBAAa,wBAAwB;;IAInC,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAI/B,QAAQ,CACZ,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,mBAAmB,GAC9B,OAAO,CAAC,OAAO,CAAC;IAWb,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAS1D;AAED,wBAAgB,sBAAsB,CAAC,OAAO,GAAE,6BAAkC,IAuBlE,4CAA4C,uBAAuB,2MAwclF"}
+{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../src/workspace.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AAE/E,OAAO,KAAK,EAAE,mBAAmB,EAA2B,MAAM,mCAAmC,CAAC;AAItG,OAAO,EAAoB,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,KAAK,EAEV,WAAW,EACX,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAwB9E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAO7E,eAAO,MAAM,2BAA2B,QAQQ,CAAC;AAEjD;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,GAAE,MAAsB,GAAG,MAAM,GAAG,SAAS,CAS7F;AAED,eAAO,MAAM,mBAAmB,aAO9B,CAAC;AAEH,qBAAa,kBAAmB,YAAW,WAAW;;IAMlD,QAAQ,CAAC,QAAQ,EAAE,WAAW;gBAArB,QAAQ,EAAE,WAAW,EAC9B,kBAAkB,EAAE,MAAM,EAAE,EAC5B,eAAe,GAAE,MAAM,GAAG,SAA2C;IAqBjE,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAO3C,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAMjD,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;IAMrD,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAyB7D,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAI7C;AAuDD,KAAK,uBAAuB,GAAG,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;AAEzE;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,OAAO,CAAC;AAEnD,MAAM,WAAW,6BAA6B;IAC5C,iEAAiE;IACjE,OAAO,CAAC,EAAE,0BAA0B,CAAC;IACrC,4BAA4B;IAC5B,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,gFAAgF;IAChF,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B;;iEAE6D;IAC7D,SAAS,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,yBAAyB,CAAC,CAAC;IAC9D,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;IAC/C,gFAAgF;IAChF,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;CAC9C;AAED,KAAK,mBAAmB,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAEtD,gFAAgF;AAChF,qBAAa,wBAAwB;;IAInC,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAI/B,QAAQ,CACZ,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,mBAAmB,GAC9B,OAAO,CAAC,OAAO,CAAC;IAWb,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAS1D;AAED,wBAAgB,sBAAsB,CAAC,OAAO,GAAE,6BAAkC,IAuBlE,4CAA4C,uBAAuB,2MAidlF"}

package/dist/workspace.js

@@ -1,15 +1,16 @@
 import { timedPhase } from "./timing.js";
-import { getFactoryAuthUserFromContext, getFactoryAuthUserId } from "./auth.js";
+import { getFactoryAuthOrgId, getFactoryAuthUserFromContext, getFactoryAuthUserId } from "./auth.js";
 import { getGithubPat } from "./integrations/github/pat.js";
 import { registerGithubPatKind, registerGithubTokenInjector } from "./integrations/github/token-refresh.js";
+import { DEFAULT_COMMAND_TIMEOUT_MS, SetupCommandError, checkoutSessionBranch, materializeRepo, runSetupCommand, runTeardownCommand } from "./integrations/github/sandbox.js";
 import { requireExec } from "./sandbox/materialization.js";
 import { createSessionSetupHook, evictSessionSandbox, getSessionSandbox, hasFailedSetupCommand, recordFailedSetupCommand, resolveSessionWorkdir } from "./sandbox/session-sandbox.js";
-import { DEFAULT_COMMAND_TIMEOUT_MS, SetupCommandError, checkoutSessionBranch, materializeRepo, runSetupCommand, runTeardownCommand } from "./integrations/github/sandbox.js";
 import { getFactorySessionAddress } from "./rules/binding-context.js";
+import { parseSupervisorResourceId } from "./supervisor/session.js";
 import path, { dirname, join } from "path";
-import { LocalSkillSource, Workspace } from "@mastra/core/workspace";
 import { DEFAULT_CONFIG_DIR } from "@mastra/code-sdk/constants";
 import { SandboxFilesystem } from "@mastra/code-sdk/agents/sandbox-filesystem";
+import { LocalSkillSource, Workspace } from "@mastra/core/workspace";
 import { existsSync } from "fs";
 import { fileURLToPath } from "url";
 import { MASTRACODE_WORKSPACE_TOOLS } from "@mastra/code-sdk/agents/tool-availability";
@@ -173,7 +174,7 @@ var FactoryWorkspaceRegistry = class {
 	}
 };
 function createWorkspaceFactory(options = {}) {
-	const { sandbox: sandboxConfig, github, workItems } = options;
+	const { sandbox: sandboxConfig, github, projects, workItems } = options;
 	const eagerSandboxStart = options.sandboxStart === "eager";
 	const workspaceRegistry = options.workspaceRegistry ?? new FactoryWorkspaceRegistry();
 	const githubTokenInjectors = /* @__PURE__ */ new Map();
@@ -182,6 +183,15 @@ function createWorkspaceFactory(options = {}) {
 	return async ({ requestContext, mastra, skillExtension }) => {
 		const effectiveSkillExtension = skillExtension ?? factorySkillExtension;
 		const ctx = requestContext.get("controller");
+		const supervisorProjectId = parseSupervisorResourceId(ctx?.resourceId);
+		if (supervisorProjectId) {
+			const orgId = getFactoryAuthOrgId(getFactoryAuthUserFromContext(requestContext));
+			if (!(orgId && projects ? await projects.get({
+				orgId,
+				id: supervisorProjectId
+			}) : null)) throw new Error(`Factory supervisor ${supervisorProjectId} is not available to the current user`);
+			return;
+		}
 		const session = ctx?.resourceId && github ? await github.sourceControlStorage.sessions.getBySessionId(ctx.resourceId) : null;
 		if (!session) return;
 		const user = getFactoryAuthUserFromContext(requestContext);
@@ -268,7 +278,7 @@ function createWorkspaceFactory(options = {}) {
 		const fireEagerStart = () => {
 			if (!startEagerly) return;
 			startEagerly = false;
-			sessionEntry.sandbox.start?.().catch((error) => {
+			Promise.resolve().then(() => sessionEntry.sandbox.start?.()).catch((error) => {
 				console.warn(`[factory] Eager sandbox start for session ${session.id} failed:`, error);
 			});
 		};