@mastra/factory 0.24.0-alpha.2 → 0.24.0-alpha.4

package/dist/mcp/disconnect.js

@@ -0,0 +1,44 @@
+//#region src/mcp/disconnect.ts
+/**
+* Emits `close` on the `toReqRes` response when the HTTP client cancels the
+* body, so the MCP transport aborts instead of writing into a closed stream.
+* Mirrors `@mastra/hono`'s helper, which isn't exported.
+*/
+function propagateClientDisconnect(fetchResponse, res) {
+	const upstream = fetchResponse.body;
+	if (!upstream) return fetchResponse;
+	let disconnected = false;
+	const disconnect = () => {
+		if (disconnected) return;
+		disconnected = true;
+		try {
+			res.emit("close");
+		} catch {}
+		reader.read().then(function drain({ done }) {
+			return done ? void 0 : reader.read().then(drain);
+		}, () => {});
+	};
+	const reader = upstream.getReader();
+	const body = new ReadableStream({
+		async pull(controller) {
+			const { done, value } = await reader.read();
+			if (done) {
+				controller.close();
+				return;
+			}
+			controller.enqueue(value);
+		},
+		cancel() {
+			disconnect();
+		}
+	});
+	return new Response(body, {
+		status: fetchResponse.status,
+		statusText: fetchResponse.statusText,
+		headers: fetchResponse.headers
+	});
+}
+//#endregion
+export { propagateClientDisconnect };
+
+//# sourceMappingURL=disconnect.js.map

package/dist/mcp/disconnect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"disconnect.js","names":[],"sources":["../../src/mcp/disconnect.ts"],"sourcesContent":["/**\n * Emits `close` on the `toReqRes` response when the HTTP client cancels the\n * body, so the MCP transport aborts instead of writing into a closed stream.\n * Mirrors `@mastra/hono`'s helper, which isn't exported.\n */\nexport function propagateClientDisconnect(\n  fetchResponse: Response,\n  res: { emit: (event: string) => void; destroy?: () => void },\n): Response {\n  const upstream = fetchResponse.body;\n  if (!upstream) return fetchResponse;\n\n  let disconnected = false;\n  const disconnect = () => {\n    if (disconnected) return;\n    disconnected = true;\n    try {\n      res.emit('close');\n    } catch {\n      // Already torn down - the transport has nothing left to clean up.\n    }\n    // Deliberately *not* cancelling or destroying the bridge stream here. `fetch-to-node`\n    // buffers writes and flushes them from a cork timer; tearing its controller down leaves\n    // that pending flush to enqueue into a closed controller, which throws an unhandled\n    // ERR_INVALID_STATE from a timer callback - the very crash this guards against.\n    // Emitting `close` aborts the transport, which ends the response, so the bridge closes\n    // its own controller in the right order once buffered data has drained.\n    void reader.read().then(\n      function drain({ done }): unknown {\n        return done ? undefined : reader.read().then(drain);\n      },\n      () => {},\n    );\n  };\n\n  const reader = upstream.getReader();\n  const body = new ReadableStream<Uint8Array>({\n    async pull(controller) {\n      const { done, value } = await reader.read();\n      if (done) {\n        controller.close();\n        return;\n      }\n      controller.enqueue(value);\n    },\n    cancel() {\n      disconnect();\n    },\n  });\n\n  return new Response(body, {\n    status: fetchResponse.status,\n    statusText: fetchResponse.statusText,\n    headers: fetchResponse.headers,\n  });\n}\n"],"mappings":";;;;;;AAKA,SAAgB,0BACd,eACA,KACU;CACV,MAAM,WAAW,cAAc;CAC/B,IAAI,CAAC,UAAU,OAAO;CAEtB,IAAI,eAAe;CACnB,MAAM,mBAAmB;EACvB,IAAI,cAAc;EAClB,eAAe;EACf,IAAI;GACF,IAAI,KAAK,OAAO;EAClB,QAAQ,CAER;EAOA,OAAY,KAAK,CAAC,CAAC,KACjB,SAAS,MAAM,EAAE,QAAiB;GAChC,OAAO,OAAO,KAAA,IAAY,OAAO,KAAK,CAAC,CAAC,KAAK,KAAK;EACpD,SACM,CAAC,CACT;CACF;CAEA,MAAM,SAAS,SAAS,UAAU;CAClC,MAAM,OAAO,IAAI,eAA2B;EAC1C,MAAM,KAAK,YAAY;GACrB,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;GAC1C,IAAI,MAAM;IACR,WAAW,MAAM;IACjB;GACF;GACA,WAAW,QAAQ,KAAK;EAC1B;EACA,SAAS;GACP,WAAW;EACb;CACF,CAAC;CAED,OAAO,IAAI,SAAS,MAAM;EACxB,QAAQ,cAAc;EACtB,YAAY,cAAc;EAC1B,SAAS,cAAc;CACzB,CAAC;AACH"}

package/dist/mcp/routes.d.ts

@@ -0,0 +1,46 @@
+import type { ApiRoute } from '@mastra/core/server';
+import type { Tool } from '@mastra/core/tools';
+import type { RouteAuth } from '../routes/route.js';
+import type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';
+import type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';
+import type { FactoryToolDependencies, FactoryToolScope } from '../tools/index.js';
+export declare const FACTORY_MCP_PATH = "/web/factory/projects/:projectId/mcp";
+export interface FactoryMcpConfig {
+    /** Serve the MCP endpoint. Default `true`; it is never served without an auth provider. */
+    enabled?: boolean;
+    /**
+     * OAuth authorization servers advertised in the protected-resource metadata
+     * (RFC 9728) so clients like ChatGPT know where to sign in. Defaults to the
+     * `MASTRA_FACTORY_MCP_AUTHORIZATION_SERVER` env var, then to Mastra Platform's
+     * AuthKit when the Factory uses Platform auth. The endpoint isn't served
+     * without one, since clients would have nowhere to sign in.
+     */
+    authorizationServers?: string[];
+}
+/** Mastra Platform's WorkOS AuthKit, which issues tokens Platform's `/auth/verify` accepts. */
+export declare const PLATFORM_MCP_AUTHORIZATION_SERVER = "https://auth-kit.mastra.ai";
+export declare function resolveMcpAuthorizationServers(providerName: string | undefined, config: FactoryMcpConfig | undefined, env?: Record<string, string | undefined>): string[];
+export interface FactoryMcpRoutesDeps {
+    auth: RouteAuth;
+    publicOrigin: string;
+    authorizationServers: string[];
+    projects: Pick<FactoryProjectsStorage, 'get'>;
+    /** Source-control handles a connector session can be filed under, tried in order. */
+    sourceControls: readonly SourceControlStorageHandle[];
+    tools: FactoryToolDependencies;
+    version?: string;
+}
+/** The connector session a user's MCP client acts from: one per user and Factory, stable across requests. */
+export declare function connectorSessionId(orgId: string, userId: string, factoryProjectId: string): string;
+/** The tools a signed-in person's MCP client sees for one Factory. */
+export declare function createFactoryMcpTools(scope: FactoryToolScope, deps: FactoryMcpRoutesDeps, options?: {
+    persistedSession?: boolean;
+}): Record<string, Tool<any, any, any, any>>;
+/**
+ * The Factory's MCP endpoint: Streamable HTTP at
+ * `/web/factory/projects/:projectId/mcp`, plus its RFC 9728 protected-resource
+ * metadata. Callers sign in with OAuth through the Factory's auth provider and
+ * get the tools a web UI session would, under the same permissions.
+ */
+export declare function buildFactoryMcpRoutes(deps: FactoryMcpRoutesDeps): ApiRoute[];
+//# sourceMappingURL=routes.d.ts.map

package/dist/mcp/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/mcp/routes.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAGpD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAQ/C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAGpD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AAG5F,OAAO,KAAK,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAGnF,eAAO,MAAM,gBAAgB,yCAAyC,CAAC;AASvE,MAAM,WAAW,gBAAgB;IAC/B,2FAA2F;IAC3F,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;CACjC;AAED,+FAA+F;AAC/F,eAAO,MAAM,iCAAiC,+BAA+B,CAAC;AAE9E,wBAAgB,8BAA8B,CAC5C,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,MAAM,EAAE,gBAAgB,GAAG,SAAS,EACpC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,MAAM,EAAE,CAMV;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,SAAS,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,QAAQ,EAAE,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;IAC9C,qFAAqF;IACrF,cAAc,EAAE,SAAS,0BAA0B,EAAE,CAAC;IACtD,KAAK,EAAE,uBAAuB,CAAC;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,6GAA6G;AAC7G,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAGlG;AAyFD,sEAAsE;AACtE,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,gBAAgB,EACvB,IAAI,EAAE,oBAAoB,EAC1B,OAAO,GAAE;IAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC3C,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAe1C;AAwED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,oBAAoB,GAAG,QAAQ,EAAE,CAoB5E"}

package/dist/mcp/routes.js

@@ -0,0 +1,243 @@
+import "../platform-auth-host.js";
+import { getFactoryAuthUser } from "../auth.js";
+import { FactorySourceSessionResolutionError, ensureFactorySourceSession } from "../session/factory-session.js";
+import { auditActorProfile } from "../storage/domains/audit/base.js";
+import { FACTORY_TOOL_ANNOTATIONS } from "../tools/annotations.js";
+import { createFactoryTools } from "../tools/index.js";
+import { propagateClientDisconnect } from "./disconnect.js";
+import { registerApiRoute } from "@mastra/core/server";
+import { createHash } from "crypto";
+import { z } from "zod";
+import { createTool } from "@mastra/core/tools";
+import { MCPServer } from "@mastra/mcp";
+import { toFetchResponse, toReqRes } from "fetch-to-node";
+//#region src/mcp/routes.ts
+const FACTORY_MCP_PATH = "/web/factory/projects/:projectId/mcp";
+const PROTECTED_RESOURCE_PREFIX = "/.well-known/oauth-protected-resource";
+/**
+* Tools an MCP client never gets. `factory_message_origin` answers the session
+* that started this one; a connector session is started by a person, not a session.
+*/
+const EXCLUDED_TOOLS = /* @__PURE__ */ new Set(["factory_message_origin"]);
+/** Mastra Platform's WorkOS AuthKit, which issues tokens Platform's `/auth/verify` accepts. */
+const PLATFORM_MCP_AUTHORIZATION_SERVER = "https://auth-kit.mastra.ai";
+function resolveMcpAuthorizationServers(providerName, config, env = process.env) {
+	if (config?.authorizationServers?.length) return config.authorizationServers;
+	const fromEnv = env.MASTRA_FACTORY_MCP_AUTHORIZATION_SERVER?.trim();
+	if (fromEnv) return [fromEnv];
+	if (providerName === "mastra-studio") return [PLATFORM_MCP_AUTHORIZATION_SERVER];
+	return [];
+}
+/** The connector session a user's MCP client acts from: one per user and Factory, stable across requests. */
+function connectorSessionId(orgId, userId, factoryProjectId) {
+	const hex = createHash("sha256").update(`mcp\0${orgId}\0${userId}\0${factoryProjectId}`).digest("hex");
+	return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-5${hex.slice(13, 16)}-8${hex.slice(17, 20)}-${hex.slice(20, 32)}`;
+}
+/**
+* Get or create the private user session behind a person's MCP client, so
+* session-scoped tools (start/signal sessions, follow work items) have a real
+* session to act from. A Factory without a connected repository has nowhere to
+* file one; its tools still run against the stable id.
+*/
+async function ensureConnectorSession(deps, args) {
+	const sessionId = connectorSessionId(args.orgId, args.userId, args.factoryProjectId);
+	if (await deps.tools.sessions.getBySessionId(sessionId)) return {
+		sessionId,
+		persisted: true
+	};
+	for (const sourceControl of deps.sourceControls) try {
+		await ensureFactorySourceSession({
+			sourceControl,
+			orgId: args.orgId,
+			factoryProjectId: args.factoryProjectId,
+			branch: `factory/mcp-${sessionId.slice(0, 8)}`,
+			attributeToUserId: args.userId,
+			sessionId,
+			visibility: "private"
+		});
+		return {
+			sessionId,
+			persisted: true
+		};
+	} catch (error) {
+		if (!(error instanceof FactorySourceSessionResolutionError)) throw error;
+	}
+	return {
+		sessionId,
+		persisted: false
+	};
+}
+function workItemUrl(publicOrigin, factoryProjectId, workItemId) {
+	return `${publicOrigin}/factory/${encodeURIComponent(factoryProjectId)}/work-items/${encodeURIComponent(workItemId)}`;
+}
+/**
+* `search` and `fetch`, the two tools ChatGPT's connectors and deep research
+* look for, answered from the Factory's work items.
+*/
+function createSearchFetchTools(scope, deps, inspect) {
+	const project = {
+		orgId: scope.orgId,
+		factoryProjectId: scope.factoryProjectId
+	};
+	return {
+		search: createTool({
+			id: "search",
+			description: "Search this Factory’s work items by title or id. Returns matching items with ids to pass to `fetch`.",
+			inputSchema: z.object({ query: z.string().describe("Words to look for in work item titles.") }),
+			execute: async ({ query }) => {
+				const terms = query.toLowerCase().split(/\s+/).filter(Boolean);
+				return { results: (await deps.tools.workItems.list(project)).filter((item) => {
+					const haystack = `${item.id} ${item.title}`.toLowerCase();
+					return terms.every((term) => haystack.includes(term));
+				}).slice(0, 20).map((item) => ({
+					id: item.id,
+					title: item.title,
+					url: workItemUrl(deps.publicOrigin, scope.factoryProjectId, item.id)
+				})) };
+			}
+		}),
+		fetch: createTool({
+			id: "fetch",
+			description: "Fetch everything the Factory knows about one work item, by the id `search` returned.",
+			inputSchema: z.object({ id: z.string().describe("Work item id.") }),
+			execute: async ({ id }, context) => {
+				if (!inspect?.execute) throw new Error("Work item details are unavailable.");
+				const details = await inspect.execute({ workItem: id }, context);
+				return {
+					id,
+					title: details.item?.title ?? id,
+					text: JSON.stringify(details, null, 2),
+					url: workItemUrl(deps.publicOrigin, scope.factoryProjectId, id),
+					metadata: { factoryProjectId: scope.factoryProjectId }
+				};
+			}
+		})
+	};
+}
+/** The tools a signed-in person's MCP client sees for one Factory. */
+function createFactoryMcpTools(scope, deps, options = {}) {
+	const factoryTools = createFactoryTools({
+		scope,
+		deps: deps.tools
+	});
+	const tools = {};
+	for (const [name, tool] of Object.entries(factoryTools)) {
+		if (EXCLUDED_TOOLS.has(name)) continue;
+		if (name === "factory_start_session" && options.persistedSession === false) continue;
+		tools[name] = tool;
+	}
+	Object.assign(tools, createSearchFetchTools(scope, deps, factoryTools.factory_inspect_work_item));
+	for (const [name, tool] of Object.entries(tools)) {
+		const annotations = FACTORY_TOOL_ANNOTATIONS[name];
+		if (annotations) tool.mcp = {
+			...tool.mcp,
+			annotations
+		};
+	}
+	return tools;
+}
+function resourceMetadataUrl(deps, mcpPath) {
+	return `${deps.publicOrigin}${PROTECTED_RESOURCE_PREFIX}${mcpPath}`;
+}
+function unauthorized(deps, mcpPath, error = "unauthorized") {
+	return new Response(JSON.stringify({ error }), {
+		status: 401,
+		headers: {
+			"Content-Type": "application/json",
+			"WWW-Authenticate": `Bearer resource_metadata="${resourceMetadataUrl(deps, mcpPath)}"`
+		}
+	});
+}
+async function handleMcp(deps, c) {
+	const factoryProjectId = c.req.param("projectId") ?? "";
+	const mcpPath = new URL(c.req.url).pathname;
+	await deps.auth.ensureUser(c);
+	const tenant = deps.auth.tenant(c);
+	if (!tenant) return unauthorized(deps, mcpPath);
+	if (!tenant.orgId) return c.json({ error: "organization_required" }, 403);
+	const project = await deps.projects.get({
+		orgId: tenant.orgId,
+		id: factoryProjectId
+	});
+	if (!project) return c.json({ error: "not_found" }, 404);
+	const { sessionId, persisted } = await ensureConnectorSession(deps, {
+		orgId: tenant.orgId,
+		userId: tenant.userId,
+		factoryProjectId
+	});
+	const actorProfile = auditActorProfile(getFactoryAuthUser(c));
+	const scope = {
+		orgId: tenant.orgId,
+		factoryProjectId,
+		userId: tenant.userId,
+		sessionId,
+		resourceId: sessionId,
+		threadId: sessionId,
+		kind: "user",
+		interactive: true,
+		...actorProfile ? { actorProfile } : {}
+	};
+	const server = new MCPServer({
+		id: `factory-${factoryProjectId}`,
+		name: `${project.name ?? "Mastra"} Factory`,
+		version: deps.version ?? "1.0.0",
+		description: "Manage work items, sessions and decisions in a Mastra Factory.",
+		tools: createFactoryMcpTools(scope, deps, { persistedSession: persisted })
+	});
+	const { req, res } = toReqRes(c.req.raw);
+	const done = server.startHTTP({
+		url: new URL(c.req.url),
+		httpPath: mcpPath,
+		req,
+		res
+	}).catch(() => {
+		if (!res.headersSent) {
+			res.writeHead(500, { "Content-Type": "application/json" });
+			res.end(JSON.stringify({
+				jsonrpc: "2.0",
+				error: {
+					code: -32603,
+					message: "Internal server error"
+				},
+				id: null
+			}));
+		}
+	}).finally(() => void server.close());
+	const response = propagateClientDisconnect(await toFetchResponse(res), res);
+	if (res.writableEnded) await done;
+	return response;
+}
+/**
+* The Factory's MCP endpoint: Streamable HTTP at
+* `/web/factory/projects/:projectId/mcp`, plus its RFC 9728 protected-resource
+* metadata. Callers sign in with OAuth through the Factory's auth provider and
+* get the tools a web UI session would, under the same permissions.
+*/
+function buildFactoryMcpRoutes(deps) {
+	const handler = (c) => handleMcp(deps, c);
+	return [...[
+		"POST",
+		"GET",
+		"DELETE"
+	].map((method) => registerApiRoute(FACTORY_MCP_PATH, {
+		method,
+		requiresAuth: false,
+		handler
+	})), registerApiRoute(`${PROTECTED_RESOURCE_PREFIX}${FACTORY_MCP_PATH}`, {
+		method: "GET",
+		requiresAuth: false,
+		handler: (c) => {
+			const mcpPath = new URL(c.req.url).pathname.slice(37);
+			return c.json({
+				resource: `${deps.publicOrigin}${mcpPath}`,
+				authorization_servers: deps.authorizationServers,
+				bearer_methods_supported: ["header"],
+				resource_name: "Mastra Factory"
+			});
+		}
+	})];
+}
+//#endregion
+export { FACTORY_MCP_PATH, PLATFORM_MCP_AUTHORIZATION_SERVER, buildFactoryMcpRoutes, connectorSessionId, createFactoryMcpTools, resolveMcpAuthorizationServers };
+
+//# sourceMappingURL=routes.js.map

package/dist/mcp/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","names":[],"sources":["../../src/mcp/routes.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\n\nimport type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport { createTool } from '@mastra/core/tools';\nimport type { Tool } from '@mastra/core/tools';\nimport { MCPServer } from '@mastra/mcp';\nimport { toFetchResponse, toReqRes } from 'fetch-to-node';\nimport type { Context } from 'hono';\nimport { z } from 'zod';\n\nimport { getFactoryAuthUser } from '../auth.js';\nimport { PLATFORM_AUTH_PROVIDER } from '../platform-auth-host.js';\nimport type { RouteAuth } from '../routes/route.js';\nimport { ensureFactorySourceSession, FactorySourceSessionResolutionError } from '../session/factory-session.js';\nimport { auditActorProfile } from '../storage/domains/audit/base.js';\nimport type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';\nimport type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\nimport { FACTORY_TOOL_ANNOTATIONS } from '../tools/annotations.js';\nimport { createFactoryTools } from '../tools/index.js';\nimport type { FactoryToolDependencies, FactoryToolScope } from '../tools/index.js';\nimport { propagateClientDisconnect } from './disconnect.js';\n\nexport const FACTORY_MCP_PATH = '/web/factory/projects/:projectId/mcp';\nconst PROTECTED_RESOURCE_PREFIX = '/.well-known/oauth-protected-resource';\n\n/**\n * Tools an MCP client never gets. `factory_message_origin` answers the session\n * that started this one; a connector session is started by a person, not a session.\n */\nconst EXCLUDED_TOOLS = new Set(['factory_message_origin']);\n\nexport interface FactoryMcpConfig {\n  /** Serve the MCP endpoint. Default `true`; it is never served without an auth provider. */\n  enabled?: boolean;\n  /**\n   * OAuth authorization servers advertised in the protected-resource metadata\n   * (RFC 9728) so clients like ChatGPT know where to sign in. Defaults to the\n   * `MASTRA_FACTORY_MCP_AUTHORIZATION_SERVER` env var, then to Mastra Platform's\n   * AuthKit when the Factory uses Platform auth. The endpoint isn't served\n   * without one, since clients would have nowhere to sign in.\n   */\n  authorizationServers?: string[];\n}\n\n/** Mastra Platform's WorkOS AuthKit, which issues tokens Platform's `/auth/verify` accepts. */\nexport const PLATFORM_MCP_AUTHORIZATION_SERVER = 'https://auth-kit.mastra.ai';\n\nexport function resolveMcpAuthorizationServers(\n  providerName: string | undefined,\n  config: FactoryMcpConfig | undefined,\n  env: Record<string, string | undefined> = process.env,\n): string[] {\n  if (config?.authorizationServers?.length) return config.authorizationServers;\n  const fromEnv = env.MASTRA_FACTORY_MCP_AUTHORIZATION_SERVER?.trim();\n  if (fromEnv) return [fromEnv];\n  if (providerName === PLATFORM_AUTH_PROVIDER) return [PLATFORM_MCP_AUTHORIZATION_SERVER];\n  return [];\n}\n\nexport interface FactoryMcpRoutesDeps {\n  auth: RouteAuth;\n  publicOrigin: string;\n  authorizationServers: string[];\n  projects: Pick<FactoryProjectsStorage, 'get'>;\n  /** Source-control handles a connector session can be filed under, tried in order. */\n  sourceControls: readonly SourceControlStorageHandle[];\n  tools: FactoryToolDependencies;\n  version?: string;\n}\n\n/** The connector session a user's MCP client acts from: one per user and Factory, stable across requests. */\nexport function connectorSessionId(orgId: string, userId: string, factoryProjectId: string): string {\n  const hex = createHash('sha256').update(`mcp\\0${orgId}\\0${userId}\\0${factoryProjectId}`).digest('hex');\n  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-5${hex.slice(13, 16)}-8${hex.slice(17, 20)}-${hex.slice(20, 32)}`;\n}\n\n/**\n * Get or create the private user session behind a person's MCP client, so\n * session-scoped tools (start/signal sessions, follow work items) have a real\n * session to act from. A Factory without a connected repository has nowhere to\n * file one; its tools still run against the stable id.\n */\nasync function ensureConnectorSession(\n  deps: FactoryMcpRoutesDeps,\n  args: { orgId: string; userId: string; factoryProjectId: string },\n): Promise<{ sessionId: string; persisted: boolean }> {\n  const sessionId = connectorSessionId(args.orgId, args.userId, args.factoryProjectId);\n  if (await deps.tools.sessions.getBySessionId(sessionId)) return { sessionId, persisted: true };\n  for (const sourceControl of deps.sourceControls) {\n    try {\n      await ensureFactorySourceSession({\n        sourceControl,\n        orgId: args.orgId,\n        factoryProjectId: args.factoryProjectId,\n        branch: `factory/mcp-${sessionId.slice(0, 8)}`,\n        attributeToUserId: args.userId,\n        sessionId,\n        visibility: 'private',\n      });\n      return { sessionId, persisted: true };\n    } catch (error) {\n      if (!(error instanceof FactorySourceSessionResolutionError)) throw error;\n    }\n  }\n  return { sessionId, persisted: false };\n}\n\nfunction workItemUrl(publicOrigin: string, factoryProjectId: string, workItemId: string): string {\n  return `${publicOrigin}/factory/${encodeURIComponent(factoryProjectId)}/work-items/${encodeURIComponent(workItemId)}`;\n}\n\n/**\n * `search` and `fetch`, the two tools ChatGPT's connectors and deep research\n * look for, answered from the Factory's work items.\n */\nfunction createSearchFetchTools(\n  scope: FactoryToolScope,\n  deps: FactoryMcpRoutesDeps,\n  inspect: Tool<any, any, any, any> | undefined,\n): Record<string, Tool<any, any, any, any>> {\n  const project = { orgId: scope.orgId, factoryProjectId: scope.factoryProjectId };\n  return {\n    search: createTool({\n      id: 'search',\n      description:\n        'Search this Factory’s work items by title or id. Returns matching items with ids to pass to `fetch`.',\n      inputSchema: z.object({ query: z.string().describe('Words to look for in work item titles.') }),\n      execute: async ({ query }) => {\n        const terms = query.toLowerCase().split(/\\s+/).filter(Boolean);\n        const items = await deps.tools.workItems.list(project);\n        const results = items\n          .filter(item => {\n            const haystack = `${item.id} ${item.title}`.toLowerCase();\n            return terms.every(term => haystack.includes(term));\n          })\n          .slice(0, 20)\n          .map(item => ({\n            id: item.id,\n            title: item.title,\n            url: workItemUrl(deps.publicOrigin, scope.factoryProjectId, item.id),\n          }));\n        return { results };\n      },\n    }),\n    fetch: createTool({\n      id: 'fetch',\n      description: 'Fetch everything the Factory knows about one work item, by the id `search` returned.',\n      inputSchema: z.object({ id: z.string().describe('Work item id.') }),\n      execute: async ({ id }, context) => {\n        if (!inspect?.execute) throw new Error('Work item details are unavailable.');\n        const details = (await inspect.execute({ workItem: id }, context)) as { item?: { title?: string } };\n        return {\n          id,\n          title: details.item?.title ?? id,\n          text: JSON.stringify(details, null, 2),\n          url: workItemUrl(deps.publicOrigin, scope.factoryProjectId, id),\n          metadata: { factoryProjectId: scope.factoryProjectId },\n        };\n      },\n    }),\n  };\n}\n\n/** The tools a signed-in person's MCP client sees for one Factory. */\nexport function createFactoryMcpTools(\n  scope: FactoryToolScope,\n  deps: FactoryMcpRoutesDeps,\n  options: { persistedSession?: boolean } = {},\n): Record<string, Tool<any, any, any, any>> {\n  const factoryTools = createFactoryTools({ scope, deps: deps.tools }) as Record<string, Tool<any, any, any, any>>;\n  const tools: Record<string, Tool<any, any, any, any>> = {};\n  for (const [name, tool] of Object.entries(factoryTools)) {\n    if (EXCLUDED_TOOLS.has(name)) continue;\n    // Starting a sub-session needs a real parent session row to file it under.\n    if (name === 'factory_start_session' && options.persistedSession === false) continue;\n    tools[name] = tool;\n  }\n  Object.assign(tools, createSearchFetchTools(scope, deps, factoryTools.factory_inspect_work_item));\n  for (const [name, tool] of Object.entries(tools)) {\n    const annotations = FACTORY_TOOL_ANNOTATIONS[name];\n    if (annotations) tool.mcp = { ...tool.mcp, annotations };\n  }\n  return tools;\n}\n\nfunction resourceMetadataUrl(deps: FactoryMcpRoutesDeps, mcpPath: string): string {\n  return `${deps.publicOrigin}${PROTECTED_RESOURCE_PREFIX}${mcpPath}`;\n}\n\nfunction unauthorized(deps: FactoryMcpRoutesDeps, mcpPath: string, error = 'unauthorized'): Response {\n  return new Response(JSON.stringify({ error }), {\n    status: 401,\n    headers: {\n      'Content-Type': 'application/json',\n      'WWW-Authenticate': `Bearer resource_metadata=\"${resourceMetadataUrl(deps, mcpPath)}\"`,\n    },\n  });\n}\n\nasync function handleMcp(deps: FactoryMcpRoutesDeps, c: Context): Promise<Response> {\n  const factoryProjectId = c.req.param('projectId') ?? '';\n  const mcpPath = new URL(c.req.url).pathname;\n\n  await deps.auth.ensureUser(c);\n  const tenant = deps.auth.tenant(c);\n  if (!tenant) return unauthorized(deps, mcpPath);\n  if (!tenant.orgId) return c.json({ error: 'organization_required' }, 403);\n\n  const project = await deps.projects.get({ orgId: tenant.orgId, id: factoryProjectId });\n  if (!project) return c.json({ error: 'not_found' }, 404);\n\n  const { sessionId, persisted } = await ensureConnectorSession(deps, {\n    orgId: tenant.orgId,\n    userId: tenant.userId,\n    factoryProjectId,\n  });\n  const actorProfile = auditActorProfile(getFactoryAuthUser(c));\n  const scope: FactoryToolScope = {\n    orgId: tenant.orgId,\n    factoryProjectId,\n    userId: tenant.userId,\n    sessionId,\n    resourceId: sessionId,\n    threadId: sessionId,\n    kind: 'user',\n    // A signed-in person is driving the client: the same reach as a web UI turn.\n    interactive: true,\n    ...(actorProfile ? { actorProfile } : {}),\n  };\n\n  const server = new MCPServer({\n    id: `factory-${factoryProjectId}`,\n    name: `${project.name ?? 'Mastra'} Factory`,\n    version: deps.version ?? '1.0.0',\n    description: 'Manage work items, sessions and decisions in a Mastra Factory.',\n    tools: createFactoryMcpTools(scope, deps, { persistedSession: persisted }),\n  });\n\n  const { req, res } = toReqRes(c.req.raw);\n  const done = server\n    .startHTTP({ url: new URL(c.req.url), httpPath: mcpPath, req, res })\n    .catch(() => {\n      if (!res.headersSent) {\n        res.writeHead(500, { 'Content-Type': 'application/json' });\n        res.end(\n          JSON.stringify({ jsonrpc: '2.0', error: { code: -32603, message: 'Internal server error' }, id: null }),\n        );\n      }\n    })\n    .finally(() => void server.close());\n  const response = propagateClientDisconnect(await toFetchResponse(res), res);\n  if (res.writableEnded) await done;\n  return response;\n}\n\n/**\n * The Factory's MCP endpoint: Streamable HTTP at\n * `/web/factory/projects/:projectId/mcp`, plus its RFC 9728 protected-resource\n * metadata. Callers sign in with OAuth through the Factory's auth provider and\n * get the tools a web UI session would, under the same permissions.\n */\nexport function buildFactoryMcpRoutes(deps: FactoryMcpRoutesDeps): ApiRoute[] {\n  const handler = (c: unknown) => handleMcp(deps, c as Context);\n  return [\n    ...(['POST', 'GET', 'DELETE'] as const).map(method =>\n      registerApiRoute(FACTORY_MCP_PATH, { method, requiresAuth: false, handler }),\n    ),\n    registerApiRoute(`${PROTECTED_RESOURCE_PREFIX}${FACTORY_MCP_PATH}`, {\n      method: 'GET',\n      requiresAuth: false,\n      handler: c => {\n        const mcpPath = new URL(c.req.url).pathname.slice(PROTECTED_RESOURCE_PREFIX.length);\n        return c.json({\n          resource: `${deps.publicOrigin}${mcpPath}`,\n          authorization_servers: deps.authorizationServers,\n          bearer_methods_supported: ['header'],\n          resource_name: 'Mastra Factory',\n        });\n      },\n    }),\n  ];\n}\n"],"mappings":";;;;;;;;;;;;;;AAuBA,MAAa,mBAAmB;AAChC,MAAM,4BAA4B;;;;;AAMlC,MAAM,iCAAiB,IAAI,IAAI,CAAC,wBAAwB,CAAC;;AAgBzD,MAAa,oCAAoC;AAEjD,SAAgB,+BACd,cACA,QACA,MAA0C,QAAQ,KACxC;CACV,IAAI,QAAQ,sBAAsB,QAAQ,OAAO,OAAO;CACxD,MAAM,UAAU,IAAI,yCAAyC,KAAK;CAClE,IAAI,SAAS,OAAO,CAAC,OAAO;CAC5B,IAAI,iBAAA,iBAAyC,OAAO,CAAC,iCAAiC;CACtF,OAAO,CAAC;AACV;;AAcA,SAAgB,mBAAmB,OAAe,QAAgB,kBAAkC;CAClG,MAAM,MAAM,WAAW,QAAQ,CAAC,CAAC,OAAO,QAAQ,MAAM,IAAI,OAAO,IAAI,kBAAkB,CAAC,CAAC,OAAO,KAAK;CACrG,OAAO,GAAG,IAAI,MAAM,GAAG,CAAC,EAAE,GAAG,IAAI,MAAM,GAAG,EAAE,EAAE,IAAI,IAAI,MAAM,IAAI,EAAE,EAAE,IAAI,IAAI,MAAM,IAAI,EAAE,EAAE,GAAG,IAAI,MAAM,IAAI,EAAE;AAC/G;;;;;;;AAQA,eAAe,uBACb,MACA,MACoD;CACpD,MAAM,YAAY,mBAAmB,KAAK,OAAO,KAAK,QAAQ,KAAK,gBAAgB;CACnF,IAAI,MAAM,KAAK,MAAM,SAAS,eAAe,SAAS,GAAG,OAAO;EAAE;EAAW,WAAW;CAAK;CAC7F,KAAK,MAAM,iBAAiB,KAAK,gBAC/B,IAAI;EACF,MAAM,2BAA2B;GAC/B;GACA,OAAO,KAAK;GACZ,kBAAkB,KAAK;GACvB,QAAQ,eAAe,UAAU,MAAM,GAAG,CAAC;GAC3C,mBAAmB,KAAK;GACxB;GACA,YAAY;EACd,CAAC;EACD,OAAO;GAAE;GAAW,WAAW;EAAK;CACtC,SAAS,OAAO;EACd,IAAI,EAAE,iBAAiB,sCAAsC,MAAM;CACrE;CAEF,OAAO;EAAE;EAAW,WAAW;CAAM;AACvC;AAEA,SAAS,YAAY,cAAsB,kBAA0B,YAA4B;CAC/F,OAAO,GAAG,aAAa,WAAW,mBAAmB,gBAAgB,EAAE,cAAc,mBAAmB,UAAU;AACpH;;;;;AAMA,SAAS,uBACP,OACA,MACA,SAC0C;CAC1C,MAAM,UAAU;EAAE,OAAO,MAAM;EAAO,kBAAkB,MAAM;CAAiB;CAC/E,OAAO;EACL,QAAQ,WAAW;GACjB,IAAI;GACJ,aACE;GACF,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS,wCAAwC,EAAE,CAAC;GAC9F,SAAS,OAAO,EAAE,YAAY;IAC5B,MAAM,QAAQ,MAAM,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,OAAO,OAAO;IAa7D,OAAO,EAAE,UAXO,MADI,KAAK,MAAM,UAAU,KAAK,OAAO,EAAA,CAElD,QAAO,SAAQ;KACd,MAAM,WAAW,GAAG,KAAK,GAAG,GAAG,KAAK,QAAQ,YAAY;KACxD,OAAO,MAAM,OAAM,SAAQ,SAAS,SAAS,IAAI,CAAC;IACpD,CAAC,CAAC,CACD,MAAM,GAAG,EAAE,CAAC,CACZ,KAAI,UAAS;KACZ,IAAI,KAAK;KACT,OAAO,KAAK;KACZ,KAAK,YAAY,KAAK,cAAc,MAAM,kBAAkB,KAAK,EAAE;IACrE,EACa,EAAE;GACnB;EACF,CAAC;EACD,OAAO,WAAW;GAChB,IAAI;GACJ,aAAa;GACb,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,SAAS,eAAe,EAAE,CAAC;GAClE,SAAS,OAAO,EAAE,MAAM,YAAY;IAClC,IAAI,CAAC,SAAS,SAAS,MAAM,IAAI,MAAM,oCAAoC;IAC3E,MAAM,UAAW,MAAM,QAAQ,QAAQ,EAAE,UAAU,GAAG,GAAG,OAAO;IAChE,OAAO;KACL;KACA,OAAO,QAAQ,MAAM,SAAS;KAC9B,MAAM,KAAK,UAAU,SAAS,MAAM,CAAC;KACrC,KAAK,YAAY,KAAK,cAAc,MAAM,kBAAkB,EAAE;KAC9D,UAAU,EAAE,kBAAkB,MAAM,iBAAiB;IACvD;GACF;EACF,CAAC;CACH;AACF;;AAGA,SAAgB,sBACd,OACA,MACA,UAA0C,CAAC,GACD;CAC1C,MAAM,eAAe,mBAAmB;EAAE;EAAO,MAAM,KAAK;CAAM,CAAC;CACnE,MAAM,QAAkD,CAAC;CACzD,KAAK,MAAM,CAAC,MAAM,SAAS,OAAO,QAAQ,YAAY,GAAG;EACvD,IAAI,eAAe,IAAI,IAAI,GAAG;EAE9B,IAAI,SAAS,2BAA2B,QAAQ,qBAAqB,OAAO;EAC5E,MAAM,QAAQ;CAChB;CACA,OAAO,OAAO,OAAO,uBAAuB,OAAO,MAAM,aAAa,yBAAyB,CAAC;CAChG,KAAK,MAAM,CAAC,MAAM,SAAS,OAAO,QAAQ,KAAK,GAAG;EAChD,MAAM,cAAc,yBAAyB;EAC7C,IAAI,aAAa,KAAK,MAAM;GAAE,GAAG,KAAK;GAAK;EAAY;CACzD;CACA,OAAO;AACT;AAEA,SAAS,oBAAoB,MAA4B,SAAyB;CAChF,OAAO,GAAG,KAAK,eAAe,4BAA4B;AAC5D;AAEA,SAAS,aAAa,MAA4B,SAAiB,QAAQ,gBAA0B;CACnG,OAAO,IAAI,SAAS,KAAK,UAAU,EAAE,MAAM,CAAC,GAAG;EAC7C,QAAQ;EACR,SAAS;GACP,gBAAgB;GAChB,oBAAoB,6BAA6B,oBAAoB,MAAM,OAAO,EAAE;EACtF;CACF,CAAC;AACH;AAEA,eAAe,UAAU,MAA4B,GAA+B;CAClF,MAAM,mBAAmB,EAAE,IAAI,MAAM,WAAW,KAAK;CACrD,MAAM,UAAU,IAAI,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC;CAEnC,MAAM,KAAK,KAAK,WAAW,CAAC;CAC5B,MAAM,SAAS,KAAK,KAAK,OAAO,CAAC;CACjC,IAAI,CAAC,QAAQ,OAAO,aAAa,MAAM,OAAO;CAC9C,IAAI,CAAC,OAAO,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;CAExE,MAAM,UAAU,MAAM,KAAK,SAAS,IAAI;EAAE,OAAO,OAAO;EAAO,IAAI;CAAiB,CAAC;CACrF,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,YAAY,GAAG,GAAG;CAEvD,MAAM,EAAE,WAAW,cAAc,MAAM,uBAAuB,MAAM;EAClE,OAAO,OAAO;EACd,QAAQ,OAAO;EACf;CACF,CAAC;CACD,MAAM,eAAe,kBAAkB,mBAAmB,CAAC,CAAC;CAC5D,MAAM,QAA0B;EAC9B,OAAO,OAAO;EACd;EACA,QAAQ,OAAO;EACf;EACA,YAAY;EACZ,UAAU;EACV,MAAM;EAEN,aAAa;EACb,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;CACzC;CAEA,MAAM,SAAS,IAAI,UAAU;EAC3B,IAAI,WAAW;EACf,MAAM,GAAG,QAAQ,QAAQ,SAAS;EAClC,SAAS,KAAK,WAAW;EACzB,aAAa;EACb,OAAO,sBAAsB,OAAO,MAAM,EAAE,kBAAkB,UAAU,CAAC;CAC3E,CAAC;CAED,MAAM,EAAE,KAAK,QAAQ,SAAS,EAAE,IAAI,GAAG;CACvC,MAAM,OAAO,OACV,UAAU;EAAE,KAAK,IAAI,IAAI,EAAE,IAAI,GAAG;EAAG,UAAU;EAAS;EAAK;CAAI,CAAC,CAAC,CACnE,YAAY;EACX,IAAI,CAAC,IAAI,aAAa;GACpB,IAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;GACzD,IAAI,IACF,KAAK,UAAU;IAAE,SAAS;IAAO,OAAO;KAAE,MAAM;KAAQ,SAAS;IAAwB;IAAG,IAAI;GAAK,CAAC,CACxG;EACF;CACF,CAAC,CAAC,CACD,cAAc,KAAK,OAAO,MAAM,CAAC;CACpC,MAAM,WAAW,0BAA0B,MAAM,gBAAgB,GAAG,GAAG,GAAG;CAC1E,IAAI,IAAI,eAAe,MAAM;CAC7B,OAAO;AACT;;;;;;;AAQA,SAAgB,sBAAsB,MAAwC;CAC5E,MAAM,WAAW,MAAe,UAAU,MAAM,CAAY;CAC5D,OAAO,CACL,GAAI;EAAC;EAAQ;EAAO;CAAQ,CAAC,CAAW,KAAI,WAC1C,iBAAiB,kBAAkB;EAAE;EAAQ,cAAc;EAAO;CAAQ,CAAC,CAC7E,GACA,iBAAiB,GAAG,4BAA4B,oBAAoB;EAClE,QAAQ;EACR,cAAc;EACd,UAAS,MAAK;GACZ,MAAM,UAAU,IAAI,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,MAAM,EAAgC;GAClF,OAAO,EAAE,KAAK;IACZ,UAAU,GAAG,KAAK,eAAe;IACjC,uBAAuB,KAAK;IAC5B,0BAA0B,CAAC,QAAQ;IACnC,eAAe;GACjB,CAAC;EACH;CACF,CAAC,CACH;AACF"}

package/dist/review-verdict.d.ts

@@ -3,4 +3,15 @@
  * regardless of the markdown it is wrapped in (`**Verdict:** request changes`, `# Verdict: ...`).
  */
 export declare function normalizedVerdictLine(body: string | undefined): string | undefined;
+/**
+ * Detects the `factory-review` handoff verdict in a comment body.
+ *
+ * GitHub forbids an app from reviewing a pull request it authored, so on
+ * Factory-authored PRs the review skill falls back to posting its verdict as a
+ * plain comment. That comment is the only signal the authoring agent gets, so
+ * it has to be readable back out. The skill's handoff contract puts the verdict
+ * on the first line (`Verdict: request changes`), so only that line is
+ * inspected — a verdict quoted later in the findings must not count.
+ */
+export declare function requestsChangesVerdict(body: string | undefined): boolean;
 //# sourceMappingURL=review-verdict.d.ts.map

package/dist/review-verdict.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"review-verdict.d.ts","sourceRoot":"","sources":["../src/review-verdict.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAUlF"}
+{"version":3,"file":"review-verdict.d.ts","sourceRoot":"","sources":["../src/review-verdict.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAUlF;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAOxE"}

package/dist/review-verdict.js

@@ -8,7 +8,22 @@ function normalizedVerdictLine(body) {
 	if (!firstLine) return void 0;
 	return firstLine.replaceAll(/[*_`#>\s]+/g, " ").trim().toLowerCase();
 }
+/**
+* Detects the `factory-review` handoff verdict in a comment body.
+*
+* GitHub forbids an app from reviewing a pull request it authored, so on
+* Factory-authored PRs the review skill falls back to posting its verdict as a
+* plain comment. That comment is the only signal the authoring agent gets, so
+* it has to be readable back out. The skill's handoff contract puts the verdict
+* on the first line (`Verdict: request changes`), so only that line is
+* inspected — a verdict quoted later in the findings must not count.
+*/
+function requestsChangesVerdict(body) {
+	const normalized = normalizedVerdictLine(body);
+	if (!normalized) return false;
+	return /^verdict: ?(request changes|changes requested)$/.test(normalized);
+}
 //#endregion
-export { normalizedVerdictLine };
+export { normalizedVerdictLine, requestsChangesVerdict };
 
 //# sourceMappingURL=review-verdict.js.map

package/dist/review-verdict.js.map

@@ -1 +1 @@
-{"version":3,"file":"review-verdict.js","names":[],"sources":["../src/review-verdict.ts"],"sourcesContent":["/**\n * Normalizes the first non-empty line of a review body so its `Verdict:` line can be read\n * regardless of the markdown it is wrapped in (`**Verdict:** request changes`, `# Verdict: ...`).\n */\nexport function normalizedVerdictLine(body: string | undefined): string | undefined {\n  const firstLine = body\n    ?.split('\\n')\n    .map(line => line.trim())\n    .find(line => line.length > 0);\n  if (!firstLine) return undefined;\n  return firstLine\n    .replaceAll(/[*_`#>\\s]+/g, ' ')\n    .trim()\n    .toLowerCase();\n}\n"],"mappings":";;;;;AAIA,SAAgB,sBAAsB,MAA8C;CAClF,MAAM,YAAY,MACd,MAAM,IAAI,CAAC,CACZ,KAAI,SAAQ,KAAK,KAAK,CAAC,CAAC,CACxB,MAAK,SAAQ,KAAK,SAAS,CAAC;CAC/B,IAAI,CAAC,WAAW,OAAO,KAAA;CACvB,OAAO,UACJ,WAAW,eAAe,GAAG,CAAC,CAC9B,KAAK,CAAC,CACN,YAAY;AACjB"}
+{"version":3,"file":"review-verdict.js","names":[],"sources":["../src/review-verdict.ts"],"sourcesContent":["/**\n * Normalizes the first non-empty line of a review body so its `Verdict:` line can be read\n * regardless of the markdown it is wrapped in (`**Verdict:** request changes`, `# Verdict: ...`).\n */\nexport function normalizedVerdictLine(body: string | undefined): string | undefined {\n  const firstLine = body\n    ?.split('\\n')\n    .map(line => line.trim())\n    .find(line => line.length > 0);\n  if (!firstLine) return undefined;\n  return firstLine\n    .replaceAll(/[*_`#>\\s]+/g, ' ')\n    .trim()\n    .toLowerCase();\n}\n\n/**\n * Detects the `factory-review` handoff verdict in a comment body.\n *\n * GitHub forbids an app from reviewing a pull request it authored, so on\n * Factory-authored PRs the review skill falls back to posting its verdict as a\n * plain comment. That comment is the only signal the authoring agent gets, so\n * it has to be readable back out. The skill's handoff contract puts the verdict\n * on the first line (`Verdict: request changes`), so only that line is\n * inspected — a verdict quoted later in the findings must not count.\n */\nexport function requestsChangesVerdict(body: string | undefined): boolean {\n  // Tolerate the markdown the skill wraps the line in (`**Verdict: ...**`).\n  const normalized = normalizedVerdictLine(body);\n  if (!normalized) return false;\n  // Match the verdict exactly so negated phrasings (\"Verdict: do not request\n  // changes\") cannot wake the author.\n  return /^verdict: ?(request changes|changes requested)$/.test(normalized);\n}\n"],"mappings":";;;;;AAIA,SAAgB,sBAAsB,MAA8C;CAClF,MAAM,YAAY,MACd,MAAM,IAAI,CAAC,CACZ,KAAI,SAAQ,KAAK,KAAK,CAAC,CAAC,CACxB,MAAK,SAAQ,KAAK,SAAS,CAAC;CAC/B,IAAI,CAAC,WAAW,OAAO,KAAA;CACvB,OAAO,UACJ,WAAW,eAAe,GAAG,CAAC,CAC9B,KAAK,CAAC,CACN,YAAY;AACjB;;;;;;;;;;;AAYA,SAAgB,uBAAuB,MAAmC;CAExE,MAAM,aAAa,sBAAsB,IAAI;CAC7C,IAAI,CAAC,YAAY,OAAO;CAGxB,OAAO,kDAAkD,KAAK,UAAU;AAC1E"}

package/dist/routes/source-control-sessions.d.ts

@@ -1,6 +1,7 @@
 import type { MountedMastraCode } from '@mastra/code-sdk';
 import type { ApiRoute, IUserProvider } from '@mastra/core/server';
 import type { SessionRetirementCoordinator } from '../sandbox/session-retirement.js';
+import type { FilesystemStorage } from '../storage/domains/filesystem/base.js';
 import type { MemorySettingsStorage } from '../storage/domains/memory-settings/base.js';
 import type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';
 import type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';
@@ -16,6 +17,12 @@ export interface SourceControlSessionRoutesOptions {
     controller?: MountedMastraCode['controller'];
     memorySettings: Pick<MemorySettingsStorage, 'get'>;
     sessionRetirement?: SessionRetirementCoordinator;
+    /** Whether the host sandbox can recreate a session's sandbox (false for local). */
+    sandboxRecreateSupported?: boolean;
+    /** Turn-end file listings, cleared on recreate so the panel stops showing the old sandbox's files. */
+    filesystem?: Pick<FilesystemStorage, 'deleteResourceFiles'>;
+    /** How long recreate waits for an aborted run to settle before destroying. */
+    abortSettleTimeoutMs?: number;
     workItems?: Pick<WorkItemsStorage, 'clearSessionReferences'>;
 }
 export declare function buildSourceControlSessionRoutes(options: SourceControlSessionRoutesOptions): ApiRoute[];

package/dist/routes/source-control-sessions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"source-control-sessions.d.ts","sourceRoot":"","sources":["../../src/routes/source-control-sessions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAG1D,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAOnE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAGrF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,EAGV,0BAA0B,EAC3B,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAQ5C,eAAO,MAAM,0BAA0B,kBAAkB,CAAC;AAY1D,KAAK,wBAAwB,GAAG,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;AAE1G,MAAM,WAAW,iCAAiC;IAChD,IAAI,EAAE,SAAS,CAAC;IAChB,cAAc,EAAE,SAAS,0BAA0B,EAAE,CAAC;IACtD,QAAQ,EAAE,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;IAC9C,KAAK,CAAC,EAAE,wBAAwB,CAAC;IACjC,UAAU,CAAC,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAC7C,cAAc,EAAE,IAAI,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;IACnD,iBAAiB,CAAC,EAAE,4BAA4B,CAAC;IACjD,SAAS,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,wBAAwB,CAAC,CAAC;CAC9D;AA0RD,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,iCAAiC,GAAG,QAAQ,EAAE,CA6ItG"}
+{"version":3,"file":"source-control-sessions.d.ts","sourceRoot":"","sources":["../../src/routes/source-control-sessions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAG1D,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAOnE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAIrF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,EAGV,0BAA0B,EAC3B,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAQ5C,eAAO,MAAM,0BAA0B,kBAAkB,CAAC;AAY1D,KAAK,wBAAwB,GAAG,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;AAE1G,MAAM,WAAW,iCAAiC;IAChD,IAAI,EAAE,SAAS,CAAC;IAChB,cAAc,EAAE,SAAS,0BAA0B,EAAE,CAAC;IACtD,QAAQ,EAAE,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;IAC9C,KAAK,CAAC,EAAE,wBAAwB,CAAC;IACjC,UAAU,CAAC,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAC7C,cAAc,EAAE,IAAI,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;IACnD,iBAAiB,CAAC,EAAE,4BAA4B,CAAC;IACjD,mFAAmF;IACnF,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,sGAAsG;IACtG,UAAU,CAAC,EAAE,IAAI,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,CAAC;IAC5D,8EAA8E;IAC9E,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,wBAAwB,CAAC,CAAC;CAC9D;AAoXD,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,iCAAiC,GAAG,QAAQ,EAAE,CAsMtG"}

package/dist/routes/source-control-sessions.js

@@ -2,6 +2,7 @@ import { isValidGitRef } from "../sandbox/git-ref.js";
 import { waitForPendingFilesystemCapture } from "../session/filesystem-capture.js";
 import { normalizeSessionTitle } from "../session/session-title.js";
 import { reclaimDeletedSessionSandbox } from "../integrations/github/sandbox-release.js";
+import { seedSessionOrg } from "../session/org-seed.js";
 import { RequestContext } from "@mastra/core/request-context";
 import { registerApiRoute } from "@mastra/core/server";
 import { UniqueViolationError } from "@mastra/core/storage";
@@ -15,6 +16,48 @@ const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3
 const MAX_SESSION_OWNER_PROFILES = 100;
 const MAX_SESSION_OWNER_PROFILE_CACHE_ENTRIES = 500;
 const SESSION_OWNER_PROFILE_TTL_MS = 5 * 6e4;
+const ABORT_SETTLE_TIMEOUT_MS = 5e3;
+const ABORT_SETTLE_POLL_MS = 50;
+/**
+* Who may manage a session's sandbox: its owner, or an org admin. Private
+* sessions stay owner-only and look missing to everyone else, matching the
+* session GET. The admin check is a provider call, so owners skip it.
+*/
+async function sessionManagePermission(c, auth, tenant, session) {
+	if (session.orgId !== tenant.orgId) return "not-found";
+	const isOwner = session.userId === tenant.userId;
+	if (session.visibility === "private" && !isOwner) return "not-found";
+	if (isOwner) return "allowed";
+	return await auth.isOrganizationAdmin(c, session.orgId) ? "allowed" : "forbidden";
+}
+function canRecreateSandbox(options) {
+	return Boolean(options.sessionRetirement) && options.sandboxRecreateSupported === true;
+}
+function withCapabilities(session, recreateSandbox) {
+	return {
+		...session,
+		capabilities: { recreateSandbox }
+	};
+}
+/** Abort the session's active run and wait (bounded) for it to stop. Returns whether a run was aborted. */
+async function abortActiveRun(controller, sessionId, settleTimeoutMs) {
+	if (!controller) return false;
+	try {
+		const live = await controller.getSessionByResource(sessionId);
+		if (!live?.stream.isActive()) return false;
+		live.abort();
+		const deadline = Date.now() + settleTimeoutMs;
+		while (live.stream.isActive() && Date.now() < deadline) await new Promise((resolve) => setTimeout(resolve, ABORT_SETTLE_POLL_MS));
+		if (live.stream.isActive()) console.warn("[Factory Sessions] Aborted run did not settle before sandbox recreate", { sessionId });
+		return true;
+	} catch (error) {
+		console.warn("[Factory Sessions] Failed to abort the active run before sandbox recreate", {
+			sessionId,
+			error
+		});
+		return false;
+	}
+}
 async function resolveOrgTenant(c, auth) {
 	await auth.ensureUser(c);
 	const tenant = auth.tenant(c);
@@ -66,6 +109,32 @@ async function resolveSession(sourceControls, sessionId) {
 	if (matches.length > 1) throw new Error("Factory session exists in multiple source-control providers.");
 	return matches[0] ?? null;
 }
+/**
+* Start the live conversation for a user session on its own thread (thread id === session id). Agent-controller
+* routes only act on started sessions, so the first prompt the page sends right after creation always lands on the
+* thread the page reads, with the org and Factory address already in state. Get-or-create, so retried or repeated
+* creates are safe.
+*/
+async function startUserSessionConversation(controller, session) {
+	if (!controller) return;
+	const requestContext = new RequestContext();
+	requestContext.set("user", {
+		workosId: session.userId,
+		organizationId: session.orgId
+	});
+	const live = await controller.createSession({
+		id: session.sessionId,
+		resourceId: session.sessionId,
+		threadId: session.sessionId,
+		ownerId: session.userId,
+		requestContext
+	});
+	await seedSessionOrg(live, session.orgId);
+	if (session.factoryProjectId) await live.state.set({
+		factoryProjectId: session.factoryProjectId,
+		...session.projectRepositoryId ? { projectRepositoryId: session.projectRepositoryId } : {}
+	});
+}
 function isJsonObject(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -193,7 +262,8 @@ function projectSessionRoutes(path, options, resolveOwnerProfiles) {
 				const existing = await project.sourceControl.sessions.getBySessionId(sessionId);
 				if (existing) {
 					if (existing.projectRepositoryId !== project.project.id || existing.orgId !== orgId || existing.userId !== userId || existing.branch !== branch) return c.json({ error: "Session ID conflict" }, 409);
-					return c.json({ session: existing });
+					await startUserSessionConversation(options.controller, existing);
+					return c.json({ session: withCapabilities(existing, canRecreateSandbox(options)) });
 				}
 			}
 			const session = await project.sourceControl.sessions.create({
@@ -213,7 +283,8 @@ function projectSessionRoutes(path, options, resolveOwnerProfiles) {
 				return conflict;
 			});
 			if (requestedSessionId && (session.sessionId !== sessionId || session.projectRepositoryId !== project.project.id || session.orgId !== orgId || session.userId !== userId || session.branch !== branch)) return c.json({ error: "Session ID conflict" }, 409);
-			return c.json({ session });
+			await startUserSessionConversation(options.controller, session);
+			return c.json({ session: withCapabilities(session, canRecreateSandbox(options)) });
 		}
 	})];
 }
@@ -254,7 +325,54 @@ function buildSourceControlSessionRoutes(options) {
 				const session = (await resolveSession(options.sourceControls, c.req.param("sessionId")))?.session;
 				if (!session || session.orgId !== resolved.tenant.orgId || session.visibility === "private" && session.userId !== resolved.tenant.userId) return c.json({ error: "Session not found" }, 404);
 				const owners = await resolveOwnerProfiles([session.userId]);
-				return c.json({ session: withOwnerProfile(session, owners) });
+				const recreateSandbox = canRecreateSandbox(options) && await sessionManagePermission(loose(c), options.auth, resolved.tenant, session) === "allowed";
+				return c.json({ session: withCapabilities(withOwnerProfile(session, owners), recreateSandbox) });
+			}
+		}),
+		registerApiRoute("/web/user-sessions/:sessionId/sandbox/recreate", {
+			method: "POST",
+			requiresAuth: false,
+			handler: async (c) => {
+				const resolved = await resolveOrgTenant(loose(c), options.auth);
+				if ("response" in resolved) return resolved.response;
+				const match = await resolveSession(options.sourceControls, c.req.param("sessionId"));
+				const session = match?.session;
+				if (!match || !session) return c.json({ error: "Session not found" }, 404);
+				const permission = await sessionManagePermission(loose(c), options.auth, resolved.tenant, session);
+				if (permission === "not-found") return c.json({ error: "Session not found" }, 404);
+				if (permission === "forbidden") return c.json({ error: "Only the session's owner or an organization admin can recreate its sandbox." }, 403);
+				const sessionRetirement = options.sessionRetirement;
+				if (!sessionRetirement || !canRecreateSandbox(options)) return c.json({ error: "Recreating sandboxes is not available on this server." }, 503);
+				const aborted = await abortActiveRun(options.controller, session.sessionId, options.abortSettleTimeoutMs ?? ABORT_SETTLE_TIMEOUT_MS);
+				await waitForPendingFilesystemCapture(session.sessionId).catch((error) => {
+					console.warn("[Factory Sessions] Failed to drain filesystem capture before sandbox recreate", {
+						sessionId: session.sessionId,
+						error
+					});
+				});
+				try {
+					if (await sessionRetirement.recreateSessionSandbox({
+						sourceControl: match.sourceControl,
+						orgId: session.orgId,
+						sessionId: session.sessionId
+					}) === "not-found") return c.json({ error: "Session not found" }, 404);
+					await options.filesystem?.deleteResourceFiles({ resourceId: session.sessionId }).catch((error) => {
+						console.warn("[Factory Sessions] Failed to clear file listings after sandbox recreate", {
+							sessionId: session.sessionId,
+							error
+						});
+					});
+					return c.json({
+						recreated: true,
+						aborted
+					});
+				} catch (error) {
+					console.error("[Factory Sessions] Failed to recreate session sandbox", {
+						sessionId: session.sessionId,
+						error
+					});
+					return c.json({ error: error instanceof Error ? error.message : String(error) }, 500);
+				}
 			}
 		}),
 		registerApiRoute("/web/user-sessions/:sessionId", {