@mastra/factory 0.2.2-alpha.3 → 0.2.2

package/dist/workspace.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace.js","names":["#factorySource","#fallbackSkillRoots","#isFactoryPath","#factoryPath"],"sources":["../src/workspace.ts"],"sourcesContent":["import { existsSync } from 'node:fs';\nimport path, { dirname, join } from 'node:path';\nimport { fileURLToPath } from 'node:url';\nimport { SandboxFilesystem } from '@mastra/code-sdk/agents/sandbox-filesystem';\nimport { MASTRACODE_WORKSPACE_TOOLS } from '@mastra/code-sdk/agents/tool-availability';\nimport { getDynamicWorkspace } from '@mastra/code-sdk/agents/workspace';\nimport type { WorkspaceSkillExtension } from '@mastra/code-sdk/agents/workspace';\nimport { DEFAULT_CONFIG_DIR } from '@mastra/code-sdk/constants';\nimport type { MastraCodeState } from '@mastra/code-sdk/schema';\nimport type { AgentControllerRequestContext } from '@mastra/core/agent-controller';\nimport { LocalSandbox, LocalSkillSource, Workspace } from '@mastra/core/workspace';\nimport type { SkillSource, SkillSourceEntry, SkillSourceStat } from '@mastra/core/workspace';\nimport { getFactoryAuthUserId } from './auth.js';\nimport type { FactoryAuthUser } from './auth.js';\nimport type { MastraFactorySandboxConfig } from './factory.js';\nimport type { GithubIntegration } from './integrations/github/integration.js';\nimport { getGithubPat } from './integrations/github/pat.js';\nimport type { GithubPatKind } from './integrations/github/pat.js';\nimport { checkoutSessionBranch, materializeRepo, runWorktreeSetup } from './integrations/github/sandbox.js';\nimport { registerGithubPatKind, registerGithubTokenInjector } from './integrations/github/token-refresh.js';\nimport { getFactorySessionAddress } from './rules/binding-context.js';\nimport type { SandboxBindingStore, SandboxFleet } from './sandbox/fleet.js';\nimport type { WorkItemsStorage } from './storage/domains/work-items/base.js';\n\nconst WORKSPACE_ID_PREFIX = 'mfw';\nconst SESSION_CHECKPOINT_PREFIX = 'mastracode-session';\n\nexport function checkpointNameForSession(sessionId: string): string {\n  return `${SESSION_CHECKPOINT_PREFIX}-${sessionId}`;\n}\n\nconst bundleDirectory = dirname(fileURLToPath(import.meta.url));\nconst bundledFactorySkillsPath = join(bundleDirectory, 'factory-skills');\nconst FACTORY_SKILLS_SOURCE_PATH =\n  [\n    // Deploy bundle: the consumer copies `factory-skills/` next to the built\n    // server module (e.g. via its public/ dir).\n    bundledFactorySkillsPath,\n    // Package layout: `dist/../factory-skills` (also `src/../factory-skills`\n    // when running tests against sources).\n    join(bundleDirectory, '..', 'factory-skills'),\n    // Consumer repo running from its package root before a build.\n    join(process.cwd(), 'src', 'mastra', 'public', 'factory-skills'),\n  ].find(existsSync) ?? bundledFactorySkillsPath;\nconst FACTORY_SKILLS_MOUNT = path.resolve(path.parse(process.cwd()).root, '__mastracode_factory_skills__');\nconst FACTORY_SKILL_NAMES = new Set(['configure-factory-rules', 'factory-plan', 'factory-review', 'factory-triage']);\n\nclass FactorySkillSource implements SkillSource {\n  readonly #factorySource = new LocalSkillSource({ basePath: FACTORY_SKILLS_SOURCE_PATH });\n  readonly #fallbackSkillRoots: Set<string>;\n\n  constructor(\n    readonly fallback: SkillSource,\n    fallbackSkillRoots: string[],\n  ) {\n    this.#fallbackSkillRoots = new Set(fallbackSkillRoots.map(skillPath => path.normalize(skillPath)));\n  }\n\n  #isFactoryPath(skillPath: string): boolean {\n    const normalized = path.normalize(skillPath);\n    return normalized === FACTORY_SKILLS_MOUNT || normalized.startsWith(`${FACTORY_SKILLS_MOUNT}${path.sep}`);\n  }\n\n  #factoryPath(skillPath: string): string {\n    return path.relative(FACTORY_SKILLS_MOUNT, path.normalize(skillPath));\n  }\n\n  exists(skillPath: string): Promise<boolean> {\n    return this.#isFactoryPath(skillPath)\n      ? this.#factorySource.exists(this.#factoryPath(skillPath))\n      : this.fallback.exists(skillPath);\n  }\n\n  stat(skillPath: string): Promise<SkillSourceStat> {\n    return this.#isFactoryPath(skillPath)\n      ? this.#factorySource.stat(this.#factoryPath(skillPath))\n      : this.fallback.stat(skillPath);\n  }\n\n  readFile(skillPath: string): Promise<string | Buffer> {\n    return this.#isFactoryPath(skillPath)\n      ? this.#factorySource.readFile(this.#factoryPath(skillPath))\n      : this.fallback.readFile(skillPath);\n  }\n\n  async readdir(skillPath: string): Promise<SkillSourceEntry[]> {\n    if (this.#isFactoryPath(skillPath)) {\n      return this.#factorySource.readdir(this.#factoryPath(skillPath));\n    }\n    const entries = await this.fallback.readdir(skillPath);\n    if (this.#fallbackSkillRoots.has(path.normalize(skillPath))) {\n      return entries.filter(entry => !FACTORY_SKILL_NAMES.has(entry.name));\n    }\n    return entries;\n  }\n\n  realpath(skillPath: string): Promise<string> {\n    if (this.#isFactoryPath(skillPath)) return Promise.resolve(path.normalize(skillPath));\n    return this.fallback.realpath ? this.fallback.realpath(skillPath) : Promise.resolve(skillPath);\n  }\n}\n\nconst factorySkillExtension: WorkspaceSkillExtension = {\n  id: 'web-factory',\n  paths: [FACTORY_SKILLS_MOUNT],\n  createSource: (fallback, fallbackSkillRoots) => new FactorySkillSource(fallback, fallbackSkillRoots),\n};\n\ntype DynamicWorkspaceContext = Parameters<typeof getDynamicWorkspace>[0];\n\nexport interface CreateWorkspaceFactoryOptions {\n  /** Factory sandbox runtime config (template machine + workdir base). */\n  sandbox?: MastraFactorySandboxConfig;\n  /** GitHub integration used to resolve Factory sessions and mint repo tokens. */\n  github?: GithubIntegration;\n  /** Fleet the per-session sandboxes are provisioned/reattached through. */\n  fleet?: SandboxFleet;\n  /** Work-items storage used to resolve the session's run-binding role, so\n   * review-board sessions get the reviewer PAT as `GH_TOKEN`. Optional —\n   * without it every session uses the default (worker) PAT. */\n  workItems?: Pick<WorkItemsStorage, 'findRunBindingBySession'>;\n}\n\nexport function createWorkspaceFactory(options: CreateWorkspaceFactoryOptions = {}) {\n  const { sandbox: sandboxConfig, github, fleet, workItems } = options;\n  const isLocalSandbox = sandboxConfig?.machine instanceof LocalSandbox;\n  const githubTokenInjectors = new Map<\n    string,\n    { inject: (token: string) => void; patKind: GithubPatKind; ghToken: string }\n  >();\n  // Concurrent requests for the same session (thread list + activity polling +\n  // chat) must not each provision a sandbox and clone the repository. The\n  // first caller materializes; followers await the same promise.\n  const inflightMaterializations = new Map<string, Promise<Workspace>>();\n\n  return async ({ requestContext, mastra, skillExtension }: DynamicWorkspaceContext) => {\n    const effectiveSkillExtension = skillExtension ?? factorySkillExtension;\n    const ctx = requestContext.get('controller') as AgentControllerRequestContext<MastraCodeState> | undefined;\n    const session =\n      ctx?.resourceId && github ? await github.sourceControlStorage.sessions.getBySessionId(ctx.resourceId) : null;\n\n    if (!session) {\n      if (sandboxConfig && !isLocalSandbox) {\n        throw new Error('A Factory session ID is required to create a remote sandbox workspace');\n      }\n      return getDynamicWorkspace({ requestContext, mastra, skillExtension: effectiveSkillExtension });\n    }\n\n    const user = requestContext.get('user') as FactoryAuthUser | undefined;\n    const userId = getFactoryAuthUserId(user);\n    if (!user?.organizationId || !userId || user.organizationId !== session.orgId || userId !== session.userId) {\n      throw new Error(`Factory session ${session.sessionId} is not available to the current user`);\n    }\n    if (!sandboxConfig || !github || !fleet) {\n      throw new Error('GitHub and sandbox providers are required to create a Factory session workspace');\n    }\n\n    const storage = github.sourceControlStorage;\n    const projectRepository = await storage.projectRepositories.get({\n      orgId: session.orgId,\n      id: session.projectRepositoryId,\n    });\n    if (!projectRepository) throw new Error(`Repository link ${session.projectRepositoryId} was not found`);\n    const connection = await storage.connections.get({ orgId: session.orgId, id: projectRepository.connectionId });\n    const repository = await storage.repositories.get({ orgId: session.orgId, id: projectRepository.repositoryId });\n    if (!connection || !repository) throw new Error(`Repository link ${session.projectRepositoryId} is incomplete`);\n    const installation = await storage.installations.get({ orgId: session.orgId, id: connection.installationId });\n    if (!installation) throw new Error(`GitHub installation ${connection.installationId} was not found`);\n    const repoFullName = repository.slug;\n\n    const workdir = isLocalSandbox\n      ? fleet.computeLocalSessionWorkdir(repoFullName, session.id)\n      : (session.sandboxWorkdir ?? projectRepository.sandboxWorkdir);\n    const binding: SandboxBindingStore = {\n      sandboxId: session.sandboxId,\n      checkpointName: checkpointNameForSession(session.id),\n      setSandboxId: async id => {\n        await storage.sessions.setSandbox({ id: session.id, sandboxId: id, sandboxWorkdir: workdir });\n        session.sandboxId = id;\n        session.sandboxWorkdir = workdir;\n      },\n      clear: async () => {\n        await storage.sessions.setSandbox({ id: session.id, sandboxId: null, sandboxWorkdir: workdir });\n        session.sandboxId = null;\n      },\n    };\n\n    const extensionId = effectiveSkillExtension ? `-${effectiveSkillExtension.id}` : '';\n    const workspaceId = `${WORKSPACE_ID_PREFIX}-${projectRepository.id}-${session.id}${extensionId}`;\n    const configDir = sandboxConfig.workdir ?? DEFAULT_CONFIG_DIR;\n    try {\n      const existing = mastra?.getWorkspaceById(workspaceId) as Workspace | undefined;\n      if (existing) {\n        existing.setToolsConfig(MASTRACODE_WORKSPACE_TOOLS);\n        const registered = githubTokenInjectors.get(workspaceId);\n        if (registered) {\n          registerGithubTokenInjector(requestContext, registered.inject);\n          registerGithubPatKind(requestContext, registered.patKind);\n          // A PAT saved in Settings after this sandbox was provisioned must\n          // reach the running sandbox without a server restart — re-read it\n          // on every reuse and push it into the live sandbox when it changed.\n          // Best-effort: a failed read or inject keeps the installed token.\n          try {\n            const pat = await getGithubPat(() => github.integrationStorage, session.orgId, registered.patKind);\n            if (pat && pat !== registered.ghToken) {\n              registered.inject(pat);\n            }\n          } catch {\n            // Keep the token already installed in the sandbox.\n          }\n        }\n        return existing;\n      }\n    } catch {\n      // Not registered yet.\n    }\n\n    const materialize = async (): Promise<Workspace> => {\n      const access = await github.versionControl.getRepositoryAccess({\n        orgId: session.orgId,\n        repositoryId: repository.id,\n      });\n      const token = access.authorization?.token;\n      if (!token) throw new Error('Repository access did not include a bearer token for the Factory session');\n\n      // The `gh` CLI needs a PAT when the org configured one (installation\n      // tokens 403 on integration-restricted endpoints); git clone/checkout\n      // below keep using the minted installation token. Review-board sessions\n      // (run-binding role `review`) authenticate `gh` as the reviewer account\n      // when a reviewer token is configured; everything else — including\n      // sessions with no resolvable run binding — uses the worker token.\n      let patKind: GithubPatKind = 'default';\n      if (workItems) {\n        try {\n          const address = getFactorySessionAddress(requestContext);\n          const runBinding = address ? await workItems.findRunBindingBySession(address) : null;\n          if (runBinding?.role === 'review' && runBinding.orgId === session.orgId) patKind = 'reviewer';\n        } catch {\n          // No resolvable binding — worker token.\n        }\n      }\n      const ghCliToken = (await getGithubPat(() => github.integrationStorage, session.orgId, patKind)) ?? token;\n\n      const sandbox = await fleet.ensureSandbox(\n        binding,\n        { GH_TOKEN: ghCliToken },\n        undefined,\n        isLocalSandbox ? { workingDirectory: workdir } : {},\n      );\n      await materializeRepo({\n        row: { id: session.id, sandboxWorkdir: workdir, materializedAt: session.materializedAt },\n        repoInfo: { repoFullName: repoFullName, defaultBranch: repository.defaultBranch },\n        sandbox,\n        token,\n        storage: storage.sessions,\n      });\n      await checkoutSessionBranch(sandbox, workdir, {\n        branch: session.branch,\n        baseBranch: session.baseBranch || projectRepository.branch || repository.defaultBranch,\n        token,\n        repoFullName: repoFullName,\n      });\n      if (projectRepository.setupCommand) await runWorktreeSetup(sandbox, workdir, projectRepository.setupCommand);\n\n      const injectGithubToken = (freshToken: string) => {\n        if (!sandbox.setEnvironmentVariable) {\n          throw new Error('The active sandbox provider does not support runtime GitHub token refresh.');\n        }\n        sandbox.setEnvironmentVariable('GH_TOKEN', freshToken);\n        const registered = githubTokenInjectors.get(workspaceId);\n        if (registered) registered.ghToken = freshToken;\n      };\n      githubTokenInjectors.set(workspaceId, { inject: injectGithubToken, patKind, ghToken: ghCliToken });\n      registerGithubTokenInjector(requestContext, injectGithubToken);\n      registerGithubPatKind(requestContext, patKind);\n\n      const filesystem = new SandboxFilesystem({ sandbox, workdir });\n      const projectSkillPaths = [path.join(configDir, 'skills'), '.claude/skills', '.agents/skills'];\n      const skillPaths = [...(effectiveSkillExtension?.paths ?? []), ...projectSkillPaths];\n      return new Workspace({\n        id: workspaceId,\n        name: 'Mastra Code Factory Session Workspace',\n        filesystem,\n        sandbox: sandbox as unknown as ConstructorParameters<typeof Workspace>[0]['sandbox'],\n        tools: MASTRACODE_WORKSPACE_TOOLS,\n        skills: skillPaths,\n        skillSource: effectiveSkillExtension?.createSource(filesystem, projectSkillPaths) ?? filesystem,\n      });\n    };\n\n    // Dedupe concurrent materializations of the same workspace: followers\n    // await the leader's promise instead of provisioning a second sandbox,\n    // then bind the shared token injector into their own request context.\n    const inflight = inflightMaterializations.get(workspaceId);\n    if (inflight) {\n      const workspace = await inflight;\n      const registered = githubTokenInjectors.get(workspaceId);\n      if (registered) {\n        registerGithubTokenInjector(requestContext, registered.inject);\n        registerGithubPatKind(requestContext, registered.patKind);\n      }\n      return workspace;\n    }\n    const materialization = materialize();\n    inflightMaterializations.set(workspaceId, materialization);\n    try {\n      return await materialization;\n    } finally {\n      inflightMaterializations.delete(workspaceId);\n    }\n  };\n}\n\nexport const getFactoryWorkspace = createWorkspaceFactory();\n"],"mappings":";;;;;;;;;;;;;;AAwBA,MAAM,sBAAsB;AAC5B,MAAM,4BAA4B;AAElC,SAAgB,yBAAyB,WAA2B;CAClE,OAAO,GAAG,0BAA0B,GAAG;AACzC;AAEA,MAAM,kBAAkB,QAAQ,cAAc,OAAO,KAAK,GAAG,CAAC;AAC9D,MAAM,2BAA2B,KAAK,iBAAiB,gBAAgB;AACvE,MAAM,6BACJ;CAGE;CAGA,KAAK,iBAAiB,MAAM,gBAAgB;CAE5C,KAAK,QAAQ,IAAI,GAAG,OAAO,UAAU,UAAU,gBAAgB;AACjE,CAAC,CAAC,KAAK,UAAU,KAAK;AACxB,MAAM,uBAAuB,KAAK,QAAQ,KAAK,MAAM,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,+BAA+B;AACzG,MAAM,sCAAsB,IAAI,IAAI;CAAC;CAA2B;CAAgB;CAAkB;AAAgB,CAAC;AAEnH,IAAM,qBAAN,MAAgD;CAKnC;CAJX,iBAA0B,IAAI,iBAAiB,EAAE,UAAU,2BAA2B,CAAC;CACvF;CAEA,YACE,UACA,oBACA;EAFS,KAAA,WAAA;EAGT,KAAKC,sBAAsB,IAAI,IAAI,mBAAmB,KAAI,cAAa,KAAK,UAAU,SAAS,CAAC,CAAC;CACnG;CAEA,eAAe,WAA4B;EACzC,MAAM,aAAa,KAAK,UAAU,SAAS;EAC3C,OAAO,eAAe,wBAAwB,WAAW,WAAW,GAAG,uBAAuB,KAAK,KAAK;CAC1G;CAEA,aAAa,WAA2B;EACtC,OAAO,KAAK,SAAS,sBAAsB,KAAK,UAAU,SAAS,CAAC;CACtE;CAEA,OAAO,WAAqC;EAC1C,OAAO,KAAKC,eAAe,SAAS,IAChC,KAAKF,eAAe,OAAO,KAAKG,aAAa,SAAS,CAAC,IACvD,KAAK,SAAS,OAAO,SAAS;CACpC;CAEA,KAAK,WAA6C;EAChD,OAAO,KAAKD,eAAe,SAAS,IAChC,KAAKF,eAAe,KAAK,KAAKG,aAAa,SAAS,CAAC,IACrD,KAAK,SAAS,KAAK,SAAS;CAClC;CAEA,SAAS,WAA6C;EACpD,OAAO,KAAKD,eAAe,SAAS,IAChC,KAAKF,eAAe,SAAS,KAAKG,aAAa,SAAS,CAAC,IACzD,KAAK,SAAS,SAAS,SAAS;CACtC;CAEA,MAAM,QAAQ,WAAgD;EAC5D,IAAI,KAAKD,eAAe,SAAS,GAC/B,OAAO,KAAKF,eAAe,QAAQ,KAAKG,aAAa,SAAS,CAAC;EAEjE,MAAM,UAAU,MAAM,KAAK,SAAS,QAAQ,SAAS;EACrD,IAAI,KAAKF,oBAAoB,IAAI,KAAK,UAAU,SAAS,CAAC,GACxD,OAAO,QAAQ,QAAO,UAAS,CAAC,oBAAoB,IAAI,MAAM,IAAI,CAAC;EAErE,OAAO;CACT;CAEA,SAAS,WAAoC;EAC3C,IAAI,KAAKC,eAAe,SAAS,GAAG,OAAO,QAAQ,QAAQ,KAAK,UAAU,SAAS,CAAC;EACpF,OAAO,KAAK,SAAS,WAAW,KAAK,SAAS,SAAS,SAAS,IAAI,QAAQ,QAAQ,SAAS;CAC/F;AACF;AAEA,MAAM,wBAAiD;CACrD,IAAI;CACJ,OAAO,CAAC,oBAAoB;CAC5B,eAAe,UAAU,uBAAuB,IAAI,mBAAmB,UAAU,kBAAkB;AACrG;AAiBA,SAAgB,uBAAuB,UAAyC,CAAC,GAAG;CAClF,MAAM,EAAE,SAAS,eAAe,QAAQ,OAAO,cAAc;CAC7D,MAAM,iBAAiB,eAAe,mBAAmB;CACzD,MAAM,uCAAuB,IAAI,IAG/B;CAIF,MAAM,2CAA2B,IAAI,IAAgC;CAErE,OAAO,OAAO,EAAE,gBAAgB,QAAQ,qBAA8C;EACpF,MAAM,0BAA0B,kBAAkB;EAClD,MAAM,MAAM,eAAe,IAAI,YAAY;EAC3C,MAAM,UACJ,KAAK,cAAc,SAAS,MAAM,OAAO,qBAAqB,SAAS,eAAe,IAAI,UAAU,IAAI;EAE1G,IAAI,CAAC,SAAS;GACZ,IAAI,iBAAiB,CAAC,gBACpB,MAAM,IAAI,MAAM,uEAAuE;GAEzF,OAAO,oBAAoB;IAAE;IAAgB;IAAQ,gBAAgB;GAAwB,CAAC;EAChG;EAEA,MAAM,OAAO,eAAe,IAAI,MAAM;EACtC,MAAM,SAAS,qBAAqB,IAAI;EACxC,IAAI,CAAC,MAAM,kBAAkB,CAAC,UAAU,KAAK,mBAAmB,QAAQ,SAAS,WAAW,QAAQ,QAClG,MAAM,IAAI,MAAM,mBAAmB,QAAQ,UAAU,sCAAsC;EAE7F,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,OAChC,MAAM,IAAI,MAAM,iFAAiF;EAGnG,MAAM,UAAU,OAAO;EACvB,MAAM,oBAAoB,MAAM,QAAQ,oBAAoB,IAAI;GAC9D,OAAO,QAAQ;GACf,IAAI,QAAQ;EACd,CAAC;EACD,IAAI,CAAC,mBAAmB,MAAM,IAAI,MAAM,mBAAmB,QAAQ,oBAAoB,eAAe;EACtG,MAAM,aAAa,MAAM,QAAQ,YAAY,IAAI;GAAE,OAAO,QAAQ;GAAO,IAAI,kBAAkB;EAAa,CAAC;EAC7G,MAAM,aAAa,MAAM,QAAQ,aAAa,IAAI;GAAE,OAAO,QAAQ;GAAO,IAAI,kBAAkB;EAAa,CAAC;EAC9G,IAAI,CAAC,cAAc,CAAC,YAAY,MAAM,IAAI,MAAM,mBAAmB,QAAQ,oBAAoB,eAAe;EAE9G,IAAI,CAAC,MADsB,QAAQ,cAAc,IAAI;GAAE,OAAO,QAAQ;GAAO,IAAI,WAAW;EAAe,CAAC,GACzF,MAAM,IAAI,MAAM,uBAAuB,WAAW,eAAe,eAAe;EACnG,MAAM,eAAe,WAAW;EAEhC,MAAM,UAAU,iBACZ,MAAM,2BAA2B,cAAc,QAAQ,EAAE,IACxD,QAAQ,kBAAkB,kBAAkB;EACjD,MAAM,UAA+B;GACnC,WAAW,QAAQ;GACnB,gBAAgB,yBAAyB,QAAQ,EAAE;GACnD,cAAc,OAAM,OAAM;IACxB,MAAM,QAAQ,SAAS,WAAW;KAAE,IAAI,QAAQ;KAAI,WAAW;KAAI,gBAAgB;IAAQ,CAAC;IAC5F,QAAQ,YAAY;IACpB,QAAQ,iBAAiB;GAC3B;GACA,OAAO,YAAY;IACjB,MAAM,QAAQ,SAAS,WAAW;KAAE,IAAI,QAAQ;KAAI,WAAW;KAAM,gBAAgB;IAAQ,CAAC;IAC9F,QAAQ,YAAY;GACtB;EACF;EAEA,MAAM,cAAc,0BAA0B,IAAI,wBAAwB,OAAO;EACjF,MAAM,cAAc,GAAG,oBAAoB,GAAG,kBAAkB,GAAG,GAAG,QAAQ,KAAK;EACnF,MAAM,YAAY,cAAc,WAAW;EAC3C,IAAI;GACF,MAAM,WAAW,QAAQ,iBAAiB,WAAW;GACrD,IAAI,UAAU;IACZ,SAAS,eAAe,0BAA0B;IAClD,MAAM,aAAa,qBAAqB,IAAI,WAAW;IACvD,IAAI,YAAY;KACd,4BAA4B,gBAAgB,WAAW,MAAM;KAC7D,sBAAsB,gBAAgB,WAAW,OAAO;KAKxD,IAAI;MACF,MAAM,MAAM,MAAM,mBAAmB,OAAO,oBAAoB,QAAQ,OAAO,WAAW,OAAO;MACjG,IAAI,OAAO,QAAQ,WAAW,SAC5B,WAAW,OAAO,GAAG;KAEzB,QAAQ,CAER;IACF;IACA,OAAO;GACT;EACF,QAAQ,CAER;EAEA,MAAM,cAAc,YAAgC;GAKlD,MAAM,SAAQ,MAJO,OAAO,eAAe,oBAAoB;IAC7D,OAAO,QAAQ;IACf,cAAc,WAAW;GAC3B,CAAC,EAAA,CACoB,eAAe;GACpC,IAAI,CAAC,OAAO,MAAM,IAAI,MAAM,0EAA0E;GAQtG,IAAI,UAAyB;GAC7B,IAAI,WACF,IAAI;IACF,MAAM,UAAU,yBAAyB,cAAc;IACvD,MAAM,aAAa,UAAU,MAAM,UAAU,wBAAwB,OAAO,IAAI;IAChF,IAAI,YAAY,SAAS,YAAY,WAAW,UAAU,QAAQ,OAAO,UAAU;GACrF,QAAQ,CAER;GAEF,MAAM,aAAc,MAAM,mBAAmB,OAAO,oBAAoB,QAAQ,OAAO,OAAO,KAAM;GAEpG,MAAM,UAAU,MAAM,MAAM,cAC1B,SACA,EAAE,UAAU,WAAW,GACvB,KAAA,GACA,iBAAiB,EAAE,kBAAkB,QAAQ,IAAI,CAAC,CACpD;GACA,MAAM,gBAAgB;IACpB,KAAK;KAAE,IAAI,QAAQ;KAAI,gBAAgB;KAAS,gBAAgB,QAAQ;IAAe;IACvF,UAAU;KAAgB;KAAc,eAAe,WAAW;IAAc;IAChF;IACA;IACA,SAAS,QAAQ;GACnB,CAAC;GACD,MAAM,sBAAsB,SAAS,SAAS;IAC5C,QAAQ,QAAQ;IAChB,YAAY,QAAQ,cAAc,kBAAkB,UAAU,WAAW;IACzE;IACc;GAChB,CAAC;GACD,IAAI,kBAAkB,cAAc,MAAM,iBAAiB,SAAS,SAAS,kBAAkB,YAAY;GAE3G,MAAM,qBAAqB,eAAuB;IAChD,IAAI,CAAC,QAAQ,wBACX,MAAM,IAAI,MAAM,4EAA4E;IAE9F,QAAQ,uBAAuB,YAAY,UAAU;IACrD,MAAM,aAAa,qBAAqB,IAAI,WAAW;IACvD,IAAI,YAAY,WAAW,UAAU;GACvC;GACA,qBAAqB,IAAI,aAAa;IAAE,QAAQ;IAAmB;IAAS,SAAS;GAAW,CAAC;GACjG,4BAA4B,gBAAgB,iBAAiB;GAC7D,sBAAsB,gBAAgB,OAAO;GAE7C,MAAM,aAAa,IAAI,kBAAkB;IAAE;IAAS;GAAQ,CAAC;GAC7D,MAAM,oBAAoB;IAAC,KAAK,KAAK,WAAW,QAAQ;IAAG;IAAkB;GAAgB;GAC7F,MAAM,aAAa,CAAC,GAAI,yBAAyB,SAAS,CAAC,GAAI,GAAG,iBAAiB;GACnF,OAAO,IAAI,UAAU;IACnB,IAAI;IACJ,MAAM;IACN;IACS;IACT,OAAO;IACP,QAAQ;IACR,aAAa,yBAAyB,aAAa,YAAY,iBAAiB,KAAK;GACvF,CAAC;EACH;EAKA,MAAM,WAAW,yBAAyB,IAAI,WAAW;EACzD,IAAI,UAAU;GACZ,MAAM,YAAY,MAAM;GACxB,MAAM,aAAa,qBAAqB,IAAI,WAAW;GACvD,IAAI,YAAY;IACd,4BAA4B,gBAAgB,WAAW,MAAM;IAC7D,sBAAsB,gBAAgB,WAAW,OAAO;GAC1D;GACA,OAAO;EACT;EACA,MAAM,kBAAkB,YAAY;EACpC,yBAAyB,IAAI,aAAa,eAAe;EACzD,IAAI;GACF,OAAO,MAAM;EACf,UAAU;GACR,yBAAyB,OAAO,WAAW;EAC7C;CACF;AACF;AAEA,MAAa,sBAAsB,uBAAuB"}
+{"version":3,"file":"workspace.js","names":["#factorySource","#fallbackSkillRoots","#isFactoryPath","#factoryPath"],"sources":["../src/workspace.ts"],"sourcesContent":["import { existsSync } from 'node:fs';\nimport path, { dirname, join } from 'node:path';\nimport { fileURLToPath } from 'node:url';\nimport { SandboxFilesystem } from '@mastra/code-sdk/agents/sandbox-filesystem';\nimport { MASTRACODE_WORKSPACE_TOOLS } from '@mastra/code-sdk/agents/tool-availability';\nimport { getDynamicWorkspace } from '@mastra/code-sdk/agents/workspace';\nimport type { WorkspaceSkillExtension } from '@mastra/code-sdk/agents/workspace';\nimport { DEFAULT_CONFIG_DIR } from '@mastra/code-sdk/constants';\nimport type { MastraCodeState } from '@mastra/code-sdk/schema';\nimport type { AgentControllerRequestContext } from '@mastra/core/agent-controller';\nimport { LocalSandbox, LocalSkillSource, Workspace } from '@mastra/core/workspace';\nimport type { SkillSource, SkillSourceEntry, SkillSourceStat } from '@mastra/core/workspace';\nimport { getFactoryAuthUserId } from './auth.js';\nimport type { FactoryAuthUser } from './auth.js';\nimport type { MastraFactorySandboxConfig } from './factory.js';\nimport type { GithubIntegration } from './integrations/github/integration.js';\nimport { getGithubPat } from './integrations/github/pat.js';\nimport type { GithubPatKind } from './integrations/github/pat.js';\nimport {\n  checkoutSessionBranch,\n  MaterializeError,\n  materializeRepo,\n  runWorktreeSetup,\n} from './integrations/github/sandbox.js';\nimport { registerGithubPatKind, registerGithubTokenInjector } from './integrations/github/token-refresh.js';\nimport { getFactorySessionAddress } from './rules/binding-context.js';\nimport type { SandboxBindingStore, SandboxFleet } from './sandbox/fleet.js';\nimport type { WorkItemsStorage } from './storage/domains/work-items/base.js';\n\nconst WORKSPACE_ID_PREFIX = 'mfw';\nconst SESSION_CHECKPOINT_PREFIX = 'mastracode-session';\n\nexport function checkpointNameForSession(sessionId: string): string {\n  return `${SESSION_CHECKPOINT_PREFIX}-${sessionId}`;\n}\n\nconst bundleDirectory = dirname(fileURLToPath(import.meta.url));\nconst bundledFactorySkillsPath = join(bundleDirectory, 'factory-skills');\nconst FACTORY_SKILLS_SOURCE_PATH =\n  [\n    // Deploy bundle: the consumer copies `factory-skills/` next to the built\n    // server module (e.g. via its public/ dir).\n    bundledFactorySkillsPath,\n    // Package layout: `dist/../factory-skills` (also `src/../factory-skills`\n    // when running tests against sources).\n    join(bundleDirectory, '..', 'factory-skills'),\n    // Consumer repo running from its package root before a build.\n    join(process.cwd(), 'src', 'mastra', 'public', 'factory-skills'),\n  ].find(existsSync) ?? bundledFactorySkillsPath;\nconst FACTORY_SKILLS_MOUNT = path.resolve(path.parse(process.cwd()).root, '__mastracode_factory_skills__');\nconst FACTORY_SKILL_NAMES = new Set(['configure-factory-rules', 'factory-plan', 'factory-review', 'factory-triage']);\n\nclass FactorySkillSource implements SkillSource {\n  readonly #factorySource = new LocalSkillSource({ basePath: FACTORY_SKILLS_SOURCE_PATH });\n  readonly #fallbackSkillRoots: Set<string>;\n\n  constructor(\n    readonly fallback: SkillSource,\n    fallbackSkillRoots: string[],\n  ) {\n    this.#fallbackSkillRoots = new Set(fallbackSkillRoots.map(skillPath => path.normalize(skillPath)));\n  }\n\n  #isFactoryPath(skillPath: string): boolean {\n    const normalized = path.normalize(skillPath);\n    return normalized === FACTORY_SKILLS_MOUNT || normalized.startsWith(`${FACTORY_SKILLS_MOUNT}${path.sep}`);\n  }\n\n  #factoryPath(skillPath: string): string {\n    return path.relative(FACTORY_SKILLS_MOUNT, path.normalize(skillPath));\n  }\n\n  exists(skillPath: string): Promise<boolean> {\n    return this.#isFactoryPath(skillPath)\n      ? this.#factorySource.exists(this.#factoryPath(skillPath))\n      : this.fallback.exists(skillPath);\n  }\n\n  stat(skillPath: string): Promise<SkillSourceStat> {\n    return this.#isFactoryPath(skillPath)\n      ? this.#factorySource.stat(this.#factoryPath(skillPath))\n      : this.fallback.stat(skillPath);\n  }\n\n  readFile(skillPath: string): Promise<string | Buffer> {\n    return this.#isFactoryPath(skillPath)\n      ? this.#factorySource.readFile(this.#factoryPath(skillPath))\n      : this.fallback.readFile(skillPath);\n  }\n\n  async readdir(skillPath: string): Promise<SkillSourceEntry[]> {\n    if (this.#isFactoryPath(skillPath)) {\n      return this.#factorySource.readdir(this.#factoryPath(skillPath));\n    }\n    const entries = await this.fallback.readdir(skillPath);\n    if (this.#fallbackSkillRoots.has(path.normalize(skillPath))) {\n      return entries.filter(entry => !FACTORY_SKILL_NAMES.has(entry.name));\n    }\n    return entries;\n  }\n\n  realpath(skillPath: string): Promise<string> {\n    if (this.#isFactoryPath(skillPath)) return Promise.resolve(path.normalize(skillPath));\n    return this.fallback.realpath ? this.fallback.realpath(skillPath) : Promise.resolve(skillPath);\n  }\n}\n\nconst factorySkillExtension: WorkspaceSkillExtension = {\n  id: 'web-factory',\n  paths: [FACTORY_SKILLS_MOUNT],\n  createSource: (fallback, fallbackSkillRoots) => new FactorySkillSource(fallback, fallbackSkillRoots),\n};\n\ntype DynamicWorkspaceContext = Parameters<typeof getDynamicWorkspace>[0];\n\nexport interface CreateWorkspaceFactoryOptions {\n  /** Factory sandbox runtime config (template machine + workdir base). */\n  sandbox?: MastraFactorySandboxConfig;\n  /** GitHub integration used to resolve Factory sessions and mint repo tokens. */\n  github?: GithubIntegration;\n  /** Fleet the per-session sandboxes are provisioned/reattached through. */\n  fleet?: SandboxFleet;\n  /** Work-items storage used to resolve the session's run-binding role, so\n   * review-board sessions get the reviewer PAT as `GH_TOKEN`. Optional —\n   * without it every session uses the default (worker) PAT. */\n  workItems?: Pick<WorkItemsStorage, 'findRunBindingBySession'>;\n}\n\nexport function createWorkspaceFactory(options: CreateWorkspaceFactoryOptions = {}) {\n  const { sandbox: sandboxConfig, github, fleet, workItems } = options;\n  const isLocalSandbox = sandboxConfig?.machine instanceof LocalSandbox;\n  const githubTokenInjectors = new Map<\n    string,\n    { inject: (token: string) => void; patKind: GithubPatKind; ghToken: string }\n  >();\n  // Concurrent requests for the same session (thread list + activity polling +\n  // chat) must not each provision a sandbox and clone the repository. The\n  // first caller materializes; followers await the same promise.\n  const inflightMaterializations = new Map<string, Promise<Workspace>>();\n\n  return async ({ requestContext, mastra, skillExtension }: DynamicWorkspaceContext) => {\n    const effectiveSkillExtension = skillExtension ?? factorySkillExtension;\n    const ctx = requestContext.get('controller') as AgentControllerRequestContext<MastraCodeState> | undefined;\n    const session =\n      ctx?.resourceId && github ? await github.sourceControlStorage.sessions.getBySessionId(ctx.resourceId) : null;\n\n    if (!session) {\n      if (sandboxConfig && !isLocalSandbox) {\n        throw new Error('A Factory session ID is required to create a remote sandbox workspace');\n      }\n      return getDynamicWorkspace({ requestContext, mastra, skillExtension: effectiveSkillExtension });\n    }\n\n    const user = requestContext.get('user') as FactoryAuthUser | undefined;\n    const userId = getFactoryAuthUserId(user);\n    if (!user?.organizationId || !userId || user.organizationId !== session.orgId || userId !== session.userId) {\n      throw new Error(`Factory session ${session.sessionId} is not available to the current user`);\n    }\n    if (!sandboxConfig || !github || !fleet) {\n      throw new Error('GitHub and sandbox providers are required to create a Factory session workspace');\n    }\n\n    const storage = github.sourceControlStorage;\n    const projectRepository = await storage.projectRepositories.get({\n      orgId: session.orgId,\n      id: session.projectRepositoryId,\n    });\n    if (!projectRepository) throw new Error(`Repository link ${session.projectRepositoryId} was not found`);\n    const connection = await storage.connections.get({ orgId: session.orgId, id: projectRepository.connectionId });\n    const repository = await storage.repositories.get({ orgId: session.orgId, id: projectRepository.repositoryId });\n    if (!connection || !repository) throw new Error(`Repository link ${session.projectRepositoryId} is incomplete`);\n    const installation = await storage.installations.get({ orgId: session.orgId, id: connection.installationId });\n    if (!installation) throw new Error(`GitHub installation ${connection.installationId} was not found`);\n    const repoFullName = repository.slug;\n\n    const workdir = isLocalSandbox\n      ? fleet.computeLocalSessionWorkdir(repoFullName, session.id)\n      : (session.sandboxWorkdir ?? projectRepository.sandboxWorkdir);\n    // The system prompt derives its working directory from `state.projectPath`\n    // and falls back to the server's own process.cwd() when unset — which\n    // points the agent at the host checkout (and lets it run `git checkout`\n    // there instead of in its session workdir). Pin it to the session workdir.\n    // During createSession this seeds the session's initial state (the\n    // workspace resolves before the session is built); on later requests it\n    // self-heals live state.\n    if (ctx && workdir && ctx.getState()?.projectPath !== workdir) {\n      await ctx.setState({ projectPath: workdir, projectName: repoFullName });\n    }\n    const binding: SandboxBindingStore = {\n      // Read through to the session row so teardown after a fresh provision\n      // sees the just-persisted id instead of a stale snapshot.\n      get sandboxId() {\n        return session.sandboxId;\n      },\n      checkpointName: checkpointNameForSession(session.id),\n      setSandboxId: async id => {\n        await storage.sessions.setSandbox({ id: session.id, sandboxId: id, sandboxWorkdir: workdir });\n        session.sandboxId = id;\n        session.sandboxWorkdir = workdir;\n      },\n      clear: async () => {\n        await storage.sessions.setSandbox({ id: session.id, sandboxId: null, sandboxWorkdir: workdir });\n        session.sandboxId = null;\n      },\n    };\n\n    const extensionId = effectiveSkillExtension ? `-${effectiveSkillExtension.id}` : '';\n    const workspaceId = `${WORKSPACE_ID_PREFIX}-${projectRepository.id}-${session.id}${extensionId}`;\n    const configDir = sandboxConfig.workdir ?? DEFAULT_CONFIG_DIR;\n    try {\n      const existing = mastra?.getWorkspaceById(workspaceId) as Workspace | undefined;\n      if (existing) {\n        existing.setToolsConfig(MASTRACODE_WORKSPACE_TOOLS);\n        const registered = githubTokenInjectors.get(workspaceId);\n        if (registered) {\n          registerGithubTokenInjector(requestContext, registered.inject);\n          registerGithubPatKind(requestContext, registered.patKind);\n          // A PAT saved in Settings after this sandbox was provisioned must\n          // reach the running sandbox without a server restart — re-read it\n          // on every reuse and push it into the live sandbox when it changed.\n          // Best-effort: a failed read or inject keeps the installed token.\n          try {\n            const pat = await getGithubPat(() => github.integrationStorage, session.orgId, registered.patKind);\n            if (pat && pat !== registered.ghToken) {\n              registered.inject(pat);\n            }\n          } catch {\n            // Keep the token already installed in the sandbox.\n          }\n        }\n        return existing;\n      }\n    } catch {\n      // Not registered yet.\n    }\n\n    const materialize = async (): Promise<Workspace> => {\n      const access = await github.versionControl.getRepositoryAccess({\n        orgId: session.orgId,\n        repositoryId: repository.id,\n      });\n      const token = access.authorization?.token;\n      if (!token) throw new Error('Repository access did not include a bearer token for the Factory session');\n\n      // The `gh` CLI needs a PAT when the org configured one (installation\n      // tokens 403 on integration-restricted endpoints); git clone/checkout\n      // below keep using the minted installation token. Review-board sessions\n      // (run-binding role `review`) authenticate `gh` as the reviewer account\n      // when a reviewer token is configured; everything else — including\n      // sessions with no resolvable run binding — uses the worker token.\n      let patKind: GithubPatKind = 'default';\n      if (workItems) {\n        try {\n          const address = getFactorySessionAddress(requestContext);\n          const runBinding = address ? await workItems.findRunBindingBySession(address) : null;\n          if (runBinding?.role === 'review' && runBinding.orgId === session.orgId) patKind = 'reviewer';\n        } catch {\n          // No resolvable binding — worker token.\n        }\n      }\n      const ghCliToken = (await getGithubPat(() => github.integrationStorage, session.orgId, patKind)) ?? token;\n\n      const ensureSandbox = () =>\n        fleet.ensureSandbox(\n          binding,\n          { GH_TOKEN: ghCliToken },\n          undefined,\n          isLocalSandbox ? { workingDirectory: workdir } : {},\n        );\n      const runMaterialize = (target: Awaited<ReturnType<typeof ensureSandbox>>) =>\n        materializeRepo({\n          row: { id: session.id, sandboxWorkdir: workdir, materializedAt: session.materializedAt },\n          repoInfo: { repoFullName: repoFullName, defaultBranch: repository.defaultBranch },\n          sandbox: target,\n          token,\n          storage: storage.sessions,\n        });\n      const isGitMissing = (error: unknown) => error instanceof MaterializeError && error.code === 'git-missing';\n\n      let sandbox = await ensureSandbox();\n      try {\n        await runMaterialize(sandbox);\n      } catch (error) {\n        if (!isGitMissing(error)) throw error;\n        // A sandbox without git was booted from a bare base image (e.g. the\n        // platform proxy falls back to a clean Debian base when its template\n        // build fails). That VM can never materialize a repo, and its id is\n        // already persisted on the binding — tear it down so re-opens stop\n        // reattaching to the poisoned sandbox, then retry once on a fresh VM.\n        await fleet.teardownSandbox(binding, sandbox);\n        sandbox = await ensureSandbox();\n        try {\n          await runMaterialize(sandbox);\n        } catch (retryError) {\n          // Still bare — the provider's template is persistently broken.\n          // Clear the binding so a later manual retry provisions fresh.\n          if (isGitMissing(retryError)) await fleet.teardownSandbox(binding, sandbox);\n          throw retryError;\n        }\n      }\n      await checkoutSessionBranch(sandbox, workdir, {\n        branch: session.branch,\n        baseBranch: session.baseBranch || projectRepository.branch || repository.defaultBranch,\n        token,\n        repoFullName: repoFullName,\n      });\n      if (projectRepository.setupCommand) await runWorktreeSetup(sandbox, workdir, projectRepository.setupCommand);\n\n      const injectGithubToken = (freshToken: string) => {\n        if (!sandbox.setEnvironmentVariable) {\n          throw new Error('The active sandbox provider does not support runtime GitHub token refresh.');\n        }\n        sandbox.setEnvironmentVariable('GH_TOKEN', freshToken);\n        const registered = githubTokenInjectors.get(workspaceId);\n        if (registered) registered.ghToken = freshToken;\n      };\n      githubTokenInjectors.set(workspaceId, { inject: injectGithubToken, patKind, ghToken: ghCliToken });\n      registerGithubTokenInjector(requestContext, injectGithubToken);\n      registerGithubPatKind(requestContext, patKind);\n\n      const filesystem = new SandboxFilesystem({ sandbox, workdir });\n      const projectSkillPaths = [path.join(configDir, 'skills'), '.claude/skills', '.agents/skills'];\n      const skillPaths = [...(effectiveSkillExtension?.paths ?? []), ...projectSkillPaths];\n      return new Workspace({\n        id: workspaceId,\n        name: 'Mastra Code Factory Session Workspace',\n        filesystem,\n        sandbox: sandbox as unknown as ConstructorParameters<typeof Workspace>[0]['sandbox'],\n        tools: MASTRACODE_WORKSPACE_TOOLS,\n        skills: skillPaths,\n        skillSource: effectiveSkillExtension?.createSource(filesystem, projectSkillPaths) ?? filesystem,\n      });\n    };\n\n    // Dedupe concurrent materializations of the same workspace: followers\n    // await the leader's promise instead of provisioning a second sandbox,\n    // then bind the shared token injector into their own request context.\n    const inflight = inflightMaterializations.get(workspaceId);\n    if (inflight) {\n      const workspace = await inflight;\n      const registered = githubTokenInjectors.get(workspaceId);\n      if (registered) {\n        registerGithubTokenInjector(requestContext, registered.inject);\n        registerGithubPatKind(requestContext, registered.patKind);\n      }\n      return workspace;\n    }\n    const materialization = materialize();\n    inflightMaterializations.set(workspaceId, materialization);\n    try {\n      return await materialization;\n    } finally {\n      inflightMaterializations.delete(workspaceId);\n    }\n  };\n}\n\nexport const getFactoryWorkspace = createWorkspaceFactory();\n"],"mappings":";;;;;;;;;;;;;;AA6BA,MAAM,sBAAsB;AAC5B,MAAM,4BAA4B;AAElC,SAAgB,yBAAyB,WAA2B;CAClE,OAAO,GAAG,0BAA0B,GAAG;AACzC;AAEA,MAAM,kBAAkB,QAAQ,cAAc,OAAO,KAAK,GAAG,CAAC;AAC9D,MAAM,2BAA2B,KAAK,iBAAiB,gBAAgB;AACvE,MAAM,6BACJ;CAGE;CAGA,KAAK,iBAAiB,MAAM,gBAAgB;CAE5C,KAAK,QAAQ,IAAI,GAAG,OAAO,UAAU,UAAU,gBAAgB;AACjE,CAAC,CAAC,KAAK,UAAU,KAAK;AACxB,MAAM,uBAAuB,KAAK,QAAQ,KAAK,MAAM,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,+BAA+B;AACzG,MAAM,sCAAsB,IAAI,IAAI;CAAC;CAA2B;CAAgB;CAAkB;AAAgB,CAAC;AAEnH,IAAM,qBAAN,MAAgD;CAKnC;CAJX,iBAA0B,IAAI,iBAAiB,EAAE,UAAU,2BAA2B,CAAC;CACvF;CAEA,YACE,UACA,oBACA;EAFS,KAAA,WAAA;EAGT,KAAKC,sBAAsB,IAAI,IAAI,mBAAmB,KAAI,cAAa,KAAK,UAAU,SAAS,CAAC,CAAC;CACnG;CAEA,eAAe,WAA4B;EACzC,MAAM,aAAa,KAAK,UAAU,SAAS;EAC3C,OAAO,eAAe,wBAAwB,WAAW,WAAW,GAAG,uBAAuB,KAAK,KAAK;CAC1G;CAEA,aAAa,WAA2B;EACtC,OAAO,KAAK,SAAS,sBAAsB,KAAK,UAAU,SAAS,CAAC;CACtE;CAEA,OAAO,WAAqC;EAC1C,OAAO,KAAKC,eAAe,SAAS,IAChC,KAAKF,eAAe,OAAO,KAAKG,aAAa,SAAS,CAAC,IACvD,KAAK,SAAS,OAAO,SAAS;CACpC;CAEA,KAAK,WAA6C;EAChD,OAAO,KAAKD,eAAe,SAAS,IAChC,KAAKF,eAAe,KAAK,KAAKG,aAAa,SAAS,CAAC,IACrD,KAAK,SAAS,KAAK,SAAS;CAClC;CAEA,SAAS,WAA6C;EACpD,OAAO,KAAKD,eAAe,SAAS,IAChC,KAAKF,eAAe,SAAS,KAAKG,aAAa,SAAS,CAAC,IACzD,KAAK,SAAS,SAAS,SAAS;CACtC;CAEA,MAAM,QAAQ,WAAgD;EAC5D,IAAI,KAAKD,eAAe,SAAS,GAC/B,OAAO,KAAKF,eAAe,QAAQ,KAAKG,aAAa,SAAS,CAAC;EAEjE,MAAM,UAAU,MAAM,KAAK,SAAS,QAAQ,SAAS;EACrD,IAAI,KAAKF,oBAAoB,IAAI,KAAK,UAAU,SAAS,CAAC,GACxD,OAAO,QAAQ,QAAO,UAAS,CAAC,oBAAoB,IAAI,MAAM,IAAI,CAAC;EAErE,OAAO;CACT;CAEA,SAAS,WAAoC;EAC3C,IAAI,KAAKC,eAAe,SAAS,GAAG,OAAO,QAAQ,QAAQ,KAAK,UAAU,SAAS,CAAC;EACpF,OAAO,KAAK,SAAS,WAAW,KAAK,SAAS,SAAS,SAAS,IAAI,QAAQ,QAAQ,SAAS;CAC/F;AACF;AAEA,MAAM,wBAAiD;CACrD,IAAI;CACJ,OAAO,CAAC,oBAAoB;CAC5B,eAAe,UAAU,uBAAuB,IAAI,mBAAmB,UAAU,kBAAkB;AACrG;AAiBA,SAAgB,uBAAuB,UAAyC,CAAC,GAAG;CAClF,MAAM,EAAE,SAAS,eAAe,QAAQ,OAAO,cAAc;CAC7D,MAAM,iBAAiB,eAAe,mBAAmB;CACzD,MAAM,uCAAuB,IAAI,IAG/B;CAIF,MAAM,2CAA2B,IAAI,IAAgC;CAErE,OAAO,OAAO,EAAE,gBAAgB,QAAQ,qBAA8C;EACpF,MAAM,0BAA0B,kBAAkB;EAClD,MAAM,MAAM,eAAe,IAAI,YAAY;EAC3C,MAAM,UACJ,KAAK,cAAc,SAAS,MAAM,OAAO,qBAAqB,SAAS,eAAe,IAAI,UAAU,IAAI;EAE1G,IAAI,CAAC,SAAS;GACZ,IAAI,iBAAiB,CAAC,gBACpB,MAAM,IAAI,MAAM,uEAAuE;GAEzF,OAAO,oBAAoB;IAAE;IAAgB;IAAQ,gBAAgB;GAAwB,CAAC;EAChG;EAEA,MAAM,OAAO,eAAe,IAAI,MAAM;EACtC,MAAM,SAAS,qBAAqB,IAAI;EACxC,IAAI,CAAC,MAAM,kBAAkB,CAAC,UAAU,KAAK,mBAAmB,QAAQ,SAAS,WAAW,QAAQ,QAClG,MAAM,IAAI,MAAM,mBAAmB,QAAQ,UAAU,sCAAsC;EAE7F,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,OAChC,MAAM,IAAI,MAAM,iFAAiF;EAGnG,MAAM,UAAU,OAAO;EACvB,MAAM,oBAAoB,MAAM,QAAQ,oBAAoB,IAAI;GAC9D,OAAO,QAAQ;GACf,IAAI,QAAQ;EACd,CAAC;EACD,IAAI,CAAC,mBAAmB,MAAM,IAAI,MAAM,mBAAmB,QAAQ,oBAAoB,eAAe;EACtG,MAAM,aAAa,MAAM,QAAQ,YAAY,IAAI;GAAE,OAAO,QAAQ;GAAO,IAAI,kBAAkB;EAAa,CAAC;EAC7G,MAAM,aAAa,MAAM,QAAQ,aAAa,IAAI;GAAE,OAAO,QAAQ;GAAO,IAAI,kBAAkB;EAAa,CAAC;EAC9G,IAAI,CAAC,cAAc,CAAC,YAAY,MAAM,IAAI,MAAM,mBAAmB,QAAQ,oBAAoB,eAAe;EAE9G,IAAI,CAAC,MADsB,QAAQ,cAAc,IAAI;GAAE,OAAO,QAAQ;GAAO,IAAI,WAAW;EAAe,CAAC,GACzF,MAAM,IAAI,MAAM,uBAAuB,WAAW,eAAe,eAAe;EACnG,MAAM,eAAe,WAAW;EAEhC,MAAM,UAAU,iBACZ,MAAM,2BAA2B,cAAc,QAAQ,EAAE,IACxD,QAAQ,kBAAkB,kBAAkB;EAQjD,IAAI,OAAO,WAAW,IAAI,SAAS,CAAC,EAAE,gBAAgB,SACpD,MAAM,IAAI,SAAS;GAAE,aAAa;GAAS,aAAa;EAAa,CAAC;EAExE,MAAM,UAA+B;GAGnC,IAAI,YAAY;IACd,OAAO,QAAQ;GACjB;GACA,gBAAgB,yBAAyB,QAAQ,EAAE;GACnD,cAAc,OAAM,OAAM;IACxB,MAAM,QAAQ,SAAS,WAAW;KAAE,IAAI,QAAQ;KAAI,WAAW;KAAI,gBAAgB;IAAQ,CAAC;IAC5F,QAAQ,YAAY;IACpB,QAAQ,iBAAiB;GAC3B;GACA,OAAO,YAAY;IACjB,MAAM,QAAQ,SAAS,WAAW;KAAE,IAAI,QAAQ;KAAI,WAAW;KAAM,gBAAgB;IAAQ,CAAC;IAC9F,QAAQ,YAAY;GACtB;EACF;EAEA,MAAM,cAAc,0BAA0B,IAAI,wBAAwB,OAAO;EACjF,MAAM,cAAc,GAAG,oBAAoB,GAAG,kBAAkB,GAAG,GAAG,QAAQ,KAAK;EACnF,MAAM,YAAY,cAAc,WAAW;EAC3C,IAAI;GACF,MAAM,WAAW,QAAQ,iBAAiB,WAAW;GACrD,IAAI,UAAU;IACZ,SAAS,eAAe,0BAA0B;IAClD,MAAM,aAAa,qBAAqB,IAAI,WAAW;IACvD,IAAI,YAAY;KACd,4BAA4B,gBAAgB,WAAW,MAAM;KAC7D,sBAAsB,gBAAgB,WAAW,OAAO;KAKxD,IAAI;MACF,MAAM,MAAM,MAAM,mBAAmB,OAAO,oBAAoB,QAAQ,OAAO,WAAW,OAAO;MACjG,IAAI,OAAO,QAAQ,WAAW,SAC5B,WAAW,OAAO,GAAG;KAEzB,QAAQ,CAER;IACF;IACA,OAAO;GACT;EACF,QAAQ,CAER;EAEA,MAAM,cAAc,YAAgC;GAKlD,MAAM,SAAQ,MAJO,OAAO,eAAe,oBAAoB;IAC7D,OAAO,QAAQ;IACf,cAAc,WAAW;GAC3B,CAAC,EAAA,CACoB,eAAe;GACpC,IAAI,CAAC,OAAO,MAAM,IAAI,MAAM,0EAA0E;GAQtG,IAAI,UAAyB;GAC7B,IAAI,WACF,IAAI;IACF,MAAM,UAAU,yBAAyB,cAAc;IACvD,MAAM,aAAa,UAAU,MAAM,UAAU,wBAAwB,OAAO,IAAI;IAChF,IAAI,YAAY,SAAS,YAAY,WAAW,UAAU,QAAQ,OAAO,UAAU;GACrF,QAAQ,CAER;GAEF,MAAM,aAAc,MAAM,mBAAmB,OAAO,oBAAoB,QAAQ,OAAO,OAAO,KAAM;GAEpG,MAAM,sBACJ,MAAM,cACJ,SACA,EAAE,UAAU,WAAW,GACvB,KAAA,GACA,iBAAiB,EAAE,kBAAkB,QAAQ,IAAI,CAAC,CACpD;GACF,MAAM,kBAAkB,WACtB,gBAAgB;IACd,KAAK;KAAE,IAAI,QAAQ;KAAI,gBAAgB;KAAS,gBAAgB,QAAQ;IAAe;IACvF,UAAU;KAAgB;KAAc,eAAe,WAAW;IAAc;IAChF,SAAS;IACT;IACA,SAAS,QAAQ;GACnB,CAAC;GACH,MAAM,gBAAgB,UAAmB,iBAAiB,oBAAoB,MAAM,SAAS;GAE7F,IAAI,UAAU,MAAM,cAAc;GAClC,IAAI;IACF,MAAM,eAAe,OAAO;GAC9B,SAAS,OAAO;IACd,IAAI,CAAC,aAAa,KAAK,GAAG,MAAM;IAMhC,MAAM,MAAM,gBAAgB,SAAS,OAAO;IAC5C,UAAU,MAAM,cAAc;IAC9B,IAAI;KACF,MAAM,eAAe,OAAO;IAC9B,SAAS,YAAY;KAGnB,IAAI,aAAa,UAAU,GAAG,MAAM,MAAM,gBAAgB,SAAS,OAAO;KAC1E,MAAM;IACR;GACF;GACA,MAAM,sBAAsB,SAAS,SAAS;IAC5C,QAAQ,QAAQ;IAChB,YAAY,QAAQ,cAAc,kBAAkB,UAAU,WAAW;IACzE;IACc;GAChB,CAAC;GACD,IAAI,kBAAkB,cAAc,MAAM,iBAAiB,SAAS,SAAS,kBAAkB,YAAY;GAE3G,MAAM,qBAAqB,eAAuB;IAChD,IAAI,CAAC,QAAQ,wBACX,MAAM,IAAI,MAAM,4EAA4E;IAE9F,QAAQ,uBAAuB,YAAY,UAAU;IACrD,MAAM,aAAa,qBAAqB,IAAI,WAAW;IACvD,IAAI,YAAY,WAAW,UAAU;GACvC;GACA,qBAAqB,IAAI,aAAa;IAAE,QAAQ;IAAmB;IAAS,SAAS;GAAW,CAAC;GACjG,4BAA4B,gBAAgB,iBAAiB;GAC7D,sBAAsB,gBAAgB,OAAO;GAE7C,MAAM,aAAa,IAAI,kBAAkB;IAAE;IAAS;GAAQ,CAAC;GAC7D,MAAM,oBAAoB;IAAC,KAAK,KAAK,WAAW,QAAQ;IAAG;IAAkB;GAAgB;GAC7F,MAAM,aAAa,CAAC,GAAI,yBAAyB,SAAS,CAAC,GAAI,GAAG,iBAAiB;GACnF,OAAO,IAAI,UAAU;IACnB,IAAI;IACJ,MAAM;IACN;IACS;IACT,OAAO;IACP,QAAQ;IACR,aAAa,yBAAyB,aAAa,YAAY,iBAAiB,KAAK;GACvF,CAAC;EACH;EAKA,MAAM,WAAW,yBAAyB,IAAI,WAAW;EACzD,IAAI,UAAU;GACZ,MAAM,YAAY,MAAM;GACxB,MAAM,aAAa,qBAAqB,IAAI,WAAW;GACvD,IAAI,YAAY;IACd,4BAA4B,gBAAgB,WAAW,MAAM;IAC7D,sBAAsB,gBAAgB,WAAW,OAAO;GAC1D;GACA,OAAO;EACT;EACA,MAAM,kBAAkB,YAAY;EACpC,yBAAyB,IAAI,aAAa,eAAe;EACzD,IAAI;GACF,OAAO,MAAM;EACf,UAAU;GACR,yBAAyB,OAAO,WAAW;EAC7C;CACF;AACF;AAEA,MAAa,sBAAsB,uBAAuB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mastra/factory",
-  "version": "0.2.2-alpha.3",
+  "version": "0.2.2",
   "description": "Mastra Software Factory module: the server core behind the Mastra Software Factory — storage domains, integrations, and surfaces for agent-powered software delivery",
   "type": "module",
   "publishConfig": {
@@ -50,10 +50,10 @@
     "@octokit/rest": "^22.0.1",
     "hono": "^4.12.8",
     "zod": "^4.3.6",
-    "@mastra/auth-studio": "1.3.3-alpha.0",
+    "@mastra/auth-studio": "1.3.3",
     "@mastra/auth-workos": "1.6.4",
-    "@mastra/core": "1.54.0-alpha.3",
-    "@mastra/code-sdk": "1.1.0-alpha.3"
+    "@mastra/code-sdk": "1.1.0",
+    "@mastra/core": "1.54.0"
   },
   "devDependencies": {
     "@types/node": "22.20.1",
@@ -62,10 +62,10 @@
     "typescript": "^6.0.3",
     "typescript-eslint": "^8.57.0",
     "vitest": "4.1.10",
-    "@internal/lint": "0.0.117",
-    "@mastra/libsql": "1.18.0-alpha.1",
-    "@mastra/pg": "1.18.0-alpha.2",
-    "@internal/types-builder": "0.0.92"
+    "@internal/lint": "0.0.118",
+    "@mastra/libsql": "1.18.0",
+    "@mastra/pg": "1.18.0",
+    "@internal/types-builder": "0.0.93"
   },
   "engines": {
     "node": ">=22.19.0"